CVE-2018-11776

The CVE-2018-11776 issue affects Apache Struts 2.x versions 2.3–2.3.34 and 2.5–2.5.16. The underlying condition is when alwaysSelectFullNamespace is true and a result or url tag lacks a namespace/value, and the upper namespace/action configuration also has no or a wildcard namespace, allowing rem...

CVE-2018-3063

CVE-2018-3063 is a MySQL/MariaDB Server vulnerability in the Privileges subcomponent. Affected products include MySQL/MariaDB Server versions up to 5.5.60 and earlier. The vulnerability is exploitable by a high-privileged attacker with network access via multiple protocols and can lead to a hang ...

CVE-2018-8014

CVE-2018-8014 affects the default configuration of Tomcat’s CORS filter, where default settings enable supportsCredentials for all origins across multiple releases (9.0.0.M1–9.0.8, 8.5.0–8.5.31, 8.0.0.RC1–8.0.52, 7.0.41–7.0.88). The issue is that environments relying on the default CORS configura...

CVE-2018-3282

CVE-2018-3282 affects the MySQL Server component of Oracle MySQL (subcomponent: Server: Storage Engines). Affected versions include 5.5.61 and earlier, 5.6.41 and earlier, 5.7.23 and earlier, and 8.0.12 and earlier, with an attack surface that enables a network-accessing, high-privileged attacker...

CVE-2018-3174

CVE-2018-3174 affects Oracle MySQL Server (notably the Client programs) with affected versions 5.5.61 and prior, 5.6.41 and prior, 5.7.23 and prior, and 8.0.12 and prior. Root cause per the sources is a vulnerability in MySQL Server that can, under certain conditions, lead to a hang or a complete...

CVE-2018-3064

CVE-2018-3064 affects the MySQL Server component (InnoDB). The initial description lists affected versions as 5.6.40 and earlier, 5.7.22 and earlier, and 8.0.11 and earlier, with a network-accessible, low-privilege exploit that can cause a hang/crash (DoS) and unauthorized read/write of data. Con...

CVE-2018-3133

CVE-2018-3133 concerns Oracle MySQL Server (subcomponent: Server: Parser). Affected are MySQL Server versions 5.5.61 and earlier, 5.6.41 and earlier, 5.7.23 and earlier, and 8.0.12 and earlier. An attacker with network access via multiple protocols and low privileges can trigger a hang or frequen...

CVE-2018-3060

CVE-2018-3060 affects Oracle MySQL Server (InnoDB) with affected versions 5.5/5.6 per IBM/Guardium disclosures. The vulnerability is described as an unspecified issue in InnoDB that could allow an authenticated attacker to achieve no confidentiality impact, but high integrity and high availabilit...

CVE-2018-3081

CVE-2018-3081 affects the MySQL Client component of Oracle MySQL. Affected versions: 5.5.60 and prior, 5.6.40 and prior, 5.7.22 and prior, and 8.0.11 and prior. Attackers with network access via multiple protocols can exploit it to cause a hang or a crash (DoS) and may update/insert/delete data i...

CVE-2018-3156

CVE-2018-3156 affects Oracle MySQL Server (subcomponents: InnoDB; also referenced in multiple advisories) with affected versions: 5.6.41 and earlier, 5.7.23 and earlier, and 8.0.12 and earlier. According to the connected advisories for Linux distributions, the vulnerability enables network-access...

CVE-2018-2612

CVE-2018-2612 is reported in the MySQL Server component (subcomponent: InnoDB). Affected releases include MySQL 5.6.38 and earlier and 5.7.20 and earlier. The vulnerability enables a high-privilege attacker who can access the server over the network (via multiple protocols) to compromise data con...

CVE-2018-3251

CVE-2018-3251 affects Oracle MySQL Server (InnoDB). Affected: 5.6.41 and earlier, 5.7.23 and earlier, 8.0.12 and earlier. Exploitation via network against multiple protocols can cause a hang or crash (DOS). Several advisories reference fixes in corresponding OS/package updates (e.g., ALAS and Deb...

