Published: 08/08/2017 Updated: 03/10/2019

CVSS v2 Base Score: 4.9 | Impact Score: 4.9 | Exploitability Score: 6.8

CVSS v3 Base Score: 4.2 | Impact Score: 2.5 | Exploitability Score: 1.6

VMScore: 436

Vector: AV:N/AC:M/Au:S/C:P/I:P/A:N

Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: DDL). Supported versions that are affected are 5.5.56 and previous versions, 5.6.36 and previous versions and 5.7.18 and previous versions. Difficult to exploit vulnerability allows low privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of MySQL Server accessible data as well as unauthorized read access to a subset of MySQL Server accessible data. CVSS 3.0 Base Score 4.2 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:H/PR:L/UI:N/S:U/C:L/I:L/A:N).

Vulnerable Product	Search on Vulmon	Subscribe to Product
oracle mysql
debian debian linux 8.0

Synopsis Important: rh-mysql56-mysql security and bug fix update Type/Severity Security Advisory: Important Topic An update for rh-mysql56-mysql is now available for Red Hat Software CollectionsRed Hat Product Security has rated this update as having a security impact of Important A Common Vulnerability S ...

Synopsis Important: rh-mysql57-mysql security and bug fix update Type/Severity Security Advisory: Important Topic An update for rh-mysql57-mysql is now available for Red Hat Software CollectionsRed Hat Product Security has rated this update as having a security impact of Important A Common Vulnerability S ...

Debian Bug report logs - #868788 Security fixes from the July 2017 CPU Package: src:mysql-55; Maintainer for src:mysql-55 is Debian MySQL Maintainers <pkg-mysql-maint@listsaliothdebianorg>; Reported by: Lars Tangvald <larstangvald@oraclecom> Date: Tue, 18 Jul 2017 16:51:04 UTC Severity: grave Tags: fixed-upstr ...

Debian Bug report logs - #868798 Security fixes from the July 2017 CPU Package: src:mysql-57; Maintainer for src:mysql-57 is Debian MySQL Maintainers <pkg-mysql-maint@listsaliothdebianorg>; Reported by: Lars Tangvald <larstangvald@oraclecom> Date: Tue, 18 Jul 2017 18:30:02 UTC Severity: grave Tags: fixed-upstr ...

Several security issues were fixed in MySQL ...

Several issues have been discovered in the MySQL database server The vulnerabilities are addressed by upgrading MySQL to the new upstream version 5557, which includes additional changes, such as performance improvements, bug fixes, new features, and possibly incompatible changes Please see the MySQL 55 Release Notes and Oracle's Critical Patch ...

Server: Charsets unspecified vulnerability (CPU Jul 2017):Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Charsets) Supported versions that are affected are 5556 and earlier, 5636 and earlier and 5718 and earlier Difficult to exploit vulnerability allows high privileged attacker with network access via mul ...

Server: Charsets unspecified vulnerability (CPU Jul 2017)Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Charsets) Supported versions that are affected are 5556 and earlier, 5636 and earlier and 5718 and earlier Difficult to exploit vulnerability allows high privileged attacker with network access via mult ...

Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: DDL) Supported versions that are affected are 5556 and earlier, 5636 and earlier and 5718 and earlier Difficult to exploit vulnerability allows low privileged attacker with network access via multiple protocols to compromise MySQL Server Successful attacks o ...

NVD-CWE-noinfo http://www.oracle.com/technetwork/security-advisory/cpujul2017-3236622.html http://www.securitytracker.com/id/1038928 http://www.securityfocus.com/bid/99805 http://www.debian.org/security/2017/dsa-3922 https://access.redhat.com/errata/RHSA-2017:2886 https://access.redhat.com/errata/RHSA-2017:2787 https://nvd.nist.gov https://access.redhat.com/errata/RHSA-2017:2787 https://usn.ubuntu.com/3357-1/

Get Started

CVE-2017-3652

Vulnerability Summary

Vendor Advisories

References

Vulmon Search

About

Products

Connect