CVE-2018-3133
Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Parser)....
Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Parser). Supported versions that are affected are 5.5.61 and prior, 5.6.41 and prior, 5.7.23 and prior and 8.0.12 and prior. Easily exploitable vulnerability allows low privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.0 Base Score 6.5 (Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H).
Attack profile
How easy it is to exploit
- Attack vector
- Network
- Complexity
- Low
- Privileges needed
- Low
- User interaction
- None
What an attacker can affect
- Confidentiality
- None
- Integrity
- None
- Availability
- High
Exploit likelihood
What each source reports
NVD Score used
6.5
Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Parser). Supported versions that are affected are 5.5.61 and prior, 5.6.41 and prior, 5.7.23 and prior and 8.0.12 and prior. Easily exploitable vulnerability allows low privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.0 Base Score 6.5 (Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H).
- Record
CVE-2018-3133- CVSS 3.1
- 6.5 Medium
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H - CVSS 2.0
- 4.0 Medium
AV:N/AC:L/Au:S/C:N/I:N/A:P - Updated
- 2026-11-02
CVE List No score
Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Parser). Supported versions that are affected are 5.5.61 and prior, 5.6.41 and prior, 5.7.23 and prior and 8.0.12 and prior. Easily exploitable vulnerability allows low privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.0 Base Score 6.5 (Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H).
- Record
CVE-2018-3133- Updated
- 2026-11-02
EUVDEUVD-2018-14988 No score
Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Parser). Supported versions that are affected are 5.5.61 and prior, 5.6.41 and prior, 5.7.23 and prior and 8.0.12 and prior. Easily exploitable vulnerability allows low privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.0 Base Score 6.5 (Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H).
- Record
EUVD-2018-14988- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-62r4-9fpf-c245
6.5
Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Parser)....
Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Parser). Supported versions that are affected are 5.5.61 and prior, 5.6.41 and prior, 5.7.23 and prior and 8.0.12 and prior. Easily exploitable vulnerability allows low privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.0 Base Score 6.5 (Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H).
- Record
GHSA-62r4-9fpf-c245- CVSS 3.0
- 6.5 Medium
CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H - Updated
- 2026-11-02
OSV
6.5
Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Parser). Supported versions that are affected are 5.5.61 and prior, 5.6.41 and prior, 5.7.23 and prior and 8.0.12 and prior. Easily exploitable vulnerability allows low privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.0 Base Score 6.5 (Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H).
- Record
CVE-2018-3133- CVSS 3.1
- 6.5 Medium
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H - Updated
- 2026-11-02
OSVRHSA-2018:2439
7.7
Red Hat Security Advisory: mariadb security and bug fix update
- Record
RHSA-2018:2439- CVSS 3.0
- 7.7 High
CVSS:3.0/AV:L/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H - Updated
- 2026-11-02
Show 5 moreShow less
OSVRHSA-2018:3655
7.7
Red Hat Security Advisory: rh-mysql57-mysql security update
- Record
RHSA-2018:3655- CVSS 3.0
- 7.7 High
CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H - Updated
- 2026-11-02
OSVRHSA-2019:1258
8.8
Red Hat Security Advisory: rh-mariadb102-mariadb and rh-mariadb102-galera security and bug fix update
- Record
RHSA-2019:1258- CVSS 3.0
- 8.8 High
CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H - Updated
- 2026-11-02
OSVUBUNTU-CVE-2018-3133
6.5
Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Parser). Supported versions that are affected are 5.5.61 and prior, 5.6.41 and prior, 5.7.23 and prior and 8.0.12 and prior. Easily exploitable vulnerability allows low privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.0 Base Score 6.5 (Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H).
- Record
UBUNTU-CVE-2018-3133- CVSS 3.1
- 6.5 Medium
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H - Updated
- 2026-11-02
OSVSUSE-SU-2018:3542-1 No score
Security update for mysql
MySQL server was updated to version 5.5.62, fixing bugs and security issues.
Changes:
http://dev.mysql.com/doc/relnotes/mysql/5.5/en/news-5-5-62.html
Following security issues were fixed:
-
CVE-2016-9843: The crc32_big function in zlib might have allowed context-dependent attackers to have unspecified impact via vectors involving big-endian CRC calculation. (bsc#1013882) Please note that SUSE uses the system zlib, not the embedded copy.
-
CVE-2018-3133: Authenticated low privilege attackers could cause denial of service attacks (hangs or crashes) against the mysql server (bsc#1112369)
-
CVE-2018-3174: Authenticated high privilege attackers could cause denial of service attacks (hangs or crashes) against the mysql server (bsc#1112368)
-
CVE-2018-3282: Authenticated high privilege attackers could cause denial of service attacks (hangs or crashes) against the mysql server (bsc#1112432)
- Record
SUSE-SU-2018:3542-1- Updated
- 2026-11-02
OSVUSN-3799-1 No score
mysql-5.5, mysql-5.7 vulnerabilities
Multiple security issues were discovered in MySQL and this update includes new upstream MySQL versions to fix these issues.
MySQL has been updated to 5.5.62 in Ubuntu 14.04 LTS. Ubuntu 16.04 LTS, Ubuntu 18.04 LTS, and Ubuntu 18.10 have been updated to MySQL 5.7.24.
In addition to security fixes, the updated packages contain bug fixes, new features, and possibly incompatible changes.
