RHSA-2018:2439
Vulnerability from csaf_opensuse - Published: 2018-08-16 00:00 - Updated: 2026-09-20 11:01Summary
security update for mariadb
Severity
Moderate
Notes
Title of the patch: security update for mariadb
Description of the patch: This security update provides a functional equivalent of RHSA-2018:2439.
The original Red Hat(R) advisory is available from the Red Hat web site at
https://access.redhat.com/errata/RHSA-2018:2439.
Patchnames: RHSA-2018:2439
Terms of use: CSAF 2.0 data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).
4.1 (Medium)
Affected products
Recommended
12 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: SUSE Liberty Linux 7:mariadb-1:5.5.60-1.el7_5.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Liberty Linux 7:mariadb-bench-1:5.5.60-1.el7_5.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Liberty Linux 7:mariadb-devel-1:5.5.60-1.el7_5.i686 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Liberty Linux 7:mariadb-devel-1:5.5.60-1.el7_5.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Liberty Linux 7:mariadb-embedded-1:5.5.60-1.el7_5.i686 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Liberty Linux 7:mariadb-embedded-1:5.5.60-1.el7_5.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Liberty Linux 7:mariadb-embedded-devel-1:5.5.60-1.el7_5.i686 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Liberty Linux 7:mariadb-embedded-devel-1:5.5.60-1.el7_5.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Liberty Linux 7:mariadb-libs-1:5.5.60-1.el7_5.i686 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Liberty Linux 7:mariadb-libs-1:5.5.60-1.el7_5.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Liberty Linux 7:mariadb-server-1:5.5.60-1.el7_5.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Liberty Linux 7:mariadb-test-1:5.5.60-1.el7_5.x86_64 | — |
Vendor Fix
|
Threats
Impact
moderate
6.5 (Medium)
Affected products
Recommended
12 products, the same list as for
CVE-2017-10268
Threats
Impact
moderate
6.5 (Medium)
Affected products
Recommended
12 products, the same list as for
CVE-2017-10268
Threats
Impact
moderate
6.5 (Medium)
Affected products
Recommended
12 products, the same list as for
CVE-2017-10268
Threats
Impact
moderate
5.3 (Medium)
Affected products
Recommended
12 products, the same list as for
CVE-2017-10268
Threats
Impact
moderate
4.9 (Medium)
Affected products
Recommended
12 products, the same list as for
CVE-2017-10268
Threats
Impact
moderate
4.3 (Medium)
Affected products
Recommended
12 products, the same list as for
CVE-2017-10268
Threats
Impact
moderate
Affected products
Recommended
12 products, the same list as for
CVE-2017-10268
Threats
Impact
low
7.1 (High)
Affected products
Recommended
12 products, the same list as for
CVE-2017-10268
Threats
Impact
moderate
6.5 (Medium)
Affected products
Recommended
12 products, the same list as for
CVE-2017-10268
Threats
Impact
moderate
6.5 (Medium)
Affected products
Recommended
12 products, the same list as for
CVE-2017-10268
Threats
Impact
moderate
6.5 (Medium)
Affected products
Recommended
12 products, the same list as for
CVE-2017-10268
Threats
Impact
moderate
6.5 (Medium)
Affected products
Recommended
12 products, the same list as for
CVE-2017-10268
Threats
Impact
moderate
7.7 (High)
Affected products
Recommended
12 products, the same list as for
CVE-2017-10268
Threats
Impact
moderate
5.9 (Medium)
Affected products
Recommended
12 products, the same list as for
CVE-2017-10268
Threats
Impact
moderate
Affected products
Recommended
12 products, the same list as for
CVE-2017-10268
Threats
Impact
moderate
4.4 (Medium)
Affected products
Recommended
12 products, the same list as for
CVE-2017-10268
Threats
Impact
moderate
4.9 (Medium)
Affected products
Recommended
12 products, the same list as for
CVE-2017-10268
Threats
Impact
moderate
4.3 (Medium)
Affected products
Recommended
12 products, the same list as for
CVE-2017-10268
Threats
Impact
moderate
6.5 (Medium)
Affected products
Recommended
12 products, the same list as for
CVE-2017-10268
Threats
Impact
moderate
6.5 (Medium)
Affected products
Recommended
12 products, the same list as for
CVE-2017-10268
Threats
Impact
moderate
References
98 references
{
"document": {
"aggregate_severity": {
"namespace": "https://www.suse.com/support/security/rating/",
"text": "Moderate"
},
"category": "csaf_security_advisory",
"csaf_version": "2.0",
"distribution": {
"text": "Copyright 2024 SUSE LLC. All rights reserved.",
"tlp": {
"label": "WHITE",
"url": "https://www.first.org/tlp/"
}
},
"lang": "en",
"notes": [
{
"category": "summary",
"text": "security update for mariadb",
"title": "Title of the patch"
},
{
"category": "description",
"text": "This security update provides a functional equivalent of RHSA-2018:2439.\nThe original Red Hat(R) advisory is available from the Red Hat web site at\nhttps://access.redhat.com/errata/RHSA-2018:2439.\n",
"title": "Description of the patch"
},
{
"category": "details",
"text": "RHSA-2018:2439",
"title": "Patchnames"
},
{
"category": "legal_disclaimer",
"text": "CSAF 2.0 data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).",
"title": "Terms of use"
}
],
"publisher": {
"category": "vendor",
"contact_details": "https://www.suse.com/support/security/contact/",
"name": "SUSE Product Security Team",
"namespace": "https://www.suse.com/"
},
"references": [
{
"category": "external",
"summary": "SUSE ratings",
"url": "https://www.suse.com/support/security/rating/"
},
{
"category": "self",
"summary": "URL of this CSAF notice",
"url": "https://ftp.suse.com/pub/projects/security/csaf/rhsa-2018_2439.json"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2017-10268 page",
"url": "https://www.suse.com/security/cve/CVE-2017-10268/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2017-10378 page",
"url": "https://www.suse.com/security/cve/CVE-2017-10378/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2017-10379 page",
"url": "https://www.suse.com/security/cve/CVE-2017-10379/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2017-10384 page",
"url": "https://www.suse.com/security/cve/CVE-2017-10384/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2017-3636 page",
"url": "https://www.suse.com/security/cve/CVE-2017-3636/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2017-3641 page",
"url": "https://www.suse.com/security/cve/CVE-2017-3641/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2017-3651 page",
"url": "https://www.suse.com/security/cve/CVE-2017-3651/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2017-3653 page",
"url": "https://www.suse.com/security/cve/CVE-2017-3653/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2018-2562 page",
"url": "https://www.suse.com/security/cve/CVE-2018-2562/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2018-2622 page",
"url": "https://www.suse.com/security/cve/CVE-2018-2622/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2018-2640 page",
"url": "https://www.suse.com/security/cve/CVE-2018-2640/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2018-2665 page",
"url": "https://www.suse.com/security/cve/CVE-2018-2665/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2018-2668 page",
"url": "https://www.suse.com/security/cve/CVE-2018-2668/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2018-2755 page",
"url": "https://www.suse.com/security/cve/CVE-2018-2755/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2018-2761 page",
"url": "https://www.suse.com/security/cve/CVE-2018-2761/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2018-2767 page",
"url": "https://www.suse.com/security/cve/CVE-2018-2767/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2018-2771 page",
"url": "https://www.suse.com/security/cve/CVE-2018-2771/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2018-2781 page",
"url": "https://www.suse.com/security/cve/CVE-2018-2781/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2018-2813 page",
"url": "https://www.suse.com/security/cve/CVE-2018-2813/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2018-2817 page",
"url": "https://www.suse.com/security/cve/CVE-2018-2817/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2018-2819 page",
"url": "https://www.suse.com/security/cve/CVE-2018-2819/"
}
],
"title": "security update for mariadb",
"tracking": {
"current_release_date": "2026-09-20T11:01:22Z",
"generator": {
"date": "2018-08-16T00:00:00Z",
"engine": {
"name": "cve-database.git:bin/generate-csaf.pl",
"version": "1"
}
},
"id": "RHSA-2018:2439",
"initial_release_date": "2018-08-16T00:00:00Z",
"revision_history": [
{
"date": "2018-08-16T00:00:00Z",
"number": "1",
"summary": "Current version"
},
{
"date": "2026-09-20T11:01:22Z",
"number": "2",
"summary": "unknown changes"
}
],
"status": "final",
"version": "2"
}
},
"product_tree": {
"branches": [
{
"branches": [
{
"branches": [
{
"category": "product_version",
"name": "mariadb-devel-1:5.5.60-1.el7_5.i686",
"product": {
"name": "mariadb-devel-1:5.5.60-1.el7_5.i686",
"product_id": "mariadb-devel-1:5.5.60-1.el7_5.i686",
"product_identification_helper": {
"purl": "pkg:rpm/suse/mariadb-devel@5.5.60-1.el7_5?arch=i686\u0026epoch=1"
}
}
},
{
"category": "product_version",
"name": "mariadb-embedded-1:5.5.60-1.el7_5.i686",
"product": {
"name": "mariadb-embedded-1:5.5.60-1.el7_5.i686",
"product_id": "mariadb-embedded-1:5.5.60-1.el7_5.i686",
"product_identification_helper": {
"purl": "pkg:rpm/suse/mariadb-embedded@5.5.60-1.el7_5?arch=i686\u0026epoch=1"
}
}
},
{
"category": "product_version",
"name": "mariadb-embedded-devel-1:5.5.60-1.el7_5.i686",
"product": {
"name": "mariadb-embedded-devel-1:5.5.60-1.el7_5.i686",
"product_id": "mariadb-embedded-devel-1:5.5.60-1.el7_5.i686",
"product_identification_helper": {
"purl": "pkg:rpm/suse/mariadb-embedded-devel@5.5.60-1.el7_5?arch=i686\u0026epoch=1"
}
}
},
{
"category": "product_version",
"name": "mariadb-libs-1:5.5.60-1.el7_5.i686",
"product": {
"name": "mariadb-libs-1:5.5.60-1.el7_5.i686",
"product_id": "mariadb-libs-1:5.5.60-1.el7_5.i686",
"product_identification_helper": {
"purl": "pkg:rpm/suse/mariadb-libs@5.5.60-1.el7_5?arch=i686\u0026epoch=1"
}
}
}
],
"category": "architecture",
"name": "i686"
},
{
"branches": [
{
"category": "product_version",
"name": "mariadb-1:5.5.60-1.el7_5.x86_64",
"product": {
"name": "mariadb-1:5.5.60-1.el7_5.x86_64",
"product_id": "mariadb-1:5.5.60-1.el7_5.x86_64",
"product_identification_helper": {
"cpe": "cpe:2.3:a:mariadb:mariadb:5.5.60:*:*:*:*:*:*:*",
"purl": "pkg:rpm/suse/mariadb@5.5.60-1.el7_5?arch=x86_64\u0026epoch=1\u0026upstream=mariadb-1:5.5.60-1.el7_5.src.rpm"
}
}
},
{
"category": "product_version",
"name": "mariadb-bench-1:5.5.60-1.el7_5.x86_64",
"product": {
"name": "mariadb-bench-1:5.5.60-1.el7_5.x86_64",
"product_id": "mariadb-bench-1:5.5.60-1.el7_5.x86_64",
"product_identification_helper": {
"cpe": "cpe:2.3:a:mariadb:mariadb:5.5.60:*:*:*:*:*:*:*",
"purl": "pkg:rpm/suse/mariadb-bench@5.5.60-1.el7_5?arch=x86_64\u0026epoch=1\u0026upstream=mariadb-1:5.5.60-1.el7_5.src.rpm"
}
}
},
{
"category": "product_version",
"name": "mariadb-devel-1:5.5.60-1.el7_5.x86_64",
"product": {
"name": "mariadb-devel-1:5.5.60-1.el7_5.x86_64",
"product_id": "mariadb-devel-1:5.5.60-1.el7_5.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/suse/mariadb-devel@5.5.60-1.el7_5?arch=x86_64\u0026epoch=1"
}
}
},
{
"category": "product_version",
"name": "mariadb-embedded-1:5.5.60-1.el7_5.x86_64",
"product": {
"name": "mariadb-embedded-1:5.5.60-1.el7_5.x86_64",
"product_id": "mariadb-embedded-1:5.5.60-1.el7_5.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/suse/mariadb-embedded@5.5.60-1.el7_5?arch=x86_64\u0026epoch=1"
}
}
},
{
"category": "product_version",
"name": "mariadb-embedded-devel-1:5.5.60-1.el7_5.x86_64",
"product": {
"name": "mariadb-embedded-devel-1:5.5.60-1.el7_5.x86_64",
"product_id": "mariadb-embedded-devel-1:5.5.60-1.el7_5.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/suse/mariadb-embedded-devel@5.5.60-1.el7_5?arch=x86_64\u0026epoch=1"
