Every CVE Search/ Get API key

CVE-2018-3174

Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Client programs)....

5.3 MediumFix available

Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Client programs). Supported versions that are affected are 5.5.61 and prior, 5.6.41 and prior, 5.7.23 and prior and 8.0.12 and prior. Difficult to exploit vulnerability allows high privileged attacker with logon to the infrastructure where MySQL Server executes to compromise MySQL Server. While the vulnerability is in MySQL Server, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.0 Base Score 5.3 (Availability impacts). CVSS Vector: (CVSS:3.0/AV:L/AC:H/PR:H/UI:N/S:C/C:N/I:N/A:H).

Attack profile

How easy it is to exploit

Attack vector
Local
Complexity
High
Privileges needed
High
User interaction
None

What an attacker can affect

Confidentiality
None
Integrity
None
Availability
High

Exploit likelihood

0.82%Down 23.1 points since Apr 14, 2021
90%50%10%1%

What each source reports

NVD Score used 5.3

Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Client programs). Supported versions that are affected are 5.5.61 and prior, 5.6.41 and prior, 5.7.23 and prior and 8.0.12 and prior. Difficult to exploit vulnerability allows high privileged attacker with logon to the infrastructure where MySQL Server executes to compromise MySQL Server. While the vulnerability is in MySQL Server, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.0 Base Score 5.3 (Availability impacts). CVSS Vector: (CVSS:3.0/AV:L/AC:H/PR:H/UI:N/S:C/C:N/I:N/A:H).

Record
CVE-2018-3174
CVSS 3.1
5.3 MediumCVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:C/C:N/I:N/A:H
CVSS 2.0
1.9 LowAV:L/AC:M/Au:N/C:N/I:N/A:P
Updated
2026-11-02
CVE List No score

Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Client programs). Supported versions that are affected are 5.5.61 and prior, 5.6.41 and prior, 5.7.23 and prior and 8.0.12 and prior. Difficult to exploit vulnerability allows high privileged attacker with logon to the infrastructure where MySQL Server executes to compromise MySQL Server. While the vulnerability is in MySQL Server, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.0 Base Score 5.3 (Availability impacts). CVSS Vector: (CVSS:3.0/AV:L/AC:H/PR:H/UI:N/S:C/C:N/I:N/A:H).

Record
CVE-2018-3174
Updated
2026-11-02
EUVDEUVD-2018-15029 No score

Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Client programs). Supported versions that are affected are 5.5.61 and prior, 5.6.41 and prior, 5.7.23 and prior and 8.0.12 and prior. Difficult to exploit vulnerability allows high privileged attacker with logon to the infrastructure where MySQL Server executes to compromise MySQL Server. While the vulnerability is in MySQL Server, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.0 Base Score 5.3 (Availability impacts). CVSS Vector: (CVSS:3.0/AV:L/AC:H/PR:H/UI:N/S:C/C:N/I:N/A:H).

Record
EUVD-2018-15029
Updated
2026-11-03
GitHub AdvisoriesGHSA-x7c7-vrm4-2pvw 5.3

Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Client programs)....

Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Client programs). Supported versions that are affected are 5.5.61 and prior, 5.6.41 and prior, 5.7.23 and prior and 8.0.12 and prior. Difficult to exploit vulnerability allows high privileged attacker with logon to the infrastructure where MySQL Server executes to compromise MySQL Server. While the vulnerability is in MySQL Server, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.0 Base Score 5.3 (Availability impacts). CVSS Vector: (CVSS:3.0/AV:L/AC:H/PR:H/UI:N/S:C/C:N/I:N/A:H).

Record
GHSA-x7c7-vrm4-2pvw
CVSS 3.0
5.3 MediumCVSS:3.0/AV:L/AC:H/PR:H/UI:N/S:C/C:N/I:N/A:H
Updated
2026-11-02
OSVALPINE-CVE-2018-3174 5.3

Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Client programs). Supported versions that are affected are 5.5.61 and prior, 5.6.41 and prior, 5.7.23 and prior and 8.0.12 and prior. Difficult to exploit vulnerability allows high privileged attacker with logon to the infrastructure where MySQL Server executes to compromise MySQL Server. While the vulnerability is in MySQL Server, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.0 Base Score 5.3 (Availability impacts). CVSS Vector: (CVSS:3.0/AV:L/AC:H/PR:H/UI:N/S:C/C:N/I:N/A:H).

Record
ALPINE-CVE-2018-3174
CVSS 3.1
5.3 MediumCVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:C/C:N/I:N/A:H
Updated
2026-11-02
OSVBELL-CVE-2018-3174 5.3

CVE-2018-3174 does not affect BellSoft software

Record
BELL-CVE-2018-3174
CVSS 3.1
5.3 MediumCVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:C/C:N/I:N/A:H
Updated
2026-11-02
Show 20 moreShow less
OSV 5.3

Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Client programs). Supported versions that are affected are 5.5.61 and prior, 5.6.41 and prior, 5.7.23 and prior and 8.0.12 and prior. Difficult to exploit vulnerability allows high privileged attacker with logon to the infrastructure where MySQL Server executes to compromise MySQL Server. While the vulnerability is in MySQL Server, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.0 Base Score 5.3 (Availability impacts). CVSS Vector: (CVSS:3.0/AV:L/AC:H/PR:H/UI:N/S:C/C:N/I:N/A:H).

Record
CVE-2018-3174
CVSS 3.1
5.3 MediumCVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:C/C:N/I:N/A:H
Updated
2026-11-02
OSVRHSA-2018:3655 7.7

Red Hat Security Advisory: rh-mysql57-mysql security update

Record
RHSA-2018:3655
CVSS 3.0
7.7 HighCVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H
Updated
2026-11-02
OSVRHSA-2019:1258 8.8

Red Hat Security Advisory: rh-mariadb102-mariadb and rh-mariadb102-galera security and bug fix update

Record
RHSA-2019:1258
CVSS 3.0
8.8 HighCVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVUBUNTU-CVE-2018-3174 5.3

Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Client programs). Supported versions that are affected are 5.5.61 and prior, 5.6.41 and prior, 5.7.23 and prior and 8.0.12 and prior. Difficult to exploit vulnerability allows high privileged attacker with logon to the infrastructure where MySQL Server executes to compromise MySQL Server. While the vulnerability is in MySQL Server, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.0 Base Score 5.3 (Availability impacts). CVSS Vector: (CVSS:3.0/AV:L/AC:H/PR:H/UI:N/S:C/C:N/I:N/A:H).

Record
UBUNTU-CVE-2018-3174
CVSS 3.1
5.3 MediumCVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:C/C:N/I:N/A:H
Updated
2026-11-02
OSVCLSA-2026-1781007400 No score

mysql: Fix of 3 CVEs

  • CVE-2018-2562: fix DoS / data corruption in partitioned MEMORY tables (Server: Partition)
  • CVE-2018-2773: warn when --pid-file is in a world-writable location (BUG#26585560)
  • CVE-2018-3174: stop server as the mysql user in mysql.init so an attacker who controls the pid file cannot trick init into killing an unrelated root-owned process (BUG#27919254)
Record
CLSA-2026-1781007400
Updated
2026-11-02
OSVCLSA-2026-1781109213 No score

mysql: Fix of 3 CVEs

  • CVE-2018-2562: fix DoS / data corruption in partitioned MEMORY tables (Server: Partition)
  • CVE-2018-2773: warn when --pid-file is in a world-writable location (BUG#26585560)
  • CVE-2018-3174: stop server as the mysql user in mysql.init so an attacker who controls the pid file cannot trick init into killing an unrelated root-owned process (BUG#27919254)
Record
CLSA-2026-1781109213
Updated
2026-11-02
OSVMGASA-2018-0469 No score

Updated mariadb packages fix security vulnerabilities

Some easily exploitable vulnerabilities allowing high privileged attacker with network access via multiple protocols to compromise MySQL Server have been fixed.

