csaf_redhat - RHSA-2017:2886

RHSA-2017:2886

Vulnerability from csaf_redhat

Published

2017-10-12 07:53

Modified

2025-11-08 04:15

Summary

Red Hat Security Advisory: rh-mysql57-mysql security and bug fix update

Notes

Topic

An update for rh-mysql57-mysql is now available for Red Hat Software Collections. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.

Details

MySQL is a multi-user, multi-threaded SQL database server. It consists of the MySQL server daemon, mysqld, and many client programs. The following packages have been upgraded to a later upstream version: rh-mysql57-mysql (5.7.19). Security Fix(es): * An integer overflow flaw leading to a buffer overflow was found in the way MySQL parsed connection handshake packets. An unauthenticated remote attacker with access to the MySQL port could use this flaw to crash the mysqld daemon. (CVE-2017-3599) * It was discovered that the mysql and mysqldump tools did not correctly handle database and table names containing newline characters. A database user with privileges to create databases or tables could cause the mysql command to execute arbitrary shell or SQL commands while restoring database backup created using the mysqldump tool. (CVE-2016-5483, CVE-2017-3600) * It was discovered that the mysqld_safe script honored the ledir option value set in a MySQL configuration file. A user able to modify one of the MySQL configuration files could use this flaw to escalate their privileges to root. (CVE-2017-3291) * Multiple flaws were found in the way the mysqld_safe script handled creation of error log file. The mysql operating system user could use these flaws to escalate their privileges to root. (CVE-2017-3312) * This update fixes several vulnerabilities in the MySQL database server. Information about these flaws can be found on the Oracle Critical Patch Update Advisory pages listed in the References section. (CVE-2016-8327, CVE-2017-3238, CVE-2017-3244, CVE-2017-3251, CVE-2017-3256, CVE-2017-3257, CVE-2017-3258, CVE-2017-3273, CVE-2017-3308, CVE-2017-3309, CVE-2017-3313, CVE-2017-3317, CVE-2017-3318, CVE-2017-3319, CVE-2017-3320, CVE-2017-3331, CVE-2017-3450, CVE-2017-3453, CVE-2017-3454, CVE-2017-3455, CVE-2017-3456, CVE-2017-3457, CVE-2017-3458, CVE-2017-3459, CVE-2017-3460, CVE-2017-3461, CVE-2017-3462, CVE-2017-3463, CVE-2017-3464, CVE-2017-3465, CVE-2017-3467, CVE-2017-3468, CVE-2017-3529, CVE-2017-3633, CVE-2017-3634, CVE-2017-3637, CVE-2017-3638, CVE-2017-3639, CVE-2017-3640, CVE-2017-3641, CVE-2017-3642, CVE-2017-3643, CVE-2017-3644, CVE-2017-3645, CVE-2017-3646, CVE-2017-3647, CVE-2017-3648, CVE-2017-3649, CVE-2017-3650, CVE-2017-3651, CVE-2017-3652, CVE-2017-3653) Bug Fix(es): * Prior to this update, the scl macros were not set for the rh-mysql57-mysqld@.service file, which consequently made the service file unusable. This bug has been fixed, and rh-mysql57-mysqld@.service now works as expected. (BZ#1452511) * Previously, the md5() function was blocked by MySQL in FIPS mode because the MD5 hash algorithm is considered insecure. Consequently, the mysqld daemon failed with error messages when FIPS mode was enabled. With this update, md5() is allowed in FIPS mode for non-security operations. Note that users are able to use md5() for security purposes but such usage is not supported by Red Hat. (BZ#1452514)

This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.

