Vulnerability-Lookup

RHSA-2019:2327

Vulnerability from csaf_opensuse - Published: 2019-08-06 00:00 - Updated: 2026-09-20 11:04

Summary

security update for mariadb

Severity

Moderate

Notes

Title of the patch: security update for mariadb

Description of the patch: This security update provides a functional equivalent of RHSA-2019:2327. The original Red Hat(R) advisory is available from the Red Hat web site at https://access.redhat.com/errata/RHSA-2019:2327.

Patchnames: RHSA-2019:2327

CVE-2018-3058

4.3 (Medium)


                
                  CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N

Affected products

Recommended 12 products

Product	Version	Remediation
Unresolved product id: SUSE Liberty Linux 7:mariadb-1:5.5.64-1.el7.x86_64	—	Vendor Fix
Unresolved product id: SUSE Liberty Linux 7:mariadb-bench-1:5.5.64-1.el7.x86_64	—	Vendor Fix
Unresolved product id: SUSE Liberty Linux 7:mariadb-devel-1:5.5.64-1.el7.i686	—	Vendor Fix
Unresolved product id: SUSE Liberty Linux 7:mariadb-devel-1:5.5.64-1.el7.x86_64	—	Vendor Fix
Unresolved product id: SUSE Liberty Linux 7:mariadb-embedded-1:5.5.64-1.el7.i686	—	Vendor Fix
Unresolved product id: SUSE Liberty Linux 7:mariadb-embedded-1:5.5.64-1.el7.x86_64	—	Vendor Fix
Unresolved product id: SUSE Liberty Linux 7:mariadb-embedded-devel-1:5.5.64-1.el7.i686	—	Vendor Fix
Unresolved product id: SUSE Liberty Linux 7:mariadb-embedded-devel-1:5.5.64-1.el7.x86_64	—	Vendor Fix
Unresolved product id: SUSE Liberty Linux 7:mariadb-libs-1:5.5.64-1.el7.i686	—	Vendor Fix
Unresolved product id: SUSE Liberty Linux 7:mariadb-libs-1:5.5.64-1.el7.x86_64	—	Vendor Fix
Unresolved product id: SUSE Liberty Linux 7:mariadb-server-1:5.5.64-1.el7.x86_64	—	Vendor Fix
Unresolved product id: SUSE Liberty Linux 7:mariadb-test-1:5.5.64-1.el7.x86_64	—	Vendor Fix

Threats

Impact moderate

CVE-2018-3063

4.9 (Medium)


                
                  CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H

Affected products

Recommended 12 products, the same list as for CVE-2018-3058

Threats

Impact moderate

CVE-2018-3066

3.3 (Low)


                
                  CVSS:3.0/AV:N/AC:H/PR:H/UI:N/S:U/C:L/I:L/A:N

Affected products

Recommended 12 products, the same list as for CVE-2018-3058

Threats

Impact low

CVE-2018-3081

5 (Medium)


                
                  CVSS:3.0/AV:N/AC:H/PR:H/UI:N/S:U/C:N/I:L/A:H

Affected products

Recommended 12 products, the same list as for CVE-2018-3058

Threats

Impact moderate

CVE-2018-3282

4.9 (Medium)


                
                  CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H

Affected products

Recommended 12 products, the same list as for CVE-2018-3058

Threats

Impact moderate

CVE-2019-2503

6.4 (Medium)


                
                  CVSS:3.0/AV:A/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:H

Affected products

Recommended 12 products, the same list as for CVE-2018-3058

Threats

Impact important

CVE-2019-2529

6.5 (Medium)


                
                  CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Affected products

Recommended 12 products, the same list as for CVE-2018-3058

Threats

Impact important

CVE-2019-2614

4.4 (Medium)


                
                  CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:H

Affected products

Recommended 12 products, the same list as for CVE-2018-3058

Threats

Impact important

CVE-2019-2627

4.9 (Medium)


                
                  CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H

Affected products

Recommended 12 products, the same list as for CVE-2018-3058

Threats

Impact important

References

38 references

URL	Category
https://www.suse.com/support/security/rating/	external
https://ftp.suse.com/pub/projects/security/csaf/r…	self
https://www.suse.com/security/cve/CVE-2018-3058/	self
https://www.suse.com/security/cve/CVE-2018-3063/	self
https://www.suse.com/security/cve/CVE-2018-3066/	self
https://www.suse.com/security/cve/CVE-2018-3081/	self
https://www.suse.com/security/cve/CVE-2018-3282/	self
https://www.suse.com/security/cve/CVE-2019-2503/	self
https://www.suse.com/security/cve/CVE-2019-2529/	self
https://www.suse.com/security/cve/CVE-2019-2614/	self
https://www.suse.com/security/cve/CVE-2019-2627/	self
https://www.suse.com/security/cve/CVE-2018-3058	external
https://bugzilla.suse.com/1101676	external
https://bugzilla.suse.com/1116686	external
https://www.suse.com/security/cve/CVE-2018-3063	external
https://bugzilla.suse.com/1101677	external
https://bugzilla.suse.com/1116686	external
https://www.suse.com/security/cve/CVE-2018-3066	external
https://bugzilla.suse.com/1101678	external
https://bugzilla.suse.com/1116686	external
https://www.suse.com/security/cve/CVE-2018-3081	external
https://bugzilla.suse.com/1101680	external
https://www.suse.com/security/cve/CVE-2018-3282	external
https://bugzilla.suse.com/1112432	external
https://bugzilla.suse.com/1116686	external
https://www.suse.com/security/cve/CVE-2019-2503	external
https://bugzilla.suse.com/1122198	external
https://www.suse.com/security/cve/CVE-2019-2529	external
https://bugzilla.suse.com/1122198	external
https://bugzilla.suse.com/1136037	external
https://www.suse.com/security/cve/CVE-2019-2614	external
https://bugzilla.suse.com/1132826	external
https://bugzilla.suse.com/1136035	external
https://bugzilla.suse.com/1141798	external
https://www.suse.com/security/cve/CVE-2019-2627	external
https://bugzilla.suse.com/1132826	external
https://bugzilla.suse.com/1136035	external
https://bugzilla.suse.com/1141798	external

