vulnerability

FreeBSD: VID-57aec168-453e-11e8-8777-b499baebfeaf (CVE-2018-2781): MySQL -- multiple vulnerabilities

Severity
4
CVSS
(AV:N/AC:L/Au:S/C:N/I:N/A:P)
Published
Apr 21, 2018
Added
Apr 22, 2018
Modified
Dec 10, 2025

Description

Oracle reports: MySQL Multiple Flaws Let Remote Authenticated Users Access and Modify Data, Remote and Local Users Deny Service, and Local Users Access Data and Gain Elevated Privileges A local user can exploit a flaw in the Replication component to gain elevated privileges [CVE-2018-2755]. A remote authenticated user can exploit a flaw in the GIS Extension component to cause denial of service conditions [CVE-2018-2805]. A remote authenticated user can exploit a flaw in the InnoDB component to cause denial of service conditions [CVE-2018-2782, CVE-2018-2784, CVE-2018-2819]. A remote authenticated user can exploit a flaw in the Security Privileges component to cause denial of service conditions [CVE-2018-2758, CVE-2018-2818]. A remote authenticated user can exploit a flaw in the DDL component to cause denial of service conditions [CVE-2018-2817]. A remote authenticated user can exploit a flaw in the Optimizer component to cause denial of service conditions [CVE-2018-2775, CVE-2018-2778, CVE-2018-2779, CVE-2018-2780, CVE-2018-2781, CVE-2018-2816]. A remote user can exploit a flaw in the Client programs component to cause denial of service conditions [CVE-2018-2761, CVE-2018-2773]. A remote authenticated user can exploit a flaw in the InnoDB component to partially modify data and cause denial of service conditions [CVE-2018-2786, CVE-2018-2787]. A remote authenticated user can exploit a flaw in the Optimizer component to partially modify data and cause denial of service conditions [CVE-2018-2812]. A local user can exploit a flaw in the Cluster ndbcluster/plugin component to cause denial of service conditions [CVE-2018-2877]. A remote authenticated user can exploit a flaw in the InnoDB component to cause denial of service conditions [CVE-2018-2759, CVE-2018-2766, CVE-2018-2777, CVE-2018-2810]. A remote authenticated user can exploit a flaw in the DML component to cause denial of service conditions [CVE-2018-2839]. A remote authenticated user can exploit a flaw in the Performance Schema component to cause denial of service conditions [CVE-2018-2846]. A remote authenticated user can exploit a flaw in the Pluggable Auth component to cause denial of service conditions [CVE-2018-2769]. A remote authenticated user can exploit a flaw in the Group Replication GCS component to cause denial of service conditions [CVE-2018-2776]. A local user can exploit a flaw in the Connection component to cause denial of service conditions [CVE-2018-2762]. A remote authenticated user can exploit a flaw in the Locking component to cause denial of service conditions [CVE-2018-2771]. A remote authenticated user can exploit a flaw in the DDL component to partially access data [CVE-2018-2813].

Solutions

freebsd-upgrade-package-mariadb55-serverfreebsd-upgrade-package-mariadb100-serverfreebsd-upgrade-package-mariadb101-serverfreebsd-upgrade-package-mariadb102-serverfreebsd-upgrade-package-mysql55-serverfreebsd-upgrade-package-mysql56-serverfreebsd-upgrade-package-mysql57-serverfreebsd-upgrade-package-percona55-serverfreebsd-upgrade-package-percona56-serverfreebsd-upgrade-package-percona57-server
Title
NEW

Explore Exposure Command

Confidently identify and prioritize exposures from endpoint to cloud with full attack surface visibility and threat-aware risk context.