}
}
},
{
"category": "product_version",
"name": "mariadb-libs-1:5.5.60-1.el7_5.x86_64",
"product": {
"name": "mariadb-libs-1:5.5.60-1.el7_5.x86_64",
"product_id": "mariadb-libs-1:5.5.60-1.el7_5.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/suse/mariadb-libs@5.5.60-1.el7_5?arch=x86_64\u0026epoch=1"
}
}
},
{
"category": "product_version",
"name": "mariadb-server-1:5.5.60-1.el7_5.x86_64",
"product": {
"name": "mariadb-server-1:5.5.60-1.el7_5.x86_64",
"product_id": "mariadb-server-1:5.5.60-1.el7_5.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/suse/mariadb-server@5.5.60-1.el7_5?arch=x86_64\u0026epoch=1"
}
}
},
{
"category": "product_version",
"name": "mariadb-test-1:5.5.60-1.el7_5.x86_64",
"product": {
"name": "mariadb-test-1:5.5.60-1.el7_5.x86_64",
"product_id": "mariadb-test-1:5.5.60-1.el7_5.x86_64",
"product_identification_helper": {
"cpe": "cpe:2.3:a:mariadb:mariadb:5.5.60:*:*:*:*:*:*:*",
"purl": "pkg:rpm/suse/mariadb-test@5.5.60-1.el7_5?arch=x86_64\u0026epoch=1\u0026upstream=mariadb-1:5.5.60-1.el7_5.src.rpm"
}
}
}
],
"category": "architecture",
"name": "x86_64"
},
{
"branches": [
{
"category": "product_name",
"name": "SUSE Liberty Linux 7",
"product": {
"name": "SUSE Liberty Linux 7",
"product_id": "SUSE Liberty Linux 7",
"product_identification_helper": {
"cpe": "cpe:/o:suse:sll:7"
}
}
}
],
"category": "product_family",
"name": "SUSE Linux Enterprise"
}
],
"category": "vendor",
"name": "SUSE"
}
],
"relationships": [
{
"category": "default_component_of",
"full_product_name": {
"name": "mariadb-1:5.5.60-1.el7_5.x86_64 as component of SUSE Liberty Linux 7",
"product_id": "SUSE Liberty Linux 7:mariadb-1:5.5.60-1.el7_5.x86_64"
},
"product_reference": "mariadb-1:5.5.60-1.el7_5.x86_64",
"relates_to_product_reference": "SUSE Liberty Linux 7"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "mariadb-bench-1:5.5.60-1.el7_5.x86_64 as component of SUSE Liberty Linux 7",
"product_id": "SUSE Liberty Linux 7:mariadb-bench-1:5.5.60-1.el7_5.x86_64"
},
"product_reference": "mariadb-bench-1:5.5.60-1.el7_5.x86_64",
"relates_to_product_reference": "SUSE Liberty Linux 7"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "mariadb-devel-1:5.5.60-1.el7_5.i686 as component of SUSE Liberty Linux 7",
"product_id": "SUSE Liberty Linux 7:mariadb-devel-1:5.5.60-1.el7_5.i686"
},
"product_reference": "mariadb-devel-1:5.5.60-1.el7_5.i686",
"relates_to_product_reference": "SUSE Liberty Linux 7"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "mariadb-devel-1:5.5.60-1.el7_5.x86_64 as component of SUSE Liberty Linux 7",
"product_id": "SUSE Liberty Linux 7:mariadb-devel-1:5.5.60-1.el7_5.x86_64"
},
"product_reference": "mariadb-devel-1:5.5.60-1.el7_5.x86_64",
"relates_to_product_reference": "SUSE Liberty Linux 7"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "mariadb-embedded-1:5.5.60-1.el7_5.i686 as component of SUSE Liberty Linux 7",
"product_id": "SUSE Liberty Linux 7:mariadb-embedded-1:5.5.60-1.el7_5.i686"
},
"product_reference": "mariadb-embedded-1:5.5.60-1.el7_5.i686",
"relates_to_product_reference": "SUSE Liberty Linux 7"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "mariadb-embedded-1:5.5.60-1.el7_5.x86_64 as component of SUSE Liberty Linux 7",
"product_id": "SUSE Liberty Linux 7:mariadb-embedded-1:5.5.60-1.el7_5.x86_64"
},
"product_reference": "mariadb-embedded-1:5.5.60-1.el7_5.x86_64",
"relates_to_product_reference": "SUSE Liberty Linux 7"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "mariadb-embedded-devel-1:5.5.60-1.el7_5.i686 as component of SUSE Liberty Linux 7",
"product_id": "SUSE Liberty Linux 7:mariadb-embedded-devel-1:5.5.60-1.el7_5.i686"
},
"product_reference": "mariadb-embedded-devel-1:5.5.60-1.el7_5.i686",
"relates_to_product_reference": "SUSE Liberty Linux 7"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "mariadb-embedded-devel-1:5.5.60-1.el7_5.x86_64 as component of SUSE Liberty Linux 7",
"product_id": "SUSE Liberty Linux 7:mariadb-embedded-devel-1:5.5.60-1.el7_5.x86_64"
},
"product_reference": "mariadb-embedded-devel-1:5.5.60-1.el7_5.x86_64",
"relates_to_product_reference": "SUSE Liberty Linux 7"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "mariadb-libs-1:5.5.60-1.el7_5.i686 as component of SUSE Liberty Linux 7",
"product_id": "SUSE Liberty Linux 7:mariadb-libs-1:5.5.60-1.el7_5.i686"
},
"product_reference": "mariadb-libs-1:5.5.60-1.el7_5.i686",
"relates_to_product_reference": "SUSE Liberty Linux 7"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "mariadb-libs-1:5.5.60-1.el7_5.x86_64 as component of SUSE Liberty Linux 7",
"product_id": "SUSE Liberty Linux 7:mariadb-libs-1:5.5.60-1.el7_5.x86_64"
},
"product_reference": "mariadb-libs-1:5.5.60-1.el7_5.x86_64",
"relates_to_product_reference": "SUSE Liberty Linux 7"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "mariadb-server-1:5.5.60-1.el7_5.x86_64 as component of SUSE Liberty Linux 7",
"product_id": "SUSE Liberty Linux 7:mariadb-server-1:5.5.60-1.el7_5.x86_64"
},
"product_reference": "mariadb-server-1:5.5.60-1.el7_5.x86_64",
"relates_to_product_reference": "SUSE Liberty Linux 7"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "mariadb-test-1:5.5.60-1.el7_5.x86_64 as component of SUSE Liberty Linux 7",
"product_id": "SUSE Liberty Linux 7:mariadb-test-1:5.5.60-1.el7_5.x86_64"
},
"product_reference": "mariadb-test-1:5.5.60-1.el7_5.x86_64",
"relates_to_product_reference": "SUSE Liberty Linux 7"
}
]
},
"vulnerabilities": [
{
"cve": "CVE-2017-10268",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2017-10268"
}
],
"notes": [
{
"category": "general",
"text": "Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Replication). Supported versions that are affected are 5.5.57 and earlier, 5.6.37 and earlier and 5.7.19 and earlier. Difficult to exploit vulnerability allows high privileged attacker with logon to the infrastructure where MySQL Server executes to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all MySQL Server accessible data. CVSS 3.0 Base Score 4.1 (Confidentiality impacts). CVSS Vector: (CVSS:3.0/AV:L/AC:H/PR:H/UI:N/S:U/C:H/I:N/A:N).",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Liberty Linux 7:mariadb-1:5.5.60-1.el7_5.x86_64",
"SUSE Liberty Linux 7:mariadb-bench-1:5.5.60-1.el7_5.x86_64",
"SUSE Liberty Linux 7:mariadb-devel-1:5.5.60-1.el7_5.i686",
"SUSE Liberty Linux 7:mariadb-devel-1:5.5.60-1.el7_5.x86_64",
"SUSE Liberty Linux 7:mariadb-embedded-1:5.5.60-1.el7_5.i686",
"SUSE Liberty Linux 7:mariadb-embedded-1:5.5.60-1.el7_5.x86_64",
"SUSE Liberty Linux 7:mariadb-embedded-devel-1:5.5.60-1.el7_5.i686",
"SUSE Liberty Linux 7:mariadb-embedded-devel-1:5.5.60-1.el7_5.x86_64",
"SUSE Liberty Linux 7:mariadb-libs-1:5.5.60-1.el7_5.i686",
"SUSE Liberty Linux 7:mariadb-libs-1:5.5.60-1.el7_5.x86_64",
"SUSE Liberty Linux 7:mariadb-server-1:5.5.60-1.el7_5.x86_64",
"SUSE Liberty Linux 7:mariadb-test-1:5.5.60-1.el7_5.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2017-10268",
"url": "https://www.suse.com/security/cve/CVE-2017-10268"
},
{
"category": "external",
"summary": "SUSE Bug 1064101 for CVE-2017-10268",
"url": "https://bugzilla.suse.com/1064101"
},
{
"category": "external",
"summary": "SUSE Bug 1064119 for CVE-2017-10268",
"url": "https://bugzilla.suse.com/1064119"
},
{
"category": "external",
"summary": "SUSE Bug 1076505 for CVE-2017-10268",
"url": "https://bugzilla.suse.com/1076505"
},
{
"category": "external",
"summary": "SUSE Bug 1076506 for CVE-2017-10268",
"url": "https://bugzilla.suse.com/1076506"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Liberty Linux 7:mariadb-1:5.5.60-1.el7_5.x86_64",
"SUSE Liberty Linux 7:mariadb-bench-1:5.5.60-1.el7_5.x86_64",
"SUSE Liberty Linux 7:mariadb-devel-1:5.5.60-1.el7_5.i686",
"SUSE Liberty Linux 7:mariadb-devel-1:5.5.60-1.el7_5.x86_64",
"SUSE Liberty Linux 7:mariadb-embedded-1:5.5.60-1.el7_5.i686",
"SUSE Liberty Linux 7:mariadb-embedded-1:5.5.60-1.el7_5.x86_64",
"SUSE Liberty Linux 7:mariadb-embedded-devel-1:5.5.60-1.el7_5.i686",
"SUSE Liberty Linux 7:mariadb-embedded-devel-1:5.5.60-1.el7_5.x86_64",
"SUSE Liberty Linux 7:mariadb-libs-1:5.5.60-1.el7_5.i686",
"SUSE Liberty Linux 7:mariadb-libs-1:5.5.60-1.el7_5.x86_64",
"SUSE Liberty Linux 7:mariadb-server-1:5.5.60-1.el7_5.x86_64",
"SUSE Liberty Linux 7:mariadb-test-1:5.5.60-1.el7_5.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 4.1,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.0/AV:L/AC:H/PR:H/UI:N/S:U/C:H/I:N/A:N",
"version": "3.0"
},
"products": [
"SUSE Liberty Linux 7:mariadb-1:5.5.60-1.el7_5.x86_64",
"SUSE Liberty Linux 7:mariadb-bench-1:5.5.60-1.el7_5.x86_64",
"SUSE Liberty Linux 7:mariadb-devel-1:5.5.60-1.el7_5.i686",
"SUSE Liberty Linux 7:mariadb-devel-1:5.5.60-1.el7_5.x86_64",
"SUSE Liberty Linux 7:mariadb-embedded-1:5.5.60-1.el7_5.i686",
"SUSE Liberty Linux 7:mariadb-embedded-1:5.5.60-1.el7_5.x86_64",
"SUSE Liberty Linux 7:mariadb-embedded-devel-1:5.5.60-1.el7_5.i686",
"SUSE Liberty Linux 7:mariadb-embedded-devel-1:5.5.60-1.el7_5.x86_64",
"SUSE Liberty Linux 7:mariadb-libs-1:5.5.60-1.el7_5.i686",
"SUSE Liberty Linux 7:mariadb-libs-1:5.5.60-1.el7_5.x86_64",
"SUSE Liberty Linux 7:mariadb-server-1:5.5.60-1.el7_5.x86_64",
"SUSE Liberty Linux 7:mariadb-test-1:5.5.60-1.el7_5.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2018-08-16T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2017-10268"
},
{
"cve": "CVE-2017-10378",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2017-10378"
}
],
"notes": [
{
"category": "general",
"text": "Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Optimizer). Supported versions that are affected are 5.5.57 and earlier, 5.6.37 and earlier and 5.7.11 and earlier. Easily exploitable vulnerability allows low privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.0 Base Score 6.5 (Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H).",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Liberty Linux 7:mariadb-1:5.5.60-1.el7_5.x86_64",
"SUSE Liberty Linux 7:mariadb-bench-1:5.5.60-1.el7_5.x86_64",
"SUSE Liberty Linux 7:mariadb-devel-1:5.5.60-1.el7_5.i686",
"SUSE Liberty Linux 7:mariadb-devel-1:5.5.60-1.el7_5.x86_64",
"SUSE Liberty Linux 7:mariadb-embedded-1:5.5.60-1.el7_5.i686",
"SUSE Liberty Linux 7:mariadb-embedded-1:5.5.60-1.el7_5.x86_64",
"SUSE Liberty Linux 7:mariadb-embedded-devel-1:5.5.60-1.el7_5.i686",
"SUSE Liberty Linux 7:mariadb-embedded-devel-1:5.5.60-1.el7_5.x86_64",
"SUSE Liberty Linux 7:mariadb-libs-1:5.5.60-1.el7_5.i686",
"SUSE Liberty Linux 7:mariadb-libs-1:5.5.60-1.el7_5.x86_64",
"SUSE Liberty Linux 7:mariadb-server-1:5.5.60-1.el7_5.x86_64",
"SUSE Liberty Linux 7:mariadb-test-1:5.5.60-1.el7_5.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2017-10378",
"url": "https://www.suse.com/security/cve/CVE-2017-10378"
},
{
"category": "external",
"summary": "SUSE Bug 1064115 for CVE-2017-10378",
"url": "https://bugzilla.suse.com/1064115"
},
{
"category": "external",
"summary": "SUSE Bug 1064119 for CVE-2017-10378",
"url": "https://bugzilla.suse.com/1064119"
},
{
"category": "external",
"summary": "SUSE Bug 1076505 for CVE-2017-10378",
"url": "https://bugzilla.suse.com/1076505"
},
{
"category": "external",
"summary": "SUSE Bug 1076506 for CVE-2017-10378",
"url": "https://bugzilla.suse.com/1076506"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Liberty Linux 7:mariadb-1:5.5.60-1.el7_5.x86_64",
"SUSE Liberty Linux 7:mariadb-bench-1:5.5.60-1.el7_5.x86_64",
"SUSE Liberty Linux 7:mariadb-devel-1:5.5.60-1.el7_5.i686",
"SUSE Liberty Linux 7:mariadb-devel-1:5.5.60-1.el7_5.x86_64",
"SUSE Liberty Linux 7:mariadb-embedded-1:5.5.60-1.el7_5.i686",
"SUSE Liberty Linux 7:mariadb-embedded-1:5.5.60-1.el7_5.x86_64",
"SUSE Liberty Linux 7:mariadb-embedded-devel-1:5.5.60-1.el7_5.i686",
"SUSE Liberty Linux 7:mariadb-embedded-devel-1:5.5.60-1.el7_5.x86_64",
"SUSE Liberty Linux 7:mariadb-libs-1:5.5.60-1.el7_5.i686",
"SUSE Liberty Linux 7:mariadb-libs-1:5.5.60-1.el7_5.x86_64",
