Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: GIS Extension). Supported versions that are affected are 5.6.39 and prior. Easily exploitable vulnerability allows low privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.0 Base Score 6.5 (Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H).

The version of MySQL running on the remote host is 5.6.x prior to 5.6.40. It is, therefore, affected by multiple vulnerabilities as noted in the April 2018 Critical Patch Update advisory. Please consult the CVRF details for the applicable CVEs for additional information.

The version of MySQL running on the remote host is 5.5.x prior to 5.5.60. It is, therefore, affected by multiple vulnerabilities as noted in the April 2018 Critical Patch Update advisory. Please consult the CVRF details for the applicable CVEs for additional information.

This update for mysql-community-server to version 5.6.40 fixes the following issues :

Security issues fixed :

  - CVE-2018-2755: Unspecified vulnerability in the     Replication component

  - CVE-2018-2819: Unspecified vulnerability in the InnoDB     component

  - CVE-2018-2817: Unspecified vulnerability in the Server     DDL component

  - CVE-2018-2761: Unspecified vulnerability in the client     programs

  - CVE-2018-2818: Unspecified vulnerability in the Server     Security Privileges component

  - CVE-2018-2781: Unspecified vulnerability in the Server     Optimizer component

  - CVE-2018-2771: Unspecified vulnerability in the Server     locking component

  - CVE-2018-2813: Unspecified vulnerability in the Server     DDL component

  - CVE-2018-2773: Unspecified vulnerability in the client     programs

  - CVE-2018-2758: Unspecified vulnerability in the Server     Security Privileges component

  - CVE-2018-2805: Unspecified vulnerability in the GIS     Extension

  - CVE-2018-2782: Unspecified vulnerability in the InnoDB     component

  - CVE-2018-2784: Unspecified vulnerability in the InnoDB     component

  - CVE-2018-2787: Unspecified vulnerability in the InnoDB     component

  - CVE-2018-2766: Unspecified vulnerability in the InnoDB     component

This update also contains all upstream fixes and improvement in the 5.6.40 release:
http://dev.mysql.com/doc/relnotes/mysql/5.6/en/news-5-6-40.html

Oracle reports :

MySQL Multiple Flaws Let Remote Authenticated Users Access and Modify Data, Remote and Local Users Deny Service, and Local Users Access Data and Gain Elevated Privileges

- A local user can exploit a flaw in the Replication component to gain elevated privileges [CVE-2018-2755].

- A remote authenticated user can exploit a flaw in the GIS Extension component to cause denial of service conditions [CVE-2018-2805].

- A remote authenticated user can exploit a flaw in the InnoDB component to cause denial of service conditions [CVE-2018-2782, CVE-2018-2784, CVE-2018-2819].

- A remote authenticated user can exploit a flaw in the Security Privileges component to cause denial of service conditions [CVE-2018-2758, CVE-2018-2818].

- A remote authenticated user can exploit a flaw in the DDL component to cause denial of service conditions [CVE-2018-2817].

- A remote authenticated user can exploit a flaw in the Optimizer component to cause denial of service conditions [CVE-2018-2775, CVE-2018-2778, CVE-2018-2779, CVE-2018-2780, CVE-2018-2781, CVE-2018-2816].

- A remote user can exploit a flaw in the Client programs component to cause denial of service conditions [CVE-2018-2761, CVE-2018-2773].

- A remote authenticated user can exploit a flaw in the InnoDB component to partially modify data and cause denial of service conditions [CVE-2018-2786, CVE-2018-2787].

- A remote authenticated user can exploit a flaw in the Optimizer component to partially modify data and cause denial of service conditions [CVE-2018-2812].

- A local user can exploit a flaw in the Cluster ndbcluster/plugin component to cause denial of service conditions [CVE-2018-2877].

- A remote authenticated user can exploit a flaw in the InnoDB component to cause denial of service conditions [CVE-2018-2759, CVE-2018-2766, CVE-2018-2777, CVE-2018-2810].

- A remote authenticated user can exploit a flaw in the DML component to cause denial of service conditions [CVE-2018-2839].

- A remote authenticated user can exploit a flaw in the Performance Schema component to cause denial of service conditions [CVE-2018-2846].

- A remote authenticated user can exploit a flaw in the Pluggable Auth component to cause denial of service conditions [CVE-2018-2769].

- A remote authenticated user can exploit a flaw in the Group Replication GCS component to cause denial of service conditions [CVE-2018-2776].

- A local user can exploit a flaw in the Connection component to cause denial of service conditions [CVE-2018-2762].

- A remote authenticated user can exploit a flaw in the Locking component to cause denial of service conditions [CVE-2018-2771].

- A remote authenticated user can exploit a flaw in the DDL component to partially access data [CVE-2018-2813].

The version of MySQL running on the remote host is 5.6.x prior to 5.6.40. It is, therefore, affected by multiple vulnerabilities as noted in the April 2018 Critical Patch Update advisory. Please consult the CVRF details for the applicable CVEs for additional information.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The version of MySQL running on the remote host is 5.5.x prior to 5.5.60. It is, therefore, affected by multiple vulnerabilities as noted in the April 2018 Critical Patch Update advisory. Please consult the CVRF details for the applicable CVEs for additional information.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

ID	Name	Product	Family	Severity
700621	MySQL 5.6.x < 5.6.40 Multiple Vulnerabilities (April 2018 CPU)	Nessus Network Monitor	Database	high
700615	MySQL 5.5.x < 5.5.60 Multiple Vulnerabilities (April 2018 CPU)	Nessus Network Monitor	Database	high
109424	openSUSE Security Update : mysql-community-server (openSUSE-2018-405)	Nessus	SuSE Local Security Checks	high
109228	FreeBSD : MySQL -- multiple vulnerabilities (57aec168-453e-11e8-8777-b499baebfeaf)	Nessus	FreeBSD Local Security Checks	high
109169	MySQL 5.6.x < 5.6.40 Multiple Vulnerabilities (RPM Check) (April 2018 CPU)	Nessus	Databases	medium
109168	MySQL 5.6.x < 5.6.40 Multiple Vulnerabilities (April 2018 CPU)	Nessus	Databases	medium
109166	MySQL 5.5.x < 5.5.60 Multiple Vulnerabilities (April 2018 CPU)	Nessus	Databases	medium

Detections

Analytics

CVE-2018-2805

medium

Tenable Plugins

high

high

high

high

medium

medium

medium