CVE catalog
CVE-2018-2767
ALPINE-CVE-2018-2767
- Severity
- Low · CVSS 3.1
CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:L/I:N/A:N - Published
- Updated
- Source
- [NVD] · [CVE record]
- EPSS
- 1.58% · Oct 25, 2026
Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Security: Encryption). Supported versions that are affected are 5.5.60 and prior, 5.6.40 and prior and 5.7.22 and prior. Difficult to exploit vulnerability allows low privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized read access to a subset of MySQL Server accessible data. CVSS 3.0 Base Score 3.1 (Confidentiality impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:H/PR:L/UI:N/S:U/C:L/I:N/A:N).
Vulnerable and fixed packages
Distribution-reported package versions and fixes. These do not depend on matching against the OpenFactory package catalog.
| Distribution | Package | Release | Version | Status |
|---|---|---|---|---|
| Alpine | mariadb | 3.6 | 10.1.37-r0 | fixed |
| Alpine | mariadb | 3.7 | 10.1.37-r0 | fixed |
| Ubuntu | mysql-5.5 | 14.04 | 5.5.32-0ubuntu7 | vulnerable |
| Ubuntu | mysql-5.5 | 14.04 | 5.5.34-0ubuntu1 | vulnerable |
| Ubuntu | mysql-5.5 | 14.04 | 5.5.34-0ubuntu2 | vulnerable |
| Ubuntu | mysql-5.5 | 14.04 | 5.5.35-0ubuntu1 | vulnerable |
| Ubuntu | mysql-5.5 | 14.04 | 5.5.35+dfsg-1ubuntu1 | vulnerable |
| Ubuntu | mysql-5.5 | 14.04 | 5.5.37-0ubuntu0.14.04.1 | vulnerable |
| Ubuntu | mysql-5.5 | 14.04 | 5.5.38-0ubuntu0.14.04.1 | vulnerable |
| Ubuntu | mysql-5.5 | 14.04 | 5.5.40-0ubuntu0.14.04.1 | vulnerable |
| Ubuntu | mysql-5.5 | 14.04 | 5.5.41-0ubuntu0.14.04.1 | vulnerable |
| Ubuntu | mysql-5.5 | 14.04 | 5.5.43-0ubuntu0.14.04.1 | vulnerable |
| Ubuntu | mysql-5.5 | 14.04 | 5.5.44-0ubuntu0.14.04.1 | vulnerable |
| Ubuntu | mysql-5.5 | 14.04 | 5.5.46-0ubuntu0.14.04.2 | vulnerable |
| Ubuntu | mysql-5.5 | 14.04 | 5.5.47-0ubuntu0.14.04.1 | vulnerable |
| Ubuntu | mysql-5.5 | 14.04 | 5.5.49-0ubuntu0.14.04.1 | vulnerable |
| Ubuntu | mysql-5.5 | 14.04 | 5.5.50-0ubuntu0.14.04.1 | vulnerable |
| Ubuntu | mysql-5.5 | 14.04 | 5.5.52-0ubuntu0.14.04.1 | vulnerable |
| Ubuntu | mysql-5.5 | 14.04 | 5.5.53-0ubuntu0.14.04.1 | vulnerable |
| Ubuntu | mysql-5.5 | 14.04 | 5.5.54-0ubuntu0.14.04.1 | vulnerable |
| Ubuntu | mysql-5.5 | 14.04 | 5.5.55-0ubuntu0.14.04.1 | vulnerable |
| Ubuntu | mysql-5.5 | 14.04 | 5.5.57-0ubuntu0.14.04.1 | vulnerable |
| Ubuntu | mysql-5.5 | 14.04 | 5.5.58-0ubuntu0.14.04.1 | vulnerable |
| Ubuntu | mysql-5.5 | 14.04 | 5.5.59-0ubuntu0.14.04.1 | vulnerable |
| Ubuntu | mysql-5.5 | 14.04 | 5.5.60-0ubuntu0.14.04.1 | vulnerable |
| Ubuntu | mysql-5.5 | 14.04 | 5.5.61-0ubuntu0.14.04.1 | fixed |