"SUSE Liberty Linux 7:mariadb-server-1:5.5.60-1.el7_5.x86_64",
"SUSE Liberty Linux 7:mariadb-test-1:5.5.60-1.el7_5.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.0"
},
"products": [
"SUSE Liberty Linux 7:mariadb-1:5.5.60-1.el7_5.x86_64",
"SUSE Liberty Linux 7:mariadb-bench-1:5.5.60-1.el7_5.x86_64",
"SUSE Liberty Linux 7:mariadb-devel-1:5.5.60-1.el7_5.i686",
"SUSE Liberty Linux 7:mariadb-devel-1:5.5.60-1.el7_5.x86_64",
"SUSE Liberty Linux 7:mariadb-embedded-1:5.5.60-1.el7_5.i686",
"SUSE Liberty Linux 7:mariadb-embedded-1:5.5.60-1.el7_5.x86_64",
"SUSE Liberty Linux 7:mariadb-embedded-devel-1:5.5.60-1.el7_5.i686",
"SUSE Liberty Linux 7:mariadb-embedded-devel-1:5.5.60-1.el7_5.x86_64",
"SUSE Liberty Linux 7:mariadb-libs-1:5.5.60-1.el7_5.i686",
"SUSE Liberty Linux 7:mariadb-libs-1:5.5.60-1.el7_5.x86_64",
"SUSE Liberty Linux 7:mariadb-server-1:5.5.60-1.el7_5.x86_64",
"SUSE Liberty Linux 7:mariadb-test-1:5.5.60-1.el7_5.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2018-08-16T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2017-10378"
},
{
"cve": "CVE-2017-10379",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2017-10379"
}
],
"notes": [
{
"category": "general",
"text": "Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Client programs). Supported versions that are affected are 5.5.57 and earlier, 5.6.37 and earlier and 5.7.19 and earlier. Easily exploitable vulnerability allows low privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all MySQL Server accessible data. CVSS 3.0 Base Score 6.5 (Confidentiality impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N).",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Liberty Linux 7:mariadb-1:5.5.60-1.el7_5.x86_64",
"SUSE Liberty Linux 7:mariadb-bench-1:5.5.60-1.el7_5.x86_64",
"SUSE Liberty Linux 7:mariadb-devel-1:5.5.60-1.el7_5.i686",
"SUSE Liberty Linux 7:mariadb-devel-1:5.5.60-1.el7_5.x86_64",
"SUSE Liberty Linux 7:mariadb-embedded-1:5.5.60-1.el7_5.i686",
"SUSE Liberty Linux 7:mariadb-embedded-1:5.5.60-1.el7_5.x86_64",
"SUSE Liberty Linux 7:mariadb-embedded-devel-1:5.5.60-1.el7_5.i686",
"SUSE Liberty Linux 7:mariadb-embedded-devel-1:5.5.60-1.el7_5.x86_64",
"SUSE Liberty Linux 7:mariadb-libs-1:5.5.60-1.el7_5.i686",
"SUSE Liberty Linux 7:mariadb-libs-1:5.5.60-1.el7_5.x86_64",
"SUSE Liberty Linux 7:mariadb-server-1:5.5.60-1.el7_5.x86_64",
"SUSE Liberty Linux 7:mariadb-test-1:5.5.60-1.el7_5.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2017-10379",
"url": "https://www.suse.com/security/cve/CVE-2017-10379"
},
{
"category": "external",
"summary": "SUSE Bug 1064116 for CVE-2017-10379",
"url": "https://bugzilla.suse.com/1064116"
},
{
"category": "external",
"summary": "SUSE Bug 1064119 for CVE-2017-10379",
"url": "https://bugzilla.suse.com/1064119"
},
{
"category": "external",
"summary": "SUSE Bug 1076506 for CVE-2017-10379",
"url": "https://bugzilla.suse.com/1076506"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Liberty Linux 7:mariadb-1:5.5.60-1.el7_5.x86_64",
"SUSE Liberty Linux 7:mariadb-bench-1:5.5.60-1.el7_5.x86_64",
"SUSE Liberty Linux 7:mariadb-devel-1:5.5.60-1.el7_5.i686",
"SUSE Liberty Linux 7:mariadb-devel-1:5.5.60-1.el7_5.x86_64",
"SUSE Liberty Linux 7:mariadb-embedded-1:5.5.60-1.el7_5.i686",
"SUSE Liberty Linux 7:mariadb-embedded-1:5.5.60-1.el7_5.x86_64",
"SUSE Liberty Linux 7:mariadb-embedded-devel-1:5.5.60-1.el7_5.i686",
"SUSE Liberty Linux 7:mariadb-embedded-devel-1:5.5.60-1.el7_5.x86_64",
"SUSE Liberty Linux 7:mariadb-libs-1:5.5.60-1.el7_5.i686",
"SUSE Liberty Linux 7:mariadb-libs-1:5.5.60-1.el7_5.x86_64",
"SUSE Liberty Linux 7:mariadb-server-1:5.5.60-1.el7_5.x86_64",
"SUSE Liberty Linux 7:mariadb-test-1:5.5.60-1.el7_5.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.0"
},
"products": [
"SUSE Liberty Linux 7:mariadb-1:5.5.60-1.el7_5.x86_64",
"SUSE Liberty Linux 7:mariadb-bench-1:5.5.60-1.el7_5.x86_64",
"SUSE Liberty Linux 7:mariadb-devel-1:5.5.60-1.el7_5.i686",
"SUSE Liberty Linux 7:mariadb-devel-1:5.5.60-1.el7_5.x86_64",
"SUSE Liberty Linux 7:mariadb-embedded-1:5.5.60-1.el7_5.i686",
"SUSE Liberty Linux 7:mariadb-embedded-1:5.5.60-1.el7_5.x86_64",
"SUSE Liberty Linux 7:mariadb-embedded-devel-1:5.5.60-1.el7_5.i686",
"SUSE Liberty Linux 7:mariadb-embedded-devel-1:5.5.60-1.el7_5.x86_64",
"SUSE Liberty Linux 7:mariadb-libs-1:5.5.60-1.el7_5.i686",
"SUSE Liberty Linux 7:mariadb-libs-1:5.5.60-1.el7_5.x86_64",
"SUSE Liberty Linux 7:mariadb-server-1:5.5.60-1.el7_5.x86_64",
"SUSE Liberty Linux 7:mariadb-test-1:5.5.60-1.el7_5.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2018-08-16T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2017-10379"
},
{
"cve": "CVE-2017-10384",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2017-10384"
}
],
"notes": [
{
"category": "general",
"text": "Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: DDL). Supported versions that are affected are 5.5.57 and earlier 5.6.37 and earlier 5.7.19 and earlier. Easily exploitable vulnerability allows low privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.0 Base Score 6.5 (Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H).",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Liberty Linux 7:mariadb-1:5.5.60-1.el7_5.x86_64",
"SUSE Liberty Linux 7:mariadb-bench-1:5.5.60-1.el7_5.x86_64",
"SUSE Liberty Linux 7:mariadb-devel-1:5.5.60-1.el7_5.i686",
"SUSE Liberty Linux 7:mariadb-devel-1:5.5.60-1.el7_5.x86_64",
"SUSE Liberty Linux 7:mariadb-embedded-1:5.5.60-1.el7_5.i686",
"SUSE Liberty Linux 7:mariadb-embedded-1:5.5.60-1.el7_5.x86_64",
"SUSE Liberty Linux 7:mariadb-embedded-devel-1:5.5.60-1.el7_5.i686",
"SUSE Liberty Linux 7:mariadb-embedded-devel-1:5.5.60-1.el7_5.x86_64",
"SUSE Liberty Linux 7:mariadb-libs-1:5.5.60-1.el7_5.i686",
"SUSE Liberty Linux 7:mariadb-libs-1:5.5.60-1.el7_5.x86_64",
"SUSE Liberty Linux 7:mariadb-server-1:5.5.60-1.el7_5.x86_64",
"SUSE Liberty Linux 7:mariadb-test-1:5.5.60-1.el7_5.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2017-10384",
"url": "https://www.suse.com/security/cve/CVE-2017-10384"
},
{
"category": "external",
"summary": "SUSE Bug 1064117 for CVE-2017-10384",
"url": "https://bugzilla.suse.com/1064117"
},
{
"category": "external",
"summary": "SUSE Bug 1064119 for CVE-2017-10384",
"url": "https://bugzilla.suse.com/1064119"
},
{
"category": "external",
"summary": "SUSE Bug 1076506 for CVE-2017-10384",
"url": "https://bugzilla.suse.com/1076506"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Liberty Linux 7:mariadb-1:5.5.60-1.el7_5.x86_64",
"SUSE Liberty Linux 7:mariadb-bench-1:5.5.60-1.el7_5.x86_64",
"SUSE Liberty Linux 7:mariadb-devel-1:5.5.60-1.el7_5.i686",
"SUSE Liberty Linux 7:mariadb-devel-1:5.5.60-1.el7_5.x86_64",
"SUSE Liberty Linux 7:mariadb-embedded-1:5.5.60-1.el7_5.i686",
"SUSE Liberty Linux 7:mariadb-embedded-1:5.5.60-1.el7_5.x86_64",
"SUSE Liberty Linux 7:mariadb-embedded-devel-1:5.5.60-1.el7_5.i686",
"SUSE Liberty Linux 7:mariadb-embedded-devel-1:5.5.60-1.el7_5.x86_64",
"SUSE Liberty Linux 7:mariadb-libs-1:5.5.60-1.el7_5.i686",
"SUSE Liberty Linux 7:mariadb-libs-1:5.5.60-1.el7_5.x86_64",
"SUSE Liberty Linux 7:mariadb-server-1:5.5.60-1.el7_5.x86_64",
"SUSE Liberty Linux 7:mariadb-test-1:5.5.60-1.el7_5.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.0"
},
"products": [
"SUSE Liberty Linux 7:mariadb-1:5.5.60-1.el7_5.x86_64",
"SUSE Liberty Linux 7:mariadb-bench-1:5.5.60-1.el7_5.x86_64",
"SUSE Liberty Linux 7:mariadb-devel-1:5.5.60-1.el7_5.i686",
"SUSE Liberty Linux 7:mariadb-devel-1:5.5.60-1.el7_5.x86_64",
"SUSE Liberty Linux 7:mariadb-embedded-1:5.5.60-1.el7_5.i686",
"SUSE Liberty Linux 7:mariadb-embedded-1:5.5.60-1.el7_5.x86_64",
"SUSE Liberty Linux 7:mariadb-embedded-devel-1:5.5.60-1.el7_5.i686",
"SUSE Liberty Linux 7:mariadb-embedded-devel-1:5.5.60-1.el7_5.x86_64",
"SUSE Liberty Linux 7:mariadb-libs-1:5.5.60-1.el7_5.i686",
"SUSE Liberty Linux 7:mariadb-libs-1:5.5.60-1.el7_5.x86_64",
"SUSE Liberty Linux 7:mariadb-server-1:5.5.60-1.el7_5.x86_64",
"SUSE Liberty Linux 7:mariadb-test-1:5.5.60-1.el7_5.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2018-08-16T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2017-10384"
},
{
"cve": "CVE-2017-3636",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2017-3636"
}
],
"notes": [
{
"category": "general",
"text": "Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Client programs). Supported versions that are affected are 5.5.56 and earlier and 5.6.36 and earlier. Easily exploitable vulnerability allows low privileged attacker with logon to the infrastructure where MySQL Server executes to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of MySQL Server accessible data as well as unauthorized read access to a subset of MySQL Server accessible data and unauthorized ability to cause a partial denial of service (partial DOS) of MySQL Server. CVSS 3.0 Base Score 5.3 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L).",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Liberty Linux 7:mariadb-1:5.5.60-1.el7_5.x86_64",
"SUSE Liberty Linux 7:mariadb-bench-1:5.5.60-1.el7_5.x86_64",
"SUSE Liberty Linux 7:mariadb-devel-1:5.5.60-1.el7_5.i686",
"SUSE Liberty Linux 7:mariadb-devel-1:5.5.60-1.el7_5.x86_64",
"SUSE Liberty Linux 7:mariadb-embedded-1:5.5.60-1.el7_5.i686",
"SUSE Liberty Linux 7:mariadb-embedded-1:5.5.60-1.el7_5.x86_64",
"SUSE Liberty Linux 7:mariadb-embedded-devel-1:5.5.60-1.el7_5.i686",
"SUSE Liberty Linux 7:mariadb-embedded-devel-1:5.5.60-1.el7_5.x86_64",
"SUSE Liberty Linux 7:mariadb-libs-1:5.5.60-1.el7_5.i686",
"SUSE Liberty Linux 7:mariadb-libs-1:5.5.60-1.el7_5.x86_64",
"SUSE Liberty Linux 7:mariadb-server-1:5.5.60-1.el7_5.x86_64",
"SUSE Liberty Linux 7:mariadb-test-1:5.5.60-1.el7_5.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2017-3636",
"url": "https://www.suse.com/security/cve/CVE-2017-3636"
},
{
"category": "external",
"summary": "SUSE Bug 1049399 for CVE-2017-3636",
"url": "https://bugzilla.suse.com/1049399"
},
{
"category": "external",
"summary": "SUSE Bug 1049422 for CVE-2017-3636",
"url": "https://bugzilla.suse.com/1049422"
},
{
"category": "external",
"summary": "SUSE Bug 1054591 for CVE-2017-3636",
"url": "https://bugzilla.suse.com/1054591"
},
{
"category": "external",
"summary": "SUSE Bug 1076506 for CVE-2017-3636",
"url": "https://bugzilla.suse.com/1076506"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Liberty Linux 7:mariadb-1:5.5.60-1.el7_5.x86_64",
"SUSE Liberty Linux 7:mariadb-bench-1:5.5.60-1.el7_5.x86_64",
"SUSE Liberty Linux 7:mariadb-devel-1:5.5.60-1.el7_5.i686",
"SUSE Liberty Linux 7:mariadb-devel-1:5.5.60-1.el7_5.x86_64",
"SUSE Liberty Linux 7:mariadb-embedded-1:5.5.60-1.el7_5.i686",
"SUSE Liberty Linux 7:mariadb-embedded-1:5.5.60-1.el7_5.x86_64",
"SUSE Liberty Linux 7:mariadb-embedded-devel-1:5.5.60-1.el7_5.i686",
"SUSE Liberty Linux 7:mariadb-embedded-devel-1:5.5.60-1.el7_5.x86_64",
"SUSE Liberty Linux 7:mariadb-libs-1:5.5.60-1.el7_5.i686",
"SUSE Liberty Linux 7:mariadb-libs-1:5.5.60-1.el7_5.x86_64",
"SUSE Liberty Linux 7:mariadb-server-1:5.5.60-1.el7_5.x86_64",
"SUSE Liberty Linux 7:mariadb-test-1:5.5.60-1.el7_5.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.3,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L",
"version": "3.0"
},
"products": [
"SUSE Liberty Linux 7:mariadb-1:5.5.60-1.el7_5.x86_64",
"SUSE Liberty Linux 7:mariadb-bench-1:5.5.60-1.el7_5.x86_64",
"SUSE Liberty Linux 7:mariadb-devel-1:5.5.60-1.el7_5.i686",
"SUSE Liberty Linux 7:mariadb-devel-1:5.5.60-1.el7_5.x86_64",
"SUSE Liberty Linux 7:mariadb-embedded-1:5.5.60-1.el7_5.i686",
"SUSE Liberty Linux 7:mariadb-embedded-1:5.5.60-1.el7_5.x86_64",
"SUSE Liberty Linux 7:mariadb-embedded-devel-1:5.5.60-1.el7_5.i686",
"SUSE Liberty Linux 7:mariadb-embedded-devel-1:5.5.60-1.el7_5.x86_64",
"SUSE Liberty Linux 7:mariadb-libs-1:5.5.60-1.el7_5.i686",
"SUSE Liberty Linux 7:mariadb-libs-1:5.5.60-1.el7_5.x86_64",
"SUSE Liberty Linux 7:mariadb-server-1:5.5.60-1.el7_5.x86_64",