Please see the following for more information: http://dev.mysql.com/doc/relnotes/mysql/5.5/en/news-5-5-62.html http://dev.mysql.com/doc/relnotes/mysql/5.7/en/news-5-7-24.html https://www.oracle.com/technetwork/security-advisory/cpuoct2018-4428296.html
- Record
USN-3799-1- Updated
- 2026-11-02
Affected products
Affected packages
| Package | Affected | Fixed |
|---|---|---|
mysql-5.5Debian:8 From an advisory covering 9 CVEs |
before 5.5.62-0+deb8u1, plus listed versions 5.5.42-15.5.43-0+deb8u15.5.44-0+deb8u15.5.46-0+deb8u15.5.47-0+deb8u1 Show 10 moreShow less5.5.49-0+deb8u15.5.50-0+deb8u15.5.52-0+deb8u15.5.53-0+deb8u15.5.54-0+deb8u15.5.55-0+deb8u15.5.57-0+deb8u15.5.58-0+deb8u15.5.59-0+deb8u15.5.60-0+deb8u1 |
5.5.62-0+deb8u1 |
mariadbRed Hat:enterprise_linux:7::client From an advisory covering 23 CVEs |
before 1:5.5.60-1.el7_5 | 1:5.5.60-1.el7_5 |
mariadb-debuginfoRed Hat:enterprise_linux:7::client From an advisory covering 23 CVEs |
before 1:5.5.60-1.el7_5 | 1:5.5.60-1.el7_5 |
mariadb-libsRed Hat:enterprise_linux:7::client From an advisory covering 23 CVEs |
before 1:5.5.60-1.el7_5 | 1:5.5.60-1.el7_5 |
mariadb-serverRed Hat:enterprise_linux:7::client From an advisory covering 23 CVEs |
before 1:5.5.60-1.el7_5 | 1:5.5.60-1.el7_5 |
mariadb-benchRed Hat:enterprise_linux:7::client From an advisory covering 23 CVEs |
before 1:5.5.60-1.el7_5 | 1:5.5.60-1.el7_5 |
mariadb-develRed Hat:enterprise_linux:7::client From an advisory covering 23 CVEs |
before 1:5.5.60-1.el7_5 | 1:5.5.60-1.el7_5 |
mariadb-embeddedRed Hat:enterprise_linux:7::client From an advisory covering 23 CVEs |
before 1:5.5.60-1.el7_5 | 1:5.5.60-1.el7_5 |
mariadb-embedded-develRed Hat:enterprise_linux:7::client From an advisory covering 23 CVEs |
before 1:5.5.60-1.el7_5 | 1:5.5.60-1.el7_5 |
mariadb-testRed Hat:enterprise_linux:7::client From an advisory covering 23 CVEs |
before 1:5.5.60-1.el7_5 | 1:5.5.60-1.el7_5 |
Show 103 moreShow less
| Package | Affected | Fixed |
|---|---|---|
mariadbRed Hat:enterprise_linux:7::computenode From an advisory covering 23 CVEs |
before 1:5.5.60-1.el7_5 | 1:5.5.60-1.el7_5 |
mariadb-debuginfoRed Hat:enterprise_linux:7::computenode From an advisory covering 23 CVEs |
before 1:5.5.60-1.el7_5 | 1:5.5.60-1.el7_5 |
mariadb-libsRed Hat:enterprise_linux:7::computenode From an advisory covering 23 CVEs |
before 1:5.5.60-1.el7_5 | 1:5.5.60-1.el7_5 |
mariadb-benchRed Hat:enterprise_linux:7::computenode From an advisory covering 23 CVEs |
before 1:5.5.60-1.el7_5 | 1:5.5.60-1.el7_5 |
mariadb-develRed Hat:enterprise_linux:7::computenode From an advisory covering 23 CVEs |
before 1:5.5.60-1.el7_5 | 1:5.5.60-1.el7_5 |
mariadb-embeddedRed Hat:enterprise_linux:7::computenode From an advisory covering 23 CVEs |
before 1:5.5.60-1.el7_5 | 1:5.5.60-1.el7_5 |
mariadb-embedded-develRed Hat:enterprise_linux:7::computenode From an advisory covering 23 CVEs |
before 1:5.5.60-1.el7_5 | 1:5.5.60-1.el7_5 |
mariadb-serverRed Hat:enterprise_linux:7::computenode From an advisory covering 23 CVEs |
before 1:5.5.60-1.el7_5 | 1:5.5.60-1.el7_5 |
mariadb-testRed Hat:enterprise_linux:7::computenode From an advisory covering 23 CVEs |
before 1:5.5.60-1.el7_5 | 1:5.5.60-1.el7_5 |
mariadbRed Hat:enterprise_linux:7::server From an advisory covering 23 CVEs |
before 1:5.5.60-1.el7_5 | 1:5.5.60-1.el7_5 |
mariadb-benchRed Hat:enterprise_linux:7::server From an advisory covering 23 CVEs |
before 1:5.5.60-1.el7_5 | 1:5.5.60-1.el7_5 |
mariadb-debuginfoRed Hat:enterprise_linux:7::server From an advisory covering 23 CVEs |
before 1:5.5.60-1.el7_5 | 1:5.5.60-1.el7_5 |
mariadb-develRed Hat:enterprise_linux:7::server From an advisory covering 23 CVEs |
before 1:5.5.60-1.el7_5 | 1:5.5.60-1.el7_5 |
mariadb-libsRed Hat:enterprise_linux:7::server From an advisory covering 23 CVEs |
before 1:5.5.60-1.el7_5 | 1:5.5.60-1.el7_5 |
