← Back

CVE-2018-2818

nvd nist
Published: Apr 19, 2018Modified: Nov 21, 2024

JSON object

Loading...
4.9
Vector
CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H
Exploitability: 1.2 / Impact: 3.6
Source: NVD

Description

Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server : Security : Privileges). Supported versions that are affected are 5.5.59 and prior, 5.6.39 and prior and 5.7.21 and prior. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.0 Base Score 4.9 (Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H).

Affected (16)

Products: Oracle: Mysql · Canonical: Ubuntu Linux · Debian: Debian Linux · +1 more
Show all products
Oracle: Mysql · Canonical: Ubuntu Linux · Debian: Debian Linux · Netapp: Oncommand Insight, Oncommand Unified Manager, Oncommand Workflow Automation, Snapcenter, Storage Automation Store
Oracle
1 product
Mysql
Canonical
1 product
Ubuntu Linux
Debian
1 product
Debian Linux
Netapp
5 products
Oncommand Insight
Oncommand Unified Manager
Oncommand Workflow Automation
Snapcenter
Storage Automation Store
Configuration A
3 vulnerable
Vulnerable SoftwareAffected Versions
Oracle
Mysql
From 5.5.0 to 5.5.59
Mysql
From 5.6.0 to 5.6.39
Mysql
From 5.7.0 to 5.7.21
Configuration B
5 vulnerable
Vulnerable SoftwareAffected Versions
Canonical
Ubuntu Linux
Version 12.04
Ubuntu Linux
Version 14.04
Ubuntu Linux
Version 16.04
Ubuntu Linux
Version 17.10
Ubuntu Linux
Version 18.04
Configuration C
2 vulnerable
Vulnerable SoftwareAffected Versions
Debian
Debian Linux
Version 7.0
Debian Linux
Version 8.0
Configuration D
6 vulnerable
Vulnerable SoftwareAffected Versions
Oncommand Insight
All versions
Netapp
Oncommand Unified Manager
From 9.4
Oncommand Unified Manager
From 7.3
Oncommand Workflow Automation
All versions
Snapcenter
All versions
Storage Automation Store
All versions

References (22)

Source: secalert_us@oracle.com
PatchVendor Advisory
Source: secalert_us@oracle.com
Third Party AdvisoryVDB Entry
Source: secalert_us@oracle.com
Third Party AdvisoryVDB Entry
Source: secalert_us@oracle.com
Third Party Advisory
Source: secalert_us@oracle.com
Third Party Advisory
Source: secalert_us@oracle.com
Mailing ListThird Party Advisory
Source: secalert_us@oracle.com
Third Party Advisory
Source: secalert_us@oracle.com
Third Party Advisory
Source: secalert_us@oracle.com
Third Party Advisory
Source: secalert_us@oracle.com
Third Party Advisory
Source: secalert_us@oracle.com
Third Party Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
PatchVendor Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
Third Party AdvisoryVDB Entry
Source: af854a3a-2127-422b-91ae-364da2661108
Third Party AdvisoryVDB Entry
Source: af854a3a-2127-422b-91ae-364da2661108
Third Party Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
Third Party Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
Mailing ListThird Party Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
Third Party Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
Third Party Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
Third Party Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
Third Party Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
Third Party Advisory

Timeline

No history available yet.