Out-of-bounds Read in Huawei Manageone
CVE-2019-5289
Gauss100 OLTP database in ManageOne with versions of 6.5.0 have an out-of-bounds read vulnerability due to the insufficient checks of the specific packet length. Attackers can construct invalid packets to attack the active and standby communication channels. Successful exploit of this vulnerability could allow the attacker to crash the database on the standby node.
Vulnerability class: Buffer Overflow
EPSS: 0.007 (53.0th percentile) — read the EPSS interpretation.
CVSS v3 metric
CVSS v3 base score 7.5 (High). Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H.
Affected products
- Huawei Manageone — versions 6.5.0
- N/a Manageone — versions 6.5.0
Weakness classification (CWE)
References
- psirt@huawei.com (x_refsource_MISC, Vendor Advisory)
Frequently asked questions
- What is CVE-2019-5289?
- CVE-2019-5289 is a high-severity vulnerability in Huawei Manageone, classified under Out-of-bounds Read. CVSS score: 7.5/10. Published 2019-11-13.
- How severe is CVE-2019-5289?
- High severity. CVSS v3 base score is 7.5 out of 10.