Record
MGASA-2018-0469
Updated
2026-11-02
OSVopenSUSE-SU-2019:0327-1 No score

Security update for mariadb

This update for mariadb to version 10.2.22 fixes the following issues:

Security issues fixed:

  • CVE-2019-2510: Fixed a vulnerability which can lead to MySQL compromise and lead to Denial of Service (bsc#1122198).
  • CVE-2019-2537: Fixed a vulnerability which can lead to MySQL compromise and lead to Denial of Service (bsc#1122198).
  • CVE-2018-3284: Fixed InnoDB unspecified vulnerability (CPU Oct 2018) (bsc#1112377)
  • CVE-2018-3282: Server Storage Engines unspecified vulnerability (CPU Oct 2018) (bsc#1112432)
  • CVE-2018-3277: Fixed InnoDB unspecified vulnerability (CPU Oct 2018) (bsc#1112391)
  • CVE-2018-3251: InnoDB unspecified vulnerability (CPU Oct 2018) (bsc#1112397)
  • CVE-2018-3200: Fixed InnoDB unspecified vulnerability (CPU Oct 2018) (bsc#1112404)
  • CVE-2018-3185: Fixed InnoDB unspecified vulnerability (CPU Oct 2018) (bsc#1112384)
  • CVE-2018-3174: Client programs unspecified vulnerability (CPU Oct 2018) (bsc#1112368)
  • CVE-2018-3173: Fixed InnoDB unspecified vulnerability (CPU Oct 2018) (bsc#1112386)
  • CVE-2018-3162: Fixed InnoDB unspecified vulnerability (CPU Oct 2018) (bsc#1112415)
  • CVE-2018-3156: InnoDB unspecified vulnerability (CPU Oct 2018) (bsc#1112417)
  • CVE-2018-3143: InnoDB unspecified vulnerability (CPU Oct 2018) (bsc#1112421)
  • CVE-2018-3066: Unspecified vulnerability in the MySQL Server component of Oracle MySQL (subcomponent Server Options). (bsc#1101678)
  • CVE-2018-3064: InnoDB unspecified vulnerability (CPU Jul 2018) (bsc#1103342)
  • CVE-2018-3063: Unspecified vulnerability in the MySQL Server component of Oracle MySQL (subcomponent Server Security Privileges). (bsc#1101677)
  • CVE-2018-3058: Unspecified vulnerability in the MySQL Server component of Oracle MySQL (subcomponent MyISAM). (bsc#1101676)
  • CVE-2016-9843: Big-endian out-of-bounds pointer (bsc#1013882)

Non-security issues fixed:

  • Fixed an issue where mysl_install_db fails due to incorrect basedir (bsc#1127027).
  • Fixed an issue where the lograte was not working (bsc#1112767).
  • Backport Information Schema CHECK_CONSTRAINTS Table.
  • Maximum value of table_definition_cache is now 2097152.
  • InnoDB ALTER TABLE fixes.
  • Galera crash recovery fixes.
  • Encryption fixes.
  • Remove xtrabackup dependency as MariaDB ships a build in mariabackup so xtrabackup is not needed (bsc#1122475).
  • Maria DB testsuite - test main.plugin_auth failed (bsc#1111859)
  • Maria DB testsuite - test encryption.second_plugin-12863 failed (bsc#1111858)
  • Remove PerconaFT from the package as it has AGPL licence (bsc#1118754)
  • remove PerconaFT from the package as it has AGPL licence (bsc#1118754)
  • Database corruption after renaming a prefix-indexed column (bsc#1120041)

Release notes and changelog:

This update was imported from the SUSE:SLE-15:Update update project.

Record
openSUSE-SU-2019:0327-1
Updated
2026-11-02
OSVopenSUSE-SU-2024:11038-1 No score

libmariadbd-devel-10.6.4-2.1 on GA media

These are all security issues fixed in the libmariadbd-devel-10.6.4-2.1 package on the GA media of openSUSE Tumbleweed.

Record
openSUSE-SU-2024:11038-1
Updated
2026-11-02
OSVSUSE-RU-2023:3956-1 No score

Recommended update for mariadb104

This update for mariadb104 fixes the following issues:

  • Implement version 10.4 of MariaDB (jsc#PED-2455):
    • It is possible to use more than one authentication plugin for each user account.
    • The root user account is being created with the ability to use two authentication plugins.
    • All user accounts, passwords, and global privileges are now stored in the mysql.global_priv table.
    • Is being supported for User Password Expiry, which is not active by default.
    • Faster privilege checks for MariaDB setups with many user accounts or many database grants.
  • Update mysql-systemd-helper to be aware of custom group (bsc#1200105)
  • MariaDB is now support lz4 compression for 'INNODB'. (bsc#1186031)
  • Add 'mysql-user.conf' file to enable systemd generating mysql user in containers. (bsc#1173028)
  • Fixes an issue when MariaDB is ignoring the value of the parameter 'open_files_limit' in the global variables. (bsc#1180014)
Record
SUSE-RU-2023:3956-1
Updated
2026-11-02
OSVSUSE-RU-2023:4991-1 No score

Recommended update for mariadb104

This update for mariadb104 fixes the following issues:

  • Implement version 10.4 of MariaDB (jsc#PED-2455):
    • It is possible to use more than one authentication plugin for each user account.
    • The root user account is being created with the ability to use two authentication plugins.
    • All user accounts, passwords, and global privileges are now stored in the mysql.global_priv table.
    • Is being supported for User Password Expiry, which is not active by default.
    • Faster privilege checks for MariaDB setups with many user accounts or many database grants.
  • Update mysql-systemd-helper to be aware of custom group (bsc#1200105)
  • MariaDB is now support lz4 compression for 'INNODB'. (bsc#1186031)
  • Add 'mysql-user.conf' file to enable systemd generating mysql user in containers. (bsc#1173028)
  • Fixes an issue when MariaDB is ignoring the value of the parameter 'open_files_limit' in the global variables. (bsc#1180014)
Record
SUSE-RU-2023:4991-1
Updated
2026-11-02
OSVSUSE-SU-2018:3542-1 No score

Security update for mysql

MySQL server was updated to version 5.5.62, fixing bugs and security issues.

Changes:

http://dev.mysql.com/doc/relnotes/mysql/5.5/en/news-5-5-62.html

Following security issues were fixed:

  • CVE-2016-9843: The crc32_big function in zlib might have allowed context-dependent attackers to have unspecified impact via vectors involving big-endian CRC calculation. (bsc#1013882) Please note that SUSE uses the system zlib, not the embedded copy.

  • CVE-2018-3133: Authenticated low privilege attackers could cause denial of service attacks (hangs or crashes) against the mysql server (bsc#1112369)

  • CVE-2018-3174: Authenticated high privilege attackers could cause denial of service attacks (hangs or crashes) against the mysql server (bsc#1112368)

  • CVE-2018-3282: Authenticated high privilege attackers could cause denial of service attacks (hangs or crashes) against the mysql server (bsc#1112432)

Record
SUSE-SU-2018:3542-1
Updated
2026-11-02
OSVSUSE-SU-2018:3972-1 No score

Security update for mariadb

This update for mariadb fixes the following issues:

Update to MariaDB 10.0.37 GA (bsc#1116686).

Security issues fixed:

  • CVE-2018-3282: Server Storage Engines unspecified vulnerability (CPU Oct 2018) (bsc#1112432)
  • CVE-2018-3251: InnoDB unspecified vulnerability (CPU Oct 2018) (bsc#1112397)
  • CVE-2018-3174: Client programs unspecified vulnerability (CPU Oct 2018) (bsc#1112368)
  • CVE-2018-3156: InnoDB unspecified vulnerability (CPU Oct 2018) (bsc#1112417)
  • CVE-2018-3143: InnoDB unspecified vulnerability (CPU Oct 2018) (bsc#1112421)
  • CVE-2018-3066: Unspecified vulnerability in the MySQL Server component of Oracle MySQL (subcomponent Server Options). (bsc#1101678)
  • CVE-2018-3064: InnoDB unspecified vulnerability (CPU Jul 2018) (bsc#1103342)
  • CVE-2018-3063: Unspecified vulnerability in the MySQL Server component of Oracle MySQL (subcomponent Server Security Privileges). (bsc#1101677)
  • CVE-2018-3058: Unspecified vulnerability in the MySQL Server component of Oracle MySQL (subcomponent MyISAM). (bsc#1101676)
  • CVE-2016-9843: Big-endian out-of-bounds pointer (bsc#1013882)

Release notes and changelog:

Record
SUSE-SU-2018:3972-1
Updated
2026-11-02
OSVSUSE-SU-2018:4211-1 No score

Security update for mariadb

This update for mariadb fixes the following issues:

Update to MariaDB 10.0.37 GA (bsc#1116686).

Security issues fixed:

  • CVE-2018-3282: Server Storage Engines unspecified vulnerability (CPU Oct 2018) (bsc#1112432)
  • CVE-2018-3251: InnoDB unspecified vulnerability (CPU Oct 2018) (bsc#1112397)
  • CVE-2018-3174: Client programs unspecified vulnerability (CPU Oct 2018) (bsc#1112368)
  • CVE-2018-3156: InnoDB unspecified vulnerability (CPU Oct 2018) (bsc#1112417)
  • CVE-2018-3143: InnoDB unspecified vulnerability (CPU Oct 2018) (bsc#1112421)
  • CVE-2018-3066: Unspecified vulnerability in the MySQL Server component of Oracle MySQL (subcomponent Server Options). (bsc#1101678)
  • CVE-2018-3064: InnoDB unspecified vulnerability (CPU Jul 2018) (bsc#1103342)
  • CVE-2018-3063: Unspecified vulnerability in the MySQL Server component of Oracle MySQL (subcomponent Server Security Privileges). (bsc#1101677)
  • CVE-2018-3058: Unspecified vulnerability in the MySQL Server component of Oracle MySQL (subcomponent MyISAM). (bsc#1101676)
  • CVE-2016-9843: Big-endian out-of-bounds pointer (bsc#1013882)

Non-security changes:

  • Remove PerconaFT from the package as it has AGPL licence (bsc#1118754)
  • do not just remove tokudb plugin but don't build it at all (missing jemalloc dependency)

