Red Hat Security Advisory

RHSA-2018:3655

rh-mysql57-mysql security update

Released 2018-11-26 · Red Hat rating Moderate · View on Red Hat →

Fixed in

Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 6) rh-mysql57-mysql-5.7.24-2.el6, rh-mysql57-mysql-common-5.7.24-2.el6, rh-mysql57-mysql-config-5.7.24-2.el6 +4
Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 7) rh-mysql57-mysql-5.7.24-1.el7, rh-mysql57-mysql-common-5.7.24-1.el7, rh-mysql57-mysql-config-5.7.24-1.el7 +4
Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 6.7) rh-mysql57-mysql-5.7.24-2.el6, rh-mysql57-mysql-common-5.7.24-2.el6, rh-mysql57-mysql-config-5.7.24-2.el6 +4
Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.3) rh-mysql57-mysql-5.7.24-1.el7, rh-mysql57-mysql-common-5.7.24-1.el7, rh-mysql57-mysql-config-5.7.24-1.el7 +4
Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.4) rh-mysql57-mysql-5.7.24-1.el7, rh-mysql57-mysql-common-5.7.24-1.el7, rh-mysql57-mysql-config-5.7.24-1.el7 +4
Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.5) rh-mysql57-mysql-5.7.24-1.el7, rh-mysql57-mysql-common-5.7.24-1.el7, rh-mysql57-mysql-config-5.7.24-1.el7 +4
Red Hat Software Collections for Red Hat Enterprise Linux Workstation (v. 6) rh-mysql57-mysql-5.7.24-2.el6, rh-mysql57-mysql-common-5.7.24-2.el6, rh-mysql57-mysql-config-5.7.24-2.el6 +4
Red Hat Software Collections for Red Hat Enterprise Linux Workstation (v. 7) rh-mysql57-mysql-5.7.24-1.el7, rh-mysql57-mysql-common-5.7.24-1.el7, rh-mysql57-mysql-config-5.7.24-1.el7 +4

Fixes 64 records

TI-2018-02445 CVE-2018-3155 · GHSA-g32x-34jw-fw9h

Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server…

MEDIUM 40

Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Parser).

CVSS 3.0HIGH 7.7 Network Low privileges No interaction EPSS 0.03683 Published 2018-10-17 Fixed

TI-2018-02366 CVE-2018-3064 · GHSA-9qrf-wvj4-2j5f

Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: InnoDB).

LOW 37

Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: InnoDB).

CVSS 3.1HIGH 7.1 Network Low privileges No interaction EPSS 0.03076 Published 2018-07-18 Partial fix

TI-2018-02065 CVE-2018-2755 · GHSA-qfwc-cmfr-mqv2

Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server…

LOW 37

Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Replication).

CVSS 3.1HIGH 7.7 Local No auth User interaction EPSS 0.00849 Published 2018-04-19 Partial fix

TI-2018-02446 CVE-2018-3156 · GHSA-pwjp-68fq-p9qx

Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: InnoDB).

LOW 35

Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: InnoDB).

CVSS 3.1MEDIUM 6.5 Network Low privileges No interaction EPSS 0.03716 Published 2018-10-17 Partial fix

TI-2018-02433 CVE-2018-3143 · GHSA-75qr-prmr-3ww8

Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: InnoDB).

LOW 35

Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: InnoDB).

CVSS 3.1MEDIUM 6.5 Network Low privileges No interaction EPSS 0.03716 Published 2018-10-17 Partial fix

TI-2018-02372 CVE-2018-3070 · GHSA-w58h-rm3c-fxq4

Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Client…

LOW 35

Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Client mysqldump).

CVSS 3.0MEDIUM 6.5 Network Low privileges No interaction EPSS 0.0359 Published 2018-07-18 Fixed

TI-2018-02367 CVE-2018-3065 · GHSA-cxpf-rmp3-qfqr

Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: DML).

LOW 35

Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: DML).

CVSS 3.0MEDIUM 6.5 Network Low privileges No interaction EPSS 0.03636 Published 2018-07-18 Fixed

TI-2018-02128 CVE-2018-2819 · GHSA-v34f-wr7v-83xp

Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: InnoDB).