mariadb-serverRed Hat:enterprise_linux:7::server From an advisory covering 23 CVEs |
before 1:5.5.60-1.el7_5 | 1:5.5.60-1.el7_5 |
mariadb-testRed Hat:enterprise_linux:7::server From an advisory covering 23 CVEs |
before 1:5.5.60-1.el7_5 | 1:5.5.60-1.el7_5 |
mariadb-embeddedRed Hat:enterprise_linux:7::server From an advisory covering 23 CVEs |
before 1:5.5.60-1.el7_5 | 1:5.5.60-1.el7_5 |
mariadb-embedded-develRed Hat:enterprise_linux:7::server From an advisory covering 23 CVEs |
before 1:5.5.60-1.el7_5 | 1:5.5.60-1.el7_5 |
mariadbRed Hat:enterprise_linux:7::workstation From an advisory covering 23 CVEs |
before 1:5.5.60-1.el7_5 | 1:5.5.60-1.el7_5 |
mariadb-benchRed Hat:enterprise_linux:7::workstation From an advisory covering 23 CVEs |
before 1:5.5.60-1.el7_5 | 1:5.5.60-1.el7_5 |
mariadb-debuginfoRed Hat:enterprise_linux:7::workstation From an advisory covering 23 CVEs |
before 1:5.5.60-1.el7_5 | 1:5.5.60-1.el7_5 |
mariadb-develRed Hat:enterprise_linux:7::workstation From an advisory covering 23 CVEs |
before 1:5.5.60-1.el7_5 | 1:5.5.60-1.el7_5 |
mariadb-libsRed Hat:enterprise_linux:7::workstation From an advisory covering 23 CVEs |
before 1:5.5.60-1.el7_5 | 1:5.5.60-1.el7_5 |
mariadb-serverRed Hat:enterprise_linux:7::workstation From an advisory covering 23 CVEs |
before 1:5.5.60-1.el7_5 | 1:5.5.60-1.el7_5 |
mariadb-testRed Hat:enterprise_linux:7::workstation From an advisory covering 23 CVEs |
before 1:5.5.60-1.el7_5 | 1:5.5.60-1.el7_5 |
mariadb-embeddedRed Hat:enterprise_linux:7::workstation From an advisory covering 23 CVEs |
before 1:5.5.60-1.el7_5 | 1:5.5.60-1.el7_5 |
mariadb-embedded-develRed Hat:enterprise_linux:7::workstation From an advisory covering 23 CVEs |
before 1:5.5.60-1.el7_5 | 1:5.5.60-1.el7_5 |
rh-mysql57-mysqlRed Hat:rhel_software_collections:3::el6 From an advisory covering 64 CVEs |
before 0:5.7.24-2.el6 | 0:5.7.24-2.el6 |
rh-mysql57-mysql-commonRed Hat:rhel_software_collections:3::el6 From an advisory covering 64 CVEs |
before 0:5.7.24-2.el6 | 0:5.7.24-2.el6 |
rh-mysql57-mysql-configRed Hat:rhel_software_collections:3::el6 From an advisory covering 64 CVEs |
before 0:5.7.24-2.el6 | 0:5.7.24-2.el6 |
rh-mysql57-mysql-debuginfoRed Hat:rhel_software_collections:3::el6 From an advisory covering 64 CVEs |
before 0:5.7.24-2.el6 | 0:5.7.24-2.el6 |
rh-mysql57-mysql-develRed Hat:rhel_software_collections:3::el6 From an advisory covering 64 CVEs |
before 0:5.7.24-2.el6 | 0:5.7.24-2.el6 |
rh-mysql57-mysql-errmsgRed Hat:rhel_software_collections:3::el6 From an advisory covering 64 CVEs |
before 0:5.7.24-2.el6 | 0:5.7.24-2.el6 |
rh-mysql57-mysql-serverRed Hat:rhel_software_collections:3::el6 From an advisory covering 64 CVEs |
before 0:5.7.24-2.el6 | 0:5.7.24-2.el6 |
rh-mysql57-mysql-testRed Hat:rhel_software_collections:3::el6 From an advisory covering 64 CVEs |
before 0:5.7.24-2.el6 | 0:5.7.24-2.el6 |
rh-mysql57-mysqlRed Hat:rhel_software_collections:3::el7 From an advisory covering 64 CVEs |
before 0:5.7.24-1.el7 | 0:5.7.24-1.el7 |
rh-mysql57-mysql-commonRed Hat:rhel_software_collections:3::el7 From an advisory covering 64 CVEs |
before 0:5.7.24-1.el7 | 0:5.7.24-1.el7 |
rh-mysql57-mysql-configRed Hat:rhel_software_collections:3::el7 From an advisory covering 64 CVEs |
before 0:5.7.24-1.el7 | 0:5.7.24-1.el7 |
rh-mysql57-mysql-debuginfoRed Hat:rhel_software_collections:3::el7 From an advisory covering 64 CVEs |
before 0:5.7.24-1.el7 | 0:5.7.24-1.el7 |
rh-mysql57-mysql-develRed Hat:rhel_software_collections:3::el7 From an advisory covering 64 CVEs |
before 0:5.7.24-1.el7 | 0:5.7.24-1.el7 |
rh-mysql57-mysql-errmsgRed Hat:rhel_software_collections:3::el7 From an advisory covering 64 CVEs |
before 0:5.7.24-1.el7 | 0:5.7.24-1.el7 |
rh-mysql57-mysql-serverRed Hat:rhel_software_collections:3::el7 From an advisory covering 64 CVEs |
before 0:5.7.24-1.el7 | 0:5.7.24-1.el7 |
