Published: 19/10/2017 Updated: 12/03/2019

CVSS v2 Base Score: 4 | Impact Score: 2.9 | Exploitability Score: 8

CVSS v3 Base Score: 4.9 | Impact Score: 3.6 | Exploitability Score: 1.2

VMScore: 356

Vector: AV:N/AC:L/Au:S/C:N/I:N/A:P

Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Optimizer). Supported versions that are affected are 5.6.37 and previous versions and 5.7.19 and previous versions. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.0 Base Score 4.9 (Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H).

Vulnerable Product	Search on Vulmon	Subscribe to Product
oracle mysql

Debian Bug report logs - #878398 Security fixes from the October 2017 CPU Package: src:mysql-57; Maintainer for src:mysql-57 is Debian MySQL Maintainers <pkg-mysql-maint@listsaliothdebianorg>; Reported by: "Norvald H Ryeng" <norvaldryeng@oraclecom> Date: Fri, 13 Oct 2017 10:51:01 UTC Severity: grave Tags: fix ...

Several security issues were fixed in MySQL ...

Synopsis Important: rh-mysql57-mysql security update Type/Severity Security Advisory: Important Topic An update for rh-mysql57-mysql is now available for Red Hat Software CollectionsRed Hat Product Security has rated this update as having a security impact of Important A Common Vulnerability Scoring Syste ...

Synopsis Important: rh-mysql56-mysql security update Type/Severity Security Advisory: Important Topic An update for rh-mysql56-mysql is now available for Red Hat Software CollectionsRed Hat Product Security has rated this update as having a security impact of Important A Common Vulnerability Scoring Syste ...

Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Client programs) Easily exploitable vulnerability allows low privileged attacker with network access via multiple protocols to compromise MySQL Server Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all MyS ...

Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Optimizer) Supported versions that are affected are 5637 and earlier and 5719 and earlier Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server Successful attacks of this vulnerab ...

NVD-CWE-noinfo http://www.oracle.com/technetwork/security-advisory/cpuoct2017-3236626.html http://www.securitytracker.com/id/1039597 http://www.securityfocus.com/bid/101337 https://security.netapp.com/advisory/ntap-20171019-0002/https://access.redhat.com/errata/RHSA-2017:3265 https://access.redhat.com/errata/RHSA-2017:3442 https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=878398 https://usn.ubuntu.com/3459-1/https://nvd.nist.gov

CVE-2017-10227

Vulnerability Summary

Vendor Advisories

References

Vulmon Search

About

Products

Connect