Release notes and changelog:

Record
SUSE-SU-2018:4211-1
Updated
2026-11-02
OSVSUSE-SU-2019:0119-1 No score

Security update for mariadb

This update for mariadb to version 10.2.19 fixes the following issues: (bsc#1116686)

Security issues fixed:

  • CVE-2016-9843: Big-endian out-of-bounds pointer (bsc#1013882)
  • CVE-2018-3282, CVE-2018-3174, CVE-2018-3143, CVE-2018-3156, CVE-2018-3251, CVE-2018-3185, CVE-2018-3277, CVE-2018-3162, CVE-2018-3173, CVE-2018-3200, CVE-2018-3284: Fixed multiple denial of service vulnerabilities (bsc#1112432, bsc#1112368, bsc#1112421, bsc#1112417, bsc#1112397, bsc#1112391, bsc#1112415, bsc#1112386, bsc#1112404, bsc#1112377, bsc#1112384)

Non-security issues fixed:

  • Fixed database corruption after renaming a prefix-indexed column (bsc#1120041)
  • Remove PerconaFT from the package as it has a AGPL license (bsc#1118754)
  • Enable testing for client plugins (bsc#1111859)
  • Improve test coverage by keeping debug_key_management.so (bsc#1111858)
Record
SUSE-SU-2019:0119-1
Updated
2026-11-02
OSVSUSE-SU-2019:0555-1 No score

Security update for mariadb

This update for mariadb to version 10.2.22 fixes the following issues:

Security issues fixed:

  • CVE-2019-2510: Fixed a vulnerability which can lead to MySQL compromise and lead to Denial of Service (bsc#1122198).
  • CVE-2019-2537: Fixed a vulnerability which can lead to MySQL compromise and lead to Denial of Service (bsc#1122198).
  • CVE-2018-3284: Fixed InnoDB unspecified vulnerability (CPU Oct 2018) (bsc#1112377)
  • CVE-2018-3282: Server Storage Engines unspecified vulnerability (CPU Oct 2018) (bsc#1112432)
  • CVE-2018-3277: Fixed InnoDB unspecified vulnerability (CPU Oct 2018) (bsc#1112391)
  • CVE-2018-3251: InnoDB unspecified vulnerability (CPU Oct 2018) (bsc#1112397)
  • CVE-2018-3200: Fixed InnoDB unspecified vulnerability (CPU Oct 2018) (bsc#1112404)
  • CVE-2018-3185: Fixed InnoDB unspecified vulnerability (CPU Oct 2018) (bsc#1112384)
  • CVE-2018-3174: Client programs unspecified vulnerability (CPU Oct 2018) (bsc#1112368)
  • CVE-2018-3173: Fixed InnoDB unspecified vulnerability (CPU Oct 2018) (bsc#1112386)
  • CVE-2018-3162: Fixed InnoDB unspecified vulnerability (CPU Oct 2018) (bsc#1112415)
  • CVE-2018-3156: InnoDB unspecified vulnerability (CPU Oct 2018) (bsc#1112417)
  • CVE-2018-3143: InnoDB unspecified vulnerability (CPU Oct 2018) (bsc#1112421)
  • CVE-2018-3066: Unspecified vulnerability in the MySQL Server component of Oracle MySQL (subcomponent Server Options). (bsc#1101678)
  • CVE-2018-3064: InnoDB unspecified vulnerability (CPU Jul 2018) (bsc#1103342)
  • CVE-2018-3063: Unspecified vulnerability in the MySQL Server component of Oracle MySQL (subcomponent Server Security Privileges). (bsc#1101677)
  • CVE-2018-3058: Unspecified vulnerability in the MySQL Server component of Oracle MySQL (subcomponent MyISAM). (bsc#1101676)
  • CVE-2016-9843: Big-endian out-of-bounds pointer (bsc#1013882)

Non-security issues fixed:

  • Fixed an issue where mysl_install_db fails due to incorrect basedir (bsc#1127027).
  • Fixed an issue where the lograte was not working (bsc#1112767).
  • Backport Information Schema CHECK_CONSTRAINTS Table.
  • Maximum value of table_definition_cache is now 2097152.
  • InnoDB ALTER TABLE fixes.
  • Galera crash recovery fixes.
  • Encryption fixes.
  • Remove xtrabackup dependency as MariaDB ships a build in mariabackup so xtrabackup is not needed (bsc#1122475).
  • Maria DB testsuite - test main.plugin_auth failed (bsc#1111859)
  • Maria DB testsuite - test encryption.second_plugin-12863 failed (bsc#1111858)
  • Remove PerconaFT from the package as it has AGPL licence (bsc#1118754)
  • remove PerconaFT from the package as it has AGPL licence (bsc#1118754)
  • Database corruption after renaming a prefix-indexed column (bsc#1120041)

Release notes and changelog:

Record
SUSE-SU-2019:0555-1
Updated
2026-11-02
OSVSUSE-SU-2019:0628-1 No score

Security update for galera-3, mariadb, mariadb-connector-c

This update for mariadb, galera-3, mariadb-connector fixes the following issues:

Security vulnerabilities addressed for mariadb:

  • CVE-2016-9843 [bsc#1013882]
  • CVE-2018-3058 [bsc#1101676]
  • CVE-2018-3060
  • CVE-2018-3063 [bsc#1101677]
  • CVE-2018-3064 [bsc#1103342]
  • CVE-2018-3066 [bsc#1101678]
  • CVE-2018-3143 [bsc#1112421]
  • CVE-2018-3156 [bsc#1112417]
  • CVE-2018-3162 [bsc#1112415]
  • CVE-2018-3173 [bsc#1112386]
  • CVE-2018-3174 [bsc#1112368]
  • CVE-2018-3185 [bsc#1112384]
  • CVE-2018-3200 [bsc#1112404]
  • CVE-2018-3251 [bsc#1112397]
  • CVE-2018-3277 [bsc#1112391]
  • CVE-2018-3282 [bsc#1112432]
  • CVE-2018-3284 [bsc#1112377]

Other bug fixes and changes for mariadb:

  • update to 10.2.21 GA
    • MDEV-17589 - Stack-buffer-overflow with indexed varchar (utf8) field
    • MDEV-16987 - ALTER DATABASE possible in read-only mode (forbid ALTER DATABASE in read_only)
    • MDEV-17720 - slave_ddl_exec_mode=IDEMPOTENT does not handle DROP DATABASE
    • MDEV-6453 - Assertion `inited==NONE || (inited==RND && scan)' failed in handler::ha_rnd_init(bool) with InnoDB, joins, AND/OR conditions
    • MDEV-18105 - Mariabackup fails to copy encrypted InnoDB system tablespace if LSN>4G
    • MDEV-18041 - Database corruption after renaming a prefix-indexed column [bsc#1120041]
    • MDEV-17470 - Orphan temporary files after interrupted ALTER cause InnoDB: Operating system error number 17 and eventual fatal error 71
    • MDEV-17833: ALTER TABLE is not enforcing prefix index size limit
    • MDEV-17989: InnoDB: Failing assertion: dict_tf2_is_valid(flags, flags2)
    • MDEV-17765: Locking bug fix for SPATIAL INDEX
    • MDEV-17923, MDEV-17904, MDEV-17938: Fixes for FULLTEXT INDEX
    • Fixes for regressions introduced in MariaDB Server 10.2.19 by the backup-safe TRUNCATE TABLE (MDEV-13564, innodb_safe_truncate=ON) and innodb_undo_log_truncate:
      • MDEV-17780, MDEV-17816, MDEV-17849, MDEV-17851, MDEV-17885
    • Several improvements to MariaDB Server and backup for dealing with encrypted or page_compressed pages:
      • MDEV-12112: corruption in encrypted table may be overlooked
      • MDEV-17958: On little-endian systems, remove bug-compatible variant of innodb_checksum_algorithm=crc32
      • MDEV-17957: Make innodb_checksum_algorithm stricter for strict_* values
      • MDEV-18025: Mariabackup fails to detect corrupted page_compressed=1 tables
    • release notes and changelog:
  • remove PerconaFT from the package as it has AGPL licence (bsc#1118754)
  • Add patch to link against libatomic where necessary and use C++11 atomics instead of gcc built-in atomics
  • update to 10.2.19 GA [bsc#1116686]
    • innodb_safe_truncate system variable for a backup-safe TRUNCATE TABLE implementation that is based on RENAME, CREATE, DROP (MDEV-14717, MDEV-14585, MDEV-13564). Default value for this variable is ON. If you absolutely must use XtraBackup instead of Mariabackup, you can set it to OFF and restart the server
    • MDEV-17289: Multi-pass recovery fails to apply some redo log records
    • MDEV-17073: INSERT…ON DUPLICATE KEY UPDATE became more deadlock-prone
    • MDEV-17491: micro optimize page_id_t
    • MDEV-13671: InnoDB should use case-insensitive column name comparisons like the rest of the server
    • Fixes for indexed virtual columns: MDEV-17215, MDEV-16980
    • MDEV-17433: Allow InnoDB start up with empty ib_logfile0 from mariabackup --prepare
    • MDEV-12547: InnoDB FULLTEXT index has too strict innodb_ft_result_cache_limit max limit
    • MDEV-17541: KILL QUERY during lock wait in FOREIGN KEY check…
Record
SUSE-SU-2019:0628-1
Updated
2026-11-02
OSVSUSE-SU-2019:1441-1 No score