rh-mysql57-mysql-testRed Hat:rhel_software_collections:3::el7 From an advisory covering 64 CVEs |
before 0:5.7.24-1.el7 | 0:5.7.24-1.el7 |
rh-mariadb102-galeraRed Hat:rhel_software_collections:3::el6 From an advisory covering 47 CVEs |
before 0:25.3.25-1.el6 | 0:25.3.25-1.el6 |
rh-mariadb102-galera-debuginfoRed Hat:rhel_software_collections:3::el6 From an advisory covering 47 CVEs |
before 0:25.3.25-1.el6 | 0:25.3.25-1.el6 |
rh-mariadb102-mariadbRed Hat:rhel_software_collections:3::el6 From an advisory covering 47 CVEs |
before 1:10.2.22-1.el6 | 1:10.2.22-1.el6 |
rh-mariadb102-mariadb-backupRed Hat:rhel_software_collections:3::el6 From an advisory covering 47 CVEs |
before 1:10.2.22-1.el6 | 1:10.2.22-1.el6 |
rh-mariadb102-mariadb-backup-syspathsRed Hat:rhel_software_collections:3::el6 From an advisory covering 47 CVEs |
before 1:10.2.22-1.el6 | 1:10.2.22-1.el6 |
rh-mariadb102-mariadb-benchRed Hat:rhel_software_collections:3::el6 From an advisory covering 47 CVEs |
before 1:10.2.22-1.el6 | 1:10.2.22-1.el6 |
rh-mariadb102-mariadb-commonRed Hat:rhel_software_collections:3::el6 From an advisory covering 47 CVEs |
before 1:10.2.22-1.el6 | 1:10.2.22-1.el6 |
rh-mariadb102-mariadb-configRed Hat:rhel_software_collections:3::el6 From an advisory covering 47 CVEs |
before 1:10.2.22-1.el6 | 1:10.2.22-1.el6 |
rh-mariadb102-mariadb-config-syspathsRed Hat:rhel_software_collections:3::el6 From an advisory covering 47 CVEs |
before 1:10.2.22-1.el6 | 1:10.2.22-1.el6 |
rh-mariadb102-mariadb-debuginfoRed Hat:rhel_software_collections:3::el6 From an advisory covering 47 CVEs |
before 1:10.2.22-1.el6 | 1:10.2.22-1.el6 |
rh-mariadb102-mariadb-develRed Hat:rhel_software_collections:3::el6 From an advisory covering 47 CVEs |
before 1:10.2.22-1.el6 | 1:10.2.22-1.el6 |
rh-mariadb102-mariadb-errmsgRed Hat:rhel_software_collections:3::el6 From an advisory covering 47 CVEs |
before 1:10.2.22-1.el6 | 1:10.2.22-1.el6 |
rh-mariadb102-mariadb-gssapi-clientRed Hat:rhel_software_collections:3::el6 From an advisory covering 47 CVEs |
before 1:10.2.22-1.el6 | 1:10.2.22-1.el6 |
rh-mariadb102-mariadb-gssapi-serverRed Hat:rhel_software_collections:3::el6 From an advisory covering 47 CVEs |
before 1:10.2.22-1.el6 | 1:10.2.22-1.el6 |
rh-mariadb102-mariadb-oqgraph-engineRed Hat:rhel_software_collections:3::el6 From an advisory covering 47 CVEs |
before 1:10.2.22-1.el6 | 1:10.2.22-1.el6 |
rh-mariadb102-mariadb-serverRed Hat:rhel_software_collections:3::el6 From an advisory covering 47 CVEs |
before 1:10.2.22-1.el6 | 1:10.2.22-1.el6 |
rh-mariadb102-mariadb-server-galeraRed Hat:rhel_software_collections:3::el6 From an advisory covering 47 CVEs |
before 1:10.2.22-1.el6 | 1:10.2.22-1.el6 |
rh-mariadb102-mariadb-server-galera-syspathsRed Hat:rhel_software_collections:3::el6 From an advisory covering 47 CVEs |
before 1:10.2.22-1.el6 | 1:10.2.22-1.el6 |
rh-mariadb102-mariadb-server-syspathsRed Hat:rhel_software_collections:3::el6 From an advisory covering 47 CVEs |
before 1:10.2.22-1.el6 | 1:10.2.22-1.el6 |
rh-mariadb102-mariadb-server-utilsRed Hat:rhel_software_collections:3::el6 From an advisory covering 47 CVEs |
before 1:10.2.22-1.el6 | 1:10.2.22-1.el6 |
rh-mariadb102-mariadb-server-utils-syspathsRed Hat:rhel_software_collections:3::el6 From an advisory covering 47 CVEs |
before 1:10.2.22-1.el6 | 1:10.2.22-1.el6 |
rh-mariadb102-mariadb-syspathsRed Hat:rhel_software_collections:3::el6 From an advisory covering 47 CVEs |
before 1:10.2.22-1.el6 | 1:10.2.22-1.el6 |
rh-mariadb102-mariadb-testRed Hat:rhel_software_collections:3::el6 From an advisory covering 47 CVEs |
before 1:10.2.22-1.el6 | 1:10.2.22-1.el6 |
rh-mariadb102-galeraRed Hat:rhel_software_collections:3::el7 From an advisory covering 47 CVEs |
before 0:25.3.25-1.el7 | 0:25.3.25-1.el7 |
rh-mariadb102-galera-debuginfoRed Hat:rhel_software_collections:3::el7 From an advisory covering 47 CVEs |
