{"id":"CVE-2018-2818","aliases":["DLA-1355-1","DSA-4176-1","EUVD-2018-14673","GHSA-g7jv-h96w-mq24","RHSA-2018:1254","RHSA-2018:3655","SUSE-SU-2018:1333-1","UBUNTU-CVE-2018-2818","USN-3629-1","USN-3629-3"],"status":"published","title":"Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server : Security :...","description":"Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server : Security : Privileges). Supported versions that are affected are 5.5.59 and prior, 5.6.39 and prior and 5.7.21 and prior. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.0 Base Score 4.9 (Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H).","severity":{"version":"3.0","score":4.9,"vector":"CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H","level":"medium","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-07","score":0.03479,"percentile":0.89177,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":true},"published":"2018-04-18T00:00:00Z","modified":"2026-10-24T10:30:28Z","fixes":[{"ecosystem":"Ubuntu:14.04:LTS","package":"mysql-5.5","fixed_in":["5.5.60-0ubuntu0.14.04.1"],"sources":["osv"]},{"ecosystem":"Ubuntu:16.04:LTS","package":"mysql-5.7","fixed_in":["5.7.22-0ubuntu0.16.04.1"],"sources":["osv"]},{"ecosystem":"Ubuntu:18.04:LTS","package":"mysql-5.7","fixed_in":["5.7.22-0ubuntu18.04.1"],"sources":["osv"]}],"affected":[{"source":"osv","ecosystem":"Debian:7","package":"mysql-5.5","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.5.60-0+deb7u1"}]}],"versions":["5.5.30+dfsg-1.1","5.5.31+dfsg-0+wheezy1","5.5.31+dfsg-1","5.5.33+dfsg-0+wheezy1","5.5.33+dfsg-1","5.5.35+dfsg-0+wheezy1","5.5.35+dfsg-1","5.5.35+dfsg-2","5.5.37-0+wheezy1","5.5.37-1","5.5.38-0+wheezy1","5.5.39-1","5.5.40-0+wheezy1","5.5.40-1","5.5.41-0+wheezy1","5.5.42-1","5.5.43-0+deb7u1","5.5.44-0+deb7u1","5.5.46-0+deb7u1","5.5.47-0+deb7u1","5.5.49-0+deb7u1","5.5.50-0+deb7u1","5.5.50-0+deb7u2","5.5.52-0+deb7u1","5.5.53-0+deb7u1","5.5.54-0+deb7u1","5.5.54-0+deb7u2","5.5.55-0+deb7u1","5.5.57-0+deb7u1","5.5.58-0+deb7u1","5.5.59-0+deb7u1"],"bundled":9},{"source":"osv","ecosystem":"Debian:8","package":"mysql-5.5","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.5.60-0+deb8u1"}]}],"versions":["5.5.42-1","5.5.43-0+deb8u1","5.5.44-0+deb8u1","5.5.46-0+deb8u1","5.5.47-0+deb8u1","5.5.49-0+deb8u1","5.5.50-0+deb8u1","5.5.52-0+deb8u1","5.5.53-0+deb8u1","5.5.54-0+deb8u1","5.5.55-0+deb8u1","5.5.57-0+deb8u1","5.5.58-0+deb8u1","5.5.59-0+deb8u1"],"bundled":9},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:3::el6","package":"rh-mysql56-mysql","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.6.40-1.el6"}]}],"bundled":15},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:3::el6","package":"rh-mysql56-mysql-bench","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.6.40-1.el6"}]}],"bundled":15},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:3::el6","package":"rh-mysql56-mysql-common","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.6.40-1.el6"}]}],"bundled":15},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:3::el6","package":"rh-mysql56-mysql-config","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.6.40-1.el6"}]}],"bundled":15},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:3::el6","package":"rh-mysql56-mysql-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.6.40-1.el6"}]}],"bundled":15},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:3::el6","package":"rh-mysql56-mysql-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.6.40-1.el6"}]}],"bundled":15},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:3::el6","package":"rh-mysql56-mysql-errmsg","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.6.40-1.el6"}]}],"bundled":15},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:3::el6","package":"rh-mysql56-mysql-server","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.6.40-1.el6"}]}],"bundled":15},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:3::el6","package":"rh-mysql56-mysql-test","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.6.40-1.el6"}]}],"bundled":15},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:3::el7","package":"rh-mysql56-mysql","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.6.40-1.el7"}]}],"bundled":15},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:3::el7","package":"rh-mysql56-mysql-bench","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.6.40-1.el7"}]}],"bundled":15},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:3::el7","package":"rh-mysql56-mysql-common","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.6.40-1.el7"}]}],"bundled":15},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:3::el7","package":"rh-mysql56-mysql-config","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.6.40-1.el7"}]}],"bundled":15},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:3::el7","package":"rh-mysql56-mysql-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.6.40-1.el7"}]}],"bundled":15},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:3::el7","package":"rh-mysql56-mysql-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.6.40-1.el7"}]}],"bundled":15},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:3::el7","package":"rh-mysql56-mysql-errmsg","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.6.40-1.el7"}]}],"bundled":15},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:3::el7","package":"rh-mysql56-mysql-server","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.6.40-1.el7"}]}],"bundled":15},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:3::el7","package":"rh-mysql56-mysql-test","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.6.40-1.el7"}]}],"bundled":15},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