Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent:
Server: Connection Handling). Supported versions that are affected are
5.6.42 and prior, 5.7.24 and prior and 8.0.13 and prior. Difficult to
exploit vulnerability allows low privileged attacker with access to the
physical communication segment attached to the hardware where the MySQL
Server executes to compromise MySQL Server. Successful attacks of this
vulnerability can result in unauthorized access to critical data or
complete access to all MySQL Server accessible data and unauthorized
ability to cause a hang or frequently repeatable crash (complete DOS) of
MySQL Server. CVSS 3.0 Base Score 6.4 (Confidentiality and Availability
impacts). CVSS Vector: (CVSS:3.0/AV:A/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:H).

leosilva

there is no way to update mysql-5.5 through upstream marking it deferred 2019-10-03