Medium
Security advisory
Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Optimizer). Supported versions that are affected are 5.5.58 and prior, 5.6.38 and prior and 5.7.20 and prior. Easily exploitable vulnerability allows low privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.0 Base Score 6.5 (Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H).
- Products
- Not specified
- Affected versions
- Not specified
- Fixed versions
- Not specified
- CVEs
- CVE-2018-2668
- Confirmed fixed CVEs
- Not specified
- Updated in this feed
- 1 Nov 2026, 09:20 UTC · Revision 1
Source evidence
Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Optimizer). Supported versions that are affected are 5.5.58 and prior, 5.6.38 and prior and 5.7.20 and prior. Easily exploitable vulnerability allows low privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.0 Base Score 6.5 (Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H).
osv:CVE-2018-2668
Complete source record
{
"id": "aa50ccf0861ec09aa72f71b4aa4c04eeed47c98cb4b5b0f00eff1df312139415",
"url": "https://osv.dev/vulnerability/CVE-2018-2668",
"method": "structured",
"payload": {
"kind": "advisory",
"title": "CVE-2018-2668",
"summary": "Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Optimizer). Supported versions that are affected are 5.5.58 and prior, 5.6.38 and prior and 5.7.20 and prior. Easily exploitable vulnerability allows low privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.0 Base Score 6.5 (Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H).",
"evidence": "osv:CVE-2018-2668",
"products": [],
"severity": "medium",
"structured": {
"id": "CVE-2018-2668",
"aliases": [
"CVE-2018-2668"
],
"metrics": [
{
"type": "CVSS_V3",
"score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H"
}
],
"affected": [
{
"ranges": [
{
"repo": "https://github.com/mariadb/server",
"type": "GIT",
"events": [
{
"introduced": "5bfe1a3917ee1bddc7f2cde0c88961875148873c"
},
{
"fixed": "946d9e4db4896992400cabbd0d1db9a0a10cbfd1"
},
{
"introduced": "776555af021e917ce0d6235386b43ae59fdd5161"
},
{
"fixed": "c7e5feb2596e2a032207191320dbf1387d440959"
},
{
"introduced": "c235de12ae3723b96944337bd89ad9cc87f21d8f"
},
{
"fixed": "aba15b864af664276261dcbbdaef35268d407af1"
},
{
"introduced": "9664240c948a92c22ccda0e1f5a420eb776ddcb1"
},
{
"fixed": "00f0c039d2f4213ccf0a0202349ecb162a799989"
}
],
"database_specific": {
"extracted_events": [
{
"cpe": "cpe:2.3:a:mariadb:mariadb:*:*:*:*:*:*:*:*",
"range": [
{
"introduced": "5.5.0"
},
{
"fixed": "5.5.59"
}
],
"source": "CPE_RANGE"
},
{
"cpe": "cpe:2.3:a:mariadb:mariadb:*:*:*:*:*:*:*:*",
"range": [
{
"introduced": "10.0.0"
},
{
"fixed": "10.0.34"
}
],
"source": "CPE_RANGE"
},
{
"cpe": "cpe:2.3:a:mariadb:mariadb:*:*:*:*:*:*:*:*",
"range": [
{
"introduced": "10.1.0"
},
{
"fixed": "10.1.31"
}
],
"source": "CPE_RANGE"
},
{
"cpe": "cpe:2.3:a:mariadb:mariadb:*:*:*:*:*:*:*:*",
"range": [
{
"introduced": "10.2.0"
},
{
"fixed": "10.2.13"
}
],
"source": "CPE_RANGE"
}
]
}
}
],
"versions": [
"mariadb-10.2.12",
"mariadb-10.1.30",
"mariadb-10.2.11",
"mariadb-10.1.29",
"mariadb-10.2.10",
"mariadb-10.1.28",
"mariadb-10.1.27",
"mariadb-10.1.26",
"mariadb-10.1.25",
"mariadb-10.1.24",
"mariadb-10.1.23",
"mariadb-10.2.5",
"mariadb-10.1.22",
"mariadb-10.1.21",
"mariadb-10.1.20",
"mariadb-10.1.19",
"mariadb-10.1.18",
