Audit Linux privileges now to limit compromise, escalation, and system-wide damage. Review Linux Privileges×

Alerts This Week
Warning Icon 1 515
Alerts This Week
Warning Icon 1 515

SUSE: 2018:1333-1 Moderate MySQL Denial of Service Security Update

suse
Calendar Grey May 18, 2018
Scroller Suse
SUSE Security Bulletin for mysql addresses 9 security flaws. Comprehensive severity assessment and update guidelines provided.
An update that fixes 9 vulnerabilities is now available

Summary

This update fixes the following issues: - Update to 5.5.60 in Oracle Apr2018 CPU (bsc#1089987). - CVE-2018-2761: Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Client programs). Supported versions that are affected are 5.5.59 and prior, 5.6.39 and prior and 5.7.21 and prior. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.0 Base Score 5.9 (Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H). - CVE-2018-2755: Vulnerability in the MySQL Server component of Oracle

References

#1089987

Cross- CVE-2018-2755 CVE-2018-2761 CVE-2018-2771

CVE-2018-2773 CVE-2018-2781 CVE-2018-2813

CVE-2018-2817 CVE-2018-2818 CVE-2018-2819

Affected Products:

SUSE Linux Enterprise Software Development Kit 11-SP4

SUSE Linux Enterprise Server 11-SP4

SUSE Linux Enterprise Debuginfo 11-SP4

https://www.suse.com/security/cve/CVE-2018-2755.html

https://www.suse.com/security/cve/CVE-2018-2761.html

https://www.suse.com/security/cve/CVE-2018-2771.html

https://www.suse.com/security/cve/CVE-2018-2773.html

https://www.suse.com/security/cve/CVE-2018-2781.html

https://www.suse.com/security/cve/CVE-2018-2813.html

https://www.suse.com/security/cve/CVE-2018-2817.html

https://www.suse.com/security/cve/CVE-2018-2818.html

Announcement ID: SUSE-SU-2018:1333-1
Rating: moderate

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.