Recommended update for mariadb, mariadb-connector-c

This update for mariadb to version 10.2.22 fixes the following issues:

Security issues fixed:

  • Update to MariaDB 10.2.22 GA:
    • CVE-2019-2510: (bsc#1122198)
    • CVE-2019-2537: (bsc#1122198)
  • Update to MariaDB 10.2.19 GA (bsc#1116686):
    • CVE-2018-3282: (bsc#1112432)
    • CVE-2016-9843: (bsc#1013882)
    • CVE-2018-3174: (bsc#1112368)
    • CVE-2018-3143: (bsc#1112421)
    • CVE-2018-3156: (bsc#1112417)
    • CVE-2018-3251: (bsc#1112397)
    • CVE-2018-3185: (bsc#1112384)
    • CVE-2018-3277: (bsc#1112391)
    • CVE-2018-3162: (bsc#1112415)
    • CVE-2018-3173: (bsc#1112386)
    • CVE-2018-3200: (bsc#1112404)
    • CVE-2018-3284: (bsc#1112377)
  • Update to MariaDB 10.2.18 GA:
    • CVE-2017-10320: (bsc#1064113)
    • CVE-2017-10365: (bsc#1064114)
    • CVE-2017-15365: (bsc#1072167)
    • CVE-2018-3058: (bsc#1101676)
    • CVE-2018-3063: (bsc#1101677)
    • CVE-2018-3064: (bsc#1103342)
    • CVE-2018-3066: (bsc#1101678)
    • CVE-2018-2759, CVE-2018-2777, CVE-2018-2786, CVE-2018-2810, CVE-2018-3060

Other issues fixed:

  • Fixed an issue where mysl_install_db fails due to incorrect basedir (bsc#1127027).
  • Fixed an issue where the lograte was not working (bsc#1112767).
  • Remove xtrabackup dependency as MariaDB ships a build in mariabackup so xtrabackup is not needed (bsc#1122475).
  • Fixed database corruption after renaming a prefix-indexed column (bsc#1120041).
  • Remove PerconaFT from the package as it has AGPL licence (bsc#1118754).

The complete changelog can be found at: https://mariadb.com/kb/en/library/mariadb-10222-changelog/

Record
SUSE-SU-2019:1441-1
Updated
2026-11-02
OSVSUSE-SU-2019:2048-1 No score

Security update for mariadb

This update for mariadb fixes the following issues:

Update to MariaDB 10.0.38 GA (bsc#1136037).

Security issues fixed:

  • CVE-2019-2537: Denial of service via multiple protocols (bsc#1136037)
  • CVE-2019-2529: Denial of service via multiple protocols (bsc#1136037)
  • CVE-2018-3282: Server Storage Engines unspecified vulnerability (CPU Oct 2018) (bsc#1112432)
  • CVE-2018-3251: InnoDB unspecified vulnerability (CPU Oct 2018) (bsc#1112397)
  • CVE-2018-3174: Client programs unspecified vulnerability (CPU Oct 2018) (bsc#1112368)
  • CVE-2018-3156: InnoDB unspecified vulnerability (CPU Oct 2018) (bsc#1112417)
  • CVE-2018-3143: InnoDB unspecified vulnerability (CPU Oct 2018) (bsc#1112421)
  • CVE-2018-3066: Unspecified vulnerability in the MySQL Server component of Oracle MySQL (subcomponent Server Options). (bsc#1101678)
  • CVE-2018-3064: InnoDB unspecified vulnerability (CPU Jul 2018) (bsc#1103342)
  • CVE-2018-3063: Unspecified vulnerability in the MySQL Server component of Oracle MySQL (subcomponent Server Security Privileges). (bsc#1101677)
  • CVE-2018-3058: Unspecified vulnerability in the MySQL Server component of Oracle MySQL (subcomponent MyISAM). (bsc#1101676)
  • CVE-2016-9843: Big-endian out-of-bounds pointer (bsc#1013882)

Non-security changes:

  • Removed PerconaFT from the package as it has AGPL licence (bsc#1118754).
  • Do not just remove tokudb plugin but don't build it at all (missing jemalloc dependency).
  • Fixed reading options for multiple instances if my${INSTANCE}.cnf is used (bsc#1132666).
  • Removed 'umask 077' from mysql-systemd-helper that caused new datadirs created with wrong permissions (bsc#1132666).

Release notes and changelog:

Record
SUSE-SU-2019:2048-1
Updated
2026-11-02
OSVUSN-3799-1 No score

mysql-5.5, mysql-5.7 vulnerabilities

Multiple security issues were discovered in MySQL and this update includes new upstream MySQL versions to fix these issues.

MySQL has been updated to 5.5.62 in Ubuntu 14.04 LTS. Ubuntu 16.04 LTS, Ubuntu 18.04 LTS, and Ubuntu 18.10 have been updated to MySQL 5.7.24.

In addition to security fixes, the updated packages contain bug fixes, new features, and possibly incompatible changes.

Please see the following for more information: http://dev.mysql.com/doc/relnotes/mysql/5.5/en/news-5-5-62.html http://dev.mysql.com/doc/relnotes/mysql/5.7/en/news-5-7-24.html https://www.oracle.com/technetwork/security-advisory/cpuoct2018-4428296.html

