CVE-2018-2622
At a glance Severity Not available EPSS EPSS 3.98 % · percentile 90 (2026-10-27) State PUBLISHED Published 2018-01-18 Updated 2024-10-03 Assigner oracle NVD status Modified Description Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: DDL). Supported versions that are affected are 5.5.58 and prior, 5.6.38 and prior and 5.7.20 and prior. Easily exploitable vulnerability allows low privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.0 Base Score 6.5 (Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H).
Scores Version Score Vector Scored by CVSS 3.1 MEDIUM 6.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H NVD · nvd@nist.gov (Primary) CVSS 2.0 MEDIUM 6.8 AV:N/AC:L/Au:S/C:N/I:N/A:C NVD · nvd@nist.gov (Primary)
European references
CERT-FR advisories
Affected configurations (NVD CPE) cpe:2.3:a:oracle:mysql:*:*:*:*:*:*:*:* ≥ 5.5.0 ≤ 5.5.58cpe:2.3:a:oracle:mysql:*:*:*:*:*:*:*:* ≥ 5.6.0 ≤ 5.6.38cpe:2.3:a:oracle:mysql:*:*:*:*:*:*:*:* ≥ 5.7.0 ≤ 5.7.20cpe:2.3:a:mariadb:mariadb:*:*:*:*:*:*:*:* ≥ 5.5.0 < 5.5.59cpe:2.3:a:mariadb:mariadb:*:*:*:*:*:*:*:* ≥ 10.0.0 < 10.0.34cpe:2.3:a:mariadb:mariadb:*:*:*:*:*:*:*:* ≥ 10.1.0 < 10.1.31cpe:2.3:a:mariadb:mariadb:*:*:*:*:*:*:*:* ≥ 10.2.0 < 10.2.13cpe:2.3:o:debian:debian_linux:7.0:*:*:*:*:*:*:*cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:*cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:*cpe:2.3:o:canonical:ubuntu_linux:12.04:*:*:*:-:*:*:*cpe:2.3:o:canonical:ubuntu_linux:14.04:*:*:*:esm:*:*:*cpe:2.3:o:canonical:ubuntu_linux:16.04:*:*:*:esm:*:*:*cpe:2.3:o:canonical:ubuntu_linux:17.10:*:*:*:*:*:*:*cpe:2.3:a:netapp:active_iq_unified_manager:*:*:*:*:*:windows:*:* ≥ 7.3cpe:2.3:a:netapp:active_iq_unified_manager:*:*:*:*:*:vmware_vsphere:*:* ≥ 9.5cpe:2.3:a:netapp:oncommand_insight:-:*:*:*:*:*:*:*cpe:2.3:a:netapp:oncommand_workflow_automation:-:*:*:*:*:*:*:*cpe:2.3:a:netapp:snapcenter:-:*:*:*:*:*:*:*cpe:2.3:a:redhat:openstack:12:*:*:*:*:*:*:*cpe:2.3:o:redhat:enterprise_linux_desktop:7.0:*:*:*:*:*:*:*cpe:2.3:o:redhat:enterprise_linux_eus:7.5:*:*:*:*:*:*:*cpe:2.3:o:redhat:enterprise_linux_eus:7.6:*:*:*:*:*:*:*cpe:2.3:o:redhat:enterprise_linux_eus:7.7:*:*:*:*:*:*:*cpe:2.3:o:redhat:enterprise_linux_server:7.0:*:*:*:*:*:*:*cpe:2.3:o:redhat:enterprise_linux_server_aus:7.6:*:*:*:*:*:*:*cpe:2.3:o:redhat:enterprise_linux_server_aus:7.7:*:*:*:*:*:*:*cpe:2.3:o:redhat:enterprise_linux_server_tus:7.6:*:*:*:*:*:*:*cpe:2.3:o:redhat:enterprise_linux_server_tus:7.7:*:*:*:*:*:*:*cpe:2.3:o:redhat:enterprise_linux_workstation:7.0:*:*:*:*:*:*:*Affected products
References
Sources
