Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
redhatRedHatRHSA-2018:1254
HistoryApr 26, 2018 - 6:59 a.m.

(RHSA-2018:1254) Moderate: rh-mysql56-mysql security update

2018-04-2606:59:23
access.redhat.com
96

7.7 High

CVSS3

Attack Vector

LOCAL

Attack Complexity

HIGH

Privileges Required

NONE

User Interaction

REQUIRED

Scope

CHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H

6.8 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

SINGLE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

COMPLETE

AV:N/AC:L/Au:S/C:N/I:N/A:C

0.003 Low

EPSS

Percentile

68.2%

JSON

MySQL is a multi-user, multi-threaded SQL database server. It consists of the MySQL server daemon, mysqld, and many client programs.

The following packages have been upgraded to a later upstream version: rh-mysql56-mysql (5.6.40). (BZ#1571242)

Security Fix(es):

  • mysql: Server: Replication unspecified vulnerability (CPU Apr 2018) (CVE-2018-2755)

  • mysql: Server: Security: Privileges unspecified vulnerability (CPU Apr 2018) (CVE-2018-2758)

  • mysql: Client programs unspecified vulnerability (CPU Apr 2018) (CVE-2018-2761)

  • mysql: InnoDB unspecified vulnerability (CPU Apr 2018) (CVE-2018-2766)

  • mysql: Server: Locking unspecified vulnerability (CPU Apr 2018) (CVE-2018-2771)

  • mysql: Client programs unspecified vulnerability (CPU Apr 2018) (CVE-2018-2773)

  • mysql: Server: Optimizer unspecified vulnerability (CPU Apr 2018) (CVE-2018-2781)

  • mysql: InnoDB unspecified vulnerability (CPU Apr 2018) (CVE-2018-2782)

  • mysql: InnoDB unspecified vulnerability (CPU Apr 2018) (CVE-2018-2784)

  • mysql: InnoDB unspecified vulnerability (CPU Apr 2018) (CVE-2018-2787)

  • mysql: GIS Extension unspecified vulnerability (CPU Apr 2018) (CVE-2018-2805)

  • mysql: Server: DDL unspecified vulnerability (CPU Apr 2018) (CVE-2018-2813)

  • mysql: Server: DDL unspecified vulnerability (CPU Apr 2018) (CVE-2018-2817)

  • mysql: Server : Security : Privileges unspecified vulnerability (CPU Apr 2018) (CVE-2018-2818)

  • mysql: InnoDB unspecified vulnerability (CPU Apr 2018) (CVE-2018-2819)

For more details about the security issue(s), including the impact, a CVSS score, and other related information, refer to the CVE page(s) listed in the References section.

OSVersionArchitecturePackageVersionFilename
RedHat6x86_64rh-mysql56-mysql-server< 5.6.40-1.el6rh-mysql56-mysql-server-5.6.40-1.el6.x86_64.rpm
RedHat7x86_64rh-mysql56-mysql-server< 5.6.40-1.el7rh-mysql56-mysql-server-5.6.40-1.el7.x86_64.rpm
RedHat7x86_64rh-mysql56-mysql-bench< 5.6.40-1.el7rh-mysql56-mysql-bench-5.6.40-1.el7.x86_64.rpm
RedHat6x86_64rh-mysql56-mysql-devel< 5.6.40-1.el6rh-mysql56-mysql-devel-5.6.40-1.el6.x86_64.rpm
RedHat6x86_64rh-mysql56-mysql< 5.6.40-1.el6rh-mysql56-mysql-5.6.40-1.el6.x86_64.rpm
RedHat7x86_64rh-mysql56-mysql-errmsg< 5.6.40-1.el7rh-mysql56-mysql-errmsg-5.6.40-1.el7.x86_64.rpm
RedHat7x86_64rh-mysql56-mysql-common< 5.6.40-1.el7rh-mysql56-mysql-common-5.6.40-1.el7.x86_64.rpm
RedHat6x86_64rh-mysql56-mysql-test< 5.6.40-1.el6rh-mysql56-mysql-test-5.6.40-1.el6.x86_64.rpm
RedHat6x86_64rh-mysql56-mysql-common< 5.6.40-1.el6rh-mysql56-mysql-common-5.6.40-1.el6.x86_64.rpm
RedHat6x86_64rh-mysql56-mysql-config< 5.6.40-1.el6rh-mysql56-mysql-config-5.6.40-1.el6.x86_64.rpm
Rows per page:
1-10 of 181

