Lucene search

OracleCVE-2018-2585

HistoryJan 18, 2018 - 2:29 a.m.

CVE-2018-2585

2018-01-1802:29:18

oracle

web.nvd.nist.gov

cve-2018-2585

oracle

mysql

connectors

vulnerability

unauthorized access

dos

nvd

cvss 3.0

cve

CVSS2

7.8

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:N/I:N/A:C

CVSS3

7.5

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

AI Score

6.8

Confidence

High

EPSS

0.003

Percentile

65.1%

JSON

Vulnerability in the MySQL Connectors component of Oracle MySQL (subcomponent: Connector/Net). Supported versions that are affected are 6.9.9 and prior and 6.10.4 and prior. Easily exploitable vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise MySQL Connectors. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Connectors. CVSS 3.0 Base Score 7.5 (Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H).

Affected configurations

Nvd

Vulners

Node

oraclemysql_connector\/netRange6.9.0–6.9.9

oraclemysql_connector\/netRange6.10.0–6.10.4

VendorProductVersionCPE
oraclemysql_connector\/net*cpe:2.3:a:oracle:mysql_connector\/net:*:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
oracle	mysql_connector\/net	*	cpe:2.3:a:oracle:mysql_connector\/net::::::::

CNA Affected

[
  {
    "product": "MySQL Connectors",
    "vendor": "Oracle Corporation",
    "versions": [
      {
        "status": "affected",
        "version": "6.9.9 and prior"
      },
      {
        "status": "affected",
        "version": "6.10.4 and prior"
      }
    ]
  }
]

References

www.oracle.com/technetwork/security-advisory/cpujan2018-3236628.html

www.securityfocus.com/bid/102674

www.securitytracker.com/id/1040216

security.netapp.com/advisory/ntap-20180117-0002/

CVSS2

7.8

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:N/I:N/A:C

CVSS3

7.5

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

AI Score

6.8

Confidence

High

EPSS

0.003

Percentile

65.1%

JSON

Related for CVE-2018-2585