CVE-2018-2585

2018-01-1802:00:00

oracle

www.cve.org

AI Score

6.8

Confidence

High

EPSS

0.003

Percentile

65.1%

JSON

Vulnerability in the MySQL Connectors component of Oracle MySQL (subcomponent: Connector/Net). Supported versions that are affected are 6.9.9 and prior and 6.10.4 and prior. Easily exploitable vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise MySQL Connectors. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Connectors. CVSS 3.0 Base Score 7.5 (Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H).

CNA Affected

[
  {
    "product": "MySQL Connectors",
    "vendor": "Oracle Corporation",
    "versions": [
      {
        "status": "affected",
        "version": "6.9.9 and prior"
      },
      {
        "status": "affected",
        "version": "6.10.4 and prior"
      }
    ]
  }
]