"SUSE Liberty Linux 7:mariadb-test-1:5.5.60-1.el7_5.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2018-08-16T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2017-3636"
},
{
"cve": "CVE-2017-3641",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2017-3641"
}
],
"notes": [
{
"category": "general",
"text": "Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: DML). Supported versions that are affected are 5.5.56 and earlier, 5.6.36 and earlier and 5.7.18 and earlier. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.0 Base Score 4.9 (Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H).",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Liberty Linux 7:mariadb-1:5.5.60-1.el7_5.x86_64",
"SUSE Liberty Linux 7:mariadb-bench-1:5.5.60-1.el7_5.x86_64",
"SUSE Liberty Linux 7:mariadb-devel-1:5.5.60-1.el7_5.i686",
"SUSE Liberty Linux 7:mariadb-devel-1:5.5.60-1.el7_5.x86_64",
"SUSE Liberty Linux 7:mariadb-embedded-1:5.5.60-1.el7_5.i686",
"SUSE Liberty Linux 7:mariadb-embedded-1:5.5.60-1.el7_5.x86_64",
"SUSE Liberty Linux 7:mariadb-embedded-devel-1:5.5.60-1.el7_5.i686",
"SUSE Liberty Linux 7:mariadb-embedded-devel-1:5.5.60-1.el7_5.x86_64",
"SUSE Liberty Linux 7:mariadb-libs-1:5.5.60-1.el7_5.i686",
"SUSE Liberty Linux 7:mariadb-libs-1:5.5.60-1.el7_5.x86_64",
"SUSE Liberty Linux 7:mariadb-server-1:5.5.60-1.el7_5.x86_64",
"SUSE Liberty Linux 7:mariadb-test-1:5.5.60-1.el7_5.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2017-3641",
"url": "https://www.suse.com/security/cve/CVE-2017-3641"
},
{
"category": "external",
"summary": "SUSE Bug 1049404 for CVE-2017-3641",
"url": "https://bugzilla.suse.com/1049404"
},
{
"category": "external",
"summary": "SUSE Bug 1049422 for CVE-2017-3641",
"url": "https://bugzilla.suse.com/1049422"
},
{
"category": "external",
"summary": "SUSE Bug 1054591 for CVE-2017-3641",
"url": "https://bugzilla.suse.com/1054591"
},
{
"category": "external",
"summary": "SUSE Bug 1076506 for CVE-2017-3641",
"url": "https://bugzilla.suse.com/1076506"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Liberty Linux 7:mariadb-1:5.5.60-1.el7_5.x86_64",
"SUSE Liberty Linux 7:mariadb-bench-1:5.5.60-1.el7_5.x86_64",
"SUSE Liberty Linux 7:mariadb-devel-1:5.5.60-1.el7_5.i686",
"SUSE Liberty Linux 7:mariadb-devel-1:5.5.60-1.el7_5.x86_64",
"SUSE Liberty Linux 7:mariadb-embedded-1:5.5.60-1.el7_5.i686",
"SUSE Liberty Linux 7:mariadb-embedded-1:5.5.60-1.el7_5.x86_64",
"SUSE Liberty Linux 7:mariadb-embedded-devel-1:5.5.60-1.el7_5.i686",
"SUSE Liberty Linux 7:mariadb-embedded-devel-1:5.5.60-1.el7_5.x86_64",
"SUSE Liberty Linux 7:mariadb-libs-1:5.5.60-1.el7_5.i686",
"SUSE Liberty Linux 7:mariadb-libs-1:5.5.60-1.el7_5.x86_64",
"SUSE Liberty Linux 7:mariadb-server-1:5.5.60-1.el7_5.x86_64",
"SUSE Liberty Linux 7:mariadb-test-1:5.5.60-1.el7_5.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 4.9,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H",
"version": "3.0"
},
"products": [
"SUSE Liberty Linux 7:mariadb-1:5.5.60-1.el7_5.x86_64",
"SUSE Liberty Linux 7:mariadb-bench-1:5.5.60-1.el7_5.x86_64",
"SUSE Liberty Linux 7:mariadb-devel-1:5.5.60-1.el7_5.i686",
"SUSE Liberty Linux 7:mariadb-devel-1:5.5.60-1.el7_5.x86_64",
"SUSE Liberty Linux 7:mariadb-embedded-1:5.5.60-1.el7_5.i686",
"SUSE Liberty Linux 7:mariadb-embedded-1:5.5.60-1.el7_5.x86_64",
"SUSE Liberty Linux 7:mariadb-embedded-devel-1:5.5.60-1.el7_5.i686",
"SUSE Liberty Linux 7:mariadb-embedded-devel-1:5.5.60-1.el7_5.x86_64",
"SUSE Liberty Linux 7:mariadb-libs-1:5.5.60-1.el7_5.i686",
"SUSE Liberty Linux 7:mariadb-libs-1:5.5.60-1.el7_5.x86_64",
"SUSE Liberty Linux 7:mariadb-server-1:5.5.60-1.el7_5.x86_64",
"SUSE Liberty Linux 7:mariadb-test-1:5.5.60-1.el7_5.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2018-08-16T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2017-3641"
},
{
"cve": "CVE-2017-3651",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2017-3651"
}
],
"notes": [
{
"category": "general",
"text": "Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Client mysqldump). Supported versions that are affected are 5.5.56 and earlier, 5.6.36 and earlier and 5.7.18 and earlier. Easily exploitable vulnerability allows low privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of MySQL Server accessible data. CVSS 3.0 Base Score 4.3 (Integrity impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N).",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Liberty Linux 7:mariadb-1:5.5.60-1.el7_5.x86_64",
"SUSE Liberty Linux 7:mariadb-bench-1:5.5.60-1.el7_5.x86_64",
"SUSE Liberty Linux 7:mariadb-devel-1:5.5.60-1.el7_5.i686",
"SUSE Liberty Linux 7:mariadb-devel-1:5.5.60-1.el7_5.x86_64",
"SUSE Liberty Linux 7:mariadb-embedded-1:5.5.60-1.el7_5.i686",
"SUSE Liberty Linux 7:mariadb-embedded-1:5.5.60-1.el7_5.x86_64",
"SUSE Liberty Linux 7:mariadb-embedded-devel-1:5.5.60-1.el7_5.i686",
"SUSE Liberty Linux 7:mariadb-embedded-devel-1:5.5.60-1.el7_5.x86_64",
"SUSE Liberty Linux 7:mariadb-libs-1:5.5.60-1.el7_5.i686",
"SUSE Liberty Linux 7:mariadb-libs-1:5.5.60-1.el7_5.x86_64",
"SUSE Liberty Linux 7:mariadb-server-1:5.5.60-1.el7_5.x86_64",
"SUSE Liberty Linux 7:mariadb-test-1:5.5.60-1.el7_5.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2017-3651",
"url": "https://www.suse.com/security/cve/CVE-2017-3651"
},
{
"category": "external",
"summary": "SUSE Bug 1049415 for CVE-2017-3651",
"url": "https://bugzilla.suse.com/1049415"
},
{
"category": "external",
"summary": "SUSE Bug 1049422 for CVE-2017-3651",
"url": "https://bugzilla.suse.com/1049422"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Liberty Linux 7:mariadb-1:5.5.60-1.el7_5.x86_64",
"SUSE Liberty Linux 7:mariadb-bench-1:5.5.60-1.el7_5.x86_64",
"SUSE Liberty Linux 7:mariadb-devel-1:5.5.60-1.el7_5.i686",
"SUSE Liberty Linux 7:mariadb-devel-1:5.5.60-1.el7_5.x86_64",
"SUSE Liberty Linux 7:mariadb-embedded-1:5.5.60-1.el7_5.i686",
"SUSE Liberty Linux 7:mariadb-embedded-1:5.5.60-1.el7_5.x86_64",
"SUSE Liberty Linux 7:mariadb-embedded-devel-1:5.5.60-1.el7_5.i686",
"SUSE Liberty Linux 7:mariadb-embedded-devel-1:5.5.60-1.el7_5.x86_64",
"SUSE Liberty Linux 7:mariadb-libs-1:5.5.60-1.el7_5.i686",
"SUSE Liberty Linux 7:mariadb-libs-1:5.5.60-1.el7_5.x86_64",
"SUSE Liberty Linux 7:mariadb-server-1:5.5.60-1.el7_5.x86_64",
"SUSE Liberty Linux 7:mariadb-test-1:5.5.60-1.el7_5.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 4.3,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N",
"version": "3.0"
},
"products": [
"SUSE Liberty Linux 7:mariadb-1:5.5.60-1.el7_5.x86_64",
"SUSE Liberty Linux 7:mariadb-bench-1:5.5.60-1.el7_5.x86_64",
"SUSE Liberty Linux 7:mariadb-devel-1:5.5.60-1.el7_5.i686",
"SUSE Liberty Linux 7:mariadb-devel-1:5.5.60-1.el7_5.x86_64",
"SUSE Liberty Linux 7:mariadb-embedded-1:5.5.60-1.el7_5.i686",
"SUSE Liberty Linux 7:mariadb-embedded-1:5.5.60-1.el7_5.x86_64",
"SUSE Liberty Linux 7:mariadb-embedded-devel-1:5.5.60-1.el7_5.i686",
"SUSE Liberty Linux 7:mariadb-embedded-devel-1:5.5.60-1.el7_5.x86_64",
"SUSE Liberty Linux 7:mariadb-libs-1:5.5.60-1.el7_5.i686",
"SUSE Liberty Linux 7:mariadb-libs-1:5.5.60-1.el7_5.x86_64",
"SUSE Liberty Linux 7:mariadb-server-1:5.5.60-1.el7_5.x86_64",
"SUSE Liberty Linux 7:mariadb-test-1:5.5.60-1.el7_5.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2018-08-16T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2017-3651"
},
{
"cve": "CVE-2017-3653",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2017-3653"
}
],
"notes": [
{
"category": "general",
"text": "Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: DDL). Supported versions that are affected are 5.5.56 and earlier, 5.6.36 and earlier and 5.7.18 and earlier. Difficult to exploit vulnerability allows low privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of MySQL Server accessible data. CVSS 3.0 Base Score 3.1 (Integrity impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:H/PR:L/UI:N/S:U/C:N/I:L/A:N).",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Liberty Linux 7:mariadb-1:5.5.60-1.el7_5.x86_64",
"SUSE Liberty Linux 7:mariadb-bench-1:5.5.60-1.el7_5.x86_64",
"SUSE Liberty Linux 7:mariadb-devel-1:5.5.60-1.el7_5.i686",
"SUSE Liberty Linux 7:mariadb-devel-1:5.5.60-1.el7_5.x86_64",
"SUSE Liberty Linux 7:mariadb-embedded-1:5.5.60-1.el7_5.i686",
"SUSE Liberty Linux 7:mariadb-embedded-1:5.5.60-1.el7_5.x86_64",
"SUSE Liberty Linux 7:mariadb-embedded-devel-1:5.5.60-1.el7_5.i686",
"SUSE Liberty Linux 7:mariadb-embedded-devel-1:5.5.60-1.el7_5.x86_64",
"SUSE Liberty Linux 7:mariadb-libs-1:5.5.60-1.el7_5.i686",
"SUSE Liberty Linux 7:mariadb-libs-1:5.5.60-1.el7_5.x86_64",
"SUSE Liberty Linux 7:mariadb-server-1:5.5.60-1.el7_5.x86_64",
"SUSE Liberty Linux 7:mariadb-test-1:5.5.60-1.el7_5.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2017-3653",
"url": "https://www.suse.com/security/cve/CVE-2017-3653"
},
{
"category": "external",
"summary": "SUSE Bug 1049417 for CVE-2017-3653",
"url": "https://bugzilla.suse.com/1049417"
},
{
"category": "external",
"summary": "SUSE Bug 1049422 for CVE-2017-3653",
"url": "https://bugzilla.suse.com/1049422"
},
{
"category": "external",
"summary": "SUSE Bug 1054591 for CVE-2017-3653",
"url": "https://bugzilla.suse.com/1054591"
},
{
"category": "external",
"summary": "SUSE Bug 1076506 for CVE-2017-3653",
"url": "https://bugzilla.suse.com/1076506"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Liberty Linux 7:mariadb-1:5.5.60-1.el7_5.x86_64",
"SUSE Liberty Linux 7:mariadb-bench-1:5.5.60-1.el7_5.x86_64",
"SUSE Liberty Linux 7:mariadb-devel-1:5.5.60-1.el7_5.i686",
"SUSE Liberty Linux 7:mariadb-devel-1:5.5.60-1.el7_5.x86_64",
"SUSE Liberty Linux 7:mariadb-embedded-1:5.5.60-1.el7_5.i686",
"SUSE Liberty Linux 7:mariadb-embedded-1:5.5.60-1.el7_5.x86_64",
"SUSE Liberty Linux 7:mariadb-embedded-devel-1:5.5.60-1.el7_5.i686",
"SUSE Liberty Linux 7:mariadb-embedded-devel-1:5.5.60-1.el7_5.x86_64",
"SUSE Liberty Linux 7:mariadb-libs-1:5.5.60-1.el7_5.i686",
"SUSE Liberty Linux 7:mariadb-libs-1:5.5.60-1.el7_5.x86_64",
"SUSE Liberty Linux 7:mariadb-server-1:5.5.60-1.el7_5.x86_64",
"SUSE Liberty Linux 7:mariadb-test-1:5.5.60-1.el7_5.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 3.1,
"baseSeverity": "LOW",
"vectorString": "CVSS:3.0/AV:N/AC:H/PR:L/UI:N/S:U/C:N/I:L/A:N",
"version": "3.0"
},
"products": [
"SUSE Liberty Linux 7:mariadb-1:5.5.60-1.el7_5.x86_64",
"SUSE Liberty Linux 7:mariadb-bench-1:5.5.60-1.el7_5.x86_64",
"SUSE Liberty Linux 7:mariadb-devel-1:5.5.60-1.el7_5.i686",
"SUSE Liberty Linux 7:mariadb-devel-1:5.5.60-1.el7_5.x86_64",
"SUSE Liberty Linux 7:mariadb-embedded-1:5.5.60-1.el7_5.i686",
"SUSE Liberty Linux 7:mariadb-embedded-1:5.5.60-1.el7_5.x86_64",
"SUSE Liberty Linux 7:mariadb-embedded-devel-1:5.5.60-1.el7_5.i686",
"SUSE Liberty Linux 7:mariadb-embedded-devel-1:5.5.60-1.el7_5.x86_64",
"SUSE Liberty Linux 7:mariadb-libs-1:5.5.60-1.el7_5.i686",
"SUSE Liberty Linux 7:mariadb-libs-1:5.5.60-1.el7_5.x86_64",
"SUSE Liberty Linux 7:mariadb-server-1:5.5.60-1.el7_5.x86_64",
"SUSE Liberty Linux 7:mariadb-test-1:5.5.60-1.el7_5.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2018-08-16T00:00:00Z",
"details": "low"
}
],
"title": "CVE-2017-3653"
},
{
"cve": "CVE-2018-2562",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2018-2562"
}
],
"notes": [
{
"category": "general",
"text": "Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server : Partition). Supported versions that are affected are 5.5.58 and prior, 5.6.38 and prior and 5.7.19 and prior. Easily exploitable vulnerability allows low privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server as well as unauthorized update, insert or delete access to some of MySQL Server accessible data. CVSS 3.0 Base Score 7.1 (Integrity and Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:H).",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Liberty Linux 7:mariadb-1:5.5.60-1.el7_5.x86_64",
"SUSE Liberty Linux 7:mariadb-bench-1:5.5.60-1.el7_5.x86_64",