JSON

To clipboard

{
  "document": {
    "aggregate_severity": {
      "namespace": "https://access.redhat.com/security/updates/classification/",
      "text": "Important"
    },
    "category": "csaf_security_advisory",
    "csaf_version": "2.0",
    "distribution": {
      "text": "Copyright \u00a9 Red Hat, Inc. All rights reserved.",
      "tlp": {
        "label": "WHITE",
        "url": "https://www.first.org/tlp/"
      }
    },
    "lang": "en",
    "notes": [
      {
        "category": "summary",
        "text": "An update for rh-mysql57-mysql is now available for Red Hat Software Collections.\n\nRed Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.",
        "title": "Topic"
      },
      {
        "category": "general",
        "text": "MySQL is a multi-user, multi-threaded SQL database server. It consists of the MySQL server daemon, mysqld, and many client programs.\n\nThe following packages have been upgraded to a later upstream version: rh-mysql57-mysql (5.7.19).\n\nSecurity Fix(es):\n\n* An integer overflow flaw leading to a buffer overflow was found in the way MySQL parsed connection handshake packets. An unauthenticated remote attacker with access to the MySQL port could use this flaw to crash the mysqld daemon. (CVE-2017-3599)\n\n* It was discovered that the mysql and mysqldump tools did not correctly handle database and table names containing newline characters. A database user with privileges to create databases or tables could cause the mysql command to execute arbitrary shell or SQL commands while restoring database backup created using the mysqldump tool. (CVE-2016-5483, CVE-2017-3600)\n\n* It was discovered that the mysqld_safe script honored the ledir option value set in a MySQL configuration file. A user able to modify one of the MySQL configuration files could use this flaw to escalate their privileges to root. (CVE-2017-3291)\n\n* Multiple flaws were found in the way the mysqld_safe script handled creation of error log file. The mysql operating system user could use these flaws to escalate their privileges to root. (CVE-2017-3312)\n\n* This update fixes several vulnerabilities in the MySQL database server. Information about these flaws can be found on the Oracle Critical Patch Update Advisory pages listed in the References section. (CVE-2016-8327, CVE-2017-3238, CVE-2017-3244, CVE-2017-3251, CVE-2017-3256, CVE-2017-3257, CVE-2017-3258, CVE-2017-3273, CVE-2017-3308, CVE-2017-3309, CVE-2017-3313, CVE-2017-3317, CVE-2017-3318, CVE-2017-3319, CVE-2017-3320, CVE-2017-3331, CVE-2017-3450, CVE-2017-3453, CVE-2017-3454, CVE-2017-3455, CVE-2017-3456, CVE-2017-3457, CVE-2017-3458, CVE-2017-3459, CVE-2017-3460, CVE-2017-3461, CVE-2017-3462, CVE-2017-3463, CVE-2017-3464, CVE-2017-3465, CVE-2017-3467, CVE-2017-3468, CVE-2017-3529, CVE-2017-3633, CVE-2017-3634, CVE-2017-3637, CVE-2017-3638, CVE-2017-3639, CVE-2017-3640, CVE-2017-3641, CVE-2017-3642, CVE-2017-3643, CVE-2017-3644, CVE-2017-3645, CVE-2017-3646, CVE-2017-3647, CVE-2017-3648, CVE-2017-3649, CVE-2017-3650, CVE-2017-3651, CVE-2017-3652, CVE-2017-3653)\n\nBug Fix(es):\n\n* Prior to this update, the scl macros were not set for the rh-mysql57-mysqld@.service file, which consequently made the service file unusable. This bug has been fixed, and rh-mysql57-mysqld@.service now works as expected. (BZ#1452511)\n\n* Previously, the md5() function was blocked by MySQL in FIPS mode because the MD5 hash algorithm is considered insecure. Consequently, the mysqld daemon failed with error messages when FIPS mode was enabled. With this update, md5() is allowed in FIPS mode for non-security operations. Note that users are able to use md5() for security purposes but such usage is not supported by Red Hat. (BZ#1452514)",
        "title": "Details"
      },
      {
        "category": "legal_disclaimer",
        "text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.",
        "title": "Terms of Use"
      }
    ],
    "publisher": {
      "category": "vendor",
      "contact_details": "https://access.redhat.com/security/team/contact/",
      "issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.",
      "name": "Red Hat Product Security",
      "namespace": "https://www.redhat.com"
    },
    "references": [
      {
        "category": "self",
        "summary": "https://access.redhat.com/errata/RHSA-2017:2886",
        "url": "https://access.redhat.com/errata/RHSA-2017:2886"
      },
      {
        "category": "external",
        "summary": "https://access.redhat.com/security/updates/classification/#important",
        "url": "https://access.redhat.com/security/updates/classification/#important"
      },
      {
        "category": "external",
        "summary": "http://www.oracle.com/technetwork/security-advisory/cpujan2017-2881727.html#AppendixMSQL",
        "url": "http://www.oracle.com/technetwork/security-advisory/cpujan2017-2881727.html#AppendixMSQL"
      },
      {
        "category": "external",
        "summary": "http://www.oracle.com/technetwork/security-advisory/cpuapr2017-3236618.html#AppendixMSQL",
        "url": "http://www.oracle.com/technetwork/security-advisory/cpuapr2017-3236618.html#AppendixMSQL"
      },
      {
        "category": "external",
        "summary": "http://www.oracle.com/technetwork/security-advisory/cpujul2017-3236622.html#AppendixMSQL",
        "url": "http://www.oracle.com/technetwork/security-advisory/cpujul2017-3236622.html#AppendixMSQL"
      },
      {
        "category": "external",
        "summary": "https://dev.mysql.com/doc/relnotes/mysql/5.7/en/news-5-7-17.html",
        "url": "https://dev.mysql.com/doc/relnotes/mysql/5.7/en/news-5-7-17.html"
      },
      {
        "category": "external",
        "summary": "https://dev.mysql.com/doc/relnotes/mysql/5.7/en/news-5-7-18.html",
        "url": "https://dev.mysql.com/doc/relnotes/mysql/5.7/en/news-5-7-18.html"
      },
      {
        "category": "external",
        "summary": "https://dev.mysql.com/doc/relnotes/mysql/5.7/en/news-5-7-19.html",
        "url": "https://dev.mysql.com/doc/relnotes/mysql/5.7/en/news-5-7-19.html"
      },
      {
        "category": "external",
        "summary": "1414133",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1414133"
      },
      {
        "category": "external",
        "summary": "1414337",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1414337"
      },
      {
        "category": "external",
        "summary": "1414338",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1414338"
      },
      {
        "category": "external",
        "summary": "1414342",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1414342"
      },
      {
        "category": "external",
        "summary": "1414343",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1414343"
      },
      {
        "category": "external",
        "summary": "1414345",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1414345"
      },
      {
        "category": "external",
        "summary": "1414350",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1414350"
      },
      {
        "category": "external",
        "summary": "1414351",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1414351"
      },
      {
        "category": "external",
        "summary": "1414352",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1414352"
      },
      {
        "category": "external",
        "summary": "1414353",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1414353"
      },
      {
        "category": "external",
        "summary": "1414355",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1414355"
      },
      {
        "category": "external",
        "summary": "1414357",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1414357"
      },
      {
        "category": "external",
        "summary": "1414358",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1414358"
      },
      {
        "category": "external",
        "summary": "1414360",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1414360"
      },
      {
        "category": "external",
        "summary": "1414429",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1414429"
      },
      {
        "category": "external",
        "summary": "1433010",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1433010"
      },
      {
        "category": "external",
        "summary": "1443358",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1443358"
      },
      {
        "category": "external",
        "summary": "1443359",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1443359"
      },
      {
        "category": "external",
        "summary": "1443362",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1443362"
      },
      {
        "category": "external",
        "summary": "1443363",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1443363"
      },
      {
        "category": "external",
        "summary": "1443365",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1443365"
      },
      {
        "category": "external",
        "summary": "1443366",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1443366"
      },
      {
        "category": "external",
        "summary": "1443368",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1443368"
      },
      {
        "category": "external",
        "summary": "1443369",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1443369"
      },
      {
        "category": "external",
        "summary": "1443371",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1443371"
      },
      {
        "category": "external",
        "summary": "1443372",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1443372"
      },
      {
        "category": "external",
        "summary": "1443374",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1443374"
      },
      {
        "category": "external",
        "summary": "1443375",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1443375"
      },
      {
        "category": "external",
        "summary": "1443376",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1443376"
      },
      {
        "category": "external",
        "summary": "1443377",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1443377"
      },
      {
        "category": "external",
        "summary": "1443378",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1443378"
      },
      {
        "category": "external",
        "summary": "1443379",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1443379"
      },
      {
        "category": "external",
        "summary": "1443380",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1443380"
      },
      {
        "category": "external",
        "summary": "1443382",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1443382"
      },
      {
        "category": "external",
        "summary": "1443385",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1443385"
      },
      {
        "category": "external",
        "summary": "1443386",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1443386"
      },
      {
        "category": "external",
        "summary": "1472682",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1472682"
      },
      {
        "category": "external",
        "summary": "1472683",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1472683"
      },
      {
        "category": "external",
        "summary": "1472684",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1472684"
      },
      {
        "category": "external",
        "summary": "1472687",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1472687"
      },
      {
        "category": "external",
        "summary": "1472688",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1472688"
      },
      {
        "category": "external",
        "summary": "1472689",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1472689"
      },
      {
        "category": "external",
        "summary": "1472692",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1472692"
      },
      {
        "category": "external",
        "summary": "1472693",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1472693"
      },
      {
        "category": "external",
        "summary": "1472695",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1472695"
      },
      {
        "category": "external",
        "summary": "1472697",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1472697"
      },
      {
        "category": "external",
        "summary": "1472698",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1472698"
      },
      {
        "category": "external",
        "summary": "1472700",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1472700"
      },
      {
        "category": "external",
        "summary": "1472701",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1472701"
      },
      {
        "category": "external",
        "summary": "1472703",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1472703"
      },
      {
        "category": "external",
        "summary": "1472704",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1472704"
      },
      {
        "category": "external",
        "summary": "1472705",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1472705"
      },
      {
        "category": "external",
        "summary": "1472706",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1472706"
      },
      {
        "category": "external",
        "summary": "1472708",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1472708"
      },
      {
        "category": "external",
        "summary": "1472710",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1472710"
      },
      {
        "category": "external",
        "summary": "1472711",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1472711"
      },
      {
        "category": "self",
        "summary": "Canonical URL",
        "url": "https://security.access.redhat.com/data/csaf/v2/advisories/2017/rhsa-2017_2886.json"
      }
    ],
    "title": "Red Hat Security Advisory: rh-mysql57-mysql security and bug fix update",
    "tracking": {
      "current_release_date": "2025-11-08T04:15:33+00:00",
      "generator": {
        "date": "2025-11-08T04:15:33+00:00",
        "engine": {
          "name": "Red Hat SDEngine",
          "version": "4.6.12"
        }
      },
      "id": "RHSA-2017:2886",
      "initial_release_date": "2017-10-12T07:53:15+00:00",
      "revision_history": [
        {
          "date": "2017-10-12T07:53:15+00:00",
          "number": "1",
          "summary": "Initial version"
        },
        {
          "date": "2017-10-12T07:53:15+00:00",
          "number": "2",
          "summary": "Last updated version"
        },
        {
          "date": "2025-11-08T04:15:33+00:00",
          "number": "3",
          "summary": "Last generated version"
        }
      ],
      "status": "final",
      "version": "3"
    }
  },
  "product_tree": {
    "branches": [
      {
        "branches": [
          {
            "branches": [
              {
                "category": "product_name",
                "name": "Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 6)",
                "product": {
                  "name": "Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 6)",
                  "product_id": "6Server-RHSCL-2.4",
                  "product_identification_helper": {
                    "cpe": "cpe:/a:redhat:rhel_software_collections:2::el6"
                  }
                }
              },
              {
                "category": "product_name",
                "name": "Red Hat Software Collections for Red Hat Enterprise Linux Workstation (v. 6)",
                "product": {
                  "name": "Red Hat Software Collections for Red Hat Enterprise Linux Workstation (v. 6)",
                  "product_id": "6Workstation-RHSCL-2.4",
                  "product_identification_helper": {
                    "cpe": "cpe:/a:redhat:rhel_software_collections:2::el6"
                  }
                }
              },
              {
                "category": "product_name",
                "name": "Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 6.7)",
                "product": {
                  "name": "Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 6.7)",
                  "product_id": "6Server-RHSCL-2.4-6.7.Z",
                  "product_identification_helper": {
                    "cpe": "cpe:/a:redhat:rhel_software_collections:2::el6"
                  }
                }
              },
              {
                "category": "product_name",
                "name": "Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 7)",
                "product": {
                  "name": "Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 7)",
                  "product_id": "7Server-RHSCL-2.4",
                  "product_identification_helper": {
                    "cpe": "cpe:/a:redhat:rhel_software_collections:2::el7"
                  }
                }
              },
              {
                "category": "product_name",
                "name": "Red Hat Software Collections for Red Hat Enterprise Linux Workstation (v. 7)",
                "product": {
                  "name": "Red Hat Software Collections for Red Hat Enterprise Linux Workstation (v. 7)",
                  "product_id": "7Workstation-RHSCL-2.4",
                  "product_identification_helper": {
                    "cpe": "cpe:/a:redhat:rhel_software_collections:2::el7"
                  }
                }
              },
              {
                "category": "product_name",
                "name": "Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.3)",
                "product": {
                  "name": "Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.3)",
                  "product_id": "7Server-RHSCL-2.4-7.3.Z",
                  "product_identification_helper": {
                    "cpe": "cpe:/a:redhat:rhel_software_collections:2::el7"
                  }
                }
              }
            ],
            "category": "product_family",
            "name": "Red Hat Software Collections"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "rh-mysql57-mysql-devel-0:5.7.19-6.el6.x86_64",
                "product": {
                  "name": "rh-mysql57-mysql-devel-0:5.7.19-6.el6.x86_64",
                  "product_id": "rh-mysql57-mysql-devel-0:5.7.19-6.el6.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/rh-mysql57-mysql-devel@5.7.19-6.el6?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "rh-mysql57-mysql-config-0:5.7.19-6.el6.x86_64",
                "product": {
                  "name": "rh-mysql57-mysql-config-0:5.7.19-6.el6.x86_64",
                  "product_id": "rh-mysql57-mysql-config-0:5.7.19-6.el6.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/rh-mysql57-mysql-config@5.7.19-6.el6?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "rh-mysql57-mysql-test-0:5.7.19-6.el6.x86_64",
                "product": {
                  "name": "rh-mysql57-mysql-test-0:5.7.19-6.el6.x86_64",
                  "product_id": "rh-mysql57-mysql-test-0:5.7.19-6.el6.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/rh-mysql57-mysql-test@5.7.19-6.el6?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "rh-mysql57-mysql-errmsg-0:5.7.19-6.el6.x86_64",
                "product": {
                  "name": "rh-mysql57-mysql-errmsg-0:5.7.19-6.el6.x86_64",
                  "product_id": "rh-mysql57-mysql-errmsg-0:5.7.19-6.el6.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/rh-mysql57-mysql-errmsg@5.7.19-6.el6?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "rh-mysql57-mysql-server-0:5.7.19-6.el6.x86_64",
                "product": {
                  "name": "rh-mysql57-mysql-server-0:5.7.19-6.el6.x86_64",
                  "product_id": "rh-mysql57-mysql-server-0:5.7.19-6.el6.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/rh-mysql57-mysql-server@5.7.19-6.el6?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "rh-mysql57-mysql-debuginfo-0:5.7.19-6.el6.x86_64",
                "product": {
                  "name": "rh-mysql57-mysql-debuginfo-0:5.7.19-6.el6.x86_64",
                  "product_id": "rh-mysql57-mysql-debuginfo-0:5.7.19-6.el6.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/rh-mysql57-mysql-debuginfo@5.7.19-6.el6?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "rh-mysql57-mysql-0:5.7.19-6.el6.x86_64",
                "product": {
                  "name": "rh-mysql57-mysql-0:5.7.19-6.el6.x86_64",
                  "product_id": "rh-mysql57-mysql-0:5.7.19-6.el6.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/rh-mysql57-mysql@5.7.19-6.el6?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "rh-mysql57-mysql-common-0:5.7.19-6.el6.x86_64",
                "product": {
                  "name": "rh-mysql57-mysql-common-0:5.7.19-6.el6.x86_64",
                  "product_id": "rh-mysql57-mysql-common-0:5.7.19-6.el6.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/rh-mysql57-mysql-common@5.7.19-6.el6?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "rh-mysql57-mysql-devel-0:5.7.19-6.el7.x86_64",
                "product": {
                  "name": "rh-mysql57-mysql-devel-0:5.7.19-6.el7.x86_64",
                  "product_id": "rh-mysql57-mysql-devel-0:5.7.19-6.el7.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/rh-mysql57-mysql-devel@5.7.19-6.el7?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "rh-mysql57-mysql-config-0:5.7.19-6.el7.x86_64",
                "product": {
                  "name": "rh-mysql57-mysql-config-0:5.7.19-6.el7.x86_64",
                  "product_id": "rh-mysql57-mysql-config-0:5.7.19-6.el7.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/rh-mysql57-mysql-config@5.7.19-6.el7?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "rh-mysql57-mysql-test-0:5.7.19-6.el7.x86_64",
                "product": {
                  "name": "rh-mysql57-mysql-test-0:5.7.19-6.el7.x86_64",
                  "product_id": "rh-mysql57-mysql-test-0:5.7.19-6.el7.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/rh-mysql57-mysql-test@5.7.19-6.el7?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "rh-mysql57-mysql-errmsg-0:5.7.19-6.el7.x86_64",
                "product": {
                  "name": "rh-mysql57-mysql-errmsg-0:5.7.19-6.el7.x86_64",
                  "product_id": "rh-mysql57-mysql-errmsg-0:5.7.19-6.el7.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/rh-mysql57-mysql-errmsg@5.7.19-6.el7?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "rh-mysql57-mysql-server-0:5.7.19-6.el7.x86_64",
                "product": {
                  "name": "rh-mysql57-mysql-server-0:5.7.19-6.el7.x86_64",
                  "product_id": "rh-mysql57-mysql-server-0:5.7.19-6.el7.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/rh-mysql57-mysql-server@5.7.19-6.el7?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "rh-mysql57-mysql-debuginfo-0:5.7.19-6.el7.x86_64",
                "product": {
                  "name": "rh-mysql57-mysql-debuginfo-0:5.7.19-6.el7.x86_64",
                  "product_id": "rh-mysql57-mysql-debuginfo-0:5.7.19-6.el7.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/rh-mysql57-mysql-debuginfo@5.7.19-6.el7?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "rh-mysql57-mysql-0:5.7.19-6.el7.x86_64",
                "product": {
                  "name": "rh-mysql57-mysql-0:5.7.19-6.el7.x86_64",
                  "product_id": "rh-mysql57-mysql-0:5.7.19-6.el7.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/rh-mysql57-mysql@5.7.19-6.el7?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "rh-mysql57-mysql-common-0:5.7.19-6.el7.x86_64",
                "product": {
                  "name": "rh-mysql57-mysql-common-0:5.7.19-6.el7.x86_64",
                  "product_id": "rh-mysql57-mysql-common-0:5.7.19-6.el7.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/rh-mysql57-mysql-common@5.7.19-6.el7?arch=x86_64"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "x86_64"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "rh-mysql57-mysql-0:5.7.19-6.el6.src",
                "product": {
                  "name": "rh-mysql57-mysql-0:5.7.19-6.el6.src",
                  "product_id": "rh-mysql57-mysql-0:5.7.19-6.el6.src",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/rh-mysql57-mysql@5.7.19-6.el6?arch=src"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "rh-mysql57-mysql-0:5.7.19-6.el7.src",
                "product": {
                  "name": "rh-mysql57-mysql-0:5.7.19-6.el7.src",
                  "product_id": "rh-mysql57-mysql-0:5.7.19-6.el7.src",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/rh-mysql57-mysql@5.7.19-6.el7?arch=src"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "src"
          }
        ],
        "category": "vendor",
        "name": "Red Hat"
      }
    ],
    "relationships": [
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-mysql57-mysql-0:5.7.19-6.el6.src as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 6.7)",
          "product_id": "6Server-RHSCL-2.4-6.7.Z:rh-mysql57-mysql-0:5.7.19-6.el6.src"
        },
        "product_reference": "rh-mysql57-mysql-0:5.7.19-6.el6.src",
        "relates_to_product_reference": "6Server-RHSCL-2.4-6.7.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-mysql57-mysql-0:5.7.19-6.el6.x86_64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 6.7)",
          "product_id": "6Server-RHSCL-2.4-6.7.Z:rh-mysql57-mysql-0:5.7.19-6.el6.x86_64"
        },
        "product_reference": "rh-mysql57-mysql-0:5.7.19-6.el6.x86_64",
        "relates_to_product_reference": "6Server-RHSCL-2.4-6.7.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-mysql57-mysql-common-0:5.7.19-6.el6.x86_64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 6.7)",
          "product_id": "6Server-RHSCL-2.4-6.7.Z:rh-mysql57-mysql-common-0:5.7.19-6.el6.x86_64"
        },
        "product_reference": "rh-mysql57-mysql-common-0:5.7.19-6.el6.x86_64",
        "relates_to_product_reference": "6Server-RHSCL-2.4-6.7.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-mysql57-mysql-config-0:5.7.19-6.el6.x86_64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 6.7)",
          "product_id": "6Server-RHSCL-2.4-6.7.Z:rh-mysql57-mysql-config-0:5.7.19-6.el6.x86_64"
        },
        "product_reference": "rh-mysql57-mysql-config-0:5.7.19-6.el6.x86_64",
        "relates_to_product_reference": "6Server-RHSCL-2.4-6.7.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-mysql57-mysql-debuginfo-0:5.7.19-6.el6.x86_64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 6.7)",
          "product_id": "6Server-RHSCL-2.4-6.7.Z:rh-mysql57-mysql-debuginfo-0:5.7.19-6.el6.x86_64"
        },
        "product_reference": "rh-mysql57-mysql-debuginfo-0:5.7.19-6.el6.x86_64",
        "relates_to_product_reference": "6Server-RHSCL-2.4-6.7.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-mysql57-mysql-devel-0:5.7.19-6.el6.x86_64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 6.7)",
          "product_id": "6Server-RHSCL-2.4-6.7.Z:rh-mysql57-mysql-devel-0:5.7.19-6.el6.x86_64"
        },
        "product_reference": "rh-mysql57-mysql-devel-0:5.7.19-6.el6.x86_64",
        "relates_to_product_reference": "6Server-RHSCL-2.4-6.7.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-mysql57-mysql-errmsg-0:5.7.19-6.el6.x86_64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 6.7)",
          "product_id": "6Server-RHSCL-2.4-6.7.Z:rh-mysql57-mysql-errmsg-0:5.7.19-6.el6.x86_64"
        },
        "product_reference": "rh-mysql57-mysql-errmsg-0:5.7.19-6.el6.x86_64",
        "relates_to_product_reference": "6Server-RHSCL-2.4-6.7.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-mysql57-mysql-server-0:5.7.19-6.el6.x86_64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 6.7)",
          "product_id": "6Server-RHSCL-2.4-6.7.Z:rh-mysql57-mysql-server-0:5.7.19-6.el6.x86_64"
        },
        "product_reference": "rh-mysql57-mysql-server-0:5.7.19-6.el6.x86_64",
        "relates_to_product_reference": "6Server-RHSCL-2.4-6.7.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-mysql57-mysql-test-0:5.7.19-6.el6.x86_64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 6.7)",
          "product_id": "6Server-RHSCL-2.4-6.7.Z:rh-mysql57-mysql-test-0:5.7.19-6.el6.x86_64"
        },
        "product_reference": "rh-mysql57-mysql-test-0:5.7.19-6.el6.x86_64",
        "relates_to_product_reference": "6Server-RHSCL-2.4-6.7.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-mysql57-mysql-0:5.7.19-6.el6.src as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 6)",
          "product_id": "6Server-RHSCL-2.4:rh-mysql57-mysql-0:5.7.19-6.el6.src"
        },
        "product_reference": "rh-mysql57-mysql-0:5.7.19-6.el6.src",
        "relates_to_product_reference": "6Server-RHSCL-2.4"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-mysql57-mysql-0:5.7.19-6.el6.x86_64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 6)",
          "product_id": "6Server-RHSCL-2.4:rh-mysql57-mysql-0:5.7.19-6.el6.x86_64"
        },
        "product_reference": "rh-mysql57-mysql-0:5.7.19-6.el6.x86_64",
        "relates_to_product_reference": "6Server-RHSCL-2.4"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-mysql57-mysql-common-0:5.7.19-6.el6.x86_64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 6)",
          "product_id": "6Server-RHSCL-2.4:rh-mysql57-mysql-common-0:5.7.19-6.el6.x86_64"
        },
        "product_reference": "rh-mysql57-mysql-common-0:5.7.19-6.el6.x86_64",
        "relates_to_product_reference": "6Server-RHSCL-2.4"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-mysql57-mysql-config-0:5.7.19-6.el6.x86_64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 6)",
          "product_id": "6Server-RHSCL-2.4:rh-mysql57-mysql-config-0:5.7.19-6.el6.x86_64"
        },
        "product_reference": "rh-mysql57-mysql-config-0:5.7.19-6.el6.x86_64",
        "relates_to_product_reference": "6Server-RHSCL-2.4"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-mysql57-mysql-debuginfo-0:5.7.19-6.el6.x86_64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 6)",
          "product_id": "6Server-RHSCL-2.4:rh-mysql57-mysql-debuginfo-0:5.7.19-6.el6.x86_64"
        },
        "product_reference": "rh-mysql57-mysql-debuginfo-0:5.7.19-6.el6.x86_64",
        "relates_to_product_reference": "6Server-RHSCL-2.4"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-mysql57-mysql-devel-0:5.7.19-6.el6.x86_64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 6)",
          "product_id": "6Server-RHSCL-2.4:rh-mysql57-mysql-devel-0:5.7.19-6.el6.x86_64"
        },
        "product_reference": "rh-mysql57-mysql-devel-0:5.7.19-6.el6.x86_64",
        "relates_to_product_reference": "6Server-RHSCL-2.4"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-mysql57-mysql-errmsg-0:5.7.19-6.el6.x86_64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 6)",
          "product_id": "6Server-RHSCL-2.4:rh-mysql57-mysql-errmsg-0:5.7.19-6.el6.x86_64"
        },
        "product_reference": "rh-mysql57-mysql-errmsg-0:5.7.19-6.el6.x86_64",
        "relates_to_product_reference": "6Server-RHSCL-2.4"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-mysql57-mysql-server-0:5.7.19-6.el6.x86_64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 6)",
          "product_id": "6Server-RHSCL-2.4:rh-mysql57-mysql-server-0:5.7.19-6.el6.x86_64"
        },
        "product_reference": "rh-mysql57-mysql-server-0:5.7.19-6.el6.x86_64",
        "relates_to_product_reference": "6Server-RHSCL-2.4"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-mysql57-mysql-test-0:5.7.19-6.el6.x86_64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 6)",
          "product_id": "6Server-RHSCL-2.4:rh-mysql57-mysql-test-0:5.7.19-6.el6.x86_64"
        },
        "product_reference": "rh-mysql57-mysql-test-0:5.7.19-6.el6.x86_64",
        "relates_to_product_reference": "6Server-RHSCL-2.4"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-mysql57-mysql-0:5.7.19-6.el6.src as a component of Red Hat Software Collections for Red Hat Enterprise Linux Workstation (v. 6)",
          "product_id": "6Workstation-RHSCL-2.4:rh-mysql57-mysql-0:5.7.19-6.el6.src"
        },
        "product_reference": "rh-mysql57-mysql-0:5.7.19-6.el6.src",
        "relates_to_product_reference": "6Workstation-RHSCL-2.4"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-mysql57-mysql-0:5.7.19-6.el6.x86_64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Workstation (v. 6)",
          "product_id": "6Workstation-RHSCL-2.4:rh-mysql57-mysql-0:5.7.19-6.el6.x86_64"
        },
        "product_reference": "rh-mysql57-mysql-0:5.7.19-6.el6.x86_64",
        "relates_to_product_reference": "6Workstation-RHSCL-2.4"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-mysql57-mysql-common-0:5.7.19-6.el6.x86_64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Workstation (v. 6)",
          "product_id": "6Workstation-RHSCL-2.4:rh-mysql57-mysql-common-0:5.7.19-6.el6.x86_64"
        },
        "product_reference": "rh-mysql57-mysql-common-0:5.7.19-6.el6.x86_64",
        "relates_to_product_reference": "6Workstation-RHSCL-2.4"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-mysql57-mysql-config-0:5.7.19-6.el6.x86_64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Workstation (v. 6)",
          "product_id": "6Workstation-RHSCL-2.4:rh-mysql57-mysql-config-0:5.7.19-6.el6.x86_64"
        },
        "product_reference": "rh-mysql57-mysql-config-0:5.7.19-6.el6.x86_64",
        "relates_to_product_reference": "6Workstation-RHSCL-2.4"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-mysql57-mysql-debuginfo-0:5.7.19-6.el6.x86_64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Workstation (v. 6)",
          "product_id": "6Workstation-RHSCL-2.4:rh-mysql57-mysql-debuginfo-0:5.7.19-6.el6.x86_64"
        },
        "product_reference": "rh-mysql57-mysql-debuginfo-0:5.7.19-6.el6.x86_64",
        "relates_to_product_reference": "6Workstation-RHSCL-2.4"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-mysql57-mysql-devel-0:5.7.19-6.el6.x86_64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Workstation (v. 6)",
          "product_id": "6Workstation-RHSCL-2.4:rh-mysql57-mysql-devel-0:5.7.19-6.el6.x86_64"
        },
        "product_reference": "rh-mysql57-mysql-devel-0:5.7.19-6.el6.x86_64",
        "relates_to_product_reference": "6Workstation-RHSCL-2.4"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-mysql57-mysql-errmsg-0:5.7.19-6.el6.x86_64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Workstation (v. 6)",
          "product_id": "6Workstation-RHSCL-2.4:rh-mysql57-mysql-errmsg-0:5.7.19-6.el6.x86_64"
        },
        "product_reference": "rh-mysql57-mysql-errmsg-0:5.7.19-6.el6.x86_64",
        "relates_to_product_reference": "6Workstation-RHSCL-2.4"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-mysql57-mysql-server-0:5.7.19-6.el6.x86_64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Workstation (v. 6)",
          "product_id": "6Workstation-RHSCL-2.4:rh-mysql57-mysql-server-0:5.7.19-6.el6.x86_64"
        },
        "product_reference": "rh-mysql57-mysql-server-0:5.7.19-6.el6.x86_64",
        "relates_to_product_reference": "6Workstation-RHSCL-2.4"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-mysql57-mysql-test-0:5.7.19-6.el6.x86_64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Workstation (v. 6)",
          "product_id": "6Workstation-RHSCL-2.4:rh-mysql57-mysql-test-0:5.7.19-6.el6.x86_64"
        },
        "product_reference": "rh-mysql57-mysql-test-0:5.7.19-6.el6.x86_64",
        "relates_to_product_reference": "6Workstation-RHSCL-2.4"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-mysql57-mysql-0:5.7.19-6.el7.src as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.3)",
          "product_id": "7Server-RHSCL-2.4-7.3.Z:rh-mysql57-mysql-0:5.7.19-6.el7.src"
        },
        "product_reference": "rh-mysql57-mysql-0:5.7.19-6.el7.src",
        "relates_to_product_reference": "7Server-RHSCL-2.4-7.3.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-mysql57-mysql-0:5.7.19-6.el7.x86_64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.3)",
          "product_id": "7Server-RHSCL-2.4-7.3.Z:rh-mysql57-mysql-0:5.7.19-6.el7.x86_64"
        },
        "product_reference": "rh-mysql57-mysql-0:5.7.19-6.el7.x86_64",
        "relates_to_product_reference": "7Server-RHSCL-2.4-7.3.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-mysql57-mysql-common-0:5.7.19-6.el7.x86_64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.3)",
          "product_id": "7Server-RHSCL-2.4-7.3.Z:rh-mysql57-mysql-common-0:5.7.19-6.el7.x86_64"
        },
        "product_reference": "rh-mysql57-mysql-common-0:5.7.19-6.el7.x86_64",
        "relates_to_product_reference": "7Server-RHSCL-2.4-7.3.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-mysql57-mysql-config-0:5.7.19-6.el7.x86_64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.3)",
          "product_id": "7Server-RHSCL-2.4-7.3.Z:rh-mysql57-mysql-config-0:5.7.19-6.el7.x86_64"
        },
        "product_reference": "rh-mysql57-mysql-config-0:5.7.19-6.el7.x86_64",
        "relates_to_product_reference": "7Server-RHSCL-2.4-7.3.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-mysql57-mysql-debuginfo-0:5.7.19-6.el7.x86_64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.3)",
          "product_id": "7Server-RHSCL-2.4-7.3.Z:rh-mysql57-mysql-debuginfo-0:5.7.19-6.el7.x86_64"
        },
        "product_reference": "rh-mysql57-mysql-debuginfo-0:5.7.19-6.el7.x86_64",
        "relates_to_product_reference": "7Server-RHSCL-2.4-7.3.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-mysql57-mysql-devel-0:5.7.19-6.el7.x86_64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.3)",
          "product_id": "7Server-RHSCL-2.4-7.3.Z:rh-mysql57-mysql-devel-0:5.7.19-6.el7.x86_64"
        },
        "product_reference": "rh-mysql57-mysql-devel-0:5.7.19-6.el7.x86_64",
        "relates_to_product_reference": "7Server-RHSCL-2.4-7.3.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-mysql57-mysql-errmsg-0:5.7.19-6.el7.x86_64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.3)",
          "product_id": "7Server-RHSCL-2.4-7.3.Z:rh-mysql57-mysql-errmsg-0:5.7.19-6.el7.x86_64"
        },
        "product_reference": "rh-mysql57-mysql-errmsg-0:5.7.19-6.el7.x86_64",
        "relates_to_product_reference": "7Server-RHSCL-2.4-7.3.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-mysql57-mysql-server-0:5.7.19-6.el7.x86_64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.3)",
          "product_id": "7Server-RHSCL-2.4-7.3.Z:rh-mysql57-mysql-server-0:5.7.19-6.el7.x86_64"
        },
        "product_reference": "rh-mysql57-mysql-server-0:5.7.19-6.el7.x86_64",
        "relates_to_product_reference": "7Server-RHSCL-2.4-7.3.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-mysql57-mysql-test-0:5.7.19-6.el7.x86_64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.3)",
          "product_id": "7Server-RHSCL-2.4-7.3.Z:rh-mysql57-mysql-test-0:5.7.19-6.el7.x86_64"
        },
        "product_reference": "rh-mysql57-mysql-test-0:5.7.19-6.el7.x86_64",
        "relates_to_product_reference": "7Server-RHSCL-2.4-7.3.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-mysql57-mysql-0:5.7.19-6.el7.src as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 7)",
          "product_id": "7Server-RHSCL-2.4:rh-mysql57-mysql-0:5.7.19-6.el7.src"
        },
        "product_reference": "rh-mysql57-mysql-0:5.7.19-6.el7.src",
        "relates_to_product_reference": "7Server-RHSCL-2.4"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-mysql57-mysql-0:5.7.19-6.el7.x86_64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 7)",
          "product_id": "7Server-RHSCL-2.4:rh-mysql57-mysql-0:5.7.19-6.el7.x86_64"
        },
        "product_reference": "rh-mysql57-mysql-0:5.7.19-6.el7.x86_64",
        "relates_to_product_reference": "7Server-RHSCL-2.4"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-mysql57-mysql-common-0:5.7.19-6.el7.x86_64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 7)",
          "product_id": "7Server-RHSCL-2.4:rh-mysql57-mysql-common-0:5.7.19-6.el7.x86_64"
        },
        "product_reference": "rh-mysql57-mysql-common-0:5.7.19-6.el7.x86_64",
        "relates_to_product_reference": "7Server-RHSCL-2.4"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-mysql57-mysql-config-0:5.7.19-6.el7.x86_64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 7)",
          "product_id": "7Server-RHSCL-2.4:rh-mysql57-mysql-config-0:5.7.19-6.el7.x86_64"
        },
        "product_reference": "rh-mysql57-mysql-config-0:5.7.19-6.el7.x86_64",
        "relates_to_product_reference": "7Server-RHSCL-2.4"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-mysql57-mysql-debuginfo-0:5.7.19-6.el7.x86_64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 7)",
          "product_id": "7Server-RHSCL-2.4:rh-mysql57-mysql-debuginfo-0:5.7.19-6.el7.x86_64"
        },
        "product_reference": "rh-mysql57-mysql-debuginfo-0:5.7.19-6.el7.x86_64",
        "relates_to_product_reference": "7Server-RHSCL-2.4"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-mysql57-mysql-devel-0:5.7.19-6.el7.x86_64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 7)",
          "product_id": "7Server-RHSCL-2.4:rh-mysql57-mysql-devel-0:5.7.19-6.el7.x86_64"
        },
        "product_reference": "rh-mysql57-mysql-devel-0:5.7.19-6.el7.x86_64",
        "relates_to_product_reference": "7Server-RHSCL-2.4"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-mysql57-mysql-errmsg-0:5.7.19-6.el7.x86_64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 7)",
          "product_id": "7Server-RHSCL-2.4:rh-mysql57-mysql-errmsg-0:5.7.19-6.el7.x86_64"
        },
        "product_reference": "rh-mysql57-mysql-errmsg-0:5.7.19-6.el7.x86_64",
        "relates_to_product_reference": "7Server-RHSCL-2.4"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-mysql57-mysql-server-0:5.7.19-6.el7.x86_64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 7)",
          "product_id": "7Server-RHSCL-2.4:rh-mysql57-mysql-server-0:5.7.19-6.el7.x86_64"
        },
        "product_reference": "rh-mysql57-mysql-server-0:5.7.19-6.el7.x86_64",
        "relates_to_product_reference": "7Server-RHSCL-2.4"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-mysql57-mysql-test-0:5.7.19-6.el7.x86_64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 7)",
          "product_id": "7Server-RHSCL-2.4:rh-mysql57-mysql-test-0:5.7.19-6.el7.x86_64"
        },
        "product_reference": "rh-mysql57-mysql-test-0:5.7.19-6.el7.x86_64",
        "relates_to_product_reference": "7Server-RHSCL-2.4"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-mysql57-mysql-0:5.7.19-6.el7.src as a component of Red Hat Software Collections for Red Hat Enterprise Linux Workstation (v. 7)",
          "product_id": "7Workstation-RHSCL-2.4:rh-mysql57-mysql-0:5.7.19-6.el7.src"
        },
        "product_reference": "rh-mysql57-mysql-0:5.7.19-6.el7.src",
        "relates_to_product_reference": "7Workstation-RHSCL-2.4"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-mysql57-mysql-0:5.7.19-6.el7.x86_64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Workstation (v. 7)",
          "product_id": "7Workstation-RHSCL-2.4:rh-mysql57-mysql-0:5.7.19-6.el7.x86_64"
        },
        "product_reference": "rh-mysql57-mysql-0:5.7.19-6.el7.x86_64",
        "relates_to_product_reference": "7Workstation-RHSCL-2.4"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-mysql57-mysql-common-0:5.7.19-6.el7.x86_64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Workstation (v. 7)",
          "product_id": "7Workstation-RHSCL-2.4:rh-mysql57-mysql-common-0:5.7.19-6.el7.x86_64"
        },
        "product_reference": "rh-mysql57-mysql-common-0:5.7.19-6.el7.x86_64",
        "relates_to_product_reference": "7Workstation-RHSCL-2.4"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-mysql57-mysql-config-0:5.7.19-6.el7.x86_64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Workstation (v. 7)",
          "product_id": "7Workstation-RHSCL-2.4:rh-mysql57-mysql-config-0:5.7.19-6.el7.x86_64"
        },
        "product_reference": "rh-mysql57-mysql-config-0:5.7.19-6.el7.x86_64",
        "relates_to_product_reference": "7Workstation-RHSCL-2.4"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-mysql57-mysql-debuginfo-0:5.7.19-6.el7.x86_64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Workstation (v. 7)",
          "product_id": "7Workstation-RHSCL-2.4:rh-mysql57-mysql-debuginfo-0:5.7.19-6.el7.x86_64"
        },
        "product_reference": "rh-mysql57-mysql-debuginfo-0:5.7.19-6.el7.x86_64",
        "relates_to_product_reference": "7Workstation-RHSCL-2.4"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-mysql57-mysql-devel-0:5.7.19-6.el7.x86_64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Workstation (v. 7)",
          "product_id": "7Workstation-RHSCL-2.4:rh-mysql57-mysql-devel-0:5.7.19-6.el7.x86_64"
        },
        "product_reference": "rh-mysql57-mysql-devel-0:5.7.19-6.el7.x86_64",
        "relates_to_product_reference": "7Workstation-RHSCL-2.4"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-mysql57-mysql-errmsg-0:5.7.19-6.el7.x86_64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Workstation (v. 7)",
          "product_id": "7Workstation-RHSCL-2.4:rh-mysql57-mysql-errmsg-0:5.7.19-6.el7.x86_64"
        },
        "product_reference": "rh-mysql57-mysql-errmsg-0:5.7.19-6.el7.x86_64",
        "relates_to_product_reference": "7Workstation-RHSCL-2.4"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-mysql57-mysql-server-0:5.7.19-6.el7.x86_64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Workstation (v. 7)",
          "product_id": "7Workstation-RHSCL-2.4:rh-mysql57-mysql-server-0:5.7.19-6.el7.x86_64"
        },
        "product_reference": "rh-mysql57-mysql-server-0:5.7.19-6.el7.x86_64",
        "relates_to_product_reference": "7Workstation-RHSCL-2.4"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-mysql57-mysql-test-0:5.7.19-6.el7.x86_64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Workstation (v. 7)",
          "product_id": "7Workstation-RHSCL-2.4:rh-mysql57-mysql-test-0:5.7.19-6.el7.x86_64"
        },
        "product_reference": "rh-mysql57-mysql-test-0:5.7.19-6.el7.x86_64",
        "relates_to_product_reference": "7Workstation-RHSCL-2.4"
      }
    ]
  },
  "vulnerabilities": [
    {
      "cve": "CVE-2016-5483",
      "cwe": {
        "id": "CWE-77",
        "name": "Improper Neutralization of Special Elements used in a Command (\u0027Command Injection\u0027)"
      },
      "discovery_date": "2017-03-11T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "1433010"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "It was discovered that the mysql and mysqldump tools did not correctly handle database and table names containing newline characters. A database user with privileges to create databases or tables could cause the mysql command to execute arbitrary shell or SQL commands while restoring database backup created using the mysqldump tool.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "mysql: Incorrect input validation allowing code execution via mysqldump",
          "title": "Vulnerability summary"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "6Server-RHSCL-2.4-6.7.Z:rh-mysql57-mysql-0:5.7.19-6.el6.src",
          "6Server-RHSCL-2.4-6.7.Z:rh-mysql57-mysql-0:5.7.19-6.el6.x86_64",
          "6Server-RHSCL-2.4-6.7.Z:rh-mysql57-mysql-common-0:5.7.19-6.el6.x86_64",
          "6Server-RHSCL-2.4-6.7.Z:rh-mysql57-mysql-config-0:5.7.19-6.el6.x86_64",
          "6Server-RHSCL-2.4-6.7.Z:rh-mysql57-mysql-debuginfo-0:5.7.19-6.el6.x86_64",
          "6Server-RHSCL-2.4-6.7.Z:rh-mysql57-mysql-devel-0:5.7.19-6.el6.x86_64",
          "6Server-RHSCL-2.4-6.7.Z:rh-mysql57-mysql-errmsg-0:5.7.19-6.el6.x86_64",
          "6Server-RHSCL-2.4-6.7.Z:rh-mysql57-mysql-server-0:5.7.19-6.el6.x86_64",
          "6Server-RHSCL-2.4-6.7.Z:rh-mysql57-mysql-test-0:5.7.19-6.el6.x86_64",
          "6Server-RHSCL-2.4:rh-mysql57-mysql-0:5.7.19-6.el6.src",
          "6Server-RHSCL-2.4:rh-mysql57-mysql-0:5.7.19-6.el6.x86_64",
          "6Server-RHSCL-2.4:rh-mysql57-mysql-common-0:5.7.19-6.el6.x86_64",
          "6Server-RHSCL-2.4:rh-mysql57-mysql-config-0:5.7.19-6.el6.x86_64",
          "6Server-RHSCL-2.4:rh-mysql57-mysql-debuginfo-0:5.7.19-6.el6.x86_64",
          "6Server-RHSCL-2.4:rh-mysql57-mysql-devel-0:5.7.19-6.el6.x86_64",
          "6Server-RHSCL-2.4:rh-mysql57-mysql-errmsg-0:5.7.19-6.el6.x86_64",
          "6Server-RHSCL-2.4:rh-mysql57-mysql-server-0:5.7.19-6.el6.x86_64",
          "6Server-RHSCL-2.4:rh-mysql57-mysql-test-0:5.7.19-6.el6.x86_64",
          "6Workstation-RHSCL-2.4:rh-mysql57-mysql-0:5.7.19-6.el6.src",
          "6Workstation-RHSCL-2.4:rh-mysql57-mysql-0:5.7.19-6.el6.x86_64",
          "6Workstation-RHSCL-2.4:rh-mysql57-mysql-common-0:5.7.19-6.el6.x86_64",
          "6Workstation-RHSCL-2.4:rh-mysql57-mysql-config-0:5.7.19-6.el6.x86_64",
          "6Workstation-RHSCL-2.4:rh-mysql57-mysql-debuginfo-0:5.7.19-6.el6.x86_64",
          "6Workstation-RHSCL-2.4:rh-mysql57-mysql-devel-0:5.7.19-6.el6.x86_64",
          "6Workstation-RHSCL-2.4:rh-mysql57-mysql-errmsg-0:5.7.19-6.el6.x86_64",
          "6Workstation-RHSCL-2.4:rh-mysql57-mysql-server-0:5.7.19-6.el6.x86_64",
          "6Workstation-RHSCL-2.4:rh-mysql57-mysql-test-0:5.7.19-6.el6.x86_64",
          "7Server-RHSCL-2.4-7.3.Z:rh-mysql57-mysql-0:5.7.19-6.el7.src",
          "7Server-RHSCL-2.4-7.3.Z:rh-mysql57-mysql-0:5.7.19-6.el7.x86_64",
          "7Server-RHSCL-2.4-7.3.Z:rh-mysql57-mysql-common-0:5.7.19-6.el7.x86_64",
          "7Server-RHSCL-2.4-7.3.Z:rh-mysql57-mysql-config-0:5.7.19-6.el7.x86_64",
          "7Server-RHSCL-2.4-7.3.Z:rh-mysql57-mysql-debuginfo-0:5.7.19-6.el7.x86_64",
          "7Server-RHSCL-2.4-7.3.Z:rh-mysql57-mysql-devel-0:5.7.19-6.el7.x86_64",
          "7Server-RHSCL-2.4-7.3.Z:rh-mysql57-mysql-errmsg-0:5.7.19-6.el7.x86_64",
          "7Server-RHSCL-2.4-7.3.Z:rh-mysql57-mysql-server-0:5.7.19-6.el7.x86_64",
          "7Server-RHSCL-2.4-7.3.Z:rh-mysql57-mysql-test-0:5.7.19-6.el7.x86_64",
          "7Server-RHSCL-2.4:rh-mysql57-mysql-0:5.7.19-6.el7.src",
          "7Server-RHSCL-2.4:rh-mysql57-mysql-0:5.7.19-6.el7.x86_64",
          "7Server-RHSCL-2.4:rh-mysql57-mysql-common-0:5.7.19-6.el7.x86_64",
          "7Server-RHSCL-2.4:rh-mysql57-mysql-config-0:5.7.19-6.el7.x86_64",
          "7Server-RHSCL-2.4:rh-mysql57-mysql-debuginfo-0:5.7.19-6.el7.x86_64",
          "7Server-RHSCL-2.4:rh-mysql57-mysql-devel-0:5.7.19-6.el7.x86_64",
          "7Server-RHSCL-2.4:rh-mysql57-mysql-errmsg-0:5.7.19-6.el7.x86_64",
          "7Server-RHSCL-2.4:rh-mysql57-mysql-server-0:5.7.19-6.el7.x86_64",
          "7Server-RHSCL-2.4:rh-mysql57-mysql-test-0:5.7.19-6.el7.x86_64",
          "7Workstation-RHSCL-2.4:rh-mysql57-mysql-0:5.7.19-6.el7.src",
          "7Workstation-RHSCL-2.4:rh-mysql57-mysql-0:5.7.19-6.el7.x86_64",
          "7Workstation-RHSCL-2.4:rh-mysql57-mysql-common-0:5.7.19-6.el7.x86_64",
          "7Workstation-RHSCL-2.4:rh-mysql57-mysql-config-0:5.7.19-6.el7.x86_64",
          "7Workstation-RHSCL-2.4:rh-mysql57-mysql-debuginfo-0:5.7.19-6.el7.x86_64",
          "7Workstation-RHSCL-2.4:rh-mysql57-mysql-devel-0:5.7.19-6.el7.x86_64",
          "7Workstation-RHSCL-2.4:rh-mysql57-mysql-errmsg-0:5.7.19-6.el7.x86_64",
          "7Workstation-RHSCL-2.4:rh-mysql57-mysql-server-0:5.7.19-6.el7.x86_64",
          "7Workstation-RHSCL-2.4:rh-mysql57-mysql-test-0:5.7.19-6.el7.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2016-5483"
        },
        {
          "category": "external",
          "summary": "RHBZ#1433010",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1433010"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2016-5483",
          "url": "https://www.cve.org/CVERecord?id=CVE-2016-5483"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2016-5483",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2016-5483"
        },
        {
          "category": "external",
          "summary": "https://blog.tarq.io/cve-2016-5483-backdooring-mysqldump-backups/",
          "url": "https://blog.tarq.io/cve-2016-5483-backdooring-mysqldump-backups/"
        },
        {
          "category": "external",
          "summary": "https://blog.tarq.io/cve-2016-5483-galera-remote-command-execution-via-crafted-database-name/",
          "url": "https://blog.tarq.io/cve-2016-5483-galera-remote-command-execution-via-crafted-database-name/"
        }
      ],
      "release_date": "2017-03-09T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2017-10-12T07:53:15+00:00",
          "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAfter installing this update, the MySQL server daemon (mysqld) will be restarted automatically.",
          "product_ids": [
            "6Server-RHSCL-2.4-6.7.Z:rh-mysql57-mysql-0:5.7.19-6.el6.src",
            "6Server-RHSCL-2.4-6.7.Z:rh-mysql57-mysql-0:5.7.19-6.el6.x86_64",
            "6Server-RHSCL-2.4-6.7.Z:rh-mysql57-mysql-common-0:5.7.19-6.el6.x86_64",
            "6Server-RHSCL-2.4-6.7.Z:rh-mysql57-mysql-config-0:5.7.19-6.el6.x86_64",
            "6Server-RHSCL-2.4-6.7.Z:rh-mysql57-mysql-debuginfo-0:5.7.19-6.el6.x86_64",
            "6Server-RHSCL-2.4-6.7.Z:rh-mysql57-mysql-devel-0:5.7.19-6.el6.x86_64",
            "6Server-RHSCL-2.4-6.7.Z:rh-mysql57-mysql-errmsg-0:5.7.19-6.el6.x86_64",
            "6Server-RHSCL-2.4-6.7.Z:rh-mysql57-mysql-server-0:5.7.19-6.el6.x86_64",
            "6Server-RHSCL-2.4-6.7.Z:rh-mysql57-mysql-test-0:5.7.19-6.el6.x86_64",
            "6Server-RHSCL-2.4:rh-mysql57-mysql-0:5.7.19-6.el6.src",
            "6Server-RHSCL-2.4:rh-mysql57-mysql-0:5.7.19-6.el6.x86_64",
            "6Server-RHSCL-2.4:rh-mysql57-mysql-common-0:5.7.19-6.el6.x86_64",
            "6Server-RHSCL-2.4:rh-mysql57-mysql-config-0:5.7.19-6.el6.x86_64",
            "6Server-RHSCL-2.4:rh-mysql57-mysql-debuginfo-0:5.7.19-6.el6.x86_64",
            "6Server-RHSCL-2.4:rh-mysql57-mysql-devel-0:5.7.19-6.el6.x86_64",
            "6Server-RHSCL-2.4:rh-mysql57-mysql-errmsg-0:5.7.19-6.el6.x86_64",
            "6Server-RHSCL-2.4:rh-mysql57-mysql-server-0:5.7.19-6.el6.x86_64",
            "6Server-RHSCL-2.4:rh-mysql57-mysql-test-0:5.7.19-6.el6.x86_64",
            "6Workstation-RHSCL-2.4:rh-mysql57-mysql-0:5.7.19-6.el6.src",
            "6Workstation-RHSCL-2.4:rh-mysql57-mysql-0:5.7.19-6.el6.x86_64",
            "6Workstation-RHSCL-2.4:rh-mysql57-mysql-common-0:5.7.19-6.el6.x86_64",
            "6Workstation-RHSCL-2.4:rh-mysql57-mysql-config-0:5.7.19-6.el6.x86_64",
            "6Workstation-RHSCL-2.4:rh-mysql57-mysql-debuginfo-0:5.7.19-6.el6.x86_64",
            "6Workstation-RHSCL-2.4:rh-mysql57-mysql-devel-0:5.7.19-6.el6.x86_64",
            "6Workstation-RHSCL-2.4:rh-mysql57-mysql-errmsg-0:5.7.19-6.el6.x86_64",
            "6Workstation-RHSCL-2.4:rh-mysql57-mysql-server-0:5.7.19-6.el6.x86_64",
            "6Workstation-RHSCL-2.4:rh-mysql57-mysql-test-0:5.7.19-6.el6.x86_64",
            "7Server-RHSCL-2.4-7.3.Z:rh-mysql57-mysql-0:5.7.19-6.el7.src",
            "7Server-RHSCL-2.4-7.3.Z:rh-mysql57-mysql-0:5.7.19-6.el7.x86_64",
            "7Server-RHSCL-2.4-7.3.Z:rh-mysql57-mysql-common-0:5.7.19-6.el7.x86_64",
            "7Server-RHSCL-2.4-7.3.Z:rh-mysql57-mysql-config-0:5.7.19-6.el7.x86_64",
            "7Server-RHSCL-2.4-7.3.Z:rh-mysql57-mysql-debuginfo-0:5.7.19-6.el7.x86_64",
            "7Server-RHSCL-2.4-7.3.Z:rh-mysql57-mysql-devel-0:5.7.19-6.el7.x86_64",
            "7Server-RHSCL-2.4-7.3.Z:rh-mysql57-mysql-errmsg-0:5.7.19-6.el7.x86_64",
            "7Server-RHSCL-2.4-7.3.Z:rh-mysql57-mysql-server-0:5.7.19-6.el7.x86_64",
            "7Server-RHSCL-2.4-7.3.Z:rh-mysql57-mysql-test-0:5.7.19-6.el7.x86_64",
            "7Server-RHSCL-2.4:rh-mysql57-mysql-0:5.7.19-6.el7.src",
            "7Server-RHSCL-2.4:rh-mysql57-mysql-0:5.7.19-6.el7.x86_64",
            "7Server-RHSCL-2.4:rh-mysql57-mysql-common-0:5.7.19-6.el7.x86_64",
            "7Server-RHSCL-2.4:rh-mysql57-mysql-config-0:5.7.19-6.el7.x86_64",
            "7Server-RHSCL-2.4:rh-mysql57-mysql-debuginfo-0:5.7.19-6.el7.x86_64",
            "7Server-RHSCL-2.4:rh-mysql57-mysql-devel-0:5.7.19-6.el7.x86_64",
            "7Server-RHSCL-2.4:rh-mysql57-mysql-errmsg-0:5.7.19-6.el7.x86_64",
            "7Server-RHSCL-2.4:rh-mysql57-mysql-server-0:5.7.19-6.el7.x86_64",
            "7Server-RHSCL-2.4:rh-mysql57-mysql-test-0:5.7.19-6.el7.x86_64",
            "7Workstation-RHSCL-2.4:rh-mysql57-mysql-0:5.7.19-6.el7.src",
            "7Workstation-RHSCL-2.4:rh-mysql57-mysql-0:5.7.19-6.el7.x86_64",
            "7Workstation-RHSCL-2.4:rh-mysql57-mysql-common-0:5.7.19-6.el7.x86_64",
            "7Workstation-RHSCL-2.4:rh-mysql57-mysql-config-0:5.7.19-6.el7.x86_64",
            "7Workstation-RHSCL-2.4:rh-mysql57-mysql-debuginfo-0:5.7.19-6.el7.x86_64",
            "7Workstation-RHSCL-2.4:rh-mysql57-mysql-devel-0:5.7.19-6.el7.x86_64",
            "7Workstation-RHSCL-2.4:rh-mysql57-mysql-errmsg-0:5.7.19-6.el7.x86_64",
            "7Workstation-RHSCL-2.4:rh-mysql57-mysql-server-0:5.7.19-6.el7.x86_64",
            "7Workstation-RHSCL-2.4:rh-mysql57-mysql-test-0:5.7.19-6.el7.x86_64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2017:2886"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "HIGH",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 6.4,
            "baseSeverity": "MEDIUM",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "HIGH",
            "privilegesRequired": "HIGH",
            "scope": "UNCHANGED",
            "userInteraction": "REQUIRED",
            "vectorString": "CVSS:3.0/AV:N/AC:H/PR:H/UI:R/S:U/C:H/I:H/A:H",
            "version": "3.0"
          },
          "products": [
            "6Server-RHSCL-2.4-6.7.Z:rh-mysql57-mysql-0:5.7.19-6.el6.src",
            "6Server-RHSCL-2.4-6.7.Z:rh-mysql57-mysql-0:5.7.19-6.el6.x86_64",
            "6Server-RHSCL-2.4-6.7.Z:rh-mysql57-mysql-common-0:5.7.19-6.el6.x86_64",
            "6Server-RHSCL-2.4-6.7.Z:rh-mysql57-mysql-config-0:5.7.19-6.el6.x86_64",
            "6Server-RHSCL-2.4-6.7.Z:rh-mysql57-mysql-debuginfo-0:5.7.19-6.el6.x86_64",
            "6Server-RHSCL-2.4-6.7.Z:rh-mysql57-mysql-devel-0:5.7.19-6.el6.x86_64",
            "6Server-RHSCL-2.4-6.7.Z:rh-mysql57-mysql-errmsg-0:5.7.19-6.el6.x86_64",
            "6Server-RHSCL-2.4-6.7.Z:rh-mysql57-mysql-server-0:5.7.19-6.el6.x86_64",
            "6Server-RHSCL-2.4-6.7.Z:rh-mysql57-mysql-test-0:5.7.19-6.el6.x86_64",
            "6Server-RHSCL-2.4:rh-mysql57-mysql-0:5.7.19-6.el6.src",
            "6Server-RHSCL-2.4:rh-mysql57-mysql-0:5.7.19-6.el6.x86_64",
            "6Server-RHSCL-2.4:rh-mysql57-mysql-common-0:5.7.19-6.el6.x86_64",
            "6Server-RHSCL-2.4:rh-mysql57-mysql-config-0:5.7.19-6.el6.x86_64",
            "6Server-RHSCL-2.4:rh-mysql57-mysql-debuginfo-0:5.7.19-6.el6.x86_64",
            "6Server-RHSCL-2.4:rh-mysql57-mysql-devel-0:5.7.19-6.el6.x86_64",
            "6Server-RHSCL-2.4:rh-mysql57-mysql-errmsg-0:5.7.19-6.el6.x86_64",
            "6Server-RHSCL-2.4:rh-mysql57-mysql-server-0:5.7.19-6.el6.x86_64",
            "6Server-RHSCL-2.4:rh-mysql57-mysql-test-0:5.7.19-6.el6.x86_64",
            "6Workstation-RHSCL-2.4:rh-mysql57-mysql-0:5.7.19-6.el6.src",
            "6Workstation-RHSCL-2.4:rh-mysql57-mysql-0:5.7.19-6.el6.x86_64",
            "6Workstation-RHSCL-2.4:rh-mysql57-mysql-common-0:5.7.19-6.el6.x86_64",
            "6Workstation-RHSCL-2.4:rh-mysql57-mysql-config-0:5.7.19-6.el6.x86_64",
            "6Workstation-RHSCL-2.4:rh-mysql57-mysql-debuginfo-0:5.7.19-6.el6.x86_64",
            "6Workstation-RHSCL-2.4:rh-mysql57-mysql-devel-0:5.7.19-6.el6.x86_64",
            "6Workstation-RHSCL-2.4:rh-mysql57-mysql-errmsg-0:5.7.19-6.el6.x86_64",
            "6Workstation-RHSCL-2.4:rh-mysql57-mysql-server-0:5.7.19-6.el6.x86_64",
            "6Workstation-RHSCL-2.4:rh-mysql57-mysql-test-0:5.7.19-6.el6.x86_64",
            "7Server-RHSCL-2.4-7.3.Z:rh-mysql57-mysql-0:5.7.19-6.el7.src",
            "7Server-RHSCL-2.4-7.3.Z:rh-mysql57-mysql-0:5.7.19-6.el7.x86_64",
            "7Server-RHSCL-2.4-7.3.Z:rh-mysql57-mysql-common-0:5.7.19-6.el7.x86_64",
            "7Server-RHSCL-2.4-7.3.Z:rh-mysql57-mysql-config-0:5.7.19-6.el7.x86_64",
            "7Server-RHSCL-2.4-7.3.Z:rh-mysql57-mysql-debuginfo-0:5.7.19-6.el7.x86_64",
            "7Server-RHSCL-2.4-7.3.Z:rh-mysql57-mysql-devel-0:5.7.19-6.el7.x86_64",
            "7Server-RHSCL-2.4-7.3.Z:rh-mysql57-mysql-errmsg-0:5.7.19-6.el7.x86_64",
            "7Server-RHSCL-2.4-7.3.Z:rh-mysql57-mysql-server-0:5.7.19-6.el7.x86_64",
            "7Server-RHSCL-2.4-7.3.Z:rh-mysql57-mysql-test-0:5.7.19-6.el7.x86_64",
            "7Server-RHSCL-2.4:rh-mysql57-mysql-0:5.7.19-6.el7.src",
            "7Server-RHSCL-2.4:rh-mysql57-mysql-0:5.7.19-6.el7.x86_64",
            "7Server-RHSCL-2.4:rh-mysql57-mysql-common-0:5.7.19-6.el7.x86_64",
            "7Server-RHSCL-2.4:rh-mysql57-mysql-config-0:5.7.19-6.el7.x86_64",
            "7Server-RHSCL-2.4:rh-mysql57-mysql-debuginfo-0:5.7.19-6.el7.x86_64",
            "7Server-RHSCL-2.4:rh-mysql57-mysql-devel-0:5.7.19-6.el7.x86_64",
            "7Server-RHSCL-2.4:rh-mysql57-mysql-errmsg-0:5.7.19-6.el7.x86_64",
            "7Server-RHSCL-2.4:rh-mysql57-mysql-server-0:5.7.19-6.el7.x86_64",
            "7Server-RHSCL-2.4:rh-mysql57-mysql-test-0:5.7.19-6.el7.x86_64",
            "7Workstation-RHSCL-2.4:rh-mysql57-mysql-0:5.7.19-6.el7.src",
            "7Workstation-RHSCL-2.4:rh-mysql57-mysql-0:5.7.19-6.el7.x86_64",
            "7Workstation-RHSCL-2.4:rh-mysql57-mysql-common-0:5.7.19-6.el7.x86_64",
            "7Workstation-RHSCL-2.4:rh-mysql57-mysql-config-0:5.7.19-6.el7.x86_64",
            "7Workstation-RHSCL-2.4:rh-mysql57-mysql-debuginfo-0:5.7.19-6.el7.x86_64",
            "7Workstation-RHSCL-2.4:rh-mysql57-mysql-devel-0:5.7.19-6.el7.x86_64",
            "7Workstation-RHSCL-2.4:rh-mysql57-mysql-errmsg-0:5.7.19-6.el7.x86_64",
            "7Workstation-RHSCL-2.4:rh-mysql57-mysql-server-0:5.7.19-6.el7.x86_64",
            "7Workstation-RHSCL-2.4:rh-mysql57-mysql-test-0:5.7.19-6.el7.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Moderate"
        }
      ],
      "title": "mysql: Incorrect input validation allowing code execution via mysqldump"
    },
    {
      "cve": "CVE-2016-8327",
      "discovery_date": "2017-01-18T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "1414337"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Replication). Supported versions that are affected are 5.6.34 and earlier and 5.7.16 and earlier. Difficult to exploit vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS v3.0 Base Score 4.4 (Availability impacts).",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "mysql: Server: Replication  unspecified vulnerability (CPU Jan 2017)",
          "title": "Vulnerability summary"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "6Server-RHSCL-2.4-6.7.Z:rh-mysql57-mysql-0:5.7.19-6.el6.src",
          "6Server-RHSCL-2.4-6.7.Z:rh-mysql57-mysql-0:5.7.19-6.el6.x86_64",
          "6Server-RHSCL-2.4-6.7.Z:rh-mysql57-mysql-common-0:5.7.19-6.el6.x86_64",
          "6Server-RHSCL-2.4-6.7.Z:rh-mysql57-mysql-config-0:5.7.19-6.el6.x86_64",
          "6Server-RHSCL-2.4-6.7.Z:rh-mysql57-mysql-debuginfo-0:5.7.19-6.el6.x86_64",
          "6Server-RHSCL-2.4-6.7.Z:rh-mysql57-mysql-devel-0:5.7.19-6.el6.x86_64",
          "6Server-RHSCL-2.4-6.7.Z:rh-mysql57-mysql-errmsg-0:5.7.19-6.el6.x86_64",
          "6Server-RHSCL-2.4-6.7.Z:rh-mysql57-mysql-server-0:5.7.19-6.el6.x86_64",
          "6Server-RHSCL-2.4-6.7.Z:rh-mysql57-mysql-test-0:5.7.19-6.el6.x86_64",
          "6Server-RHSCL-2.4:rh-mysql57-mysql-0:5.7.19-6.el6.src",
          "6Server-RHSCL-2.4:rh-mysql57-mysql-0:5.7.19-6.el6.x86_64",
          "6Server-RHSCL-2.4:rh-mysql57-mysql-common-0:5.7.19-6.el6.x86_64",
          "6Server-RHSCL-2.4:rh-mysql57-mysql-config-0:5.7.19-6.el6.x86_64",
          "6Server-RHSCL-2.4:rh-mysql57-mysql-debuginfo-0:5.7.19-6.el6.x86_64",
          "6Server-RHSCL-2.4:rh-mysql57-mysql-devel-0:5.7.19-6.el6.x86_64",
          "6Server-RHSCL-2.4:rh-mysql57-mysql-errmsg-0:5.7.19-6.el6.x86_64",
          "6Server-RHSCL-2.4:rh-mysql57-mysql-server-0:5.7.19-6.el6.x86_64",
          "6Server-RHSCL-2.4:rh-mysql57-mysql-test-0:5.7.19-6.el6.x86_64",
          "6Workstation-RHSCL-2.4:rh-mysql57-mysql-0:5.7.19-6.el6.src",
          "6Workstation-RHSCL-2.4:rh-mysql57-mysql-0:5.7.19-6.el6.x86_64",
          "6Workstation-RHSCL-2.4:rh-mysql57-mysql-common-0:5.7.19-6.el6.x86_64",
          "6Workstation-RHSCL-2.4:rh-mysql57-mysql-config-0:5.7.19-6.el6.x86_64",
          "6Workstation-RHSCL-2.4:rh-mysql57-mysql-debuginfo-0:5.7.19-6.el6.x86_64",
          "6Workstation-RHSCL-2.4:rh-mysql57-mysql-devel-0:5.7.19-6.el6.x86_64",
          "6Workstation-RHSCL-2.4:rh-mysql57-mysql-errmsg-0:5.7.19-6.el6.x86_64",
          "6Workstation-RHSCL-2.4:rh-mysql57-mysql-server-0:5.7.19-6.el6.x86_64",
          "6Workstation-RHSCL-2.4:rh-mysql57-mysql-test-0:5.7.19-6.el6.x86_64",
          "7Server-RHSCL-2.4-7.3.Z:rh-mysql57-mysql-0:5.7.19-6.el7.src",
          "7Server-RHSCL-2.4-7.3.Z:rh-mysql57-mysql-0:5.7.19-6.el7.x86_64",
          "7Server-RHSCL-2.4-7.3.Z:rh-mysql57-mysql-common-0:5.7.19-6.el7.x86_64",
          "7Server-RHSCL-2.4-7.3.Z:rh-mysql57-mysql-config-0:5.7.19-6.el7.x86_64",
          "7Server-RHSCL-2.4-7.3.Z:rh-mysql57-mysql-debuginfo-0:5.7.19-6.el7.x86_64",
          "7Server-RHSCL-2.4-7.3.Z:rh-mysql57-mysql-devel-0:5.7.19-6.el7.x86_64",
          "7Server-RHSCL-2.4-7.3.Z:rh-mysql57-mysql-errmsg-0:5.7.19-6.el7.x86_64",
          "7Server-RHSCL-2.4-7.3.Z:rh-mysql57-mysql-server-0:5.7.19-6.el7.x86_64",
          "7Server-RHSCL-2.4-7.3.Z:rh-mysql57-mysql-test-0:5.7.19-6.el7.x86_64",
          "7Server-RHSCL-2.4:rh-mysql57-mysql-0:5.7.19-6.el7.src",
          "7Server-RHSCL-2.4:rh-mysql57-mysql-0:5.7.19-6.el7.x86_64",
          "7Server-RHSCL-2.4:rh-mysql57-mysql-common-0:5.7.19-6.el7.x86_64",
          "7Server-RHSCL-2.4:rh-mysql57-mysql-config-0:5.7.19-6.el7.x86_64",
          "7Server-RHSCL-2.4:rh-mysql57-mysql-debuginfo-0:5.7.19-6.el7.x86_64",
          "7Server-RHSCL-2.4:rh-mysql57-mysql-devel-0:5.7.19-6.el7.x86_64",
          "7Server-RHSCL-2.4:rh-mysql57-mysql-errmsg-0:5.7.19-6.el7.x86_64",
          "7Server-RHSCL-2.4:rh-mysql57-mysql-server-0:5.7.19-6.el7.x86_64",
          "7Server-RHSCL-2.4:rh-mysql57-mysql-test-0:5.7.19-6.el7.x86_64",
          "7Workstation-RHSCL-2.4:rh-mysql57-mysql-0:5.7.19-6.el7.src",
          "7Workstation-RHSCL-2.4:rh-mysql57-mysql-0:5.7.19-6.el7.x86_64",
          "7Workstation-RHSCL-2.4:rh-mysql57-mysql-common-0:5.7.19-6.el7.x86_64",
          "7Workstation-RHSCL-2.4:rh-mysql57-mysql-config-0:5.7.19-6.el7.x86_64",
          "7Workstation-RHSCL-2.4:rh-mysql57-mysql-debuginfo-0:5.7.19-6.el7.x86_64",
          "7Workstation-RHSCL-2.4:rh-mysql57-mysql-devel-0:5.7.19-6.el7.x86_64",
          "7Workstation-RHSCL-2.4:rh-mysql57-mysql-errmsg-0:5.7.19-6.el7.x86_64",
          "7Workstation-RHSCL-2.4:rh-mysql57-mysql-server-0:5.7.19-6.el7.x86_64",
          "7Workstation-RHSCL-2.4:rh-mysql57-mysql-test-0:5.7.19-6.el7.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2016-8327"
        },
        {
          "category": "external",
          "summary": "RHBZ#1414337",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1414337"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2016-8327",
          "url": "https://www.cve.org/CVERecord?id=CVE-2016-8327"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2016-8327",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2016-8327"
        },
        {
          "category": "external",
          "summary": "http://www.oracle.com/technetwork/security-advisory/cpujan2017-2881727.html#AppendixMSQL",
          "url": "http://www.oracle.com/technetwork/security-advisory/cpujan2017-2881727.html#AppendixMSQL"
        }
      ],
      "release_date": "2017-01-18T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2017-10-12T07:53:15+00:00",
          "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAfter installing this update, the MySQL server daemon (mysqld) will be restarted automatically.",
          "product_ids": [
            "6Server-RHSCL-2.4-6.7.Z:rh-mysql57-mysql-0:5.7.19-6.el6.src",
            "6Server-RHSCL-2.4-6.7.Z:rh-mysql57-mysql-0:5.7.19-6.el6.x86_64",
            "6Server-RHSCL-2.4-6.7.Z:rh-mysql57-mysql-common-0:5.7.19-6.el6.x86_64",
            "6Server-RHSCL-2.4-6.7.Z:rh-mysql57-mysql-config-0:5.7.19-6.el6.x86_64",
            "6Server-RHSCL-2.4-6.7.Z:rh-mysql57-mysql-debuginfo-0:5.7.19-6.el6.x86_64",
            "6Server-RHSCL-2.4-6.7.Z:rh-mysql57-mysql-devel-0:5.7.19-6.el6.x86_64",
            "6Server-RHSCL-2.4-6.7.Z:rh-mysql57-mysql-errmsg-0:5.7.19-6.el6.x86_64",
            "6Server-RHSCL-2.4-6.7.Z:rh-mysql57-mysql-server-0:5.7.19-6.el6.x86_64",
            "6Server-RHSCL-2.4-6.7.Z:rh-mysql57-mysql-test-0:5.7.19-6.el6.x86_64",
            "6Server-RHSCL-2.4:rh-mysql57-mysql-0:5.7.19-6.el6.src",
            "6Server-RHSCL-2.4:rh-mysql57-mysql-0:5.7.19-6.el6.x86_64",
            "6Server-RHSCL-2.4:rh-mysql57-mysql-common-0:5.7.19-6.el6.x86_64",
            "6Server-RHSCL-2.4:rh-mysql57-mysql-config-0:5.7.19-6.el6.x86_64",
            "6Server-RHSCL-2.4:rh-mysql57-mysql-debuginfo-0:5.7.19-6.el6.x86_64",
            "6Server-RHSCL-2.4:rh-mysql57-mysql-devel-0:5.7.19-6.el6.x86_64",
            "6Server-RHSCL-2.4:rh-mysql57-mysql-errmsg-0:5.7.19-6.el6.x86_64",
            "6Server-RHSCL-2.4:rh-mysql57-mysql-server-0:5.7.19-6.el6.x86_64",
            "6Server-RHSCL-2.4:rh-mysql57-mysql-test-0:5.7.19-6.el6.x86_64",
            "6Workstation-RHSCL-2.4:rh-mysql57-mysql-0:5.7.19-6.el6.src",
            "6Workstation-RHSCL-2.4:rh-mysql57-mysql-0:5.7.19-6.el6.x86_64",
            "6Workstation-RHSCL-2.4:rh-mysql57-mysql-common-0:5.7.19-6.el6.x86_64",
            "6Workstation-RHSCL-2.4:rh-mysql57-mysql-config-0:5.7.19-6.el6.x86_64",
            "6Workstation-RHSCL-2.4:rh-mysql57-mysql-debuginfo-0:5.7.19-6.el6.x86_64",
            "6Workstation-RHSCL-2.4:rh-mysql57-mysql-devel-0:5.7.19-6.el6.x86_64",
            "6Workstation-RHSCL-2.4:rh-mysql57-mysql-errmsg-0:5.7.19-6.el6.x86_64",
            "6Workstation-RHSCL-2.4:rh-mysql57-mysql-server-0:5.7.19-6.el6.x86_64",
            "6Workstation-RHSCL-2.4:rh-mysql57-mysql-test-0:5.7.19-6.el6.x86_64",
            "7Server-RHSCL-2.4-7.3.Z:rh-mysql57-mysql-0:5.7.19-6.el7.src",
            "7Server-RHSCL-2.4-7.3.Z:rh-mysql57-mysql-0:5.7.19-6.el7.x86_64",
            "7Server-RHSCL-2.4-7.3.Z:rh-mysql57-mysql-common-0:5.7.19-6.el7.x86_64",
            "7Server-RHSCL-2.4-7.3.Z:rh-mysql57-mysql-config-0:5.7.19-6.el7.x86_64",
            "7Server-RHSCL-2.4-7.3.Z:rh-mysql57-mysql-debuginfo-0:5.7.19-6.el7.x86_64",
            "7Server-RHSCL-2.4-7.3.Z:rh-mysql57-mysql-devel-0:5.7.19-6.el7.x86_64",
            "7Server-RHSCL-2.4-7.3.Z:rh-mysql57-mysql-errmsg-0:5.7.19-6.el7.x86_64",
            "7Server-RHSCL-2.4-7.3.Z:rh-mysql57-mysql-server-0:5.7.19-6.el7.x86_64",
            "7Server-RHSCL-2.4-7.3.Z:rh-mysql57-mysql-test-0:5.7.19-6.el7.x86_64",
            "7Server-RHSCL-2.4:rh-mysql57-mysql-0:5.7.19-6.el7.src",
            "7Server-RHSCL-2.4:rh-mysql57-mysql-0:5.7.19-6.el7.x86_64",
            "7Server-RHSCL-2.4:rh-mysql57-mysql-common-0:5.7.19-6.el7.x86_64",
            "7Server-RHSCL-2.4:rh-mysql57-mysql-config-0:5.7.19-6.el7.x86_64",
            "7Server-RHSCL-2.4:rh-mysql57-mysql-debuginfo-0:5.7.19-6.el7.x86_64",
            "7Server-RHSCL-2.4:rh-mysql57-mysql-devel-0:5.7.19-6.el7.x86_64",
            "7Server-RHSCL-2.4:rh-mysql57-mysql-errmsg-0:5.7.19-6.el7.x86_64",
            "7Server-RHSCL-2.4:rh-mysql57-mysql-server-0:5.7.19-6.el7.x86_64",
            "7Server-RHSCL-2.4:rh-mysql57-mysql-test-0:5.7.19-6.el7.x86_64",
            "7Workstation-RHSCL-2.4:rh-mysql57-mysql-0:5.7.19-6.el7.src",
            "7Workstation-RHSCL-2.4:rh-mysql57-mysql-0:5.7.19-6.el7.x86_64",
            "7Workstation-RHSCL-2.4:rh-mysql57-mysql-common-0:5.7.19-6.el7.x86_64",
            "7Workstation-RHSCL-2.4:rh-mysql57-mysql-config-0:5.7.19-6.el7.x86_64",
            "7Workstation-RHSCL-2.4:rh-mysql57-mysql-debuginfo-0:5.7.19-6.el7.x86_64",
            "7Workstation-RHSCL-2.4:rh-mysql57-mysql-devel-0:5.7.19-6.el7.x86_64",
            "7Workstation-RHSCL-2.4:rh-mysql57-mysql-errmsg-0:5.7.19-6.el7.x86_64",
            "7Workstation-RHSCL-2.4:rh-mysql57-mysql-server-0:5.7.19-6.el7.x86_64",
            "7Workstation-RHSCL-2.4:rh-mysql57-mysql-test-0:5.7.19-6.el7.x86_64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2017:2886"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "HIGH",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 4.4,
            "baseSeverity": "MEDIUM",
            "confidentialityImpact": "NONE",
            "integrityImpact": "NONE",
            "privilegesRequired": "HIGH",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.0/AV:N/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.0"
          },
          "products": [
            "6Server-RHSCL-2.4-6.7.Z:rh-mysql57-mysql-0:5.7.19-6.el6.src",
            "6Server-RHSCL-2.4-6.7.Z:rh-mysql57-mysql-0:5.7.19-6.el6.x86_64",
            "6Server-RHSCL-2.4-6.7.Z:rh-mysql57-mysql-common-0:5.7.19-6.el6.x86_64",
            "6Server-RHSCL-2.4-6.7.Z:rh-mysql57-mysql-config-0:5.7.19-6.el6.x86_64",
            "6Server-RHSCL-2.4-6.7.Z:rh-mysql57-mysql-debuginfo-0:5.7.19-6.el6.x86_64",
            "6Server-RHSCL-2.4-6.7.Z:rh-mysql57-mysql-devel-0:5.7.19-6.el6.x86_64",
            "6Server-RHSCL-2.4-6.7.Z:rh-mysql57-mysql-errmsg-0:5.7.19-6.el6.x86_64",
            "6Server-RHSCL-2.4-6.7.Z:rh-mysql57-mysql-server-0:5.7.19-6.el6.x86_64",
            "6Server-RHSCL-2.4-6.7.Z:rh-mysql57-mysql-test-0:5.7.19-6.el6.x86_64",
            "6Server-RHSCL-2.4:rh-mysql57-mysql-0:5.7.19-6.el6.src",
            "6Server-RHSCL-2.4:rh-mysql57-mysql-0:5.7.19-6.el6.x86_64",
            "6Server-RHSCL-2.4:rh-mysql57-mysql-common-0:5.7.19-6.el6.x86_64",
            "6Server-RHSCL-2.4:rh-mysql57-mysql-config-0:5.7.19-6.el6.x86_64",
            "6Server-RHSCL-2.4:rh-mysql57-mysql-debuginfo-0:5.7.19-6.el6.x86_64",
            "6Server-RHSCL-2.4:rh-mysql57-mysql-devel-0:5.7.19-6.el6.x86_64",
            "6Server-RHSCL-2.4:rh-mysql57-mysql-errmsg-0:5.7.19-6.el6.x86_64",
            "6Server-RHSCL-2.4:rh-mysql57-mysql-server-0:5.7.19-6.el6.x86_64",
            "6Server-RHSCL-2.4:rh-mysql57-mysql-test-0:5.7.19-6.el6.x86_64",
            "6Workstation-RHSCL-2.4:rh-mysql57-mysql-0:5.7.19-6.el6.src",
            "6Workstation-RHSCL-2.4:rh-mysql57-mysql-0:5.7.19-6.el6.x86_64",
            "6Workstation-RHSCL-2.4:rh-mysql57-mysql-common-0:5.7.19-6.el6.x86_64",
            "6Workstation-RHSCL-2.4:rh-mysql57-mysql-config-0:5.7.19-6.el6.x86_64",
            "6Workstation-RHSCL-2.4:rh-mysql57-mysql-debuginfo-0:5.7.19-6.el6.x86_64",
            "6Workstation-RHSCL-2.4:rh-mysql57-mysql-devel-0:5.7.19-6.el6.x86_64",
            "6Workstation-RHSCL-2.4:rh-mysql57-mysql-errmsg-0:5.7.19-6.el6.x86_64",
            "6Workstation-RHSCL-2.4:rh-mysql57-mysql-server-0:5.7.19-6.el6.x86_64",
            "6Workstation-RHSCL-2.4:rh-mysql57-mysql-test-0:5.7.19-6.el6.x86_64",
            "7Server-RHSCL-2.4-7.3.Z:rh-mysql57-mysql-0:5.7.19-6.el7.src",
            "7Server-RHSCL-2.4-7.3.Z:rh-mysql57-mysql-0:5.7.19-6.el7.x86_64",
            "7Server-RHSCL-2.4-7.3.Z:rh-mysql57-mysql-common-0:5.7.19-6.el7.x86_64",
            "7Server-RHSCL-2.4-7.3.Z:rh-mysql57-mysql-config-0:5.7.19-6.el7.x86_64",
            "7Server-RHSCL-2.4-7.3.Z:rh-mysql57-mysql-debuginfo-0:5.7.19-6.el7.x86_64",
            "7Server-RHSCL-2.4-7.3.Z:rh-mysql57-mysql-devel-0:5.7.19-6.el7.x86_64",
            "7Server-RHSCL-2.4-7.3.Z:rh-mysql57-mysql-errmsg-0:5.7.19-6.el7.x86_64",
            "7Server-RHSCL-2.4-7.3.Z:rh-mysql57-mysql-server-0:5.7.19-6.el7.x86_64",
            "7Server-RHSCL-2.4-7.3.Z:rh-mysql57-mysql-test-0:5.7.19-6.el7.x86_64",
            "7Server-RHSCL-2.4:rh-mysql57-mysql-0:5.7.19-6.el7.src",
            "7Server-RHSCL-2.4:rh-mysql57-mysql-0:5.7.19-6.el7.x86_64",
            "7Server-RHSCL-2.4:rh-mysql57-mysql-common-0:5.7.19-6.el7.x86_64",
            "7Server-RHSCL-2.4:rh-mysql57-mysql-config-0:5.7.19-6.el7.x86_64",
            "7Server-RHSCL-2.4:rh-mysql57-mysql-debuginfo-0:5.7.19-6.el7.x86_64",
            "7Server-RHSCL-2.4:rh-mysql57-mysql-devel-0:5.7.19-6.el7.x86_64",
            "7Server-RHSCL-2.4:rh-mysql57-mysql-errmsg-0:5.7.19-6.el7.x86_64",
            "7Server-RHSCL-2.4:rh-mysql57-mysql-server-0:5.7.19-6.el7.x86_64",
            "7Server-RHSCL-2.4:rh-mysql57-mysql-test-0:5.7.19-6.el7.x86_64",
            "7Workstation-RHSCL-2.4:rh-mysql57-mysql-0:5.7.19-6.el7.src",
            "7Workstation-RHSCL-2.4:rh-mysql57-mysql-0:5.7.19-6.el7.x86_64",
            "7Workstation-RHSCL-2.4:rh-mysql57-mysql-common-0:5.7.19-6.el7.x86_64",
            "7Workstation-RHSCL-2.4:rh-mysql57-mysql-config-0:5.7.19-6.el7.x86_64",
            "7Workstation-RHSCL-2.4:rh-mysql57-mysql-debuginfo-0:5.7.19-6.el7.x86_64",
            "7Workstation-RHSCL-2.4:rh-mysql57-mysql-devel-0:5.7.19-6.el7.x86_64",
            "7Workstation-RHSCL-2.4:rh-mysql57-mysql-errmsg-0:5.7.19-6.el7.x86_64",
            "7Workstation-RHSCL-2.4:rh-mysql57-mysql-server-0:5.7.19-6.el7.x86_64",
            "7Workstation-RHSCL-2.4:rh-mysql57-mysql-test-0:5.7.19-6.el7.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Moderate"
        }
      ],
      "title": "mysql: Server: Replication  unspecified vulnerability (CPU Jan 2017)"
    },
    {
      "cve": "CVE-2017-3238",
      "discovery_date": "2017-01-18T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "1414338"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Optimizer). Supported versions that are affected are 5.5.53 and earlier, 5.6.34 and earlier and 5.7.16 and earlier. Easily exploitable vulnerability allows low privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS v3.0 Base Score 6.5 (Availability impacts).",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "mysql: Server: Optimizer unspecified vulnerability (CPU Jan 2017)",
          "title": "Vulnerability summary"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "6Server-RHSCL-2.4-6.7.Z:rh-mysql57-mysql-0:5.7.19-6.el6.src",
          "6Server-RHSCL-2.4-6.7.Z:rh-mysql57-mysql-0:5.7.19-6.el6.x86_64",
          "6Server-RHSCL-2.4-6.7.Z:rh-mysql57-mysql-common-0:5.7.19-6.el6.x86_64",
          "6Server-RHSCL-2.4-6.7.Z:rh-mysql57-mysql-config-0:5.7.19-6.el6.x86_64",
          "6Server-RHSCL-2.4-6.7.Z:rh-mysql57-mysql-debuginfo-0:5.7.19-6.el6.x86_64",
          "6Server-RHSCL-2.4-6.7.Z:rh-mysql57-mysql-devel-0:5.7.19-6.el6.x86_64",
          "6Server-RHSCL-2.4-6.7.Z:rh-mysql57-mysql-errmsg-0:5.7.19-6.el6.x86_64",
          "6Server-RHSCL-2.4-6.7.Z:rh-mysql57-mysql-server-0:5.7.19-6.el6.x86_64",
          "6Server-RHSCL-2.4-6.7.Z:rh-mysql57-mysql-test-0:5.7.19-6.el6.x86_64",
          "6Server-RHSCL-2.4:rh-mysql57-mysql-0:5.7.19-6.el6.src",
          "6Server-RHSCL-2.4:rh-mysql57-mysql-0:5.7.19-6.el6.x86_64",
          "6Server-RHSCL-2.4:rh-mysql57-mysql-common-0:5.7.19-6.el6.x86_64",
          "6Server-RHSCL-2.4:rh-mysql57-mysql-config-0:5.7.19-6.el6.x86_64",
          "6Server-RHSCL-2.4:rh-mysql57-mysql-debuginfo-0:5.7.19-6.el6.x86_64",
          "6Server-RHSCL-2.4:rh-mysql57-mysql-devel-0:5.7.19-6.el6.x86_64",
          "6Server-RHSCL-2.4:rh-mysql57-mysql-errmsg-0:5.7.19-6.el6.x86_64",
          "6Server-RHSCL-2.4:rh-mysql57-mysql-server-0:5.7.19-6.el6.x86_64",
          "6Server-RHSCL-2.4:rh-mysql57-mysql-test-0:5.7.19-6.el6.x86_64",
          "6Workstation-RHSCL-2.4:rh-mysql57-mysql-0:5.7.19-6.el6.src",
          "6Workstation-RHSCL-2.4:rh-mysql57-mysql-0:5.7.19-6.el6.x86_64",
          "6Workstation-RHSCL-2.4:rh-mysql57-mysql-common-0:5.7.19-6.el6.x86_64",
          "6Workstation-RHSCL-2.4:rh-mysql57-mysql-config-0:5.7.19-6.el6.x86_64",
          "6Workstation-RHSCL-2.4:rh-mysql57-mysql-debuginfo-0:5.7.19-6.el6.x86_64",
          "6Workstation-RHSCL-2.4:rh-mysql57-mysql-devel-0:5.7.19-6.el6.x86_64",
          "6Workstation-RHSCL-2.4:rh-mysql57-mysql-errmsg-0:5.7.19-6.el6.x86_64",
          "6Workstation-RHSCL-2.4:rh-mysql57-mysql-server-0:5.7.19-6.el6.x86_64",
          "6Workstation-RHSCL-2.4:rh-mysql57-mysql-test-0:5.7.19-6.el6.x86_64",
          "7Server-RHSCL-2.4-7.3.Z:rh-mysql57-mysql-0:5.7.19-6.el7.src",
          "7Server-RHSCL-2.4-7.3.Z:rh-mysql57-mysql-0:5.7.19-6.el7.x86_64",
          "7Server-RHSCL-2.4-7.3.Z:rh-mysql57-mysql-common-0:5.7.19-6.el7.x86_64",
          "7Server-RHSCL-2.4-7.3.Z:rh-mysql57-mysql-config-0:5.7.19-6.el7.x86_64",
          "7Server-RHSCL-2.4-7.3.Z:rh-mysql57-mysql-debuginfo-0:5.7.19-6.el7.x86_64",
          "7Server-RHSCL-2.4-7.3.Z:rh-mysql57-mysql-devel-0:5.7.19-6.el7.x86_64",
          "7Server-RHSCL-2.4-7.3.Z:rh-mysql57-mysql-errmsg-0:5.7.19-6.el7.x86_64",
          "7Server-RHSCL-2.4-7.3.Z:rh-mysql57-mysql-server-0:5.7.19-6.el7.x86_64",
          "7Server-RHSCL-2.4-7.3.Z:rh-mysql57-mysql-test-0:5.7.19-6.el7.x86_64",
          "7Server-RHSCL-2.4:rh-mysql57-mysql-0:5.7.19-6.el7.src",
          "7Server-RHSCL-2.4:rh-mysql57-mysql-0:5.7.19-6.el7.x86_64",
          "7Server-RHSCL-2.4:rh-mysql57-mysql-common-0:5.7.19-6.el7.x86_64",
          "7Server-RHSCL-2.4:rh-mysql57-mysql-config-0:5.7.19-6.el7.x86_64",
          "7Server-RHSCL-2.4:rh-mysql57-mysql-debuginfo-0:5.7.19-6.el7.x86_64",
          "7Server-RHSCL-2.4:rh-mysql57-mysql-devel-0:5.7.19-6.el7.x86_64",
          "7Server-RHSCL-2.4:rh-mysql57-mysql-errmsg-0:5.7.19-6.el7.x86_64",
          "7Server-RHSCL-2.4:rh-mysql57-mysql-server-0:5.7.19-6.el7.x86_64",
          "7Server-RHSCL-2.4:rh-mysql57-mysql-test-0:5.7.19-6.el7.x86_64",
          "7Workstation-RHSCL-2.4:rh-mysql57-mysql-0:5.7.19-6.el7.src",
          "7Workstation-RHSCL-2.4:rh-mysql57-mysql-0:5.7.19-6.el7.x86_64",