Record
USN-3799-1
Updated
2026-11-02

Affected products

Affected packages

Affected packages
PackageAffectedFixed
mariadb
Alpine:v3.10
 5.5.0 up to 10.3.11-r0
10.3.11-r0
mariadb
Alpine:v3.11
 5.5.0 up to 10.3.11-r0
10.3.11-r0
mariadb
Alpine:v3.12
 5.5.0 up to 10.3.11-r0
10.3.11-r0
mariadb
Alpine:v3.13
 5.5.0 up to 10.3.11-r0
10.3.11-r0
mariadb
Alpine:v3.14
 5.5.0 up to 10.3.11-r0
10.3.11-r0
mariadb
Alpine:v3.15
 5.5.0 up to 10.3.11-r0
10.3.11-r0
mariadb
Alpine:v3.16
 5.5.0 up to 10.3.11-r0
10.3.11-r0
mariadb
Alpine:v3.17
 5.5.0 up to 10.3.11-r0
10.3.11-r0
mariadb
Alpine:v3.18
 5.5.0 up to 10.3.11-r0
10.3.11-r0
mariadb
Alpine:v3.19
 5.5.0 up to 10.3.11-r0
10.3.11-r0
Show 158 moreShow less
Affected packages
PackageAffectedFixed
mariadb
Alpine:v3.20
 5.5.0 up to 10.3.11-r0
10.3.11-r0
mariadb
Alpine:v3.21
 5.5.0 up to 10.3.11-r0
10.3.11-r0
mariadb
Alpine:v3.22
 5.5.0 up to 10.3.11-r0
10.3.11-r0
mariadb
Alpine:v3.23
 5.5.0 up to 10.3.11-r0
10.3.11-r0
mariadb
Alpine:v3.24
 5.5.0 up to 10.3.11-r0
10.3.11-r0
mariadb
Alpine:v3.6
 5.5.0 up to 10.1.37-r0
10.1.37-r0
mariadb
Alpine:v3.7
 5.5.0 up to 10.1.37-r0
10.1.37-r0
mariadb
Alpine:v3.8
 5.5.0 up to 10.2.19-r0
10.2.19-r0
mariadb
Alpine:v3.9
 5.5.0 up to 10.3.11-r0
10.3.11-r0
mysql
TuxCare:OracleLinux:6
From an advisory covering 3 CVEs
 before 5.1.73-8.0.1.el6_8.tuxcare.els4
5.1.73-8.0.1.el6_8.tuxcare.els4
mysql-bench
TuxCare:OracleLinux:6
From an advisory covering 3 CVEs
 before 5.1.73-8.0.1.el6_8.tuxcare.els4
5.1.73-8.0.1.el6_8.tuxcare.els4
mysql-devel
TuxCare:OracleLinux:6
From an advisory covering 3 CVEs
 before 5.1.73-8.0.1.el6_8.tuxcare.els4
5.1.73-8.0.1.el6_8.tuxcare.els4
mysql-embedded
TuxCare:OracleLinux:6
From an advisory covering 3 CVEs
 before 5.1.73-8.0.1.el6_8.tuxcare.els4
5.1.73-8.0.1.el6_8.tuxcare.els4
mysql-embedded-devel
TuxCare:OracleLinux:6
From an advisory covering 3 CVEs
 before 5.1.73-8.0.1.el6_8.tuxcare.els4
5.1.73-8.0.1.el6_8.tuxcare.els4
mysql-libs
TuxCare:OracleLinux:6
From an advisory covering 3 CVEs
 before 5.1.73-8.0.1.el6_8.tuxcare.els4
5.1.73-8.0.1.el6_8.tuxcare.els4
mysql-server
TuxCare:OracleLinux:6
From an advisory covering 3 CVEs
 before 5.1.73-8.0.1.el6_8.tuxcare.els4
5.1.73-8.0.1.el6_8.tuxcare.els4
mysql-test
TuxCare:OracleLinux:6
From an advisory covering 3 CVEs
 before 5.1.73-8.0.1.el6_8.tuxcare.els4
5.1.73-8.0.1.el6_8.tuxcare.els4
mysql
TuxCare:CentOS:6
From an advisory covering 3 CVEs
 before 5.1.73-8.0.1.el6_8.tuxcare.els4
5.1.73-8.0.1.el6_8.tuxcare.els4
mysql-bench
TuxCare:CentOS:6
From an advisory covering 3 CVEs
 before 5.1.73-8.0.1.el6_8.tuxcare.els4
5.1.73-8.0.1.el6_8.tuxcare.els4
mysql-devel
TuxCare:CentOS:6
From an advisory covering 3 CVEs
 before 5.1.73-8.0.1.el6_8.tuxcare.els4
5.1.73-8.0.1.el6_8.tuxcare.els4
mysql-embedded
TuxCare:CentOS:6
From an advisory covering 3 CVEs
 before 5.1.73-8.0.1.el6_8.tuxcare.els4
5.1.73-8.0.1.el6_8.tuxcare.els4
mysql-embedded-devel
TuxCare:CentOS:6
From an advisory covering 3 CVEs
 before 5.1.73-8.0.1.el6_8.tuxcare.els4
5.1.73-8.0.1.el6_8.tuxcare.els4
mysql-libs
TuxCare:CentOS:6
From an advisory covering 3 CVEs
 before 5.1.73-8.0.1.el6_8.tuxcare.els4
5.1.73-8.0.1.el6_8.tuxcare.els4
mysql-server
TuxCare:CentOS:6
From an advisory covering 3 CVEs
 before 5.1.73-8.0.1.el6_8.tuxcare.els4
5.1.73-8.0.1.el6_8.tuxcare.els4
mysql-test
TuxCare:CentOS:6
From an advisory covering 3 CVEs
 before 5.1.73-8.0.1.el6_8.tuxcare.els4
5.1.73-8.0.1.el6_8.tuxcare.els4
mysql-5.5
Debian:8
From an advisory covering 9 CVEs
 before 5.5.62-0+deb8u1, plus listed versions
5.5.42-15.5.43-0+deb8u15.5.44-0+deb8u15.5.46-0+deb8u15.5.47-0+deb8u1
Show 10 moreShow less
5.5.49-0+deb8u15.5.50-0+deb8u15.5.52-0+deb8u15.5.53-0+deb8u15.5.54-0+deb8u15.5.55-0+deb8u15.5.57-0+deb8u15.5.58-0+deb8u15.5.59-0+deb8u15.5.60-0+deb8u1
5.5.62-0+deb8u1
mariadb-10.0
Debian:8
From an advisory covering 6 CVEs
 before 10.0.37-0+deb8u1, plus listed versions
10.0.16-110.0.17-110.0.17-1~exp110.0.17-1~exp210.0.18-1~exp1
Show 45 moreShow less
10.0.19-110.0.20-0+deb8u110.0.20-110.0.20-210.0.20-310.0.21-110.0.21-210.0.21-310.0.22-0+deb8u110.0.22-110.0.22-210.0.22-2~exp110.0.22-2~exp210.0.22-310.0.22-410.0.22-4~exp110.0.22-510.0.22-610.0.23-0+deb8u110.0.23-110.0.23-210.0.23-310.0.24-110.0.24-210.0.24-310.0.24-410.0.24-4~exp110.0.24-510.0.24-610.0.24-710.0.25-0+deb8u110.0.25-110.0.26-0+deb8u110.0.26-110.0.26-210.0.26-2~exp210.0.26-2~exp310.0.26-310.0.27-0+deb8u110.0.27-110.0.27-210.0.28-0+deb8u110.0.28-110.0.28-210.0.28-3
10.0.37-0+deb8u1
mariadb-10.1
Debian:9
From an advisory covering 32 CVEs
 before 10.1.37-0+deb9u1, plus listed versions
10.1.23-9+deb9u110.1.24-110.1.24-210.1.24-310.1.24-4
Show 8 moreShow less
10.1.24-510.1.24-610.1.25-110.1.26-0+deb9u110.1.26-110.1.28-110.1.28-210.1.29-1
10.1.37-0+deb9u1
mariadb
Mageia:6
From an advisory covering 6 CVEs
 before 10.1.37-1.mga6
10.1.37-1.mga6
rh-mysql57-mysql
Red Hat:rhel_software_collections:3::el6
From an advisory covering 64 CVEs
 before 0:5.7.24-2.el6
0:5.7.24-2.el6
rh-mysql57-mysql-common
Red Hat:rhel_software_collections:3::el6
From an advisory covering 64 CVEs
 before 0:5.7.24-2.el6
0:5.7.24-2.el6
rh-mysql57-mysql-config
Red Hat:rhel_software_collections:3::el6
From an advisory covering 64 CVEs
 before 0:5.7.24-2.el6
0:5.7.24-2.el6
rh-mysql57-mysql-debuginfo
Red Hat:rhel_software_collections:3::el6
From an advisory covering 64 CVEs
 before 0:5.7.24-2.el6
0:5.7.24-2.el6
rh-mysql57-mysql-devel
Red Hat:rhel_software_collections:3::el6
From an advisory covering 64 CVEs
 before 0:5.7.24-2.el6
0:5.7.24-2.el6
rh-mysql57-mysql-errmsg
Red Hat:rhel_software_collections:3::el6
From an advisory covering 64 CVEs
 before 0:5.7.24-2.el6
0:5.7.24-2.el6
rh-mysql57-mysql-server
Red Hat:rhel_software_collections:3::el6
From an advisory covering 64 CVEs
 before 0:5.7.24-2.el6
0:5.7.24-2.el6
rh-mysql57-mysql-test
Red Hat:rhel_software_collections:3::el6
From an advisory covering 64 CVEs
 before 0:5.7.24-2.el6
0:5.7.24-2.el6
rh-mysql57-mysql
Red Hat:rhel_software_collections:3::el7
From an advisory covering 64 CVEs
 before 0:5.7.24-1.el7
0:5.7.24-1.el7
rh-mysql57-mysql-common
Red Hat:rhel_software_collections:3::el7
From an advisory covering 64 CVEs
 before 0:5.7.24-1.el7
0:5.7.24-1.el7
rh-mysql57-mysql-config
Red Hat:rhel_software_collections:3::el7
From an advisory covering 64 CVEs
 before 0:5.7.24-1.el7
0:5.7.24-1.el7
rh-mysql57-mysql-debuginfo
Red Hat:rhel_software_collections:3::el7
From an advisory covering 64 CVEs