LOW 35

Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: InnoDB).

CVSS 3.1MEDIUM 6.5 Network Low privileges No interaction EPSS 0.03176 Published 2018-04-19 Partial fix

TI-2018-02126 CVE-2018-2817 · GHSA-g7c5-cc45-397q

Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: DDL).

LOW 35

Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: DDL).

CVSS 3.1MEDIUM 6.5 Network Low privileges No interaction EPSS 0.03176 Published 2018-04-19 Partial fix

TI-2018-02538 CVE-2018-3251 · GHSA-g8fx-g5fv-qphm

Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: InnoDB).

LOW 34

Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: InnoDB).

CVSS 3.1MEDIUM 6.5 Network Low privileges No interaction EPSS 0.03053 Published 2018-10-17 Partial fix

TI-2018-02434 CVE-2018-3144 · GHSA-rcqf-2gm2-6jvr

Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server…

LOW 34

Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Security: Audit).

CVSS 3.0MEDIUM 5.9 Network No auth No interaction EPSS 0.04445 Published 2018-10-17 Fixed

TI-2018-02423 CVE-2018-3133 · GHSA-62r4-9fpf-c245

Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server…

LOW 34

Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Parser).

CVSS 3.1MEDIUM 6.5 Network Low privileges No interaction EPSS 0.02924 Published 2018-10-17 Partial fix

TI-2018-02362 CVE-2018-3060 · GHSA-f2x7-pmw5-f3c9

Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: InnoDB).

LOW 34

Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: InnoDB).

CVSS 3.1MEDIUM 6.5 Network High privileges No interaction EPSS 0.0291 Published 2018-07-18 Fixed

TI-2018-02093 CVE-2018-2784 · GHSA-8m2v-9736-x6w9

Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: InnoDB).

LOW 34

Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: InnoDB).

CVSS 3.1MEDIUM 6.5 Network Low privileges No interaction EPSS 0.02995 Published 2018-04-19 Partial fix

TI-2018-02091 CVE-2018-2782 · GHSA-848q-653w-gw2r

Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: InnoDB).

LOW 34

Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: InnoDB).

CVSS 3.1MEDIUM 6.5 Network Low privileges No interaction EPSS 0.02995 Published 2018-04-19 Partial fix

TI-2018-02089 CVE-2018-2780 · GHSA-jg2q-p23r-fx8q

Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server…

LOW 34

Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Optimizer).

CVSS 3.0MEDIUM 6.5 Network Low privileges No interaction EPSS 0.02929 Published 2018-04-19 Fixed

TI-2018-02084 CVE-2018-2775 · GHSA-r679-j32w-7hh4

Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server…

LOW 34

Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Optimizer).

CVSS 3.0MEDIUM 6.5 Network Low privileges No interaction EPSS 0.02929 Published 2018-04-19 Fixed

TI-2018-02067 CVE-2018-2758 · GHSA-4hq4-w9mw-ff2r

Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server…

LOW 34

Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server : Security : Privileges).

CVSS 3.0MEDIUM 6.5 Network Low privileges No interaction EPSS 0.03119 Published 2018-04-19 Fixed

TI-2018-02070 CVE-2018-2761 · GHSA-3639-c3mm-hf33

Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Client…

LOW 33

Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Client programs).

CVSS 3.1MEDIUM 5.9 Network No auth No interaction EPSS 0.04016 Published 2018-04-19 Partial fix

TI-2018-02534 CVE-2018-3247 · GHSA-323v-h623-mm25

Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Merge).

LOW 30

Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Merge).

CVSS 3.0MEDIUM 5.5 Network High privileges No interaction EPSS 0.02817 Published 2018-10-17 Fixed

TI-2018-02477 CVE-2018-3187 · GHSA-rxrr-4343-8vx9

Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server…

LOW 30

Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Optimizer).

CVSS 3.0MEDIUM 5.5 Network High privileges No interaction EPSS 0.02817 Published 2018-10-17 Fixed

TI-2018-02475 CVE-2018-3185 · GHSA-mm2w-vmg6-v772

Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: InnoDB).

LOW 30

Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: InnoDB).

