{
  "cveId": "CVE-2018-3156",
  "url": "https://patchblox.com/security/cve/CVE-2018-3156",
  "summary": "CVE-2018-3156 is fixed in 28 products on 1 platform, first by libmariadbclient-dev-compat 1:10.1.38-0ubuntu0.18.04.1, released January 15, 2019. It is not reported as exploited. Patch Radar priority: Routine.",
  "title": "mariadb-client-10.1: Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: InnoDB)",
  "description": "Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: InnoDB). Supported versions that are affected are 5.6.41 and prior, 5.7.23 and prior and 8.0.12 and prior. Easily exploitable vulnerability allows low privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.0 Base Score 6.5 (Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H).",
  "published": "2018-10-15T17:00:00Z",
  "severity": "Medium",
  "epss": 0.03716,
  "epssPercentile": 0.89829,
  "priority": "Routine",
  "priorityTier": 4,
  "exploited": false,
  "vendorExploited": false,
  "disclosed": false,
  "fixes": [
    {
      "platform": "linux",
      "product": "libmariadbclient-dev-compat",
      "release": "Ubuntu 18.04.6 LTS (bionic)",
      "fixedVersion": "1:10.1.38-0ubuntu0.18.04.1",
      "fix": "libmariadbclient-dev-compat 1:10.1.38-0ubuntu0.18.04.1",
      "url": "https://patchblox.com/security/fix/linux/ubuntu-bionic-libmariadbclient-dev-compat-1-10.1.38-0ubuntu0.18.04.1",
      "released": "2019-01-15T16:00:00Z"
    },
    {
      "platform": "linux",
      "product": "libmariadbclient18",
      "release": "Ubuntu 18.04.6 LTS (bionic)",
      "fixedVersion": "1:10.1.38-0ubuntu0.18.04.1",
      "fix": "libmariadbclient18 1:10.1.38-0ubuntu0.18.04.1",
      "url": "https://patchblox.com/security/fix/linux/ubuntu-bionic-libmariadbclient18-1-10.1.38-0ubuntu0.18.04.1",
      "released": "2019-01-15T16:00:00Z"
    },
    {
      "platform": "linux",
      "product": "libmariadbd18",
      "release": "Ubuntu 18.04.6 LTS (bionic)",
      "fixedVersion": "1:10.1.38-0ubuntu0.18.04.1",
      "fix": "libmariadbd18 1:10.1.38-0ubuntu0.18.04.1",
      "url": "https://patchblox.com/security/fix/linux/ubuntu-bionic-libmariadbd18-1-10.1.38-0ubuntu0.18.04.1",
      "released": "2019-01-15T16:00:00Z"
    },
    {
      "platform": "linux",
      "product": "libmysqlclient20",
      "release": "Ubuntu 18.04.6 LTS (bionic)",
      "fixedVersion": "5.7.24-0ubuntu0.18.04.1",
      "fix": "libmysqlclient20 5.7.24-0ubuntu0.18.04.1",
      "url": "https://patchblox.com/security/fix/linux/ubuntu-bionic-libmysqlclient20-5.7.24-0ubuntu0.18.04.1",
      "released": "2019-07-23T16:15:00Z"
    },
    {
      "platform": "linux",
      "product": "mariadb-client",
      "release": "Ubuntu 18.04.6 LTS (bionic)",
      "fixedVersion": "1:10.1.38-0ubuntu0.18.04.1",
      "fix": "mariadb-client 1:10.1.38-0ubuntu0.18.04.1",
      "url": "https://patchblox.com/security/fix/linux/ubuntu-bionic-mariadb-client-1-10.1.38-0ubuntu0.18.04.1",
      "released": "2019-01-15T16:00:00Z"
    },
    {
      "platform": "linux",
      "product": "mariadb-client-10.1",
