3.5
CVSSv2

CVE-2017-3320

Published: 27/01/2017 Updated: 03/10/2019
CVSS v2 Base Score: 3.5 | Impact Score: 2.9 | Exploitability Score: 6.8
CVSS v3 Base Score: 2.4 | Impact Score: 1.4 | Exploitability Score: 0.9
VMScore: 312
Vector: AV:N/AC:M/Au:S/C:P/I:N/A:N

Vulnerability Summary

Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Security: Encryption). Supported versions that are affected are 5.7.16 and previous versions. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks require human interaction from a person other than the attacker. Successful attacks of this vulnerability can result in unauthorized read access to a subset of MySQL Server accessible data. CVSS v3.0 Base Score 2.4 (Confidentiality impacts).

Vulnerability Trend

Vulnerable Product Search on Vulmon Subscribe to Product

oracle mysql

Vendor Advisories

Synopsis Important: rh-mysql57-mysql security and bug fix update Type/Severity Security Advisory: Important Topic An update for rh-mysql57-mysql is now available for Red Hat Software CollectionsRed Hat Product Security has rated this update as having a security impact of Important A Common Vulnerability S ...
Debian Bug report logs - #851235 Security fixes from the January 2017 CPU Package: src:mysql-57; Maintainer for src:mysql-57 is Debian MySQL Maintainers <pkg-mysql-maint@listsaliothdebianorg>; Reported by: "Norvald H Ryeng" <norvaldryeng@oraclecom> Date: Fri, 13 Jan 2017 08:24:07 UTC Severity: grave Tags: fix ...
Several security issues were fixed in MySQL ...
Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Security: Encryption) Supported versions that are affected are 5716 and earlier Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server Successful attacks require human interaction fr ...