← Back

CVE-2018-3173

nvd nist
Published: Oct 17, 2018Modified: Nov 21, 2024

JSON object

Loading...
4.9
Vector
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H
Exploitability: 1.2 / Impact: 3.6
Source: NVD

Description

Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: InnoDB). Supported versions that are affected are 5.7.23 and prior and 8.0.12 and prior. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.0 Base Score 4.9 (Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H).

Affected (13)

Show all products
Oracle: Mysql · Netapp: Active Iq Unified Manager, Oncommand Insight, Oncommand Workflow Automation, Snapcenter · Canonical: Ubuntu Linux · Mariadb: Mariadb
Oracle
1 product
Mysql
Netapp
4 products
Active Iq Unified Manager
Oncommand Insight
Oncommand Workflow Automation
Snapcenter
Canonical
1 product
Ubuntu Linux
Mariadb
1 product
Mariadb
Configuration A
2 vulnerable
Vulnerable SoftwareAffected Versions
Oracle
Mysql
From 5.7.0 to 5.7.23
Mysql
From 8.0.0 to 8.0.12
Configuration B
5 vulnerable
Vulnerable SoftwareAffected Versions
Netapp
Active Iq Unified Manager
From 9.5
Active Iq Unified Manager
From 7.3
Oncommand Insight
All versions
Oncommand Workflow Automation
All versions
Snapcenter
All versions
Configuration C
4 vulnerable
Vulnerable SoftwareAffected Versions
Canonical
Ubuntu Linux
Version 14.04
Ubuntu Linux
Version 16.04
Ubuntu Linux
Version 18.04
Ubuntu Linux
Version 18.10
Configuration D
2 vulnerable
Vulnerable SoftwareAffected Versions
Mariadb
Mariadb
From 10.2.0 to 10.2.19
Mariadb
From 10.3.0 to 10.3.11

References (16)

Source: secalert_us@oracle.com
PatchVendor Advisory
Source: secalert_us@oracle.com
Third Party AdvisoryVDB Entry
Source: secalert_us@oracle.com
Third Party AdvisoryVDB Entry
Source: secalert_us@oracle.com
Third Party Advisory
Source: secalert_us@oracle.com
Third Party Advisory
Source: secalert_us@oracle.com
Third Party Advisory
Source: secalert_us@oracle.com
Third Party Advisory
Source: secalert_us@oracle.com
Third Party Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
PatchVendor Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
Third Party AdvisoryVDB Entry
Source: af854a3a-2127-422b-91ae-364da2661108
Third Party AdvisoryVDB Entry
Source: af854a3a-2127-422b-91ae-364da2661108
Third Party Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
Third Party Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
Third Party Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
Third Party Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
Third Party Advisory

Timeline

No history available yet.