:3::el6","package":"rh-mysql57-mysql","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.7.24-2.el6"}]}],"bundled":64},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:3::el6","package":"rh-mysql57-mysql-common","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.7.24-2.el6"}]}],"bundled":64},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:3::el6","package":"rh-mysql57-mysql-config","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.7.24-2.el6"}]}],"bundled":64},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:3::el6","package":"rh-mysql57-mysql-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.7.24-2.el6"}]}],"bundled":64},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:3::el6","package":"rh-mysql57-mysql-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.7.24-2.el6"}]}],"bundled":64},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:3::el6","package":"rh-mysql57-mysql-errmsg","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.7.24-2.el6"}]}],"bundled":64},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:3::el6","package":"rh-mysql57-mysql-server","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.7.24-2.el6"}]}],"bundled":64},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:3::el6","package":"rh-mysql57-mysql-test","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.7.24-2.el6"}]}],"bundled":64},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:3::el7","package":"rh-mysql57-mysql","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.7.24-1.el7"}]}],"bundled":64},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:3::el7","package":"rh-mysql57-mysql-common","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.7.24-1.el7"}]}],"bundled":64},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:3::el7","package":"rh-mysql57-mysql-config","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.7.24-1.el7"}]}],"bundled":64},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:3::el7","package":"rh-mysql57-mysql-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.7.24-1.el7"}]}],"bundled":64},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:3::el7","package":"rh-mysql57-mysql-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.7.24-1.el7"}]}],"bundled":64},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:3::el7","package":"rh-mysql57-mysql-errmsg","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.7.24-1.el7"}]}],"bundled":64},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:3::el7","package":"rh-mysql57-mysql-server","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.7.24-1.el7"}]}],"bundled":64},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:3::el7","package":"rh-mysql57-mysql-test","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.7.24-1.el7"}]}],"bundled":64},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Software Development Kit 11 SP4","package":"mysql","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.5.60-0.39.12.1"}]}],"bundled":9},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 11 SP4","package":"mysql","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.5.60-0.39.12.1"}]}],"bundled":9},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 11 SP4","package":"mysql","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.5.60-0.39.12.1"}]}],"bundled":9},{"source":"osv","ecosystem":"Ubuntu:14.04:LTS","package":"mysql-5.5","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.5.60-0ubuntu0.14.04.1"}]}],"versions":["5.5.32-0ubuntu7","5.5.34-0ubuntu1","5.5.34-0ubuntu2","5.5.35-0ubuntu1","5.5.35+dfsg-1ubuntu1","5.5.37-0ubuntu0.14.04.1","5.5.38-0ubuntu0.14.04.1","5.5.40-0ubuntu0.14.04.1","5.5.41-0ubuntu0.14.04.1","5.5.43-0ubuntu0.14.04.1","5.5.44-0ubuntu0.14.04.1","5.5.46-0ubuntu0.14.04.2","5.5.47-0ubuntu0.14.04.1","5.5.49-0ubuntu0.14.04.1","5.5.50-0ubuntu0.14.04.1","5.5.52-0ubuntu0.14.04.1","5.5.53-0ubuntu0.14.04.1","5.5.54-0ubuntu0.14.04.1","5.5.55-0ubuntu0.14.04.1","5.5.57-0ubuntu0.14.04.1","5.5.58-0ubuntu0.14.04.1","5.5.59-0ubuntu0.14.04.1"]},{"source":"osv","ecosystem":"Ubuntu:16.04:LTS","package":"mysql-5.7","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.7.22-0ubuntu0.16.04.1"}]}],"versions":["5.7.11-0ubuntu4","5.7.11-0ubuntu5","5.7.11-0ubuntu6","5.7.12-0ubuntu1","5.7.12-0ubuntu1.1","5.7.13-0ubuntu0.16.04.2","5.7.15-0ubuntu0.16.04.1","5.7.16-0ubuntu0.16.04.1","5.7.17-0ubuntu0.16.04.1","5.7.17-0ubuntu0.16.04.2","5.7.18-0ubuntu0.16.04.1","5.7.19-0ubuntu0.16.04.1","5.7.20-0ubuntu0.16.04.1","5.7.21-0ubuntu0.16.04.1"]},{"source":"osv","ecosystem":"Ubuntu:16.04:LTS","package":"percona-server-5.6","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["5.6.22-rel71.0-0ubuntu2","5.6.22-rel71.0-0ubuntu4","5.6.22-rel71.0-0ubuntu4.1"]},{"source":"osv","ecosystem":"Ubuntu:16.04:LTS","package":"percona-xtradb-cluster-5.6","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["5.6.21-25.8-0ubuntu2","5.6.21-25.8-0ubuntu3","5.6.21-25.8-0ubuntu3.1","5.6.21-25.8-0ubuntu3.2","5.6.34-26.19-0ubuntu0.16.04.1","5.6.34-26.19-0ubuntu0.16.04.2","5.6.37-26.21-0ubuntu0.16.04.1","5.6.37-26.21-0ubuntu0.16.04.2"]},{"source":"osv","ecosystem":"Ubuntu:18.04:LTS","package":"mysql-5.7","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.7.22-0ubuntu18.04.1"}]}],"versions":["5.7.19-0ubuntu1","5.7.20-0ubuntu0.17.10.1","5.7.20-1ubuntu1","5.7.21-1ubuntu1"]},{"source":"osv","ecosystem":"Ubuntu:14.04:LTS","package":"mysql-5.5","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.5.60-0ubuntu0.14.04.1"}]}],"versions":["5.5.32-0ubuntu7","5.5.34-0ubuntu1","5.5.34-0ubuntu2","5.5.35-0ubuntu1","5.5.35+dfsg-1ubuntu1","5.5.37-0ubuntu0.14.04.1","5.5.38-0ubuntu0.14.04.1","5.5.40-0ubuntu0.14.04