CVE-2018-3143

CVE-2018-3143 is a vulnerability in the MySQL Server component (subcomponent: InnoDB) affecting Oracle MySQL. Affected versions are 5.6.41 and prior, 5.7.23 and prior, and 8.0.12 and prior. It allows a low-privilege, network-attacker to cause a hang or crash (DoS) via multiple protocols. The issu...

CVE-2018-3173

CVE-2018-3173 affects the MySQL Server component (InnoDB) of Oracle MySQL. Affected: MySQL 5.7.23 and earlier and 8.0.12 and earlier; exploitation via network could cause a hang or crash (DoS) with high privileges over multiple protocols. Connected advisories indicate fixed releases exist (e.g., ...

CVE-2018-2952

CVE-2018-2952 affects OpenJDK/OpenJDK-derived Java runtimes (Java SE 7/8 and JRockit) in the Concurrency component. The root cause is insufficient index validation in PatternSyntaxException getMessage(), enabling unauthenticated network-based exploitation that can cause a denial of service via me...

CVE-2018-3200

CVE-2018-3200 affects Oracle MySQL Server (InnoDB) and is exploitable with network access via multiple protocols by a high-privilege attacker to cause a hang or crash (DOS). Affected versions are 5.7.23 and prior and 8.0.12 and prior; CVSSv3 base score 4.9 (A: HIGH). The F5 advisory notes remedia...

CVE-2018-3185

CVE-2018-3185 is a MySQL Server (InnoDB) vulnerability affecting 5.7.23 and earlier and 8.0.12 and earlier. The connected F5 advisory confirms exploitable remote access via multiple protocols by a high-privilege attacker, potentially causing a hang or crash (DoS) and unauthorized data updates. Th...

CVE-2018-3284

CVE-2018-3284 affects Oracle MySQL Server (InnoDB subcomponent) and related MySQL Server components. Affected versions: 5.7.23 and earlier, and 8.0.12 and earlier. The flaw allows a high-privilege attacker with network access via multiple protocols to cause a hang or crash (DoS). Connected adviso...

CVE-2018-3277

CVE-2018-3277 affects the MySQL Server component (subcomponent: InnoDB). Affected versions are 5.7.23 and prior and 8.0.12 and prior. The vulnerability is exploitable by a high-privilege attacker with network access via multiple protocols, and can lead to a hang or a frequent crash of MySQL Serve...

CVE-2018-3162

CVE-2018-3162 is a vulnerability in the MySQL Server component (subcomponent: InnoDB) affecting versions 5.7.23 and earlier and 8.0.12 and earlier. The CVE description states an attacker with network access can cause a hang or frequent crash (DoS). The connected F5 advisory notes remediation by u...

CVE-2018-3058

The connected advisory entries substantiate CVE-2018-3058 as a real MySQL/MariaDB vulnerability affecting Oracle MySQL Server (MyISAM subcomponent) with affected 5.5.60 and prior, 5.6.40 and prior, 5.7.22 and prior. The issue allows a low-privilege, network-access attacker via multiple protocols ...

CVE-2018-2562

CVE-2018-2562 affects the MySQL Server component (Partition subcomponent) of Oracle MySQL. Affected versions include 5.5.58 and earlier, 5.6.38 and earlier, and 5.7.19 and earlier. The vulnerability allows a low-privileged, network-attacker with access via multiple protocols to cause a hang or cr...

CVE-2018-3155

CVE-2018-3155 affects Oracle MySQL MySQL Server (Parser) component. Affects MySQL versions 5.7.23 and earlier and 8.0.12 and earlier. Attack requires network access from low-privilege user and can cause a hang or frequently repeatable crash (DoS) of MySQL Server; CVSSv3 base score 7.7 (HIGH), vec...

CVE-2018-3278

CVE-2018-3278 affects Oracle MySQL Server (component: Server: RBR). Affected versions: 5.6.41 and prior; 5.7.23 and prior; 8.0.12 and prior. An attacker with network access via multiple protocols and high privileges can, per the description, cause a hang or a frequently repeatable crash (DOS). Th...

CVE-2018-3187

CVE-2018-3187 affects Oracle MySQL Server (subcomponent: Server: Optimizer). Affected versions: 5.7.23 and earlier; 8.0.12 and earlier. An attacker with network access via multiple protocols and high privileges can cause a hang or frequently reproducible crash (DoS) and may also gain unauthorized...

