Veracode Vulnerability DatabaseVERACODE:19137Denial Of Service (DoS)
5.5 Medium
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
HIGH
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
NONE
Integrity Impact
LOW
Availability Impact
HIGH
CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:L/A:H
7.5 High
CVSS2
Access Vector
NETWORK
Access Complexity
LOW
Authentication
SINGLE
Confidentiality Impact
NONE
Integrity Impact
PARTIAL
Availability Impact
COMPLETE
AV:N/AC:L/Au:S/C:N/I:P/A:C
mysql is vulnerable to denial of service (DoS) attacks. The vulnerability is in mysql server component of Oracle MySQL . A high privileged attacker with network access via multiple protocols could compromise MySQL server resulting in unauthorized ability to cause a hang or frequently repeatable crash.
References
www.oracle.com/technetwork/security-advisory/cpujan2018-3236628.html
www.oracle.com/technetwork/security-advisory/cpujan2018-3236628.html#AppendixMSQL
www.securityfocus.com/bid/102711
www.securitytracker.com/id/1040216
access.redhat.com/errata/RHSA-2018:0586
access.redhat.com/errata/RHSA-2018:0587
access.redhat.com/security/updates/classification/#important
dev.mysql.com/doc/relnotes/mysql/5.7/en/news-5-7-21.html
security.netapp.com/advisory/ntap-20180117-0002/
usn.ubuntu.com/3537-1/
Related
5.5 Medium
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
HIGH
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
NONE
Integrity Impact
LOW
Availability Impact
HIGH
CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:L/A:H
7.5 High
CVSS2
Access Vector
NETWORK
Access Complexity
LOW
Authentication
SINGLE
Confidentiality Impact
NONE
Integrity Impact
PARTIAL
Availability Impact
COMPLETE
AV:N/AC:L/Au:S/C:N/I:P/A:C