          "7Workstation-RHSCL-2.4:rh-mysql57-mysql-common-0:5.7.19-6.el7.x86_64",
          "7Workstation-RHSCL-2.4:rh-mysql57-mysql-config-0:5.7.19-6.el7.x86_64",
          "7Workstation-RHSCL-2.4:rh-mysql57-mysql-debuginfo-0:5.7.19-6.el7.x86_64",
          "7Workstation-RHSCL-2.4:rh-mysql57-mysql-devel-0:5.7.19-6.el7.x86_64",
          "7Workstation-RHSCL-2.4:rh-mysql57-mysql-errmsg-0:5.7.19-6.el7.x86_64",
          "7Workstation-RHSCL-2.4:rh-mysql57-mysql-server-0:5.7.19-6.el7.x86_64",
          "7Workstation-RHSCL-2.4:rh-mysql57-mysql-test-0:5.7.19-6.el7.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2017-3238"
        },
        {
          "category": "external",
          "summary": "RHBZ#1414338",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1414338"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2017-3238",
          "url": "https://www.cve.org/CVERecord?id=CVE-2017-3238"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2017-3238",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2017-3238"
        },
        {
          "category": "external",
          "summary": "http://www.oracle.com/technetwork/security-advisory/cpujan2017-2881727.html#AppendixMSQL",
          "url": "http://www.oracle.com/technetwork/security-advisory/cpujan2017-2881727.html#AppendixMSQL"
        }
      ],
      "release_date": "2017-01-18T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2017-10-12T07:53:15+00:00",
          "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAfter installing this update, the MySQL server daemon (mysqld) will be restarted automatically.",
          "product_ids": [
            "6Server-RHSCL-2.4-6.7.Z:rh-mysql57-mysql-0:5.7.19-6.el6.src",
            "6Server-RHSCL-2.4-6.7.Z:rh-mysql57-mysql-0:5.7.19-6.el6.x86_64",
            "6Server-RHSCL-2.4-6.7.Z:rh-mysql57-mysql-common-0:5.7.19-6.el6.x86_64",
            "6Server-RHSCL-2.4-6.7.Z:rh-mysql57-mysql-config-0:5.7.19-6.el6.x86_64",
            "6Server-RHSCL-2.4-6.7.Z:rh-mysql57-mysql-debuginfo-0:5.7.19-6.el6.x86_64",
            "6Server-RHSCL-2.4-6.7.Z:rh-mysql57-mysql-devel-0:5.7.19-6.el6.x86_64",
            "6Server-RHSCL-2.4-6.7.Z:rh-mysql57-mysql-errmsg-0:5.7.19-6.el6.x86_64",
            "6Server-RHSCL-2.4-6.7.Z:rh-mysql57-mysql-server-0:5.7.19-6.el6.x86_64",
            "6Server-RHSCL-2.4-6.7.Z:rh-mysql57-mysql-test-0:5.7.19-6.el6.x86_64",
            "6Server-RHSCL-2.4:rh-mysql57-mysql-0:5.7.19-6.el6.src",
            "6Server-RHSCL-2.4:rh-mysql57-mysql-0:5.7.19-6.el6.x86_64",
            "6Server-RHSCL-2.4:rh-mysql57-mysql-common-0:5.7.19-6.el6.x86_64",
            "6Server-RHSCL-2.4:rh-mysql57-mysql-config-0:5.7.19-6.el6.x86_64",
            "6Server-RHSCL-2.4:rh-mysql57-mysql-debuginfo-0:5.7.19-6.el6.x86_64",
            "6Server-RHSCL-2.4:rh-mysql57-mysql-devel-0:5.7.19-6.el6.x86_64",
            "6Server-RHSCL-2.4:rh-mysql57-mysql-errmsg-0:5.7.19-6.el6.x86_64",
            "6Server-RHSCL-2.4:rh-mysql57-mysql-server-0:5.7.19-6.el6.x86_64",
            "6Server-RHSCL-2.4:rh-mysql57-mysql-test-0:5.7.19-6.el6.x86_64",
            "6Workstation-RHSCL-2.4:rh-mysql57-mysql-0:5.7.19-6.el6.src",
            "6Workstation-RHSCL-2.4:rh-mysql57-mysql-0:5.7.19-6.el6.x86_64",
            "6Workstation-RHSCL-2.4:rh-mysql57-mysql-common-0:5.7.19-6.el6.x86_64",
            "6Workstation-RHSCL-2.4:rh-mysql57-mysql-config-0:5.7.19-6.el6.x86_64",
            "6Workstation-RHSCL-2.4:rh-mysql57-mysql-debuginfo-0:5.7.19-6.el6.x86_64",
            "6Workstation-RHSCL-2.4:rh-mysql57-mysql-devel-0:5.7.19-6.el6.x86_64",
            "6Workstation-RHSCL-2.4:rh-mysql57-mysql-errmsg-0:5.7.19-6.el6.x86_64",
            "6Workstation-RHSCL-2.4:rh-mysql57-mysql-server-0:5.7.19-6.el6.x86_64",
            "6Workstation-RHSCL-2.4:rh-mysql57-mysql-test-0:5.7.19-6.el6.x86_64",
            "7Server-RHSCL-2.4-7.3.Z:rh-mysql57-mysql-0:5.7.19-6.el7.src",
            "7Server-RHSCL-2.4-7.3.Z:rh-mysql57-mysql-0:5.7.19-6.el7.x86_64",
            "7Server-RHSCL-2.4-7.3.Z:rh-mysql57-mysql-common-0:5.7.19-6.el7.x86_64",
            "7Server-RHSCL-2.4-7.3.Z:rh-mysql57-mysql-config-0:5.7.19-6.el7.x86_64",
            "7Server-RHSCL-2.4-7.3.Z:rh-mysql57-mysql-debuginfo-0:5.7.19-6.el7.x86_64",
            "7Server-RHSCL-2.4-7.3.Z:rh-mysql57-mysql-devel-0:5.7.19-6.el7.x86_64",
            "7Server-RHSCL-2.4-7.3.Z:rh-mysql57-mysql-errmsg-0:5.7.19-6.el7.x86_64",
            "7Server-RHSCL-2.4-7.3.Z:rh-mysql57-mysql-server-0:5.7.19-6.el7.x86_64",
            "7Server-RHSCL-2.4-7.3.Z:rh-mysql57-mysql-test-0:5.7.19-6.el7.x86_64",
            "7Server-RHSCL-2.4:rh-mysql57-mysql-0:5.7.19-6.el7.src",
            "7Server-RHSCL-2.4:rh-mysql57-mysql-0:5.7.19-6.el7.x86_64",
            "7Server-RHSCL-2.4:rh-mysql57-mysql-common-0:5.7.19-6.el7.x86_64",
            "7Server-RHSCL-2.4:rh-mysql57-mysql-config-0:5.7.19-6.el7.x86_64",
            "7Server-RHSCL-2.4:rh-mysql57-mysql-debuginfo-0:5.7.19-6.el7.x86_64",
            "7Server-RHSCL-2.4:rh-mysql57-mysql-devel-0:5.7.19-6.el7.x86_64",
            "7Server-RHSCL-2.4:rh-mysql57-mysql-errmsg-0:5.7.19-6.el7.x86_64",
            "7Server-RHSCL-2.4:rh-mysql57-mysql-server-0:5.7.19-6.el7.x86_64",
            "7Server-RHSCL-2.4:rh-mysql57-mysql-test-0:5.7.19-6.el7.x86_64",
            "7Workstation-RHSCL-2.4:rh-mysql57-mysql-0:5.7.19-6.el7.src",
            "7Workstation-RHSCL-2.4:rh-mysql57-mysql-0:5.7.19-6.el7.x86_64",
            "7Workstation-RHSCL-2.4:rh-mysql57-mysql-common-0:5.7.19-6.el7.x86_64",
            "7Workstation-RHSCL-2.4:rh-mysql57-mysql-config-0:5.7.19-6.el7.x86_64",
            "7Workstation-RHSCL-2.4:rh-mysql57-mysql-debuginfo-0:5.7.19-6.el7.x86_64",
            "7Workstation-RHSCL-2.4:rh-mysql57-mysql-devel-0:5.7.19-6.el7.x86_64",
            "7Workstation-RHSCL-2.4:rh-mysql57-mysql-errmsg-0:5.7.19-6.el7.x86_64",
            "7Workstation-RHSCL-2.4:rh-mysql57-mysql-server-0:5.7.19-6.el7.x86_64",
            "7Workstation-RHSCL-2.4:rh-mysql57-mysql-test-0:5.7.19-6.el7.x86_64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2017:2886"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 6.5,
            "baseSeverity": "MEDIUM",
            "confidentialityImpact": "NONE",
            "integrityImpact": "NONE",
            "privilegesRequired": "LOW",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.0"
          },
          "products": [
            "6Server-RHSCL-2.4-6.7.Z:rh-mysql57-mysql-0:5.7.19-6.el6.src",
            "6Server-RHSCL-2.4-6.7.Z:rh-mysql57-mysql-0:5.7.19-6.el6.x86_64",
            "6Server-RHSCL-2.4-6.7.Z:rh-mysql57-mysql-common-0:5.7.19-6.el6.x86_64",
            "6Server-RHSCL-2.4-6.7.Z:rh-mysql57-mysql-config-0:5.7.19-6.el6.x86_64",
            "6Server-RHSCL-2.4-6.7.Z:rh-mysql57-mysql-debuginfo-0:5.7.19-6.el6.x86_64",
            "6Server-RHSCL-2.4-6.7.Z:rh-mysql57-mysql-devel-0:5.7.19-6.el6.x86_64",
            "6Server-RHSCL-2.4-6.7.Z:rh-mysql57-mysql-errmsg-0:5.7.19-6.el6.x86_64",
            "6Server-RHSCL-2.4-6.7.Z:rh-mysql57-mysql-server-0:5.7.19-6.el6.x86_64",
            "6Server-RHSCL-2.4-6.7.Z:rh-mysql57-mysql-test-0:5.7.19-6.el6.x86_64",
            "6Server-RHSCL-2.4:rh-mysql57-mysql-0:5.7.19-6.el6.src",
            "6Server-RHSCL-2.4:rh-mysql57-mysql-0:5.7.19-6.el6.x86_64",
            "6Server-RHSCL-2.4:rh-mysql57-mysql-common-0:5.7.19-6.el6.x86_64",
            "6Server-RHSCL-2.4:rh-mysql57-mysql-config-0:5.7.19-6.el6.x86_64",
            "6Server-RHSCL-2.4:rh-mysql57-mysql-debuginfo-0:5.7.19-6.el6.x86_64",
            "6Server-RHSCL-2.4:rh-mysql57-mysql-devel-0:5.7.19-6.el6.x86_64",
            "6Server-RHSCL-2.4:rh-mysql57-mysql-errmsg-0:5.7.19-6.el6.x86_64",
            "6Server-RHSCL-2.4:rh-mysql57-mysql-server-0:5.7.19-6.el6.x86_64",
            "6Server-RHSCL-2.4:rh-mysql57-mysql-test-0:5.7.19-6.el6.x86_64",
            "6Workstation-RHSCL-2.4:rh-mysql57-mysql-0:5.7.19-6.el6.src",
            "6Workstation-RHSCL-2.4:rh-mysql57-mysql-0:5.7.19-6.el6.x86_64",
            "6Workstation-RHSCL-2.4:rh-mysql57-mysql-common-0:5.7.19-6.el6.x86_64",
            "6Workstation-RHSCL-2.4:rh-mysql57-mysql-config-0:5.7.19-6.el6.x86_64",
            "6Workstation-RHSCL-2.4:rh-mysql57-mysql-debuginfo-0:5.7.19-6.el6.x86_64",
            "6Workstation-RHSCL-2.4:rh-mysql57-mysql-devel-0:5.7.19-6.el6.x86_64",
            "6Workstation-RHSCL-2.4:rh-mysql57-mysql-errmsg-0:5.7.19-6.el6.x86_64",
            "6Workstation-RHSCL-2.4:rh-mysql57-mysql-server-0:5.7.19-6.el6.x86_64",
            "6Workstation-RHSCL-2.4:rh-mysql57-mysql-test-0:5.7.19-6.el6.x86_64",
            "7Server-RHSCL-2.4-7.3.Z:rh-mysql57-mysql-0:5.7.19-6.el7.src",
            "7Server-RHSCL-2.4-7.3.Z:rh-mysql57-mysql-0:5.7.19-6.el7.x86_64",
            "7Server-RHSCL-2.4-7.3.Z:rh-mysql57-mysql-common-0:5.7.19-6.el7.x86_64",
            "7Server-RHSCL-2.4-7.3.Z:rh-mysql57-mysql-config-0:5.7.19-6.el7.x86_64",
            "7Server-RHSCL-2.4-7.3.Z:rh-mysql57-mysql-debuginfo-0:5.7.19-6.el7.x86_64",
            "7Server-RHSCL-2.4-7.3.Z:rh-mysql57-mysql-devel-0:5.7.19-6.el7.x86_64",
            "7Server-RHSCL-2.4-7.3.Z:rh-mysql57-mysql-errmsg-0:5.7.19-6.el7.x86_64",
            "7Server-RHSCL-2.4-7.3.Z:rh-mysql57-mysql-server-0:5.7.19-6.el7.x86_64",
            "7Server-RHSCL-2.4-7.3.Z:rh-mysql57-mysql-test-0:5.7.19-6.el7.x86_64",
            "7Server-RHSCL-2.4:rh-mysql57-mysql-0:5.7.19-6.el7.src",
            "7Server-RHSCL-2.4:rh-mysql57-mysql-0:5.7.19-6.el7.x86_64",
            "7Server-RHSCL-2.4:rh-mysql57-mysql-common-0:5.7.19-6.el7.x86_64",
            "7Server-RHSCL-2.4:rh-mysql57-mysql-config-0:5.7.19-6.el7.x86_64",
            "7Server-RHSCL-2.4:rh-mysql57-mysql-debuginfo-0:5.7.19-6.el7.x86_64",
            "7Server-RHSCL-2.4:rh-mysql57-mysql-devel-0:5.7.19-6.el7.x86_64",
            "7Server-RHSCL-2.4:rh-mysql57-mysql-errmsg-0:5.7.19-6.el7.x86_64",
            "7Server-RHSCL-2.4:rh-mysql57-mysql-server-0:5.7.19-6.el7.x86_64",
            "7Server-RHSCL-2.4:rh-mysql57-mysql-test-0:5.7.19-6.el7.x86_64",
            "7Workstation-RHSCL-2.4:rh-mysql57-mysql-0:5.7.19-6.el7.src",
            "7Workstation-RHSCL-2.4:rh-mysql57-mysql-0:5.7.19-6.el7.x86_64",
            "7Workstation-RHSCL-2.4:rh-mysql57-mysql-common-0:5.7.19-6.el7.x86_64",
            "7Workstation-RHSCL-2.4:rh-mysql57-mysql-config-0:5.7.19-6.el7.x86_64",
            "7Workstation-RHSCL-2.4:rh-mysql57-mysql-debuginfo-0:5.7.19-6.el7.x86_64",
            "7Workstation-RHSCL-2.4:rh-mysql57-mysql-devel-0:5.7.19-6.el7.x86_64",
            "7Workstation-RHSCL-2.4:rh-mysql57-mysql-errmsg-0:5.7.19-6.el7.x86_64",
            "7Workstation-RHSCL-2.4:rh-mysql57-mysql-server-0:5.7.19-6.el7.x86_64",
            "7Workstation-RHSCL-2.4:rh-mysql57-mysql-test-0:5.7.19-6.el7.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Moderate"
        }
      ],
      "title": "mysql: Server: Optimizer unspecified vulnerability (CPU Jan 2017)"
    },
    {
      "cve": "CVE-2017-3244",
      "discovery_date": "2017-01-18T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "1414342"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: DML). Supported versions that are affected are 5.5.53 and earlier, 5.6.34 and earlier and 5.7.16 and earlier. Easily exploitable vulnerability allows low privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS v3.0 Base Score 6.5 (Availability impacts).",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "mysql: Server: DML unspecified vulnerability (CPU Jan 2017)",
          "title": "Vulnerability summary"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "6Server-RHSCL-2.4-6.7.Z:rh-mysql57-mysql-0:5.7.19-6.el6.src",
          "6Server-RHSCL-2.4-6.7.Z:rh-mysql57-mysql-0:5.7.19-6.el6.x86_64",
          "6Server-RHSCL-2.4-6.7.Z:rh-mysql57-mysql-common-0:5.7.19-6.el6.x86_64",
          "6Server-RHSCL-2.4-6.7.Z:rh-mysql57-mysql-config-0:5.7.19-6.el6.x86_64",
          "6Server-RHSCL-2.4-6.7.Z:rh-mysql57-mysql-debuginfo-0:5.7.19-6.el6.x86_64",
          "6Server-RHSCL-2.4-6.7.Z:rh-mysql57-mysql-devel-0:5.7.19-6.el6.x86_64",
          "6Server-RHSCL-2.4-6.7.Z:rh-mysql57-mysql-errmsg-0:5.7.19-6.el6.x86_64",
          "6Server-RHSCL-2.4-6.7.Z:rh-mysql57-mysql-server-0:5.7.19-6.el6.x86_64",
          "6Server-RHSCL-2.4-6.7.Z:rh-mysql57-mysql-test-0:5.7.19-6.el6.x86_64",
          "6Server-RHSCL-2.4:rh-mysql57-mysql-0:5.7.19-6.el6.src",
          "6Server-RHSCL-2.4:rh-mysql57-mysql-0:5.7.19-6.el6.x86_64",
          "6Server-RHSCL-2.4:rh-mysql57-mysql-common-0:5.7.19-6.el6.x86_64",
          "6Server-RHSCL-2.4:rh-mysql57-mysql-config-0:5.7.19-6.el6.x86_64",
          "6Server-RHSCL-2.4:rh-mysql57-mysql-debuginfo-0:5.7.19-6.el6.x86_64",
          "6Server-RHSCL-2.4:rh-mysql57-mysql-devel-0:5.7.19-6.el6.x86_64",
          "6Server-RHSCL-2.4:rh-mysql57-mysql-errmsg-0:5.7.19-6.el6.x86_64",
          "6Server-RHSCL-2.4:rh-mysql57-mysql-server-0:5.7.19-6.el6.x86_64",
          "6Server-RHSCL-2.4:rh-mysql57-mysql-test-0:5.7.19-6.el6.x86_64",
          "6Workstation-RHSCL-2.4:rh-mysql57-mysql-0:5.7.19-6.el6.src",
          "6Workstation-RHSCL-2.4:rh-mysql57-mysql-0:5.7.19-6.el6.x86_64",
          "6Workstation-RHSCL-2.4:rh-mysql57-mysql-common-0:5.7.19-6.el6.x86_64",
          "6Workstation-RHSCL-2.4:rh-mysql57-mysql-config-0:5.7.19-6.el6.x86_64",
          "6Workstation-RHSCL-2.4:rh-mysql57-mysql-debuginfo-0:5.7.19-6.el6.x86_64",
          "6Workstation-RHSCL-2.4:rh-mysql57-mysql-devel-0:5.7.19-6.el6.x86_64",
          "6Workstation-RHSCL-2.4:rh-mysql57-mysql-errmsg-0:5.7.19-6.el6.x86_64",
          "6Workstation-RHSCL-2.4:rh-mysql57-mysql-server-0:5.7.19-6.el6.x86_64",
          "6Workstation-RHSCL-2.4:rh-mysql57-mysql-test-0:5.7.19-6.el6.x86_64",
          "7Server-RHSCL-2.4-7.3.Z:rh-mysql57-mysql-0:5.7.19-6.el7.src",
          "7Server-RHSCL-2.4-7.3.Z:rh-mysql57-mysql-0:5.7.19-6.el7.x86_64",
          "7Server-RHSCL-2.4-7.3.Z:rh-mysql57-mysql-common-0:5.7.19-6.el7.x86_64",
          "7Server-RHSCL-2.4-7.3.Z:rh-mysql57-mysql-config-0:5.7.19-6.el7.x86_64",
          "7Server-RHSCL-2.4-7.3.Z:rh-mysql57-mysql-debuginfo-0:5.7.19-6.el7.x86_64",
          "7Server-RHSCL-2.4-7.3.Z:rh-mysql57-mysql-devel-0:5.7.19-6.el7.x86_64",
          "7Server-RHSCL-2.4-7.3.Z:rh-mysql57-mysql-errmsg-0:5.7.19-6.el7.x86_64",
          "7Server-RHSCL-2.4-7.3.Z:rh-mysql57-mysql-server-0:5.7.19-6.el7.x86_64",
          "7Server-RHSCL-2.4-7.3.Z:rh-mysql57-mysql-test-0:5.7.19-6.el7.x86_64",
          "7Server-RHSCL-2.4:rh-mysql57-mysql-0:5.7.19-6.el7.src",
          "7Server-RHSCL-2.4:rh-mysql57-mysql-0:5.7.19-6.el7.x86_64",
          "7Server-RHSCL-2.4:rh-mysql57-mysql-common-0:5.7.19-6.el7.x86_64",
          "7Server-RHSCL-2.4:rh-mysql57-mysql-config-0:5.7.19-6.el7.x86_64",
          "7Server-RHSCL-2.4:rh-mysql57-mysql-debuginfo-0:5.7.19-6.el7.x86_64",
          "7Server-RHSCL-2.4:rh-mysql57-mysql-devel-0:5.7.19-6.el7.x86_64",
          "7Server-RHSCL-2.4:rh-mysql57-mysql-errmsg-0:5.7.19-6.el7.x86_64",
          "7Server-RHSCL-2.4:rh-mysql57-mysql-server-0:5.7.19-6.el7.x86_64",
          "7Server-RHSCL-2.4:rh-mysql57-mysql-test-0:5.7.19-6.el7.x86_64",
          "7Workstation-RHSCL-2.4:rh-mysql57-mysql-0:5.7.19-6.el7.src",
          "7Workstation-RHSCL-2.4:rh-mysql57-mysql-0:5.7.19-6.el7.x86_64",
          "7Workstation-RHSCL-2.4:rh-mysql57-mysql-common-0:5.7.19-6.el7.x86_64",
          "7Workstation-RHSCL-2.4:rh-mysql57-mysql-config-0:5.7.19-6.el7.x86_64",
          "7Workstation-RHSCL-2.4:rh-mysql57-mysql-debuginfo-0:5.7.19-6.el7.x86_64",
          "7Workstation-RHSCL-2.4:rh-mysql57-mysql-devel-0:5.7.19-6.el7.x86_64",
          "7Workstation-RHSCL-2.4:rh-mysql57-mysql-errmsg-0:5.7.19-6.el7.x86_64",
          "7Workstation-RHSCL-2.4:rh-mysql57-mysql-server-0:5.7.19-6.el7.x86_64",
          "7Workstation-RHSCL-2.4:rh-mysql57-mysql-test-0:5.7.19-6.el7.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2017-3244"
        },
        {
          "category": "external",
          "summary": "RHBZ#1414342",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1414342"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2017-3244",
          "url": "https://www.cve.org/CVERecord?id=CVE-2017-3244"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2017-3244",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2017-3244"
        },
        {
          "category": "external",
          "summary": "http://www.oracle.com/technetwork/security-advisory/cpujan2017-2881727.html#AppendixMSQL",
          "url": "http://www.oracle.com/technetwork/security-advisory/cpujan2017-2881727.html#AppendixMSQL"
        }
      ],
      "release_date": "2017-01-18T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2017-10-12T07:53:15+00:00",
          "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAfter installing this update, the MySQL server daemon (mysqld) will be restarted automatically.",
          "product_ids": [
            "6Server-RHSCL-2.4-6.7.Z:rh-mysql57-mysql-0:5.7.19-6.el6.src",
            "6Server-RHSCL-2.4-6.7.Z:rh-mysql57-mysql-0:5.7.19-6.el6.x86_64",
            "6Server-RHSCL-2.4-6.7.Z:rh-mysql57-mysql-common-0:5.7.19-6.el6.x86_64",
            "6Server-RHSCL-2.4-6.7.Z:rh-mysql57-mysql-config-0:5.7.19-6.el6.x86_64",
            "6Server-RHSCL-2.4-6.7.Z:rh-mysql57-mysql-debuginfo-0:5.7.19-6.el6.x86_64",
            "6Server-RHSCL-2.4-6.7.Z:rh-mysql57-mysql-devel-0:5.7.19-6.el6.x86_64",
            "6Server-RHSCL-2.4-6.7.Z:rh-mysql57-mysql-errmsg-0:5.7.19-6.el6.x86_64",
            "6Server-RHSCL-2.4-6.7.Z:rh-mysql57-mysql-server-0:5.7.19-6.el6.x86_64",
            "6Server-RHSCL-2.4-6.7.Z:rh-mysql57-mysql-test-0:5.7.19-6.el6.x86_64",
            "6Server-RHSCL-2.4:rh-mysql57-mysql-0:5.7.19-6.el6.src",
            "6Server-RHSCL-2.4:rh-mysql57-mysql-0:5.7.19-6.el6.x86_64",
            "6Server-RHSCL-2.4:rh-mysql57-mysql-common-0:5.7.19-6.el6.x86_64",
            "6Server-RHSCL-2.4:rh-mysql57-mysql-config-0:5.7.19-6.el6.x86_64",
            "6Server-RHSCL-2.4:rh-mysql57-mysql-debuginfo-0:5.7.19-6.el6.x86_64",
            "6Server-RHSCL-2.4:rh-mysql57-mysql-devel-0:5.7.19-6.el6.x86_64",
            "6Server-RHSCL-2.4:rh-mysql57-mysql-errmsg-0:5.7.19-6.el6.x86_64",
            "6Server-RHSCL-2.4:rh-mysql57-mysql-server-0:5.7.19-6.el6.x86_64",
            "6Server-RHSCL-2.4:rh-mysql57-mysql-test-0:5.7.19-6.el6.x86_64",
            "6Workstation-RHSCL-2.4:rh-mysql57-mysql-0:5.7.19-6.el6.src",
            "6Workstation-RHSCL-2.4:rh-mysql57-mysql-0:5.7.19-6.el6.x86_64",
            "6Workstation-RHSCL-2.4:rh-mysql57-mysql-common-0:5.7.19-6.el6.x86_64",
            "6Workstation-RHSCL-2.4:rh-mysql57-mysql-config-0:5.7.19-6.el6.x86_64",
            "6Workstation-RHSCL-2.4:rh-mysql57-mysql-debuginfo-0:5.7.19-6.el6.x86_64",
            "6Workstation-RHSCL-2.4:rh-mysql57-mysql-devel-0:5.7.19-6.el6.x86_64",
            "6Workstation-RHSCL-2.4:rh-mysql57-mysql-errmsg-0:5.7.19-6.el6.x86_64",
            "6Workstation-RHSCL-2.4:rh-mysql57-mysql-server-0:5.7.19-6.el6.x86_64",
            "6Workstation-RHSCL-2.4:rh-mysql57-mysql-test-0:5.7.19-6.el6.x86_64",
            "7Server-RHSCL-2.4-7.3.Z:rh-mysql57-mysql-0:5.7.19-6.el7.src",
            "7Server-RHSCL-2.4-7.3.Z:rh-mysql57-mysql-0:5.7.19-6.el7.x86_64",
            "7Server-RHSCL-2.4-7.3.Z:rh-mysql57-mysql-common-0:5.7.19-6.el7.x86_64",
            "7Server-RHSCL-2.4-7.3.Z:rh-mysql57-mysql-config-0:5.7.19-6.el7.x86_64",
            "7Server-RHSCL-2.4-7.3.Z:rh-mysql57-mysql-debuginfo-0:5.7.19-6.el7.x86_64",
            "7Server-RHSCL-2.4-7.3.Z:rh-mysql57-mysql-devel-0:5.7.19-6.el7.x86_64",
            "7Server-RHSCL-2.4-7.3.Z:rh-mysql57-mysql-errmsg-0:5.7.19-6.el7.x86_64",
            "7Server-RHSCL-2.4-7.3.Z:rh-mysql57-mysql-server-0:5.7.19-6.el7.x86_64",
            "7Server-RHSCL-2.4-7.3.Z:rh-mysql57-mysql-test-0:5.7.19-6.el7.x86_64",
            "7Server-RHSCL-2.4:rh-mysql57-mysql-0:5.7.19-6.el7.src",
            "7Server-RHSCL-2.4:rh-mysql57-mysql-0:5.7.19-6.el7.x86_64",
            "7Server-RHSCL-2.4:rh-mysql57-mysql-common-0:5.7.19-6.el7.x86_64",
            "7Server-RHSCL-2.4:rh-mysql57-mysql-config-0:5.7.19-6.el7.x86_64",
            "7Server-RHSCL-2.4:rh-mysql57-mysql-debuginfo-0:5.7.19-6.el7.x86_64",
            "7Server-RHSCL-2.4:rh-mysql57-mysql-devel-0:5.7.19-6.el7.x86_64",
            "7Server-RHSCL-2.4:rh-mysql57-mysql-errmsg-0:5.7.19-6.el7.x86_64",
            "7Server-RHSCL-2.4:rh-mysql57-mysql-server-0:5.7.19-6.el7.x86_64",
            "7Server-RHSCL-2.4:rh-mysql57-mysql-test-0:5.7.19-6.el7.x86_64",
            "7Workstation-RHSCL-2.4:rh-mysql57-mysql-0:5.7.19-6.el7.src",
            "7Workstation-RHSCL-2.4:rh-mysql57-mysql-0:5.7.19-6.el7.x86_64",
            "7Workstation-RHSCL-2.4:rh-mysql57-mysql-common-0:5.7.19-6.el7.x86_64",
            "7Workstation-RHSCL-2.4:rh-mysql57-mysql-config-0:5.7.19-6.el7.x86_64",
            "7Workstation-RHSCL-2.4:rh-mysql57-mysql-debuginfo-0:5.7.19-6.el7.x86_64",
            "7Workstation-RHSCL-2.4:rh-mysql57-mysql-devel-0:5.7.19-6.el7.x86_64",
            "7Workstation-RHSCL-2.4:rh-mysql57-mysql-errmsg-0:5.7.19-6.el7.x86_64",
            "7Workstation-RHSCL-2.4:rh-mysql57-mysql-server-0:5.7.19-6.el7.x86_64",
            "7Workstation-RHSCL-2.4:rh-mysql57-mysql-test-0:5.7.19-6.el7.x86_64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2017:2886"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 6.5,
            "baseSeverity": "MEDIUM",
            "confidentialityImpact": "NONE",
            "integrityImpact": "NONE",
            "privilegesRequired": "LOW",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.0"
          },
          "products": [
            "6Server-RHSCL-2.4-6.7.Z:rh-mysql57-mysql-0:5.7.19-6.el6.src",
            "6Server-RHSCL-2.4-6.7.Z:rh-mysql57-mysql-0:5.7.19-6.el6.x86_64",
            "6Server-RHSCL-2.4-6.7.Z:rh-mysql57-mysql-common-0:5.7.19-6.el6.x86_64",
            "6Server-RHSCL-2.4-6.7.Z:rh-mysql57-mysql-config-0:5.7.19-6.el6.x86_64",
            "6Server-RHSCL-2.4-6.7.Z:rh-mysql57-mysql-debuginfo-0:5.7.19-6.el6.x86_64",
            "6Server-RHSCL-2.4-6.7.Z:rh-mysql57-mysql-devel-0:5.7.19-6.el6.x86_64",
            "6Server-RHSCL-2.4-6.7.Z:rh-mysql57-mysql-errmsg-0:5.7.19-6.el6.x86_64",
            "6Server-RHSCL-2.4-6.7.Z:rh-mysql57-mysql-server-0:5.7.19-6.el6.x86_64",
            "6Server-RHSCL-2.4-6.7.Z:rh-mysql57-mysql-test-0:5.7.19-6.el6.x86_64",
            "6Server-RHSCL-2.4:rh-mysql57-mysql-0:5.7.19-6.el6.src",
            "6Server-RHSCL-2.4:rh-mysql57-mysql-0:5.7.19-6.el6.x86_64",
            "6Server-RHSCL-2.4:rh-mysql57-mysql-common-0:5.7.19-6.el6.x86_64",
            "6Server-RHSCL-2.4:rh-mysql57-mysql-config-0:5.7.19-6.el6.x86_64",
            "6Server-RHSCL-2.4:rh-mysql57-mysql-debuginfo-0:5.7.19-6.el6.x86_64",
            "6Server-RHSCL-2.4:rh-mysql57-mysql-devel-0:5.7.19-6.el6.x86_64",
            "6Server-RHSCL-2.4:rh-mysql57-mysql-errmsg-0:5.7.19-6.el6.x86_64",
            "6Server-RHSCL-2.4:rh-mysql57-mysql-server-0:5.7.19-6.el6.x86_64",
            "6Server-RHSCL-2.4:rh-mysql57-mysql-test-0:5.7.19-6.el6.x86_64",
            "6Workstation-RHSCL-2.4:rh-mysql57-mysql-0:5.7.19-6.el6.src",
            "6Workstation-RHSCL-2.4:rh-mysql57-mysql-0:5.7.19-6.el6.x86_64",
            "6Workstation-RHSCL-2.4:rh-mysql57-mysql-common-0:5.7.19-6.el6.x86_64",
            "6Workstation-RHSCL-2.4:rh-mysql57-mysql-config-0:5.7.19-6.el6.x86_64",
            "6Workstation-RHSCL-2.4:rh-mysql57-mysql-debuginfo-0:5.7.19-6.el6.x86_64",
            "6Workstation-RHSCL-2.4:rh-mysql57-mysql-devel-0:5.7.19-6.el6.x86_64",
            "6Workstation-RHSCL-2.4:rh-mysql57-mysql-errmsg-0:5.7.19-6.el6.x86_64",
            "6Workstation-RHSCL-2.4:rh-mysql57-mysql-server-0:5.7.19-6.el6.x86_64",
            "6Workstation-RHSCL-2.4:rh-mysql57-mysql-test-0:5.7.19-6.el6.x86_64",
            "7Server-RHSCL-2.4-7.3.Z:rh-mysql57-mysql-0:5.7.19-6.el7.src",
            "7Server-RHSCL-2.4-7.3.Z:rh-mysql57-mysql-0:5.7.19-6.el7.x86_64",
            "7Server-RHSCL-2.4-7.3.Z:rh-mysql57-mysql-common-0:5.7.19-6.el7.x86_64",
            "7Server-RHSCL-2.4-7.3.Z:rh-mysql57-mysql-config-0:5.7.19-6.el7.x86_64",
            "7Server-RHSCL-2.4-7.3.Z:rh-mysql57-mysql-debuginfo-0:5.7.19-6.el7.x86_64",
            "7Server-RHSCL-2.4-7.3.Z:rh-mysql57-mysql-devel-0:5.7.19-6.el7.x86_64",
            "7Server-RHSCL-2.4-7.3.Z:rh-mysql57-mysql-errmsg-0:5.7.19-6.el7.x86_64",
            "7Server-RHSCL-2.4-7.3.Z:rh-mysql57-mysql-server-0:5.7.19-6.el7.x86_64",
            "7Server-RHSCL-2.4-7.3.Z:rh-mysql57-mysql-test-0:5.7.19-6.el7.x86_64",
            "7Server-RHSCL-2.4:rh-mysql57-mysql-0:5.7.19-6.el7.src",
            "7Server-RHSCL-2.4:rh-mysql57-mysql-0:5.7.19-6.el7.x86_64",
            "7Server-RHSCL-2.4:rh-mysql57-mysql-common-0:5.7.19-6.el7.x86_64",
            "7Server-RHSCL-2.4:rh-mysql57-mysql-config-0:5.7.19-6.el7.x86_64",
            "7Server-RHSCL-2.4:rh-mysql57-mysql-debuginfo-0:5.7.19-6.el7.x86_64",
            "7Server-RHSCL-2.4:rh-mysql57-mysql-devel-0:5.7.19-6.el7.x86_64",
            "7Server-RHSCL-2.4:rh-mysql57-mysql-errmsg-0:5.7.19-6.el7.x86_64",
            "7Server-RHSCL-2.4:rh-mysql57-mysql-server-0:5.7.19-6.el7.x86_64",
            "7Server-RHSCL-2.4:rh-mysql57-mysql-test-0:5.7.19-6.el7.x86_64",
            "7Workstation-RHSCL-2.4:rh-mysql57-mysql-0:5.7.19-6.el7.src",
            "7Workstation-RHSCL-2.4:rh-mysql57-mysql-0:5.7.19-6.el7.x86_64",
            "7Workstation-RHSCL-2.4:rh-mysql57-mysql-common-0:5.7.19-6.el7.x86_64",
            "7Workstation-RHSCL-2.4:rh-mysql57-mysql-config-0:5.7.19-6.el7.x86_64",
            "7Workstation-RHSCL-2.4:rh-mysql57-mysql-debuginfo-0:5.7.19-6.el7.x86_64",
            "7Workstation-RHSCL-2.4:rh-mysql57-mysql-devel-0:5.7.19-6.el7.x86_64",
            "7Workstation-RHSCL-2.4:rh-mysql57-mysql-errmsg-0:5.7.19-6.el7.x86_64",
            "7Workstation-RHSCL-2.4:rh-mysql57-mysql-server-0:5.7.19-6.el7.x86_64",
            "7Workstation-RHSCL-2.4:rh-mysql57-mysql-test-0:5.7.19-6.el7.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Moderate"
        }
      ],
      "title": "mysql: Server: DML unspecified vulnerability (CPU Jan 2017)"
    },
    {
      "cve": "CVE-2017-3251",
      "discovery_date": "2017-01-18T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "1414343"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Optimizer). Supported versions that are affected are 5.7.16 and earlier. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS v3.0 Base Score 4.9 (Availability impacts).",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "mysql: Server: Optimizer  unspecified vulnerability (CPU Jan 2017)",
          "title": "Vulnerability summary"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "6Server-RHSCL-2.4-6.7.Z:rh-mysql57-mysql-0:5.7.19-6.el6.src",
          "6Server-RHSCL-2.4-6.7.Z:rh-mysql57-mysql-0:5.7.19-6.el6.x86_64",
          "6Server-RHSCL-2.4-6.7.Z:rh-mysql57-mysql-common-0:5.7.19-6.el6.x86_64",
          "6Server-RHSCL-2.4-6.7.Z:rh-mysql57-mysql-config-0:5.7.19-6.el6.x86_64",
          "6Server-RHSCL-2.4-6.7.Z:rh-mysql57-mysql-debuginfo-0:5.7.19-6.el6.x86_64",
          "6Server-RHSCL-2.4-6.7.Z:rh-mysql57-mysql-devel-0:5.7.19-6.el6.x86_64",
          "6Server-RHSCL-2.4-6.7.Z:rh-mysql57-mysql-errmsg-0:5.7.19-6.el6.x86_64",
          "6Server-RHSCL-2.4-6.7.Z:rh-mysql57-mysql-server-0:5.7.19-6.el6.x86_64",
          "6Server-RHSCL-2.4-6.7.Z:rh-mysql57-mysql-test-0:5.7.19-6.el6.x86_64",
          "6Server-RHSCL-2.4:rh-mysql57-mysql-0:5.7.19-6.el6.src",
          "6Server-RHSCL-2.4:rh-mysql57-mysql-0:5.7.19-6.el6.x86_64",
          "6Server-RHSCL-2.4:rh-mysql57-mysql-common-0:5.7.19-6.el6.x86_64",
          "6Server-RHSCL-2.4:rh-mysql57-mysql-config-0:5.7.19-6.el6.x86_64",
          "6Server-RHSCL-2.4:rh-mysql57-mysql-debuginfo-0:5.7.19-6.el6.x86_64",
          "6Server-RHSCL-2.4:rh-mysql57-mysql-devel-0:5.7.19-6.el6.x86_64",
          "6Server-RHSCL-2.4:rh-mysql57-mysql-errmsg-0:5.7.19-6.el6.x86_64",
          "6Server-RHSCL-2.4:rh-mysql57-mysql-server-0:5.7.19-6.el6.x86_64",
          "6Server-RHSCL-2.4:rh-mysql57-mysql-test-0:5.7.19-6.el6.x86_64",
          "6Workstation-RHSCL-2.4:rh-mysql57-mysql-0:5.7.19-6.el6.src",
          "6Workstation-RHSCL-2.4:rh-mysql57-mysql-0:5.7.19-6.el6.x86_64",
          "6Workstation-RHSCL-2.4:rh-mysql57-mysql-common-0:5.7.19-6.el6.x86_64",
          "6Workstation-RHSCL-2.4:rh-mysql57-mysql-config-0:5.7.19-6.el6.x86_64",
          "6Workstation-RHSCL-2.4:rh-mysql57-mysql-debuginfo-0:5.7.19-6.el6.x86_64",
          "6Workstation-RHSCL-2.4:rh-mysql57-mysql-devel-0:5.7.19-6.el6.x86_64",
          "6Workstation-RHSCL-2.4:rh-mysql57-mysql-errmsg-0:5.7.19-6.el6.x86_64",
          "6Workstation-RHSCL-2.4:rh-mysql57-mysql-server-0:5.7.19-6.el6.x86_64",
          "6Workstation-RHSCL-2.4:rh-mysql57-mysql-test-0:5.7.19-6.el6.x86_64",
          "7Server-RHSCL-2.4-7.3.Z:rh-mysql57-mysql-0:5.7.19-6.el7.src",
          "7Server-RHSCL-2.4-7.3.Z:rh-mysql57-mysql-0:5.7.19-6.el7.x86_64",
          "7Server-RHSCL-2.4-7.3.Z:rh-mysql57-mysql-common-0:5.7.19-6.el7.x86_64",
          "7Server-RHSCL-2.4-7.3.Z:rh-mysql57-mysql-config-0:5.7.19-6.el7.x86_64",
          "7Server-RHSCL-2.4-7.3.Z:rh-mysql57-mysql-debuginfo-0:5.7.19-6.el7.x86_64",
          "7Server-RHSCL-2.4-7.3.Z:rh-mysql57-mysql-devel-0:5.7.19-6.el7.x86_64",
          "7Server-RHSCL-2.4-7.3.Z:rh-mysql57-mysql-errmsg-0:5.7.19-6.el7.x86_64",
          "7Server-RHSCL-2.4-7.3.Z:rh-mysql57-mysql-server-0:5.7.19-6.el7.x86_64",
          "7Server-RHSCL-2.4-7.3.Z:rh-mysql57-mysql-test-0:5.7.19-6.el7.x86_64",
          "7Server-RHSCL-2.4:rh-mysql57-mysql-0:5.7.19-6.el7.src",
          "7Server-RHSCL-2.4:rh-mysql57-mysql-0:5.7.19-6.el7.x86_64",
          "7Server-RHSCL-2.4:rh-mysql57-mysql-common-0:5.7.19-6.el7.x86_64",
          "7Server-RHSCL-2.4:rh-mysql57-mysql-config-0:5.7.19-6.el7.x86_64",
          "7Server-RHSCL-2.4:rh-mysql57-mysql-debuginfo-0:5.7.19-6.el7.x86_64",
          "7Server-RHSCL-2.4:rh-mysql57-mysql-devel-0:5.7.19-6.el7.x86_64",
          "7Server-RHSCL-2.4:rh-mysql57-mysql-errmsg-0:5.7.19-6.el7.x86_64",
          "7Server-RHSCL-2.4:rh-mysql57-mysql-server-0:5.7.19-6.el7.x86_64",
          "7Server-RHSCL-2.4:rh-mysql57-mysql-test-0:5.7.19-6.el7.x86_64",
          "7Workstation-RHSCL-2.4:rh-mysql57-mysql-0:5.7.19-6.el7.src",
          "7Workstation-RHSCL-2.4:rh-mysql57-mysql-0:5.7.19-6.el7.x86_64",
          "7Workstation-RHSCL-2.4:rh-mysql57-mysql-common-0:5.7.19-6.el7.x86_64",
          "7Workstation-RHSCL-2.4:rh-mysql57-mysql-config-0:5.7.19-6.el7.x86_64",
          "7Workstation-RHSCL-2.4:rh-mysql57-mysql-debuginfo-0:5.7.19-6.el7.x86_64",
          "7Workstation-RHSCL-2.4:rh-mysql57-mysql-devel-0:5.7.19-6.el7.x86_64",
          "7Workstation-RHSCL-2.4:rh-mysql57-mysql-errmsg-0:5.7.19-6.el7.x86_64",
          "7Workstation-RHSCL-2.4:rh-mysql57-mysql-server-0:5.7.19-6.el7.x86_64",
          "7Workstation-RHSCL-2.4:rh-mysql57-mysql-test-0:5.7.19-6.el7.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2017-3251"
        },
        {
          "category": "external",
          "summary": "RHBZ#1414343",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1414343"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2017-3251",
          "url": "https://www.cve.org/CVERecord?id=CVE-2017-3251"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2017-3251",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2017-3251"
        },
        {
          "category": "external",
          "summary": "http://www.oracle.com/technetwork/security-advisory/cpujan2017-2881727.html#AppendixMSQL",
          "url": "http://www.oracle.com/technetwork/security-advisory/cpujan2017-2881727.html#AppendixMSQL"
        }
      ],
      "release_date": "2017-01-18T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2017-10-12T07:53:15+00:00",
          "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAfter installing this update, the MySQL server daemon (mysqld) will be restarted automatically.",
          "product_ids": [
            "6Server-RHSCL-2.4-6.7.Z:rh-mysql57-mysql-0:5.7.19-6.el6.src",
            "6Server-RHSCL-2.4-6.7.Z:rh-mysql57-mysql-0:5.7.19-6.el6.x86_64",
            "6Server-RHSCL-2.4-6.7.Z:rh-mysql57-mysql-common-0:5.7.19-6.el6.x86_64",
            "6Server-RHSCL-2.4-6.7.Z:rh-mysql57-mysql-config-0:5.7.19-6.el6.x86_64",
            "6Server-RHSCL-2.4-6.7.Z:rh-mysql57-mysql-debuginfo-0:5.7.19-6.el6.x86_64",
            "6Server-RHSCL-2.4-6.7.Z:rh-mysql57-mysql-devel-0:5.7.19-6.el6.x86_64",
            "6Server-RHSCL-2.4-6.7.Z:rh-mysql57-mysql-errmsg-0:5.7.19-6.el6.x86_64",
            "6Server-RHSCL-2.4-6.7.Z:rh-mysql57-mysql-server-0:5.7.19-6.el6.x86_64",
            "6Server-RHSCL-2.4-6.7.Z:rh-mysql57-mysql-test-0:5.7.19-6.el6.x86_64",
            "6Server-RHSCL-2.4:rh-mysql57-mysql-0:5.7.19-6.el6.src",
            "6Server-RHSCL-2.4:rh-mysql57-mysql-0:5.7.19-6.el6.x86_64",
            "6Server-RHSCL-2.4:rh-mysql57-mysql-common-0:5.7.19-6.el6.x86_64",
            "6Server-RHSCL-2.4:rh-mysql57-mysql-config-0:5.7.19-6.el6.x86_64",
            "6Server-RHSCL-2.4:rh-mysql57-mysql-debuginfo-0:5.7.19-6.el6.x86_64",
            "6Server-RHSCL-2.4:rh-mysql57-mysql-devel-0:5.7.19-6.el6.x86_64",
            "6Server-RHSCL-2.4:rh-mysql57-mysql-errmsg-0:5.7.19-6.el6.x86_64",
            "6Server-RHSCL-2.4:rh-mysql57-mysql-server-0:5.7.19-6.el6.x86_64",
            "6Server-RHSCL-2.4:rh-mysql57-mysql-test-0:5.7.19-6.el6.x86_64",
            "6Workstation-RHSCL-2.4:rh-mysql57-mysql-0:5.7.19-6.el6.src",
            "6Workstation-RHSCL-2.4:rh-mysql57-mysql-0:5.7.19-6.el6.x86_64",
            "6Workstation-RHSCL-2.4:rh-mysql57-mysql-common-0:5.7.19-6.el6.x86_64",
            "6Workstation-RHSCL-2.4:rh-mysql57-mysql-config-0:5.7.19-6.el6.x86_64",
            "6Workstation-RHSCL-2.4:rh-mysql57-mysql-debuginfo-0:5.7.19-6.el6.x86_64",
            "6Workstation-RHSCL-2.4:rh-mysql57-mysql-devel-0:5.7.19-6.el6.x86_64",
            "6Workstation-RHSCL-2.4:rh-mysql57-mysql-errmsg-0:5.7.19-6.el6.x86_64",
            "6Workstation-RHSCL-2.4:rh-mysql57-mysql-server-0:5.7.19-6.el6.x86_64",
            "6Workstation-RHSCL-2.4:rh-mysql57-mysql-test-0:5.7.19-6.el6.x86_64",
            "7Server-RHSCL-2.4-7.3.Z:rh-mysql57-mysql-0:5.7.19-6.el7.src",
            "7Server-RHSCL-2.4-7.3.Z:rh-mysql57-mysql-0:5.7.19-6.el7.x86_64",
            "7Server-RHSCL-2.4-7.3.Z:rh-mysql57-mysql-common-0:5.7.19-6.el7.x86_64",
            "7Server-RHSCL-2.4-7.3.Z:rh-mysql57-mysql-config-0:5.7.19-6.el7.x86_64",
            "7Server-RHSCL-2.4-7.3.Z:rh-mysql57-mysql-debuginfo-0:5.7.19-6.el7.x86_64",
            "7Server-RHSCL-2.4-7.3.Z:rh-mysql57-mysql-devel-0:5.7.19-6.el7.x86_64",
            "7Server-RHSCL-2.4-7.3.Z:rh-mysql57-mysql-errmsg-0:5.7.19-6.el7.x86_64",
            "7Server-RHSCL-2.4-7.3.Z:rh-mysql57-mysql-server-0:5.7.19-6.el7.x86_64",
            "7Server-RHSCL-2.4-7.3.Z:rh-mysql57-mysql-test-0:5.7.19-6.el7.x86_64",
            "7Server-RHSCL-2.4:rh-mysql57-mysql-0:5.7.19-6.el7.src",
            "7Server-RHSCL-2.4:rh-mysql57-mysql-0:5.7.19-6.el7.x86_64",
            "7Server-RHSCL-2.4:rh-mysql57-mysql-common-0:5.7.19-6.el7.x86_64",
            "7Server-RHSCL-2.4:rh-mysql57-mysql-config-0:5.7.19-6.el7.x86_64",
            "7Server-RHSCL-2.4:rh-mysql57-mysql-debuginfo-0:5.7.19-6.el7.x86_64",
            "7Server-RHSCL-2.4:rh-mysql57-mysql-devel-0:5.7.19-6.el7.x86_64",
            "7Server-RHSCL-2.4:rh-mysql57-mysql-errmsg-0:5.7.19-6.el7.x86_64",
            "7Server-RHSCL-2.4:rh-mysql57-mysql-server-0:5.7.19-6.el7.x86_64",
            "7Server-RHSCL-2.4:rh-mysql57-mysql-test-0:5.7.19-6.el7.x86_64",
            "7Workstation-RHSCL-2.4:rh-mysql57-mysql-0:5.7.19-6.el7.src",
            "7Workstation-RHSCL-2.4:rh-mysql57-mysql-0:5.7.19-6.el7.x86_64",
            "7Workstation-RHSCL-2.4:rh-mysql57-mysql-common-0:5.7.19-6.el7.x86_64",
            "7Workstation-RHSCL-2.4:rh-mysql57-mysql-config-0:5.7.19-6.el7.x86_64",
            "7Workstation-RHSCL-2.4:rh-mysql57-mysql-debuginfo-0:5.7.19-6.el7.x86_64",
            "7Workstation-RHSCL-2.4:rh-mysql57-mysql-devel-0:5.7.19-6.el7.x86_64",
            "7Workstation-RHSCL-2.4:rh-mysql57-mysql-errmsg-0:5.7.19-6.el7.x86_64",
            "7Workstation-RHSCL-2.4:rh-mysql57-mysql-server-0:5.7.19-6.el7.x86_64",
            "7Workstation-RHSCL-2.4:rh-mysql57-mysql-test-0:5.7.19-6.el7.x86_64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2017:2886"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 4.9,
            "baseSeverity": "MEDIUM",
            "confidentialityImpact": "NONE",
            "integrityImpact": "NONE",
            "privilegesRequired": "HIGH",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.0"
          },
          "products": [
            "6Server-RHSCL-2.4-6.7.Z:rh-mysql57-mysql-0:5.7.19-6.el6.src",
            "6Server-RHSCL-2.4-6.7.Z:rh-mysql57-mysql-0:5.7.19-6.el6.x86_64",
            "6Server-RHSCL-2.4-6.7.Z:rh-mysql57-mysql-common-0:5.7.19-6.el6.x86_64",
            "6Server-RHSCL-2.4-6.7.Z:rh-mysql57-mysql-config-0:5.7.19-6.el6.x86_64",
            "6Server-RHSCL-2.4-6.7.Z:rh-mysql57-mysql-debuginfo-0:5.7.19-6.el6.x86_64",
            "6Server-RHSCL-2.4-6.7.Z:rh-mysql57-mysql-devel-0:5.7.19-6.el6.x86_64",
            "6Server-RHSCL-2.4-6.7.Z:rh-mysql57-mysql-errmsg-0:5.7.19-6.el6.x86_64",
            "6Server-RHSCL-2.4-6.7.Z:rh-mysql57-mysql-server-0:5.7.19-6.el6.x86_64",
            "6Server-RHSCL-2.4-6.7.Z:rh-mysql57-mysql-test-0:5.7.19-6.el6.x86_64",
            "6Server-RHSCL-2.4:rh-mysql57-mysql-0:5.7.19-6.el6.src",
            "6Server-RHSCL-2.4:rh-mysql57-mysql-0:5.7.19-6.el6.x86_64",
            "6Server-RHSCL-2.4:rh-mysql57-mysql-common-0:5.7.19-6.el6.x86_64",
            "6Server-RHSCL-2.4:rh-mysql57-mysql-config-0:5.7.19-6.el6.x86_64",
            "6Server-RHSCL-2.4:rh-mysql57-mysql-debuginfo-0:5.7.19-6.el6.x86_64",
            "6Server-RHSCL-2.4:rh-mysql57-mysql-devel-0:5.7.19-6.el6.x86_64",
            "6Server-RHSCL-2.4:rh-mysql57-mysql-errmsg-0:5.7.19-6.el6.x86_64",
            "6Server-RHSCL-2.4:rh-mysql57-mysql-server-0:5.7.19-6.el6.x86_64",
            "6Server-RHSCL-2.4:rh-mysql57-mysql-test-0:5.7.19-6.el6.x86_64",
            "6Workstation-RHSCL-2.4:rh-mysql57-mysql-0:5.7.19-6.el6.src",
            "6Workstation-RHSCL-2.4:rh-mysql57-mysql-0:5.7.19-6.el6.x86_64",
            "6Workstation-RHSCL-2.4:rh-mysql57-mysql-common-0:5.7.19-6.el6.x86_64",
            "6Workstation-RHSCL-2.4:rh-mysql57-mysql-config-0:5.7.19-6.el6.x86_64",
            "6Workstation-RHSCL-2.4:rh-mysql57-mysql-debuginfo-0:5.7.19-6.el6.x86_64",
            "6Workstation-RHSCL-2.4:rh-mysql57-mysql-devel-0:5.7.19-6.el6.x86_64",
            "6Workstation-RHSCL-2.4:rh-mysql57-mysql-errmsg-0:5.7.19-6.el6.x86_64",
            "6Workstation-RHSCL-2.4:rh-mysql57-mysql-server-0:5.7.19-6.el6.x86_64",
            "6Workstation-RHSCL-2.4:rh-mysql57-mysql-test-0:5.7.19-6.el6.x86_64",
            "7Server-RHSCL-2.4-7.3.Z:rh-mysql57-mysql-0:5.7.19-6.el7.src",
            "7Server-RHSCL-2.4-7.3.Z:rh-mysql57-mysql-0:5.7.19-6.el7.x86_64",
            "7Server-RHSCL-2.4-7.3.Z:rh-mysql57-mysql-common-0:5.7.19-6.el7.x86_64",
            "7Server-RHSCL-2.4-7.3.Z:rh-mysql57-mysql-config-0:5.7.19-6.el7.x86_64",
            "7Server-RHSCL-2.4-7.3.Z:rh-mysql57-mysql-debuginfo-0:5.7.19-6.el7.x86_64",
            "7Server-RHSCL-2.4-7.3.Z:rh-mysql57-mysql-devel-0:5.7.19-6.el7.x86_64",
            "7Server-RHSCL-2.4-7.3.Z:rh-mysql57-mysql-errmsg-0:5.7.19-6.el7.x86_64",
            "7Server-RHSCL-2.4-7.3.Z:rh-mysql57-mysql-server-0:5.7.19-6.el7.x86_64",
            "7Server-RHSCL-2.4-7.3.Z:rh-mysql57-mysql-test-0:5.7.19-6.el7.x86_64",
            "7Server-RHSCL-2.4:rh-mysql57-mysql-0:5.7.19-6.el7.src",
            "7Server-RHSCL-2.4:rh-mysql57-mysql-0:5.7.19-6.el7.x86_64",
            "7Server-RHSCL-2.4:rh-mysql57-mysql-common-0:5.7.19-6.el7.x86_64",
            "7Server-RHSCL-2.4:rh-mysql57-mysql-config-0:5.7.19-6.el7.x86_64",
            "7Server-RHSCL-2.4:rh-mysql57-mysql-debuginfo-0:5.7.19-6.el7.x86_64",
            "7Server-RHSCL-2.4:rh-mysql57-mysql-devel-0:5.7.19-6.el7.x86_64",
            "7Server-RHSCL-2.4:rh-mysql57-mysql-errmsg-0:5.7.19-6.el7.x86_64",
            "7Server-RHSCL-2.4:rh-mysql57-mysql-server-0:5.7.19-6.el7.x86_64",
            "7Server-RHSCL-2.4:rh-mysql57-mysql-test-0:5.7.19-6.el7.x86_64",
            "7Workstation-RHSCL-2.4:rh-mysql57-mysql-0:5.7.19-6.el7.src",
            "7Workstation-RHSCL-2.4:rh-mysql57-mysql-0:5.7.19-6.el7.x86_64",
            "7Workstation-RHSCL-2.4:rh-mysql57-mysql-common-0:5.7.19-6.el7.x86_64",
            "7Workstation-RHSCL-2.4:rh-mysql57-mysql-config-0:5.7.19-6.el7.x86_64",
            "7Workstation-RHSCL-2.4:rh-mysql57-mysql-debuginfo-0:5.7.19-6.el7.x86_64",
            "7Workstation-RHSCL-2.4:rh-mysql57-mysql-devel-0:5.7.19-6.el7.x86_64",
            "7Workstation-RHSCL-2.4:rh-mysql57-mysql-errmsg-0:5.7.19-6.el7.x86_64",
            "7Workstation-RHSCL-2.4:rh-mysql57-mysql-server-0:5.7.19-6.el7.x86_64",
            "7Workstation-RHSCL-2.4:rh-mysql57-mysql-test-0:5.7.19-6.el7.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Moderate"
        }
      ],
      "title": "mysql: Server: Optimizer  unspecified vulnerability (CPU Jan 2017)"
    },
    {
      "cve": "CVE-2017-3256",
      "discovery_date": "2017-01-18T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "1414345"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Replication). Supported versions that are affected are 5.7.16 and earlier. Easily exploitable vulnerability allows low privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS v3.0 Base Score 6.5 (Availability impacts).",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "mysql: Server: Replication  unspecified vulnerability (CPU Jan 2017)",
          "title": "Vulnerability summary"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "6Server-RHSCL-2.4-6.7.Z:rh-mysql57-mysql-0:5.7.19-6.el6.src",
          "6Server-RHSCL-2.4-6.7.Z:rh-mysql57-mysql-0:5.7.19-6.el6.x86_64",
          "6Server-RHSCL-2.4-6.7.Z:rh-mysql57-mysql-common-0:5.7.19-6.el6.x86_64",
          "6Server-RHSCL-2.4-6.7.Z:rh-mysql57-mysql-config-0:5.7.19-6.el6.x86_64",
          "6Server-RHSCL-2.4-6.7.Z:rh-mysql57-mysql-debuginfo-0:5.7.19-6.el6.x86_64",
          "6Server-RHSCL-2.4-6.7.Z:rh-mysql57-mysql-devel-0:5.7.19-6.el6.x86_64",
          "6Server-RHSCL-2.4-6.7.Z:rh-mysql57-mysql-errmsg-0:5.7.19-6.el6.x86_64",
          "6Server-RHSCL-2.4-6.7.Z:rh-mysql57-mysql-server-0:5.7.19-6.el6.x86_64",
          "6Server-RHSCL-2.4-6.7.Z:rh-mysql57-mysql-test-0:5.7.19-6.el6.x86_64",
          "6Server-RHSCL-2.4:rh-mysql57-mysql-0:5.7.19-6.el6.src",
          "6Server-RHSCL-2.4:rh-mysql57-mysql-0:5.7.19-6.el6.x86_64",
          "6Server-RHSCL-2.4:rh-mysql57-mysql-common-0:5.7.19-6.el6.x86_64",
          "6Server-RHSCL-2.4:rh-mysql57-mysql-config-0:5.7.19-6.el6.x86_64",
          "6Server-RHSCL-2.4:rh-mysql57-mysql-debuginfo-0:5.7.19-6.el6.x86_64",
          "6Server-RHSCL-2.4:rh-mysql57-mysql-devel-0:5.7.19-6.el6.x86_64",
          "6Server-RHSCL-2.4:rh-mysql57-mysql-errmsg-0:5.7.19-6.el6.x86_64",
          "6Server-RHSCL-2.4:rh-mysql57-mysql-server-0:5.7.19-6.el6.x86_64",
          "6Server-RHSCL-2.4:rh-mysql57-mysql-test-0:5.7.19-6.el6.x86_64",
          "6Workstation-RHSCL-2.4:rh-mysql57-mysql-0:5.7.19-6.el6.src",
          "6Workstation-RHSCL-2.4:rh-mysql57-mysql-0:5.7.19-6.el6.x86_64",
          "6Workstation-RHSCL-2.4:rh-mysql57-mysql-common-0:5.7.19-6.el6.x86_64",
          "6Workstation-RHSCL-2.4:rh-mysql57-mysql-config-0:5.7.19-6.el6.x86_64",
          "6Workstation-RHSCL-2.4:rh-mysql57-mysql-debuginfo-0:5.7.19-6.el6.x86_64",
          "6Workstation-RHSCL-2.4:rh-mysql57-mysql-devel-0:5.7.19-6.el6.x86_64",
          "6Workstation-RHSCL-2.4:rh-mysql57-mysql-errmsg-0:5.7.19-6.el6.x86_64",
          "6Workstation-RHSCL-2.4:rh-mysql57-mysql-server-0:5.7.19-6.el6.x86_64",
          "6Workstation-RHSCL-2.4:rh-mysql57-mysql-test-0:5.7.19-6.el6.x86_64",
          "7Server-RHSCL-2.4-7.3.Z:rh-mysql57-mysql-0:5.7.19-6.el7.src",
          "7Server-RHSCL-2.4-7.3.Z:rh-mysql57-mysql-0:5.7.19-6.el7.x86_64",
          "7Server-RHSCL-2.4-7.3.Z:rh-mysql57-mysql-common-0:5.7.19-6.el7.x86_64",
          "7Server-RHSCL-2.4-7.3.Z:rh-mysql57-mysql-config-0:5.7.19-6.el7.x86_64",
          "7Server-RHSCL-2.4-7.3.Z:rh-mysql57-mysql-debuginfo-0:5.7.19-6.el7.x86_64",
          "7Server-RHSCL-2.4-7.3.Z:rh-mysql57-mysql-devel-0:5.7.19-6.el7.x86_64",
          "7Server-RHSCL-2.4-7.3.Z:rh-mysql57-mysql-errmsg-0:5.7.19-6.el7.x86_64",
          "7Server-RHSCL-2.4-7.3.Z:rh-mysql57-mysql-server-0:5.7.19-6.el7.x86_64",
          "7Server-RHSCL-2.4-7.3.Z:rh-mysql57-mysql-test-0:5.7.19-6.el7.x86_64",
          "7Server-RHSCL-2.4:rh-mysql57-mysql-0:5.7.19-6.el7.src",
          "7Server-RHSCL-2.4:rh-mysql57-mysql-0:5.7.19-6.el7.x86_64",
          "7Server-RHSCL-2.4:rh-mysql57-mysql-common-0:5.7.19-6.el7.x86_64",
          "7Server-RHSCL-2.4:rh-mysql57-mysql-config-0:5.7.19-6.el7.x86_64",
          "7Server-RHSCL-2.4:rh-mysql57-mysql-debuginfo-0:5.7.19-6.el7.x86_64",
          "7Server-RHSCL-2.4:rh-mysql57-mysql-devel-0:5.7.19-6.el7.x86_64",
          "7Server-RHSCL-2.4:rh-mysql57-mysql-errmsg-0:5.7.19-6.el7.x86_64",
          "7Server-RHSCL-2.4:rh-mysql57-mysql-server-0:5.7.19-6.el7.x86_64",
          "7Server-RHSCL-2.4:rh-mysql57-mysql-test-0:5.7.19-6.el7.x86_64",
          "7Workstation-RHSCL-2.4:rh-mysql57-mysql-0:5.7.19-6.el7.src",
          "7Workstation-RHSCL-2.4:rh-mysql57-mysql-0:5.7.19-6.el7.x86_64",
          "7Workstation-RHSCL-2.4:rh-mysql57-mysql-common-0:5.7.19-6.el7.x86_64",
          "7Workstation-RHSCL-2.4:rh-mysql57-mysql-config-0:5.7.19-6.el7.x86_64",
          "7Workstation-RHSCL-2.4:rh-mysql57-mysql-debuginfo-0:5.7.19-6.el7.x86_64",
          "7Workstation-RHSCL-2.4:rh-mysql57-mysql-devel-0:5.7.19-6.el7.x86_64",
          "7Workstation-RHSCL-2.4:rh-mysql57-mysql-errmsg-0:5.7.19-6.el7.x86_64",
          "7Workstation-RHSCL-2.4:rh-mysql57-mysql-server-0:5.7.19-6.el7.x86_64",
          "7Workstation-RHSCL-2.4:rh-mysql57-mysql-test-0:5.7.19-6.el7.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2017-3256"
        },
        {
          "category": "external",
          "summary": "RHBZ#1414345",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1414345"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2017-3256",
          "url": "https://www.cve.org/CVERecord?id=CVE-2017-3256"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2017-3256",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2017-3256"
        },
        {
          "category": "external",
          "summary": "http://www.oracle.com/technetwork/security-advisory/cpujan2017-2881727.html#AppendixMSQL",
          "url": "http://www.oracle.com/technetwork/security-advisory/cpujan2017-2881727.html#AppendixMSQL"
        }
      ],
      "release_date": "2017-01-18T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2017-10-12T07:53:15+00:00",
          "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAfter installing this update, the MySQL server daemon (mysqld) will be restarted automatically.",
          "product_ids": [
            "6Server-RHSCL-2.4-6.7.Z:rh-mysql57-mysql-0:5.7.19-6.el6.src",
            "6Server-RHSCL-2.4-6.7.Z:rh-mysql57-mysql-0:5.7.19-6.el6.x86_64",
            "6Server-RHSCL-2.4-6.7.Z:rh-mysql57-mysql-common-0:5.7.19-6.el6.x86_64",
            "6Server-RHSCL-2.4-6.7.Z:rh-mysql57-mysql-config-0:5.7.19-6.el6.x86_64",
            "6Server-RHSCL-2.4-6.7.Z:rh-mysql57-mysql-debuginfo-0:5.7.19-6.el6.x86_64",
            "6Server-RHSCL-2.4-6.7.Z:rh-mysql57-mysql-devel-0:5.7.19-6.el6.x86_64",
            "6Server-RHSCL-2.4-6.7.Z:rh-mysql57-mysql-errmsg-0:5.7.19-6.el6.x86_64",
            "6Server-RHSCL-2.4-6.7.Z:rh-mysql57-mysql-server-0:5.7.19-6.el6.x86_64",
            "6Server-RHSCL-2.4-6.7.Z:rh-mysql57-mysql-test-0:5.7.19-6.el6.x86_64",
            "6Server-RHSCL-2.4:rh-mysql57-mysql-0:5.7.19-6.el6.src",
            "6Server-RHSCL-2.4:rh-mysql57-mysql-0:5.7.19-6.el6.x86_64",
            "6Server-RHSCL-2.4:rh-mysql57-mysql-common-0:5.7.19-6.el6.x86_64",
            "6Server-RHSCL-2.4:rh-mysql57-mysql-config-0:5.7.19-6.el6.x86_64",
            "6Server-RHSCL-2.4:rh-mysql57-mysql-debuginfo-0:5.7.19-6.el6.x86_64",
            "6Server-RHSCL-2.4:rh-mysql57-mysql-devel-0:5.7.19-6.el6.x86_64",
            "6Server-RHSCL-2.4:rh-mysql57-mysql-errmsg-0:5.7.19-6.el6.x86_64",
            "6Server-RHSCL-2.4:rh-mysql57-mysql-server-0:5.7.19-6.el6.x86_64",
            "6Server-RHSCL-2.4:rh-mysql57-mysql-test-0:5.7.19-6.el6.x86_64",
            "6Workstation-RHSCL-2.4:rh-mysql57-mysql-0:5.7.19-6.el6.src",
            "6Workstation-RHSCL-2.4:rh-mysql57-mysql-0:5.7.19-6.el6.x86_64",
            "6Workstation-RHSCL-2.4:rh-mysql57-mysql-common-0:5.7.19-6.el6.x86_64",
            "6Workstation-RHSCL-2.4:rh-mysql57-mysql-config-0:5.7.19-6.el6.x86_64",
            "6Workstation-RHSCL-2.4:rh-mysql57-mysql-debuginfo-0:5.7.19-6.el6.x86_64",
            "6Workstation-RHSCL-2.4:rh-mysql57-mysql-devel-0:5.7.19-6.el6.x86_64",
            "6Workstation-RHSCL-2.4:rh-mysql57-mysql-errmsg-0:5.7.19-6.el6.x86_64",
            "6Workstation-RHSCL-2.4:rh-mysql57-mysql-server-0:5.7.19-6.el6.x86_64",
            "6Workstation-RHSCL-2.4:rh-mysql57-mysql-test-0:5.7.19-6.el6.x86_64",
            "7Server-RHSCL-2.4-7.3.Z:rh-mysql57-mysql-0:5.7.19-6.el7.src",
            "7Server-RHSCL-2.4-7.3.Z:rh-mysql57-mysql-0:5.7.19-6.el7.x86_64",
            "7Server-RHSCL-2.4-7.3.Z:rh-mysql57-mysql-common-0:5.7.19-6.el7.x86_64",
            "7Server-RHSCL-2.4-7.3.Z:rh-mysql57-mysql-config-0:5.7.19-6.el7.x86_64",
            "7Server-RHSCL-2.4-7.3.Z:rh-mysql57-mysql-debuginfo-0:5.7.19-6.el7.x86_64",
            "7Server-RHSCL-2.4-7.3.Z:rh-mysql57-mysql-devel-0:5.7.19-6.el7.x86_64",
            "7Server-RHSCL-2.4-7.3.Z:rh-mysql57-mysql-errmsg-0:5.7.19-6.el7.x86_64",
            "7Server-RHSCL-2.4-7.3.Z:rh-mysql57-mysql-server-0:5.7.19-6.el7.x86_64",
            "7Server-RHSCL-2.4-7.3.Z:rh-mysql57-mysql-test-0:5.7.19-6.el7.x86_64",
            "7Server-RHSCL-2.4:rh-mysql57-mysql-0:5.7.19-6.el7.src",
            "7Server-RHSCL-2.4:rh-mysql57-mysql-0:5.7.19-6.el7.x86_64",
            "7Server-RHSCL-2.4:rh-mysql57-mysql-common-0:5.7.19-6.el7.x86_64",
            "7Server-RHSCL-2.4:rh-mysql57-mysql-config-0:5.7.19-6.el7.x86_64",
            "7Server-RHSCL-2.4:rh-mysql57-mysql-debuginfo-0:5.7.19-6.el7.x86_64",
            "7Server-RHSCL-2.4:rh-mysql57-mysql-devel-0:5.7.19-6.el7.x86_64",
            "7Server-RHSCL-2.4:rh-mysql57-mysql-errmsg-0:5.7.19-6.el7.x86_64",
            "7Server-RHSCL-2.4:rh-mysql57-mysql-server-0:5.7.19-6.el7.x86_64",
            "7Server-RHSCL-2.4:rh-mysql57-mysql-test-0:5.7.19-6.el7.x86_64",
            "7Workstation-RHSCL-2.4:rh-mysql57-mysql-0:5.7.19-6.el7.src",
            "7Workstation-RHSCL-2.4:rh-mysql57-mysql-0:5.7.19-6.el7.x86_64",
            "7Workstation-RHSCL-2.4:rh-mysql57-mysql-common-0:5.7.19-6.el7.x86_64",
            "7Workstation-RHSCL-2.4:rh-mysql57-mysql-config-0:5.7.19-6.el7.x86_64",
            "7Workstation-RHSCL-2.4:rh-mysql57-mysql-debuginfo-0:5.7.19-6.el7.x86_64",
            "7Workstation-RHSCL-2.4:rh-mysql57-mysql-devel-0:5.7.19-6.el7.x86_64",
            "7Workstation-RHSCL-2.4:rh-mysql57-mysql-errmsg-0:5.7.19-6.el7.x86_64",
            "7Workstation-RHSCL-2.4:rh-mysql57-mysql-server-0:5.7.19-6.el7.x86_64",
            "7Workstation-RHSCL-2.4:rh-mysql57-mysql-test-0:5.7.19-6.el7.x86_64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2017:2886"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 6.5,
            "baseSeverity": "MEDIUM",
            "confidentialityImpact": "NONE",
            "integrityImpact": "NONE",
            "privilegesRequired": "LOW",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.0"
          },
          "products": [
            "6Server-RHSCL-2.4-6.7.Z:rh-mysql57-mysql-0:5.7.19-6.el6.src",
            "6Server-RHSCL-2.4-6.7.Z:rh-mysql57-mysql-0:5.7.19-6.el6.x86_64",
            "6Server-RHSCL-2.4-6.7.Z:rh-mysql57-mysql-common-0:5.7.19-6.el6.x86_64",
            "6Server-RHSCL-2.4-6.7.Z:rh-mysql57-mysql-config-0:5.7.19-6.el6.x86_64",
            "6Server-RHSCL-2.4-6.7.Z:rh-mysql57-mysql-debuginfo-0:5.7.19-6.el6.x86_64",
            "6Server-RHSCL-2.4-6.7.Z:rh-mysql57-mysql-devel-0:5.7.19-6.el6.x86_64",
            "6Server-RHSCL-2.4-6.7.Z:rh-mysql57-mysql-errmsg-0:5.7.19-6.el6.x86_64",
            "6Server-RHSCL-2.4-6.7.Z:rh-mysql57-mysql-server-0:5.7.19-6.el6.x86_64",
            "6Server-RHSCL-2.4-6.7.Z:rh-mysql57-mysql-test-0:5.7.19-6.el6.x86_64",
            "6Server-RHSCL-2.4:rh-mysql57-mysql-0:5.7.19-6.el6.src",
            "6Server-RHSCL-2.4:rh-mysql57-mysql-0:5.7.19-6.el6.x86_64",
            "6Server-RHSCL-2.4:rh-mysql57-mysql-common-0:5.7.19-6.el6.x86_64",
            "6Server-RHSCL-2.4:rh-mysql57-mysql-config-0:5.7.19-6.el6.x86_64",
            "6Server-RHSCL-2.4:rh-mysql57-mysql-debuginfo-0:5.7.19-6.el6.x86_64",
            "6Server-RHSCL-2.4:rh-mysql57-mysql-devel-0:5.7.19-6.el6.x86_64",
            "6Server-RHSCL-2.4:rh-mysql57-mysql-errmsg-0:5.7.19-6.el6.x86_64",
            "6Server-RHSCL-2.4:rh-mysql57-mysql-server-0:5.7.19-6.el6.x86_64",
            "6Server-RHSCL-2.4:rh-mysql57-mysql-test-0:5.7.19-6.el6.x86_64",
            "6Workstation-RHSCL-2.4:rh-mysql57-mysql-0:5.7.19-6.el6.src",
            "6Workstation-RHSCL-2.4:rh-mysql57-mysql-0:5.7.19-6.el6.x86_64",
            "6Workstation-RHSCL-2.4:rh-mysql57-mysql-common-0:5.7.19-6.el6.x86_64",
            "6Workstation-RHSCL-2.4:rh-mysql57-mysql-config-0:5.7.19-6.el6.x86_64",
            "6Workstation-RHSCL-2.4:rh-mysql57-mysql-debuginfo-0:5.7.19-6.el6.x86_64",
            "6Workstation-RHSCL-2.4:rh-mysql57-mysql-devel-0:5.7.19-6.el6.x86_64",
            "6Workstation-RHSCL-2.4:rh-mysql57-mysql-errmsg-0:5.7.19-6.el6.x86_64",
            "6Workstation-RHSCL-2.4:rh-mysql57-mysql-server-0:5.7.19-6.el6.x86_64",
            "6Workstation-RHSCL-2.4:rh-mysql57-mysql-test-0:5.7.19-6.el6.x86_64",
            "7Server-RHSCL-2.4-7.3.Z:rh-mysql57-mysql-0:5.7.19-6.el7.src",
            "7Server-RHSCL-2.4-7.3.Z:rh-mysql57-mysql-0:5.7.19-6.el7.x86_64",
            "7Server-RHSCL-2.4-7.3.Z:rh-mysql57-mysql-common-0:5.7.19-6.el7.x86_64",
            "7Server-RHSCL-2.4-7.3.Z:rh-mysql57-mysql-config-0:5.7.19-6.el7.x86_64",
            "7Server-RHSCL-2.4-7.3.Z:rh-mysql57-mysql-debuginfo-0:5.7.19-6.el7.x86_64",
            "7Server-RHSCL-2.4-7.3.Z:rh-mysql57-mysql-devel-0:5.7.19-6.el7.x86_64",
            "7Server-RHSCL-2.4-7.3.Z:rh-mysql57-mysql-errmsg-0:5.7.19-6.el7.x86_64",
            "7Server-RHSCL-2.4-7.3.Z:rh-mysql57-mysql-server-0:5.7.19-6.el7.x86_64",
            "7Server-RHSCL-2.4-7.3.Z:rh-mysql57-mysql-test-0:5.7.19-6.el7.x86_64",
            "7Server-RHSCL-2.4:rh-mysql57-mysql-0:5.7.19-6.el7.src",
            "7Server-RHSCL-2.4:rh-mysql57-mysql-0:5.7.19-6.el7.x86_64",
            "7Server-RHSCL-2.4:rh-mysql57-mysql-common-0:5.7.19-6.el7.x86_64",
            "7Server-RHSCL-2.4:rh-mysql57-mysql-config-0:5.7.19-6.el7.x86_64",
            "7Server-RHSCL-2.4:rh-mysql57-mysql-debuginfo-0:5.7.19-6.el7.x86_64",
            "7Server-RHSCL-2.4:rh-mysql57-mysql-devel-0:5.7.19-6.el7.x86_64",
            "7Server-RHSCL-2.4:rh-mysql57-mysql-errmsg-0:5.7.19-6.el7.x86_64",
            "7Server-RHSCL-2.4:rh-mysql57-mysql-server-0:5.7.19-6.el7.x86_64",
            "7Server-RHSCL-2.4:rh-mysql57-mysql-test-0:5.7.19-6.el7.x86_64",
            "7Workstation-RHSCL-2.4:rh-mysql57-mysql-0:5.7.19-6.el7.src",
            "7Workstation-RHSCL-2.4:rh-mysql57-mysql-0:5.7.19-6.el7.x86_64",
            "7Workstation-RHSCL-2.4:rh-mysql57-mysql-common-0:5.7.19-6.el7.x86_64",
            "7Workstation-RHSCL-2.4:rh-mysql57-mysql-config-0:5.7.19-6.el7.x86_64",
            "7Workstation-RHSCL-2.4:rh-mysql57-mysql-debuginfo-0:5.7.19-6.el7.x86_64",
            "7Workstation-RHSCL-2.4:rh-mysql57-mysql-devel-0:5.7.19-6.el7.x86_64",
            "7Workstation-RHSCL-2.4:rh-mysql57-mysql-errmsg-0:5.7.19-6.el7.x86_64",
            "7Workstation-RHSCL-2.4:rh-mysql57-mysql-server-0:5.7.19-6.el7.x86_64",
            "7Workstation-RHSCL-2.4:rh-mysql57-mysql-test-0:5.7.19-6.el7.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Moderate"
        }
      ],
      "title": "mysql: Server: Replication  unspecified vulnerability (CPU Jan 2017)"
    },
    {
      "cve": "CVE-2017-3257",
      "discovery_date": "2017-01-18T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "1414350"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: InnoDB). Supported versions that are affected are 5.6.34 and earlier5.7.16 and earlier. Easily exploitable vulnerability allows low privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS v3.0 Base Score 6.5 (Availability impacts).",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "mysql: Server: InnoDB unspecified vulnerability (CPU Jan 2017)",
          "title": "Vulnerability summary"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "6Server-RHSCL-2.4-6.7.Z:rh-mysql57-mysql-0:5.7.19-6.el6.src",
          "6Server-RHSCL-2.4-6.7.Z:rh-mysql57-mysql-0:5.7.19-6.el6.x86_64",
          "6Server-RHSCL-2.4-6.7.Z:rh-mysql57-mysql-common-0:5.7.19-6.el6.x86_64",
          "6Server-RHSCL-2.4-6.7.Z:rh-mysql57-mysql-config-0:5.7.19-6.el6.x86_64",
          "6Server-RHSCL-2.4-6.7.Z:rh-mysql57-mysql-debuginfo-0:5.7.19-6.el6.x86_64",
          "6Server-RHSCL-2.4-6.7.Z:rh-mysql57-mysql-devel-0:5.7.19-6.el6.x86_64",
          "6Server-RHSCL-2.4-6.7.Z:rh-mysql57-mysql-errmsg-0:5.7.19-6.el6.x86_64",
          "6Server-RHSCL-2.4-6.7.Z:rh-mysql57-mysql-server-0:5.7.19-6.el6.x86_64",
          "6Server-RHSCL-2.4-6.7.Z:rh-mysql57-mysql-test-0:5.7.19-6.el6.x86_64",
          "6Server-RHSCL-2.4:rh-mysql57-mysql-0:5.7.19-6.el6.src",
          "6Server-RHSCL-2.4:rh-mysql57-mysql-0:5.7.19-6.el6.x86_64",
          "6Server-RHSCL-2.4:rh-mysql57-mysql-common-0:5.7.19-6.el6.x86_64",
          "6Server-RHSCL-2.4:rh-mysql57-mysql-config-0:5.7.19-6.el6.x86_64",
          "6Server-RHSCL-2.4:rh-mysql57-mysql-debuginfo-0:5.7.19-6.el6.x86_64",
          "6Server-RHSCL-2.4:rh-mysql57-mysql-devel-0:5.7.19-6.el6.x86_64",
          "6Server-RHSCL-2.4:rh-mysql57-mysql-errmsg-0:5.7.19-6.el6.x86_64",
          "6Server-RHSCL-2.4:rh-mysql57-mysql-server-0:5.7.19-6.el6.x86_64",
          "6Server-RHSCL-2.4:rh-mysql57-mysql-test-0:5.7.19-6.el6.x86_64",
          "6Workstation-RHSCL-2.4:rh-mysql57-mysql-0:5.7.19-6.el6.src",
          "6Workstation-RHSCL-2.4:rh-mysql57-mysql-0:5.7.19-6.el6.x86_64",
          "6Workstation-RHSCL-2.4:rh-mysql57-mysql-common-0:5.7.19-6.el6.x86_64",
          "6Workstation-RHSCL-2.4:rh-mysql57-mysql-config-0:5.7.19-6.el6.x86_64",
          "6Workstation-RHSCL-2.4:rh-mysql57-mysql-debuginfo-0:5.7.19-6.el6.x86_64",
          "6Workstation-RHSCL-2.4:rh-mysql57-mysql-devel-0:5.7.19-6.el6.x86_64",
          "6Workstation-RHSCL-2.4:rh-mysql57-mysql-errmsg-0:5.7.19-6.el6.x86_64",
          "6Workstation-RHSCL-2.4:rh-mysql57-mysql-server-0:5.7.19-6.el6.x86_64",
          "6Workstation-RHSCL-2.4:rh-mysql57-mysql-test-0:5.7.19-6.el6.x86_64",
          "7Server-RHSCL-2.4-7.3.Z:rh-mysql57-mysql-0:5.7.19-6.el7.src",
          "7Server-RHSCL-2.4-7.3.Z:rh-mysql57-mysql-0:5.7.19-6.el7.x86_64",
          "7Server-RHSCL-2.4-7.3.Z:rh-mysql57-mysql-common-0:5.7.19-6.el7.x86_64",
          "7Server-RHSCL-2.4-7.3.Z:rh-mysql57-mysql-config-0:5.7.19-6.el7.x86_64",
          "7Server-RHSCL-2.4-7.3.Z:rh-mysql57-mysql-debuginfo-0:5.7.19-6.el7.x86_64",
          "7Server-RHSCL-2.4-7.3.Z:rh-mysql57-mysql-devel-0:5.7.19-6.el7.x86_64",
          "7Server-RHSCL-2.4-7.3.Z:rh-mysql57-mysql-errmsg-0:5.7.19-6.el7.x86_64",
          "7Server-RHSCL-2.4-7.3.Z:rh-mysql57-mysql-server-0:5.7.19-6.el7.x86_64",
          "7Server-RHSCL-2.4-7.3.Z:rh-mysql57-mysql-test-0:5.7.19-6.el7.x86_64",
          "7Server-RHSCL-2.4:rh-mysql57-mysql-0:5.7.19-6.el7.src",
          "7Server-RHSCL-2.4:rh-mysql57-mysql-0:5.7.19-6.el7.x86_64",
          "7Server-RHSCL-2.4:rh-mysql57-mysql-common-0:5.7.19-6.el7.x86_64",
          "7Server-RHSCL-2.4:rh-mysql57-mysql-config-0:5.7.19-6.el7.x86_64",
          "7Server-RHSCL-2.4:rh-mysql57-mysql-debuginfo-0:5.7.19-6.el7.x86_64",
          "7Server-RHSCL-2.4:rh-mysql57-mysql-devel-0:5.7.19-6.el7.x86_64",
          "7Server-RHSCL-2.4:rh-mysql57-mysql-errmsg-0:5.7.19-6.el7.x86_64",
          "7Server-RHSCL-2.4:rh-mysql57-mysql-server-0:5.7.19-6.el7.x86_64",
          "7Server-RHSCL-2.4:rh-mysql57-mysql-test-0:5.7.19-6.el7.x86_64",
          "7Workstation-RHSCL-2.4:rh-mysql57-mysql-0:5.7.19-6.el7.src",
          "7Workstation-RHSCL-2.4:rh-mysql57-mysql-0:5.7.19-6.el7.x86_64",
          "7Workstation-RHSCL-2.4:rh-mysql57-mysql-common-0:5.7.19-6.el7.x86_64",
          "7Workstation-RHSCL-2.4:rh-mysql57-mysql-config-0:5.7.19-6.el7.x86_64",
          "7Workstation-RHSCL-2.4:rh-mysql57-mysql-debuginfo-0:5.7.19-6.el7.x86_64",
          "7Workstation-RHSCL-2.4:rh-mysql57-mysql-devel-0:5.7.19-6.el7.x86_64",
          "7Workstation-RHSCL-2.4:rh-mysql57-mysql-errmsg-0:5.7.19-6.el7.x86_64",
          "7Workstation-RHSCL-2.4:rh-mysql57-mysql-server-0:5.7.19-6.el7.x86_64",
          "7Workstation-RHSCL-2.4:rh-mysql57-mysql-test-0:5.7.19-6.el7.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2017-3257"
        },
        {
          "category": "external",
          "summary": "RHBZ#1414350",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1414350"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2017-3257",
          "url": "https://www.cve.org/CVERecord?id=CVE-2017-3257"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2017-3257",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2017-3257"
        },
        {
          "category": "external",
          "summary": "http://www.oracle.com/technetwork/security-advisory/cpujan2017-2881727.html#AppendixMSQL",
          "url": "http://www.oracle.com/technetwork/security-advisory/cpujan2017-2881727.html#AppendixMSQL"
        }
      ],
      "release_date": "2017-01-18T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2017-10-12T07:53:15+00:00",
          "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAfter installing this update, the MySQL server daemon (mysqld) will be restarted automatically.",
          "product_ids": [
            "6Server-RHSCL-2.4-6.7.Z:rh-mysql57-mysql-0:5.7.19-6.el6.src",
            "6Server-RHSCL-2.4-6.7.Z:rh-mysql57-mysql-0:5.7.19-6.el6.x86_64",
            "6Server-RHSCL-2.4-6.7.Z:rh-mysql57-mysql-common-0:5.7.19-6.el6.x86_64",
            "6Server-RHSCL-2.4-6.7.Z:rh-mysql57-mysql-config-0:5.7.19-6.el6.x86_64",
            "6Server-RHSCL-2.4-6.7.Z:rh-mysql57-mysql-debuginfo-0:5.7.19-6.el6.x86_64",
            "6Server-RHSCL-2.4-6.7.Z:rh-mysql57-mysql-devel-0:5.7.19-6.el6.x86_64",
            "6Server-RHSCL-2.4-6.7.Z:rh-mysql57-mysql-errmsg-0:5.7.19-6.el6.x86_64",
            "6Server-RHSCL-2.4-6.7.Z:rh-mysql57-mysql-server-0:5.7.19-6.el6.x86_64",
            "6Server-RHSCL-2.4-6.7.Z:rh-mysql57-mysql-test-0:5.7.19-6.el6.x86_64",
            "6Server-RHSCL-2.4:rh-mysql57-mysql-0:5.7.19-6.el6.src",
            "6Server-RHSCL-2.4:rh-mysql57-mysql-0:5.7.19-6.el6.x86_64",
            "6Server-RHSCL-2.4:rh-mysql57-mysql-common-0:5.7.19-6.el6.x86_64",
            "6Server-RHSCL-2.4:rh-mysql57-mysql-config-0:5.7.19-6.el6.x86_64",
            "6Server-RHSCL-2.4:rh-mysql57-mysql-debuginfo-0:5.7.19-6.el6.x86_64",
            "6Server-RHSCL-2.4:rh-mysql57-mysql-devel-0:5.7.19-6.el6.x86_64",
            "6Server-RHSCL-2.4:rh-mysql57-mysql-errmsg-0:5.7.19-6.el6.x86_64",
            "6Server-RHSCL-2.4:rh-mysql57-mysql-server-0:5.7.19-6.el6.x86_64",
            "6Server-RHSCL-2.4:rh-mysql57-mysql-test-0:5.7.19-6.el6.x86_64",
            "6Workstation-RHSCL-2.4:rh-mysql57-mysql-0:5.7.19-6.el6.src",
            "6Workstation-RHSCL-2.4:rh-mysql57-mysql-0:5.7.19-6.el6.x86_64",
            "6Workstation-RHSCL-2.4:rh-mysql57-mysql-common-0:5.7.19-6.el6.x86_64",
            "6Workstation-RHSCL-2.4:rh-mysql57-mysql-config-0:5.7.19-6.el6.x86_64",
            "6Workstation-RHSCL-2.4:rh-mysql57-mysql-debuginfo-0:5.7.19-6.el6.x86_64",
            "6Workstation-RHSCL-2.4:rh-mysql57-mysql-devel-0:5.7.19-6.el6.x86_64",
            "6Workstation-RHSCL-2.4:rh-mysql57-mysql-errmsg-0:5.7.19-6.el6.x86_64",
            "6Workstation-RHSCL-2.4:rh-mysql57-mysql-server-0:5.7.19-6.el6.x86_64",
            "6Workstation-RHSCL-2.4:rh-mysql57-mysql-test-0:5.7.19-6.el6.x86_64",
            "7Server-RHSCL-2.4-7.3.Z:rh-mysql57-mysql-0:5.7.19-6.el7.src",
            "7Server-RHSCL-2.4-7.3.Z:rh-mysql57-mysql-0:5.7.19-6.el7.x86_64",
            "7Server-RHSCL-2.4-7.3.Z:rh-mysql57-mysql-common-0:5.7.19-6.el7.x86_64",
            "7Server-RHSCL-2.4-7.3.Z:rh-mysql57-mysql-config-0:5.7.19-6.el7.x86_64",
            "7Server-RHSCL-2.4-7.3.Z:rh-mysql57-mysql-debuginfo-0:5.7.19-6.el7.x86_64",
            "7Server-RHSCL-2.4-7.3.Z:rh-mysql57-mysql-devel-0:5.7.19-6.el7.x86_64",
            "7Server-RHSCL-2.4-7.3.Z:rh-mysql57-mysql-errmsg-0:5.7.19-6.el7.x86_64",
            "7Server-RHSCL-2.4-7.3.Z:rh-mysql57-mysql-server-0:5.7.19-6.el7.x86_64",
            "7Server-RHSCL-2.4-7.3.Z:rh-mysql57-mysql-test-0:5.7.19-6.el7.x86_64",
            "7Server-RHSCL-2.4:rh-mysql57-mysql-0:5.7.19-6.el7.src",
            "7Server-RHSCL-2.4:rh-mysql57-mysql-0:5.7.19-6.el7.x86_64",
            "7Server-RHSCL-2.4:rh-mysql57-mysql-common-0:5.7.19-6.el7.x86_64",
            "7Server-RHSCL-2.4:rh-mysql57-mysql-config-0:5.7.19-6.el7.x86_64",
            "7Server-RHSCL-2.4:rh-mysql57-mysql-debuginfo-0:5.7.19-6.el7.x86_64",
            "7Server-RHSCL-2.4:rh-mysql57-mysql-devel-0:5.7.19-6.el7.x86_64",
            "7Server-RHSCL-2.4:rh-mysql57-mysql-errmsg-0:5.7.19-6.el7.x86_64",
            "7Server-RHSCL-2.4:rh-mysql57-mysql-server-0:5.7.19-6.el7.x86_64",
            "7Server-RHSCL-2.4:rh-mysql57-mysql-test-0:5.7.19-6.el7.x86_64",
            "7Workstation-RHSCL-2.4:rh-mysql57-mysql-0:5.7.19-6.el7.src",
            "7Workstation-RHSCL-2.4:rh-mysql57-mysql-0:5.7.19-6.el7.x86_64",
            "7Workstation-RHSCL-2.4:rh-mysql57-mysql-common-0:5.7.19-6.el7.x86_64",
            "7Workstation-RHSCL-2.4:rh-mysql57-mysql-config-0:5.7.19-6.el7.x86_64",
            "7Workstation-RHSCL-2.4:rh-mysql57-mysql-debuginfo-0:5.7.19-6.el7.x86_64",
            "7Workstation-RHSCL-2.4:rh-mysql57-mysql-devel-0:5.7.19-6.el7.x86_64",
            "7Workstation-RHSCL-2.4:rh-mysql57-mysql-errmsg-0:5.7.19-6.el7.x86_64",
            "7Workstation-RHSCL-2.4:rh-mysql57-mysql-server-0:5.7.19-6.el7.x86_64",
            "7Workstation-RHSCL-2.4:rh-mysql57-mysql-test-0:5.7.19-6.el7.x86_64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2017:2886"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 6.5,
            "baseSeverity": "MEDIUM",
            "confidentialityImpact": "NONE",
            "integrityImpact": "NONE",
            "privilegesRequired": "LOW",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.0"
          },
          "products": [
            "6Server-RHSCL-2.4-6.7.Z:rh-mysql57-mysql-0:5.7.19-6.el6.src",
            "6Server-RHSCL-2.4-6.7.Z:rh-mysql57-mysql-0:5.7.19-6.el6.x86_64",
            "6Server-RHSCL-2.4-6.7.Z:rh-mysql57-mysql-common-0:5.7.19-6.el6.x86_64",
            "6Server-RHSCL-2.4-6.7.Z:rh-mysql57-mysql-config-0:5.7.19-6.el6.x86_64",
            "6Server-RHSCL-2.4-6.7.Z:rh-mysql57-mysql-debuginfo-0:5.7.19-6.el6.x86_64",
            "6Server-RHSCL-2.4-6.7.Z:rh-mysql57-mysql-devel-0:5.7.19-6.el6.x86_64",
            "6Server-RHSCL-2.4-6.7.Z:rh-mysql57-mysql-errmsg-0:5.7.19-6.el6.x86_64",
            "6Server-RHSCL-2.4-6.7.Z:rh-mysql57-mysql-server-0:5.7.19-6.el6.x86_64",
            "6Server-RHSCL-2.4-6.7.Z:rh-mysql57-mysql-test-0:5.7.19-6.el6.x86_64",
            "6Server-RHSCL-2.4:rh-mysql57-mysql-0:5.7.19-6.el6.src",
            "6Server-RHSCL-2.4:rh-mysql57-mysql-0:5.7.19-6.el6.x86_64",
            "6Server-RHSCL-2.4:rh-mysql57-mysql-common-0:5.7.19-6.el6.x86_64",
            "6Server-RHSCL-2.4:rh-mysql57-mysql-config-0:5.7.19-6.el6.x86_64",
            "6Server-RHSCL-2.4:rh-mysql57-mysql-debuginfo-0:5.7.19-6.el6.x86_64",
            "6Server-RHSCL-2.4:rh-mysql57-mysql-devel-0:5.7.19-6.el6.x86_64",
            "6Server-RHSCL-2.4:rh-mysql57-mysql-errmsg-0:5.7.19-6.el6.x86_64",
            "6Server-RHSCL-2.4:rh-mysql57-mysql-server-0:5.7.19-6.el6.x86_64",
            "6Server-RHSCL-2.4:rh-mysql57-mysql-test-0:5.7.19-6.el6.x86_64",
            "6Workstation-RHSCL-2.4:rh-mysql57-mysql-0:5.7.19-6.el6.src",
            "6Workstation-RHSCL-2.4:rh-mysql57-mysql-0:5.7.19-6.el6.x86_64",
            "6Workstation-RHSCL-2.4:rh-mysql57-mysql-common-0:5.7.19-6.el6.x86_64",
            "6Workstation-RHSCL-2.4:rh-mysql57-mysql-config-0:5.7.19-6.el6.x86_64",
            "6Workstation-RHSCL-2.4:rh-mysql57-mysql-debuginfo-0:5.7.19-6.el6.x86_64",
            "6Workstation-RHSCL-2.4:rh-mysql57-mysql-devel-0:5.7.19-6.el6.x86_64",
            "6Workstation-RHSCL-2.4:rh-mysql57-mysql-errmsg-0:5.7.19-6.el6.x86_64",
            "6Workstation-RHSCL-2.4:rh-mysql57-mysql-server-0:5.7.19-6.el6.x86_64",
            "6Workstation-RHSCL-2.4:rh-mysql57-mysql-test-0:5.7.19-6.el6.x86_64",
            "7Server-RHSCL-2.4-7.3.Z:rh-mysql57-mysql-0:5.7.19-6.el7.src",
            "7Server-RHSCL-2.4-7.3.Z:rh-mysql57-mysql-0:5.7.19-6.el7.x86_64",
            "7Server-RHSCL-2.4-7.3.Z:rh-mysql57-mysql-common-0:5.7.19-6.el7.x86_64",
            "7Server-RHSCL-2.4-7.3.Z:rh-mysql57-mysql-config-0:5.7.19-6.el7.x86_64",
            "7Server-RHSCL-2.4-7.3.Z:rh-mysql57-mysql-debuginfo-0:5.7.19-6.el7.x86_64",
            "7Server-RHSCL-2.4-7.3.Z:rh-mysql57-mysql-devel-0:5.7.19-6.el7.x86_64",
            "7Server-RHSCL-2.4-7.3.Z:rh-mysql57-mysql-errmsg-0:5.7.19-6.el7.x86_64",
            "7Server-RHSCL-2.4-7.3.Z:rh-mysql57-mysql-server-0:5.7.19-6.el7.x86_64",
            "7Server-RHSCL-2.4-7.3.Z:rh-mysql57-mysql-test-0:5.7.19-6.el7.x86_64",
            "7Server-RHSCL-2.4:rh-mysql57-mysql-0:5.7.19-6.el7.src",
            "7Server-RHSCL-2.4:rh-mysql57-mysql-0:5.7.19-6.el7.x86_64",
            "7Server-RHSCL-2.4:rh-mysql57-mysql-common-0:5.7.19-6.el7.x86_64",
            "7Server-RHSCL-2.4:rh-mysql57-mysql-config-0:5.7.19-6.el7.x86_64",
            "7Server-RHSCL-2.4:rh-mysql57-mysql-debuginfo-0:5.7.19-6.el7.x86_64",
            "7Server-RHSCL-2.4:rh-mysql57-mysql-devel-0:5.7.19-6.el7.x86_64",
            "7Server-RHSCL-2.4:rh-mysql57-mysql-errmsg-0:5.7.19-6.el7.x86_64",
            "7Server-RHSCL-2.4:rh-mysql57-mysql-server-0:5.7.19-6.el7.x86_64",
            "7Server-RHSCL-2.4:rh-mysql57-mysql-test-0:5.7.19-6.el7.x86_64",
            "7Workstation-RHSCL-2.4:rh-mysql57-mysql-0:5.7.19-6.el7.src",
            "7Workstation-RHSCL-2.4:rh-mysql57-mysql-0:5.7.19-6.el7.x86_64",
            "7Workstation-RHSCL-2.4:rh-mysql57-mysql-common-0:5.7.19-6.el7.x86_64",
            "7Workstation-RHSCL-2.4:rh-mysql57-mysql-config-0:5.7.19-6.el7.x86_64",
            "7Workstation-RHSCL-2.4:rh-mysql57-mysql-debuginfo-0:5.7.19-6.el7.x86_64",
            "7Workstation-RHSCL-2.4:rh-mysql57-mysql-devel-0:5.7.19-6.el7.x86_64",
            "7Workstation-RHSCL-2.4:rh-mysql57-mysql-errmsg-0:5.7.19-6.el7.x86_64",
            "7Workstation-RHSCL-2.4:rh-mysql57-mysql-server-0:5.7.19-6.el7.x86_64",
            "7Workstation-RHSCL-2.4:rh-mysql57-mysql-test-0:5.7.19-6.el7.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Moderate"
        }
      ],
      "title": "mysql: Server: InnoDB unspecified vulnerability (CPU Jan 2017)"
    },
    {
      "cve": "CVE-2017-3258",
      "discovery_date": "2017-01-18T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "1414351"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: DDL). Supported versions that are affected are 5.5.53 and earlier, 5.6.34 and earlier and 5.7.16 and earlier. Easily exploitable vulnerability allows low privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS v3.0 Base Score 6.5 (Availability impacts).",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "mysql: Server: DDL unspecified vulnerability (CPU Jan 2017)",
          "title": "Vulnerability summary"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "6Server-RHSCL-2.4-6.7.Z:rh-mysql57-mysql-0:5.7.19-6.el6.src",
          "6Server-RHSCL-2.4-6.7.Z:rh-mysql57-mysql-0:5.7.19-6.el6.x86_64",
          "6Server-RHSCL-2.4-6.7.Z:rh-mysql57-mysql-common-0:5.7.19-6.el6.x86_64",
          "6Server-RHSCL-2.4-6.7.Z:rh-mysql57-mysql-config-0:5.7.19-6.el6.x86_64",
          "6Server-RHSCL-2.4-6.7.Z:rh-mysql57-mysql-debuginfo-0:5.7.19-6.el6.x86_64",
          "6Server-RHSCL-2.4-6.7.Z:rh-mysql57-mysql-devel-0:5.7.19-6.el6.x86_64",
          "6Server-RHSCL-2.4-6.7.Z:rh-mysql57-mysql-errmsg-0:5.7.19-6.el6.x86_64",
          "6Server-RHSCL-2.4-6.7.Z:rh-mysql57-mysql-server-0:5.7.19-6.el6.x86_64",
          "6Server-RHSCL-2.4-6.7.Z:rh-mysql57-mysql-test-0:5.7.19-6.el6.x86_64",
          "6Server-RHSCL-2.4:rh-mysql57-mysql-0:5.7.19-6.el6.src",
          "6Server-RHSCL-2.4:rh-mysql57-mysql-0:5.7.19-6.el6.x86_64",
          "6Server-RHSCL-2.4:rh-mysql57-mysql-common-0:5.7.19-6.el6.x86_64",
          "6Server-RHSCL-2.4:rh-mysql57-mysql-config-0:5.7.19-6.el6.x86_64",
          "6Server-RHSCL-2.4:rh-mysql57-mysql-debuginfo-0:5.7.19-6.el6.x86_64",
          "6Server-RHSCL-2.4:rh-mysql57-mysql-devel-0:5.7.19-6.el6.x86_64",
          "6Server-RHSCL-2.4:rh-mysql57-mysql-errmsg-0:5.7.19-6.el6.x86_64",
          "6Server-RHSCL-2.4:rh-mysql57-mysql-server-0:5.7.19-6.el6.x86_64",
          "6Server-RHSCL-2.4:rh-mysql57-mysql-test-0:5.7.19-6.el6.x86_64",
          "6Workstation-RHSCL-2.4:rh-mysql57-mysql-0:5.7.19-6.el6.src",
          "6Workstation-RHSCL-2.4:rh-mysql57-mysql-0:5.7.19-6.el6.x86_64",
          "6Workstation-RHSCL-2.4:rh-mysql57-mysql-common-0:5.7.19-6.el6.x86_64",
          "6Workstation-RHSCL-2.4:rh-mysql57-mysql-config-0:5.7.19-6.el6.x86_64",
          "6Workstation-RHSCL-2.4:rh-mysql57-mysql-debuginfo-0:5.7.19-6.el6.x86_64",
          "6Workstation-RHSCL-2.4:rh-mysql57-mysql-devel-0:5.7.19-6.el6.x86_64",
          "6Workstation-RHSCL-2.4:rh-mysql57-mysql-errmsg-0:5.7.19-6.el6.x86_64",
          "6Workstation-RHSCL-2.4:rh-mysql57-mysql-server-0:5.7.19-6.el6.x86_64",
          "6Workstation-RHSCL-2.4:rh-mysql57-mysql-test-0:5.7.19-6.el6.x86_64",
          "7Server-RHSCL-2.4-7.3.Z:rh-mysql57-mysql-0:5.7.19-6.el7.src",
          "7Server-RHSCL-2.4-7.3.Z:rh-mysql57-mysql-0:5.7.19-6.el7.x86_64",
          "7Server-RHSCL-2.4-7.3.Z:rh-mysql57-mysql-common-0:5.7.19-6.el7.x86_64",
          "7Server-RHSCL-2.4-7.3.Z:rh-mysql57-mysql-config-0:5.7.19-6.el7.x86_64",
          "7Server-RHSCL-2.4-7.3.Z:rh-mysql57-mysql-debuginfo-0:5.7.19-6.el7.x86_64",
          "7Server-RHSCL-2.4-7.3.Z:rh-mysql57-mysql-devel-0:5.7.19-6.el7.x86_64",
          "7Server-RHSCL-2.4-7.3.Z:rh-mysql57-mysql-errmsg-0:5.7.19-6.el7.x86_64",
          "7Server-RHSCL-2.4-7.3.Z:rh-mysql57-mysql-server-0:5.7.19-6.el7.x86_64",
          "7Server-RHSCL-2.4-7.3.Z:rh-mysql57-mysql-test-0:5.7.19-6.el7.x86_64",
          "7Server-RHSCL-2.4:rh-mysql57-mysql-0:5.7.19-6.el7.src",
          "7Server-RHSCL-2.4:rh-mysql57-mysql-0:5.7.19-6.el7.x86_64",
          "7Server-RHSCL-2.4:rh-mysql57-mysql-common-0:5.7.19-6.el7.x86_64",
          "7Server-RHSCL-2.4:rh-mysql57-mysql-config-0:5.7.19-6.el7.x86_64",
          "7Server-RHSCL-2.4:rh-mysql57-mysql-debuginfo-0:5.7.19-6.el7.x86_64",
          "7Server-RHSCL-2.4:rh-mysql57-mysql-devel-0:5.7.19-6.el7.x86_64",
          "7Server-RHSCL-2.4:rh-mysql57-mysql-errmsg-0:5.7.19-6.el7.x86_64",
          "7Server-RHSCL-2.4:rh-mysql57-mysql-server-0:5.7.19-6.el7.x86_64",
          "7Server-RHSCL-2.4:rh-mysql57-mysql-test-0:5.7.19-6.el7.x86_64",
          "7Workstation-RHSCL-2.4:rh-mysql57-mysql-0:5.7.19-6.el7.src",
          "7Workstation-RHSCL-2.4:rh-mysql57-mysql-0:5.7.19-6.el7.x86_64",
          "7Workstation-RHSCL-2.4:rh-mysql57-mysql-common-0:5.7.19-6.el7.x86_64",
          "7Workstation-RHSCL-2.4:rh-mysql57-mysql-config-0:5.7.19-6.el7.x86_64",
          "7Workstation-RHSCL-2.4:rh-mysql57-mysql-debuginfo-0:5.7.19-6.el7.x86_64",
          "7Workstation-RHSCL-2.4:rh-mysql57-mysql-devel-0:5.7.19-6.el7.x86_64",
          "7Workstation-RHSCL-2.4:rh-mysql57-mysql-errmsg-0:5.7.19-6.el7.x86_64",
          "7Workstation-RHSCL-2.4:rh-mysql57-mysql-server-0:5.7.19-6.el7.x86_64",
          "7Workstation-RHSCL-2.4:rh-mysql57-mysql-test-0:5.7.19-6.el7.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2017-3258"
        },
        {
          "category": "external",
          "summary": "RHBZ#1414351",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1414351"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2017-3258",
          "url": "https://www.cve.org/CVERecord?id=CVE-2017-3258"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2017-3258",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2017-3258"
        },
        {
          "category": "external",
          "summary": "http://www.oracle.com/technetwork/security-advisory/cpujan2017-2881727.html#AppendixMSQL",
          "url": "http://www.oracle.com/technetwork/security-advisory/cpujan2017-2881727.html#AppendixMSQL"
        }
      ],
      "release_date": "2017-01-18T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2017-10-12T07:53:15+00:00",
          "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAfter installing this update, the MySQL server daemon (mysqld) will be restarted automatically.",
          "product_ids": [
            "6Server-RHSCL-2.4-6.7.Z:rh-mysql57-mysql-0:5.7.19-6.el6.src",
            "6Server-RHSCL-2.4-6.7.Z:rh-mysql57-mysql-0:5.7.19-6.el6.x86_64",
            "6Server-RHSCL-2.4-6.7.Z:rh-mysql57-mysql-common-0:5.7.19-6.el6.x86_64",
            "6Server-RHSCL-2.4-6.7.Z:rh-mysql57-mysql-config-0:5.7.19-6.el6.x86_64",
            "6Server-RHSCL-2.4-6.7.Z:rh-mysql57-mysql-debuginfo-0:5.7.19-6.el6.x86_64",
            "6Server-RHSCL-2.4-6.7.Z:rh-mysql57-mysql-devel-0:5.7.19-6.el6.x86_64",
            "6Server-RHSCL-2.4-6.7.Z:rh-mysql57-mysql-errmsg-0:5.7.19-6.el6.x86_64",
            "6Server-RHSCL-2.4-6.7.Z:rh-mysql57-mysql-server-0:5.7.19-6.el6.x86_64",
            "6Server-RHSCL-2.4-6.7.Z:rh-mysql57-mysql-test-0:5.7.19-6.el6.x86_64",
            "6Server-RHSCL-2.4:rh-mysql57-mysql-0:5.7.19-6.el6.src",
            "6Server-RHSCL-2.4:rh-mysql57-mysql-0:5.7.19-6.el6.x86_64",
            "6Server-RHSCL-2.4:rh-mysql57-mysql-common-0:5.7.19-6.el6.x86_64",
            "6Server-RHSCL-2.4:rh-mysql57-mysql-config-0:5.7.19-6.el6.x86_64",
            "6Server-RHSCL-2.4:rh-mysql57-mysql-debuginfo-0:5.7.19-6.el6.x86_64",
            "6Server-RHSCL-2.4:rh-mysql57-mysql-devel-0:5.7.19-6.el6.x86_64",
            "6Server-RHSCL-2.4:rh-mysql57-mysql-errmsg-0:5.7.19-6.el6.x86_64",
            "6Server-RHSCL-2.4:rh-mysql57-mysql-server-0:5.7.19-6.el6.x86_64",
            "6Server-RHSCL-2.4:rh-mysql57-mysql-test-0:5.7.19-6.el6.x86_64",
            "6Workstation-RHSCL-2.4:rh-mysql57-mysql-0:5.7.19-6.el6.src",
            "6Workstation-RHSCL-2.4:rh-mysql57-mysql-0:5.7.19-6.el6.x86_64",
            "6Workstation-RHSCL-2.4:rh-mysql57-mysql-common-0:5.7.19-6.el6.x86_64",
            "6Workstation-RHSCL-2.4:rh-mysql57-mysql-config-0:5.7.19-6.el6.x86_64",
            "6Workstation-RHSCL-2.4:rh-mysql57-mysql-debuginfo-0:5.7.19-6.el6.x86_64",
            "6Workstation-RHSCL-2.4:rh-mysql57-mysql-devel-0:5.7.19-6.el6.x86_64",
            "6Workstation-RHSCL-2.4:rh-mysql57-mysql-errmsg-0:5.7.19-6.el6.x86_64",
            "6Workstation-RHSCL-2.4:rh-mysql57-mysql-server-0:5.7.19-6.el6.x86_64",
            "6Workstation-RHSCL-2.4:rh-mysql57-mysql-test-0:5.7.19-6.el6.x86_64",
            "7Server-RHSCL-2.4-7.3.Z:rh-mysql57-mysql-0:5.7.19-6.el7.src",
            "7Server-RHSCL-2.4-7.3.Z:rh-mysql57-mysql-0:5.7.19-6.el7.x86_64",
            "7Server-RHSCL-2.4-7.3.Z:rh-mysql57-mysql-common-0:5.7.19-6.el7.x86_64",
            "7Server-RHSCL-2.4-7.3.Z:rh-mysql57-mysql-config-0:5.7.19-6.el7.x86_64",
            "7Server-RHSCL-2.4-7.3.Z:rh-mysql57-mysql-debuginfo-0:5.7.19-6.el7.x86_64",
            "7Server-RHSCL-2.4-7.3.Z:rh-mysql57-mysql-devel-0:5.7.19-6.el7.x86_64",
            "7Server-RHSCL-2.4-7.3.Z:rh-mysql57-mysql-errmsg-0:5.7.19-6.el7.x86_64",
            "7Server-RHSCL-2.4-7.3.Z:rh-mysql57-mysql-server-0:5.7.19-6.el7.x86_64",
            "7Server-RHSCL-2.4-7.3.Z:rh-mysql57-mysql-test-0:5.7.19-6.el7.x86_64",
            "7Server-RHSCL-2.4:rh-mysql57-mysql-0:5.7.19-6.el7.src",
            "7Server-RHSCL-2.4:rh-mysql57-mysql-0:5.7.19-6.el7.x86_64",
            "7Server-RHSCL-2.4:rh-mysql57-mysql-common-0:5.7.19-6.el7.x86_64",
            "7Server-RHSCL-2.4:rh-mysql57-mysql-config-0:5.7.19-6.el7.x86_64",
            "7Server-RHSCL-2.4:rh-mysql57-mysql-debuginfo-0:5.7.19-6.el7.x86_64",
            "7Server-RHSCL-2.4:rh-mysql57-mysql-devel-0:5.7.19-6.el7.x86_64",
            "7Server-RHSCL-2.4:rh-mysql57-mysql-errmsg-0:5.7.19-6.el7.x86_64",
            "7Server-RHSCL-2.4:rh-mysql57-mysql-server-0:5.7.19-6.el7.x86_64",
            "7Server-RHSCL-2.4:rh-mysql57-mysql-test-0:5.7.19-6.el7.x86_64",
            "7Workstation-RHSCL-2.4:rh-mysql57-mysql-0:5.7.19-6.el7.src",
            "7Workstation-RHSCL-2.4:rh-mysql57-mysql-0:5.7.19-6.el7.x86_64",
            "7Workstation-RHSCL-2.4:rh-mysql57-mysql-common-0:5.7.19-6.el7.x86_64",
            "7Workstation-RHSCL-2.4:rh-mysql57-mysql-config-0:5.7.19-6.el7.x86_64",
            "7Workstation-RHSCL-2.4:rh-mysql57-mysql-debuginfo-0:5.7.19-6.el7.x86_64",
            "7Workstation-RHSCL-2.4:rh-mysql57-mysql-devel-0:5.7.19-6.el7.x86_64",
            "7Workstation-RHSCL-2.4:rh-mysql57-mysql-errmsg-0:5.7.19-6.el7.x86_64",
            "7Workstation-RHSCL-2.4:rh-mysql57-mysql-server-0:5.7.19-6.el7.x86_64",
            "7Workstation-RHSCL-2.4:rh-mysql57-mysql-test-0:5.7.19-6.el7.x86_64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2017:2886"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 6.5,
            "baseSeverity": "MEDIUM",
            "confidentialityImpact": "NONE",
            "integrityImpact": "NONE",
            "privilegesRequired": "LOW",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.0"