"mariadb-10.2.2",
"mariadb-10.1.17",
"mariadb-10.1.16",
"mariadb-10.2.1",
"mariadb-10.1.15",
"mariadb-10.1.14",
"mariadb-10.2.0",
"mariadb-10.1.13",
"mariadb-10.1.12",
"mariadb-10.1.11",
"mariadb-10.1.10",
"mariadb-10.1.9",
"mariadb-10.1.8",
"mariadb-10.1.7",
"mariadb-10.1.6",
"mariadb-10.1.5",
"mariadb-10.1.4",
"mariadb-10.1.3",
"mariadb-10.1.2",
"mariadb-10.1.0"
],
"database_specific": {
"source": "https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2018-2668.json",
"vanir_signatures": [
{
"id": "CVE-2018-2668-35955af8",
"digest": {
"length": 1054,
"function_hash": "130605097230749778694010073870346686670"
},
"source": "https://github.com/mariadb/server/commit/00f0c039d2f4213ccf0a0202349ecb162a799989",
"target": {
"file": "storage/innobase/fsp/fsp0file.cc",
"function": "Datafile::restore_from_doublewrite"
},
"deprecated": false,
"signature_type": "Function",
"signature_version": "v1"
},
{
"id": "CVE-2018-2668-63cb60d2",
"digest": {
"length": 960,
"function_hash": "225684029145934870115777883669100534248"
},
"source": "https://github.com/mariadb/server/commit/00f0c039d2f4213ccf0a0202349ecb162a799989",
"target": {
"file": "storage/innobase/os/os0file.cc",
"function": "os_file_write_func"
},
"deprecated": false,
"signature_type": "Function",
"signature_version": "v1"
},
{
"id": "CVE-2018-2668-73c034dd",
"digest": {
"threshold": 0.9,
"line_hashes": [
"270860312524047975223998427597379069133",
"138700069694352925751092711221965681083",
"73177570771323724918039668023285208338",
"334316589423847422718539826515170429787"
]
},
"source": "https://github.com/mariadb/server/commit/00f0c039d2f4213ccf0a0202349ecb162a799989",
"target": {
"file": "storage/innobase/handler/ha_innodb.cc"
},
"deprecated": false,
"signature_type": "Line",
"signature_version": "v1"
},
{
"id": "CVE-2018-2668-74431fcb",
"digest": {
"threshold": 0.9,
"line_hashes": [
"142954440393337238364499438551411317676",
"222393189091191459111113825646834264347",
"218786519671436864181379588620900852574",
"47343729200658771295506502538095007608",
"114042143539907191956327849716988713876"
]
},
"source": "https://github.com/mariadb/server/commit/00f0c039d2f4213ccf0a0202349ecb162a799989",
"target": {
"file": "storage/innobase/fsp/fsp0file.cc"
},
"deprecated": false,
"signature_type": "Line",
"signature_version": "v1"
},
{
"id": "CVE-2018-2668-79f1104b",
"digest": {
"threshold": 0.9,
"line_hashes": [
"185075245068664039325029482465215810291",
"332123619142345873462417961515224028149",
"279792484854263699879640871403809161912",
"26110594930125329989886054578182194610"
]
},
"source": "https://github.com/mariadb/server/commit/00f0c039d2f4213ccf0a0202349ecb162a799989",
"target": {
"file": "storage/innobase/log/log0recv.cc"
},
"deprecated": false,
"signature_type": "Line",
"signature_version": "v1"
},
{
"id": "CVE-2018-2668-84ac66cb",
"digest": {
"length": 9466,
"function_hash": "316540848342180118779221857666050078639"
},
"source": "https://github.com/mariadb/server/commit/00f0c039d2f4213ccf0a0202349ecb162a799989",
"target": {
"file": "extra/mariabackup/xtrabackup.cc",
"function": "xtrabackup_backup_func"
},
"deprecated": false,
"signature_type": "Function",
"signature_version": "v1"
},
{
"id": "CVE-2018-2668-93e2b7d3",
"digest": {
"threshold": 0.9,
"line_hashes": [
"36077434821275875247811855456353572105",
"160581400765285351176714843658421363508",
