https://bugzilla.redhat.com/show_bug.cgi?id=1640615
Bug ID: 1640615
Summary: CVE-2018-3258 mysql-connector-java: Connector/J
unspecified vulnerability (CPU October 2018)
Product: Security Response
Component: vulnerability
Keywords: Security
Severity: high
Priority: high
Assignee: security-response-team(a)redhat.com
Reporter: anemec(a)redhat.com
CC: aileenc(a)redhat.com, bbuckingham(a)redhat.com,
bcourt(a)redhat.com, bkearney(a)redhat.com,
cbyrne(a)redhat.com, chazlett(a)redhat.com,
cmacedo(a)redhat.com, databases-maint(a)redhat.com,
dffrench(a)redhat.com, drieden(a)redhat.com,
drusso(a)redhat.com, gvarsami(a)redhat.com,
hghasemb(a)redhat.com, hhorak(a)redhat.com,
java-sig-commits(a)lists.fedoraproject.org,
jcoleman(a)redhat.com, jmadigan(a)redhat.com,
jshepherd(a)redhat.com, kconner(a)redhat.com,
ldimaggi(a)redhat.com, lgriffin(a)redhat.com,
mmccune(a)redhat.com, mmuzila(a)redhat.com,
mrike(a)redhat.com, mschorm(a)redhat.com,
ngough(a)redhat.com, nwallace(a)redhat.com,
ohadlevy(a)redhat.com, pdrozd(a)redhat.com,
ppenicka(a)redhat.com, puntogil(a)libero.it,
pwright(a)redhat.com, rchan(a)redhat.com,
rjerrido(a)redhat.com, rwagner(a)redhat.com,
steve.traylen(a)cern.ch, sthorger(a)redhat.com,
tcunning(a)redhat.com, tjay(a)redhat.com,
tkirby(a)redhat.com, trepel(a)redhat.com,
xjakub(a)fi.muni.cz
Vulnerability in the MySQL Connectors component of Oracle MySQL (subcomponent:
Connector/J). Supported versions that are affected are 8.0.12 and prior. Easily
exploitable vulnerability allows low privileged attacker with network access
via multiple protocols to compromise MySQL Connectors. Successful attacks of
this vulnerability can result in takeover of MySQL Connectors.
References:
http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2018-3258
http://www.oracle.com/technetwork/security-advisory/cpuoct2018-4428296.ht...
--
You are receiving this mail because:
You are on the CC list for the bug.