Related

nessus 49
amazon 4
openvas 37
slackware 1
mageia 2
debian 6
osv 12
ubuntu 3
suse 2
fedora 12
altlinux 1
freebsd 1
f5 4
ibm 2
photon 2
rosalinux 1
gentoo 1
oraclelinux 1
centos 1
redhat 2
veracode 7
cve 7
ubuntucve 7
redhatcve 8
debiancve 5
alpinelinux 7
prion 9
mariadbunix 5
nessus
nessus
openSUSE Security Update : mysql-community-server (openSUSE-2018-405)
2018-04-30 00:00:00
MySQL 5.6.x < 5.6.40 Multiple Vulnerabilities (April 2018 CPU)
2018-04-19 00:00:00
MySQL 5.5.x < 5.5.60 Multiple Vulnerabilities (April 2018 CPU)
2018-04-19 00:00:00
amazon
amazon
Medium: mysql56
2018-05-25 18:26:00
Medium: mysql55
2018-05-25 18:26:00
Medium: mysql57
2018-05-25 18:22:00
openvas
openvas
Mageia: Security Advisory (MGASA-2018-0259)
2022-01-28 00:00:00
Slackware: Security Advisory (SSA:2018-130-01)
2022-04-21 00:00:00
Debian: Security Advisory (DLA-1355-1)
2018-04-19 00:00:00
slackware
slackware
[slackware-security] mariadb
2018-05-10 21:14:32
mageia
mageia
Updated mariadb packages fix security vulnerabilities
2018-05-29 22:41:14
Updated mariadb packages fix security vulnerabilities
2018-06-04 18:11:47
debian
debian
[SECURITY] [DLA 1355-1] mysql-5.5 security update
2018-04-19 17:29:05
[SECURITY] [DSA 4176-1] mysql-5.5 security update
2018-04-20 08:34:15
[SECURITY] [DSA 4176-1] mysql-5.5 security update
2018-04-20 08:34:15
osv
osv
mysql-5.5 - security update
2018-04-19 00:00:00
mysql-5.5 - security update
2018-04-20 00:00:00
mariadb-10.0 - security update
2018-06-29 00:00:00
ubuntu
ubuntu
MySQL vulnerabilities
2018-04-25 00:00:00
MySQL vulnerabilities
2018-04-23 00:00:00
MySQL vulnerabilities
2018-04-30 00:00:00
suse
suse
Security update for mariadb (important)
2018-06-23 03:12:07
Security update for mariadb (moderate)
2018-06-08 00:11:54
fedora
fedora
[SECURITY] Fedora 27 Update: mariadb-10.2.15-2.fc27
2018-06-24 20:10:42
[SECURITY] Fedora 28 Update: mariadb-10.2.15-2.fc28
2018-06-20 01:57:32
[SECURITY] Fedora 26 Update: mariadb-10.1.33-1.fc26
2018-05-22 14:31:34
altlinux
altlinux
Security fix for the ALT Linux 8 package mariadb version 10.1.33-alt1
2018-05-23 00:00:00
freebsd
freebsd
MySQL -- multiple vulnerabilities
2018-04-17 00:00:00
f5
f5
K32702281 : Oracle MySQL vulnerabilities CVE-2018-2782, CVE-2018-2784, CVE-2018-2786, and CVE-2018-2787
2018-04-24 00:00:00
K82350223 : MySQL vulnerabilities CVE-2018-2766, CVE-2018-2769, CVE-2018-2771, CVE-2018-2773, and CVE-2018-2775
2018-05-07 00:00:00
K02212309 : MySQL vulnerabilities CVE-2018-2755, CVE-2018-2758, CVE-2018-2759, CVE-2018-2761, and CVE-2018-2762
2018-04-24 00:00:00
ibm
ibm