"766346996563297499073672373392412876",
"211150773200112696487715150603501049777"
]
},
"source": "https://github.com/mariadb/server/commit/00f0c039d2f4213ccf0a0202349ecb162a799989",
"target": {
"file": "storage/innobase/fsp/fsp0sysspace.cc"
},
"deprecated": false,
"signature_type": "Line",
"signature_version": "v1"
},
{
"id": "CVE-2018-2668-9a1f1e99",
"digest": {
"length": 2117,
"function_hash": "68988844885919766892113874866915131823"
},
"source": "https://github.com/mariadb/server/commit/00f0c039d2f4213ccf0a0202349ecb162a799989",
"target": {
"file": "storage/innobase/log/log0recv.cc",
"function": "recv_init_crash_recovery_spaces"
},
"deprecated": false,
"signature_type": "Function",
"signature_version": "v1"
},
{
"id": "CVE-2018-2668-9ed06d3d",
"digest": {
"length": 1435,
"function_hash": "61688056747625301825107397785610625027"
},
"source": "https://github.com/mariadb/server/commit/00f0c039d2f4213ccf0a0202349ecb162a799989",
"target": {
"file": "extra/mariabackup/xtrabackup.cc",
"function": "xb_load_tablespaces"
},
"deprecated": false,
"signature_type": "Function",
"signature_version": "v1"
},
{
"id": "CVE-2018-2668-c8156020",
"digest": {
"threshold": 0.9,
"line_hashes": [
"10836350722366508992115719304931899919",
"313172078672241696523004237139405359507",
"127803409878542658969602070866683137262",
"50652555589067442011188990995813019082",
"283928848828838093908684271187431787106",
"299074893176668912988681797415969708150",
"6321873636136299859751854381117970802",
"324440987259170321930944114802905990638",
"173258812540214653539287437580893304143"
]
},
"source": "https://github.com/mariadb/server/commit/00f0c039d2f4213ccf0a0202349ecb162a799989",
"target": {
"file": "extra/mariabackup/xtrabackup.cc"
},
"deprecated": false,
"signature_type": "Line",
"signature_version": "v1"
},
{
"id": "CVE-2018-2668-d7da5a49",
"digest": {
"threshold": 0.9,
"line_hashes": [
"75278074706413613809406016363572072456",
"137935962809119759940085893828396599894",
"264338671440348818089795647450576095197",
"205375926455532591392422900073845632398",
"108292044452921360659566642416443155746"
]
},
"source": "https://github.com/mariadb/server/commit/00f0c039d2f4213ccf0a0202349ecb162a799989",
"target": {
"file": "storage/innobase/include/fsp0file.h"
},
"deprecated": false,
"signature_type": "Line",
"signature_version": "v1"
},
{
"id": "CVE-2018-2668-dd1d00db",
"digest": {
"length": 742,
"function_hash": "245222482251486452532970526960647548905"
},
"source": "https://github.com/mariadb/server/commit/00f0c039d2f4213ccf0a0202349ecb162a799989",
"target": {
"file": "storage/innobase/handler/ha_innodb.cc",
"function": "innodb_make_page_dirty"
},
"deprecated": false,
"signature_type": "Function",
"signature_version": "v1"
},
{
"id": "CVE-2018-2668-edef8987",
"digest": {
"length": 1114,
"function_hash": "120134255564222204347753978400896185616"
},
"source": "https://github.com/mariadb/server/commit/00f0c039d2f4213ccf0a0202349ecb162a799989",
"target": {
"file": "storage/innobase/fsp/fsp0sysspace.cc",
"function": "SysTablespace::read_lsn_and_check_flags"
},
"deprecated": false,
"signature_type": "Function",
"signature_version": "v1"
},
{
"id": "CVE-2018-2668-f5650a73",
"digest": {
"threshold": 0.9,
"line_hashes": [
"215992549750288932437508368358727087603",
"216474942203275196967132544327490846901",