 before 0:5.7.24-1.el7
0:5.7.24-1.el7
rh-mysql57-mysql-devel
Red Hat:rhel_software_collections:3::el7
From an advisory covering 64 CVEs
 before 0:5.7.24-1.el7
0:5.7.24-1.el7
rh-mysql57-mysql-errmsg
Red Hat:rhel_software_collections:3::el7
From an advisory covering 64 CVEs
 before 0:5.7.24-1.el7
0:5.7.24-1.el7
rh-mysql57-mysql-server
Red Hat:rhel_software_collections:3::el7
From an advisory covering 64 CVEs
 before 0:5.7.24-1.el7
0:5.7.24-1.el7
rh-mysql57-mysql-test
Red Hat:rhel_software_collections:3::el7
From an advisory covering 64 CVEs
 before 0:5.7.24-1.el7
0:5.7.24-1.el7
rh-mariadb102-galera
Red Hat:rhel_software_collections:3::el6
From an advisory covering 47 CVEs
 before 0:25.3.25-1.el6
0:25.3.25-1.el6
rh-mariadb102-galera-debuginfo
Red Hat:rhel_software_collections:3::el6
From an advisory covering 47 CVEs
 before 0:25.3.25-1.el6
0:25.3.25-1.el6
rh-mariadb102-mariadb
Red Hat:rhel_software_collections:3::el6
From an advisory covering 47 CVEs
 before 1:10.2.22-1.el6
1:10.2.22-1.el6
rh-mariadb102-mariadb-backup
Red Hat:rhel_software_collections:3::el6
From an advisory covering 47 CVEs
 before 1:10.2.22-1.el6
1:10.2.22-1.el6
rh-mariadb102-mariadb-backup-syspaths
Red Hat:rhel_software_collections:3::el6
From an advisory covering 47 CVEs
 before 1:10.2.22-1.el6
1:10.2.22-1.el6
rh-mariadb102-mariadb-bench
Red Hat:rhel_software_collections:3::el6
From an advisory covering 47 CVEs
 before 1:10.2.22-1.el6
1:10.2.22-1.el6
rh-mariadb102-mariadb-common
Red Hat:rhel_software_collections:3::el6
From an advisory covering 47 CVEs
 before 1:10.2.22-1.el6
1:10.2.22-1.el6
rh-mariadb102-mariadb-config
Red Hat:rhel_software_collections:3::el6
From an advisory covering 47 CVEs
 before 1:10.2.22-1.el6
1:10.2.22-1.el6
rh-mariadb102-mariadb-config-syspaths
Red Hat:rhel_software_collections:3::el6
From an advisory covering 47 CVEs
 before 1:10.2.22-1.el6
1:10.2.22-1.el6
rh-mariadb102-mariadb-debuginfo
Red Hat:rhel_software_collections:3::el6
From an advisory covering 47 CVEs
 before 1:10.2.22-1.el6
1:10.2.22-1.el6
rh-mariadb102-mariadb-devel
Red Hat:rhel_software_collections:3::el6
From an advisory covering 47 CVEs
 before 1:10.2.22-1.el6
1:10.2.22-1.el6
rh-mariadb102-mariadb-errmsg
Red Hat:rhel_software_collections:3::el6
From an advisory covering 47 CVEs
 before 1:10.2.22-1.el6
1:10.2.22-1.el6
rh-mariadb102-mariadb-gssapi-client
Red Hat:rhel_software_collections:3::el6
From an advisory covering 47 CVEs
 before 1:10.2.22-1.el6
1:10.2.22-1.el6
rh-mariadb102-mariadb-gssapi-server
Red Hat:rhel_software_collections:3::el6
From an advisory covering 47 CVEs
 before 1:10.2.22-1.el6
1:10.2.22-1.el6
rh-mariadb102-mariadb-oqgraph-engine
Red Hat:rhel_software_collections:3::el6
From an advisory covering 47 CVEs
 before 1:10.2.22-1.el6
1:10.2.22-1.el6
rh-mariadb102-mariadb-server
Red Hat:rhel_software_collections:3::el6
From an advisory covering 47 CVEs
 before 1:10.2.22-1.el6
1:10.2.22-1.el6
rh-mariadb102-mariadb-server-galera
Red Hat:rhel_software_collections:3::el6
From an advisory covering 47 CVEs
 before 1:10.2.22-1.el6
1:10.2.22-1.el6
rh-mariadb102-mariadb-server-galera-syspaths
Red Hat:rhel_software_collections:3::el6
From an advisory covering 47 CVEs
 before 1:10.2.22-1.el6
1:10.2.22-1.el6
rh-mariadb102-mariadb-server-syspaths
Red Hat:rhel_software_collections:3::el6
From an advisory covering 47 CVEs
 before 1:10.2.22-1.el6
1:10.2.22-1.el6
rh-mariadb102-mariadb-server-utils
Red Hat:rhel_software_collections:3::el6
From an advisory covering 47 CVEs
 before 1:10.2.22-1.el6
1:10.2.22-1.el6
rh-mariadb102-mariadb-server-utils-syspaths
Red Hat:rhel_software_collections:3::el6
From an advisory covering 47 CVEs
 before 1:10.2.22-1.el6
1:10.2.22-1.el6
rh-mariadb102-mariadb-syspaths
Red Hat:rhel_software_collections:3::el6
From an advisory covering 47 CVEs
 before 1:10.2.22-1.el6
1:10.2.22-1.el6
rh-mariadb102-mariadb-test
Red Hat:rhel_software_collections:3::el6
From an advisory covering 47 CVEs
 before 1:10.2.22-1.el6
1:10.2.22-1.el6
rh-mariadb102-galera
Red Hat:rhel_software_collections:3::el7
From an advisory covering 47 CVEs
 before 0:25.3.25-1.el7
0:25.3.25-1.el7
rh-mariadb102-galera-debuginfo
Red Hat:rhel_software_collections:3::el7
From an advisory covering 47 CVEs
 before 0:25.3.25-1.el7
0:25.3.25-1.el7
rh-mariadb102-mariadb
Red Hat:rhel_software_collections:3::el7
From an advisory covering 47 CVEs
 before 1:10.2.22-1.el7
1:10.2.22-1.el7
rh-mariadb102-mariadb-backup
Red Hat:rhel_software_collections:3::el7
From an advisory covering 47 CVEs
 before 1:10.2.22-1.el7
1:10.2.22-1.el7
rh-mariadb102-mariadb-backup-syspaths
Red Hat:rhel_software_collections:3::el7
From an advisory covering 47 CVEs
 before 1:10.2.22-1.el7
1:10.2.22-1.el7
rh-mariadb102-mariadb-bench
Red Hat:rhel_software_collections:3::el7
From an advisory covering 47 CVEs
 before 1:10.2.22-1.el7
1:10.2.22-1.el7
rh-mariadb102-mariadb-common
Red Hat:rhel_software_collections:3::el7
From an advisory covering 47 CVEs
 before 1:10.2.22-1.el7
1:10.2.22-1.el7
rh-mariadb102-mariadb-config
Red Hat:rhel_software_collections:3::el7
From an advisory covering 47 CVEs
 before 1:10.2.22-1.el7
1:10.2.22-1.el7
rh-mariadb102-mariadb-config-syspaths
Red Hat:rhel_software_collections:3::el7
From an advisory covering 47 CVEs
 before 1:10.2.22-1.el7
1:10.2.22-1.el7
rh-mariadb102-mariadb-debuginfo
Red Hat:rhel_software_collections:3::el7
From an advisory covering 47 CVEs
 before 1:10.2.22-1.el7
1:10.2.22-1.el7
rh-mariadb102-mariadb-devel
Red Hat:rhel_software_collections:3::el7
From an advisory covering 47 CVEs
 before 1:10.2.22-1.el7
1:10.2.22-1.el7
rh-mariadb102-mariadb-errmsg
Red Hat:rhel_software_collections:3::el7
From an advisory covering 47 CVEs
 before 1:10.2.22-1.el7
1:10.2.22-1.el7
rh-mariadb102-mariadb-gssapi-client
Red Hat:rhel_software_collections:3::el7
From an advisory covering 47 CVEs
 before 1:10.2.22-1.el7
1:10.2.22-1.el7
rh-mariadb102-mariadb-gssapi-server
Red Hat:rhel_software_collections:3::el7
From an advisory covering 47 CVEs
 before 1:10.2.22-1.el7
1:10.2.22-1.el7
rh-mariadb102-mariadb-oqgraph-engine
Red Hat:rhel_software_collections:3::el7
From an advisory covering 47 CVEs
 before 1:10.2.22-1.el7
1:10.2.22-1.el7
rh-mariadb102-mariadb-server
Red Hat:rhel_software_collections:3::el7
From an advisory covering 47 CVEs
 before 1:10.2.22-1.el7
1:10.2.22-1.el7
rh-mariadb102-mariadb-server-galera
Red Hat:rhel_software_collections:3::el7
From an advisory covering 47 CVEs
 before 1:10.2.22-1.el7