.1","5.5.41-0ubuntu0.14.04.1","5.5.43-0ubuntu0.14.04.1","5.5.44-0ubuntu0.14.04.1","5.5.46-0ubuntu0.14.04.2","5.5.47-0ubuntu0.14.04.1","5.5.49-0ubuntu0.14.04.1","5.5.50-0ubuntu0.14.04.1","5.5.52-0ubuntu0.14.04.1","5.5.53-0ubuntu0.14.04.1","5.5.54-0ubuntu0.14.04.1","5.5.55-0ubuntu0.14.04.1","5.5.57-0ubuntu0.14.04.1","5.5.58-0ubuntu0.14.04.1","5.5.59-0ubuntu0.14.04.1"],"bundled":29},{"source":"osv","ecosystem":"Ubuntu:16.04:LTS","package":"mysql-5.7","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.7.22-0ubuntu0.16.04.1"}]}],"versions":["5.7.11-0ubuntu4","5.7.11-0ubuntu5","5.7.11-0ubuntu6","5.7.12-0ubuntu1","5.7.12-0ubuntu1.1","5.7.13-0ubuntu0.16.04.2","5.7.15-0ubuntu0.16.04.1","5.7.16-0ubuntu0.16.04.1","5.7.17-0ubuntu0.16.04.1","5.7.17-0ubuntu0.16.04.2","5.7.18-0ubuntu0.16.04.1","5.7.19-0ubuntu0.16.04.1","5.7.20-0ubuntu0.16.04.1","5.7.21-0ubuntu0.16.04.1"],"bundled":29},{"source":"osv","ecosystem":"Ubuntu:18.04:LTS","package":"mysql-5.7","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.7.22-0ubuntu18.04.1"}]}],"versions":["5.7.19-0ubuntu1","5.7.20-0ubuntu0.17.10.1","5.7.20-1ubuntu1","5.7.21-1ubuntu1"],"bundled":29}],"products":[{"vendor":"canonical","product":"ubuntu_linux"},{"vendor":"debian","product":"debian_linux"},{"vendor":"netapp","product":"oncommand_insight"},{"vendor":"netapp","product":"oncommand_unified_manager"},{"vendor":"netapp","product":"oncommand_workflow_automation"},{"vendor":"netapp","product":"snapcenter"},{"vendor":"netapp","product":"storage_automation_store"},{"vendor":"oracle","product":"mysql"},{"vendor":"oracle corporation","product":"mysql server"}],"references":[{"url":"http://www.securitytracker.com/id/1040698","tags":["vdb-entry","x_refsource_SECTRACK","x_transferred","Third Party Advisory","VDB Entry","advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2018:1254","tags":["vendor-advisory","x_refsource_REDHAT","x_transferred","Third Party Advisory","advisory"]},{"url":"http://www.securityfocus.com/bid/103824","tags":["vdb-entry","x_refsource_BID","x_transferred","Third Party Advisory","VDB Entry","advisory"]},{"url":"https://security.netapp.com/advisory/ntap-20180419-0002/","tags":["x_refsource_CONFIRM","x_transferred","Third Party Advisory","advisory"]},{"url":"https://www.debian.org/security/2018/dsa-4176","tags":["vendor-advisory","x_refsource_DEBIAN","x_transferred","Third Party Advisory","advisory"]},{"url":"https://lists.debian.org/debian-lts-announce/2018/04/msg00020.html","tags":["mailing-list","x_refsource_MLIST","x_transferred","Mailing List","Third Party Advisory","advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2018:3655","tags":["vendor-advisory","x_refsource_REDHAT","x_transferred","Third Party Advisory","advisory"]},{"url":"http://www.oracle.com/technetwork/security-advisory/cpuapr2018-3678067.html","tags":["x_refsource_CONFIRM","x_transferred","Patch","Vendor Advisory","fix","article","report"]},{"url":"https://usn.ubuntu.com/3629-1/","tags":["vendor-advisory","x_refsource_UBUNTU","x_transferred","Third Party Advisory","advisory"]},{"url":"https://usn.ubuntu.com/3629-2/","tags":["vendor-advisory","x_refsource_UBUNTU","x_transferred","Third Party Advisory","advisory"]},{"url":"https://usn.ubuntu.com/3629-3/","tags":["vendor-advisory","x_refsource_UBUNTU","x_transferred","Third Party Advisory","advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2018-2818","tags":["advisory"]},{"url":"https://github.com/advisories/GHSA-g7jv-h96w-mq24"},{"url":"https://access.redhat.com/security/updates/classification/#moderate","tags":["article"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1568921","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1568922","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1568924","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1568926","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1568931","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1568932","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1568942","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1568943","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1568944","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1568946","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1568948","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1568951","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1568954","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1568955","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1568956","tags":["report"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2018/rhsa-2018_1254.json","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2018-2755","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2018-2755","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2018-2755","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2018-2758","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2018-2758","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2018-2758","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2018-2761","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2018-2761","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2018-2761","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2018-2766","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2018-2766","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2018-2766","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2018-2771","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2018-2771","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2018-2771","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2018-2773","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2018-2773","