before 0:25.3.25-1.el7 | 0:25.3.25-1.el7 |
rh-mariadb102-mariadbRed Hat:rhel_software_collections:3::el7 From an advisory covering 47 CVEs |
before 1:10.2.22-1.el7 | 1:10.2.22-1.el7 |
rh-mariadb102-mariadb-backupRed Hat:rhel_software_collections:3::el7 From an advisory covering 47 CVEs |
before 1:10.2.22-1.el7 | 1:10.2.22-1.el7 |
rh-mariadb102-mariadb-backup-syspathsRed Hat:rhel_software_collections:3::el7 From an advisory covering 47 CVEs |
before 1:10.2.22-1.el7 | 1:10.2.22-1.el7 |
rh-mariadb102-mariadb-benchRed Hat:rhel_software_collections:3::el7 From an advisory covering 47 CVEs |
before 1:10.2.22-1.el7 | 1:10.2.22-1.el7 |
rh-mariadb102-mariadb-commonRed Hat:rhel_software_collections:3::el7 From an advisory covering 47 CVEs |
before 1:10.2.22-1.el7 | 1:10.2.22-1.el7 |
rh-mariadb102-mariadb-configRed Hat:rhel_software_collections:3::el7 From an advisory covering 47 CVEs |
before 1:10.2.22-1.el7 | 1:10.2.22-1.el7 |
rh-mariadb102-mariadb-config-syspathsRed Hat:rhel_software_collections:3::el7 From an advisory covering 47 CVEs |
before 1:10.2.22-1.el7 | 1:10.2.22-1.el7 |
rh-mariadb102-mariadb-debuginfoRed Hat:rhel_software_collections:3::el7 From an advisory covering 47 CVEs |
before 1:10.2.22-1.el7 | 1:10.2.22-1.el7 |
rh-mariadb102-mariadb-develRed Hat:rhel_software_collections:3::el7 From an advisory covering 47 CVEs |
before 1:10.2.22-1.el7 | 1:10.2.22-1.el7 |
rh-mariadb102-mariadb-errmsgRed Hat:rhel_software_collections:3::el7 From an advisory covering 47 CVEs |
before 1:10.2.22-1.el7 | 1:10.2.22-1.el7 |
rh-mariadb102-mariadb-gssapi-clientRed Hat:rhel_software_collections:3::el7 From an advisory covering 47 CVEs |
before 1:10.2.22-1.el7 | 1:10.2.22-1.el7 |
rh-mariadb102-mariadb-gssapi-serverRed Hat:rhel_software_collections:3::el7 From an advisory covering 47 CVEs |
before 1:10.2.22-1.el7 | 1:10.2.22-1.el7 |
rh-mariadb102-mariadb-oqgraph-engineRed Hat:rhel_software_collections:3::el7 From an advisory covering 47 CVEs |
before 1:10.2.22-1.el7 | 1:10.2.22-1.el7 |
rh-mariadb102-mariadb-serverRed Hat:rhel_software_collections:3::el7 From an advisory covering 47 CVEs |
before 1:10.2.22-1.el7 | 1:10.2.22-1.el7 |
rh-mariadb102-mariadb-server-galeraRed Hat:rhel_software_collections:3::el7 From an advisory covering 47 CVEs |
before 1:10.2.22-1.el7 | 1:10.2.22-1.el7 |
rh-mariadb102-mariadb-server-galera-syspathsRed Hat:rhel_software_collections:3::el7 From an advisory covering 47 CVEs |
before 1:10.2.22-1.el7 | 1:10.2.22-1.el7 |
rh-mariadb102-mariadb-server-syspathsRed Hat:rhel_software_collections:3::el7 From an advisory covering 47 CVEs |
before 1:10.2.22-1.el7 | 1:10.2.22-1.el7 |
rh-mariadb102-mariadb-server-utilsRed Hat:rhel_software_collections:3::el7 From an advisory covering 47 CVEs |
before 1:10.2.22-1.el7 | 1:10.2.22-1.el7 |
rh-mariadb102-mariadb-server-utils-syspathsRed Hat:rhel_software_collections:3::el7 From an advisory covering 47 CVEs |
before 1:10.2.22-1.el7 | 1:10.2.22-1.el7 |
rh-mariadb102-mariadb-syspathsRed Hat:rhel_software_collections:3::el7 From an advisory covering 47 CVEs |
before 1:10.2.22-1.el7 | 1:10.2.22-1.el7 |
rh-mariadb102-mariadb-testRed Hat:rhel_software_collections:3::el7 From an advisory covering 47 CVEs |
before 1:10.2.22-1.el7 | 1:10.2.22-1.el7 |
mysqlSUSE:Linux Enterprise Software Development Kit 11 SP4 From an advisory covering 4 CVEs |
before 5.5.62-0.39.18.1 | 5.5.62-0.39.18.1 |
mysqlSUSE:Linux Enterprise Point of Sale 11 SP3 From an advisory covering 4 CVEs |
before 5.5.62-0.39.18.1 | 5.5.62-0.39.18.1 |
mysqlSUSE:Linux Enterprise Server 11 SP3-LTSS From an advisory covering 4 CVEs |
before 5.5.62-0.39.18.1 | 5.5.62-0.39.18.1 |
mysqlSUSE:Linux Enterprise Server 11 SP3-TERADATA From an advisory covering 4 CVEs |
before 5.5.62-0.39.18.1 | 5.5.62-0.39.18.1 |
mysqlSUSE:Linux Enterprise Server 11 SP4 From an advisory covering 4 CVEs |
