p PatchFirst

PatchFirst · Vulnerabilidades recientes

Vulnerabilidades de la pila Bases de datos · Página 62

Vulnerabilidades publicadas para Bases de datos en los últimos 30 días: 82. Incluidas en el catálogo KEV: 0.

Filtrar vulnerabilidades
Bases de datos

Vulnerabilidades: 1414

  1. CVE-2018-3276

    Media · CVSS 4.9EPSS 3,46%Corrección disponible

    CVE-2018-3276

    Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Memcached). Supported versions that are affected are 5.6.41 and prior, 5.7.23 and prior and 8.0.12 and prior. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.0 Base Score 4.9 (Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H).

    • Actualiza a 5.7.24-0ubuntu0.16.04.1
    • Actualiza a 5.7.24-0ubuntu0.18.04.1
    Publicación Actualización
  2. CVE-2018-3251

    Media · CVSS 6.5EPSS 3,05%Corrección disponible

    CVE-2018-3251

    Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: InnoDB). Supported versions that are affected are 5.6.41 and prior, 5.7.23 and prior and 8.0.12 and prior. Easily exploitable vulnerability allows low privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.0 Base Score 6.5 (Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H).

    • Actualiza a 10.0.38-0ubuntu0.16.04.1
    • Actualiza a 1:10.1.38-0ubuntu0.18.04.1
    • Actualiza a 5.7.24-0ubuntu0.16.04.1
    • Actualiza a 5.7.24-0ubuntu0.18.04.1
    Publicación Actualización
  3. CVE-2018-3247

    Media · CVSS 5.5EPSS 2,82%Corrección disponible

    CVE-2018-3247

    Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Merge). Supported versions that are affected are 5.6.41 and prior, 5.7.23 and prior and 8.0.12 and prior. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server as well as unauthorized update, insert or delete access to some of MySQL Server accessible data. CVSS 3.0 Base Score 5.5 (Integrity and Availability impacts). CVSS Vector:

    • Actualiza a 5.7.24-0ubuntu0.16.04.1
    • Actualiza a 5.7.24-0ubuntu0.18.04.1
    Publicación Actualización
  4. CVE-2018-3212

    Sin evaluarEPSS 2,38%Sin corrección publicada

    CVE-2018-3212

    Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Information Schema). Supported versions that are affected are 8.0.12 and prior. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.0 Base Score 4.9 (Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H).

    Publicación Actualización
  5. CVE-2018-3203

    Sin evaluarEPSS 2,19%Sin corrección publicada

    CVE-2018-3203

    Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Optimizer). Supported versions that are affected are 8.0.12 and prior. Easily exploitable vulnerability allows low privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.0 Base Score 6.5 (Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H).

    Publicación Actualización
  6. CVE-2018-3200

    Media · CVSS 4.9EPSS 2,67%Corrección disponible

    CVE-2018-3200

    Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: InnoDB). Supported versions that are affected are 5.7.23 and prior and 8.0.12 and prior. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.0 Base Score 4.9 (Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H).

    • Actualiza a 5.7.24-0ubuntu0.16.04.1
    • Actualiza a 5.7.24-0ubuntu0.18.04.1
    Publicación Actualización
  7. CVE-2018-3195

    Sin evaluarEPSS 1,79%Sin corrección publicada

    CVE-2018-3195

    Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: DDL). Supported versions that are affected are 8.0.12 and prior. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server as well as unauthorized update, insert or delete access to some of MySQL Server accessible data. CVSS 3.0 Base Score 5.5 (Integrity and Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:

    Publicación Actualización
  8. CVE-2018-3187

    Media · CVSS 5.5EPSS 2,82%Corrección disponible

    CVE-2018-3187

    Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Optimizer). Supported versions that are affected are 5.7.23 and prior and 8.0.12 and prior. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server as well as unauthorized update, insert or delete access to some of MySQL Server accessible data. CVSS 3.0 Base Score 5.5 (Integrity and Availability impacts). CVSS Vector: (CVSS:3.0/AV:

    • Actualiza a 5.7.24-0ubuntu0.16.04.1
    • Actualiza a 5.7.24-0ubuntu0.18.04.1
    Publicación Actualización
  9. CVE-2018-3186

    Sin evaluarEPSS 2,11%Sin corrección publicada

    CVE-2018-3186

    Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Optimizer). Supported versions that are affected are 8.0.12 and prior. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.0 Base Score 4.9 (Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H).

    Publicación Actualización
  10. CVE-2018-3185

    Media · CVSS 5.5EPSS 2,56%Corrección disponible

    CVE-2018-3185

    Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: InnoDB). Supported versions that are affected are 5.7.23 and prior and 8.0.12 and prior. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server as well as unauthorized update, insert or delete access to some of MySQL Server accessible data. CVSS 3.0 Base Score 5.5 (Integrity and Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:H

    • Actualiza a 5.7.24-0ubuntu0.16.04.1
    • Actualiza a 5.7.24-0ubuntu0.18.04.1
    Publicación Actualización
  11. CVE-2018-3182

    Sin evaluarEPSS 2,19%Sin corrección publicada

    CVE-2018-3182

    Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: DML). Supported versions that are affected are 8.0.12 and prior. Easily exploitable vulnerability allows low privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.0 Base Score 6.5 (Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H).