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2018-2773","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2018-2781","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2018-2781","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2018-2781","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2018-2782","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2018-2782","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2018-2782","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2018-2784","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2018-2784","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2018-2784","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2018-2787","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2018-2787","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2018-2787","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2018-2805","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2018-2805","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2018-2805","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2018-2813","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2018-2813","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2018-2813","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2018-2817","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2018-2817","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2018-2817","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2018-2818","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2018-2818","tags":["advisory","report"]},{"url":"https://access.redhat.com/security/cve/CVE-2018-2819","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2018-2819","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2018-2819","tags":["advisory"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1568923","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1568925","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1568927","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1568934","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1568936","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1568937","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1568938","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1568940","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1568941","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1568945","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1568949","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1568950","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1568953","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1568957","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1568958","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1602354","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1602355","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1602356","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1602357","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1602359","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1602360","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1602364","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1602365","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1602366","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1602369","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1602370","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1602375","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1602424","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1640307","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1640308","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1640310","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1640312","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1640316","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1640317","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1640318","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1640319","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1640320","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1640321","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1640322","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1640324","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1640325","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1640326","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1640331","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1640332","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1640333","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1640334","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1640335","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1640337","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1640340","tags":["report"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2018/rhsa-2018_3655.json","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2018-2759","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2018-2759","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2018-2759","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2018-2762","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2018-2762","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2018-2762","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2018-2769","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2018-2769","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2018-2769","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2018-2775","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2018-2775","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