JSON

To clipboard

{
  "document": {
    "aggregate_severity": {
      "namespace": "https://www.suse.com/support/security/rating/",
      "text": "Moderate"
    },
    "category": "csaf_security_advisory",
    "csaf_version": "2.0",
    "distribution": {
      "text": "Copyright 2024 SUSE LLC. All rights reserved.",
      "tlp": {
        "label": "WHITE",
        "url": "https://www.first.org/tlp/"
      }
    },
    "lang": "en",
    "notes": [
      {
        "category": "summary",
        "text": "security update for mariadb",
        "title": "Title of the patch"
      },
      {
        "category": "description",
        "text": "This security update provides a functional equivalent of RHSA-2019:2327.\nThe original Red Hat(R) advisory is available from the Red Hat web site at\nhttps://access.redhat.com/errata/RHSA-2019:2327.\n",
        "title": "Description of the patch"
      },
      {
        "category": "details",
        "text": "RHSA-2019:2327",
        "title": "Patchnames"
      },
      {
        "category": "legal_disclaimer",
        "text": "CSAF 2.0 data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).",
        "title": "Terms of use"
      }
    ],
    "publisher": {
      "category": "vendor",
      "contact_details": "https://www.suse.com/support/security/contact/",
      "name": "SUSE Product Security Team",
      "namespace": "https://www.suse.com/"
    },
    "references": [
      {
        "category": "external",
        "summary": "SUSE ratings",
        "url": "https://www.suse.com/support/security/rating/"
      },
      {
        "category": "self",
        "summary": "URL of this CSAF notice",
        "url": "https://ftp.suse.com/pub/projects/security/csaf/rhsa-2019_2327.json"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2018-3058 page",
        "url": "https://www.suse.com/security/cve/CVE-2018-3058/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2018-3063 page",
        "url": "https://www.suse.com/security/cve/CVE-2018-3063/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2018-3066 page",
        "url": "https://www.suse.com/security/cve/CVE-2018-3066/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2018-3081 page",
        "url": "https://www.suse.com/security/cve/CVE-2018-3081/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2018-3282 page",
        "url": "https://www.suse.com/security/cve/CVE-2018-3282/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2019-2503 page",
        "url": "https://www.suse.com/security/cve/CVE-2019-2503/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2019-2529 page",
        "url": "https://www.suse.com/security/cve/CVE-2019-2529/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2019-2614 page",
        "url": "https://www.suse.com/security/cve/CVE-2019-2614/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2019-2627 page",
        "url": "https://www.suse.com/security/cve/CVE-2019-2627/"
      }
    ],
    "title": "security update for mariadb",
    "tracking": {
      "current_release_date": "2026-09-20T11:04:43Z",
      "generator": {
        "date": "2019-08-06T00:00:00Z",
        "engine": {
          "name": "cve-database.git:bin/generate-csaf.pl",
          "version": "1"
        }
      },
      "id": "RHSA-2019:2327",
      "initial_release_date": "2019-08-06T00:00:00Z",
      "revision_history": [
        {
          "date": "2019-08-06T00:00:00Z",
          "number": "1",
          "summary": "Current version"
        },
        {
          "date": "2026-09-20T11:04:43Z",
          "number": "2",
          "summary": "unknown changes"
        }
      ],
      "status": "final",
      "version": "2"
    }
  },
  "product_tree": {
    "branches": [
      {
        "branches": [
          {
            "branches": [
              {
                "category": "product_version",
                "name": "mariadb-devel-1:5.5.64-1.el7.i686",
                "product": {
                  "name": "mariadb-devel-1:5.5.64-1.el7.i686",
                  "product_id": "mariadb-devel-1:5.5.64-1.el7.i686",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/suse/mariadb-devel@5.5.64-1.el7?arch=i686\u0026epoch=1"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "mariadb-embedded-1:5.5.64-1.el7.i686",
                "product": {
                  "name": "mariadb-embedded-1:5.5.64-1.el7.i686",
                  "product_id": "mariadb-embedded-1:5.5.64-1.el7.i686",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/suse/mariadb-embedded@5.5.64-1.el7?arch=i686\u0026epoch=1"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "mariadb-embedded-devel-1:5.5.64-1.el7.i686",
                "product": {
                  "name": "mariadb-embedded-devel-1:5.5.64-1.el7.i686",
                  "product_id": "mariadb-embedded-devel-1:5.5.64-1.el7.i686",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/suse/mariadb-embedded-devel@5.5.64-1.el7?arch=i686\u0026epoch=1"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "mariadb-libs-1:5.5.64-1.el7.i686",
                "product": {
                  "name": "mariadb-libs-1:5.5.64-1.el7.i686",
                  "product_id": "mariadb-libs-1:5.5.64-1.el7.i686",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/suse/mariadb-libs@5.5.64-1.el7?arch=i686\u0026epoch=1"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "i686"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "mariadb-1:5.5.64-1.el7.x86_64",
                "product": {
                  "name": "mariadb-1:5.5.64-1.el7.x86_64",
                  "product_id": "mariadb-1:5.5.64-1.el7.x86_64",
                  "product_identification_helper": {
                    "cpe": "cpe:2.3:a:mariadb:mariadb:5.5.64:*:*:*:*:*:*:*",
                    "purl": "pkg:rpm/suse/mariadb@5.5.64-1.el7?arch=x86_64\u0026epoch=1\u0026upstream=mariadb-1:5.5.64-1.el7.src.rpm"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "mariadb-bench-1:5.5.64-1.el7.x86_64",
                "product": {
                  "name": "mariadb-bench-1:5.5.64-1.el7.x86_64",
                  "product_id": "mariadb-bench-1:5.5.64-1.el7.x86_64",
                  "product_identification_helper": {
                    "cpe": "cpe:2.3:a:mariadb:mariadb:5.5.64:*:*:*:*:*:*:*",
                    "purl": "pkg:rpm/suse/mariadb-bench@5.5.64-1.el7?arch=x86_64\u0026epoch=1\u0026upstream=mariadb-1:5.5.64-1.el7.src.rpm"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "mariadb-devel-1:5.5.64-1.el7.x86_64",
                "product": {
                  "name": "mariadb-devel-1:5.5.64-1.el7.x86_64",
                  "product_id": "mariadb-devel-1:5.5.64-1.el7.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/suse/mariadb-devel@5.5.64-1.el7?arch=x86_64\u0026epoch=1"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "mariadb-embedded-1:5.5.64-1.el7.x86_64",
                "product": {
                  "name": "mariadb-embedded-1:5.5.64-1.el7.x86_64",
                  "product_id": "mariadb-embedded-1:5.5.64-1.el7.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/suse/mariadb-embedded@5.5.64-1.el7?arch=x86_64\u0026epoch=1"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "mariadb-embedded-devel-1:5.5.64-1.el7.x86_64",
                "product": {
                  "name": "mariadb-embedded-devel-1:5.5.64-1.el7.x86_64",
                  "product_id": "mariadb-embedded-devel-1:5.5.64-1.el7.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/suse/mariadb-embedded-devel@5.5.64-1.el7?arch=x86_64\u0026epoch=1"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "mariadb-libs-1:5.5.64-1.el7.x86_64",
                "product": {
                  "name": "mariadb-libs-1:5.5.64-1.el7.x86_64",
                  "product_id": "mariadb-libs-1:5.5.64-1.el7.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/suse/mariadb-libs@5.5.64-1.el7?arch=x86_64\u0026epoch=1"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "mariadb-server-1:5.5.64-1.el7.x86_64",
                "product": {
                  "name": "mariadb-server-1:5.5.64-1.el7.x86_64",
                  "product_id": "mariadb-server-1:5.5.64-1.el7.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/suse/mariadb-server@5.5.64-1.el7?arch=x86_64\u0026epoch=1"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "mariadb-test-1:5.5.64-1.el7.x86_64",
                "product": {
                  "name": "mariadb-test-1:5.5.64-1.el7.x86_64",
                  "product_id": "mariadb-test-1:5.5.64-1.el7.x86_64",
                  "product_identification_helper": {
                    "cpe": "cpe:2.3:a:mariadb:mariadb:5.5.64:*:*:*:*:*:*:*",
                    "purl": "pkg:rpm/suse/mariadb-test@5.5.64-1.el7?arch=x86_64\u0026epoch=1\u0026upstream=mariadb-1:5.5.64-1.el7.src.rpm"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "x86_64"
          },
          {
            "branches": [
              {
                "category": "product_name",
                "name": "SUSE Liberty Linux 7",
                "product": {
                  "name": "SUSE Liberty Linux 7",
                  "product_id": "SUSE Liberty Linux 7",
                  "product_identification_helper": {
                    "cpe": "cpe:/o:suse:sll:7"
                  }
                }
              }
            ],
            "category": "product_family",
            "name": "SUSE Linux Enterprise"
          }
        ],
        "category": "vendor",
        "name": "SUSE"
      }
    ],
    "relationships": [
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "mariadb-1:5.5.64-1.el7.x86_64 as component of SUSE Liberty Linux 7",
          "product_id": "SUSE Liberty Linux 7:mariadb-1:5.5.64-1.el7.x86_64"
        },
        "product_reference": "mariadb-1:5.5.64-1.el7.x86_64",
        "relates_to_product_reference": "SUSE Liberty Linux 7"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "mariadb-bench-1:5.5.64-1.el7.x86_64 as component of SUSE Liberty Linux 7",
          "product_id": "SUSE Liberty Linux 7:mariadb-bench-1:5.5.64-1.el7.x86_64"
        },
        "product_reference": "mariadb-bench-1:5.5.64-1.el7.x86_64",
        "relates_to_product_reference": "SUSE Liberty Linux 7"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "mariadb-devel-1:5.5.64-1.el7.i686 as component of SUSE Liberty Linux 7",
          "product_id": "SUSE Liberty Linux 7:mariadb-devel-1:5.5.64-1.el7.i686"
        },
        "product_reference": "mariadb-devel-1:5.5.64-1.el7.i686",
        "relates_to_product_reference": "SUSE Liberty Linux 7"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "mariadb-devel-1:5.5.64-1.el7.x86_64 as component of SUSE Liberty Linux 7",
          "product_id": "SUSE Liberty Linux 7:mariadb-devel-1:5.5.64-1.el7.x86_64"
        },
        "product_reference": "mariadb-devel-1:5.5.64-1.el7.x86_64",
        "relates_to_product_reference": "SUSE Liberty Linux 7"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "mariadb-embedded-1:5.5.64-1.el7.i686 as component of SUSE Liberty Linux 7",
          "product_id": "SUSE Liberty Linux 7:mariadb-embedded-1:5.5.64-1.el7.i686"
        },
        "product_reference": "mariadb-embedded-1:5.5.64-1.el7.i686",
        "relates_to_product_reference": "SUSE Liberty Linux 7"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "mariadb-embedded-1:5.5.64-1.el7.x86_64 as component of SUSE Liberty Linux 7",
          "product_id": "SUSE Liberty Linux 7:mariadb-embedded-1:5.5.64-1.el7.x86_64"
        },
        "product_reference": "mariadb-embedded-1:5.5.64-1.el7.x86_64",
        "relates_to_product_reference": "SUSE Liberty Linux 7"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "mariadb-embedded-devel-1:5.5.64-1.el7.i686 as component of SUSE Liberty Linux 7",
          "product_id": "SUSE Liberty Linux 7:mariadb-embedded-devel-1:5.5.64-1.el7.i686"
        },
        "product_reference": "mariadb-embedded-devel-1:5.5.64-1.el7.i686",
        "relates_to_product_reference": "SUSE Liberty Linux 7"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "mariadb-embedded-devel-1:5.5.64-1.el7.x86_64 as component of SUSE Liberty Linux 7",
          "product_id": "SUSE Liberty Linux 7:mariadb-embedded-devel-1:5.5.64-1.el7.x86_64"
        },
        "product_reference": "mariadb-embedded-devel-1:5.5.64-1.el7.x86_64",
        "relates_to_product_reference": "SUSE Liberty Linux 7"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "mariadb-libs-1:5.5.64-1.el7.i686 as component of SUSE Liberty Linux 7",
          "product_id": "SUSE Liberty Linux 7:mariadb-libs-1:5.5.64-1.el7.i686"
        },
        "product_reference": "mariadb-libs-1:5.5.64-1.el7.i686",
        "relates_to_product_reference": "SUSE Liberty Linux 7"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "mariadb-libs-1:5.5.64-1.el7.x86_64 as component of SUSE Liberty Linux 7",
          "product_id": "SUSE Liberty Linux 7:mariadb-libs-1:5.5.64-1.el7.x86_64"
        },
        "product_reference": "mariadb-libs-1:5.5.64-1.el7.x86_64",
        "relates_to_product_reference": "SUSE Liberty Linux 7"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "mariadb-server-1:5.5.64-1.el7.x86_64 as component of SUSE Liberty Linux 7",
          "product_id": "SUSE Liberty Linux 7:mariadb-server-1:5.5.64-1.el7.x86_64"
        },
        "product_reference": "mariadb-server-1:5.5.64-1.el7.x86_64",
        "relates_to_product_reference": "SUSE Liberty Linux 7"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "mariadb-test-1:5.5.64-1.el7.x86_64 as component of SUSE Liberty Linux 7",
          "product_id": "SUSE Liberty Linux 7:mariadb-test-1:5.5.64-1.el7.x86_64"
        },
        "product_reference": "mariadb-test-1:5.5.64-1.el7.x86_64",
        "relates_to_product_reference": "SUSE Liberty Linux 7"
      }
    ]
  },
  "vulnerabilities": [
    {
      "cve": "CVE-2018-3058",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2018-3058"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: MyISAM). Supported versions that are affected are 5.5.60 and prior, 5.6.40 and prior and 5.7.22 and prior. Easily exploitable vulnerability allows low privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of MySQL Server accessible data. CVSS 3.0 Base Score 4.3 (Integrity impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N).",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Liberty Linux 7:mariadb-1:5.5.64-1.el7.x86_64",
          "SUSE Liberty Linux 7:mariadb-bench-1:5.5.64-1.el7.x86_64",
          "SUSE Liberty Linux 7:mariadb-devel-1:5.5.64-1.el7.i686",
          "SUSE Liberty Linux 7:mariadb-devel-1:5.5.64-1.el7.x86_64",
          "SUSE Liberty Linux 7:mariadb-embedded-1:5.5.64-1.el7.i686",
          "SUSE Liberty Linux 7:mariadb-embedded-1:5.5.64-1.el7.x86_64",
          "SUSE Liberty Linux 7:mariadb-embedded-devel-1:5.5.64-1.el7.i686",
          "SUSE Liberty Linux 7:mariadb-embedded-devel-1:5.5.64-1.el7.x86_64",
          "SUSE Liberty Linux 7:mariadb-libs-1:5.5.64-1.el7.i686",
          "SUSE Liberty Linux 7:mariadb-libs-1:5.5.64-1.el7.x86_64",
          "SUSE Liberty Linux 7:mariadb-server-1:5.5.64-1.el7.x86_64",
          "SUSE Liberty Linux 7:mariadb-test-1:5.5.64-1.el7.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2018-3058",
          "url": "https://www.suse.com/security/cve/CVE-2018-3058"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1101676 for CVE-2018-3058",
          "url": "https://bugzilla.suse.com/1101676"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1116686 for CVE-2018-3058",
          "url": "https://bugzilla.suse.com/1116686"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Liberty Linux 7:mariadb-1:5.5.64-1.el7.x86_64",
            "SUSE Liberty Linux 7:mariadb-bench-1:5.5.64-1.el7.x86_64",
            "SUSE Liberty Linux 7:mariadb-devel-1:5.5.64-1.el7.i686",
            "SUSE Liberty Linux 7:mariadb-devel-1:5.5.64-1.el7.x86_64",
            "SUSE Liberty Linux 7:mariadb-embedded-1:5.5.64-1.el7.i686",
            "SUSE Liberty Linux 7:mariadb-embedded-1:5.5.64-1.el7.x86_64",
            "SUSE Liberty Linux 7:mariadb-embedded-devel-1:5.5.64-1.el7.i686",
            "SUSE Liberty Linux 7:mariadb-embedded-devel-1:5.5.64-1.el7.x86_64",
            "SUSE Liberty Linux 7:mariadb-libs-1:5.5.64-1.el7.i686",
            "SUSE Liberty Linux 7:mariadb-libs-1:5.5.64-1.el7.x86_64",
            "SUSE Liberty Linux 7:mariadb-server-1:5.5.64-1.el7.x86_64",
            "SUSE Liberty Linux 7:mariadb-test-1:5.5.64-1.el7.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 4.3,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N",
            "version": "3.0"
          },
          "products": [
            "SUSE Liberty Linux 7:mariadb-1:5.5.64-1.el7.x86_64",
            "SUSE Liberty Linux 7:mariadb-bench-1:5.5.64-1.el7.x86_64",
            "SUSE Liberty Linux 7:mariadb-devel-1:5.5.64-1.el7.i686",
            "SUSE Liberty Linux 7:mariadb-devel-1:5.5.64-1.el7.x86_64",
            "SUSE Liberty Linux 7:mariadb-embedded-1:5.5.64-1.el7.i686",
            "SUSE Liberty Linux 7:mariadb-embedded-1:5.5.64-1.el7.x86_64",
            "SUSE Liberty Linux 7:mariadb-embedded-devel-1:5.5.64-1.el7.i686",
            "SUSE Liberty Linux 7:mariadb-embedded-devel-1:5.5.64-1.el7.x86_64",
            "SUSE Liberty Linux 7:mariadb-libs-1:5.5.64-1.el7.i686",
            "SUSE Liberty Linux 7:mariadb-libs-1:5.5.64-1.el7.x86_64",
            "SUSE Liberty Linux 7:mariadb-server-1:5.5.64-1.el7.x86_64",
            "SUSE Liberty Linux 7:mariadb-test-1:5.5.64-1.el7.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2019-08-06T00:00:00Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2018-3058"
    },
    {
      "cve": "CVE-2018-3063",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2018-3063"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Security: Privileges). Supported versions that are affected are 5.5.60 and prior. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.0 Base Score 4.9 (Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H).",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Liberty Linux 7:mariadb-1:5.5.64-1.el7.x86_64",
          "SUSE Liberty Linux 7:mariadb-bench-1:5.5.64-1.el7.x86_64",
          "SUSE Liberty Linux 7:mariadb-devel-1:5.5.64-1.el7.i686",
          "SUSE Liberty Linux 7:mariadb-devel-1:5.5.64-1.el7.x86_64",
          "SUSE Liberty Linux 7:mariadb-embedded-1:5.5.64-1.el7.i686",
          "SUSE Liberty Linux 7:mariadb-embedded-1:5.5.64-1.el7.x86_64",
          "SUSE Liberty Linux 7:mariadb-embedded-devel-1:5.5.64-1.el7.i686",
          "SUSE Liberty Linux 7:mariadb-embedded-devel-1:5.5.64-1.el7.x86_64",
          "SUSE Liberty Linux 7:mariadb-libs-1:5.5.64-1.el7.i686",
          "SUSE Liberty Linux 7:mariadb-libs-1:5.5.64-1.el7.x86_64",
          "SUSE Liberty Linux 7:mariadb-server-1:5.5.64-1.el7.x86_64",
          "SUSE Liberty Linux 7:mariadb-test-1:5.5.64-1.el7.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2018-3063",
          "url": "https://www.suse.com/security/cve/CVE-2018-3063"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1101677 for CVE-2018-3063",
          "url": "https://bugzilla.suse.com/1101677"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1116686 for CVE-2018-3063",
          "url": "https://bugzilla.suse.com/1116686"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Liberty Linux 7:mariadb-1:5.5.64-1.el7.x86_64",
            "SUSE Liberty Linux 7:mariadb-bench-1:5.5.64-1.el7.x86_64",
            "SUSE Liberty Linux 7:mariadb-devel-1:5.5.64-1.el7.i686",
            "SUSE Liberty Linux 7:mariadb-devel-1:5.5.64-1.el7.x86_64",
            "SUSE Liberty Linux 7:mariadb-embedded-1:5.5.64-1.el7.i686",
            "SUSE Liberty Linux 7:mariadb-embedded-1:5.5.64-1.el7.x86_64",
            "SUSE Liberty Linux 7:mariadb-embedded-devel-1:5.5.64-1.el7.i686",
            "SUSE Liberty Linux 7:mariadb-embedded-devel-1:5.5.64-1.el7.x86_64",
            "SUSE Liberty Linux 7:mariadb-libs-1:5.5.64-1.el7.i686",
            "SUSE Liberty Linux 7:mariadb-libs-1:5.5.64-1.el7.x86_64",
            "SUSE Liberty Linux 7:mariadb-server-1:5.5.64-1.el7.x86_64",
            "SUSE Liberty Linux 7:mariadb-test-1:5.5.64-1.el7.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 4.9,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.0"
          },
          "products": [
            "SUSE Liberty Linux 7:mariadb-1:5.5.64-1.el7.x86_64",
            "SUSE Liberty Linux 7:mariadb-bench-1:5.5.64-1.el7.x86_64",
            "SUSE Liberty Linux 7:mariadb-devel-1:5.5.64-1.el7.i686",
            "SUSE Liberty Linux 7:mariadb-devel-1:5.5.64-1.el7.x86_64",
            "SUSE Liberty Linux 7:mariadb-embedded-1:5.5.64-1.el7.i686",
            "SUSE Liberty Linux 7:mariadb-embedded-1:5.5.64-1.el7.x86_64",
            "SUSE Liberty Linux 7:mariadb-embedded-devel-1:5.5.64-1.el7.i686",
            "SUSE Liberty Linux 7:mariadb-embedded-devel-1:5.5.64-1.el7.x86_64",
            "SUSE Liberty Linux 7:mariadb-libs-1:5.5.64-1.el7.i686",
            "SUSE Liberty Linux 7:mariadb-libs-1:5.5.64-1.el7.x86_64",
            "SUSE Liberty Linux 7:mariadb-server-1:5.5.64-1.el7.x86_64",
            "SUSE Liberty Linux 7:mariadb-test-1:5.5.64-1.el7.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2019-08-06T00:00:00Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2018-3063"
    },
    {
      "cve": "CVE-2018-3066",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2018-3066"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Options). Supported versions that are affected are 5.5.60 and prior, 5.6.40 and prior and 5.7.22 and prior. Difficult to exploit vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of MySQL Server accessible data as well as unauthorized read access to a subset of MySQL Server accessible data. CVSS 3.0 Base Score 3.3 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:H/PR:H/UI:N/S:U/C:L/I:L/A:N).",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Liberty Linux 7:mariadb-1:5.5.64-1.el7.x86_64",
          "SUSE Liberty Linux 7:mariadb-bench-1:5.5.64-1.el7.x86_64",
          "SUSE Liberty Linux 7:mariadb-devel-1:5.5.64-1.el7.i686",
          "SUSE Liberty Linux 7:mariadb-devel-1:5.5.64-1.el7.x86_64",
          "SUSE Liberty Linux 7:mariadb-embedded-1:5.5.64-1.el7.i686",
          "SUSE Liberty Linux 7:mariadb-embedded-1:5.5.64-1.el7.x86_64",
          "SUSE Liberty Linux 7:mariadb-embedded-devel-1:5.5.64-1.el7.i686",
          "SUSE Liberty Linux 7:mariadb-embedded-devel-1:5.5.64-1.el7.x86_64",
          "SUSE Liberty Linux 7:mariadb-libs-1:5.5.64-1.el7.i686",
          "SUSE Liberty Linux 7:mariadb-libs-1:5.5.64-1.el7.x86_64",
          "SUSE Liberty Linux 7:mariadb-server-1:5.5.64-1.el7.x86_64",
          "SUSE Liberty Linux 7:mariadb-test-1:5.5.64-1.el7.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2018-3066",
          "url": "https://www.suse.com/security/cve/CVE-2018-3066"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1101678 for CVE-2018-3066",
          "url": "https://bugzilla.suse.com/1101678"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1116686 for CVE-2018-3066",
          "url": "https://bugzilla.suse.com/1116686"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Liberty Linux 7:mariadb-1:5.5.64-1.el7.x86_64",
            "SUSE Liberty Linux 7:mariadb-bench-1:5.5.64-1.el7.x86_64",
            "SUSE Liberty Linux 7:mariadb-devel-1:5.5.64-1.el7.i686",
            "SUSE Liberty Linux 7:mariadb-devel-1:5.5.64-1.el7.x86_64",
            "SUSE Liberty Linux 7:mariadb-embedded-1:5.5.64-1.el7.i686",
            "SUSE Liberty Linux 7:mariadb-embedded-1:5.5.64-1.el7.x86_64",
            "SUSE Liberty Linux 7:mariadb-embedded-devel-1:5.5.64-1.el7.i686",
            "SUSE Liberty Linux 7:mariadb-embedded-devel-1:5.5.64-1.el7.x86_64",
            "SUSE Liberty Linux 7:mariadb-libs-1:5.5.64-1.el7.i686",
            "SUSE Liberty Linux 7:mariadb-libs-1:5.5.64-1.el7.x86_64",
            "SUSE Liberty Linux 7:mariadb-server-1:5.5.64-1.el7.x86_64",
            "SUSE Liberty Linux 7:mariadb-test-1:5.5.64-1.el7.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 3.3,
            "baseSeverity": "LOW",
            "vectorString": "CVSS:3.0/AV:N/AC:H/PR:H/UI:N/S:U/C:L/I:L/A:N",
            "version": "3.0"
          },
