1
PublicDateAtUSN: 2018-04-18
2
Candidate: CVE-2018-2755
5
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-2755
6
http://www.oracle.com/technetwork/security-advisory/cpuapr2018-3678067.html
7
https://usn.ubuntu.com/usn/usn-3629-1
8
https://usn.ubuntu.com/usn/usn-3629-2
9
https://usn.ubuntu.com/usn/usn-3629-3
11
Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent:
12
Server: Replication). Supported versions that are affected are 5.5.59 and
13
prior, 5.6.39 and prior and 5.7.21 and prior. Difficult to exploit
14
vulnerability allows unauthenticated attacker with logon to the
15
infrastructure where MySQL Server executes to compromise MySQL Server.
16
Successful attacks require human interaction from a person other than the
17
attacker and while the vulnerability is in MySQL Server, attacks may
18
significantly impact additional products. Successful attacks of this
19
vulnerability can result in takeover of MySQL Server. CVSS 3.0 Base Score
20
7.7 (Confidentiality, Integrity and Availability impacts). CVSS Vector:
21
(CVSS:3.0/AV:L/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H).
30
upstream_mysql-5.5: released (5.5.60)
31
precise/esm_mysql-5.5: released (5.5.60-0ubuntu0.12.04.1)
32
trusty_mysql-5.5: released (5.5.60-0ubuntu0.14.04.1)
40
upstream_mysql-5.6: released (5.6.40)
41
precise/esm_mysql-5.6: DNE
42
trusty_mysql-5.6: needed
49
upstream_mysql-5.7: released (5.7.22)
50
precise/esm_mysql-5.7: DNE
52
xenial_mysql-5.7: released (5.7.22-0ubuntu0.16.04.1)
53
artful_mysql-5.7: released (5.7.22-0ubuntu0.17.10.1)
54
bionic_mysql-5.7: released (5.7.22-0ubuntu18.04.1)
55
devel_mysql-5.7: released (5.7.22-0ubuntu18.04.1)
58
upstream_mariadb-5.5: needs-triage
59
precise/esm_mariadb-5.5: DNE
60
trusty_mariadb-5.5: needs-triage
61
xenial_mariadb-5.5: DNE
62
artful_mariadb-5.5: DNE
63
bionic_mariadb-5.5: DNE
64
devel_mariadb-5.5: DNE
67
upstream_mariadb-10.0: needs-triage
68
precise/esm_mariadb-10.0: DNE
69
trusty_mariadb-10.0: DNE
70
xenial_mariadb-10.0: needs-triage
71
artful_mariadb-10.0: DNE
72
bionic_mariadb-10.0: DNE
73
devel_mariadb-10.0: DNE
76
upstream_mariadb-10.1: needs-triage
77
precise/esm_mariadb-10.1: DNE
78
trusty_mariadb-10.1: DNE
79
xenial_mariadb-10.1: DNE
80
artful_mariadb-10.1: needs-triage
81
bionic_mariadb-10.1: needs-triage
82
devel_mariadb-10.1: needs-triage
84
Patches_percona-xtradb-cluster-5.5:
85
upstream_percona-xtradb-cluster-5.5: needs-triage
86
precise/esm_percona-xtradb-cluster-5.5: DNE
87
trusty_percona-xtradb-cluster-5.5: needs-triage
88
xenial_percona-xtradb-cluster-5.5: DNE
89
artful_percona-xtradb-cluster-5.5: DNE
90
bionic_percona-xtradb-cluster-5.5: DNE
91
devel_percona-xtradb-cluster-5.5: DNE
93
Patches_percona-xtradb-cluster-5.6:
94
upstream_percona-xtradb-cluster-5.6: needs-triage
95
precise/esm_percona-xtradb-cluster-5.6: DNE
96
trusty_percona-xtradb-cluster-5.6: DNE
97
xenial_percona-xtradb-cluster-5.6: needs-triage
98
artful_percona-xtradb-cluster-5.6: needs-triage
99
bionic_percona-xtradb-cluster-5.6: DNE
100
devel_percona-xtradb-cluster-5.6: DNE
102
Patches_percona-server-5.6:
103
upstream_percona-server-5.6: needs-triage
104
precise/esm_percona-server-5.6: DNE
105
trusty_percona-server-5.6: DNE
106
xenial_percona-server-5.6: needs-triage
107
artful_percona-server-5.6: needs-triage
108
bionic_percona-server-5.6: DNE
109
devel_percona-server-5.6: DNE