          },
          "products": [
            "6Server-RHSCL-2.4-6.7.Z:rh-mysql57-mysql-0:5.7.19-6.el6.src",
            "6Server-RHSCL-2.4-6.7.Z:rh-mysql57-mysql-0:5.7.19-6.el6.x86_64",
            "6Server-RHSCL-2.4-6.7.Z:rh-mysql57-mysql-common-0:5.7.19-6.el6.x86_64",
            "6Server-RHSCL-2.4-6.7.Z:rh-mysql57-mysql-config-0:5.7.19-6.el6.x86_64",
            "6Server-RHSCL-2.4-6.7.Z:rh-mysql57-mysql-debuginfo-0:5.7.19-6.el6.x86_64",
            "6Server-RHSCL-2.4-6.7.Z:rh-mysql57-mysql-devel-0:5.7.19-6.el6.x86_64",
            "6Server-RHSCL-2.4-6.7.Z:rh-mysql57-mysql-errmsg-0:5.7.19-6.el6.x86_64",
            "6Server-RHSCL-2.4-6.7.Z:rh-mysql57-mysql-server-0:5.7.19-6.el6.x86_64",
            "6Server-RHSCL-2.4-6.7.Z:rh-mysql57-mysql-test-0:5.7.19-6.el6.x86_64",
            "6Server-RHSCL-2.4:rh-mysql57-mysql-0:5.7.19-6.el6.src",
            "6Server-RHSCL-2.4:rh-mysql57-mysql-0:5.7.19-6.el6.x86_64",
            "6Server-RHSCL-2.4:rh-mysql57-mysql-common-0:5.7.19-6.el6.x86_64",
            "6Server-RHSCL-2.4:rh-mysql57-mysql-config-0:5.7.19-6.el6.x86_64",
            "6Server-RHSCL-2.4:rh-mysql57-mysql-debuginfo-0:5.7.19-6.el6.x86_64",
            "6Server-RHSCL-2.4:rh-mysql57-mysql-devel-0:5.7.19-6.el6.x86_64",
            "6Server-RHSCL-2.4:rh-mysql57-mysql-errmsg-0:5.7.19-6.el6.x86_64",
            "6Server-RHSCL-2.4:rh-mysql57-mysql-server-0:5.7.19-6.el6.x86_64",
            "6Server-RHSCL-2.4:rh-mysql57-mysql-test-0:5.7.19-6.el6.x86_64",
            "6Workstation-RHSCL-2.4:rh-mysql57-mysql-0:5.7.19-6.el6.src",
            "6Workstation-RHSCL-2.4:rh-mysql57-mysql-0:5.7.19-6.el6.x86_64",
            "6Workstation-RHSCL-2.4:rh-mysql57-mysql-common-0:5.7.19-6.el6.x86_64",
            "6Workstation-RHSCL-2.4:rh-mysql57-mysql-config-0:5.7.19-6.el6.x86_64",
            "6Workstation-RHSCL-2.4:rh-mysql57-mysql-debuginfo-0:5.7.19-6.el6.x86_64",
            "6Workstation-RHSCL-2.4:rh-mysql57-mysql-devel-0:5.7.19-6.el6.x86_64",
            "6Workstation-RHSCL-2.4:rh-mysql57-mysql-errmsg-0:5.7.19-6.el6.x86_64",
            "6Workstation-RHSCL-2.4:rh-mysql57-mysql-server-0:5.7.19-6.el6.x86_64",
            "6Workstation-RHSCL-2.4:rh-mysql57-mysql-test-0:5.7.19-6.el6.x86_64",
            "7Server-RHSCL-2.4-7.3.Z:rh-mysql57-mysql-0:5.7.19-6.el7.src",
            "7Server-RHSCL-2.4-7.3.Z:rh-mysql57-mysql-0:5.7.19-6.el7.x86_64",
            "7Server-RHSCL-2.4-7.3.Z:rh-mysql57-mysql-common-0:5.7.19-6.el7.x86_64",
            "7Server-RHSCL-2.4-7.3.Z:rh-mysql57-mysql-config-0:5.7.19-6.el7.x86_64",
            "7Server-RHSCL-2.4-7.3.Z:rh-mysql57-mysql-debuginfo-0:5.7.19-6.el7.x86_64",
            "7Server-RHSCL-2.4-7.3.Z:rh-mysql57-mysql-devel-0:5.7.19-6.el7.x86_64",
            "7Server-RHSCL-2.4-7.3.Z:rh-mysql57-mysql-errmsg-0:5.7.19-6.el7.x86_64",
            "7Server-RHSCL-2.4-7.3.Z:rh-mysql57-mysql-server-0:5.7.19-6.el7.x86_64",
            "7Server-RHSCL-2.4-7.3.Z:rh-mysql57-mysql-test-0:5.7.19-6.el7.x86_64",
            "7Server-RHSCL-2.4:rh-mysql57-mysql-0:5.7.19-6.el7.src",
            "7Server-RHSCL-2.4:rh-mysql57-mysql-0:5.7.19-6.el7.x86_64",
            "7Server-RHSCL-2.4:rh-mysql57-mysql-common-0:5.7.19-6.el7.x86_64",
            "7Server-RHSCL-2.4:rh-mysql57-mysql-config-0:5.7.19-6.el7.x86_64",
            "7Server-RHSCL-2.4:rh-mysql57-mysql-debuginfo-0:5.7.19-6.el7.x86_64",
            "7Server-RHSCL-2.4:rh-mysql57-mysql-devel-0:5.7.19-6.el7.x86_64",
            "7Server-RHSCL-2.4:rh-mysql57-mysql-errmsg-0:5.7.19-6.el7.x86_64",
            "7Server-RHSCL-2.4:rh-mysql57-mysql-server-0:5.7.19-6.el7.x86_64",
            "7Server-RHSCL-2.4:rh-mysql57-mysql-test-0:5.7.19-6.el7.x86_64",
            "7Workstation-RHSCL-2.4:rh-mysql57-mysql-0:5.7.19-6.el7.src",
            "7Workstation-RHSCL-2.4:rh-mysql57-mysql-0:5.7.19-6.el7.x86_64",
            "7Workstation-RHSCL-2.4:rh-mysql57-mysql-common-0:5.7.19-6.el7.x86_64",
            "7Workstation-RHSCL-2.4:rh-mysql57-mysql-config-0:5.7.19-6.el7.x86_64",
            "7Workstation-RHSCL-2.4:rh-mysql57-mysql-debuginfo-0:5.7.19-6.el7.x86_64",
            "7Workstation-RHSCL-2.4:rh-mysql57-mysql-devel-0:5.7.19-6.el7.x86_64",
            "7Workstation-RHSCL-2.4:rh-mysql57-mysql-errmsg-0:5.7.19-6.el7.x86_64",
            "7Workstation-RHSCL-2.4:rh-mysql57-mysql-server-0:5.7.19-6.el7.x86_64",
            "7Workstation-RHSCL-2.4:rh-mysql57-mysql-test-0:5.7.19-6.el7.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Moderate"
        }
      ],
      "title": "mysql: Server: DDL unspecified vulnerability (CPU Jan 2017)"
    },
    {
      "cve": "CVE-2017-3273",
      "discovery_date": "2017-01-18T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "1414352"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: DDL). Supported versions that are affected are 5.6.34 and earlier and 5.7.16 and earlier. Easily exploitable vulnerability allows low privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS v3.0 Base Score 6.5 (Availability impacts).",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "mysql: Server: DDL  unspecified vulnerability (CPU Jan 2017)",
          "title": "Vulnerability summary"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "6Server-RHSCL-2.4-6.7.Z:rh-mysql57-mysql-0:5.7.19-6.el6.src",
          "6Server-RHSCL-2.4-6.7.Z:rh-mysql57-mysql-0:5.7.19-6.el6.x86_64",
          "6Server-RHSCL-2.4-6.7.Z:rh-mysql57-mysql-common-0:5.7.19-6.el6.x86_64",
          "6Server-RHSCL-2.4-6.7.Z:rh-mysql57-mysql-config-0:5.7.19-6.el6.x86_64",
          "6Server-RHSCL-2.4-6.7.Z:rh-mysql57-mysql-debuginfo-0:5.7.19-6.el6.x86_64",
          "6Server-RHSCL-2.4-6.7.Z:rh-mysql57-mysql-devel-0:5.7.19-6.el6.x86_64",
          "6Server-RHSCL-2.4-6.7.Z:rh-mysql57-mysql-errmsg-0:5.7.19-6.el6.x86_64",
          "6Server-RHSCL-2.4-6.7.Z:rh-mysql57-mysql-server-0:5.7.19-6.el6.x86_64",
          "6Server-RHSCL-2.4-6.7.Z:rh-mysql57-mysql-test-0:5.7.19-6.el6.x86_64",
          "6Server-RHSCL-2.4:rh-mysql57-mysql-0:5.7.19-6.el6.src",
          "6Server-RHSCL-2.4:rh-mysql57-mysql-0:5.7.19-6.el6.x86_64",
          "6Server-RHSCL-2.4:rh-mysql57-mysql-common-0:5.7.19-6.el6.x86_64",
          "6Server-RHSCL-2.4:rh-mysql57-mysql-config-0:5.7.19-6.el6.x86_64",
          "6Server-RHSCL-2.4:rh-mysql57-mysql-debuginfo-0:5.7.19-6.el6.x86_64",
          "6Server-RHSCL-2.4:rh-mysql57-mysql-devel-0:5.7.19-6.el6.x86_64",
          "6Server-RHSCL-2.4:rh-mysql57-mysql-errmsg-0:5.7.19-6.el6.x86_64",
          "6Server-RHSCL-2.4:rh-mysql57-mysql-server-0:5.7.19-6.el6.x86_64",
          "6Server-RHSCL-2.4:rh-mysql57-mysql-test-0:5.7.19-6.el6.x86_64",
          "6Workstation-RHSCL-2.4:rh-mysql57-mysql-0:5.7.19-6.el6.src",
          "6Workstation-RHSCL-2.4:rh-mysql57-mysql-0:5.7.19-6.el6.x86_64",
          "6Workstation-RHSCL-2.4:rh-mysql57-mysql-common-0:5.7.19-6.el6.x86_64",
          "6Workstation-RHSCL-2.4:rh-mysql57-mysql-config-0:5.7.19-6.el6.x86_64",
          "6Workstation-RHSCL-2.4:rh-mysql57-mysql-debuginfo-0:5.7.19-6.el6.x86_64",
          "6Workstation-RHSCL-2.4:rh-mysql57-mysql-devel-0:5.7.19-6.el6.x86_64",
          "6Workstation-RHSCL-2.4:rh-mysql57-mysql-errmsg-0:5.7.19-6.el6.x86_64",
          "6Workstation-RHSCL-2.4:rh-mysql57-mysql-server-0:5.7.19-6.el6.x86_64",
          "6Workstation-RHSCL-2.4:rh-mysql57-mysql-test-0:5.7.19-6.el6.x86_64",
          "7Server-RHSCL-2.4-7.3.Z:rh-mysql57-mysql-0:5.7.19-6.el7.src",
          "7Server-RHSCL-2.4-7.3.Z:rh-mysql57-mysql-0:5.7.19-6.el7.x86_64",
          "7Server-RHSCL-2.4-7.3.Z:rh-mysql57-mysql-common-0:5.7.19-6.el7.x86_64",
          "7Server-RHSCL-2.4-7.3.Z:rh-mysql57-mysql-config-0:5.7.19-6.el7.x86_64",
          "7Server-RHSCL-2.4-7.3.Z:rh-mysql57-mysql-debuginfo-0:5.7.19-6.el7.x86_64",
          "7Server-RHSCL-2.4-7.3.Z:rh-mysql57-mysql-devel-0:5.7.19-6.el7.x86_64",
          "7Server-RHSCL-2.4-7.3.Z:rh-mysql57-mysql-errmsg-0:5.7.19-6.el7.x86_64",
          "7Server-RHSCL-2.4-7.3.Z:rh-mysql57-mysql-server-0:5.7.19-6.el7.x86_64",
          "7Server-RHSCL-2.4-7.3.Z:rh-mysql57-mysql-test-0:5.7.19-6.el7.x86_64",
          "7Server-RHSCL-2.4:rh-mysql57-mysql-0:5.7.19-6.el7.src",
          "7Server-RHSCL-2.4:rh-mysql57-mysql-0:5.7.19-6.el7.x86_64",
          "7Server-RHSCL-2.4:rh-mysql57-mysql-common-0:5.7.19-6.el7.x86_64",
          "7Server-RHSCL-2.4:rh-mysql57-mysql-config-0:5.7.19-6.el7.x86_64",
          "7Server-RHSCL-2.4:rh-mysql57-mysql-debuginfo-0:5.7.19-6.el7.x86_64",
          "7Server-RHSCL-2.4:rh-mysql57-mysql-devel-0:5.7.19-6.el7.x86_64",
          "7Server-RHSCL-2.4:rh-mysql57-mysql-errmsg-0:5.7.19-6.el7.x86_64",
          "7Server-RHSCL-2.4:rh-mysql57-mysql-server-0:5.7.19-6.el7.x86_64",
          "7Server-RHSCL-2.4:rh-mysql57-mysql-test-0:5.7.19-6.el7.x86_64",
          "7Workstation-RHSCL-2.4:rh-mysql57-mysql-0:5.7.19-6.el7.src",
          "7Workstation-RHSCL-2.4:rh-mysql57-mysql-0:5.7.19-6.el7.x86_64",
          "7Workstation-RHSCL-2.4:rh-mysql57-mysql-common-0:5.7.19-6.el7.x86_64",
          "7Workstation-RHSCL-2.4:rh-mysql57-mysql-config-0:5.7.19-6.el7.x86_64",
          "7Workstation-RHSCL-2.4:rh-mysql57-mysql-debuginfo-0:5.7.19-6.el7.x86_64",
          "7Workstation-RHSCL-2.4:rh-mysql57-mysql-devel-0:5.7.19-6.el7.x86_64",
          "7Workstation-RHSCL-2.4:rh-mysql57-mysql-errmsg-0:5.7.19-6.el7.x86_64",
          "7Workstation-RHSCL-2.4:rh-mysql57-mysql-server-0:5.7.19-6.el7.x86_64",
          "7Workstation-RHSCL-2.4:rh-mysql57-mysql-test-0:5.7.19-6.el7.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2017-3273"
        },
        {
          "category": "external",
          "summary": "RHBZ#1414352",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1414352"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2017-3273",
          "url": "https://www.cve.org/CVERecord?id=CVE-2017-3273"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2017-3273",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2017-3273"
        },
        {
          "category": "external",
          "summary": "http://www.oracle.com/technetwork/security-advisory/cpujan2017-2881727.html#AppendixMSQL",
          "url": "http://www.oracle.com/technetwork/security-advisory/cpujan2017-2881727.html#AppendixMSQL"
        }
      ],
      "release_date": "2017-01-18T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2017-10-12T07:53:15+00:00",
          "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAfter installing this update, the MySQL server daemon (mysqld) will be restarted automatically.",
          "product_ids": [
            "6Server-RHSCL-2.4-6.7.Z:rh-mysql57-mysql-0:5.7.19-6.el6.src",
            "6Server-RHSCL-2.4-6.7.Z:rh-mysql57-mysql-0:5.7.19-6.el6.x86_64",
            "6Server-RHSCL-2.4-6.7.Z:rh-mysql57-mysql-common-0:5.7.19-6.el6.x86_64",
            "6Server-RHSCL-2.4-6.7.Z:rh-mysql57-mysql-config-0:5.7.19-6.el6.x86_64",
            "6Server-RHSCL-2.4-6.7.Z:rh-mysql57-mysql-debuginfo-0:5.7.19-6.el6.x86_64",
            "6Server-RHSCL-2.4-6.7.Z:rh-mysql57-mysql-devel-0:5.7.19-6.el6.x86_64",
            "6Server-RHSCL-2.4-6.7.Z:rh-mysql57-mysql-errmsg-0:5.7.19-6.el6.x86_64",
            "6Server-RHSCL-2.4-6.7.Z:rh-mysql57-mysql-server-0:5.7.19-6.el6.x86_64",
            "6Server-RHSCL-2.4-6.7.Z:rh-mysql57-mysql-test-0:5.7.19-6.el6.x86_64",
            "6Server-RHSCL-2.4:rh-mysql57-mysql-0:5.7.19-6.el6.src",
            "6Server-RHSCL-2.4:rh-mysql57-mysql-0:5.7.19-6.el6.x86_64",
            "6Server-RHSCL-2.4:rh-mysql57-mysql-common-0:5.7.19-6.el6.x86_64",
            "6Server-RHSCL-2.4:rh-mysql57-mysql-config-0:5.7.19-6.el6.x86_64",
            "6Server-RHSCL-2.4:rh-mysql57-mysql-debuginfo-0:5.7.19-6.el6.x86_64",
            "6Server-RHSCL-2.4:rh-mysql57-mysql-devel-0:5.7.19-6.el6.x86_64",
            "6Server-RHSCL-2.4:rh-mysql57-mysql-errmsg-0:5.7.19-6.el6.x86_64",
            "6Server-RHSCL-2.4:rh-mysql57-mysql-server-0:5.7.19-6.el6.x86_64",
            "6Server-RHSCL-2.4:rh-mysql57-mysql-test-0:5.7.19-6.el6.x86_64",
            "6Workstation-RHSCL-2.4:rh-mysql57-mysql-0:5.7.19-6.el6.src",
            "6Workstation-RHSCL-2.4:rh-mysql57-mysql-0:5.7.19-6.el6.x86_64",
            "6Workstation-RHSCL-2.4:rh-mysql57-mysql-common-0:5.7.19-6.el6.x86_64",
            "6Workstation-RHSCL-2.4:rh-mysql57-mysql-config-0:5.7.19-6.el6.x86_64",
            "6Workstation-RHSCL-2.4:rh-mysql57-mysql-debuginfo-0:5.7.19-6.el6.x86_64",
            "6Workstation-RHSCL-2.4:rh-mysql57-mysql-devel-0:5.7.19-6.el6.x86_64",
            "6Workstation-RHSCL-2.4:rh-mysql57-mysql-errmsg-0:5.7.19-6.el6.x86_64",
            "6Workstation-RHSCL-2.4:rh-mysql57-mysql-server-0:5.7.19-6.el6.x86_64",
            "6Workstation-RHSCL-2.4:rh-mysql57-mysql-test-0:5.7.19-6.el6.x86_64",
            "7Server-RHSCL-2.4-7.3.Z:rh-mysql57-mysql-0:5.7.19-6.el7.src",
            "7Server-RHSCL-2.4-7.3.Z:rh-mysql57-mysql-0:5.7.19-6.el7.x86_64",
            "7Server-RHSCL-2.4-7.3.Z:rh-mysql57-mysql-common-0:5.7.19-6.el7.x86_64",
            "7Server-RHSCL-2.4-7.3.Z:rh-mysql57-mysql-config-0:5.7.19-6.el7.x86_64",
            "7Server-RHSCL-2.4-7.3.Z:rh-mysql57-mysql-debuginfo-0:5.7.19-6.el7.x86_64",
            "7Server-RHSCL-2.4-7.3.Z:rh-mysql57-mysql-devel-0:5.7.19-6.el7.x86_64",
            "7Server-RHSCL-2.4-7.3.Z:rh-mysql57-mysql-errmsg-0:5.7.19-6.el7.x86_64",
            "7Server-RHSCL-2.4-7.3.Z:rh-mysql57-mysql-server-0:5.7.19-6.el7.x86_64",
            "7Server-RHSCL-2.4-7.3.Z:rh-mysql57-mysql-test-0:5.7.19-6.el7.x86_64",
            "7Server-RHSCL-2.4:rh-mysql57-mysql-0:5.7.19-6.el7.src",
            "7Server-RHSCL-2.4:rh-mysql57-mysql-0:5.7.19-6.el7.x86_64",
            "7Server-RHSCL-2.4:rh-mysql57-mysql-common-0:5.7.19-6.el7.x86_64",
            "7Server-RHSCL-2.4:rh-mysql57-mysql-config-0:5.7.19-6.el7.x86_64",
            "7Server-RHSCL-2.4:rh-mysql57-mysql-debuginfo-0:5.7.19-6.el7.x86_64",
            "7Server-RHSCL-2.4:rh-mysql57-mysql-devel-0:5.7.19-6.el7.x86_64",
            "7Server-RHSCL-2.4:rh-mysql57-mysql-errmsg-0:5.7.19-6.el7.x86_64",
            "7Server-RHSCL-2.4:rh-mysql57-mysql-server-0:5.7.19-6.el7.x86_64",
            "7Server-RHSCL-2.4:rh-mysql57-mysql-test-0:5.7.19-6.el7.x86_64",
            "7Workstation-RHSCL-2.4:rh-mysql57-mysql-0:5.7.19-6.el7.src",
            "7Workstation-RHSCL-2.4:rh-mysql57-mysql-0:5.7.19-6.el7.x86_64",
            "7Workstation-RHSCL-2.4:rh-mysql57-mysql-common-0:5.7.19-6.el7.x86_64",
            "7Workstation-RHSCL-2.4:rh-mysql57-mysql-config-0:5.7.19-6.el7.x86_64",
            "7Workstation-RHSCL-2.4:rh-mysql57-mysql-debuginfo-0:5.7.19-6.el7.x86_64",
            "7Workstation-RHSCL-2.4:rh-mysql57-mysql-devel-0:5.7.19-6.el7.x86_64",
            "7Workstation-RHSCL-2.4:rh-mysql57-mysql-errmsg-0:5.7.19-6.el7.x86_64",
            "7Workstation-RHSCL-2.4:rh-mysql57-mysql-server-0:5.7.19-6.el7.x86_64",
            "7Workstation-RHSCL-2.4:rh-mysql57-mysql-test-0:5.7.19-6.el7.x86_64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2017:2886"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 6.5,
            "baseSeverity": "MEDIUM",
            "confidentialityImpact": "NONE",
            "integrityImpact": "NONE",
            "privilegesRequired": "LOW",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.0"
          },
          "products": [
            "6Server-RHSCL-2.4-6.7.Z:rh-mysql57-mysql-0:5.7.19-6.el6.src",
            "6Server-RHSCL-2.4-6.7.Z:rh-mysql57-mysql-0:5.7.19-6.el6.x86_64",
            "6Server-RHSCL-2.4-6.7.Z:rh-mysql57-mysql-common-0:5.7.19-6.el6.x86_64",
            "6Server-RHSCL-2.4-6.7.Z:rh-mysql57-mysql-config-0:5.7.19-6.el6.x86_64",
            "6Server-RHSCL-2.4-6.7.Z:rh-mysql57-mysql-debuginfo-0:5.7.19-6.el6.x86_64",
            "6Server-RHSCL-2.4-6.7.Z:rh-mysql57-mysql-devel-0:5.7.19-6.el6.x86_64",
            "6Server-RHSCL-2.4-6.7.Z:rh-mysql57-mysql-errmsg-0:5.7.19-6.el6.x86_64",
            "6Server-RHSCL-2.4-6.7.Z:rh-mysql57-mysql-server-0:5.7.19-6.el6.x86_64",
            "6Server-RHSCL-2.4-6.7.Z:rh-mysql57-mysql-test-0:5.7.19-6.el6.x86_64",
            "6Server-RHSCL-2.4:rh-mysql57-mysql-0:5.7.19-6.el6.src",
            "6Server-RHSCL-2.4:rh-mysql57-mysql-0:5.7.19-6.el6.x86_64",
            "6Server-RHSCL-2.4:rh-mysql57-mysql-common-0:5.7.19-6.el6.x86_64",
            "6Server-RHSCL-2.4:rh-mysql57-mysql-config-0:5.7.19-6.el6.x86_64",
            "6Server-RHSCL-2.4:rh-mysql57-mysql-debuginfo-0:5.7.19-6.el6.x86_64",
            "6Server-RHSCL-2.4:rh-mysql57-mysql-devel-0:5.7.19-6.el6.x86_64",
            "6Server-RHSCL-2.4:rh-mysql57-mysql-errmsg-0:5.7.19-6.el6.x86_64",
            "6Server-RHSCL-2.4:rh-mysql57-mysql-server-0:5.7.19-6.el6.x86_64",
            "6Server-RHSCL-2.4:rh-mysql57-mysql-test-0:5.7.19-6.el6.x86_64",
            "6Workstation-RHSCL-2.4:rh-mysql57-mysql-0:5.7.19-6.el6.src",
            "6Workstation-RHSCL-2.4:rh-mysql57-mysql-0:5.7.19-6.el6.x86_64",
            "6Workstation-RHSCL-2.4:rh-mysql57-mysql-common-0:5.7.19-6.el6.x86_64",
            "6Workstation-RHSCL-2.4:rh-mysql57-mysql-config-0:5.7.19-6.el6.x86_64",
            "6Workstation-RHSCL-2.4:rh-mysql57-mysql-debuginfo-0:5.7.19-6.el6.x86_64",
            "6Workstation-RHSCL-2.4:rh-mysql57-mysql-devel-0:5.7.19-6.el6.x86_64",
            "6Workstation-RHSCL-2.4:rh-mysql57-mysql-errmsg-0:5.7.19-6.el6.x86_64",
            "6Workstation-RHSCL-2.4:rh-mysql57-mysql-server-0:5.7.19-6.el6.x86_64",
            "6Workstation-RHSCL-2.4:rh-mysql57-mysql-test-0:5.7.19-6.el6.x86_64",
            "7Server-RHSCL-2.4-7.3.Z:rh-mysql57-mysql-0:5.7.19-6.el7.src",
            "7Server-RHSCL-2.4-7.3.Z:rh-mysql57-mysql-0:5.7.19-6.el7.x86_64",
            "7Server-RHSCL-2.4-7.3.Z:rh-mysql57-mysql-common-0:5.7.19-6.el7.x86_64",
            "7Server-RHSCL-2.4-7.3.Z:rh-mysql57-mysql-config-0:5.7.19-6.el7.x86_64",
            "7Server-RHSCL-2.4-7.3.Z:rh-mysql57-mysql-debuginfo-0:5.7.19-6.el7.x86_64",
            "7Server-RHSCL-2.4-7.3.Z:rh-mysql57-mysql-devel-0:5.7.19-6.el7.x86_64",
            "7Server-RHSCL-2.4-7.3.Z:rh-mysql57-mysql-errmsg-0:5.7.19-6.el7.x86_64",
            "7Server-RHSCL-2.4-7.3.Z:rh-mysql57-mysql-server-0:5.7.19-6.el7.x86_64",
            "7Server-RHSCL-2.4-7.3.Z:rh-mysql57-mysql-test-0:5.7.19-6.el7.x86_64",
            "7Server-RHSCL-2.4:rh-mysql57-mysql-0:5.7.19-6.el7.src",
            "7Server-RHSCL-2.4:rh-mysql57-mysql-0:5.7.19-6.el7.x86_64",
            "7Server-RHSCL-2.4:rh-mysql57-mysql-common-0:5.7.19-6.el7.x86_64",
            "7Server-RHSCL-2.4:rh-mysql57-mysql-config-0:5.7.19-6.el7.x86_64",
            "7Server-RHSCL-2.4:rh-mysql57-mysql-debuginfo-0:5.7.19-6.el7.x86_64",
            "7Server-RHSCL-2.4:rh-mysql57-mysql-devel-0:5.7.19-6.el7.x86_64",
            "7Server-RHSCL-2.4:rh-mysql57-mysql-errmsg-0:5.7.19-6.el7.x86_64",
            "7Server-RHSCL-2.4:rh-mysql57-mysql-server-0:5.7.19-6.el7.x86_64",
            "7Server-RHSCL-2.4:rh-mysql57-mysql-test-0:5.7.19-6.el7.x86_64",
            "7Workstation-RHSCL-2.4:rh-mysql57-mysql-0:5.7.19-6.el7.src",
            "7Workstation-RHSCL-2.4:rh-mysql57-mysql-0:5.7.19-6.el7.x86_64",
            "7Workstation-RHSCL-2.4:rh-mysql57-mysql-common-0:5.7.19-6.el7.x86_64",
            "7Workstation-RHSCL-2.4:rh-mysql57-mysql-config-0:5.7.19-6.el7.x86_64",
            "7Workstation-RHSCL-2.4:rh-mysql57-mysql-debuginfo-0:5.7.19-6.el7.x86_64",
            "7Workstation-RHSCL-2.4:rh-mysql57-mysql-devel-0:5.7.19-6.el7.x86_64",
            "7Workstation-RHSCL-2.4:rh-mysql57-mysql-errmsg-0:5.7.19-6.el7.x86_64",
            "7Workstation-RHSCL-2.4:rh-mysql57-mysql-server-0:5.7.19-6.el7.x86_64",
            "7Workstation-RHSCL-2.4:rh-mysql57-mysql-test-0:5.7.19-6.el7.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Moderate"
        }
      ],
      "title": "mysql: Server: DDL  unspecified vulnerability (CPU Jan 2017)"
    },
    {
      "acknowledgments": [
        {
          "summary": "This issue was discovered by Red Hat."
        }
      ],
      "cve": "CVE-2017-3291",
      "cwe": {
        "id": "CWE-426",
        "name": "Untrusted Search Path"
      },
      "discovery_date": "2016-11-10T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "1414429"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "It was discovered that the mysqld_safe script honored the ledir option value set in a MySQL configuration file. A user able to modify one of the MySQL configuration files could use this flaw to escalate their privileges to root.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "mysql: unrestricted mysqld_safe\u0027s ledir (CPU Jan 2017)",
          "title": "Vulnerability summary"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "6Server-RHSCL-2.4-6.7.Z:rh-mysql57-mysql-0:5.7.19-6.el6.src",
          "6Server-RHSCL-2.4-6.7.Z:rh-mysql57-mysql-0:5.7.19-6.el6.x86_64",
          "6Server-RHSCL-2.4-6.7.Z:rh-mysql57-mysql-common-0:5.7.19-6.el6.x86_64",
          "6Server-RHSCL-2.4-6.7.Z:rh-mysql57-mysql-config-0:5.7.19-6.el6.x86_64",
          "6Server-RHSCL-2.4-6.7.Z:rh-mysql57-mysql-debuginfo-0:5.7.19-6.el6.x86_64",
          "6Server-RHSCL-2.4-6.7.Z:rh-mysql57-mysql-devel-0:5.7.19-6.el6.x86_64",
          "6Server-RHSCL-2.4-6.7.Z:rh-mysql57-mysql-errmsg-0:5.7.19-6.el6.x86_64",
          "6Server-RHSCL-2.4-6.7.Z:rh-mysql57-mysql-server-0:5.7.19-6.el6.x86_64",
          "6Server-RHSCL-2.4-6.7.Z:rh-mysql57-mysql-test-0:5.7.19-6.el6.x86_64",
          "6Server-RHSCL-2.4:rh-mysql57-mysql-0:5.7.19-6.el6.src",
          "6Server-RHSCL-2.4:rh-mysql57-mysql-0:5.7.19-6.el6.x86_64",
          "6Server-RHSCL-2.4:rh-mysql57-mysql-common-0:5.7.19-6.el6.x86_64",
          "6Server-RHSCL-2.4:rh-mysql57-mysql-config-0:5.7.19-6.el6.x86_64",
          "6Server-RHSCL-2.4:rh-mysql57-mysql-debuginfo-0:5.7.19-6.el6.x86_64",
          "6Server-RHSCL-2.4:rh-mysql57-mysql-devel-0:5.7.19-6.el6.x86_64",
          "6Server-RHSCL-2.4:rh-mysql57-mysql-errmsg-0:5.7.19-6.el6.x86_64",
          "6Server-RHSCL-2.4:rh-mysql57-mysql-server-0:5.7.19-6.el6.x86_64",
          "6Server-RHSCL-2.4:rh-mysql57-mysql-test-0:5.7.19-6.el6.x86_64",
          "6Workstation-RHSCL-2.4:rh-mysql57-mysql-0:5.7.19-6.el6.src",
          "6Workstation-RHSCL-2.4:rh-mysql57-mysql-0:5.7.19-6.el6.x86_64",
          "6Workstation-RHSCL-2.4:rh-mysql57-mysql-common-0:5.7.19-6.el6.x86_64",
          "6Workstation-RHSCL-2.4:rh-mysql57-mysql-config-0:5.7.19-6.el6.x86_64",
          "6Workstation-RHSCL-2.4:rh-mysql57-mysql-debuginfo-0:5.7.19-6.el6.x86_64",
          "6Workstation-RHSCL-2.4:rh-mysql57-mysql-devel-0:5.7.19-6.el6.x86_64",
          "6Workstation-RHSCL-2.4:rh-mysql57-mysql-errmsg-0:5.7.19-6.el6.x86_64",
          "6Workstation-RHSCL-2.4:rh-mysql57-mysql-server-0:5.7.19-6.el6.x86_64",
          "6Workstation-RHSCL-2.4:rh-mysql57-mysql-test-0:5.7.19-6.el6.x86_64",
          "7Server-RHSCL-2.4-7.3.Z:rh-mysql57-mysql-0:5.7.19-6.el7.src",
          "7Server-RHSCL-2.4-7.3.Z:rh-mysql57-mysql-0:5.7.19-6.el7.x86_64",
          "7Server-RHSCL-2.4-7.3.Z:rh-mysql57-mysql-common-0:5.7.19-6.el7.x86_64",
          "7Server-RHSCL-2.4-7.3.Z:rh-mysql57-mysql-config-0:5.7.19-6.el7.x86_64",
          "7Server-RHSCL-2.4-7.3.Z:rh-mysql57-mysql-debuginfo-0:5.7.19-6.el7.x86_64",
          "7Server-RHSCL-2.4-7.3.Z:rh-mysql57-mysql-devel-0:5.7.19-6.el7.x86_64",
          "7Server-RHSCL-2.4-7.3.Z:rh-mysql57-mysql-errmsg-0:5.7.19-6.el7.x86_64",
          "7Server-RHSCL-2.4-7.3.Z:rh-mysql57-mysql-server-0:5.7.19-6.el7.x86_64",
          "7Server-RHSCL-2.4-7.3.Z:rh-mysql57-mysql-test-0:5.7.19-6.el7.x86_64",
          "7Server-RHSCL-2.4:rh-mysql57-mysql-0:5.7.19-6.el7.src",
          "7Server-RHSCL-2.4:rh-mysql57-mysql-0:5.7.19-6.el7.x86_64",
          "7Server-RHSCL-2.4:rh-mysql57-mysql-common-0:5.7.19-6.el7.x86_64",
          "7Server-RHSCL-2.4:rh-mysql57-mysql-config-0:5.7.19-6.el7.x86_64",
          "7Server-RHSCL-2.4:rh-mysql57-mysql-debuginfo-0:5.7.19-6.el7.x86_64",
          "7Server-RHSCL-2.4:rh-mysql57-mysql-devel-0:5.7.19-6.el7.x86_64",
          "7Server-RHSCL-2.4:rh-mysql57-mysql-errmsg-0:5.7.19-6.el7.x86_64",
          "7Server-RHSCL-2.4:rh-mysql57-mysql-server-0:5.7.19-6.el7.x86_64",
          "7Server-RHSCL-2.4:rh-mysql57-mysql-test-0:5.7.19-6.el7.x86_64",
          "7Workstation-RHSCL-2.4:rh-mysql57-mysql-0:5.7.19-6.el7.src",
          "7Workstation-RHSCL-2.4:rh-mysql57-mysql-0:5.7.19-6.el7.x86_64",
          "7Workstation-RHSCL-2.4:rh-mysql57-mysql-common-0:5.7.19-6.el7.x86_64",
          "7Workstation-RHSCL-2.4:rh-mysql57-mysql-config-0:5.7.19-6.el7.x86_64",
          "7Workstation-RHSCL-2.4:rh-mysql57-mysql-debuginfo-0:5.7.19-6.el7.x86_64",
          "7Workstation-RHSCL-2.4:rh-mysql57-mysql-devel-0:5.7.19-6.el7.x86_64",
          "7Workstation-RHSCL-2.4:rh-mysql57-mysql-errmsg-0:5.7.19-6.el7.x86_64",
          "7Workstation-RHSCL-2.4:rh-mysql57-mysql-server-0:5.7.19-6.el7.x86_64",
          "7Workstation-RHSCL-2.4:rh-mysql57-mysql-test-0:5.7.19-6.el7.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2017-3291"
        },
        {
          "category": "external",
          "summary": "RHBZ#1414429",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1414429"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2017-3291",
          "url": "https://www.cve.org/CVERecord?id=CVE-2017-3291"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2017-3291",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2017-3291"
        }
      ],
      "release_date": "2017-01-17T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2017-10-12T07:53:15+00:00",
          "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAfter installing this update, the MySQL server daemon (mysqld) will be restarted automatically.",
          "product_ids": [
            "6Server-RHSCL-2.4-6.7.Z:rh-mysql57-mysql-0:5.7.19-6.el6.src",
            "6Server-RHSCL-2.4-6.7.Z:rh-mysql57-mysql-0:5.7.19-6.el6.x86_64",
            "6Server-RHSCL-2.4-6.7.Z:rh-mysql57-mysql-common-0:5.7.19-6.el6.x86_64",
            "6Server-RHSCL-2.4-6.7.Z:rh-mysql57-mysql-config-0:5.7.19-6.el6.x86_64",
            "6Server-RHSCL-2.4-6.7.Z:rh-mysql57-mysql-debuginfo-0:5.7.19-6.el6.x86_64",
            "6Server-RHSCL-2.4-6.7.Z:rh-mysql57-mysql-devel-0:5.7.19-6.el6.x86_64",
            "6Server-RHSCL-2.4-6.7.Z:rh-mysql57-mysql-errmsg-0:5.7.19-6.el6.x86_64",
            "6Server-RHSCL-2.4-6.7.Z:rh-mysql57-mysql-server-0:5.7.19-6.el6.x86_64",
            "6Server-RHSCL-2.4-6.7.Z:rh-mysql57-mysql-test-0:5.7.19-6.el6.x86_64",
            "6Server-RHSCL-2.4:rh-mysql57-mysql-0:5.7.19-6.el6.src",
            "6Server-RHSCL-2.4:rh-mysql57-mysql-0:5.7.19-6.el6.x86_64",
            "6Server-RHSCL-2.4:rh-mysql57-mysql-common-0:5.7.19-6.el6.x86_64",
            "6Server-RHSCL-2.4:rh-mysql57-mysql-config-0:5.7.19-6.el6.x86_64",
            "6Server-RHSCL-2.4:rh-mysql57-mysql-debuginfo-0:5.7.19-6.el6.x86_64",
            "6Server-RHSCL-2.4:rh-mysql57-mysql-devel-0:5.7.19-6.el6.x86_64",
            "6Server-RHSCL-2.4:rh-mysql57-mysql-errmsg-0:5.7.19-6.el6.x86_64",
            "6Server-RHSCL-2.4:rh-mysql57-mysql-server-0:5.7.19-6.el6.x86_64",
            "6Server-RHSCL-2.4:rh-mysql57-mysql-test-0:5.7.19-6.el6.x86_64",
            "6Workstation-RHSCL-2.4:rh-mysql57-mysql-0:5.7.19-6.el6.src",
            "6Workstation-RHSCL-2.4:rh-mysql57-mysql-0:5.7.19-6.el6.x86_64",
            "6Workstation-RHSCL-2.4:rh-mysql57-mysql-common-0:5.7.19-6.el6.x86_64",
            "6Workstation-RHSCL-2.4:rh-mysql57-mysql-config-0:5.7.19-6.el6.x86_64",
            "6Workstation-RHSCL-2.4:rh-mysql57-mysql-debuginfo-0:5.7.19-6.el6.x86_64",
            "6Workstation-RHSCL-2.4:rh-mysql57-mysql-devel-0:5.7.19-6.el6.x86_64",
            "6Workstation-RHSCL-2.4:rh-mysql57-mysql-errmsg-0:5.7.19-6.el6.x86_64",
            "6Workstation-RHSCL-2.4:rh-mysql57-mysql-server-0:5.7.19-6.el6.x86_64",
            "6Workstation-RHSCL-2.4:rh-mysql57-mysql-test-0:5.7.19-6.el6.x86_64",
            "7Server-RHSCL-2.4-7.3.Z:rh-mysql57-mysql-0:5.7.19-6.el7.src",
            "7Server-RHSCL-2.4-7.3.Z:rh-mysql57-mysql-0:5.7.19-6.el7.x86_64",
            "7Server-RHSCL-2.4-7.3.Z:rh-mysql57-mysql-common-0:5.7.19-6.el7.x86_64",
            "7Server-RHSCL-2.4-7.3.Z:rh-mysql57-mysql-config-0:5.7.19-6.el7.x86_64",
            "7Server-RHSCL-2.4-7.3.Z:rh-mysql57-mysql-debuginfo-0:5.7.19-6.el7.x86_64",
            "7Server-RHSCL-2.4-7.3.Z:rh-mysql57-mysql-devel-0:5.7.19-6.el7.x86_64",
            "7Server-RHSCL-2.4-7.3.Z:rh-mysql57-mysql-errmsg-0:5.7.19-6.el7.x86_64",
            "7Server-RHSCL-2.4-7.3.Z:rh-mysql57-mysql-server-0:5.7.19-6.el7.x86_64",
            "7Server-RHSCL-2.4-7.3.Z:rh-mysql57-mysql-test-0:5.7.19-6.el7.x86_64",
            "7Server-RHSCL-2.4:rh-mysql57-mysql-0:5.7.19-6.el7.src",
            "7Server-RHSCL-2.4:rh-mysql57-mysql-0:5.7.19-6.el7.x86_64",
            "7Server-RHSCL-2.4:rh-mysql57-mysql-common-0:5.7.19-6.el7.x86_64",
            "7Server-RHSCL-2.4:rh-mysql57-mysql-config-0:5.7.19-6.el7.x86_64",
            "7Server-RHSCL-2.4:rh-mysql57-mysql-debuginfo-0:5.7.19-6.el7.x86_64",
            "7Server-RHSCL-2.4:rh-mysql57-mysql-devel-0:5.7.19-6.el7.x86_64",
            "7Server-RHSCL-2.4:rh-mysql57-mysql-errmsg-0:5.7.19-6.el7.x86_64",
            "7Server-RHSCL-2.4:rh-mysql57-mysql-server-0:5.7.19-6.el7.x86_64",
            "7Server-RHSCL-2.4:rh-mysql57-mysql-test-0:5.7.19-6.el7.x86_64",
            "7Workstation-RHSCL-2.4:rh-mysql57-mysql-0:5.7.19-6.el7.src",
            "7Workstation-RHSCL-2.4:rh-mysql57-mysql-0:5.7.19-6.el7.x86_64",
            "7Workstation-RHSCL-2.4:rh-mysql57-mysql-common-0:5.7.19-6.el7.x86_64",
            "7Workstation-RHSCL-2.4:rh-mysql57-mysql-config-0:5.7.19-6.el7.x86_64",
            "7Workstation-RHSCL-2.4:rh-mysql57-mysql-debuginfo-0:5.7.19-6.el7.x86_64",
            "7Workstation-RHSCL-2.4:rh-mysql57-mysql-devel-0:5.7.19-6.el7.x86_64",
            "7Workstation-RHSCL-2.4:rh-mysql57-mysql-errmsg-0:5.7.19-6.el7.x86_64",
            "7Workstation-RHSCL-2.4:rh-mysql57-mysql-server-0:5.7.19-6.el7.x86_64",
            "7Workstation-RHSCL-2.4:rh-mysql57-mysql-test-0:5.7.19-6.el7.x86_64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2017:2886"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "HIGH",
            "attackVector": "LOCAL",
            "availabilityImpact": "HIGH",
            "baseScore": 6.3,
            "baseSeverity": "MEDIUM",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "HIGH",
            "privilegesRequired": "HIGH",
            "scope": "UNCHANGED",
            "userInteraction": "REQUIRED",
            "vectorString": "CVSS:3.0/AV:L/AC:H/PR:H/UI:R/S:U/C:H/I:H/A:H",
            "version": "3.0"
          },
          "products": [
            "6Server-RHSCL-2.4-6.7.Z:rh-mysql57-mysql-0:5.7.19-6.el6.src",
            "6Server-RHSCL-2.4-6.7.Z:rh-mysql57-mysql-0:5.7.19-6.el6.x86_64",
            "6Server-RHSCL-2.4-6.7.Z:rh-mysql57-mysql-common-0:5.7.19-6.el6.x86_64",
            "6Server-RHSCL-2.4-6.7.Z:rh-mysql57-mysql-config-0:5.7.19-6.el6.x86_64",
            "6Server-RHSCL-2.4-6.7.Z:rh-mysql57-mysql-debuginfo-0:5.7.19-6.el6.x86_64",
            "6Server-RHSCL-2.4-6.7.Z:rh-mysql57-mysql-devel-0:5.7.19-6.el6.x86_64",
            "6Server-RHSCL-2.4-6.7.Z:rh-mysql57-mysql-errmsg-0:5.7.19-6.el6.x86_64",
            "6Server-RHSCL-2.4-6.7.Z:rh-mysql57-mysql-server-0:5.7.19-6.el6.x86_64",
            "6Server-RHSCL-2.4-6.7.Z:rh-mysql57-mysql-test-0:5.7.19-6.el6.x86_64",
            "6Server-RHSCL-2.4:rh-mysql57-mysql-0:5.7.19-6.el6.src",
            "6Server-RHSCL-2.4:rh-mysql57-mysql-0:5.7.19-6.el6.x86_64",
            "6Server-RHSCL-2.4:rh-mysql57-mysql-common-0:5.7.19-6.el6.x86_64",
            "6Server-RHSCL-2.4:rh-mysql57-mysql-config-0:5.7.19-6.el6.x86_64",
            "6Server-RHSCL-2.4:rh-mysql57-mysql-debuginfo-0:5.7.19-6.el6.x86_64",
            "6Server-RHSCL-2.4:rh-mysql57-mysql-devel-0:5.7.19-6.el6.x86_64",
            "6Server-RHSCL-2.4:rh-mysql57-mysql-errmsg-0:5.7.19-6.el6.x86_64",
            "6Server-RHSCL-2.4:rh-mysql57-mysql-server-0:5.7.19-6.el6.x86_64",
            "6Server-RHSCL-2.4:rh-mysql57-mysql-test-0:5.7.19-6.el6.x86_64",
            "6Workstation-RHSCL-2.4:rh-mysql57-mysql-0:5.7.19-6.el6.src",
            "6Workstation-RHSCL-2.4:rh-mysql57-mysql-0:5.7.19-6.el6.x86_64",
            "6Workstation-RHSCL-2.4:rh-mysql57-mysql-common-0:5.7.19-6.el6.x86_64",
            "6Workstation-RHSCL-2.4:rh-mysql57-mysql-config-0:5.7.19-6.el6.x86_64",
            "6Workstation-RHSCL-2.4:rh-mysql57-mysql-debuginfo-0:5.7.19-6.el6.x86_64",
            "6Workstation-RHSCL-2.4:rh-mysql57-mysql-devel-0:5.7.19-6.el6.x86_64",
            "6Workstation-RHSCL-2.4:rh-mysql57-mysql-errmsg-0:5.7.19-6.el6.x86_64",
            "6Workstation-RHSCL-2.4:rh-mysql57-mysql-server-0:5.7.19-6.el6.x86_64",
            "6Workstation-RHSCL-2.4:rh-mysql57-mysql-test-0:5.7.19-6.el6.x86_64",
            "7Server-RHSCL-2.4-7.3.Z:rh-mysql57-mysql-0:5.7.19-6.el7.src",
            "7Server-RHSCL-2.4-7.3.Z:rh-mysql57-mysql-0:5.7.19-6.el7.x86_64",
            "7Server-RHSCL-2.4-7.3.Z:rh-mysql57-mysql-common-0:5.7.19-6.el7.x86_64",
            "7Server-RHSCL-2.4-7.3.Z:rh-mysql57-mysql-config-0:5.7.19-6.el7.x86_64",
            "7Server-RHSCL-2.4-7.3.Z:rh-mysql57-mysql-debuginfo-0:5.7.19-6.el7.x86_64",
            "7Server-RHSCL-2.4-7.3.Z:rh-mysql57-mysql-devel-0:5.7.19-6.el7.x86_64",
            "7Server-RHSCL-2.4-7.3.Z:rh-mysql57-mysql-errmsg-0:5.7.19-6.el7.x86_64",
            "7Server-RHSCL-2.4-7.3.Z:rh-mysql57-mysql-server-0:5.7.19-6.el7.x86_64",
            "7Server-RHSCL-2.4-7.3.Z:rh-mysql57-mysql-test-0:5.7.19-6.el7.x86_64",
            "7Server-RHSCL-2.4:rh-mysql57-mysql-0:5.7.19-6.el7.src",
            "7Server-RHSCL-2.4:rh-mysql57-mysql-0:5.7.19-6.el7.x86_64",
            "7Server-RHSCL-2.4:rh-mysql57-mysql-common-0:5.7.19-6.el7.x86_64",
            "7Server-RHSCL-2.4:rh-mysql57-mysql-config-0:5.7.19-6.el7.x86_64",
            "7Server-RHSCL-2.4:rh-mysql57-mysql-debuginfo-0:5.7.19-6.el7.x86_64",
            "7Server-RHSCL-2.4:rh-mysql57-mysql-devel-0:5.7.19-6.el7.x86_64",
            "7Server-RHSCL-2.4:rh-mysql57-mysql-errmsg-0:5.7.19-6.el7.x86_64",
            "7Server-RHSCL-2.4:rh-mysql57-mysql-server-0:5.7.19-6.el7.x86_64",
            "7Server-RHSCL-2.4:rh-mysql57-mysql-test-0:5.7.19-6.el7.x86_64",
            "7Workstation-RHSCL-2.4:rh-mysql57-mysql-0:5.7.19-6.el7.src",
            "7Workstation-RHSCL-2.4:rh-mysql57-mysql-0:5.7.19-6.el7.x86_64",
            "7Workstation-RHSCL-2.4:rh-mysql57-mysql-common-0:5.7.19-6.el7.x86_64",
            "7Workstation-RHSCL-2.4:rh-mysql57-mysql-config-0:5.7.19-6.el7.x86_64",
            "7Workstation-RHSCL-2.4:rh-mysql57-mysql-debuginfo-0:5.7.19-6.el7.x86_64",
            "7Workstation-RHSCL-2.4:rh-mysql57-mysql-devel-0:5.7.19-6.el7.x86_64",
            "7Workstation-RHSCL-2.4:rh-mysql57-mysql-errmsg-0:5.7.19-6.el7.x86_64",
            "7Workstation-RHSCL-2.4:rh-mysql57-mysql-server-0:5.7.19-6.el7.x86_64",
            "7Workstation-RHSCL-2.4:rh-mysql57-mysql-test-0:5.7.19-6.el7.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Moderate"
        }
      ],
      "title": "mysql: unrestricted mysqld_safe\u0027s ledir (CPU Jan 2017)"
    },
    {
      "cve": "CVE-2017-3308",
      "discovery_date": "2017-04-19T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "1443358"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: DML). Supported versions that are affected are 5.5.54 and earlier, 5.6.35 and earlier and 5.7.17 and earlier. Easily \"exploitable\" vulnerability allows low privileged attacker with network access via multiple protocols to compromise MySQL Server. While the vulnerability is in MySQL Server, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.0 Base Score 7.7 (Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H).",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "mysql: Server: DML unspecified vulnerability (CPU Apr 2017)",
          "title": "Vulnerability summary"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "6Server-RHSCL-2.4-6.7.Z:rh-mysql57-mysql-0:5.7.19-6.el6.src",
          "6Server-RHSCL-2.4-6.7.Z:rh-mysql57-mysql-0:5.7.19-6.el6.x86_64",
          "6Server-RHSCL-2.4-6.7.Z:rh-mysql57-mysql-common-0:5.7.19-6.el6.x86_64",
          "6Server-RHSCL-2.4-6.7.Z:rh-mysql57-mysql-config-0:5.7.19-6.el6.x86_64",
          "6Server-RHSCL-2.4-6.7.Z:rh-mysql57-mysql-debuginfo-0:5.7.19-6.el6.x86_64",
          "6Server-RHSCL-2.4-6.7.Z:rh-mysql57-mysql-devel-0:5.7.19-6.el6.x86_64",
          "6Server-RHSCL-2.4-6.7.Z:rh-mysql57-mysql-errmsg-0:5.7.19-6.el6.x86_64",
          "6Server-RHSCL-2.4-6.7.Z:rh-mysql57-mysql-server-0:5.7.19-6.el6.x86_64",
          "6Server-RHSCL-2.4-6.7.Z:rh-mysql57-mysql-test-0:5.7.19-6.el6.x86_64",
          "6Server-RHSCL-2.4:rh-mysql57-mysql-0:5.7.19-6.el6.src",
          "6Server-RHSCL-2.4:rh-mysql57-mysql-0:5.7.19-6.el6.x86_64",
          "6Server-RHSCL-2.4:rh-mysql57-mysql-common-0:5.7.19-6.el6.x86_64",
          "6Server-RHSCL-2.4:rh-mysql57-mysql-config-0:5.7.19-6.el6.x86_64",
          "6Server-RHSCL-2.4:rh-mysql57-mysql-debuginfo-0:5.7.19-6.el6.x86_64",
          "6Server-RHSCL-2.4:rh-mysql57-mysql-devel-0:5.7.19-6.el6.x86_64",
          "6Server-RHSCL-2.4:rh-mysql57-mysql-errmsg-0:5.7.19-6.el6.x86_64",
          "6Server-RHSCL-2.4:rh-mysql57-mysql-server-0:5.7.19-6.el6.x86_64",
          "6Server-RHSCL-2.4:rh-mysql57-mysql-test-0:5.7.19-6.el6.x86_64",
          "6Workstation-RHSCL-2.4:rh-mysql57-mysql-0:5.7.19-6.el6.src",
          "6Workstation-RHSCL-2.4:rh-mysql57-mysql-0:5.7.19-6.el6.x86_64",
          "6Workstation-RHSCL-2.4:rh-mysql57-mysql-common-0:5.7.19-6.el6.x86_64",
          "6Workstation-RHSCL-2.4:rh-mysql57-mysql-config-0:5.7.19-6.el6.x86_64",
          "6Workstation-RHSCL-2.4:rh-mysql57-mysql-debuginfo-0:5.7.19-6.el6.x86_64",
          "6Workstation-RHSCL-2.4:rh-mysql57-mysql-devel-0:5.7.19-6.el6.x86_64",
          "6Workstation-RHSCL-2.4:rh-mysql57-mysql-errmsg-0:5.7.19-6.el6.x86_64",
          "6Workstation-RHSCL-2.4:rh-mysql57-mysql-server-0:5.7.19-6.el6.x86_64",
          "6Workstation-RHSCL-2.4:rh-mysql57-mysql-test-0:5.7.19-6.el6.x86_64",
          "7Server-RHSCL-2.4-7.3.Z:rh-mysql57-mysql-0:5.7.19-6.el7.src",
          "7Server-RHSCL-2.4-7.3.Z:rh-mysql57-mysql-0:5.7.19-6.el7.x86_64",
          "7Server-RHSCL-2.4-7.3.Z:rh-mysql57-mysql-common-0:5.7.19-6.el7.x86_64",
          "7Server-RHSCL-2.4-7.3.Z:rh-mysql57-mysql-config-0:5.7.19-6.el7.x86_64",
          "7Server-RHSCL-2.4-7.3.Z:rh-mysql57-mysql-debuginfo-0:5.7.19-6.el7.x86_64",
          "7Server-RHSCL-2.4-7.3.Z:rh-mysql57-mysql-devel-0:5.7.19-6.el7.x86_64",
          "7Server-RHSCL-2.4-7.3.Z:rh-mysql57-mysql-errmsg-0:5.7.19-6.el7.x86_64",
          "7Server-RHSCL-2.4-7.3.Z:rh-mysql57-mysql-server-0:5.7.19-6.el7.x86_64",
          "7Server-RHSCL-2.4-7.3.Z:rh-mysql57-mysql-test-0:5.7.19-6.el7.x86_64",
          "7Server-RHSCL-2.4:rh-mysql57-mysql-0:5.7.19-6.el7.src",
          "7Server-RHSCL-2.4:rh-mysql57-mysql-0:5.7.19-6.el7.x86_64",
          "7Server-RHSCL-2.4:rh-mysql57-mysql-common-0:5.7.19-6.el7.x86_64",
          "7Server-RHSCL-2.4:rh-mysql57-mysql-config-0:5.7.19-6.el7.x86_64",
          "7Server-RHSCL-2.4:rh-mysql57-mysql-debuginfo-0:5.7.19-6.el7.x86_64",
          "7Server-RHSCL-2.4:rh-mysql57-mysql-devel-0:5.7.19-6.el7.x86_64",
          "7Server-RHSCL-2.4:rh-mysql57-mysql-errmsg-0:5.7.19-6.el7.x86_64",
          "7Server-RHSCL-2.4:rh-mysql57-mysql-server-0:5.7.19-6.el7.x86_64",
          "7Server-RHSCL-2.4:rh-mysql57-mysql-test-0:5.7.19-6.el7.x86_64",
          "7Workstation-RHSCL-2.4:rh-mysql57-mysql-0:5.7.19-6.el7.src",
          "7Workstation-RHSCL-2.4:rh-mysql57-mysql-0:5.7.19-6.el7.x86_64",
          "7Workstation-RHSCL-2.4:rh-mysql57-mysql-common-0:5.7.19-6.el7.x86_64",
          "7Workstation-RHSCL-2.4:rh-mysql57-mysql-config-0:5.7.19-6.el7.x86_64",
          "7Workstation-RHSCL-2.4:rh-mysql57-mysql-debuginfo-0:5.7.19-6.el7.x86_64",
          "7Workstation-RHSCL-2.4:rh-mysql57-mysql-devel-0:5.7.19-6.el7.x86_64",
          "7Workstation-RHSCL-2.4:rh-mysql57-mysql-errmsg-0:5.7.19-6.el7.x86_64",
          "7Workstation-RHSCL-2.4:rh-mysql57-mysql-server-0:5.7.19-6.el7.x86_64",
          "7Workstation-RHSCL-2.4:rh-mysql57-mysql-test-0:5.7.19-6.el7.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2017-3308"
        },
        {
          "category": "external",
          "summary": "RHBZ#1443358",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1443358"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2017-3308",
          "url": "https://www.cve.org/CVERecord?id=CVE-2017-3308"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2017-3308",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2017-3308"
        },
        {
          "category": "external",
          "summary": "http://www.oracle.com/technetwork/security-advisory/cpuapr2017-3236618.html#AppendixMSQL",
          "url": "http://www.oracle.com/technetwork/security-advisory/cpuapr2017-3236618.html#AppendixMSQL"
        }
      ],
      "release_date": "2017-04-19T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2017-10-12T07:53:15+00:00",
          "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAfter installing this update, the MySQL server daemon (mysqld) will be restarted automatically.",
          "product_ids": [
            "6Server-RHSCL-2.4-6.7.Z:rh-mysql57-mysql-0:5.7.19-6.el6.src",
            "6Server-RHSCL-2.4-6.7.Z:rh-mysql57-mysql-0:5.7.19-6.el6.x86_64",
            "6Server-RHSCL-2.4-6.7.Z:rh-mysql57-mysql-common-0:5.7.19-6.el6.x86_64",
            "6Server-RHSCL-2.4-6.7.Z:rh-mysql57-mysql-config-0:5.7.19-6.el6.x86_64",
            "6Server-RHSCL-2.4-6.7.Z:rh-mysql57-mysql-debuginfo-0:5.7.19-6.el6.x86_64",
            "6Server-RHSCL-2.4-6.7.Z:rh-mysql57-mysql-devel-0:5.7.19-6.el6.x86_64",
            "6Server-RHSCL-2.4-6.7.Z:rh-mysql57-mysql-errmsg-0:5.7.19-6.el6.x86_64",
            "6Server-RHSCL-2.4-6.7.Z:rh-mysql57-mysql-server-0:5.7.19-6.el6.x86_64",
            "6Server-RHSCL-2.4-6.7.Z:rh-mysql57-mysql-test-0:5.7.19-6.el6.x86_64",
            "6Server-RHSCL-2.4:rh-mysql57-mysql-0:5.7.19-6.el6.src",
            "6Server-RHSCL-2.4:rh-mysql57-mysql-0:5.7.19-6.el6.x86_64",
            "6Server-RHSCL-2.4:rh-mysql57-mysql-common-0:5.7.19-6.el6.x86_64",
            "6Server-RHSCL-2.4:rh-mysql57-mysql-config-0:5.7.19-6.el6.x86_64",
            "6Server-RHSCL-2.4:rh-mysql57-mysql-debuginfo-0:5.7.19-6.el6.x86_64",
            "6Server-RHSCL-2.4:rh-mysql57-mysql-devel-0:5.7.19-6.el6.x86_64",
            "6Server-RHSCL-2.4:rh-mysql57-mysql-errmsg-0:5.7.19-6.el6.x86_64",
            "6Server-RHSCL-2.4:rh-mysql57-mysql-server-0:5.7.19-6.el6.x86_64",
            "6Server-RHSCL-2.4:rh-mysql57-mysql-test-0:5.7.19-6.el6.x86_64",
            "6Workstation-RHSCL-2.4:rh-mysql57-mysql-0:5.7.19-6.el6.src",
            "6Workstation-RHSCL-2.4:rh-mysql57-mysql-0:5.7.19-6.el6.x86_64",
            "6Workstation-RHSCL-2.4:rh-mysql57-mysql-common-0:5.7.19-6.el6.x86_64",
            "6Workstation-RHSCL-2.4:rh-mysql57-mysql-config-0:5.7.19-6.el6.x86_64",
            "6Workstation-RHSCL-2.4:rh-mysql57-mysql-debuginfo-0:5.7.19-6.el6.x86_64",
            "6Workstation-RHSCL-2.4:rh-mysql57-mysql-devel-0:5.7.19-6.el6.x86_64",
            "6Workstation-RHSCL-2.4:rh-mysql57-mysql-errmsg-0:5.7.19-6.el6.x86_64",
            "6Workstation-RHSCL-2.4:rh-mysql57-mysql-server-0:5.7.19-6.el6.x86_64",
            "6Workstation-RHSCL-2.4:rh-mysql57-mysql-test-0:5.7.19-6.el6.x86_64",
            "7Server-RHSCL-2.4-7.3.Z:rh-mysql57-mysql-0:5.7.19-6.el7.src",
            "7Server-RHSCL-2.4-7.3.Z:rh-mysql57-mysql-0:5.7.19-6.el7.x86_64",
            "7Server-RHSCL-2.4-7.3.Z:rh-mysql57-mysql-common-0:5.7.19-6.el7.x86_64",
            "7Server-RHSCL-2.4-7.3.Z:rh-mysql57-mysql-config-0:5.7.19-6.el7.x86_64",
            "7Server-RHSCL-2.4-7.3.Z:rh-mysql57-mysql-debuginfo-0:5.7.19-6.el7.x86_64",
            "7Server-RHSCL-2.4-7.3.Z:rh-mysql57-mysql-devel-0:5.7.19-6.el7.x86_64",
            "7Server-RHSCL-2.4-7.3.Z:rh-mysql57-mysql-errmsg-0:5.7.19-6.el7.x86_64",
            "7Server-RHSCL-2.4-7.3.Z:rh-mysql57-mysql-server-0:5.7.19-6.el7.x86_64",
            "7Server-RHSCL-2.4-7.3.Z:rh-mysql57-mysql-test-0:5.7.19-6.el7.x86_64",
            "7Server-RHSCL-2.4:rh-mysql57-mysql-0:5.7.19-6.el7.src",
            "7Server-RHSCL-2.4:rh-mysql57-mysql-0:5.7.19-6.el7.x86_64",
            "7Server-RHSCL-2.4:rh-mysql57-mysql-common-0:5.7.19-6.el7.x86_64",
            "7Server-RHSCL-2.4:rh-mysql57-mysql-config-0:5.7.19-6.el7.x86_64",
            "7Server-RHSCL-2.4:rh-mysql57-mysql-debuginfo-0:5.7.19-6.el7.x86_64",
            "7Server-RHSCL-2.4:rh-mysql57-mysql-devel-0:5.7.19-6.el7.x86_64",
            "7Server-RHSCL-2.4:rh-mysql57-mysql-errmsg-0:5.7.19-6.el7.x86_64",
            "7Server-RHSCL-2.4:rh-mysql57-mysql-server-0:5.7.19-6.el7.x86_64",
            "7Server-RHSCL-2.4:rh-mysql57-mysql-test-0:5.7.19-6.el7.x86_64",
            "7Workstation-RHSCL-2.4:rh-mysql57-mysql-0:5.7.19-6.el7.src",
            "7Workstation-RHSCL-2.4:rh-mysql57-mysql-0:5.7.19-6.el7.x86_64",
            "7Workstation-RHSCL-2.4:rh-mysql57-mysql-common-0:5.7.19-6.el7.x86_64",
            "7Workstation-RHSCL-2.4:rh-mysql57-mysql-config-0:5.7.19-6.el7.x86_64",
            "7Workstation-RHSCL-2.4:rh-mysql57-mysql-debuginfo-0:5.7.19-6.el7.x86_64",
            "7Workstation-RHSCL-2.4:rh-mysql57-mysql-devel-0:5.7.19-6.el7.x86_64",
            "7Workstation-RHSCL-2.4:rh-mysql57-mysql-errmsg-0:5.7.19-6.el7.x86_64",
            "7Workstation-RHSCL-2.4:rh-mysql57-mysql-server-0:5.7.19-6.el7.x86_64",
            "7Workstation-RHSCL-2.4:rh-mysql57-mysql-test-0:5.7.19-6.el7.x86_64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2017:2886"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 7.7,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "NONE",
            "integrityImpact": "NONE",
            "privilegesRequired": "LOW",
            "scope": "CHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H",
            "version": "3.0"
          },
          "products": [
            "6Server-RHSCL-2.4-6.7.Z:rh-mysql57-mysql-0:5.7.19-6.el6.src",
            "6Server-RHSCL-2.4-6.7.Z:rh-mysql57-mysql-0:5.7.19-6.el6.x86_64",
            "6Server-RHSCL-2.4-6.7.Z:rh-mysql57-mysql-common-0:5.7.19-6.el6.x86_64",
            "6Server-RHSCL-2.4-6.7.Z:rh-mysql57-mysql-config-0:5.7.19-6.el6.x86_64",
            "6Server-RHSCL-2.4-6.7.Z:rh-mysql57-mysql-debuginfo-0:5.7.19-6.el6.x86_64",
            "6Server-RHSCL-2.4-6.7.Z:rh-mysql57-mysql-devel-0:5.7.19-6.el6.x86_64",
            "6Server-RHSCL-2.4-6.7.Z:rh-mysql57-mysql-errmsg-0:5.7.19-6.el6.x86_64",
            "6Server-RHSCL-2.4-6.7.Z:rh-mysql57-mysql-server-0:5.7.19-6.el6.x86_64",
            "6Server-RHSCL-2.4-6.7.Z:rh-mysql57-mysql-test-0:5.7.19-6.el6.x86_64",
            "6Server-RHSCL-2.4:rh-mysql57-mysql-0:5.7.19-6.el6.src",
            "6Server-RHSCL-2.4:rh-mysql57-mysql-0:5.7.19-6.el6.x86_64",
            "6Server-RHSCL-2.4:rh-mysql57-mysql-common-0:5.7.19-6.el6.x86_64",
            "6Server-RHSCL-2.4:rh-mysql57-mysql-config-0:5.7.19-6.el6.x86_64",
            "6Server-RHSCL-2.4:rh-mysql57-mysql-debuginfo-0:5.7.19-6.el6.x86_64",
            "6Server-RHSCL-2.4:rh-mysql57-mysql-devel-0:5.7.19-6.el6.x86_64",
            "6Server-RHSCL-2.4:rh-mysql57-mysql-errmsg-0:5.7.19-6.el6.x86_64",
            "6Server-RHSCL-2.4:rh-mysql57-mysql-server-0:5.7.19-6.el6.x86_64",
            "6Server-RHSCL-2.4:rh-mysql57-mysql-test-0:5.7.19-6.el6.x86_64",
            "6Workstation-RHSCL-2.4:rh-mysql57-mysql-0:5.7.19-6.el6.src",
            "6Workstation-RHSCL-2.4:rh-mysql57-mysql-0:5.7.19-6.el6.x86_64",
            "6Workstation-RHSCL-2.4:rh-mysql57-mysql-common-0:5.7.19-6.el6.x86_64",
            "6Workstation-RHSCL-2.4:rh-mysql57-mysql-config-0:5.7.19-6.el6.x86_64",
            "6Workstation-RHSCL-2.4:rh-mysql57-mysql-debuginfo-0:5.7.19-6.el6.x86_64",
            "6Workstation-RHSCL-2.4:rh-mysql57-mysql-devel-0:5.7.19-6.el6.x86_64",
            "6Workstation-RHSCL-2.4:rh-mysql57-mysql-errmsg-0:5.7.19-6.el6.x86_64",
            "6Workstation-RHSCL-2.4:rh-mysql57-mysql-server-0:5.7.19-6.el6.x86_64",
            "6Workstation-RHSCL-2.4:rh-mysql57-mysql-test-0:5.7.19-6.el6.x86_64",
            "7Server-RHSCL-2.4-7.3.Z:rh-mysql57-mysql-0:5.7.19-6.el7.src",
            "7Server-RHSCL-2.4-7.3.Z:rh-mysql57-mysql-0:5.7.19-6.el7.x86_64",
            "7Server-RHSCL-2.4-7.3.Z:rh-mysql57-mysql-common-0:5.7.19-6.el7.x86_64",
            "7Server-RHSCL-2.4-7.3.Z:rh-mysql57-mysql-config-0:5.7.19-6.el7.x86_64",
            "7Server-RHSCL-2.4-7.3.Z:rh-mysql57-mysql-debuginfo-0:5.7.19-6.el7.x86_64",
            "7Server-RHSCL-2.4-7.3.Z:rh-mysql57-mysql-devel-0:5.7.19-6.el7.x86_64",
            "7Server-RHSCL-2.4-7.3.Z:rh-mysql57-mysql-errmsg-0:5.7.19-6.el7.x86_64",
            "7Server-RHSCL-2.4-7.3.Z:rh-mysql57-mysql-server-0:5.7.19-6.el7.x86_64",
            "7Server-RHSCL-2.4-7.3.Z:rh-mysql57-mysql-test-0:5.7.19-6.el7.x86_64",
            "7Server-RHSCL-2.4:rh-mysql57-mysql-0:5.7.19-6.el7.src",
            "7Server-RHSCL-2.4:rh-mysql57-mysql-0:5.7.19-6.el7.x86_64",
            "7Server-RHSCL-2.4:rh-mysql57-mysql-common-0:5.7.19-6.el7.x86_64",
            "7Server-RHSCL-2.4:rh-mysql57-mysql-config-0:5.7.19-6.el7.x86_64",
            "7Server-RHSCL-2.4:rh-mysql57-mysql-debuginfo-0:5.7.19-6.el7.x86_64",
            "7Server-RHSCL-2.4:rh-mysql57-mysql-devel-0:5.7.19-6.el7.x86_64",
            "7Server-RHSCL-2.4:rh-mysql57-mysql-errmsg-0:5.7.19-6.el7.x86_64",
            "7Server-RHSCL-2.4:rh-mysql57-mysql-server-0:5.7.19-6.el7.x86_64",
            "7Server-RHSCL-2.4:rh-mysql57-mysql-test-0:5.7.19-6.el7.x86_64",
            "7Workstation-RHSCL-2.4:rh-mysql57-mysql-0:5.7.19-6.el7.src",
            "7Workstation-RHSCL-2.4:rh-mysql57-mysql-0:5.7.19-6.el7.x86_64",
            "7Workstation-RHSCL-2.4:rh-mysql57-mysql-common-0:5.7.19-6.el7.x86_64",
            "7Workstation-RHSCL-2.4:rh-mysql57-mysql-config-0:5.7.19-6.el7.x86_64",
            "7Workstation-RHSCL-2.4:rh-mysql57-mysql-debuginfo-0:5.7.19-6.el7.x86_64",
            "7Workstation-RHSCL-2.4:rh-mysql57-mysql-devel-0:5.7.19-6.el7.x86_64",
            "7Workstation-RHSCL-2.4:rh-mysql57-mysql-errmsg-0:5.7.19-6.el7.x86_64",
            "7Workstation-RHSCL-2.4:rh-mysql57-mysql-server-0:5.7.19-6.el7.x86_64",
            "7Workstation-RHSCL-2.4:rh-mysql57-mysql-test-0:5.7.19-6.el7.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Moderate"
        }
      ],
      "title": "mysql: Server: DML unspecified vulnerability (CPU Apr 2017)"
    },
    {
      "cve": "CVE-2017-3309",
      "discovery_date": "2017-04-19T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "1443359"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Optimizer). Supported versions that are affected are 5.5.54 and earlier, 5.6.35 and earlier and 5.7.17 and earlier. Easily \"exploitable\" vulnerability allows low privileged attacker with network access via multiple protocols to compromise MySQL Server. While the vulnerability is in MySQL Server, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.0 Base Score 7.7 (Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H).",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "mysql: Server: Optimizer unspecified vulnerability (CPU Apr 2017)",
          "title": "Vulnerability summary"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "6Server-RHSCL-2.4-6.7.Z:rh-mysql57-mysql-0:5.7.19-6.el6.src",
          "6Server-RHSCL-2.4-6.7.Z:rh-mysql57-mysql-0:5.7.19-6.el6.x86_64",
          "6Server-RHSCL-2.4-6.7.Z:rh-mysql57-mysql-common-0:5.7.19-6.el6.x86_64",
          "6Server-RHSCL-2.4-6.7.Z:rh-mysql57-mysql-config-0:5.7.19-6.el6.x86_64",
          "6Server-RHSCL-2.4-6.7.Z:rh-mysql57-mysql-debuginfo-0:5.7.19-6.el6.x86_64",
          "6Server-RHSCL-2.4-6.7.Z:rh-mysql57-mysql-devel-0:5.7.19-6.el6.x86_64",
          "6Server-RHSCL-2.4-6.7.Z:rh-mysql57-mysql-errmsg-0:5.7.19-6.el6.x86_64",
          "6Server-RHSCL-2.4-6.7.Z:rh-mysql57-mysql-server-0:5.7.19-6.el6.x86_64",
          "6Server-RHSCL-2.4-6.7.Z:rh-mysql57-mysql-test-0:5.7.19-6.el6.x86_64",
          "6Server-RHSCL-2.4:rh-mysql57-mysql-0:5.7.19-6.el6.src",
          "6Server-RHSCL-2.4:rh-mysql57-mysql-0:5.7.19-6.el6.x86_64",
          "6Server-RHSCL-2.4:rh-mysql57-mysql-common-0:5.7.19-6.el6.x86_64",
          "6Server-RHSCL-2.4:rh-mysql57-mysql-config-0:5.7.19-6.el6.x86_64",
          "6Server-RHSCL-2.4:rh-mysql57-mysql-debuginfo-0:5.7.19-6.el6.x86_64",
          "6Server-RHSCL-2.4:rh-mysql57-mysql-devel-0:5.7.19-6.el6.x86_64",
          "6Server-RHSCL-2.4:rh-mysql57-mysql-errmsg-0:5.7.19-6.el6.x86_64",
          "6Server-RHSCL-2.4:rh-mysql57-mysql-server-0:5.7.19-6.el6.x86_64",
          "6Server-RHSCL-2.4:rh-mysql57-mysql-test-0:5.7.19-6.el6.x86_64",
          "6Workstation-RHSCL-2.4:rh-mysql57-mysql-0:5.7.19-6.el6.src",
          "6Workstation-RHSCL-2.4:rh-mysql57-mysql-0:5.7.19-6.el6.x86_64",
          "6Workstation-RHSCL-2.4:rh-mysql57-mysql-common-0:5.7.19-6.el6.x86_64",
          "6Workstation-RHSCL-2.4:rh-mysql57-mysql-config-0:5.7.19-6.el6.x86_64",
          "6Workstation-RHSCL-2.4:rh-mysql57-mysql-debuginfo-0:5.7.19-6.el6.x86_64",
          "6Workstation-RHSCL-2.4:rh-mysql57-mysql-devel-0:5.7.19-6.el6.x86_64",
          "6Workstation-RHSCL-2.4:rh-mysql57-mysql-errmsg-0:5.7.19-6.el6.x86_64",
          "6Workstation-RHSCL-2.4:rh-mysql57-mysql-server-0:5.7.19-6.el6.x86_64",
          "6Workstation-RHSCL-2.4:rh-mysql57-mysql-test-0:5.7.19-6.el6.x86_64",
          "7Server-RHSCL-2.4-7.3.Z:rh-mysql57-mysql-0:5.7.19-6.el7.src",
          "7Server-RHSCL-2.4-7.3.Z:rh-mysql57-mysql-0:5.7.19-6.el7.x86_64",
          "7Server-RHSCL-2.4-7.3.Z:rh-mysql57-mysql-common-0:5.7.19-6.el7.x86_64",
          "7Server-RHSCL-2.4-7.3.Z:rh-mysql57-mysql-config-0:5.7.19-6.el7.x86_64",
          "7Server-RHSCL-2.4-7.3.Z:rh-mysql57-mysql-debuginfo-0:5.7.19-6.el7.x86_64",
          "7Server-RHSCL-2.4-7.3.Z:rh-mysql57-mysql-devel-0:5.7.19-6.el7.x86_64",
          "7Server-RHSCL-2.4-7.3.Z:rh-mysql57-mysql-errmsg-0:5.7.19-6.el7.x86_64",
          "7Server-RHSCL-2.4-7.3.Z:rh-mysql57-mysql-server-0:5.7.19-6.el7.x86_64",
          "7Server-RHSCL-2.4-7.3.Z:rh-mysql57-mysql-test-0:5.7.19-6.el7.x86_64",
          "7Server-RHSCL-2.4:rh-mysql57-mysql-0:5.7.19-6.el7.src",
          "7Server-RHSCL-2.4:rh-mysql57-mysql-0:5.7.19-6.el7.x86_64",
          "7Server-RHSCL-2.4:rh-mysql57-mysql-common-0:5.7.19-6.el7.x86_64",
          "7Server-RHSCL-2.4:rh-mysql57-mysql-config-0:5.7.19-6.el7.x86_64",
          "7Server-RHSCL-2.4:rh-mysql57-mysql-debuginfo-0:5.7.19-6.el7.x86_64",
          "7Server-RHSCL-2.4:rh-mysql57-mysql-devel-0:5.7.19-6.el7.x86_64",
          "7Server-RHSCL-2.4:rh-mysql57-mysql-errmsg-0:5.7.19-6.el7.x86_64",
          "7Server-RHSCL-2.4:rh-mysql57-mysql-server-0:5.7.19-6.el7.x86_64",
          "7Server-RHSCL-2.4:rh-mysql57-mysql-test-0:5.7.19-6.el7.x86_64",
          "7Workstation-RHSCL-2.4:rh-mysql57-mysql-0:5.7.19-6.el7.src",
          "7Workstation-RHSCL-2.4:rh-mysql57-mysql-0:5.7.19-6.el7.x86_64",
          "7Workstation-RHSCL-2.4:rh-mysql57-mysql-common-0:5.7.19-6.el7.x86_64",
          "7Workstation-RHSCL-2.4:rh-mysql57-mysql-config-0:5.7.19-6.el7.x86_64",
          "7Workstation-RHSCL-2.4:rh-mysql57-mysql-debuginfo-0:5.7.19-6.el7.x86_64",
          "7Workstation-RHSCL-2.4:rh-mysql57-mysql-devel-0:5.7.19-6.el7.x86_64",
          "7Workstation-RHSCL-2.4:rh-mysql57-mysql-errmsg-0:5.7.19-6.el7.x86_64",
          "7Workstation-RHSCL-2.4:rh-mysql57-mysql-server-0:5.7.19-6.el7.x86_64",
          "7Workstation-RHSCL-2.4:rh-mysql57-mysql-test-0:5.7.19-6.el7.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2017-3309"
        },
        {
          "category": "external",
          "summary": "RHBZ#1443359",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1443359"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2017-3309",
          "url": "https://www.cve.org/CVERecord?id=CVE-2017-3309"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2017-3309",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2017-3309"
        },
        {
          "category": "external",
          "summary": "http://www.oracle.com/technetwork/security-advisory/cpuapr2017-3236618.html#AppendixMSQL",
          "url": "http://www.oracle.com/technetwork/security-advisory/cpuapr2017-3236618.html#AppendixMSQL"
        }
      ],
      "release_date": "2017-04-19T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2017-10-12T07:53:15+00:00",
          "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAfter installing this update, the MySQL server daemon (mysqld) will be restarted automatically.",
          "product_ids": [
            "6Server-RHSCL-2.4-6.7.Z:rh-mysql57-mysql-0:5.7.19-6.el6.src",
            "6Server-RHSCL-2.4-6.7.Z:rh-mysql57-mysql-0:5.7.19-6.el6.x86_64",
            "6Server-RHSCL-2.4-6.7.Z:rh-mysql57-mysql-common-0:5.7.19-6.el6.x86_64",
            "6Server-RHSCL-2.4-6.7.Z:rh-mysql57-mysql-config-0:5.7.19-6.el6.x86_64",
            "6Server-RHSCL-2.4-6.7.Z:rh-mysql57-mysql-debuginfo-0:5.7.19-6.el6.x86_64",
            "6Server-RHSCL-2.4-6.7.Z:rh-mysql57-mysql-devel-0:5.7.19-6.el6.x86_64",
            "6Server-RHSCL-2.4-6.7.Z:rh-mysql57-mysql-errmsg-0:5.7.19-6.el6.x86_64",
            "6Server-RHSCL-2.4-6.7.Z:rh-mysql57-mysql-server-0:5.7.19-6.el6.x86_64",
            "6Server-RHSCL-2.4-6.7.Z:rh-mysql57-mysql-test-0:5.7.19-6.el6.x86_64",
            "6Server-RHSCL-2.4:rh-mysql57-mysql-0:5.7.19-6.el6.src",
            "6Server-RHSCL-2.4:rh-mysql57-mysql-0:5.7.19-6.el6.x86_64",
            "6Server-RHSCL-2.4:rh-mysql57-mysql-common-0:5.7.19-6.el6.x86_64",
            "6Server-RHSCL-2.4:rh-mysql57-mysql-config-0:5.7.19-6.el6.x86_64",
            "6Server-RHSCL-2.4:rh-mysql57-mysql-debuginfo-0:5.7.19-6.el6.x86_64",
            "6Server-RHSCL-2.4:rh-mysql57-mysql-devel-0:5.7.19-6.el6.x86_64",
            "6Server-RHSCL-2.4:rh-mysql57-mysql-errmsg-0:5.7.19-6.el6.x86_64",
            "6Server-RHSCL-2.4:rh-mysql57-mysql-server-0:5.7.19-6.el6.x86_64",
            "6Server-RHSCL-2.4:rh-mysql57-mysql-test-0:5.7.19-6.el6.x86_64",
            "6Workstation-RHSCL-2.4:rh-mysql57-mysql-0:5.7.19-6.el6.src",
            "6Workstation-RHSCL-2.4:rh-mysql57-mysql-0:5.7.19-6.el6.x86_64",
            "6Workstation-RHSCL-2.4:rh-mysql57-mysql-common-0:5.7.19-6.el6.x86_64",
            "6Workstation-RHSCL-2.4:rh-mysql57-mysql-config-0:5.7.19-6.el6.x86_64",
            "6Workstation-RHSCL-2.4:rh-mysql57-mysql-debuginfo-0:5.7.19-6.el6.x86_64",
            "6Workstation-RHSCL-2.4:rh-mysql57-mysql-devel-0:5.7.19-6.el6.x86_64",
            "6Workstation-RHSCL-2.4:rh-mysql57-mysql-errmsg-0:5.7.19-6.el6.x86_64",
            "6Workstation-RHSCL-2.4:rh-mysql57-mysql-server-0:5.7.19-6.el6.x86_64",
            "6Workstation-RHSCL-2.4:rh-mysql57-mysql-test-0:5.7.19-6.el6.x86_64",
            "7Server-RHSCL-2.4-7.3.Z:rh-mysql57-mysql-0:5.7.19-6.el7.src",
            "7Server-RHSCL-2.4-7.3.Z:rh-mysql57-mysql-0:5.7.19-6.el7.x86_64",
            "7Server-RHSCL-2.4-7.3.Z:rh-mysql57-mysql-common-0:5.7.19-6.el7.x86_64",
            "7Server-RHSCL-2.4-7.3.Z:rh-mysql57-mysql-config-0:5.7.19-6.el7.x86_64",
            "7Server-RHSCL-2.4-7.3.Z:rh-mysql57-mysql-debuginfo-0:5.7.19-6.el7.x86_64",
            "7Server-RHSCL-2.4-7.3.Z:rh-mysql57-mysql-devel-0:5.7.19-6.el7.x86_64",
            "7Server-RHSCL-2.4-7.3.Z:rh-mysql57-mysql-errmsg-0:5.7.19-6.el7.x86_64",
            "7Server-RHSCL-2.4-7.3.Z:rh-mysql57-mysql-server-0:5.7.19-6.el7.x86_64",
            "7Server-RHSCL-2.4-7.3.Z:rh-mysql57-mysql-test-0:5.7.19-6.el7.x86_64",
            "7Server-RHSCL-2.4:rh-mysql57-mysql-0:5.7.19-6.el7.src",
            "7Server-RHSCL-2.4:rh-mysql57-mysql-0:5.7.19-6.el7.x86_64",
            "7Server-RHSCL-2.4:rh-mysql57-mysql-common-0:5.7.19-6.el7.x86_64",
            "7Server-RHSCL-2.4:rh-mysql57-mysql-config-0:5.7.19-6.el7.x86_64",
            "7Server-RHSCL-2.4:rh-mysql57-mysql-debuginfo-0:5.7.19-6.el7.x86_64",
            "7Server-RHSCL-2.4:rh-mysql57-mysql-devel-0:5.7.19-6.el7.x86_64",
            "7Server-RHSCL-2.4:rh-mysql57-mysql-errmsg-0:5.7.19-6.el7.x86_64",
            "7Server-RHSCL-2.4:rh-mysql57-mysql-server-0:5.7.19-6.el7.x86_64",
            "7Server-RHSCL-2.4:rh-mysql57-mysql-test-0:5.7.19-6.el7.x86_64",
            "7Workstation-RHSCL-2.4:rh-mysql57-mysql-0:5.7.19-6.el7.src",
            "7Workstation-RHSCL-2.4:rh-mysql57-mysql-0:5.7.19-6.el7.x86_64",
            "7Workstation-RHSCL-2.4:rh-mysql57-mysql-common-0:5.7.19-6.el7.x86_64",
            "7Workstation-RHSCL-2.4:rh-mysql57-mysql-config-0:5.7.19-6.el7.x86_64",
            "7Workstation-RHSCL-2.4:rh-mysql57-mysql-debuginfo-0:5.7.19-6.el7.x86_64",
            "7Workstation-RHSCL-2.4:rh-mysql57-mysql-devel-0:5.7.19-6.el7.x86_64",
            "7Workstation-RHSCL-2.4:rh-mysql57-mysql-errmsg-0:5.7.19-6.el7.x86_64",
            "7Workstation-RHSCL-2.4:rh-mysql57-mysql-server-0:5.7.19-6.el7.x86_64",
            "7Workstation-RHSCL-2.4:rh-mysql57-mysql-test-0:5.7.19-6.el7.x86_64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2017:2886"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 7.7,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "NONE",
            "integrityImpact": "NONE",
            "privilegesRequired": "LOW",
            "scope": "CHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H",
            "version": "3.0"
          },
          "products": [
            "6Server-RHSCL-2.4-6.7.Z:rh-mysql57-mysql-0:5.7.19-6.el6.src",
            "6Server-RHSCL-2.4-6.7.Z:rh-mysql57-mysql-0:5.7.19-6.el6.x86_64",
            "6Server-RHSCL-2.4-6.7.Z:rh-mysql57-mysql-common-0:5.7.19-6.el6.x86_64",
            "6Server-RHSCL-2.4-6.7.Z:rh-mysql57-mysql-config-0:5.7.19-6.el6.x86_64",
            "6Server-RHSCL-2.4-6.7.Z:rh-mysql57-mysql-debuginfo-0:5.7.19-6.el6.x86_64",
            "6Server-RHSCL-2.4-6.7.Z:rh-mysql57-mysql-devel-0:5.7.19-6.el6.x86_64",
            "6Server-RHSCL-2.4-6.7.Z:rh-mysql57-mysql-errmsg-0:5.7.19-6.el6.x86_64",
            "6Server-RHSCL-2.4-6.7.Z:rh-mysql57-mysql-server-0:5.7.19-6.el6.x86_64",
            "6Server-RHSCL-2.4-6.7.Z:rh-mysql57-mysql-test-0:5.7.19-6.el6.x86_64",
            "6Server-RHSCL-2.4:rh-mysql57-mysql-0:5.7.19-6.el6.src",
            "6Server-RHSCL-2.4:rh-mysql57-mysql-0:5.7.19-6.el6.x86_64",
            "6Server-RHSCL-2.4:rh-mysql57-mysql-common-0:5.7.19-6.el6.x86_64",
            "6Server-RHSCL-2.4:rh-mysql57-mysql-config-0:5.7.19-6.el6.x86_64",
            "6Server-RHSCL-2.4:rh-mysql57-mysql-debuginfo-0:5.7.19-6.el6.x86_64",
            "6Server-RHSCL-2.4:rh-mysql57-mysql-devel-0:5.7.19-6.el6.x86_64",
            "6Server-RHSCL-2.4:rh-mysql57-mysql-errmsg-0:5.7.19-6.el6.x86_64",
            "6Server-RHSCL-2.4:rh-mysql57-mysql-server-0:5.7.19-6.el6.x86_64",
            "6Server-RHSCL-2.4:rh-mysql57-mysql-test-0:5.7.19-6.el6.x86_64",
            "6Workstation-RHSCL-2.4:rh-mysql57-mysql-0:5.7.19-6.el6.src",
            "6Workstation-RHSCL-2.4:rh-mysql57-mysql-0:5.7.19-6.el6.x86_64",
            "6Workstation-RHSCL-2.4:rh-mysql57-mysql-common-0:5.7.19-6.el6.x86_64",
            "6Workstation-RHSCL-2.4:rh-mysql57-mysql-config-0:5.7.19-6.el6.x86_64",
            "6Workstation-RHSCL-2.4:rh-mysql57-mysql-debuginfo-0:5.7.19-6.el6.x86_64",
            "6Workstation-RHSCL-2.4:rh-mysql57-mysql-devel-0:5.7.19-6.el6.x86_64",
            "6Workstation-RHSCL-2.4:rh-mysql57-mysql-errmsg-0:5.7.19-6.el6.x86_64",
            "6Workstation-RHSCL-2.4:rh-mysql57-mysql-server-0:5.7.19-6.el6.x86_64",
            "6Workstation-RHSCL-2.4:rh-mysql57-mysql-test-0:5.7.19-6.el6.x86_64",
            "7Server-RHSCL-2.4-7.3.Z:rh-mysql57-mysql-0:5.7.19-6.el7.src",
            "7Server-RHSCL-2.4-7.3.Z:rh-mysql57-mysql-0:5.7.19-6.el7.x86_64",
            "7Server-RHSCL-2.4-7.3.Z:rh-mysql57-mysql-common-0:5.7.19-6.el7.x86_64",
            "7Server-RHSCL-2.4-7.3.Z:rh-mysql57-mysql-config-0:5.7.19-6.el7.x86_64",
            "7Server-RHSCL-2.4-7.3.Z:rh-mysql57-mysql-debuginfo-0:5.7.19-6.el7.x86_64",
            "7Server-RHSCL-2.4-7.3.Z:rh-mysql57-mysql-devel-0:5.7.19-6.el7.x86_64",
            "7Server-RHSCL-2.4-7.3.Z:rh-mysql57-mysql-errmsg-0:5.7.19-6.el7.x86_64",
            "7Server-RHSCL-2.4-7.3.Z:rh-mysql57-mysql-server-0:5.7.19-6.el7.x86_64",
            "7Server-RHSCL-2.4-7.3.Z:rh-mysql57-mysql-test-0:5.7.19-6.el7.x86_64",
            "7Server-RHSCL-2.4:rh-mysql57-mysql-0:5.7.19-6.el7.src",
            "7Server-RHSCL-2.4:rh-mysql57-mysql-0:5.7.19-6.el7.x86_64",
            "7Server-RHSCL-2.4:rh-mysql57-mysql-common-0:5.7.19-6.el7.x86_64",
            "7Server-RHSCL-2.4:rh-mysql57-mysql-config-0:5.7.19-6.el7.x86_64",
            "7Server-RHSCL-2.4:rh-mysql57-mysql-debuginfo-0:5.7.19-6.el7.x86_64",
            "7Server-RHSCL-2.4:rh-mysql57-mysql-devel-0:5.7.19-6.el7.x86_64",
            "7Server-RHSCL-2.4:rh-mysql57-mysql-errmsg-0:5.7.19-6.el7.x86_64",
            "7Server-RHSCL-2.4:rh-mysql57-mysql-server-0:5.7.19-6.el7.x86_64",
            "7Server-RHSCL-2.4:rh-mysql57-mysql-test-0:5.7.19-6.el7.x86_64",
            "7Workstation-RHSCL-2.4:rh-mysql57-mysql-0:5.7.19-6.el7.src",
            "7Workstation-RHSCL-2.4:rh-mysql57-mysql-0:5.7.19-6.el7.x86_64",
            "7Workstation-RHSCL-2.4:rh-mysql57-mysql-common-0:5.7.19-6.el7.x86_64",
            "7Workstation-RHSCL-2.4:rh-mysql57-mysql-config-0:5.7.19-6.el7.x86_64",
            "7Workstation-RHSCL-2.4:rh-mysql57-mysql-debuginfo-0:5.7.19-6.el7.x86_64",
            "7Workstation-RHSCL-2.4:rh-mysql57-mysql-devel-0:5.7.19-6.el7.x86_64",
            "7Workstation-RHSCL-2.4:rh-mysql57-mysql-errmsg-0:5.7.19-6.el7.x86_64",
            "7Workstation-RHSCL-2.4:rh-mysql57-mysql-server-0:5.7.19-6.el7.x86_64",
            "7Workstation-RHSCL-2.4:rh-mysql57-mysql-test-0:5.7.19-6.el7.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Moderate"
        }
      ],
      "title": "mysql: Server: Optimizer unspecified vulnerability (CPU Apr 2017)"
    },
    {
      "acknowledgments": [
        {
          "summary": "This issue was discovered by Red Hat."
        }
      ],
      "cve": "CVE-2017-3312",
      "discovery_date": "2016-11-10T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "1414133"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "Multiple flaws were found in the way the mysqld_safe script handled creation of error log file. The mysql operating system user could use these flaws to escalate their privileges to root.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "mysql: insecure error log file handling in mysqld_safe, incomplete CVE-2016-6664 fix (CPU Jan 2017)",
          "title": "Vulnerability summary"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "6Server-RHSCL-2.4-6.7.Z:rh-mysql57-mysql-0:5.7.19-6.el6.src",
          "6Server-RHSCL-2.4-6.7.Z:rh-mysql57-mysql-0:5.7.19-6.el6.x86_64",
          "6Server-RHSCL-2.4-6.7.Z:rh-mysql57-mysql-common-0:5.7.19-6.el6.x86_64",
          "6Server-RHSCL-2.4-6.7.Z:rh-mysql57-mysql-config-0:5.7.19-6.el6.x86_64",
          "6Server-RHSCL-2.4-6.7.Z:rh-mysql57-mysql-debuginfo-0:5.7.19-6.el6.x86_64",
          "6Server-RHSCL-2.4-6.7.Z:rh-mysql57-mysql-devel-0:5.7.19-6.el6.x86_64",
          "6Server-RHSCL-2.4-6.7.Z:rh-mysql57-mysql-errmsg-0:5.7.19-6.el6.x86_64",
          "6Server-RHSCL-2.4-6.7.Z:rh-mysql57-mysql-server-0:5.7.19-6.el6.x86_64",
          "6Server-RHSCL-2.4-6.7.Z:rh-mysql57-mysql-test-0:5.7.19-6.el6.x86_64",
          "6Server-RHSCL-2.4:rh-mysql57-mysql-0:5.7.19-6.el6.src",
          "6Server-RHSCL-2.4:rh-mysql57-mysql-0:5.7.19-6.el6.x86_64",
          "6Server-RHSCL-2.4:rh-mysql57-mysql-common-0:5.7.19-6.el6.x86_64",
          "6Server-RHSCL-2.4:rh-mysql57-mysql-config-0:5.7.19-6.el6.x86_64",
          "6Server-RHSCL-2.4:rh-mysql57-mysql-debuginfo-0:5.7.19-6.el6.x86_64",
          "6Server-RHSCL-2.4:rh-mysql57-mysql-devel-0:5.7.19-6.el6.x86_64",
          "6Server-RHSCL-2.4:rh-mysql57-mysql-errmsg-0:5.7.19-6.el6.x86_64",
          "6Server-RHSCL-2.4:rh-mysql57-mysql-server-0:5.7.19-6.el6.x86_64",
          "6Server-RHSCL-2.4:rh-mysql57-mysql-test-0:5.7.19-6.el6.x86_64",
          "6Workstation-RHSCL-2.4:rh-mysql57-mysql-0:5.7.19-6.el6.src",
          "6Workstation-RHSCL-2.4:rh-mysql57-mysql-0:5.7.19-6.el6.x86_64",
          "6Workstation-RHSCL-2.4:rh-mysql57-mysql-common-0:5.7.19-6.el6.x86_64",
          "6Workstation-RHSCL-2.4:rh-mysql57-mysql-config-0:5.7.19-6.el6.x86_64",
          "6Workstation-RHSCL-2.4:rh-mysql57-mysql-debuginfo-0:5.7.19-6.el6.x86_64",
          "6Workstation-RHSCL-2.4:rh-mysql57-mysql-devel-0:5.7.19-6.el6.x86_64",
          "6Workstation-RHSCL-2.4:rh-mysql57-mysql-errmsg-0:5.7.19-6.el6.x86_64",
          "6Workstation-RHSCL-2.4:rh-mysql57-mysql-server-0:5.7.19-6.el6.x86_64",
          "6Workstation-RHSCL-2.4:rh-mysql57-mysql-test-0:5.7.19-6.el6.x86_64",
          "7Server-RHSCL-2.4-7.3.Z:rh-mysql57-mysql-0:5.7.19-6.el7.src",
          "7Server-RHSCL-2.4-7.3.Z:rh-mysql57-mysql-0:5.7.19-6.el7.x86_64",
          "7Server-RHSCL-2.4-7.3.Z:rh-mysql57-mysql-common-0:5.7.19-6.el7.x86_64",
          "7Server-RHSCL-2.4-7.3.Z:rh-mysql57-mysql-config-0:5.7.19-6.el7.x86_64",
          "7Server-RHSCL-2.4-7.3.Z:rh-mysql57-mysql-debuginfo-0:5.7.19-6.el7.x86_64",
          "7Server-RHSCL-2.4-7.3.Z:rh-mysql57-mysql-devel-0:5.7.19-6.el7.x86_64",
          "7Server-RHSCL-2.4-7.3.Z:rh-mysql57-mysql-errmsg-0:5.7.19-6.el7.x86_64",
          "7Server-RHSCL-2.4-7.3.Z:rh-mysql57-mysql-server-0:5.7.19-6.el7.x86_64",
          "7Server-RHSCL-2.4-7.3.Z:rh-mysql57-mysql-test-0:5.7.19-6.el7.x86_64",
          "7Server-RHSCL-2.4:rh-mysql57-mysql-0:5.7.19-6.el7.src",
          "7Server-RHSCL-2.4:rh-mysql57-mysql-0:5.7.19-6.el7.x86_64",
          "7Server-RHSCL-2.4:rh-mysql57-mysql-common-0:5.7.19-6.el7.x86_64",
          "7Server-RHSCL-2.4:rh-mysql57-mysql-config-0:5.7.19-6.el7.x86_64",
          "7Server-RHSCL-2.4:rh-mysql57-mysql-debuginfo-0:5.7.19-6.el7.x86_64",
          "7Server-RHSCL-2.4:rh-mysql57-mysql-devel-0:5.7.19-6.el7.x86_64",
          "7Server-RHSCL-2.4:rh-mysql57-mysql-errmsg-0:5.7.19-6.el7.x86_64",
          "7Server-RHSCL-2.4:rh-mysql57-mysql-server-0:5.7.19-6.el7.x86_64",
          "7Server-RHSCL-2.4:rh-mysql57-mysql-test-0:5.7.19-6.el7.x86_64",
          "7Workstation-RHSCL-2.4:rh-mysql57-mysql-0:5.7.19-6.el7.src",
          "7Workstation-RHSCL-2.4:rh-mysql57-mysql-0:5.7.19-6.el7.x86_64",
          "7Workstation-RHSCL-2.4:rh-mysql57-mysql-common-0:5.7.19-6.el7.x86_64",
          "7Workstation-RHSCL-2.4:rh-mysql57-mysql-config-0:5.7.19-6.el7.x86_64",
          "7Workstation-RHSCL-2.4:rh-mysql57-mysql-debuginfo-0:5.7.19-6.el7.x86_64",
          "7Workstation-RHSCL-2.4:rh-mysql57-mysql-devel-0:5.7.19-6.el7.x86_64",
          "7Workstation-RHSCL-2.4:rh-mysql57-mysql-errmsg-0:5.7.19-6.el7.x86_64",
          "7Workstation-RHSCL-2.4:rh-mysql57-mysql-server-0:5.7.19-6.el7.x86_64",
          "7Workstation-RHSCL-2.4:rh-mysql57-mysql-test-0:5.7.19-6.el7.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2017-3312"
        },
        {
          "category": "external",
          "summary": "RHBZ#1414133",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1414133"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2017-3312",
          "url": "https://www.cve.org/CVERecord?id=CVE-2017-3312"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2017-3312",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2017-3312"
        }
      ],
      "release_date": "2017-01-17T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2017-10-12T07:53:15+00:00",
          "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAfter installing this update, the MySQL server daemon (mysqld) will be restarted automatically.",
          "product_ids": [
            "6Server-RHSCL-2.4-6.7.Z:rh-mysql57-mysql-0:5.7.19-6.el6.src",
            "6Server-RHSCL-2.4-6.7.Z:rh-mysql57-mysql-0:5.7.19-6.el6.x86_64",
            "6Server-RHSCL-2.4-6.7.Z:rh-mysql57-mysql-common-0:5.7.19-6.el6.x86_64",
            "6Server-RHSCL-2.4-6.7.Z:rh-mysql57-mysql-config-0:5.7.19-6.el6.x86_64",
            "6Server-RHSCL-2.4-6.7.Z:rh-mysql57-mysql-debuginfo-0:5.7.19-6.el6.x86_64",
            "6Server-RHSCL-2.4-6.7.Z:rh-mysql57-mysql-devel-0:5.7.19-6.el6.x86_64",
            "6Server-RHSCL-2.4-6.7.Z:rh-mysql57-mysql-errmsg-0:5.7.19-6.el6.x86_64",
            "6Server-RHSCL-2.4-6.7.Z:rh-mysql57-mysql-server-0:5.7.19-6.el6.x86_64",
            "6Server-RHSCL-2.4-6.7.Z:rh-mysql57-mysql-test-0:5.7.19-6.el6.x86_64",
            "6Server-RHSCL-2.4:rh-mysql57-mysql-0:5.7.19-6.el6.src",
            "6Server-RHSCL-2.4:rh-mysql57-mysql-0:5.7.19-6.el6.x86_64",
            "6Server-RHSCL-2.4:rh-mysql57-mysql-common-0:5.7.19-6.el6.x86_64",
            "6Server-RHSCL-2.4:rh-mysql57-mysql-config-0:5.7.19-6.el6.x86_64",
            "6Server-RHSCL-2.4:rh-mysql57-mysql-debuginfo-0:5.7.19-6.el6.x86_64",
            "6Server-RHSCL-2.4:rh-mysql57-mysql-devel-0:5.7.19-6.el6.x86_64",
            "6Server-RHSCL-2.4:rh-mysql57-mysql-errmsg-0:5.7.19-6.el6.x86_64",
            "6Server-RHSCL-2.4:rh-mysql57-mysql-server-0:5.7.19-6.el6.x86_64",
            "6Server-RHSCL-2.4:rh-mysql57-mysql-test-0:5.7.19-6.el6.x86_64",
            "6Workstation-RHSCL-2.4:rh-mysql57-mysql-0:5.7.19-6.el6.src",
            "6Workstation-RHSCL-2.4:rh-mysql57-mysql-0:5.7.19-6.el6.x86_64",
            "6Workstation-RHSCL-2.4:rh-mysql57-mysql-common-0:5.7.19-6.el6.x86_64",
            "6Workstation-RHSCL-2.4:rh-mysql57-mysql-config-0:5.7.19-6.el6.x86_64",
            "6Workstation-RHSCL-2.4:rh-mysql57-mysql-debuginfo-0:5.7.19-6.el6.x86_64",
            "6Workstation-RHSCL-2.4:rh-mysql57-mysql-devel-0:5.7.19-6.el6.x86_64",
            "6Workstation-RHSCL-2.4:rh-mysql57-mysql-errmsg-0:5.7.19-6.el6.x86_64",
            "6Workstation-RHSCL-2.4:rh-mysql57-mysql-server-0:5.7.19-6.el6.x86_64",
            "6Workstation-RHSCL-2.4:rh-mysql57-mysql-test-0:5.7.19-6.el6.x86_64",
            "7Server-RHSCL-2.4-7.3.Z:rh-mysql57-mysql-0:5.7.19-6.el7.src",
            "7Server-RHSCL-2.4-7.3.Z:rh-mysql57-mysql-0:5.7.19-6.el7.x86_64",
            "7Server-RHSCL-2.4-7.3.Z:rh-mysql57-mysql-common-0:5.7.19-6.el7.x86_64",
            "7Server-RHSCL-2.4-7.3.Z:rh-mysql57-mysql-config-0:5.7.19-6.el7.x86_64",
            "7Server-RHSCL-2.4-7.3.Z:rh-mysql57-mysql-debuginfo-0:5.7.19-6.el7.x86_64",
            "7Server-RHSCL-2.4-7.3.Z:rh-mysql57-mysql-devel-0:5.7.19-6.el7.x86_64",
            "7Server-RHSCL-2.4-7.3.Z:rh-mysql57-mysql-errmsg-0:5.7.19-6.el7.x86_64",
            "7Server-RHSCL-2.4-7.3.Z:rh-mysql57-mysql-server-0:5.7.19-6.el7.x86_64",
            "7Server-RHSCL-2.4-7.3.Z:rh-mysql57-mysql-test-0:5.7.19-6.el7.x86_64",
            "7Server-RHSCL-2.4:rh-mysql57-mysql-0:5.7.19-6.el7.src",
            "7Server-RHSCL-2.4:rh-mysql57-mysql-0:5.7.19-6.el7.x86_64",
            "7Server-RHSCL-2.4:rh-mysql57-mysql-common-0:5.7.19-6.el7.x86_64",
            "7Server-RHSCL-2.4:rh-mysql57-mysql-config-0:5.7.19-6.el7.x86_64",
            "7Server-RHSCL-2.4:rh-mysql57-mysql-debuginfo-0:5.7.19-6.el7.x86_64",
            "7Server-RHSCL-2.4:rh-mysql57-mysql-devel-0:5.7.19-6.el7.x86_64",
            "7Server-RHSCL-2.4:rh-mysql57-mysql-errmsg-0:5.7.19-6.el7.x86_64",
            "7Server-RHSCL-2.4:rh-mysql57-mysql-server-0:5.7.19-6.el7.x86_64",
            "7Server-RHSCL-2.4:rh-mysql57-mysql-test-0:5.7.19-6.el7.x86_64",
            "7Workstation-RHSCL-2.4:rh-mysql57-mysql-0:5.7.19-6.el7.src",
            "7Workstation-RHSCL-2.4:rh-mysql57-mysql-0:5.7.19-6.el7.x86_64",
            "7Workstation-RHSCL-2.4:rh-mysql57-mysql-common-0:5.7.19-6.el7.x86_64",
            "7Workstation-RHSCL-2.4:rh-mysql57-mysql-config-0:5.7.19-6.el7.x86_64",
            "7Workstation-RHSCL-2.4:rh-mysql57-mysql-debuginfo-0:5.7.19-6.el7.x86_64",
            "7Workstation-RHSCL-2.4:rh-mysql57-mysql-devel-0:5.7.19-6.el7.x86_64",
            "7Workstation-RHSCL-2.4:rh-mysql57-mysql-errmsg-0:5.7.19-6.el7.x86_64",
            "7Workstation-RHSCL-2.4:rh-mysql57-mysql-server-0:5.7.19-6.el7.x86_64",
            "7Workstation-RHSCL-2.4:rh-mysql57-mysql-test-0:5.7.19-6.el7.x86_64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2017:2886"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "HIGH",
            "attackVector": "LOCAL",
            "availabilityImpact": "HIGH",
            "baseScore": 6.7,
            "baseSeverity": "MEDIUM",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "HIGH",
            "privilegesRequired": "LOW",
            "scope": "UNCHANGED",
            "userInteraction": "REQUIRED",
            "vectorString": "CVSS:3.0/AV:L/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:H",
            "version": "3.0"
          },
          "products": [
            "6Server-RHSCL-2.4-6.7.Z:rh-mysql57-mysql-0:5.7.19-6.el6.src",
            "6Server-RHSCL-2.4-6.7.Z:rh-mysql57-mysql-0:5.7.19-6.el6.x86_64",
            "6Server-RHSCL-2.4-6.7.Z:rh-mysql57-mysql-common-0:5.7.19-6.el6.x86_64",
            "6Server-RHSCL-2.4-6.7.Z:rh-mysql57-mysql-config-0:5.7.19-6.el6.x86_64",
            "6Server-RHSCL-2.4-6.7.Z:rh-mysql57-mysql-debuginfo-0:5.7.19-6.el6.x86_64",
            "6Server-RHSCL-2.4-6.7.Z:rh-mysql57-mysql-devel-0:5.7.19-6.el6.x86_64",
            "6Server-RHSCL-2.4-6.7.Z:rh-mysql57-mysql-errmsg-0:5.7.19-6.el6.x86_64",
            "6Server-RHSCL-2.4-6.7.Z:rh-mysql57-mysql-server-0:5.7.19-6.el6.x86_64",
            "6Server-RHSCL-2.4-6.7.Z:rh-mysql57-mysql-test-0:5.7.19-6.el6.x86_64",
            "6Server-RHSCL-2.4:rh-mysql57-mysql-0:5.7.19-6.el6.src",
            "6Server-RHSCL-2.4:rh-mysql57-mysql-0:5.7.19-6.el6.x86_64",
            "6Server-RHSCL-2.4:rh-mysql57-mysql-common-0:5.7.19-6.el6.x86_64",
            "6Server-RHSCL-2.4:rh-mysql57-mysql-config-0:5.7.19-6.el6.x86_64",
            "6Server-RHSCL-2.4:rh-mysql57-mysql-debuginfo-0:5.7.19-6.el6.x86_64",
            "6Server-RHSCL-2.4:rh-mysql57-mysql-devel-0:5.7.19-6.el6.x86_64",
            "6Server-RHSCL-2.4:rh-mysql57-mysql-errmsg-0:5.7.19-6.el6.x86_64",
            "6Server-RHSCL-2.4:rh-mysql57-mysql-server-0:5.7.19-6.el6.x86_64",
            "6Server-RHSCL-2.4:rh-mysql57-mysql-test-0:5.7.19-6.el6.x86_64",
            "6Workstation-RHSCL-2.4:rh-mysql57-mysql-0:5.7.19-6.el6.src",
            "6Workstation-RHSCL-2.4:rh-mysql57-mysql-0:5.7.19-6.el6.x86_64",
            "6Workstation-RHSCL-2.4:rh-mysql57-mysql-common-0:5.7.19-6.el6.x86_64",
            "6Workstation-RHSCL-2.4:rh-mysql57-mysql-config-0:5.7.19-6.el6.x86_64",
            "6Workstation-RHSCL-2.4:rh-mysql57-mysql-debuginfo-0:5.7.19-6.el6.x86_64",
            "6Workstation-RHSCL-2.4:rh-mysql57-mysql-devel-0:5.7.19-6.el6.x86_64",
            "6Workstation-RHSCL-2.4:rh-mysql57-mysql-errmsg-0:5.7.19-6.el6.x86_64",
            "6Workstation-RHSCL-2.4:rh-mysql57-mysql-server-0:5.7.19-6.el6.x86_64",
            "6Workstation-RHSCL-2.4:rh-mysql57-mysql-test-0:5.7.19-6.el6.x86_64",
            "7Server-RHSCL-2.4-7.3.Z:rh-mysql57-mysql-0:5.7.19-6.el7.src",
            "7Server-RHSCL-2.4-7.3.Z:rh-mysql57-mysql-0:5.7.19-6.el7.x86_64",
            "7Server-RHSCL-2.4-7.3.Z:rh-mysql57-mysql-common-0:5.7.19-6.el7.x86_64",
            "7Server-RHSCL-2.4-7.3.Z:rh-mysql57-mysql-config-0:5.7.19-6.el7.x86_64",
            "7Server-RHSCL-2.4-7.3.Z:rh-mysql57-mysql-debuginfo-0:5.7.19-6.el7.x86_64",
            "7Server-RHSCL-2.4-7.3.Z:rh-mysql57-mysql-devel-0:5.7.19-6.el7.x86_64",
            "7Server-RHSCL-2.4-7.3.Z:rh-mysql57-mysql-errmsg-0:5.7.19-6.el7.x86_64",
            "7Server-RHSCL-2.4-7.3.Z:rh-mysql57-mysql-server-0:5.7.19-6.el7.x86_64",
            "7Server-RHSCL-2.4-7.3.Z:rh-mysql57-mysql-test-0:5.7.19-6.el7.x86_64",
            "7Server-RHSCL-2.4:rh-mysql57-mysql-0:5.7.19-6.el7.src",
            "7Server-RHSCL-2.4:rh-mysql57-mysql-0:5.7.19-6.el7.x86_64",
            "7Server-RHSCL-2.4:rh-mysql57-mysql-common-0:5.7.19-6.el7.x86_64",
            "7Server-RHSCL-2.4:rh-mysql57-mysql-config-0:5.7.19-6.el7.x86_64",
            "7Server-RHSCL-2.4:rh-mysql57-mysql-debuginfo-0:5.7.19-6.el7.x86_64",
            "7Server-RHSCL-2.4:rh-mysql57-mysql-devel-0:5.7.19-6.el7.x86_64",
            "7Server-RHSCL-2.4:rh-mysql57-mysql-errmsg-0:5.7.19-6.el7.x86_64",
            "7Server-RHSCL-2.4:rh-mysql57-mysql-server-0:5.7.19-6.el7.x86_64",
            "7Server-RHSCL-2.4:rh-mysql57-mysql-test-0:5.7.19-6.el7.x86_64",
            "7Workstation-RHSCL-2.4:rh-mysql57-mysql-0:5.7.19-6.el7.src",
            "7Workstation-RHSCL-2.4:rh-mysql57-mysql-0:5.7.19-6.el7.x86_64",
            "7Workstation-RHSCL-2.4:rh-mysql57-mysql-common-0:5.7.19-6.el7.x86_64",
            "7Workstation-RHSCL-2.4:rh-mysql57-mysql-config-0:5.7.19-6.el7.x86_64",
            "7Workstation-RHSCL-2.4:rh-mysql57-mysql-debuginfo-0:5.7.19-6.el7.x86_64",
            "7Workstation-RHSCL-2.4:rh-mysql57-mysql-devel-0:5.7.19-6.el7.x86_64",
            "7Workstation-RHSCL-2.4:rh-mysql57-mysql-errmsg-0:5.7.19-6.el7.x86_64",
            "7Workstation-RHSCL-2.4:rh-mysql57-mysql-server-0:5.7.19-6.el7.x86_64",
            "7Workstation-RHSCL-2.4:rh-mysql57-mysql-test-0:5.7.19-6.el7.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Moderate"
        }
      ],
      "title": "mysql: insecure error log file handling in mysqld_safe, incomplete CVE-2016-6664 fix (CPU Jan 2017)"
    },
    {
      "cve": "CVE-2017-3313",
      "discovery_date": "2017-01-18T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "1414353"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: MyISAM). Supported versions that are affected are 5.5.53 and earlier, 5.6.34 and earlier and 5.7.16 and earlier. Difficult to exploit vulnerability allows low privileged attacker with logon to the infrastructure where MySQL Server executes to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all MySQL Server accessible data. CVSS v3.0 Base Score 4.7 (Confidentiality impacts).",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "mysql: Server: MyISAM unspecified vulnerability (CPU Jan 2017)",
          "title": "Vulnerability summary"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "6Server-RHSCL-2.4-6.7.Z:rh-mysql57-mysql-0:5.7.19-6.el6.src",
          "6Server-RHSCL-2.4-6.7.Z:rh-mysql57-mysql-0:5.7.19-6.el6.x86_64",
          "6Server-RHSCL-2.4-6.7.Z:rh-mysql57-mysql-common-0:5.7.19-6.el6.x86_64",
          "6Server-RHSCL-2.4-6.7.Z:rh-mysql57-mysql-config-0:5.7.19-6.el6.x86_64",