          "products": [
            "SUSE Liberty Linux 7:mariadb-1:5.5.64-1.el7.x86_64",
            "SUSE Liberty Linux 7:mariadb-bench-1:5.5.64-1.el7.x86_64",
            "SUSE Liberty Linux 7:mariadb-devel-1:5.5.64-1.el7.i686",
            "SUSE Liberty Linux 7:mariadb-devel-1:5.5.64-1.el7.x86_64",
            "SUSE Liberty Linux 7:mariadb-embedded-1:5.5.64-1.el7.i686",
            "SUSE Liberty Linux 7:mariadb-embedded-1:5.5.64-1.el7.x86_64",
            "SUSE Liberty Linux 7:mariadb-embedded-devel-1:5.5.64-1.el7.i686",
            "SUSE Liberty Linux 7:mariadb-embedded-devel-1:5.5.64-1.el7.x86_64",
            "SUSE Liberty Linux 7:mariadb-libs-1:5.5.64-1.el7.i686",
            "SUSE Liberty Linux 7:mariadb-libs-1:5.5.64-1.el7.x86_64",
            "SUSE Liberty Linux 7:mariadb-server-1:5.5.64-1.el7.x86_64",
            "SUSE Liberty Linux 7:mariadb-test-1:5.5.64-1.el7.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2019-08-06T00:00:00Z",
          "details": "low"
        }
      ],
      "title": "CVE-2018-3066"
    },
    {
      "cve": "CVE-2018-3081",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2018-3081"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "Vulnerability in the MySQL Client component of Oracle MySQL (subcomponent: Client programs). Supported versions that are affected are 5.5.60 and prior, 5.6.40 and prior, 5.7.22 and prior and 8.0.11 and prior. Difficult to exploit vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Client. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Client as well as unauthorized update, insert or delete access to some of MySQL Client accessible data. CVSS 3.0 Base Score 5.0 (Integrity and Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:H/PR:H/UI:N/S:U/C:N/I:L/A:H).",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Liberty Linux 7:mariadb-1:5.5.64-1.el7.x86_64",
          "SUSE Liberty Linux 7:mariadb-bench-1:5.5.64-1.el7.x86_64",
          "SUSE Liberty Linux 7:mariadb-devel-1:5.5.64-1.el7.i686",
          "SUSE Liberty Linux 7:mariadb-devel-1:5.5.64-1.el7.x86_64",
          "SUSE Liberty Linux 7:mariadb-embedded-1:5.5.64-1.el7.i686",
          "SUSE Liberty Linux 7:mariadb-embedded-1:5.5.64-1.el7.x86_64",
          "SUSE Liberty Linux 7:mariadb-embedded-devel-1:5.5.64-1.el7.i686",
          "SUSE Liberty Linux 7:mariadb-embedded-devel-1:5.5.64-1.el7.x86_64",
          "SUSE Liberty Linux 7:mariadb-libs-1:5.5.64-1.el7.i686",
          "SUSE Liberty Linux 7:mariadb-libs-1:5.5.64-1.el7.x86_64",
          "SUSE Liberty Linux 7:mariadb-server-1:5.5.64-1.el7.x86_64",
          "SUSE Liberty Linux 7:mariadb-test-1:5.5.64-1.el7.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2018-3081",
          "url": "https://www.suse.com/security/cve/CVE-2018-3081"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1101680 for CVE-2018-3081",
          "url": "https://bugzilla.suse.com/1101680"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Liberty Linux 7:mariadb-1:5.5.64-1.el7.x86_64",
            "SUSE Liberty Linux 7:mariadb-bench-1:5.5.64-1.el7.x86_64",
            "SUSE Liberty Linux 7:mariadb-devel-1:5.5.64-1.el7.i686",
            "SUSE Liberty Linux 7:mariadb-devel-1:5.5.64-1.el7.x86_64",
            "SUSE Liberty Linux 7:mariadb-embedded-1:5.5.64-1.el7.i686",
            "SUSE Liberty Linux 7:mariadb-embedded-1:5.5.64-1.el7.x86_64",
            "SUSE Liberty Linux 7:mariadb-embedded-devel-1:5.5.64-1.el7.i686",
            "SUSE Liberty Linux 7:mariadb-embedded-devel-1:5.5.64-1.el7.x86_64",
            "SUSE Liberty Linux 7:mariadb-libs-1:5.5.64-1.el7.i686",
            "SUSE Liberty Linux 7:mariadb-libs-1:5.5.64-1.el7.x86_64",
            "SUSE Liberty Linux 7:mariadb-server-1:5.5.64-1.el7.x86_64",
            "SUSE Liberty Linux 7:mariadb-test-1:5.5.64-1.el7.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 5,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.0/AV:N/AC:H/PR:H/UI:N/S:U/C:N/I:L/A:H",
            "version": "3.0"
          },
          "products": [
            "SUSE Liberty Linux 7:mariadb-1:5.5.64-1.el7.x86_64",
            "SUSE Liberty Linux 7:mariadb-bench-1:5.5.64-1.el7.x86_64",
            "SUSE Liberty Linux 7:mariadb-devel-1:5.5.64-1.el7.i686",
            "SUSE Liberty Linux 7:mariadb-devel-1:5.5.64-1.el7.x86_64",
            "SUSE Liberty Linux 7:mariadb-embedded-1:5.5.64-1.el7.i686",
            "SUSE Liberty Linux 7:mariadb-embedded-1:5.5.64-1.el7.x86_64",
            "SUSE Liberty Linux 7:mariadb-embedded-devel-1:5.5.64-1.el7.i686",
            "SUSE Liberty Linux 7:mariadb-embedded-devel-1:5.5.64-1.el7.x86_64",
            "SUSE Liberty Linux 7:mariadb-libs-1:5.5.64-1.el7.i686",
            "SUSE Liberty Linux 7:mariadb-libs-1:5.5.64-1.el7.x86_64",
            "SUSE Liberty Linux 7:mariadb-server-1:5.5.64-1.el7.x86_64",
            "SUSE Liberty Linux 7:mariadb-test-1:5.5.64-1.el7.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2019-08-06T00:00:00Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2018-3081"
    },
    {
      "cve": "CVE-2018-3282",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2018-3282"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Storage Engines). Supported versions that are affected are 5.5.61 and prior, 5.6.41 and prior, 5.7.23 and prior and 8.0.12 and prior. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.0 Base Score 4.9 (Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H).",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Liberty Linux 7:mariadb-1:5.5.64-1.el7.x86_64",
          "SUSE Liberty Linux 7:mariadb-bench-1:5.5.64-1.el7.x86_64",
          "SUSE Liberty Linux 7:mariadb-devel-1:5.5.64-1.el7.i686",
          "SUSE Liberty Linux 7:mariadb-devel-1:5.5.64-1.el7.x86_64",
          "SUSE Liberty Linux 7:mariadb-embedded-1:5.5.64-1.el7.i686",
          "SUSE Liberty Linux 7:mariadb-embedded-1:5.5.64-1.el7.x86_64",
          "SUSE Liberty Linux 7:mariadb-embedded-devel-1:5.5.64-1.el7.i686",
          "SUSE Liberty Linux 7:mariadb-embedded-devel-1:5.5.64-1.el7.x86_64",
          "SUSE Liberty Linux 7:mariadb-libs-1:5.5.64-1.el7.i686",
          "SUSE Liberty Linux 7:mariadb-libs-1:5.5.64-1.el7.x86_64",
          "SUSE Liberty Linux 7:mariadb-server-1:5.5.64-1.el7.x86_64",
          "SUSE Liberty Linux 7:mariadb-test-1:5.5.64-1.el7.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2018-3282",
          "url": "https://www.suse.com/security/cve/CVE-2018-3282"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1112432 for CVE-2018-3282",
          "url": "https://bugzilla.suse.com/1112432"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1116686 for CVE-2018-3282",
          "url": "https://bugzilla.suse.com/1116686"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Liberty Linux 7:mariadb-1:5.5.64-1.el7.x86_64",
            "SUSE Liberty Linux 7:mariadb-bench-1:5.5.64-1.el7.x86_64",
            "SUSE Liberty Linux 7:mariadb-devel-1:5.5.64-1.el7.i686",
            "SUSE Liberty Linux 7:mariadb-devel-1:5.5.64-1.el7.x86_64",
            "SUSE Liberty Linux 7:mariadb-embedded-1:5.5.64-1.el7.i686",
            "SUSE Liberty Linux 7:mariadb-embedded-1:5.5.64-1.el7.x86_64",
            "SUSE Liberty Linux 7:mariadb-embedded-devel-1:5.5.64-1.el7.i686",
            "SUSE Liberty Linux 7:mariadb-embedded-devel-1:5.5.64-1.el7.x86_64",
            "SUSE Liberty Linux 7:mariadb-libs-1:5.5.64-1.el7.i686",
            "SUSE Liberty Linux 7:mariadb-libs-1:5.5.64-1.el7.x86_64",
            "SUSE Liberty Linux 7:mariadb-server-1:5.5.64-1.el7.x86_64",
            "SUSE Liberty Linux 7:mariadb-test-1:5.5.64-1.el7.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 4.9,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.0"
          },
          "products": [
            "SUSE Liberty Linux 7:mariadb-1:5.5.64-1.el7.x86_64",
            "SUSE Liberty Linux 7:mariadb-bench-1:5.5.64-1.el7.x86_64",
            "SUSE Liberty Linux 7:mariadb-devel-1:5.5.64-1.el7.i686",
            "SUSE Liberty Linux 7:mariadb-devel-1:5.5.64-1.el7.x86_64",
            "SUSE Liberty Linux 7:mariadb-embedded-1:5.5.64-1.el7.i686",
            "SUSE Liberty Linux 7:mariadb-embedded-1:5.5.64-1.el7.x86_64",
            "SUSE Liberty Linux 7:mariadb-embedded-devel-1:5.5.64-1.el7.i686",
            "SUSE Liberty Linux 7:mariadb-embedded-devel-1:5.5.64-1.el7.x86_64",
            "SUSE Liberty Linux 7:mariadb-libs-1:5.5.64-1.el7.i686",
            "SUSE Liberty Linux 7:mariadb-libs-1:5.5.64-1.el7.x86_64",
            "SUSE Liberty Linux 7:mariadb-server-1:5.5.64-1.el7.x86_64",
            "SUSE Liberty Linux 7:mariadb-test-1:5.5.64-1.el7.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2019-08-06T00:00:00Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2018-3282"
    },
    {
      "cve": "CVE-2019-2503",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2019-2503"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Connection Handling). Supported versions that are affected are 5.6.42 and prior, 5.7.24 and prior and 8.0.13 and prior. Difficult to exploit vulnerability allows low privileged attacker with access to the physical communication segment attached to the hardware where the MySQL Server executes to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all MySQL Server accessible data and unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.0 Base Score 6.4 (Confidentiality and Availability impacts). CVSS Vector: (CVSS:3.0/AV:A/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:H).",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Liberty Linux 7:mariadb-1:5.5.64-1.el7.x86_64",
          "SUSE Liberty Linux 7:mariadb-bench-1:5.5.64-1.el7.x86_64",
          "SUSE Liberty Linux 7:mariadb-devel-1:5.5.64-1.el7.i686",
          "SUSE Liberty Linux 7:mariadb-devel-1:5.5.64-1.el7.x86_64",
          "SUSE Liberty Linux 7:mariadb-embedded-1:5.5.64-1.el7.i686",
          "SUSE Liberty Linux 7:mariadb-embedded-1:5.5.64-1.el7.x86_64",
          "SUSE Liberty Linux 7:mariadb-embedded-devel-1:5.5.64-1.el7.i686",
          "SUSE Liberty Linux 7:mariadb-embedded-devel-1:5.5.64-1.el7.x86_64",
          "SUSE Liberty Linux 7:mariadb-libs-1:5.5.64-1.el7.i686",
          "SUSE Liberty Linux 7:mariadb-libs-1:5.5.64-1.el7.x86_64",
          "SUSE Liberty Linux 7:mariadb-server-1:5.5.64-1.el7.x86_64",
          "SUSE Liberty Linux 7:mariadb-test-1:5.5.64-1.el7.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2019-2503",
          "url": "https://www.suse.com/security/cve/CVE-2019-2503"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1122198 for CVE-2019-2503",
          "url": "https://bugzilla.suse.com/1122198"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Liberty Linux 7:mariadb-1:5.5.64-1.el7.x86_64",
            "SUSE Liberty Linux 7:mariadb-bench-1:5.5.64-1.el7.x86_64",
            "SUSE Liberty Linux 7:mariadb-devel-1:5.5.64-1.el7.i686",
            "SUSE Liberty Linux 7:mariadb-devel-1:5.5.64-1.el7.x86_64",
            "SUSE Liberty Linux 7:mariadb-embedded-1:5.5.64-1.el7.i686",
            "SUSE Liberty Linux 7:mariadb-embedded-1:5.5.64-1.el7.x86_64",
            "SUSE Liberty Linux 7:mariadb-embedded-devel-1:5.5.64-1.el7.i686",
            "SUSE Liberty Linux 7:mariadb-embedded-devel-1:5.5.64-1.el7.x86_64",
            "SUSE Liberty Linux 7:mariadb-libs-1:5.5.64-1.el7.i686",
            "SUSE Liberty Linux 7:mariadb-libs-1:5.5.64-1.el7.x86_64",
            "SUSE Liberty Linux 7:mariadb-server-1:5.5.64-1.el7.x86_64",
            "SUSE Liberty Linux 7:mariadb-test-1:5.5.64-1.el7.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 6.4,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.0/AV:A/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:H",
            "version": "3.0"
          },
          "products": [
            "SUSE Liberty Linux 7:mariadb-1:5.5.64-1.el7.x86_64",
            "SUSE Liberty Linux 7:mariadb-bench-1:5.5.64-1.el7.x86_64",
            "SUSE Liberty Linux 7:mariadb-devel-1:5.5.64-1.el7.i686",
            "SUSE Liberty Linux 7:mariadb-devel-1:5.5.64-1.el7.x86_64",
            "SUSE Liberty Linux 7:mariadb-embedded-1:5.5.64-1.el7.i686",
            "SUSE Liberty Linux 7:mariadb-embedded-1:5.5.64-1.el7.x86_64",
            "SUSE Liberty Linux 7:mariadb-embedded-devel-1:5.5.64-1.el7.i686",
            "SUSE Liberty Linux 7:mariadb-embedded-devel-1:5.5.64-1.el7.x86_64",
            "SUSE Liberty Linux 7:mariadb-libs-1:5.5.64-1.el7.i686",
            "SUSE Liberty Linux 7:mariadb-libs-1:5.5.64-1.el7.x86_64",
            "SUSE Liberty Linux 7:mariadb-server-1:5.5.64-1.el7.x86_64",
            "SUSE Liberty Linux 7:mariadb-test-1:5.5.64-1.el7.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2019-08-06T00:00:00Z",
          "details": "important"
        }
      ],
      "title": "CVE-2019-2503"
    },
    {
      "cve": "CVE-2019-2529",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2019-2529"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Optimizer). Supported versions that are affected are 5.6.42 and prior, 5.7.24 and prior and 8.0.13 and prior. Easily exploitable vulnerability allows low privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.0 Base Score 6.5 (Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H).",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Liberty Linux 7:mariadb-1:5.5.64-1.el7.x86_64",
          "SUSE Liberty Linux 7:mariadb-bench-1:5.5.64-1.el7.x86_64",
          "SUSE Liberty Linux 7:mariadb-devel-1:5.5.64-1.el7.i686",
          "SUSE Liberty Linux 7:mariadb-devel-1:5.5.64-1.el7.x86_64",
          "SUSE Liberty Linux 7:mariadb-embedded-1:5.5.64-1.el7.i686",
          "SUSE Liberty Linux 7:mariadb-embedded-1:5.5.64-1.el7.x86_64",
          "SUSE Liberty Linux 7:mariadb-embedded-devel-1:5.5.64-1.el7.i686",
          "SUSE Liberty Linux 7:mariadb-embedded-devel-1:5.5.64-1.el7.x86_64",
          "SUSE Liberty Linux 7:mariadb-libs-1:5.5.64-1.el7.i686",
          "SUSE Liberty Linux 7:mariadb-libs-1:5.5.64-1.el7.x86_64",
          "SUSE Liberty Linux 7:mariadb-server-1:5.5.64-1.el7.x86_64",
          "SUSE Liberty Linux 7:mariadb-test-1:5.5.64-1.el7.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2019-2529",
          "url": "https://www.suse.com/security/cve/CVE-2019-2529"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1122198 for CVE-2019-2529",
          "url": "https://bugzilla.suse.com/1122198"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1136037 for CVE-2019-2529",
          "url": "https://bugzilla.suse.com/1136037"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Liberty Linux 7:mariadb-1:5.5.64-1.el7.x86_64",
            "SUSE Liberty Linux 7:mariadb-bench-1:5.5.64-1.el7.x86_64",
            "SUSE Liberty Linux 7:mariadb-devel-1:5.5.64-1.el7.i686",
            "SUSE Liberty Linux 7:mariadb-devel-1:5.5.64-1.el7.x86_64",
            "SUSE Liberty Linux 7:mariadb-embedded-1:5.5.64-1.el7.i686",
            "SUSE Liberty Linux 7:mariadb-embedded-1:5.5.64-1.el7.x86_64",
            "SUSE Liberty Linux 7:mariadb-embedded-devel-1:5.5.64-1.el7.i686",
            "SUSE Liberty Linux 7:mariadb-embedded-devel-1:5.5.64-1.el7.x86_64",
            "SUSE Liberty Linux 7:mariadb-libs-1:5.5.64-1.el7.i686",
            "SUSE Liberty Linux 7:mariadb-libs-1:5.5.64-1.el7.x86_64",
            "SUSE Liberty Linux 7:mariadb-server-1:5.5.64-1.el7.x86_64",
            "SUSE Liberty Linux 7:mariadb-test-1:5.5.64-1.el7.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 6.5,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.0"
          },
          "products": [
            "SUSE Liberty Linux 7:mariadb-1:5.5.64-1.el7.x86_64",
            "SUSE Liberty Linux 7:mariadb-bench-1:5.5.64-1.el7.x86_64",
            "SUSE Liberty Linux 7:mariadb-devel-1:5.5.64-1.el7.i686",
            "SUSE Liberty Linux 7:mariadb-devel-1:5.5.64-1.el7.x86_64",
            "SUSE Liberty Linux 7:mariadb-embedded-1:5.5.64-1.el7.i686",
            "SUSE Liberty Linux 7:mariadb-embedded-1:5.5.64-1.el7.x86_64",
            "SUSE Liberty Linux 7:mariadb-embedded-devel-1:5.5.64-1.el7.i686",
            "SUSE Liberty Linux 7:mariadb-embedded-devel-1:5.5.64-1.el7.x86_64",
            "SUSE Liberty Linux 7:mariadb-libs-1:5.5.64-1.el7.i686",
            "SUSE Liberty Linux 7:mariadb-libs-1:5.5.64-1.el7.x86_64",
            "SUSE Liberty Linux 7:mariadb-server-1:5.5.64-1.el7.x86_64",
            "SUSE Liberty Linux 7:mariadb-test-1:5.5.64-1.el7.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2019-08-06T00:00:00Z",
          "details": "important"
        }
      ],
      "title": "CVE-2019-2529"
    },
    {
      "cve": "CVE-2019-2614",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2019-2614"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Replication). Supported versions that are affected are 5.6.43 and prior, 5.7.25 and prior and 8.0.15 and prior. Difficult to exploit vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.0 Base Score 4.4 (Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:H).",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Liberty Linux 7:mariadb-1:5.5.64-1.el7.x86_64",
          "SUSE Liberty Linux 7:mariadb-bench-1:5.5.64-1.el7.x86_64",
          "SUSE Liberty Linux 7:mariadb-devel-1:5.5.64-1.el7.i686",
          "SUSE Liberty Linux 7:mariadb-devel-1:5.5.64-1.el7.x86_64",
          "SUSE Liberty Linux 7:mariadb-embedded-1:5.5.64-1.el7.i686",
          "SUSE Liberty Linux 7:mariadb-embedded-1:5.5.64-1.el7.x86_64",
          "SUSE Liberty Linux 7:mariadb-embedded-devel-1:5.5.64-1.el7.i686",
          "SUSE Liberty Linux 7:mariadb-embedded-devel-1:5.5.64-1.el7.x86_64",
          "SUSE Liberty Linux 7:mariadb-libs-1:5.5.64-1.el7.i686",
          "SUSE Liberty Linux 7:mariadb-libs-1:5.5.64-1.el7.x86_64",
          "SUSE Liberty Linux 7:mariadb-server-1:5.5.64-1.el7.x86_64",
          "SUSE Liberty Linux 7:mariadb-test-1:5.5.64-1.el7.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2019-2614",
          "url": "https://www.suse.com/security/cve/CVE-2019-2614"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1132826 for CVE-2019-2614",
          "url": "https://bugzilla.suse.com/1132826"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1136035 for CVE-2019-2614",
          "url": "https://bugzilla.suse.com/1136035"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1141798 for CVE-2019-2614",
          "url": "https://bugzilla.suse.com/1141798"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Liberty Linux 7:mariadb-1:5.5.64-1.el7.x86_64",
            "SUSE Liberty Linux 7:mariadb-bench-1:5.5.64-1.el7.x86_64",
            "SUSE Liberty Linux 7:mariadb-devel-1:5.5.64-1.el7.i686",
            "SUSE Liberty Linux 7:mariadb-devel-1:5.5.64-1.el7.x86_64",
            "SUSE Liberty Linux 7:mariadb-embedded-1:5.5.64-1.el7.i686",
            "SUSE Liberty Linux 7:mariadb-embedded-1:5.5.64-1.el7.x86_64",
            "SUSE Liberty Linux 7:mariadb-embedded-devel-1:5.5.64-1.el7.i686",
            "SUSE Liberty Linux 7:mariadb-embedded-devel-1:5.5.64-1.el7.x86_64",
            "SUSE Liberty Linux 7:mariadb-libs-1:5.5.64-1.el7.i686",
            "SUSE Liberty Linux 7:mariadb-libs-1:5.5.64-1.el7.x86_64",
            "SUSE Liberty Linux 7:mariadb-server-1:5.5.64-1.el7.x86_64",
            "SUSE Liberty Linux 7:mariadb-test-1:5.5.64-1.el7.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 4.4,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "SUSE Liberty Linux 7:mariadb-1:5.5.64-1.el7.x86_64",
            "SUSE Liberty Linux 7:mariadb-bench-1:5.5.64-1.el7.x86_64",
            "SUSE Liberty Linux 7:mariadb-devel-1:5.5.64-1.el7.i686",
            "SUSE Liberty Linux 7:mariadb-devel-1:5.5.64-1.el7.x86_64",
            "SUSE Liberty Linux 7:mariadb-embedded-1:5.5.64-1.el7.i686",
            "SUSE Liberty Linux 7:mariadb-embedded-1:5.5.64-1.el7.x86_64",
            "SUSE Liberty Linux 7:mariadb-embedded-devel-1:5.5.64-1.el7.i686",
            "SUSE Liberty Linux 7:mariadb-embedded-devel-1:5.5.64-1.el7.x86_64",
            "SUSE Liberty Linux 7:mariadb-libs-1:5.5.64-1.el7.i686",
            "SUSE Liberty Linux 7:mariadb-libs-1:5.5.64-1.el7.x86_64",
            "SUSE Liberty Linux 7:mariadb-server-1:5.5.64-1.el7.x86_64",
            "SUSE Liberty Linux 7:mariadb-test-1:5.5.64-1.el7.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2019-08-06T00:00:00Z",
          "details": "important"
        }
      ],
      "title": "CVE-2019-2614"
    },
    {
      "cve": "CVE-2019-2627",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2019-2627"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Security: Privileges). Supported versions that are affected are 5.6.43 and prior, 5.7.25 and prior and 8.0.15 and prior. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.0 Base Score 4.9 (Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H).",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Liberty Linux 7:mariadb-1:5.5.64-1.el7.x86_64",
          "SUSE Liberty Linux 7:mariadb-bench-1:5.5.64-1.el7.x86_64",
          "SUSE Liberty Linux 7:mariadb-devel-1:5.5.64-1.el7.i686",
          "SUSE Liberty Linux 7:mariadb-devel-1:5.5.64-1.el7.x86_64",
          "SUSE Liberty Linux 7:mariadb-embedded-1:5.5.64-1.el7.i686",
          "SUSE Liberty Linux 7:mariadb-embedded-1:5.5.64-1.el7.x86_64",
          "SUSE Liberty Linux 7:mariadb-embedded-devel-1:5.5.64-1.el7.i686",
          "SUSE Liberty Linux 7:mariadb-embedded-devel-1:5.5.64-1.el7.x86_64",
          "SUSE Liberty Linux 7:mariadb-libs-1:5.5.64-1.el7.i686",
          "SUSE Liberty Linux 7:mariadb-libs-1:5.5.64-1.el7.x86_64",
          "SUSE Liberty Linux 7:mariadb-server-1:5.5.64-1.el7.x86_64",
          "SUSE Liberty Linux 7:mariadb-test-1:5.5.64-1.el7.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2019-2627",
          "url": "https://www.suse.com/security/cve/CVE-2019-2627"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1132826 for CVE-2019-2627",
          "url": "https://bugzilla.suse.com/1132826"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1136035 for CVE-2019-2627",
          "url": "https://bugzilla.suse.com/1136035"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1141798 for CVE-2019-2627",
          "url": "https://bugzilla.suse.com/1141798"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Liberty Linux 7:mariadb-1:5.5.64-1.el7.x86_64",
            "SUSE Liberty Linux 7:mariadb-bench-1:5.5.64-1.el7.x86_64",
            "SUSE Liberty Linux 7:mariadb-devel-1:5.5.64-1.el7.i686",
            "SUSE Liberty Linux 7:mariadb-devel-1:5.5.64-1.el7.x86_64",
            "SUSE Liberty Linux 7:mariadb-embedded-1:5.5.64-1.el7.i686",
            "SUSE Liberty Linux 7:mariadb-embedded-1:5.5.64-1.el7.x86_64",
            "SUSE Liberty Linux 7:mariadb-embedded-devel-1:5.5.64-1.el7.i686",
            "SUSE Liberty Linux 7:mariadb-embedded-devel-1:5.5.64-1.el7.x86_64",
            "SUSE Liberty Linux 7:mariadb-libs-1:5.5.64-1.el7.i686",
            "SUSE Liberty Linux 7:mariadb-libs-1:5.5.64-1.el7.x86_64",
            "SUSE Liberty Linux 7:mariadb-server-1:5.5.64-1.el7.x86_64",
            "SUSE Liberty Linux 7:mariadb-test-1:5.5.64-1.el7.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 4.9,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "SUSE Liberty Linux 7:mariadb-1:5.5.64-1.el7.x86_64",
            "SUSE Liberty Linux 7:mariadb-bench-1:5.5.64-1.el7.x86_64",
            "SUSE Liberty Linux 7:mariadb-devel-1:5.5.64-1.el7.i686",
            "SUSE Liberty Linux 7:mariadb-devel-1:5.5.64-1.el7.x86_64",
            "SUSE Liberty Linux 7:mariadb-embedded-1:5.5.64-1.el7.i686",
            "SUSE Liberty Linux 7:mariadb-embedded-1:5.5.64-1.el7.x86_64",
            "SUSE Liberty Linux 7:mariadb-embedded-devel-1:5.5.64-1.el7.i686",
            "SUSE Liberty Linux 7:mariadb-embedded-devel-1:5.5.64-1.el7.x86_64",
            "SUSE Liberty Linux 7:mariadb-libs-1:5.5.64-1.el7.i686",
            "SUSE Liberty Linux 7:mariadb-libs-1:5.5.64-1.el7.x86_64",
            "SUSE Liberty Linux 7:mariadb-server-1:5.5.64-1.el7.x86_64",
            "SUSE Liberty Linux 7:mariadb-test-1:5.5.64-1.el7.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2019-08-06T00:00:00Z",
          "details": "important"
        }
      ],
      "title": "CVE-2019-2627"
    }
  ]
}

