CVE catalog

CVE-2018-3064

ALPINE-CVE-2018-3064

[CVE catalog]

Severity
High · CVSS 7.1CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:H
Published
Updated
Source
[NVD] · [CVE record]
EPSS
3.08% · Oct 25, 2026

Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: InnoDB). Supported versions that are affected are 5.6.40 and prior, 5.7.22 and prior and 8.0.11 and prior. Easily exploitable vulnerability allows low privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server as well as unauthorized update, insert or delete access to some of MySQL Server accessible data. CVSS 3.0 Base Score 7.1 (Integrity and Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:H).

Vulnerable and fixed packages

Distribution-reported package versions and fixes. These do not depend on matching against the OpenFactory package catalog.

DistributionPackageReleaseVersionStatus
Alpinemariadb3.610.1.37-r0fixed
Alpinemariadb3.710.1.37-r0fixed
Alpinemariadb3.810.2.19-r0fixed
Ubuntumariadb-10.016.0410.0.20-0ubuntu0.15.04.1vulnerable
Ubuntumariadb-10.016.0410.0.22-0ubuntu1vulnerable
Ubuntumariadb-10.016.0410.0.23-1vulnerable
Ubuntumariadb-10.016.0410.0.23-2vulnerable
Ubuntumariadb-10.016.0410.0.24-7vulnerable
Ubuntumariadb-10.016.0410.0.25-0ubuntu0.16.04.1vulnerable
Ubuntumariadb-10.016.0410.0.27-0ubuntu0.16.04.1vulnerable
Ubuntumariadb-10.016.0410.0.28-0ubuntu0.16.04.1vulnerable
Ubuntumariadb-10.016.0410.0.29-0ubuntu0.16.04.1vulnerable
Ubuntumariadb-10.016.0410.0.31-0ubuntu0.16.04.2vulnerable
Ubuntumariadb-10.016.0410.0.33-0ubuntu0.16.04.1vulnerable
Ubuntumariadb-10.016.0410.0.34-0ubuntu0.16.04.1vulnerable
Ubuntumariadb-10.016.0410.0.36-0ubuntu0.16.04.1fixed
Ubuntumysql-5.716.045.7.11-0ubuntu4vulnerable
Ubuntumysql-5.716.045.7.11-0ubuntu5vulnerable
Ubuntumysql-5.716.045.7.11-0ubuntu6vulnerable
Ubuntumysql-5.716.045.7.12-0ubuntu1vulnerable
Ubuntumysql-5.716.045.7.12-0ubuntu1.1vulnerable
Ubuntumysql-5.716.045.7.13-0ubuntu0.16.04.2vulnerable
Ubuntumysql-5.716.045.7.15-0ubuntu0.16.04.1vulnerable
Ubuntumysql-5.716.045.7.16-0ubuntu0.16.04.1vulnerable
Ubuntumysql-5.716.045.7.17-0ubuntu0.16.04.1vulnerable
Ubuntumysql-5.716.045.7.17-0ubuntu0.16.04.2vulnerable
Ubuntumysql-5.716.045.7.18-0ubuntu0.16.04.1vulnerable
Ubuntumysql-5.716.045.7.19-0ubuntu0.16.04.1vulnerable
Ubuntumysql-5.716.045.7.20-0ubuntu0.16.04.1vulnerable
Ubuntumysql-5.716.045.7.21-0ubuntu0.16.04.1vulnerable
Ubuntumysql-5.716.045.7.22-0ubuntu0.16.04.1vulnerable
Ubuntumysql-5.716.045.7.23-0ubuntu0.16.04.1fixed
Ubuntupercona-server-5.616.045.6.22-rel71.0-0ubuntu2vulnerable
Ubuntupercona-server-5.616.045.6.22-rel71.0-0ubuntu4vulnerable
Ubuntupercona-server-5.616.045.6.22-rel71.0-0ubuntu4.1vulnerable
Ubuntupercona-xtradb-cluster-5.616.045.6.21-25.8-0ubuntu2vulnerable
Ubuntupercona-xtradb-cluster-5.616.045.6.21-25.8-0ubuntu3vulnerable
Ubuntupercona-xtradb-cluster-5.616.045.6.21-25.8-0ubuntu3.1vulnerable
Ubuntupercona-xtradb-cluster-5.616.045.6.21-25.8-0ubuntu3.2vulnerable
Ubuntupercona-xtradb-cluster-5.616.045.6.34-26.19-0ubuntu0.16.04.1vulnerable
Ubuntupercona-xtradb-cluster-5.616.045.6.34-26.19-0ubuntu0.16.04.2vulnerable
Ubuntupercona-xtradb-cluster-5.616.045.6.37-26.21-0ubuntu0.16.04.1vulnerable
Ubuntupercona-xtradb-cluster-5.616.045.6.37-26.21-0ubuntu0.16.04.2vulnerable
Ubuntumariadb-10.118.0410.1.25-1vulnerable
Ubuntumariadb-10.118.041:10.1.29-6vulnerable
Ubuntumariadb-10.118.041:10.1.34-0ubuntu0.18.04.1vulnerable
Ubuntumariadb-10.118.041:10.1.38-0ubuntu0.18.04.1fixed
Ubuntumysql-5.718.045.7.19-0ubuntu1vulnerable
Ubuntumysql-5.718.045.7.20-0ubuntu0.17.10.1vulnerable
Ubuntumysql-5.718.045.7.20-1ubuntu1vulnerable
Ubuntumysql-5.718.045.7.21-1ubuntu1vulnerable
Ubuntumysql-5.718.045.7.22-0ubuntu18.04.1vulnerable
Ubuntumysql-5.718.045.7.23-0ubuntu0.18.04.1fixed

Fixed-version evidence

DistributionPackageTypeReleaseFixed versionUrgencyOriginBugs
Alpinemariadbapk3.610.1.37-r0Not reportedALPINE-CVE-2018-3064Not reported
Alpinemariadbapk3.710.1.37-r0Not reportedALPINE-CVE-2018-3064Not reported
Alpinemariadbapk3.810.2.19-r0Not reportedALPINE-CVE-2018-3064Not reported
Ubuntumariadb-10.0deb16.0410.0.36-0ubuntu0.16.04.1Not reportedUBUNTU-CVE-2018-3064Not reported
Ubuntumysql-5.7deb16.045.7.23-0ubuntu0.16.04.1Not reportedUBUNTU-CVE-2018-3064Not reported
Ubuntumariadb-10.1deb18.041:10.1.38-0ubuntu0.18.04.1Not reportedUBUNTU-CVE-2018-3064Not reported
Ubuntumysql-5.7deb18.045.7.23-0ubuntu0.18.04.1Not reportedUBUNTU-CVE-2018-3064Not reported

OpenFactory catalog packages

No matching packages in this catalog.

Observed:

References

[FIRST EPSS] · [OSV Package Vulnerability Database] · [Red Hat security advisories and VEX] · [SUSE security advisories and VEX]