PT-2018-15690 · Oracle+3 · Mysql Server+2

Publicado

2018-01-16

·

Atualizado

2020-08-24

·

CVE-2018-2645

CVSS v3.1

4.9

Média

VetorAV:N/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N
Name of the Vulnerable Software and Affected Versions Oracle MySQL versions 5.6.38 and prior Oracle MySQL versions 5.7.20 and prior
Description The issue allows a high privileged attacker with network access via multiple protocols to compromise the MySQL Server. Successful attacks can result in unauthorized access to critical data or complete access to all MySQL Server accessible data, as well as the ability to cause a hang or frequently repeatable crash of the MySQL Server.
Recommendations For versions 5.6.38 and prior, update to a version later than 5.6.38 to resolve the issue. For versions 5.7.20 and prior, update to a version later than 5.7.20 to resolve the issue.

Correção

Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
dbugs@ptsecurity.com

Identificadores relacionados

CVE-2018-2645
OPENSUSE-SU-2018_0223-1
RHSA-2018:0586
RHSA-2018:0587
USN-3537-1

Produtos afetados

Mysql Server
Suse
Ubuntu