CVE-2018-3058 (GCVE-0-2018-3058)

Vulnerability from cvelistv5 – Published: 2018-07-18 13:00 – Updated: 2024-10-02 19:54

Summary

Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: MyISAM). Supported versions that are affected are 5.5.60 and prior, 5.6.40 and prior and 5.7.22 and prior. Easily exploitable vulnerability allows low privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of MySQL Server accessible data. CVSS 3.0 Base Score 4.3 (Integrity impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N).

Severity

No CVSS data available.

SSVC

Exploitation: none Automatable: no Technical Impact: partial

CISA Coordinator · CISA-ADP (v2.0.3)

Decision recorded 2024-10-02 18:09 UTC

CWE

Easily exploitable vulnerability allows low privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of MySQL Server accessible data.

Assigner

oracle mitre root

References

12 references

URL	Tags
https://www.debian.org/security/2018/dsa-4341	vendor-advisoryx_refsource_DEBIAN
http://www.oracle.com/technetwork/security-adviso…	x_refsource_CONFIRM
https://usn.ubuntu.com/3725-1/	vendor-advisoryx_refsource_UBUNTU
http://www.securitytracker.com/id/1041294	vdb-entryx_refsource_SECTRACK
https://access.redhat.com/errata/RHSA-2018:3655	vendor-advisoryx_refsource_REDHAT
https://lists.debian.org/debian-lts-announce/2018…	mailing-listx_refsource_MLIST
https://usn.ubuntu.com/3725-2/	vendor-advisoryx_refsource_UBUNTU
https://security.netapp.com/advisory/ntap-2018072…	x_refsource_CONFIRM
https://lists.debian.org/debian-lts-announce/2018…	mailing-listx_refsource_MLIST
http://www.securityfocus.com/bid/104766	vdb-entryx_refsource_BID
https://access.redhat.com/errata/RHSA-2019:1258	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2019:2327	vendor-advisoryx_refsource_REDHAT

Impacted products

1 product

Vendor	Product	Version
Oracle Corporation	MySQL Server	Affected: 5.5.60 and prior Affected: 5.6.40 and prior Affected: 5.7.22 and prior

Date Public

2018-03-27 00:00

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-05T04:36:39.732Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "name": "DSA-4341",
            "tags": [
              "vendor-advisory",
              "x_refsource_DEBIAN",
              "x_transferred"
            ],
            "url": "https://www.debian.org/security/2018/dsa-4341"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://www.oracle.com/technetwork/security-advisory/cpujul2018-4258247.html"
          },
          {
            "name": "USN-3725-1",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "https://usn.ubuntu.com/3725-1/"
          },
          {
            "name": "1041294",
            "tags": [
              "vdb-entry",
              "x_refsource_SECTRACK",
              "x_transferred"
            ],
            "url": "http://www.securitytracker.com/id/1041294"
          },
          {
            "name": "RHSA-2018:3655",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2018:3655"
          },
          {
            "name": "[debian-lts-announce] 20181105 [SECURITY] [DLA 1566-1] mysql-5.5 security update",
            "tags": [
              "mailing-list",
              "x_refsource_MLIST",
              "x_transferred"
            ],
            "url": "https://lists.debian.org/debian-lts-announce/2018/11/msg00004.html"
          },
          {
            "name": "USN-3725-2",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "https://usn.ubuntu.com/3725-2/"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://security.netapp.com/advisory/ntap-20180726-0002/"
          },
          {
            "name": "[debian-lts-announce] 20180831 [SECURITY] [DLA 1488-1] mariadb-10.0 security update",
            "tags": [
              "mailing-list",
              "x_refsource_MLIST",
              "x_transferred"
            ],
            "url": "https://lists.debian.org/debian-lts-announce/2018/08/msg00036.html"
          },
          {
            "name": "104766",
            "tags": [
              "vdb-entry",
              "x_refsource_BID",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/bid/104766"
          },
          {
            "name": "RHSA-2019:1258",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2019:1258"
          },
          {
            "name": "RHSA-2019:2327",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2019:2327"
          }
        ],
        "title": "CVE Program Container"
      },
      {
        "metrics": [
          {
            "other": {
              "content": {
                "id": "CVE-2018-3058",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "partial"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2024-10-02T18:09:26.647710Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2024-10-02T19:54:24.089Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "MySQL Server",
          "vendor": "Oracle Corporation",
          "versions": [
            {
              "status": "affected",
              "version": "5.5.60 and prior"
            },
            {
              "status": "affected",
              "version": "5.6.40 and prior"
            },
            {
              "status": "affected",
              "version": "5.7.22 and prior"
            }
          ]
        }
      ],
      "datePublic": "2018-03-27T00:00:00.000Z",
      "descriptions": [
        {
          "lang": "en",
          "value": "Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: MyISAM). Supported versions that are affected are 5.5.60 and prior, 5.6.40 and prior and 5.7.22 and prior. Easily exploitable vulnerability allows low privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of MySQL Server accessible data. CVSS 3.0 Base Score 4.3 (Integrity impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N)."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "Easily exploitable vulnerability allows low privileged attacker with network access via multiple protocols to compromise MySQL Server.  Successful attacks of this vulnerability can result in  unauthorized update, insert or delete access to some of MySQL Server accessible data.",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2019-08-06T16:06:30.000Z",
        "orgId": "43595867-4340-4103-b7a2-9a5208d29a85",
        "shortName": "oracle"
      },
      "references": [
        {
          "name": "DSA-4341",
          "tags": [
            "vendor-advisory",
            "x_refsource_DEBIAN"
          ],
          "url": "https://www.debian.org/security/2018/dsa-4341"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://www.oracle.com/technetwork/security-advisory/cpujul2018-4258247.html"
        },
        {
          "name": "USN-3725-1",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "https://usn.ubuntu.com/3725-1/"
        },
        {
          "name": "1041294",
          "tags": [
            "vdb-entry",
            "x_refsource_SECTRACK"
          ],
          "url": "http://www.securitytracker.com/id/1041294"
        },
        {
          "name": "RHSA-2018:3655",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2018:3655"
        },
        {
          "name": "[debian-lts-announce] 20181105 [SECURITY] [DLA 1566-1] mysql-5.5 security update",
          "tags": [
            "mailing-list",
            "x_refsource_MLIST"
          ],
          "url": "https://lists.debian.org/debian-lts-announce/2018/11/msg00004.html"
        },
        {
          "name": "USN-3725-2",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "https://usn.ubuntu.com/3725-2/"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://security.netapp.com/advisory/ntap-20180726-0002/"
        },
        {
          "name": "[debian-lts-announce] 20180831 [SECURITY] [DLA 1488-1] mariadb-10.0 security update",
          "tags": [
            "mailing-list",
            "x_refsource_MLIST"
          ],
          "url": "https://lists.debian.org/debian-lts-announce/2018/08/msg00036.html"
        },
        {
          "name": "104766",
          "tags": [
            "vdb-entry",
            "x_refsource_BID"
          ],
          "url": "http://www.securityfocus.com/bid/104766"
        },
        {
          "name": "RHSA-2019:1258",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2019:1258"
        },
        {
          "name": "RHSA-2019:2327",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2019:2327"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "secalert_us@oracle.com",
          "ID": "CVE-2018-3058",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "MySQL Server",
                      "version": {
                        "version_data": [
                          {
                            "version_affected": "=",
                            "version_value": "5.5.60 and prior"
                          },
                          {
                            "version_affected": "=",
                            "version_value": "5.6.40 and prior"
                          },
                          {
                            "version_affected": "=",
                            "version_value": "5.7.22 and prior"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "Oracle Corporation"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: MyISAM). Supported versions that are affected are 5.5.60 and prior, 5.6.40 and prior and 5.7.22 and prior. Easily exploitable vulnerability allows low privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of MySQL Server accessible data. CVSS 3.0 Base Score 4.3 (Integrity impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N)."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "Easily exploitable vulnerability allows low privileged attacker with network access via multiple protocols to compromise MySQL Server.  Successful attacks of this vulnerability can result in  unauthorized update, insert or delete access to some of MySQL Server accessible data."
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "DSA-4341",
              "refsource": "DEBIAN",
              "url": "https://www.debian.org/security/2018/dsa-4341"
            },
            {
              "name": "http://www.oracle.com/technetwork/security-advisory/cpujul2018-4258247.html",
              "refsource": "CONFIRM",
              "url": "http://www.oracle.com/technetwork/security-advisory/cpujul2018-4258247.html"
            },
            {
              "name": "USN-3725-1",
              "refsource": "UBUNTU",
              "url": "https://usn.ubuntu.com/3725-1/"
            },
            {
              "name": "1041294",
              "refsource": "SECTRACK",
              "url": "http://www.securitytracker.com/id/1041294"
            },
            {
              "name": "RHSA-2018:3655",
              "refsource": "REDHAT",
              "url": "https://access.redhat.com/errata/RHSA-2018:3655"
            },
            {
              "name": "[debian-lts-announce] 20181105 [SECURITY] [DLA 1566-1] mysql-5.5 security update",
              "refsource": "MLIST",
              "url": "https://lists.debian.org/debian-lts-announce/2018/11/msg00004.html"
            },
            {
              "name": "USN-3725-2",
              "refsource": "UBUNTU",
              "url": "https://usn.ubuntu.com/3725-2/"
            },
            {
              "name": "https://security.netapp.com/advisory/ntap-20180726-0002/",
              "refsource": "CONFIRM",
              "url": "https://security.netapp.com/advisory/ntap-20180726-0002/"
            },
            {
              "name": "[debian-lts-announce] 20180831 [SECURITY] [DLA 1488-1] mariadb-10.0 security update",
              "refsource": "MLIST",
              "url": "https://lists.debian.org/debian-lts-announce/2018/08/msg00036.html"
            },
            {
              "name": "104766",
              "refsource": "BID",
              "url": "http://www.securityfocus.com/bid/104766"
            },
            {
              "name": "RHSA-2019:1258",
              "refsource": "REDHAT",
              "url": "https://access.redhat.com/errata/RHSA-2019:1258"
            },
            {
              "name": "RHSA-2019:2327",
              "refsource": "REDHAT",
              "url": "https://access.redhat.com/errata/RHSA-2019:2327"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "43595867-4340-4103-b7a2-9a5208d29a85",
    "assignerShortName": "oracle",
    "cveId": "CVE-2018-3058",
    "datePublished": "2018-07-18T13:00:00.000Z",
    "dateReserved": "2017-12-15T00:00:00.000Z",
    "dateUpdated": "2024-10-02T19:54:24.089Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

CVE-2018-3063 (GCVE-0-2018-3063)

Vulnerability from cvelistv5 – Published: 2018-07-18 13:00 – Updated: 2024-10-02 19:53

Summary

Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Security: Privileges). Supported versions that are affected are 5.5.60 and prior. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.0 Base Score 4.9 (Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H).

Severity

No CVSS data available.

SSVC

Exploitation: none Automatable: no Technical Impact: partial

CISA Coordinator · CISA-ADP (v2.0.3)

Decision recorded 2024-10-02 18:09 UTC

CWE

Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server.

Assigner

oracle mitre root

References

11 references

URL	Tags
https://www.debian.org/security/2018/dsa-4341	vendor-advisoryx_refsource_DEBIAN
http://www.oracle.com/technetwork/security-adviso…	x_refsource_CONFIRM
https://usn.ubuntu.com/3725-1/	vendor-advisoryx_refsource_UBUNTU
http://www.securitytracker.com/id/1041294	vdb-entryx_refsource_SECTRACK
http://www.securityfocus.com/bid/104786	vdb-entryx_refsource_BID
https://lists.debian.org/debian-lts-announce/2018…	mailing-listx_refsource_MLIST
https://usn.ubuntu.com/3725-2/	vendor-advisoryx_refsource_UBUNTU
https://security.netapp.com/advisory/ntap-2018072…	x_refsource_CONFIRM
https://lists.debian.org/debian-lts-announce/2018…	mailing-listx_refsource_MLIST
https://access.redhat.com/errata/RHSA-2019:1258	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2019:2327	vendor-advisoryx_refsource_REDHAT

Impacted products

1 product

Vendor	Product	Version
Oracle Corporation	MySQL Server	Affected: 5.5.60 and prior

Date Public

2018-03-27 00:00

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-05T04:36:39.671Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "name": "DSA-4341",
            "tags": [
              "vendor-advisory",
              "x_refsource_DEBIAN",
              "x_transferred"
            ],
            "url": "https://www.debian.org/security/2018/dsa-4341"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://www.oracle.com/technetwork/security-advisory/cpujul2018-4258247.html"
          },
          {
            "name": "USN-3725-1",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "https://usn.ubuntu.com/3725-1/"
          },
          {
            "name": "1041294",
            "tags": [
              "vdb-entry",
              "x_refsource_SECTRACK",
              "x_transferred"
            ],
            "url": "http://www.securitytracker.com/id/1041294"
          },
          {
            "name": "104786",
            "tags": [
              "vdb-entry",
              "x_refsource_BID",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/bid/104786"
          },
          {
            "name": "[debian-lts-announce] 20181105 [SECURITY] [DLA 1566-1] mysql-5.5 security update",
            "tags": [
              "mailing-list",
              "x_refsource_MLIST",
              "x_transferred"
            ],
            "url": "https://lists.debian.org/debian-lts-announce/2018/11/msg00004.html"
          },
          {
            "name": "USN-3725-2",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "https://usn.ubuntu.com/3725-2/"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://security.netapp.com/advisory/ntap-20180726-0002/"
          },
          {
            "name": "[debian-lts-announce] 20180831 [SECURITY] [DLA 1488-1] mariadb-10.0 security update",
            "tags": [
              "mailing-list",
              "x_refsource_MLIST",
              "x_transferred"
            ],
            "url": "https://lists.debian.org/debian-lts-announce/2018/08/msg00036.html"
          },
          {
            "name": "RHSA-2019:1258",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2019:1258"
          },
          {
            "name": "RHSA-2019:2327",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2019:2327"
          }
        ],
        "title": "CVE Program Container"
      },
      {
        "metrics": [
          {
            "other": {
              "content": {
                "id": "CVE-2018-3063",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "partial"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2024-10-02T18:09:22.860629Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2024-10-02T19:53:58.151Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "MySQL Server",
          "vendor": "Oracle Corporation",
          "versions": [
            {
              "status": "affected",
              "version": "5.5.60 and prior"
            }
          ]
        }
      ],
      "datePublic": "2018-03-27T00:00:00.000Z",
      "descriptions": [
        {
          "lang": "en",
          "value": "Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Security: Privileges). Supported versions that are affected are 5.5.60 and prior. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.0 Base Score 4.9 (Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H)."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server.  Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server.",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2019-08-06T16:06:29.000Z",
        "orgId": "43595867-4340-4103-b7a2-9a5208d29a85",
        "shortName": "oracle"
      },
      "references": [
        {
          "name": "DSA-4341",
          "tags": [
            "vendor-advisory",
            "x_refsource_DEBIAN"
          ],
          "url": "https://www.debian.org/security/2018/dsa-4341"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://www.oracle.com/technetwork/security-advisory/cpujul2018-4258247.html"
        },
        {
          "name": "USN-3725-1",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "https://usn.ubuntu.com/3725-1/"
        },
        {
          "name": "1041294",
          "tags": [
            "vdb-entry",
            "x_refsource_SECTRACK"
          ],
          "url": "http://www.securitytracker.com/id/1041294"
        },
        {
          "name": "104786",
          "tags": [
            "vdb-entry",
            "x_refsource_BID"
          ],
          "url": "http://www.securityfocus.com/bid/104786"
        },
        {
          "name": "[debian-lts-announce] 20181105 [SECURITY] [DLA 1566-1] mysql-5.5 security update",
          "tags": [
            "mailing-list",
            "x_refsource_MLIST"
          ],
          "url": "https://lists.debian.org/debian-lts-announce/2018/11/msg00004.html"
        },
        {
          "name": "USN-3725-2",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "https://usn.ubuntu.com/3725-2/"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://security.netapp.com/advisory/ntap-20180726-0002/"
        },
        {
          "name": "[debian-lts-announce] 20180831 [SECURITY] [DLA 1488-1] mariadb-10.0 security update",
          "tags": [
            "mailing-list",
            "x_refsource_MLIST"
          ],
          "url": "https://lists.debian.org/debian-lts-announce/2018/08/msg00036.html"
        },
        {
          "name": "RHSA-2019:1258",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2019:1258"
        },
        {
          "name": "RHSA-2019:2327",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2019:2327"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "secalert_us@oracle.com",
          "ID": "CVE-2018-3063",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "MySQL Server",
                      "version": {
                        "version_data": [
                          {
                            "version_affected": "=",
                            "version_value": "5.5.60 and prior"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "Oracle Corporation"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Security: Privileges). Supported versions that are affected are 5.5.60 and prior. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.0 Base Score 4.9 (Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H)."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server.  Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server."
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "DSA-4341",
              "refsource": "DEBIAN",
              "url": "https://www.debian.org/security/2018/dsa-4341"
            },
            {
              "name": "http://www.oracle.com/technetwork/security-advisory/cpujul2018-4258247.html",
              "refsource": "CONFIRM",
              "url": "http://www.oracle.com/technetwork/security-advisory/cpujul2018-4258247.html"
            },
            {
              "name": "USN-3725-1",
              "refsource": "UBUNTU",
              "url": "https://usn.ubuntu.com/3725-1/"
            },
            {
              "name": "1041294",
              "refsource": "SECTRACK",
              "url": "http://www.securitytracker.com/id/1041294"
            },
            {
              "name": "104786",
              "refsource": "BID",
              "url": "http://www.securityfocus.com/bid/104786"
            },
            {
              "name": "[debian-lts-announce] 20181105 [SECURITY] [DLA 1566-1] mysql-5.5 security update",
              "refsource": "MLIST",
              "url": "https://lists.debian.org/debian-lts-announce/2018/11/msg00004.html"
            },
            {
              "name": "USN-3725-2",
              "refsource": "UBUNTU",
              "url": "https://usn.ubuntu.com/3725-2/"
            },
            {
              "name": "https://security.netapp.com/advisory/ntap-20180726-0002/",
              "refsource": "CONFIRM",
              "url": "https://security.netapp.com/advisory/ntap-20180726-0002/"
            },
            {
              "name": "[debian-lts-announce] 20180831 [SECURITY] [DLA 1488-1] mariadb-10.0 security update",
              "refsource": "MLIST",
              "url": "https://lists.debian.org/debian-lts-announce/2018/08/msg00036.html"
            },
            {
              "name": "RHSA-2019:1258",
              "refsource": "REDHAT",
              "url": "https://access.redhat.com/errata/RHSA-2019:1258"
            },
            {
              "name": "RHSA-2019:2327",
              "refsource": "REDHAT",
              "url": "https://access.redhat.com/errata/RHSA-2019:2327"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "43595867-4340-4103-b7a2-9a5208d29a85",
    "assignerShortName": "oracle",
    "cveId": "CVE-2018-3063",
    "datePublished": "2018-07-18T13:00:00.000Z",
    "dateReserved": "2017-12-15T00:00:00.000Z",
    "dateUpdated": "2024-10-02T19:53:58.151Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

CVE-2018-3066 (GCVE-0-2018-3066)

Vulnerability from cvelistv5 – Published: 2018-07-18 13:00 – Updated: 2024-10-02 19:53

Summary

Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Options). Supported versions that are affected are 5.5.60 and prior, 5.6.40 and prior and 5.7.22 and prior. Difficult to exploit vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of MySQL Server accessible data as well as unauthorized read access to a subset of MySQL Server accessible data. CVSS 3.0 Base Score 3.3 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:H/PR:H/UI:N/S:U/C:L/I:L/A:N).