before 5.5.62-0.39.18.1 | 5.5.62-0.39.18.1 |
mysqlSUSE:Linux Enterprise Server for SAP Applications 11 SP4 From an advisory covering 4 CVEs |
before 5.5.62-0.39.18.1 | 5.5.62-0.39.18.1 |
mysql-5.5Ubuntu:14.04:LTS |
before 5.5.62-0ubuntu0.14.04.1, plus listed versions 5.5.32-0ubuntu75.5.34-0ubuntu15.5.34-0ubuntu25.5.35-0ubuntu15.5.35+dfsg-1ubuntu1 Show 19 moreShow less5.5.37-0ubuntu0.14.04.15.5.38-0ubuntu0.14.04.15.5.40-0ubuntu0.14.04.15.5.41-0ubuntu0.14.04.15.5.43-0ubuntu0.14.04.15.5.44-0ubuntu0.14.04.15.5.46-0ubuntu0.14.04.25.5.47-0ubuntu0.14.04.15.5.49-0ubuntu0.14.04.15.5.50-0ubuntu0.14.04.15.5.52-0ubuntu0.14.04.15.5.53-0ubuntu0.14.04.15.5.54-0ubuntu0.14.04.15.5.55-0ubuntu0.14.04.15.5.57-0ubuntu0.14.04.15.5.58-0ubuntu0.14.04.15.5.59-0ubuntu0.14.04.15.5.60-0ubuntu0.14.04.15.5.61-0ubuntu0.14.04.1 |
5.5.62-0ubuntu0.14.04.1 |
mysql-5.7Ubuntu:16.04:LTS |
before 5.7.24-0ubuntu0.16.04.1, plus listed versions 5.7.11-0ubuntu45.7.11-0ubuntu55.7.11-0ubuntu65.7.12-0ubuntu15.7.12-0ubuntu1.1 Show 11 moreShow less5.7.13-0ubuntu0.16.04.25.7.15-0ubuntu0.16.04.15.7.16-0ubuntu0.16.04.15.7.17-0ubuntu0.16.04.15.7.17-0ubuntu0.16.04.25.7.18-0ubuntu0.16.04.15.7.19-0ubuntu0.16.04.15.7.20-0ubuntu0.16.04.15.7.21-0ubuntu0.16.04.15.7.22-0ubuntu0.16.04.15.7.23-0ubuntu0.16.04.1 |
5.7.24-0ubuntu0.16.04.1 |
percona-server-5.6Ubuntu:16.04:LTS |
All versions, plus listed versions 5.6.22-rel71.0-0ubuntu25.6.22-rel71.0-0ubuntu45.6.22-rel71.0-0ubuntu4.1 |
None known |
percona-xtradb-cluster-5.6Ubuntu:16.04:LTS |
All versions, plus listed versions 5.6.21-25.8-0ubuntu25.6.21-25.8-0ubuntu35.6.21-25.8-0ubuntu3.15.6.21-25.8-0ubuntu3.25.6.34-26.19-0ubuntu0.16.04.15.6.34-26.19-0ubuntu0.16.04.25.6.37-26.21-0ubuntu0.16.04.15.6.37-26.21-0ubuntu0.16.04.2 |
None known |
mysql-5.7Ubuntu:18.04:LTS |
before 5.7.24-0ubuntu0.18.04.1, plus listed versions 5.7.19-0ubuntu15.7.20-0ubuntu0.17.10.15.7.20-1ubuntu15.7.21-1ubuntu15.7.22-0ubuntu18.04.15.7.23-0ubuntu0.18.04.1 |
5.7.24-0ubuntu0.18.04.1 |
mysql-5.5Ubuntu:14.04:LTS From an advisory covering 21 CVEs |
before 5.5.62-0ubuntu0.14.04.1, plus listed versions 5.5.32-0ubuntu75.5.34-0ubuntu15.5.34-0ubuntu25.5.35-0ubuntu15.5.35+dfsg-1ubuntu1 Show 19 moreShow less5.5.37-0ubuntu0.14.04.15.5.38-0ubuntu0.14.04.15.5.40-0ubuntu0.14.04.15.5.41-0ubuntu0.14.04.15.5.43-0ubuntu0.14.04.15.5.44-0ubuntu0.14.04.15.5.46-0ubuntu0.14.04.25.5.47-0ubuntu0.14.04.15.5.49-0ubuntu0.14.04.15.5.50-0ubuntu0.14.04.15.5.52-0ubuntu0.14.04.15.5.53-0ubuntu0.14.04.15.5.54-0ubuntu0.14.04.15.5.55-0ubuntu0.14.04.15.5.57-0ubuntu0.14.04.15.5.58-0ubuntu0.14.04.15.5.59-0ubuntu0.14.04.15.5.60-0ubuntu0.14.04.15.5.61-0ubuntu0.14.04.1 |
5.5.62-0ubuntu0.14.04.1 |
mysql-5.7Ubuntu:16.04:LTS From an advisory covering 21 CVEs |
before 5.7.24-0ubuntu0.16.04.1, plus listed versions 5.7.11-0ubuntu45.7.11-0ubuntu55.7.11-0ubuntu65.7.12-0ubuntu15.7.12-0ubuntu1.1 Show 11 moreShow less5.7.13-0ubuntu0.16.04.25.7.15-0ubuntu0.16.04.15.7.16-0ubuntu0.16.04.15.7.17-0ubuntu0.16.04.15.7.17-0ubuntu0.16.04.25.7.18-0ubuntu0.16.04.15.7.19-0ubuntu0.16.04.15.7.20-0ubuntu0.16.04.15.7.21-0ubuntu0.16.04.15.7.22-0ubuntu0.16.04.15.7.23-0ubuntu0.16.04.1 |
5.7.24-0ubuntu0.16.04.1 |
mysql-5.7Ubuntu:18.04:LTS From an advisory covering 21 CVEs |
before 5.7.24-0ubuntu0.18.04.1, plus listed versions 5.7.19-0ubuntu15.7.20-0ubuntu0.17.10.15.7.20-1ubuntu15.7.21-1ubuntu15.7.22-0ubuntu18.04.15.7.23-0ubuntu0.18.04.1 |
5.7.24-0ubuntu0.18.04.1 |
History
| Recorded | Changed | Sources |
|---|---|---|
| affected, facts | ||
| aliases | EUVD | |
| first indexed | CVE List, GitHub Advisories, NVD, OSV |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2018-3133 is a medium vulnerability (CVSS 6.5) in Oracle Mysql, published October 16, 2018. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 2.92%, the 87th percentile. Fixed in mysql-5.5 5.5.62-0ubuntu0.14.04.1.