1:10.2.22-1.el7
rh-mariadb102-mariadb-server-galera-syspaths
Red Hat:rhel_software_collections:3::el7
From an advisory covering 47 CVEs
 before 1:10.2.22-1.el7
1:10.2.22-1.el7
rh-mariadb102-mariadb-server-syspaths
Red Hat:rhel_software_collections:3::el7
From an advisory covering 47 CVEs
 before 1:10.2.22-1.el7
1:10.2.22-1.el7
rh-mariadb102-mariadb-server-utils
Red Hat:rhel_software_collections:3::el7
From an advisory covering 47 CVEs
 before 1:10.2.22-1.el7
1:10.2.22-1.el7
rh-mariadb102-mariadb-server-utils-syspaths
Red Hat:rhel_software_collections:3::el7
From an advisory covering 47 CVEs
 before 1:10.2.22-1.el7
1:10.2.22-1.el7
rh-mariadb102-mariadb-syspaths
Red Hat:rhel_software_collections:3::el7
From an advisory covering 47 CVEs
 before 1:10.2.22-1.el7
1:10.2.22-1.el7
rh-mariadb102-mariadb-test
Red Hat:rhel_software_collections:3::el7
From an advisory covering 47 CVEs
 before 1:10.2.22-1.el7
1:10.2.22-1.el7
mariadb104
SUSE:Linux Enterprise High Performance Computing 15 SP1-LTSS
From an advisory covering 221 CVEs
 before 10.4.30-150100.3.5.10
10.4.30-150100.3.5.10
python-mysqlclient
SUSE:Linux Enterprise High Performance Computing 15 SP1-LTSS
From an advisory covering 221 CVEs
 before 1.4.6-150100.3.3.7
1.4.6-150100.3.3.7
mariadb104
SUSE:Linux Enterprise Server 15 SP1-LTSS
From an advisory covering 221 CVEs
 before 10.4.30-150100.3.5.10
10.4.30-150100.3.5.10
python-mysqlclient
SUSE:Linux Enterprise Server 15 SP1-LTSS
From an advisory covering 221 CVEs
 before 1.4.6-150100.3.3.7
1.4.6-150100.3.3.7
mariadb104
SUSE:Linux Enterprise Server for SAP Applications 15 SP1
From an advisory covering 221 CVEs
 before 10.4.30-150100.3.5.10
10.4.30-150100.3.5.10
python-mysqlclient
SUSE:Linux Enterprise Server for SAP Applications 15 SP1
From an advisory covering 221 CVEs
 before 1.4.6-150100.3.3.7
1.4.6-150100.3.3.7
lz4
SUSE:Linux Enterprise Software Development Kit 12 SP5
From an advisory covering 221 CVEs
 before 1.8.0-3.5.2
1.8.0-3.5.2
mariadb-connector-c
SUSE:Linux Enterprise Software Development Kit 12 SP5
From an advisory covering 221 CVEs
 before 3.1.22-2.35.1
3.1.22-2.35.1
mariadb104
SUSE:Linux Enterprise Software Development Kit 12 SP5
From an advisory covering 221 CVEs
 before 10.4.30-8.5.46
10.4.30-8.5.46
python-mysqlclient
SUSE:Linux Enterprise Software Development Kit 12 SP5
From an advisory covering 221 CVEs
 before 1.3.14-8.9.2
1.3.14-8.9.2
lz4
SUSE:Linux Enterprise Server 12 SP5
From an advisory covering 221 CVEs
 before 1.8.0-3.5.2
1.8.0-3.5.2
mariadb-connector-c
SUSE:Linux Enterprise Server 12 SP5
From an advisory covering 221 CVEs
 before 3.1.22-2.35.1
3.1.22-2.35.1
mariadb104
SUSE:Linux Enterprise Server 12 SP5
From an advisory covering 221 CVEs
 before 10.4.30-8.5.46
10.4.30-8.5.46
python-mysqlclient
SUSE:Linux Enterprise Server 12 SP5
From an advisory covering 221 CVEs
 before 1.3.14-8.9.2
1.3.14-8.9.2
lz4
SUSE:Linux Enterprise Server for SAP Applications 12 SP5
From an advisory covering 221 CVEs
 before 1.8.0-3.5.2
1.8.0-3.5.2
mariadb-connector-c
SUSE:Linux Enterprise Server for SAP Applications 12 SP5
From an advisory covering 221 CVEs
 before 3.1.22-2.35.1
3.1.22-2.35.1
mariadb104
SUSE:Linux Enterprise Server for SAP Applications 12 SP5
From an advisory covering 221 CVEs
 before 10.4.30-8.5.46
10.4.30-8.5.46
python-mysqlclient
SUSE:Linux Enterprise Server for SAP Applications 12 SP5
From an advisory covering 221 CVEs
 before 1.3.14-8.9.2
1.3.14-8.9.2
mysql
SUSE:Linux Enterprise Software Development Kit 11 SP4
From an advisory covering 4 CVEs
 before 5.5.62-0.39.18.1
5.5.62-0.39.18.1
mysql
SUSE:Linux Enterprise Point of Sale 11 SP3
From an advisory covering 4 CVEs
 before 5.5.62-0.39.18.1
5.5.62-0.39.18.1
mysql
SUSE:Linux Enterprise Server 11 SP3-LTSS
From an advisory covering 4 CVEs
 before 5.5.62-0.39.18.1
5.5.62-0.39.18.1
mysql
SUSE:Linux Enterprise Server 11 SP3-TERADATA
From an advisory covering 4 CVEs
 before 5.5.62-0.39.18.1
5.5.62-0.39.18.1
mysql
SUSE:Linux Enterprise Server 11 SP4
From an advisory covering 4 CVEs
 before 5.5.62-0.39.18.1
5.5.62-0.39.18.1
mysql
SUSE:Linux Enterprise Server for SAP Applications 11 SP4
From an advisory covering 4 CVEs
 before 5.5.62-0.39.18.1
5.5.62-0.39.18.1
mariadb
SUSE:Linux Enterprise Server 12-LTSS
From an advisory covering 10 CVEs
 before 10.0.37-20.49.2
10.0.37-20.49.2
mariadb-100
SUSE:Linux Enterprise Desktop 12 SP4
From an advisory covering 10 CVEs
 before 10.0.37-2.3.1
10.0.37-2.3.1
mariadb-100
SUSE:Linux Enterprise Software Development Kit 12 SP4
From an advisory covering 10 CVEs
 before 10.0.37-2.3.1
10.0.37-2.3.1
mariadb-100
SUSE:Linux Enterprise Server 12 SP4
From an advisory covering 10 CVEs
 before 10.0.37-2.3.1
10.0.37-2.3.1
mariadb-100
SUSE:Linux Enterprise Server for SAP Applications 12 SP4
From an advisory covering 10 CVEs
 before 10.0.37-2.3.1
10.0.37-2.3.1
mariadb-100
SUSE:Linux Enterprise Workstation Extension 12 SP4
From an advisory covering 10 CVEs
 before 10.0.37-2.3.1
10.0.37-2.3.1
mariadb
SUSE:Linux Enterprise Desktop 12 SP4
From an advisory covering 12 CVEs
 before 10.2.21-3.7.1
10.2.21-3.7.1
mariadb
SUSE:Linux Enterprise Server 12 SP4
From an advisory covering 12 CVEs
 before 10.2.21-3.7.1
10.2.21-3.7.1
mariadb
SUSE:Linux Enterprise Server for SAP Applications 12 SP4
From an advisory covering 12 CVEs
 before 10.2.21-3.7.1
10.2.21-3.7.1
mariadb
SUSE:Linux Enterprise Module for Server Applications 15
From an advisory covering 19 CVEs
 before 10.2.22-3.14.1
10.2.22-3.14.1
galera-3
SUSE:HPE Helion OpenStack 8
From an advisory covering 17 CVEs
 before 25.3.24-4.3.1
25.3.24-4.3.1
mariadb
SUSE:HPE Helion OpenStack 8
From an advisory covering 17 CVEs
 before 10.2.21-4.8.1
10.2.21-4.8.1
mariadb-connector-c
SUSE:HPE Helion OpenStack 8
From an advisory covering 17 CVEs
 before 3.0.6-3.6.1
3.0.6-3.6.1
galera-3
SUSE:OpenStack Cloud 8
From an advisory covering 17 CVEs
 before 25.3.24-4.3.1
25.3.24-4.3.1
mariadb
SUSE:OpenStack Cloud 8
From an advisory covering 17 CVEs
 before 10.2.21-4.8.1
10.2.21-4.8.1
mariadb-connector-c
SUSE:OpenStack Cloud 8
From an advisory covering 17 CVEs
 before 3.0.6-3.6.1
3.0.6-3.6.1
galera-3
SUSE:OpenStack Cloud Crowbar 8
From an advisory covering 17 CVEs
 before 25.3.24-4.3.1
25.3.24-4.3.1
mariadb
SUSE:OpenStack Cloud Crowbar 8
From an advisory covering 17 CVEs
 before 10.2.21-4.8.1
10.2.21-4.8.1
mariadb-connector-c
SUSE:OpenStack Cloud Crowbar 8
From an advisory covering 17 CVEs
 before 3.0.6-3.6.1
3.0.6-3.6.1
mariadb
