oracle mysql CVE-2018-3170 in Oracle and NetApp Products
Published on October 17, 2018

product logo product logo
Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: DDL). Supported versions that are affected are 8.0.12 and prior. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.0 Base Score 4.9 (Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H).

NVD


Products Associated with CVE-2018-3170

You can be notified by email with stack.watch whenever vulnerabilities like CVE-2018-3170 are published in these products:

Oracle MySQL
 
NetApp Snapcenter
 
NetApp Oncommand Workflow Automation
 
NetApp Oncommand Unified Manager
 
NetApp Oncommand Insight
 

Affected Versions

Oracle Corporation MySQL Server Version 8.0.12 and prior is affected by CVE-2018-3170

Exploit Probability

EPSS
0.33%
Percentile
55.15%

EPSS (Exploit Prediction Scoring System) scores estimate the probability that a vulnerability will be exploited in the wild within the next 30 days. The percentile shows you how this score compares to all other vulnerabilities.