References
usn.ubuntu.com/3799-2
securitytracker.com/id/1041888
access.redhat.com/errata/RHSA-2018:3655
usn.ubuntu.com/3799-1
lists.debian.org/debian-lts-announce/2018/11/msg00004.html
oracle.com/technetwork/security-advisory/cpuoct2018-4428296.html
Show 194 moreShow less
security.netapp.com/advisory/ntap-20181018-0002
securityfocus.com/bid/105610
access.redhat.com/errata/RHSA-2019:1258
nvd.nist.gov/vuln/detail/CVE-2018-3133
github.com/advisories/GHSA-62r4-9fpf-c245
access.redhat.com/errata/RHSA-2018:2439
access.redhat.com/security/updates/classification
bugzilla.redhat.com/show_bug.cgi?id=1472686
bugzilla.redhat.com/show_bug.cgi?id=1472693
bugzilla.redhat.com/show_bug.cgi?id=1472708
bugzilla.redhat.com/show_bug.cgi?id=1472711
bugzilla.redhat.com/show_bug.cgi?id=1503656
bugzilla.redhat.com/show_bug.cgi?id=1503684
bugzilla.redhat.com/show_bug.cgi?id=1503685
bugzilla.redhat.com/show_bug.cgi?id=1503686
bugzilla.redhat.com/show_bug.cgi?id=1535484
bugzilla.redhat.com/show_bug.cgi?id=1535499
bugzilla.redhat.com/show_bug.cgi?id=1535500
bugzilla.redhat.com/show_bug.cgi?id=1535504
bugzilla.redhat.com/show_bug.cgi?id=1535506
bugzilla.redhat.com/show_bug.cgi?id=1564965
bugzilla.redhat.com/show_bug.cgi?id=1568921
bugzilla.redhat.com/show_bug.cgi?id=1568924
bugzilla.redhat.com/show_bug.cgi?id=1568931
bugzilla.redhat.com/show_bug.cgi?id=1568942
bugzilla.redhat.com/show_bug.cgi?id=1568951
bugzilla.redhat.com/show_bug.cgi?id=1568954
bugzilla.redhat.com/show_bug.cgi?id=1568956
bugzilla.redhat.com/show_bug.cgi?id=1584023
bugzilla.redhat.com/show_bug.cgi?id=1584024
bugzilla.redhat.com/show_bug.cgi?id=1584029
security.access.redhat.com/data/csaf/v2/advisories/2018/rhsa-2018_2439.json
access.redhat.com/security/cve/CVE-2017-3636
cve.org/CVERecord?id=CVE-2017-3636
nvd.nist.gov/vuln/detail/CVE-2017-3636
oracle.com/technetwork/security-advisory/cpujul2017-3236622.html
access.redhat.com/security/cve/CVE-2017-3641
cve.org/CVERecord?id=CVE-2017-3641
nvd.nist.gov/vuln/detail/CVE-2017-3641
access.redhat.com/security/cve/CVE-2017-3651
cve.org/CVERecord?id=CVE-2017-3651
nvd.nist.gov/vuln/detail/CVE-2017-3651
access.redhat.com/security/cve/CVE-2017-3653
cve.org/CVERecord?id=CVE-2017-3653
nvd.nist.gov/vuln/detail/CVE-2017-3653
access.redhat.com/security/cve/CVE-2017-10268
cve.org/CVERecord?id=CVE-2017-10268
nvd.nist.gov/vuln/detail/CVE-2017-10268
oracle.com/technetwork/security-advisory/cpuoct2017-3236626.html
access.redhat.com/security/cve/CVE-2017-10378
cve.org/CVERecord?id=CVE-2017-10378
nvd.nist.gov/vuln/detail/CVE-2017-10378
access.redhat.com/security/cve/CVE-2017-10379
cve.org/CVERecord?id=CVE-2017-10379
nvd.nist.gov/vuln/detail/CVE-2017-10379
access.redhat.com/security/cve/CVE-2017-10384
cve.org/CVERecord?id=CVE-2017-10384
nvd.nist.gov/vuln/detail/CVE-2017-10384
access.redhat.com/security/cve/CVE-2018-2562
cve.org/CVERecord?id=CVE-2018-2562
nvd.nist.gov/vuln/detail/CVE-2018-2562
oracle.com/technetwork/security-advisory/cpujan2018-3236628.html
access.redhat.com/security/cve/CVE-2018-2622
cve.org/CVERecord?id=CVE-2018-2622
nvd.nist.gov/vuln/detail/CVE-2018-2622
access.redhat.com/security/cve/CVE-2018-2640
cve.org/CVERecord?id=CVE-2018-2640
nvd.nist.gov/vuln/detail/CVE-2018-2640
access.redhat.com/security/cve/CVE-2018-2665
cve.org/CVERecord?id=CVE-2018-2665
nvd.nist.gov/vuln/detail/CVE-2018-2665
access.redhat.com/security/cve/CVE-2018-2668
cve.org/CVERecord?id=CVE-2018-2668
nvd.nist.gov/vuln/detail/CVE-2018-2668
access.redhat.com/security/cve/CVE-2018-2755
cve.org/CVERecord?id=CVE-2018-2755
nvd.nist.gov/vuln/detail/CVE-2018-2755
oracle.com/technetwork/security-advisory/cpuapr2018-3678067.html
access.redhat.com/security/cve/CVE-2018-2761
cve.org/CVERecord?id=CVE-2018-2761
nvd.nist.gov/vuln/detail/CVE-2018-2761
access.redhat.com/security/cve/CVE-2018-2767
cve.org/CVERecord?id=CVE-2018-2767
nvd.nist.gov/vuln/detail/CVE-2018-2767
access.redhat.com/security/cve/CVE-2018-2771
cve.org/CVERecord?id=CVE-2018-2771
nvd.nist.gov/vuln/detail/CVE-2018-2771
access.redhat.com/security/cve/CVE-2018-2781
cve.org/CVERecord?id=CVE-2018-2781
nvd.nist.gov/vuln/detail/CVE-2018-2781
access.redhat.com/security/cve/CVE-2018-2813