2018-2775","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2018-2776","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2018-2776","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2018-2776","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2018-2777","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2018-2777","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2018-2777","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2018-2778","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2018-2778","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2018-2778","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2018-2779","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2018-2779","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2018-2779","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2018-2780","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2018-2780","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2018-2780","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2018-2786","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2018-2786","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2018-2786","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2018-2810","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2018-2810","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2018-2810","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2018-2812","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2018-2812","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2018-2812","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2018-2816","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2018-2816","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2018-2816","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2018-2839","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2018-2839","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2018-2839","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2018-2846","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2018-2846","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2018-2846","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2018-3054","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2018-3054","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2018-3054","tags":["advisory"]},{"url":"http://www.oracle.com/technetwork/security-advisory/cpujul2018-4258247.html","tags":["article"]},{"url":"https://access.redhat.com/security/cve/CVE-2018-3056","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2018-3056","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2018-3056","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2018-3058","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2018-3058","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2018-3058","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2018-3060","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2018-3060","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2018-3060","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2018-3061","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2018-3061","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2018-3061","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2018-3062","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2018-3062","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2018-3062","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2018-3064","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2018-3064","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2018-3064","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2018-3065","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2018-3065","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2018-3065","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2018-3066","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2018-3066","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2018-3066","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2018-3070","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2018-3070","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2018-3070","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2018-3071","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2018-3071","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2018-3071","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2018-3077","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2018-3077","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2018-3077","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2018-3081","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2018-3081","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2018-3081","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2018-3133","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2018-3133","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2018-3133","tags":["advisory"]},{"url":"http://www.oracle.com/technetwork/security-advisory/cpuoct2018-4428296.html","tags":["article"]},{"url":"https://access.redhat.com/security/cve/CVE-2018-3143","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2018-3143","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2018-3143","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2018-3144","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2018-3144","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2018-3144","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2018-3155","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2018-3155","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2018