CVE-2018-3054

CVE-2018-3054 affects Oracle MySQL Server (subcomponent: Server: DDL). Affected are MySQL 5.7.22 and earlier and 8.0.11 and earlier. Exploitation can cause a high-privilege attacker to trigger a denial of service (hang/crash) in MySQL Server (AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H). Remediation is t...

CVE-2018-3056

CVE-2018-3056 affects Oracle MySQL Server: Security: Privileges. Affected versions are MySQL 5.7.22 and earlier and 8.0.11 and earlier. An attacker with network access via multiple protocols can cause unauthorized read access to a subset of MySQL data. Remediation identified in connected advisori...

CVE-2018-3144

CVE-2018-3144 affects Oracle MySQL Server: Security: Audit. Affected are MySQL Server versions 5.7.23 and earlier and 8.0.12 and earlier. The vulnerability can be exploited remotely with network access via multiple protocols by an unauthenticated attacker to cause a hang or crash (complete DOS). ...

CVE-2018-3065

CVE-2018-3065 affects Oracle MySQL Server (Server: DML) prior to 5.7.23/8.0.x with 5.7.22 and 8.0.11 as affected baselines. It is exploitable by a low-privilege, network-accessible attacker via multiple protocols, and can cause a hang or crash (DoS) of MySQL Server. Remediation per sources points...

CVE-2018-3283

CVE-2018-3283 is mapped to Oracle MySQL Server: Logging vulnerability. Connected Red Hat entry RHSA-2018:3655 confirms affected components and notes that affected MySQL server components require a security update; remediation is provided via updated MySQL packages (e.g., for the RHSA advisory, up...

CVE-2018-3276

CVE-2018-3276 affects the Oracle MySQL Server component (subcomponent: Server: Memcached). Affected are MySQL versions 5.6.41 and prior, 5.7.23 and prior, and 8.0.12 and prior. The vulnerability allows a high-privilege attacker with network access via multiple protocols to compromise the MySQL Se...

CVE-2018-3247

CVE-2018-3247 affects Oracle MySQL Server, subcomponent Server: Merge. Affected versions are MySQL 5.6.41 and earlier, 5.7.23 and earlier, and 8.0.12 and earlier. The vulnerability can be exploited by a high-privilege attacker with network access via multiple protocols to cause a hang or frequent...

CVE-2018-3203

CVE-2018-3203 affects Oracle MySQL Server (Server: Optimizer). A vulnerability in the Server: Optimizer could be exploited by a low-privilege, network-accessible attacker to cause a hang or frequent, repeatable crashes (DoS). Affected are MySQL Server versions up to 8.0.12 and earlier. The initia...

CVE-2018-3212

CVE-2018-3212 affects Oracle MySQL Server, subcomponent Server: Information Schema. Affected versions are 8.0.12 and prior. An attacker with network access and high privileges can cause a denial of service via hang or crash of the MySQL Server. Connected Fedora notices indicate this CVE was fixed...

CVE-2018-3067

CVE-2018-3067 pertains to Oracle MySQL Server, specifically the Server: Replication subcomponent. The vulnerability affects MySQL 8.0.11 and earlier and can be exploited by a highly privileged attacker with network access via multiple protocols, potentially causing a hang or a frequently occurrin...

CVE-2018-3062

CVE-2018-3062 affects Oracle MySQL Server (Memcached subcomponent). Affected versions are MySQL 5.6.40 and earlier, 5.7.22 and earlier, and 8.0.11 and earlier. The vulnerability can be exploited by a low-privileged attacker over the memcached network interface to cause the MySQL server to hang or...

CVE-2018-3137

CVE-2018-3137 : In Oracle MySQL, the MySQL Server component (Server: Optimizer) is affected. Affected versions are 8.0.12 and earlier. An attacker with network access via multiple protocols and low privileges can remotely cause the server to hang or crash (denial of service). CVSS v3.1 base score...