          "6Server-RHSCL-2.4-6.7.Z:rh-mysql57-mysql-debuginfo-0:5.7.19-6.el6.x86_64",
          "6Server-RHSCL-2.4-6.7.Z:rh-mysql57-mysql-devel-0:5.7.19-6.el6.x86_64",
          "6Server-RHSCL-2.4-6.7.Z:rh-mysql57-mysql-errmsg-0:5.7.19-6.el6.x86_64",
          "6Server-RHSCL-2.4-6.7.Z:rh-mysql57-mysql-server-0:5.7.19-6.el6.x86_64",
          "6Server-RHSCL-2.4-6.7.Z:rh-mysql57-mysql-test-0:5.7.19-6.el6.x86_64",
          "6Server-RHSCL-2.4:rh-mysql57-mysql-0:5.7.19-6.el6.src",
          "6Server-RHSCL-2.4:rh-mysql57-mysql-0:5.7.19-6.el6.x86_64",
          "6Server-RHSCL-2.4:rh-mysql57-mysql-common-0:5.7.19-6.el6.x86_64",
          "6Server-RHSCL-2.4:rh-mysql57-mysql-config-0:5.7.19-6.el6.x86_64",
          "6Server-RHSCL-2.4:rh-mysql57-mysql-debuginfo-0:5.7.19-6.el6.x86_64",
          "6Server-RHSCL-2.4:rh-mysql57-mysql-devel-0:5.7.19-6.el6.x86_64",
          "6Server-RHSCL-2.4:rh-mysql57-mysql-errmsg-0:5.7.19-6.el6.x86_64",
          "6Server-RHSCL-2.4:rh-mysql57-mysql-server-0:5.7.19-6.el6.x86_64",
          "6Server-RHSCL-2.4:rh-mysql57-mysql-test-0:5.7.19-6.el6.x86_64",
          "6Workstation-RHSCL-2.4:rh-mysql57-mysql-0:5.7.19-6.el6.src",
          "6Workstation-RHSCL-2.4:rh-mysql57-mysql-0:5.7.19-6.el6.x86_64",
          "6Workstation-RHSCL-2.4:rh-mysql57-mysql-common-0:5.7.19-6.el6.x86_64",
          "6Workstation-RHSCL-2.4:rh-mysql57-mysql-config-0:5.7.19-6.el6.x86_64",
          "6Workstation-RHSCL-2.4:rh-mysql57-mysql-debuginfo-0:5.7.19-6.el6.x86_64",
          "6Workstation-RHSCL-2.4:rh-mysql57-mysql-devel-0:5.7.19-6.el6.x86_64",
          "6Workstation-RHSCL-2.4:rh-mysql57-mysql-errmsg-0:5.7.19-6.el6.x86_64",
          "6Workstation-RHSCL-2.4:rh-mysql57-mysql-server-0:5.7.19-6.el6.x86_64",
          "6Workstation-RHSCL-2.4:rh-mysql57-mysql-test-0:5.7.19-6.el6.x86_64",
          "7Server-RHSCL-2.4-7.3.Z:rh-mysql57-mysql-0:5.7.19-6.el7.src",
          "7Server-RHSCL-2.4-7.3.Z:rh-mysql57-mysql-0:5.7.19-6.el7.x86_64",
          "7Server-RHSCL-2.4-7.3.Z:rh-mysql57-mysql-common-0:5.7.19-6.el7.x86_64",
          "7Server-RHSCL-2.4-7.3.Z:rh-mysql57-mysql-config-0:5.7.19-6.el7.x86_64",
          "7Server-RHSCL-2.4-7.3.Z:rh-mysql57-mysql-debuginfo-0:5.7.19-6.el7.x86_64",
          "7Server-RHSCL-2.4-7.3.Z:rh-mysql57-mysql-devel-0:5.7.19-6.el7.x86_64",
          "7Server-RHSCL-2.4-7.3.Z:rh-mysql57-mysql-errmsg-0:5.7.19-6.el7.x86_64",
          "7Server-RHSCL-2.4-7.3.Z:rh-mysql57-mysql-server-0:5.7.19-6.el7.x86_64",
          "7Server-RHSCL-2.4-7.3.Z:rh-mysql57-mysql-test-0:5.7.19-6.el7.x86_64",
          "7Server-RHSCL-2.4:rh-mysql57-mysql-0:5.7.19-6.el7.src",
          "7Server-RHSCL-2.4:rh-mysql57-mysql-0:5.7.19-6.el7.x86_64",
          "7Server-RHSCL-2.4:rh-mysql57-mysql-common-0:5.7.19-6.el7.x86_64",
          "7Server-RHSCL-2.4:rh-mysql57-mysql-config-0:5.7.19-6.el7.x86_64",
          "7Server-RHSCL-2.4:rh-mysql57-mysql-debuginfo-0:5.7.19-6.el7.x86_64",
          "7Server-RHSCL-2.4:rh-mysql57-mysql-devel-0:5.7.19-6.el7.x86_64",
          "7Server-RHSCL-2.4:rh-mysql57-mysql-errmsg-0:5.7.19-6.el7.x86_64",
          "7Server-RHSCL-2.4:rh-mysql57-mysql-server-0:5.7.19-6.el7.x86_64",
          "7Server-RHSCL-2.4:rh-mysql57-mysql-test-0:5.7.19-6.el7.x86_64",
          "7Workstation-RHSCL-2.4:rh-mysql57-mysql-0:5.7.19-6.el7.src",
          "7Workstation-RHSCL-2.4:rh-mysql57-mysql-0:5.7.19-6.el7.x86_64",
          "7Workstation-RHSCL-2.4:rh-mysql57-mysql-common-0:5.7.19-6.el7.x86_64",
          "7Workstation-RHSCL-2.4:rh-mysql57-mysql-config-0:5.7.19-6.el7.x86_64",
          "7Workstation-RHSCL-2.4:rh-mysql57-mysql-debuginfo-0:5.7.19-6.el7.x86_64",
          "7Workstation-RHSCL-2.4:rh-mysql57-mysql-devel-0:5.7.19-6.el7.x86_64",
          "7Workstation-RHSCL-2.4:rh-mysql57-mysql-errmsg-0:5.7.19-6.el7.x86_64",
          "7Workstation-RHSCL-2.4:rh-mysql57-mysql-server-0:5.7.19-6.el7.x86_64",
          "7Workstation-RHSCL-2.4:rh-mysql57-mysql-test-0:5.7.19-6.el7.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2017-3313"
        },
        {
          "category": "external",
          "summary": "RHBZ#1414353",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1414353"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2017-3313",
          "url": "https://www.cve.org/CVERecord?id=CVE-2017-3313"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2017-3313",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2017-3313"
        },
        {
          "category": "external",
          "summary": "http://www.oracle.com/technetwork/security-advisory/cpujan2017-2881727.html#AppendixMSQL",
          "url": "http://www.oracle.com/technetwork/security-advisory/cpujan2017-2881727.html#AppendixMSQL"
        }
      ],
      "release_date": "2017-01-18T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2017-10-12T07:53:15+00:00",
          "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAfter installing this update, the MySQL server daemon (mysqld) will be restarted automatically.",
          "product_ids": [
            "6Server-RHSCL-2.4-6.7.Z:rh-mysql57-mysql-0:5.7.19-6.el6.src",
            "6Server-RHSCL-2.4-6.7.Z:rh-mysql57-mysql-0:5.7.19-6.el6.x86_64",
            "6Server-RHSCL-2.4-6.7.Z:rh-mysql57-mysql-common-0:5.7.19-6.el6.x86_64",
            "6Server-RHSCL-2.4-6.7.Z:rh-mysql57-mysql-config-0:5.7.19-6.el6.x86_64",
            "6Server-RHSCL-2.4-6.7.Z:rh-mysql57-mysql-debuginfo-0:5.7.19-6.el6.x86_64",
            "6Server-RHSCL-2.4-6.7.Z:rh-mysql57-mysql-devel-0:5.7.19-6.el6.x86_64",
            "6Server-RHSCL-2.4-6.7.Z:rh-mysql57-mysql-errmsg-0:5.7.19-6.el6.x86_64",
            "6Server-RHSCL-2.4-6.7.Z:rh-mysql57-mysql-server-0:5.7.19-6.el6.x86_64",
            "6Server-RHSCL-2.4-6.7.Z:rh-mysql57-mysql-test-0:5.7.19-6.el6.x86_64",
            "6Server-RHSCL-2.4:rh-mysql57-mysql-0:5.7.19-6.el6.src",
            "6Server-RHSCL-2.4:rh-mysql57-mysql-0:5.7.19-6.el6.x86_64",
            "6Server-RHSCL-2.4:rh-mysql57-mysql-common-0:5.7.19-6.el6.x86_64",
            "6Server-RHSCL-2.4:rh-mysql57-mysql-config-0:5.7.19-6.el6.x86_64",
            "6Server-RHSCL-2.4:rh-mysql57-mysql-debuginfo-0:5.7.19-6.el6.x86_64",
            "6Server-RHSCL-2.4:rh-mysql57-mysql-devel-0:5.7.19-6.el6.x86_64",
            "6Server-RHSCL-2.4:rh-mysql57-mysql-errmsg-0:5.7.19-6.el6.x86_64",
            "6Server-RHSCL-2.4:rh-mysql57-mysql-server-0:5.7.19-6.el6.x86_64",
            "6Server-RHSCL-2.4:rh-mysql57-mysql-test-0:5.7.19-6.el6.x86_64",
            "6Workstation-RHSCL-2.4:rh-mysql57-mysql-0:5.7.19-6.el6.src",
            "6Workstation-RHSCL-2.4:rh-mysql57-mysql-0:5.7.19-6.el6.x86_64",
            "6Workstation-RHSCL-2.4:rh-mysql57-mysql-common-0:5.7.19-6.el6.x86_64",
            "6Workstation-RHSCL-2.4:rh-mysql57-mysql-config-0:5.7.19-6.el6.x86_64",
            "6Workstation-RHSCL-2.4:rh-mysql57-mysql-debuginfo-0:5.7.19-6.el6.x86_64",
            "6Workstation-RHSCL-2.4:rh-mysql57-mysql-devel-0:5.7.19-6.el6.x86_64",
            "6Workstation-RHSCL-2.4:rh-mysql57-mysql-errmsg-0:5.7.19-6.el6.x86_64",
            "6Workstation-RHSCL-2.4:rh-mysql57-mysql-server-0:5.7.19-6.el6.x86_64",
            "6Workstation-RHSCL-2.4:rh-mysql57-mysql-test-0:5.7.19-6.el6.x86_64",
            "7Server-RHSCL-2.4-7.3.Z:rh-mysql57-mysql-0:5.7.19-6.el7.src",
            "7Server-RHSCL-2.4-7.3.Z:rh-mysql57-mysql-0:5.7.19-6.el7.x86_64",
            "7Server-RHSCL-2.4-7.3.Z:rh-mysql57-mysql-common-0:5.7.19-6.el7.x86_64",
            "7Server-RHSCL-2.4-7.3.Z:rh-mysql57-mysql-config-0:5.7.19-6.el7.x86_64",
            "7Server-RHSCL-2.4-7.3.Z:rh-mysql57-mysql-debuginfo-0:5.7.19-6.el7.x86_64",
            "7Server-RHSCL-2.4-7.3.Z:rh-mysql57-mysql-devel-0:5.7.19-6.el7.x86_64",
            "7Server-RHSCL-2.4-7.3.Z:rh-mysql57-mysql-errmsg-0:5.7.19-6.el7.x86_64",
            "7Server-RHSCL-2.4-7.3.Z:rh-mysql57-mysql-server-0:5.7.19-6.el7.x86_64",
            "7Server-RHSCL-2.4-7.3.Z:rh-mysql57-mysql-test-0:5.7.19-6.el7.x86_64",
            "7Server-RHSCL-2.4:rh-mysql57-mysql-0:5.7.19-6.el7.src",
            "7Server-RHSCL-2.4:rh-mysql57-mysql-0:5.7.19-6.el7.x86_64",
            "7Server-RHSCL-2.4:rh-mysql57-mysql-common-0:5.7.19-6.el7.x86_64",
            "7Server-RHSCL-2.4:rh-mysql57-mysql-config-0:5.7.19-6.el7.x86_64",
            "7Server-RHSCL-2.4:rh-mysql57-mysql-debuginfo-0:5.7.19-6.el7.x86_64",
            "7Server-RHSCL-2.4:rh-mysql57-mysql-devel-0:5.7.19-6.el7.x86_64",
            "7Server-RHSCL-2.4:rh-mysql57-mysql-errmsg-0:5.7.19-6.el7.x86_64",
            "7Server-RHSCL-2.4:rh-mysql57-mysql-server-0:5.7.19-6.el7.x86_64",
            "7Server-RHSCL-2.4:rh-mysql57-mysql-test-0:5.7.19-6.el7.x86_64",
            "7Workstation-RHSCL-2.4:rh-mysql57-mysql-0:5.7.19-6.el7.src",
            "7Workstation-RHSCL-2.4:rh-mysql57-mysql-0:5.7.19-6.el7.x86_64",
            "7Workstation-RHSCL-2.4:rh-mysql57-mysql-common-0:5.7.19-6.el7.x86_64",
            "7Workstation-RHSCL-2.4:rh-mysql57-mysql-config-0:5.7.19-6.el7.x86_64",
            "7Workstation-RHSCL-2.4:rh-mysql57-mysql-debuginfo-0:5.7.19-6.el7.x86_64",
            "7Workstation-RHSCL-2.4:rh-mysql57-mysql-devel-0:5.7.19-6.el7.x86_64",
            "7Workstation-RHSCL-2.4:rh-mysql57-mysql-errmsg-0:5.7.19-6.el7.x86_64",
            "7Workstation-RHSCL-2.4:rh-mysql57-mysql-server-0:5.7.19-6.el7.x86_64",
            "7Workstation-RHSCL-2.4:rh-mysql57-mysql-test-0:5.7.19-6.el7.x86_64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2017:2886"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "HIGH",
            "attackVector": "LOCAL",
            "availabilityImpact": "NONE",
            "baseScore": 4.7,
            "baseSeverity": "MEDIUM",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "NONE",
            "privilegesRequired": "LOW",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N",
            "version": "3.0"
          },
          "products": [
            "6Server-RHSCL-2.4-6.7.Z:rh-mysql57-mysql-0:5.7.19-6.el6.src",
            "6Server-RHSCL-2.4-6.7.Z:rh-mysql57-mysql-0:5.7.19-6.el6.x86_64",
            "6Server-RHSCL-2.4-6.7.Z:rh-mysql57-mysql-common-0:5.7.19-6.el6.x86_64",
            "6Server-RHSCL-2.4-6.7.Z:rh-mysql57-mysql-config-0:5.7.19-6.el6.x86_64",
            "6Server-RHSCL-2.4-6.7.Z:rh-mysql57-mysql-debuginfo-0:5.7.19-6.el6.x86_64",
            "6Server-RHSCL-2.4-6.7.Z:rh-mysql57-mysql-devel-0:5.7.19-6.el6.x86_64",
            "6Server-RHSCL-2.4-6.7.Z:rh-mysql57-mysql-errmsg-0:5.7.19-6.el6.x86_64",
            "6Server-RHSCL-2.4-6.7.Z:rh-mysql57-mysql-server-0:5.7.19-6.el6.x86_64",
            "6Server-RHSCL-2.4-6.7.Z:rh-mysql57-mysql-test-0:5.7.19-6.el6.x86_64",
            "6Server-RHSCL-2.4:rh-mysql57-mysql-0:5.7.19-6.el6.src",
            "6Server-RHSCL-2.4:rh-mysql57-mysql-0:5.7.19-6.el6.x86_64",
            "6Server-RHSCL-2.4:rh-mysql57-mysql-common-0:5.7.19-6.el6.x86_64",
            "6Server-RHSCL-2.4:rh-mysql57-mysql-config-0:5.7.19-6.el6.x86_64",
            "6Server-RHSCL-2.4:rh-mysql57-mysql-debuginfo-0:5.7.19-6.el6.x86_64",
            "6Server-RHSCL-2.4:rh-mysql57-mysql-devel-0:5.7.19-6.el6.x86_64",
            "6Server-RHSCL-2.4:rh-mysql57-mysql-errmsg-0:5.7.19-6.el6.x86_64",
            "6Server-RHSCL-2.4:rh-mysql57-mysql-server-0:5.7.19-6.el6.x86_64",
            "6Server-RHSCL-2.4:rh-mysql57-mysql-test-0:5.7.19-6.el6.x86_64",
            "6Workstation-RHSCL-2.4:rh-mysql57-mysql-0:5.7.19-6.el6.src",
            "6Workstation-RHSCL-2.4:rh-mysql57-mysql-0:5.7.19-6.el6.x86_64",
            "6Workstation-RHSCL-2.4:rh-mysql57-mysql-common-0:5.7.19-6.el6.x86_64",
            "6Workstation-RHSCL-2.4:rh-mysql57-mysql-config-0:5.7.19-6.el6.x86_64",
            "6Workstation-RHSCL-2.4:rh-mysql57-mysql-debuginfo-0:5.7.19-6.el6.x86_64",
            "6Workstation-RHSCL-2.4:rh-mysql57-mysql-devel-0:5.7.19-6.el6.x86_64",
            "6Workstation-RHSCL-2.4:rh-mysql57-mysql-errmsg-0:5.7.19-6.el6.x86_64",
            "6Workstation-RHSCL-2.4:rh-mysql57-mysql-server-0:5.7.19-6.el6.x86_64",
            "6Workstation-RHSCL-2.4:rh-mysql57-mysql-test-0:5.7.19-6.el6.x86_64",
            "7Server-RHSCL-2.4-7.3.Z:rh-mysql57-mysql-0:5.7.19-6.el7.src",
            "7Server-RHSCL-2.4-7.3.Z:rh-mysql57-mysql-0:5.7.19-6.el7.x86_64",
            "7Server-RHSCL-2.4-7.3.Z:rh-mysql57-mysql-common-0:5.7.19-6.el7.x86_64",
            "7Server-RHSCL-2.4-7.3.Z:rh-mysql57-mysql-config-0:5.7.19-6.el7.x86_64",
            "7Server-RHSCL-2.4-7.3.Z:rh-mysql57-mysql-debuginfo-0:5.7.19-6.el7.x86_64",
            "7Server-RHSCL-2.4-7.3.Z:rh-mysql57-mysql-devel-0:5.7.19-6.el7.x86_64",
            "7Server-RHSCL-2.4-7.3.Z:rh-mysql57-mysql-errmsg-0:5.7.19-6.el7.x86_64",
            "7Server-RHSCL-2.4-7.3.Z:rh-mysql57-mysql-server-0:5.7.19-6.el7.x86_64",
            "7Server-RHSCL-2.4-7.3.Z:rh-mysql57-mysql-test-0:5.7.19-6.el7.x86_64",
            "7Server-RHSCL-2.4:rh-mysql57-mysql-0:5.7.19-6.el7.src",
            "7Server-RHSCL-2.4:rh-mysql57-mysql-0:5.7.19-6.el7.x86_64",
            "7Server-RHSCL-2.4:rh-mysql57-mysql-common-0:5.7.19-6.el7.x86_64",
            "7Server-RHSCL-2.4:rh-mysql57-mysql-config-0:5.7.19-6.el7.x86_64",
            "7Server-RHSCL-2.4:rh-mysql57-mysql-debuginfo-0:5.7.19-6.el7.x86_64",
            "7Server-RHSCL-2.4:rh-mysql57-mysql-devel-0:5.7.19-6.el7.x86_64",
            "7Server-RHSCL-2.4:rh-mysql57-mysql-errmsg-0:5.7.19-6.el7.x86_64",
            "7Server-RHSCL-2.4:rh-mysql57-mysql-server-0:5.7.19-6.el7.x86_64",
            "7Server-RHSCL-2.4:rh-mysql57-mysql-test-0:5.7.19-6.el7.x86_64",
            "7Workstation-RHSCL-2.4:rh-mysql57-mysql-0:5.7.19-6.el7.src",
            "7Workstation-RHSCL-2.4:rh-mysql57-mysql-0:5.7.19-6.el7.x86_64",
            "7Workstation-RHSCL-2.4:rh-mysql57-mysql-common-0:5.7.19-6.el7.x86_64",
            "7Workstation-RHSCL-2.4:rh-mysql57-mysql-config-0:5.7.19-6.el7.x86_64",
            "7Workstation-RHSCL-2.4:rh-mysql57-mysql-debuginfo-0:5.7.19-6.el7.x86_64",
            "7Workstation-RHSCL-2.4:rh-mysql57-mysql-devel-0:5.7.19-6.el7.x86_64",
            "7Workstation-RHSCL-2.4:rh-mysql57-mysql-errmsg-0:5.7.19-6.el7.x86_64",
            "7Workstation-RHSCL-2.4:rh-mysql57-mysql-server-0:5.7.19-6.el7.x86_64",
            "7Workstation-RHSCL-2.4:rh-mysql57-mysql-test-0:5.7.19-6.el7.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Moderate"
        }
      ],
      "title": "mysql: Server: MyISAM unspecified vulnerability (CPU Jan 2017)"
    },
    {
      "cve": "CVE-2017-3317",
      "discovery_date": "2017-01-18T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "1414355"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Logging). Supported versions that are affected are 5.5.53 and earlier, 5.6.34 and earlier and 5.7.16 and earlier. Difficult to exploit vulnerability allows high privileged attacker with logon to the infrastructure where MySQL Server executes to compromise MySQL Server. Successful attacks require human interaction from a person other than the attacker. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS v3.0 Base Score 4.0 (Availability impacts).",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "mysql: Logging unspecified vulnerability (CPU Jan 2017)",
          "title": "Vulnerability summary"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "6Server-RHSCL-2.4-6.7.Z:rh-mysql57-mysql-0:5.7.19-6.el6.src",
          "6Server-RHSCL-2.4-6.7.Z:rh-mysql57-mysql-0:5.7.19-6.el6.x86_64",
          "6Server-RHSCL-2.4-6.7.Z:rh-mysql57-mysql-common-0:5.7.19-6.el6.x86_64",
          "6Server-RHSCL-2.4-6.7.Z:rh-mysql57-mysql-config-0:5.7.19-6.el6.x86_64",
          "6Server-RHSCL-2.4-6.7.Z:rh-mysql57-mysql-debuginfo-0:5.7.19-6.el6.x86_64",
          "6Server-RHSCL-2.4-6.7.Z:rh-mysql57-mysql-devel-0:5.7.19-6.el6.x86_64",
          "6Server-RHSCL-2.4-6.7.Z:rh-mysql57-mysql-errmsg-0:5.7.19-6.el6.x86_64",
          "6Server-RHSCL-2.4-6.7.Z:rh-mysql57-mysql-server-0:5.7.19-6.el6.x86_64",
          "6Server-RHSCL-2.4-6.7.Z:rh-mysql57-mysql-test-0:5.7.19-6.el6.x86_64",
          "6Server-RHSCL-2.4:rh-mysql57-mysql-0:5.7.19-6.el6.src",
          "6Server-RHSCL-2.4:rh-mysql57-mysql-0:5.7.19-6.el6.x86_64",
          "6Server-RHSCL-2.4:rh-mysql57-mysql-common-0:5.7.19-6.el6.x86_64",
          "6Server-RHSCL-2.4:rh-mysql57-mysql-config-0:5.7.19-6.el6.x86_64",
          "6Server-RHSCL-2.4:rh-mysql57-mysql-debuginfo-0:5.7.19-6.el6.x86_64",
          "6Server-RHSCL-2.4:rh-mysql57-mysql-devel-0:5.7.19-6.el6.x86_64",
          "6Server-RHSCL-2.4:rh-mysql57-mysql-errmsg-0:5.7.19-6.el6.x86_64",
          "6Server-RHSCL-2.4:rh-mysql57-mysql-server-0:5.7.19-6.el6.x86_64",
          "6Server-RHSCL-2.4:rh-mysql57-mysql-test-0:5.7.19-6.el6.x86_64",
          "6Workstation-RHSCL-2.4:rh-mysql57-mysql-0:5.7.19-6.el6.src",
          "6Workstation-RHSCL-2.4:rh-mysql57-mysql-0:5.7.19-6.el6.x86_64",
          "6Workstation-RHSCL-2.4:rh-mysql57-mysql-common-0:5.7.19-6.el6.x86_64",
          "6Workstation-RHSCL-2.4:rh-mysql57-mysql-config-0:5.7.19-6.el6.x86_64",
          "6Workstation-RHSCL-2.4:rh-mysql57-mysql-debuginfo-0:5.7.19-6.el6.x86_64",
          "6Workstation-RHSCL-2.4:rh-mysql57-mysql-devel-0:5.7.19-6.el6.x86_64",
          "6Workstation-RHSCL-2.4:rh-mysql57-mysql-errmsg-0:5.7.19-6.el6.x86_64",
          "6Workstation-RHSCL-2.4:rh-mysql57-mysql-server-0:5.7.19-6.el6.x86_64",
          "6Workstation-RHSCL-2.4:rh-mysql57-mysql-test-0:5.7.19-6.el6.x86_64",
          "7Server-RHSCL-2.4-7.3.Z:rh-mysql57-mysql-0:5.7.19-6.el7.src",
          "7Server-RHSCL-2.4-7.3.Z:rh-mysql57-mysql-0:5.7.19-6.el7.x86_64",
          "7Server-RHSCL-2.4-7.3.Z:rh-mysql57-mysql-common-0:5.7.19-6.el7.x86_64",
          "7Server-RHSCL-2.4-7.3.Z:rh-mysql57-mysql-config-0:5.7.19-6.el7.x86_64",
          "7Server-RHSCL-2.4-7.3.Z:rh-mysql57-mysql-debuginfo-0:5.7.19-6.el7.x86_64",
          "7Server-RHSCL-2.4-7.3.Z:rh-mysql57-mysql-devel-0:5.7.19-6.el7.x86_64",
          "7Server-RHSCL-2.4-7.3.Z:rh-mysql57-mysql-errmsg-0:5.7.19-6.el7.x86_64",
          "7Server-RHSCL-2.4-7.3.Z:rh-mysql57-mysql-server-0:5.7.19-6.el7.x86_64",
          "7Server-RHSCL-2.4-7.3.Z:rh-mysql57-mysql-test-0:5.7.19-6.el7.x86_64",
          "7Server-RHSCL-2.4:rh-mysql57-mysql-0:5.7.19-6.el7.src",
          "7Server-RHSCL-2.4:rh-mysql57-mysql-0:5.7.19-6.el7.x86_64",
          "7Server-RHSCL-2.4:rh-mysql57-mysql-common-0:5.7.19-6.el7.x86_64",
          "7Server-RHSCL-2.4:rh-mysql57-mysql-config-0:5.7.19-6.el7.x86_64",
          "7Server-RHSCL-2.4:rh-mysql57-mysql-debuginfo-0:5.7.19-6.el7.x86_64",
          "7Server-RHSCL-2.4:rh-mysql57-mysql-devel-0:5.7.19-6.el7.x86_64",
          "7Server-RHSCL-2.4:rh-mysql57-mysql-errmsg-0:5.7.19-6.el7.x86_64",
          "7Server-RHSCL-2.4:rh-mysql57-mysql-server-0:5.7.19-6.el7.x86_64",
          "7Server-RHSCL-2.4:rh-mysql57-mysql-test-0:5.7.19-6.el7.x86_64",
          "7Workstation-RHSCL-2.4:rh-mysql57-mysql-0:5.7.19-6.el7.src",
          "7Workstation-RHSCL-2.4:rh-mysql57-mysql-0:5.7.19-6.el7.x86_64",
          "7Workstation-RHSCL-2.4:rh-mysql57-mysql-common-0:5.7.19-6.el7.x86_64",
          "7Workstation-RHSCL-2.4:rh-mysql57-mysql-config-0:5.7.19-6.el7.x86_64",
          "7Workstation-RHSCL-2.4:rh-mysql57-mysql-debuginfo-0:5.7.19-6.el7.x86_64",
          "7Workstation-RHSCL-2.4:rh-mysql57-mysql-devel-0:5.7.19-6.el7.x86_64",
          "7Workstation-RHSCL-2.4:rh-mysql57-mysql-errmsg-0:5.7.19-6.el7.x86_64",
          "7Workstation-RHSCL-2.4:rh-mysql57-mysql-server-0:5.7.19-6.el7.x86_64",
          "7Workstation-RHSCL-2.4:rh-mysql57-mysql-test-0:5.7.19-6.el7.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2017-3317"
        },
        {
          "category": "external",
          "summary": "RHBZ#1414355",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1414355"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2017-3317",
          "url": "https://www.cve.org/CVERecord?id=CVE-2017-3317"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2017-3317",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2017-3317"
        },
        {
          "category": "external",
          "summary": "http://www.oracle.com/technetwork/security-advisory/cpujan2017-2881727.html#AppendixMSQL",
          "url": "http://www.oracle.com/technetwork/security-advisory/cpujan2017-2881727.html#AppendixMSQL"
        }
      ],
      "release_date": "2017-01-18T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2017-10-12T07:53:15+00:00",
          "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAfter installing this update, the MySQL server daemon (mysqld) will be restarted automatically.",
          "product_ids": [
            "6Server-RHSCL-2.4-6.7.Z:rh-mysql57-mysql-0:5.7.19-6.el6.src",
            "6Server-RHSCL-2.4-6.7.Z:rh-mysql57-mysql-0:5.7.19-6.el6.x86_64",
            "6Server-RHSCL-2.4-6.7.Z:rh-mysql57-mysql-common-0:5.7.19-6.el6.x86_64",
            "6Server-RHSCL-2.4-6.7.Z:rh-mysql57-mysql-config-0:5.7.19-6.el6.x86_64",
            "6Server-RHSCL-2.4-6.7.Z:rh-mysql57-mysql-debuginfo-0:5.7.19-6.el6.x86_64",
            "6Server-RHSCL-2.4-6.7.Z:rh-mysql57-mysql-devel-0:5.7.19-6.el6.x86_64",
            "6Server-RHSCL-2.4-6.7.Z:rh-mysql57-mysql-errmsg-0:5.7.19-6.el6.x86_64",
            "6Server-RHSCL-2.4-6.7.Z:rh-mysql57-mysql-server-0:5.7.19-6.el6.x86_64",
            "6Server-RHSCL-2.4-6.7.Z:rh-mysql57-mysql-test-0:5.7.19-6.el6.x86_64",
            "6Server-RHSCL-2.4:rh-mysql57-mysql-0:5.7.19-6.el6.src",
            "6Server-RHSCL-2.4:rh-mysql57-mysql-0:5.7.19-6.el6.x86_64",
            "6Server-RHSCL-2.4:rh-mysql57-mysql-common-0:5.7.19-6.el6.x86_64",
            "6Server-RHSCL-2.4:rh-mysql57-mysql-config-0:5.7.19-6.el6.x86_64",
            "6Server-RHSCL-2.4:rh-mysql57-mysql-debuginfo-0:5.7.19-6.el6.x86_64",
            "6Server-RHSCL-2.4:rh-mysql57-mysql-devel-0:5.7.19-6.el6.x86_64",
            "6Server-RHSCL-2.4:rh-mysql57-mysql-errmsg-0:5.7.19-6.el6.x86_64",
            "6Server-RHSCL-2.4:rh-mysql57-mysql-server-0:5.7.19-6.el6.x86_64",
            "6Server-RHSCL-2.4:rh-mysql57-mysql-test-0:5.7.19-6.el6.x86_64",
            "6Workstation-RHSCL-2.4:rh-mysql57-mysql-0:5.7.19-6.el6.src",
            "6Workstation-RHSCL-2.4:rh-mysql57-mysql-0:5.7.19-6.el6.x86_64",
            "6Workstation-RHSCL-2.4:rh-mysql57-mysql-common-0:5.7.19-6.el6.x86_64",
            "6Workstation-RHSCL-2.4:rh-mysql57-mysql-config-0:5.7.19-6.el6.x86_64",
            "6Workstation-RHSCL-2.4:rh-mysql57-mysql-debuginfo-0:5.7.19-6.el6.x86_64",
            "6Workstation-RHSCL-2.4:rh-mysql57-mysql-devel-0:5.7.19-6.el6.x86_64",
            "6Workstation-RHSCL-2.4:rh-mysql57-mysql-errmsg-0:5.7.19-6.el6.x86_64",
            "6Workstation-RHSCL-2.4:rh-mysql57-mysql-server-0:5.7.19-6.el6.x86_64",
            "6Workstation-RHSCL-2.4:rh-mysql57-mysql-test-0:5.7.19-6.el6.x86_64",
            "7Server-RHSCL-2.4-7.3.Z:rh-mysql57-mysql-0:5.7.19-6.el7.src",
            "7Server-RHSCL-2.4-7.3.Z:rh-mysql57-mysql-0:5.7.19-6.el7.x86_64",
            "7Server-RHSCL-2.4-7.3.Z:rh-mysql57-mysql-common-0:5.7.19-6.el7.x86_64",
            "7Server-RHSCL-2.4-7.3.Z:rh-mysql57-mysql-config-0:5.7.19-6.el7.x86_64",
            "7Server-RHSCL-2.4-7.3.Z:rh-mysql57-mysql-debuginfo-0:5.7.19-6.el7.x86_64",
            "7Server-RHSCL-2.4-7.3.Z:rh-mysql57-mysql-devel-0:5.7.19-6.el7.x86_64",
            "7Server-RHSCL-2.4-7.3.Z:rh-mysql57-mysql-errmsg-0:5.7.19-6.el7.x86_64",
            "7Server-RHSCL-2.4-7.3.Z:rh-mysql57-mysql-server-0:5.7.19-6.el7.x86_64",
            "7Server-RHSCL-2.4-7.3.Z:rh-mysql57-mysql-test-0:5.7.19-6.el7.x86_64",
            "7Server-RHSCL-2.4:rh-mysql57-mysql-0:5.7.19-6.el7.src",
            "7Server-RHSCL-2.4:rh-mysql57-mysql-0:5.7.19-6.el7.x86_64",
            "7Server-RHSCL-2.4:rh-mysql57-mysql-common-0:5.7.19-6.el7.x86_64",
            "7Server-RHSCL-2.4:rh-mysql57-mysql-config-0:5.7.19-6.el7.x86_64",
            "7Server-RHSCL-2.4:rh-mysql57-mysql-debuginfo-0:5.7.19-6.el7.x86_64",
            "7Server-RHSCL-2.4:rh-mysql57-mysql-devel-0:5.7.19-6.el7.x86_64",
            "7Server-RHSCL-2.4:rh-mysql57-mysql-errmsg-0:5.7.19-6.el7.x86_64",
            "7Server-RHSCL-2.4:rh-mysql57-mysql-server-0:5.7.19-6.el7.x86_64",
            "7Server-RHSCL-2.4:rh-mysql57-mysql-test-0:5.7.19-6.el7.x86_64",
            "7Workstation-RHSCL-2.4:rh-mysql57-mysql-0:5.7.19-6.el7.src",
            "7Workstation-RHSCL-2.4:rh-mysql57-mysql-0:5.7.19-6.el7.x86_64",
            "7Workstation-RHSCL-2.4:rh-mysql57-mysql-common-0:5.7.19-6.el7.x86_64",
            "7Workstation-RHSCL-2.4:rh-mysql57-mysql-config-0:5.7.19-6.el7.x86_64",
            "7Workstation-RHSCL-2.4:rh-mysql57-mysql-debuginfo-0:5.7.19-6.el7.x86_64",
            "7Workstation-RHSCL-2.4:rh-mysql57-mysql-devel-0:5.7.19-6.el7.x86_64",
            "7Workstation-RHSCL-2.4:rh-mysql57-mysql-errmsg-0:5.7.19-6.el7.x86_64",
            "7Workstation-RHSCL-2.4:rh-mysql57-mysql-server-0:5.7.19-6.el7.x86_64",
            "7Workstation-RHSCL-2.4:rh-mysql57-mysql-test-0:5.7.19-6.el7.x86_64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2017:2886"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "HIGH",
            "attackVector": "LOCAL",
            "availabilityImpact": "HIGH",
            "baseScore": 4.0,
            "baseSeverity": "MEDIUM",
            "confidentialityImpact": "NONE",
            "integrityImpact": "NONE",
            "privilegesRequired": "HIGH",
            "scope": "UNCHANGED",
            "userInteraction": "REQUIRED",
            "vectorString": "CVSS:3.0/AV:L/AC:H/PR:H/UI:R/S:U/C:N/I:N/A:H",
            "version": "3.0"
          },
          "products": [
            "6Server-RHSCL-2.4-6.7.Z:rh-mysql57-mysql-0:5.7.19-6.el6.src",
            "6Server-RHSCL-2.4-6.7.Z:rh-mysql57-mysql-0:5.7.19-6.el6.x86_64",
            "6Server-RHSCL-2.4-6.7.Z:rh-mysql57-mysql-common-0:5.7.19-6.el6.x86_64",
            "6Server-RHSCL-2.4-6.7.Z:rh-mysql57-mysql-config-0:5.7.19-6.el6.x86_64",
            "6Server-RHSCL-2.4-6.7.Z:rh-mysql57-mysql-debuginfo-0:5.7.19-6.el6.x86_64",
            "6Server-RHSCL-2.4-6.7.Z:rh-mysql57-mysql-devel-0:5.7.19-6.el6.x86_64",
            "6Server-RHSCL-2.4-6.7.Z:rh-mysql57-mysql-errmsg-0:5.7.19-6.el6.x86_64",
            "6Server-RHSCL-2.4-6.7.Z:rh-mysql57-mysql-server-0:5.7.19-6.el6.x86_64",
            "6Server-RHSCL-2.4-6.7.Z:rh-mysql57-mysql-test-0:5.7.19-6.el6.x86_64",
            "6Server-RHSCL-2.4:rh-mysql57-mysql-0:5.7.19-6.el6.src",
            "6Server-RHSCL-2.4:rh-mysql57-mysql-0:5.7.19-6.el6.x86_64",
            "6Server-RHSCL-2.4:rh-mysql57-mysql-common-0:5.7.19-6.el6.x86_64",
            "6Server-RHSCL-2.4:rh-mysql57-mysql-config-0:5.7.19-6.el6.x86_64",
            "6Server-RHSCL-2.4:rh-mysql57-mysql-debuginfo-0:5.7.19-6.el6.x86_64",
            "6Server-RHSCL-2.4:rh-mysql57-mysql-devel-0:5.7.19-6.el6.x86_64",
            "6Server-RHSCL-2.4:rh-mysql57-mysql-errmsg-0:5.7.19-6.el6.x86_64",
            "6Server-RHSCL-2.4:rh-mysql57-mysql-server-0:5.7.19-6.el6.x86_64",
            "6Server-RHSCL-2.4:rh-mysql57-mysql-test-0:5.7.19-6.el6.x86_64",
            "6Workstation-RHSCL-2.4:rh-mysql57-mysql-0:5.7.19-6.el6.src",
            "6Workstation-RHSCL-2.4:rh-mysql57-mysql-0:5.7.19-6.el6.x86_64",
            "6Workstation-RHSCL-2.4:rh-mysql57-mysql-common-0:5.7.19-6.el6.x86_64",
            "6Workstation-RHSCL-2.4:rh-mysql57-mysql-config-0:5.7.19-6.el6.x86_64",
            "6Workstation-RHSCL-2.4:rh-mysql57-mysql-debuginfo-0:5.7.19-6.el6.x86_64",
            "6Workstation-RHSCL-2.4:rh-mysql57-mysql-devel-0:5.7.19-6.el6.x86_64",
            "6Workstation-RHSCL-2.4:rh-mysql57-mysql-errmsg-0:5.7.19-6.el6.x86_64",
            "6Workstation-RHSCL-2.4:rh-mysql57-mysql-server-0:5.7.19-6.el6.x86_64",
            "6Workstation-RHSCL-2.4:rh-mysql57-mysql-test-0:5.7.19-6.el6.x86_64",
            "7Server-RHSCL-2.4-7.3.Z:rh-mysql57-mysql-0:5.7.19-6.el7.src",
            "7Server-RHSCL-2.4-7.3.Z:rh-mysql57-mysql-0:5.7.19-6.el7.x86_64",
            "7Server-RHSCL-2.4-7.3.Z:rh-mysql57-mysql-common-0:5.7.19-6.el7.x86_64",
            "7Server-RHSCL-2.4-7.3.Z:rh-mysql57-mysql-config-0:5.7.19-6.el7.x86_64",
            "7Server-RHSCL-2.4-7.3.Z:rh-mysql57-mysql-debuginfo-0:5.7.19-6.el7.x86_64",
            "7Server-RHSCL-2.4-7.3.Z:rh-mysql57-mysql-devel-0:5.7.19-6.el7.x86_64",
            "7Server-RHSCL-2.4-7.3.Z:rh-mysql57-mysql-errmsg-0:5.7.19-6.el7.x86_64",
            "7Server-RHSCL-2.4-7.3.Z:rh-mysql57-mysql-server-0:5.7.19-6.el7.x86_64",
            "7Server-RHSCL-2.4-7.3.Z:rh-mysql57-mysql-test-0:5.7.19-6.el7.x86_64",
            "7Server-RHSCL-2.4:rh-mysql57-mysql-0:5.7.19-6.el7.src",
            "7Server-RHSCL-2.4:rh-mysql57-mysql-0:5.7.19-6.el7.x86_64",
            "7Server-RHSCL-2.4:rh-mysql57-mysql-common-0:5.7.19-6.el7.x86_64",
            "7Server-RHSCL-2.4:rh-mysql57-mysql-config-0:5.7.19-6.el7.x86_64",
            "7Server-RHSCL-2.4:rh-mysql57-mysql-debuginfo-0:5.7.19-6.el7.x86_64",
            "7Server-RHSCL-2.4:rh-mysql57-mysql-devel-0:5.7.19-6.el7.x86_64",
            "7Server-RHSCL-2.4:rh-mysql57-mysql-errmsg-0:5.7.19-6.el7.x86_64",
            "7Server-RHSCL-2.4:rh-mysql57-mysql-server-0:5.7.19-6.el7.x86_64",
            "7Server-RHSCL-2.4:rh-mysql57-mysql-test-0:5.7.19-6.el7.x86_64",
            "7Workstation-RHSCL-2.4:rh-mysql57-mysql-0:5.7.19-6.el7.src",
            "7Workstation-RHSCL-2.4:rh-mysql57-mysql-0:5.7.19-6.el7.x86_64",
            "7Workstation-RHSCL-2.4:rh-mysql57-mysql-common-0:5.7.19-6.el7.x86_64",
            "7Workstation-RHSCL-2.4:rh-mysql57-mysql-config-0:5.7.19-6.el7.x86_64",
            "7Workstation-RHSCL-2.4:rh-mysql57-mysql-debuginfo-0:5.7.19-6.el7.x86_64",
            "7Workstation-RHSCL-2.4:rh-mysql57-mysql-devel-0:5.7.19-6.el7.x86_64",
            "7Workstation-RHSCL-2.4:rh-mysql57-mysql-errmsg-0:5.7.19-6.el7.x86_64",
            "7Workstation-RHSCL-2.4:rh-mysql57-mysql-server-0:5.7.19-6.el7.x86_64",
            "7Workstation-RHSCL-2.4:rh-mysql57-mysql-test-0:5.7.19-6.el7.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Moderate"
        }
      ],
      "title": "mysql: Logging unspecified vulnerability (CPU Jan 2017)"
    },
    {
      "cve": "CVE-2017-3318",
      "discovery_date": "2017-01-18T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "1414357"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Error Handling). Supported versions that are affected are 5.5.53 and earlier, 5.6.34 and earlier and 5.7.16 and earlier. Difficult to exploit vulnerability allows high privileged attacker with logon to the infrastructure where MySQL Server executes to compromise MySQL Server. Successful attacks require human interaction from a person other than the attacker. Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all MySQL Server accessible data. CVSS v3.0 Base Score 4.0 (Confidentiality impacts).",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "mysql: Server: Error Handling unspecified vulnerability (CPU Jan 2017)",
          "title": "Vulnerability summary"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "6Server-RHSCL-2.4-6.7.Z:rh-mysql57-mysql-0:5.7.19-6.el6.src",
          "6Server-RHSCL-2.4-6.7.Z:rh-mysql57-mysql-0:5.7.19-6.el6.x86_64",
          "6Server-RHSCL-2.4-6.7.Z:rh-mysql57-mysql-common-0:5.7.19-6.el6.x86_64",
          "6Server-RHSCL-2.4-6.7.Z:rh-mysql57-mysql-config-0:5.7.19-6.el6.x86_64",
          "6Server-RHSCL-2.4-6.7.Z:rh-mysql57-mysql-debuginfo-0:5.7.19-6.el6.x86_64",
          "6Server-RHSCL-2.4-6.7.Z:rh-mysql57-mysql-devel-0:5.7.19-6.el6.x86_64",
          "6Server-RHSCL-2.4-6.7.Z:rh-mysql57-mysql-errmsg-0:5.7.19-6.el6.x86_64",
          "6Server-RHSCL-2.4-6.7.Z:rh-mysql57-mysql-server-0:5.7.19-6.el6.x86_64",
          "6Server-RHSCL-2.4-6.7.Z:rh-mysql57-mysql-test-0:5.7.19-6.el6.x86_64",
          "6Server-RHSCL-2.4:rh-mysql57-mysql-0:5.7.19-6.el6.src",
          "6Server-RHSCL-2.4:rh-mysql57-mysql-0:5.7.19-6.el6.x86_64",
          "6Server-RHSCL-2.4:rh-mysql57-mysql-common-0:5.7.19-6.el6.x86_64",
          "6Server-RHSCL-2.4:rh-mysql57-mysql-config-0:5.7.19-6.el6.x86_64",
          "6Server-RHSCL-2.4:rh-mysql57-mysql-debuginfo-0:5.7.19-6.el6.x86_64",
          "6Server-RHSCL-2.4:rh-mysql57-mysql-devel-0:5.7.19-6.el6.x86_64",
          "6Server-RHSCL-2.4:rh-mysql57-mysql-errmsg-0:5.7.19-6.el6.x86_64",
          "6Server-RHSCL-2.4:rh-mysql57-mysql-server-0:5.7.19-6.el6.x86_64",
          "6Server-RHSCL-2.4:rh-mysql57-mysql-test-0:5.7.19-6.el6.x86_64",
          "6Workstation-RHSCL-2.4:rh-mysql57-mysql-0:5.7.19-6.el6.src",
          "6Workstation-RHSCL-2.4:rh-mysql57-mysql-0:5.7.19-6.el6.x86_64",
          "6Workstation-RHSCL-2.4:rh-mysql57-mysql-common-0:5.7.19-6.el6.x86_64",
          "6Workstation-RHSCL-2.4:rh-mysql57-mysql-config-0:5.7.19-6.el6.x86_64",
          "6Workstation-RHSCL-2.4:rh-mysql57-mysql-debuginfo-0:5.7.19-6.el6.x86_64",
          "6Workstation-RHSCL-2.4:rh-mysql57-mysql-devel-0:5.7.19-6.el6.x86_64",
          "6Workstation-RHSCL-2.4:rh-mysql57-mysql-errmsg-0:5.7.19-6.el6.x86_64",
          "6Workstation-RHSCL-2.4:rh-mysql57-mysql-server-0:5.7.19-6.el6.x86_64",
          "6Workstation-RHSCL-2.4:rh-mysql57-mysql-test-0:5.7.19-6.el6.x86_64",
          "7Server-RHSCL-2.4-7.3.Z:rh-mysql57-mysql-0:5.7.19-6.el7.src",
          "7Server-RHSCL-2.4-7.3.Z:rh-mysql57-mysql-0:5.7.19-6.el7.x86_64",
          "7Server-RHSCL-2.4-7.3.Z:rh-mysql57-mysql-common-0:5.7.19-6.el7.x86_64",
          "7Server-RHSCL-2.4-7.3.Z:rh-mysql57-mysql-config-0:5.7.19-6.el7.x86_64",
          "7Server-RHSCL-2.4-7.3.Z:rh-mysql57-mysql-debuginfo-0:5.7.19-6.el7.x86_64",
          "7Server-RHSCL-2.4-7.3.Z:rh-mysql57-mysql-devel-0:5.7.19-6.el7.x86_64",
          "7Server-RHSCL-2.4-7.3.Z:rh-mysql57-mysql-errmsg-0:5.7.19-6.el7.x86_64",
          "7Server-RHSCL-2.4-7.3.Z:rh-mysql57-mysql-server-0:5.7.19-6.el7.x86_64",
          "7Server-RHSCL-2.4-7.3.Z:rh-mysql57-mysql-test-0:5.7.19-6.el7.x86_64",
          "7Server-RHSCL-2.4:rh-mysql57-mysql-0:5.7.19-6.el7.src",
          "7Server-RHSCL-2.4:rh-mysql57-mysql-0:5.7.19-6.el7.x86_64",
          "7Server-RHSCL-2.4:rh-mysql57-mysql-common-0:5.7.19-6.el7.x86_64",
          "7Server-RHSCL-2.4:rh-mysql57-mysql-config-0:5.7.19-6.el7.x86_64",
          "7Server-RHSCL-2.4:rh-mysql57-mysql-debuginfo-0:5.7.19-6.el7.x86_64",
          "7Server-RHSCL-2.4:rh-mysql57-mysql-devel-0:5.7.19-6.el7.x86_64",
          "7Server-RHSCL-2.4:rh-mysql57-mysql-errmsg-0:5.7.19-6.el7.x86_64",
          "7Server-RHSCL-2.4:rh-mysql57-mysql-server-0:5.7.19-6.el7.x86_64",
          "7Server-RHSCL-2.4:rh-mysql57-mysql-test-0:5.7.19-6.el7.x86_64",
          "7Workstation-RHSCL-2.4:rh-mysql57-mysql-0:5.7.19-6.el7.src",
          "7Workstation-RHSCL-2.4:rh-mysql57-mysql-0:5.7.19-6.el7.x86_64",
          "7Workstation-RHSCL-2.4:rh-mysql57-mysql-common-0:5.7.19-6.el7.x86_64",
          "7Workstation-RHSCL-2.4:rh-mysql57-mysql-config-0:5.7.19-6.el7.x86_64",
          "7Workstation-RHSCL-2.4:rh-mysql57-mysql-debuginfo-0:5.7.19-6.el7.x86_64",
          "7Workstation-RHSCL-2.4:rh-mysql57-mysql-devel-0:5.7.19-6.el7.x86_64",
          "7Workstation-RHSCL-2.4:rh-mysql57-mysql-errmsg-0:5.7.19-6.el7.x86_64",
          "7Workstation-RHSCL-2.4:rh-mysql57-mysql-server-0:5.7.19-6.el7.x86_64",
          "7Workstation-RHSCL-2.4:rh-mysql57-mysql-test-0:5.7.19-6.el7.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2017-3318"
        },
        {
          "category": "external",
          "summary": "RHBZ#1414357",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1414357"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2017-3318",
          "url": "https://www.cve.org/CVERecord?id=CVE-2017-3318"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2017-3318",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2017-3318"
        },
        {
          "category": "external",
          "summary": "http://www.oracle.com/technetwork/security-advisory/cpujan2017-2881727.html#AppendixMSQL",
          "url": "http://www.oracle.com/technetwork/security-advisory/cpujan2017-2881727.html#AppendixMSQL"
        }
      ],
      "release_date": "2017-01-18T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2017-10-12T07:53:15+00:00",
          "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAfter installing this update, the MySQL server daemon (mysqld) will be restarted automatically.",
          "product_ids": [
            "6Server-RHSCL-2.4-6.7.Z:rh-mysql57-mysql-0:5.7.19-6.el6.src",
            "6Server-RHSCL-2.4-6.7.Z:rh-mysql57-mysql-0:5.7.19-6.el6.x86_64",
            "6Server-RHSCL-2.4-6.7.Z:rh-mysql57-mysql-common-0:5.7.19-6.el6.x86_64",
            "6Server-RHSCL-2.4-6.7.Z:rh-mysql57-mysql-config-0:5.7.19-6.el6.x86_64",
            "6Server-RHSCL-2.4-6.7.Z:rh-mysql57-mysql-debuginfo-0:5.7.19-6.el6.x86_64",
            "6Server-RHSCL-2.4-6.7.Z:rh-mysql57-mysql-devel-0:5.7.19-6.el6.x86_64",
            "6Server-RHSCL-2.4-6.7.Z:rh-mysql57-mysql-errmsg-0:5.7.19-6.el6.x86_64",
            "6Server-RHSCL-2.4-6.7.Z:rh-mysql57-mysql-server-0:5.7.19-6.el6.x86_64",
            "6Server-RHSCL-2.4-6.7.Z:rh-mysql57-mysql-test-0:5.7.19-6.el6.x86_64",
            "6Server-RHSCL-2.4:rh-mysql57-mysql-0:5.7.19-6.el6.src",
            "6Server-RHSCL-2.4:rh-mysql57-mysql-0:5.7.19-6.el6.x86_64",
            "6Server-RHSCL-2.4:rh-mysql57-mysql-common-0:5.7.19-6.el6.x86_64",
            "6Server-RHSCL-2.4:rh-mysql57-mysql-config-0:5.7.19-6.el6.x86_64",
            "6Server-RHSCL-2.4:rh-mysql57-mysql-debuginfo-0:5.7.19-6.el6.x86_64",
            "6Server-RHSCL-2.4:rh-mysql57-mysql-devel-0:5.7.19-6.el6.x86_64",
            "6Server-RHSCL-2.4:rh-mysql57-mysql-errmsg-0:5.7.19-6.el6.x86_64",
            "6Server-RHSCL-2.4:rh-mysql57-mysql-server-0:5.7.19-6.el6.x86_64",
            "6Server-RHSCL-2.4:rh-mysql57-mysql-test-0:5.7.19-6.el6.x86_64",
            "6Workstation-RHSCL-2.4:rh-mysql57-mysql-0:5.7.19-6.el6.src",
            "6Workstation-RHSCL-2.4:rh-mysql57-mysql-0:5.7.19-6.el6.x86_64",
            "6Workstation-RHSCL-2.4:rh-mysql57-mysql-common-0:5.7.19-6.el6.x86_64",
            "6Workstation-RHSCL-2.4:rh-mysql57-mysql-config-0:5.7.19-6.el6.x86_64",
            "6Workstation-RHSCL-2.4:rh-mysql57-mysql-debuginfo-0:5.7.19-6.el6.x86_64",
            "6Workstation-RHSCL-2.4:rh-mysql57-mysql-devel-0:5.7.19-6.el6.x86_64",
            "6Workstation-RHSCL-2.4:rh-mysql57-mysql-errmsg-0:5.7.19-6.el6.x86_64",
            "6Workstation-RHSCL-2.4:rh-mysql57-mysql-server-0:5.7.19-6.el6.x86_64",
            "6Workstation-RHSCL-2.4:rh-mysql57-mysql-test-0:5.7.19-6.el6.x86_64",
            "7Server-RHSCL-2.4-7.3.Z:rh-mysql57-mysql-0:5.7.19-6.el7.src",
            "7Server-RHSCL-2.4-7.3.Z:rh-mysql57-mysql-0:5.7.19-6.el7.x86_64",
            "7Server-RHSCL-2.4-7.3.Z:rh-mysql57-mysql-common-0:5.7.19-6.el7.x86_64",
            "7Server-RHSCL-2.4-7.3.Z:rh-mysql57-mysql-config-0:5.7.19-6.el7.x86_64",
            "7Server-RHSCL-2.4-7.3.Z:rh-mysql57-mysql-debuginfo-0:5.7.19-6.el7.x86_64",
            "7Server-RHSCL-2.4-7.3.Z:rh-mysql57-mysql-devel-0:5.7.19-6.el7.x86_64",
            "7Server-RHSCL-2.4-7.3.Z:rh-mysql57-mysql-errmsg-0:5.7.19-6.el7.x86_64",
            "7Server-RHSCL-2.4-7.3.Z:rh-mysql57-mysql-server-0:5.7.19-6.el7.x86_64",
            "7Server-RHSCL-2.4-7.3.Z:rh-mysql57-mysql-test-0:5.7.19-6.el7.x86_64",
            "7Server-RHSCL-2.4:rh-mysql57-mysql-0:5.7.19-6.el7.src",
            "7Server-RHSCL-2.4:rh-mysql57-mysql-0:5.7.19-6.el7.x86_64",
            "7Server-RHSCL-2.4:rh-mysql57-mysql-common-0:5.7.19-6.el7.x86_64",
            "7Server-RHSCL-2.4:rh-mysql57-mysql-config-0:5.7.19-6.el7.x86_64",
            "7Server-RHSCL-2.4:rh-mysql57-mysql-debuginfo-0:5.7.19-6.el7.x86_64",
            "7Server-RHSCL-2.4:rh-mysql57-mysql-devel-0:5.7.19-6.el7.x86_64",
            "7Server-RHSCL-2.4:rh-mysql57-mysql-errmsg-0:5.7.19-6.el7.x86_64",
            "7Server-RHSCL-2.4:rh-mysql57-mysql-server-0:5.7.19-6.el7.x86_64",
            "7Server-RHSCL-2.4:rh-mysql57-mysql-test-0:5.7.19-6.el7.x86_64",
            "7Workstation-RHSCL-2.4:rh-mysql57-mysql-0:5.7.19-6.el7.src",
            "7Workstation-RHSCL-2.4:rh-mysql57-mysql-0:5.7.19-6.el7.x86_64",
            "7Workstation-RHSCL-2.4:rh-mysql57-mysql-common-0:5.7.19-6.el7.x86_64",
            "7Workstation-RHSCL-2.4:rh-mysql57-mysql-config-0:5.7.19-6.el7.x86_64",
            "7Workstation-RHSCL-2.4:rh-mysql57-mysql-debuginfo-0:5.7.19-6.el7.x86_64",
            "7Workstation-RHSCL-2.4:rh-mysql57-mysql-devel-0:5.7.19-6.el7.x86_64",
            "7Workstation-RHSCL-2.4:rh-mysql57-mysql-errmsg-0:5.7.19-6.el7.x86_64",
            "7Workstation-RHSCL-2.4:rh-mysql57-mysql-server-0:5.7.19-6.el7.x86_64",
            "7Workstation-RHSCL-2.4:rh-mysql57-mysql-test-0:5.7.19-6.el7.x86_64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2017:2886"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "HIGH",
            "attackVector": "LOCAL",
            "availabilityImpact": "NONE",
            "baseScore": 4.0,
            "baseSeverity": "MEDIUM",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "NONE",
            "privilegesRequired": "HIGH",
            "scope": "UNCHANGED",
            "userInteraction": "REQUIRED",
            "vectorString": "CVSS:3.0/AV:L/AC:H/PR:H/UI:R/S:U/C:H/I:N/A:N",
            "version": "3.0"
          },
          "products": [
            "6Server-RHSCL-2.4-6.7.Z:rh-mysql57-mysql-0:5.7.19-6.el6.src",
            "6Server-RHSCL-2.4-6.7.Z:rh-mysql57-mysql-0:5.7.19-6.el6.x86_64",
            "6Server-RHSCL-2.4-6.7.Z:rh-mysql57-mysql-common-0:5.7.19-6.el6.x86_64",
            "6Server-RHSCL-2.4-6.7.Z:rh-mysql57-mysql-config-0:5.7.19-6.el6.x86_64",
            "6Server-RHSCL-2.4-6.7.Z:rh-mysql57-mysql-debuginfo-0:5.7.19-6.el6.x86_64",
            "6Server-RHSCL-2.4-6.7.Z:rh-mysql57-mysql-devel-0:5.7.19-6.el6.x86_64",
            "6Server-RHSCL-2.4-6.7.Z:rh-mysql57-mysql-errmsg-0:5.7.19-6.el6.x86_64",
            "6Server-RHSCL-2.4-6.7.Z:rh-mysql57-mysql-server-0:5.7.19-6.el6.x86_64",
            "6Server-RHSCL-2.4-6.7.Z:rh-mysql57-mysql-test-0:5.7.19-6.el6.x86_64",
            "6Server-RHSCL-2.4:rh-mysql57-mysql-0:5.7.19-6.el6.src",
            "6Server-RHSCL-2.4:rh-mysql57-mysql-0:5.7.19-6.el6.x86_64",
            "6Server-RHSCL-2.4:rh-mysql57-mysql-common-0:5.7.19-6.el6.x86_64",
            "6Server-RHSCL-2.4:rh-mysql57-mysql-config-0:5.7.19-6.el6.x86_64",
            "6Server-RHSCL-2.4:rh-mysql57-mysql-debuginfo-0:5.7.19-6.el6.x86_64",
            "6Server-RHSCL-2.4:rh-mysql57-mysql-devel-0:5.7.19-6.el6.x86_64",
            "6Server-RHSCL-2.4:rh-mysql57-mysql-errmsg-0:5.7.19-6.el6.x86_64",
            "6Server-RHSCL-2.4:rh-mysql57-mysql-server-0:5.7.19-6.el6.x86_64",
            "6Server-RHSCL-2.4:rh-mysql57-mysql-test-0:5.7.19-6.el6.x86_64",
            "6Workstation-RHSCL-2.4:rh-mysql57-mysql-0:5.7.19-6.el6.src",
            "6Workstation-RHSCL-2.4:rh-mysql57-mysql-0:5.7.19-6.el6.x86_64",
            "6Workstation-RHSCL-2.4:rh-mysql57-mysql-common-0:5.7.19-6.el6.x86_64",
            "6Workstation-RHSCL-2.4:rh-mysql57-mysql-config-0:5.7.19-6.el6.x86_64",
            "6Workstation-RHSCL-2.4:rh-mysql57-mysql-debuginfo-0:5.7.19-6.el6.x86_64",
            "6Workstation-RHSCL-2.4:rh-mysql57-mysql-devel-0:5.7.19-6.el6.x86_64",
            "6Workstation-RHSCL-2.4:rh-mysql57-mysql-errmsg-0:5.7.19-6.el6.x86_64",
            "6Workstation-RHSCL-2.4:rh-mysql57-mysql-server-0:5.7.19-6.el6.x86_64",
            "6Workstation-RHSCL-2.4:rh-mysql57-mysql-test-0:5.7.19-6.el6.x86_64",
            "7Server-RHSCL-2.4-7.3.Z:rh-mysql57-mysql-0:5.7.19-6.el7.src",
            "7Server-RHSCL-2.4-7.3.Z:rh-mysql57-mysql-0:5.7.19-6.el7.x86_64",
            "7Server-RHSCL-2.4-7.3.Z:rh-mysql57-mysql-common-0:5.7.19-6.el7.x86_64",
            "7Server-RHSCL-2.4-7.3.Z:rh-mysql57-mysql-config-0:5.7.19-6.el7.x86_64",
            "7Server-RHSCL-2.4-7.3.Z:rh-mysql57-mysql-debuginfo-0:5.7.19-6.el7.x86_64",
            "7Server-RHSCL-2.4-7.3.Z:rh-mysql57-mysql-devel-0:5.7.19-6.el7.x86_64",
            "7Server-RHSCL-2.4-7.3.Z:rh-mysql57-mysql-errmsg-0:5.7.19-6.el7.x86_64",
            "7Server-RHSCL-2.4-7.3.Z:rh-mysql57-mysql-server-0:5.7.19-6.el7.x86_64",
            "7Server-RHSCL-2.4-7.3.Z:rh-mysql57-mysql-test-0:5.7.19-6.el7.x86_64",
            "7Server-RHSCL-2.4:rh-mysql57-mysql-0:5.7.19-6.el7.src",
            "7Server-RHSCL-2.4:rh-mysql57-mysql-0:5.7.19-6.el7.x86_64",
            "7Server-RHSCL-2.4:rh-mysql57-mysql-common-0:5.7.19-6.el7.x86_64",
            "7Server-RHSCL-2.4:rh-mysql57-mysql-config-0:5.7.19-6.el7.x86_64",
            "7Server-RHSCL-2.4:rh-mysql57-mysql-debuginfo-0:5.7.19-6.el7.x86_64",
            "7Server-RHSCL-2.4:rh-mysql57-mysql-devel-0:5.7.19-6.el7.x86_64",
            "7Server-RHSCL-2.4:rh-mysql57-mysql-errmsg-0:5.7.19-6.el7.x86_64",
            "7Server-RHSCL-2.4:rh-mysql57-mysql-server-0:5.7.19-6.el7.x86_64",
            "7Server-RHSCL-2.4:rh-mysql57-mysql-test-0:5.7.19-6.el7.x86_64",
            "7Workstation-RHSCL-2.4:rh-mysql57-mysql-0:5.7.19-6.el7.src",
            "7Workstation-RHSCL-2.4:rh-mysql57-mysql-0:5.7.19-6.el7.x86_64",
            "7Workstation-RHSCL-2.4:rh-mysql57-mysql-common-0:5.7.19-6.el7.x86_64",
            "7Workstation-RHSCL-2.4:rh-mysql57-mysql-config-0:5.7.19-6.el7.x86_64",
            "7Workstation-RHSCL-2.4:rh-mysql57-mysql-debuginfo-0:5.7.19-6.el7.x86_64",
            "7Workstation-RHSCL-2.4:rh-mysql57-mysql-devel-0:5.7.19-6.el7.x86_64",
            "7Workstation-RHSCL-2.4:rh-mysql57-mysql-errmsg-0:5.7.19-6.el7.x86_64",
            "7Workstation-RHSCL-2.4:rh-mysql57-mysql-server-0:5.7.19-6.el7.x86_64",
            "7Workstation-RHSCL-2.4:rh-mysql57-mysql-test-0:5.7.19-6.el7.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Moderate"
        }
      ],
      "title": "mysql: Server: Error Handling unspecified vulnerability (CPU Jan 2017)"
    },
    {
      "cve": "CVE-2017-3319",
      "discovery_date": "2017-01-18T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "1414358"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: X Plugin). Supported versions that are affected are 5.7.16 and earlier. Difficult to exploit vulnerability allows low privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized read access to a subset of MySQL Server accessible data. CVSS v3.0 Base Score 3.1 (Confidentiality impacts).",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "mysql: Server: X Plugin  unspecified vulnerability (CPU Jan 2017)",
          "title": "Vulnerability summary"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "6Server-RHSCL-2.4-6.7.Z:rh-mysql57-mysql-0:5.7.19-6.el6.src",
          "6Server-RHSCL-2.4-6.7.Z:rh-mysql57-mysql-0:5.7.19-6.el6.x86_64",
          "6Server-RHSCL-2.4-6.7.Z:rh-mysql57-mysql-common-0:5.7.19-6.el6.x86_64",
          "6Server-RHSCL-2.4-6.7.Z:rh-mysql57-mysql-config-0:5.7.19-6.el6.x86_64",
          "6Server-RHSCL-2.4-6.7.Z:rh-mysql57-mysql-debuginfo-0:5.7.19-6.el6.x86_64",
          "6Server-RHSCL-2.4-6.7.Z:rh-mysql57-mysql-devel-0:5.7.19-6.el6.x86_64",
          "6Server-RHSCL-2.4-6.7.Z:rh-mysql57-mysql-errmsg-0:5.7.19-6.el6.x86_64",
          "6Server-RHSCL-2.4-6.7.Z:rh-mysql57-mysql-server-0:5.7.19-6.el6.x86_64",
          "6Server-RHSCL-2.4-6.7.Z:rh-mysql57-mysql-test-0:5.7.19-6.el6.x86_64",
          "6Server-RHSCL-2.4:rh-mysql57-mysql-0:5.7.19-6.el6.src",
          "6Server-RHSCL-2.4:rh-mysql57-mysql-0:5.7.19-6.el6.x86_64",
          "6Server-RHSCL-2.4:rh-mysql57-mysql-common-0:5.7.19-6.el6.x86_64",
          "6Server-RHSCL-2.4:rh-mysql57-mysql-config-0:5.7.19-6.el6.x86_64",
          "6Server-RHSCL-2.4:rh-mysql57-mysql-debuginfo-0:5.7.19-6.el6.x86_64",
          "6Server-RHSCL-2.4:rh-mysql57-mysql-devel-0:5.7.19-6.el6.x86_64",
          "6Server-RHSCL-2.4:rh-mysql57-mysql-errmsg-0:5.7.19-6.el6.x86_64",
          "6Server-RHSCL-2.4:rh-mysql57-mysql-server-0:5.7.19-6.el6.x86_64",
          "6Server-RHSCL-2.4:rh-mysql57-mysql-test-0:5.7.19-6.el6.x86_64",
          "6Workstation-RHSCL-2.4:rh-mysql57-mysql-0:5.7.19-6.el6.src",
          "6Workstation-RHSCL-2.4:rh-mysql57-mysql-0:5.7.19-6.el6.x86_64",
          "6Workstation-RHSCL-2.4:rh-mysql57-mysql-common-0:5.7.19-6.el6.x86_64",
          "6Workstation-RHSCL-2.4:rh-mysql57-mysql-config-0:5.7.19-6.el6.x86_64",
          "6Workstation-RHSCL-2.4:rh-mysql57-mysql-debuginfo-0:5.7.19-6.el6.x86_64",
          "6Workstation-RHSCL-2.4:rh-mysql57-mysql-devel-0:5.7.19-6.el6.x86_64",
          "6Workstation-RHSCL-2.4:rh-mysql57-mysql-errmsg-0:5.7.19-6.el6.x86_64",
          "6Workstation-RHSCL-2.4:rh-mysql57-mysql-server-0:5.7.19-6.el6.x86_64",
          "6Workstation-RHSCL-2.4:rh-mysql57-mysql-test-0:5.7.19-6.el6.x86_64",
          "7Server-RHSCL-2.4-7.3.Z:rh-mysql57-mysql-0:5.7.19-6.el7.src",
          "7Server-RHSCL-2.4-7.3.Z:rh-mysql57-mysql-0:5.7.19-6.el7.x86_64",
          "7Server-RHSCL-2.4-7.3.Z:rh-mysql57-mysql-common-0:5.7.19-6.el7.x86_64",
          "7Server-RHSCL-2.4-7.3.Z:rh-mysql57-mysql-config-0:5.7.19-6.el7.x86_64",
          "7Server-RHSCL-2.4-7.3.Z:rh-mysql57-mysql-debuginfo-0:5.7.19-6.el7.x86_64",
          "7Server-RHSCL-2.4-7.3.Z:rh-mysql57-mysql-devel-0:5.7.19-6.el7.x86_64",
          "7Server-RHSCL-2.4-7.3.Z:rh-mysql57-mysql-errmsg-0:5.7.19-6.el7.x86_64",
          "7Server-RHSCL-2.4-7.3.Z:rh-mysql57-mysql-server-0:5.7.19-6.el7.x86_64",
          "7Server-RHSCL-2.4-7.3.Z:rh-mysql57-mysql-test-0:5.7.19-6.el7.x86_64",
          "7Server-RHSCL-2.4:rh-mysql57-mysql-0:5.7.19-6.el7.src",
          "7Server-RHSCL-2.4:rh-mysql57-mysql-0:5.7.19-6.el7.x86_64",
          "7Server-RHSCL-2.4:rh-mysql57-mysql-common-0:5.7.19-6.el7.x86_64",
          "7Server-RHSCL-2.4:rh-mysql57-mysql-config-0:5.7.19-6.el7.x86_64",
          "7Server-RHSCL-2.4:rh-mysql57-mysql-debuginfo-0:5.7.19-6.el7.x86_64",
          "7Server-RHSCL-2.4:rh-mysql57-mysql-devel-0:5.7.19-6.el7.x86_64",
          "7Server-RHSCL-2.4:rh-mysql57-mysql-errmsg-0:5.7.19-6.el7.x86_64",
          "7Server-RHSCL-2.4:rh-mysql57-mysql-server-0:5.7.19-6.el7.x86_64",
          "7Server-RHSCL-2.4:rh-mysql57-mysql-test-0:5.7.19-6.el7.x86_64",
          "7Workstation-RHSCL-2.4:rh-mysql57-mysql-0:5.7.19-6.el7.src",
          "7Workstation-RHSCL-2.4:rh-mysql57-mysql-0:5.7.19-6.el7.x86_64",
          "7Workstation-RHSCL-2.4:rh-mysql57-mysql-common-0:5.7.19-6.el7.x86_64",
          "7Workstation-RHSCL-2.4:rh-mysql57-mysql-config-0:5.7.19-6.el7.x86_64",
          "7Workstation-RHSCL-2.4:rh-mysql57-mysql-debuginfo-0:5.7.19-6.el7.x86_64",
          "7Workstation-RHSCL-2.4:rh-mysql57-mysql-devel-0:5.7.19-6.el7.x86_64",
          "7Workstation-RHSCL-2.4:rh-mysql57-mysql-errmsg-0:5.7.19-6.el7.x86_64",
          "7Workstation-RHSCL-2.4:rh-mysql57-mysql-server-0:5.7.19-6.el7.x86_64",
          "7Workstation-RHSCL-2.4:rh-mysql57-mysql-test-0:5.7.19-6.el7.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2017-3319"
        },
        {
          "category": "external",
          "summary": "RHBZ#1414358",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1414358"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2017-3319",
          "url": "https://www.cve.org/CVERecord?id=CVE-2017-3319"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2017-3319",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2017-3319"
        },
        {
          "category": "external",
          "summary": "http://www.oracle.com/technetwork/security-advisory/cpujan2017-2881727.html#AppendixMSQL",
          "url": "http://www.oracle.com/technetwork/security-advisory/cpujan2017-2881727.html#AppendixMSQL"
        }
      ],
      "release_date": "2017-01-18T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2017-10-12T07:53:15+00:00",
          "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAfter installing this update, the MySQL server daemon (mysqld) will be restarted automatically.",
          "product_ids": [
            "6Server-RHSCL-2.4-6.7.Z:rh-mysql57-mysql-0:5.7.19-6.el6.src",
            "6Server-RHSCL-2.4-6.7.Z:rh-mysql57-mysql-0:5.7.19-6.el6.x86_64",
            "6Server-RHSCL-2.4-6.7.Z:rh-mysql57-mysql-common-0:5.7.19-6.el6.x86_64",
            "6Server-RHSCL-2.4-6.7.Z:rh-mysql57-mysql-config-0:5.7.19-6.el6.x86_64",
            "6Server-RHSCL-2.4-6.7.Z:rh-mysql57-mysql-debuginfo-0:5.7.19-6.el6.x86_64",
            "6Server-RHSCL-2.4-6.7.Z:rh-mysql57-mysql-devel-0:5.7.19-6.el6.x86_64",
            "6Server-RHSCL-2.4-6.7.Z:rh-mysql57-mysql-errmsg-0:5.7.19-6.el6.x86_64",
            "6Server-RHSCL-2.4-6.7.Z:rh-mysql57-mysql-server-0:5.7.19-6.el6.x86_64",
            "6Server-RHSCL-2.4-6.7.Z:rh-mysql57-mysql-test-0:5.7.19-6.el6.x86_64",
            "6Server-RHSCL-2.4:rh-mysql57-mysql-0:5.7.19-6.el6.src",
            "6Server-RHSCL-2.4:rh-mysql57-mysql-0:5.7.19-6.el6.x86_64",
            "6Server-RHSCL-2.4:rh-mysql57-mysql-common-0:5.7.19-6.el6.x86_64",
            "6Server-RHSCL-2.4:rh-mysql57-mysql-config-0:5.7.19-6.el6.x86_64",
            "6Server-RHSCL-2.4:rh-mysql57-mysql-debuginfo-0:5.7.19-6.el6.x86_64",
            "6Server-RHSCL-2.4:rh-mysql57-mysql-devel-0:5.7.19-6.el6.x86_64",
            "6Server-RHSCL-2.4:rh-mysql57-mysql-errmsg-0:5.7.19-6.el6.x86_64",
            "6Server-RHSCL-2.4:rh-mysql57-mysql-server-0:5.7.19-6.el6.x86_64",
            "6Server-RHSCL-2.4:rh-mysql57-mysql-test-0:5.7.19-6.el6.x86_64",
            "6Workstation-RHSCL-2.4:rh-mysql57-mysql-0:5.7.19-6.el6.src",
            "6Workstation-RHSCL-2.4:rh-mysql57-mysql-0:5.7.19-6.el6.x86_64",
            "6Workstation-RHSCL-2.4:rh-mysql57-mysql-common-0:5.7.19-6.el6.x86_64",
            "6Workstation-RHSCL-2.4:rh-mysql57-mysql-config-0:5.7.19-6.el6.x86_64",
            "6Workstation-RHSCL-2.4:rh-mysql57-mysql-debuginfo-0:5.7.19-6.el6.x86_64",
            "6Workstation-RHSCL-2.4:rh-mysql57-mysql-devel-0:5.7.19-6.el6.x86_64",
            "6Workstation-RHSCL-2.4:rh-mysql57-mysql-errmsg-0:5.7.19-6.el6.x86_64",
            "6Workstation-RHSCL-2.4:rh-mysql57-mysql-server-0:5.7.19-6.el6.x86_64",
            "6Workstation-RHSCL-2.4:rh-mysql57-mysql-test-0:5.7.19-6.el6.x86_64",
            "7Server-RHSCL-2.4-7.3.Z:rh-mysql57-mysql-0:5.7.19-6.el7.src",
            "7Server-RHSCL-2.4-7.3.Z:rh-mysql57-mysql-0:5.7.19-6.el7.x86_64",
            "7Server-RHSCL-2.4-7.3.Z:rh-mysql57-mysql-common-0:5.7.19-6.el7.x86_64",
            "7Server-RHSCL-2.4-7.3.Z:rh-mysql57-mysql-config-0:5.7.19-6.el7.x86_64",
            "7Server-RHSCL-2.4-7.3.Z:rh-mysql57-mysql-debuginfo-0:5.7.19-6.el7.x86_64",
            "7Server-RHSCL-2.4-7.3.Z:rh-mysql57-mysql-devel-0:5.7.19-6.el7.x86_64",
            "7Server-RHSCL-2.4-7.3.Z:rh-mysql57-mysql-errmsg-0:5.7.19-6.el7.x86_64",
            "7Server-RHSCL-2.4-7.3.Z:rh-mysql57-mysql-server-0:5.7.19-6.el7.x86_64",
            "7Server-RHSCL-2.4-7.3.Z:rh-mysql57-mysql-test-0:5.7.19-6.el7.x86_64",
            "7Server-RHSCL-2.4:rh-mysql57-mysql-0:5.7.19-6.el7.src",
            "7Server-RHSCL-2.4:rh-mysql57-mysql-0:5.7.19-6.el7.x86_64",
            "7Server-RHSCL-2.4:rh-mysql57-mysql-common-0:5.7.19-6.el7.x86_64",
            "7Server-RHSCL-2.4:rh-mysql57-mysql-config-0:5.7.19-6.el7.x86_64",
            "7Server-RHSCL-2.4:rh-mysql57-mysql-debuginfo-0:5.7.19-6.el7.x86_64",
            "7Server-RHSCL-2.4:rh-mysql57-mysql-devel-0:5.7.19-6.el7.x86_64",
            "7Server-RHSCL-2.4:rh-mysql57-mysql-errmsg-0:5.7.19-6.el7.x86_64",
            "7Server-RHSCL-2.4:rh-mysql57-mysql-server-0:5.7.19-6.el7.x86_64",
            "7Server-RHSCL-2.4:rh-mysql57-mysql-test-0:5.7.19-6.el7.x86_64",
            "7Workstation-RHSCL-2.4:rh-mysql57-mysql-0:5.7.19-6.el7.src",
            "7Workstation-RHSCL-2.4:rh-mysql57-mysql-0:5.7.19-6.el7.x86_64",
            "7Workstation-RHSCL-2.4:rh-mysql57-mysql-common-0:5.7.19-6.el7.x86_64",
            "7Workstation-RHSCL-2.4:rh-mysql57-mysql-config-0:5.7.19-6.el7.x86_64",
            "7Workstation-RHSCL-2.4:rh-mysql57-mysql-debuginfo-0:5.7.19-6.el7.x86_64",
            "7Workstation-RHSCL-2.4:rh-mysql57-mysql-devel-0:5.7.19-6.el7.x86_64",
            "7Workstation-RHSCL-2.4:rh-mysql57-mysql-errmsg-0:5.7.19-6.el7.x86_64",
            "7Workstation-RHSCL-2.4:rh-mysql57-mysql-server-0:5.7.19-6.el7.x86_64",
            "7Workstation-RHSCL-2.4:rh-mysql57-mysql-test-0:5.7.19-6.el7.x86_64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2017:2886"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "HIGH",
            "attackVector": "NETWORK",
            "availabilityImpact": "NONE",
            "baseScore": 3.1,
            "baseSeverity": "LOW",
            "confidentialityImpact": "LOW",
            "integrityImpact": "NONE",
            "privilegesRequired": "LOW",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.0/AV:N/AC:H/PR:L/UI:N/S:U/C:L/I:N/A:N",
            "version": "3.0"
          },
          "products": [
            "6Server-RHSCL-2.4-6.7.Z:rh-mysql57-mysql-0:5.7.19-6.el6.src",
            "6Server-RHSCL-2.4-6.7.Z:rh-mysql57-mysql-0:5.7.19-6.el6.x86_64",
            "6Server-RHSCL-2.4-6.7.Z:rh-mysql57-mysql-common-0:5.7.19-6.el6.x86_64",
            "6Server-RHSCL-2.4-6.7.Z:rh-mysql57-mysql-config-0:5.7.19-6.el6.x86_64",
            "6Server-RHSCL-2.4-6.7.Z:rh-mysql57-mysql-debuginfo-0:5.7.19-6.el6.x86_64",
            "6Server-RHSCL-2.4-6.7.Z:rh-mysql57-mysql-devel-0:5.7.19-6.el6.x86_64",
            "6Server-RHSCL-2.4-6.7.Z:rh-mysql57-mysql-errmsg-0:5.7.19-6.el6.x86_64",
            "6Server-RHSCL-2.4-6.7.Z:rh-mysql57-mysql-server-0:5.7.19-6.el6.x86_64",
            "6Server-RHSCL-2.4-6.7.Z:rh-mysql57-mysql-test-0:5.7.19-6.el6.x86_64",
            "6Server-RHSCL-2.4:rh-mysql57-mysql-0:5.7.19-6.el6.src",
            "6Server-RHSCL-2.4:rh-mysql57-mysql-0:5.7.19-6.el6.x86_64",
            "6Server-RHSCL-2.4:rh-mysql57-mysql-common-0:5.7.19-6.el6.x86_64",
            "6Server-RHSCL-2.4:rh-mysql57-mysql-config-0:5.7.19-6.el6.x86_64",
            "6Server-RHSCL-2.4:rh-mysql57-mysql-debuginfo-0:5.7.19-6.el6.x86_64",
            "6Server-RHSCL-2.4:rh-mysql57-mysql-devel-0:5.7.19-6.el6.x86_64",
            "6Server-RHSCL-2.4:rh-mysql57-mysql-errmsg-0:5.7.19-6.el6.x86_64",
            "6Server-RHSCL-2.4:rh-mysql57-mysql-server-0:5.7.19-6.el6.x86_64",
            "6Server-RHSCL-2.4:rh-mysql57-mysql-test-0:5.7.19-6.el6.x86_64",
            "6Workstation-RHSCL-2.4:rh-mysql57-mysql-0:5.7.19-6.el6.src",
            "6Workstation-RHSCL-2.4:rh-mysql57-mysql-0:5.7.19-6.el6.x86_64",
            "6Workstation-RHSCL-2.4:rh-mysql57-mysql-common-0:5.7.19-6.el6.x86_64",
            "6Workstation-RHSCL-2.4:rh-mysql57-mysql-config-0:5.7.19-6.el6.x86_64",
            "6Workstation-RHSCL-2.4:rh-mysql57-mysql-debuginfo-0:5.7.19-6.el6.x86_64",
            "6Workstation-RHSCL-2.4:rh-mysql57-mysql-devel-0:5.7.19-6.el6.x86_64",
            "6Workstation-RHSCL-2.4:rh-mysql57-mysql-errmsg-0:5.7.19-6.el6.x86_64",
            "6Workstation-RHSCL-2.4:rh-mysql57-mysql-server-0:5.7.19-6.el6.x86_64",
            "6Workstation-RHSCL-2.4:rh-mysql57-mysql-test-0:5.7.19-6.el6.x86_64",
            "7Server-RHSCL-2.4-7.3.Z:rh-mysql57-mysql-0:5.7.19-6.el7.src",
            "7Server-RHSCL-2.4-7.3.Z:rh-mysql57-mysql-0:5.7.19-6.el7.x86_64",
            "7Server-RHSCL-2.4-7.3.Z:rh-mysql57-mysql-common-0:5.7.19-6.el7.x86_64",
            "7Server-RHSCL-2.4-7.3.Z:rh-mysql57-mysql-config-0:5.7.19-6.el7.x86_64",
            "7Server-RHSCL-2.4-7.3.Z:rh-mysql57-mysql-debuginfo-0:5.7.19-6.el7.x86_64",
            "7Server-RHSCL-2.4-7.3.Z:rh-mysql57-mysql-devel-0:5.7.19-6.el7.x86_64",
            "7Server-RHSCL-2.4-7.3.Z:rh-mysql57-mysql-errmsg-0:5.7.19-6.el7.x86_64",
            "7Server-RHSCL-2.4-7.3.Z:rh-mysql57-mysql-server-0:5.7.19-6.el7.x86_64",
            "7Server-RHSCL-2.4-7.3.Z:rh-mysql57-mysql-test-0:5.7.19-6.el7.x86_64",
            "7Server-RHSCL-2.4:rh-mysql57-mysql-0:5.7.19-6.el7.src",
            "7Server-RHSCL-2.4:rh-mysql57-mysql-0:5.7.19-6.el7.x86_64",
            "7Server-RHSCL-2.4:rh-mysql57-mysql-common-0:5.7.19-6.el7.x86_64",
            "7Server-RHSCL-2.4:rh-mysql57-mysql-config-0:5.7.19-6.el7.x86_64",
            "7Server-RHSCL-2.4:rh-mysql57-mysql-debuginfo-0:5.7.19-6.el7.x86_64",
            "7Server-RHSCL-2.4:rh-mysql57-mysql-devel-0:5.7.19-6.el7.x86_64",
            "7Server-RHSCL-2.4:rh-mysql57-mysql-errmsg-0:5.7.19-6.el7.x86_64",
            "7Server-RHSCL-2.4:rh-mysql57-mysql-server-0:5.7.19-6.el7.x86_64",
            "7Server-RHSCL-2.4:rh-mysql57-mysql-test-0:5.7.19-6.el7.x86_64",
            "7Workstation-RHSCL-2.4:rh-mysql57-mysql-0:5.7.19-6.el7.src",
            "7Workstation-RHSCL-2.4:rh-mysql57-mysql-0:5.7.19-6.el7.x86_64",
            "7Workstation-RHSCL-2.4:rh-mysql57-mysql-common-0:5.7.19-6.el7.x86_64",
            "7Workstation-RHSCL-2.4:rh-mysql57-mysql-config-0:5.7.19-6.el7.x86_64",
            "7Workstation-RHSCL-2.4:rh-mysql57-mysql-debuginfo-0:5.7.19-6.el7.x86_64",
            "7Workstation-RHSCL-2.4:rh-mysql57-mysql-devel-0:5.7.19-6.el7.x86_64",
            "7Workstation-RHSCL-2.4:rh-mysql57-mysql-errmsg-0:5.7.19-6.el7.x86_64",
            "7Workstation-RHSCL-2.4:rh-mysql57-mysql-server-0:5.7.19-6.el7.x86_64",
            "7Workstation-RHSCL-2.4:rh-mysql57-mysql-test-0:5.7.19-6.el7.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Low"
        }
      ],
      "title": "mysql: Server: X Plugin  unspecified vulnerability (CPU Jan 2017)"
    },
    {
      "cve": "CVE-2017-3320",
      "discovery_date": "2017-01-18T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "1414360"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Security: Encryption). Supported versions that are affected are 5.7.16 and earlier. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks require human interaction from a person other than the attacker. Successful attacks of this vulnerability can result in unauthorized read access to a subset of MySQL Server accessible data. CVSS v3.0 Base Score 2.4 (Confidentiality impacts).",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "mysql: Server: Security: Encryption  unspecified vulnerability (CPU Jan 2017)",
          "title": "Vulnerability summary"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "6Server-RHSCL-2.4-6.7.Z:rh-mysql57-mysql-0:5.7.19-6.el6.src",
          "6Server-RHSCL-2.4-6.7.Z:rh-mysql57-mysql-0:5.7.19-6.el6.x86_64",
          "6Server-RHSCL-2.4-6.7.Z:rh-mysql57-mysql-common-0:5.7.19-6.el6.x86_64",
          "6Server-RHSCL-2.4-6.7.Z:rh-mysql57-mysql-config-0:5.7.19-6.el6.x86_64",
          "6Server-RHSCL-2.4-6.7.Z:rh-mysql57-mysql-debuginfo-0:5.7.19-6.el6.x86_64",
          "6Server-RHSCL-2.4-6.7.Z:rh-mysql57-mysql-devel-0:5.7.19-6.el6.x86_64",
          "6Server-RHSCL-2.4-6.7.Z:rh-mysql57-mysql-errmsg-0:5.7.19-6.el6.x86_64",
          "6Server-RHSCL-2.4-6.7.Z:rh-mysql57-mysql-server-0:5.7.19-6.el6.x86_64",
          "6Server-RHSCL-2.4-6.7.Z:rh-mysql57-mysql-test-0:5.7.19-6.el6.x86_64",
          "6Server-RHSCL-2.4:rh-mysql57-mysql-0:5.7.19-6.el6.src",
          "6Server-RHSCL-2.4:rh-mysql57-mysql-0:5.7.19-6.el6.x86_64",
          "6Server-RHSCL-2.4:rh-mysql57-mysql-common-0:5.7.19-6.el6.x86_64",
          "6Server-RHSCL-2.4:rh-mysql57-mysql-config-0:5.7.19-6.el6.x86_64",
          "6Server-RHSCL-2.4:rh-mysql57-mysql-debuginfo-0:5.7.19-6.el6.x86_64",
          "6Server-RHSCL-2.4:rh-mysql57-mysql-devel-0:5.7.19-6.el6.x86_64",
          "6Server-RHSCL-2.4:rh-mysql57-mysql-errmsg-0:5.7.19-6.el6.x86_64",
          "6Server-RHSCL-2.4:rh-mysql57-mysql-server-0:5.7.19-6.el6.x86_64",
          "6Server-RHSCL-2.4:rh-mysql57-mysql-test-0:5.7.19-6.el6.x86_64",
          "6Workstation-RHSCL-2.4:rh-mysql57-mysql-0:5.7.19-6.el6.src",
          "6Workstation-RHSCL-2.4:rh-mysql57-mysql-0:5.7.19-6.el6.x86_64",
          "6Workstation-RHSCL-2.4:rh-mysql57-mysql-common-0:5.7.19-6.el6.x86_64",
          "6Workstation-RHSCL-2.4:rh-mysql57-mysql-config-0:5.7.19-6.el6.x86_64",
          "6Workstation-RHSCL-2.4:rh-mysql57-mysql-debuginfo-0:5.7.19-6.el6.x86_64",
          "6Workstation-RHSCL-2.4:rh-mysql57-mysql-devel-0:5.7.19-6.el6.x86_64",
          "6Workstation-RHSCL-2.4:rh-mysql57-mysql-errmsg-0:5.7.19-6.el6.x86_64",
          "6Workstation-RHSCL-2.4:rh-mysql57-mysql-server-0:5.7.19-6.el6.x86_64",
          "6Workstation-RHSCL-2.4:rh-mysql57-mysql-test-0:5.7.19-6.el6.x86_64",
          "7Server-RHSCL-2.4-7.3.Z:rh-mysql57-mysql-0:5.7.19-6.el7.src",
          "7Server-RHSCL-2.4-7.3.Z:rh-mysql57-mysql-0:5.7.19-6.el7.x86_64",
          "7Server-RHSCL-2.4-7.3.Z:rh-mysql57-mysql-common-0:5.7.19-6.el7.x86_64",
          "7Server-RHSCL-2.4-7.3.Z:rh-mysql57-mysql-config-0:5.7.19-6.el7.x86_64",
          "7Server-RHSCL-2.4-7.3.Z:rh-mysql57-mysql-debuginfo-0:5.7.19-6.el7.x86_64",
          "7Server-RHSCL-2.4-7.3.Z:rh-mysql57-mysql-devel-0:5.7.19-6.el7.x86_64",
          "7Server-RHSCL-2.4-7.3.Z:rh-mysql57-mysql-errmsg-0:5.7.19-6.el7.x86_64",
          "7Server-RHSCL-2.4-7.3.Z:rh-mysql57-mysql-server-0:5.7.19-6.el7.x86_64",
          "7Server-RHSCL-2.4-7.3.Z:rh-mysql57-mysql-test-0:5.7.19-6.el7.x86_64",
          "7Server-RHSCL-2.4:rh-mysql57-mysql-0:5.7.19-6.el7.src",
          "7Server-RHSCL-2.4:rh-mysql57-mysql-0:5.7.19-6.el7.x86_64",
          "7Server-RHSCL-2.4:rh-mysql57-mysql-common-0:5.7.19-6.el7.x86_64",
          "7Server-RHSCL-2.4:rh-mysql57-mysql-config-0:5.7.19-6.el7.x86_64",
          "7Server-RHSCL-2.4:rh-mysql57-mysql-debuginfo-0:5.7.19-6.el7.x86_64",
          "7Server-RHSCL-2.4:rh-mysql57-mysql-devel-0:5.7.19-6.el7.x86_64",
          "7Server-RHSCL-2.4:rh-mysql57-mysql-errmsg-0:5.7.19-6.el7.x86_64",
          "7Server-RHSCL-2.4:rh-mysql57-mysql-server-0:5.7.19-6.el7.x86_64",
          "7Server-RHSCL-2.4:rh-mysql57-mysql-test-0:5.7.19-6.el7.x86_64",
          "7Workstation-RHSCL-2.4:rh-mysql57-mysql-0:5.7.19-6.el7.src",
          "7Workstation-RHSCL-2.4:rh-mysql57-mysql-0:5.7.19-6.el7.x86_64",
          "7Workstation-RHSCL-2.4:rh-mysql57-mysql-common-0:5.7.19-6.el7.x86_64",
          "7Workstation-RHSCL-2.4:rh-mysql57-mysql-config-0:5.7.19-6.el7.x86_64",
          "7Workstation-RHSCL-2.4:rh-mysql57-mysql-debuginfo-0:5.7.19-6.el7.x86_64",
          "7Workstation-RHSCL-2.4:rh-mysql57-mysql-devel-0:5.7.19-6.el7.x86_64",
          "7Workstation-RHSCL-2.4:rh-mysql57-mysql-errmsg-0:5.7.19-6.el7.x86_64",
          "7Workstation-RHSCL-2.4:rh-mysql57-mysql-server-0:5.7.19-6.el7.x86_64",
          "7Workstation-RHSCL-2.4:rh-mysql57-mysql-test-0:5.7.19-6.el7.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2017-3320"
        },
        {
          "category": "external",
          "summary": "RHBZ#1414360",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1414360"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2017-3320",
          "url": "https://www.cve.org/CVERecord?id=CVE-2017-3320"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2017-3320",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2017-3320"
        },
        {
          "category": "external",
          "summary": "http://www.oracle.com/technetwork/security-advisory/cpujan2017-2881727.html#AppendixMSQL",
          "url": "http://www.oracle.com/technetwork/security-advisory/cpujan2017-2881727.html#AppendixMSQL"
        }
      ],
      "release_date": "2017-01-18T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2017-10-12T07:53:15+00:00",
          "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAfter installing this update, the MySQL server daemon (mysqld) will be restarted automatically.",
          "product_ids": [
            "6Server-RHSCL-2.4-6.7.Z:rh-mysql57-mysql-0:5.7.19-6.el6.src",
            "6Server-RHSCL-2.4-6.7.Z:rh-mysql57-mysql-0:5.7.19-6.el6.x86_64",
            "6Server-RHSCL-2.4-6.7.Z:rh-mysql57-mysql-common-0:5.7.19-6.el6.x86_64",
            "6Server-RHSCL-2.4-6.7.Z:rh-mysql57-mysql-config-0:5.7.19-6.el6.x86_64",
            "6Server-RHSCL-2.4-6.7.Z:rh-mysql57-mysql-debuginfo-0:5.7.19-6.el6.x86_64",
            "6Server-RHSCL-2.4-6.7.Z:rh-mysql57-mysql-devel-0:5.7.19-6.el6.x86_64",
            "6Server-RHSCL-2.4-6.7.Z:rh-mysql57-mysql-errmsg-0:5.7.19-6.el6.x86_64",
            "6Server-RHSCL-2.4-6.7.Z:rh-mysql57-mysql-server-0:5.7.19-6.el6.x86_64",
            "6Server-RHSCL-2.4-6.7.Z:rh-mysql57-mysql-test-0:5.7.19-6.el6.x86_64",
            "6Server-RHSCL-2.4:rh-mysql57-mysql-0:5.7.19-6.el6.src",
            "6Server-RHSCL-2.4:rh-mysql57-mysql-0:5.7.19-6.el6.x86_64",
            "6Server-RHSCL-2.4:rh-mysql57-mysql-common-0:5.7.19-6.el6.x86_64",
            "6Server-RHSCL-2.4:rh-mysql57-mysql-config-0:5.7.19-6.el6.x86_64",
            "6Server-RHSCL-2.4:rh-mysql57-mysql-debuginfo-0:5.7.19-6.el6.x86_64",
            "6Server-RHSCL-2.4:rh-mysql57-mysql-devel-0:5.7.19-6.el6.x86_64",
            "6Server-RHSCL-2.4:rh-mysql57-mysql-errmsg-0:5.7.19-6.el6.x86_64",
            "6Server-RHSCL-2.4:rh-mysql57-mysql-server-0:5.7.19-6.el6.x86_64",
            "6Server-RHSCL-2.4:rh-mysql57-mysql-test-0:5.7.19-6.el6.x86_64",
            "6Workstation-RHSCL-2.4:rh-mysql57-mysql-0:5.7.19-6.el6.src",
            "6Workstation-RHSCL-2.4:rh-mysql57-mysql-0:5.7.19-6.el6.x86_64",
            "6Workstation-RHSCL-2.4:rh-mysql57-mysql-common-0:5.7.19-6.el6.x86_64",
            "6Workstation-RHSCL-2.4:rh-mysql57-mysql-config-0:5.7.19-6.el6.x86_64",
            "6Workstation-RHSCL-2.4:rh-mysql57-mysql-debuginfo-0:5.7.19-6.el6.x86_64",
            "6Workstation-RHSCL-2.4:rh-mysql57-mysql-devel-0:5.7.19-6.el6.x86_64",
            "6Workstation-RHSCL-2.4:rh-mysql57-mysql-errmsg-0:5.7.19-6.el6.x86_64",
            "6Workstation-RHSCL-2.4:rh-mysql57-mysql-server-0:5.7.19-6.el6.x86_64",
            "6Workstation-RHSCL-2.4:rh-mysql57-mysql-test-0:5.7.19-6.el6.x86_64",
            "7Server-RHSCL-2.4-7.3.Z:rh-mysql57-mysql-0:5.7.19-6.el7.src",
            "7Server-RHSCL-2.4-7.3.Z:rh-mysql57-mysql-0:5.7.19-6.el7.x86_64",
            "7Server-RHSCL-2.4-7.3.Z:rh-mysql57-mysql-common-0:5.7.19-6.el7.x86_64",
            "7Server-RHSCL-2.4-7.3.Z:rh-mysql57-mysql-config-0:5.7.19-6.el7.x86_64",
            "7Server-RHSCL-2.4-7.3.Z:rh-mysql57-mysql-debuginfo-0:5.7.19-6.el7.x86_64",
            "7Server-RHSCL-2.4-7.3.Z:rh-mysql57-mysql-devel-0:5.7.19-6.el7.x86_64",
            "7Server-RHSCL-2.4-7.3.Z:rh-mysql57-mysql-errmsg-0:5.7.19-6.el7.x86_64",
            "7Server-RHSCL-2.4-7.3.Z:rh-mysql57-mysql-server-0:5.7.19-6.el7.x86_64",
            "7Server-RHSCL-2.4-7.3.Z:rh-mysql57-mysql-test-0:5.7.19-6.el7.x86_64",
            "7Server-RHSCL-2.4:rh-mysql57-mysql-0:5.7.19-6.el7.src",
            "7Server-RHSCL-2.4:rh-mysql57-mysql-0:5.7.19-6.el7.x86_64",
            "7Server-RHSCL-2.4:rh-mysql57-mysql-common-0:5.7.19-6.el7.x86_64",
            "7Server-RHSCL-2.4:rh-mysql57-mysql-config-0:5.7.19-6.el7.x86_64",
            "7Server-RHSCL-2.4:rh-mysql57-mysql-debuginfo-0:5.7.19-6.el7.x86_64",
            "7Server-RHSCL-2.4:rh-mysql57-mysql-devel-0:5.7.19-6.el7.x86_64",
            "7Server-RHSCL-2.4:rh-mysql57-mysql-errmsg-0:5.7.19-6.el7.x86_64",
            "7Server-RHSCL-2.4:rh-mysql57-mysql-server-0:5.7.19-6.el7.x86_64",
            "7Server-RHSCL-2.4:rh-mysql57-mysql-test-0:5.7.19-6.el7.x86_64",
            "7Workstation-RHSCL-2.4:rh-mysql57-mysql-0:5.7.19-6.el7.src",
            "7Workstation-RHSCL-2.4:rh-mysql57-mysql-0:5.7.19-6.el7.x86_64",
            "7Workstation-RHSCL-2.4:rh-mysql57-mysql-common-0:5.7.19-6.el7.x86_64",
            "7Workstation-RHSCL-2.4:rh-mysql57-mysql-config-0:5.7.19-6.el7.x86_64",
            "7Workstation-RHSCL-2.4:rh-mysql57-mysql-debuginfo-0:5.7.19-6.el7.x86_64",
            "7Workstation-RHSCL-2.4:rh-mysql57-mysql-devel-0:5.7.19-6.el7.x86_64",
            "7Workstation-RHSCL-2.4:rh-mysql57-mysql-errmsg-0:5.7.19-6.el7.x86_64",
            "7Workstation-RHSCL-2.4:rh-mysql57-mysql-server-0:5.7.19-6.el7.x86_64",
            "7Workstation-RHSCL-2.4:rh-mysql57-mysql-test-0:5.7.19-6.el7.x86_64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2017:2886"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "NONE",
            "baseScore": 2.4,
            "baseSeverity": "LOW",
            "confidentialityImpact": "LOW",
            "integrityImpact": "NONE",
            "privilegesRequired": "HIGH",
            "scope": "UNCHANGED",
            "userInteraction": "REQUIRED",
            "vectorString": "CVSS:3.0/AV:N/AC:L/PR:H/UI:R/S:U/C:L/I:N/A:N",
            "version": "3.0"
          },
          "products": [
            "6Server-RHSCL-2.4-6.7.Z:rh-mysql57-mysql-0:5.7.19-6.el6.src",
            "6Server-RHSCL-2.4-6.7.Z:rh-mysql57-mysql-0:5.7.19-6.el6.x86_64",
            "6Server-RHSCL-2.4-6.7.Z:rh-mysql57-mysql-common-0:5.7.19-6.el6.x86_64",
            "6Server-RHSCL-2.4-6.7.Z:rh-mysql57-mysql-config-0:5.7.19-6.el6.x86_64",
            "6Server-RHSCL-2.4-6.7.Z:rh-mysql57-mysql-debuginfo-0:5.7.19-6.el6.x86_64",
            "6Server-RHSCL-2.4-6.7.Z:rh-mysql57-mysql-devel-0:5.7.19-6.el6.x86_64",
            "6Server-RHSCL-2.4-6.7.Z:rh-mysql57-mysql-errmsg-0:5.7.19-6.el6.x86_64",
            "6Server-RHSCL-2.4-6.7.Z:rh-mysql57-mysql-server-0:5.7.19-6.el6.x86_64",
            "6Server-RHSCL-2.4-6.7.Z:rh-mysql57-mysql-test-0:5.7.19-6.el6.x86_64",
            "6Server-RHSCL-2.4:rh-mysql57-mysql-0:5.7.19-6.el6.src",
            "6Server-RHSCL-2.4:rh-mysql57-mysql-0:5.7.19-6.el6.x86_64",
            "6Server-RHSCL-2.4:rh-mysql57-mysql-common-0:5.7.19-6.el6.x86_64",
            "6Server-RHSCL-2.4:rh-mysql57-mysql-config-0:5.7.19-6.el6.x86_64",
            "6Server-RHSCL-2.4:rh-mysql57-mysql-debuginfo-0:5.7.19-6.el6.x86_64",
            "6Server-RHSCL-2.4:rh-mysql57-mysql-devel-0:5.7.19-6.el6.x86_64",
            "6Server-RHSCL-2.4:rh-mysql57-mysql-errmsg-0:5.7.19-6.el6.x86_64",
            "6Server-RHSCL-2.4:rh-mysql57-mysql-server-0:5.7.19-6.el6.x86_64",
            "6Server-RHSCL-2.4:rh-mysql57-mysql-test-0:5.7.19-6.el6.x86_64",
            "6Workstation-RHSCL-2.4:rh-mysql57-mysql-0:5.7.19-6.el6.src",
            "6Workstation-RHSCL-2.4:rh-mysql57-mysql-0:5.7.19-6.el6.x86_64",
            "6Workstation-RHSCL-2.4:rh-mysql57-mysql-common-0:5.7.19-6.el6.x86_64",
            "6Workstation-RHSCL-2.4:rh-mysql57-mysql-config-0:5.7.19-6.el6.x86_64",
            "6Workstation-RHSCL-2.4:rh-mysql57-mysql-debuginfo-0:5.7.19-6.el6.x86_64",
            "6Workstation-RHSCL-2.4:rh-mysql57-mysql-devel-0:5.7.19-6.el6.x86_64",
            "6Workstation-RHSCL-2.4:rh-mysql57-mysql-errmsg-0:5.7.19-6.el6.x86_64",
            "6Workstation-RHSCL-2.4:rh-mysql57-mysql-server-0:5.7.19-6.el6.x86_64",
            "6Workstation-RHSCL-2.4:rh-mysql57-mysql-test-0:5.7.19-6.el6.x86_64",
            "7Server-RHSCL-2.4-7.3.Z:rh-mysql57-mysql-0:5.7.19-6.el7.src",
            "7Server-RHSCL-2.4-7.3.Z:rh-mysql57-mysql-0:5.7.19-6.el7.x86_64",
            "7Server-RHSCL-2.4-7.3.Z:rh-mysql57-mysql-common-0:5.7.19-6.el7.x86_64",
            "7Server-RHSCL-2.4-7.3.Z:rh-mysql57-mysql-config-0:5.7.19-6.el7.x86_64",
            "7Server-RHSCL-2.4-7.3.Z:rh-mysql57-mysql-debuginfo-0:5.7.19-6.el7.x86_64",
            "7Server-RHSCL-2.4-7.3.Z:rh-mysql57-mysql-devel-0:5.7.19-6.el7.x86_64",
            "7Server-RHSCL-2.4-7.3.Z:rh-mysql57-mysql-errmsg-0:5.7.19-6.el7.x86_64",
            "7Server-RHSCL-2.4-7.3.Z:rh-mysql57-mysql-server-0:5.7.19-6.el7.x86_64",
            "7Server-RHSCL-2.4-7.3.Z:rh-mysql57-mysql-test-0:5.7.19-6.el7.x86_64",
            "7Server-RHSCL-2.4:rh-mysql57-mysql-0:5.7.19-6.el7.src",
            "7Server-RHSCL-2.4:rh-mysql57-mysql-0:5.7.19-6.el7.x86_64",
            "7Server-RHSCL-2.4:rh-mysql57-mysql-common-0:5.7.19-6.el7.x86_64",
            "7Server-RHSCL-2.4:rh-mysql57-mysql-config-0:5.7.19-6.el7.x86_64",
            "7Server-RHSCL-2.4:rh-mysql57-mysql-debuginfo-0:5.7.19-6.el7.x86_64",
            "7Server-RHSCL-2.4:rh-mysql57-mysql-devel-0:5.7.19-6.el7.x86_64",
            "7Server-RHSCL-2.4:rh-mysql57-mysql-errmsg-0:5.7.19-6.el7.x86_64",
            "7Server-RHSCL-2.4:rh-mysql57-mysql-server-0:5.7.19-6.el7.x86_64",
            "7Server-RHSCL-2.4:rh-mysql57-mysql-test-0:5.7.19-6.el7.x86_64",
            "7Workstation-RHSCL-2.4:rh-mysql57-mysql-0:5.7.19-6.el7.src",
            "7Workstation-RHSCL-2.4:rh-mysql57-mysql-0:5.7.19-6.el7.x86_64",
            "7Workstation-RHSCL-2.4:rh-mysql57-mysql-common-0:5.7.19-6.el7.x86_64",
            "7Workstation-RHSCL-2.4:rh-mysql57-mysql-config-0:5.7.19-6.el7.x86_64",
            "7Workstation-RHSCL-2.4:rh-mysql57-mysql-debuginfo-0:5.7.19-6.el7.x86_64",
            "7Workstation-RHSCL-2.4:rh-mysql57-mysql-devel-0:5.7.19-6.el7.x86_64",
            "7Workstation-RHSCL-2.4:rh-mysql57-mysql-errmsg-0:5.7.19-6.el7.x86_64",
            "7Workstation-RHSCL-2.4:rh-mysql57-mysql-server-0:5.7.19-6.el7.x86_64",
            "7Workstation-RHSCL-2.4:rh-mysql57-mysql-test-0:5.7.19-6.el7.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Low"
        }
      ],
      "title": "mysql: Server: Security: Encryption  unspecified vulnerability (CPU Jan 2017)"
    },
    {
      "cve": "CVE-2017-3331",
      "discovery_date": "2017-04-19T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "1443362"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: DML). The supported version that is affected is 5.7.11 to 5.7.17. Easily \"exploitable\" vulnerability allows low privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.0 Base Score 6.5 (Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H).",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "mysql: Server: DML unspecified vulnerability (CPU Apr 2017)",
          "title": "Vulnerability summary"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "6Server-RHSCL-2.4-6.7.Z:rh-mysql57-mysql-0:5.7.19-6.el6.src",
          "6Server-RHSCL-2.4-6.7.Z:rh-mysql57-mysql-0:5.7.19-6.el6.x86_64",
          "6Server-RHSCL-2.4-6.7.Z:rh-mysql57-mysql-common-0:5.7.19-6.el6.x86_64",
          "6Server-RHSCL-2.4-6.7.Z:rh-mysql57-mysql-config-0:5.7.19-6.el6.x86_64",
          "6Server-RHSCL-2.4-6.7.Z:rh-mysql57-mysql-debuginfo-0:5.7.19-6.el6.x86_64",
          "6Server-RHSCL-2.4-6.7.Z:rh-mysql57-mysql-devel-0:5.7.19-6.el6.x86_64",
          "6Server-RHSCL-2.4-6.7.Z:rh-mysql57-mysql-errmsg-0:5.7.19-6.el6.x86_64",
          "6Server-RHSCL-2.4-6.7.Z:rh-mysql57-mysql-server-0:5.7.19-6.el6.x86_64",
          "6Server-RHSCL-2.4-6.7.Z:rh-mysql57-mysql-test-0:5.7.19-6.el6.x86_64",
          "6Server-RHSCL-2.4:rh-mysql57-mysql-0:5.7.19-6.el6.src",
          "6Server-RHSCL-2.4:rh-mysql57-mysql-0:5.7.19-6.el6.x86_64",
          "6Server-RHSCL-2.4:rh-mysql57-mysql-common-0:5.7.19-6.el6.x86_64",
          "6Server-RHSCL-2.4:rh-mysql57-mysql-config-0:5.7.19-6.el6.x86_64",
          "6Server-RHSCL-2.4:rh-mysql57-mysql-debuginfo-0:5.7.19-6.el6.x86_64",
          "6Server-RHSCL-2.4:rh-mysql57-mysql-devel-0:5.7.19-6.el6.x86_64",
          "6Server-RHSCL-2.4:rh-mysql57-mysql-errmsg-0:5.7.19-6.el6.x86_64",
          "6Server-RHSCL-2.4:rh-mysql57-mysql-server-0:5.7.19-6.el6.x86_64",
          "6Server-RHSCL-2.4:rh-mysql57-mysql-test-0:5.7.19-6.el6.x86_64",
          "6Workstation-RHSCL-2.4:rh-mysql57-mysql-0:5.7.19-6.el6.src",
          "6Workstation-RHSCL-2.4:rh-mysql57-mysql-0:5.7.19-6.el6.x86_64",
          "6Workstation-RHSCL-2.4:rh-mysql57-mysql-common-0:5.7.19-6.el6.x86_64",
          "6Workstation-RHSCL-2.4:rh-mysql57-mysql-config-0:5.7.19-6.el6.x86_64",
          "6Workstation-RHSCL-2.4:rh-mysql57-mysql-debuginfo-0:5.7.19-6.el6.x86_64",
          "6Workstation-RHSCL-2.4:rh-mysql57-mysql-devel-0:5.7.19-6.el6.x86_64",
          "6Workstation-RHSCL-2.4:rh-mysql57-mysql-errmsg-0:5.7.19-6.el6.x86_64",
          "6Workstation-RHSCL-2.4:rh-mysql57-mysql-server-0:5.7.19-6.el6.x86_64",
          "6Workstation-RHSCL-2.4:rh-mysql57-mysql-test-0:5.7.19-6.el6.x86_64",
          "7Server-RHSCL-2.4-7.3.Z:rh-mysql57-mysql-0:5.7.19-6.el7.src",
          "7Server-RHSCL-2.4-7.3.Z:rh-mysql57-mysql-0:5.7.19-6.el7.x86_64",
          "7Server-RHSCL-2.4-7.3.Z:rh-mysql57-mysql-common-0:5.7.19-6.el7.x86_64",
          "7Server-RHSCL-2.4-7.3.Z:rh-mysql57-mysql-config-0:5.7.19-6.el7.x86_64",
          "7Server-RHSCL-2.4-7.3.Z:rh-mysql57-mysql-debuginfo-0:5.7.19-6.el7.x86_64",
          "7Server-RHSCL-2.4-7.3.Z:rh-mysql57-mysql-devel-0:5.7.19-6.el7.x86_64",
          "7Server-RHSCL-2.4-7.3.Z:rh-mysql57-mysql-errmsg-0:5.7.19-6.el7.x86_64",
          "7Server-RHSCL-2.4-7.3.Z:rh-mysql57-mysql-server-0:5.7.19-6.el7.x86_64",
          "7Server-RHSCL-2.4-7.3.Z:rh-mysql57-mysql-test-0:5.7.19-6.el7.x86_64",
          "7Server-RHSCL-2.4:rh-mysql57-mysql-0:5.7.19-6.el7.src",
          "7Server-RHSCL-2.4:rh-mysql57-mysql-0:5.7.19-6.el7.x86_64",
          "7Server-RHSCL-2.4:rh-mysql57-mysql-common-0:5.7.19-6.el7.x86_64",
          "7Server-RHSCL-2.4:rh-mysql57-mysql-config-0:5.7.19-6.el7.x86_64",
          "7Server-RHSCL-2.4:rh-mysql57-mysql-debuginfo-0:5.7.19-6.el7.x86_64",
          "7Server-RHSCL-2.4:rh-mysql57-mysql-devel-0:5.7.19-6.el7.x86_64",
          "7Server-RHSCL-2.4:rh-mysql57-mysql-errmsg-0:5.7.19-6.el7.x86_64",
          "7Server-RHSCL-2.4:rh-mysql57-mysql-server-0:5.7.19-6.el7.x86_64",
          "7Server-RHSCL-2.4:rh-mysql57-mysql-test-0:5.7.19-6.el7.x86_64",
          "7Workstation-RHSCL-2.4:rh-mysql57-mysql-0:5.7.19-6.el7.src",
          "7Workstation-RHSCL-2.4:rh-mysql57-mysql-0:5.7.19-6.el7.x86_64",
          "7Workstation-RHSCL-2.4:rh-mysql57-mysql-common-0:5.7.19-6.el7.x86_64",
          "7Workstation-RHSCL-2.4:rh-mysql57-mysql-config-0:5.7.19-6.el7.x86_64",
          "7Workstation-RHSCL-2.4:rh-mysql57-mysql-debuginfo-0:5.7.19-6.el7.x86_64",
          "7Workstation-RHSCL-2.4:rh-mysql57-mysql-devel-0:5.7.19-6.el7.x86_64",
          "7Workstation-RHSCL-2.4:rh-mysql57-mysql-errmsg-0:5.7.19-6.el7.x86_64",
          "7Workstation-RHSCL-2.4:rh-mysql57-mysql-server-0:5.7.19-6.el7.x86_64",
          "7Workstation-RHSCL-2.4:rh-mysql57-mysql-test-0:5.7.19-6.el7.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2017-3331"
        },
        {
          "category": "external",
          "summary": "RHBZ#1443362",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1443362"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2017-3331",
          "url": "https://www.cve.org/CVERecord?id=CVE-2017-3331"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2017-3331",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2017-3331"
        },
        {
          "category": "external",
          "summary": "http://www.oracle.com/technetwork/security-advisory/cpuapr2017-3236618.html#AppendixMSQL",
          "url": "http://www.oracle.com/technetwork/security-advisory/cpuapr2017-3236618.html#AppendixMSQL"
        }
      ],