CVSS 3.1MEDIUM 5.5 Network High privileges No interaction EPSS 0.02563 Published 2018-10-17 Fixed

TI-2018-02096 CVE-2018-2787 · GHSA-c8vh-37vm-4jj7

Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: InnoDB).

LOW 30

Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: InnoDB).

CVSS 3.1MEDIUM 5.5 Network High privileges No interaction EPSS 0.02576 Published 2018-04-19 Partial fix

TI-2018-02095 CVE-2018-2786 · GHSA-rv27-q7pp-jv9w

Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: InnoDB).

LOW 30

Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: InnoDB).

CVSS 3.1MEDIUM 5.5 Network High privileges No interaction EPSS 0.02509 Published 2018-04-19 Fixed

TI-2018-02568 CVE-2018-3282 · GHSA-hv5g-3886-rpxc

Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server…

LOW 29

Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Storage Engines).

CVSS 3.1MEDIUM 4.9 Network High privileges No interaction EPSS 0.04 Published 2018-10-17 Partial fix

TI-2018-02564 CVE-2018-3278 · GHSA-jp4j-77rm-m7cf

Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: RBR).

LOW 29

Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: RBR).

CVSS 3.0MEDIUM 4.9 Network High privileges No interaction EPSS 0.03461 Published 2018-10-17 Fixed

TI-2018-02562 CVE-2018-3276 · GHSA-fjq2-cmr9-3f6m

Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server…

LOW 29

Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Memcached).

CVSS 3.0MEDIUM 4.9 Network High privileges No interaction EPSS 0.03461 Published 2018-10-17 Fixed

TI-2018-02364 CVE-2018-3062 · GHSA-qqg3-x2ww-g9cv

Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server…

LOW 29

Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Memcached).

CVSS 3.0MEDIUM 5.3 Network Low privileges No interaction EPSS 0.02965 Published 2018-07-18 Fixed

TI-2018-02127 CVE-2018-2818 · GHSA-g7jv-h96w-mq24

Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server…

LOW 29

Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server : Security : Privileges).

CVSS 3.0MEDIUM 4.9 Network High privileges No interaction EPSS 0.03479 Published 2018-04-19 Partial fix

TI-2018-02121 CVE-2018-2812 · GHSA-gwg6-vp9q-6jpf

Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server…

LOW 29

Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Optimizer).

CVSS 3.0MEDIUM 5.5 Network High privileges No interaction EPSS 0.02353 Published 2018-04-19 Fixed

TI-2019-02272 CVE-2019-2731 · GHSA-r324-w5w4-pgc6

Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server…

LOW 28

Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Replication).

CVSS 3.0MEDIUM 5.4 Network Low privileges No interaction EPSS 0.01729 Published 2019-07-23 Fixed

TI-2018-02452 CVE-2018-3162 · GHSA-mpqf-2mqw-f977

Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: InnoDB).

LOW 28

Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: InnoDB).

CVSS 3.1MEDIUM 4.9 Network High privileges No interaction EPSS 0.03254 Published 2018-10-17 Fixed

TI-2018-02451 CVE-2018-3161 · GHSA-v44f-9mf2-7m36

Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server…

LOW 28

Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Partition).

CVSS 3.0MEDIUM 4.9 Network High privileges No interaction EPSS 0.03432 Published 2018-10-17 Fixed

TI-2018-02383 CVE-2018-3081 · GHSA-vhpw-hq94-hjjr

Vulnerability in the MySQL Client component of Oracle MySQL (subcomponent: Client…

LOW 28

Vulnerability in the MySQL Client component of Oracle MySQL (subcomponent: Client programs).

CVSS 3.1MEDIUM 5.0 Network High privileges No interaction EPSS 0.02687 Published 2018-07-18 Partial fix

TI-2018-02379 CVE-2018-3077 · GHSA-2vcv-m8g5-j4f3

Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: DDL).

LOW 28

Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: DDL).

CVSS 3.0MEDIUM 4.9 Network High privileges No interaction EPSS 0.03417 Published 2018-07-18 Fixed

TI-2018-02373 CVE-2018-3071 · GHSA-ff6f-6jr9-2g3m

Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Audit Log).

