CVE-2018-3137 in MySQL Serverinfo

Summary

Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Optimizer). Supported versions that are affected are 8.0.12 and prior. Easily exploitable vulnerability allows low privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.0 Base Score 6.5 (Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H).

VulDB is the best source for vulnerability data and more expert information about this specific topic.

Reservation

12/15/2017

Disclosure

10/16/2018

Moderation

VulDB entry created

Entries

VDB-125541 (1)

CPE

ready

CWE

CWE-284 (Confirmed)

CVSS

6.5

EPSS

0.00422

Activities

Very Low

Sources

MITRE	https://www.cve.org/CVERecord?id=CVE-2018-3137
NVD	https://nvd.nist.gov/vuln/detail/CVE-2018-3137
CVE Details	https://www.cvedetails.com/cve/CVE-2018-3137/

◂ Previous Overview Next ▸

Do you want to use VulDB in your project?

Use the official API to access entries easily!