| Ubuntu | mysql-5.7 | 16.04 | 5.7.11-0ubuntu4 | vulnerable |
| Ubuntu | mysql-5.7 | 16.04 | 5.7.11-0ubuntu5 | vulnerable |
| Ubuntu | mysql-5.7 | 16.04 | 5.7.11-0ubuntu6 | vulnerable |
| Ubuntu | mysql-5.7 | 16.04 | 5.7.12-0ubuntu1 | vulnerable |
| Ubuntu | mysql-5.7 | 16.04 | 5.7.12-0ubuntu1.1 | vulnerable |
| Ubuntu | mysql-5.7 | 16.04 | 5.7.13-0ubuntu0.16.04.2 | vulnerable |
| Ubuntu | mysql-5.7 | 16.04 | 5.7.15-0ubuntu0.16.04.1 | vulnerable |
| Ubuntu | mysql-5.7 | 16.04 | 5.7.16-0ubuntu0.16.04.1 | vulnerable |
| Ubuntu | mysql-5.7 | 16.04 | 5.7.17-0ubuntu0.16.04.1 | vulnerable |
| Ubuntu | mysql-5.7 | 16.04 | 5.7.17-0ubuntu0.16.04.2 | vulnerable |
| Ubuntu | mysql-5.7 | 16.04 | 5.7.18-0ubuntu0.16.04.1 | vulnerable |
| Ubuntu | mysql-5.7 | 16.04 | 5.7.19-0ubuntu0.16.04.1 | vulnerable |
| Ubuntu | mysql-5.7 | 16.04 | 5.7.20-0ubuntu0.16.04.1 | vulnerable |
| Ubuntu | mysql-5.7 | 16.04 | 5.7.21-0ubuntu0.16.04.1 | vulnerable |
| Ubuntu | mysql-5.7 | 16.04 | 5.7.22-0ubuntu0.16.04.1 | vulnerable |
| Ubuntu | mysql-5.7 | 16.04 | 5.7.23-0ubuntu0.16.04.1 | fixed |
| Ubuntu | mysql-5.7 | 18.04 | 5.7.19-0ubuntu1 | vulnerable |
| Ubuntu | mysql-5.7 | 18.04 | 5.7.20-0ubuntu0.17.10.1 | vulnerable |
| Ubuntu | mysql-5.7 | 18.04 | 5.7.20-1ubuntu1 | vulnerable |
| Ubuntu | mysql-5.7 | 18.04 | 5.7.21-1ubuntu1 | vulnerable |
| Ubuntu | mysql-5.7 | 18.04 | 5.7.22-0ubuntu18.04.1 | vulnerable |
| Ubuntu | mysql-5.7 | 18.04 | 5.7.23-0ubuntu0.18.04.1 | fixed |
| Ubuntu | mysql-5.5 | 14.04 | 5.5.32-0ubuntu7 | vulnerable |
| Ubuntu | mysql-5.5 | 14.04 | 5.5.34-0ubuntu1 | vulnerable |
| Ubuntu | mysql-5.5 | 14.04 | 5.5.34-0ubuntu2 | vulnerable |
| Ubuntu | mysql-5.5 | 14.04 | 5.5.35-0ubuntu1 | vulnerable |
| Ubuntu | mysql-5.5 | 14.04 | 5.5.35+dfsg-1ubuntu1 | vulnerable |
| Ubuntu | mysql-5.5 | 14.04 | 5.5.37-0ubuntu0.14.04.1 | vulnerable |
| Ubuntu | mysql-5.5 | 14.04 | 5.5.38-0ubuntu0.14.04.1 | vulnerable |
| Ubuntu | mysql-5.5 | 14.04 | 5.5.40-0ubuntu0.14.04.1 | vulnerable |
| Ubuntu | mysql-5.5 | 14.04 | 5.5.41-0ubuntu0.14.04.1 | vulnerable |
| Ubuntu | mysql-5.5 | 14.04 | 5.5.43-0ubuntu0.14.04.1 | vulnerable |
| Ubuntu | mysql-5.5 | 14.04 | 5.5.44-0ubuntu0.14.04.1 | vulnerable |
| Ubuntu | mysql-5.5 | 14.04 | 5.5.46-0ubuntu0.14.04.2 | vulnerable |
| Ubuntu | mysql-5.5 | 14.04 | 5.5.47-0ubuntu0.14.04.1 | vulnerable |
| Ubuntu | mysql-5.5 | 14.04 | 5.5.49-0ubuntu0.14.04.1 | vulnerable |
| Ubuntu | mysql-5.5 | 14.04 | 5.5.50-0ubuntu0.14.04.1 | vulnerable |
| Ubuntu | mysql-5.5 | 14.04 | 5.5.52-0ubuntu0.14.04.1 | vulnerable |
| Ubuntu | mysql-5.5 | 14.04 | 5.5.53-0ubuntu0.14.04.1 | vulnerable |
| Ubuntu | mysql-5.5 | 14.04 | 5.5.54-0ubuntu0.14.04.1 | vulnerable |