"SUSE Liberty Linux 7:mariadb-devel-1:5.5.60-1.el7_5.i686",
"SUSE Liberty Linux 7:mariadb-devel-1:5.5.60-1.el7_5.x86_64",
"SUSE Liberty Linux 7:mariadb-embedded-1:5.5.60-1.el7_5.i686",
"SUSE Liberty Linux 7:mariadb-embedded-1:5.5.60-1.el7_5.x86_64",
"SUSE Liberty Linux 7:mariadb-embedded-devel-1:5.5.60-1.el7_5.i686",
"SUSE Liberty Linux 7:mariadb-embedded-devel-1:5.5.60-1.el7_5.x86_64",
"SUSE Liberty Linux 7:mariadb-libs-1:5.5.60-1.el7_5.i686",
"SUSE Liberty Linux 7:mariadb-libs-1:5.5.60-1.el7_5.x86_64",
"SUSE Liberty Linux 7:mariadb-server-1:5.5.60-1.el7_5.x86_64",
"SUSE Liberty Linux 7:mariadb-test-1:5.5.60-1.el7_5.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2018-2562",
"url": "https://www.suse.com/security/cve/CVE-2018-2562"
},
{
"category": "external",
"summary": "SUSE Bug 1076369 for CVE-2018-2562",
"url": "https://bugzilla.suse.com/1076369"
},
{
"category": "external",
"summary": "SUSE Bug 1078431 for CVE-2018-2562",
"url": "https://bugzilla.suse.com/1078431"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Liberty Linux 7:mariadb-1:5.5.60-1.el7_5.x86_64",
"SUSE Liberty Linux 7:mariadb-bench-1:5.5.60-1.el7_5.x86_64",
"SUSE Liberty Linux 7:mariadb-devel-1:5.5.60-1.el7_5.i686",
"SUSE Liberty Linux 7:mariadb-devel-1:5.5.60-1.el7_5.x86_64",
"SUSE Liberty Linux 7:mariadb-embedded-1:5.5.60-1.el7_5.i686",
"SUSE Liberty Linux 7:mariadb-embedded-1:5.5.60-1.el7_5.x86_64",
"SUSE Liberty Linux 7:mariadb-embedded-devel-1:5.5.60-1.el7_5.i686",
"SUSE Liberty Linux 7:mariadb-embedded-devel-1:5.5.60-1.el7_5.x86_64",
"SUSE Liberty Linux 7:mariadb-libs-1:5.5.60-1.el7_5.i686",
"SUSE Liberty Linux 7:mariadb-libs-1:5.5.60-1.el7_5.x86_64",
"SUSE Liberty Linux 7:mariadb-server-1:5.5.60-1.el7_5.x86_64",
"SUSE Liberty Linux 7:mariadb-test-1:5.5.60-1.el7_5.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.1,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:H",
"version": "3.0"
},
"products": [
"SUSE Liberty Linux 7:mariadb-1:5.5.60-1.el7_5.x86_64",
"SUSE Liberty Linux 7:mariadb-bench-1:5.5.60-1.el7_5.x86_64",
"SUSE Liberty Linux 7:mariadb-devel-1:5.5.60-1.el7_5.i686",
"SUSE Liberty Linux 7:mariadb-devel-1:5.5.60-1.el7_5.x86_64",
"SUSE Liberty Linux 7:mariadb-embedded-1:5.5.60-1.el7_5.i686",
"SUSE Liberty Linux 7:mariadb-embedded-1:5.5.60-1.el7_5.x86_64",
"SUSE Liberty Linux 7:mariadb-embedded-devel-1:5.5.60-1.el7_5.i686",
"SUSE Liberty Linux 7:mariadb-embedded-devel-1:5.5.60-1.el7_5.x86_64",
"SUSE Liberty Linux 7:mariadb-libs-1:5.5.60-1.el7_5.i686",
"SUSE Liberty Linux 7:mariadb-libs-1:5.5.60-1.el7_5.x86_64",
"SUSE Liberty Linux 7:mariadb-server-1:5.5.60-1.el7_5.x86_64",
"SUSE Liberty Linux 7:mariadb-test-1:5.5.60-1.el7_5.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2018-08-16T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2018-2562"
},
{
"cve": "CVE-2018-2622",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2018-2622"
}
],
"notes": [
{
"category": "general",
"text": "Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: DDL). Supported versions that are affected are 5.5.58 and prior, 5.6.38 and prior and 5.7.20 and prior. Easily exploitable vulnerability allows low privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.0 Base Score 6.5 (Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H).",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Liberty Linux 7:mariadb-1:5.5.60-1.el7_5.x86_64",
"SUSE Liberty Linux 7:mariadb-bench-1:5.5.60-1.el7_5.x86_64",
"SUSE Liberty Linux 7:mariadb-devel-1:5.5.60-1.el7_5.i686",
"SUSE Liberty Linux 7:mariadb-devel-1:5.5.60-1.el7_5.x86_64",
"SUSE Liberty Linux 7:mariadb-embedded-1:5.5.60-1.el7_5.i686",
"SUSE Liberty Linux 7:mariadb-embedded-1:5.5.60-1.el7_5.x86_64",
"SUSE Liberty Linux 7:mariadb-embedded-devel-1:5.5.60-1.el7_5.i686",
"SUSE Liberty Linux 7:mariadb-embedded-devel-1:5.5.60-1.el7_5.x86_64",
"SUSE Liberty Linux 7:mariadb-libs-1:5.5.60-1.el7_5.i686",
"SUSE Liberty Linux 7:mariadb-libs-1:5.5.60-1.el7_5.x86_64",
"SUSE Liberty Linux 7:mariadb-server-1:5.5.60-1.el7_5.x86_64",
"SUSE Liberty Linux 7:mariadb-test-1:5.5.60-1.el7_5.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2018-2622",
"url": "https://www.suse.com/security/cve/CVE-2018-2622"
},
{
"category": "external",
"summary": "SUSE Bug 1076369 for CVE-2018-2622",
"url": "https://bugzilla.suse.com/1076369"
},
{
"category": "external",
"summary": "SUSE Bug 1078431 for CVE-2018-2622",
"url": "https://bugzilla.suse.com/1078431"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Liberty Linux 7:mariadb-1:5.5.60-1.el7_5.x86_64",
"SUSE Liberty Linux 7:mariadb-bench-1:5.5.60-1.el7_5.x86_64",
"SUSE Liberty Linux 7:mariadb-devel-1:5.5.60-1.el7_5.i686",
"SUSE Liberty Linux 7:mariadb-devel-1:5.5.60-1.el7_5.x86_64",
"SUSE Liberty Linux 7:mariadb-embedded-1:5.5.60-1.el7_5.i686",
"SUSE Liberty Linux 7:mariadb-embedded-1:5.5.60-1.el7_5.x86_64",
"SUSE Liberty Linux 7:mariadb-embedded-devel-1:5.5.60-1.el7_5.i686",
"SUSE Liberty Linux 7:mariadb-embedded-devel-1:5.5.60-1.el7_5.x86_64",
"SUSE Liberty Linux 7:mariadb-libs-1:5.5.60-1.el7_5.i686",
"SUSE Liberty Linux 7:mariadb-libs-1:5.5.60-1.el7_5.x86_64",
"SUSE Liberty Linux 7:mariadb-server-1:5.5.60-1.el7_5.x86_64",
"SUSE Liberty Linux 7:mariadb-test-1:5.5.60-1.el7_5.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.0"
},
"products": [
"SUSE Liberty Linux 7:mariadb-1:5.5.60-1.el7_5.x86_64",
"SUSE Liberty Linux 7:mariadb-bench-1:5.5.60-1.el7_5.x86_64",
"SUSE Liberty Linux 7:mariadb-devel-1:5.5.60-1.el7_5.i686",
"SUSE Liberty Linux 7:mariadb-devel-1:5.5.60-1.el7_5.x86_64",
"SUSE Liberty Linux 7:mariadb-embedded-1:5.5.60-1.el7_5.i686",
"SUSE Liberty Linux 7:mariadb-embedded-1:5.5.60-1.el7_5.x86_64",
"SUSE Liberty Linux 7:mariadb-embedded-devel-1:5.5.60-1.el7_5.i686",
"SUSE Liberty Linux 7:mariadb-embedded-devel-1:5.5.60-1.el7_5.x86_64",
"SUSE Liberty Linux 7:mariadb-libs-1:5.5.60-1.el7_5.i686",
"SUSE Liberty Linux 7:mariadb-libs-1:5.5.60-1.el7_5.x86_64",
"SUSE Liberty Linux 7:mariadb-server-1:5.5.60-1.el7_5.x86_64",
"SUSE Liberty Linux 7:mariadb-test-1:5.5.60-1.el7_5.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2018-08-16T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2018-2622"
},
{
"cve": "CVE-2018-2640",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2018-2640"
}
],
"notes": [
{
"category": "general",
"text": "Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Optimizer). Supported versions that are affected are 5.5.58 and prior, 5.6.38 and prior and 5.7.20 and prior. Easily exploitable vulnerability allows low privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.0 Base Score 6.5 (Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H).",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Liberty Linux 7:mariadb-1:5.5.60-1.el7_5.x86_64",
"SUSE Liberty Linux 7:mariadb-bench-1:5.5.60-1.el7_5.x86_64",
"SUSE Liberty Linux 7:mariadb-devel-1:5.5.60-1.el7_5.i686",
"SUSE Liberty Linux 7:mariadb-devel-1:5.5.60-1.el7_5.x86_64",
"SUSE Liberty Linux 7:mariadb-embedded-1:5.5.60-1.el7_5.i686",
"SUSE Liberty Linux 7:mariadb-embedded-1:5.5.60-1.el7_5.x86_64",
"SUSE Liberty Linux 7:mariadb-embedded-devel-1:5.5.60-1.el7_5.i686",
"SUSE Liberty Linux 7:mariadb-embedded-devel-1:5.5.60-1.el7_5.x86_64",
"SUSE Liberty Linux 7:mariadb-libs-1:5.5.60-1.el7_5.i686",
"SUSE Liberty Linux 7:mariadb-libs-1:5.5.60-1.el7_5.x86_64",
"SUSE Liberty Linux 7:mariadb-server-1:5.5.60-1.el7_5.x86_64",
"SUSE Liberty Linux 7:mariadb-test-1:5.5.60-1.el7_5.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2018-2640",
"url": "https://www.suse.com/security/cve/CVE-2018-2640"
},
{
"category": "external",
"summary": "SUSE Bug 1076369 for CVE-2018-2640",
"url": "https://bugzilla.suse.com/1076369"
},
{
"category": "external",
"summary": "SUSE Bug 1078431 for CVE-2018-2640",
"url": "https://bugzilla.suse.com/1078431"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Liberty Linux 7:mariadb-1:5.5.60-1.el7_5.x86_64",
"SUSE Liberty Linux 7:mariadb-bench-1:5.5.60-1.el7_5.x86_64",
"SUSE Liberty Linux 7:mariadb-devel-1:5.5.60-1.el7_5.i686",
"SUSE Liberty Linux 7:mariadb-devel-1:5.5.60-1.el7_5.x86_64",
"SUSE Liberty Linux 7:mariadb-embedded-1:5.5.60-1.el7_5.i686",
"SUSE Liberty Linux 7:mariadb-embedded-1:5.5.60-1.el7_5.x86_64",
"SUSE Liberty Linux 7:mariadb-embedded-devel-1:5.5.60-1.el7_5.i686",
"SUSE Liberty Linux 7:mariadb-embedded-devel-1:5.5.60-1.el7_5.x86_64",
"SUSE Liberty Linux 7:mariadb-libs-1:5.5.60-1.el7_5.i686",
"SUSE Liberty Linux 7:mariadb-libs-1:5.5.60-1.el7_5.x86_64",
"SUSE Liberty Linux 7:mariadb-server-1:5.5.60-1.el7_5.x86_64",
"SUSE Liberty Linux 7:mariadb-test-1:5.5.60-1.el7_5.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.0"
},
"products": [
"SUSE Liberty Linux 7:mariadb-1:5.5.60-1.el7_5.x86_64",
"SUSE Liberty Linux 7:mariadb-bench-1:5.5.60-1.el7_5.x86_64",
"SUSE Liberty Linux 7:mariadb-devel-1:5.5.60-1.el7_5.i686",
"SUSE Liberty Linux 7:mariadb-devel-1:5.5.60-1.el7_5.x86_64",
"SUSE Liberty Linux 7:mariadb-embedded-1:5.5.60-1.el7_5.i686",
"SUSE Liberty Linux 7:mariadb-embedded-1:5.5.60-1.el7_5.x86_64",
"SUSE Liberty Linux 7:mariadb-embedded-devel-1:5.5.60-1.el7_5.i686",
"SUSE Liberty Linux 7:mariadb-embedded-devel-1:5.5.60-1.el7_5.x86_64",
"SUSE Liberty Linux 7:mariadb-libs-1:5.5.60-1.el7_5.i686",
"SUSE Liberty Linux 7:mariadb-libs-1:5.5.60-1.el7_5.x86_64",
"SUSE Liberty Linux 7:mariadb-server-1:5.5.60-1.el7_5.x86_64",
"SUSE Liberty Linux 7:mariadb-test-1:5.5.60-1.el7_5.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2018-08-16T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2018-2640"
},
{
"cve": "CVE-2018-2665",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2018-2665"
}
],
"notes": [
{
"category": "general",
"text": "Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Optimizer). Supported versions that are affected are 5.5.58 and prior, 5.6.38 and prior and 5.7.20 and prior. Easily exploitable vulnerability allows low privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.0 Base Score 6.5 (Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H).",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Liberty Linux 7:mariadb-1:5.5.60-1.el7_5.x86_64",
"SUSE Liberty Linux 7:mariadb-bench-1:5.5.60-1.el7_5.x86_64",
"SUSE Liberty Linux 7:mariadb-devel-1:5.5.60-1.el7_5.i686",
"SUSE Liberty Linux 7:mariadb-devel-1:5.5.60-1.el7_5.x86_64",
"SUSE Liberty Linux 7:mariadb-embedded-1:5.5.60-1.el7_5.i686",
"SUSE Liberty Linux 7:mariadb-embedded-1:5.5.60-1.el7_5.x86_64",
"SUSE Liberty Linux 7:mariadb-embedded-devel-1:5.5.60-1.el7_5.i686",
"SUSE Liberty Linux 7:mariadb-embedded-devel-1:5.5.60-1.el7_5.x86_64",
"SUSE Liberty Linux 7:mariadb-libs-1:5.5.60-1.el7_5.i686",
"SUSE Liberty Linux 7:mariadb-libs-1:5.5.60-1.el7_5.x86_64",
"SUSE Liberty Linux 7:mariadb-server-1:5.5.60-1.el7_5.x86_64",
"SUSE Liberty Linux 7:mariadb-test-1:5.5.60-1.el7_5.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2018-2665",
"url": "https://www.suse.com/security/cve/CVE-2018-2665"
},
{
"category": "external",
"summary": "SUSE Bug 1076369 for CVE-2018-2665",
"url": "https://bugzilla.suse.com/1076369"
},
{
"category": "external",
"summary": "SUSE Bug 1078431 for CVE-2018-2665",
"url": "https://bugzilla.suse.com/1078431"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Liberty Linux 7:mariadb-1:5.5.60-1.el7_5.x86_64",
"SUSE Liberty Linux 7:mariadb-bench-1:5.5.60-1.el7_5.x86_64",
"SUSE Liberty Linux 7:mariadb-devel-1:5.5.60-1.el7_5.i686",
"SUSE Liberty Linux 7:mariadb-devel-1:5.5.60-1.el7_5.x86_64",
"SUSE Liberty Linux 7:mariadb-embedded-1:5.5.60-1.el7_5.i686",
"SUSE Liberty Linux 7:mariadb-embedded-1:5.5.60-1.el7_5.x86_64",
"SUSE Liberty Linux 7:mariadb-embedded-devel-1:5.5.60-1.el7_5.i686",
"SUSE Liberty Linux 7:mariadb-embedded-devel-1:5.5.60-1.el7_5.x86_64",
"SUSE Liberty Linux 7:mariadb-libs-1:5.5.60-1.el7_5.i686",
"SUSE Liberty Linux 7:mariadb-libs-1:5.5.60-1.el7_5.x86_64",
"SUSE Liberty Linux 7:mariadb-server-1:5.5.60-1.el7_5.x86_64",