Severity

No CVSS data available.

SSVC

Exploitation: none Automatable: no Technical Impact: partial

CISA Coordinator · CISA-ADP (v2.0.3)

Decision recorded 2024-10-02 18:09 UTC

CWE

Difficult to exploit vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of MySQL Server accessible data as well as unauthorized read access to a subset of MySQL Server accessible data.

Assigner

oracle mitre root

References

12 references

URL	Tags
https://www.debian.org/security/2018/dsa-4341	vendor-advisoryx_refsource_DEBIAN
http://www.oracle.com/technetwork/security-adviso…	x_refsource_CONFIRM
https://usn.ubuntu.com/3725-1/	vendor-advisoryx_refsource_UBUNTU
http://www.securitytracker.com/id/1041294	vdb-entryx_refsource_SECTRACK
https://access.redhat.com/errata/RHSA-2018:3655	vendor-advisoryx_refsource_REDHAT
https://lists.debian.org/debian-lts-announce/2018…	mailing-listx_refsource_MLIST
https://usn.ubuntu.com/3725-2/	vendor-advisoryx_refsource_UBUNTU
https://security.netapp.com/advisory/ntap-2018072…	x_refsource_CONFIRM
https://lists.debian.org/debian-lts-announce/2018…	mailing-listx_refsource_MLIST
http://www.securityfocus.com/bid/104766	vdb-entryx_refsource_BID
https://access.redhat.com/errata/RHSA-2019:1258	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2019:2327	vendor-advisoryx_refsource_REDHAT

Impacted products

1 product

Vendor	Product	Version
Oracle Corporation	MySQL Server	Affected: 5.5.60 and prior Affected: 5.6.40 and prior Affected: 5.7.22 and prior

Date Public

2018-03-27 00:00

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-05T04:36:39.579Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "name": "DSA-4341",
            "tags": [
              "vendor-advisory",
              "x_refsource_DEBIAN",
              "x_transferred"
            ],
            "url": "https://www.debian.org/security/2018/dsa-4341"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://www.oracle.com/technetwork/security-advisory/cpujul2018-4258247.html"
          },
          {
            "name": "USN-3725-1",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "https://usn.ubuntu.com/3725-1/"
          },
          {
            "name": "1041294",
            "tags": [
              "vdb-entry",
              "x_refsource_SECTRACK",
              "x_transferred"
            ],
            "url": "http://www.securitytracker.com/id/1041294"
          },
          {
            "name": "RHSA-2018:3655",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2018:3655"
          },
          {
            "name": "[debian-lts-announce] 20181105 [SECURITY] [DLA 1566-1] mysql-5.5 security update",
            "tags": [
              "mailing-list",
              "x_refsource_MLIST",
              "x_transferred"
            ],
            "url": "https://lists.debian.org/debian-lts-announce/2018/11/msg00004.html"
          },
          {
            "name": "USN-3725-2",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "https://usn.ubuntu.com/3725-2/"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://security.netapp.com/advisory/ntap-20180726-0002/"
          },
          {
            "name": "[debian-lts-announce] 20180831 [SECURITY] [DLA 1488-1] mariadb-10.0 security update",
            "tags": [
              "mailing-list",
              "x_refsource_MLIST",
              "x_transferred"
            ],
            "url": "https://lists.debian.org/debian-lts-announce/2018/08/msg00036.html"
          },
          {
            "name": "104766",
            "tags": [
              "vdb-entry",
              "x_refsource_BID",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/bid/104766"
          },
          {
            "name": "RHSA-2019:1258",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2019:1258"
          },
          {
            "name": "RHSA-2019:2327",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2019:2327"
          }
        ],
        "title": "CVE Program Container"
      },
      {
        "metrics": [
          {
            "other": {
              "content": {
                "id": "CVE-2018-3066",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "partial"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2024-10-02T18:09:19.208478Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2024-10-02T19:53:34.313Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "MySQL Server",
          "vendor": "Oracle Corporation",
          "versions": [
            {
              "status": "affected",
              "version": "5.5.60 and prior"
            },
            {
              "status": "affected",
              "version": "5.6.40 and prior"
            },
            {
              "status": "affected",
              "version": "5.7.22 and prior"
            }
          ]
        }
      ],
      "datePublic": "2018-03-27T00:00:00.000Z",
      "descriptions": [
        {
          "lang": "en",
          "value": "Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Options). Supported versions that are affected are 5.5.60 and prior, 5.6.40 and prior and 5.7.22 and prior. Difficult to exploit vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of MySQL Server accessible data as well as unauthorized read access to a subset of MySQL Server accessible data. CVSS 3.0 Base Score 3.3 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:H/PR:H/UI:N/S:U/C:L/I:L/A:N)."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "Difficult to exploit vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server.  Successful attacks of this vulnerability can result in  unauthorized update, insert or delete access to some of MySQL Server accessible data as well as  unauthorized read access to a subset of MySQL Server accessible data.",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2019-08-06T16:06:30.000Z",
        "orgId": "43595867-4340-4103-b7a2-9a5208d29a85",
        "shortName": "oracle"
      },
      "references": [
        {
          "name": "DSA-4341",
          "tags": [
            "vendor-advisory",
            "x_refsource_DEBIAN"
          ],
          "url": "https://www.debian.org/security/2018/dsa-4341"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://www.oracle.com/technetwork/security-advisory/cpujul2018-4258247.html"
        },
        {
          "name": "USN-3725-1",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "https://usn.ubuntu.com/3725-1/"
        },
        {
          "name": "1041294",
          "tags": [
            "vdb-entry",
            "x_refsource_SECTRACK"
          ],
          "url": "http://www.securitytracker.com/id/1041294"
        },
        {
          "name": "RHSA-2018:3655",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2018:3655"
        },
        {
          "name": "[debian-lts-announce] 20181105 [SECURITY] [DLA 1566-1] mysql-5.5 security update",
          "tags": [
            "mailing-list",
            "x_refsource_MLIST"
          ],
          "url": "https://lists.debian.org/debian-lts-announce/2018/11/msg00004.html"
        },
        {
          "name": "USN-3725-2",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "https://usn.ubuntu.com/3725-2/"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://security.netapp.com/advisory/ntap-20180726-0002/"
        },
        {
          "name": "[debian-lts-announce] 20180831 [SECURITY] [DLA 1488-1] mariadb-10.0 security update",
          "tags": [
            "mailing-list",
            "x_refsource_MLIST"
          ],
          "url": "https://lists.debian.org/debian-lts-announce/2018/08/msg00036.html"
        },
        {
          "name": "104766",
          "tags": [
            "vdb-entry",
            "x_refsource_BID"
          ],
          "url": "http://www.securityfocus.com/bid/104766"
        },
        {
          "name": "RHSA-2019:1258",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2019:1258"
        },
        {
          "name": "RHSA-2019:2327",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2019:2327"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "secalert_us@oracle.com",
          "ID": "CVE-2018-3066",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "MySQL Server",
                      "version": {
                        "version_data": [
                          {
                            "version_affected": "=",
                            "version_value": "5.5.60 and prior"
                          },
                          {
                            "version_affected": "=",
                            "version_value": "5.6.40 and prior"
                          },
                          {
                            "version_affected": "=",
                            "version_value": "5.7.22 and prior"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "Oracle Corporation"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Options). Supported versions that are affected are 5.5.60 and prior, 5.6.40 and prior and 5.7.22 and prior. Difficult to exploit vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of MySQL Server accessible data as well as unauthorized read access to a subset of MySQL Server accessible data. CVSS 3.0 Base Score 3.3 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:H/PR:H/UI:N/S:U/C:L/I:L/A:N)."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "Difficult to exploit vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server.  Successful attacks of this vulnerability can result in  unauthorized update, insert or delete access to some of MySQL Server accessible data as well as  unauthorized read access to a subset of MySQL Server accessible data."
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "DSA-4341",
              "refsource": "DEBIAN",
              "url": "https://www.debian.org/security/2018/dsa-4341"
            },
            {
              "name": "http://www.oracle.com/technetwork/security-advisory/cpujul2018-4258247.html",
              "refsource": "CONFIRM",
              "url": "http://www.oracle.com/technetwork/security-advisory/cpujul2018-4258247.html"
            },
            {
              "name": "USN-3725-1",
              "refsource": "UBUNTU",
              "url": "https://usn.ubuntu.com/3725-1/"
            },
            {
              "name": "1041294",
              "refsource": "SECTRACK",
              "url": "http://www.securitytracker.com/id/1041294"
            },
            {
              "name": "RHSA-2018:3655",
              "refsource": "REDHAT",
              "url": "https://access.redhat.com/errata/RHSA-2018:3655"
            },
            {
              "name": "[debian-lts-announce] 20181105 [SECURITY] [DLA 1566-1] mysql-5.5 security update",
              "refsource": "MLIST",
              "url": "https://lists.debian.org/debian-lts-announce/2018/11/msg00004.html"
            },
            {
              "name": "USN-3725-2",
              "refsource": "UBUNTU",
              "url": "https://usn.ubuntu.com/3725-2/"
            },
            {
              "name": "https://security.netapp.com/advisory/ntap-20180726-0002/",
              "refsource": "CONFIRM",
              "url": "https://security.netapp.com/advisory/ntap-20180726-0002/"
            },
            {
              "name": "[debian-lts-announce] 20180831 [SECURITY] [DLA 1488-1] mariadb-10.0 security update",
              "refsource": "MLIST",
              "url": "https://lists.debian.org/debian-lts-announce/2018/08/msg00036.html"
            },
            {
              "name": "104766",
              "refsource": "BID",
              "url": "http://www.securityfocus.com/bid/104766"
            },
            {
              "name": "RHSA-2019:1258",
              "refsource": "REDHAT",
              "url": "https://access.redhat.com/errata/RHSA-2019:1258"
            },
            {
              "name": "RHSA-2019:2327",
              "refsource": "REDHAT",
              "url": "https://access.redhat.com/errata/RHSA-2019:2327"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "43595867-4340-4103-b7a2-9a5208d29a85",
    "assignerShortName": "oracle",
    "cveId": "CVE-2018-3066",
    "datePublished": "2018-07-18T13:00:00.000Z",
    "dateReserved": "2017-12-15T00:00:00.000Z",
    "dateUpdated": "2024-10-02T19:53:34.313Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

CVE-2018-3081 (GCVE-0-2018-3081)

Vulnerability from cvelistv5 – Published: 2018-07-18 13:00 – Updated: 2024-10-02 19:51

Summary

Vulnerability in the MySQL Client component of Oracle MySQL (subcomponent: Client programs). Supported versions that are affected are 5.5.60 and prior, 5.6.40 and prior, 5.7.22 and prior and 8.0.11 and prior. Difficult to exploit vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Client. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Client as well as unauthorized update, insert or delete access to some of MySQL Client accessible data. CVSS 3.0 Base Score 5.0 (Integrity and Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:H/PR:H/UI:N/S:U/C:N/I:L/A:H).

Severity

No CVSS data available.

SSVC

Exploitation: none Automatable: no Technical Impact: partial

CISA Coordinator · CISA-ADP (v2.0.3)

Decision recorded 2024-10-02 18:09 UTC

CWE

Difficult to exploit vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Client. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Client as well as unauthorized update, insert or delete access to some of MySQL Client accessible data.

Assigner

oracle mitre root

References

11 references

URL	Tags
https://www.debian.org/security/2018/dsa-4341	vendor-advisoryx_refsource_DEBIAN
http://www.oracle.com/technetwork/security-adviso…	x_refsource_CONFIRM
https://usn.ubuntu.com/3725-1/	vendor-advisoryx_refsource_UBUNTU
http://www.securitytracker.com/id/1041294	vdb-entryx_refsource_SECTRACK
http://www.securityfocus.com/bid/104779	vdb-entryx_refsource_BID
https://access.redhat.com/errata/RHSA-2018:3655	vendor-advisoryx_refsource_REDHAT
https://lists.debian.org/debian-lts-announce/2018…	mailing-listx_refsource_MLIST
https://usn.ubuntu.com/3725-2/	vendor-advisoryx_refsource_UBUNTU
https://security.netapp.com/advisory/ntap-2018072…	x_refsource_CONFIRM
https://access.redhat.com/errata/RHSA-2019:1258	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2019:2327	vendor-advisoryx_refsource_REDHAT

Impacted products

1 product

Vendor	Product	Version
Oracle Corporation	MySQL Server	Affected: 5.5.60 and prior Affected: 5.6.40 and prior Affected: 5.7.22 and prior Affected: 8.0.11 and prior

Date Public

2018-03-27 00:00

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-05T04:43:33.760Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "name": "DSA-4341",
            "tags": [
              "vendor-advisory",
              "x_refsource_DEBIAN",
              "x_transferred"
            ],
            "url": "https://www.debian.org/security/2018/dsa-4341"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://www.oracle.com/technetwork/security-advisory/cpujul2018-4258247.html"
          },
          {
            "name": "USN-3725-1",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "https://usn.ubuntu.com/3725-1/"
          },
          {
            "name": "1041294",
            "tags": [
              "vdb-entry",
              "x_refsource_SECTRACK",
              "x_transferred"
            ],
            "url": "http://www.securitytracker.com/id/1041294"
          },
          {
            "name": "104779",
            "tags": [
              "vdb-entry",
              "x_refsource_BID",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/bid/104779"
          },
          {
            "name": "RHSA-2018:3655",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2018:3655"
          },
          {
            "name": "[debian-lts-announce] 20181105 [SECURITY] [DLA 1566-1] mysql-5.5 security update",
            "tags": [
              "mailing-list",
              "x_refsource_MLIST",
              "x_transferred"
            ],
            "url": "https://lists.debian.org/debian-lts-announce/2018/11/msg00004.html"
          },
          {
            "name": "USN-3725-2",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "https://usn.ubuntu.com/3725-2/"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://security.netapp.com/advisory/ntap-20180726-0002/"
          },
          {
            "name": "RHSA-2019:1258",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2019:1258"
          },
          {
            "name": "RHSA-2019:2327",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2019:2327"
          }
        ],
        "title": "CVE Program Container"
      },
      {
        "metrics": [
          {
            "other": {
              "content": {
                "id": "CVE-2018-3081",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "partial"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2024-10-02T18:09:02.676615Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2024-10-02T19:51:23.539Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "MySQL Server",
          "vendor": "Oracle Corporation",
          "versions": [
            {
              "status": "affected",
              "version": "5.5.60 and prior"
            },
            {
              "status": "affected",
              "version": "5.6.40 and prior"
            },
            {
              "status": "affected",
              "version": "5.7.22 and prior"
            },
            {
              "status": "affected",
              "version": "8.0.11 and prior"
            }
          ]
        }
      ],
      "datePublic": "2018-03-27T00:00:00.000Z",
      "descriptions": [
        {
          "lang": "en",
          "value": "Vulnerability in the MySQL Client component of Oracle MySQL (subcomponent: Client programs). Supported versions that are affected are 5.5.60 and prior, 5.6.40 and prior, 5.7.22 and prior and 8.0.11 and prior. Difficult to exploit vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Client. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Client as well as unauthorized update, insert or delete access to some of MySQL Client accessible data. CVSS 3.0 Base Score 5.0 (Integrity and Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:H/PR:H/UI:N/S:U/C:N/I:L/A:H)."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "Difficult to exploit vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Client.  Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Client as well as  unauthorized update, insert or delete access to some of MySQL Client accessible data.",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2019-08-06T16:06:29.000Z",
        "orgId": "43595867-4340-4103-b7a2-9a5208d29a85",
        "shortName": "oracle"
      },
      "references": [
        {
          "name": "DSA-4341",
          "tags": [
            "vendor-advisory",
            "x_refsource_DEBIAN"
          ],
          "url": "https://www.debian.org/security/2018/dsa-4341"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://www.oracle.com/technetwork/security-advisory/cpujul2018-4258247.html"
        },
        {
          "name": "USN-3725-1",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "https://usn.ubuntu.com/3725-1/"
        },
        {
          "name": "1041294",
          "tags": [
            "vdb-entry",
            "x_refsource_SECTRACK"
          ],
          "url": "http://www.securitytracker.com/id/1041294"
        },
        {
          "name": "104779",
          "tags": [
            "vdb-entry",
            "x_refsource_BID"
          ],
          "url": "http://www.securityfocus.com/bid/104779"
        },
        {
          "name": "RHSA-2018:3655",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2018:3655"
        },
        {
          "name": "[debian-lts-announce] 20181105 [SECURITY] [DLA 1566-1] mysql-5.5 security update",
          "tags": [
            "mailing-list",
            "x_refsource_MLIST"
          ],
          "url": "https://lists.debian.org/debian-lts-announce/2018/11/msg00004.html"
        },
        {
          "name": "USN-3725-2",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "https://usn.ubuntu.com/3725-2/"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://security.netapp.com/advisory/ntap-20180726-0002/"
        },
        {
          "name": "RHSA-2019:1258",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2019:1258"
        },
        {
          "name": "RHSA-2019:2327",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2019:2327"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "secalert_us@oracle.com",
          "ID": "CVE-2018-3081",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "MySQL Server",
                      "version": {
                        "version_data": [
                          {
                            "version_affected": "=",
                            "version_value": "5.5.60 and prior"
                          },
                          {
                            "version_affected": "=",
                            "version_value": "5.6.40 and prior"
                          },
                          {
                            "version_affected": "=",
                            "version_value": "5.7.22 and prior"
                          },
                          {
                            "version_affected": "=",
                            "version_value": "8.0.11 and prior"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "Oracle Corporation"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "Vulnerability in the MySQL Client component of Oracle MySQL (subcomponent: Client programs). Supported versions that are affected are 5.5.60 and prior, 5.6.40 and prior, 5.7.22 and prior and 8.0.11 and prior. Difficult to exploit vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Client. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Client as well as unauthorized update, insert or delete access to some of MySQL Client accessible data. CVSS 3.0 Base Score 5.0 (Integrity and Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:H/PR:H/UI:N/S:U/C:N/I:L/A:H)."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "Difficult to exploit vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Client.  Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Client as well as  unauthorized update, insert or delete access to some of MySQL Client accessible data."
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "DSA-4341",
              "refsource": "DEBIAN",
              "url": "https://www.debian.org/security/2018/dsa-4341"
            },
            {
              "name": "http://www.oracle.com/technetwork/security-advisory/cpujul2018-4258247.html",
              "refsource": "CONFIRM",
              "url": "http://www.oracle.com/technetwork/security-advisory/cpujul2018-4258247.html"
            },
            {
              "name": "USN-3725-1",
              "refsource": "UBUNTU",
              "url": "https://usn.ubuntu.com/3725-1/"
            },
            {
              "name": "1041294",
              "refsource": "SECTRACK",
              "url": "http://www.securitytracker.com/id/1041294"
            },
            {
              "name": "104779",
              "refsource": "BID",
              "url": "http://www.securityfocus.com/bid/104779"
            },
            {
              "name": "RHSA-2018:3655",
              "refsource": "REDHAT",
              "url": "https://access.redhat.com/errata/RHSA-2018:3655"
            },
            {
              "name": "[debian-lts-announce] 20181105 [SECURITY] [DLA 1566-1] mysql-5.5 security update",
              "refsource": "MLIST",
              "url": "https://lists.debian.org/debian-lts-announce/2018/11/msg00004.html"
            },
            {
              "name": "USN-3725-2",
              "refsource": "UBUNTU",
              "url": "https://usn.ubuntu.com/3725-2/"
            },
            {
              "name": "https://security.netapp.com/advisory/ntap-20180726-0002/",
              "refsource": "CONFIRM",
              "url": "https://security.netapp.com/advisory/ntap-20180726-0002/"
            },
            {
              "name": "RHSA-2019:1258",
              "refsource": "REDHAT",
              "url": "https://access.redhat.com/errata/RHSA-2019:1258"
            },
            {
              "name": "RHSA-2019:2327",
              "refsource": "REDHAT",
              "url": "https://access.redhat.com/errata/RHSA-2019:2327"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "43595867-4340-4103-b7a2-9a5208d29a85",
    "assignerShortName": "oracle",
    "cveId": "CVE-2018-3081",
    "datePublished": "2018-07-18T13:00:00.000Z",
    "dateReserved": "2017-12-15T00:00:00.000Z",
    "dateUpdated": "2024-10-02T19:51:23.539Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

