CVE-2018-2667

MediumCVSS 4.9/10Last modified Jun 17, 2026

Description

Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Optimizer). Supported versions that are affected are 5.7.20 and prior. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.0 Base Score 4.9 (Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H).

Metrics

CVSS 3.0 4.9/10CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H

Affected software

Vendor	Product	Versions
Oracle Corporation	MySQL Server	5.7.20 and prior

References

http://www.oracle.com/technetwork/security-advisory/cpujan2018-3236628.htmlPatch, Vendor Advisory
http://www.securityfocus.com/bid/102685Third Party Advisory, VDB Entry
http://www.securitytracker.com/id/1040216Third Party Advisory, VDB Entry
https://access.redhat.com/errata/RHSA-2018:0586
https://security.netapp.com/advisory/ntap-20180117-0002/Third Party Advisory
https://usn.ubuntu.com/3537-1/
http://www.oracle.com/technetwork/security-advisory/cpujan2018-3236628.htmlPatch, Vendor Advisory
http://www.securityfocus.com/bid/102685Third Party Advisory, VDB Entry
http://www.securitytracker.com/id/1040216Third Party Advisory, VDB Entry
https://access.redhat.com/errata/RHSA-2018:0586
https://security.netapp.com/advisory/ntap-20180117-0002/Third Party Advisory
https://usn.ubuntu.com/3537-1/

Timeline

Published: Jan 18, 2018
Last modified: Jun 17, 2026
NVD status: Modified

Related CVEs from 2018

CVE-2018-26686.5Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Optimizer). Supported versions that are affected are 5.5.CVE-2018-26696.1Vulnerability in the Oracle Hospitality Reporting and Analytics component of Oracle Hospitality Applications (subcomponent: Report). Support CVE-2018-26706.1Vulnerability in the Oracle Financial Services Profitability Management component of Oracle Financial Services Applications (subcomponent: U CVE-2018-26716.5Vulnerability in the PeopleSoft Enterprise SCM Purchasing component of Oracle PeopleSoft Products (subcomponent: Supplier Registration). The CVE-2018-26727.5Vulnerability in the Oracle Hospitality Simphony component of Oracle Hospitality Applications (subcomponent: POS). Supported versions that a CVE-2018-26735.9Vulnerability in the Oracle Hospitality Simphony component of Oracle Hospitality Applications (subcomponent: POS). Supported versions that a CVE-2018-26746.1Vulnerability in the Oracle FLEXCUBE Direct Banking component of Oracle Financial Services Applications (subcomponent: Logoff). Supported ve CVE-2018-26753.7Vulnerability in the Java Advanced Management Console component of Oracle Java SE (subcomponent: Server). The supported version that is affe CVE-2018-26768.2Vulnerability in the Oracle VM VirtualBox component of Oracle Virtualization (subcomponent: Core). Supported versions that are affected are CVE-2018-26774.3Vulnerability in the Java SE, Java SE Embedded component of Oracle Java SE (subcomponent: AWT). Supported versions that are affected are Jav CVE-2018-26784.3Vulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE (subcomponent: JNDI). Supported versions that are affect CVE-2018-26798.1Vulnerability in the Oracle Financial Services Profitability Management component of Oracle Financial Services Applications (subcomponent: U