LOW 28

Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Audit Log).

CVSS 3.0MEDIUM 4.9 Network High privileges No interaction EPSS 0.02887 Published 2018-07-18 Fixed

TI-2018-02363 CVE-2018-3061 · GHSA-rvx6-3mxm-x7vv

Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: DML).

LOW 28

Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: DML).

CVSS 3.0MEDIUM 4.9 Network High privileges No interaction EPSS 0.02935 Published 2018-07-18 Fixed

TI-2018-02356 CVE-2018-3054 · GHSA-33j5-vcmx-vxmx

Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: DDL).

LOW 28

Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: DDL).

CVSS 3.0MEDIUM 4.9 Network High privileges No interaction EPSS 0.03417 Published 2018-07-18 Fixed

TI-2018-02155 CVE-2018-2846 · GHSA-xjg6-x934-rxf8

Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server…

LOW 28

Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Performance Schema).

CVSS 3.0MEDIUM 4.9 Network High privileges No interaction EPSS 0.02752 Published 2018-04-19 Fixed

TI-2018-02148 CVE-2018-2839 · GHSA-pqxx-55ch-gx3j

Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: DML).

LOW 28

Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: DML).

CVSS 3.0MEDIUM 4.9 Network High privileges No interaction EPSS 0.02752 Published 2018-04-19 Fixed

TI-2018-02125 CVE-2018-2816 · GHSA-4gg6-c2jq-69wv

Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server…

LOW 28

Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Optimizer).

CVSS 3.0MEDIUM 4.9 Network High privileges No interaction EPSS 0.02752 Published 2018-04-19 Fixed

TI-2018-02119 CVE-2018-2810 · GHSA-6x8g-f68r-6fqp

Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: InnoDB).

LOW 28

Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: InnoDB).

CVSS 3.1MEDIUM 4.9 Network High privileges No interaction EPSS 0.0303 Published 2018-04-19 Fixed

TI-2018-02090 CVE-2018-2781 · GHSA-gffv-5f9p-845q

Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server…

LOW 28

Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Optimizer).

CVSS 3.1MEDIUM 4.9 Network High privileges No interaction EPSS 0.033 Published 2018-04-19 Partial fix

TI-2018-02088 CVE-2018-2779 · GHSA-6c5w-hvwv-5cj7

Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server…

LOW 28

Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Optimizer).

CVSS 3.0MEDIUM 4.9 Network High privileges No interaction EPSS 0.02752 Published 2018-04-19 Fixed

TI-2018-02087 CVE-2018-2778 · GHSA-h6c5-prq3-c769

Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server…

LOW 28

Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Optimizer).

CVSS 3.0MEDIUM 4.9 Network High privileges No interaction EPSS 0.02752 Published 2018-04-19 Fixed

TI-2018-02086 CVE-2018-2777 · GHSA-2fvq-w5h5-q4v5

Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: InnoDB).

LOW 28

Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: InnoDB).

CVSS 3.1MEDIUM 4.9 Network High privileges No interaction EPSS 0.0303 Published 2018-04-19 Fixed

TI-2018-02085 CVE-2018-2776 · GHSA-j7cr-rr49-g6x4

Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Group…

LOW 28

Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Group Replication GCS).

CVSS 3.0MEDIUM 4.9 Network High privileges No interaction EPSS 0.02752 Published 2018-04-19 Fixed

TI-2018-02078 CVE-2018-2769 · GHSA-3hhm-v674-2qc2

Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server…

LOW 28

Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Pluggable Auth).

CVSS 3.0MEDIUM 4.9 Network High privileges No interaction EPSS 0.02752 Published 2018-04-19 Fixed

TI-2018-02075 CVE-2018-2766 · GHSA-hx7p-wjjj-fw2p

Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: InnoDB).

LOW 28

Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: InnoDB).

CVSS 3.1MEDIUM 4.9 Network High privileges No interaction EPSS 0.03083 Published 2018-04-19 Partial fix

TI-2018-02068 CVE-2018-2759 · GHSA-c3xj-jgg3-49jx

Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: InnoDB).

LOW 28

Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: InnoDB).