CVE-2018-3282 (GCVE-0-2018-3282)

Vulnerability from cvelistv5 – Published: 2018-10-17 01:00 – Updated: 2024-10-02 19:21

Summary

Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Storage Engines). Supported versions that are affected are 5.5.61 and prior, 5.6.41 and prior, 5.7.23 and prior and 8.0.12 and prior. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.0 Base Score 4.9 (Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H).

Severity

No CVSS data available.

SSVC

Exploitation: none Automatable: no Technical Impact: partial

CISA Coordinator · CISA-ADP (v2.0.3)

Decision recorded 2024-10-02 18:05 UTC

CWE

Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server.

Assigner

oracle mitre root

References

13 references

URL	Tags
https://www.debian.org/security/2018/dsa-4341	vendor-advisoryx_refsource_DEBIAN
https://usn.ubuntu.com/3799-2/	vendor-advisoryx_refsource_UBUNTU
http://www.securitytracker.com/id/1041888	vdb-entryx_refsource_SECTRACK
https://access.redhat.com/errata/RHSA-2018:3655	vendor-advisoryx_refsource_REDHAT
https://lists.debian.org/debian-lts-announce/2018…	mailing-listx_refsource_MLIST
https://usn.ubuntu.com/3799-1/	vendor-advisoryx_refsource_UBUNTU
https://lists.debian.org/debian-lts-announce/2018…	mailing-listx_refsource_MLIST
http://www.oracle.com/technetwork/security-adviso…	x_refsource_CONFIRM
https://security.netapp.com/advisory/ntap-2018101…	x_refsource_CONFIRM
http://www.securityfocus.com/bid/105610	vdb-entryx_refsource_BID
https://access.redhat.com/errata/RHSA-2019:1258	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2019:2327	vendor-advisoryx_refsource_REDHAT
https://security.gentoo.org/glsa/201908-24	vendor-advisoryx_refsource_GENTOO

Impacted products

1 product

Vendor	Product	Version
Oracle Corporation	MySQL Server	Affected: 5.5.61 and prior Affected: 5.6.41 and prior Affected: 5.7.23 and prior Affected: 8.0.12 and prior

Date Public

2018-10-16 00:00

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-05T04:43:35.166Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "name": "DSA-4341",
            "tags": [
              "vendor-advisory",
              "x_refsource_DEBIAN",
              "x_transferred"
            ],
            "url": "https://www.debian.org/security/2018/dsa-4341"
          },
          {
            "name": "USN-3799-2",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "https://usn.ubuntu.com/3799-2/"
          },
          {
            "name": "1041888",
            "tags": [
              "vdb-entry",
              "x_refsource_SECTRACK",
              "x_transferred"
            ],
            "url": "http://www.securitytracker.com/id/1041888"
          },
          {
            "name": "RHSA-2018:3655",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2018:3655"
          },
          {
            "name": "[debian-lts-announce] 20181107 [SECURITY] [DLA 1570-1] mariadb-10.0 security update",
            "tags": [
              "mailing-list",
              "x_refsource_MLIST",
              "x_transferred"
            ],
            "url": "https://lists.debian.org/debian-lts-announce/2018/11/msg00007.html"
          },
          {
            "name": "USN-3799-1",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "https://usn.ubuntu.com/3799-1/"
          },
          {
            "name": "[debian-lts-announce] 20181105 [SECURITY] [DLA 1566-1] mysql-5.5 security update",
            "tags": [
              "mailing-list",
              "x_refsource_MLIST",
              "x_transferred"
            ],
            "url": "https://lists.debian.org/debian-lts-announce/2018/11/msg00004.html"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://www.oracle.com/technetwork/security-advisory/cpuoct2018-4428296.html"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://security.netapp.com/advisory/ntap-20181018-0002/"
          },
          {
            "name": "105610",
            "tags": [
              "vdb-entry",
              "x_refsource_BID",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/bid/105610"
          },
          {
            "name": "RHSA-2019:1258",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2019:1258"
          },
          {
            "name": "RHSA-2019:2327",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2019:2327"
          },
          {
            "name": "GLSA-201908-24",
            "tags": [
              "vendor-advisory",
              "x_refsource_GENTOO",
              "x_transferred"
            ],
            "url": "https://security.gentoo.org/glsa/201908-24"
          }
        ],
        "title": "CVE Program Container"
      },
      {
        "metrics": [
          {
            "other": {
              "content": {
                "id": "CVE-2018-3282",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "partial"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2024-10-02T18:05:29.192709Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2024-10-02T19:21:16.132Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "MySQL Server",
          "vendor": "Oracle Corporation",
          "versions": [
            {
              "status": "affected",
              "version": "5.5.61 and prior"
            },
            {
              "status": "affected",
              "version": "5.6.41 and prior"
            },
            {
              "status": "affected",
              "version": "5.7.23 and prior"
            },
            {
              "status": "affected",
              "version": "8.0.12 and prior"
            }
          ]
        }
      ],
      "datePublic": "2018-10-16T00:00:00.000Z",
      "descriptions": [
        {
          "lang": "en",
          "value": "Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Storage Engines). Supported versions that are affected are 5.5.61 and prior, 5.6.41 and prior, 5.7.23 and prior and 8.0.12 and prior. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.0 Base Score 4.9 (Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H)."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server.  Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server.",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2019-08-18T04:06:08.000Z",
        "orgId": "43595867-4340-4103-b7a2-9a5208d29a85",
        "shortName": "oracle"
      },
      "references": [
        {
          "name": "DSA-4341",
          "tags": [
            "vendor-advisory",
            "x_refsource_DEBIAN"
          ],
          "url": "https://www.debian.org/security/2018/dsa-4341"
        },
        {
          "name": "USN-3799-2",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "https://usn.ubuntu.com/3799-2/"
        },
        {
          "name": "1041888",
          "tags": [
            "vdb-entry",
            "x_refsource_SECTRACK"
          ],
          "url": "http://www.securitytracker.com/id/1041888"
        },
        {
          "name": "RHSA-2018:3655",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2018:3655"
        },
        {
          "name": "[debian-lts-announce] 20181107 [SECURITY] [DLA 1570-1] mariadb-10.0 security update",
          "tags": [
            "mailing-list",
            "x_refsource_MLIST"
          ],
          "url": "https://lists.debian.org/debian-lts-announce/2018/11/msg00007.html"
        },
        {
          "name": "USN-3799-1",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "https://usn.ubuntu.com/3799-1/"
        },
        {
          "name": "[debian-lts-announce] 20181105 [SECURITY] [DLA 1566-1] mysql-5.5 security update",
          "tags": [
            "mailing-list",
            "x_refsource_MLIST"
          ],
          "url": "https://lists.debian.org/debian-lts-announce/2018/11/msg00004.html"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://www.oracle.com/technetwork/security-advisory/cpuoct2018-4428296.html"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://security.netapp.com/advisory/ntap-20181018-0002/"
        },
        {
          "name": "105610",
          "tags": [
            "vdb-entry",
            "x_refsource_BID"
          ],
          "url": "http://www.securityfocus.com/bid/105610"
        },
        {
          "name": "RHSA-2019:1258",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2019:1258"
        },
        {
          "name": "RHSA-2019:2327",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2019:2327"
        },
        {
          "name": "GLSA-201908-24",
          "tags": [
            "vendor-advisory",
            "x_refsource_GENTOO"
          ],
          "url": "https://security.gentoo.org/glsa/201908-24"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "secalert_us@oracle.com",
          "ID": "CVE-2018-3282",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "MySQL Server",
                      "version": {
                        "version_data": [
                          {
                            "version_affected": "=",
                            "version_value": "5.5.61 and prior"
                          },
                          {
                            "version_affected": "=",
                            "version_value": "5.6.41 and prior"
                          },
                          {
                            "version_affected": "=",
                            "version_value": "5.7.23 and prior"
                          },
                          {
                            "version_affected": "=",
                            "version_value": "8.0.12 and prior"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "Oracle Corporation"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Storage Engines). Supported versions that are affected are 5.5.61 and prior, 5.6.41 and prior, 5.7.23 and prior and 8.0.12 and prior. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.0 Base Score 4.9 (Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H)."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server.  Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server."
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "DSA-4341",
              "refsource": "DEBIAN",
              "url": "https://www.debian.org/security/2018/dsa-4341"
            },
            {
              "name": "USN-3799-2",
              "refsource": "UBUNTU",
              "url": "https://usn.ubuntu.com/3799-2/"
            },
            {
              "name": "1041888",
              "refsource": "SECTRACK",
              "url": "http://www.securitytracker.com/id/1041888"
            },
            {
              "name": "RHSA-2018:3655",
              "refsource": "REDHAT",
              "url": "https://access.redhat.com/errata/RHSA-2018:3655"
            },
            {
              "name": "[debian-lts-announce] 20181107 [SECURITY] [DLA 1570-1] mariadb-10.0 security update",
              "refsource": "MLIST",
              "url": "https://lists.debian.org/debian-lts-announce/2018/11/msg00007.html"
            },
            {
              "name": "USN-3799-1",
              "refsource": "UBUNTU",
              "url": "https://usn.ubuntu.com/3799-1/"
            },
            {
              "name": "[debian-lts-announce] 20181105 [SECURITY] [DLA 1566-1] mysql-5.5 security update",
              "refsource": "MLIST",
              "url": "https://lists.debian.org/debian-lts-announce/2018/11/msg00004.html"
            },
            {
              "name": "http://www.oracle.com/technetwork/security-advisory/cpuoct2018-4428296.html",
              "refsource": "CONFIRM",
              "url": "http://www.oracle.com/technetwork/security-advisory/cpuoct2018-4428296.html"
            },
            {
              "name": "https://security.netapp.com/advisory/ntap-20181018-0002/",
              "refsource": "CONFIRM",
              "url": "https://security.netapp.com/advisory/ntap-20181018-0002/"
            },
            {
              "name": "105610",
              "refsource": "BID",
              "url": "http://www.securityfocus.com/bid/105610"
            },
            {
              "name": "RHSA-2019:1258",
              "refsource": "REDHAT",
              "url": "https://access.redhat.com/errata/RHSA-2019:1258"
            },
            {
              "name": "RHSA-2019:2327",
              "refsource": "REDHAT",
              "url": "https://access.redhat.com/errata/RHSA-2019:2327"
            },
            {
              "name": "GLSA-201908-24",
              "refsource": "GENTOO",
              "url": "https://security.gentoo.org/glsa/201908-24"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "43595867-4340-4103-b7a2-9a5208d29a85",
    "assignerShortName": "oracle",
    "cveId": "CVE-2018-3282",
    "datePublished": "2018-10-17T01:00:00.000Z",
    "dateReserved": "2017-12-15T00:00:00.000Z",
    "dateUpdated": "2024-10-02T19:21:16.132Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

CVE-2019-2503 (GCVE-0-2019-2503)

Vulnerability from cvelistv5 – Published: 2019-01-16 19:00 – Updated: 2024-10-02 16:06

Summary

Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Connection Handling). Supported versions that are affected are 5.6.42 and prior, 5.7.24 and prior and 8.0.13 and prior. Difficult to exploit vulnerability allows low privileged attacker with access to the physical communication segment attached to the hardware where the MySQL Server executes to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all MySQL Server accessible data and unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.0 Base Score 6.4 (Confidentiality and Availability impacts). CVSS Vector: (CVSS:3.0/AV:A/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:H).

Severity

No CVSS data available.

SSVC

Exploitation: none Automatable: no Technical Impact: partial

CISA Coordinator · CISA-ADP (v2.0.3)

Decision recorded 2024-10-02 14:02 UTC

CWE

Difficult to exploit vulnerability allows low privileged attacker with access to the physical communication segment attached to the hardware where the MySQL Server executes to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all MySQL Server accessible data and unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server.

Assigner

oracle mitre root

References

8 references

URL	Tags
http://www.oracle.com/technetwork/security-adviso…	x_refsource_CONFIRM
http://www.securityfocus.com/bid/106626	vdb-entryx_refsource_BID
https://usn.ubuntu.com/3867-1/	vendor-advisoryx_refsource_UBUNTU
https://security.netapp.com/advisory/ntap-2019011…	x_refsource_CONFIRM
https://access.redhat.com/errata/RHSA-2019:1258	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2019:2327	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2019:2484	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2019:2511	vendor-advisoryx_refsource_REDHAT

Impacted products

1 product

Vendor	Product	Version
Oracle Corporation	MySQL Server	Affected: 5.6.42 and prior Affected: 5.7.24 and prior Affected: 8.0.13 and prior

Date Public

2019-01-15 00:00

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-04T18:49:47.990Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://www.oracle.com/technetwork/security-advisory/cpujan2019-5072801.html"
          },
          {
            "name": "106626",
            "tags": [
              "vdb-entry",
              "x_refsource_BID",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/bid/106626"
          },
          {
            "name": "USN-3867-1",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "https://usn.ubuntu.com/3867-1/"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://security.netapp.com/advisory/ntap-20190118-0002/"
          },
          {
            "name": "RHSA-2019:1258",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2019:1258"
          },
          {
            "name": "RHSA-2019:2327",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2019:2327"
          },
          {
            "name": "RHSA-2019:2484",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2019:2484"
          },
          {
            "name": "RHSA-2019:2511",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2019:2511"
          }
        ],
        "title": "CVE Program Container"
      },
      {
        "metrics": [
          {
            "other": {
              "content": {
                "id": "CVE-2019-2503",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "partial"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2024-10-02T14:02:11.428687Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2024-10-02T16:06:10.633Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "MySQL Server",
          "vendor": "Oracle Corporation",
          "versions": [
            {
              "status": "affected",
              "version": "5.6.42 and prior"
            },
            {
              "status": "affected",
              "version": "5.7.24 and prior"
            },
            {
              "status": "affected",
              "version": "8.0.13 and prior"
            }
          ]
        }
      ],
      "datePublic": "2019-01-15T00:00:00.000Z",
      "descriptions": [
        {
          "lang": "en",
          "value": "Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Connection Handling). Supported versions that are affected are 5.6.42 and prior, 5.7.24 and prior and 8.0.13 and prior. Difficult to exploit vulnerability allows low privileged attacker with access to the physical communication segment attached to the hardware where the MySQL Server executes to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all MySQL Server accessible data and unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.0 Base Score 6.4 (Confidentiality and Availability impacts). CVSS Vector: (CVSS:3.0/AV:A/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:H)."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "Difficult to exploit vulnerability allows low privileged attacker with access to the physical communication segment attached to the hardware where the MySQL Server executes to compromise MySQL Server.  Successful attacks of this vulnerability can result in  unauthorized access to critical data or complete access to all MySQL Server accessible data and unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server.",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2019-08-15T21:06:13.000Z",
        "orgId": "43595867-4340-4103-b7a2-9a5208d29a85",
        "shortName": "oracle"
      },
      "references": [
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://www.oracle.com/technetwork/security-advisory/cpujan2019-5072801.html"
        },
        {
          "name": "106626",
          "tags": [
            "vdb-entry",
            "x_refsource_BID"
          ],
          "url": "http://www.securityfocus.com/bid/106626"
        },
        {
          "name": "USN-3867-1",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "https://usn.ubuntu.com/3867-1/"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://security.netapp.com/advisory/ntap-20190118-0002/"
        },
        {
          "name": "RHSA-2019:1258",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2019:1258"
        },
        {
          "name": "RHSA-2019:2327",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2019:2327"
        },
        {
          "name": "RHSA-2019:2484",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2019:2484"
        },
        {
          "name": "RHSA-2019:2511",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2019:2511"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "secalert_us@oracle.com",
          "ID": "CVE-2019-2503",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "MySQL Server",
                      "version": {
                        "version_data": [
                          {
                            "version_affected": "=",
                            "version_value": "5.6.42 and prior"
                          },
                          {
                            "version_affected": "=",
                            "version_value": "5.7.24 and prior"
                          },
                          {
                            "version_affected": "=",
                            "version_value": "8.0.13 and prior"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "Oracle Corporation"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Connection Handling). Supported versions that are affected are 5.6.42 and prior, 5.7.24 and prior and 8.0.13 and prior. Difficult to exploit vulnerability allows low privileged attacker with access to the physical communication segment attached to the hardware where the MySQL Server executes to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all MySQL Server accessible data and unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.0 Base Score 6.4 (Confidentiality and Availability impacts). CVSS Vector: (CVSS:3.0/AV:A/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:H)."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "Difficult to exploit vulnerability allows low privileged attacker with access to the physical communication segment attached to the hardware where the MySQL Server executes to compromise MySQL Server.  Successful attacks of this vulnerability can result in  unauthorized access to critical data or complete access to all MySQL Server accessible data and unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server."
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "http://www.oracle.com/technetwork/security-advisory/cpujan2019-5072801.html",
              "refsource": "CONFIRM",
              "url": "http://www.oracle.com/technetwork/security-advisory/cpujan2019-5072801.html"
            },
            {
              "name": "106626",
              "refsource": "BID",
              "url": "http://www.securityfocus.com/bid/106626"
            },
            {
              "name": "USN-3867-1",
              "refsource": "UBUNTU",
              "url": "https://usn.ubuntu.com/3867-1/"
            },
            {
              "name": "https://security.netapp.com/advisory/ntap-20190118-0002/",
              "refsource": "CONFIRM",
              "url": "https://security.netapp.com/advisory/ntap-20190118-0002/"
            },
            {
              "name": "RHSA-2019:1258",
              "refsource": "REDHAT",
              "url": "https://access.redhat.com/errata/RHSA-2019:1258"
            },
            {
              "name": "RHSA-2019:2327",
              "refsource": "REDHAT",
              "url": "https://access.redhat.com/errata/RHSA-2019:2327"
            },
            {
              "name": "RHSA-2019:2484",
              "refsource": "REDHAT",
              "url": "https://access.redhat.com/errata/RHSA-2019:2484"
            },
            {
              "name": "RHSA-2019:2511",
              "refsource": "REDHAT",
              "url": "https://access.redhat.com/errata/RHSA-2019:2511"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "43595867-4340-4103-b7a2-9a5208d29a85",
    "assignerShortName": "oracle",
    "cveId": "CVE-2019-2503",
    "datePublished": "2019-01-16T19:00:00.000Z",
    "dateReserved": "2018-12-14T00:00:00.000Z",
    "dateUpdated": "2024-10-02T16:06:10.633Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