      "release": "Ubuntu 18.04.6 LTS (bionic)",
      "fixedVersion": "1:10.1.38-0ubuntu0.18.04.1",
      "fix": "mariadb-client-10.1 1:10.1.38-0ubuntu0.18.04.1",
      "url": "https://patchblox.com/security/fix/linux/ubuntu-bionic-mariadb-client-10.1-1-10.1.38-0ubuntu0.18.04.1",
      "released": "2019-01-15T16:00:00Z"
    },
    {
      "platform": "linux",
      "product": "mariadb-client-core-10.1",
      "release": "Ubuntu 18.04.6 LTS (bionic)",
      "fixedVersion": "1:10.1.38-0ubuntu0.18.04.1",
      "fix": "mariadb-client-core-10.1 1:10.1.38-0ubuntu0.18.04.1",
      "url": "https://patchblox.com/security/fix/linux/ubuntu-bionic-mariadb-client-core-10.1-1-10.1.38-0ubuntu0.18.04.1",
      "released": "2019-01-15T16:00:00Z"
    },
    {
      "platform": "linux",
      "product": "mariadb-common",
      "release": "Ubuntu 18.04.6 LTS (bionic)",
      "fixedVersion": "1:10.1.38-0ubuntu0.18.04.1",
      "fix": "mariadb-common 1:10.1.38-0ubuntu0.18.04.1",
      "url": "https://patchblox.com/security/fix/linux/ubuntu-bionic-mariadb-common-1-10.1.38-0ubuntu0.18.04.1",
      "released": "2019-01-15T16:00:00Z"
    },
    {
      "platform": "linux",
      "product": "mariadb-plugin-connect",
      "release": "Ubuntu 18.04.6 LTS (bionic)",
      "fixedVersion": "1:10.1.38-0ubuntu0.18.04.1",
      "fix": "mariadb-plugin-connect 1:10.1.38-0ubuntu0.18.04.1",
      "url": "https://patchblox.com/security/fix/linux/ubuntu-bionic-mariadb-plugin-connect-1-10.1.38-0ubuntu0.18.04.1",
      "released": "2019-01-15T16:00:00Z"
    },
    {
      "platform": "linux",
      "product": "mariadb-plugin-cracklib-password-check",
      "release": "Ubuntu 18.04.6 LTS (bionic)",
      "fixedVersion": "1:10.1.38-0ubuntu0.18.04.1",
      "fix": "mariadb-plugin-cracklib-password-check 1:10.1.38-0ubuntu0.18.04.1",
      "url": "https://patchblox.com/security/fix/linux/ubuntu-bionic-mariadb-plugin-cracklib-password-check-1-10.1.38-0ubuntu0.18.04.1",
      "released": "2019-01-15T16:00:00Z"
    },
    {
      "platform": "linux",
      "product": "mariadb-plugin-gssapi-client",
      "release": "Ubuntu 18.04.6 LTS (bionic)",
      "fixedVersion": "1:10.1.38-0ubuntu0.18.04.1",
      "fix": "mariadb-plugin-gssapi-client 1:10.1.38-0ubuntu0.18.04.1",
      "url": "https://patchblox.com/security/fix/linux/ubuntu-bionic-mariadb-plugin-gssapi-client-1-10.1.38-0ubuntu0.18.04.1",
      "released": "2019-01-15T16:00:00Z"
    },
    {
      "platform": "linux",
      "product": "mariadb-plugin-gssapi-server",
      "release": "Ubuntu 18.04.6 LTS (bionic)",
      "fixedVersion": "1:10.1.38-0ubuntu0.18.04.1",
      "fix": "mariadb-plugin-gssapi-server 1:10.1.38-0ubuntu0.18.04.1",
      "url": "https://patchblox.com/security/fix/linux/ubuntu-bionic-mariadb-plugin-gssapi-server-1-10.1.38-0ubuntu0.18.04.1",
      "released": "2019-01-15T16:00:00Z"
    },
    {
      "platform": "linux",
      "product": "mariadb-plugin-mroonga",
      "release": "Ubuntu 18.04.6 LTS (bionic)",
      "fixedVersion": "1:10.1.38-0ubuntu0.18.04.1",
      "fix": "mariadb-plugin-mroonga 1:10.1.38-0ubuntu0.18.04.1",