      "release_date": "2017-04-19T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2017-10-12T07:53:15+00:00",
          "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAfter installing this update, the MySQL server daemon (mysqld) will be restarted automatically.",
          "product_ids": [
            "6Server-RHSCL-2.4-6.7.Z:rh-mysql57-mysql-0:5.7.19-6.el6.src",
            "6Server-RHSCL-2.4-6.7.Z:rh-mysql57-mysql-0:5.7.19-6.el6.x86_64",
            "6Server-RHSCL-2.4-6.7.Z:rh-mysql57-mysql-common-0:5.7.19-6.el6.x86_64",
            "6Server-RHSCL-2.4-6.7.Z:rh-mysql57-mysql-config-0:5.7.19-6.el6.x86_64",
            "6Server-RHSCL-2.4-6.7.Z:rh-mysql57-mysql-debuginfo-0:5.7.19-6.el6.x86_64",
            "6Server-RHSCL-2.4-6.7.Z:rh-mysql57-mysql-devel-0:5.7.19-6.el6.x86_64",
            "6Server-RHSCL-2.4-6.7.Z:rh-mysql57-mysql-errmsg-0:5.7.19-6.el6.x86_64",
            "6Server-RHSCL-2.4-6.7.Z:rh-mysql57-mysql-server-0:5.7.19-6.el6.x86_64",
            "6Server-RHSCL-2.4-6.7.Z:rh-mysql57-mysql-test-0:5.7.19-6.el6.x86_64",
            "6Server-RHSCL-2.4:rh-mysql57-mysql-0:5.7.19-6.el6.src",
            "6Server-RHSCL-2.4:rh-mysql57-mysql-0:5.7.19-6.el6.x86_64",
            "6Server-RHSCL-2.4:rh-mysql57-mysql-common-0:5.7.19-6.el6.x86_64",
            "6Server-RHSCL-2.4:rh-mysql57-mysql-config-0:5.7.19-6.el6.x86_64",
            "6Server-RHSCL-2.4:rh-mysql57-mysql-debuginfo-0:5.7.19-6.el6.x86_64",
            "6Server-RHSCL-2.4:rh-mysql57-mysql-devel-0:5.7.19-6.el6.x86_64",
            "6Server-RHSCL-2.4:rh-mysql57-mysql-errmsg-0:5.7.19-6.el6.x86_64",
            "6Server-RHSCL-2.4:rh-mysql57-mysql-server-0:5.7.19-6.el6.x86_64",
            "6Server-RHSCL-2.4:rh-mysql57-mysql-test-0:5.7.19-6.el6.x86_64",
            "6Workstation-RHSCL-2.4:rh-mysql57-mysql-0:5.7.19-6.el6.src",
            "6Workstation-RHSCL-2.4:rh-mysql57-mysql-0:5.7.19-6.el6.x86_64",
            "6Workstation-RHSCL-2.4:rh-mysql57-mysql-common-0:5.7.19-6.el6.x86_64",
            "6Workstation-RHSCL-2.4:rh-mysql57-mysql-config-0:5.7.19-6.el6.x86_64",
            "6Workstation-RHSCL-2.4:rh-mysql57-mysql-debuginfo-0:5.7.19-6.el6.x86_64",
            "6Workstation-RHSCL-2.4:rh-mysql57-mysql-devel-0:5.7.19-6.el6.x86_64",
            "6Workstation-RHSCL-2.4:rh-mysql57-mysql-errmsg-0:5.7.19-6.el6.x86_64",
            "6Workstation-RHSCL-2.4:rh-mysql57-mysql-server-0:5.7.19-6.el6.x86_64",
            "6Workstation-RHSCL-2.4:rh-mysql57-mysql-test-0:5.7.19-6.el6.x86_64",
            "7Server-RHSCL-2.4-7.3.Z:rh-mysql57-mysql-0:5.7.19-6.el7.src",
            "7Server-RHSCL-2.4-7.3.Z:rh-mysql57-mysql-0:5.7.19-6.el7.x86_64",
            "7Server-RHSCL-2.4-7.3.Z:rh-mysql57-mysql-common-0:5.7.19-6.el7.x86_64",
            "7Server-RHSCL-2.4-7.3.Z:rh-mysql57-mysql-config-0:5.7.19-6.el7.x86_64",
            "7Server-RHSCL-2.4-7.3.Z:rh-mysql57-mysql-debuginfo-0:5.7.19-6.el7.x86_64",
            "7Server-RHSCL-2.4-7.3.Z:rh-mysql57-mysql-devel-0:5.7.19-6.el7.x86_64",
            "7Server-RHSCL-2.4-7.3.Z:rh-mysql57-mysql-errmsg-0:5.7.19-6.el7.x86_64",
            "7Server-RHSCL-2.4-7.3.Z:rh-mysql57-mysql-server-0:5.7.19-6.el7.x86_64",
            "7Server-RHSCL-2.4-7.3.Z:rh-mysql57-mysql-test-0:5.7.19-6.el7.x86_64",
            "7Server-RHSCL-2.4:rh-mysql57-mysql-0:5.7.19-6.el7.src",
            "7Server-RHSCL-2.4:rh-mysql57-mysql-0:5.7.19-6.el7.x86_64",
            "7Server-RHSCL-2.4:rh-mysql57-mysql-common-0:5.7.19-6.el7.x86_64",
            "7Server-RHSCL-2.4:rh-mysql57-mysql-config-0:5.7.19-6.el7.x86_64",
            "7Server-RHSCL-2.4:rh-mysql57-mysql-debuginfo-0:5.7.19-6.el7.x86_64",
            "7Server-RHSCL-2.4:rh-mysql57-mysql-devel-0:5.7.19-6.el7.x86_64",
            "7Server-RHSCL-2.4:rh-mysql57-mysql-errmsg-0:5.7.19-6.el7.x86_64",
            "7Server-RHSCL-2.4:rh-mysql57-mysql-server-0:5.7.19-6.el7.x86_64",
            "7Server-RHSCL-2.4:rh-mysql57-mysql-test-0:5.7.19-6.el7.x86_64",
            "7Workstation-RHSCL-2.4:rh-mysql57-mysql-0:5.7.19-6.el7.src",
            "7Workstation-RHSCL-2.4:rh-mysql57-mysql-0:5.7.19-6.el7.x86_64",
            "7Workstation-RHSCL-2.4:rh-mysql57-mysql-common-0:5.7.19-6.el7.x86_64",
            "7Workstation-RHSCL-2.4:rh-mysql57-mysql-config-0:5.7.19-6.el7.x86_64",
            "7Workstation-RHSCL-2.4:rh-mysql57-mysql-debuginfo-0:5.7.19-6.el7.x86_64",
            "7Workstation-RHSCL-2.4:rh-mysql57-mysql-devel-0:5.7.19-6.el7.x86_64",
            "7Workstation-RHSCL-2.4:rh-mysql57-mysql-errmsg-0:5.7.19-6.el7.x86_64",
            "7Workstation-RHSCL-2.4:rh-mysql57-mysql-server-0:5.7.19-6.el7.x86_64",
            "7Workstation-RHSCL-2.4:rh-mysql57-mysql-test-0:5.7.19-6.el7.x86_64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2017:2886"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 6.5,
            "baseSeverity": "MEDIUM",
            "confidentialityImpact": "NONE",
            "integrityImpact": "NONE",
            "privilegesRequired": "LOW",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.0"
          },
          "products": [
            "6Server-RHSCL-2.4-6.7.Z:rh-mysql57-mysql-0:5.7.19-6.el6.src",
            "6Server-RHSCL-2.4-6.7.Z:rh-mysql57-mysql-0:5.7.19-6.el6.x86_64",
            "6Server-RHSCL-2.4-6.7.Z:rh-mysql57-mysql-common-0:5.7.19-6.el6.x86_64",
            "6Server-RHSCL-2.4-6.7.Z:rh-mysql57-mysql-config-0:5.7.19-6.el6.x86_64",
            "6Server-RHSCL-2.4-6.7.Z:rh-mysql57-mysql-debuginfo-0:5.7.19-6.el6.x86_64",
            "6Server-RHSCL-2.4-6.7.Z:rh-mysql57-mysql-devel-0:5.7.19-6.el6.x86_64",
            "6Server-RHSCL-2.4-6.7.Z:rh-mysql57-mysql-errmsg-0:5.7.19-6.el6.x86_64",
            "6Server-RHSCL-2.4-6.7.Z:rh-mysql57-mysql-server-0:5.7.19-6.el6.x86_64",
            "6Server-RHSCL-2.4-6.7.Z:rh-mysql57-mysql-test-0:5.7.19-6.el6.x86_64",
            "6Server-RHSCL-2.4:rh-mysql57-mysql-0:5.7.19-6.el6.src",
            "6Server-RHSCL-2.4:rh-mysql57-mysql-0:5.7.19-6.el6.x86_64",
            "6Server-RHSCL-2.4:rh-mysql57-mysql-common-0:5.7.19-6.el6.x86_64",
            "6Server-RHSCL-2.4:rh-mysql57-mysql-config-0:5.7.19-6.el6.x86_64",
            "6Server-RHSCL-2.4:rh-mysql57-mysql-debuginfo-0:5.7.19-6.el6.x86_64",
            "6Server-RHSCL-2.4:rh-mysql57-mysql-devel-0:5.7.19-6.el6.x86_64",
            "6Server-RHSCL-2.4:rh-mysql57-mysql-errmsg-0:5.7.19-6.el6.x86_64",
            "6Server-RHSCL-2.4:rh-mysql57-mysql-server-0:5.7.19-6.el6.x86_64",
            "6Server-RHSCL-2.4:rh-mysql57-mysql-test-0:5.7.19-6.el6.x86_64",
            "6Workstation-RHSCL-2.4:rh-mysql57-mysql-0:5.7.19-6.el6.src",
            "6Workstation-RHSCL-2.4:rh-mysql57-mysql-0:5.7.19-6.el6.x86_64",
            "6Workstation-RHSCL-2.4:rh-mysql57-mysql-common-0:5.7.19-6.el6.x86_64",
            "6Workstation-RHSCL-2.4:rh-mysql57-mysql-config-0:5.7.19-6.el6.x86_64",
            "6Workstation-RHSCL-2.4:rh-mysql57-mysql-debuginfo-0:5.7.19-6.el6.x86_64",
            "6Workstation-RHSCL-2.4:rh-mysql57-mysql-devel-0:5.7.19-6.el6.x86_64",
            "6Workstation-RHSCL-2.4:rh-mysql57-mysql-errmsg-0:5.7.19-6.el6.x86_64",
            "6Workstation-RHSCL-2.4:rh-mysql57-mysql-server-0:5.7.19-6.el6.x86_64",
            "6Workstation-RHSCL-2.4:rh-mysql57-mysql-test-0:5.7.19-6.el6.x86_64",
            "7Server-RHSCL-2.4-7.3.Z:rh-mysql57-mysql-0:5.7.19-6.el7.src",
            "7Server-RHSCL-2.4-7.3.Z:rh-mysql57-mysql-0:5.7.19-6.el7.x86_64",
            "7Server-RHSCL-2.4-7.3.Z:rh-mysql57-mysql-common-0:5.7.19-6.el7.x86_64",
            "7Server-RHSCL-2.4-7.3.Z:rh-mysql57-mysql-config-0:5.7.19-6.el7.x86_64",
            "7Server-RHSCL-2.4-7.3.Z:rh-mysql57-mysql-debuginfo-0:5.7.19-6.el7.x86_64",
            "7Server-RHSCL-2.4-7.3.Z:rh-mysql57-mysql-devel-0:5.7.19-6.el7.x86_64",
            "7Server-RHSCL-2.4-7.3.Z:rh-mysql57-mysql-errmsg-0:5.7.19-6.el7.x86_64",
            "7Server-RHSCL-2.4-7.3.Z:rh-mysql57-mysql-server-0:5.7.19-6.el7.x86_64",
            "7Server-RHSCL-2.4-7.3.Z:rh-mysql57-mysql-test-0:5.7.19-6.el7.x86_64",
            "7Server-RHSCL-2.4:rh-mysql57-mysql-0:5.7.19-6.el7.src",
            "7Server-RHSCL-2.4:rh-mysql57-mysql-0:5.7.19-6.el7.x86_64",
            "7Server-RHSCL-2.4:rh-mysql57-mysql-common-0:5.7.19-6.el7.x86_64",
            "7Server-RHSCL-2.4:rh-mysql57-mysql-config-0:5.7.19-6.el7.x86_64",
            "7Server-RHSCL-2.4:rh-mysql57-mysql-debuginfo-0:5.7.19-6.el7.x86_64",
            "7Server-RHSCL-2.4:rh-mysql57-mysql-devel-0:5.7.19-6.el7.x86_64",
            "7Server-RHSCL-2.4:rh-mysql57-mysql-errmsg-0:5.7.19-6.el7.x86_64",
            "7Server-RHSCL-2.4:rh-mysql57-mysql-server-0:5.7.19-6.el7.x86_64",
            "7Server-RHSCL-2.4:rh-mysql57-mysql-test-0:5.7.19-6.el7.x86_64",
            "7Workstation-RHSCL-2.4:rh-mysql57-mysql-0:5.7.19-6.el7.src",
            "7Workstation-RHSCL-2.4:rh-mysql57-mysql-0:5.7.19-6.el7.x86_64",
            "7Workstation-RHSCL-2.4:rh-mysql57-mysql-common-0:5.7.19-6.el7.x86_64",
            "7Workstation-RHSCL-2.4:rh-mysql57-mysql-config-0:5.7.19-6.el7.x86_64",
            "7Workstation-RHSCL-2.4:rh-mysql57-mysql-debuginfo-0:5.7.19-6.el7.x86_64",
            "7Workstation-RHSCL-2.4:rh-mysql57-mysql-devel-0:5.7.19-6.el7.x86_64",
            "7Workstation-RHSCL-2.4:rh-mysql57-mysql-errmsg-0:5.7.19-6.el7.x86_64",
            "7Workstation-RHSCL-2.4:rh-mysql57-mysql-server-0:5.7.19-6.el7.x86_64",
            "7Workstation-RHSCL-2.4:rh-mysql57-mysql-test-0:5.7.19-6.el7.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Moderate"
        }
      ],
      "title": "mysql: Server: DML unspecified vulnerability (CPU Apr 2017)"
    },
    {
      "cve": "CVE-2017-3450",
      "discovery_date": "2017-04-19T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "1443363"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Memcached). Supported versions that are affected are 5.6.35 and earlier and 5.7.17 and earlier. Easily \"exploitable\" vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.0 Base Score 7.5 (Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H).",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "mysql: Server: Memcached unspecified vulnerability (CPU Apr 2017)",
          "title": "Vulnerability summary"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "6Server-RHSCL-2.4-6.7.Z:rh-mysql57-mysql-0:5.7.19-6.el6.src",
          "6Server-RHSCL-2.4-6.7.Z:rh-mysql57-mysql-0:5.7.19-6.el6.x86_64",
          "6Server-RHSCL-2.4-6.7.Z:rh-mysql57-mysql-common-0:5.7.19-6.el6.x86_64",
          "6Server-RHSCL-2.4-6.7.Z:rh-mysql57-mysql-config-0:5.7.19-6.el6.x86_64",
          "6Server-RHSCL-2.4-6.7.Z:rh-mysql57-mysql-debuginfo-0:5.7.19-6.el6.x86_64",
          "6Server-RHSCL-2.4-6.7.Z:rh-mysql57-mysql-devel-0:5.7.19-6.el6.x86_64",
          "6Server-RHSCL-2.4-6.7.Z:rh-mysql57-mysql-errmsg-0:5.7.19-6.el6.x86_64",
          "6Server-RHSCL-2.4-6.7.Z:rh-mysql57-mysql-server-0:5.7.19-6.el6.x86_64",
          "6Server-RHSCL-2.4-6.7.Z:rh-mysql57-mysql-test-0:5.7.19-6.el6.x86_64",
          "6Server-RHSCL-2.4:rh-mysql57-mysql-0:5.7.19-6.el6.src",
          "6Server-RHSCL-2.4:rh-mysql57-mysql-0:5.7.19-6.el6.x86_64",
          "6Server-RHSCL-2.4:rh-mysql57-mysql-common-0:5.7.19-6.el6.x86_64",
          "6Server-RHSCL-2.4:rh-mysql57-mysql-config-0:5.7.19-6.el6.x86_64",
          "6Server-RHSCL-2.4:rh-mysql57-mysql-debuginfo-0:5.7.19-6.el6.x86_64",
          "6Server-RHSCL-2.4:rh-mysql57-mysql-devel-0:5.7.19-6.el6.x86_64",
          "6Server-RHSCL-2.4:rh-mysql57-mysql-errmsg-0:5.7.19-6.el6.x86_64",
          "6Server-RHSCL-2.4:rh-mysql57-mysql-server-0:5.7.19-6.el6.x86_64",
          "6Server-RHSCL-2.4:rh-mysql57-mysql-test-0:5.7.19-6.el6.x86_64",
          "6Workstation-RHSCL-2.4:rh-mysql57-mysql-0:5.7.19-6.el6.src",
          "6Workstation-RHSCL-2.4:rh-mysql57-mysql-0:5.7.19-6.el6.x86_64",
          "6Workstation-RHSCL-2.4:rh-mysql57-mysql-common-0:5.7.19-6.el6.x86_64",
          "6Workstation-RHSCL-2.4:rh-mysql57-mysql-config-0:5.7.19-6.el6.x86_64",
          "6Workstation-RHSCL-2.4:rh-mysql57-mysql-debuginfo-0:5.7.19-6.el6.x86_64",
          "6Workstation-RHSCL-2.4:rh-mysql57-mysql-devel-0:5.7.19-6.el6.x86_64",
          "6Workstation-RHSCL-2.4:rh-mysql57-mysql-errmsg-0:5.7.19-6.el6.x86_64",
          "6Workstation-RHSCL-2.4:rh-mysql57-mysql-server-0:5.7.19-6.el6.x86_64",
          "6Workstation-RHSCL-2.4:rh-mysql57-mysql-test-0:5.7.19-6.el6.x86_64",
          "7Server-RHSCL-2.4-7.3.Z:rh-mysql57-mysql-0:5.7.19-6.el7.src",
          "7Server-RHSCL-2.4-7.3.Z:rh-mysql57-mysql-0:5.7.19-6.el7.x86_64",
          "7Server-RHSCL-2.4-7.3.Z:rh-mysql57-mysql-common-0:5.7.19-6.el7.x86_64",
          "7Server-RHSCL-2.4-7.3.Z:rh-mysql57-mysql-config-0:5.7.19-6.el7.x86_64",
          "7Server-RHSCL-2.4-7.3.Z:rh-mysql57-mysql-debuginfo-0:5.7.19-6.el7.x86_64",
          "7Server-RHSCL-2.4-7.3.Z:rh-mysql57-mysql-devel-0:5.7.19-6.el7.x86_64",
          "7Server-RHSCL-2.4-7.3.Z:rh-mysql57-mysql-errmsg-0:5.7.19-6.el7.x86_64",
          "7Server-RHSCL-2.4-7.3.Z:rh-mysql57-mysql-server-0:5.7.19-6.el7.x86_64",
          "7Server-RHSCL-2.4-7.3.Z:rh-mysql57-mysql-test-0:5.7.19-6.el7.x86_64",
          "7Server-RHSCL-2.4:rh-mysql57-mysql-0:5.7.19-6.el7.src",
          "7Server-RHSCL-2.4:rh-mysql57-mysql-0:5.7.19-6.el7.x86_64",
          "7Server-RHSCL-2.4:rh-mysql57-mysql-common-0:5.7.19-6.el7.x86_64",
          "7Server-RHSCL-2.4:rh-mysql57-mysql-config-0:5.7.19-6.el7.x86_64",
          "7Server-RHSCL-2.4:rh-mysql57-mysql-debuginfo-0:5.7.19-6.el7.x86_64",
          "7Server-RHSCL-2.4:rh-mysql57-mysql-devel-0:5.7.19-6.el7.x86_64",
          "7Server-RHSCL-2.4:rh-mysql57-mysql-errmsg-0:5.7.19-6.el7.x86_64",
          "7Server-RHSCL-2.4:rh-mysql57-mysql-server-0:5.7.19-6.el7.x86_64",
          "7Server-RHSCL-2.4:rh-mysql57-mysql-test-0:5.7.19-6.el7.x86_64",
          "7Workstation-RHSCL-2.4:rh-mysql57-mysql-0:5.7.19-6.el7.src",
          "7Workstation-RHSCL-2.4:rh-mysql57-mysql-0:5.7.19-6.el7.x86_64",
          "7Workstation-RHSCL-2.4:rh-mysql57-mysql-common-0:5.7.19-6.el7.x86_64",
          "7Workstation-RHSCL-2.4:rh-mysql57-mysql-config-0:5.7.19-6.el7.x86_64",
          "7Workstation-RHSCL-2.4:rh-mysql57-mysql-debuginfo-0:5.7.19-6.el7.x86_64",
          "7Workstation-RHSCL-2.4:rh-mysql57-mysql-devel-0:5.7.19-6.el7.x86_64",
          "7Workstation-RHSCL-2.4:rh-mysql57-mysql-errmsg-0:5.7.19-6.el7.x86_64",
          "7Workstation-RHSCL-2.4:rh-mysql57-mysql-server-0:5.7.19-6.el7.x86_64",
          "7Workstation-RHSCL-2.4:rh-mysql57-mysql-test-0:5.7.19-6.el7.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2017-3450"
        },
        {
          "category": "external",
          "summary": "RHBZ#1443363",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1443363"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2017-3450",
          "url": "https://www.cve.org/CVERecord?id=CVE-2017-3450"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2017-3450",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2017-3450"
        },
        {
          "category": "external",
          "summary": "http://www.oracle.com/technetwork/security-advisory/cpuapr2017-3236618.html#AppendixMSQL",
          "url": "http://www.oracle.com/technetwork/security-advisory/cpuapr2017-3236618.html#AppendixMSQL"
        }
      ],
      "release_date": "2017-04-19T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2017-10-12T07:53:15+00:00",
          "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAfter installing this update, the MySQL server daemon (mysqld) will be restarted automatically.",
          "product_ids": [
            "6Server-RHSCL-2.4-6.7.Z:rh-mysql57-mysql-0:5.7.19-6.el6.src",
            "6Server-RHSCL-2.4-6.7.Z:rh-mysql57-mysql-0:5.7.19-6.el6.x86_64",
            "6Server-RHSCL-2.4-6.7.Z:rh-mysql57-mysql-common-0:5.7.19-6.el6.x86_64",
            "6Server-RHSCL-2.4-6.7.Z:rh-mysql57-mysql-config-0:5.7.19-6.el6.x86_64",
            "6Server-RHSCL-2.4-6.7.Z:rh-mysql57-mysql-debuginfo-0:5.7.19-6.el6.x86_64",
            "6Server-RHSCL-2.4-6.7.Z:rh-mysql57-mysql-devel-0:5.7.19-6.el6.x86_64",
            "6Server-RHSCL-2.4-6.7.Z:rh-mysql57-mysql-errmsg-0:5.7.19-6.el6.x86_64",
            "6Server-RHSCL-2.4-6.7.Z:rh-mysql57-mysql-server-0:5.7.19-6.el6.x86_64",
            "6Server-RHSCL-2.4-6.7.Z:rh-mysql57-mysql-test-0:5.7.19-6.el6.x86_64",
            "6Server-RHSCL-2.4:rh-mysql57-mysql-0:5.7.19-6.el6.src",
            "6Server-RHSCL-2.4:rh-mysql57-mysql-0:5.7.19-6.el6.x86_64",
            "6Server-RHSCL-2.4:rh-mysql57-mysql-common-0:5.7.19-6.el6.x86_64",
            "6Server-RHSCL-2.4:rh-mysql57-mysql-config-0:5.7.19-6.el6.x86_64",
            "6Server-RHSCL-2.4:rh-mysql57-mysql-debuginfo-0:5.7.19-6.el6.x86_64",
            "6Server-RHSCL-2.4:rh-mysql57-mysql-devel-0:5.7.19-6.el6.x86_64",
            "6Server-RHSCL-2.4:rh-mysql57-mysql-errmsg-0:5.7.19-6.el6.x86_64",
            "6Server-RHSCL-2.4:rh-mysql57-mysql-server-0:5.7.19-6.el6.x86_64",
            "6Server-RHSCL-2.4:rh-mysql57-mysql-test-0:5.7.19-6.el6.x86_64",
            "6Workstation-RHSCL-2.4:rh-mysql57-mysql-0:5.7.19-6.el6.src",
            "6Workstation-RHSCL-2.4:rh-mysql57-mysql-0:5.7.19-6.el6.x86_64",
            "6Workstation-RHSCL-2.4:rh-mysql57-mysql-common-0:5.7.19-6.el6.x86_64",
            "6Workstation-RHSCL-2.4:rh-mysql57-mysql-config-0:5.7.19-6.el6.x86_64",
            "6Workstation-RHSCL-2.4:rh-mysql57-mysql-debuginfo-0:5.7.19-6.el6.x86_64",
            "6Workstation-RHSCL-2.4:rh-mysql57-mysql-devel-0:5.7.19-6.el6.x86_64",
            "6Workstation-RHSCL-2.4:rh-mysql57-mysql-errmsg-0:5.7.19-6.el6.x86_64",
            "6Workstation-RHSCL-2.4:rh-mysql57-mysql-server-0:5.7.19-6.el6.x86_64",
            "6Workstation-RHSCL-2.4:rh-mysql57-mysql-test-0:5.7.19-6.el6.x86_64",
            "7Server-RHSCL-2.4-7.3.Z:rh-mysql57-mysql-0:5.7.19-6.el7.src",
            "7Server-RHSCL-2.4-7.3.Z:rh-mysql57-mysql-0:5.7.19-6.el7.x86_64",
            "7Server-RHSCL-2.4-7.3.Z:rh-mysql57-mysql-common-0:5.7.19-6.el7.x86_64",
            "7Server-RHSCL-2.4-7.3.Z:rh-mysql57-mysql-config-0:5.7.19-6.el7.x86_64",
            "7Server-RHSCL-2.4-7.3.Z:rh-mysql57-mysql-debuginfo-0:5.7.19-6.el7.x86_64",
            "7Server-RHSCL-2.4-7.3.Z:rh-mysql57-mysql-devel-0:5.7.19-6.el7.x86_64",
            "7Server-RHSCL-2.4-7.3.Z:rh-mysql57-mysql-errmsg-0:5.7.19-6.el7.x86_64",
            "7Server-RHSCL-2.4-7.3.Z:rh-mysql57-mysql-server-0:5.7.19-6.el7.x86_64",
            "7Server-RHSCL-2.4-7.3.Z:rh-mysql57-mysql-test-0:5.7.19-6.el7.x86_64",
            "7Server-RHSCL-2.4:rh-mysql57-mysql-0:5.7.19-6.el7.src",
            "7Server-RHSCL-2.4:rh-mysql57-mysql-0:5.7.19-6.el7.x86_64",
            "7Server-RHSCL-2.4:rh-mysql57-mysql-common-0:5.7.19-6.el7.x86_64",
            "7Server-RHSCL-2.4:rh-mysql57-mysql-config-0:5.7.19-6.el7.x86_64",
            "7Server-RHSCL-2.4:rh-mysql57-mysql-debuginfo-0:5.7.19-6.el7.x86_64",
            "7Server-RHSCL-2.4:rh-mysql57-mysql-devel-0:5.7.19-6.el7.x86_64",
            "7Server-RHSCL-2.4:rh-mysql57-mysql-errmsg-0:5.7.19-6.el7.x86_64",
            "7Server-RHSCL-2.4:rh-mysql57-mysql-server-0:5.7.19-6.el7.x86_64",
            "7Server-RHSCL-2.4:rh-mysql57-mysql-test-0:5.7.19-6.el7.x86_64",
            "7Workstation-RHSCL-2.4:rh-mysql57-mysql-0:5.7.19-6.el7.src",
            "7Workstation-RHSCL-2.4:rh-mysql57-mysql-0:5.7.19-6.el7.x86_64",
            "7Workstation-RHSCL-2.4:rh-mysql57-mysql-common-0:5.7.19-6.el7.x86_64",
            "7Workstation-RHSCL-2.4:rh-mysql57-mysql-config-0:5.7.19-6.el7.x86_64",
            "7Workstation-RHSCL-2.4:rh-mysql57-mysql-debuginfo-0:5.7.19-6.el7.x86_64",
            "7Workstation-RHSCL-2.4:rh-mysql57-mysql-devel-0:5.7.19-6.el7.x86_64",
            "7Workstation-RHSCL-2.4:rh-mysql57-mysql-errmsg-0:5.7.19-6.el7.x86_64",
            "7Workstation-RHSCL-2.4:rh-mysql57-mysql-server-0:5.7.19-6.el7.x86_64",
            "7Workstation-RHSCL-2.4:rh-mysql57-mysql-test-0:5.7.19-6.el7.x86_64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2017:2886"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "NONE",
            "integrityImpact": "NONE",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.0"
          },
          "products": [
            "6Server-RHSCL-2.4-6.7.Z:rh-mysql57-mysql-0:5.7.19-6.el6.src",
            "6Server-RHSCL-2.4-6.7.Z:rh-mysql57-mysql-0:5.7.19-6.el6.x86_64",
            "6Server-RHSCL-2.4-6.7.Z:rh-mysql57-mysql-common-0:5.7.19-6.el6.x86_64",
            "6Server-RHSCL-2.4-6.7.Z:rh-mysql57-mysql-config-0:5.7.19-6.el6.x86_64",
            "6Server-RHSCL-2.4-6.7.Z:rh-mysql57-mysql-debuginfo-0:5.7.19-6.el6.x86_64",
            "6Server-RHSCL-2.4-6.7.Z:rh-mysql57-mysql-devel-0:5.7.19-6.el6.x86_64",
            "6Server-RHSCL-2.4-6.7.Z:rh-mysql57-mysql-errmsg-0:5.7.19-6.el6.x86_64",
            "6Server-RHSCL-2.4-6.7.Z:rh-mysql57-mysql-server-0:5.7.19-6.el6.x86_64",
            "6Server-RHSCL-2.4-6.7.Z:rh-mysql57-mysql-test-0:5.7.19-6.el6.x86_64",
            "6Server-RHSCL-2.4:rh-mysql57-mysql-0:5.7.19-6.el6.src",
            "6Server-RHSCL-2.4:rh-mysql57-mysql-0:5.7.19-6.el6.x86_64",
            "6Server-RHSCL-2.4:rh-mysql57-mysql-common-0:5.7.19-6.el6.x86_64",
            "6Server-RHSCL-2.4:rh-mysql57-mysql-config-0:5.7.19-6.el6.x86_64",
            "6Server-RHSCL-2.4:rh-mysql57-mysql-debuginfo-0:5.7.19-6.el6.x86_64",
            "6Server-RHSCL-2.4:rh-mysql57-mysql-devel-0:5.7.19-6.el6.x86_64",
            "6Server-RHSCL-2.4:rh-mysql57-mysql-errmsg-0:5.7.19-6.el6.x86_64",
            "6Server-RHSCL-2.4:rh-mysql57-mysql-server-0:5.7.19-6.el6.x86_64",
            "6Server-RHSCL-2.4:rh-mysql57-mysql-test-0:5.7.19-6.el6.x86_64",
            "6Workstation-RHSCL-2.4:rh-mysql57-mysql-0:5.7.19-6.el6.src",
            "6Workstation-RHSCL-2.4:rh-mysql57-mysql-0:5.7.19-6.el6.x86_64",
            "6Workstation-RHSCL-2.4:rh-mysql57-mysql-common-0:5.7.19-6.el6.x86_64",
            "6Workstation-RHSCL-2.4:rh-mysql57-mysql-config-0:5.7.19-6.el6.x86_64",
            "6Workstation-RHSCL-2.4:rh-mysql57-mysql-debuginfo-0:5.7.19-6.el6.x86_64",
            "6Workstation-RHSCL-2.4:rh-mysql57-mysql-devel-0:5.7.19-6.el6.x86_64",
            "6Workstation-RHSCL-2.4:rh-mysql57-mysql-errmsg-0:5.7.19-6.el6.x86_64",
            "6Workstation-RHSCL-2.4:rh-mysql57-mysql-server-0:5.7.19-6.el6.x86_64",
            "6Workstation-RHSCL-2.4:rh-mysql57-mysql-test-0:5.7.19-6.el6.x86_64",
            "7Server-RHSCL-2.4-7.3.Z:rh-mysql57-mysql-0:5.7.19-6.el7.src",
            "7Server-RHSCL-2.4-7.3.Z:rh-mysql57-mysql-0:5.7.19-6.el7.x86_64",
            "7Server-RHSCL-2.4-7.3.Z:rh-mysql57-mysql-common-0:5.7.19-6.el7.x86_64",
            "7Server-RHSCL-2.4-7.3.Z:rh-mysql57-mysql-config-0:5.7.19-6.el7.x86_64",
            "7Server-RHSCL-2.4-7.3.Z:rh-mysql57-mysql-debuginfo-0:5.7.19-6.el7.x86_64",
            "7Server-RHSCL-2.4-7.3.Z:rh-mysql57-mysql-devel-0:5.7.19-6.el7.x86_64",
            "7Server-RHSCL-2.4-7.3.Z:rh-mysql57-mysql-errmsg-0:5.7.19-6.el7.x86_64",
            "7Server-RHSCL-2.4-7.3.Z:rh-mysql57-mysql-server-0:5.7.19-6.el7.x86_64",
            "7Server-RHSCL-2.4-7.3.Z:rh-mysql57-mysql-test-0:5.7.19-6.el7.x86_64",
            "7Server-RHSCL-2.4:rh-mysql57-mysql-0:5.7.19-6.el7.src",
            "7Server-RHSCL-2.4:rh-mysql57-mysql-0:5.7.19-6.el7.x86_64",
            "7Server-RHSCL-2.4:rh-mysql57-mysql-common-0:5.7.19-6.el7.x86_64",
            "7Server-RHSCL-2.4:rh-mysql57-mysql-config-0:5.7.19-6.el7.x86_64",
            "7Server-RHSCL-2.4:rh-mysql57-mysql-debuginfo-0:5.7.19-6.el7.x86_64",
            "7Server-RHSCL-2.4:rh-mysql57-mysql-devel-0:5.7.19-6.el7.x86_64",
            "7Server-RHSCL-2.4:rh-mysql57-mysql-errmsg-0:5.7.19-6.el7.x86_64",
            "7Server-RHSCL-2.4:rh-mysql57-mysql-server-0:5.7.19-6.el7.x86_64",
            "7Server-RHSCL-2.4:rh-mysql57-mysql-test-0:5.7.19-6.el7.x86_64",
            "7Workstation-RHSCL-2.4:rh-mysql57-mysql-0:5.7.19-6.el7.src",
            "7Workstation-RHSCL-2.4:rh-mysql57-mysql-0:5.7.19-6.el7.x86_64",
            "7Workstation-RHSCL-2.4:rh-mysql57-mysql-common-0:5.7.19-6.el7.x86_64",
            "7Workstation-RHSCL-2.4:rh-mysql57-mysql-config-0:5.7.19-6.el7.x86_64",
            "7Workstation-RHSCL-2.4:rh-mysql57-mysql-debuginfo-0:5.7.19-6.el7.x86_64",
            "7Workstation-RHSCL-2.4:rh-mysql57-mysql-devel-0:5.7.19-6.el7.x86_64",
            "7Workstation-RHSCL-2.4:rh-mysql57-mysql-errmsg-0:5.7.19-6.el7.x86_64",
            "7Workstation-RHSCL-2.4:rh-mysql57-mysql-server-0:5.7.19-6.el7.x86_64",
            "7Workstation-RHSCL-2.4:rh-mysql57-mysql-test-0:5.7.19-6.el7.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Moderate"
        }
      ],
      "title": "mysql: Server: Memcached unspecified vulnerability (CPU Apr 2017)"
    },
    {
      "cve": "CVE-2017-3453",
      "discovery_date": "2017-04-19T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "1443365"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Optimizer). Supported versions that are affected are 5.5.54 and earlier, 5.6.35 and earlier and 5.7.17 and earlier. Easily \"exploitable\" vulnerability allows low privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.0 Base Score 6.5 (Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H).",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "mysql: Server: Optimizer unspecified vulnerability (CPU Apr 2017)",
          "title": "Vulnerability summary"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "6Server-RHSCL-2.4-6.7.Z:rh-mysql57-mysql-0:5.7.19-6.el6.src",
          "6Server-RHSCL-2.4-6.7.Z:rh-mysql57-mysql-0:5.7.19-6.el6.x86_64",
          "6Server-RHSCL-2.4-6.7.Z:rh-mysql57-mysql-common-0:5.7.19-6.el6.x86_64",
          "6Server-RHSCL-2.4-6.7.Z:rh-mysql57-mysql-config-0:5.7.19-6.el6.x86_64",
          "6Server-RHSCL-2.4-6.7.Z:rh-mysql57-mysql-debuginfo-0:5.7.19-6.el6.x86_64",
          "6Server-RHSCL-2.4-6.7.Z:rh-mysql57-mysql-devel-0:5.7.19-6.el6.x86_64",
          "6Server-RHSCL-2.4-6.7.Z:rh-mysql57-mysql-errmsg-0:5.7.19-6.el6.x86_64",
          "6Server-RHSCL-2.4-6.7.Z:rh-mysql57-mysql-server-0:5.7.19-6.el6.x86_64",
          "6Server-RHSCL-2.4-6.7.Z:rh-mysql57-mysql-test-0:5.7.19-6.el6.x86_64",
          "6Server-RHSCL-2.4:rh-mysql57-mysql-0:5.7.19-6.el6.src",
          "6Server-RHSCL-2.4:rh-mysql57-mysql-0:5.7.19-6.el6.x86_64",
          "6Server-RHSCL-2.4:rh-mysql57-mysql-common-0:5.7.19-6.el6.x86_64",
          "6Server-RHSCL-2.4:rh-mysql57-mysql-config-0:5.7.19-6.el6.x86_64",
          "6Server-RHSCL-2.4:rh-mysql57-mysql-debuginfo-0:5.7.19-6.el6.x86_64",
          "6Server-RHSCL-2.4:rh-mysql57-mysql-devel-0:5.7.19-6.el6.x86_64",
          "6Server-RHSCL-2.4:rh-mysql57-mysql-errmsg-0:5.7.19-6.el6.x86_64",
          "6Server-RHSCL-2.4:rh-mysql57-mysql-server-0:5.7.19-6.el6.x86_64",
          "6Server-RHSCL-2.4:rh-mysql57-mysql-test-0:5.7.19-6.el6.x86_64",
          "6Workstation-RHSCL-2.4:rh-mysql57-mysql-0:5.7.19-6.el6.src",
          "6Workstation-RHSCL-2.4:rh-mysql57-mysql-0:5.7.19-6.el6.x86_64",
          "6Workstation-RHSCL-2.4:rh-mysql57-mysql-common-0:5.7.19-6.el6.x86_64",
          "6Workstation-RHSCL-2.4:rh-mysql57-mysql-config-0:5.7.19-6.el6.x86_64",
          "6Workstation-RHSCL-2.4:rh-mysql57-mysql-debuginfo-0:5.7.19-6.el6.x86_64",
          "6Workstation-RHSCL-2.4:rh-mysql57-mysql-devel-0:5.7.19-6.el6.x86_64",
          "6Workstation-RHSCL-2.4:rh-mysql57-mysql-errmsg-0:5.7.19-6.el6.x86_64",
          "6Workstation-RHSCL-2.4:rh-mysql57-mysql-server-0:5.7.19-6.el6.x86_64",
          "6Workstation-RHSCL-2.4:rh-mysql57-mysql-test-0:5.7.19-6.el6.x86_64",
          "7Server-RHSCL-2.4-7.3.Z:rh-mysql57-mysql-0:5.7.19-6.el7.src",
          "7Server-RHSCL-2.4-7.3.Z:rh-mysql57-mysql-0:5.7.19-6.el7.x86_64",
          "7Server-RHSCL-2.4-7.3.Z:rh-mysql57-mysql-common-0:5.7.19-6.el7.x86_64",
          "7Server-RHSCL-2.4-7.3.Z:rh-mysql57-mysql-config-0:5.7.19-6.el7.x86_64",
          "7Server-RHSCL-2.4-7.3.Z:rh-mysql57-mysql-debuginfo-0:5.7.19-6.el7.x86_64",
          "7Server-RHSCL-2.4-7.3.Z:rh-mysql57-mysql-devel-0:5.7.19-6.el7.x86_64",
          "7Server-RHSCL-2.4-7.3.Z:rh-mysql57-mysql-errmsg-0:5.7.19-6.el7.x86_64",
          "7Server-RHSCL-2.4-7.3.Z:rh-mysql57-mysql-server-0:5.7.19-6.el7.x86_64",
          "7Server-RHSCL-2.4-7.3.Z:rh-mysql57-mysql-test-0:5.7.19-6.el7.x86_64",
          "7Server-RHSCL-2.4:rh-mysql57-mysql-0:5.7.19-6.el7.src",
          "7Server-RHSCL-2.4:rh-mysql57-mysql-0:5.7.19-6.el7.x86_64",
          "7Server-RHSCL-2.4:rh-mysql57-mysql-common-0:5.7.19-6.el7.x86_64",
          "7Server-RHSCL-2.4:rh-mysql57-mysql-config-0:5.7.19-6.el7.x86_64",
          "7Server-RHSCL-2.4:rh-mysql57-mysql-debuginfo-0:5.7.19-6.el7.x86_64",
          "7Server-RHSCL-2.4:rh-mysql57-mysql-devel-0:5.7.19-6.el7.x86_64",
          "7Server-RHSCL-2.4:rh-mysql57-mysql-errmsg-0:5.7.19-6.el7.x86_64",
          "7Server-RHSCL-2.4:rh-mysql57-mysql-server-0:5.7.19-6.el7.x86_64",
          "7Server-RHSCL-2.4:rh-mysql57-mysql-test-0:5.7.19-6.el7.x86_64",
          "7Workstation-RHSCL-2.4:rh-mysql57-mysql-0:5.7.19-6.el7.src",
          "7Workstation-RHSCL-2.4:rh-mysql57-mysql-0:5.7.19-6.el7.x86_64",
          "7Workstation-RHSCL-2.4:rh-mysql57-mysql-common-0:5.7.19-6.el7.x86_64",
          "7Workstation-RHSCL-2.4:rh-mysql57-mysql-config-0:5.7.19-6.el7.x86_64",
          "7Workstation-RHSCL-2.4:rh-mysql57-mysql-debuginfo-0:5.7.19-6.el7.x86_64",
          "7Workstation-RHSCL-2.4:rh-mysql57-mysql-devel-0:5.7.19-6.el7.x86_64",
          "7Workstation-RHSCL-2.4:rh-mysql57-mysql-errmsg-0:5.7.19-6.el7.x86_64",
          "7Workstation-RHSCL-2.4:rh-mysql57-mysql-server-0:5.7.19-6.el7.x86_64",
          "7Workstation-RHSCL-2.4:rh-mysql57-mysql-test-0:5.7.19-6.el7.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2017-3453"
        },
        {
          "category": "external",
          "summary": "RHBZ#1443365",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1443365"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2017-3453",
          "url": "https://www.cve.org/CVERecord?id=CVE-2017-3453"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2017-3453",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2017-3453"
        },
        {
          "category": "external",
          "summary": "http://www.oracle.com/technetwork/security-advisory/cpuapr2017-3236618.html#AppendixMSQL",
          "url": "http://www.oracle.com/technetwork/security-advisory/cpuapr2017-3236618.html#AppendixMSQL"
        }
      ],
      "release_date": "2017-04-19T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2017-10-12T07:53:15+00:00",
          "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAfter installing this update, the MySQL server daemon (mysqld) will be restarted automatically.",
          "product_ids": [
            "6Server-RHSCL-2.4-6.7.Z:rh-mysql57-mysql-0:5.7.19-6.el6.src",
            "6Server-RHSCL-2.4-6.7.Z:rh-mysql57-mysql-0:5.7.19-6.el6.x86_64",
            "6Server-RHSCL-2.4-6.7.Z:rh-mysql57-mysql-common-0:5.7.19-6.el6.x86_64",
            "6Server-RHSCL-2.4-6.7.Z:rh-mysql57-mysql-config-0:5.7.19-6.el6.x86_64",
            "6Server-RHSCL-2.4-6.7.Z:rh-mysql57-mysql-debuginfo-0:5.7.19-6.el6.x86_64",
            "6Server-RHSCL-2.4-6.7.Z:rh-mysql57-mysql-devel-0:5.7.19-6.el6.x86_64",
            "6Server-RHSCL-2.4-6.7.Z:rh-mysql57-mysql-errmsg-0:5.7.19-6.el6.x86_64",
            "6Server-RHSCL-2.4-6.7.Z:rh-mysql57-mysql-server-0:5.7.19-6.el6.x86_64",
            "6Server-RHSCL-2.4-6.7.Z:rh-mysql57-mysql-test-0:5.7.19-6.el6.x86_64",
            "6Server-RHSCL-2.4:rh-mysql57-mysql-0:5.7.19-6.el6.src",
            "6Server-RHSCL-2.4:rh-mysql57-mysql-0:5.7.19-6.el6.x86_64",
            "6Server-RHSCL-2.4:rh-mysql57-mysql-common-0:5.7.19-6.el6.x86_64",
            "6Server-RHSCL-2.4:rh-mysql57-mysql-config-0:5.7.19-6.el6.x86_64",
            "6Server-RHSCL-2.4:rh-mysql57-mysql-debuginfo-0:5.7.19-6.el6.x86_64",
            "6Server-RHSCL-2.4:rh-mysql57-mysql-devel-0:5.7.19-6.el6.x86_64",
            "6Server-RHSCL-2.4:rh-mysql57-mysql-errmsg-0:5.7.19-6.el6.x86_64",
            "6Server-RHSCL-2.4:rh-mysql57-mysql-server-0:5.7.19-6.el6.x86_64",
            "6Server-RHSCL-2.4:rh-mysql57-mysql-test-0:5.7.19-6.el6.x86_64",
            "6Workstation-RHSCL-2.4:rh-mysql57-mysql-0:5.7.19-6.el6.src",
            "6Workstation-RHSCL-2.4:rh-mysql57-mysql-0:5.7.19-6.el6.x86_64",
            "6Workstation-RHSCL-2.4:rh-mysql57-mysql-common-0:5.7.19-6.el6.x86_64",
            "6Workstation-RHSCL-2.4:rh-mysql57-mysql-config-0:5.7.19-6.el6.x86_64",
            "6Workstation-RHSCL-2.4:rh-mysql57-mysql-debuginfo-0:5.7.19-6.el6.x86_64",
            "6Workstation-RHSCL-2.4:rh-mysql57-mysql-devel-0:5.7.19-6.el6.x86_64",
            "6Workstation-RHSCL-2.4:rh-mysql57-mysql-errmsg-0:5.7.19-6.el6.x86_64",
            "6Workstation-RHSCL-2.4:rh-mysql57-mysql-server-0:5.7.19-6.el6.x86_64",
            "6Workstation-RHSCL-2.4:rh-mysql57-mysql-test-0:5.7.19-6.el6.x86_64",
            "7Server-RHSCL-2.4-7.3.Z:rh-mysql57-mysql-0:5.7.19-6.el7.src",
            "7Server-RHSCL-2.4-7.3.Z:rh-mysql57-mysql-0:5.7.19-6.el7.x86_64",
            "7Server-RHSCL-2.4-7.3.Z:rh-mysql57-mysql-common-0:5.7.19-6.el7.x86_64",
            "7Server-RHSCL-2.4-7.3.Z:rh-mysql57-mysql-config-0:5.7.19-6.el7.x86_64",
            "7Server-RHSCL-2.4-7.3.Z:rh-mysql57-mysql-debuginfo-0:5.7.19-6.el7.x86_64",
            "7Server-RHSCL-2.4-7.3.Z:rh-mysql57-mysql-devel-0:5.7.19-6.el7.x86_64",
            "7Server-RHSCL-2.4-7.3.Z:rh-mysql57-mysql-errmsg-0:5.7.19-6.el7.x86_64",
            "7Server-RHSCL-2.4-7.3.Z:rh-mysql57-mysql-server-0:5.7.19-6.el7.x86_64",
            "7Server-RHSCL-2.4-7.3.Z:rh-mysql57-mysql-test-0:5.7.19-6.el7.x86_64",
            "7Server-RHSCL-2.4:rh-mysql57-mysql-0:5.7.19-6.el7.src",
            "7Server-RHSCL-2.4:rh-mysql57-mysql-0:5.7.19-6.el7.x86_64",
            "7Server-RHSCL-2.4:rh-mysql57-mysql-common-0:5.7.19-6.el7.x86_64",
            "7Server-RHSCL-2.4:rh-mysql57-mysql-config-0:5.7.19-6.el7.x86_64",
            "7Server-RHSCL-2.4:rh-mysql57-mysql-debuginfo-0:5.7.19-6.el7.x86_64",
            "7Server-RHSCL-2.4:rh-mysql57-mysql-devel-0:5.7.19-6.el7.x86_64",
            "7Server-RHSCL-2.4:rh-mysql57-mysql-errmsg-0:5.7.19-6.el7.x86_64",
            "7Server-RHSCL-2.4:rh-mysql57-mysql-server-0:5.7.19-6.el7.x86_64",
            "7Server-RHSCL-2.4:rh-mysql57-mysql-test-0:5.7.19-6.el7.x86_64",
            "7Workstation-RHSCL-2.4:rh-mysql57-mysql-0:5.7.19-6.el7.src",
            "7Workstation-RHSCL-2.4:rh-mysql57-mysql-0:5.7.19-6.el7.x86_64",
            "7Workstation-RHSCL-2.4:rh-mysql57-mysql-common-0:5.7.19-6.el7.x86_64",
            "7Workstation-RHSCL-2.4:rh-mysql57-mysql-config-0:5.7.19-6.el7.x86_64",
            "7Workstation-RHSCL-2.4:rh-mysql57-mysql-debuginfo-0:5.7.19-6.el7.x86_64",
            "7Workstation-RHSCL-2.4:rh-mysql57-mysql-devel-0:5.7.19-6.el7.x86_64",
            "7Workstation-RHSCL-2.4:rh-mysql57-mysql-errmsg-0:5.7.19-6.el7.x86_64",
            "7Workstation-RHSCL-2.4:rh-mysql57-mysql-server-0:5.7.19-6.el7.x86_64",
            "7Workstation-RHSCL-2.4:rh-mysql57-mysql-test-0:5.7.19-6.el7.x86_64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2017:2886"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 6.5,
            "baseSeverity": "MEDIUM",
            "confidentialityImpact": "NONE",
            "integrityImpact": "NONE",
            "privilegesRequired": "LOW",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.0"
          },
          "products": [
            "6Server-RHSCL-2.4-6.7.Z:rh-mysql57-mysql-0:5.7.19-6.el6.src",
            "6Server-RHSCL-2.4-6.7.Z:rh-mysql57-mysql-0:5.7.19-6.el6.x86_64",
            "6Server-RHSCL-2.4-6.7.Z:rh-mysql57-mysql-common-0:5.7.19-6.el6.x86_64",
            "6Server-RHSCL-2.4-6.7.Z:rh-mysql57-mysql-config-0:5.7.19-6.el6.x86_64",
            "6Server-RHSCL-2.4-6.7.Z:rh-mysql57-mysql-debuginfo-0:5.7.19-6.el6.x86_64",
            "6Server-RHSCL-2.4-6.7.Z:rh-mysql57-mysql-devel-0:5.7.19-6.el6.x86_64",
            "6Server-RHSCL-2.4-6.7.Z:rh-mysql57-mysql-errmsg-0:5.7.19-6.el6.x86_64",
            "6Server-RHSCL-2.4-6.7.Z:rh-mysql57-mysql-server-0:5.7.19-6.el6.x86_64",
            "6Server-RHSCL-2.4-6.7.Z:rh-mysql57-mysql-test-0:5.7.19-6.el6.x86_64",
            "6Server-RHSCL-2.4:rh-mysql57-mysql-0:5.7.19-6.el6.src",
            "6Server-RHSCL-2.4:rh-mysql57-mysql-0:5.7.19-6.el6.x86_64",
            "6Server-RHSCL-2.4:rh-mysql57-mysql-common-0:5.7.19-6.el6.x86_64",
            "6Server-RHSCL-2.4:rh-mysql57-mysql-config-0:5.7.19-6.el6.x86_64",
            "6Server-RHSCL-2.4:rh-mysql57-mysql-debuginfo-0:5.7.19-6.el6.x86_64",
            "6Server-RHSCL-2.4:rh-mysql57-mysql-devel-0:5.7.19-6.el6.x86_64",
            "6Server-RHSCL-2.4:rh-mysql57-mysql-errmsg-0:5.7.19-6.el6.x86_64",
            "6Server-RHSCL-2.4:rh-mysql57-mysql-server-0:5.7.19-6.el6.x86_64",
            "6Server-RHSCL-2.4:rh-mysql57-mysql-test-0:5.7.19-6.el6.x86_64",
            "6Workstation-RHSCL-2.4:rh-mysql57-mysql-0:5.7.19-6.el6.src",
            "6Workstation-RHSCL-2.4:rh-mysql57-mysql-0:5.7.19-6.el6.x86_64",
            "6Workstation-RHSCL-2.4:rh-mysql57-mysql-common-0:5.7.19-6.el6.x86_64",
            "6Workstation-RHSCL-2.4:rh-mysql57-mysql-config-0:5.7.19-6.el6.x86_64",
            "6Workstation-RHSCL-2.4:rh-mysql57-mysql-debuginfo-0:5.7.19-6.el6.x86_64",
            "6Workstation-RHSCL-2.4:rh-mysql57-mysql-devel-0:5.7.19-6.el6.x86_64",
            "6Workstation-RHSCL-2.4:rh-mysql57-mysql-errmsg-0:5.7.19-6.el6.x86_64",
            "6Workstation-RHSCL-2.4:rh-mysql57-mysql-server-0:5.7.19-6.el6.x86_64",
            "6Workstation-RHSCL-2.4:rh-mysql57-mysql-test-0:5.7.19-6.el6.x86_64",
            "7Server-RHSCL-2.4-7.3.Z:rh-mysql57-mysql-0:5.7.19-6.el7.src",
            "7Server-RHSCL-2.4-7.3.Z:rh-mysql57-mysql-0:5.7.19-6.el7.x86_64",
            "7Server-RHSCL-2.4-7.3.Z:rh-mysql57-mysql-common-0:5.7.19-6.el7.x86_64",
            "7Server-RHSCL-2.4-7.3.Z:rh-mysql57-mysql-config-0:5.7.19-6.el7.x86_64",
            "7Server-RHSCL-2.4-7.3.Z:rh-mysql57-mysql-debuginfo-0:5.7.19-6.el7.x86_64",
            "7Server-RHSCL-2.4-7.3.Z:rh-mysql57-mysql-devel-0:5.7.19-6.el7.x86_64",
            "7Server-RHSCL-2.4-7.3.Z:rh-mysql57-mysql-errmsg-0:5.7.19-6.el7.x86_64",
            "7Server-RHSCL-2.4-7.3.Z:rh-mysql57-mysql-server-0:5.7.19-6.el7.x86_64",
            "7Server-RHSCL-2.4-7.3.Z:rh-mysql57-mysql-test-0:5.7.19-6.el7.x86_64",
            "7Server-RHSCL-2.4:rh-mysql57-mysql-0:5.7.19-6.el7.src",
            "7Server-RHSCL-2.4:rh-mysql57-mysql-0:5.7.19-6.el7.x86_64",
            "7Server-RHSCL-2.4:rh-mysql57-mysql-common-0:5.7.19-6.el7.x86_64",
            "7Server-RHSCL-2.4:rh-mysql57-mysql-config-0:5.7.19-6.el7.x86_64",
            "7Server-RHSCL-2.4:rh-mysql57-mysql-debuginfo-0:5.7.19-6.el7.x86_64",
            "7Server-RHSCL-2.4:rh-mysql57-mysql-devel-0:5.7.19-6.el7.x86_64",
            "7Server-RHSCL-2.4:rh-mysql57-mysql-errmsg-0:5.7.19-6.el7.x86_64",
            "7Server-RHSCL-2.4:rh-mysql57-mysql-server-0:5.7.19-6.el7.x86_64",
            "7Server-RHSCL-2.4:rh-mysql57-mysql-test-0:5.7.19-6.el7.x86_64",
            "7Workstation-RHSCL-2.4:rh-mysql57-mysql-0:5.7.19-6.el7.src",
            "7Workstation-RHSCL-2.4:rh-mysql57-mysql-0:5.7.19-6.el7.x86_64",
            "7Workstation-RHSCL-2.4:rh-mysql57-mysql-common-0:5.7.19-6.el7.x86_64",
            "7Workstation-RHSCL-2.4:rh-mysql57-mysql-config-0:5.7.19-6.el7.x86_64",
            "7Workstation-RHSCL-2.4:rh-mysql57-mysql-debuginfo-0:5.7.19-6.el7.x86_64",
            "7Workstation-RHSCL-2.4:rh-mysql57-mysql-devel-0:5.7.19-6.el7.x86_64",
            "7Workstation-RHSCL-2.4:rh-mysql57-mysql-errmsg-0:5.7.19-6.el7.x86_64",
            "7Workstation-RHSCL-2.4:rh-mysql57-mysql-server-0:5.7.19-6.el7.x86_64",
            "7Workstation-RHSCL-2.4:rh-mysql57-mysql-test-0:5.7.19-6.el7.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Moderate"
        }
      ],
      "title": "mysql: Server: Optimizer unspecified vulnerability (CPU Apr 2017)"
    },
    {
      "cve": "CVE-2017-3454",
      "discovery_date": "2017-04-19T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "1443366"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: InnoDB). Supported versions that are affected are 5.7.17 and earlier. Easily \"exploitable\" vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server as well as unauthorized update, insert or delete access to some of MySQL Server accessible data. CVSS 3.0 Base Score 5.5 (Integrity and Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:L/A:H).",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "mysql: Server: InnoDB unspecified vulnerability (CPU Apr 2017)",
          "title": "Vulnerability summary"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "6Server-RHSCL-2.4-6.7.Z:rh-mysql57-mysql-0:5.7.19-6.el6.src",
          "6Server-RHSCL-2.4-6.7.Z:rh-mysql57-mysql-0:5.7.19-6.el6.x86_64",
          "6Server-RHSCL-2.4-6.7.Z:rh-mysql57-mysql-common-0:5.7.19-6.el6.x86_64",
          "6Server-RHSCL-2.4-6.7.Z:rh-mysql57-mysql-config-0:5.7.19-6.el6.x86_64",
          "6Server-RHSCL-2.4-6.7.Z:rh-mysql57-mysql-debuginfo-0:5.7.19-6.el6.x86_64",
          "6Server-RHSCL-2.4-6.7.Z:rh-mysql57-mysql-devel-0:5.7.19-6.el6.x86_64",
          "6Server-RHSCL-2.4-6.7.Z:rh-mysql57-mysql-errmsg-0:5.7.19-6.el6.x86_64",
          "6Server-RHSCL-2.4-6.7.Z:rh-mysql57-mysql-server-0:5.7.19-6.el6.x86_64",
          "6Server-RHSCL-2.4-6.7.Z:rh-mysql57-mysql-test-0:5.7.19-6.el6.x86_64",
          "6Server-RHSCL-2.4:rh-mysql57-mysql-0:5.7.19-6.el6.src",
          "6Server-RHSCL-2.4:rh-mysql57-mysql-0:5.7.19-6.el6.x86_64",
          "6Server-RHSCL-2.4:rh-mysql57-mysql-common-0:5.7.19-6.el6.x86_64",
          "6Server-RHSCL-2.4:rh-mysql57-mysql-config-0:5.7.19-6.el6.x86_64",
          "6Server-RHSCL-2.4:rh-mysql57-mysql-debuginfo-0:5.7.19-6.el6.x86_64",
          "6Server-RHSCL-2.4:rh-mysql57-mysql-devel-0:5.7.19-6.el6.x86_64",
          "6Server-RHSCL-2.4:rh-mysql57-mysql-errmsg-0:5.7.19-6.el6.x86_64",
          "6Server-RHSCL-2.4:rh-mysql57-mysql-server-0:5.7.19-6.el6.x86_64",
          "6Server-RHSCL-2.4:rh-mysql57-mysql-test-0:5.7.19-6.el6.x86_64",
          "6Workstation-RHSCL-2.4:rh-mysql57-mysql-0:5.7.19-6.el6.src",
          "6Workstation-RHSCL-2.4:rh-mysql57-mysql-0:5.7.19-6.el6.x86_64",
          "6Workstation-RHSCL-2.4:rh-mysql57-mysql-common-0:5.7.19-6.el6.x86_64",
          "6Workstation-RHSCL-2.4:rh-mysql57-mysql-config-0:5.7.19-6.el6.x86_64",
          "6Workstation-RHSCL-2.4:rh-mysql57-mysql-debuginfo-0:5.7.19-6.el6.x86_64",
          "6Workstation-RHSCL-2.4:rh-mysql57-mysql-devel-0:5.7.19-6.el6.x86_64",
          "6Workstation-RHSCL-2.4:rh-mysql57-mysql-errmsg-0:5.7.19-6.el6.x86_64",
          "6Workstation-RHSCL-2.4:rh-mysql57-mysql-server-0:5.7.19-6.el6.x86_64",
          "6Workstation-RHSCL-2.4:rh-mysql57-mysql-test-0:5.7.19-6.el6.x86_64",
          "7Server-RHSCL-2.4-7.3.Z:rh-mysql57-mysql-0:5.7.19-6.el7.src",
          "7Server-RHSCL-2.4-7.3.Z:rh-mysql57-mysql-0:5.7.19-6.el7.x86_64",
          "7Server-RHSCL-2.4-7.3.Z:rh-mysql57-mysql-common-0:5.7.19-6.el7.x86_64",
          "7Server-RHSCL-2.4-7.3.Z:rh-mysql57-mysql-config-0:5.7.19-6.el7.x86_64",
          "7Server-RHSCL-2.4-7.3.Z:rh-mysql57-mysql-debuginfo-0:5.7.19-6.el7.x86_64",
          "7Server-RHSCL-2.4-7.3.Z:rh-mysql57-mysql-devel-0:5.7.19-6.el7.x86_64",
          "7Server-RHSCL-2.4-7.3.Z:rh-mysql57-mysql-errmsg-0:5.7.19-6.el7.x86_64",
          "7Server-RHSCL-2.4-7.3.Z:rh-mysql57-mysql-server-0:5.7.19-6.el7.x86_64",
          "7Server-RHSCL-2.4-7.3.Z:rh-mysql57-mysql-test-0:5.7.19-6.el7.x86_64",
          "7Server-RHSCL-2.4:rh-mysql57-mysql-0:5.7.19-6.el7.src",
          "7Server-RHSCL-2.4:rh-mysql57-mysql-0:5.7.19-6.el7.x86_64",
          "7Server-RHSCL-2.4:rh-mysql57-mysql-common-0:5.7.19-6.el7.x86_64",
          "7Server-RHSCL-2.4:rh-mysql57-mysql-config-0:5.7.19-6.el7.x86_64",
          "7Server-RHSCL-2.4:rh-mysql57-mysql-debuginfo-0:5.7.19-6.el7.x86_64",
          "7Server-RHSCL-2.4:rh-mysql57-mysql-devel-0:5.7.19-6.el7.x86_64",
          "7Server-RHSCL-2.4:rh-mysql57-mysql-errmsg-0:5.7.19-6.el7.x86_64",
          "7Server-RHSCL-2.4:rh-mysql57-mysql-server-0:5.7.19-6.el7.x86_64",
          "7Server-RHSCL-2.4:rh-mysql57-mysql-test-0:5.7.19-6.el7.x86_64",
          "7Workstation-RHSCL-2.4:rh-mysql57-mysql-0:5.7.19-6.el7.src",
          "7Workstation-RHSCL-2.4:rh-mysql57-mysql-0:5.7.19-6.el7.x86_64",
          "7Workstation-RHSCL-2.4:rh-mysql57-mysql-common-0:5.7.19-6.el7.x86_64",
          "7Workstation-RHSCL-2.4:rh-mysql57-mysql-config-0:5.7.19-6.el7.x86_64",
          "7Workstation-RHSCL-2.4:rh-mysql57-mysql-debuginfo-0:5.7.19-6.el7.x86_64",
          "7Workstation-RHSCL-2.4:rh-mysql57-mysql-devel-0:5.7.19-6.el7.x86_64",
          "7Workstation-RHSCL-2.4:rh-mysql57-mysql-errmsg-0:5.7.19-6.el7.x86_64",
          "7Workstation-RHSCL-2.4:rh-mysql57-mysql-server-0:5.7.19-6.el7.x86_64",
          "7Workstation-RHSCL-2.4:rh-mysql57-mysql-test-0:5.7.19-6.el7.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2017-3454"
        },
        {
          "category": "external",
          "summary": "RHBZ#1443366",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1443366"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2017-3454",
          "url": "https://www.cve.org/CVERecord?id=CVE-2017-3454"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2017-3454",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2017-3454"
        },
        {
          "category": "external",
          "summary": "http://www.oracle.com/technetwork/security-advisory/cpuapr2017-3236618.html#AppendixMSQL",
          "url": "http://www.oracle.com/technetwork/security-advisory/cpuapr2017-3236618.html#AppendixMSQL"
        }
      ],
      "release_date": "2017-04-19T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2017-10-12T07:53:15+00:00",
          "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAfter installing this update, the MySQL server daemon (mysqld) will be restarted automatically.",
          "product_ids": [
            "6Server-RHSCL-2.4-6.7.Z:rh-mysql57-mysql-0:5.7.19-6.el6.src",
            "6Server-RHSCL-2.4-6.7.Z:rh-mysql57-mysql-0:5.7.19-6.el6.x86_64",
            "6Server-RHSCL-2.4-6.7.Z:rh-mysql57-mysql-common-0:5.7.19-6.el6.x86_64",
            "6Server-RHSCL-2.4-6.7.Z:rh-mysql57-mysql-config-0:5.7.19-6.el6.x86_64",
            "6Server-RHSCL-2.4-6.7.Z:rh-mysql57-mysql-debuginfo-0:5.7.19-6.el6.x86_64",
            "6Server-RHSCL-2.4-6.7.Z:rh-mysql57-mysql-devel-0:5.7.19-6.el6.x86_64",
            "6Server-RHSCL-2.4-6.7.Z:rh-mysql57-mysql-errmsg-0:5.7.19-6.el6.x86_64",
            "6Server-RHSCL-2.4-6.7.Z:rh-mysql57-mysql-server-0:5.7.19-6.el6.x86_64",
            "6Server-RHSCL-2.4-6.7.Z:rh-mysql57-mysql-test-0:5.7.19-6.el6.x86_64",
            "6Server-RHSCL-2.4:rh-mysql57-mysql-0:5.7.19-6.el6.src",
            "6Server-RHSCL-2.4:rh-mysql57-mysql-0:5.7.19-6.el6.x86_64",
            "6Server-RHSCL-2.4:rh-mysql57-mysql-common-0:5.7.19-6.el6.x86_64",
            "6Server-RHSCL-2.4:rh-mysql57-mysql-config-0:5.7.19-6.el6.x86_64",
            "6Server-RHSCL-2.4:rh-mysql57-mysql-debuginfo-0:5.7.19-6.el6.x86_64",
            "6Server-RHSCL-2.4:rh-mysql57-mysql-devel-0:5.7.19-6.el6.x86_64",
            "6Server-RHSCL-2.4:rh-mysql57-mysql-errmsg-0:5.7.19-6.el6.x86_64",
            "6Server-RHSCL-2.4:rh-mysql57-mysql-server-0:5.7.19-6.el6.x86_64",
            "6Server-RHSCL-2.4:rh-mysql57-mysql-test-0:5.7.19-6.el6.x86_64",
            "6Workstation-RHSCL-2.4:rh-mysql57-mysql-0:5.7.19-6.el6.src",
            "6Workstation-RHSCL-2.4:rh-mysql57-mysql-0:5.7.19-6.el6.x86_64",
            "6Workstation-RHSCL-2.4:rh-mysql57-mysql-common-0:5.7.19-6.el6.x86_64",
            "6Workstation-RHSCL-2.4:rh-mysql57-mysql-config-0:5.7.19-6.el6.x86_64",
            "6Workstation-RHSCL-2.4:rh-mysql57-mysql-debuginfo-0:5.7.19-6.el6.x86_64",
            "6Workstation-RHSCL-2.4:rh-mysql57-mysql-devel-0:5.7.19-6.el6.x86_64",
            "6Workstation-RHSCL-2.4:rh-mysql57-mysql-errmsg-0:5.7.19-6.el6.x86_64",
            "6Workstation-RHSCL-2.4:rh-mysql57-mysql-server-0:5.7.19-6.el6.x86_64",
            "6Workstation-RHSCL-2.4:rh-mysql57-mysql-test-0:5.7.19-6.el6.x86_64",
            "7Server-RHSCL-2.4-7.3.Z:rh-mysql57-mysql-0:5.7.19-6.el7.src",
            "7Server-RHSCL-2.4-7.3.Z:rh-mysql57-mysql-0:5.7.19-6.el7.x86_64",
            "7Server-RHSCL-2.4-7.3.Z:rh-mysql57-mysql-common-0:5.7.19-6.el7.x86_64",
            "7Server-RHSCL-2.4-7.3.Z:rh-mysql57-mysql-config-0:5.7.19-6.el7.x86_64",
            "7Server-RHSCL-2.4-7.3.Z:rh-mysql57-mysql-debuginfo-0:5.7.19-6.el7.x86_64",
            "7Server-RHSCL-2.4-7.3.Z:rh-mysql57-mysql-devel-0:5.7.19-6.el7.x86_64",
            "7Server-RHSCL-2.4-7.3.Z:rh-mysql57-mysql-errmsg-0:5.7.19-6.el7.x86_64",
            "7Server-RHSCL-2.4-7.3.Z:rh-mysql57-mysql-server-0:5.7.19-6.el7.x86_64",
            "7Server-RHSCL-2.4-7.3.Z:rh-mysql57-mysql-test-0:5.7.19-6.el7.x86_64",
            "7Server-RHSCL-2.4:rh-mysql57-mysql-0:5.7.19-6.el7.src",
            "7Server-RHSCL-2.4:rh-mysql57-mysql-0:5.7.19-6.el7.x86_64",
            "7Server-RHSCL-2.4:rh-mysql57-mysql-common-0:5.7.19-6.el7.x86_64",
            "7Server-RHSCL-2.4:rh-mysql57-mysql-config-0:5.7.19-6.el7.x86_64",
            "7Server-RHSCL-2.4:rh-mysql57-mysql-debuginfo-0:5.7.19-6.el7.x86_64",
            "7Server-RHSCL-2.4:rh-mysql57-mysql-devel-0:5.7.19-6.el7.x86_64",
            "7Server-RHSCL-2.4:rh-mysql57-mysql-errmsg-0:5.7.19-6.el7.x86_64",
            "7Server-RHSCL-2.4:rh-mysql57-mysql-server-0:5.7.19-6.el7.x86_64",
            "7Server-RHSCL-2.4:rh-mysql57-mysql-test-0:5.7.19-6.el7.x86_64",
            "7Workstation-RHSCL-2.4:rh-mysql57-mysql-0:5.7.19-6.el7.src",
            "7Workstation-RHSCL-2.4:rh-mysql57-mysql-0:5.7.19-6.el7.x86_64",
            "7Workstation-RHSCL-2.4:rh-mysql57-mysql-common-0:5.7.19-6.el7.x86_64",
            "7Workstation-RHSCL-2.4:rh-mysql57-mysql-config-0:5.7.19-6.el7.x86_64",
            "7Workstation-RHSCL-2.4:rh-mysql57-mysql-debuginfo-0:5.7.19-6.el7.x86_64",
            "7Workstation-RHSCL-2.4:rh-mysql57-mysql-devel-0:5.7.19-6.el7.x86_64",
            "7Workstation-RHSCL-2.4:rh-mysql57-mysql-errmsg-0:5.7.19-6.el7.x86_64",
            "7Workstation-RHSCL-2.4:rh-mysql57-mysql-server-0:5.7.19-6.el7.x86_64",
            "7Workstation-RHSCL-2.4:rh-mysql57-mysql-test-0:5.7.19-6.el7.x86_64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2017:2886"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 5.5,
            "baseSeverity": "MEDIUM",
            "confidentialityImpact": "NONE",
            "integrityImpact": "LOW",
            "privilegesRequired": "HIGH",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:L/A:H",
            "version": "3.0"
          },
          "products": [
            "6Server-RHSCL-2.4-6.7.Z:rh-mysql57-mysql-0:5.7.19-6.el6.src",
            "6Server-RHSCL-2.4-6.7.Z:rh-mysql57-mysql-0:5.7.19-6.el6.x86_64",
            "6Server-RHSCL-2.4-6.7.Z:rh-mysql57-mysql-common-0:5.7.19-6.el6.x86_64",
            "6Server-RHSCL-2.4-6.7.Z:rh-mysql57-mysql-config-0:5.7.19-6.el6.x86_64",
            "6Server-RHSCL-2.4-6.7.Z:rh-mysql57-mysql-debuginfo-0:5.7.19-6.el6.x86_64",
            "6Server-RHSCL-2.4-6.7.Z:rh-mysql57-mysql-devel-0:5.7.19-6.el6.x86_64",
            "6Server-RHSCL-2.4-6.7.Z:rh-mysql57-mysql-errmsg-0:5.7.19-6.el6.x86_64",
            "6Server-RHSCL-2.4-6.7.Z:rh-mysql57-mysql-server-0:5.7.19-6.el6.x86_64",
            "6Server-RHSCL-2.4-6.7.Z:rh-mysql57-mysql-test-0:5.7.19-6.el6.x86_64",
            "6Server-RHSCL-2.4:rh-mysql57-mysql-0:5.7.19-6.el6.src",
            "6Server-RHSCL-2.4:rh-mysql57-mysql-0:5.7.19-6.el6.x86_64",
            "6Server-RHSCL-2.4:rh-mysql57-mysql-common-0:5.7.19-6.el6.x86_64",
            "6Server-RHSCL-2.4:rh-mysql57-mysql-config-0:5.7.19-6.el6.x86_64",
            "6Server-RHSCL-2.4:rh-mysql57-mysql-debuginfo-0:5.7.19-6.el6.x86_64",
            "6Server-RHSCL-2.4:rh-mysql57-mysql-devel-0:5.7.19-6.el6.x86_64",
            "6Server-RHSCL-2.4:rh-mysql57-mysql-errmsg-0:5.7.19-6.el6.x86_64",
            "6Server-RHSCL-2.4:rh-mysql57-mysql-server-0:5.7.19-6.el6.x86_64",
            "6Server-RHSCL-2.4:rh-mysql57-mysql-test-0:5.7.19-6.el6.x86_64",
            "6Workstation-RHSCL-2.4:rh-mysql57-mysql-0:5.7.19-6.el6.src",
            "6Workstation-RHSCL-2.4:rh-mysql57-mysql-0:5.7.19-6.el6.x86_64",
            "6Workstation-RHSCL-2.4:rh-mysql57-mysql-common-0:5.7.19-6.el6.x86_64",
            "6Workstation-RHSCL-2.4:rh-mysql57-mysql-config-0:5.7.19-6.el6.x86_64",
            "6Workstation-RHSCL-2.4:rh-mysql57-mysql-debuginfo-0:5.7.19-6.el6.x86_64",
            "6Workstation-RHSCL-2.4:rh-mysql57-mysql-devel-0:5.7.19-6.el6.x86_64",
            "6Workstation-RHSCL-2.4:rh-mysql57-mysql-errmsg-0:5.7.19-6.el6.x86_64",
            "6Workstation-RHSCL-2.4:rh-mysql57-mysql-server-0:5.7.19-6.el6.x86_64",
            "6Workstation-RHSCL-2.4:rh-mysql57-mysql-test-0:5.7.19-6.el6.x86_64",
            "7Server-RHSCL-2.4-7.3.Z:rh-mysql57-mysql-0:5.7.19-6.el7.src",
            "7Server-RHSCL-2.4-7.3.Z:rh-mysql57-mysql-0:5.7.19-6.el7.x86_64",
            "7Server-RHSCL-2.4-7.3.Z:rh-mysql57-mysql-common-0:5.7.19-6.el7.x86_64",
            "7Server-RHSCL-2.4-7.3.Z:rh-mysql57-mysql-config-0:5.7.19-6.el7.x86_64",
            "7Server-RHSCL-2.4-7.3.Z:rh-mysql57-mysql-debuginfo-0:5.7.19-6.el7.x86_64",
            "7Server-RHSCL-2.4-7.3.Z:rh-mysql57-mysql-devel-0:5.7.19-6.el7.x86_64",
            "7Server-RHSCL-2.4-7.3.Z:rh-mysql57-mysql-errmsg-0:5.7.19-6.el7.x86_64",
            "7Server-RHSCL-2.4-7.3.Z:rh-mysql57-mysql-server-0:5.7.19-6.el7.x86_64",
            "7Server-RHSCL-2.4-7.3.Z:rh-mysql57-mysql-test-0:5.7.19-6.el7.x86_64",
            "7Server-RHSCL-2.4:rh-mysql57-mysql-0:5.7.19-6.el7.src",
            "7Server-RHSCL-2.4:rh-mysql57-mysql-0:5.7.19-6.el7.x86_64",
            "7Server-RHSCL-2.4:rh-mysql57-mysql-common-0:5.7.19-6.el7.x86_64",
            "7Server-RHSCL-2.4:rh-mysql57-mysql-config-0:5.7.19-6.el7.x86_64",
            "7Server-RHSCL-2.4:rh-mysql57-mysql-debuginfo-0:5.7.19-6.el7.x86_64",
            "7Server-RHSCL-2.4:rh-mysql57-mysql-devel-0:5.7.19-6.el7.x86_64",
            "7Server-RHSCL-2.4:rh-mysql57-mysql-errmsg-0:5.7.19-6.el7.x86_64",
            "7Server-RHSCL-2.4:rh-mysql57-mysql-server-0:5.7.19-6.el7.x86_64",
            "7Server-RHSCL-2.4:rh-mysql57-mysql-test-0:5.7.19-6.el7.x86_64",
            "7Workstation-RHSCL-2.4:rh-mysql57-mysql-0:5.7.19-6.el7.src",
            "7Workstation-RHSCL-2.4:rh-mysql57-mysql-0:5.7.19-6.el7.x86_64",
            "7Workstation-RHSCL-2.4:rh-mysql57-mysql-common-0:5.7.19-6.el7.x86_64",
            "7Workstation-RHSCL-2.4:rh-mysql57-mysql-config-0:5.7.19-6.el7.x86_64",
            "7Workstation-RHSCL-2.4:rh-mysql57-mysql-debuginfo-0:5.7.19-6.el7.x86_64",
            "7Workstation-RHSCL-2.4:rh-mysql57-mysql-devel-0:5.7.19-6.el7.x86_64",
            "7Workstation-RHSCL-2.4:rh-mysql57-mysql-errmsg-0:5.7.19-6.el7.x86_64",
            "7Workstation-RHSCL-2.4:rh-mysql57-mysql-server-0:5.7.19-6.el7.x86_64",
            "7Workstation-RHSCL-2.4:rh-mysql57-mysql-test-0:5.7.19-6.el7.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Moderate"
        }
      ],
      "title": "mysql: Server: InnoDB unspecified vulnerability (CPU Apr 2017)"
    },
    {
      "cve": "CVE-2017-3455",
      "discovery_date": "2017-04-19T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "1443368"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Security: Privileges). Supported versions that are affected are 5.7.17 and earlier. Easily \"exploitable\" vulnerability allows low privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of MySQL Server accessible data as well as unauthorized read access to a subset of MySQL Server accessible data. CVSS 3.0 Base Score 5.4 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N).",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "mysql: Server: Security: Privileges unspecified vulnerability (CPU Apr 2017)",
          "title": "Vulnerability summary"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "6Server-RHSCL-2.4-6.7.Z:rh-mysql57-mysql-0:5.7.19-6.el6.src",
          "6Server-RHSCL-2.4-6.7.Z:rh-mysql57-mysql-0:5.7.19-6.el6.x86_64",
          "6Server-RHSCL-2.4-6.7.Z:rh-mysql57-mysql-common-0:5.7.19-6.el6.x86_64",
          "6Server-RHSCL-2.4-6.7.Z:rh-mysql57-mysql-config-0:5.7.19-6.el6.x86_64",
          "6Server-RHSCL-2.4-6.7.Z:rh-mysql57-mysql-debuginfo-0:5.7.19-6.el6.x86_64",
          "6Server-RHSCL-2.4-6.7.Z:rh-mysql57-mysql-devel-0:5.7.19-6.el6.x86_64",
          "6Server-RHSCL-2.4-6.7.Z:rh-mysql57-mysql-errmsg-0:5.7.19-6.el6.x86_64",
          "6Server-RHSCL-2.4-6.7.Z:rh-mysql57-mysql-server-0:5.7.19-6.el6.x86_64",
          "6Server-RHSCL-2.4-6.7.Z:rh-mysql57-mysql-test-0:5.7.19-6.el6.x86_64",
          "6Server-RHSCL-2.4:rh-mysql57-mysql-0:5.7.19-6.el6.src",
          "6Server-RHSCL-2.4:rh-mysql57-mysql-0:5.7.19-6.el6.x86_64",
          "6Server-RHSCL-2.4:rh-mysql57-mysql-common-0:5.7.19-6.el6.x86_64",
          "6Server-RHSCL-2.4:rh-mysql57-mysql-config-0:5.7.19-6.el6.x86_64",
          "6Server-RHSCL-2.4:rh-mysql57-mysql-debuginfo-0:5.7.19-6.el6.x86_64",
          "6Server-RHSCL-2.4:rh-mysql57-mysql-devel-0:5.7.19-6.el6.x86_64",
          "6Server-RHSCL-2.4:rh-mysql57-mysql-errmsg-0:5.7.19-6.el6.x86_64",
          "6Server-RHSCL-2.4:rh-mysql57-mysql-server-0:5.7.19-6.el6.x86_64",
          "6Server-RHSCL-2.4:rh-mysql57-mysql-test-0:5.7.19-6.el6.x86_64",
          "6Workstation-RHSCL-2.4:rh-mysql57-mysql-0:5.7.19-6.el6.src",
          "6Workstation-RHSCL-2.4:rh-mysql57-mysql-0:5.7.19-6.el6.x86_64",
          "6Workstation-RHSCL-2.4:rh-mysql57-mysql-common-0:5.7.19-6.el6.x86_64",
          "6Workstation-RHSCL-2.4:rh-mysql57-mysql-config-0:5.7.19-6.el6.x86_64",
          "6Workstation-RHSCL-2.4:rh-mysql57-mysql-debuginfo-0:5.7.19-6.el6.x86_64",
          "6Workstation-RHSCL-2.4:rh-mysql57-mysql-devel-0:5.7.19-6.el6.x86_64",
          "6Workstation-RHSCL-2.4:rh-mysql57-mysql-errmsg-0:5.7.19-6.el6.x86_64",
          "6Workstation-RHSCL-2.4:rh-mysql57-mysql-server-0:5.7.19-6.el6.x86_64",
          "6Workstation-RHSCL-2.4:rh-mysql57-mysql-test-0:5.7.19-6.el6.x86_64",
          "7Server-RHSCL-2.4-7.3.Z:rh-mysql57-mysql-0:5.7.19-6.el7.src",
          "7Server-RHSCL-2.4-7.3.Z:rh-mysql57-mysql-0:5.7.19-6.el7.x86_64",
          "7Server-RHSCL-2.4-7.3.Z:rh-mysql57-mysql-common-0:5.7.19-6.el7.x86_64",
          "7Server-RHSCL-2.4-7.3.Z:rh-mysql57-mysql-config-0:5.7.19-6.el7.x86_64",
          "7Server-RHSCL-2.4-7.3.Z:rh-mysql57-mysql-debuginfo-0:5.7.19-6.el7.x86_64",
          "7Server-RHSCL-2.4-7.3.Z:rh-mysql57-mysql-devel-0:5.7.19-6.el7.x86_64",
          "7Server-RHSCL-2.4-7.3.Z:rh-mysql57-mysql-errmsg-0:5.7.19-6.el7.x86_64",
          "7Server-RHSCL-2.4-7.3.Z:rh-mysql57-mysql-server-0:5.7.19-6.el7.x86_64",
          "7Server-RHSCL-2.4-7.3.Z:rh-mysql57-mysql-test-0:5.7.19-6.el7.x86_64",
          "7Server-RHSCL-2.4:rh-mysql57-mysql-0:5.7.19-6.el7.src",
          "7Server-RHSCL-2.4:rh-mysql57-mysql-0:5.7.19-6.el7.x86_64",
          "7Server-RHSCL-2.4:rh-mysql57-mysql-common-0:5.7.19-6.el7.x86_64",
          "7Server-RHSCL-2.4:rh-mysql57-mysql-config-0:5.7.19-6.el7.x86_64",
          "7Server-RHSCL-2.4:rh-mysql57-mysql-debuginfo-0:5.7.19-6.el7.x86_64",
          "7Server-RHSCL-2.4:rh-mysql57-mysql-devel-0:5.7.19-6.el7.x86_64",
          "7Server-RHSCL-2.4:rh-mysql57-mysql-errmsg-0:5.7.19-6.el7.x86_64",
          "7Server-RHSCL-2.4:rh-mysql57-mysql-server-0:5.7.19-6.el7.x86_64",
          "7Server-RHSCL-2.4:rh-mysql57-mysql-test-0:5.7.19-6.el7.x86_64",
          "7Workstation-RHSCL-2.4:rh-mysql57-mysql-0:5.7.19-6.el7.src",
          "7Workstation-RHSCL-2.4:rh-mysql57-mysql-0:5.7.19-6.el7.x86_64",
          "7Workstation-RHSCL-2.4:rh-mysql57-mysql-common-0:5.7.19-6.el7.x86_64",
          "7Workstation-RHSCL-2.4:rh-mysql57-mysql-config-0:5.7.19-6.el7.x86_64",
          "7Workstation-RHSCL-2.4:rh-mysql57-mysql-debuginfo-0:5.7.19-6.el7.x86_64",
          "7Workstation-RHSCL-2.4:rh-mysql57-mysql-devel-0:5.7.19-6.el7.x86_64",
          "7Workstation-RHSCL-2.4:rh-mysql57-mysql-errmsg-0:5.7.19-6.el7.x86_64",
          "7Workstation-RHSCL-2.4:rh-mysql57-mysql-server-0:5.7.19-6.el7.x86_64",
          "7Workstation-RHSCL-2.4:rh-mysql57-mysql-test-0:5.7.19-6.el7.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2017-3455"
        },
        {
          "category": "external",
          "summary": "RHBZ#1443368",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1443368"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2017-3455",
          "url": "https://www.cve.org/CVERecord?id=CVE-2017-3455"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2017-3455",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2017-3455"
        },
        {
          "category": "external",
          "summary": "http://www.oracle.com/technetwork/security-advisory/cpuapr2017-3236618.html#AppendixMSQL",
          "url": "http://www.oracle.com/technetwork/security-advisory/cpuapr2017-3236618.html#AppendixMSQL"
        }
      ],
      "release_date": "2017-04-19T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2017-10-12T07:53:15+00:00",
          "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAfter installing this update, the MySQL server daemon (mysqld) will be restarted automatically.",
          "product_ids": [
            "6Server-RHSCL-2.4-6.7.Z:rh-mysql57-mysql-0:5.7.19-6.el6.src",
            "6Server-RHSCL-2.4-6.7.Z:rh-mysql57-mysql-0:5.7.19-6.el6.x86_64",
            "6Server-RHSCL-2.4-6.7.Z:rh-mysql57-mysql-common-0:5.7.19-6.el6.x86_64",
            "6Server-RHSCL-2.4-6.7.Z:rh-mysql57-mysql-config-0:5.7.19-6.el6.x86_64",
            "6Server-RHSCL-2.4-6.7.Z:rh-mysql57-mysql-debuginfo-0:5.7.19-6.el6.x86_64",
            "6Server-RHSCL-2.4-6.7.Z:rh-mysql57-mysql-devel-0:5.7.19-6.el6.x86_64",
            "6Server-RHSCL-2.4-6.7.Z:rh-mysql57-mysql-errmsg-0:5.7.19-6.el6.x86_64",
            "6Server-RHSCL-2.4-6.7.Z:rh-mysql57-mysql-server-0:5.7.19-6.el6.x86_64",
            "6Server-RHSCL-2.4-6.7.Z:rh-mysql57-mysql-test-0:5.7.19-6.el6.x86_64",
            "6Server-RHSCL-2.4:rh-mysql57-mysql-0:5.7.19-6.el6.src",
            "6Server-RHSCL-2.4:rh-mysql57-mysql-0:5.7.19-6.el6.x86_64",
            "6Server-RHSCL-2.4:rh-mysql57-mysql-common-0:5.7.19-6.el6.x86_64",
            "6Server-RHSCL-2.4:rh-mysql57-mysql-config-0:5.7.19-6.el6.x86_64",
            "6Server-RHSCL-2.4:rh-mysql57-mysql-debuginfo-0:5.7.19-6.el6.x86_64",
            "6Server-RHSCL-2.4:rh-mysql57-mysql-devel-0:5.7.19-6.el6.x86_64",
            "6Server-RHSCL-2.4:rh-mysql57-mysql-errmsg-0:5.7.19-6.el6.x86_64",
            "6Server-RHSCL-2.4:rh-mysql57-mysql-server-0:5.7.19-6.el6.x86_64",
            "6Server-RHSCL-2.4:rh-mysql57-mysql-test-0:5.7.19-6.el6.x86_64",
            "6Workstation-RHSCL-2.4:rh-mysql57-mysql-0:5.7.19-6.el6.src",
            "6Workstation-RHSCL-2.4:rh-mysql57-mysql-0:5.7.19-6.el6.x86_64",
            "6Workstation-RHSCL-2.4:rh-mysql57-mysql-common-0:5.7.19-6.el6.x86_64",
            "6Workstation-RHSCL-2.4:rh-mysql57-mysql-config-0:5.7.19-6.el6.x86_64",
            "6Workstation-RHSCL-2.4:rh-mysql57-mysql-debuginfo-0:5.7.19-6.el6.x86_64",
            "6Workstation-RHSCL-2.4:rh-mysql57-mysql-devel-0:5.7.19-6.el6.x86_64",
            "6Workstation-RHSCL-2.4:rh-mysql57-mysql-errmsg-0:5.7.19-6.el6.x86_64",
            "6Workstation-RHSCL-2.4:rh-mysql57-mysql-server-0:5.7.19-6.el6.x86_64",
            "6Workstation-RHSCL-2.4:rh-mysql57-mysql-test-0:5.7.19-6.el6.x86_64",
            "7Server-RHSCL-2.4-7.3.Z:rh-mysql57-mysql-0:5.7.19-6.el7.src",
            "7Server-RHSCL-2.4-7.3.Z:rh-mysql57-mysql-0:5.7.19-6.el7.x86_64",
            "7Server-RHSCL-2.4-7.3.Z:rh-mysql57-mysql-common-0:5.7.19-6.el7.x86_64",
            "7Server-RHSCL-2.4-7.3.Z:rh-mysql57-mysql-config-0:5.7.19-6.el7.x86_64",
            "7Server-RHSCL-2.4-7.3.Z:rh-mysql57-mysql-debuginfo-0:5.7.19-6.el7.x86_64",
            "7Server-RHSCL-2.4-7.3.Z:rh-mysql57-mysql-devel-0:5.7.19-6.el7.x86_64",
            "7Server-RHSCL-2.4-7.3.Z:rh-mysql57-mysql-errmsg-0:5.7.19-6.el7.x86_64",
            "7Server-RHSCL-2.4-7.3.Z:rh-mysql57-mysql-server-0:5.7.19-6.el7.x86_64",
            "7Server-RHSCL-2.4-7.3.Z:rh-mysql57-mysql-test-0:5.7.19-6.el7.x86_64",
            "7Server-RHSCL-2.4:rh-mysql57-mysql-0:5.7.19-6.el7.src",
            "7Server-RHSCL-2.4:rh-mysql57-mysql-0:5.7.19-6.el7.x86_64",
            "7Server-RHSCL-2.4:rh-mysql57-mysql-common-0:5.7.19-6.el7.x86_64",
            "7Server-RHSCL-2.4:rh-mysql57-mysql-config-0:5.7.19-6.el7.x86_64",
            "7Server-RHSCL-2.4:rh-mysql57-mysql-debuginfo-0:5.7.19-6.el7.x86_64",
            "7Server-RHSCL-2.4:rh-mysql57-mysql-devel-0:5.7.19-6.el7.x86_64",
            "7Server-RHSCL-2.4:rh-mysql57-mysql-errmsg-0:5.7.19-6.el7.x86_64",
            "7Server-RHSCL-2.4:rh-mysql57-mysql-server-0:5.7.19-6.el7.x86_64",
            "7Server-RHSCL-2.4:rh-mysql57-mysql-test-0:5.7.19-6.el7.x86_64",
            "7Workstation-RHSCL-2.4:rh-mysql57-mysql-0:5.7.19-6.el7.src",
            "7Workstation-RHSCL-2.4:rh-mysql57-mysql-0:5.7.19-6.el7.x86_64",
            "7Workstation-RHSCL-2.4:rh-mysql57-mysql-common-0:5.7.19-6.el7.x86_64",
            "7Workstation-RHSCL-2.4:rh-mysql57-mysql-config-0:5.7.19-6.el7.x86_64",
            "7Workstation-RHSCL-2.4:rh-mysql57-mysql-debuginfo-0:5.7.19-6.el7.x86_64",
            "7Workstation-RHSCL-2.4:rh-mysql57-mysql-devel-0:5.7.19-6.el7.x86_64",
            "7Workstation-RHSCL-2.4:rh-mysql57-mysql-errmsg-0:5.7.19-6.el7.x86_64",
            "7Workstation-RHSCL-2.4:rh-mysql57-mysql-server-0:5.7.19-6.el7.x86_64",
            "7Workstation-RHSCL-2.4:rh-mysql57-mysql-test-0:5.7.19-6.el7.x86_64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2017:2886"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "NONE",
            "baseScore": 5.4,
            "baseSeverity": "MEDIUM",
            "confidentialityImpact": "LOW",
            "integrityImpact": "LOW",
            "privilegesRequired": "LOW",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N",
            "version": "3.0"
          },
          "products": [
            "6Server-RHSCL-2.4-6.7.Z:rh-mysql57-mysql-0:5.7.19-6.el6.src",
            "6Server-RHSCL-2.4-6.7.Z:rh-mysql57-mysql-0:5.7.19-6.el6.x86_64",
            "6Server-RHSCL-2.4-6.7.Z:rh-mysql57-mysql-common-0:5.7.19-6.el6.x86_64",
            "6Server-RHSCL-2.4-6.7.Z:rh-mysql57-mysql-config-0:5.7.19-6.el6.x86_64",
            "6Server-RHSCL-2.4-6.7.Z:rh-mysql57-mysql-debuginfo-0:5.7.19-6.el6.x86_64",
            "6Server-RHSCL-2.4-6.7.Z:rh-mysql57-mysql-devel-0:5.7.19-6.el6.x86_64",
            "6Server-RHSCL-2.4-6.7.Z:rh-mysql57-mysql-errmsg-0:5.7.19-6.el6.x86_64",
            "6Server-RHSCL-2.4-6.7.Z:rh-mysql57-mysql-server-0:5.7.19-6.el6.x86_64",
            "6Server-RHSCL-2.4-6.7.Z:rh-mysql57-mysql-test-0:5.7.19-6.el6.x86_64",
            "6Server-RHSCL-2.4:rh-mysql57-mysql-0:5.7.19-6.el6.src",
            "6Server-RHSCL-2.4:rh-mysql57-mysql-0:5.7.19-6.el6.x86_64",
            "6Server-RHSCL-2.4:rh-mysql57-mysql-common-0:5.7.19-6.el6.x86_64",
            "6Server-RHSCL-2.4:rh-mysql57-mysql-config-0:5.7.19-6.el6.x86_64",
            "6Server-RHSCL-2.4:rh-mysql57-mysql-debuginfo-0:5.7.19-6.el6.x86_64",
            "6Server-RHSCL-2.4:rh-mysql57-mysql-devel-0:5.7.19-6.el6.x86_64",
            "6Server-RHSCL-2.4:rh-mysql57-mysql-errmsg-0:5.7.19-6.el6.x86_64",
            "6Server-RHSCL-2.4:rh-mysql57-mysql-server-0:5.7.19-6.el6.x86_64",
            "6Server-RHSCL-2.4:rh-mysql57-mysql-test-0:5.7.19-6.el6.x86_64",
            "6Workstation-RHSCL-2.4:rh-mysql57-mysql-0:5.7.19-6.el6.src",
            "6Workstation-RHSCL-2.4:rh-mysql57-mysql-0:5.7.19-6.el6.x86_64",
            "6Workstation-RHSCL-2.4:rh-mysql57-mysql-common-0:5.7.19-6.el6.x86_64",
            "6Workstation-RHSCL-2.4:rh-mysql57-mysql-config-0:5.7.19-6.el6.x86_64",
            "6Workstation-RHSCL-2.4:rh-mysql57-mysql-debuginfo-0:5.7.19-6.el6.x86_64",
            "6Workstation-RHSCL-2.4:rh-mysql57-mysql-devel-0:5.7.19-6.el6.x86_64",
            "6Workstation-RHSCL-2.4:rh-mysql57-mysql-errmsg-0:5.7.19-6.el6.x86_64",
            "6Workstation-RHSCL-2.4:rh-mysql57-mysql-server-0:5.7.19-6.el6.x86_64",
            "6Workstation-RHSCL-2.4:rh-mysql57-mysql-test-0:5.7.19-6.el6.x86_64",
            "7Server-RHSCL-2.4-7.3.Z:rh-mysql57-mysql-0:5.7.19-6.el7.src",
            "7Server-RHSCL-2.4-7.3.Z:rh-mysql57-mysql-0:5.7.19-6.el7.x86_64",
            "7Server-RHSCL-2.4-7.3.Z:rh-mysql57-mysql-common-0:5.7.19-6.el7.x86_64",
            "7Server-RHSCL-2.4-7.3.Z:rh-mysql57-mysql-config-0:5.7.19-6.el7.x86_64",
            "7Server-RHSCL-2.4-7.3.Z:rh-mysql57-mysql-debuginfo-0:5.7.19-6.el7.x86_64",
            "7Server-RHSCL-2.4-7.3.Z:rh-mysql57-mysql-devel-0:5.7.19-6.el7.x86_64",
            "7Server-RHSCL-2.4-7.3.Z:rh-mysql57-mysql-errmsg-0:5.7.19-6.el7.x86_64",
            "7Server-RHSCL-2.4-7.3.Z:rh-mysql57-mysql-server-0:5.7.19-6.el7.x86_64",
            "7Server-RHSCL-2.4-7.3.Z:rh-mysql57-mysql-test-0:5.7.19-6.el7.x86_64",
            "7Server-RHSCL-2.4:rh-mysql57-mysql-0:5.7.19-6.el7.src",
            "7Server-RHSCL-2.4:rh-mysql57-mysql-0:5.7.19-6.el7.x86_64",
            "7Server-RHSCL-2.4:rh-mysql57-mysql-common-0:5.7.19-6.el7.x86_64",
            "7Server-RHSCL-2.4:rh-mysql57-mysql-config-0:5.7.19-6.el7.x86_64",
            "7Server-RHSCL-2.4:rh-mysql57-mysql-debuginfo-0:5.7.19-6.el7.x86_64",
            "7Server-RHSCL-2.4:rh-mysql57-mysql-devel-0:5.7.19-6.el7.x86_64",
            "7Server-RHSCL-2.4:rh-mysql57-mysql-errmsg-0:5.7.19-6.el7.x86_64",
            "7Server-RHSCL-2.4:rh-mysql57-mysql-server-0:5.7.19-6.el7.x86_64",
            "7Server-RHSCL-2.4:rh-mysql57-mysql-test-0:5.7.19-6.el7.x86_64",
            "7Workstation-RHSCL-2.4:rh-mysql57-mysql-0:5.7.19-6.el7.src",
            "7Workstation-RHSCL-2.4:rh-mysql57-mysql-0:5.7.19-6.el7.x86_64",
            "7Workstation-RHSCL-2.4:rh-mysql57-mysql-common-0:5.7.19-6.el7.x86_64",
            "7Workstation-RHSCL-2.4:rh-mysql57-mysql-config-0:5.7.19-6.el7.x86_64",
            "7Workstation-RHSCL-2.4:rh-mysql57-mysql-debuginfo-0:5.7.19-6.el7.x86_64",
            "7Workstation-RHSCL-2.4:rh-mysql57-mysql-devel-0:5.7.19-6.el7.x86_64",
            "7Workstation-RHSCL-2.4:rh-mysql57-mysql-errmsg-0:5.7.19-6.el7.x86_64",
            "7Workstation-RHSCL-2.4:rh-mysql57-mysql-server-0:5.7.19-6.el7.x86_64",
            "7Workstation-RHSCL-2.4:rh-mysql57-mysql-test-0:5.7.19-6.el7.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Moderate"
        }
      ],
      "title": "mysql: Server: Security: Privileges unspecified vulnerability (CPU Apr 2017)"
    },
    {
      "cve": "CVE-2017-3456",
      "discovery_date": "2017-04-19T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "1443369"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: DML). Supported versions that are affected are 5.5.54 and earlier, 5.6.35 and earlier and 5.7.17 and earlier. Easily \"exploitable\" vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.0 Base Score 4.9 (Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H).",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "mysql: Server: DML unspecified vulnerability (CPU Apr 2017)",
          "title": "Vulnerability summary"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "6Server-RHSCL-2.4-6.7.Z:rh-mysql57-mysql-0:5.7.19-6.el6.src",
          "6Server-RHSCL-2.4-6.7.Z:rh-mysql57-mysql-0:5.7.19-6.el6.x86_64",
          "6Server-RHSCL-2.4-6.7.Z:rh-mysql57-mysql-common-0:5.7.19-6.el6.x86_64",
          "6Server-RHSCL-2.4-6.7.Z:rh-mysql57-mysql-config-0:5.7.19-6.el6.x86_64",
          "6Server-RHSCL-2.4-6.7.Z:rh-mysql57-mysql-debuginfo-0:5.7.19-6.el6.x86_64",
          "6Server-RHSCL-2.4-6.7.Z:rh-mysql57-mysql-devel-0:5.7.19-6.el6.x86_64",
          "6Server-RHSCL-2.4-6.7.Z:rh-mysql57-mysql-errmsg-0:5.7.19-6.el6.x86_64",
          "6Server-RHSCL-2.4-6.7.Z:rh-mysql57-mysql-server-0:5.7.19-6.el6.x86_64",
          "6Server-RHSCL-2.4-6.7.Z:rh-mysql57-mysql-test-0:5.7.19-6.el6.x86_64",
          "6Server-RHSCL-2.4:rh-mysql57-mysql-0:5.7.19-6.el6.src",
          "6Server-RHSCL-2.4:rh-mysql57-mysql-0:5.7.19-6.el6.x86_64",
          "6Server-RHSCL-2.4:rh-mysql57-mysql-common-0:5.7.19-6.el6.x86_64",
          "6Server-RHSCL-2.4:rh-mysql57-mysql-config-0:5.7.19-6.el6.x86_64",
          "6Server-RHSCL-2.4:rh-mysql57-mysql-debuginfo-0:5.7.19-6.el6.x86_64",
          "6Server-RHSCL-2.4:rh-mysql57-mysql-devel-0:5.7.19-6.el6.x86_64",
          "6Server-RHSCL-2.4:rh-mysql57-mysql-errmsg-0:5.7.19-6.el6.x86_64",
          "6Server-RHSCL-2.4:rh-mysql57-mysql-server-0:5.7.19-6.el6.x86_64",
          "6Server-RHSCL-2.4:rh-mysql57-mysql-test-0:5.7.19-6.el6.x86_64",
          "6Workstation-RHSCL-2.4:rh-mysql57-mysql-0:5.7.19-6.el6.src",
          "6Workstation-RHSCL-2.4:rh-mysql57-mysql-0:5.7.19-6.el6.x86_64",
          "6Workstation-RHSCL-2.4:rh-mysql57-mysql-common-0:5.7.19-6.el6.x86_64",
          "6Workstation-RHSCL-2.4:rh-mysql57-mysql-config-0:5.7.19-6.el6.x86_64",
          "6Workstation-RHSCL-2.4:rh-mysql57-mysql-debuginfo-0:5.7.19-6.el6.x86_64",
          "6Workstation-RHSCL-2.4:rh-mysql57-mysql-devel-0:5.7.19-6.el6.x86_64",
          "6Workstation-RHSCL-2.4:rh-mysql57-mysql-errmsg-0:5.7.19-6.el6.x86_64",
          "6Workstation-RHSCL-2.4:rh-mysql57-mysql-server-0:5.7.19-6.el6.x86_64",
          "6Workstation-RHSCL-2.4:rh-mysql57-mysql-test-0:5.7.19-6.el6.x86_64",
          "7Server-RHSCL-2.4-7.3.Z:rh-mysql57-mysql-0:5.7.19-6.el7.src",
          "7Server-RHSCL-2.4-7.3.Z:rh-mysql57-mysql-0:5.7.19-6.el7.x86_64",
          "7Server-RHSCL-2.4-7.3.Z:rh-mysql57-mysql-common-0:5.7.19-6.el7.x86_64",
          "7Server-RHSCL-2.4-7.3.Z:rh-mysql57-mysql-config-0:5.7.19-6.el7.x86_64",
          "7Server-RHSCL-2.4-7.3.Z:rh-mysql57-mysql-debuginfo-0:5.7.19-6.el7.x86_64",
          "7Server-RHSCL-2.4-7.3.Z:rh-mysql57-mysql-devel-0:5.7.19-6.el7.x86_64",
          "7Server-RHSCL-2.4-7.3.Z:rh-mysql57-mysql-errmsg-0:5.7.19-6.el7.x86_64",
          "7Server-RHSCL-2.4-7.3.Z:rh-mysql57-mysql-server-0:5.7.19-6.el7.x86_64",
          "7Server-RHSCL-2.4-7.3.Z:rh-mysql57-mysql-test-0:5.7.19-6.el7.x86_64",
          "7Server-RHSCL-2.4:rh-mysql57-mysql-0:5.7.19-6.el7.src",
          "7Server-RHSCL-2.4:rh-mysql57-mysql-0:5.7.19-6.el7.x86_64",
          "7Server-RHSCL-2.4:rh-mysql57-mysql-common-0:5.7.19-6.el7.x86_64",
          "7Server-RHSCL-2.4:rh-mysql57-mysql-config-0:5.7.19-6.el7.x86_64",
          "7Server-RHSCL-2.4:rh-mysql57-mysql-debuginfo-0:5.7.19-6.el7.x86_64",
          "7Server-RHSCL-2.4:rh-mysql57-mysql-devel-0:5.7.19-6.el7.x86_64",
          "7Server-RHSCL-2.4:rh-mysql57-mysql-errmsg-0:5.7.19-6.el7.x86_64",
          "7Server-RHSCL-2.4:rh-mysql57-mysql-server-0:5.7.19-6.el7.x86_64",
          "7Server-RHSCL-2.4:rh-mysql57-mysql-test-0:5.7.19-6.el7.x86_64",
          "7Workstation-RHSCL-2.4:rh-mysql57-mysql-0:5.7.19-6.el7.src",
          "7Workstation-RHSCL-2.4:rh-mysql57-mysql-0:5.7.19-6.el7.x86_64",
          "7Workstation-RHSCL-2.4:rh-mysql57-mysql-common-0:5.7.19-6.el7.x86_64",
          "7Workstation-RHSCL-2.4:rh-mysql57-mysql-config-0:5.7.19-6.el7.x86_64",
          "7Workstation-RHSCL-2.4:rh-mysql57-mysql-debuginfo-0:5.7.19-6.el7.x86_64",
          "7Workstation-RHSCL-2.4:rh-mysql57-mysql-devel-0:5.7.19-6.el7.x86_64",
          "7Workstation-RHSCL-2.4:rh-mysql57-mysql-errmsg-0:5.7.19-6.el7.x86_64",
          "7Workstation-RHSCL-2.4:rh-mysql57-mysql-server-0:5.7.19-6.el7.x86_64",
          "7Workstation-RHSCL-2.4:rh-mysql57-mysql-test-0:5.7.19-6.el7.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2017-3456"
        },
        {
          "category": "external",
          "summary": "RHBZ#1443369",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1443369"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2017-3456",
          "url": "https://www.cve.org/CVERecord?id=CVE-2017-3456"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2017-3456",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2017-3456"
        },
        {
          "category": "external",
          "summary": "http://www.oracle.com/technetwork/security-advisory/cpuapr2017-3236618.html#AppendixMSQL",
          "url": "http://www.oracle.com/technetwork/security-advisory/cpuapr2017-3236618.html#AppendixMSQL"
        }
      ],
      "release_date": "2017-04-19T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2017-10-12T07:53:15+00:00",
          "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAfter installing this update, the MySQL server daemon (mysqld) will be restarted automatically.",
          "product_ids": [
            "6Server-RHSCL-2.4-6.7.Z:rh-mysql57-mysql-0:5.7.19-6.el6.src",
            "6Server-RHSCL-2.4-6.7.Z:rh-mysql57-mysql-0:5.7.19-6.el6.x86_64",
            "6Server-RHSCL-2.4-6.7.Z:rh-mysql57-mysql-common-0:5.7.19-6.el6.x86_64",
            "6Server-RHSCL-2.4-6.7.Z:rh-mysql57-mysql-config-0:5.7.19-6.el6.x86_64",
            "6Server-RHSCL-2.4-6.7.Z:rh-mysql57-mysql-debuginfo-0:5.7.19-6.el6.x86_64",
            "6Server-RHSCL-2.4-6.7.Z:rh-mysql57-mysql-devel-0:5.7.19-6.el6.x86_64",
            "6Server-RHSCL-2.4-6.7.Z:rh-mysql57-mysql-errmsg-0:5.7.19-6.el6.x86_64",
            "6Server-RHSCL-2.4-6.7.Z:rh-mysql57-mysql-server-0:5.7.19-6.el6.x86_64",
            "6Server-RHSCL-2.4-6.7.Z:rh-mysql57-mysql-test-0:5.7.19-6.el6.x86_64",
            "6Server-RHSCL-2.4:rh-mysql57-mysql-0:5.7.19-6.el6.src",
            "6Server-RHSCL-2.4:rh-mysql57-mysql-0:5.7.19-6.el6.x86_64",
            "6Server-RHSCL-2.4:rh-mysql57-mysql-common-0:5.7.19-6.el6.x86_64",
            "6Server-RHSCL-2.4:rh-mysql57-mysql-config-0:5.7.19-6.el6.x86_64",
            "6Server-RHSCL-2.4:rh-mysql57-mysql-debuginfo-0:5.7.19-6.el6.x86_64",
            "6Server-RHSCL-2.4:rh-mysql57-mysql-devel-0:5.7.19-6.el6.x86_64",
            "6Server-RHSCL-2.4:rh-mysql57-mysql-errmsg-0:5.7.19-6.el6.x86_64",
            "6Server-RHSCL-2.4:rh-mysql57-mysql-server-0:5.7.19-6.el6.x86_64",
            "6Server-RHSCL-2.4:rh-mysql57-mysql-test-0:5.7.19-6.el6.x86_64",
            "6Workstation-RHSCL-2.4:rh-mysql57-mysql-0:5.7.19-6.el6.src",
            "6Workstation-RHSCL-2.4:rh-mysql57-mysql-0:5.7.19-6.el6.x86_64",
            "6Workstation-RHSCL-2.4:rh-mysql57-mysql-common-0:5.7.19-6.el6.x86_64",
            "6Workstation-RHSCL-2.4:rh-mysql57-mysql-config-0:5.7.19-6.el6.x86_64",
            "6Workstation-RHSCL-2.4:rh-mysql57-mysql-debuginfo-0:5.7.19-6.el6.x86_64",
            "6Workstation-RHSCL-2.4:rh-mysql57-mysql-devel-0:5.7.19-6.el6.x86_64",
            "6Workstation-RHSCL-2.4:rh-mysql57-mysql-errmsg-0:5.7.19-6.el6.x86_64",
            "6Workstation-RHSCL-2.4:rh-mysql57-mysql-server-0:5.7.19-6.el6.x86_64",
            "6Workstation-RHSCL-2.4:rh-mysql57-mysql-test-0:5.7.19-6.el6.x86_64",
            "7Server-RHSCL-2.4-7.3.Z:rh-mysql57-mysql-0:5.7.19-6.el7.src",
            "7Server-RHSCL-2.4-7.3.Z:rh-mysql57-mysql-0:5.7.19-6.el7.x86_64",
            "7Server-RHSCL-2.4-7.3.Z:rh-mysql57-mysql-common-0:5.7.19-6.el7.x86_64",
            "7Server-RHSCL-2.4-7.3.Z:rh-mysql57-mysql-config-0:5.7.19-6.el7.x86_64",
            "7Server-RHSCL-2.4-7.3.Z:rh-mysql57-mysql-debuginfo-0:5.7.19-6.el7.x86_64",
            "7Server-RHSCL-2.4-7.3.Z:rh-mysql57-mysql-devel-0:5.7.19-6.el7.x86_64",
            "7Server-RHSCL-2.4-7.3.Z:rh-mysql57-mysql-errmsg-0:5.7.19-6.el7.x86_64",
            "7Server-RHSCL-2.4-7.3.Z:rh-mysql57-mysql-server-0:5.7.19-6.el7.x86_64",
            "7Server-RHSCL-2.4-7.3.Z:rh-mysql57-mysql-test-0:5.7.19-6.el7.x86_64",
            "7Server-RHSCL-2.4:rh-mysql57-mysql-0:5.7.19-6.el7.src",
            "7Server-RHSCL-2.4:rh-mysql57-mysql-0:5.7.19-6.el7.x86_64",
            "7Server-RHSCL-2.4:rh-mysql57-mysql-common-0:5.7.19-6.el7.x86_64",
            "7Server-RHSCL-2.4:rh-mysql57-mysql-config-0:5.7.19-6.el7.x86_64",
            "7Server-RHSCL-2.4:rh-mysql57-mysql-debuginfo-0:5.7.19-6.el7.x86_64",
            "7Server-RHSCL-2.4:rh-mysql57-mysql-devel-0:5.7.19-6.el7.x86_64",
            "7Server-RHSCL-2.4:rh-mysql57-mysql-errmsg-0:5.7.19-6.el7.x86_64",
            "7Server-RHSCL-2.4:rh-mysql57-mysql-server-0:5.7.19-6.el7.x86_64",
            "7Server-RHSCL-2.4:rh-mysql57-mysql-test-0:5.7.19-6.el7.x86_64",
            "7Workstation-RHSCL-2.4:rh-mysql57-mysql-0:5.7.19-6.el7.src",
            "7Workstation-RHSCL-2.4:rh-mysql57-mysql-0:5.7.19-6.el7.x86_64",
            "7Workstation-RHSCL-2.4:rh-mysql57-mysql-common-0:5.7.19-6.el7.x86_64",
            "7Workstation-RHSCL-2.4:rh-mysql57-mysql-config-0:5.7.19-6.el7.x86_64",
            "7Workstation-RHSCL-2.4:rh-mysql57-mysql-debuginfo-0:5.7.19-6.el7.x86_64",
            "7Workstation-RHSCL-2.4:rh-mysql57-mysql-devel-0:5.7.19-6.el7.x86_64",
            "7Workstation-RHSCL-2.4:rh-mysql57-mysql-errmsg-0:5.7.19-6.el7.x86_64",
            "7Workstation-RHSCL-2.4:rh-mysql57-mysql-server-0:5.7.19-6.el7.x86_64",
            "7Workstation-RHSCL-2.4:rh-mysql57-mysql-test-0:5.7.19-6.el7.x86_64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2017:2886"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 4.9,
            "baseSeverity": "MEDIUM",
            "confidentialityImpact": "NONE",
            "integrityImpact": "NONE",
            "privilegesRequired": "HIGH",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.0"
          },
          "products": [
            "6Server-RHSCL-2.4-6.7.Z:rh-mysql57-mysql-0:5.7.19-6.el6.src",
            "6Server-RHSCL-2.4-6.7.Z:rh-mysql57-mysql-0:5.7.19-6.el6.x86_64",
            "6Server-RHSCL-2.4-6.7.Z:rh-mysql57-mysql-common-0:5.7.19-6.el6.x86_64",
            "6Server-RHSCL-2.4-6.7.Z:rh-mysql57-mysql-config-0:5.7.19-6.el6.x86_64",
            "6Server-RHSCL-2.4-6.7.Z:rh-mysql57-mysql-debuginfo-0:5.7.19-6.el6.x86_64",
            "6Server-RHSCL-2.4-6.7.Z:rh-mysql57-mysql-devel-0:5.7.19-6.el6.x86_64",
            "6Server-RHSCL-2.4-6.7.Z:rh-mysql57-mysql-errmsg-0:5.7.19-6.el6.x86_64",
            "6Server-RHSCL-2.4-6.7.Z:rh-mysql57-mysql-server-0:5.7.19-6.el6.x86_64",
            "6Server-RHSCL-2.4-6.7.Z:rh-mysql57-mysql-test-0:5.7.19-6.el6.x86_64",
            "6Server-RHSCL-2.4:rh-mysql57-mysql-0:5.7.19-6.el6.src",
            "6Server-RHSCL-2.4:rh-mysql57-mysql-0:5.7.19-6.el6.x86_64",
