CVE-2017-3331 - Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: DML). The support

CVE-2017-3331

Summary

Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: DML). The supported version that is affected is 5.7.11 to 5.7.17. Easily "exploitable" vulnerability allows low privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.0 Base Score 6.5 (Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H).

References

Vulnerable Configurations

cpe:2.3:a:oracle:mysql:5.7.11:*:*:*:*:*:*:*
cpe:2.3:a:oracle:mysql:5.7.11:*:*:*:*:*:*:*
cpe:2.3:a:oracle:mysql:5.7.12:*:*:*:*:*:*:*
cpe:2.3:a:oracle:mysql:5.7.12:*:*:*:*:*:*:*
cpe:2.3:a:oracle:mysql:5.7.13:*:*:*:*:*:*:*
cpe:2.3:a:oracle:mysql:5.7.13:*:*:*:*:*:*:*
cpe:2.3:a:oracle:mysql:5.7.14:*:*:*:*:*:*:*
cpe:2.3:a:oracle:mysql:5.7.14:*:*:*:*:*:*:*
cpe:2.3:a:oracle:mysql:5.7.15:*:*:*:*:*:*:*
cpe:2.3:a:oracle:mysql:5.7.15:*:*:*:*:*:*:*
cpe:2.3:a:oracle:mysql:5.7.16:*:*:*:*:*:*:*
cpe:2.3:a:oracle:mysql:5.7.16:*:*:*:*:*:*:*
cpe:2.3:a:oracle:mysql:5.7.17:*:*:*:*:*:*:*
cpe:2.3:a:oracle:mysql:5.7.17:*:*:*:*:*:*:*

CVSS

Base:	4.0 (as of 03-10-2019 - 00:03)
Impact:
Exploitability:

CWE

NVD-CWE-noinfo

CAPEC

Access

Vector	Complexity	Authentication
NETWORK	LOW	SINGLE

Impact

Confidentiality	Integrity	Availability
NONE	NONE	PARTIAL

cvss-vector via4

AV:N/AC:L/Au:S/C:N/I:N/A:P

redhat via4

advisories

rhsa

id	RHSA-2017:2886

rpms

rh-mysql57-mysql-0:5.7.19-6.el6
rh-mysql57-mysql-0:5.7.19-6.el7
rh-mysql57-mysql-common-0:5.7.19-6.el6
rh-mysql57-mysql-common-0:5.7.19-6.el7
rh-mysql57-mysql-config-0:5.7.19-6.el6
rh-mysql57-mysql-config-0:5.7.19-6.el7
rh-mysql57-mysql-debuginfo-0:5.7.19-6.el6
rh-mysql57-mysql-debuginfo-0:5.7.19-6.el7
rh-mysql57-mysql-devel-0:5.7.19-6.el6
rh-mysql57-mysql-devel-0:5.7.19-6.el7
rh-mysql57-mysql-errmsg-0:5.7.19-6.el6
rh-mysql57-mysql-errmsg-0:5.7.19-6.el7
rh-mysql57-mysql-server-0:5.7.19-6.el6
rh-mysql57-mysql-server-0:5.7.19-6.el7
rh-mysql57-mysql-test-0:5.7.19-6.el6
rh-mysql57-mysql-test-0:5.7.19-6.el7

refmap via4

bid	97772
confirm	http://www.oracle.com/technetwork/security-advisory/cpuapr2017-3236618.html
sectrack	1038287

Last major update

03-10-2019 - 00:03

Published

24-04-2017 - 19:59

Last modified

03-10-2019 - 00:03