-3155","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2018-3156","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2018-3156","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2018-3156","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2018-3161","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2018-3161","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2018-3161","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2018-3162","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2018-3162","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2018-3162","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2018-3171","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2018-3171","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2018-3171","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2018-3173","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2018-3173","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2018-3173","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2018-3174","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2018-3174","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2018-3174","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2018-3185","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2018-3185","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2018-3185","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2018-3187","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2018-3187","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2018-3187","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2018-3200","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2018-3200","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2018-3200","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2018-3247","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2018-3247","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2018-3247","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2018-3251","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2018-3251","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2018-3251","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2018-3276","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2018-3276","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2018-3276","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2018-3277","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2018-3277","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2018-3277","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2018-3278","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2018-3278","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2018-3278","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2018-3282","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2018-3282","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2018-3282","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2018-3283","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2018-3283","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2018-3283","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2018-3284","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2018-3284","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2018-3284","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2019-2731","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1731996","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2019-2731","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2019-2731","tags":["advisory"]},{"url":"http://www.oracle.com/technetwork/security-advisory/cpujul2019-5072835.html","tags":["article"]},{"url":"https://www.suse.com/support/update/announcement/2018/suse-su-20181333-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/1089987","tags":["report"]},{"url":"https://www.suse.com/security/cve/CVE-2018-2755","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-2761","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-2771","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-2773","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-2781","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-2813","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-2817","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-2818","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-2819","tags":["web"]},{"url":"https://ubuntu.com/security/CVE-2018-2818","tags":["report"]},{"url":"https://ubuntu.com/security/notices/USN-3629-1","tags":["advisory"]},{"url":"https://ubuntu.com/security/notices/USN-3629-2","tags":["advisory"]},{"url":"https://ubuntu.com/security/notices/USN-3629-3","tags":["advisory"]},{"url":"https://mariadb.com/kb/en/library/security-vulnerabilities-in-oracle-mysql-that-did-not-exist-in-mariadb/","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2018-2755","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2018-2758","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2018-2759","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2018-2761","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2018-2762","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2018-2766","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2018-2769","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2018-2771","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2018-2773","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2018-2775","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2018-2776","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2018-2777","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2018-2778","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