      "url": "https://patchblox.com/security/fix/linux/ubuntu-bionic-mariadb-plugin-mroonga-1-10.1.38-0ubuntu0.18.04.1",
      "released": "2019-01-15T16:00:00Z"
    },
    {
      "platform": "linux",
      "product": "mariadb-plugin-oqgraph",
      "release": "Ubuntu 18.04.6 LTS (bionic)",
      "fixedVersion": "1:10.1.38-0ubuntu0.18.04.1",
      "fix": "mariadb-plugin-oqgraph 1:10.1.38-0ubuntu0.18.04.1",
      "url": "https://patchblox.com/security/fix/linux/ubuntu-bionic-mariadb-plugin-oqgraph-1-10.1.38-0ubuntu0.18.04.1",
      "released": "2019-01-15T16:00:00Z"
    },
    {
      "platform": "linux",
      "product": "mariadb-plugin-spider",
      "release": "Ubuntu 18.04.6 LTS (bionic)",
      "fixedVersion": "1:10.1.38-0ubuntu0.18.04.1",
      "fix": "mariadb-plugin-spider 1:10.1.38-0ubuntu0.18.04.1",
      "url": "https://patchblox.com/security/fix/linux/ubuntu-bionic-mariadb-plugin-spider-1-10.1.38-0ubuntu0.18.04.1",
      "released": "2019-01-15T16:00:00Z"
    },
    {
      "platform": "linux",
      "product": "mariadb-plugin-tokudb",
      "release": "Ubuntu 18.04.6 LTS (bionic)",
      "fixedVersion": "1:10.1.38-0ubuntu0.18.04.1",
      "fix": "mariadb-plugin-tokudb 1:10.1.38-0ubuntu0.18.04.1",
      "url": "https://patchblox.com/security/fix/linux/ubuntu-bionic-mariadb-plugin-tokudb-1-10.1.38-0ubuntu0.18.04.1",
      "released": "2019-01-15T16:00:00Z"
    },
    {
      "platform": "linux",
      "product": "mariadb-server",
      "release": "Ubuntu 18.04.6 LTS (bionic)",
      "fixedVersion": "1:10.1.38-0ubuntu0.18.04.1",
      "fix": "mariadb-server 1:10.1.38-0ubuntu0.18.04.1",
      "url": "https://patchblox.com/security/fix/linux/ubuntu-bionic-mariadb-server-1-10.1.38-0ubuntu0.18.04.1",
      "released": "2019-01-15T16:00:00Z"
    },
    {
      "platform": "linux",
      "product": "mariadb-server-10.1",
      "release": "Ubuntu 18.04.6 LTS (bionic)",
      "fixedVersion": "1:10.1.38-0ubuntu0.18.04.1",
      "fix": "mariadb-server-10.1 1:10.1.38-0ubuntu0.18.04.1",
      "url": "https://patchblox.com/security/fix/linux/ubuntu-bionic-mariadb-server-10.1-1-10.1.38-0ubuntu0.18.04.1",
      "released": "2019-01-15T16:00:00Z"
    },
    {
      "platform": "linux",
      "product": "mariadb-server-core-10.1",
      "release": "Ubuntu 18.04.6 LTS (bionic)",
      "fixedVersion": "1:10.1.38-0ubuntu0.18.04.1",
      "fix": "mariadb-server-core-10.1 1:10.1.38-0ubuntu0.18.04.1",
      "url": "https://patchblox.com/security/fix/linux/ubuntu-bionic-mariadb-server-core-10.1-1-10.1.38-0ubuntu0.18.04.1",
      "released": "2019-01-15T16:00:00Z"
    },
    {
      "platform": "linux",
      "product": "mysql-client",
      "release": "Ubuntu 18.04.6 LTS (bionic)",
      "fixedVersion": "5.7.24-0ubuntu0.18.04.1",
      "fix": "mysql-client 5.7.24-0ubuntu0.18.04.1",
      "url": "https://patchblox.com/security/fix/linux/ubuntu-bionic-mysql-client-5.7.24-0ubuntu0.18.04.1",
      "released": "2019-07-23T16:15:00Z"
    },
    {
      "platform": "linux",
      "product": "mysql-client-5.7",