"39406859376278680657854698126409261900",
"7697263132410919682525481477251438694",
"57904983498328393684578034683468974781"
]
},
"source": "https://github.com/mariadb/server/commit/00f0c039d2f4213ccf0a0202349ecb162a799989",
"target": {
"file": "storage/innobase/os/os0file.cc"
},
"deprecated": false,
"signature_type": "Line",
"signature_version": "v1"
}
],
"vanir_signatures_modified": "2026-10-24T14:12:18Z"
}
},
{
"ranges": [
{
"repo": "https://github.com/mysql/mysql-server",
"type": "GIT",
"events": [
{
"introduced": "54df0057e18d8c82c23fbd4e0bf5b5dc2e762955"
},
{
"last_affected": "1da916c37e5107b27297fc9e22c3da7772bb097d"
},
{
"introduced": "0"
},
{
"last_affected": "38e2b4d1fe7564b8e1a0d0f0eeb7f542d0d534b6"
},
{
"last_affected": "0138556a55168da12eaf0bc3038947148d6b0863"
}
],
"database_specific": {
"extracted_events": [
{
"cpe": "cpe:2.3:a:oracle:mysql:*:*:*:*:*:*:*:*",
"range": [
{
"introduced": "5.5.0"
},
{
"last_affected": "5.5.58"
}
],
"source": "CPE_RANGE"
},
{
"cpe": "cpe:2.3:a:oracle:mysql:*:*:*:*:*:*:*:*",
"range": [
{
"introduced": "5.6.0"
},
{
"last_affected": "5.6.38"
}
],
"source": "CPE_RANGE"
},
{
"cpe": "cpe:2.3:a:oracle:mysql:*:*:*:*:*:*:*:*",
"range": [
{
"introduced": "5.7.0"
},
{
"last_affected": "5.7.20"
}
],
"source": "CPE_RANGE"
}
]
}
}
],
"versions": [
"mysql-5.6.38",
"mysql-5.5.58",
"mysql-5.7.20",
"mysql-5.5.49",
"mysql-5.5.47",
"mysql-5.5.44",
"mysql-5.5.27",
"mysql-5.5.25",
"mysql-5.5.23",
"mysql-5.5.19",
"mysql-5.5.15",
"mysql-5.1.4",
"mysql-4.0.4",
"mysql-4.0.2",
"mysql-3.23.36",
"mysql-3.23.33",
"mysql-3.23.32",
"mysql-3.23.31",
"mysql-3.23.30-gamma",
"mysql-3.23.28-gamma",
"mysql-3.23.22-beta"
],
"database_specific": {
"source": "https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2018-2668.json"
}
}
],
"modified": "2026-10-24T14:12:18.944189243Z",
"provider": "osv",
"references": [
"https://access.redhat.com/errata/RHSA-2018:0586",
"https://access.redhat.com/errata/RHSA-2018:0587",
"https://access.redhat.com/errata/RHSA-2018:2439",
"https://access.redhat.com/errata/RHSA-2018:2729",
"https://access.redhat.com/errata/RHSA-2019:1258",
"https://lists.debian.org/debian-lts-announce/2018/01/msg00024.html",
"https://lists.debian.org/debian-lts-announce/2018/06/msg00015.html",
"https://security.netapp.com/advisory/ntap-20180117-0002/",
"https://usn.ubuntu.com/3537-1/",
"https://usn.ubuntu.com/3537-2/",
"https://www.debian.org/security/2018/dsa-4091",
"https://www.debian.org/security/2018/dsa-4341"
],
"provider_metadata": {
"unresolved_ranges": [
{
"cpes": [
"cpe:2.3:a:mariadb:mariadb:*:*:*:*:*:*:*:*"
],
"vendor_product": "mariadb:mariadb",
"extracted_events": [
{
"range": [
{
"introduced": "5.5.0"
},
{
"fixed": "5.5.59"
},
{
"introduced": "10.0.0"
},
{
"fixed": "10.0.34"
},
{
"introduced": "10.1.0"
},
{
"fixed": "10.1.31"
},
{
"introduced": "10.2.0"
},
{
"fixed": "10.2.13"
}
],
"source": "CPE_RANGE"
}
]
},
{
"cpes": [
"cpe:2.3:a:netapp:active_iq_unified_manager:*:*:*:*:*:vmware_vsphere:*:*",
"cpe:2.3:a:netapp:active_iq_unified_manager:*:*:*:*:*:windows:*:*"
],
"vendor_product": "netapp:active_iq_unified_manager",
"extracted_events": [
{
"range": [
{
"introduced": "7.3"
},
{
"introduced": "9.5"
}
],
"source": "CPE_RANGE"
}
]
},
{
"cpes": [
"cpe:2.3:o:canonical:ubuntu_linux:12.04:*:*:*:-:*:*:*",
"cpe:2.3:o:canonical:ubuntu_linux:14.04:*:*:*:esm:*:*:*",
