3.5
CVSSv2

CVE-2017-3653

Published: 08/08/2017 Updated: 21/09/2022
CVSS v2 Base Score: 3.5 | Impact Score: 2.9 | Exploitability Score: 6.8
CVSS v3 Base Score: 3.1 | Impact Score: 1.4 | Exploitability Score: 1.6
VMScore: 312
Vector: AV:N/AC:M/Au:S/C:N/I:P/A:N

Vulnerability Summary

Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: DDL). Supported versions that are affected are 5.5.56 and previous versions, 5.6.36 and previous versions and 5.7.18 and previous versions. Difficult to exploit vulnerability allows low privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of MySQL Server accessible data. CVSS 3.0 Base Score 3.1 (Integrity impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:H/PR:L/UI:N/S:U/C:N/I:L/A:N).

Vulnerability Trend

Vulnerable Product Search on Vulmon Subscribe to Product

oracle mysql

debian debian linux 8.0

debian debian linux 9.0

redhat enterprise linux desktop 7.0

redhat enterprise linux workstation 7.0

redhat enterprise linux server 7.0

redhat enterprise linux eus 7.5

redhat enterprise linux server tus 7.6

redhat enterprise linux server aus 7.6

redhat enterprise linux eus 7.6

redhat openstack 12

redhat enterprise linux server aus 7.7

redhat enterprise linux eus 7.7

redhat enterprise linux server tus 7.7

mariadb mariadb

Vendor Advisories

Several security issues were fixed in MySQL ...
Several security issues were fixed in MySQL ...
Debian Bug report logs - #868788 Security fixes from the July 2017 CPU Package: src:mysql-55; Maintainer for src:mysql-55 is Debian MySQL Maintainers <pkg-mysql-maint@listsaliothdebianorg>; Reported by: Lars Tangvald <larstangvald@oraclecom> Date: Tue, 18 Jul 2017 16:51:04 UTC Severity: grave Tags: fixed-upstr ...
Debian Bug report logs - #884065 mariadb-102 CVE-2017-10378 CVE-2017-10268 CVE-2017-15365 CVE-2017-3636 CVE-2017-3641 CVE-2017-3653 CVE-2017-10320 CVE-2017-10365 CVE-2017-10379 CVE-2017-10384 CVE-2017-10286 CVE-2017-3257 Package: src:mariadb-102; Maintainer for src:mariadb-102 is (unknown); Reported by: Salvatore Bonaccorso < ...
Debian Bug report logs - #868798 Security fixes from the July 2017 CPU Package: src:mysql-57; Maintainer for src:mysql-57 is Debian MySQL Maintainers <pkg-mysql-maint@listsaliothdebianorg>; Reported by: Lars Tangvald <larstangvald@oraclecom> Date: Tue, 18 Jul 2017 18:30:02 UTC Severity: grave Tags: fixed-upstr ...
Several issues have been discovered in the MariaDB database server The vulnerabilities are addressed by upgrading MariaDB to the new upstream version 10126 Please see the MariaDB 101 Release Notes for further details: mariadbcom/kb/en/mariadb/mariadb-10124-release-notes/ mariadbcom/kb/en/mariadb/mariadb-10125-release-notes/ ...
Several issues have been discovered in the MySQL database server The vulnerabilities are addressed by upgrading MySQL to the new upstream version 5557, which includes additional changes, such as performance improvements, bug fixes, new features, and possibly incompatible changes Please see the MySQL 55 Release Notes and Oracle's Critical Patch ...
Synopsis Moderate: Red Hat Enterprise Linux OpenStack Platform security update Type/Severity Security Advisory: Moderate Topic An update is now available for Red Hat OpenStack Platform 120 (Pike)Red Hat Product Security has rated this update as having a security impact of Moderate A Common Vulnerability ...
Synopsis Moderate: mariadb security and bug fix update Type/Severity Security Advisory: Moderate Topic An update for mariadb is now available for Red Hat Enterprise Linux 7Red Hat Product Security has rated this update as having a security impact of Moderate A Common Vulnerability Scoring System (CVSS) ba ...
Synopsis Moderate: rh-mariadb101-mariadb and rh-mariadb101-galera security and bug fix update Type/Severity Security Advisory: Moderate Topic An update for rh-mariadb101-mariadb and rh-mariadb101-galera is now available for Red Hat Software CollectionsRed Hat Product Security has rated this update as havin ...
Synopsis Important: rh-mysql56-mysql security and bug fix update Type/Severity Security Advisory: Important Topic An update for rh-mysql56-mysql is now available for Red Hat Software CollectionsRed Hat Product Security has rated this update as having a security impact of Important A Common Vulnerability S ...
Synopsis Moderate: rh-mariadb100-mariadb security update Type/Severity Security Advisory: Moderate Topic An update for rh-mariadb100-mariadb is now available for Red Hat Software CollectionsRed Hat Product Security has rated this update as having a security impact of Moderate A Common Vulnerability Scorin ...
Synopsis Important: rh-mysql57-mysql security and bug fix update Type/Severity Security Advisory: Important Topic An update for rh-mysql57-mysql is now available for Red Hat Software CollectionsRed Hat Product Security has rated this update as having a security impact of Important A Common Vulnerability S ...
Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Optimizer) Supported versions that are affected are 5557 and earlier Easily exploitable vulnerability allows low privileged attacker with network access via multiple protocols to compromise MySQL Server Successful attacks of this vulnerability can result in unau ...
Server: Charsets unspecified vulnerability (CPU Jul 2017):Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Charsets) Supported versions that are affected are 5556 and earlier, 5636 and earlier and 5718 and earlier Difficult to exploit vulnerability allows high privileged attacker with network access via mul ...
Server: Charsets unspecified vulnerability (CPU Jul 2017)Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Charsets) Supported versions that are affected are 5556 and earlier, 5636 and earlier and 5718 and earlier Difficult to exploit vulnerability allows high privileged attacker with network access via mult ...
Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: DDL) Supported versions that are affected are 5556 and earlier, 5636 and earlier and 5718 and earlier Difficult to exploit vulnerability allows low privileged attacker with network access via multiple protocols to compromise MySQL Server Successful attacks o ...