CVE-2018-2767

Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Security: Encryption). Supported versions that are affected are 5.5.60 and prior, 5.6.40 and prior and 5.7.22 and prior. Difficult to exploit vulnerability allows low privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized read access to a subset of MySQL Server accessible data. CVSS 3.0 Base Score 3.1 (Confidentiality impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:H/PR:L/UI:N/S:U/C:L/I:N/A:N).

Affected Software

Name	Vendor	Start Version	End Version
Mysql	Oracle	5.5.0 (including)	5.5.60 (including)
Mysql	Oracle	5.6.0 (including)	5.6.40 (including)
Mysql	Oracle	5.7.0 (including)	5.7.22 (including)
Red Hat Enterprise Linux 7	RedHat	mariadb-1:5.5.60-1.el7_5	*
Mariadb-10.0	Ubuntu	upstream	*
Mariadb-10.1	Ubuntu	artful	*
Mariadb-10.1	Ubuntu	upstream	*
Mariadb-5.5	Ubuntu	upstream	*
Mysql-5.5	Ubuntu	esm-infra-legacy/trusty	*
Mysql-5.5	Ubuntu	trusty	*
Mysql-5.5	Ubuntu	trusty/esm	*
Mysql-5.5	Ubuntu	upstream	*
Mysql-5.6	Ubuntu	trusty	*
Mysql-5.6	Ubuntu	upstream	*
Mysql-5.7	Ubuntu	artful	*
Mysql-5.7	Ubuntu	bionic	*
Mysql-5.7	Ubuntu	cosmic	*
Mysql-5.7	Ubuntu	disco	*
Mysql-5.7	Ubuntu	esm-infra/bionic	*
Mysql-5.7	Ubuntu	esm-infra/xenial	*
Mysql-5.7	Ubuntu	upstream	*
Mysql-5.7	Ubuntu	xenial	*
Percona-server-5.6	Ubuntu	artful	*
Percona-server-5.6	Ubuntu	esm-apps/xenial	*
Percona-server-5.6	Ubuntu	xenial	*
Percona-xtradb-cluster-5.5	Ubuntu	trusty	*
Percona-xtradb-cluster-5.6	Ubuntu	artful	*
Percona-xtradb-cluster-5.6	Ubuntu	esm-apps/xenial	*
Percona-xtradb-cluster-5.6	Ubuntu	xenial	*

NVD	https://nvd.nist.gov/vuln/detail/CVE-2018-2767
CWE	https://cwe.mitre.org/data/definitions/.html

Affected Software

References