SUSE:OpenStack Cloud 7
From an advisory covering 24 CVEs
 before 10.2.22-10.1
10.2.22-10.1
mariadb-connector-c
SUSE:OpenStack Cloud 7
From an advisory covering 24 CVEs
 before 3.0.7-1.6.1
3.0.7-1.6.1
mariadb
SUSE:HPE Helion OpenStack 8
From an advisory covering 12 CVEs
 before 10.0.38-29.27.3
10.0.38-29.27.3
mariadb
SUSE:OpenStack Cloud 7
From an advisory covering 12 CVEs
 before 10.0.38-29.27.3
10.0.38-29.27.3
mariadb
SUSE:OpenStack Cloud 8
From an advisory covering 12 CVEs
 before 10.0.38-29.27.3
10.0.38-29.27.3
mariadb
SUSE:OpenStack Cloud Crowbar 8
From an advisory covering 12 CVEs
 before 10.0.38-29.27.3
10.0.38-29.27.3
mariadb
SUSE:Linux Enterprise Server for SAP Applications 12 SP2
From an advisory covering 12 CVEs
 before 10.0.38-29.27.3
10.0.38-29.27.3
mariadb
SUSE:Linux Enterprise Server 12 SP1-LTSS
From an advisory covering 12 CVEs
 before 10.0.38-29.27.3
10.0.38-29.27.3
mariadb
SUSE:Linux Enterprise Server 12 SP2-LTSS
From an advisory covering 12 CVEs
 before 10.0.38-29.27.3
10.0.38-29.27.3
mariadb
SUSE:Linux Enterprise Server 12 SP2-BCL
From an advisory covering 12 CVEs
 before 10.0.38-29.27.3
10.0.38-29.27.3
mariadb
SUSE:Enterprise Storage 4
From an advisory covering 12 CVEs
 before 10.0.38-29.27.3
10.0.38-29.27.3
mariadb-5.5
Ubuntu:14.04:LTS
 before 5.5.63-1ubuntu0.14.04.1, plus listed versions
5.5.32-1ubuntu15.5.35-1ubuntu15.5.36-15.5.37-0ubuntu0.14.04.15.5.39-0ubuntu0.14.04.1
Show 16 moreShow less
5.5.40-0ubuntu0.14.04.15.5.41-0ubuntu0.14.04.25.5.41-1ubuntu0.14.04.15.5.43-1ubuntu0.14.04.25.5.44-1ubuntu0.14.04.15.5.46-1ubuntu0.14.04.25.5.47-1ubuntu0.14.04.15.5.49-1ubuntu0.14.04.15.5.52-1ubuntu0.14.04.15.5.53-1ubuntu0.14.04.15.5.54-1ubuntu0.14.04.15.5.56-1ubuntu0.14.04.15.5.57-1ubuntu0.14.04.15.5.58-1ubuntu0.14.04.15.5.59-1ubuntu0.14.04.15.5.61-1ubuntu0.14.04.1
5.5.63-1ubuntu0.14.04.1
mysql-5.5
Ubuntu:14.04:LTS
 before 5.5.62-0ubuntu0.14.04.1, plus listed versions
5.5.32-0ubuntu75.5.34-0ubuntu15.5.34-0ubuntu25.5.35-0ubuntu15.5.35+dfsg-1ubuntu1
Show 19 moreShow less
5.5.37-0ubuntu0.14.04.15.5.38-0ubuntu0.14.04.15.5.40-0ubuntu0.14.04.15.5.41-0ubuntu0.14.04.15.5.43-0ubuntu0.14.04.15.5.44-0ubuntu0.14.04.15.5.46-0ubuntu0.14.04.25.5.47-0ubuntu0.14.04.15.5.49-0ubuntu0.14.04.15.5.50-0ubuntu0.14.04.15.5.52-0ubuntu0.14.04.15.5.53-0ubuntu0.14.04.15.5.54-0ubuntu0.14.04.15.5.55-0ubuntu0.14.04.15.5.57-0ubuntu0.14.04.15.5.58-0ubuntu0.14.04.15.5.59-0ubuntu0.14.04.15.5.60-0ubuntu0.14.04.15.5.61-0ubuntu0.14.04.1
5.5.62-0ubuntu0.14.04.1
mariadb-10.0
Ubuntu:16.04:LTS
 before 10.0.38-0ubuntu0.16.04.1, plus listed versions
10.0.20-0ubuntu0.15.04.110.0.22-0ubuntu110.0.23-110.0.23-210.0.24-7
Show 8 moreShow less
10.0.25-0ubuntu0.16.04.110.0.27-0ubuntu0.16.04.110.0.28-0ubuntu0.16.04.110.0.29-0ubuntu0.16.04.110.0.31-0ubuntu0.16.04.210.0.33-0ubuntu0.16.04.110.0.34-0ubuntu0.16.04.110.0.36-0ubuntu0.16.04.1
10.0.38-0ubuntu0.16.04.1
mysql-5.7
Ubuntu:16.04:LTS
 before 5.7.24-0ubuntu0.16.04.1, plus listed versions
5.7.11-0ubuntu45.7.11-0ubuntu55.7.11-0ubuntu65.7.12-0ubuntu15.7.12-0ubuntu1.1
Show 11 moreShow less
5.7.13-0ubuntu0.16.04.25.7.15-0ubuntu0.16.04.15.7.16-0ubuntu0.16.04.15.7.17-0ubuntu0.16.04.15.7.17-0ubuntu0.16.04.25.7.18-0ubuntu0.16.04.15.7.19-0ubuntu0.16.04.15.7.20-0ubuntu0.16.04.15.7.21-0ubuntu0.16.04.15.7.22-0ubuntu0.16.04.15.7.23-0ubuntu0.16.04.1
5.7.24-0ubuntu0.16.04.1
percona-server-5.6
Ubuntu:16.04:LTS
 All versions, plus listed versions
5.6.22-rel71.0-0ubuntu25.6.22-rel71.0-0ubuntu45.6.22-rel71.0-0ubuntu4.1
 None known
percona-xtradb-cluster-5.6
Ubuntu:16.04:LTS
 All versions, plus listed versions
5.6.21-25.8-0ubuntu25.6.21-25.8-0ubuntu35.6.21-25.8-0ubuntu3.15.6.21-25.8-0ubuntu3.25.6.34-26.19-0ubuntu0.16.04.15.6.34-26.19-0ubuntu0.16.04.25.6.37-26.21-0ubuntu0.16.04.15.6.37-26.21-0ubuntu0.16.04.2
 None known
mariadb-10.1
Ubuntu:18.04:LTS
 before 1:10.1.38-0ubuntu0.18.04.1, plus listed versions
10.1.25-11:10.1.29-61:10.1.34-0ubuntu0.18.04.1
1:10.1.38-0ubuntu0.18.04.1
mysql-5.7
Ubuntu:18.04:LTS
 before 5.7.24-0ubuntu0.18.04.1, plus listed versions
5.7.19-0ubuntu15.7.20-0ubuntu0.17.10.15.7.20-1ubuntu15.7.21-1ubuntu15.7.22-0ubuntu18.04.15.7.23-0ubuntu0.18.04.1
5.7.24-0ubuntu0.18.04.1
mysql-5.5
Ubuntu:14.04:LTS
From an advisory covering 21 CVEs
 before 5.5.62-0ubuntu0.14.04.1, plus listed versions
5.5.32-0ubuntu75.5.34-0ubuntu15.5.34-0ubuntu25.5.35-0ubuntu15.5.35+dfsg-1ubuntu1
Show 19 moreShow less
5.5.37-0ubuntu0.14.04.15.5.38-0ubuntu0.14.04.15.5.40-0ubuntu0.14.04.15.5.41-0ubuntu0.14.04.15.5.43-0ubuntu0.14.04.15.5.44-0ubuntu0.14.04.15.5.46-0ubuntu0.14.04.25.5.47-0ubuntu0.14.04.15.5.49-0ubuntu0.14.04.15.5.50-0ubuntu0.14.04.15.5.52-0ubuntu0.14.04.15.5.53-0ubuntu0.14.04.15.5.54-0ubuntu0.14.04.15.5.55-0ubuntu0.14.04.15.5.57-0ubuntu0.14.04.15.5.58-0ubuntu0.14.04.15.5.59-0ubuntu0.14.04.15.5.60-0ubuntu0.14.04.15.5.61-0ubuntu0.14.04.1
5.5.62-0ubuntu0.14.04.1
mysql-5.7
Ubuntu:16.04:LTS
From an advisory covering 21 CVEs
 before 5.7.24-0ubuntu0.16.04.1, plus listed versions
5.7.11-0ubuntu45.7.11-0ubuntu55.7.11-0ubuntu65.7.12-0ubuntu15.7.12-0ubuntu1.1
Show 11 moreShow less
5.7.13-0ubuntu0.16.04.25.7.15-0ubuntu0.16.04.15.7.16-0ubuntu0.16.04.15.7.17-0ubuntu0.16.04.15.7.17-0ubuntu0.16.04.25.7.18-0ubuntu0.16.04.15.7.19-0ubuntu0.16.04.15.7.20-0ubuntu0.16.04.15.7.21-0ubuntu0.16.04.15.7.22-0ubuntu0.16.04.15.7.23-0ubuntu0.16.04.1
5.7.24-0ubuntu0.16.04.1
mysql-5.7
Ubuntu:18.04:LTS
From an advisory covering 21 CVEs
 before 5.7.24-0ubuntu0.18.04.1, plus listed versions
5.7.19-0ubuntu15.7.20-0ubuntu0.17.10.15.7.20-1ubuntu15.7.21-1ubuntu15.7.22-0ubuntu18.04.15.7.23-0ubuntu0.18.04.1
5.7.24-0ubuntu0.18.04.1
mariadb
openSUSE:Leap 15.0
From an advisory covering 19 CVEs
 before 10.2.22-lp150.2.9.1
10.2.22-lp150.2.9.1
mariadb
openSUSE:Tumbleweed
From an advisory covering 65 CVEs
 before 10.6.4-2.1
10.6.4-2.1

History

History
RecordedChangedSources
affected, facts
aliasesEUVD
first indexedCVE List, GitHub Advisories, NVD, OSV

Dates are when Every CVE recorded each change. Upstream dates may differ.

In short

CVE-2018-3174 is a medium vulnerability (CVSS 5.3) in Oracle Mysql, published October 16, 2018. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 0.82%, the 57th percentile. Fixed in mariadb 10.3.11-r0.

References

Show 194 moreShow less
This page doesn't list everything

Left out here: 6 versions, 610 references and the rest of 1 source description. The JSON record has them.

Pages All vulnerabilities Browse Docs Sources Guide Get API key
MoveEnter Open