CVE-2019-2529 (GCVE-0-2019-2529)

Vulnerability from cvelistv5 – Published: 2019-01-16 19:00 – Updated: 2024-10-02 16:03

Summary

Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Optimizer). Supported versions that are affected are 5.6.42 and prior, 5.7.24 and prior and 8.0.13 and prior. Easily exploitable vulnerability allows low privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.0 Base Score 6.5 (Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H).

Severity

No CVSS data available.

SSVC

Exploitation: none Automatable: no Technical Impact: partial

CISA Coordinator · CISA-ADP (v2.0.3)

Decision recorded 2024-10-02 14:01 UTC

CWE

Easily exploitable vulnerability allows low privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server.

Assigner

oracle mitre root

References

9 references

URL	Tags
http://www.securityfocus.com/bid/106619	vdb-entryx_refsource_BID
https://lists.debian.org/debian-lts-announce/2019…	mailing-listx_refsource_MLIST
http://www.oracle.com/technetwork/security-adviso…	x_refsource_CONFIRM
https://usn.ubuntu.com/3867-1/	vendor-advisoryx_refsource_UBUNTU
https://security.netapp.com/advisory/ntap-2019011…	x_refsource_CONFIRM
https://access.redhat.com/errata/RHSA-2019:2327	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2019:2484	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2019:2511	vendor-advisoryx_refsource_REDHAT
https://security.gentoo.org/glsa/201908-24	vendor-advisoryx_refsource_GENTOO

Impacted products

1 product

Vendor	Product	Version
Oracle Corporation	MySQL Server	Affected: 5.6.42 and prior Affected: 5.7.24 and prior Affected: 8.0.13 and prior

Date Public

2018-05-23 00:00

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-04T18:49:48.220Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "name": "106619",
            "tags": [
              "vdb-entry",
              "x_refsource_BID",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/bid/106619"
          },
          {
            "name": "[debian-lts-announce] 20190201 [SECURITY] [DLA 1655-1] mariadb-10.0 security update",
            "tags": [
              "mailing-list",
              "x_refsource_MLIST",
              "x_transferred"
            ],
            "url": "https://lists.debian.org/debian-lts-announce/2019/02/msg00000.html"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://www.oracle.com/technetwork/security-advisory/cpujan2019-5072801.html"
          },
          {
            "name": "USN-3867-1",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "https://usn.ubuntu.com/3867-1/"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://security.netapp.com/advisory/ntap-20190118-0002/"
          },
          {
            "name": "RHSA-2019:2327",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2019:2327"
          },
          {
            "name": "RHSA-2019:2484",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2019:2484"
          },
          {
            "name": "RHSA-2019:2511",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2019:2511"
          },
          {
            "name": "GLSA-201908-24",
            "tags": [
              "vendor-advisory",
              "x_refsource_GENTOO",
              "x_transferred"
            ],
            "url": "https://security.gentoo.org/glsa/201908-24"
          }
        ],
        "title": "CVE Program Container"
      },
      {
        "metrics": [
          {
            "other": {
              "content": {
                "id": "CVE-2019-2529",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "partial"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2024-10-02T14:01:52.138703Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2024-10-02T16:03:36.060Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "MySQL Server",
          "vendor": "Oracle Corporation",
          "versions": [
            {
              "status": "affected",
              "version": "5.6.42 and prior"
            },
            {
              "status": "affected",
              "version": "5.7.24 and prior"
            },
            {
              "status": "affected",
              "version": "8.0.13 and prior"
            }
          ]
        }
      ],
      "datePublic": "2018-05-23T00:00:00.000Z",
      "descriptions": [
        {
          "lang": "en",
          "value": "Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Optimizer). Supported versions that are affected are 5.6.42 and prior, 5.7.24 and prior and 8.0.13 and prior. Easily exploitable vulnerability allows low privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.0 Base Score 6.5 (Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H)."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "Easily exploitable vulnerability allows low privileged attacker with network access via multiple protocols to compromise MySQL Server.  Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server.",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2019-08-18T04:06:09.000Z",
        "orgId": "43595867-4340-4103-b7a2-9a5208d29a85",
        "shortName": "oracle"
      },
      "references": [
        {
          "name": "106619",
          "tags": [
            "vdb-entry",
            "x_refsource_BID"
          ],
          "url": "http://www.securityfocus.com/bid/106619"
        },
        {
          "name": "[debian-lts-announce] 20190201 [SECURITY] [DLA 1655-1] mariadb-10.0 security update",
          "tags": [
            "mailing-list",
            "x_refsource_MLIST"
          ],
          "url": "https://lists.debian.org/debian-lts-announce/2019/02/msg00000.html"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://www.oracle.com/technetwork/security-advisory/cpujan2019-5072801.html"
        },
        {
          "name": "USN-3867-1",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "https://usn.ubuntu.com/3867-1/"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://security.netapp.com/advisory/ntap-20190118-0002/"
        },
        {
          "name": "RHSA-2019:2327",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2019:2327"
        },
        {
          "name": "RHSA-2019:2484",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2019:2484"
        },
        {
          "name": "RHSA-2019:2511",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2019:2511"
        },
        {
          "name": "GLSA-201908-24",
          "tags": [
            "vendor-advisory",
            "x_refsource_GENTOO"
          ],
          "url": "https://security.gentoo.org/glsa/201908-24"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "secalert_us@oracle.com",
          "ID": "CVE-2019-2529",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "MySQL Server",
                      "version": {
                        "version_data": [
                          {
                            "version_affected": "=",
                            "version_value": "5.6.42 and prior"
                          },
                          {
                            "version_affected": "=",
                            "version_value": "5.7.24 and prior"
                          },
                          {
                            "version_affected": "=",
                            "version_value": "8.0.13 and prior"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "Oracle Corporation"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Optimizer). Supported versions that are affected are 5.6.42 and prior, 5.7.24 and prior and 8.0.13 and prior. Easily exploitable vulnerability allows low privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.0 Base Score 6.5 (Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H)."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "Easily exploitable vulnerability allows low privileged attacker with network access via multiple protocols to compromise MySQL Server.  Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server."
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "106619",
              "refsource": "BID",
              "url": "http://www.securityfocus.com/bid/106619"
            },
            {
              "name": "[debian-lts-announce] 20190201 [SECURITY] [DLA 1655-1] mariadb-10.0 security update",
              "refsource": "MLIST",
              "url": "https://lists.debian.org/debian-lts-announce/2019/02/msg00000.html"
            },
            {
              "name": "http://www.oracle.com/technetwork/security-advisory/cpujan2019-5072801.html",
              "refsource": "CONFIRM",
              "url": "http://www.oracle.com/technetwork/security-advisory/cpujan2019-5072801.html"
            },
            {
              "name": "USN-3867-1",
              "refsource": "UBUNTU",
              "url": "https://usn.ubuntu.com/3867-1/"
            },
            {
              "name": "https://security.netapp.com/advisory/ntap-20190118-0002/",
              "refsource": "CONFIRM",
              "url": "https://security.netapp.com/advisory/ntap-20190118-0002/"
            },
            {
              "name": "RHSA-2019:2327",
              "refsource": "REDHAT",
              "url": "https://access.redhat.com/errata/RHSA-2019:2327"
            },
            {
              "name": "RHSA-2019:2484",
              "refsource": "REDHAT",
              "url": "https://access.redhat.com/errata/RHSA-2019:2484"
            },
            {
              "name": "RHSA-2019:2511",
              "refsource": "REDHAT",
              "url": "https://access.redhat.com/errata/RHSA-2019:2511"
            },
            {
              "name": "GLSA-201908-24",
              "refsource": "GENTOO",
              "url": "https://security.gentoo.org/glsa/201908-24"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "43595867-4340-4103-b7a2-9a5208d29a85",
    "assignerShortName": "oracle",
    "cveId": "CVE-2019-2529",
    "datePublished": "2019-01-16T19:00:00.000Z",
    "dateReserved": "2018-12-14T00:00:00.000Z",
    "dateUpdated": "2024-10-02T16:03:36.060Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

CVE-2019-2614 (GCVE-0-2019-2614)

Vulnerability from cvelistv5 – Published: 2019-04-23 18:16 – Updated: 2024-10-02 15:46

Summary

Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Replication). Supported versions that are affected are 5.6.43 and prior, 5.7.25 and prior and 8.0.15 and prior. Difficult to exploit vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.0 Base Score 4.4 (Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:H).

Severity

No CVSS data available.

SSVC

Exploitation: none Automatable: no Technical Impact: partial

CISA Coordinator · CISA-ADP (v2.0.3)

Decision recorded 2024-10-02 14:00 UTC

CWE

Difficult to exploit vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server.

Assigner

oracle mitre root

References

14 references

URL	Tags
http://www.oracle.com/technetwork/security-adviso…	x_refsource_MISC
https://support.f5.com/csp/article/K52514501	x_refsource_CONFIRM
https://usn.ubuntu.com/3957-1/	vendor-advisoryx_refsource_UBUNTU
https://usn.ubuntu.com/3957-2/	vendor-advisoryx_refsource_UBUNTU
https://usn.ubuntu.com/3957-3/	vendor-advisoryx_refsource_UBUNTU
https://access.redhat.com/errata/RHSA-2019:2327	vendor-advisoryx_refsource_REDHAT
https://usn.ubuntu.com/4070-3/	vendor-advisoryx_refsource_UBUNTU
https://access.redhat.com/errata/RHSA-2019:2484	vendor-advisoryx_refsource_REDHAT
http://lists.opensuse.org/opensuse-security-annou…	vendor-advisoryx_refsource_SUSE
http://lists.opensuse.org/opensuse-security-annou…	vendor-advisoryx_refsource_SUSE
https://access.redhat.com/errata/RHSA-2019:2511	vendor-advisoryx_refsource_REDHAT
https://lists.fedoraproject.org/archives/list/pac…	vendor-advisoryx_refsource_FEDORA
https://lists.fedoraproject.org/archives/list/pac…	vendor-advisoryx_refsource_FEDORA
https://access.redhat.com/errata/RHSA-2019:3708	vendor-advisoryx_refsource_REDHAT

Impacted products

1 product

Vendor	Product	Version
Oracle Corporation	MySQL Server	Affected: 5.6.43 and prior Affected: 5.7.25 and prior Affected: 8.0.15 and prior

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-04T18:56:44.781Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "http://www.oracle.com/technetwork/security-advisory/cpuapr2019-5072813.html"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://support.f5.com/csp/article/K52514501"
          },
          {
            "name": "USN-3957-1",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "https://usn.ubuntu.com/3957-1/"
          },
          {
            "name": "USN-3957-2",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "https://usn.ubuntu.com/3957-2/"
          },
          {
            "name": "USN-3957-3",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "https://usn.ubuntu.com/3957-3/"
          },
          {
            "name": "RHSA-2019:2327",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2019:2327"
          },
          {
            "name": "USN-4070-3",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "https://usn.ubuntu.com/4070-3/"
          },
          {
            "name": "RHSA-2019:2484",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2019:2484"
          },
          {
            "name": "openSUSE-SU-2019:1913",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2019-08/msg00035.html"
          },
          {
            "name": "openSUSE-SU-2019:1915",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2019-08/msg00032.html"
          },
          {
            "name": "RHSA-2019:2511",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2019:2511"
          },
          {
            "name": "FEDORA-2019-c106e46a95",
            "tags": [
              "vendor-advisory",
              "x_refsource_FEDORA",
              "x_transferred"
            ],
            "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/CN3JPT5ICOAWQNPFVPVLLYR4TQIX4MXP/"
          },
          {
            "name": "FEDORA-2019-96516ce0ac",
            "tags": [
              "vendor-advisory",
              "x_refsource_FEDORA",
              "x_transferred"
            ],
            "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/A55N3HZ3JZBXHQMGTUHY63FVTDU5ILEV/"
          },
          {
            "name": "RHSA-2019:3708",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2019:3708"
          }
        ],
        "title": "CVE Program Container"
      },
      {
        "metrics": [
          {
            "other": {
              "content": {
                "id": "CVE-2019-2614",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "partial"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2024-10-02T14:00:44.058591Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2024-10-02T15:46:24.984Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "MySQL Server",
          "vendor": "Oracle Corporation",
          "versions": [
            {
              "status": "affected",
              "version": "5.6.43 and prior"
            },
            {
              "status": "affected",
              "version": "5.7.25 and prior"
            },
            {
              "status": "affected",
              "version": "8.0.15 and prior"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Replication). Supported versions that are affected are 5.6.43 and prior, 5.7.25 and prior and 8.0.15 and prior. Difficult to exploit vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.0 Base Score 4.4 (Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:H)."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "Difficult to exploit vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server.  Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server.",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2019-11-06T00:07:48.000Z",
        "orgId": "43595867-4340-4103-b7a2-9a5208d29a85",
        "shortName": "oracle"
      },
      "references": [
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "http://www.oracle.com/technetwork/security-advisory/cpuapr2019-5072813.html"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://support.f5.com/csp/article/K52514501"
        },
        {
          "name": "USN-3957-1",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "https://usn.ubuntu.com/3957-1/"
        },
        {
          "name": "USN-3957-2",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "https://usn.ubuntu.com/3957-2/"
        },
        {
          "name": "USN-3957-3",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "https://usn.ubuntu.com/3957-3/"
        },
        {
          "name": "RHSA-2019:2327",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2019:2327"
        },
        {
          "name": "USN-4070-3",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "https://usn.ubuntu.com/4070-3/"
        },
        {
          "name": "RHSA-2019:2484",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2019:2484"
        },
        {
          "name": "openSUSE-SU-2019:1913",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2019-08/msg00035.html"
        },
        {
          "name": "openSUSE-SU-2019:1915",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2019-08/msg00032.html"
        },
        {
          "name": "RHSA-2019:2511",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2019:2511"
        },
        {
          "name": "FEDORA-2019-c106e46a95",
          "tags": [
            "vendor-advisory",
            "x_refsource_FEDORA"
          ],
          "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/CN3JPT5ICOAWQNPFVPVLLYR4TQIX4MXP/"
        },
        {
          "name": "FEDORA-2019-96516ce0ac",
          "tags": [
            "vendor-advisory",
            "x_refsource_FEDORA"
          ],
          "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/A55N3HZ3JZBXHQMGTUHY63FVTDU5ILEV/"
        },
        {
          "name": "RHSA-2019:3708",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2019:3708"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "secalert_us@oracle.com",
          "ID": "CVE-2019-2614",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "MySQL Server",
                      "version": {
                        "version_data": [
                          {
                            "version_affected": "=",
                            "version_value": "5.6.43 and prior"
                          },
                          {
                            "version_affected": "=",
                            "version_value": "5.7.25 and prior"
                          },
                          {
                            "version_affected": "=",
                            "version_value": "8.0.15 and prior"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "Oracle Corporation"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Replication). Supported versions that are affected are 5.6.43 and prior, 5.7.25 and prior and 8.0.15 and prior. Difficult to exploit vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.0 Base Score 4.4 (Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:H)."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "Difficult to exploit vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server.  Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server."
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "http://www.oracle.com/technetwork/security-advisory/cpuapr2019-5072813.html",
              "refsource": "MISC",
              "url": "http://www.oracle.com/technetwork/security-advisory/cpuapr2019-5072813.html"
            },
            {
              "name": "https://support.f5.com/csp/article/K52514501",
              "refsource": "CONFIRM",
              "url": "https://support.f5.com/csp/article/K52514501"
            },
            {
              "name": "USN-3957-1",
              "refsource": "UBUNTU",
              "url": "https://usn.ubuntu.com/3957-1/"
            },
            {
              "name": "USN-3957-2",
              "refsource": "UBUNTU",
              "url": "https://usn.ubuntu.com/3957-2/"
            },
            {
              "name": "USN-3957-3",
              "refsource": "UBUNTU",
              "url": "https://usn.ubuntu.com/3957-3/"
            },
            {
              "name": "RHSA-2019:2327",
              "refsource": "REDHAT",
              "url": "https://access.redhat.com/errata/RHSA-2019:2327"
            },
            {
              "name": "USN-4070-3",
              "refsource": "UBUNTU",
              "url": "https://usn.ubuntu.com/4070-3/"
            },
            {
              "name": "RHSA-2019:2484",
              "refsource": "REDHAT",
              "url": "https://access.redhat.com/errata/RHSA-2019:2484"
            },
            {
              "name": "openSUSE-SU-2019:1913",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2019-08/msg00035.html"
            },
            {
              "name": "openSUSE-SU-2019:1915",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2019-08/msg00032.html"
            },
            {
              "name": "RHSA-2019:2511",
              "refsource": "REDHAT",
              "url": "https://access.redhat.com/errata/RHSA-2019:2511"
            },
            {
              "name": "FEDORA-2019-c106e46a95",
              "refsource": "FEDORA",
              "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/CN3JPT5ICOAWQNPFVPVLLYR4TQIX4MXP/"
            },
            {
              "name": "FEDORA-2019-96516ce0ac",
              "refsource": "FEDORA",
              "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/A55N3HZ3JZBXHQMGTUHY63FVTDU5ILEV/"
            },
            {
              "name": "RHSA-2019:3708",
              "refsource": "REDHAT",
              "url": "https://access.redhat.com/errata/RHSA-2019:3708"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "43595867-4340-4103-b7a2-9a5208d29a85",
    "assignerShortName": "oracle",
    "cveId": "CVE-2019-2614",
    "datePublished": "2019-04-23T18:16:41.000Z",
    "dateReserved": "2018-12-14T00:00:00.000Z",
    "dateUpdated": "2024-10-02T15:46:24.984Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

CVE-2019-2627 (GCVE-0-2019-2627)

Vulnerability from cvelistv5 – Published: 2019-04-23 18:16 – Updated: 2024-10-02 15:45

Summary

Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Security: Privileges). Supported versions that are affected are 5.6.43 and prior, 5.7.25 and prior and 8.0.15 and prior. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.0 Base Score 4.9 (Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H).