2018-2779","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2018-2780","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2018-2781","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2018-2782","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2018-2784","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2018-2786","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2018-2787","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2018-2810","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2018-2812","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2018-2813","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2018-2816","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2018-2817","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2018-2819","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2018-2839","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2018-2846","tags":["report"]}],"sources":{"cve":[{"id":"CVE-2018-2818","description":"Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server : Security : Privileges). Supported versions that are affected are 5.5.59 and prior, 5.6.39 and prior and 5.7.21 and prior. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.0 Base Score 4.9 (Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H).","status":"published","published":"2018-04-19T02:00:00Z","modified":"2024-10-03T20:16:08.553Z","updated_at":"2026-11-02T14:35:04.911021Z"}],"euvd":[{"id":"EUVD-2018-14673","description":"Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server : Security : Privileges). Supported versions that are affected are 5.5.59 and prior, 5.6.39 and prior and 5.7.21 and prior. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.0 Base Score 4.9 (Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H).","status":"published","published":"2018-04-19T02:00:00Z","modified":"2024-10-03T20:16:08Z","updated_at":"2026-11-03T00:27:53.369246Z"}],"ghsa":[{"id":"GHSA-g7jv-h96w-mq24","title":"Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server : Security :...","description":"Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server : Security : Privileges). Supported versions that are affected are 5.5.59 and prior, 5.6.39 and prior and 5.7.21 and prior. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.0 Base Score 4.9 (Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H).","status":"published","published":"2022-05-13T01:51:37Z","modified":"2023-02-02T05:02:06Z","cvss":[{"version":"3.0","score":4.9,"vector":"CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H","level":"medium"}],"updated_at":"2026-11-02T14:51:21.252342Z"}],"nvd":[{"id":"CVE-2018-2818","description":"Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server : Security : Privileges). Supported versions that are affected are 5.5.59 and prior, 5.6.39 and prior and 5.7.21 and prior. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.0 Base Score 4.9 (Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H).","status":"published","published":"2018-04-19T02:29:04.77Z","modified":"2026-06-17T01:56:24.97Z","cvss":[{"version":"3.0","score":4.9,"vector":"CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H","level":"medium","assessor":"primary"},{"version":"2.0","score":4,"vector":"AV:N/AC:L/Au:S/C:N/I:N/A:P","level":"medium","assessor":"primary"}],"updated_at":"2026-11-02T14:04:25.506659Z"}],"osv":[{"id":"CVE-2018-2818","description":"Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server : Security : Privileges). Supported versions that are affected are 5.5.59 and prior, 5.6.39 and prior and 5.7.21 and prior. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.0 Base Score 4.9 (Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H).","status":"published","published":"2018-04-19T02:29:04.77Z","modified":"2026-10-24T10:30:28.741444586Z","cvss":[{"version":"3.0","score":4.9,"vector":"CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H","level":"medium"}],"updated_at":"2026-11-02T15:44:09.442568Z"},{"id":"RHSA-2018:1254","title":"Red Hat Security Advisory: rh-mysql56-mysql security update","status":"published","published":"2024-09-13T15:08:30Z","modified":"2026-06-28T10:24:07Z","cvss":[{"version":"3.0","score":7.7,"vector":"CVSS:3.0/AV:L/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:04.822845Z"},{"id":"RHSA-2018:3655","title":"Red Hat Security Advisory: rh-mysql57-mysql security update","status":"published","published":"2024-09-13T15:08:51Z","modified":"2026-06-28T10:27:30Z","cvss":[{"version":"3.0","score":7.7,"vector":"CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:05.383061Z"},{"id":"UBUNTU-CVE-2018-2818","description":"Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server : Security : Privileges). Supported versions that are affected are 5.5.59 and prior, 5.6.39 and prior and 5.7.21 and prior. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.0 Base Score 4.9 (Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H).","status":"published","published":"2018-04-18T00:00:00Z","modified":"2026-04-22T11:54:36.66484Z","cvss":[{"version":"3.0","score":4.9,"vector":"CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H","level":"medium"}],"updated_at":"2026-11-02T15:54:17.91743Z"},{"id":"DLA-1355-1","title":"mysql-5.5 - security update","status":"published","published":"2018-04-19T00:00:00Z","modified":"2026-03-09T01:01:49.005723Z","updated_at":"2026-11-02T15:46:09.336894Z"},{"id":"DSA-4176-1","title":"mysql-5.5 - security update","status":"published","published":"2018-04-20T00:00:00Z","modified":"2026-03-09T01:20:01.701799Z","updated_at":"2026-11-02T15:46:16.862196Z"},{"id":"SUSE-SU-2018:1333-1","title":"security update for mysql","description":"\n  This update fixes the following issues:\n\n  - Update to 5.5.60 in Oracle Apr2018 CPU (bsc#1089987).