cve.org/CVERecord?id=CVE-2018-2813
nvd.nist.gov/vuln/detail/CVE-2018-2813
access.redhat.com/security/cve/CVE-2018-2817
cve.org/CVERecord?id=CVE-2018-2817
nvd.nist.gov/vuln/detail/CVE-2018-2817
access.redhat.com/security/cve/CVE-2018-2819
cve.org/CVERecord?id=CVE-2018-2819
nvd.nist.gov/vuln/detail/CVE-2018-2819
access.redhat.com/security/cve/CVE-2018-3133
bugzilla.redhat.com/show_bug.cgi?id=1640331
cve.org/CVERecord?id=CVE-2018-3133
access.redhat.com/security/cve/CVE-2019-2455
bugzilla.redhat.com/show_bug.cgi?id=1666742
cve.org/CVERecord?id=CVE-2019-2455
nvd.nist.gov/vuln/detail/CVE-2019-2455
oracle.com/technetwork/security-advisory/cpujan2019-5072801.html
bugzilla.redhat.com/show_bug.cgi?id=1568922
bugzilla.redhat.com/show_bug.cgi?id=1568923
bugzilla.redhat.com/show_bug.cgi?id=1568925
bugzilla.redhat.com/show_bug.cgi?id=1568926
bugzilla.redhat.com/show_bug.cgi?id=1568927
bugzilla.redhat.com/show_bug.cgi?id=1568932
bugzilla.redhat.com/show_bug.cgi?id=1568934
bugzilla.redhat.com/show_bug.cgi?id=1568936
bugzilla.redhat.com/show_bug.cgi?id=1568937
bugzilla.redhat.com/show_bug.cgi?id=1568938
bugzilla.redhat.com/show_bug.cgi?id=1568940
security.access.redhat.com/data/csaf/v2/advisories/2018/rhsa-2018_3655.json
access.redhat.com/security/cve/CVE-2018-2758
cve.org/CVERecord?id=CVE-2018-2758
nvd.nist.gov/vuln/detail/CVE-2018-2758
access.redhat.com/security/cve/CVE-2018-2759
cve.org/CVERecord?id=CVE-2018-2759
nvd.nist.gov/vuln/detail/CVE-2018-2759
access.redhat.com/security/cve/CVE-2018-2762
cve.org/CVERecord?id=CVE-2018-2762
nvd.nist.gov/vuln/detail/CVE-2018-2762
access.redhat.com/security/cve/CVE-2018-2766
cve.org/CVERecord?id=CVE-2018-2766
nvd.nist.gov/vuln/detail/CVE-2018-2766
access.redhat.com/security/cve/CVE-2018-2769
cve.org/CVERecord?id=CVE-2018-2769
nvd.nist.gov/vuln/detail/CVE-2018-2769
access.redhat.com/security/cve/CVE-2018-2773
cve.org/CVERecord?id=CVE-2018-2773
nvd.nist.gov/vuln/detail/CVE-2018-2773
access.redhat.com/security/cve/CVE-2018-2775
cve.org/CVERecord?id=CVE-2018-2775
nvd.nist.gov/vuln/detail/CVE-2018-2775
access.redhat.com/security/cve/CVE-2018-2776
cve.org/CVERecord?id=CVE-2018-2776
nvd.nist.gov/vuln/detail/CVE-2018-2776
access.redhat.com/security/cve/CVE-2018-2777
cve.org/CVERecord?id=CVE-2018-2777
nvd.nist.gov/vuln/detail/CVE-2018-2777
access.redhat.com/security/cve/CVE-2018-2778
cve.org/CVERecord?id=CVE-2018-2778
nvd.nist.gov/vuln/detail/CVE-2018-2778
access.redhat.com/security/cve/CVE-2018-2779
cve.org/CVERecord?id=CVE-2018-2779
nvd.nist.gov/vuln/detail/CVE-2018-2779
cve.org/CVERecord?id=CVE-2018-2780
nvd.nist.gov/vuln/detail/CVE-2018-2780
cve.org/CVERecord?id=CVE-2018-2782
nvd.nist.gov/vuln/detail/CVE-2018-2782
cve.org/CVERecord?id=CVE-2018-2784
nvd.nist.gov/vuln/detail/CVE-2018-2784
oracle.com/technetwork/security-advisory/cpujul2018-4258247.html
oracle.com/technetwork/security-advisory/cpujul2019-5072835.html
security.access.redhat.com/data/csaf/v2/advisories/2019/rhsa-2019_1258.json
oracle.com/security-alerts/cpujul2020.html
suse.com/support/update/announcement/2018/suse-su-20183542-1
bugzilla.suse.com/1013882
bugzilla.suse.com/1112368
bugzilla.suse.com/1112369
bugzilla.suse.com/1112432
suse.com/security/cve/CVE-2016-9843
suse.com/security/cve/CVE-2018-3133
suse.com/security/cve/CVE-2018-3174
suse.com/security/cve/CVE-2018-3282
ubuntu.com/security/CVE-2018-3133
ubuntu.com/security/notices/USN-3799-1
ubuntu.com/security/notices/USN-3799-2
ubuntu.com/security/CVE-2018-3143
ubuntu.com/security/CVE-2018-3144
ubuntu.com/security/CVE-2018-3155
ubuntu.com/security/CVE-2018-3156
ubuntu.com/security/CVE-2018-3161
ubuntu.com/security/CVE-2018-3162
ubuntu.com/security/CVE-2018-3171
ubuntu.com/security/CVE-2018-3173
ubuntu.com/security/CVE-2018-3174
ubuntu.com/security/CVE-2018-3185
ubuntu.com/security/CVE-2018-3187
ubuntu.com/security/CVE-2018-3200
ubuntu.com/security/CVE-2018-3247
ubuntu.com/security/CVE-2018-3251
ubuntu.com/security/CVE-2018-3276
ubuntu.com/security/CVE-2018-3277
ubuntu.com/security/CVE-2018-3278
ubuntu.com/security/CVE-2018-3282
ubuntu.com/security/CVE-2018-3283
ubuntu.com/security/CVE-2018-3284
Left out here: 206 references. The JSON record has them.