"SUSE Liberty Linux 7:mariadb-test-1:5.5.60-1.el7_5.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.0"
},
"products": [
"SUSE Liberty Linux 7:mariadb-1:5.5.60-1.el7_5.x86_64",
"SUSE Liberty Linux 7:mariadb-bench-1:5.5.60-1.el7_5.x86_64",
"SUSE Liberty Linux 7:mariadb-devel-1:5.5.60-1.el7_5.i686",
"SUSE Liberty Linux 7:mariadb-devel-1:5.5.60-1.el7_5.x86_64",
"SUSE Liberty Linux 7:mariadb-embedded-1:5.5.60-1.el7_5.i686",
"SUSE Liberty Linux 7:mariadb-embedded-1:5.5.60-1.el7_5.x86_64",
"SUSE Liberty Linux 7:mariadb-embedded-devel-1:5.5.60-1.el7_5.i686",
"SUSE Liberty Linux 7:mariadb-embedded-devel-1:5.5.60-1.el7_5.x86_64",
"SUSE Liberty Linux 7:mariadb-libs-1:5.5.60-1.el7_5.i686",
"SUSE Liberty Linux 7:mariadb-libs-1:5.5.60-1.el7_5.x86_64",
"SUSE Liberty Linux 7:mariadb-server-1:5.5.60-1.el7_5.x86_64",
"SUSE Liberty Linux 7:mariadb-test-1:5.5.60-1.el7_5.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2018-08-16T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2018-2665"
},
{
"cve": "CVE-2018-2668",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2018-2668"
}
],
"notes": [
{
"category": "general",
"text": "Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Optimizer). Supported versions that are affected are 5.5.58 and prior, 5.6.38 and prior and 5.7.20 and prior. Easily exploitable vulnerability allows low privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.0 Base Score 6.5 (Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H).",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Liberty Linux 7:mariadb-1:5.5.60-1.el7_5.x86_64",
"SUSE Liberty Linux 7:mariadb-bench-1:5.5.60-1.el7_5.x86_64",
"SUSE Liberty Linux 7:mariadb-devel-1:5.5.60-1.el7_5.i686",
"SUSE Liberty Linux 7:mariadb-devel-1:5.5.60-1.el7_5.x86_64",
"SUSE Liberty Linux 7:mariadb-embedded-1:5.5.60-1.el7_5.i686",
"SUSE Liberty Linux 7:mariadb-embedded-1:5.5.60-1.el7_5.x86_64",
"SUSE Liberty Linux 7:mariadb-embedded-devel-1:5.5.60-1.el7_5.i686",
"SUSE Liberty Linux 7:mariadb-embedded-devel-1:5.5.60-1.el7_5.x86_64",
"SUSE Liberty Linux 7:mariadb-libs-1:5.5.60-1.el7_5.i686",
"SUSE Liberty Linux 7:mariadb-libs-1:5.5.60-1.el7_5.x86_64",
"SUSE Liberty Linux 7:mariadb-server-1:5.5.60-1.el7_5.x86_64",
"SUSE Liberty Linux 7:mariadb-test-1:5.5.60-1.el7_5.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2018-2668",
"url": "https://www.suse.com/security/cve/CVE-2018-2668"
},
{
"category": "external",
"summary": "SUSE Bug 1076369 for CVE-2018-2668",
"url": "https://bugzilla.suse.com/1076369"
},
{
"category": "external",
"summary": "SUSE Bug 1078431 for CVE-2018-2668",
"url": "https://bugzilla.suse.com/1078431"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Liberty Linux 7:mariadb-1:5.5.60-1.el7_5.x86_64",
"SUSE Liberty Linux 7:mariadb-bench-1:5.5.60-1.el7_5.x86_64",
"SUSE Liberty Linux 7:mariadb-devel-1:5.5.60-1.el7_5.i686",
"SUSE Liberty Linux 7:mariadb-devel-1:5.5.60-1.el7_5.x86_64",
"SUSE Liberty Linux 7:mariadb-embedded-1:5.5.60-1.el7_5.i686",
"SUSE Liberty Linux 7:mariadb-embedded-1:5.5.60-1.el7_5.x86_64",
"SUSE Liberty Linux 7:mariadb-embedded-devel-1:5.5.60-1.el7_5.i686",
"SUSE Liberty Linux 7:mariadb-embedded-devel-1:5.5.60-1.el7_5.x86_64",
"SUSE Liberty Linux 7:mariadb-libs-1:5.5.60-1.el7_5.i686",
"SUSE Liberty Linux 7:mariadb-libs-1:5.5.60-1.el7_5.x86_64",
"SUSE Liberty Linux 7:mariadb-server-1:5.5.60-1.el7_5.x86_64",
"SUSE Liberty Linux 7:mariadb-test-1:5.5.60-1.el7_5.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.0"
},
"products": [
"SUSE Liberty Linux 7:mariadb-1:5.5.60-1.el7_5.x86_64",
"SUSE Liberty Linux 7:mariadb-bench-1:5.5.60-1.el7_5.x86_64",
"SUSE Liberty Linux 7:mariadb-devel-1:5.5.60-1.el7_5.i686",
"SUSE Liberty Linux 7:mariadb-devel-1:5.5.60-1.el7_5.x86_64",
"SUSE Liberty Linux 7:mariadb-embedded-1:5.5.60-1.el7_5.i686",
"SUSE Liberty Linux 7:mariadb-embedded-1:5.5.60-1.el7_5.x86_64",
"SUSE Liberty Linux 7:mariadb-embedded-devel-1:5.5.60-1.el7_5.i686",
"SUSE Liberty Linux 7:mariadb-embedded-devel-1:5.5.60-1.el7_5.x86_64",
"SUSE Liberty Linux 7:mariadb-libs-1:5.5.60-1.el7_5.i686",
"SUSE Liberty Linux 7:mariadb-libs-1:5.5.60-1.el7_5.x86_64",
"SUSE Liberty Linux 7:mariadb-server-1:5.5.60-1.el7_5.x86_64",
"SUSE Liberty Linux 7:mariadb-test-1:5.5.60-1.el7_5.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2018-08-16T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2018-2668"
},
{
"cve": "CVE-2018-2755",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2018-2755"
}
],
"notes": [
{
"category": "general",
"text": "Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Replication). Supported versions that are affected are 5.5.59 and prior, 5.6.39 and prior and 5.7.21 and prior. Difficult to exploit vulnerability allows unauthenticated attacker with logon to the infrastructure where MySQL Server executes to compromise MySQL Server. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in MySQL Server, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in takeover of MySQL Server. CVSS 3.0 Base Score 7.7 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.0/AV:L/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H).",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Liberty Linux 7:mariadb-1:5.5.60-1.el7_5.x86_64",
"SUSE Liberty Linux 7:mariadb-bench-1:5.5.60-1.el7_5.x86_64",
"SUSE Liberty Linux 7:mariadb-devel-1:5.5.60-1.el7_5.i686",
"SUSE Liberty Linux 7:mariadb-devel-1:5.5.60-1.el7_5.x86_64",
"SUSE Liberty Linux 7:mariadb-embedded-1:5.5.60-1.el7_5.i686",
"SUSE Liberty Linux 7:mariadb-embedded-1:5.5.60-1.el7_5.x86_64",
"SUSE Liberty Linux 7:mariadb-embedded-devel-1:5.5.60-1.el7_5.i686",
"SUSE Liberty Linux 7:mariadb-embedded-devel-1:5.5.60-1.el7_5.x86_64",
"SUSE Liberty Linux 7:mariadb-libs-1:5.5.60-1.el7_5.i686",
"SUSE Liberty Linux 7:mariadb-libs-1:5.5.60-1.el7_5.x86_64",
"SUSE Liberty Linux 7:mariadb-server-1:5.5.60-1.el7_5.x86_64",
"SUSE Liberty Linux 7:mariadb-test-1:5.5.60-1.el7_5.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2018-2755",
"url": "https://www.suse.com/security/cve/CVE-2018-2755"
},
{
"category": "external",
"summary": "SUSE Bug 1089987 for CVE-2018-2755",
"url": "https://bugzilla.suse.com/1089987"
},
{
"category": "external",
"summary": "SUSE Bug 1090518 for CVE-2018-2755",
"url": "https://bugzilla.suse.com/1090518"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Liberty Linux 7:mariadb-1:5.5.60-1.el7_5.x86_64",
"SUSE Liberty Linux 7:mariadb-bench-1:5.5.60-1.el7_5.x86_64",
"SUSE Liberty Linux 7:mariadb-devel-1:5.5.60-1.el7_5.i686",
"SUSE Liberty Linux 7:mariadb-devel-1:5.5.60-1.el7_5.x86_64",
"SUSE Liberty Linux 7:mariadb-embedded-1:5.5.60-1.el7_5.i686",
"SUSE Liberty Linux 7:mariadb-embedded-1:5.5.60-1.el7_5.x86_64",
"SUSE Liberty Linux 7:mariadb-embedded-devel-1:5.5.60-1.el7_5.i686",
"SUSE Liberty Linux 7:mariadb-embedded-devel-1:5.5.60-1.el7_5.x86_64",
"SUSE Liberty Linux 7:mariadb-libs-1:5.5.60-1.el7_5.i686",
"SUSE Liberty Linux 7:mariadb-libs-1:5.5.60-1.el7_5.x86_64",
"SUSE Liberty Linux 7:mariadb-server-1:5.5.60-1.el7_5.x86_64",
"SUSE Liberty Linux 7:mariadb-test-1:5.5.60-1.el7_5.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.7,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.0/AV:L/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H",
"version": "3.0"
},
"products": [
"SUSE Liberty Linux 7:mariadb-1:5.5.60-1.el7_5.x86_64",
"SUSE Liberty Linux 7:mariadb-bench-1:5.5.60-1.el7_5.x86_64",
"SUSE Liberty Linux 7:mariadb-devel-1:5.5.60-1.el7_5.i686",
"SUSE Liberty Linux 7:mariadb-devel-1:5.5.60-1.el7_5.x86_64",
"SUSE Liberty Linux 7:mariadb-embedded-1:5.5.60-1.el7_5.i686",
"SUSE Liberty Linux 7:mariadb-embedded-1:5.5.60-1.el7_5.x86_64",
"SUSE Liberty Linux 7:mariadb-embedded-devel-1:5.5.60-1.el7_5.i686",
"SUSE Liberty Linux 7:mariadb-embedded-devel-1:5.5.60-1.el7_5.x86_64",
"SUSE Liberty Linux 7:mariadb-libs-1:5.5.60-1.el7_5.i686",
"SUSE Liberty Linux 7:mariadb-libs-1:5.5.60-1.el7_5.x86_64",
"SUSE Liberty Linux 7:mariadb-server-1:5.5.60-1.el7_5.x86_64",
"SUSE Liberty Linux 7:mariadb-test-1:5.5.60-1.el7_5.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2018-08-16T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2018-2755"
},
{
"cve": "CVE-2018-2761",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2018-2761"
}
],
"notes": [
{
"category": "general",
"text": "Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Client programs). Supported versions that are affected are 5.5.59 and prior, 5.6.39 and prior and 5.7.21 and prior. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.0 Base Score 5.9 (Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H).",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Liberty Linux 7:mariadb-1:5.5.60-1.el7_5.x86_64",
"SUSE Liberty Linux 7:mariadb-bench-1:5.5.60-1.el7_5.x86_64",
"SUSE Liberty Linux 7:mariadb-devel-1:5.5.60-1.el7_5.i686",
"SUSE Liberty Linux 7:mariadb-devel-1:5.5.60-1.el7_5.x86_64",
"SUSE Liberty Linux 7:mariadb-embedded-1:5.5.60-1.el7_5.i686",
"SUSE Liberty Linux 7:mariadb-embedded-1:5.5.60-1.el7_5.x86_64",
"SUSE Liberty Linux 7:mariadb-embedded-devel-1:5.5.60-1.el7_5.i686",
"SUSE Liberty Linux 7:mariadb-embedded-devel-1:5.5.60-1.el7_5.x86_64",
"SUSE Liberty Linux 7:mariadb-libs-1:5.5.60-1.el7_5.i686",
"SUSE Liberty Linux 7:mariadb-libs-1:5.5.60-1.el7_5.x86_64",
"SUSE Liberty Linux 7:mariadb-server-1:5.5.60-1.el7_5.x86_64",
"SUSE Liberty Linux 7:mariadb-test-1:5.5.60-1.el7_5.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2018-2761",
"url": "https://www.suse.com/security/cve/CVE-2018-2761"
},
{
"category": "external",
"summary": "SUSE Bug 1089987 for CVE-2018-2761",
"url": "https://bugzilla.suse.com/1089987"
},
{
"category": "external",
"summary": "SUSE Bug 1090518 for CVE-2018-2761",
"url": "https://bugzilla.suse.com/1090518"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Liberty Linux 7:mariadb-1:5.5.60-1.el7_5.x86_64",
"SUSE Liberty Linux 7:mariadb-bench-1:5.5.60-1.el7_5.x86_64",
"SUSE Liberty Linux 7:mariadb-devel-1:5.5.60-1.el7_5.i686",
"SUSE Liberty Linux 7:mariadb-devel-1:5.5.60-1.el7_5.x86_64",
"SUSE Liberty Linux 7:mariadb-embedded-1:5.5.60-1.el7_5.i686",
"SUSE Liberty Linux 7:mariadb-embedded-1:5.5.60-1.el7_5.x86_64",
"SUSE Liberty Linux 7:mariadb-embedded-devel-1:5.5.60-1.el7_5.i686",
"SUSE Liberty Linux 7:mariadb-embedded-devel-1:5.5.60-1.el7_5.x86_64",
"SUSE Liberty Linux 7:mariadb-libs-1:5.5.60-1.el7_5.i686",
"SUSE Liberty Linux 7:mariadb-libs-1:5.5.60-1.el7_5.x86_64",
"SUSE Liberty Linux 7:mariadb-server-1:5.5.60-1.el7_5.x86_64",
"SUSE Liberty Linux 7:mariadb-test-1:5.5.60-1.el7_5.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.9,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.0"
},
"products": [
"SUSE Liberty Linux 7:mariadb-1:5.5.60-1.el7_5.x86_64",
"SUSE Liberty Linux 7:mariadb-bench-1:5.5.60-1.el7_5.x86_64",
"SUSE Liberty Linux 7:mariadb-devel-1:5.5.60-1.el7_5.i686",
"SUSE Liberty Linux 7:mariadb-devel-1:5.5.60-1.el7_5.x86_64",
"SUSE Liberty Linux 7:mariadb-embedded-1:5.5.60-1.el7_5.i686",
"SUSE Liberty Linux 7:mariadb-embedded-1:5.5.60-1.el7_5.x86_64",
"SUSE Liberty Linux 7:mariadb-embedded-devel-1:5.5.60-1.el7_5.i686",
"SUSE Liberty Linux 7:mariadb-embedded-devel-1:5.5.60-1.el7_5.x86_64",
"SUSE Liberty Linux 7:mariadb-libs-1:5.5.60-1.el7_5.i686",
"SUSE Liberty Linux 7:mariadb-libs-1:5.5.60-1.el7_5.x86_64",
"SUSE Liberty Linux 7:mariadb-server-1:5.5.60-1.el7_5.x86_64",
"SUSE Liberty Linux 7:mariadb-test-1:5.5.60-1.el7_5.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2018-08-16T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2018-2761"
},
{
"cve": "CVE-2018-2767",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2018-2767"
}
],
"notes": [
{
"category": "general",
