← Back

CVE-2018-3143

nvd nist
Published: Oct 17, 2018Modified: Nov 21, 2024

JSON object

Loading...
6.5
Vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
Exploitability: 2.8 / Impact: 3.6
Source: NVD

Description

Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: InnoDB). Supported versions that are affected are 5.6.41 and prior, 5.7.23 and prior and 8.0.12 and prior. Easily exploitable vulnerability allows low privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.0 Base Score 6.5 (Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H).

Affected (19)

Show all products
Oracle: Mysql · Netapp: Oncommand Insight, Oncommand Unified Manager, Oncommand Workflow Automation, Snapcenter, Storage Automation Store · Canonical: Ubuntu Linux · Debian: Debian Linux · Mariadb: Mariadb
Oracle
1 product
Mysql
Netapp
5 products
Oncommand Insight
Oncommand Unified Manager
Oncommand Workflow Automation
Snapcenter
Storage Automation Store
Canonical
1 product
Ubuntu Linux
Debian
1 product
Debian Linux
Mariadb
1 product
Mariadb
Configuration A
3 vulnerable
Vulnerable SoftwareAffected Versions
Oracle
Mysql
From 5.6.0 to 5.6.41
Mysql
From 5.7.0 to 5.7.23
Mysql
From 8.0.0 to 8.0.12
Configuration B
5 vulnerable
Vulnerable SoftwareAffected Versions
Oncommand Insight
All versions
Oncommand Unified Manager
From 9.4
Oncommand Workflow Automation
All versions
Snapcenter
All versions
Storage Automation Store
All versions
Configuration C
1 vulnerable · 1 platform
Vulnerable SoftwareAffected Versions
Oncommand Unified Manager
From 7.3
Running on/withPlatform Versions
Microsoft
Windows
All versions
Configuration D
4 vulnerable
Vulnerable SoftwareAffected Versions
Canonical
Ubuntu Linux
Version 14.04
Ubuntu Linux
Version 16.04
Ubuntu Linux
Version 18.04
Ubuntu Linux
Version 18.10
Configuration E
2 vulnerable
Vulnerable SoftwareAffected Versions
Debian
Debian Linux
Version 8.0
Debian Linux
Version 9.0
Configuration F
4 vulnerable
Vulnerable SoftwareAffected Versions
Mariadb
Mariadb
From 10.0.0 to 10.0.37
Mariadb
From 10.1.0 to 10.1.37
Mariadb
From 10.2.0 to 10.2.19
Mariadb
From 10.3.0 to 10.3.11

References (20)

Source: secalert_us@oracle.com
PatchVendor Advisory
Source: secalert_us@oracle.com
Third Party AdvisoryVDB Entry
Source: secalert_us@oracle.com
Third Party AdvisoryVDB Entry
Source: secalert_us@oracle.com
Third Party Advisory
Source: secalert_us@oracle.com
Third Party Advisory
Source: secalert_us@oracle.com
Mailing ListThird Party Advisory
Source: secalert_us@oracle.com
Third Party Advisory
Source: secalert_us@oracle.com
Third Party Advisory
Source: secalert_us@oracle.com
Third Party Advisory
Source: secalert_us@oracle.com
Third Party Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
PatchVendor Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
Third Party AdvisoryVDB Entry
Source: af854a3a-2127-422b-91ae-364da2661108
Third Party AdvisoryVDB Entry
Source: af854a3a-2127-422b-91ae-364da2661108
Third Party Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
Third Party Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
Mailing ListThird Party Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
Third Party Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
Third Party Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
Third Party Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
Third Party Advisory

Timeline

No history available yet.