| Ubuntu | mysql-5.5 | 14.04 | 5.5.55-0ubuntu0.14.04.1 | vulnerable |
| Ubuntu | mysql-5.5 | 14.04 | 5.5.57-0ubuntu0.14.04.1 | vulnerable |
| Ubuntu | mysql-5.5 | 14.04 | 5.5.58-0ubuntu0.14.04.1 | vulnerable |
| Ubuntu | mysql-5.5 | 14.04 | 5.5.59-0ubuntu0.14.04.1 | vulnerable |
| Ubuntu | mysql-5.5 | 14.04 | 5.5.60-0ubuntu0.14.04.1 | vulnerable |
| Ubuntu | mysql-5.5 | 14.04 | 5.5.61-0ubuntu0.14.04.1 | fixed |
| Ubuntu | mysql-5.7 | 16.04 | 5.7.11-0ubuntu4 | vulnerable |
| Ubuntu | mysql-5.7 | 16.04 | 5.7.11-0ubuntu5 | vulnerable |
| Ubuntu | mysql-5.7 | 16.04 | 5.7.11-0ubuntu6 | vulnerable |
| Ubuntu | mysql-5.7 | 16.04 | 5.7.12-0ubuntu1 | vulnerable |
| Ubuntu | mysql-5.7 | 16.04 | 5.7.12-0ubuntu1.1 | vulnerable |
| Ubuntu | mysql-5.7 | 16.04 | 5.7.13-0ubuntu0.16.04.2 | vulnerable |
| Ubuntu | mysql-5.7 | 16.04 | 5.7.15-0ubuntu0.16.04.1 | vulnerable |
| Ubuntu | mysql-5.7 | 16.04 | 5.7.16-0ubuntu0.16.04.1 | vulnerable |
| Ubuntu | mysql-5.7 | 16.04 | 5.7.17-0ubuntu0.16.04.1 | vulnerable |
| Ubuntu | mysql-5.7 | 16.04 | 5.7.17-0ubuntu0.16.04.2 | vulnerable |
| Ubuntu | mysql-5.7 | 16.04 | 5.7.18-0ubuntu0.16.04.1 | vulnerable |
| Ubuntu | mysql-5.7 | 16.04 | 5.7.19-0ubuntu0.16.04.1 | vulnerable |
| Ubuntu | mysql-5.7 | 16.04 | 5.7.20-0ubuntu0.16.04.1 | vulnerable |
| Ubuntu | mysql-5.7 | 16.04 | 5.7.21-0ubuntu0.16.04.1 | vulnerable |
| Ubuntu | mysql-5.7 | 16.04 | 5.7.22-0ubuntu0.16.04.1 | vulnerable |
| Ubuntu | mysql-5.7 | 16.04 | 5.7.23-0ubuntu0.16.04.1 | fixed |
| Ubuntu | percona-server-5.6 | 16.04 | 5.6.22-rel71.0-0ubuntu2 | vulnerable |
| Ubuntu | percona-server-5.6 | 16.04 | 5.6.22-rel71.0-0ubuntu4 | vulnerable |
| Ubuntu | percona-server-5.6 | 16.04 | 5.6.22-rel71.0-0ubuntu4.1 | vulnerable |
| Ubuntu | percona-xtradb-cluster-5.6 | 16.04 | 5.6.21-25.8-0ubuntu2 | vulnerable |
| Ubuntu | percona-xtradb-cluster-5.6 | 16.04 | 5.6.21-25.8-0ubuntu3 | vulnerable |
| Ubuntu | percona-xtradb-cluster-5.6 | 16.04 | 5.6.21-25.8-0ubuntu3.1 | vulnerable |
| Ubuntu | percona-xtradb-cluster-5.6 | 16.04 | 5.6.21-25.8-0ubuntu3.2 | vulnerable |
| Ubuntu | percona-xtradb-cluster-5.6 | 16.04 | 5.6.34-26.19-0ubuntu0.16.04.1 | vulnerable |
| Ubuntu | percona-xtradb-cluster-5.6 | 16.04 | 5.6.34-26.19-0ubuntu0.16.04.2 | vulnerable |
| Ubuntu | percona-xtradb-cluster-5.6 | 16.04 | 5.6.37-26.21-0ubuntu0.16.04.1 | vulnerable |
| Ubuntu | percona-xtradb-cluster-5.6 | 16.04 | 5.6.37-26.21-0ubuntu0.16.04.2 | vulnerable |
| Ubuntu | mysql-5.7 | 18.04 | 5.7.19-0ubuntu1 | vulnerable |
| Ubuntu | mysql-5.7 | 18.04 | 5.7.20-0ubuntu0.17.10.1 | vulnerable |
| Ubuntu | mysql-5.7 | 18.04 | 5.7.20-1ubuntu1 | vulnerable |
