rpm package

suse/mariadb&distro=SUSE Linux Enterprise Module for Server Applications 15

pkg:rpm/suse/mariadb&distro=SUSE%20Linux%20Enterprise%20Module%20for%20Server%20Applications%2015

Vulnerabilities (29)

CVE	Sev	CVSS	Affected versions	Fixed in	Published	Description
CVE-2018-3162	Med	4.9	< 10.2.22-3.14.1	10.2.22-3.14.1	Oct 17, 2018	Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: InnoDB). Supported versions that are affected are 5.7.23 and prior and 8.0.12 and prior. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compr
CVE-2018-3156	Med	6.5	< 10.2.22-3.14.1	10.2.22-3.14.1	Oct 17, 2018	Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: InnoDB). Supported versions that are affected are 5.6.41 and prior, 5.7.23 and prior and 8.0.12 and prior. Easily exploitable vulnerability allows low privileged attacker with network access via multiple p
CVE-2018-3143	Med	6.5	< 10.2.22-3.14.1	10.2.22-3.14.1	Oct 17, 2018	Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: InnoDB). Supported versions that are affected are 5.6.41 and prior, 5.7.23 and prior and 8.0.12 and prior. Easily exploitable vulnerability allows low privileged attacker with network access via multiple p
CVE-2018-3066	Low	3.3	< 10.2.22-3.14.1	10.2.22-3.14.1	Jul 18, 2018	Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Options). Supported versions that are affected are 5.5.60 and prior, 5.6.40 and prior and 5.7.22 and prior. Difficult to exploit vulnerability allows high privileged attacker with network access vi
CVE-2018-3064	Hig	7.1	< 10.2.22-3.14.1	10.2.22-3.14.1	Jul 18, 2018	Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: InnoDB). Supported versions that are affected are 5.6.40 and prior, 5.7.22 and prior and 8.0.11 and prior. Easily exploitable vulnerability allows low privileged attacker with network access via multiple p
CVE-2018-3063	Med	4.9	< 10.2.22-3.14.1	10.2.22-3.14.1	Jul 18, 2018	Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Security: Privileges). Supported versions that are affected are 5.5.60 and prior. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to comp
CVE-2018-3060	Med	6.5	< 10.2.22-3.14.1	10.2.22-3.14.1	Jul 18, 2018	Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: InnoDB). Supported versions that are affected are 5.7.22 and prior and 8.0.11 and prior. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compr
CVE-2018-3058	Med	4.3	< 10.2.22-3.14.1	10.2.22-3.14.1	Jul 18, 2018	Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: MyISAM). Supported versions that are affected are 5.5.60 and prior, 5.6.40 and prior and 5.7.22 and prior. Easily exploitable vulnerability allows low privileged attacker with network access via multiple p
CVE-2016-9843	Cri	9.8	< 10.2.22-3.14.1	10.2.22-3.14.1	May 23, 2017	The crc32_big function in crc32.c in zlib 1.2.8 might allow context-dependent attackers to have unspecified impact via vectors involving big-endian CRC calculation.

CVE-2018-3162MedOct 17, 2018
affected < 10.2.22-3.14.1fixed 10.2.22-3.14.1
Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: InnoDB). Supported versions that are affected are 5.7.23 and prior and 8.0.12 and prior. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compr
CVE-2018-3156MedOct 17, 2018
affected < 10.2.22-3.14.1fixed 10.2.22-3.14.1
Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: InnoDB). Supported versions that are affected are 5.6.41 and prior, 5.7.23 and prior and 8.0.12 and prior. Easily exploitable vulnerability allows low privileged attacker with network access via multiple p
CVE-2018-3143MedOct 17, 2018
affected < 10.2.22-3.14.1fixed 10.2.22-3.14.1
Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: InnoDB). Supported versions that are affected are 5.6.41 and prior, 5.7.23 and prior and 8.0.12 and prior. Easily exploitable vulnerability allows low privileged attacker with network access via multiple p
CVE-2018-3066LowJul 18, 2018
affected < 10.2.22-3.14.1fixed 10.2.22-3.14.1
Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Options). Supported versions that are affected are 5.5.60 and prior, 5.6.40 and prior and 5.7.22 and prior. Difficult to exploit vulnerability allows high privileged attacker with network access vi
CVE-2018-3064HigJul 18, 2018
affected < 10.2.22-3.14.1fixed 10.2.22-3.14.1
Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: InnoDB). Supported versions that are affected are 5.6.40 and prior, 5.7.22 and prior and 8.0.11 and prior. Easily exploitable vulnerability allows low privileged attacker with network access via multiple p
CVE-2018-3063MedJul 18, 2018
affected < 10.2.22-3.14.1fixed 10.2.22-3.14.1
Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Security: Privileges). Supported versions that are affected are 5.5.60 and prior. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to comp
CVE-2018-3060MedJul 18, 2018
affected < 10.2.22-3.14.1fixed 10.2.22-3.14.1
Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: InnoDB). Supported versions that are affected are 5.7.22 and prior and 8.0.11 and prior. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compr
CVE-2018-3058MedJul 18, 2018
affected < 10.2.22-3.14.1fixed 10.2.22-3.14.1
Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: MyISAM). Supported versions that are affected are 5.5.60 and prior, 5.6.40 and prior and 5.7.22 and prior. Easily exploitable vulnerability allows low privileged attacker with network access via multiple p
CVE-2016-9843CriMay 23, 2017
affected < 10.2.22-3.14.1fixed 10.2.22-3.14.1
The crc32_big function in crc32.c in zlib 1.2.8 might allow context-dependent attackers to have unspecified impact via vectors involving big-endian CRC calculation.

Page 2 of 2