CVE-2018-3145

CVE-2018-3145 affects Oracle MySQL Server (Server: Parser) with impact on availability. Affected: MySQL Server 8.0.12 and earlier; vulnerability allows a low-privilege, network-accessible attacker to trigger a hang or frequent crash (DoS) via multiple protocols. CVSS 3.0 base score 6.5 (AV:N/AC:L...

CVE-2018-3077

CVE-2018-3077 affects Oracle MySQL Server: DDL. Affected: MySQL 5.7.22 and earlier; 8.0.11 and earlier. Exploitation can cause a denial of service with high availability impact, exploitable with network access via multiple protocols and requires HIGH privileges. Root cause is in the Server: DDL h...

CVE-2018-3074

CVE-2018-3074 affects Oracle MySQL Server (Server: Security: Roles). Affected: MySQL 8.0.11 and earlier. Underlying issue: vulnerability in Roles subcomponent can allow a low-privileged, network-access attacker to cause a denial of service (hangs/crashes) in MySQL Server via multiple protocols. I...

CVE-2018-3285

CVE-2018-3285 is a vulnerability in the MySQL Server component of Oracle MySQL (Server: Windows). Affected versions are 8.0.12 and prior. It allows a high-privileged attacker with network access via multiple protocols to cause a hang or a frequently repeating crash (complete DOS) of MySQL Server....

CVE-2018-3280

CVE-2018-3280 affects the MySQL Server component (Server: JSON) of Oracle MySQL. Affected products/versions: MySQL 8.0.12 and earlier. The vulnerability allows a highly privileged attacker who can access the server over multiple network protocols to cause a hang or a frequent, repeatable crash of...

CVE-2018-3075

Oracle MySQL Server (Server: Security: Privileges) is affected by CVE-2018-3075 in MySQL 8.0.11 and earlier. The vulnerability, described across IBM/IBM Guardium sources, enables a high-privilege attacker with network access via multiple protocols to compromise the MySQL Server and can result in ...

CVE-2018-2767

CVE-2018-2767 affects Oracle MySQL Server (subcomponent: Server: Security: Encryption). Affected are MySQL Server versions 5.5.60 and earlier, 5.6.40 and earlier, and 5.7.22 and earlier. The vulnerability allows a low-privilege attacker who can reach the server over multiple network protocols to ...

CVE-2018-3079

CVE-2018-3079 affects the Oracle MySQL Server InnoDB component. The vulnerability exists in MySQL 8.0.11 and earlier. An authenticated, high-privilege attacker who can reach the server over network (via multiple protocols) can trigger a denial of service, causing the server to hang or crash (A: H...

CVE-2018-3286

CVE-2018-3286 affects Oracle MySQL Server (Server: Security: Privileges). Affected: MySQL 8.0.12 and earlier. Description from multiple sources: vulnerability allows a low-privileged, network-accessing attacker to modify data in MySQL Server through various protocols, with impact described as una...

CVE-2018-2973

CVE-2018-2973 is an Oracle Java SE/JSSE vulnerability affecting Java SE: 6u191, 7u181, 8u172, 10.0.1 and Java SE Embedded: 8u171. It can be exploited over the network with SSL/TLS by an unauthenticated attacker to cause unauthorized data modifications (integrity impact). Affected deployments load...

CVE-2018-3084

CVE-2018-3084 affects Oracle MySQL Server (Shell: Core/Client). Affects 8.0.11 and earlier; a low-privileged user with logon can exploit to cause partial denial of service. Exploitation requires user interaction; CVSSv3 base score 2.8 (LOW). Remediation: upgrade Oracle MySQL to patched versions p...

CVE-2018-3066

CVE-2018-3066 affects the MySQL Server component (subcomponent: Server: Options) and is disclosed across multiple advisories. Affected versions include 5.5.60 and earlier, 5.6.40 and earlier, and 5.7.22 and earlier. The vulnerability is described as difficult to exploit, requiring network access ...

CVE-2018-3170

CVE-2018-3170 affects Oracle MySQL Server (Server: DDL). Affected: MySQL 8.0.12 and earlier. Description from multiple sources confirms a high-privilege attacker with network access via multiple protocols can cause a hang or complete denial of service (DOS) on MySQL Server. Several connected advi...