"cpe:2.3:o:canonical:ubuntu_linux:16.04:*:*:*:esm:*:*:*",
"cpe:2.3:o:canonical:ubuntu_linux:17.10:*:*:*:*:*:*:*"
],
"vendor_product": "canonical:ubuntu_linux",
"extracted_events": [
{
"range": [
{
"introduced": "12.04"
},
{
"last_affected": "12.04"
},
{
"introduced": "14.04"
},
{
"last_affected": "14.04"
},
{
"introduced": "16.04"
},
{
"last_affected": "16.04"
},
{
"introduced": "17.10"
},
{
"last_affected": "17.10"
}
],
"source": "CPE_STRING"
}
]
},
{
"cpes": [
"cpe:2.3:o:debian:debian_linux:7.0:*:*:*:*:*:*:*",
"cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:*",
"cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:*"
],
"vendor_product": "debian:debian_linux",
"extracted_events": [
{
"range": [
{
"introduced": "7.0"
},
{
"last_affected": "7.0"
},
{
"introduced": "8.0"
},
{
"last_affected": "8.0"
},
{
"introduced": "9.0"
},
{
"last_affected": "9.0"
}
],
"source": "CPE_STRING"
}
]
},
{
"cpes": [
"cpe:2.3:o:redhat:enterprise_linux_desktop:7.0:*:*:*:*:*:*:*"
],
"vendor_product": "redhat:enterprise_linux_desktop",
"extracted_events": [
{
"range": [
{
"introduced": "7.0"
},
{
"last_affected": "7.0"
}
],
"source": "CPE_STRING"
}
]
},
{
"cpes": [
"cpe:2.3:o:redhat:enterprise_linux_eus:7.5:*:*:*:*:*:*:*",
"cpe:2.3:o:redhat:enterprise_linux_eus:7.6:*:*:*:*:*:*:*",
"cpe:2.3:o:redhat:enterprise_linux_eus:7.7:*:*:*:*:*:*:*"
],
"vendor_product": "redhat:enterprise_linux_eus",
"extracted_events": [
{
"range": [
{
"introduced": "7.5"
},
{
"last_affected": "7.5"
},
{
"introduced": "7.6"
},
{
"last_affected": "7.6"
},
{
"introduced": "7.7"
},
{
"last_affected": "7.7"
}
],
"source": "CPE_STRING"
}
]
},
{
"cpes": [
"cpe:2.3:o:redhat:enterprise_linux_server:7.0:*:*:*:*:*:*:*"
],
"vendor_product": "redhat:enterprise_linux_server",
"extracted_events": [
{
"range": [
{
"introduced": "7.0"
},
{
"last_affected": "7.0"
}
],
"source": "CPE_STRING"
}
]
},
{
"cpes": [
"cpe:2.3:o:redhat:enterprise_linux_server_aus:7.6:*:*:*:*:*:*:*",
"cpe:2.3:o:redhat:enterprise_linux_server_aus:7.7:*:*:*:*:*:*:*"
],
"vendor_product": "redhat:enterprise_linux_server_aus",
"extracted_events": [
{
"range": [
{
"introduced": "7.6"
},
{
"last_affected": "7.6"
},
{
"introduced": "7.7"
},
{
"last_affected": "7.7"
}
],
"source": "CPE_STRING"
}
]
},
{
"cpes": [
"cpe:2.3:o:redhat:enterprise_linux_server_tus:7.6:*:*:*:*:*:*:*",
"cpe:2.3:o:redhat:enterprise_linux_server_tus:7.7:*:*:*:*:*:*:*"
],
"vendor_product": "redhat:enterprise_linux_server_tus",
"extracted_events": [
{
"range": [
{
"introduced": "7.6"
},
{
"last_affected": "7.6"
},
{
"introduced": "7.7"
},
{
"last_affected": "7.7"
}
],
"source": "CPE_STRING"
}
]
},
{
"cpes": [
"cpe:2.3:o:redhat:enterprise_linux_workstation:7.0:*:*:*:*:*:*:*"
],
"vendor_product": "redhat:enterprise_linux_workstation",
"extracted_events": [
{
"range": [
{
"introduced": "7.0"
},
{
"last_affected": "7.0"
}
],
"source": "CPE_STRING"
}
]
},
{
"cpes": [
"cpe:2.3:a:redhat:openstack:12:*:*:*:*:*:*:*"
],
"vendor_product": "redhat:openstack",
"extracted_events": [
{
"range": [
{
"introduced": "12"
},
{
"last_affected": "12"
}
],
"source": "CPE_STRING"
}
]
}
]
}
},
"related_cves": [
{
"value": "CVE-2018-2668",
"evidence": "/id"
}
],
"security_relevant": true,
"severity_evidence": "/severity/0/score"
},
"source_id": "core-osv",
"document_id": 443386,
"published_at": "2018-01-18T02:29:22.257+00:00"
}