Security Bulletin: Multiple security vulnerabilities has been identified in Oracle MySQL, which is a supported topology database of IBM Tivoli Network Manager IP Edition.
2023-06-28 22:03:38
Security Bulletin: Vulnerabilities in MariaDB affect PowerKVM
2018-12-17 14:30:02
photon
photon
Home Download Photon OS User Documentation FAQ Security Advisories Related Information Lightwave - PHSA-2018-2.0-0040
2018-04-30 00:00:00
Important Photon OS Security Update - PHSA-2018-0040
2018-04-30 00:00:00
rosalinux
rosalinux
Advisory ROSA-SA-2023-2250
2023-10-21 13:39:47
gentoo
gentoo
MariaDB, MySQL: Multiple vulnerabilities
2019-08-18 00:00:00
oraclelinux
oraclelinux
mariadb security and bug fix update
2018-08-16 00:00:00
centos
centos
mariadb security update
2018-08-21 01:08:00
redhat
redhat
(RHSA-2018:2439) Moderate: mariadb security and bug fix update
2018-08-16 12:46:48
(RHSA-2018:2729) Moderate: Red Hat Enterprise Linux OpenStack Platform security update
2018-09-19 17:36:53
veracode
veracode
Denial Of Service (DoS)
2019-05-16 02:59:46
Denial Of Service (DoS)
2019-05-16 02:59:47
Denial Of Service (DoS)
2019-05-16 02:59:47
cve
cve
CVE-2018-2758
2018-04-19 02:29:00
CVE-2018-2771
2018-04-19 02:29:00
CVE-2018-2818
2018-04-19 02:29:00
ubuntucve
ubuntucve
CVE-2018-2758
2018-04-18 00:00:00
CVE-2018-2782
2018-04-18 00:00:00
CVE-2018-2771
2018-04-18 00:00:00
redhatcve
redhatcve
CVE-2018-2758
2019-10-30 21:38:38
CVE-2018-2771
2018-04-18 12:51:03
CVE-2018-2782
2020-01-29 10:04:51
debiancve
debiancve
CVE-2018-2771
2018-04-19 02:29:00
CVE-2018-2782
2018-04-19 02:29:00
CVE-2018-2817
2018-04-19 02:29:00
alpinelinux
alpinelinux
CVE-2018-2782
2018-04-19 02:29:00
CVE-2018-2817
2018-04-19 02:29:00
CVE-2018-2766
2018-04-19 02:29:00
prion
prion
Code injection
2018-04-19 02:29:00
Code injection
2018-04-19 02:29:00
Code injection
2018-04-19 02:29:00
mariadbunix
mariadbunix
CVE-2018-2771
2018-04-19 02:29:00
CVE-2018-2784
2018-04-19 02:29:00
CVE-2018-2761
2018-04-19 02:29:00

7.7 High

CVSS3

Attack Vector

LOCAL

Attack Complexity

HIGH

Privileges Required

NONE

User Interaction

REQUIRED

Scope

CHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H

6.8 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

SINGLE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

COMPLETE

AV:N/AC:L/Au:S/C:N/I:N/A:C

0.003 Low

EPSS

Percentile

68.2%

JSON
Related for RHSA-2018:1254
nessus49amazon4openvas37slackware1mageia2debian6osv12ubuntu3suse2fedora12altlinux1freebsd1f54ibm2photon2rosalinux1gentoo1oraclelinux1centos1redhat2veracode7cve7ubuntucve7redhatcve8debiancve5alpinelinux7prion9mariadbunix5