Published: 18/01/2018 Updated: 28/03/2018

CVSS v2 Base Score: 6.8 | Impact Score: 6.9 | Exploitability Score: 8

CVSS v3 Base Score: 4.9 | Impact Score: 3.6 | Exploitability Score: 1.2

VMScore: 605

Vector: AV:N/AC:L/Au:S/C:N/I:N/A:C

Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: InnoDB). Supported versions that are affected are 5.7.20 and prior. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.0 Base Score 4.9 (Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H).

Vulnerable Product	Search on Vulmon	Subscribe to Product
oracle mysql

Synopsis Important: rh-mysql57-mysql security update Type/Severity Security Advisory: Important Topic An update for rh-mysql57-mysql is now available for Red Hat Software CollectionsRed Hat Product Security has rated this update as having a security impact of Important A Common Vulnerability Scoring Syste ...

Several security issues were fixed in MySQL ...

Debian Bug report logs - #887477 mysql-57: Security fixes from the January 2018 CPU Package: src:mysql-57; Maintainer for src:mysql-57 is Debian MySQL Maintainers <pkg-mysql-maint@listsaliothdebianorg>; Reported by: Salvatore Bonaccorso <carnil@debianorg> Date: Wed, 17 Jan 2018 06:09:04 UTC Severity: grave Tag ...

Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Optimizer) Supported versions that are affected are 5558 and prior, 5638 and prior and 5720 and prior Easily exploitable vulnerability allows low privileged attacker with network access via multiple protocols to compromise MySQL Server Successful attacks of ...

Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: InnoDB) Supported versions that are affected are 5720 and prior Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server Successful attacks of this vulnerability can result in unauthor ...

NVD-CWE-noinfo http://www.oracle.com/technetwork/security-advisory/cpujan2018-3236628.html https://security.netapp.com/advisory/ntap-20180117-0002/http://www.securitytracker.com/id/1040216 http://www.securityfocus.com/bid/102712 https://usn.ubuntu.com/3537-1/https://access.redhat.com/errata/RHSA-2018:0586 https://access.redhat.com/errata/RHSA-2018:0586 https://usn.ubuntu.com/3537-1/https://nvd.nist.gov

CVE-2018-2565

Vulnerability Summary

Vendor Advisories

References

Vulmon Search

About

Products

Connect