      "release": "Ubuntu 18.04.6 LTS (bionic)",
      "fixedVersion": "5.7.24-0ubuntu0.18.04.1",
      "fix": "mysql-client-5.7 5.7.24-0ubuntu0.18.04.1",
      "url": "https://patchblox.com/security/fix/linux/ubuntu-bionic-mysql-client-5.7-5.7.24-0ubuntu0.18.04.1",
      "released": "2019-07-23T16:15:00Z"
    },
    {
      "platform": "linux",
      "product": "mysql-client-core-5.7",
      "release": "Ubuntu 18.04.6 LTS (bionic)",
      "fixedVersion": "5.7.24-0ubuntu0.18.04.1",
      "fix": "mysql-client-core-5.7 5.7.24-0ubuntu0.18.04.1",
      "url": "https://patchblox.com/security/fix/linux/ubuntu-bionic-mysql-client-core-5.7-5.7.24-0ubuntu0.18.04.1",
      "released": "2019-07-23T16:15:00Z"
    },
    {
      "platform": "linux",
      "product": "mysql-server",
      "release": "Ubuntu 18.04.6 LTS (bionic)",
      "fixedVersion": "5.7.24-0ubuntu0.18.04.1",
      "fix": "mysql-server 5.7.24-0ubuntu0.18.04.1",
      "url": "https://patchblox.com/security/fix/linux/ubuntu-bionic-mysql-server-5.7.24-0ubuntu0.18.04.1",
      "released": "2019-07-23T16:15:00Z"
    },
    {
      "platform": "linux",
      "product": "mysql-server-5.7",
      "release": "Ubuntu 18.04.6 LTS (bionic)",
      "fixedVersion": "5.7.24-0ubuntu0.18.04.1",
      "fix": "mysql-server-5.7 5.7.24-0ubuntu0.18.04.1",
      "url": "https://patchblox.com/security/fix/linux/ubuntu-bionic-mysql-server-5.7-5.7.24-0ubuntu0.18.04.1",
      "released": "2019-07-23T16:15:00Z"
    },
    {
      "platform": "linux",
      "product": "mysql-server-core-5.7",
      "release": "Ubuntu 18.04.6 LTS (bionic)",
      "fixedVersion": "5.7.24-0ubuntu0.18.04.1",
      "fix": "mysql-server-core-5.7 5.7.24-0ubuntu0.18.04.1",
      "url": "https://patchblox.com/security/fix/linux/ubuntu-bionic-mysql-server-core-5.7-5.7.24-0ubuntu0.18.04.1",
      "released": "2019-07-23T16:15:00Z"
    },
    {
      "platform": "linux",
      "product": "mysql-source-5.7",
      "release": "Ubuntu 18.04.6 LTS (bionic)",
      "fixedVersion": "5.7.24-0ubuntu0.18.04.1",
      "fix": "mysql-source-5.7 5.7.24-0ubuntu0.18.04.1",
      "url": "https://patchblox.com/security/fix/linux/ubuntu-bionic-mysql-source-5.7-5.7.24-0ubuntu0.18.04.1",
      "released": "2019-07-23T16:15:00Z"
    },
    {
      "platform": "linux",
      "product": "mysql-testsuite",
      "release": "Ubuntu 18.04.6 LTS (bionic)",
      "fixedVersion": "5.7.24-0ubuntu0.18.04.1",
      "fix": "mysql-testsuite 5.7.24-0ubuntu0.18.04.1",
      "url": "https://patchblox.com/security/fix/linux/ubuntu-bionic-mysql-testsuite-5.7.24-0ubuntu0.18.04.1",
      "released": "2019-07-23T16:15:00Z"
    },
    {
      "platform": "linux",
      "product": "mysql-testsuite-5.7",
      "release": "Ubuntu 18.04.6 LTS (bionic)",
      "fixedVersion": "5.7.24-0ubuntu0.18.04.1",
      "fix": "mysql-testsuite-5.7 5.7.24-0ubuntu0.18.04.1",
      "url": "https://patchblox.com/security/fix/linux/ubuntu-bionic-mysql-testsuite-5.7-5.7.24-0ubuntu0.18.04.1",
      "released": "2019-07-23T16:15:00Z"
    }
  ],
  "noFixYet": [],
  "dataAsOf": "2026-11-07T12:40:37Z"
}