| Ubuntu | mysql-5.7 | 18.04 | 5.7.21-1ubuntu1 | vulnerable |
| Ubuntu | mysql-5.7 | 18.04 | 5.7.22-0ubuntu18.04.1 | vulnerable |
| Ubuntu | mysql-5.7 | 18.04 | 5.7.23-0ubuntu0.18.04.1 | fixed |
| Debian | mysql-5.5 | 8 | 5.5.42-1 | vulnerable |
| Debian | mysql-5.5 | 8 | 5.5.43-0+deb8u1 | vulnerable |
| Debian | mysql-5.5 | 8 | 5.5.44-0+deb8u1 | vulnerable |
| Debian | mysql-5.5 | 8 | 5.5.46-0+deb8u1 | vulnerable |
| Debian | mysql-5.5 | 8 | 5.5.47-0+deb8u1 | vulnerable |
| Debian | mysql-5.5 | 8 | 5.5.49-0+deb8u1 | vulnerable |
| Debian | mysql-5.5 | 8 | 5.5.50-0+deb8u1 | vulnerable |
| Debian | mysql-5.5 | 8 | 5.5.52-0+deb8u1 | vulnerable |
| Debian | mysql-5.5 | 8 | 5.5.53-0+deb8u1 | vulnerable |
| Debian | mysql-5.5 | 8 | 5.5.54-0+deb8u1 | vulnerable |
| Debian | mysql-5.5 | 8 | 5.5.55-0+deb8u1 | vulnerable |
| Debian | mysql-5.5 | 8 | 5.5.57-0+deb8u1 | vulnerable |
| Debian | mysql-5.5 | 8 | 5.5.58-0+deb8u1 | vulnerable |
| Debian | mysql-5.5 | 8 | 5.5.59-0+deb8u1 | vulnerable |
| Debian | mysql-5.5 | 8 | 5.5.60-0+deb8u1 | vulnerable |
| Debian | mysql-5.5 | 8 | 5.5.62-0+deb8u1 | fixed |
Fixed-version evidence
| Distribution | Package | Type | Release | Fixed version | Urgency | Origin | Bugs |
|---|---|---|---|---|---|---|---|
| Alpine | mariadb | apk | 3.6 | 10.1.37-r0 | Not reported | ALPINE-CVE-2018-2767 | Not reported |
| Alpine | mariadb | apk | 3.7 | 10.1.37-r0 | Not reported | ALPINE-CVE-2018-2767 | Not reported |
| Ubuntu | mysql-5.5 | deb | 14.04 | 5.5.61-0ubuntu0.14.04.1 | Not reported | USN-3725-1 | Not reported |
| Ubuntu | mysql-5.7 | deb | 16.04 | 5.7.23-0ubuntu0.16.04.1 | Not reported | USN-3725-1 | Not reported |
| Ubuntu | mysql-5.7 | deb | 18.04 | 5.7.23-0ubuntu0.18.04.1 | Not reported | USN-3725-1 | Not reported |
| Ubuntu | mysql-5.5 | deb | 14.04 | 5.5.61-0ubuntu0.14.04.1 | Not reported | UBUNTU-CVE-2018-2767 | Not reported |
| Ubuntu | mysql-5.7 | deb | 16.04 | 5.7.23-0ubuntu0.16.04.1 | Not reported | UBUNTU-CVE-2018-2767 | Not reported |
| Ubuntu | mysql-5.7 | deb | 18.04 | 5.7.23-0ubuntu0.18.04.1 | Not reported | UBUNTU-CVE-2018-2767 | Not reported |
| Debian | mysql-5.5 | deb | 8 | 5.5.62-0+deb8u1 | Not reported | DLA-1566-1 | Not reported |
OpenFactory catalog packages
No matching packages in this catalog.
Observed:
References
- [https://ftp.suse.com/pub/projects/security/csaf/rhsa-2018_2439.json]
- [https://osv.dev/vulnerability/ALPINE-CVE-2018-2767]
- [https://osv.dev/vulnerability/DLA-1566-1]
- [https://osv.dev/vulnerability/UBUNTU-CVE-2018-2767]
- [https://osv.dev/vulnerability/USN-3725-1]
[FIRST EPSS] · [OSV Package Vulnerability Database] · [SUSE security advisories and VEX]