CVE-2019-5278

Severity: medium (CVSS 6.5 v3.1)
Exploited in the wild: not listed in CISA KEV
EPSS: 0.6% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2019-12-13 · updated 2026-06-17
Weakness: CWE-125

Description

There is an out-of-bounds read vulnerability in the Advanced Packages feature of the Gauss100 OLTP database in CampusInsight before V100R019C00SPC200. Attackers who gain the specific permission can use this vulnerability by sending elaborate SQL statements to the database. Successful exploit of this vulnerability may cause the database to crash.

Affected products

CampusInsight: v100r019c00

References

http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20191204-01-gauss100-en
http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20191204-01-gauss100-en

Get alerted when CVE-2019-5278 or the next vulnerability affects your stack