\n  - CVE-2018-2761: Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Client programs). Supported versions that are affected are 5.5.59 and prior, 5.6.39 and prior and 5.7.21 and prior. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.0 Base Score 5.9 (Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H).\n  - CVE-2018-2755: Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Replication). Supported versions that are affected are 5.5.59 and prior, 5.6.39 and prior and 5.7.21 and prior. Difficult to exploit vulnerability allows unauthenticated attacker with logon to the infrastructure where MySQL Server executes to compromise MySQL Server. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in MySQL Server, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in takeover of MySQL Server. CVSS 3.0 Base Score 7.7 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.0/AV:L/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H).\n  - CVE-2018-2781: Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Optimizer). Supported versions that are affected are 5.5.59 and prior, 5.6.39 and prior and 5.7.21 and prior. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.0 Base Score 4.9 (Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H).\n  - CVE-2018-2819: Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: InnoDB). Supported versions that are affected are 5.5.59 and prior, 5.6.39 and prior and 5.7.21 and prior. Easily exploitable vulnerability allows low privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.0 Base Score 6.5 (Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H).\n  - CVE-2018-2818: Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server : Security : Privileges). Supported versions that are affected are 5.5.59 and prior, 5.6.39 and prior and 5.7.21 and prior. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.0 Base Score 4.9 (Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H).\n  - CVE-2018-2817: Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: DDL). Supported versions that are affected are 5.5.59 and prior, 5.6.39 and prior and 5.7.21 and prior. Easily exploitable vulnerability allows low privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.0 Base Score 6.5 (Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H).\n  - CVE-2018-2771: Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Locking). Supported versions that are affected are 5.5.59 and prior, 5.6.39 and prior and 5.7.21 and prior. Difficult to exploit vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.0 Base Score 4.4 (Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:H).\n  - CVE-2018-2813: Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: DDL). Supported versions that are affected are 5.5.59 and prior, 5.6.39 and prior and 5.7.21 and prior. Easily exploitable vulnerability allows low privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized read access to a subset of MySQL Server accessible data. CVSS 3.0 Base Score 4.3 (Confidentiality impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N).\n  - CVE-2018-2773: Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Client programs). Supported versions that are affected are 5.5.59 and prior, 5.6.39 and prior and 5.7.21 and prior. Difficult to exploit vulnerability allows high privileged attacker with logon to the infrastructure where MySQL Server executes to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.0 Base Score 4.1 (Availability impacts). CVSS Vector: (CVSS:3.0/AV:L/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:H).\n  ","status":"published","published":"2018-05-18T06:04:21Z","modified":"2026-02-04T04:28:37.174481Z","updated_at":"2026-11-02T15:53:44.972817Z"},{"id":"USN-3629-1","title":"mysql-5.5, mysql-5.7 vulnerabilities","description":"Multiple security issues were discovered in MySQL and this update includes\nnew upstream MySQL versions to fix these issues.\n\nMySQL has been updated to 5.5.60 in Ubuntu 14.04 LTS. Ubuntu 16.04 LTS, and\nUbuntu 17.10 have been updated to MySQL 5.7.22.\n\nIn addition to security fixes, the updated packages contain bug fixes, new\nfeatures, and possibly incompatible changes.\n\nPlease see the following for more information:\nhttp://dev.mysql.com/doc/relnotes/mysql/5.5/en/news-5-5-60.html\nhttp://dev.mysql.com/doc/relnotes/mysql/5.7/en/news-5-7-22.html\nhttp://www.oracle.com/technetwork/security-advisory/cpuapr2018-3678067.html\n","status":"published","published":"2018-04-23T17:47:44Z","modified":"2026-04-27T15:33:03.95611559Z","updated_at":"2026-11-02T16:58:13.496563Z"},{"id":"USN-3629-3","title":"mysql-5.7 vulnerabilities","description":"USN-3629-1 fixed vulnerabilities in MySQL. This update provides the\ncorresponding updates for Ubuntu 18.04 LTS.\n\nOriginal advisory details:\n\n Multiple security issues were discovered in MySQL and this update includes\n new upstream MySQL versions to fix these issues.\n \n MySQL has been updated to 5.5.60 in Ubuntu 14.04 LTS. Ubuntu 16.04 LTS, and\n Ubuntu 17.10 have been updated to MySQL 5.7.22.\n \n In addition to security fixes, the updated packages contain bug fixes, new\n features, and possibly incompatible changes.\n \n Please see the following for more information:\n http://dev.mysql.com/doc/relnotes/mysql/5.5/en/news-5-5-60.html\n http://dev.mysql.com/doc/relnotes/mysql/5.7/en/news-5-7-22.html\n http://www.oracle.com/technetwork/security-advisory/cpuapr2018-3678067.html\n","status":"published","published":"2018-04-30T16:30:41Z","modified":"2026-04-27T15:33:03.327376251Z","updated_at":"2026-11-02T16:58:13.496563Z"}]}}