            "6Server-RHSCL-2.4:rh-mysql57-mysql-common-0:5.7.19-6.el6.x86_64",
            "6Server-RHSCL-2.4:rh-mysql57-mysql-config-0:5.7.19-6.el6.x86_64",
            "6Server-RHSCL-2.4:rh-mysql57-mysql-debuginfo-0:5.7.19-6.el6.x86_64",
            "6Server-RHSCL-2.4:rh-mysql57-mysql-devel-0:5.7.19-6.el6.x86_64",
            "6Server-RHSCL-2.4:rh-mysql57-mysql-errmsg-0:5.7.19-6.el6.x86_64",
            "6Server-RHSCL-2.4:rh-mysql57-mysql-server-0:5.7.19-6.el6.x86_64",
            "6Server-RHSCL-2.4:rh-mysql57-mysql-test-0:5.7.19-6.el6.x86_64",
            "6Workstation-RHSCL-2.4:rh-mysql57-mysql-0:5.7.19-6.el6.src",
            "6Workstation-RHSCL-2.4:rh-mysql57-mysql-0:5.7.19-6.el6.x86_64",
            "6Workstation-RHSCL-2.4:rh-mysql57-mysql-common-0:5.7.19-6.el6.x86_64",
            "6Workstation-RHSCL-2.4:rh-mysql57-mysql-config-0:5.7.19-6.el6.x86_64",
            "6Workstation-RHSCL-2.4:rh-mysql57-mysql-debuginfo-0:5.7.19-6.el6.x86_64",
            "6Workstation-RHSCL-2.4:rh-mysql57-mysql-devel-0:5.7.19-6.el6.x86_64",
            "6Workstation-RHSCL-2.4:rh-mysql57-mysql-errmsg-0:5.7.19-6.el6.x86_64",
            "6Workstation-RHSCL-2.4:rh-mysql57-mysql-server-0:5.7.19-6.el6.x86_64",
            "6Workstation-RHSCL-2.4:rh-mysql57-mysql-test-0:5.7.19-6.el6.x86_64",
            "7Server-RHSCL-2.4-7.3.Z:rh-mysql57-mysql-0:5.7.19-6.el7.src",
            "7Server-RHSCL-2.4-7.3.Z:rh-mysql57-mysql-0:5.7.19-6.el7.x86_64",
            "7Server-RHSCL-2.4-7.3.Z:rh-mysql57-mysql-common-0:5.7.19-6.el7.x86_64",
            "7Server-RHSCL-2.4-7.3.Z:rh-mysql57-mysql-config-0:5.7.19-6.el7.x86_64",
            "7Server-RHSCL-2.4-7.3.Z:rh-mysql57-mysql-debuginfo-0:5.7.19-6.el7.x86_64",
            "7Server-RHSCL-2.4-7.3.Z:rh-mysql57-mysql-devel-0:5.7.19-6.el7.x86_64",
            "7Server-RHSCL-2.4-7.3.Z:rh-mysql57-mysql-errmsg-0:5.7.19-6.el7.x86_64",
            "7Server-RHSCL-2.4-7.3.Z:rh-mysql57-mysql-server-0:5.7.19-6.el7.x86_64",
            "7Server-RHSCL-2.4-7.3.Z:rh-mysql57-mysql-test-0:5.7.19-6.el7.x86_64",
            "7Server-RHSCL-2.4:rh-mysql57-mysql-0:5.7.19-6.el7.src",
            "7Server-RHSCL-2.4:rh-mysql57-mysql-0:5.7.19-6.el7.x86_64",
            "7Server-RHSCL-2.4:rh-mysql57-mysql-common-0:5.7.19-6.el7.x86_64",
            "7Server-RHSCL-2.4:rh-mysql57-mysql-config-0:5.7.19-6.el7.x86_64",
            "7Server-RHSCL-2.4:rh-mysql57-mysql-debuginfo-0:5.7.19-6.el7.x86_64",
            "7Server-RHSCL-2.4:rh-mysql57-mysql-devel-0:5.7.19-6.el7.x86_64",
            "7Server-RHSCL-2.4:rh-mysql57-mysql-errmsg-0:5.7.19-6.el7.x86_64",
            "7Server-RHSCL-2.4:rh-mysql57-mysql-server-0:5.7.19-6.el7.x86_64",
            "7Server-RHSCL-2.4:rh-mysql57-mysql-test-0:5.7.19-6.el7.x86_64",
            "7Workstation-RHSCL-2.4:rh-mysql57-mysql-0:5.7.19-6.el7.src",
            "7Workstation-RHSCL-2.4:rh-mysql57-mysql-0:5.7.19-6.el7.x86_64",
            "7Workstation-RHSCL-2.4:rh-mysql57-mysql-common-0:5.7.19-6.el7.x86_64",
            "7Workstation-RHSCL-2.4:rh-mysql57-mysql-config-0:5.7.19-6.el7.x86_64",
            "7Workstation-RHSCL-2.4:rh-mysql57-mysql-debuginfo-0:5.7.19-6.el7.x86_64",
            "7Workstation-RHSCL-2.4:rh-mysql57-mysql-devel-0:5.7.19-6.el7.x86_64",
            "7Workstation-RHSCL-2.4:rh-mysql57-mysql-errmsg-0:5.7.19-6.el7.x86_64",
            "7Workstation-RHSCL-2.4:rh-mysql57-mysql-server-0:5.7.19-6.el7.x86_64",
            "7Workstation-RHSCL-2.4:rh-mysql57-mysql-test-0:5.7.19-6.el7.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Moderate"
        }
      ],
      "title": "mysql: Server: DML unspecified vulnerability (CPU Apr 2017)"
    },
    {
      "cve": "CVE-2017-3457",
      "discovery_date": "2017-04-19T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "1443371"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: DML). Supported versions that are affected are 5.7.17 and earlier. Easily \"exploitable\" vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.0 Base Score 4.9 (Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H).",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "mysql: Server: DML unspecified vulnerability (CPU Apr 2017)",
          "title": "Vulnerability summary"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "6Server-RHSCL-2.4-6.7.Z:rh-mysql57-mysql-0:5.7.19-6.el6.src",
          "6Server-RHSCL-2.4-6.7.Z:rh-mysql57-mysql-0:5.7.19-6.el6.x86_64",
          "6Server-RHSCL-2.4-6.7.Z:rh-mysql57-mysql-common-0:5.7.19-6.el6.x86_64",
          "6Server-RHSCL-2.4-6.7.Z:rh-mysql57-mysql-config-0:5.7.19-6.el6.x86_64",
          "6Server-RHSCL-2.4-6.7.Z:rh-mysql57-mysql-debuginfo-0:5.7.19-6.el6.x86_64",
          "6Server-RHSCL-2.4-6.7.Z:rh-mysql57-mysql-devel-0:5.7.19-6.el6.x86_64",
          "6Server-RHSCL-2.4-6.7.Z:rh-mysql57-mysql-errmsg-0:5.7.19-6.el6.x86_64",
          "6Server-RHSCL-2.4-6.7.Z:rh-mysql57-mysql-server-0:5.7.19-6.el6.x86_64",
          "6Server-RHSCL-2.4-6.7.Z:rh-mysql57-mysql-test-0:5.7.19-6.el6.x86_64",
          "6Server-RHSCL-2.4:rh-mysql57-mysql-0:5.7.19-6.el6.src",
          "6Server-RHSCL-2.4:rh-mysql57-mysql-0:5.7.19-6.el6.x86_64",
          "6Server-RHSCL-2.4:rh-mysql57-mysql-common-0:5.7.19-6.el6.x86_64",
          "6Server-RHSCL-2.4:rh-mysql57-mysql-config-0:5.7.19-6.el6.x86_64",
          "6Server-RHSCL-2.4:rh-mysql57-mysql-debuginfo-0:5.7.19-6.el6.x86_64",
          "6Server-RHSCL-2.4:rh-mysql57-mysql-devel-0:5.7.19-6.el6.x86_64",
          "6Server-RHSCL-2.4:rh-mysql57-mysql-errmsg-0:5.7.19-6.el6.x86_64",
          "6Server-RHSCL-2.4:rh-mysql57-mysql-server-0:5.7.19-6.el6.x86_64",
          "6Server-RHSCL-2.4:rh-mysql57-mysql-test-0:5.7.19-6.el6.x86_64",
          "6Workstation-RHSCL-2.4:rh-mysql57-mysql-0:5.7.19-6.el6.src",
          "6Workstation-RHSCL-2.4:rh-mysql57-mysql-0:5.7.19-6.el6.x86_64",
          "6Workstation-RHSCL-2.4:rh-mysql57-mysql-common-0:5.7.19-6.el6.x86_64",
          "6Workstation-RHSCL-2.4:rh-mysql57-mysql-config-0:5.7.19-6.el6.x86_64",
          "6Workstation-RHSCL-2.4:rh-mysql57-mysql-debuginfo-0:5.7.19-6.el6.x86_64",
          "6Workstation-RHSCL-2.4:rh-mysql57-mysql-devel-0:5.7.19-6.el6.x86_64",
          "6Workstation-RHSCL-2.4:rh-mysql57-mysql-errmsg-0:5.7.19-6.el6.x86_64",
          "6Workstation-RHSCL-2.4:rh-mysql57-mysql-server-0:5.7.19-6.el6.x86_64",
          "6Workstation-RHSCL-2.4:rh-mysql57-mysql-test-0:5.7.19-6.el6.x86_64",
          "7Server-RHSCL-2.4-7.3.Z:rh-mysql57-mysql-0:5.7.19-6.el7.src",
          "7Server-RHSCL-2.4-7.3.Z:rh-mysql57-mysql-0:5.7.19-6.el7.x86_64",
          "7Server-RHSCL-2.4-7.3.Z:rh-mysql57-mysql-common-0:5.7.19-6.el7.x86_64",
          "7Server-RHSCL-2.4-7.3.Z:rh-mysql57-mysql-config-0:5.7.19-6.el7.x86_64",
          "7Server-RHSCL-2.4-7.3.Z:rh-mysql57-mysql-debuginfo-0:5.7.19-6.el7.x86_64",
          "7Server-RHSCL-2.4-7.3.Z:rh-mysql57-mysql-devel-0:5.7.19-6.el7.x86_64",
          "7Server-RHSCL-2.4-7.3.Z:rh-mysql57-mysql-errmsg-0:5.7.19-6.el7.x86_64",
          "7Server-RHSCL-2.4-7.3.Z:rh-mysql57-mysql-server-0:5.7.19-6.el7.x86_64",
          "7Server-RHSCL-2.4-7.3.Z:rh-mysql57-mysql-test-0:5.7.19-6.el7.x86_64",
          "7Server-RHSCL-2.4:rh-mysql57-mysql-0:5.7.19-6.el7.src",
          "7Server-RHSCL-2.4:rh-mysql57-mysql-0:5.7.19-6.el7.x86_64",
          "7Server-RHSCL-2.4:rh-mysql57-mysql-common-0:5.7.19-6.el7.x86_64",
          "7Server-RHSCL-2.4:rh-mysql57-mysql-config-0:5.7.19-6.el7.x86_64",
          "7Server-RHSCL-2.4:rh-mysql57-mysql-debuginfo-0:5.7.19-6.el7.x86_64",
          "7Server-RHSCL-2.4:rh-mysql57-mysql-devel-0:5.7.19-6.el7.x86_64",
          "7Server-RHSCL-2.4:rh-mysql57-mysql-errmsg-0:5.7.19-6.el7.x86_64",
          "7Server-RHSCL-2.4:rh-mysql57-mysql-server-0:5.7.19-6.el7.x86_64",
          "7Server-RHSCL-2.4:rh-mysql57-mysql-test-0:5.7.19-6.el7.x86_64",
          "7Workstation-RHSCL-2.4:rh-mysql57-mysql-0:5.7.19-6.el7.src",
          "7Workstation-RHSCL-2.4:rh-mysql57-mysql-0:5.7.19-6.el7.x86_64",
          "7Workstation-RHSCL-2.4:rh-mysql57-mysql-common-0:5.7.19-6.el7.x86_64",
          "7Workstation-RHSCL-2.4:rh-mysql57-mysql-config-0:5.7.19-6.el7.x86_64",
          "7Workstation-RHSCL-2.4:rh-mysql57-mysql-debuginfo-0:5.7.19-6.el7.x86_64",
          "7Workstation-RHSCL-2.4:rh-mysql57-mysql-devel-0:5.7.19-6.el7.x86_64",
          "7Workstation-RHSCL-2.4:rh-mysql57-mysql-errmsg-0:5.7.19-6.el7.x86_64",
          "7Workstation-RHSCL-2.4:rh-mysql57-mysql-server-0:5.7.19-6.el7.x86_64",
          "7Workstation-RHSCL-2.4:rh-mysql57-mysql-test-0:5.7.19-6.el7.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2017-3457"
        },
        {
          "category": "external",
          "summary": "RHBZ#1443371",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1443371"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2017-3457",
          "url": "https://www.cve.org/CVERecord?id=CVE-2017-3457"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2017-3457",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2017-3457"
        },
        {
          "category": "external",
          "summary": "http://www.oracle.com/technetwork/security-advisory/cpuapr2017-3236618.html#AppendixMSQL",
          "url": "http://www.oracle.com/technetwork/security-advisory/cpuapr2017-3236618.html#AppendixMSQL"
        }
      ],
      "release_date": "2017-04-19T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2017-10-12T07:53:15+00:00",
          "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAfter installing this update, the MySQL server daemon (mysqld) will be restarted automatically.",
          "product_ids": [
            "6Server-RHSCL-2.4-6.7.Z:rh-mysql57-mysql-0:5.7.19-6.el6.src",
            "6Server-RHSCL-2.4-6.7.Z:rh-mysql57-mysql-0:5.7.19-6.el6.x86_64",
            "6Server-RHSCL-2.4-6.7.Z:rh-mysql57-mysql-common-0:5.7.19-6.el6.x86_64",
            "6Server-RHSCL-2.4-6.7.Z:rh-mysql57-mysql-config-0:5.7.19-6.el6.x86_64",
            "6Server-RHSCL-2.4-6.7.Z:rh-mysql57-mysql-debuginfo-0:5.7.19-6.el6.x86_64",
            "6Server-RHSCL-2.4-6.7.Z:rh-mysql57-mysql-devel-0:5.7.19-6.el6.x86_64",
            "6Server-RHSCL-2.4-6.7.Z:rh-mysql57-mysql-errmsg-0:5.7.19-6.el6.x86_64",
            "6Server-RHSCL-2.4-6.7.Z:rh-mysql57-mysql-server-0:5.7.19-6.el6.x86_64",
            "6Server-RHSCL-2.4-6.7.Z:rh-mysql57-mysql-test-0:5.7.19-6.el6.x86_64",
            "6Server-RHSCL-2.4:rh-mysql57-mysql-0:5.7.19-6.el6.src",
            "6Server-RHSCL-2.4:rh-mysql57-mysql-0:5.7.19-6.el6.x86_64",
            "6Server-RHSCL-2.4:rh-mysql57-mysql-common-0:5.7.19-6.el6.x86_64",
            "6Server-RHSCL-2.4:rh-mysql57-mysql-config-0:5.7.19-6.el6.x86_64",
            "6Server-RHSCL-2.4:rh-mysql57-mysql-debuginfo-0:5.7.19-6.el6.x86_64",
            "6Server-RHSCL-2.4:rh-mysql57-mysql-devel-0:5.7.19-6.el6.x86_64",
            "6Server-RHSCL-2.4:rh-mysql57-mysql-errmsg-0:5.7.19-6.el6.x86_64",
            "6Server-RHSCL-2.4:rh-mysql57-mysql-server-0:5.7.19-6.el6.x86_64",
            "6Server-RHSCL-2.4:rh-mysql57-mysql-test-0:5.7.19-6.el6.x86_64",
            "6Workstation-RHSCL-2.4:rh-mysql57-mysql-0:5.7.19-6.el6.src",
            "6Workstation-RHSCL-2.4:rh-mysql57-mysql-0:5.7.19-6.el6.x86_64",
            "6Workstation-RHSCL-2.4:rh-mysql57-mysql-common-0:5.7.19-6.el6.x86_64",
            "6Workstation-RHSCL-2.4:rh-mysql57-mysql-config-0:5.7.19-6.el6.x86_64",
            "6Workstation-RHSCL-2.4:rh-mysql57-mysql-debuginfo-0:5.7.19-6.el6.x86_64",
            "6Workstation-RHSCL-2.4:rh-mysql57-mysql-devel-0:5.7.19-6.el6.x86_64",
            "6Workstation-RHSCL-2.4:rh-mysql57-mysql-errmsg-0:5.7.19-6.el6.x86_64",
            "6Workstation-RHSCL-2.4:rh-mysql57-mysql-server-0:5.7.19-6.el6.x86_64",
            "6Workstation-RHSCL-2.4:rh-mysql57-mysql-test-0:5.7.19-6.el6.x86_64",
            "7Server-RHSCL-2.4-7.3.Z:rh-mysql57-mysql-0:5.7.19-6.el7.src",
            "7Server-RHSCL-2.4-7.3.Z:rh-mysql57-mysql-0:5.7.19-6.el7.x86_64",
            "7Server-RHSCL-2.4-7.3.Z:rh-mysql57-mysql-common-0:5.7.19-6.el7.x86_64",
            "7Server-RHSCL-2.4-7.3.Z:rh-mysql57-mysql-config-0:5.7.19-6.el7.x86_64",
            "7Server-RHSCL-2.4-7.3.Z:rh-mysql57-mysql-debuginfo-0:5.7.19-6.el7.x86_64",
            "7Server-RHSCL-2.4-7.3.Z:rh-mysql57-mysql-devel-0:5.7.19-6.el7.x86_64",
            "7Server-RHSCL-2.4-7.3.Z:rh-mysql57-mysql-errmsg-0:5.7.19-6.el7.x86_64",
            "7Server-RHSCL-2.4-7.3.Z:rh-mysql57-mysql-server-0:5.7.19-6.el7.x86_64",
            "7Server-RHSCL-2.4-7.3.Z:rh-mysql57-mysql-test-0:5.7.19-6.el7.x86_64",
            "7Server-RHSCL-2.4:rh-mysql57-mysql-0:5.7.19-6.el7.src",
            "7Server-RHSCL-2.4:rh-mysql57-mysql-0:5.7.19-6.el7.x86_64",
            "7Server-RHSCL-2.4:rh-mysql57-mysql-common-0:5.7.19-6.el7.x86_64",
            "7Server-RHSCL-2.4:rh-mysql57-mysql-config-0:5.7.19-6.el7.x86_64",
            "7Server-RHSCL-2.4:rh-mysql57-mysql-debuginfo-0:5.7.19-6.el7.x86_64",
            "7Server-RHSCL-2.4:rh-mysql57-mysql-devel-0:5.7.19-6.el7.x86_64",
            "7Server-RHSCL-2.4:rh-mysql57-mysql-errmsg-0:5.7.19-6.el7.x86_64",
            "7Server-RHSCL-2.4:rh-mysql57-mysql-server-0:5.7.19-6.el7.x86_64",
            "7Server-RHSCL-2.4:rh-mysql57-mysql-test-0:5.7.19-6.el7.x86_64",
            "7Workstation-RHSCL-2.4:rh-mysql57-mysql-0:5.7.19-6.el7.src",
            "7Workstation-RHSCL-2.4:rh-mysql57-mysql-0:5.7.19-6.el7.x86_64",
            "7Workstation-RHSCL-2.4:rh-mysql57-mysql-common-0:5.7.19-6.el7.x86_64",
            "7Workstation-RHSCL-2.4:rh-mysql57-mysql-config-0:5.7.19-6.el7.x86_64",
            "7Workstation-RHSCL-2.4:rh-mysql57-mysql-debuginfo-0:5.7.19-6.el7.x86_64",
            "7Workstation-RHSCL-2.4:rh-mysql57-mysql-devel-0:5.7.19-6.el7.x86_64",
            "7Workstation-RHSCL-2.4:rh-mysql57-mysql-errmsg-0:5.7.19-6.el7.x86_64",
            "7Workstation-RHSCL-2.4:rh-mysql57-mysql-server-0:5.7.19-6.el7.x86_64",
            "7Workstation-RHSCL-2.4:rh-mysql57-mysql-test-0:5.7.19-6.el7.x86_64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2017:2886"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 4.9,
            "baseSeverity": "MEDIUM",
            "confidentialityImpact": "NONE",
            "integrityImpact": "NONE",
            "privilegesRequired": "HIGH",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.0"
          },
          "products": [
            "6Server-RHSCL-2.4-6.7.Z:rh-mysql57-mysql-0:5.7.19-6.el6.src",
            "6Server-RHSCL-2.4-6.7.Z:rh-mysql57-mysql-0:5.7.19-6.el6.x86_64",
            "6Server-RHSCL-2.4-6.7.Z:rh-mysql57-mysql-common-0:5.7.19-6.el6.x86_64",
            "6Server-RHSCL-2.4-6.7.Z:rh-mysql57-mysql-config-0:5.7.19-6.el6.x86_64",
            "6Server-RHSCL-2.4-6.7.Z:rh-mysql57-mysql-debuginfo-0:5.7.19-6.el6.x86_64",
            "6Server-RHSCL-2.4-6.7.Z:rh-mysql57-mysql-devel-0:5.7.19-6.el6.x86_64",
            "6Server-RHSCL-2.4-6.7.Z:rh-mysql57-mysql-errmsg-0:5.7.19-6.el6.x86_64",
            "6Server-RHSCL-2.4-6.7.Z:rh-mysql57-mysql-server-0:5.7.19-6.el6.x86_64",
            "6Server-RHSCL-2.4-6.7.Z:rh-mysql57-mysql-test-0:5.7.19-6.el6.x86_64",
            "6Server-RHSCL-2.4:rh-mysql57-mysql-0:5.7.19-6.el6.src",
            "6Server-RHSCL-2.4:rh-mysql57-mysql-0:5.7.19-6.el6.x86_64",
            "6Server-RHSCL-2.4:rh-mysql57-mysql-common-0:5.7.19-6.el6.x86_64",
            "6Server-RHSCL-2.4:rh-mysql57-mysql-config-0:5.7.19-6.el6.x86_64",
            "6Server-RHSCL-2.4:rh-mysql57-mysql-debuginfo-0:5.7.19-6.el6.x86_64",
            "6Server-RHSCL-2.4:rh-mysql57-mysql-devel-0:5.7.19-6.el6.x86_64",
            "6Server-RHSCL-2.4:rh-mysql57-mysql-errmsg-0:5.7.19-6.el6.x86_64",
            "6Server-RHSCL-2.4:rh-mysql57-mysql-server-0:5.7.19-6.el6.x86_64",
            "6Server-RHSCL-2.4:rh-mysql57-mysql-test-0:5.7.19-6.el6.x86_64",
            "6Workstation-RHSCL-2.4:rh-mysql57-mysql-0:5.7.19-6.el6.src",
            "6Workstation-RHSCL-2.4:rh-mysql57-mysql-0:5.7.19-6.el6.x86_64",
            "6Workstation-RHSCL-2.4:rh-mysql57-mysql-common-0:5.7.19-6.el6.x86_64",
            "6Workstation-RHSCL-2.4:rh-mysql57-mysql-config-0:5.7.19-6.el6.x86_64",
            "6Workstation-RHSCL-2.4:rh-mysql57-mysql-debuginfo-0:5.7.19-6.el6.x86_64",
            "6Workstation-RHSCL-2.4:rh-mysql57-mysql-devel-0:5.7.19-6.el6.x86_64",
            "6Workstation-RHSCL-2.4:rh-mysql57-mysql-errmsg-0:5.7.19-6.el6.x86_64",
            "6Workstation-RHSCL-2.4:rh-mysql57-mysql-server-0:5.7.19-6.el6.x86_64",
            "6Workstation-RHSCL-2.4:rh-mysql57-mysql-test-0:5.7.19-6.el6.x86_64",
            "7Server-RHSCL-2.4-7.3.Z:rh-mysql57-mysql-0:5.7.19-6.el7.src",
            "7Server-RHSCL-2.4-7.3.Z:rh-mysql57-mysql-0:5.7.19-6.el7.x86_64",
            "7Server-RHSCL-2.4-7.3.Z:rh-mysql57-mysql-common-0:5.7.19-6.el7.x86_64",
            "7Server-RHSCL-2.4-7.3.Z:rh-mysql57-mysql-config-0:5.7.19-6.el7.x86_64",
            "7Server-RHSCL-2.4-7.3.Z:rh-mysql57-mysql-debuginfo-0:5.7.19-6.el7.x86_64",
            "7Server-RHSCL-2.4-7.3.Z:rh-mysql57-mysql-devel-0:5.7.19-6.el7.x86_64",
            "7Server-RHSCL-2.4-7.3.Z:rh-mysql57-mysql-errmsg-0:5.7.19-6.el7.x86_64",
            "7Server-RHSCL-2.4-7.3.Z:rh-mysql57-mysql-server-0:5.7.19-6.el7.x86_64",
            "7Server-RHSCL-2.4-7.3.Z:rh-mysql57-mysql-test-0:5.7.19-6.el7.x86_64",
            "7Server-RHSCL-2.4:rh-mysql57-mysql-0:5.7.19-6.el7.src",
            "7Server-RHSCL-2.4:rh-mysql57-mysql-0:5.7.19-6.el7.x86_64",
            "7Server-RHSCL-2.4:rh-mysql57-mysql-common-0:5.7.19-6.el7.x86_64",
            "7Server-RHSCL-2.4:rh-mysql57-mysql-config-0:5.7.19-6.el7.x86_64",
            "7Server-RHSCL-2.4:rh-mysql57-mysql-debuginfo-0:5.7.19-6.el7.x86_64",
            "7Server-RHSCL-2.4:rh-mysql57-mysql-devel-0:5.7.19-6.el7.x86_64",
            "7Server-RHSCL-2.4:rh-mysql57-mysql-errmsg-0:5.7.19-6.el7.x86_64",
            "7Server-RHSCL-2.4:rh-mysql57-mysql-server-0:5.7.19-6.el7.x86_64",
            "7Server-RHSCL-2.4:rh-mysql57-mysql-test-0:5.7.19-6.el7.x86_64",
            "7Workstation-RHSCL-2.4:rh-mysql57-mysql-0:5.7.19-6.el7.src",
            "7Workstation-RHSCL-2.4:rh-mysql57-mysql-0:5.7.19-6.el7.x86_64",
            "7Workstation-RHSCL-2.4:rh-mysql57-mysql-common-0:5.7.19-6.el7.x86_64",
            "7Workstation-RHSCL-2.4:rh-mysql57-mysql-config-0:5.7.19-6.el7.x86_64",
            "7Workstation-RHSCL-2.4:rh-mysql57-mysql-debuginfo-0:5.7.19-6.el7.x86_64",
            "7Workstation-RHSCL-2.4:rh-mysql57-mysql-devel-0:5.7.19-6.el7.x86_64",
            "7Workstation-RHSCL-2.4:rh-mysql57-mysql-errmsg-0:5.7.19-6.el7.x86_64",
            "7Workstation-RHSCL-2.4:rh-mysql57-mysql-server-0:5.7.19-6.el7.x86_64",
            "7Workstation-RHSCL-2.4:rh-mysql57-mysql-test-0:5.7.19-6.el7.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Moderate"
        }
      ],
      "title": "mysql: Server: DML unspecified vulnerability (CPU Apr 2017)"
    },
    {
      "cve": "CVE-2017-3458",
      "discovery_date": "2017-04-19T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "1443372"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: DML). Supported versions that are affected are 5.7.17 and earlier. Easily \"exploitable\" vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.0 Base Score 4.9 (Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H).",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "mysql: Server: DML unspecified vulnerability (CPU Apr 2017)",
          "title": "Vulnerability summary"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "6Server-RHSCL-2.4-6.7.Z:rh-mysql57-mysql-0:5.7.19-6.el6.src",
          "6Server-RHSCL-2.4-6.7.Z:rh-mysql57-mysql-0:5.7.19-6.el6.x86_64",
          "6Server-RHSCL-2.4-6.7.Z:rh-mysql57-mysql-common-0:5.7.19-6.el6.x86_64",
          "6Server-RHSCL-2.4-6.7.Z:rh-mysql57-mysql-config-0:5.7.19-6.el6.x86_64",
          "6Server-RHSCL-2.4-6.7.Z:rh-mysql57-mysql-debuginfo-0:5.7.19-6.el6.x86_64",
          "6Server-RHSCL-2.4-6.7.Z:rh-mysql57-mysql-devel-0:5.7.19-6.el6.x86_64",
          "6Server-RHSCL-2.4-6.7.Z:rh-mysql57-mysql-errmsg-0:5.7.19-6.el6.x86_64",
          "6Server-RHSCL-2.4-6.7.Z:rh-mysql57-mysql-server-0:5.7.19-6.el6.x86_64",
          "6Server-RHSCL-2.4-6.7.Z:rh-mysql57-mysql-test-0:5.7.19-6.el6.x86_64",
          "6Server-RHSCL-2.4:rh-mysql57-mysql-0:5.7.19-6.el6.src",
          "6Server-RHSCL-2.4:rh-mysql57-mysql-0:5.7.19-6.el6.x86_64",
          "6Server-RHSCL-2.4:rh-mysql57-mysql-common-0:5.7.19-6.el6.x86_64",
          "6Server-RHSCL-2.4:rh-mysql57-mysql-config-0:5.7.19-6.el6.x86_64",
          "6Server-RHSCL-2.4:rh-mysql57-mysql-debuginfo-0:5.7.19-6.el6.x86_64",
          "6Server-RHSCL-2.4:rh-mysql57-mysql-devel-0:5.7.19-6.el6.x86_64",
          "6Server-RHSCL-2.4:rh-mysql57-mysql-errmsg-0:5.7.19-6.el6.x86_64",
          "6Server-RHSCL-2.4:rh-mysql57-mysql-server-0:5.7.19-6.el6.x86_64",
          "6Server-RHSCL-2.4:rh-mysql57-mysql-test-0:5.7.19-6.el6.x86_64",
          "6Workstation-RHSCL-2.4:rh-mysql57-mysql-0:5.7.19-6.el6.src",
          "6Workstation-RHSCL-2.4:rh-mysql57-mysql-0:5.7.19-6.el6.x86_64",
          "6Workstation-RHSCL-2.4:rh-mysql57-mysql-common-0:5.7.19-6.el6.x86_64",
          "6Workstation-RHSCL-2.4:rh-mysql57-mysql-config-0:5.7.19-6.el6.x86_64",
          "6Workstation-RHSCL-2.4:rh-mysql57-mysql-debuginfo-0:5.7.19-6.el6.x86_64",
          "6Workstation-RHSCL-2.4:rh-mysql57-mysql-devel-0:5.7.19-6.el6.x86_64",
          "6Workstation-RHSCL-2.4:rh-mysql57-mysql-errmsg-0:5.7.19-6.el6.x86_64",
          "6Workstation-RHSCL-2.4:rh-mysql57-mysql-server-0:5.7.19-6.el6.x86_64",
          "6Workstation-RHSCL-2.4:rh-mysql57-mysql-test-0:5.7.19-6.el6.x86_64",
          "7Server-RHSCL-2.4-7.3.Z:rh-mysql57-mysql-0:5.7.19-6.el7.src",
          "7Server-RHSCL-2.4-7.3.Z:rh-mysql57-mysql-0:5.7.19-6.el7.x86_64",
          "7Server-RHSCL-2.4-7.3.Z:rh-mysql57-mysql-common-0:5.7.19-6.el7.x86_64",
          "7Server-RHSCL-2.4-7.3.Z:rh-mysql57-mysql-config-0:5.7.19-6.el7.x86_64",
          "7Server-RHSCL-2.4-7.3.Z:rh-mysql57-mysql-debuginfo-0:5.7.19-6.el7.x86_64",
          "7Server-RHSCL-2.4-7.3.Z:rh-mysql57-mysql-devel-0:5.7.19-6.el7.x86_64",
          "7Server-RHSCL-2.4-7.3.Z:rh-mysql57-mysql-errmsg-0:5.7.19-6.el7.x86_64",
          "7Server-RHSCL-2.4-7.3.Z:rh-mysql57-mysql-server-0:5.7.19-6.el7.x86_64",
          "7Server-RHSCL-2.4-7.3.Z:rh-mysql57-mysql-test-0:5.7.19-6.el7.x86_64",
          "7Server-RHSCL-2.4:rh-mysql57-mysql-0:5.7.19-6.el7.src",
          "7Server-RHSCL-2.4:rh-mysql57-mysql-0:5.7.19-6.el7.x86_64",
          "7Server-RHSCL-2.4:rh-mysql57-mysql-common-0:5.7.19-6.el7.x86_64",
          "7Server-RHSCL-2.4:rh-mysql57-mysql-config-0:5.7.19-6.el7.x86_64",
          "7Server-RHSCL-2.4:rh-mysql57-mysql-debuginfo-0:5.7.19-6.el7.x86_64",
          "7Server-RHSCL-2.4:rh-mysql57-mysql-devel-0:5.7.19-6.el7.x86_64",
          "7Server-RHSCL-2.4:rh-mysql57-mysql-errmsg-0:5.7.19-6.el7.x86_64",
          "7Server-RHSCL-2.4:rh-mysql57-mysql-server-0:5.7.19-6.el7.x86_64",
          "7Server-RHSCL-2.4:rh-mysql57-mysql-test-0:5.7.19-6.el7.x86_64",
          "7Workstation-RHSCL-2.4:rh-mysql57-mysql-0:5.7.19-6.el7.src",
          "7Workstation-RHSCL-2.4:rh-mysql57-mysql-0:5.7.19-6.el7.x86_64",
          "7Workstation-RHSCL-2.4:rh-mysql57-mysql-common-0:5.7.19-6.el7.x86_64",
          "7Workstation-RHSCL-2.4:rh-mysql57-mysql-config-0:5.7.19-6.el7.x86_64",
          "7Workstation-RHSCL-2.4:rh-mysql57-mysql-debuginfo-0:5.7.19-6.el7.x86_64",
          "7Workstation-RHSCL-2.4:rh-mysql57-mysql-devel-0:5.7.19-6.el7.x86_64",
          "7Workstation-RHSCL-2.4:rh-mysql57-mysql-errmsg-0:5.7.19-6.el7.x86_64",
          "7Workstation-RHSCL-2.4:rh-mysql57-mysql-server-0:5.7.19-6.el7.x86_64",
          "7Workstation-RHSCL-2.4:rh-mysql57-mysql-test-0:5.7.19-6.el7.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2017-3458"
        },
        {
          "category": "external",
          "summary": "RHBZ#1443372",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1443372"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2017-3458",
          "url": "https://www.cve.org/CVERecord?id=CVE-2017-3458"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2017-3458",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2017-3458"
        },
        {
          "category": "external",
          "summary": "http://www.oracle.com/technetwork/security-advisory/cpuapr2017-3236618.html#AppendixMSQL",
          "url": "http://www.oracle.com/technetwork/security-advisory/cpuapr2017-3236618.html#AppendixMSQL"
        }
      ],
      "release_date": "2017-04-19T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2017-10-12T07:53:15+00:00",
          "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAfter installing this update, the MySQL server daemon (mysqld) will be restarted automatically.",
          "product_ids": [
            "6Server-RHSCL-2.4-6.7.Z:rh-mysql57-mysql-0:5.7.19-6.el6.src",
            "6Server-RHSCL-2.4-6.7.Z:rh-mysql57-mysql-0:5.7.19-6.el6.x86_64",
            "6Server-RHSCL-2.4-6.7.Z:rh-mysql57-mysql-common-0:5.7.19-6.el6.x86_64",
            "6Server-RHSCL-2.4-6.7.Z:rh-mysql57-mysql-config-0:5.7.19-6.el6.x86_64",
            "6Server-RHSCL-2.4-6.7.Z:rh-mysql57-mysql-debuginfo-0:5.7.19-6.el6.x86_64",
            "6Server-RHSCL-2.4-6.7.Z:rh-mysql57-mysql-devel-0:5.7.19-6.el6.x86_64",
            "6Server-RHSCL-2.4-6.7.Z:rh-mysql57-mysql-errmsg-0:5.7.19-6.el6.x86_64",
            "6Server-RHSCL-2.4-6.7.Z:rh-mysql57-mysql-server-0:5.7.19-6.el6.x86_64",
            "6Server-RHSCL-2.4-6.7.Z:rh-mysql57-mysql-test-0:5.7.19-6.el6.x86_64",
            "6Server-RHSCL-2.4:rh-mysql57-mysql-0:5.7.19-6.el6.src",
            "6Server-RHSCL-2.4:rh-mysql57-mysql-0:5.7.19-6.el6.x86_64",
            "6Server-RHSCL-2.4:rh-mysql57-mysql-common-0:5.7.19-6.el6.x86_64",
            "6Server-RHSCL-2.4:rh-mysql57-mysql-config-0:5.7.19-6.el6.x86_64",
            "6Server-RHSCL-2.4:rh-mysql57-mysql-debuginfo-0:5.7.19-6.el6.x86_64",
            "6Server-RHSCL-2.4:rh-mysql57-mysql-devel-0:5.7.19-6.el6.x86_64",
            "6Server-RHSCL-2.4:rh-mysql57-mysql-errmsg-0:5.7.19-6.el6.x86_64",
            "6Server-RHSCL-2.4:rh-mysql57-mysql-server-0:5.7.19-6.el6.x86_64",
            "6Server-RHSCL-2.4:rh-mysql57-mysql-test-0:5.7.19-6.el6.x86_64",
            "6Workstation-RHSCL-2.4:rh-mysql57-mysql-0:5.7.19-6.el6.src",
            "6Workstation-RHSCL-2.4:rh-mysql57-mysql-0:5.7.19-6.el6.x86_64",
            "6Workstation-RHSCL-2.4:rh-mysql57-mysql-common-0:5.7.19-6.el6.x86_64",
            "6Workstation-RHSCL-2.4:rh-mysql57-mysql-config-0:5.7.19-6.el6.x86_64",
            "6Workstation-RHSCL-2.4:rh-mysql57-mysql-debuginfo-0:5.7.19-6.el6.x86_64",
            "6Workstation-RHSCL-2.4:rh-mysql57-mysql-devel-0:5.7.19-6.el6.x86_64",
            "6Workstation-RHSCL-2.4:rh-mysql57-mysql-errmsg-0:5.7.19-6.el6.x86_64",
            "6Workstation-RHSCL-2.4:rh-mysql57-mysql-server-0:5.7.19-6.el6.x86_64",
            "6Workstation-RHSCL-2.4:rh-mysql57-mysql-test-0:5.7.19-6.el6.x86_64",
            "7Server-RHSCL-2.4-7.3.Z:rh-mysql57-mysql-0:5.7.19-6.el7.src",
            "7Server-RHSCL-2.4-7.3.Z:rh-mysql57-mysql-0:5.7.19-6.el7.x86_64",
            "7Server-RHSCL-2.4-7.3.Z:rh-mysql57-mysql-common-0:5.7.19-6.el7.x86_64",
            "7Server-RHSCL-2.4-7.3.Z:rh-mysql57-mysql-config-0:5.7.19-6.el7.x86_64",
            "7Server-RHSCL-2.4-7.3.Z:rh-mysql57-mysql-debuginfo-0:5.7.19-6.el7.x86_64",
            "7Server-RHSCL-2.4-7.3.Z:rh-mysql57-mysql-devel-0:5.7.19-6.el7.x86_64",
            "7Server-RHSCL-2.4-7.3.Z:rh-mysql57-mysql-errmsg-0:5.7.19-6.el7.x86_64",
            "7Server-RHSCL-2.4-7.3.Z:rh-mysql57-mysql-server-0:5.7.19-6.el7.x86_64",
            "7Server-RHSCL-2.4-7.3.Z:rh-mysql57-mysql-test-0:5.7.19-6.el7.x86_64",
            "7Server-RHSCL-2.4:rh-mysql57-mysql-0:5.7.19-6.el7.src",
            "7Server-RHSCL-2.4:rh-mysql57-mysql-0:5.7.19-6.el7.x86_64",
            "7Server-RHSCL-2.4:rh-mysql57-mysql-common-0:5.7.19-6.el7.x86_64",
            "7Server-RHSCL-2.4:rh-mysql57-mysql-config-0:5.7.19-6.el7.x86_64",
            "7Server-RHSCL-2.4:rh-mysql57-mysql-debuginfo-0:5.7.19-6.el7.x86_64",
            "7Server-RHSCL-2.4:rh-mysql57-mysql-devel-0:5.7.19-6.el7.x86_64",
            "7Server-RHSCL-2.4:rh-mysql57-mysql-errmsg-0:5.7.19-6.el7.x86_64",
            "7Server-RHSCL-2.4:rh-mysql57-mysql-server-0:5.7.19-6.el7.x86_64",
            "7Server-RHSCL-2.4:rh-mysql57-mysql-test-0:5.7.19-6.el7.x86_64",
            "7Workstation-RHSCL-2.4:rh-mysql57-mysql-0:5.7.19-6.el7.src",
            "7Workstation-RHSCL-2.4:rh-mysql57-mysql-0:5.7.19-6.el7.x86_64",
            "7Workstation-RHSCL-2.4:rh-mysql57-mysql-common-0:5.7.19-6.el7.x86_64",
            "7Workstation-RHSCL-2.4:rh-mysql57-mysql-config-0:5.7.19-6.el7.x86_64",
            "7Workstation-RHSCL-2.4:rh-mysql57-mysql-debuginfo-0:5.7.19-6.el7.x86_64",
            "7Workstation-RHSCL-2.4:rh-mysql57-mysql-devel-0:5.7.19-6.el7.x86_64",
            "7Workstation-RHSCL-2.4:rh-mysql57-mysql-errmsg-0:5.7.19-6.el7.x86_64",
            "7Workstation-RHSCL-2.4:rh-mysql57-mysql-server-0:5.7.19-6.el7.x86_64",
            "7Workstation-RHSCL-2.4:rh-mysql57-mysql-test-0:5.7.19-6.el7.x86_64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2017:2886"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 4.9,
            "baseSeverity": "MEDIUM",
            "confidentialityImpact": "NONE",
            "integrityImpact": "NONE",
            "privilegesRequired": "HIGH",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.0"
          },
          "products": [
            "6Server-RHSCL-2.4-6.7.Z:rh-mysql57-mysql-0:5.7.19-6.el6.src",
            "6Server-RHSCL-2.4-6.7.Z:rh-mysql57-mysql-0:5.7.19-6.el6.x86_64",
            "6Server-RHSCL-2.4-6.7.Z:rh-mysql57-mysql-common-0:5.7.19-6.el6.x86_64",
            "6Server-RHSCL-2.4-6.7.Z:rh-mysql57-mysql-config-0:5.7.19-6.el6.x86_64",
            "6Server-RHSCL-2.4-6.7.Z:rh-mysql57-mysql-debuginfo-0:5.7.19-6.el6.x86_64",
            "6Server-RHSCL-2.4-6.7.Z:rh-mysql57-mysql-devel-0:5.7.19-6.el6.x86_64",
            "6Server-RHSCL-2.4-6.7.Z:rh-mysql57-mysql-errmsg-0:5.7.19-6.el6.x86_64",
            "6Server-RHSCL-2.4-6.7.Z:rh-mysql57-mysql-server-0:5.7.19-6.el6.x86_64",
            "6Server-RHSCL-2.4-6.7.Z:rh-mysql57-mysql-test-0:5.7.19-6.el6.x86_64",
            "6Server-RHSCL-2.4:rh-mysql57-mysql-0:5.7.19-6.el6.src",
            "6Server-RHSCL-2.4:rh-mysql57-mysql-0:5.7.19-6.el6.x86_64",
            "6Server-RHSCL-2.4:rh-mysql57-mysql-common-0:5.7.19-6.el6.x86_64",
            "6Server-RHSCL-2.4:rh-mysql57-mysql-config-0:5.7.19-6.el6.x86_64",
            "6Server-RHSCL-2.4:rh-mysql57-mysql-debuginfo-0:5.7.19-6.el6.x86_64",
            "6Server-RHSCL-2.4:rh-mysql57-mysql-devel-0:5.7.19-6.el6.x86_64",
            "6Server-RHSCL-2.4:rh-mysql57-mysql-errmsg-0:5.7.19-6.el6.x86_64",
            "6Server-RHSCL-2.4:rh-mysql57-mysql-server-0:5.7.19-6.el6.x86_64",
            "6Server-RHSCL-2.4:rh-mysql57-mysql-test-0:5.7.19-6.el6.x86_64",
            "6Workstation-RHSCL-2.4:rh-mysql57-mysql-0:5.7.19-6.el6.src",
            "6Workstation-RHSCL-2.4:rh-mysql57-mysql-0:5.7.19-6.el6.x86_64",
            "6Workstation-RHSCL-2.4:rh-mysql57-mysql-common-0:5.7.19-6.el6.x86_64",
            "6Workstation-RHSCL-2.4:rh-mysql57-mysql-config-0:5.7.19-6.el6.x86_64",
            "6Workstation-RHSCL-2.4:rh-mysql57-mysql-debuginfo-0:5.7.19-6.el6.x86_64",
            "6Workstation-RHSCL-2.4:rh-mysql57-mysql-devel-0:5.7.19-6.el6.x86_64",
            "6Workstation-RHSCL-2.4:rh-mysql57-mysql-errmsg-0:5.7.19-6.el6.x86_64",
            "6Workstation-RHSCL-2.4:rh-mysql57-mysql-server-0:5.7.19-6.el6.x86_64",
            "6Workstation-RHSCL-2.4:rh-mysql57-mysql-test-0:5.7.19-6.el6.x86_64",
            "7Server-RHSCL-2.4-7.3.Z:rh-mysql57-mysql-0:5.7.19-6.el7.src",
            "7Server-RHSCL-2.4-7.3.Z:rh-mysql57-mysql-0:5.7.19-6.el7.x86_64",
            "7Server-RHSCL-2.4-7.3.Z:rh-mysql57-mysql-common-0:5.7.19-6.el7.x86_64",
            "7Server-RHSCL-2.4-7.3.Z:rh-mysql57-mysql-config-0:5.7.19-6.el7.x86_64",
            "7Server-RHSCL-2.4-7.3.Z:rh-mysql57-mysql-debuginfo-0:5.7.19-6.el7.x86_64",
            "7Server-RHSCL-2.4-7.3.Z:rh-mysql57-mysql-devel-0:5.7.19-6.el7.x86_64",
            "7Server-RHSCL-2.4-7.3.Z:rh-mysql57-mysql-errmsg-0:5.7.19-6.el7.x86_64",
            "7Server-RHSCL-2.4-7.3.Z:rh-mysql57-mysql-server-0:5.7.19-6.el7.x86_64",
            "7Server-RHSCL-2.4-7.3.Z:rh-mysql57-mysql-test-0:5.7.19-6.el7.x86_64",
            "7Server-RHSCL-2.4:rh-mysql57-mysql-0:5.7.19-6.el7.src",
            "7Server-RHSCL-2.4:rh-mysql57-mysql-0:5.7.19-6.el7.x86_64",
            "7Server-RHSCL-2.4:rh-mysql57-mysql-common-0:5.7.19-6.el7.x86_64",
            "7Server-RHSCL-2.4:rh-mysql57-mysql-config-0:5.7.19-6.el7.x86_64",
            "7Server-RHSCL-2.4:rh-mysql57-mysql-debuginfo-0:5.7.19-6.el7.x86_64",
            "7Server-RHSCL-2.4:rh-mysql57-mysql-devel-0:5.7.19-6.el7.x86_64",
            "7Server-RHSCL-2.4:rh-mysql57-mysql-errmsg-0:5.7.19-6.el7.x86_64",
            "7Server-RHSCL-2.4:rh-mysql57-mysql-server-0:5.7.19-6.el7.x86_64",
            "7Server-RHSCL-2.4:rh-mysql57-mysql-test-0:5.7.19-6.el7.x86_64",
            "7Workstation-RHSCL-2.4:rh-mysql57-mysql-0:5.7.19-6.el7.src",
            "7Workstation-RHSCL-2.4:rh-mysql57-mysql-0:5.7.19-6.el7.x86_64",
            "7Workstation-RHSCL-2.4:rh-mysql57-mysql-common-0:5.7.19-6.el7.x86_64",
            "7Workstation-RHSCL-2.4:rh-mysql57-mysql-config-0:5.7.19-6.el7.x86_64",
            "7Workstation-RHSCL-2.4:rh-mysql57-mysql-debuginfo-0:5.7.19-6.el7.x86_64",
            "7Workstation-RHSCL-2.4:rh-mysql57-mysql-devel-0:5.7.19-6.el7.x86_64",
            "7Workstation-RHSCL-2.4:rh-mysql57-mysql-errmsg-0:5.7.19-6.el7.x86_64",
            "7Workstation-RHSCL-2.4:rh-mysql57-mysql-server-0:5.7.19-6.el7.x86_64",
            "7Workstation-RHSCL-2.4:rh-mysql57-mysql-test-0:5.7.19-6.el7.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Moderate"
        }
      ],
      "title": "mysql: Server: DML unspecified vulnerability (CPU Apr 2017)"
    },
    {
      "cve": "CVE-2017-3459",
      "discovery_date": "2017-04-19T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "1443374"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Optimizer). Supported versions that are affected are 5.7.17 and earlier. Easily \"exploitable\" vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.0 Base Score 4.9 (Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H).",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "mysql: Server: Optimizer unspecified vulnerability (CPU Apr 2017)",
          "title": "Vulnerability summary"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "6Server-RHSCL-2.4-6.7.Z:rh-mysql57-mysql-0:5.7.19-6.el6.src",
          "6Server-RHSCL-2.4-6.7.Z:rh-mysql57-mysql-0:5.7.19-6.el6.x86_64",
          "6Server-RHSCL-2.4-6.7.Z:rh-mysql57-mysql-common-0:5.7.19-6.el6.x86_64",
          "6Server-RHSCL-2.4-6.7.Z:rh-mysql57-mysql-config-0:5.7.19-6.el6.x86_64",
          "6Server-RHSCL-2.4-6.7.Z:rh-mysql57-mysql-debuginfo-0:5.7.19-6.el6.x86_64",
          "6Server-RHSCL-2.4-6.7.Z:rh-mysql57-mysql-devel-0:5.7.19-6.el6.x86_64",
          "6Server-RHSCL-2.4-6.7.Z:rh-mysql57-mysql-errmsg-0:5.7.19-6.el6.x86_64",
          "6Server-RHSCL-2.4-6.7.Z:rh-mysql57-mysql-server-0:5.7.19-6.el6.x86_64",
          "6Server-RHSCL-2.4-6.7.Z:rh-mysql57-mysql-test-0:5.7.19-6.el6.x86_64",
          "6Server-RHSCL-2.4:rh-mysql57-mysql-0:5.7.19-6.el6.src",
          "6Server-RHSCL-2.4:rh-mysql57-mysql-0:5.7.19-6.el6.x86_64",
          "6Server-RHSCL-2.4:rh-mysql57-mysql-common-0:5.7.19-6.el6.x86_64",
          "6Server-RHSCL-2.4:rh-mysql57-mysql-config-0:5.7.19-6.el6.x86_64",
          "6Server-RHSCL-2.4:rh-mysql57-mysql-debuginfo-0:5.7.19-6.el6.x86_64",
          "6Server-RHSCL-2.4:rh-mysql57-mysql-devel-0:5.7.19-6.el6.x86_64",
          "6Server-RHSCL-2.4:rh-mysql57-mysql-errmsg-0:5.7.19-6.el6.x86_64",
          "6Server-RHSCL-2.4:rh-mysql57-mysql-server-0:5.7.19-6.el6.x86_64",
          "6Server-RHSCL-2.4:rh-mysql57-mysql-test-0:5.7.19-6.el6.x86_64",
          "6Workstation-RHSCL-2.4:rh-mysql57-mysql-0:5.7.19-6.el6.src",
          "6Workstation-RHSCL-2.4:rh-mysql57-mysql-0:5.7.19-6.el6.x86_64",
          "6Workstation-RHSCL-2.4:rh-mysql57-mysql-common-0:5.7.19-6.el6.x86_64",
          "6Workstation-RHSCL-2.4:rh-mysql57-mysql-config-0:5.7.19-6.el6.x86_64",
          "6Workstation-RHSCL-2.4:rh-mysql57-mysql-debuginfo-0:5.7.19-6.el6.x86_64",
          "6Workstation-RHSCL-2.4:rh-mysql57-mysql-devel-0:5.7.19-6.el6.x86_64",
          "6Workstation-RHSCL-2.4:rh-mysql57-mysql-errmsg-0:5.7.19-6.el6.x86_64",
          "6Workstation-RHSCL-2.4:rh-mysql57-mysql-server-0:5.7.19-6.el6.x86_64",
          "6Workstation-RHSCL-2.4:rh-mysql57-mysql-test-0:5.7.19-6.el6.x86_64",
          "7Server-RHSCL-2.4-7.3.Z:rh-mysql57-mysql-0:5.7.19-6.el7.src",
          "7Server-RHSCL-2.4-7.3.Z:rh-mysql57-mysql-0:5.7.19-6.el7.x86_64",
          "7Server-RHSCL-2.4-7.3.Z:rh-mysql57-mysql-common-0:5.7.19-6.el7.x86_64",
          "7Server-RHSCL-2.4-7.3.Z:rh-mysql57-mysql-config-0:5.7.19-6.el7.x86_64",
          "7Server-RHSCL-2.4-7.3.Z:rh-mysql57-mysql-debuginfo-0:5.7.19-6.el7.x86_64",
          "7Server-RHSCL-2.4-7.3.Z:rh-mysql57-mysql-devel-0:5.7.19-6.el7.x86_64",
          "7Server-RHSCL-2.4-7.3.Z:rh-mysql57-mysql-errmsg-0:5.7.19-6.el7.x86_64",
          "7Server-RHSCL-2.4-7.3.Z:rh-mysql57-mysql-server-0:5.7.19-6.el7.x86_64",
          "7Server-RHSCL-2.4-7.3.Z:rh-mysql57-mysql-test-0:5.7.19-6.el7.x86_64",
          "7Server-RHSCL-2.4:rh-mysql57-mysql-0:5.7.19-6.el7.src",
          "7Server-RHSCL-2.4:rh-mysql57-mysql-0:5.7.19-6.el7.x86_64",
          "7Server-RHSCL-2.4:rh-mysql57-mysql-common-0:5.7.19-6.el7.x86_64",
          "7Server-RHSCL-2.4:rh-mysql57-mysql-config-0:5.7.19-6.el7.x86_64",
          "7Server-RHSCL-2.4:rh-mysql57-mysql-debuginfo-0:5.7.19-6.el7.x86_64",
          "7Server-RHSCL-2.4:rh-mysql57-mysql-devel-0:5.7.19-6.el7.x86_64",
          "7Server-RHSCL-2.4:rh-mysql57-mysql-errmsg-0:5.7.19-6.el7.x86_64",
          "7Server-RHSCL-2.4:rh-mysql57-mysql-server-0:5.7.19-6.el7.x86_64",
          "7Server-RHSCL-2.4:rh-mysql57-mysql-test-0:5.7.19-6.el7.x86_64",
          "7Workstation-RHSCL-2.4:rh-mysql57-mysql-0:5.7.19-6.el7.src",
          "7Workstation-RHSCL-2.4:rh-mysql57-mysql-0:5.7.19-6.el7.x86_64",
          "7Workstation-RHSCL-2.4:rh-mysql57-mysql-common-0:5.7.19-6.el7.x86_64",
          "7Workstation-RHSCL-2.4:rh-mysql57-mysql-config-0:5.7.19-6.el7.x86_64",
          "7Workstation-RHSCL-2.4:rh-mysql57-mysql-debuginfo-0:5.7.19-6.el7.x86_64",
          "7Workstation-RHSCL-2.4:rh-mysql57-mysql-devel-0:5.7.19-6.el7.x86_64",
          "7Workstation-RHSCL-2.4:rh-mysql57-mysql-errmsg-0:5.7.19-6.el7.x86_64",
          "7Workstation-RHSCL-2.4:rh-mysql57-mysql-server-0:5.7.19-6.el7.x86_64",
          "7Workstation-RHSCL-2.4:rh-mysql57-mysql-test-0:5.7.19-6.el7.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2017-3459"
        },
        {
          "category": "external",
          "summary": "RHBZ#1443374",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1443374"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2017-3459",
          "url": "https://www.cve.org/CVERecord?id=CVE-2017-3459"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2017-3459",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2017-3459"
        },
        {
          "category": "external",
          "summary": "http://www.oracle.com/technetwork/security-advisory/cpuapr2017-3236618.html#AppendixMSQL",
          "url": "http://www.oracle.com/technetwork/security-advisory/cpuapr2017-3236618.html#AppendixMSQL"
        }
      ],
      "release_date": "2017-04-19T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2017-10-12T07:53:15+00:00",
          "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAfter installing this update, the MySQL server daemon (mysqld) will be restarted automatically.",
          "product_ids": [
            "6Server-RHSCL-2.4-6.7.Z:rh-mysql57-mysql-0:5.7.19-6.el6.src",
            "6Server-RHSCL-2.4-6.7.Z:rh-mysql57-mysql-0:5.7.19-6.el6.x86_64",
            "6Server-RHSCL-2.4-6.7.Z:rh-mysql57-mysql-common-0:5.7.19-6.el6.x86_64",
            "6Server-RHSCL-2.4-6.7.Z:rh-mysql57-mysql-config-0:5.7.19-6.el6.x86_64",
            "6Server-RHSCL-2.4-6.7.Z:rh-mysql57-mysql-debuginfo-0:5.7.19-6.el6.x86_64",
            "6Server-RHSCL-2.4-6.7.Z:rh-mysql57-mysql-devel-0:5.7.19-6.el6.x86_64",
            "6Server-RHSCL-2.4-6.7.Z:rh-mysql57-mysql-errmsg-0:5.7.19-6.el6.x86_64",
            "6Server-RHSCL-2.4-6.7.Z:rh-mysql57-mysql-server-0:5.7.19-6.el6.x86_64",
            "6Server-RHSCL-2.4-6.7.Z:rh-mysql57-mysql-test-0:5.7.19-6.el6.x86_64",
            "6Server-RHSCL-2.4:rh-mysql57-mysql-0:5.7.19-6.el6.src",
            "6Server-RHSCL-2.4:rh-mysql57-mysql-0:5.7.19-6.el6.x86_64",
            "6Server-RHSCL-2.4:rh-mysql57-mysql-common-0:5.7.19-6.el6.x86_64",
            "6Server-RHSCL-2.4:rh-mysql57-mysql-config-0:5.7.19-6.el6.x86_64",
            "6Server-RHSCL-2.4:rh-mysql57-mysql-debuginfo-0:5.7.19-6.el6.x86_64",
            "6Server-RHSCL-2.4:rh-mysql57-mysql-devel-0:5.7.19-6.el6.x86_64",
            "6Server-RHSCL-2.4:rh-mysql57-mysql-errmsg-0:5.7.19-6.el6.x86_64",
            "6Server-RHSCL-2.4:rh-mysql57-mysql-server-0:5.7.19-6.el6.x86_64",
            "6Server-RHSCL-2.4:rh-mysql57-mysql-test-0:5.7.19-6.el6.x86_64",
            "6Workstation-RHSCL-2.4:rh-mysql57-mysql-0:5.7.19-6.el6.src",
            "6Workstation-RHSCL-2.4:rh-mysql57-mysql-0:5.7.19-6.el6.x86_64",
            "6Workstation-RHSCL-2.4:rh-mysql57-mysql-common-0:5.7.19-6.el6.x86_64",
            "6Workstation-RHSCL-2.4:rh-mysql57-mysql-config-0:5.7.19-6.el6.x86_64",
            "6Workstation-RHSCL-2.4:rh-mysql57-mysql-debuginfo-0:5.7.19-6.el6.x86_64",
            "6Workstation-RHSCL-2.4:rh-mysql57-mysql-devel-0:5.7.19-6.el6.x86_64",
            "6Workstation-RHSCL-2.4:rh-mysql57-mysql-errmsg-0:5.7.19-6.el6.x86_64",
            "6Workstation-RHSCL-2.4:rh-mysql57-mysql-server-0:5.7.19-6.el6.x86_64",
            "6Workstation-RHSCL-2.4:rh-mysql57-mysql-test-0:5.7.19-6.el6.x86_64",
            "7Server-RHSCL-2.4-7.3.Z:rh-mysql57-mysql-0:5.7.19-6.el7.src",
            "7Server-RHSCL-2.4-7.3.Z:rh-mysql57-mysql-0:5.7.19-6.el7.x86_64",
            "7Server-RHSCL-2.4-7.3.Z:rh-mysql57-mysql-common-0:5.7.19-6.el7.x86_64",
            "7Server-RHSCL-2.4-7.3.Z:rh-mysql57-mysql-config-0:5.7.19-6.el7.x86_64",
            "7Server-RHSCL-2.4-7.3.Z:rh-mysql57-mysql-debuginfo-0:5.7.19-6.el7.x86_64",
            "7Server-RHSCL-2.4-7.3.Z:rh-mysql57-mysql-devel-0:5.7.19-6.el7.x86_64",
            "7Server-RHSCL-2.4-7.3.Z:rh-mysql57-mysql-errmsg-0:5.7.19-6.el7.x86_64",
            "7Server-RHSCL-2.4-7.3.Z:rh-mysql57-mysql-server-0:5.7.19-6.el7.x86_64",
            "7Server-RHSCL-2.4-7.3.Z:rh-mysql57-mysql-test-0:5.7.19-6.el7.x86_64",
            "7Server-RHSCL-2.4:rh-mysql57-mysql-0:5.7.19-6.el7.src",
            "7Server-RHSCL-2.4:rh-mysql57-mysql-0:5.7.19-6.el7.x86_64",
            "7Server-RHSCL-2.4:rh-mysql57-mysql-common-0:5.7.19-6.el7.x86_64",
            "7Server-RHSCL-2.4:rh-mysql57-mysql-config-0:5.7.19-6.el7.x86_64",
            "7Server-RHSCL-2.4:rh-mysql57-mysql-debuginfo-0:5.7.19-6.el7.x86_64",
            "7Server-RHSCL-2.4:rh-mysql57-mysql-devel-0:5.7.19-6.el7.x86_64",
            "7Server-RHSCL-2.4:rh-mysql57-mysql-errmsg-0:5.7.19-6.el7.x86_64",
            "7Server-RHSCL-2.4:rh-mysql57-mysql-server-0:5.7.19-6.el7.x86_64",
            "7Server-RHSCL-2.4:rh-mysql57-mysql-test-0:5.7.19-6.el7.x86_64",
            "7Workstation-RHSCL-2.4:rh-mysql57-mysql-0:5.7.19-6.el7.src",
            "7Workstation-RHSCL-2.4:rh-mysql57-mysql-0:5.7.19-6.el7.x86_64",
            "7Workstation-RHSCL-2.4:rh-mysql57-mysql-common-0:5.7.19-6.el7.x86_64",
            "7Workstation-RHSCL-2.4:rh-mysql57-mysql-config-0:5.7.19-6.el7.x86_64",
            "7Workstation-RHSCL-2.4:rh-mysql57-mysql-debuginfo-0:5.7.19-6.el7.x86_64",
            "7Workstation-RHSCL-2.4:rh-mysql57-mysql-devel-0:5.7.19-6.el7.x86_64",
            "7Workstation-RHSCL-2.4:rh-mysql57-mysql-errmsg-0:5.7.19-6.el7.x86_64",
            "7Workstation-RHSCL-2.4:rh-mysql57-mysql-server-0:5.7.19-6.el7.x86_64",
            "7Workstation-RHSCL-2.4:rh-mysql57-mysql-test-0:5.7.19-6.el7.x86_64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2017:2886"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 4.9,
            "baseSeverity": "MEDIUM",
            "confidentialityImpact": "NONE",
            "integrityImpact": "NONE",
            "privilegesRequired": "HIGH",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.0"
          },
          "products": [
            "6Server-RHSCL-2.4-6.7.Z:rh-mysql57-mysql-0:5.7.19-6.el6.src",
            "6Server-RHSCL-2.4-6.7.Z:rh-mysql57-mysql-0:5.7.19-6.el6.x86_64",
            "6Server-RHSCL-2.4-6.7.Z:rh-mysql57-mysql-common-0:5.7.19-6.el6.x86_64",
            "6Server-RHSCL-2.4-6.7.Z:rh-mysql57-mysql-config-0:5.7.19-6.el6.x86_64",
            "6Server-RHSCL-2.4-6.7.Z:rh-mysql57-mysql-debuginfo-0:5.7.19-6.el6.x86_64",
            "6Server-RHSCL-2.4-6.7.Z:rh-mysql57-mysql-devel-0:5.7.19-6.el6.x86_64",
            "6Server-RHSCL-2.4-6.7.Z:rh-mysql57-mysql-errmsg-0:5.7.19-6.el6.x86_64",
            "6Server-RHSCL-2.4-6.7.Z:rh-mysql57-mysql-server-0:5.7.19-6.el6.x86_64",
            "6Server-RHSCL-2.4-6.7.Z:rh-mysql57-mysql-test-0:5.7.19-6.el6.x86_64",
            "6Server-RHSCL-2.4:rh-mysql57-mysql-0:5.7.19-6.el6.src",
            "6Server-RHSCL-2.4:rh-mysql57-mysql-0:5.7.19-6.el6.x86_64",
            "6Server-RHSCL-2.4:rh-mysql57-mysql-common-0:5.7.19-6.el6.x86_64",
            "6Server-RHSCL-2.4:rh-mysql57-mysql-config-0:5.7.19-6.el6.x86_64",
            "6Server-RHSCL-2.4:rh-mysql57-mysql-debuginfo-0:5.7.19-6.el6.x86_64",
            "6Server-RHSCL-2.4:rh-mysql57-mysql-devel-0:5.7.19-6.el6.x86_64",
            "6Server-RHSCL-2.4:rh-mysql57-mysql-errmsg-0:5.7.19-6.el6.x86_64",
            "6Server-RHSCL-2.4:rh-mysql57-mysql-server-0:5.7.19-6.el6.x86_64",
            "6Server-RHSCL-2.4:rh-mysql57-mysql-test-0:5.7.19-6.el6.x86_64",
            "6Workstation-RHSCL-2.4:rh-mysql57-mysql-0:5.7.19-6.el6.src",
            "6Workstation-RHSCL-2.4:rh-mysql57-mysql-0:5.7.19-6.el6.x86_64",
            "6Workstation-RHSCL-2.4:rh-mysql57-mysql-common-0:5.7.19-6.el6.x86_64",
            "6Workstation-RHSCL-2.4:rh-mysql57-mysql-config-0:5.7.19-6.el6.x86_64",
            "6Workstation-RHSCL-2.4:rh-mysql57-mysql-debuginfo-0:5.7.19-6.el6.x86_64",
            "6Workstation-RHSCL-2.4:rh-mysql57-mysql-devel-0:5.7.19-6.el6.x86_64",
            "6Workstation-RHSCL-2.4:rh-mysql57-mysql-errmsg-0:5.7.19-6.el6.x86_64",
            "6Workstation-RHSCL-2.4:rh-mysql57-mysql-server-0:5.7.19-6.el6.x86_64",
            "6Workstation-RHSCL-2.4:rh-mysql57-mysql-test-0:5.7.19-6.el6.x86_64",
            "7Server-RHSCL-2.4-7.3.Z:rh-mysql57-mysql-0:5.7.19-6.el7.src",
            "7Server-RHSCL-2.4-7.3.Z:rh-mysql57-mysql-0:5.7.19-6.el7.x86_64",
            "7Server-RHSCL-2.4-7.3.Z:rh-mysql57-mysql-common-0:5.7.19-6.el7.x86_64",
            "7Server-RHSCL-2.4-7.3.Z:rh-mysql57-mysql-config-0:5.7.19-6.el7.x86_64",
            "7Server-RHSCL-2.4-7.3.Z:rh-mysql57-mysql-debuginfo-0:5.7.19-6.el7.x86_64",
            "7Server-RHSCL-2.4-7.3.Z:rh-mysql57-mysql-devel-0:5.7.19-6.el7.x86_64",
            "7Server-RHSCL-2.4-7.3.Z:rh-mysql57-mysql-errmsg-0:5.7.19-6.el7.x86_64",
            "7Server-RHSCL-2.4-7.3.Z:rh-mysql57-mysql-server-0:5.7.19-6.el7.x86_64",
            "7Server-RHSCL-2.4-7.3.Z:rh-mysql57-mysql-test-0:5.7.19-6.el7.x86_64",
            "7Server-RHSCL-2.4:rh-mysql57-mysql-0:5.7.19-6.el7.src",
            "7Server-RHSCL-2.4:rh-mysql57-mysql-0:5.7.19-6.el7.x86_64",
            "7Server-RHSCL-2.4:rh-mysql57-mysql-common-0:5.7.19-6.el7.x86_64",
            "7Server-RHSCL-2.4:rh-mysql57-mysql-config-0:5.7.19-6.el7.x86_64",
            "7Server-RHSCL-2.4:rh-mysql57-mysql-debuginfo-0:5.7.19-6.el7.x86_64",
            "7Server-RHSCL-2.4:rh-mysql57-mysql-devel-0:5.7.19-6.el7.x86_64",
            "7Server-RHSCL-2.4:rh-mysql57-mysql-errmsg-0:5.7.19-6.el7.x86_64",
            "7Server-RHSCL-2.4:rh-mysql57-mysql-server-0:5.7.19-6.el7.x86_64",
            "7Server-RHSCL-2.4:rh-mysql57-mysql-test-0:5.7.19-6.el7.x86_64",
            "7Workstation-RHSCL-2.4:rh-mysql57-mysql-0:5.7.19-6.el7.src",
            "7Workstation-RHSCL-2.4:rh-mysql57-mysql-0:5.7.19-6.el7.x86_64",
            "7Workstation-RHSCL-2.4:rh-mysql57-mysql-common-0:5.7.19-6.el7.x86_64",
            "7Workstation-RHSCL-2.4:rh-mysql57-mysql-config-0:5.7.19-6.el7.x86_64",
            "7Workstation-RHSCL-2.4:rh-mysql57-mysql-debuginfo-0:5.7.19-6.el7.x86_64",
            "7Workstation-RHSCL-2.4:rh-mysql57-mysql-devel-0:5.7.19-6.el7.x86_64",
            "7Workstation-RHSCL-2.4:rh-mysql57-mysql-errmsg-0:5.7.19-6.el7.x86_64",
            "7Workstation-RHSCL-2.4:rh-mysql57-mysql-server-0:5.7.19-6.el7.x86_64",
            "7Workstation-RHSCL-2.4:rh-mysql57-mysql-test-0:5.7.19-6.el7.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Moderate"
        }
      ],
      "title": "mysql: Server: Optimizer unspecified vulnerability (CPU Apr 2017)"
    },
    {
      "cve": "CVE-2017-3460",
      "discovery_date": "2017-04-19T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "1443375"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Audit Plug-in). Supported versions that are affected are 5.7.17 and earlier. Easily \"exploitable\" vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.0 Base Score 4.9 (Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H).",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "mysql: Server: Audit Plug-in unspecified vulnerability (CPU Apr 2017)",
          "title": "Vulnerability summary"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "6Server-RHSCL-2.4-6.7.Z:rh-mysql57-mysql-0:5.7.19-6.el6.src",
          "6Server-RHSCL-2.4-6.7.Z:rh-mysql57-mysql-0:5.7.19-6.el6.x86_64",
          "6Server-RHSCL-2.4-6.7.Z:rh-mysql57-mysql-common-0:5.7.19-6.el6.x86_64",
          "6Server-RHSCL-2.4-6.7.Z:rh-mysql57-mysql-config-0:5.7.19-6.el6.x86_64",
          "6Server-RHSCL-2.4-6.7.Z:rh-mysql57-mysql-debuginfo-0:5.7.19-6.el6.x86_64",
          "6Server-RHSCL-2.4-6.7.Z:rh-mysql57-mysql-devel-0:5.7.19-6.el6.x86_64",
          "6Server-RHSCL-2.4-6.7.Z:rh-mysql57-mysql-errmsg-0:5.7.19-6.el6.x86_64",
          "6Server-RHSCL-2.4-6.7.Z:rh-mysql57-mysql-server-0:5.7.19-6.el6.x86_64",
          "6Server-RHSCL-2.4-6.7.Z:rh-mysql57-mysql-test-0:5.7.19-6.el6.x86_64",
          "6Server-RHSCL-2.4:rh-mysql57-mysql-0:5.7.19-6.el6.src",
          "6Server-RHSCL-2.4:rh-mysql57-mysql-0:5.7.19-6.el6.x86_64",
          "6Server-RHSCL-2.4:rh-mysql57-mysql-common-0:5.7.19-6.el6.x86_64",
          "6Server-RHSCL-2.4:rh-mysql57-mysql-config-0:5.7.19-6.el6.x86_64",
          "6Server-RHSCL-2.4:rh-mysql57-mysql-debuginfo-0:5.7.19-6.el6.x86_64",
          "6Server-RHSCL-2.4:rh-mysql57-mysql-devel-0:5.7.19-6.el6.x86_64",
          "6Server-RHSCL-2.4:rh-mysql57-mysql-errmsg-0:5.7.19-6.el6.x86_64",
          "6Server-RHSCL-2.4:rh-mysql57-mysql-server-0:5.7.19-6.el6.x86_64",
          "6Server-RHSCL-2.4:rh-mysql57-mysql-test-0:5.7.19-6.el6.x86_64",
          "6Workstation-RHSCL-2.4:rh-mysql57-mysql-0:5.7.19-6.el6.src",
          "6Workstation-RHSCL-2.4:rh-mysql57-mysql-0:5.7.19-6.el6.x86_64",
          "6Workstation-RHSCL-2.4:rh-mysql57-mysql-common-0:5.7.19-6.el6.x86_64",
          "6Workstation-RHSCL-2.4:rh-mysql57-mysql-config-0:5.7.19-6.el6.x86_64",
          "6Workstation-RHSCL-2.4:rh-mysql57-mysql-debuginfo-0:5.7.19-6.el6.x86_64",
          "6Workstation-RHSCL-2.4:rh-mysql57-mysql-devel-0:5.7.19-6.el6.x86_64",
          "6Workstation-RHSCL-2.4:rh-mysql57-mysql-errmsg-0:5.7.19-6.el6.x86_64",
          "6Workstation-RHSCL-2.4:rh-mysql57-mysql-server-0:5.7.19-6.el6.x86_64",
          "6Workstation-RHSCL-2.4:rh-mysql57-mysql-test-0:5.7.19-6.el6.x86_64",
          "7Server-RHSCL-2.4-7.3.Z:rh-mysql57-mysql-0:5.7.19-6.el7.src",
          "7Server-RHSCL-2.4-7.3.Z:rh-mysql57-mysql-0:5.7.19-6.el7.x86_64",
          "7Server-RHSCL-2.4-7.3.Z:rh-mysql57-mysql-common-0:5.7.19-6.el7.x86_64",
          "7Server-RHSCL-2.4-7.3.Z:rh-mysql57-mysql-config-0:5.7.19-6.el7.x86_64",
          "7Server-RHSCL-2.4-7.3.Z:rh-mysql57-mysql-debuginfo-0:5.7.19-6.el7.x86_64",
          "7Server-RHSCL-2.4-7.3.Z:rh-mysql57-mysql-devel-0:5.7.19-6.el7.x86_64",
          "7Server-RHSCL-2.4-7.3.Z:rh-mysql57-mysql-errmsg-0:5.7.19-6.el7.x86_64",
          "7Server-RHSCL-2.4-7.3.Z:rh-mysql57-mysql-server-0:5.7.19-6.el7.x86_64",
          "7Server-RHSCL-2.4-7.3.Z:rh-mysql57-mysql-test-0:5.7.19-6.el7.x86_64",
          "7Server-RHSCL-2.4:rh-mysql57-mysql-0:5.7.19-6.el7.src",
          "7Server-RHSCL-2.4:rh-mysql57-mysql-0:5.7.19-6.el7.x86_64",
          "7Server-RHSCL-2.4:rh-mysql57-mysql-common-0:5.7.19-6.el7.x86_64",
          "7Server-RHSCL-2.4:rh-mysql57-mysql-config-0:5.7.19-6.el7.x86_64",
          "7Server-RHSCL-2.4:rh-mysql57-mysql-debuginfo-0:5.7.19-6.el7.x86_64",
          "7Server-RHSCL-2.4:rh-mysql57-mysql-devel-0:5.7.19-6.el7.x86_64",
          "7Server-RHSCL-2.4:rh-mysql57-mysql-errmsg-0:5.7.19-6.el7.x86_64",
          "7Server-RHSCL-2.4:rh-mysql57-mysql-server-0:5.7.19-6.el7.x86_64",
          "7Server-RHSCL-2.4:rh-mysql57-mysql-test-0:5.7.19-6.el7.x86_64",
          "7Workstation-RHSCL-2.4:rh-mysql57-mysql-0:5.7.19-6.el7.src",
          "7Workstation-RHSCL-2.4:rh-mysql57-mysql-0:5.7.19-6.el7.x86_64",
          "7Workstation-RHSCL-2.4:rh-mysql57-mysql-common-0:5.7.19-6.el7.x86_64",
          "7Workstation-RHSCL-2.4:rh-mysql57-mysql-config-0:5.7.19-6.el7.x86_64",
          "7Workstation-RHSCL-2.4:rh-mysql57-mysql-debuginfo-0:5.7.19-6.el7.x86_64",
          "7Workstation-RHSCL-2.4:rh-mysql57-mysql-devel-0:5.7.19-6.el7.x86_64",
          "7Workstation-RHSCL-2.4:rh-mysql57-mysql-errmsg-0:5.7.19-6.el7.x86_64",
          "7Workstation-RHSCL-2.4:rh-mysql57-mysql-server-0:5.7.19-6.el7.x86_64",
          "7Workstation-RHSCL-2.4:rh-mysql57-mysql-test-0:5.7.19-6.el7.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2017-3460"
        },
        {
          "category": "external",
          "summary": "RHBZ#1443375",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1443375"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2017-3460",
          "url": "https://www.cve.org/CVERecord?id=CVE-2017-3460"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2017-3460",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2017-3460"
        },
        {
          "category": "external",
          "summary": "http://www.oracle.com/technetwork/security-advisory/cpuapr2017-3236618.html#AppendixMSQL",
          "url": "http://www.oracle.com/technetwork/security-advisory/cpuapr2017-3236618.html#AppendixMSQL"
        }
      ],
      "release_date": "2017-04-19T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2017-10-12T07:53:15+00:00",
          "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAfter installing this update, the MySQL server daemon (mysqld) will be restarted automatically.",
          "product_ids": [
            "6Server-RHSCL-2.4-6.7.Z:rh-mysql57-mysql-0:5.7.19-6.el6.src",
            "6Server-RHSCL-2.4-6.7.Z:rh-mysql57-mysql-0:5.7.19-6.el6.x86_64",
            "6Server-RHSCL-2.4-6.7.Z:rh-mysql57-mysql-common-0:5.7.19-6.el6.x86_64",
            "6Server-RHSCL-2.4-6.7.Z:rh-mysql57-mysql-config-0:5.7.19-6.el6.x86_64",
            "6Server-RHSCL-2.4-6.7.Z:rh-mysql57-mysql-debuginfo-0:5.7.19-6.el6.x86_64",
            "6Server-RHSCL-2.4-6.7.Z:rh-mysql57-mysql-devel-0:5.7.19-6.el6.x86_64",
            "6Server-RHSCL-2.4-6.7.Z:rh-mysql57-mysql-errmsg-0:5.7.19-6.el6.x86_64",
            "6Server-RHSCL-2.4-6.7.Z:rh-mysql57-mysql-server-0:5.7.19-6.el6.x86_64",
            "6Server-RHSCL-2.4-6.7.Z:rh-mysql57-mysql-test-0:5.7.19-6.el6.x86_64",
            "6Server-RHSCL-2.4:rh-mysql57-mysql-0:5.7.19-6.el6.src",
            "6Server-RHSCL-2.4:rh-mysql57-mysql-0:5.7.19-6.el6.x86_64",
            "6Server-RHSCL-2.4:rh-mysql57-mysql-common-0:5.7.19-6.el6.x86_64",
            "6Server-RHSCL-2.4:rh-mysql57-mysql-config-0:5.7.19-6.el6.x86_64",
            "6Server-RHSCL-2.4:rh-mysql57-mysql-debuginfo-0:5.7.19-6.el6.x86_64",
            "6Server-RHSCL-2.4:rh-mysql57-mysql-devel-0:5.7.19-6.el6.x86_64",
            "6Server-RHSCL-2.4:rh-mysql57-mysql-errmsg-0:5.7.19-6.el6.x86_64",
            "6Server-RHSCL-2.4:rh-mysql57-mysql-server-0:5.7.19-6.el6.x86_64",
            "6Server-RHSCL-2.4:rh-mysql57-mysql-test-0:5.7.19-6.el6.x86_64",
            "6Workstation-RHSCL-2.4:rh-mysql57-mysql-0:5.7.19-6.el6.src",
            "6Workstation-RHSCL-2.4:rh-mysql57-mysql-0:5.7.19-6.el6.x86_64",
            "6Workstation-RHSCL-2.4:rh-mysql57-mysql-common-0:5.7.19-6.el6.x86_64",
            "6Workstation-RHSCL-2.4:rh-mysql57-mysql-config-0:5.7.19-6.el6.x86_64",
            "6Workstation-RHSCL-2.4:rh-mysql57-mysql-debuginfo-0:5.7.19-6.el6.x86_64",
            "6Workstation-RHSCL-2.4:rh-mysql57-mysql-devel-0:5.7.19-6.el6.x86_64",
            "6Workstation-RHSCL-2.4:rh-mysql57-mysql-errmsg-0:5.7.19-6.el6.x86_64",
            "6Workstation-RHSCL-2.4:rh-mysql57-mysql-server-0:5.7.19-6.el6.x86_64",
            "6Workstation-RHSCL-2.4:rh-mysql57-mysql-test-0:5.7.19-6.el6.x86_64",
            "7Server-RHSCL-2.4-7.3.Z:rh-mysql57-mysql-0:5.7.19-6.el7.src",
            "7Server-RHSCL-2.4-7.3.Z:rh-mysql57-mysql-0:5.7.19-6.el7.x86_64",
            "7Server-RHSCL-2.4-7.3.Z:rh-mysql57-mysql-common-0:5.7.19-6.el7.x86_64",
            "7Server-RHSCL-2.4-7.3.Z:rh-mysql57-mysql-config-0:5.7.19-6.el7.x86_64",
            "7Server-RHSCL-2.4-7.3.Z:rh-mysql57-mysql-debuginfo-0:5.7.19-6.el7.x86_64",
            "7Server-RHSCL-2.4-7.3.Z:rh-mysql57-mysql-devel-0:5.7.19-6.el7.x86_64",
            "7Server-RHSCL-2.4-7.3.Z:rh-mysql57-mysql-errmsg-0:5.7.19-6.el7.x86_64",
            "7Server-RHSCL-2.4-7.3.Z:rh-mysql57-mysql-server-0:5.7.19-6.el7.x86_64",
            "7Server-RHSCL-2.4-7.3.Z:rh-mysql57-mysql-test-0:5.7.19-6.el7.x86_64",
            "7Server-RHSCL-2.4:rh-mysql57-mysql-0:5.7.19-6.el7.src",
            "7Server-RHSCL-2.4:rh-mysql57-mysql-0:5.7.19-6.el7.x86_64",
            "7Server-RHSCL-2.4:rh-mysql57-mysql-common-0:5.7.19-6.el7.x86_64",
            "7Server-RHSCL-2.4:rh-mysql57-mysql-config-0:5.7.19-6.el7.x86_64",
            "7Server-RHSCL-2.4:rh-mysql57-mysql-debuginfo-0:5.7.19-6.el7.x86_64",
            "7Server-RHSCL-2.4:rh-mysql57-mysql-devel-0:5.7.19-6.el7.x86_64",
            "7Server-RHSCL-2.4:rh-mysql57-mysql-errmsg-0:5.7.19-6.el7.x86_64",
            "7Server-RHSCL-2.4:rh-mysql57-mysql-server-0:5.7.19-6.el7.x86_64",
            "7Server-RHSCL-2.4:rh-mysql57-mysql-test-0:5.7.19-6.el7.x86_64",
            "7Workstation-RHSCL-2.4:rh-mysql57-mysql-0:5.7.19-6.el7.src",
            "7Workstation-RHSCL-2.4:rh-mysql57-mysql-0:5.7.19-6.el7.x86_64",
            "7Workstation-RHSCL-2.4:rh-mysql57-mysql-common-0:5.7.19-6.el7.x86_64",
            "7Workstation-RHSCL-2.4:rh-mysql57-mysql-config-0:5.7.19-6.el7.x86_64",
            "7Workstation-RHSCL-2.4:rh-mysql57-mysql-debuginfo-0:5.7.19-6.el7.x86_64",
            "7Workstation-RHSCL-2.4:rh-mysql57-mysql-devel-0:5.7.19-6.el7.x86_64",
            "7Workstation-RHSCL-2.4:rh-mysql57-mysql-errmsg-0:5.7.19-6.el7.x86_64",
            "7Workstation-RHSCL-2.4:rh-mysql57-mysql-server-0:5.7.19-6.el7.x86_64",
            "7Workstation-RHSCL-2.4:rh-mysql57-mysql-test-0:5.7.19-6.el7.x86_64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2017:2886"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 4.9,
            "baseSeverity": "MEDIUM",
            "confidentialityImpact": "NONE",
            "integrityImpact": "NONE",
            "privilegesRequired": "HIGH",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.0"
          },
          "products": [
            "6Server-RHSCL-2.4-6.7.Z:rh-mysql57-mysql-0:5.7.19-6.el6.src",
            "6Server-RHSCL-2.4-6.7.Z:rh-mysql57-mysql-0:5.7.19-6.el6.x86_64",
            "6Server-RHSCL-2.4-6.7.Z:rh-mysql57-mysql-common-0:5.7.19-6.el6.x86_64",
            "6Server-RHSCL-2.4-6.7.Z:rh-mysql57-mysql-config-0:5.7.19-6.el6.x86_64",
            "6Server-RHSCL-2.4-6.7.Z:rh-mysql57-mysql-debuginfo-0:5.7.19-6.el6.x86_64",
            "6Server-RHSCL-2.4-6.7.Z:rh-mysql57-mysql-devel-0:5.7.19-6.el6.x86_64",
            "6Server-RHSCL-2.4-6.7.Z:rh-mysql57-mysql-errmsg-0:5.7.19-6.el6.x86_64",
            "6Server-RHSCL-2.4-6.7.Z:rh-mysql57-mysql-server-0:5.7.19-6.el6.x86_64",
            "6Server-RHSCL-2.4-6.7.Z:rh-mysql57-mysql-test-0:5.7.19-6.el6.x86_64",
            "6Server-RHSCL-2.4:rh-mysql57-mysql-0:5.7.19-6.el6.src",
            "6Server-RHSCL-2.4:rh-mysql57-mysql-0:5.7.19-6.el6.x86_64",
            "6Server-RHSCL-2.4:rh-mysql57-mysql-common-0:5.7.19-6.el6.x86_64",
            "6Server-RHSCL-2.4:rh-mysql57-mysql-config-0:5.7.19-6.el6.x86_64",
            "6Server-RHSCL-2.4:rh-mysql57-mysql-debuginfo-0:5.7.19-6.el6.x86_64",
            "6Server-RHSCL-2.4:rh-mysql57-mysql-devel-0:5.7.19-6.el6.x86_64",
            "6Server-RHSCL-2.4:rh-mysql57-mysql-errmsg-0:5.7.19-6.el6.x86_64",
            "6Server-RHSCL-2.4:rh-mysql57-mysql-server-0:5.7.19-6.el6.x86_64",
            "6Server-RHSCL-2.4:rh-mysql57-mysql-test-0:5.7.19-6.el6.x86_64",
            "6Workstation-RHSCL-2.4:rh-mysql57-mysql-0:5.7.19-6.el6.src",
            "6Workstation-RHSCL-2.4:rh-mysql57-mysql-0:5.7.19-6.el6.x86_64",
            "6Workstation-RHSCL-2.4:rh-mysql57-mysql-common-0:5.7.19-6.el6.x86_64",
            "6Workstation-RHSCL-2.4:rh-mysql57-mysql-config-0:5.7.19-6.el6.x86_64",
            "6Workstation-RHSCL-2.4:rh-mysql57-mysql-debuginfo-0:5.7.19-6.el6.x86_64",
            "6Workstation-RHSCL-2.4:rh-mysql57-mysql-devel-0:5.7.19-6.el6.x86_64",
            "6Workstation-RHSCL-2.4:rh-mysql57-mysql-errmsg-0:5.7.19-6.el6.x86_64",
            "6Workstation-RHSCL-2.4:rh-mysql57-mysql-server-0:5.7.19-6.el6.x86_64",
            "6Workstation-RHSCL-2.4:rh-mysql57-mysql-test-0:5.7.19-6.el6.x86_64",
            "7Server-RHSCL-2.4-7.3.Z:rh-mysql57-mysql-0:5.7.19-6.el7.src",
            "7Server-RHSCL-2.4-7.3.Z:rh-mysql57-mysql-0:5.7.19-6.el7.x86_64",
            "7Server-RHSCL-2.4-7.3.Z:rh-mysql57-mysql-common-0:5.7.19-6.el7.x86_64",
            "7Server-RHSCL-2.4-7.3.Z:rh-mysql57-mysql-config-0:5.7.19-6.el7.x86_64",
            "7Server-RHSCL-2.4-7.3.Z:rh-mysql57-mysql-debuginfo-0:5.7.19-6.el7.x86_64",
            "7Server-RHSCL-2.4-7.3.Z:rh-mysql57-mysql-devel-0:5.7.19-6.el7.x86_64",
            "7Server-RHSCL-2.4-7.3.Z:rh-mysql57-mysql-errmsg-0:5.7.19-6.el7.x86_64",
            "7Server-RHSCL-2.4-7.3.Z:rh-mysql57-mysql-server-0:5.7.19-6.el7.x86_64",
            "7Server-RHSCL-2.4-7.3.Z:rh-mysql57-mysql-test-0:5.7.19-6.el7.x86_64",
            "7Server-RHSCL-2.4:rh-mysql57-mysql-0:5.7.19-6.el7.src",
            "7Server-RHSCL-2.4:rh-mysql57-mysql-0:5.7.19-6.el7.x86_64",
            "7Server-RHSCL-2.4:rh-mysql57-mysql-common-0:5.7.19-6.el7.x86_64",
            "7Server-RHSCL-2.4:rh-mysql57-mysql-config-0:5.7.19-6.el7.x86_64",
            "7Server-RHSCL-2.4:rh-mysql57-mysql-debuginfo-0:5.7.19-6.el7.x86_64",
            "7Server-RHSCL-2.4:rh-mysql57-mysql-devel-0:5.7.19-6.el7.x86_64",
            "7Server-RHSCL-2.4:rh-mysql57-mysql-errmsg-0:5.7.19-6.el7.x86_64",
            "7Server-RHSCL-2.4:rh-mysql57-mysql-server-0:5.7.19-6.el7.x86_64",
            "7Server-RHSCL-2.4:rh-mysql57-mysql-test-0:5.7.19-6.el7.x86_64",
            "7Workstation-RHSCL-2.4:rh-mysql57-mysql-0:5.7.19-6.el7.src",
            "7Workstation-RHSCL-2.4:rh-mysql57-mysql-0:5.7.19-6.el7.x86_64",
            "7Workstation-RHSCL-2.4:rh-mysql57-mysql-common-0:5.7.19-6.el7.x86_64",
            "7Workstation-RHSCL-2.4:rh-mysql57-mysql-config-0:5.7.19-6.el7.x86_64",
            "7Workstation-RHSCL-2.4:rh-mysql57-mysql-debuginfo-0:5.7.19-6.el7.x86_64",
            "7Workstation-RHSCL-2.4:rh-mysql57-mysql-devel-0:5.7.19-6.el7.x86_64",
            "7Workstation-RHSCL-2.4:rh-mysql57-mysql-errmsg-0:5.7.19-6.el7.x86_64",
            "7Workstation-RHSCL-2.4:rh-mysql57-mysql-server-0:5.7.19-6.el7.x86_64",
            "7Workstation-RHSCL-2.4:rh-mysql57-mysql-test-0:5.7.19-6.el7.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Moderate"
        }
      ],
      "title": "mysql: Server: Audit Plug-in unspecified vulnerability (CPU Apr 2017)"
    },
    {
      "cve": "CVE-2017-3461",
      "discovery_date": "2017-04-19T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "1443376"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Security: Privileges). Supported versions that are affected are 5.5.54 and earlier, 5.6.35 and earlier and 5.7.17 and earlier. Easily \"exploitable\" vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.0 Base Score 4.9 (Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H).",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "mysql: Server: Security: Privileges unspecified vulnerability (CPU Apr 2017)",
          "title": "Vulnerability summary"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "6Server-RHSCL-2.4-6.7.Z:rh-mysql57-mysql-0:5.7.19-6.el6.src",
          "6Server-RHSCL-2.4-6.7.Z:rh-mysql57-mysql-0:5.7.19-6.el6.x86_64",
          "6Server-RHSCL-2.4-6.7.Z:rh-mysql57-mysql-common-0:5.7.19-6.el6.x86_64",
          "6Server-RHSCL-2.4-6.7.Z:rh-mysql57-mysql-config-0:5.7.19-6.el6.x86_64",
          "6Server-RHSCL-2.4-6.7.Z:rh-mysql57-mysql-debuginfo-0:5.7.19-6.el6.x86_64",
          "6Server-RHSCL-2.4-6.7.Z:rh-mysql57-mysql-devel-0:5.7.19-6.el6.x86_64",
          "6Server-RHSCL-2.4-6.7.Z:rh-mysql57-mysql-errmsg-0:5.7.19-6.el6.x86_64",
          "6Server-RHSCL-2.4-6.7.Z:rh-mysql57-mysql-server-0:5.7.19-6.el6.x86_64",
          "6Server-RHSCL-2.4-6.7.Z:rh-mysql57-mysql-test-0:5.7.19-6.el6.x86_64",
          "6Server-RHSCL-2.4:rh-mysql57-mysql-0:5.7.19-6.el6.src",
          "6Server-RHSCL-2.4:rh-mysql57-mysql-0:5.7.19-6.el6.x86_64",
          "6Server-RHSCL-2.4:rh-mysql57-mysql-common-0:5.7.19-6.el6.x86_64",
          "6Server-RHSCL-2.4:rh-mysql57-mysql-config-0:5.7.19-6.el6.x86_64",
          "6Server-RHSCL-2.4:rh-mysql57-mysql-debuginfo-0:5.7.19-6.el6.x86_64",
          "6Server-RHSCL-2.4:rh-mysql57-mysql-devel-0:5.7.19-6.el6.x86_64",
          "6Server-RHSCL-2.4:rh-mysql57-mysql-errmsg-0:5.7.19-6.el6.x86_64",
          "6Server-RHSCL-2.4:rh-mysql57-mysql-server-0:5.7.19-6.el6.x86_64",
          "6Server-RHSCL-2.4:rh-mysql57-mysql-test-0:5.7.19-6.el6.x86_64",
          "6Workstation-RHSCL-2.4:rh-mysql57-mysql-0:5.7.19-6.el6.src",
          "6Workstation-RHSCL-2.4:rh-mysql57-mysql-0:5.7.19-6.el6.x86_64",
          "6Workstation-RHSCL-2.4:rh-mysql57-mysql-common-0:5.7.19-6.el6.x86_64",
          "6Workstation-RHSCL-2.4:rh-mysql57-mysql-config-0:5.7.19-6.el6.x86_64",
          "6Workstation-RHSCL-2.4:rh-mysql57-mysql-debuginfo-0:5.7.19-6.el6.x86_64",
          "6Workstation-RHSCL-2.4:rh-mysql57-mysql-devel-0:5.7.19-6.el6.x86_64",
          "6Workstation-RHSCL-2.4:rh-mysql57-mysql-errmsg-0:5.7.19-6.el6.x86_64",
          "6Workstation-RHSCL-2.4:rh-mysql57-mysql-server-0:5.7.19-6.el6.x86_64",
          "6Workstation-RHSCL-2.4:rh-mysql57-mysql-test-0:5.7.19-6.el6.x86_64",
          "7Server-RHSCL-2.4-7.3.Z:rh-mysql57-mysql-0:5.7.19-6.el7.src",
          "7Server-RHSCL-2.4-7.3.Z:rh-mysql57-mysql-0:5.7.19-6.el7.x86_64",
          "7Server-RHSCL-2.4-7.3.Z:rh-mysql57-mysql-common-0:5.7.19-6.el7.x86_64",
          "7Server-RHSCL-2.4-7.3.Z:rh-mysql57-mysql-config-0:5.7.19-6.el7.x86_64",
          "7Server-RHSCL-2.4-7.3.Z:rh-mysql57-mysql-debuginfo-0:5.7.19-6.el7.x86_64",
          "7Server-RHSCL-2.4-7.3.Z:rh-mysql57-mysql-devel-0:5.7.19-6.el7.x86_64",
          "7Server-RHSCL-2.4-7.3.Z:rh-mysql57-mysql-errmsg-0:5.7.19-6.el7.x86_64",
          "7Server-RHSCL-2.4-7.3.Z:rh-mysql57-mysql-server-0:5.7.19-6.el7.x86_64",
          "7Server-RHSCL-2.4-7.3.Z:rh-mysql57-mysql-test-0:5.7.19-6.el7.x86_64",
          "7Server-RHSCL-2.4:rh-mysql57-mysql-0:5.7.19-6.el7.src",
          "7Server-RHSCL-2.4:rh-mysql57-mysql-0:5.7.19-6.el7.x86_64",
          "7Server-RHSCL-2.4:rh-mysql57-mysql-common-0:5.7.19-6.el7.x86_64",
          "7Server-RHSCL-2.4:rh-mysql57-mysql-config-0:5.7.19-6.el7.x86_64",
          "7Server-RHSCL-2.4:rh-mysql57-mysql-debuginfo-0:5.7.19-6.el7.x86_64",
          "7Server-RHSCL-2.4:rh-mysql57-mysql-devel-0:5.7.19-6.el7.x86_64",
          "7Server-RHSCL-2.4:rh-mysql57-mysql-errmsg-0:5.7.19-6.el7.x86_64",
          "7Server-RHSCL-2.4:rh-mysql57-mysql-server-0:5.7.19-6.el7.x86_64",
          "7Server-RHSCL-2.4:rh-mysql57-mysql-test-0:5.7.19-6.el7.x86_64",
          "7Workstation-RHSCL-2.4:rh-mysql57-mysql-0:5.7.19-6.el7.src",
          "7Workstation-RHSCL-2.4:rh-mysql57-mysql-0:5.7.19-6.el7.x86_64",
          "7Workstation-RHSCL-2.4:rh-mysql57-mysql-common-0:5.7.19-6.el7.x86_64",
          "7Workstation-RHSCL-2.4:rh-mysql57-mysql-config-0:5.7.19-6.el7.x86_64",
          "7Workstation-RHSCL-2.4:rh-mysql57-mysql-debuginfo-0:5.7.19-6.el7.x86_64",
          "7Workstation-RHSCL-2.4:rh-mysql57-mysql-devel-0:5.7.19-6.el7.x86_64",
          "7Workstation-RHSCL-2.4:rh-mysql57-mysql-errmsg-0:5.7.19-6.el7.x86_64",
          "7Workstation-RHSCL-2.4:rh-mysql57-mysql-server-0:5.7.19-6.el7.x86_64",
          "7Workstation-RHSCL-2.4:rh-mysql57-mysql-test-0:5.7.19-6.el7.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2017-3461"
        },
        {
          "category": "external",
          "summary": "RHBZ#1443376",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1443376"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2017-3461",
          "url": "https://www.cve.org/CVERecord?id=CVE-2017-3461"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2017-3461",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2017-3461"
        },
        {
          "category": "external",
          "summary": "http://www.oracle.com/technetwork/security-advisory/cpuapr2017-3236618.html#AppendixMSQL",
          "url": "http://www.oracle.com/technetwork/security-advisory/cpuapr2017-3236618.html#AppendixMSQL"
        }
      ],
      "release_date": "2017-04-19T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2017-10-12T07:53:15+00:00",
          "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAfter installing this update, the MySQL server daemon (mysqld) will be restarted automatically.",
          "product_ids": [
            "6Server-RHSCL-2.4-6.7.Z:rh-mysql57-mysql-0:5.7.19-6.el6.src",
            "6Server-RHSCL-2.4-6.7.Z:rh-mysql57-mysql-0:5.7.19-6.el6.x86_64",
            "6Server-RHSCL-2.4-6.7.Z:rh-mysql57-mysql-common-0:5.7.19-6.el6.x86_64",
            "6Server-RHSCL-2.4-6.7.Z:rh-mysql57-mysql-config-0:5.7.19-6.el6.x86_64",
            "6Server-RHSCL-2.4-6.7.Z:rh-mysql57-mysql-debuginfo-0:5.7.19-6.el6.x86_64",
            "6Server-RHSCL-2.4-6.7.Z:rh-mysql57-mysql-devel-0:5.7.19-6.el6.x86_64",
            "6Server-RHSCL-2.4-6.7.Z:rh-mysql57-mysql-errmsg-0:5.7.19-6.el6.x86_64",
            "6Server-RHSCL-2.4-6.7.Z:rh-mysql57-mysql-server-0:5.7.19-6.el6.x86_64",
            "6Server-RHSCL-2.4-6.7.Z:rh-mysql57-mysql-test-0:5.7.19-6.el6.x86_64",
            "6Server-RHSCL-2.4:rh-mysql57-mysql-0:5.7.19-6.el6.src",
            "6Server-RHSCL-2.4:rh-mysql57-mysql-0:5.7.19-6.el6.x86_64",
            "6Server-RHSCL-2.4:rh-mysql57-mysql-common-0:5.7.19-6.el6.x86_64",
            "6Server-RHSCL-2.4:rh-mysql57-mysql-config-0:5.7.19-6.el6.x86_64",
            "6Server-RHSCL-2.4:rh-mysql57-mysql-debuginfo-0:5.7.19-6.el6.x86_64",
            "6Server-RHSCL-2.4:rh-mysql57-mysql-devel-0:5.7.19-6.el6.x86_64",
            "6Server-RHSCL-2.4:rh-mysql57-mysql-errmsg-0:5.7.19-6.el6.x86_64",
            "6Server-RHSCL-2.4:rh-mysql57-mysql-server-0:5.7.19-6.el6.x86_64",
            "6Server-RHSCL-2.4:rh-mysql57-mysql-test-0:5.7.19-6.el6.x86_64",
            "6Workstation-RHSCL-2.4:rh-mysql57-mysql-0:5.7.19-6.el6.src",
            "6Workstation-RHSCL-2.4:rh-mysql57-mysql-0:5.7.19-6.el6.x86_64",
            "6Workstation-RHSCL-2.4:rh-mysql57-mysql-common-0:5.7.19-6.el6.x86_64",
            "6Workstation-RHSCL-2.4:rh-mysql57-mysql-config-0:5.7.19-6.el6.x86_64",
            "6Workstation-RHSCL-2.4:rh-mysql57-mysql-debuginfo-0:5.7.19-6.el6.x86_64",
            "6Workstation-RHSCL-2.4:rh-mysql57-mysql-devel-0:5.7.19-6.el6.x86_64",
            "6Workstation-RHSCL-2.4:rh-mysql57-mysql-errmsg-0:5.7.19-6.el6.x86_64",
            "6Workstation-RHSCL-2.4:rh-mysql57-mysql-server-0:5.7.19-6.el6.x86_64",
            "6Workstation-RHSCL-2.4:rh-mysql57-mysql-test-0:5.7.19-6.el6.x86_64",
            "7Server-RHSCL-2.4-7.3.Z:rh-mysql57-mysql-0:5.7.19-6.el7.src",
            "7Server-RHSCL-2.4-7.3.Z:rh-mysql57-mysql-0:5.7.19-6.el7.x86_64",
            "7Server-RHSCL-2.4-7.3.Z:rh-mysql57-mysql-common-0:5.7.19-6.el7.x86_64",
            "7Server-RHSCL-2.4-7.3.Z:rh-mysql57-mysql-config-0:5.7.19-6.el7.x86_64",
            "7Server-RHSCL-2.4-7.3.Z:rh-mysql57-mysql-debuginfo-0:5.7.19-6.el7.x86_64",
            "7Server-RHSCL-2.4-7.3.Z:rh-mysql57-mysql-devel-0:5.7.19-6.el7.x86_64",
            "7Server-RHSCL-2.4-7.3.Z:rh-mysql57-mysql-errmsg-0:5.7.19-6.el7.x86_64",
            "7Server-RHSCL-2.4-7.3.Z:rh-mysql57-mysql-server-0:5.7.19-6.el7.x86_64",
            "7Server-RHSCL-2.4-7.3.Z:rh-mysql57-mysql-test-0:5.7.19-6.el7.x86_64",
            "7Server-RHSCL-2.4:rh-mysql57-mysql-0:5.7.19-6.el7.src",
            "7Server-RHSCL-2.4:rh-mysql57-mysql-0:5.7.19-6.el7.x86_64",
            "7Server-RHSCL-2.4:rh-mysql57-mysql-common-0:5.7.19-6.el7.x86_64",
            "7Server-RHSCL-2.4:rh-mysql57-mysql-config-0:5.7.19-6.el7.x86_64",
            "7Server-RHSCL-2.4:rh-mysql57-mysql-debuginfo-0:5.7.19-6.el7.x86_64",
            "7Server-RHSCL-2.4:rh-mysql57-mysql-devel-0:5.7.19-6.el7.x86_64",
            "7Server-RHSCL-2.4:rh-mysql57-mysql-errmsg-0:5.7.19-6.el7.x86_64",
            "7Server-RHSCL-2.4:rh-mysql57-mysql-server-0:5.7.19-6.el7.x86_64",
            "7Server-RHSCL-2.4:rh-mysql57-mysql-test-0:5.7.19-6.el7.x86_64",
            "7Workstation-RHSCL-2.4:rh-mysql57-mysql-0:5.7.19-6.el7.src",
            "7Workstation-RHSCL-2.4:rh-mysql57-mysql-0:5.7.19-6.el7.x86_64",
            "7Workstation-RHSCL-2.4:rh-mysql57-mysql-common-0:5.7.19-6.el7.x86_64",
            "7Workstation-RHSCL-2.4:rh-mysql57-mysql-config-0:5.7.19-6.el7.x86_64",
            "7Workstation-RHSCL-2.4:rh-mysql57-mysql-debuginfo-0:5.7.19-6.el7.x86_64",
            "7Workstation-RHSCL-2.4:rh-mysql57-mysql-devel-0:5.7.19-6.el7.x86_64",
            "7Workstation-RHSCL-2.4:rh-mysql57-mysql-errmsg-0:5.7.19-6.el7.x86_64",
            "7Workstation-RHSCL-2.4:rh-mysql57-mysql-server-0:5.7.19-6.el7.x86_64",
            "7Workstation-RHSCL-2.4:rh-mysql57-mysql-test-0:5.7.19-6.el7.x86_64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2017:2886"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 4.9,
            "baseSeverity": "MEDIUM",
            "confidentialityImpact": "NONE",
            "integrityImpact": "NONE",
            "privilegesRequired": "HIGH",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.0"
          },
          "products": [
            "6Server-RHSCL-2.4-6.7.Z:rh-mysql57-mysql-0:5.7.19-6.el6.src",
            "6Server-RHSCL-2.4-6.7.Z:rh-mysql57-mysql-0:5.7.19-6.el6.x86_64",
            "6Server-RHSCL-2.4-6.7.Z:rh-mysql57-mysql-common-0:5.7.19-6.el6.x86_64",
            "6Server-RHSCL-2.4-6.7.Z:rh-mysql57-mysql-config-0:5.7.19-6.el6.x86_64",
            "6Server-RHSCL-2.4-6.7.Z:rh-mysql57-mysql-debuginfo-0:5.7.19-6.el6.x86_64",
            "6Server-RHSCL-2.4-6.7.Z:rh-mysql57-mysql-devel-0:5.7.19-6.el6.x86_64",
            "6Server-RHSCL-2.4-6.7.Z:rh-mysql57-mysql-errmsg-0:5.7.19-6.el6.x86_64",
            "6Server-RHSCL-2.4-6.7.Z:rh-mysql57-mysql-server-0:5.7.19-6.el6.x86_64",
            "6Server-RHSCL-2.4-6.7.Z:rh-mysql57-mysql-test-0:5.7.19-6.el6.x86_64",
            "6Server-RHSCL-2.4:rh-mysql57-mysql-0:5.7.19-6.el6.src",
            "6Server-RHSCL-2.4:rh-mysql57-mysql-0:5.7.19-6.el6.x86_64",
            "6Server-RHSCL-2.4:rh-mysql57-mysql-common-0:5.7.19-6.el6.x86_64",
            "6Server-RHSCL-2.4:rh-mysql57-mysql-config-0:5.7.19-6.el6.x86_64",
            "6Server-RHSCL-2.4:rh-mysql57-mysql-debuginfo-0:5.7.19-6.el6.x86_64",
            "6Server-RHSCL-2.4:rh-mysql57-mysql-devel-0:5.7.19-6.el6.x86_64",
            "6Server-RHSCL-2.4:rh-mysql57-mysql-errmsg-0:5.7.19-6.el6.x86_64",
            "6Server-RHSCL-2.4:rh-mysql57-mysql-server-0:5.7.19-6.el6.x86_64",
            "6Server-RHSCL-2.4:rh-mysql57-mysql-test-0:5.7.19-6.el6.x86_64",
            "6Workstation-RHSCL-2.4:rh-mysql57-mysql-0:5.7.19-6.el6.src",
            "6Workstation-RHSCL-2.4:rh-mysql57-mysql-0:5.7.19-6.el6.x86_64",
            "6Workstation-RHSCL-2.4:rh-mysql57-mysql-common-0:5.7.19-6.el6.x86_64",
            "6Workstation-RHSCL-2.4:rh-mysql57-mysql-config-0:5.7.19-6.el6.x86_64",
            "6Workstation-RHSCL-2.4:rh-mysql57-mysql-debuginfo-0:5.7.19-6.el6.x86_64",
            "6Workstation-RHSCL-2.4:rh-mysql57-mysql-devel-0:5.7.19-6.el6.x86_64",
            "6Workstation-RHSCL-2.4:rh-mysql57-mysql-errmsg-0:5.7.19-6.el6.x86_64",
            "6Workstation-RHSCL-2.4:rh-mysql57-mysql-server-0:5.7.19-6.el6.x86_64",
            "6Workstation-RHSCL-2.4:rh-mysql57-mysql-test-0:5.7.19-6.el6.x86_64",
            "7Server-RHSCL-2.4-7.3.Z:rh-mysql57-mysql-0:5.7.19-6.el7.src",
            "7Server-RHSCL-2.4-7.3.Z:rh-mysql57-mysql-0:5.7.19-6.el7.x86_64",
            "7Server-RHSCL-2.4-7.3.Z:rh-mysql57-mysql-common-0:5.7.19-6.el7.x86_64",
            "7Server-RHSCL-2.4-7.3.Z:rh-mysql57-mysql-config-0:5.7.19-6.el7.x86_64",
            "7Server-RHSCL-2.4-7.3.Z:rh-mysql57-mysql-debuginfo-0:5.7.19-6.el7.x86_64",
            "7Server-RHSCL-2.4-7.3.Z:rh-mysql57-mysql-devel-0:5.7.19-6.el7.x86_64",
            "7Server-RHSCL-2.4-7.3.Z:rh-mysql57-mysql-errmsg-0:5.7.19-6.el7.x86_64",
            "7Server-RHSCL-2.4-7.3.Z:rh-mysql57-mysql-server-0:5.7.19-6.el7.x86_64",
            "7Server-RHSCL-2.4-7.3.Z:rh-mysql57-mysql-test-0:5.7.19-6.el7.x86_64",
            "7Server-RHSCL-2.4:rh-mysql57-mysql-0:5.7.19-6.el7.src",
            "7Server-RHSCL-2.4:rh-mysql57-mysql-0:5.7.19-6.el7.x86_64",
            "7Server-RHSCL-2.4:rh-mysql57-mysql-common-0:5.7.19-6.el7.x86_64",
            "7Server-RHSCL-2.4:rh-mysql57-mysql-config-0:5.7.19-6.el7.x86_64",
            "7Server-RHSCL-2.4:rh-mysql57-mysql-debuginfo-0:5.7.19-6.el7.x86_64",
            "7Server-RHSCL-2.4:rh-mysql57-mysql-devel-0:5.7.19-6.el7.x86_64",
            "7Server-RHSCL-2.4:rh-mysql57-mysql-errmsg-0:5.7.19-6.el7.x86_64",
            "7Server-RHSCL-2.4:rh-mysql57-mysql-server-0:5.7.19-6.el7.x86_64",
            "7Server-RHSCL-2.4:rh-mysql57-mysql-test-0:5.7.19-6.el7.x86_64",
            "7Workstation-RHSCL-2.4:rh-mysql57-mysql-0:5.7.19-6.el7.src",
            "7Workstation-RHSCL-2.4:rh-mysql57-mysql-0:5.7.19-6.el7.x86_64",
            "7Workstation-RHSCL-2.4:rh-mysql57-mysql-common-0:5.7.19-6.el7.x86_64",
            "7Workstation-RHSCL-2.4:rh-mysql57-mysql-config-0:5.7.19-6.el7.x86_64",
            "7Workstation-RHSCL-2.4:rh-mysql57-mysql-debuginfo-0:5.7.19-6.el7.x86_64",
            "7Workstation-RHSCL-2.4:rh-mysql57-mysql-devel-0:5.7.19-6.el7.x86_64",
            "7Workstation-RHSCL-2.4:rh-mysql57-mysql-errmsg-0:5.7.19-6.el7.x86_64",
            "7Workstation-RHSCL-2.4:rh-mysql57-mysql-server-0:5.7.19-6.el7.x86_64",
            "7Workstation-RHSCL-2.4:rh-mysql57-mysql-test-0:5.7.19-6.el7.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Moderate"
        }
      ],
      "title": "mysql: Server: Security: Privileges unspecified vulnerability (CPU Apr 2017)"
    },
    {
      "cve": "CVE-2017-3462",
      "discovery_date": "2017-04-19T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "1443377"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Security: Privileges). Supported versions that are affected are 5.5.54 and earlier, 5.6.35 and earlier and 5.7.17 and earlier. Easily \"exploitable\" vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.0 Base Score 4.9 (Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H).",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "mysql: Server: Security: Privileges unspecified vulnerability (CPU Apr 2017)",
          "title": "Vulnerability summary"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "6Server-RHSCL-2.4-6.7.Z:rh-mysql57-mysql-0:5.7.19-6.el6.src",
          "6Server-RHSCL-2.4-6.7.Z:rh-mysql57-mysql-0:5.7.19-6.el6.x86_64",
          "6Server-RHSCL-2.4-6.7.Z:rh-mysql57-mysql-common-0:5.7.19-6.el6.x86_64",
          "6Server-RHSCL-2.4-6.7.Z:rh-mysql57-mysql-config-0:5.7.19-6.el6.x86_64",
          "6Server-RHSCL-2.4-6.7.Z:rh-mysql57-mysql-debuginfo-0:5.7.19-6.el6.x86_64",
          "6Server-RHSCL-2.4-6.7.Z:rh-mysql57-mysql-devel-0:5.7.19-6.el6.x86_64",
          "6Server-RHSCL-2.4-6.7.Z:rh-mysql57-mysql-errmsg-0:5.7.19-6.el6.x86_64",
          "6Server-RHSCL-2.4-6.7.Z:rh-mysql57-mysql-server-0:5.7.19-6.el6.x86_64",
          "6Server-RHSCL-2.4-6.7.Z:rh-mysql57-mysql-test-0:5.7.19-6.el6.x86_64",
          "6Server-RHSCL-2.4:rh-mysql57-mysql-0:5.7.19-6.el6.src",
          "6Server-RHSCL-2.4:rh-mysql57-mysql-0:5.7.19-6.el6.x86_64",
          "6Server-RHSCL-2.4:rh-mysql57-mysql-common-0:5.7.19-6.el6.x86_64",
          "6Server-RHSCL-2.4:rh-mysql57-mysql-config-0:5.7.19-6.el6.x86_64",
          "6Server-RHSCL-2.4:rh-mysql57-mysql-debuginfo-0:5.7.19-6.el6.x86_64",
          "6Server-RHSCL-2.4:rh-mysql57-mysql-devel-0:5.7.19-6.el6.x86_64",
          "6Server-RHSCL-2.4:rh-mysql57-mysql-errmsg-0:5.7.19-6.el6.x86_64",
          "6Server-RHSCL-2.4:rh-mysql57-mysql-server-0:5.7.19-6.el6.x86_64",
          "6Server-RHSCL-2.4:rh-mysql57-mysql-test-0:5.7.19-6.el6.x86_64",
          "6Workstation-RHSCL-2.4:rh-mysql57-mysql-0:5.7.19-6.el6.src",
          "6Workstation-RHSCL-2.4:rh-mysql57-mysql-0:5.7.19-6.el6.x86_64",
          "6Workstation-RHSCL-2.4:rh-mysql57-mysql-common-0:5.7.19-6.el6.x86_64",
          "6Workstation-RHSCL-2.4:rh-mysql57-mysql-config-0:5.7.19-6.el6.x86_64",
          "6Workstation-RHSCL-2.4:rh-mysql57-mysql-debuginfo-0:5.7.19-6.el6.x86_64",
          "6Workstation-RHSCL-2.4:rh-mysql57-mysql-devel-0:5.7.19-6.el6.x86_64",
          "6Workstation-RHSCL-2.4:rh-mysql57-mysql-errmsg-0:5.7.19-6.el6.x86_64",