    Publicación Actualización
  12. CVE-2018-3174

    Media · CVSS 5.3EPSS 0,82%Corrección disponible

    CVE-2018-3174

    Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Client programs). Supported versions that are affected are 5.5.61 and prior, 5.6.41 and prior, 5.7.23 and prior and 8.0.12 and prior. Difficult to exploit vulnerability allows high privileged attacker with logon to the infrastructure where MySQL Server executes to compromise MySQL Server. While the vulnerability is in MySQL Server, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.0 Base Score 5.3 (Availab

    • Actualiza a 10.0.38-0ubuntu0.16.04.1
    • Actualiza a 1:10.1.38-0ubuntu0.18.04.1
    • Actualiza a 5.5.62-0ubuntu0.14.04.1
    • Actualiza a 5.5.63-1ubuntu0.14.04.1
    • Actualiza a 5.7.24-0ubuntu0.16.04.1
    • Actualiza a 5.7.24-0ubuntu0.18.04.1
    Publicación Actualización
  13. CVE-2018-3173

    Media · CVSS 4.9EPSS 2,67%Corrección disponible

    CVE-2018-3173

    Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: InnoDB). Supported versions that are affected are 5.7.23 and prior and 8.0.12 and prior. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.0 Base Score 4.9 (Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H).

    • Actualiza a 5.7.24-0ubuntu0.16.04.1
    • Actualiza a 5.7.24-0ubuntu0.18.04.1
    Publicación Actualización
  14. CVE-2018-3171

    Media · CVSS 5EPSS 2,09%Corrección disponible

    CVE-2018-3171

    Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Partition). Supported versions that are affected are 5.7.23 and prior and 8.0.12 and prior. Difficult to exploit vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server as well as unauthorized update, insert or delete access to some of MySQL Server accessible data. CVSS 3.0 Base Score 5.0 (Integrity and Availability impacts). CVSS Vector: (CVSS:3.0/A

    • Actualiza a 5.7.24-0ubuntu0.16.04.1
    • Actualiza a 5.7.24-0ubuntu0.18.04.1
    Publicación Actualización
  15. CVE-2018-3170

    Sin evaluarEPSS 2,11%Sin corrección publicada

    CVE-2018-3170

    Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: DDL). Supported versions that are affected are 8.0.12 and prior. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.0 Base Score 4.9 (Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H).

    Publicación Actualización
  16. CVE-2018-3162

    Media · CVSS 4.9EPSS 3,25%Corrección disponible

    CVE-2018-3162

    Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: InnoDB). Supported versions that are affected are 5.7.23 and prior and 8.0.12 and prior. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.0 Base Score 4.9 (Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H).

    • Actualiza a 5.7.24-0ubuntu0.16.04.1
    • Actualiza a 5.7.24-0ubuntu0.18.04.1
    Publicación Actualización
  17. CVE-2018-3161

    Media · CVSS 4.9EPSS 3,43%Corrección disponible

    CVE-2018-3161

    Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Partition). Supported versions that are affected are 5.7.23 and prior and 8.0.12 and prior. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.0 Base Score 4.9 (Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H).

    • Actualiza a 5.7.24-0ubuntu0.16.04.1
    • Actualiza a 5.7.24-0ubuntu0.18.04.1
    Publicación Actualización
  18. CVE-2018-3156

    Media · CVSS 6.5EPSS 3,72%Corrección disponible

    CVE-2018-3156

    Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: InnoDB). Supported versions that are affected are 5.6.41 and prior, 5.7.23 and prior and 8.0.12 and prior. Easily exploitable vulnerability allows low privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.0 Base Score 6.5 (Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H).

    • Actualiza a 10.0.38-0ubuntu0.16.04.1
    • Actualiza a 1:10.1.38-0ubuntu0.18.04.1
    • Actualiza a 5.7.24-0ubuntu0.16.04.1
    • Actualiza a 5.7.24-0ubuntu0.18.04.1
    Publicación Actualización
  19. CVE-2018-3155

    Alta · CVSS 7.7EPSS 3,68%Corrección disponible

    CVE-2018-3155

    Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Parser). Supported versions that are affected are 5.7.23 and prior and 8.0.12 and prior. Easily exploitable vulnerability allows low privileged attacker with network access via multiple protocols to compromise MySQL Server. While the vulnerability is in MySQL Server, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.0 Base Score 7.7 (Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:L/UI:N

    • Actualiza a 5.7.24-0ubuntu0.16.04.1
    • Actualiza a 5.7.24-0ubuntu0.18.04.1
    Publicación Actualización
  20. CVE-2018-3144

    Media · CVSS 5.9EPSS 4,45%Corrección disponible

    CVE-2018-3144

    Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Security: Audit). Supported versions that are affected are 5.7.23 and prior and 8.0.12 and prior. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.0 Base Score 5.9 (Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H).

    • Actualiza a 5.7.24-0ubuntu0.16.04.1
    • Actualiza a 5.7.24-0ubuntu0.18.04.1
    Publicación Actualización

Comprueba tu servidor

Compara tu pila y las versiones instaladas con las bases actuales de vulnerabilidades.

Comprueba tu servidor →