CVSS 3.1MEDIUM 4.9 Network High privileges No interaction EPSS 0.02809 Published 2018-04-19 Fixed

TI-2018-02563 CVE-2018-3277 · GHSA-p9p2-rpmj-vhww

Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: InnoDB).

LOW 27

Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: InnoDB).

CVSS 3.1MEDIUM 4.9 Network High privileges No interaction EPSS 0.02673 Published 2018-10-17 Fixed

TI-2018-02489 CVE-2018-3200 · GHSA-pg9c-x6hj-pgx5

Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: InnoDB).

LOW 27

Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: InnoDB).

CVSS 3.1MEDIUM 4.9 Network High privileges No interaction EPSS 0.02673 Published 2018-10-17 Fixed

TI-2018-02463 CVE-2018-3173 · GHSA-w246-mm99-6c5j

Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: InnoDB).

LOW 27

Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: InnoDB).

CVSS 3.1MEDIUM 4.9 Network High privileges No interaction EPSS 0.02673 Published 2018-10-17 Fixed

TI-2018-02461 CVE-2018-3171 · GHSA-mfwg-mhhr-gpvf

Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server…

LOW 27

Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Partition).

CVSS 3.0MEDIUM 5.0 Network High privileges No interaction EPSS 0.02086 Published 2018-10-17 Fixed

TI-2018-02080 CVE-2018-2771 · GHSA-5w5p-84h5-p49m

Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server…

LOW 27

Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Locking).

CVSS 3.1MEDIUM 4.4 Network High privileges No interaction EPSS 0.03598 Published 2018-04-19 Partial fix

TI-2018-02464 CVE-2018-3174 · GHSA-x7c7-vrm4-2pvw

Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Client…

LOW 26

Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Client programs).

CVSS 3.1MEDIUM 5.3 Local High privileges No interaction EPSS 0.00817 Published 2018-10-17 Partial fix

TI-2018-02570 CVE-2018-3284 · GHSA-mqjx-3597-63jr

Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: InnoDB).

LOW 25

Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: InnoDB).

CVSS 3.1MEDIUM 4.4 Network High privileges No interaction EPSS 0.023 Published 2018-10-17 Fixed

TI-2018-02569 CVE-2018-3283 · GHSA-2qwj-2xpr-m26w

Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server…

LOW 25

Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Logging).

CVSS 3.0MEDIUM 4.4 Network High privileges No interaction EPSS 0.02453 Published 2018-10-17 Fixed

TI-2018-02360 CVE-2018-3058 · GHSA-qg26-735q-4c75

Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: MyISAM).

LOW 25

Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: MyISAM).

CVSS 3.1MEDIUM 4.3 Network Low privileges No interaction EPSS 0.02451 Published 2018-07-18 Partial fix

TI-2018-02358 CVE-2018-3056 · GHSA-x4fq-r4qv-4vvh

Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server…

LOW 25

Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Security: Privileges).

CVSS 3.0MEDIUM 4.3 Network Low privileges No interaction EPSS 0.02508 Published 2018-07-18 Fixed

TI-2018-02122 CVE-2018-2813 · GHSA-9v4g-rvq8-4rmh

Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: DDL).

LOW 25

Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: DDL).

CVSS 3.1MEDIUM 4.3 Network Low privileges No interaction EPSS 0.02573 Published 2018-04-19 Partial fix

TI-2018-02071 CVE-2018-2762 · GHSA-g8c7-6w5h-m496

Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server…

LOW 21

Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Connection).

CVSS 3.0MEDIUM 4.4 Local High privileges No interaction EPSS 0.00442 Published 2018-04-19 Fixed

TI-2018-02368 CVE-2018-3066 · GHSA-hg5j-c849-7q67

Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server…

LOW 20

Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Options).

CVSS 3.1LOW 3.3 Network High privileges No interaction EPSS 0.01949 Published 2018-07-18 Partial fix

TI-2018-02082 CVE-2018-2773 · GHSA-j997-q495-mhm6

Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Client…

LOW 20

Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Client programs).

CVSS 3.0MEDIUM 4.1 Local High privileges No interaction EPSS 0.00489 Published 2018-04-19 Partial fix