Severity

No CVSS data available.

SSVC

Exploitation: none Automatable: no Technical Impact: partial

CISA Coordinator · CISA-ADP (v2.0.3)

Decision recorded 2024-10-02 14:00 UTC

CWE

Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server.

Assigner

oracle mitre root

References

12 references

URL	Tags
http://www.oracle.com/technetwork/security-adviso…	x_refsource_MISC
https://support.f5.com/csp/article/K32798641	x_refsource_CONFIRM
https://usn.ubuntu.com/3957-1/	vendor-advisoryx_refsource_UBUNTU
https://usn.ubuntu.com/3957-2/	vendor-advisoryx_refsource_UBUNTU
https://usn.ubuntu.com/3957-3/	vendor-advisoryx_refsource_UBUNTU
https://access.redhat.com/errata/RHSA-2019:2327	vendor-advisoryx_refsource_REDHAT
https://usn.ubuntu.com/4070-3/	vendor-advisoryx_refsource_UBUNTU
https://access.redhat.com/errata/RHSA-2019:2484	vendor-advisoryx_refsource_REDHAT
http://lists.opensuse.org/opensuse-security-annou…	vendor-advisoryx_refsource_SUSE
http://lists.opensuse.org/opensuse-security-annou…	vendor-advisoryx_refsource_SUSE
https://access.redhat.com/errata/RHSA-2019:2511	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2019:3708	vendor-advisoryx_refsource_REDHAT

Impacted products

1 product

Vendor	Product	Version
Oracle Corporation	MySQL Server	Affected: 5.6.43 and prior Affected: 5.7.25 and prior Affected: 8.0.15 and prior

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-04T18:56:44.706Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "http://www.oracle.com/technetwork/security-advisory/cpuapr2019-5072813.html"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://support.f5.com/csp/article/K32798641"
          },
          {
            "name": "USN-3957-1",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "https://usn.ubuntu.com/3957-1/"
          },
          {
            "name": "USN-3957-2",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "https://usn.ubuntu.com/3957-2/"
          },
          {
            "name": "USN-3957-3",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "https://usn.ubuntu.com/3957-3/"
          },
          {
            "name": "RHSA-2019:2327",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2019:2327"
          },
          {
            "name": "USN-4070-3",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "https://usn.ubuntu.com/4070-3/"
          },
          {
            "name": "RHSA-2019:2484",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2019:2484"
          },
          {
            "name": "openSUSE-SU-2019:1913",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2019-08/msg00035.html"
          },
          {
            "name": "openSUSE-SU-2019:1915",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2019-08/msg00032.html"
          },
          {
            "name": "RHSA-2019:2511",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2019:2511"
          },
          {
            "name": "RHSA-2019:3708",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2019:3708"
          }
        ],
        "title": "CVE Program Container"
      },
      {
        "metrics": [
          {
            "other": {
              "content": {
                "id": "CVE-2019-2627",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "partial"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2024-10-02T14:00:31.512592Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2024-10-02T15:45:07.208Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "MySQL Server",
          "vendor": "Oracle Corporation",
          "versions": [
            {
              "status": "affected",
              "version": "5.6.43 and prior"
            },
            {
              "status": "affected",
              "version": "5.7.25 and prior"
            },
            {
              "status": "affected",
              "version": "8.0.15 and prior"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Security: Privileges). Supported versions that are affected are 5.6.43 and prior, 5.7.25 and prior and 8.0.15 and prior. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.0 Base Score 4.9 (Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H)."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server.  Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server.",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2019-11-06T00:07:47.000Z",
        "orgId": "43595867-4340-4103-b7a2-9a5208d29a85",
        "shortName": "oracle"
      },
      "references": [
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "http://www.oracle.com/technetwork/security-advisory/cpuapr2019-5072813.html"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://support.f5.com/csp/article/K32798641"
        },
        {
          "name": "USN-3957-1",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "https://usn.ubuntu.com/3957-1/"
        },
        {
          "name": "USN-3957-2",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "https://usn.ubuntu.com/3957-2/"
        },
        {
          "name": "USN-3957-3",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "https://usn.ubuntu.com/3957-3/"
        },
        {
          "name": "RHSA-2019:2327",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2019:2327"
        },
        {
          "name": "USN-4070-3",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "https://usn.ubuntu.com/4070-3/"
        },
        {
          "name": "RHSA-2019:2484",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2019:2484"
        },
        {
          "name": "openSUSE-SU-2019:1913",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2019-08/msg00035.html"
        },
        {
          "name": "openSUSE-SU-2019:1915",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2019-08/msg00032.html"
        },
        {
          "name": "RHSA-2019:2511",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2019:2511"
        },
        {
          "name": "RHSA-2019:3708",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2019:3708"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "secalert_us@oracle.com",
          "ID": "CVE-2019-2627",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "MySQL Server",
                      "version": {
                        "version_data": [
                          {
                            "version_affected": "=",
                            "version_value": "5.6.43 and prior"
                          },
                          {
                            "version_affected": "=",
                            "version_value": "5.7.25 and prior"
                          },
                          {
                            "version_affected": "=",
                            "version_value": "8.0.15 and prior"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "Oracle Corporation"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Security: Privileges). Supported versions that are affected are 5.6.43 and prior, 5.7.25 and prior and 8.0.15 and prior. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.0 Base Score 4.9 (Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H)."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server.  Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server."
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "http://www.oracle.com/technetwork/security-advisory/cpuapr2019-5072813.html",
              "refsource": "MISC",
              "url": "http://www.oracle.com/technetwork/security-advisory/cpuapr2019-5072813.html"
            },
            {
              "name": "https://support.f5.com/csp/article/K32798641",
              "refsource": "CONFIRM",
              "url": "https://support.f5.com/csp/article/K32798641"
            },
            {
              "name": "USN-3957-1",
              "refsource": "UBUNTU",
              "url": "https://usn.ubuntu.com/3957-1/"
            },
            {
              "name": "USN-3957-2",
              "refsource": "UBUNTU",
              "url": "https://usn.ubuntu.com/3957-2/"
            },
            {
              "name": "USN-3957-3",
              "refsource": "UBUNTU",
              "url": "https://usn.ubuntu.com/3957-3/"
            },
            {
              "name": "RHSA-2019:2327",
              "refsource": "REDHAT",
              "url": "https://access.redhat.com/errata/RHSA-2019:2327"
            },
            {
              "name": "USN-4070-3",
              "refsource": "UBUNTU",
              "url": "https://usn.ubuntu.com/4070-3/"
            },
            {
              "name": "RHSA-2019:2484",
              "refsource": "REDHAT",
              "url": "https://access.redhat.com/errata/RHSA-2019:2484"
            },
            {
              "name": "openSUSE-SU-2019:1913",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2019-08/msg00035.html"
            },
            {
              "name": "openSUSE-SU-2019:1915",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2019-08/msg00032.html"
            },
            {
              "name": "RHSA-2019:2511",
              "refsource": "REDHAT",
              "url": "https://access.redhat.com/errata/RHSA-2019:2511"
            },
            {
              "name": "RHSA-2019:3708",
              "refsource": "REDHAT",
              "url": "https://access.redhat.com/errata/RHSA-2019:3708"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "43595867-4340-4103-b7a2-9a5208d29a85",
    "assignerShortName": "oracle",
    "cveId": "CVE-2019-2627",
    "datePublished": "2019-04-23T18:16:41.000Z",
    "dateReserved": "2018-12-14T00:00:00.000Z",
    "dateUpdated": "2024-10-02T15:45:07.208Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

CVE-2020-14550 (GCVE-0-2020-14550)

Vulnerability from cvelistv5 – Published: 2020-07-15 17:34 – Updated: 2024-09-27 18:41

Summary

Vulnerability in the MySQL Client product of Oracle MySQL (component: C API). Supported versions that are affected are 5.6.48 and prior, 5.7.30 and prior and 8.0.20 and prior. Difficult to exploit vulnerability allows low privileged attacker with network access via multiple protocols to compromise MySQL Client. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Client. CVSS 3.1 Base Score 5.3 (Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H).

Severity

5.3 (Medium)


                        
                          CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H

SSVC

Exploitation: none Automatable: no Technical Impact: partial

CISA Coordinator · CISA-ADP (v2.0.3)

Decision recorded 2024-09-27 17:59 UTC

CWE

Difficult to exploit vulnerability allows low privileged attacker with network access via multiple protocols to compromise MySQL Client. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Client.

Assigner

oracle mitre root

References

7 references

URL	Tags
https://www.oracle.com/security-alerts/cpujul2020.html	x_refsource_MISC
https://usn.ubuntu.com/4441-1/	vendor-advisoryx_refsource_UBUNTU
https://lists.fedoraproject.org/archives/list/pac…	vendor-advisoryx_refsource_FEDORA
https://lists.fedoraproject.org/archives/list/pac…	vendor-advisoryx_refsource_FEDORA
https://lists.fedoraproject.org/archives/list/pac…	vendor-advisoryx_refsource_FEDORA
https://security.gentoo.org/glsa/202105-27	vendor-advisoryx_refsource_GENTOO
https://security.netapp.com/advisory/ntap-2021062…	x_refsource_CONFIRM

Impacted products

1 product

Vendor	Product	Version
Oracle Corporation	MySQL Server	Affected: 5.6.48 and prior Affected: 5.7.30 and prior Affected: 8.0.20 and prior

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-04T12:46:34.686Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "https://www.oracle.com/security-alerts/cpujul2020.html"
          },
          {
            "name": "USN-4441-1",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "https://usn.ubuntu.com/4441-1/"
          },
          {
            "name": "FEDORA-2020-9c27be9396",
            "tags": [
              "vendor-advisory",
              "x_refsource_FEDORA",
              "x_transferred"
            ],
            "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/CAI7GRYZ5265JVKHC6VXI57MNJDDB63C/"
          },
          {
            "name": "FEDORA-2020-d5b2e71a17",
            "tags": [
              "vendor-advisory",
              "x_refsource_FEDORA",
              "x_transferred"
            ],
            "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/HYQPCHGCVKFS3H226QQKZFQP56JYOQ3T/"
          },
          {
            "name": "FEDORA-2020-77b95c868f",
            "tags": [
              "vendor-advisory",
              "x_refsource_FEDORA",
              "x_transferred"
            ],
            "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/SA2XMR2ZY2BPR3VLTDVLNV74JL7TA7KL/"
          },
          {
            "name": "GLSA-202105-27",
            "tags": [
              "vendor-advisory",
              "x_refsource_GENTOO",
              "x_transferred"
            ],
            "url": "https://security.gentoo.org/glsa/202105-27"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://security.netapp.com/advisory/ntap-20210622-0001/"
          }
        ],
        "title": "CVE Program Container"
      },
      {
        "metrics": [
          {
            "other": {
              "content": {
                "id": "CVE-2020-14550",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "partial"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2024-09-27T17:59:32.126577Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2024-09-27T18:41:49.876Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "MySQL Server",
          "vendor": "Oracle Corporation",
          "versions": [
            {
              "status": "affected",
              "version": "5.6.48 and prior"
            },
            {
              "status": "affected",
              "version": "5.7.30 and prior"
            },
            {
              "status": "affected",
              "version": "8.0.20 and prior"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "Vulnerability in the MySQL Client product of Oracle MySQL (component: C API). Supported versions that are affected are 5.6.48 and prior, 5.7.30 and prior and 8.0.20 and prior. Difficult to exploit vulnerability allows low privileged attacker with network access via multiple protocols to compromise MySQL Client. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Client. CVSS 3.1 Base Score 5.3 (Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H)."
        }
      ],
      "metrics": [
        {
          "cvssV3_1": {
            "attackComplexity": "HIGH",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 5.3,
            "baseSeverity": "MEDIUM",
            "confidentialityImpact": "NONE",
            "integrityImpact": "NONE",
            "privilegesRequired": "LOW",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.1"
          }
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "Difficult to exploit vulnerability allows low privileged attacker with network access via multiple protocols to compromise MySQL Client.  Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Client.",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2021-06-22T08:06:37.000Z",
        "orgId": "43595867-4340-4103-b7a2-9a5208d29a85",
        "shortName": "oracle"
      },
      "references": [
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://www.oracle.com/security-alerts/cpujul2020.html"
        },
        {
          "name": "USN-4441-1",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "https://usn.ubuntu.com/4441-1/"
        },
        {
          "name": "FEDORA-2020-9c27be9396",
          "tags": [
            "vendor-advisory",
            "x_refsource_FEDORA"
          ],
          "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/CAI7GRYZ5265JVKHC6VXI57MNJDDB63C/"
        },
        {
          "name": "FEDORA-2020-d5b2e71a17",
          "tags": [
            "vendor-advisory",
            "x_refsource_FEDORA"
          ],
          "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/HYQPCHGCVKFS3H226QQKZFQP56JYOQ3T/"
        },
        {
          "name": "FEDORA-2020-77b95c868f",
          "tags": [
            "vendor-advisory",
            "x_refsource_FEDORA"
          ],
          "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/SA2XMR2ZY2BPR3VLTDVLNV74JL7TA7KL/"
        },
        {
          "name": "GLSA-202105-27",
          "tags": [
            "vendor-advisory",
            "x_refsource_GENTOO"
          ],
          "url": "https://security.gentoo.org/glsa/202105-27"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://security.netapp.com/advisory/ntap-20210622-0001/"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "secalert_us@oracle.com",
          "ID": "CVE-2020-14550",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "MySQL Server",
                      "version": {
                        "version_data": [
                          {
                            "version_affected": "=",
                            "version_value": "5.6.48 and prior"
                          },
                          {
                            "version_affected": "=",
                            "version_value": "5.7.30 and prior"
                          },
                          {
                            "version_affected": "=",
                            "version_value": "8.0.20 and prior"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "Oracle Corporation"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "Vulnerability in the MySQL Client product of Oracle MySQL (component: C API). Supported versions that are affected are 5.6.48 and prior, 5.7.30 and prior and 8.0.20 and prior. Difficult to exploit vulnerability allows low privileged attacker with network access via multiple protocols to compromise MySQL Client. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Client. CVSS 3.1 Base Score 5.3 (Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H)."
            }
          ]
        },
        "impact": {
          "cvss": {
            "baseScore": "5.3",
            "vectorString": "CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.1"
          }
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "Difficult to exploit vulnerability allows low privileged attacker with network access via multiple protocols to compromise MySQL Client.  Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Client."
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "https://www.oracle.com/security-alerts/cpujul2020.html",
              "refsource": "MISC",
              "url": "https://www.oracle.com/security-alerts/cpujul2020.html"
            },
            {
              "name": "USN-4441-1",
              "refsource": "UBUNTU",
              "url": "https://usn.ubuntu.com/4441-1/"
            },
            {
              "name": "FEDORA-2020-9c27be9396",
              "refsource": "FEDORA",
              "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/CAI7GRYZ5265JVKHC6VXI57MNJDDB63C/"
            },
            {
              "name": "FEDORA-2020-d5b2e71a17",
              "refsource": "FEDORA",
              "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/HYQPCHGCVKFS3H226QQKZFQP56JYOQ3T/"
            },
            {
              "name": "FEDORA-2020-77b95c868f",
              "refsource": "FEDORA",
              "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/SA2XMR2ZY2BPR3VLTDVLNV74JL7TA7KL/"
            },
            {
              "name": "GLSA-202105-27",
              "refsource": "GENTOO",
              "url": "https://security.gentoo.org/glsa/202105-27"
            },
            {
              "name": "https://security.netapp.com/advisory/ntap-20210622-0001/",
              "refsource": "CONFIRM",
              "url": "https://security.netapp.com/advisory/ntap-20210622-0001/"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "43595867-4340-4103-b7a2-9a5208d29a85",
    "assignerShortName": "oracle",
    "cveId": "CVE-2020-14550",
    "datePublished": "2020-07-15T17:34:26.000Z",
    "dateReserved": "2020-06-19T00:00:00.000Z",
    "dateUpdated": "2024-09-27T18:41:49.876Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

Sightings

Author	Source	Type	Date	Other

Nomenclature

Seen: The vulnerability was mentioned, discussed, or observed by the user.
Confirmed: The vulnerability has been validated from an analyst's perspective.
Published Proof of Concept: A public proof of concept is available for this vulnerability.
Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
Not confirmed: The user expressed doubt about the validity of the vulnerability.
Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.

The MITRE ATT&CK techniques below are AI-generated suggestions, inferred from the description of the vulnerability by the CIRCL/vulnerability-attack-technique-classification-roberta-base model, served locally by ML-Gateway. They have not been verified by an analyst and are provided for guidance only.
The approach is described in our paper Mapping CVEs to MITRE ATT&CK Techniques: A Curated Gold-Set Classifier and the Limits of LLM-Assisted Label Expansion.
Browse all ATT&CK techniques and the vulnerabilities related to each.

Related by attack behaviour

Vulnerabilities whose description is nearest to this one in the vector space of the CIRCL/vulnerability-attack-technique-biencoder model. This is a similarity search over the bi-encoder space (plain cosine), not a classification, and it has no measured accuracy.

Action not permitted

RHSA-2019:2327

CVE-2018-3058 (GCVE-0-2018-3058)

CVE-2018-3063 (GCVE-0-2018-3063)

CVE-2018-3066 (GCVE-0-2018-3066)

CVE-2018-3081 (GCVE-0-2018-3081)

CVE-2018-3282 (GCVE-0-2018-3282)

CVE-2019-2503 (GCVE-0-2019-2503)

CVE-2019-2529 (GCVE-0-2019-2529)

CVE-2019-2614 (GCVE-0-2019-2614)

CVE-2019-2627 (GCVE-0-2019-2627)

CVE-2020-14550 (GCVE-0-2020-14550)

Tags

Sightings

Nomenclature

Related by attack behaviour