"text": "Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Security: Encryption). Supported versions that are affected are 5.5.60 and prior, 5.6.40 and prior and 5.7.22 and prior. Difficult to exploit vulnerability allows low privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized read access to a subset of MySQL Server accessible data. CVSS 3.0 Base Score 3.1 (Confidentiality impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:H/PR:L/UI:N/S:U/C:L/I:N/A:N).",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Liberty Linux 7:mariadb-1:5.5.60-1.el7_5.x86_64",
"SUSE Liberty Linux 7:mariadb-bench-1:5.5.60-1.el7_5.x86_64",
"SUSE Liberty Linux 7:mariadb-devel-1:5.5.60-1.el7_5.i686",
"SUSE Liberty Linux 7:mariadb-devel-1:5.5.60-1.el7_5.x86_64",
"SUSE Liberty Linux 7:mariadb-embedded-1:5.5.60-1.el7_5.i686",
"SUSE Liberty Linux 7:mariadb-embedded-1:5.5.60-1.el7_5.x86_64",
"SUSE Liberty Linux 7:mariadb-embedded-devel-1:5.5.60-1.el7_5.i686",
"SUSE Liberty Linux 7:mariadb-embedded-devel-1:5.5.60-1.el7_5.x86_64",
"SUSE Liberty Linux 7:mariadb-libs-1:5.5.60-1.el7_5.i686",
"SUSE Liberty Linux 7:mariadb-libs-1:5.5.60-1.el7_5.x86_64",
"SUSE Liberty Linux 7:mariadb-server-1:5.5.60-1.el7_5.x86_64",
"SUSE Liberty Linux 7:mariadb-test-1:5.5.60-1.el7_5.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2018-2767",
"url": "https://www.suse.com/security/cve/CVE-2018-2767"
},
{
"category": "external",
"summary": "SUSE Bug 1088681 for CVE-2018-2767",
"url": "https://bugzilla.suse.com/1088681"
},
{
"category": "external",
"summary": "SUSE Bug 1101675 for CVE-2018-2767",
"url": "https://bugzilla.suse.com/1101675"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Liberty Linux 7:mariadb-1:5.5.60-1.el7_5.x86_64",
"SUSE Liberty Linux 7:mariadb-bench-1:5.5.60-1.el7_5.x86_64",
"SUSE Liberty Linux 7:mariadb-devel-1:5.5.60-1.el7_5.i686",
"SUSE Liberty Linux 7:mariadb-devel-1:5.5.60-1.el7_5.x86_64",
"SUSE Liberty Linux 7:mariadb-embedded-1:5.5.60-1.el7_5.i686",
"SUSE Liberty Linux 7:mariadb-embedded-1:5.5.60-1.el7_5.x86_64",
"SUSE Liberty Linux 7:mariadb-embedded-devel-1:5.5.60-1.el7_5.i686",
"SUSE Liberty Linux 7:mariadb-embedded-devel-1:5.5.60-1.el7_5.x86_64",
"SUSE Liberty Linux 7:mariadb-libs-1:5.5.60-1.el7_5.i686",
"SUSE Liberty Linux 7:mariadb-libs-1:5.5.60-1.el7_5.x86_64",
"SUSE Liberty Linux 7:mariadb-server-1:5.5.60-1.el7_5.x86_64",
"SUSE Liberty Linux 7:mariadb-test-1:5.5.60-1.el7_5.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 3.1,
"baseSeverity": "LOW",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:L/I:N/A:N",
"version": "3.1"
},
"products": [
"SUSE Liberty Linux 7:mariadb-1:5.5.60-1.el7_5.x86_64",
"SUSE Liberty Linux 7:mariadb-bench-1:5.5.60-1.el7_5.x86_64",
"SUSE Liberty Linux 7:mariadb-devel-1:5.5.60-1.el7_5.i686",
"SUSE Liberty Linux 7:mariadb-devel-1:5.5.60-1.el7_5.x86_64",
"SUSE Liberty Linux 7:mariadb-embedded-1:5.5.60-1.el7_5.i686",
"SUSE Liberty Linux 7:mariadb-embedded-1:5.5.60-1.el7_5.x86_64",
"SUSE Liberty Linux 7:mariadb-embedded-devel-1:5.5.60-1.el7_5.i686",
"SUSE Liberty Linux 7:mariadb-embedded-devel-1:5.5.60-1.el7_5.x86_64",
"SUSE Liberty Linux 7:mariadb-libs-1:5.5.60-1.el7_5.i686",
"SUSE Liberty Linux 7:mariadb-libs-1:5.5.60-1.el7_5.x86_64",
"SUSE Liberty Linux 7:mariadb-server-1:5.5.60-1.el7_5.x86_64",
"SUSE Liberty Linux 7:mariadb-test-1:5.5.60-1.el7_5.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2018-08-16T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2018-2767"
},
{
"cve": "CVE-2018-2771",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2018-2771"
}
],
"notes": [
{
"category": "general",
"text": "Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Locking). Supported versions that are affected are 5.5.59 and prior, 5.6.39 and prior and 5.7.21 and prior. Difficult to exploit vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.0 Base Score 4.4 (Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:H).",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Liberty Linux 7:mariadb-1:5.5.60-1.el7_5.x86_64",
"SUSE Liberty Linux 7:mariadb-bench-1:5.5.60-1.el7_5.x86_64",
"SUSE Liberty Linux 7:mariadb-devel-1:5.5.60-1.el7_5.i686",
"SUSE Liberty Linux 7:mariadb-devel-1:5.5.60-1.el7_5.x86_64",
"SUSE Liberty Linux 7:mariadb-embedded-1:5.5.60-1.el7_5.i686",
"SUSE Liberty Linux 7:mariadb-embedded-1:5.5.60-1.el7_5.x86_64",
"SUSE Liberty Linux 7:mariadb-embedded-devel-1:5.5.60-1.el7_5.i686",
"SUSE Liberty Linux 7:mariadb-embedded-devel-1:5.5.60-1.el7_5.x86_64",
"SUSE Liberty Linux 7:mariadb-libs-1:5.5.60-1.el7_5.i686",
"SUSE Liberty Linux 7:mariadb-libs-1:5.5.60-1.el7_5.x86_64",
"SUSE Liberty Linux 7:mariadb-server-1:5.5.60-1.el7_5.x86_64",
"SUSE Liberty Linux 7:mariadb-test-1:5.5.60-1.el7_5.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2018-2771",
"url": "https://www.suse.com/security/cve/CVE-2018-2771"
},
{
"category": "external",
"summary": "SUSE Bug 1089987 for CVE-2018-2771",
"url": "https://bugzilla.suse.com/1089987"
},
{
"category": "external",
"summary": "SUSE Bug 1090518 for CVE-2018-2771",
"url": "https://bugzilla.suse.com/1090518"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Liberty Linux 7:mariadb-1:5.5.60-1.el7_5.x86_64",
"SUSE Liberty Linux 7:mariadb-bench-1:5.5.60-1.el7_5.x86_64",
"SUSE Liberty Linux 7:mariadb-devel-1:5.5.60-1.el7_5.i686",
"SUSE Liberty Linux 7:mariadb-devel-1:5.5.60-1.el7_5.x86_64",
"SUSE Liberty Linux 7:mariadb-embedded-1:5.5.60-1.el7_5.i686",
"SUSE Liberty Linux 7:mariadb-embedded-1:5.5.60-1.el7_5.x86_64",
"SUSE Liberty Linux 7:mariadb-embedded-devel-1:5.5.60-1.el7_5.i686",
"SUSE Liberty Linux 7:mariadb-embedded-devel-1:5.5.60-1.el7_5.x86_64",
"SUSE Liberty Linux 7:mariadb-libs-1:5.5.60-1.el7_5.i686",
"SUSE Liberty Linux 7:mariadb-libs-1:5.5.60-1.el7_5.x86_64",
"SUSE Liberty Linux 7:mariadb-server-1:5.5.60-1.el7_5.x86_64",
"SUSE Liberty Linux 7:mariadb-test-1:5.5.60-1.el7_5.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 4.4,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.0/AV:N/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:H",
"version": "3.0"
},
"products": [
"SUSE Liberty Linux 7:mariadb-1:5.5.60-1.el7_5.x86_64",
"SUSE Liberty Linux 7:mariadb-bench-1:5.5.60-1.el7_5.x86_64",
"SUSE Liberty Linux 7:mariadb-devel-1:5.5.60-1.el7_5.i686",
"SUSE Liberty Linux 7:mariadb-devel-1:5.5.60-1.el7_5.x86_64",
"SUSE Liberty Linux 7:mariadb-embedded-1:5.5.60-1.el7_5.i686",
"SUSE Liberty Linux 7:mariadb-embedded-1:5.5.60-1.el7_5.x86_64",
"SUSE Liberty Linux 7:mariadb-embedded-devel-1:5.5.60-1.el7_5.i686",
"SUSE Liberty Linux 7:mariadb-embedded-devel-1:5.5.60-1.el7_5.x86_64",
"SUSE Liberty Linux 7:mariadb-libs-1:5.5.60-1.el7_5.i686",
"SUSE Liberty Linux 7:mariadb-libs-1:5.5.60-1.el7_5.x86_64",
"SUSE Liberty Linux 7:mariadb-server-1:5.5.60-1.el7_5.x86_64",
"SUSE Liberty Linux 7:mariadb-test-1:5.5.60-1.el7_5.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2018-08-16T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2018-2771"
},
{
"cve": "CVE-2018-2781",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2018-2781"
}
],
"notes": [
{
"category": "general",
"text": "Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Optimizer). Supported versions that are affected are 5.5.59 and prior, 5.6.39 and prior and 5.7.21 and prior. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.0 Base Score 4.9 (Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H).",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Liberty Linux 7:mariadb-1:5.5.60-1.el7_5.x86_64",
"SUSE Liberty Linux 7:mariadb-bench-1:5.5.60-1.el7_5.x86_64",
"SUSE Liberty Linux 7:mariadb-devel-1:5.5.60-1.el7_5.i686",
"SUSE Liberty Linux 7:mariadb-devel-1:5.5.60-1.el7_5.x86_64",
"SUSE Liberty Linux 7:mariadb-embedded-1:5.5.60-1.el7_5.i686",
"SUSE Liberty Linux 7:mariadb-embedded-1:5.5.60-1.el7_5.x86_64",
"SUSE Liberty Linux 7:mariadb-embedded-devel-1:5.5.60-1.el7_5.i686",
"SUSE Liberty Linux 7:mariadb-embedded-devel-1:5.5.60-1.el7_5.x86_64",
"SUSE Liberty Linux 7:mariadb-libs-1:5.5.60-1.el7_5.i686",
"SUSE Liberty Linux 7:mariadb-libs-1:5.5.60-1.el7_5.x86_64",
"SUSE Liberty Linux 7:mariadb-server-1:5.5.60-1.el7_5.x86_64",
"SUSE Liberty Linux 7:mariadb-test-1:5.5.60-1.el7_5.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2018-2781",
"url": "https://www.suse.com/security/cve/CVE-2018-2781"
},
{
"category": "external",
"summary": "SUSE Bug 1089987 for CVE-2018-2781",
"url": "https://bugzilla.suse.com/1089987"
},
{
"category": "external",
"summary": "SUSE Bug 1090518 for CVE-2018-2781",
"url": "https://bugzilla.suse.com/1090518"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Liberty Linux 7:mariadb-1:5.5.60-1.el7_5.x86_64",
"SUSE Liberty Linux 7:mariadb-bench-1:5.5.60-1.el7_5.x86_64",
"SUSE Liberty Linux 7:mariadb-devel-1:5.5.60-1.el7_5.i686",
"SUSE Liberty Linux 7:mariadb-devel-1:5.5.60-1.el7_5.x86_64",
"SUSE Liberty Linux 7:mariadb-embedded-1:5.5.60-1.el7_5.i686",
"SUSE Liberty Linux 7:mariadb-embedded-1:5.5.60-1.el7_5.x86_64",
"SUSE Liberty Linux 7:mariadb-embedded-devel-1:5.5.60-1.el7_5.i686",
"SUSE Liberty Linux 7:mariadb-embedded-devel-1:5.5.60-1.el7_5.x86_64",
"SUSE Liberty Linux 7:mariadb-libs-1:5.5.60-1.el7_5.i686",
"SUSE Liberty Linux 7:mariadb-libs-1:5.5.60-1.el7_5.x86_64",
"SUSE Liberty Linux 7:mariadb-server-1:5.5.60-1.el7_5.x86_64",
"SUSE Liberty Linux 7:mariadb-test-1:5.5.60-1.el7_5.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 4.9,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H",
"version": "3.0"
},
"products": [
"SUSE Liberty Linux 7:mariadb-1:5.5.60-1.el7_5.x86_64",
"SUSE Liberty Linux 7:mariadb-bench-1:5.5.60-1.el7_5.x86_64",
"SUSE Liberty Linux 7:mariadb-devel-1:5.5.60-1.el7_5.i686",
"SUSE Liberty Linux 7:mariadb-devel-1:5.5.60-1.el7_5.x86_64",
"SUSE Liberty Linux 7:mariadb-embedded-1:5.5.60-1.el7_5.i686",
"SUSE Liberty Linux 7:mariadb-embedded-1:5.5.60-1.el7_5.x86_64",
"SUSE Liberty Linux 7:mariadb-embedded-devel-1:5.5.60-1.el7_5.i686",
"SUSE Liberty Linux 7:mariadb-embedded-devel-1:5.5.60-1.el7_5.x86_64",
"SUSE Liberty Linux 7:mariadb-libs-1:5.5.60-1.el7_5.i686",
"SUSE Liberty Linux 7:mariadb-libs-1:5.5.60-1.el7_5.x86_64",
"SUSE Liberty Linux 7:mariadb-server-1:5.5.60-1.el7_5.x86_64",
"SUSE Liberty Linux 7:mariadb-test-1:5.5.60-1.el7_5.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2018-08-16T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2018-2781"
},
{
"cve": "CVE-2018-2813",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2018-2813"
}
],
"notes": [
{
"category": "general",
"text": "Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: DDL). Supported versions that are affected are 5.5.59 and prior, 5.6.39 and prior and 5.7.21 and prior. Easily exploitable vulnerability allows low privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized read access to a subset of MySQL Server accessible data. CVSS 3.0 Base Score 4.3 (Confidentiality impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N).",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Liberty Linux 7:mariadb-1:5.5.60-1.el7_5.x86_64",
"SUSE Liberty Linux 7:mariadb-bench-1:5.5.60-1.el7_5.x86_64",
"SUSE Liberty Linux 7:mariadb-devel-1:5.5.60-1.el7_5.i686",
"SUSE Liberty Linux 7:mariadb-devel-1:5.5.60-1.el7_5.x86_64",
"SUSE Liberty Linux 7:mariadb-embedded-1:5.5.60-1.el7_5.i686",
"SUSE Liberty Linux 7:mariadb-embedded-1:5.5.60-1.el7_5.x86_64",
"SUSE Liberty Linux 7:mariadb-embedded-devel-1:5.5.60-1.el7_5.i686",
"SUSE Liberty Linux 7:mariadb-embedded-devel-1:5.5.60-1.el7_5.x86_64",
"SUSE Liberty Linux 7:mariadb-libs-1:5.5.60-1.el7_5.i686",
"SUSE Liberty Linux 7:mariadb-libs-1:5.5.60-1.el7_5.x86_64",
"SUSE Liberty Linux 7:mariadb-server-1:5.5.60-1.el7_5.x86_64",
"SUSE Liberty Linux 7:mariadb-test-1:5.5.60-1.el7_5.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2018-2813",
"url": "https://www.suse.com/security/cve/CVE-2018-2813"
},
{
"category": "external",
"summary": "SUSE Bug 1089987 for CVE-2018-2813",
"url": "https://bugzilla.suse.com/1089987"
},
{
"category": "external",
"summary": "SUSE Bug 1090518 for CVE-2018-2813",
"url": "https://bugzilla.suse.com/1090518"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Liberty Linux 7:mariadb-1:5.5.60-1.el7_5.x86_64",
