CVE-2018-3060

🗓️ 18 Jul 2018 13:00:00Reported by oracleType

cve🔗 web.nvd.nist.gov📰️ 3 Media mentions👁 484 Views

Vulnerability in Oracle MySQL (InnoDB subcomponent) allows high privileged network attacker to compromise server, leading to unauthorized data access and server crashes

Reporter	Title	Published	Views	Family All 233
IBM Security Bulletins	Security Bulletin: IBM Security Guardium is affected by a publicly disclosed vulnerability from Oracle MySQL	12 Feb 201921:20	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple security vulnerabilities have been identified in Oracle MySQL, which is a supported topology database of IBM Tivoli Network Manager IP Edition.	28 Jun 202322:06	–	ibm
Tenable Nessus	MySQL 5.7.x < 5.7.23 Multiple Vulnerabilities (July 2018 CPU)	25 Apr 201900:00	–	nessus
Tenable Nessus	MySQL 8.0.x < 8.0.12 Multiple Vulnerabilities (July 2018 CPU)	25 Apr 201900:00	–	nessus
Tenable Nessus	Amazon Linux AMI : mysql57 (ALAS-2018-1070)	24 Aug 201800:00	–	nessus
Tenable Nessus	Fedora 27 : community-mysql (2018-3a3c660bfa)	12 Sep 201800:00	–	nessus
Tenable Nessus	Fedora 28 : 3:mariadb (2018-77e610115a)	3 Jan 201900:00	–	nessus
Tenable Nessus	Fedora 27 : 3:mariadb (2018-d1c4a4ca50)	4 Sep 201800:00	–	nessus
Tenable Nessus	Fedora 28 : community-mysql (2018-f67fda3db6)	3 Jan 201900:00	–	nessus
Tenable Nessus	FreeBSD : MySQL -- multiple vulnerabilities (909be51b-9b3b-11e8-add2-b499baebfeaf)	9 Aug 201800:00	–	nessus

NVD

Vulners

Node

oracle mysqlRange5.7.0–5.7.22

oracle mysqlRange8.0.0–8.0.11

Node

netapp oncommand_insightMatch-

netapp oncommand_workflow_automationMatch-

netapp snapcenterMatch-

netapp storage_automation_storeMatch-

Node

canonical ubuntu_linuxMatch14.04lts

canonical ubuntu_linuxMatch16.04lts

canonical ubuntu_linuxMatch18.04lts

Node

mariadb mariadbRange10.2.0–10.2.17

mariadb mariadbRange10.3.0–10.3.9

[
  {
    "product": "MySQL Server",
    "vendor": "Oracle Corporation",
    "versions": [
      {
        "status": "affected",
        "version": "5.7.22 and prior"
      },
      {
        "status": "affected",
        "version": "8.0.11 and prior"
      }
    ]
  }
]

Source	Link
access	www.access.redhat.com/errata/RHSA-2018:3655
securityfocus	www.securityfocus.com/bid/104769
oracle	www.oracle.com/technetwork/security-advisory/cpujul2018-4258247.html
usn	www.usn.ubuntu.com/3725-1/
security	www.security.netapp.com/advisory/ntap-20180726-0002/
access	www.access.redhat.com/errata/RHSA-2019:1258
securitytracker	www.securitytracker.com/id/1041294

21 Nov 2024 04:05Current

6.3Medium risk

Vulners AI Score6.3

CVSS 25.5

CVSS 3.16.5

EPSS0.00128

SSVC