CoreCVE
Back

MEDIUM

mysql: Client programs unspecified vulnerability (CPU Jul 2018)

Published Jul 18, 2018

Description

Vulnerability in the MySQL Client component of Oracle MySQL (subcomponent: Client programs). Supported versions that are affected are 5.5.60 and prior, 5.6.40 and prior, 5.7.22 and prior and 8.0.11 and prior. Difficult to exploit vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Client. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Client as well as unauthorized update, insert or delete access to some of MySQL Client accessible data. CVSS 3.0 Base Score 5.0 (Integrity and Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:H/PR:H/UI:N/S:U/C:N/I:L/A:H).

Affected products

Remediation

No remediation recorded yet.

Metrics

Weaknesses (0)

No CWE recorded.

References (15)

Change history (0)

No recorded changes yet.

Sources
CVE.org / MITRE
Status PUBLISHED
Assigner oracle
Published Jul 18, 2018
Updated Oct 2, 2024
Reserved Dec 15, 2017
Link CVE-2018-3081
CISA Vulnrichment
Updated Oct 2, 2024
NVD
Status Modified
Modified Jun 17, 2026
Link CVE-2018-3081
Red Hat
Severity Moderate
Public date Jul 17, 2018
Links CVE-2018-3081 - Bugzilla