"SUSE Liberty Linux 7:mariadb-bench-1:5.5.60-1.el7_5.x86_64",
"SUSE Liberty Linux 7:mariadb-devel-1:5.5.60-1.el7_5.i686",
"SUSE Liberty Linux 7:mariadb-devel-1:5.5.60-1.el7_5.x86_64",
"SUSE Liberty Linux 7:mariadb-embedded-1:5.5.60-1.el7_5.i686",
"SUSE Liberty Linux 7:mariadb-embedded-1:5.5.60-1.el7_5.x86_64",
"SUSE Liberty Linux 7:mariadb-embedded-devel-1:5.5.60-1.el7_5.i686",
"SUSE Liberty Linux 7:mariadb-embedded-devel-1:5.5.60-1.el7_5.x86_64",
"SUSE Liberty Linux 7:mariadb-libs-1:5.5.60-1.el7_5.i686",
"SUSE Liberty Linux 7:mariadb-libs-1:5.5.60-1.el7_5.x86_64",
"SUSE Liberty Linux 7:mariadb-server-1:5.5.60-1.el7_5.x86_64",
"SUSE Liberty Linux 7:mariadb-test-1:5.5.60-1.el7_5.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 4.3,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N",
"version": "3.0"
},
"products": [
"SUSE Liberty Linux 7:mariadb-1:5.5.60-1.el7_5.x86_64",
"SUSE Liberty Linux 7:mariadb-bench-1:5.5.60-1.el7_5.x86_64",
"SUSE Liberty Linux 7:mariadb-devel-1:5.5.60-1.el7_5.i686",
"SUSE Liberty Linux 7:mariadb-devel-1:5.5.60-1.el7_5.x86_64",
"SUSE Liberty Linux 7:mariadb-embedded-1:5.5.60-1.el7_5.i686",
"SUSE Liberty Linux 7:mariadb-embedded-1:5.5.60-1.el7_5.x86_64",
"SUSE Liberty Linux 7:mariadb-embedded-devel-1:5.5.60-1.el7_5.i686",
"SUSE Liberty Linux 7:mariadb-embedded-devel-1:5.5.60-1.el7_5.x86_64",
"SUSE Liberty Linux 7:mariadb-libs-1:5.5.60-1.el7_5.i686",
"SUSE Liberty Linux 7:mariadb-libs-1:5.5.60-1.el7_5.x86_64",
"SUSE Liberty Linux 7:mariadb-server-1:5.5.60-1.el7_5.x86_64",
"SUSE Liberty Linux 7:mariadb-test-1:5.5.60-1.el7_5.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2018-08-16T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2018-2813"
},
{
"cve": "CVE-2018-2817",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2018-2817"
}
],
"notes": [
{
"category": "general",
"text": "Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: DDL). Supported versions that are affected are 5.5.59 and prior, 5.6.39 and prior and 5.7.21 and prior. Easily exploitable vulnerability allows low privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.0 Base Score 6.5 (Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H).",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Liberty Linux 7:mariadb-1:5.5.60-1.el7_5.x86_64",
"SUSE Liberty Linux 7:mariadb-bench-1:5.5.60-1.el7_5.x86_64",
"SUSE Liberty Linux 7:mariadb-devel-1:5.5.60-1.el7_5.i686",
"SUSE Liberty Linux 7:mariadb-devel-1:5.5.60-1.el7_5.x86_64",
"SUSE Liberty Linux 7:mariadb-embedded-1:5.5.60-1.el7_5.i686",
"SUSE Liberty Linux 7:mariadb-embedded-1:5.5.60-1.el7_5.x86_64",
"SUSE Liberty Linux 7:mariadb-embedded-devel-1:5.5.60-1.el7_5.i686",
"SUSE Liberty Linux 7:mariadb-embedded-devel-1:5.5.60-1.el7_5.x86_64",
"SUSE Liberty Linux 7:mariadb-libs-1:5.5.60-1.el7_5.i686",
"SUSE Liberty Linux 7:mariadb-libs-1:5.5.60-1.el7_5.x86_64",
"SUSE Liberty Linux 7:mariadb-server-1:5.5.60-1.el7_5.x86_64",
"SUSE Liberty Linux 7:mariadb-test-1:5.5.60-1.el7_5.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2018-2817",
"url": "https://www.suse.com/security/cve/CVE-2018-2817"
},
{
"category": "external",
"summary": "SUSE Bug 1089987 for CVE-2018-2817",
"url": "https://bugzilla.suse.com/1089987"
},
{
"category": "external",
"summary": "SUSE Bug 1090518 for CVE-2018-2817",
"url": "https://bugzilla.suse.com/1090518"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Liberty Linux 7:mariadb-1:5.5.60-1.el7_5.x86_64",
"SUSE Liberty Linux 7:mariadb-bench-1:5.5.60-1.el7_5.x86_64",
"SUSE Liberty Linux 7:mariadb-devel-1:5.5.60-1.el7_5.i686",
"SUSE Liberty Linux 7:mariadb-devel-1:5.5.60-1.el7_5.x86_64",
"SUSE Liberty Linux 7:mariadb-embedded-1:5.5.60-1.el7_5.i686",
"SUSE Liberty Linux 7:mariadb-embedded-1:5.5.60-1.el7_5.x86_64",
"SUSE Liberty Linux 7:mariadb-embedded-devel-1:5.5.60-1.el7_5.i686",
"SUSE Liberty Linux 7:mariadb-embedded-devel-1:5.5.60-1.el7_5.x86_64",
"SUSE Liberty Linux 7:mariadb-libs-1:5.5.60-1.el7_5.i686",
"SUSE Liberty Linux 7:mariadb-libs-1:5.5.60-1.el7_5.x86_64",
"SUSE Liberty Linux 7:mariadb-server-1:5.5.60-1.el7_5.x86_64",
"SUSE Liberty Linux 7:mariadb-test-1:5.5.60-1.el7_5.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.0"
},
"products": [
"SUSE Liberty Linux 7:mariadb-1:5.5.60-1.el7_5.x86_64",
"SUSE Liberty Linux 7:mariadb-bench-1:5.5.60-1.el7_5.x86_64",
"SUSE Liberty Linux 7:mariadb-devel-1:5.5.60-1.el7_5.i686",
"SUSE Liberty Linux 7:mariadb-devel-1:5.5.60-1.el7_5.x86_64",
"SUSE Liberty Linux 7:mariadb-embedded-1:5.5.60-1.el7_5.i686",
"SUSE Liberty Linux 7:mariadb-embedded-1:5.5.60-1.el7_5.x86_64",
"SUSE Liberty Linux 7:mariadb-embedded-devel-1:5.5.60-1.el7_5.i686",
"SUSE Liberty Linux 7:mariadb-embedded-devel-1:5.5.60-1.el7_5.x86_64",
"SUSE Liberty Linux 7:mariadb-libs-1:5.5.60-1.el7_5.i686",
"SUSE Liberty Linux 7:mariadb-libs-1:5.5.60-1.el7_5.x86_64",
"SUSE Liberty Linux 7:mariadb-server-1:5.5.60-1.el7_5.x86_64",
"SUSE Liberty Linux 7:mariadb-test-1:5.5.60-1.el7_5.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2018-08-16T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2018-2817"
},
{
"cve": "CVE-2018-2819",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2018-2819"
}
],
"notes": [
{
"category": "general",
"text": "Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: InnoDB). Supported versions that are affected are 5.5.59 and prior, 5.6.39 and prior and 5.7.21 and prior. Easily exploitable vulnerability allows low privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.0 Base Score 6.5 (Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H).",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Liberty Linux 7:mariadb-1:5.5.60-1.el7_5.x86_64",
"SUSE Liberty Linux 7:mariadb-bench-1:5.5.60-1.el7_5.x86_64",
"SUSE Liberty Linux 7:mariadb-devel-1:5.5.60-1.el7_5.i686",
"SUSE Liberty Linux 7:mariadb-devel-1:5.5.60-1.el7_5.x86_64",
"SUSE Liberty Linux 7:mariadb-embedded-1:5.5.60-1.el7_5.i686",
"SUSE Liberty Linux 7:mariadb-embedded-1:5.5.60-1.el7_5.x86_64",
"SUSE Liberty Linux 7:mariadb-embedded-devel-1:5.5.60-1.el7_5.i686",
"SUSE Liberty Linux 7:mariadb-embedded-devel-1:5.5.60-1.el7_5.x86_64",
"SUSE Liberty Linux 7:mariadb-libs-1:5.5.60-1.el7_5.i686",
"SUSE Liberty Linux 7:mariadb-libs-1:5.5.60-1.el7_5.x86_64",
"SUSE Liberty Linux 7:mariadb-server-1:5.5.60-1.el7_5.x86_64",
"SUSE Liberty Linux 7:mariadb-test-1:5.5.60-1.el7_5.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2018-2819",
"url": "https://www.suse.com/security/cve/CVE-2018-2819"
},
{
"category": "external",
"summary": "SUSE Bug 1089987 for CVE-2018-2819",
"url": "https://bugzilla.suse.com/1089987"
},
{
"category": "external",
"summary": "SUSE Bug 1090518 for CVE-2018-2819",
"url": "https://bugzilla.suse.com/1090518"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Liberty Linux 7:mariadb-1:5.5.60-1.el7_5.x86_64",
"SUSE Liberty Linux 7:mariadb-bench-1:5.5.60-1.el7_5.x86_64",
"SUSE Liberty Linux 7:mariadb-devel-1:5.5.60-1.el7_5.i686",
"SUSE Liberty Linux 7:mariadb-devel-1:5.5.60-1.el7_5.x86_64",
"SUSE Liberty Linux 7:mariadb-embedded-1:5.5.60-1.el7_5.i686",
"SUSE Liberty Linux 7:mariadb-embedded-1:5.5.60-1.el7_5.x86_64",
"SUSE Liberty Linux 7:mariadb-embedded-devel-1:5.5.60-1.el7_5.i686",
"SUSE Liberty Linux 7:mariadb-embedded-devel-1:5.5.60-1.el7_5.x86_64",
"SUSE Liberty Linux 7:mariadb-libs-1:5.5.60-1.el7_5.i686",
"SUSE Liberty Linux 7:mariadb-libs-1:5.5.60-1.el7_5.x86_64",
"SUSE Liberty Linux 7:mariadb-server-1:5.5.60-1.el7_5.x86_64",
"SUSE Liberty Linux 7:mariadb-test-1:5.5.60-1.el7_5.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.0"
},
"products": [
"SUSE Liberty Linux 7:mariadb-1:5.5.60-1.el7_5.x86_64",
"SUSE Liberty Linux 7:mariadb-bench-1:5.5.60-1.el7_5.x86_64",
"SUSE Liberty Linux 7:mariadb-devel-1:5.5.60-1.el7_5.i686",
"SUSE Liberty Linux 7:mariadb-devel-1:5.5.60-1.el7_5.x86_64",
"SUSE Liberty Linux 7:mariadb-embedded-1:5.5.60-1.el7_5.i686",
"SUSE Liberty Linux 7:mariadb-embedded-1:5.5.60-1.el7_5.x86_64",
"SUSE Liberty Linux 7:mariadb-embedded-devel-1:5.5.60-1.el7_5.i686",
"SUSE Liberty Linux 7:mariadb-embedded-devel-1:5.5.60-1.el7_5.x86_64",
"SUSE Liberty Linux 7:mariadb-libs-1:5.5.60-1.el7_5.i686",
"SUSE Liberty Linux 7:mariadb-libs-1:5.5.60-1.el7_5.x86_64",
"SUSE Liberty Linux 7:mariadb-server-1:5.5.60-1.el7_5.x86_64",
"SUSE Liberty Linux 7:mariadb-test-1:5.5.60-1.el7_5.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2018-08-16T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2018-2819"
}
]
}
Loading…
Loading…
Drag nodes to arrange them. Double-click a related vulnerability to open it, or a source to visit its link. The Physics button on the left tunes the layout and the simulation; the legend at the bottom left hides or shows nodes by kind and by sighting type.
Experimental. This forecast is provided for visualization only and may change without notice. Do not use it for operational decisions.
Forecast uses a logistic model when the trend is rising, or an exponential decay model when the trend is falling. Fitted via linearized least squares.
Sightings
| Author | Source | Type | Date | Other |
|---|
Nomenclature
- Seen: The vulnerability was mentioned, discussed, or observed by the user.
- Confirmed: The vulnerability has been validated from an analyst's perspective.
- Published Proof of Concept: A public proof of concept is available for this vulnerability.
- Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
- Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
- Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
- Not confirmed: The user expressed doubt about the validity of the vulnerability.
- Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.
Vulnerability timeline
Sightings and recorded dates, grouped by day · UTC
How durations are calculated
Following the VTEM framework (Black Hat USA 2015), time to patch starts when the vendor or a coordinator was informed, total time to patch at discovery, and disclosure to patch at public disclosure; vendor response time runs from the report to its acknowledgement. Time to exploit and time unpatched start at the earliest discovery or report, falling back to public disclosure. Unpatched time ends at the first recorded patch, or the calculation time when no patch is recorded. Exploitation to patch shows the interval between those two events; a published proof of concept is a public exploit, not exploitation.
Each result shows its source dates. A negative interval means the end event came first; when date-only inputs leave the order open, the result says so. Date-only inputs are approximate. The earliest evidence wins: KEV report dates and sightings are labelled as such. Records describing another vulnerability are listed but never calculated from, and a PoC alone does not establish exploitation. Missing patch evidence does not prove that no patch exists. Filters below change the event list only.
Loading timeline…
Loading…
Loading…
The MITRE ATT&CK techniques below are AI-generated suggestions, inferred from the description of the
vulnerability by the CIRCL/vulnerability-attack-technique-classification-roberta-base
model, served locally by ML-Gateway.
They have not been verified by an analyst and are provided for guidance only.
The approach is described in our paper Mapping CVEs to MITRE ATT&CK Techniques: A Curated Gold-Set Classifier and the Limits of LLM-Assisted Label Expansion.
Browse all ATT&CK techniques and the vulnerabilities related to each.
The approach is described in our paper Mapping CVEs to MITRE ATT&CK Techniques: A Curated Gold-Set Classifier and the Limits of LLM-Assisted Label Expansion.
Browse all ATT&CK techniques and the vulnerabilities related to each.
Loading…
Related by attack behaviour
Vulnerabilities whose description is nearest to this one in the vector space of the CIRCL/vulnerability-attack-technique-biencoder model. This is a similarity search over the bi-encoder space (plain cosine), not a classification, and it has no measured accuracy.