          "6Workstation-RHSCL-2.4:rh-mysql57-mysql-server-0:5.7.19-6.el6.x86_64",
          "6Workstation-RHSCL-2.4:rh-mysql57-mysql-test-0:5.7.19-6.el6.x86_64",
          "7Server-RHSCL-2.4-7.3.Z:rh-mysql57-mysql-0:5.7.19-6.el7.src",
          "7Server-RHSCL-2.4-7.3.Z:rh-mysql57-mysql-0:5.7.19-6.el7.x86_64",
          "7Server-RHSCL-2.4-7.3.Z:rh-mysql57-mysql-common-0:5.7.19-6.el7.x86_64",
          "7Server-RHSCL-2.4-7.3.Z:rh-mysql57-mysql-config-0:5.7.19-6.el7.x86_64",
          "7Server-RHSCL-2.4-7.3.Z:rh-mysql57-mysql-debuginfo-0:5.7.19-6.el7.x86_64",
          "7Server-RHSCL-2.4-7.3.Z:rh-mysql57-mysql-devel-0:5.7.19-6.el7.x86_64",
          "7Server-RHSCL-2.4-7.3.Z:rh-mysql57-mysql-errmsg-0:5.7.19-6.el7.x86_64",
          "7Server-RHSCL-2.4-7.3.Z:rh-mysql57-mysql-server-0:5.7.19-6.el7.x86_64",
          "7Server-RHSCL-2.4-7.3.Z:rh-mysql57-mysql-test-0:5.7.19-6.el7.x86_64",
          "7Server-RHSCL-2.4:rh-mysql57-mysql-0:5.7.19-6.el7.src",
          "7Server-RHSCL-2.4:rh-mysql57-mysql-0:5.7.19-6.el7.x86_64",
          "7Server-RHSCL-2.4:rh-mysql57-mysql-common-0:5.7.19-6.el7.x86_64",
          "7Server-RHSCL-2.4:rh-mysql57-mysql-config-0:5.7.19-6.el7.x86_64",
          "7Server-RHSCL-2.4:rh-mysql57-mysql-debuginfo-0:5.7.19-6.el7.x86_64",
          "7Server-RHSCL-2.4:rh-mysql57-mysql-devel-0:5.7.19-6.el7.x86_64",
          "7Server-RHSCL-2.4:rh-mysql57-mysql-errmsg-0:5.7.19-6.el7.x86_64",
          "7Server-RHSCL-2.4:rh-mysql57-mysql-server-0:5.7.19-6.el7.x86_64",
          "7Server-RHSCL-2.4:rh-mysql57-mysql-test-0:5.7.19-6.el7.x86_64",
          "7Workstation-RHSCL-2.4:rh-mysql57-mysql-0:5.7.19-6.el7.src",
          "7Workstation-RHSCL-2.4:rh-mysql57-mysql-0:5.7.19-6.el7.x86_64",
          "7Workstation-RHSCL-2.4:rh-mysql57-mysql-common-0:5.7.19-6.el7.x86_64",
          "7Workstation-RHSCL-2.4:rh-mysql57-mysql-config-0:5.7.19-6.el7.x86_64",
          "7Workstation-RHSCL-2.4:rh-mysql57-mysql-debuginfo-0:5.7.19-6.el7.x86_64",
          "7Workstation-RHSCL-2.4:rh-mysql57-mysql-devel-0:5.7.19-6.el7.x86_64",
          "7Workstation-RHSCL-2.4:rh-mysql57-mysql-errmsg-0:5.7.19-6.el7.x86_64",
          "7Workstation-RHSCL-2.4:rh-mysql57-mysql-server-0:5.7.19-6.el7.x86_64",
          "7Workstation-RHSCL-2.4:rh-mysql57-mysql-test-0:5.7.19-6.el7.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2017-3462"
        },
        {
          "category": "external",
          "summary": "RHBZ#1443377",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1443377"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2017-3462",
          "url": "https://www.cve.org/CVERecord?id=CVE-2017-3462"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2017-3462",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2017-3462"
        },
        {
          "category": "external",
          "summary": "http://www.oracle.com/technetwork/security-advisory/cpuapr2017-3236618.html#AppendixMSQL",
          "url": "http://www.oracle.com/technetwork/security-advisory/cpuapr2017-3236618.html#AppendixMSQL"
        }
      ],
      "release_date": "2017-04-19T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2017-10-12T07:53:15+00:00",
          "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAfter installing this update, the MySQL server daemon (mysqld) will be restarted automatically.",
          "product_ids": [
            "6Server-RHSCL-2.4-6.7.Z:rh-mysql57-mysql-0:5.7.19-6.el6.src",
            "6Server-RHSCL-2.4-6.7.Z:rh-mysql57-mysql-0:5.7.19-6.el6.x86_64",
            "6Server-RHSCL-2.4-6.7.Z:rh-mysql57-mysql-common-0:5.7.19-6.el6.x86_64",
            "6Server-RHSCL-2.4-6.7.Z:rh-mysql57-mysql-config-0:5.7.19-6.el6.x86_64",
            "6Server-RHSCL-2.4-6.7.Z:rh-mysql57-mysql-debuginfo-0:5.7.19-6.el6.x86_64",
            "6Server-RHSCL-2.4-6.7.Z:rh-mysql57-mysql-devel-0:5.7.19-6.el6.x86_64",
            "6Server-RHSCL-2.4-6.7.Z:rh-mysql57-mysql-errmsg-0:5.7.19-6.el6.x86_64",
            "6Server-RHSCL-2.4-6.7.Z:rh-mysql57-mysql-server-0:5.7.19-6.el6.x86_64",
            "6Server-RHSCL-2.4-6.7.Z:rh-mysql57-mysql-test-0:5.7.19-6.el6.x86_64",
            "6Server-RHSCL-2.4:rh-mysql57-mysql-0:5.7.19-6.el6.src",
            "6Server-RHSCL-2.4:rh-mysql57-mysql-0:5.7.19-6.el6.x86_64",
            "6Server-RHSCL-2.4:rh-mysql57-mysql-common-0:5.7.19-6.el6.x86_64",
            "6Server-RHSCL-2.4:rh-mysql57-mysql-config-0:5.7.19-6.el6.x86_64",
            "6Server-RHSCL-2.4:rh-mysql57-mysql-debuginfo-0:5.7.19-6.el6.x86_64",
            "6Server-RHSCL-2.4:rh-mysql57-mysql-devel-0:5.7.19-6.el6.x86_64",
            "6Server-RHSCL-2.4:rh-mysql57-mysql-errmsg-0:5.7.19-6.el6.x86_64",
            "6Server-RHSCL-2.4:rh-mysql57-mysql-server-0:5.7.19-6.el6.x86_64",
            "6Server-RHSCL-2.4:rh-mysql57-mysql-test-0:5.7.19-6.el6.x86_64",
            "6Workstation-RHSCL-2.4:rh-mysql57-mysql-0:5.7.19-6.el6.src",
            "6Workstation-RHSCL-2.4:rh-mysql57-mysql-0:5.7.19-6.el6.x86_64",
            "6Workstation-RHSCL-2.4:rh-mysql57-mysql-common-0:5.7.19-6.el6.x86_64",
            "6Workstation-RHSCL-2.4:rh-mysql57-mysql-config-0:5.7.19-6.el6.x86_64",
            "6Workstation-RHSCL-2.4:rh-mysql57-mysql-debuginfo-0:5.7.19-6.el6.x86_64",
            "6Workstation-RHSCL-2.4:rh-mysql57-mysql-devel-0:5.7.19-6.el6.x86_64",
            "6Workstation-RHSCL-2.4:rh-mysql57-mysql-errmsg-0:5.7.19-6.el6.x86_64",
            "6Workstation-RHSCL-2.4:rh-mysql57-mysql-server-0:5.7.19-6.el6.x86_64",
            "6Workstation-RHSCL-2.4:rh-mysql57-mysql-test-0:5.7.19-6.el6.x86_64",
            "7Server-RHSCL-2.4-7.3.Z:rh-mysql57-mysql-0:5.7.19-6.el7.src",
            "7Server-RHSCL-2.4-7.3.Z:rh-mysql57-mysql-0:5.7.19-6.el7.x86_64",
            "7Server-RHSCL-2.4-7.3.Z:rh-mysql57-mysql-common-0:5.7.19-6.el7.x86_64",
            "7Server-RHSCL-2.4-7.3.Z:rh-mysql57-mysql-config-0:5.7.19-6.el7.x86_64",
            "7Server-RHSCL-2.4-7.3.Z:rh-mysql57-mysql-debuginfo-0:5.7.19-6.el7.x86_64",
            "7Server-RHSCL-2.4-7.3.Z:rh-mysql57-mysql-devel-0:5.7.19-6.el7.x86_64",
            "7Server-RHSCL-2.4-7.3.Z:rh-mysql57-mysql-errmsg-0:5.7.19-6.el7.x86_64",
            "7Server-RHSCL-2.4-7.3.Z:rh-mysql57-mysql-server-0:5.7.19-6.el7.x86_64",
            "7Server-RHSCL-2.4-7.3.Z:rh-mysql57-mysql-test-0:5.7.19-6.el7.x86_64",
            "7Server-RHSCL-2.4:rh-mysql57-mysql-0:5.7.19-6.el7.src",
            "7Server-RHSCL-2.4:rh-mysql57-mysql-0:5.7.19-6.el7.x86_64",
            "7Server-RHSCL-2.4:rh-mysql57-mysql-common-0:5.7.19-6.el7.x86_64",
            "7Server-RHSCL-2.4:rh-mysql57-mysql-config-0:5.7.19-6.el7.x86_64",
            "7Server-RHSCL-2.4:rh-mysql57-mysql-debuginfo-0:5.7.19-6.el7.x86_64",
            "7Server-RHSCL-2.4:rh-mysql57-mysql-devel-0:5.7.19-6.el7.x86_64",
            "7Server-RHSCL-2.4:rh-mysql57-mysql-errmsg-0:5.7.19-6.el7.x86_64",
            "7Server-RHSCL-2.4:rh-mysql57-mysql-server-0:5.7.19-6.el7.x86_64",
            "7Server-RHSCL-2.4:rh-mysql57-mysql-test-0:5.7.19-6.el7.x86_64",
            "7Workstation-RHSCL-2.4:rh-mysql57-mysql-0:5.7.19-6.el7.src",
            "7Workstation-RHSCL-2.4:rh-mysql57-mysql-0:5.7.19-6.el7.x86_64",
            "7Workstation-RHSCL-2.4:rh-mysql57-mysql-common-0:5.7.19-6.el7.x86_64",
            "7Workstation-RHSCL-2.4:rh-mysql57-mysql-config-0:5.7.19-6.el7.x86_64",
            "7Workstation-RHSCL-2.4:rh-mysql57-mysql-debuginfo-0:5.7.19-6.el7.x86_64",
            "7Workstation-RHSCL-2.4:rh-mysql57-mysql-devel-0:5.7.19-6.el7.x86_64",
            "7Workstation-RHSCL-2.4:rh-mysql57-mysql-errmsg-0:5.7.19-6.el7.x86_64",
            "7Workstation-RHSCL-2.4:rh-mysql57-mysql-server-0:5.7.19-6.el7.x86_64",
            "7Workstation-RHSCL-2.4:rh-mysql57-mysql-test-0:5.7.19-6.el7.x86_64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2017:2886"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 4.9,
            "baseSeverity": "MEDIUM",
            "confidentialityImpact": "NONE",
            "integrityImpact": "NONE",
            "privilegesRequired": "HIGH",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.0"
          },
          "products": [
            "6Server-RHSCL-2.4-6.7.Z:rh-mysql57-mysql-0:5.7.19-6.el6.src",
            "6Server-RHSCL-2.4-6.7.Z:rh-mysql57-mysql-0:5.7.19-6.el6.x86_64",
            "6Server-RHSCL-2.4-6.7.Z:rh-mysql57-mysql-common-0:5.7.19-6.el6.x86_64",
            "6Server-RHSCL-2.4-6.7.Z:rh-mysql57-mysql-config-0:5.7.19-6.el6.x86_64",
            "6Server-RHSCL-2.4-6.7.Z:rh-mysql57-mysql-debuginfo-0:5.7.19-6.el6.x86_64",
            "6Server-RHSCL-2.4-6.7.Z:rh-mysql57-mysql-devel-0:5.7.19-6.el6.x86_64",
            "6Server-RHSCL-2.4-6.7.Z:rh-mysql57-mysql-errmsg-0:5.7.19-6.el6.x86_64",
            "6Server-RHSCL-2.4-6.7.Z:rh-mysql57-mysql-server-0:5.7.19-6.el6.x86_64",
            "6Server-RHSCL-2.4-6.7.Z:rh-mysql57-mysql-test-0:5.7.19-6.el6.x86_64",
            "6Server-RHSCL-2.4:rh-mysql57-mysql-0:5.7.19-6.el6.src",
            "6Server-RHSCL-2.4:rh-mysql57-mysql-0:5.7.19-6.el6.x86_64",
            "6Server-RHSCL-2.4:rh-mysql57-mysql-common-0:5.7.19-6.el6.x86_64",
            "6Server-RHSCL-2.4:rh-mysql57-mysql-config-0:5.7.19-6.el6.x86_64",
            "6Server-RHSCL-2.4:rh-mysql57-mysql-debuginfo-0:5.7.19-6.el6.x86_64",
            "6Server-RHSCL-2.4:rh-mysql57-mysql-devel-0:5.7.19-6.el6.x86_64",
            "6Server-RHSCL-2.4:rh-mysql57-mysql-errmsg-0:5.7.19-6.el6.x86_64",
            "6Server-RHSCL-2.4:rh-mysql57-mysql-server-0:5.7.19-6.el6.x86_64",
            "6Server-RHSCL-2.4:rh-mysql57-mysql-test-0:5.7.19-6.el6.x86_64",
            "6Workstation-RHSCL-2.4:rh-mysql57-mysql-0:5.7.19-6.el6.src",
            "6Workstation-RHSCL-2.4:rh-mysql57-mysql-0:5.7.19-6.el6.x86_64",
            "6Workstation-RHSCL-2.4:rh-mysql57-mysql-common-0:5.7.19-6.el6.x86_64",
            "6Workstation-RHSCL-2.4:rh-mysql57-mysql-config-0:5.7.19-6.el6.x86_64",
            "6Workstation-RHSCL-2.4:rh-mysql57-mysql-debuginfo-0:5.7.19-6.el6.x86_64",
            "6Workstation-RHSCL-2.4:rh-mysql57-mysql-devel-0:5.7.19-6.el6.x86_64",
            "6Workstation-RHSCL-2.4:rh-mysql57-mysql-errmsg-0:5.7.19-6.el6.x86_64",
            "6Workstation-RHSCL-2.4:rh-mysql57-mysql-server-0:5.7.19-6.el6.x86_64",
            "6Workstation-RHSCL-2.4:rh-mysql57-mysql-test-0:5.7.19-6.el6.x86_64",
            "7Server-RHSCL-2.4-7.3.Z:rh-mysql57-mysql-0:5.7.19-6.el7.src",
            "7Server-RHSCL-2.4-7.3.Z:rh-mysql57-mysql-0:5.7.19-6.el7.x86_64",
            "7Server-RHSCL-2.4-7.3.Z:rh-mysql57-mysql-common-0:5.7.19-6.el7.x86_64",
            "7Server-RHSCL-2.4-7.3.Z:rh-mysql57-mysql-config-0:5.7.19-6.el7.x86_64",
            "7Server-RHSCL-2.4-7.3.Z:rh-mysql57-mysql-debuginfo-0:5.7.19-6.el7.x86_64",
            "7Server-RHSCL-2.4-7.3.Z:rh-mysql57-mysql-devel-0:5.7.19-6.el7.x86_64",
            "7Server-RHSCL-2.4-7.3.Z:rh-mysql57-mysql-errmsg-0:5.7.19-6.el7.x86_64",
            "7Server-RHSCL-2.4-7.3.Z:rh-mysql57-mysql-server-0:5.7.19-6.el7.x86_64",
            "7Server-RHSCL-2.4-7.3.Z:rh-mysql57-mysql-test-0:5.7.19-6.el7.x86_64",
            "7Server-RHSCL-2.4:rh-mysql57-mysql-0:5.7.19-6.el7.src",
            "7Server-RHSCL-2.4:rh-mysql57-mysql-0:5.7.19-6.el7.x86_64",
            "7Server-RHSCL-2.4:rh-mysql57-mysql-common-0:5.7.19-6.el7.x86_64",
            "7Server-RHSCL-2.4:rh-mysql57-mysql-config-0:5.7.19-6.el7.x86_64",
            "7Server-RHSCL-2.4:rh-mysql57-mysql-debuginfo-0:5.7.19-6.el7.x86_64",
            "7Server-RHSCL-2.4:rh-mysql57-mysql-devel-0:5.7.19-6.el7.x86_64",
            "7Server-RHSCL-2.4:rh-mysql57-mysql-errmsg-0:5.7.19-6.el7.x86_64",
            "7Server-RHSCL-2.4:rh-mysql57-mysql-server-0:5.7.19-6.el7.x86_64",
            "7Server-RHSCL-2.4:rh-mysql57-mysql-test-0:5.7.19-6.el7.x86_64",
            "7Workstation-RHSCL-2.4:rh-mysql57-mysql-0:5.7.19-6.el7.src",
            "7Workstation-RHSCL-2.4:rh-mysql57-mysql-0:5.7.19-6.el7.x86_64",
            "7Workstation-RHSCL-2.4:rh-mysql57-mysql-common-0:5.7.19-6.el7.x86_64",
            "7Workstation-RHSCL-2.4:rh-mysql57-mysql-config-0:5.7.19-6.el7.x86_64",
            "7Workstation-RHSCL-2.4:rh-mysql57-mysql-debuginfo-0:5.7.19-6.el7.x86_64",
            "7Workstation-RHSCL-2.4:rh-mysql57-mysql-devel-0:5.7.19-6.el7.x86_64",
            "7Workstation-RHSCL-2.4:rh-mysql57-mysql-errmsg-0:5.7.19-6.el7.x86_64",
            "7Workstation-RHSCL-2.4:rh-mysql57-mysql-server-0:5.7.19-6.el7.x86_64",
            "7Workstation-RHSCL-2.4:rh-mysql57-mysql-test-0:5.7.19-6.el7.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Moderate"
        }
      ],
      "title": "mysql: Server: Security: Privileges unspecified vulnerability (CPU Apr 2017)"
    },
    {
      "cve": "CVE-2017-3463",
      "discovery_date": "2017-04-19T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "1443378"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Security: Privileges). Supported versions that are affected are 5.5.54 and earlier, 5.6.35 and earlier and 5.7.17 and earlier. Easily \"exploitable\" vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.0 Base Score 4.9 (Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H).",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "mysql: Server: Security: Privileges unspecified vulnerability (CPU Apr 2017)",
          "title": "Vulnerability summary"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "6Server-RHSCL-2.4-6.7.Z:rh-mysql57-mysql-0:5.7.19-6.el6.src",
          "6Server-RHSCL-2.4-6.7.Z:rh-mysql57-mysql-0:5.7.19-6.el6.x86_64",
          "6Server-RHSCL-2.4-6.7.Z:rh-mysql57-mysql-common-0:5.7.19-6.el6.x86_64",
          "6Server-RHSCL-2.4-6.7.Z:rh-mysql57-mysql-config-0:5.7.19-6.el6.x86_64",
          "6Server-RHSCL-2.4-6.7.Z:rh-mysql57-mysql-debuginfo-0:5.7.19-6.el6.x86_64",
          "6Server-RHSCL-2.4-6.7.Z:rh-mysql57-mysql-devel-0:5.7.19-6.el6.x86_64",
          "6Server-RHSCL-2.4-6.7.Z:rh-mysql57-mysql-errmsg-0:5.7.19-6.el6.x86_64",
          "6Server-RHSCL-2.4-6.7.Z:rh-mysql57-mysql-server-0:5.7.19-6.el6.x86_64",
          "6Server-RHSCL-2.4-6.7.Z:rh-mysql57-mysql-test-0:5.7.19-6.el6.x86_64",
          "6Server-RHSCL-2.4:rh-mysql57-mysql-0:5.7.19-6.el6.src",
          "6Server-RHSCL-2.4:rh-mysql57-mysql-0:5.7.19-6.el6.x86_64",
          "6Server-RHSCL-2.4:rh-mysql57-mysql-common-0:5.7.19-6.el6.x86_64",
          "6Server-RHSCL-2.4:rh-mysql57-mysql-config-0:5.7.19-6.el6.x86_64",
          "6Server-RHSCL-2.4:rh-mysql57-mysql-debuginfo-0:5.7.19-6.el6.x86_64",
          "6Server-RHSCL-2.4:rh-mysql57-mysql-devel-0:5.7.19-6.el6.x86_64",
          "6Server-RHSCL-2.4:rh-mysql57-mysql-errmsg-0:5.7.19-6.el6.x86_64",
          "6Server-RHSCL-2.4:rh-mysql57-mysql-server-0:5.7.19-6.el6.x86_64",
          "6Server-RHSCL-2.4:rh-mysql57-mysql-test-0:5.7.19-6.el6.x86_64",
          "6Workstation-RHSCL-2.4:rh-mysql57-mysql-0:5.7.19-6.el6.src",
          "6Workstation-RHSCL-2.4:rh-mysql57-mysql-0:5.7.19-6.el6.x86_64",
          "6Workstation-RHSCL-2.4:rh-mysql57-mysql-common-0:5.7.19-6.el6.x86_64",
          "6Workstation-RHSCL-2.4:rh-mysql57-mysql-config-0:5.7.19-6.el6.x86_64",
          "6Workstation-RHSCL-2.4:rh-mysql57-mysql-debuginfo-0:5.7.19-6.el6.x86_64",
          "6Workstation-RHSCL-2.4:rh-mysql57-mysql-devel-0:5.7.19-6.el6.x86_64",
          "6Workstation-RHSCL-2.4:rh-mysql57-mysql-errmsg-0:5.7.19-6.el6.x86_64",
          "6Workstation-RHSCL-2.4:rh-mysql57-mysql-server-0:5.7.19-6.el6.x86_64",
          "6Workstation-RHSCL-2.4:rh-mysql57-mysql-test-0:5.7.19-6.el6.x86_64",
          "7Server-RHSCL-2.4-7.3.Z:rh-mysql57-mysql-0:5.7.19-6.el7.src",
          "7Server-RHSCL-2.4-7.3.Z:rh-mysql57-mysql-0:5.7.19-6.el7.x86_64",
          "7Server-RHSCL-2.4-7.3.Z:rh-mysql57-mysql-common-0:5.7.19-6.el7.x86_64",
          "7Server-RHSCL-2.4-7.3.Z:rh-mysql57-mysql-config-0:5.7.19-6.el7.x86_64",
          "7Server-RHSCL-2.4-7.3.Z:rh-mysql57-mysql-debuginfo-0:5.7.19-6.el7.x86_64",
          "7Server-RHSCL-2.4-7.3.Z:rh-mysql57-mysql-devel-0:5.7.19-6.el7.x86_64",
          "7Server-RHSCL-2.4-7.3.Z:rh-mysql57-mysql-errmsg-0:5.7.19-6.el7.x86_64",
          "7Server-RHSCL-2.4-7.3.Z:rh-mysql57-mysql-server-0:5.7.19-6.el7.x86_64",
          "7Server-RHSCL-2.4-7.3.Z:rh-mysql57-mysql-test-0:5.7.19-6.el7.x86_64",
          "7Server-RHSCL-2.4:rh-mysql57-mysql-0:5.7.19-6.el7.src",
          "7Server-RHSCL-2.4:rh-mysql57-mysql-0:5.7.19-6.el7.x86_64",
          "7Server-RHSCL-2.4:rh-mysql57-mysql-common-0:5.7.19-6.el7.x86_64",
          "7Server-RHSCL-2.4:rh-mysql57-mysql-config-0:5.7.19-6.el7.x86_64",
          "7Server-RHSCL-2.4:rh-mysql57-mysql-debuginfo-0:5.7.19-6.el7.x86_64",
          "7Server-RHSCL-2.4:rh-mysql57-mysql-devel-0:5.7.19-6.el7.x86_64",
          "7Server-RHSCL-2.4:rh-mysql57-mysql-errmsg-0:5.7.19-6.el7.x86_64",
          "7Server-RHSCL-2.4:rh-mysql57-mysql-server-0:5.7.19-6.el7.x86_64",
          "7Server-RHSCL-2.4:rh-mysql57-mysql-test-0:5.7.19-6.el7.x86_64",
          "7Workstation-RHSCL-2.4:rh-mysql57-mysql-0:5.7.19-6.el7.src",
          "7Workstation-RHSCL-2.4:rh-mysql57-mysql-0:5.7.19-6.el7.x86_64",
          "7Workstation-RHSCL-2.4:rh-mysql57-mysql-common-0:5.7.19-6.el7.x86_64",
          "7Workstation-RHSCL-2.4:rh-mysql57-mysql-config-0:5.7.19-6.el7.x86_64",
          "7Workstation-RHSCL-2.4:rh-mysql57-mysql-debuginfo-0:5.7.19-6.el7.x86_64",
          "7Workstation-RHSCL-2.4:rh-mysql57-mysql-devel-0:5.7.19-6.el7.x86_64",
          "7Workstation-RHSCL-2.4:rh-mysql57-mysql-errmsg-0:5.7.19-6.el7.x86_64",
          "7Workstation-RHSCL-2.4:rh-mysql57-mysql-server-0:5.7.19-6.el7.x86_64",
          "7Workstation-RHSCL-2.4:rh-mysql57-mysql-test-0:5.7.19-6.el7.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2017-3463"
        },
        {
          "category": "external",
          "summary": "RHBZ#1443378",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1443378"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2017-3463",
          "url": "https://www.cve.org/CVERecord?id=CVE-2017-3463"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2017-3463",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2017-3463"
        },
        {
          "category": "external",
          "summary": "http://www.oracle.com/technetwork/security-advisory/cpuapr2017-3236618.html#AppendixMSQL",
          "url": "http://www.oracle.com/technetwork/security-advisory/cpuapr2017-3236618.html#AppendixMSQL"
        }
      ],
      "release_date": "2017-04-19T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2017-10-12T07:53:15+00:00",
          "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAfter installing this update, the MySQL server daemon (mysqld) will be restarted automatically.",
          "product_ids": [
            "6Server-RHSCL-2.4-6.7.Z:rh-mysql57-mysql-0:5.7.19-6.el6.src",
            "6Server-RHSCL-2.4-6.7.Z:rh-mysql57-mysql-0:5.7.19-6.el6.x86_64",
            "6Server-RHSCL-2.4-6.7.Z:rh-mysql57-mysql-common-0:5.7.19-6.el6.x86_64",
            "6Server-RHSCL-2.4-6.7.Z:rh-mysql57-mysql-config-0:5.7.19-6.el6.x86_64",
            "6Server-RHSCL-2.4-6.7.Z:rh-mysql57-mysql-debuginfo-0:5.7.19-6.el6.x86_64",
            "6Server-RHSCL-2.4-6.7.Z:rh-mysql57-mysql-devel-0:5.7.19-6.el6.x86_64",
            "6Server-RHSCL-2.4-6.7.Z:rh-mysql57-mysql-errmsg-0:5.7.19-6.el6.x86_64",
            "6Server-RHSCL-2.4-6.7.Z:rh-mysql57-mysql-server-0:5.7.19-6.el6.x86_64",
            "6Server-RHSCL-2.4-6.7.Z:rh-mysql57-mysql-test-0:5.7.19-6.el6.x86_64",
            "6Server-RHSCL-2.4:rh-mysql57-mysql-0:5.7.19-6.el6.src",
            "6Server-RHSCL-2.4:rh-mysql57-mysql-0:5.7.19-6.el6.x86_64",
            "6Server-RHSCL-2.4:rh-mysql57-mysql-common-0:5.7.19-6.el6.x86_64",
            "6Server-RHSCL-2.4:rh-mysql57-mysql-config-0:5.7.19-6.el6.x86_64",
            "6Server-RHSCL-2.4:rh-mysql57-mysql-debuginfo-0:5.7.19-6.el6.x86_64",
            "6Server-RHSCL-2.4:rh-mysql57-mysql-devel-0:5.7.19-6.el6.x86_64",
            "6Server-RHSCL-2.4:rh-mysql57-mysql-errmsg-0:5.7.19-6.el6.x86_64",
            "6Server-RHSCL-2.4:rh-mysql57-mysql-server-0:5.7.19-6.el6.x86_64",
            "6Server-RHSCL-2.4:rh-mysql57-mysql-test-0:5.7.19-6.el6.x86_64",
            "6Workstation-RHSCL-2.4:rh-mysql57-mysql-0:5.7.19-6.el6.src",
            "6Workstation-RHSCL-2.4:rh-mysql57-mysql-0:5.7.19-6.el6.x86_64",
            "6Workstation-RHSCL-2.4:rh-mysql57-mysql-common-0:5.7.19-6.el6.x86_64",
            "6Workstation-RHSCL-2.4:rh-mysql57-mysql-config-0:5.7.19-6.el6.x86_64",
            "6Workstation-RHSCL-2.4:rh-mysql57-mysql-debuginfo-0:5.7.19-6.el6.x86_64",
            "6Workstation-RHSCL-2.4:rh-mysql57-mysql-devel-0:5.7.19-6.el6.x86_64",
            "6Workstation-RHSCL-2.4:rh-mysql57-mysql-errmsg-0:5.7.19-6.el6.x86_64",
            "6Workstation-RHSCL-2.4:rh-mysql57-mysql-server-0:5.7.19-6.el6.x86_64",
            "6Workstation-RHSCL-2.4:rh-mysql57-mysql-test-0:5.7.19-6.el6.x86_64",
            "7Server-RHSCL-2.4-7.3.Z:rh-mysql57-mysql-0:5.7.19-6.el7.src",
            "7Server-RHSCL-2.4-7.3.Z:rh-mysql57-mysql-0:5.7.19-6.el7.x86_64",
            "7Server-RHSCL-2.4-7.3.Z:rh-mysql57-mysql-common-0:5.7.19-6.el7.x86_64",
            "7Server-RHSCL-2.4-7.3.Z:rh-mysql57-mysql-config-0:5.7.19-6.el7.x86_64",
            "7Server-RHSCL-2.4-7.3.Z:rh-mysql57-mysql-debuginfo-0:5.7.19-6.el7.x86_64",
            "7Server-RHSCL-2.4-7.3.Z:rh-mysql57-mysql-devel-0:5.7.19-6.el7.x86_64",
            "7Server-RHSCL-2.4-7.3.Z:rh-mysql57-mysql-errmsg-0:5.7.19-6.el7.x86_64",
            "7Server-RHSCL-2.4-7.3.Z:rh-mysql57-mysql-server-0:5.7.19-6.el7.x86_64",
            "7Server-RHSCL-2.4-7.3.Z:rh-mysql57-mysql-test-0:5.7.19-6.el7.x86_64",
            "7Server-RHSCL-2.4:rh-mysql57-mysql-0:5.7.19-6.el7.src",
            "7Server-RHSCL-2.4:rh-mysql57-mysql-0:5.7.19-6.el7.x86_64",
            "7Server-RHSCL-2.4:rh-mysql57-mysql-common-0:5.7.19-6.el7.x86_64",
            "7Server-RHSCL-2.4:rh-mysql57-mysql-config-0:5.7.19-6.el7.x86_64",
            "7Server-RHSCL-2.4:rh-mysql57-mysql-debuginfo-0:5.7.19-6.el7.x86_64",
            "7Server-RHSCL-2.4:rh-mysql57-mysql-devel-0:5.7.19-6.el7.x86_64",
            "7Server-RHSCL-2.4:rh-mysql57-mysql-errmsg-0:5.7.19-6.el7.x86_64",
            "7Server-RHSCL-2.4:rh-mysql57-mysql-server-0:5.7.19-6.el7.x86_64",
            "7Server-RHSCL-2.4:rh-mysql57-mysql-test-0:5.7.19-6.el7.x86_64",
            "7Workstation-RHSCL-2.4:rh-mysql57-mysql-0:5.7.19-6.el7.src",
            "7Workstation-RHSCL-2.4:rh-mysql57-mysql-0:5.7.19-6.el7.x86_64",
            "7Workstation-RHSCL-2.4:rh-mysql57-mysql-common-0:5.7.19-6.el7.x86_64",
            "7Workstation-RHSCL-2.4:rh-mysql57-mysql-config-0:5.7.19-6.el7.x86_64",
            "7Workstation-RHSCL-2.4:rh-mysql57-mysql-debuginfo-0:5.7.19-6.el7.x86_64",
            "7Workstation-RHSCL-2.4:rh-mysql57-mysql-devel-0:5.7.19-6.el7.x86_64",
            "7Workstation-RHSCL-2.4:rh-mysql57-mysql-errmsg-0:5.7.19-6.el7.x86_64",
            "7Workstation-RHSCL-2.4:rh-mysql57-mysql-server-0:5.7.19-6.el7.x86_64",
            "7Workstation-RHSCL-2.4:rh-mysql57-mysql-test-0:5.7.19-6.el7.x86_64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2017:2886"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 4.9,
            "baseSeverity": "MEDIUM",
            "confidentialityImpact": "NONE",
            "integrityImpact": "NONE",
            "privilegesRequired": "HIGH",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.0"
          },
          "products": [
            "6Server-RHSCL-2.4-6.7.Z:rh-mysql57-mysql-0:5.7.19-6.el6.src",
            "6Server-RHSCL-2.4-6.7.Z:rh-mysql57-mysql-0:5.7.19-6.el6.x86_64",
            "6Server-RHSCL-2.4-6.7.Z:rh-mysql57-mysql-common-0:5.7.19-6.el6.x86_64",
            "6Server-RHSCL-2.4-6.7.Z:rh-mysql57-mysql-config-0:5.7.19-6.el6.x86_64",
            "6Server-RHSCL-2.4-6.7.Z:rh-mysql57-mysql-debuginfo-0:5.7.19-6.el6.x86_64",
            "6Server-RHSCL-2.4-6.7.Z:rh-mysql57-mysql-devel-0:5.7.19-6.el6.x86_64",
            "6Server-RHSCL-2.4-6.7.Z:rh-mysql57-mysql-errmsg-0:5.7.19-6.el6.x86_64",
            "6Server-RHSCL-2.4-6.7.Z:rh-mysql57-mysql-server-0:5.7.19-6.el6.x86_64",
            "6Server-RHSCL-2.4-6.7.Z:rh-mysql57-mysql-test-0:5.7.19-6.el6.x86_64",
            "6Server-RHSCL-2.4:rh-mysql57-mysql-0:5.7.19-6.el6.src",
            "6Server-RHSCL-2.4:rh-mysql57-mysql-0:5.7.19-6.el6.x86_64",
            "6Server-RHSCL-2.4:rh-mysql57-mysql-common-0:5.7.19-6.el6.x86_64",
            "6Server-RHSCL-2.4:rh-mysql57-mysql-config-0:5.7.19-6.el6.x86_64",
            "6Server-RHSCL-2.4:rh-mysql57-mysql-debuginfo-0:5.7.19-6.el6.x86_64",
            "6Server-RHSCL-2.4:rh-mysql57-mysql-devel-0:5.7.19-6.el6.x86_64",
            "6Server-RHSCL-2.4:rh-mysql57-mysql-errmsg-0:5.7.19-6.el6.x86_64",
            "6Server-RHSCL-2.4:rh-mysql57-mysql-server-0:5.7.19-6.el6.x86_64",
            "6Server-RHSCL-2.4:rh-mysql57-mysql-test-0:5.7.19-6.el6.x86_64",
            "6Workstation-RHSCL-2.4:rh-mysql57-mysql-0:5.7.19-6.el6.src",
            "6Workstation-RHSCL-2.4:rh-mysql57-mysql-0:5.7.19-6.el6.x86_64",
            "6Workstation-RHSCL-2.4:rh-mysql57-mysql-common-0:5.7.19-6.el6.x86_64",
            "6Workstation-RHSCL-2.4:rh-mysql57-mysql-config-0:5.7.19-6.el6.x86_64",
            "6Workstation-RHSCL-2.4:rh-mysql57-mysql-debuginfo-0:5.7.19-6.el6.x86_64",
            "6Workstation-RHSCL-2.4:rh-mysql57-mysql-devel-0:5.7.19-6.el6.x86_64",
            "6Workstation-RHSCL-2.4:rh-mysql57-mysql-errmsg-0:5.7.19-6.el6.x86_64",
            "6Workstation-RHSCL-2.4:rh-mysql57-mysql-server-0:5.7.19-6.el6.x86_64",
            "6Workstation-RHSCL-2.4:rh-mysql57-mysql-test-0:5.7.19-6.el6.x86_64",
            "7Server-RHSCL-2.4-7.3.Z:rh-mysql57-mysql-0:5.7.19-6.el7.src",
            "7Server-RHSCL-2.4-7.3.Z:rh-mysql57-mysql-0:5.7.19-6.el7.x86_64",
            "7Server-RHSCL-2.4-7.3.Z:rh-mysql57-mysql-common-0:5.7.19-6.el7.x86_64",
            "7Server-RHSCL-2.4-7.3.Z:rh-mysql57-mysql-config-0:5.7.19-6.el7.x86_64",
            "7Server-RHSCL-2.4-7.3.Z:rh-mysql57-mysql-debuginfo-0:5.7.19-6.el7.x86_64",
            "7Server-RHSCL-2.4-7.3.Z:rh-mysql57-mysql-devel-0:5.7.19-6.el7.x86_64",
            "7Server-RHSCL-2.4-7.3.Z:rh-mysql57-mysql-errmsg-0:5.7.19-6.el7.x86_64",
            "7Server-RHSCL-2.4-7.3.Z:rh-mysql57-mysql-server-0:5.7.19-6.el7.x86_64",
            "7Server-RHSCL-2.4-7.3.Z:rh-mysql57-mysql-test-0:5.7.19-6.el7.x86_64",
            "7Server-RHSCL-2.4:rh-mysql57-mysql-0:5.7.19-6.el7.src",
            "7Server-RHSCL-2.4:rh-mysql57-mysql-0:5.7.19-6.el7.x86_64",
            "7Server-RHSCL-2.4:rh-mysql57-mysql-common-0:5.7.19-6.el7.x86_64",
            "7Server-RHSCL-2.4:rh-mysql57-mysql-config-0:5.7.19-6.el7.x86_64",
            "7Server-RHSCL-2.4:rh-mysql57-mysql-debuginfo-0:5.7.19-6.el7.x86_64",
            "7Server-RHSCL-2.4:rh-mysql57-mysql-devel-0:5.7.19-6.el7.x86_64",
            "7Server-RHSCL-2.4:rh-mysql57-mysql-errmsg-0:5.7.19-6.el7.x86_64",
            "7Server-RHSCL-2.4:rh-mysql57-mysql-server-0:5.7.19-6.el7.x86_64",
            "7Server-RHSCL-2.4:rh-mysql57-mysql-test-0:5.7.19-6.el7.x86_64",
            "7Workstation-RHSCL-2.4:rh-mysql57-mysql-0:5.7.19-6.el7.src",
            "7Workstation-RHSCL-2.4:rh-mysql57-mysql-0:5.7.19-6.el7.x86_64",
            "7Workstation-RHSCL-2.4:rh-mysql57-mysql-common-0:5.7.19-6.el7.x86_64",
            "7Workstation-RHSCL-2.4:rh-mysql57-mysql-config-0:5.7.19-6.el7.x86_64",
            "7Workstation-RHSCL-2.4:rh-mysql57-mysql-debuginfo-0:5.7.19-6.el7.x86_64",
            "7Workstation-RHSCL-2.4:rh-mysql57-mysql-devel-0:5.7.19-6.el7.x86_64",
            "7Workstation-RHSCL-2.4:rh-mysql57-mysql-errmsg-0:5.7.19-6.el7.x86_64",
            "7Workstation-RHSCL-2.4:rh-mysql57-mysql-server-0:5.7.19-6.el7.x86_64",
            "7Workstation-RHSCL-2.4:rh-mysql57-mysql-test-0:5.7.19-6.el7.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Moderate"
        }
      ],
      "title": "mysql: Server: Security: Privileges unspecified vulnerability (CPU Apr 2017)"
    },
    {
      "cve": "CVE-2017-3464",
      "discovery_date": "2017-04-19T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "1443379"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: DDL). Supported versions that are affected are 5.5.54 and earlier, 5.6.35 and earlier and 5.7.17 and earlier. Easily \"exploitable\" vulnerability allows low privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of MySQL Server accessible data. CVSS 3.0 Base Score 4.3 (Integrity impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N).",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "mysql: Server: DDL unspecified vulnerability (CPU Apr 2017)",
          "title": "Vulnerability summary"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "6Server-RHSCL-2.4-6.7.Z:rh-mysql57-mysql-0:5.7.19-6.el6.src",
          "6Server-RHSCL-2.4-6.7.Z:rh-mysql57-mysql-0:5.7.19-6.el6.x86_64",
          "6Server-RHSCL-2.4-6.7.Z:rh-mysql57-mysql-common-0:5.7.19-6.el6.x86_64",
          "6Server-RHSCL-2.4-6.7.Z:rh-mysql57-mysql-config-0:5.7.19-6.el6.x86_64",
          "6Server-RHSCL-2.4-6.7.Z:rh-mysql57-mysql-debuginfo-0:5.7.19-6.el6.x86_64",
          "6Server-RHSCL-2.4-6.7.Z:rh-mysql57-mysql-devel-0:5.7.19-6.el6.x86_64",
          "6Server-RHSCL-2.4-6.7.Z:rh-mysql57-mysql-errmsg-0:5.7.19-6.el6.x86_64",
          "6Server-RHSCL-2.4-6.7.Z:rh-mysql57-mysql-server-0:5.7.19-6.el6.x86_64",
          "6Server-RHSCL-2.4-6.7.Z:rh-mysql57-mysql-test-0:5.7.19-6.el6.x86_64",
          "6Server-RHSCL-2.4:rh-mysql57-mysql-0:5.7.19-6.el6.src",
          "6Server-RHSCL-2.4:rh-mysql57-mysql-0:5.7.19-6.el6.x86_64",
          "6Server-RHSCL-2.4:rh-mysql57-mysql-common-0:5.7.19-6.el6.x86_64",
          "6Server-RHSCL-2.4:rh-mysql57-mysql-config-0:5.7.19-6.el6.x86_64",
          "6Server-RHSCL-2.4:rh-mysql57-mysql-debuginfo-0:5.7.19-6.el6.x86_64",
          "6Server-RHSCL-2.4:rh-mysql57-mysql-devel-0:5.7.19-6.el6.x86_64",
          "6Server-RHSCL-2.4:rh-mysql57-mysql-errmsg-0:5.7.19-6.el6.x86_64",
          "6Server-RHSCL-2.4:rh-mysql57-mysql-server-0:5.7.19-6.el6.x86_64",
          "6Server-RHSCL-2.4:rh-mysql57-mysql-test-0:5.7.19-6.el6.x86_64",
          "6Workstation-RHSCL-2.4:rh-mysql57-mysql-0:5.7.19-6.el6.src",
          "6Workstation-RHSCL-2.4:rh-mysql57-mysql-0:5.7.19-6.el6.x86_64",
          "6Workstation-RHSCL-2.4:rh-mysql57-mysql-common-0:5.7.19-6.el6.x86_64",
          "6Workstation-RHSCL-2.4:rh-mysql57-mysql-config-0:5.7.19-6.el6.x86_64",
          "6Workstation-RHSCL-2.4:rh-mysql57-mysql-debuginfo-0:5.7.19-6.el6.x86_64",
          "6Workstation-RHSCL-2.4:rh-mysql57-mysql-devel-0:5.7.19-6.el6.x86_64",
          "6Workstation-RHSCL-2.4:rh-mysql57-mysql-errmsg-0:5.7.19-6.el6.x86_64",
          "6Workstation-RHSCL-2.4:rh-mysql57-mysql-server-0:5.7.19-6.el6.x86_64",
          "6Workstation-RHSCL-2.4:rh-mysql57-mysql-test-0:5.7.19-6.el6.x86_64",
          "7Server-RHSCL-2.4-7.3.Z:rh-mysql57-mysql-0:5.7.19-6.el7.src",
          "7Server-RHSCL-2.4-7.3.Z:rh-mysql57-mysql-0:5.7.19-6.el7.x86_64",
          "7Server-RHSCL-2.4-7.3.Z:rh-mysql57-mysql-common-0:5.7.19-6.el7.x86_64",
          "7Server-RHSCL-2.4-7.3.Z:rh-mysql57-mysql-config-0:5.7.19-6.el7.x86_64",
          "7Server-RHSCL-2.4-7.3.Z:rh-mysql57-mysql-debuginfo-0:5.7.19-6.el7.x86_64",
          "7Server-RHSCL-2.4-7.3.Z:rh-mysql57-mysql-devel-0:5.7.19-6.el7.x86_64",
          "7Server-RHSCL-2.4-7.3.Z:rh-mysql57-mysql-errmsg-0:5.7.19-6.el7.x86_64",
          "7Server-RHSCL-2.4-7.3.Z:rh-mysql57-mysql-server-0:5.7.19-6.el7.x86_64",
          "7Server-RHSCL-2.4-7.3.Z:rh-mysql57-mysql-test-0:5.7.19-6.el7.x86_64",
          "7Server-RHSCL-2.4:rh-mysql57-mysql-0:5.7.19-6.el7.src",
          "7Server-RHSCL-2.4:rh-mysql57-mysql-0:5.7.19-6.el7.x86_64",
          "7Server-RHSCL-2.4:rh-mysql57-mysql-common-0:5.7.19-6.el7.x86_64",
          "7Server-RHSCL-2.4:rh-mysql57-mysql-config-0:5.7.19-6.el7.x86_64",
          "7Server-RHSCL-2.4:rh-mysql57-mysql-debuginfo-0:5.7.19-6.el7.x86_64",
          "7Server-RHSCL-2.4:rh-mysql57-mysql-devel-0:5.7.19-6.el7.x86_64",
          "7Server-RHSCL-2.4:rh-mysql57-mysql-errmsg-0:5.7.19-6.el7.x86_64",
          "7Server-RHSCL-2.4:rh-mysql57-mysql-server-0:5.7.19-6.el7.x86_64",
          "7Server-RHSCL-2.4:rh-mysql57-mysql-test-0:5.7.19-6.el7.x86_64",
          "7Workstation-RHSCL-2.4:rh-mysql57-mysql-0:5.7.19-6.el7.src",
          "7Workstation-RHSCL-2.4:rh-mysql57-mysql-0:5.7.19-6.el7.x86_64",
          "7Workstation-RHSCL-2.4:rh-mysql57-mysql-common-0:5.7.19-6.el7.x86_64",
          "7Workstation-RHSCL-2.4:rh-mysql57-mysql-config-0:5.7.19-6.el7.x86_64",
          "7Workstation-RHSCL-2.4:rh-mysql57-mysql-debuginfo-0:5.7.19-6.el7.x86_64",
          "7Workstation-RHSCL-2.4:rh-mysql57-mysql-devel-0:5.7.19-6.el7.x86_64",
          "7Workstation-RHSCL-2.4:rh-mysql57-mysql-errmsg-0:5.7.19-6.el7.x86_64",
          "7Workstation-RHSCL-2.4:rh-mysql57-mysql-server-0:5.7.19-6.el7.x86_64",
          "7Workstation-RHSCL-2.4:rh-mysql57-mysql-test-0:5.7.19-6.el7.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2017-3464"
        },
        {
          "category": "external",
          "summary": "RHBZ#1443379",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1443379"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2017-3464",
          "url": "https://www.cve.org/CVERecord?id=CVE-2017-3464"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2017-3464",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2017-3464"
        },
        {
          "category": "external",
          "summary": "http://www.oracle.com/technetwork/security-advisory/cpuapr2017-3236618.html#AppendixMSQL",
          "url": "http://www.oracle.com/technetwork/security-advisory/cpuapr2017-3236618.html#AppendixMSQL"
        }
      ],
      "release_date": "2017-04-19T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2017-10-12T07:53:15+00:00",
          "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAfter installing this update, the MySQL server daemon (mysqld) will be restarted automatically.",
          "product_ids": [
            "6Server-RHSCL-2.4-6.7.Z:rh-mysql57-mysql-0:5.7.19-6.el6.src",
            "6Server-RHSCL-2.4-6.7.Z:rh-mysql57-mysql-0:5.7.19-6.el6.x86_64",
            "6Server-RHSCL-2.4-6.7.Z:rh-mysql57-mysql-common-0:5.7.19-6.el6.x86_64",
            "6Server-RHSCL-2.4-6.7.Z:rh-mysql57-mysql-config-0:5.7.19-6.el6.x86_64",
            "6Server-RHSCL-2.4-6.7.Z:rh-mysql57-mysql-debuginfo-0:5.7.19-6.el6.x86_64",
            "6Server-RHSCL-2.4-6.7.Z:rh-mysql57-mysql-devel-0:5.7.19-6.el6.x86_64",
            "6Server-RHSCL-2.4-6.7.Z:rh-mysql57-mysql-errmsg-0:5.7.19-6.el6.x86_64",
            "6Server-RHSCL-2.4-6.7.Z:rh-mysql57-mysql-server-0:5.7.19-6.el6.x86_64",
            "6Server-RHSCL-2.4-6.7.Z:rh-mysql57-mysql-test-0:5.7.19-6.el6.x86_64",
            "6Server-RHSCL-2.4:rh-mysql57-mysql-0:5.7.19-6.el6.src",
            "6Server-RHSCL-2.4:rh-mysql57-mysql-0:5.7.19-6.el6.x86_64",
            "6Server-RHSCL-2.4:rh-mysql57-mysql-common-0:5.7.19-6.el6.x86_64",
            "6Server-RHSCL-2.4:rh-mysql57-mysql-config-0:5.7.19-6.el6.x86_64",
            "6Server-RHSCL-2.4:rh-mysql57-mysql-debuginfo-0:5.7.19-6.el6.x86_64",
            "6Server-RHSCL-2.4:rh-mysql57-mysql-devel-0:5.7.19-6.el6.x86_64",
            "6Server-RHSCL-2.4:rh-mysql57-mysql-errmsg-0:5.7.19-6.el6.x86_64",
            "6Server-RHSCL-2.4:rh-mysql57-mysql-server-0:5.7.19-6.el6.x86_64",
            "6Server-RHSCL-2.4:rh-mysql57-mysql-test-0:5.7.19-6.el6.x86_64",
            "6Workstation-RHSCL-2.4:rh-mysql57-mysql-0:5.7.19-6.el6.src",
            "6Workstation-RHSCL-2.4:rh-mysql57-mysql-0:5.7.19-6.el6.x86_64",
            "6Workstation-RHSCL-2.4:rh-mysql57-mysql-common-0:5.7.19-6.el6.x86_64",
            "6Workstation-RHSCL-2.4:rh-mysql57-mysql-config-0:5.7.19-6.el6.x86_64",
            "6Workstation-RHSCL-2.4:rh-mysql57-mysql-debuginfo-0:5.7.19-6.el6.x86_64",
            "6Workstation-RHSCL-2.4:rh-mysql57-mysql-devel-0:5.7.19-6.el6.x86_64",
            "6Workstation-RHSCL-2.4:rh-mysql57-mysql-errmsg-0:5.7.19-6.el6.x86_64",
            "6Workstation-RHSCL-2.4:rh-mysql57-mysql-server-0:5.7.19-6.el6.x86_64",
            "6Workstation-RHSCL-2.4:rh-mysql57-mysql-test-0:5.7.19-6.el6.x86_64",
            "7Server-RHSCL-2.4-7.3.Z:rh-mysql57-mysql-0:5.7.19-6.el7.src",
            "7Server-RHSCL-2.4-7.3.Z:rh-mysql57-mysql-0:5.7.19-6.el7.x86_64",
            "7Server-RHSCL-2.4-7.3.Z:rh-mysql57-mysql-common-0:5.7.19-6.el7.x86_64",
            "7Server-RHSCL-2.4-7.3.Z:rh-mysql57-mysql-config-0:5.7.19-6.el7.x86_64",
            "7Server-RHSCL-2.4-7.3.Z:rh-mysql57-mysql-debuginfo-0:5.7.19-6.el7.x86_64",
            "7Server-RHSCL-2.4-7.3.Z:rh-mysql57-mysql-devel-0:5.7.19-6.el7.x86_64",
            "7Server-RHSCL-2.4-7.3.Z:rh-mysql57-mysql-errmsg-0:5.7.19-6.el7.x86_64",
            "7Server-RHSCL-2.4-7.3.Z:rh-mysql57-mysql-server-0:5.7.19-6.el7.x86_64",
            "7Server-RHSCL-2.4-7.3.Z:rh-mysql57-mysql-test-0:5.7.19-6.el7.x86_64",
            "7Server-RHSCL-2.4:rh-mysql57-mysql-0:5.7.19-6.el7.src",
            "7Server-RHSCL-2.4:rh-mysql57-mysql-0:5.7.19-6.el7.x86_64",
            "7Server-RHSCL-2.4:rh-mysql57-mysql-common-0:5.7.19-6.el7.x86_64",
            "7Server-RHSCL-2.4:rh-mysql57-mysql-config-0:5.7.19-6.el7.x86_64",
            "7Server-RHSCL-2.4:rh-mysql57-mysql-debuginfo-0:5.7.19-6.el7.x86_64",
            "7Server-RHSCL-2.4:rh-mysql57-mysql-devel-0:5.7.19-6.el7.x86_64",
            "7Server-RHSCL-2.4:rh-mysql57-mysql-errmsg-0:5.7.19-6.el7.x86_64",
            "7Server-RHSCL-2.4:rh-mysql57-mysql-server-0:5.7.19-6.el7.x86_64",
            "7Server-RHSCL-2.4:rh-mysql57-mysql-test-0:5.7.19-6.el7.x86_64",
            "7Workstation-RHSCL-2.4:rh-mysql57-mysql-0:5.7.19-6.el7.src",
            "7Workstation-RHSCL-2.4:rh-mysql57-mysql-0:5.7.19-6.el7.x86_64",
            "7Workstation-RHSCL-2.4:rh-mysql57-mysql-common-0:5.7.19-6.el7.x86_64",
            "7Workstation-RHSCL-2.4:rh-mysql57-mysql-config-0:5.7.19-6.el7.x86_64",
            "7Workstation-RHSCL-2.4:rh-mysql57-mysql-debuginfo-0:5.7.19-6.el7.x86_64",
            "7Workstation-RHSCL-2.4:rh-mysql57-mysql-devel-0:5.7.19-6.el7.x86_64",
            "7Workstation-RHSCL-2.4:rh-mysql57-mysql-errmsg-0:5.7.19-6.el7.x86_64",
            "7Workstation-RHSCL-2.4:rh-mysql57-mysql-server-0:5.7.19-6.el7.x86_64",
            "7Workstation-RHSCL-2.4:rh-mysql57-mysql-test-0:5.7.19-6.el7.x86_64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2017:2886"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "NONE",
            "baseScore": 4.3,
            "baseSeverity": "MEDIUM",
            "confidentialityImpact": "NONE",
            "integrityImpact": "LOW",
            "privilegesRequired": "LOW",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N",
            "version": "3.0"
          },
          "products": [
            "6Server-RHSCL-2.4-6.7.Z:rh-mysql57-mysql-0:5.7.19-6.el6.src",
            "6Server-RHSCL-2.4-6.7.Z:rh-mysql57-mysql-0:5.7.19-6.el6.x86_64",
            "6Server-RHSCL-2.4-6.7.Z:rh-mysql57-mysql-common-0:5.7.19-6.el6.x86_64",
            "6Server-RHSCL-2.4-6.7.Z:rh-mysql57-mysql-config-0:5.7.19-6.el6.x86_64",
            "6Server-RHSCL-2.4-6.7.Z:rh-mysql57-mysql-debuginfo-0:5.7.19-6.el6.x86_64",
            "6Server-RHSCL-2.4-6.7.Z:rh-mysql57-mysql-devel-0:5.7.19-6.el6.x86_64",
            "6Server-RHSCL-2.4-6.7.Z:rh-mysql57-mysql-errmsg-0:5.7.19-6.el6.x86_64",
            "6Server-RHSCL-2.4-6.7.Z:rh-mysql57-mysql-server-0:5.7.19-6.el6.x86_64",
            "6Server-RHSCL-2.4-6.7.Z:rh-mysql57-mysql-test-0:5.7.19-6.el6.x86_64",
            "6Server-RHSCL-2.4:rh-mysql57-mysql-0:5.7.19-6.el6.src",
            "6Server-RHSCL-2.4:rh-mysql57-mysql-0:5.7.19-6.el6.x86_64",
            "6Server-RHSCL-2.4:rh-mysql57-mysql-common-0:5.7.19-6.el6.x86_64",
            "6Server-RHSCL-2.4:rh-mysql57-mysql-config-0:5.7.19-6.el6.x86_64",
            "6Server-RHSCL-2.4:rh-mysql57-mysql-debuginfo-0:5.7.19-6.el6.x86_64",
            "6Server-RHSCL-2.4:rh-mysql57-mysql-devel-0:5.7.19-6.el6.x86_64",
            "6Server-RHSCL-2.4:rh-mysql57-mysql-errmsg-0:5.7.19-6.el6.x86_64",
            "6Server-RHSCL-2.4:rh-mysql57-mysql-server-0:5.7.19-6.el6.x86_64",
            "6Server-RHSCL-2.4:rh-mysql57-mysql-test-0:5.7.19-6.el6.x86_64",
            "6Workstation-RHSCL-2.4:rh-mysql57-mysql-0:5.7.19-6.el6.src",
            "6Workstation-RHSCL-2.4:rh-mysql57-mysql-0:5.7.19-6.el6.x86_64",
            "6Workstation-RHSCL-2.4:rh-mysql57-mysql-common-0:5.7.19-6.el6.x86_64",
            "6Workstation-RHSCL-2.4:rh-mysql57-mysql-config-0:5.7.19-6.el6.x86_64",
            "6Workstation-RHSCL-2.4:rh-mysql57-mysql-debuginfo-0:5.7.19-6.el6.x86_64",
            "6Workstation-RHSCL-2.4:rh-mysql57-mysql-devel-0:5.7.19-6.el6.x86_64",
            "6Workstation-RHSCL-2.4:rh-mysql57-mysql-errmsg-0:5.7.19-6.el6.x86_64",
            "6Workstation-RHSCL-2.4:rh-mysql57-mysql-server-0:5.7.19-6.el6.x86_64",
            "6Workstation-RHSCL-2.4:rh-mysql57-mysql-test-0:5.7.19-6.el6.x86_64",
            "7Server-RHSCL-2.4-7.3.Z:rh-mysql57-mysql-0:5.7.19-6.el7.src",
            "7Server-RHSCL-2.4-7.3.Z:rh-mysql57-mysql-0:5.7.19-6.el7.x86_64",
            "7Server-RHSCL-2.4-7.3.Z:rh-mysql57-mysql-common-0:5.7.19-6.el7.x86_64",
            "7Server-RHSCL-2.4-7.3.Z:rh-mysql57-mysql-config-0:5.7.19-6.el7.x86_64",
            "7Server-RHSCL-2.4-7.3.Z:rh-mysql57-mysql-debuginfo-0:5.7.19-6.el7.x86_64",
            "7Server-RHSCL-2.4-7.3.Z:rh-mysql57-mysql-devel-0:5.7.19-6.el7.x86_64",
            "7Server-RHSCL-2.4-7.3.Z:rh-mysql57-mysql-errmsg-0:5.7.19-6.el7.x86_64",
            "7Server-RHSCL-2.4-7.3.Z:rh-mysql57-mysql-server-0:5.7.19-6.el7.x86_64",
            "7Server-RHSCL-2.4-7.3.Z:rh-mysql57-mysql-test-0:5.7.19-6.el7.x86_64",
            "7Server-RHSCL-2.4:rh-mysql57-mysql-0:5.7.19-6.el7.src",
            "7Server-RHSCL-2.4:rh-mysql57-mysql-0:5.7.19-6.el7.x86_64",
            "7Server-RHSCL-2.4:rh-mysql57-mysql-common-0:5.7.19-6.el7.x86_64",
            "7Server-RHSCL-2.4:rh-mysql57-mysql-config-0:5.7.19-6.el7.x86_64",
            "7Server-RHSCL-2.4:rh-mysql57-mysql-debuginfo-0:5.7.19-6.el7.x86_64",
            "7Server-RHSCL-2.4:rh-mysql57-mysql-devel-0:5.7.19-6.el7.x86_64",
            "7Server-RHSCL-2.4:rh-mysql57-mysql-errmsg-0:5.7.19-6.el7.x86_64",
            "7Server-RHSCL-2.4:rh-mysql57-mysql-server-0:5.7.19-6.el7.x86_64",
            "7Server-RHSCL-2.4:rh-mysql57-mysql-test-0:5.7.19-6.el7.x86_64",
            "7Workstation-RHSCL-2.4:rh-mysql57-mysql-0:5.7.19-6.el7.src",
            "7Workstation-RHSCL-2.4:rh-mysql57-mysql-0:5.7.19-6.el7.x86_64",
            "7Workstation-RHSCL-2.4:rh-mysql57-mysql-common-0:5.7.19-6.el7.x86_64",
            "7Workstation-RHSCL-2.4:rh-mysql57-mysql-config-0:5.7.19-6.el7.x86_64",
            "7Workstation-RHSCL-2.4:rh-mysql57-mysql-debuginfo-0:5.7.19-6.el7.x86_64",
            "7Workstation-RHSCL-2.4:rh-mysql57-mysql-devel-0:5.7.19-6.el7.x86_64",
            "7Workstation-RHSCL-2.4:rh-mysql57-mysql-errmsg-0:5.7.19-6.el7.x86_64",
            "7Workstation-RHSCL-2.4:rh-mysql57-mysql-server-0:5.7.19-6.el7.x86_64",
            "7Workstation-RHSCL-2.4:rh-mysql57-mysql-test-0:5.7.19-6.el7.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Moderate"
        }
      ],
      "title": "mysql: Server: DDL unspecified vulnerability (CPU Apr 2017)"
    },
    {
      "cve": "CVE-2017-3465",
      "discovery_date": "2017-04-19T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "1443380"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Security: Privileges). Supported versions that are affected are 5.7.17 and earlier. Easily \"exploitable\" vulnerability allows low privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of MySQL Server accessible data. CVSS 3.0 Base Score 4.3 (Integrity impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N).",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "mysql: Server: Security: Privileges unspecified vulnerability (CPU Apr 2017)",
          "title": "Vulnerability summary"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "6Server-RHSCL-2.4-6.7.Z:rh-mysql57-mysql-0:5.7.19-6.el6.src",
          "6Server-RHSCL-2.4-6.7.Z:rh-mysql57-mysql-0:5.7.19-6.el6.x86_64",
          "6Server-RHSCL-2.4-6.7.Z:rh-mysql57-mysql-common-0:5.7.19-6.el6.x86_64",
          "6Server-RHSCL-2.4-6.7.Z:rh-mysql57-mysql-config-0:5.7.19-6.el6.x86_64",
          "6Server-RHSCL-2.4-6.7.Z:rh-mysql57-mysql-debuginfo-0:5.7.19-6.el6.x86_64",
          "6Server-RHSCL-2.4-6.7.Z:rh-mysql57-mysql-devel-0:5.7.19-6.el6.x86_64",
          "6Server-RHSCL-2.4-6.7.Z:rh-mysql57-mysql-errmsg-0:5.7.19-6.el6.x86_64",
          "6Server-RHSCL-2.4-6.7.Z:rh-mysql57-mysql-server-0:5.7.19-6.el6.x86_64",
          "6Server-RHSCL-2.4-6.7.Z:rh-mysql57-mysql-test-0:5.7.19-6.el6.x86_64",
          "6Server-RHSCL-2.4:rh-mysql57-mysql-0:5.7.19-6.el6.src",
          "6Server-RHSCL-2.4:rh-mysql57-mysql-0:5.7.19-6.el6.x86_64",
          "6Server-RHSCL-2.4:rh-mysql57-mysql-common-0:5.7.19-6.el6.x86_64",
          "6Server-RHSCL-2.4:rh-mysql57-mysql-config-0:5.7.19-6.el6.x86_64",
          "6Server-RHSCL-2.4:rh-mysql57-mysql-debuginfo-0:5.7.19-6.el6.x86_64",
          "6Server-RHSCL-2.4:rh-mysql57-mysql-devel-0:5.7.19-6.el6.x86_64",
          "6Server-RHSCL-2.4:rh-mysql57-mysql-errmsg-0:5.7.19-6.el6.x86_64",
          "6Server-RHSCL-2.4:rh-mysql57-mysql-server-0:5.7.19-6.el6.x86_64",
          "6Server-RHSCL-2.4:rh-mysql57-mysql-test-0:5.7.19-6.el6.x86_64",
          "6Workstation-RHSCL-2.4:rh-mysql57-mysql-0:5.7.19-6.el6.src",
          "6Workstation-RHSCL-2.4:rh-mysql57-mysql-0:5.7.19-6.el6.x86_64",
          "6Workstation-RHSCL-2.4:rh-mysql57-mysql-common-0:5.7.19-6.el6.x86_64",
          "6Workstation-RHSCL-2.4:rh-mysql57-mysql-config-0:5.7.19-6.el6.x86_64",
          "6Workstation-RHSCL-2.4:rh-mysql57-mysql-debuginfo-0:5.7.19-6.el6.x86_64",
          "6Workstation-RHSCL-2.4:rh-mysql57-mysql-devel-0:5.7.19-6.el6.x86_64",
          "6Workstation-RHSCL-2.4:rh-mysql57-mysql-errmsg-0:5.7.19-6.el6.x86_64",
          "6Workstation-RHSCL-2.4:rh-mysql57-mysql-server-0:5.7.19-6.el6.x86_64",
          "6Workstation-RHSCL-2.4:rh-mysql57-mysql-test-0:5.7.19-6.el6.x86_64",
          "7Server-RHSCL-2.4-7.3.Z:rh-mysql57-mysql-0:5.7.19-6.el7.src",
          "7Server-RHSCL-2.4-7.3.Z:rh-mysql57-mysql-0:5.7.19-6.el7.x86_64",
          "7Server-RHSCL-2.4-7.3.Z:rh-mysql57-mysql-common-0:5.7.19-6.el7.x86_64",
          "7Server-RHSCL-2.4-7.3.Z:rh-mysql57-mysql-config-0:5.7.19-6.el7.x86_64",
          "7Server-RHSCL-2.4-7.3.Z:rh-mysql57-mysql-debuginfo-0:5.7.19-6.el7.x86_64",
          "7Server-RHSCL-2.4-7.3.Z:rh-mysql57-mysql-devel-0:5.7.19-6.el7.x86_64",
          "7Server-RHSCL-2.4-7.3.Z:rh-mysql57-mysql-errmsg-0:5.7.19-6.el7.x86_64",
          "7Server-RHSCL-2.4-7.3.Z:rh-mysql57-mysql-server-0:5.7.19-6.el7.x86_64",
          "7Server-RHSCL-2.4-7.3.Z:rh-mysql57-mysql-test-0:5.7.19-6.el7.x86_64",
          "7Server-RHSCL-2.4:rh-mysql57-mysql-0:5.7.19-6.el7.src",
          "7Server-RHSCL-2.4:rh-mysql57-mysql-0:5.7.19-6.el7.x86_64",
          "7Server-RHSCL-2.4:rh-mysql57-mysql-common-0:5.7.19-6.el7.x86_64",
          "7Server-RHSCL-2.4:rh-mysql57-mysql-config-0:5.7.19-6.el7.x86_64",
          "7Server-RHSCL-2.4:rh-mysql57-mysql-debuginfo-0:5.7.19-6.el7.x86_64",
          "7Server-RHSCL-2.4:rh-mysql57-mysql-devel-0:5.7.19-6.el7.x86_64",
          "7Server-RHSCL-2.4:rh-mysql57-mysql-errmsg-0:5.7.19-6.el7.x86_64",
          "7Server-RHSCL-2.4:rh-mysql57-mysql-server-0:5.7.19-6.el7.x86_64",
          "7Server-RHSCL-2.4:rh-mysql57-mysql-test-0:5.7.19-6.el7.x86_64",
          "7Workstation-RHSCL-2.4:rh-mysql57-mysql-0:5.7.19-6.el7.src",
          "7Workstation-RHSCL-2.4:rh-mysql57-mysql-0:5.7.19-6.el7.x86_64",
          "7Workstation-RHSCL-2.4:rh-mysql57-mysql-common-0:5.7.19-6.el7.x86_64",
          "7Workstation-RHSCL-2.4:rh-mysql57-mysql-config-0:5.7.19-6.el7.x86_64",
          "7Workstation-RHSCL-2.4:rh-mysql57-mysql-debuginfo-0:5.7.19-6.el7.x86_64",
          "7Workstation-RHSCL-2.4:rh-mysql57-mysql-devel-0:5.7.19-6.el7.x86_64",
          "7Workstation-RHSCL-2.4:rh-mysql57-mysql-errmsg-0:5.7.19-6.el7.x86_64",
          "7Workstation-RHSCL-2.4:rh-mysql57-mysql-server-0:5.7.19-6.el7.x86_64",
          "7Workstation-RHSCL-2.4:rh-mysql57-mysql-test-0:5.7.19-6.el7.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2017-3465"
        },
        {
          "category": "external",
          "summary": "RHBZ#1443380",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1443380"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2017-3465",
          "url": "https://www.cve.org/CVERecord?id=CVE-2017-3465"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2017-3465",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2017-3465"
        },
        {
          "category": "external",
          "summary": "http://www.oracle.com/technetwork/security-advisory/cpuapr2017-3236618.html#AppendixMSQL",
          "url": "http://www.oracle.com/technetwork/security-advisory/cpuapr2017-3236618.html#AppendixMSQL"
        }
      ],
      "release_date": "2017-04-19T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2017-10-12T07:53:15+00:00",
          "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAfter installing this update, the MySQL server daemon (mysqld) will be restarted automatically.",
          "product_ids": [
            "6Server-RHSCL-2.4-6.7.Z:rh-mysql57-mysql-0:5.7.19-6.el6.src",
            "6Server-RHSCL-2.4-6.7.Z:rh-mysql57-mysql-0:5.7.19-6.el6.x86_64",
            "6Server-RHSCL-2.4-6.7.Z:rh-mysql57-mysql-common-0:5.7.19-6.el6.x86_64",
            "6Server-RHSCL-2.4-6.7.Z:rh-mysql57-mysql-config-0:5.7.19-6.el6.x86_64",
            "6Server-RHSCL-2.4-6.7.Z:rh-mysql57-mysql-debuginfo-0:5.7.19-6.el6.x86_64",
            "6Server-RHSCL-2.4-6.7.Z:rh-mysql57-mysql-devel-0:5.7.19-6.el6.x86_64",
            "6Server-RHSCL-2.4-6.7.Z:rh-mysql57-mysql-errmsg-0:5.7.19-6.el6.x86_64",
            "6Server-RHSCL-2.4-6.7.Z:rh-mysql57-mysql-server-0:5.7.19-6.el6.x86_64",
            "6Server-RHSCL-2.4-6.7.Z:rh-mysql57-mysql-test-0:5.7.19-6.el6.x86_64",
            "6Server-RHSCL-2.4:rh-mysql57-mysql-0:5.7.19-6.el6.src",
            "6Server-RHSCL-2.4:rh-mysql57-mysql-0:5.7.19-6.el6.x86_64",
            "6Server-RHSCL-2.4:rh-mysql57-mysql-common-0:5.7.19-6.el6.x86_64",
            "6Server-RHSCL-2.4:rh-mysql57-mysql-config-0:5.7.19-6.el6.x86_64",
            "6Server-RHSCL-2.4:rh-mysql57-mysql-debuginfo-0:5.7.19-6.el6.x86_64",
            "6Server-RHSCL-2.4:rh-mysql57-mysql-devel-0:5.7.19-6.el6.x86_64",
            "6Server-RHSCL-2.4:rh-mysql57-mysql-errmsg-0:5.7.19-6.el6.x86_64",
            "6Server-RHSCL-2.4:rh-mysql57-mysql-server-0:5.7.19-6.el6.x86_64",
            "6Server-RHSCL-2.4:rh-mysql57-mysql-test-0:5.7.19-6.el6.x86_64",
            "6Workstation-RHSCL-2.4:rh-mysql57-mysql-0:5.7.19-6.el6.src",
            "6Workstation-RHSCL-2.4:rh-mysql57-mysql-0:5.7.19-6.el6.x86_64",
            "6Workstation-RHSCL-2.4:rh-mysql57-mysql-common-0:5.7.19-6.el6.x86_64",
            "6Workstation-RHSCL-2.4:rh-mysql57-mysql-config-0:5.7.19-6.el6.x86_64",
            "6Workstation-RHSCL-2.4:rh-mysql57-mysql-debuginfo-0:5.7.19-6.el6.x86_64",
            "6Workstation-RHSCL-2.4:rh-mysql57-mysql-devel-0:5.7.19-6.el6.x86_64",
            "6Workstation-RHSCL-2.4:rh-mysql57-mysql-errmsg-0:5.7.19-6.el6.x86_64",
            "6Workstation-RHSCL-2.4:rh-mysql57-mysql-server-0:5.7.19-6.el6.x86_64",
            "6Workstation-RHSCL-2.4:rh-mysql57-mysql-test-0:5.7.19-6.el6.x86_64",
            "7Server-RHSCL-2.4-7.3.Z:rh-mysql57-mysql-0:5.7.19-6.el7.src",
            "7Server-RHSCL-2.4-7.3.Z:rh-mysql57-mysql-0:5.7.19-6.el7.x86_64",
            "7Server-RHSCL-2.4-7.3.Z:rh-mysql57-mysql-common-0:5.7.19-6.el7.x86_64",
            "7Server-RHSCL-2.4-7.3.Z:rh-mysql57-mysql-config-0:5.7.19-6.el7.x86_64",
            "7Server-RHSCL-2.4-7.3.Z:rh-mysql57-mysql-debuginfo-0:5.7.19-6.el7.x86_64",
            "7Server-RHSCL-2.4-7.3.Z:rh-mysql57-mysql-devel-0:5.7.19-6.el7.x86_64",
            "7Server-RHSCL-2.4-7.3.Z:rh-mysql57-mysql-errmsg-0:5.7.19-6.el7.x86_64",
            "7Server-RHSCL-2.4-7.3.Z:rh-mysql57-mysql-server-0:5.7.19-6.el7.x86_64",
            "7Server-RHSCL-2.4-7.3.Z:rh-mysql57-mysql-test-0:5.7.19-6.el7.x86_64",
            "7Server-RHSCL-2.4:rh-mysql57-mysql-0:5.7.19-6.el7.src",
            "7Server-RHSCL-2.4:rh-mysql57-mysql-0:5.7.19-6.el7.x86_64",
            "7Server-RHSCL-2.4:rh-mysql57-mysql-common-0:5.7.19-6.el7.x86_64",
            "7Server-RHSCL-2.4:rh-mysql57-mysql-config-0:5.7.19-6.el7.x86_64",
            "7Server-RHSCL-2.4:rh-mysql57-mysql-debuginfo-0:5.7.19-6.el7.x86_64",
            "7Server-RHSCL-2.4:rh-mysql57-mysql-devel-0:5.7.19-6.el7.x86_64",
            "7Server-RHSCL-2.4:rh-mysql57-mysql-errmsg-0:5.7.19-6.el7.x86_64",
            "7Server-RHSCL-2.4:rh-mysql57-mysql-server-0:5.7.19-6.el7.x86_64",
            "7Server-RHSCL-2.4:rh-mysql57-mysql-test-0:5.7.19-6.el7.x86_64",
            "7Workstation-RHSCL-2.4:rh-mysql57-mysql-0:5.7.19-6.el7.src",
            "7Workstation-RHSCL-2.4:rh-mysql57-mysql-0:5.7.19-6.el7.x86_64",
            "7Workstation-RHSCL-2.4:rh-mysql57-mysql-common-0:5.7.19-6.el7.x86_64",
            "7Workstation-RHSCL-2.4:rh-mysql57-mysql-config-0:5.7.19-6.el7.x86_64",
            "7Workstation-RHSCL-2.4:rh-mysql57-mysql-debuginfo-0:5.7.19-6.el7.x86_64",
            "7Workstation-RHSCL-2.4:rh-mysql57-mysql-devel-0:5.7.19-6.el7.x86_64",
            "7Workstation-RHSCL-2.4:rh-mysql57-mysql-errmsg-0:5.7.19-6.el7.x86_64",
            "7Workstation-RHSCL-2.4:rh-mysql57-mysql-server-0:5.7.19-6.el7.x86_64",
            "7Workstation-RHSCL-2.4:rh-mysql57-mysql-test-0:5.7.19-6.el7.x86_64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2017:2886"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "NONE",
            "baseScore": 4.3,
            "baseSeverity": "MEDIUM",
            "confidentialityImpact": "NONE",
            "integrityImpact": "LOW",
            "privilegesRequired": "LOW",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N",
            "version": "3.0"
          },
          "products": [
            "6Server-RHSCL-2.4-6.7.Z:rh-mysql57-mysql-0:5.7.19-6.el6.src",
            "6Server-RHSCL-2.4-6.7.Z:rh-mysql57-mysql-0:5.7.19-6.el6.x86_64",
            "6Server-RHSCL-2.4-6.7.Z:rh-mysql57-mysql-common-0:5.7.19-6.el6.x86_64",
            "6Server-RHSCL-2.4-6.7.Z:rh-mysql57-mysql-config-0:5.7.19-6.el6.x86_64",
            "6Server-RHSCL-2.4-6.7.Z:rh-mysql57-mysql-debuginfo-0:5.7.19-6.el6.x86_64",
            "6Server-RHSCL-2.4-6.7.Z:rh-mysql57-mysql-devel-0:5.7.19-6.el6.x86_64",
            "6Server-RHSCL-2.4-6.7.Z:rh-mysql57-mysql-errmsg-0:5.7.19-6.el6.x86_64",
            "6Server-RHSCL-2.4-6.7.Z:rh-mysql57-mysql-server-0:5.7.19-6.el6.x86_64",
            "6Server-RHSCL-2.4-6.7.Z:rh-mysql57-mysql-test-0:5.7.19-6.el6.x86_64",
            "6Server-RHSCL-2.4:rh-mysql57-mysql-0:5.7.19-6.el6.src",
            "6Server-RHSCL-2.4:rh-mysql57-mysql-0:5.7.19-6.el6.x86_64",
            "6Server-RHSCL-2.4:rh-mysql57-mysql-common-0:5.7.19-6.el6.x86_64",
            "6Server-RHSCL-2.4:rh-mysql57-mysql-config-0:5.7.19-6.el6.x86_64",
            "6Server-RHSCL-2.4:rh-mysql57-mysql-debuginfo-0:5.7.19-6.el6.x86_64",
            "6Server-RHSCL-2.4:rh-mysql57-mysql-devel-0:5.7.19-6.el6.x86_64",
            "6Server-RHSCL-2.4:rh-mysql57-mysql-errmsg-0:5.7.19-6.el6.x86_64",
            "6Server-RHSCL-2.4:rh-mysql57-mysql-server-0:5.7.19-6.el6.x86_64",
            "6Server-RHSCL-2.4:rh-mysql57-mysql-test-0:5.7.19-6.el6.x86_64",
            "6Workstation-RHSCL-2.4:rh-mysql57-mysql-0:5.7.19-6.el6.src",
            "6Workstation-RHSCL-2.4:rh-mysql57-mysql-0:5.7.19-6.el6.x86_64",
            "6Workstation-RHSCL-2.4:rh-mysql57-mysql-common-0:5.7.19-6.el6.x86_64",
            "6Workstation-RHSCL-2.4:rh-mysql57-mysql-config-0:5.7.19-6.el6.x86_64",
            "6Workstation-RHSCL-2.4:rh-mysql57-mysql-debuginfo-0:5.7.19-6.el6.x86_64",
            "6Workstation-RHSCL-2.4:rh-mysql57-mysql-devel-0:5.7.19-6.el6.x86_64",
            "6Workstation-RHSCL-2.4:rh-mysql57-mysql-errmsg-0:5.7.19-6.el6.x86_64",
            "6Workstation-RHSCL-2.4:rh-mysql57-mysql-server-0:5.7.19-6.el6.x86_64",
            "6Workstation-RHSCL-2.4:rh-mysql57-mysql-test-0:5.7.19-6.el6.x86_64",
            "7Server-RHSCL-2.4-7.3.Z:rh-mysql57-mysql-0:5.7.19-6.el7.src",
            "7Server-RHSCL-2.4-7.3.Z:rh-mysql57-mysql-0:5.7.19-6.el7.x86_64",
            "7Server-RHSCL-2.4-7.3.Z:rh-mysql57-mysql-common-0:5.7.19-6.el7.x86_64",
            "7Server-RHSCL-2.4-7.3.Z:rh-mysql57-mysql-config-0:5.7.19-6.el7.x86_64",
            "7Server-RHSCL-2.4-7.3.Z:rh-mysql57-mysql-debuginfo-0:5.7.19-6.el7.x86_64",
            "7Server-RHSCL-2.4-7.3.Z:rh-mysql57-mysql-devel-0:5.7.19-6.el7.x86_64",
            "7Server-RHSCL-2.4-7.3.Z:rh-mysql57-mysql-errmsg-0:5.7.19-6.el7.x86_64",
            "7Server-RHSCL-2.4-7.3.Z:rh-mysql57-mysql-server-0:5.7.19-6.el7.x86_64",
            "7Server-RHSCL-2.4-7.3.Z:rh-mysql57-mysql-test-0:5.7.19-6.el7.x86_64",
            "7Server-RHSCL-2.4:rh-mysql57-mysql-0:5.7.19-6.el7.src",
            "7Server-RHSCL-2.4:rh-mysql57-mysql-0:5.7.19-6.el7.x86_64",
            "7Server-RHSCL-2.4:rh-mysql57-mysql-common-0:5.7.19-6.el7.x86_64",
            "7Server-RHSCL-2.4:rh-mysql57-mysql-config-0:5.7.19-6.el7.x86_64",
            "7Server-RHSCL-2.4:rh-mysql57-mysql-debuginfo-0:5.7.19-6.el7.x86_64",
            "7Server-RHSCL-2.4:rh-mysql57-mysql-devel-0:5.7.19-6.el7.x86_64",
            "7Server-RHSCL-2.4:rh-mysql57-mysql-errmsg-0:5.7.19-6.el7.x86_64",
            "7Server-RHSCL-2.4:rh-mysql57-mysql-server-0:5.7.19-6.el7.x86_64",
            "7Server-RHSCL-2.4:rh-mysql57-mysql-test-0:5.7.19-6.el7.x86_64",
            "7Workstation-RHSCL-2.4:rh-mysql57-mysql-0:5.7.19-6.el7.src",
            "7Workstation-RHSCL-2.4:rh-mysql57-mysql-0:5.7.19-6.el7.x86_64",
            "7Workstation-RHSCL-2.4:rh-mysql57-mysql-common-0:5.7.19-6.el7.x86_64",
            "7Workstation-RHSCL-2.4:rh-mysql57-mysql-config-0:5.7.19-6.el7.x86_64",
            "7Workstation-RHSCL-2.4:rh-mysql57-mysql-debuginfo-0:5.7.19-6.el7.x86_64",
            "7Workstation-RHSCL-2.4:rh-mysql57-mysql-devel-0:5.7.19-6.el7.x86_64",
            "7Workstation-RHSCL-2.4:rh-mysql57-mysql-errmsg-0:5.7.19-6.el7.x86_64",
            "7Workstation-RHSCL-2.4:rh-mysql57-mysql-server-0:5.7.19-6.el7.x86_64",
            "7Workstation-RHSCL-2.4:rh-mysql57-mysql-test-0:5.7.19-6.el7.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Moderate"
        }
      ],
      "title": "mysql: Server: Security: Privileges unspecified vulnerability (CPU Apr 2017)"
    },
    {
      "cve": "CVE-2017-3467",
      "discovery_date": "2017-04-19T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "1443382"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: C API). Supported versions that are affected are 5.7.17 and earlier. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized read access to a subset of MySQL Server accessible data. CVSS 3.0 Base Score 3.7 (Confidentiality impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N).",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "mysql: Server: C API unspecified vulnerability (CPU Apr 2017)",
          "title": "Vulnerability summary"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "6Server-RHSCL-2.4-6.7.Z:rh-mysql57-mysql-0:5.7.19-6.el6.src",
          "6Server-RHSCL-2.4-6.7.Z:rh-mysql57-mysql-0:5.7.19-6.el6.x86_64",
          "6Server-RHSCL-2.4-6.7.Z:rh-mysql57-mysql-common-0:5.7.19-6.el6.x86_64",
          "6Server-RHSCL-2.4-6.7.Z:rh-mysql57-mysql-config-0:5.7.19-6.el6.x86_64",
          "6Server-RHSCL-2.4-6.7.Z:rh-mysql57-mysql-debuginfo-0:5.7.19-6.el6.x86_64",
          "6Server-RHSCL-2.4-6.7.Z:rh-mysql57-mysql-devel-0:5.7.19-6.el6.x86_64",
          "6Server-RHSCL-2.4-6.7.Z:rh-mysql57-mysql-errmsg-0:5.7.19-6.el6.x86_64",
          "6Server-RHSCL-2.4-6.7.Z:rh-mysql57-mysql-server-0:5.7.19-6.el6.x86_64",
          "6Server-RHSCL-2.4-6.7.Z:rh-mysql57-mysql-test-0:5.7.19-6.el6.x86_64",
          "6Server-RHSCL-2.4:rh-mysql57-mysql-0:5.7.19-6.el6.src",
          "6Server-RHSCL-2.4:rh-mysql57-mysql-0:5.7.19-6.el6.x86_64",
          "6Server-RHSCL-2.4:rh-mysql57-mysql-common-0:5.7.19-6.el6.x86_64",
          "6Server-RHSCL-2.4:rh-mysql57-mysql-config-0:5.7.19-6.el6.x86_64",
          "6Server-RHSCL-2.4:rh-mysql57-mysql-debuginfo-0:5.7.19-6.el6.x86_64",
          "6Server-RHSCL-2.4:rh-mysql57-mysql-devel-0:5.7.19-6.el6.x86_64",
          "6Server-RHSCL-2.4:rh-mysql57-mysql-errmsg-0:5.7.19-6.el6.x86_64",
          "6Server-RHSCL-2.4:rh-mysql57-mysql-server-0:5.7.19-6.el6.x86_64",
          "6Server-RHSCL-2.4:rh-mysql57-mysql-test-0:5.7.19-6.el6.x86_64",
          "6Workstation-RHSCL-2.4:rh-mysql57-mysql-0:5.7.19-6.el6.src",
          "6Workstation-RHSCL-2.4:rh-mysql57-mysql-0:5.7.19-6.el6.x86_64",
          "6Workstation-RHSCL-2.4:rh-mysql57-mysql-common-0:5.7.19-6.el6.x86_64",
          "6Workstation-RHSCL-2.4:rh-mysql57-mysql-config-0:5.7.19-6.el6.x86_64",
          "6Workstation-RHSCL-2.4:rh-mysql57-mysql-debuginfo-0:5.7.19-6.el6.x86_64",
          "6Workstation-RHSCL-2.4:rh-mysql57-mysql-devel-0:5.7.19-6.el6.x86_64",
          "6Workstation-RHSCL-2.4:rh-mysql57-mysql-errmsg-0:5.7.19-6.el6.x86_64",
          "6Workstation-RHSCL-2.4:rh-mysql57-mysql-server-0:5.7.19-6.el6.x86_64",
          "6Workstation-RHSCL-2.4:rh-mysql57-mysql-test-0:5.7.19-6.el6.x86_64",
          "7Server-RHSCL-2.4-7.3.Z:rh-mysql57-mysql-0:5.7.19-6.el7.src",
          "7Server-RHSCL-2.4-7.3.Z:rh-mysql57-mysql-0:5.7.19-6.el7.x86_64",
          "7Server-RHSCL-2.4-7.3.Z:rh-mysql57-mysql-common-0:5.7.19-6.el7.x86_64",
          "7Server-RHSCL-2.4-7.3.Z:rh-mysql57-mysql-config-0:5.7.19-6.el7.x86_64",
          "7Server-RHSCL-2.4-7.3.Z:rh-mysql57-mysql-debuginfo-0:5.7.19-6.el7.x86_64",
          "7Server-RHSCL-2.4-7.3.Z:rh-mysql57-mysql-devel-0:5.7.19-6.el7.x86_64",
          "7Server-RHSCL-2.4-7.3.Z:rh-mysql57-mysql-errmsg-0:5.7.19-6.el7.x86_64",
          "7Server-RHSCL-2.4-7.3.Z:rh-mysql57-mysql-server-0:5.7.19-6.el7.x86_64",
          "7Server-RHSCL-2.4-7.3.Z:rh-mysql57-mysql-test-0:5.7.19-6.el7.x86_64",
          "7Server-RHSCL-2.4:rh-mysql57-mysql-0:5.7.19-6.el7.src",
          "7Server-RHSCL-2.4:rh-mysql57-mysql-0:5.7.19-6.el7.x86_64",
          "7Server-RHSCL-2.4:rh-mysql57-mysql-common-0:5.7.19-6.el7.x86_64",
          "7Server-RHSCL-2.4:rh-mysql57-mysql-config-0:5.7.19-6.el7.x86_64",
          "7Server-RHSCL-2.4:rh-mysql57-mysql-debuginfo-0:5.7.19-6.el7.x86_64",
          "7Server-RHSCL-2.4:rh-mysql57-mysql-devel-0:5.7.19-6.el7.x86_64",
          "7Server-RHSCL-2.4:rh-mysql57-mysql-errmsg-0:5.7.19-6.el7.x86_64",
          "7Server-RHSCL-2.4:rh-mysql57-mysql-server-0:5.7.19-6.el7.x86_64",
          "7Server-RHSCL-2.4:rh-mysql57-mysql-test-0:5.7.19-6.el7.x86_64",
          "7Workstation-RHSCL-2.4:rh-mysql57-mysql-0:5.7.19-6.el7.src",
          "7Workstation-RHSCL-2.4:rh-mysql57-mysql-0:5.7.19-6.el7.x86_64",
          "7Workstation-RHSCL-2.4:rh-mysql57-mysql-common-0:5.7.19-6.el7.x86_64",
          "7Workstation-RHSCL-2.4:rh-mysql57-mysql-config-0:5.7.19-6.el7.x86_64",
          "7Workstation-RHSCL-2.4:rh-mysql57-mysql-debuginfo-0:5.7.19-6.el7.x86_64",
          "7Workstation-RHSCL-2.4:rh-mysql57-mysql-devel-0:5.7.19-6.el7.x86_64",
          "7Workstation-RHSCL-2.4:rh-mysql57-mysql-errmsg-0:5.7.19-6.el7.x86_64",
          "7Workstation-RHSCL-2.4:rh-mysql57-mysql-server-0:5.7.19-6.el7.x86_64",
          "7Workstation-RHSCL-2.4:rh-mysql57-mysql-test-0:5.7.19-6.el7.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2017-3467"
        },
        {
          "category": "external",
          "summary": "RHBZ#1443382",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1443382"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2017-3467",
          "url": "https://www.cve.org/CVERecord?id=CVE-2017-3467"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2017-3467",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2017-3467"
        },
        {
          "category": "external",
          "summary": "http://www.oracle.com/technetwork/security-advisory/cpuapr2017-3236618.html#AppendixMSQL",
          "url": "http://www.oracle.com/technetwork/security-advisory/cpuapr2017-3236618.html#AppendixMSQL"
        }
      ],
      "release_date": "2017-04-19T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2017-10-12T07:53:15+00:00",
          "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAfter installing this update, the MySQL server daemon (mysqld) will be restarted automatically.",
          "product_ids": [
            "6Server-RHSCL-2.4-6.7.Z:rh-mysql57-mysql-0:5.7.19-6.el6.src",
            "6Server-RHSCL-2.4-6.7.Z:rh-mysql57-mysql-0:5.7.19-6.el6.x86_64",
            "6Server-RHSCL-2.4-6.7.Z:rh-mysql57-mysql-common-0:5.7.19-6.el6.x86_64",
            "6Server-RHSCL-2.4-6.7.Z:rh-mysql57-mysql-config-0:5.7.19-6.el6.x86_64",
            "6Server-RHSCL-2.4-6.7.Z:rh-mysql57-mysql-debuginfo-0:5.7.19-6.el6.x86_64",
            "6Server-RHSCL-2.4-6.7.Z:rh-mysql57-mysql-devel-0:5.7.19-6.el6.x86_64",
            "6Server-RHSCL-2.4-6.7.Z:rh-mysql57-mysql-errmsg-0:5.7.19-6.el6.x86_64",
            "6Server-RHSCL-2.4-6.7.Z:rh-mysql57-mysql-server-0:5.7.19-6.el6.x86_64",
            "6Server-RHSCL-2.4-6.7.Z:rh-mysql57-mysql-test-0:5.7.19-6.el6.x86_64",
            "6Server-RHSCL-2.4:rh-mysql57-mysql-0:5.7.19-6.el6.src",
            "6Server-RHSCL-2.4:rh-mysql57-mysql-0:5.7.19-6.el6.x86_64",
            "6Server-RHSCL-2.4:rh-mysql57-mysql-common-0:5.7.19-6.el6.x86_64",
            "6Server-RHSCL-2.4:rh-mysql57-mysql-config-0:5.7.19-6.el6.x86_64",
            "6Server-RHSCL-2.4:rh-mysql57-mysql-debuginfo-0:5.7.19-6.el6.x86_64",
            "6Server-RHSCL-2.4:rh-mysql57-mysql-devel-0:5.7.19-6.el6.x86_64",
            "6Server-RHSCL-2.4:rh-mysql57-mysql-errmsg-0:5.7.19-6.el6.x86_64",
            "6Server-RHSCL-2.4:rh-mysql57-mysql-server-0:5.7.19-6.el6.x86_64",
            "6Server-RHSCL-2.4:rh-mysql57-mysql-test-0:5.7.19-6.el6.x86_64",
            "6Workstation-RHSCL-2.4:rh-mysql57-mysql-0:5.7.19-6.el6.src",
            "6Workstation-RHSCL-2.4:rh-mysql57-mysql-0:5.7.19-6.el6.x86_64",
            "6Workstation-RHSCL-2.4:rh-mysql57-mysql-common-0:5.7.19-6.el6.x86_64",
            "6Workstation-RHSCL-2.4:rh-mysql57-mysql-config-0:5.7.19-6.el6.x86_64",
            "6Workstation-RHSCL-2.4:rh-mysql57-mysql-debuginfo-0:5.7.19-6.el6.x86_64",
            "6Workstation-RHSCL-2.4:rh-mysql57-mysql-devel-0:5.7.19-6.el6.x86_64",
            "6Workstation-RHSCL-2.4:rh-mysql57-mysql-errmsg-0:5.7.19-6.el6.x86_64",
            "6Workstation-RHSCL-2.4:rh-mysql57-mysql-server-0:5.7.19-6.el6.x86_64",
            "6Workstation-RHSCL-2.4:rh-mysql57-mysql-test-0:5.7.19-6.el6.x86_64",
            "7Server-RHSCL-2.4-7.3.Z:rh-mysql57-mysql-0:5.7.19-6.el7.src",
            "7Server-RHSCL-2.4-7.3.Z:rh-mysql57-mysql-0:5.7.19-6.el7.x86_64",
            "7Server-RHSCL-2.4-7.3.Z:rh-mysql57-mysql-common-0:5.7.19-6.el7.x86_64",
            "7Server-RHSCL-2.4-7.3.Z:rh-mysql57-mysql-config-0:5.7.19-6.el7.x86_64",
            "7Server-RHSCL-2.4-7.3.Z:rh-mysql57-mysql-debuginfo-0:5.7.19-6.el7.x86_64",
            "7Server-RHSCL-2.4-7.3.Z:rh-mysql57-mysql-devel-0:5.7.19-6.el7.x86_64",
            "7Server-RHSCL-2.4-7.3.Z:rh-mysql57-mysql-errmsg-0:5.7.19-6.el7.x86_64",
            "7Server-RHSCL-2.4-7.3.Z:rh-mysql57-mysql-server-0:5.7.19-6.el7.x86_64",
            "7Server-RHSCL-2.4-7.3.Z:rh-mysql57-mysql-test-0:5.7.19-6.el7.x86_64",
            "7Server-RHSCL-2.4:rh-mysql57-mysql-0:5.7.19-6.el7.src",
            "7Server-RHSCL-2.4:rh-mysql57-mysql-0:5.7.19-6.el7.x86_64",
            "7Server-RHSCL-2.4:rh-mysql57-mysql-common-0:5.7.19-6.el7.x86_64",
            "7Server-RHSCL-2.4:rh-mysql57-mysql-config-0:5.7.19-6.el7.x86_64",
            "7Server-RHSCL-2.4:rh-mysql57-mysql-debuginfo-0:5.7.19-6.el7.x86_64",
            "7Server-RHSCL-2.4:rh-mysql57-mysql-devel-0:5.7.19-6.el7.x86_64",
            "7Server-RHSCL-2.4:rh-mysql57-mysql-errmsg-0:5.7.19-6.el7.x86_64",
            "7Server-RHSCL-2.4:rh-mysql57-mysql-server-0:5.7.19-6.el7.x86_64",
            "7Server-RHSCL-2.4:rh-mysql57-mysql-test-0:5.7.19-6.el7.x86_64",
            "7Workstation-RHSCL-2.4:rh-mysql57-mysql-0:5.7.19-6.el7.src",
            "7Workstation-RHSCL-2.4:rh-mysql57-mysql-0:5.7.19-6.el7.x86_64",
            "7Workstation-RHSCL-2.4:rh-mysql57-mysql-common-0:5.7.19-6.el7.x86_64",
            "7Workstation-RHSCL-2.4:rh-mysql57-mysql-config-0:5.7.19-6.el7.x86_64",
            "7Workstation-RHSCL-2.4:rh-mysql57-mysql-debuginfo-0:5.7.19-6.el7.x86_64",
            "7Workstation-RHSCL-2.4:rh-mysql57-mysql-devel-0:5.7.19-6.el7.x86_64",
            "7Workstation-RHSCL-2.4:rh-mysql57-mysql-errmsg-0:5.7.19-6.el7.x86_64",
            "7Workstation-RHSCL-2.4:rh-mysql57-mysql-server-0:5.7.19-6.el7.x86_64",
            "7Workstation-RHSCL-2.4:rh-mysql57-mysql-test-0:5.7.19-6.el7.x86_64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2017:2886"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "HIGH",
            "attackVector": "NETWORK",
            "availabilityImpact": "NONE",
            "baseScore": 3.7,
            "baseSeverity": "LOW",
            "confidentialityImpact": "LOW",
            "integrityImpact": "NONE",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N",
            "version": "3.0"
          },
          "products": [
            "6Server-RHSCL-2.4-6.7.Z:rh-mysql57-mysql-0:5.7.19-6.el6.src",
            "6Server-RHSCL-2.4-6.7.Z:rh-mysql57-mysql-0:5.7.19-6.el6.x86_64",
            "6Server-RHSCL-2.4-6.7.Z:rh-mysql57-mysql-common-0:5.7.19-6.el6.x86_64",
            "6Server-RHSCL-2.4-6.7.Z:rh-mysql57-mysql-config-0:5.7.19-6.el6.x86_64",
            "6Server-RHSCL-2.4-6.7.Z:rh-mysql57-mysql-debuginfo-0:5.7.19-6.el6.x86_64",
            "6Server-RHSCL-2.4-6.7.Z:rh-mysql57-mysql-devel-0:5.7.19-6.el6.x86_64",
            "6Server-RHSCL-2.4-6.7.Z:rh-mysql57-mysql-errmsg-0:5.7.19-6.el6.x86_64",
            "6Server-RHSCL-2.4-6.7.Z:rh-mysql57-mysql-server-0:5.7.19-6.el6.x86_64",
            "6Server-RHSCL-2.4-6.7.Z:rh-mysql57-mysql-test-0:5.7.19-6.el6.x86_64",
            "6Server-RHSCL-2.4:rh-mysql57-mysql-0:5.7.19-6.el6.src",
            "6Server-RHSCL-2.4:rh-mysql57-mysql-0:5.7.19-6.el6.x86_64",
            "6Server-RHSCL-2.4:rh-mysql57-mysql-common-0:5.7.19-6.el6.x86_64",
            "6Server-RHSCL-2.4:rh-mysql57-mysql-config-0:5.7.19-6.el6.x86_64",
            "6Server-RHSCL-2.4:rh-mysql57-mysql-debuginfo-0:5.7.19-6.el6.x86_64",
            "6Server-RHSCL-2.4:rh-mysql57-mysql-devel-0:5.7.19-6.el6.x86_64",
            "6Server-RHSCL-2.4:rh-mysql57-mysql-errmsg-0:5.7.19-6.el6.x86_64",
            "6Server-RHSCL-2.4:rh-mysql57-mysql-server-0:5.7.19-6.el6.x86_64",
            "6Server-RHSCL-2.4:rh-mysql57-mysql-test-0:5.7.19-6.el6.x86_64",
            "6Workstation-RHSCL-2.4:rh-mysql57-mysql-0:5.7.19-6.el6.src",
            "6Workstation-RHSCL-2.4:rh-mysql57-mysql-0:5.7.19-6.el6.x86_64",
            "6Workstation-RHSCL-2.4:rh-mysql57-mysql-common-0:5.7.19-6.el6.x86_64",
            "6Workstation-RHSCL-2.4:rh-mysql57-mysql-config-0:5.7.19-6.el6.x86_64",
            "6Workstation-RHSCL-2.4:rh-mysql57-mysql-debuginfo-0:5.7.19-6.el6.x86_64",
            "6Workstation-RHSCL-2.4:rh-mysql57-mysql-devel-0:5.7.19-6.el6.x86_64",
            "6Workstation-RHSCL-2.4:rh-mysql57-mysql-errmsg-0:5.7.19-6.el6.x86_64",
            "6Workstation-RHSCL-2.4:rh-mysql57-mysql-server-0:5.7.19-6.el6.x86_64",
            "6Workstation-RHSCL-2.4:rh-mysql57-mysql-test-0:5.7.19-6.el6.x86_64",
            "7Server-RHSCL-2.4-7.3.Z:rh-mysql57-mysql-0:5.7.19-6.el7.src",
            "7Server-RHSCL-2.4-7.3.Z:rh-mysql57-mysql-0:5.7.19-6.el7.x86_64",
            "7Server-RHSCL-2.4-7.3.Z:rh-mysql57-mysql-common-0:5.7.19-6.el7.x86_64",
            "7Server-RHSCL-2.4-7.3.Z:rh-mysql57-mysql-config-0:5.7.19-6.el7.x86_64",
            "7Server-RHSCL-2.4-7.3.Z:rh-mysql57-mysql-debuginfo-0:5.7.19-6.el7.x86_64",
            "7Server-RHSCL-2.4-7.3.Z:rh-mysql57-mysql-devel-0:5.7.19-6.el7.x86_64",
            "7Server-RHSCL-2.4-7.3.Z:rh-mysql57-mysql-errmsg-0:5.7.19-6.el7.x86_64",
            "7Server-RHSCL-2.4-7.3.Z:rh-mysql57-mysql-server-0:5.7.19-6.el7.x86_64",
            "7Server-RHSCL-2.4-7.3.Z:rh-mysql57-mysql-test-0:5.7.19-6.el7.x86_64",
            "7Server-RHSCL-2.4:rh-mysql57-mysql-0:5.7.19-6.el7.src",
            "7Server-RHSCL-2.4:rh-mysql57-mysql-0:5.7.19-6.el7.x86_64",
            "7Server-RHSCL-2.4:rh-mysql57-mysql-common-0:5.7.19-6.el7.x86_64",
            "7Server-RHSCL-2.4:rh-mysql57-mysql-config-0:5.7.19-6.el7.x86_64",
            "7Server-RHSCL-2.4:rh-mysql57-mysql-debuginfo-0:5.7.19-6.el7.x86_64",
            "7Server-RHSCL-2.4:rh-mysql57-mysql-devel-0:5.7.19-6.el7.x86_64",
            "7Server-RHSCL-2.4:rh-mysql57-mysql-errmsg-0:5.7.19-6.el7.x86_64",
            "7Server-RHSCL-2.4:rh-mysql57-mysql-server-0:5.7.19-6.el7.x86_64",
            "7Server-RHSCL-2.4:rh-mysql57-mysql-test-0:5.7.19-6.el7.x86_64",
            "7Workstation-RHSCL-2.4:rh-mysql57-mysql-0:5.7.19-6.el7.src",
            "7Workstation-RHSCL-2.4:rh-mysql57-mysql-0:5.7.19-6.el7.x86_64",
            "7Workstation-RHSCL-2.4:rh-mysql57-mysql-common-0:5.7.19-6.el7.x86_64",
            "7Workstation-RHSCL-2.4:rh-mysql57-mysql-config-0:5.7.19-6.el7.x86_64",
            "7Workstation-RHSCL-2.4:rh-mysql57-mysql-debuginfo-0:5.7.19-6.el7.x86_64",
            "7Workstation-RHSCL-2.4:rh-mysql57-mysql-devel-0:5.7.19-6.el7.x86_64",
            "7Workstation-RHSCL-2.4:rh-mysql57-mysql-errmsg-0:5.7.19-6.el7.x86_64",
            "7Workstation-RHSCL-2.4:rh-mysql57-mysql-server-0:5.7.19-6.el7.x86_64",
            "7Workstation-RHSCL-2.4:rh-mysql57-mysql-test-0:5.7.19-6.el7.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Low"
        }
      ],
      "title": "mysql: Server: C API unspecified vulnerability (CPU Apr 2017)"
    },
    {
      "cve": "CVE-2017-3468",
      "discovery_date": "2017-04-19T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "1443385"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Security: Encryption). Supported versions that are affected are 5.7.17 and earlier. Difficult to exploit vulnerability allows low privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of MySQL Server accessible data. CVSS 3.0 Base Score 3.1 (Integrity impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:H/PR:L/UI:N/S:U/C:N/I:L/A:N).",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "mysql: Server: Security: Encryption unspecified vulnerability (CPU Apr 2017)",
          "title": "Vulnerability summary"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "6Server-RHSCL-2.4-6.7.Z:rh-mysql57-mysql-0:5.7.19-6.el6.src",
          "6Server-RHSCL-2.4-6.7.Z:rh-mysql57-mysql-0:5.7.19-6.el6.x86_64",
          "6Server-RHSCL-2.4-6.7.Z:rh-mysql57-mysql-common-0:5.7.19-6.el6.x86_64",
          "6Server-RHSCL-2.4-6.7.Z:rh-mysql57-mysql-config-0:5.7.19-6.el6.x86_64",
          "6Server-RHSCL-2.4-6.7.Z:rh-mysql57-mysql-debuginfo-0:5.7.19-6.el6.x86_64",
          "6Server-RHSCL-2.4-6.7.Z:rh-mysql57-mysql-devel-0:5.7.19-6.el6.x86_64",
          "6Server-RHSCL-2.4-6.7.Z:rh-mysql57-mysql-errmsg-0:5.7.19-6.el6.x86_64",
          "6Server-RHSCL-2.4-6.7.Z:rh-mysql57-mysql-server-0:5.7.19-6.el6.x86_64",
          "6Server-RHSCL-2.4-6.7.Z:rh-mysql57-mysql-test-0:5.7.19-6.el6.x86_64",
          "6Server-RHSCL-2.4:rh-mysql57-mysql-0:5.7.19-6.el6.src",
          "6Server-RHSCL-2.4:rh-mysql57-mysql-0:5.7.19-6.el6.x86_64",
          "6Server-RHSCL-2.4:rh-mysql57-mysql-common-0:5.7.19-6.el6.x86_64",
          "6Server-RHSCL-2.4:rh-mysql57-mysql-config-0:5.7.19-6.el6.x86_64",
          "6Server-RHSCL-2.4:rh-mysql57-mysql-debuginfo-0:5.7.19-6.el6.x86_64",
          "6Server-RHSCL-2.4:rh-mysql57-mysql-devel-0:5.7.19-6.el6.x86_64",
          "6Server-RHSCL-2.4:rh-mysql57-mysql-errmsg-0:5.7.19-6.el6.x86_64",
          "6Server-RHSCL-2.4:rh-mysql57-mysql-server-0:5.7.19-6.el6.x86_64",
          "6Server-RHSCL-2.4:rh-mysql57-mysql-test-0:5.7.19-6.el6.x86_64",
          "6Workstation-RHSCL-2.4:rh-mysql57-mysql-0:5.7.19-6.el6.src",
          "6Workstation-RHSCL-2.4:rh-mysql57-mysql-0:5.7.19-6.el6.x86_64",
          "6Workstation-RHSCL-2.4:rh-mysql57-mysql-common-0:5.7.19-6.el6.x86_64",
          "6Workstation-RHSCL-2.4:rh-mysql57-mysql-config-0:5.7.19-6.el6.x86_64",
          "6Workstation-RHSCL-2.4:rh-mysql57-mysql-debuginfo-0:5.7.19-6.el6.x86_64",
          "6Workstation-RHSCL-2.4:rh-mysql57-mysql-devel-0:5.7.19-6.el6.x86_64",
          "6Workstation-RHSCL-2.4:rh-mysql57-mysql-errmsg-0:5.7.19-6.el6.x86_64",
          "6Workstation-RHSCL-2.4:rh-mysql57-mysql-server-0:5.7.19-6.el6.x86_64",
          "6Workstation-RHSCL-2.4:rh-mysql57-mysql-test-0:5.7.19-6.el6.x86_64",
          "7Server-RHSCL-2.4-7.3.Z:rh-mysql57-mysql-0:5.7.19-6.el7.src",
          "7Server-RHSCL-2.4-7.3.Z:rh-mysql57-mysql-0:5.7.19-6.el7.x86_64",
          "7Server-RHSCL-2.4-7.3.Z:rh-mysql57-mysql-common-0:5.7.19-6.el7.x86_64",
          "7Server-RHSCL-2.4-7.3.Z:rh-mysql57-mysql-config-0:5.7.19-6.el7.x86_64",
          "7Server-RHSCL-2.4-7.3.Z:rh-mysql57-mysql-debuginfo-0:5.7.19-6.el7.x86_64",
          "7Server-RHSCL-2.4-7.3.Z:rh-mysql57-mysql-devel-0:5.7.19-6.el7.x86_64",
          "7Server-RHSCL-2.4-7.3.Z:rh-mysql57-mysql-errmsg-0:5.7.19-6.el7.x86_64",
          "7Server-RHSCL-2.4-7.3.Z:rh-mysql57-mysql-server-0:5.7.19-6.el7.x86_64",
          "7Server-RHSCL-2.4-7.3.Z:rh-mysql57-mysql-test-0:5.7.19-6.el7.x86_64",
          "7Server-RHSCL-2.4:rh-mysql57-mysql-0:5.7.19-6.el7.src",
          "7Server-RHSCL-2.4:rh-mysql57-mysql-0:5.7.19-6.el7.x86_64",
          "7Server-RHSCL-2.4:rh-mysql57-mysql-common-0:5.7.19-6.el7.x86_64",
          "7Server-RHSCL-2.4:rh-mysql57-mysql-config-0:5.7.19-6.el7.x86_64",
          "7Server-RHSCL-2.4:rh-mysql57-mysql-debuginfo-0:5.7.19-6.el7.x86_64",
          "7Server-RHSCL-2.4:rh-mysql57-mysql-devel-0:5.7.19-6.el7.x86_64",
          "7Server-RHSCL-2.4:rh-mysql57-mysql-errmsg-0:5.7.19-6.el7.x86_64",
          "7Server-RHSCL-2.4:rh-mysql57-mysql-server-0:5.7.19-6.el7.x86_64",
          "7Server-RHSCL-2.4:rh-mysql57-mysql-test-0:5.7.19-6.el7.x86_64",
          "7Workstation-RHSCL-2.4:rh-mysql57-mysql-0:5.7.19-6.el7.src",
          "7Workstation-RHSCL-2.4:rh-mysql57-mysql-0:5.7.19-6.el7.x86_64",
          "7Workstation-RHSCL-2.4:rh-mysql57-mysql-common-0:5.7.19-6.el7.x86_64",
          "7Workstation-RHSCL-2.4:rh-mysql57-mysql-config-0:5.7.19-6.el7.x86_64",
          "7Workstation-RHSCL-2.4:rh-mysql57-mysql-debuginfo-0:5.7.19-6.el7.x86_64",
          "7Workstation-RHSCL-2.4:rh-mysql57-mysql-devel-0:5.7.19-6.el7.x86_64",
          "7Workstation-RHSCL-2.4:rh-mysql57-mysql-errmsg-0:5.7.19-6.el7.x86_64",
          "7Workstation-RHSCL-2.4:rh-mysql57-mysql-server-0:5.7.19-6.el7.x86_64",
          "7Workstation-RHSCL-2.4:rh-mysql57-mysql-test-0:5.7.19-6.el7.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2017-3468"
        },
        {
          "category": "external",
          "summary": "RHBZ#1443385",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1443385"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2017-3468",
          "url": "https://www.cve.org/CVERecord?id=CVE-2017-3468"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2017-3468",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2017-3468"
        },
        {
          "category": "external",
          "summary": "http://www.oracle.com/technetwork/security-advisory/cpuapr2017-3236618.html#AppendixMSQL",
          "url": "http://www.oracle.com/technetwork/security-advisory/cpuapr2017-3236618.html#AppendixMSQL"
        }
      ],
      "release_date": "2017-04-19T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2017-10-12T07:53:15+00:00",
          "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAfter installing this update, the MySQL server daemon (mysqld) will be restarted automatically.",
          "product_ids": [
            "6Server-RHSCL-2.4-6.7.Z:rh-mysql57-mysql-0:5.7.19-6.el6.src",
            "6Server-RHSCL-2.4-6.7.Z:rh-mysql57-mysql-0:5.7.19-6.el6.x86_64",
            "6Server-RHSCL-2.4-6.7.Z:rh-mysql57-mysql-common-0:5.7.19-6.el6.x86_64",
            "6Server-RHSCL-2.4-6.7.Z:rh-mysql57-mysql-config-0:5.7.19-6.el6.x86_64",
            "6Server-RHSCL-2.4-6.7.Z:rh-mysql57-mysql-debuginfo-0:5.7.19-6.el6.x86_64",
            "6Server-RHSCL-2.4-6.7.Z:rh-mysql57-mysql-devel-0:5.7.19-6.el6.x86_64",
            "6Server-RHSCL-2.4-6.7.Z:rh-mysql57-mysql-errmsg-0:5.7.19-6.el6.x86_64",
            "6Server-RHSCL-2.4-6.7.Z:rh-mysql57-mysql-server-0:5.7.19-6.el6.x86_64",
            "6Server-RHSCL-2.4-6.7.Z:rh-mysql57-mysql-test-0:5.7.19-6.el6.x86_64",
            "6Server-RHSCL-2.4:rh-mysql57-mysql-0:5.7.19-6.el6.src",
            "6Server-RHSCL-2.4:rh-mysql57-mysql-0:5.7.19-6.el6.x86_64",
            "6Server-RHSCL-2.4:rh-mysql57-mysql-common-0:5.7.19-6.el6.x86_64",
            "6Server-RHSCL-2.4:rh-mysql57-mysql-config-0:5.7.19-6.el6.x86_64",
            "6Server-RHSCL-2.4:rh-mysql57-mysql-debuginfo-0:5.7.19-6.el6.x86_64",
            "6Server-RHSCL-2.4:rh-mysql57-mysql-devel-0:5.7.19-6.el6.x86_64",
            "6Server-RHSCL-2.4:rh-mysql57-mysql-errmsg-0:5.7.19-6.el6.x86_64",
            "6Server-RHSCL-2.4:rh-mysql57-mysql-server-0:5.7.19-6.el6.x86_64",
            "6Server-RHSCL-2.4:rh-mysql57-mysql-test-0:5.7.19-6.el6.x86_64",
            "6Workstation-RHSCL-2.4:rh-mysql57-mysql-0:5.7.19-6.el6.src",
            "6Workstation-RHSCL-2.4:rh-mysql57-mysql-0:5.7.19-6.el6.x86_64",
            "6Workstation-RHSCL-2.4:rh-mysql57-mysql-common-0:5.7.19-6.el6.x86_64",
            "6Workstation-RHSCL-2.4:rh-mysql57-mysql-config-0:5.7.19-6.el6.x86_64",
            "6Workstation-RHSCL-2.4:rh-mysql57-mysql-debuginfo-0:5.7.19-6.el6.x86_64",
            "6Workstation-RHSCL-2.4:rh-mysql57-mysql-devel-0:5.7.19-6.el6.x86_64",
            "6Workstation-RHSCL-2.4:rh-mysql57-mysql-errmsg-0:5.7.19-6.el6.x86_64",
            "6Workstation-RHSCL-2.4:rh-mysql57-mysql-server-0:5.7.19-6.el6.x86_64",
            "6Workstation-RHSCL-2.4:rh-mysql57-mysql-test-0:5.7.19-6.el6.x86_64",
            "7Server-RHSCL-2.4-7.3.Z:rh-mysql57-mysql-0:5.7.19-6.el7.src",
            "7Server-RHSCL-2.4-7.3.Z:rh-mysql57-mysql-0:5.7.19-6.el7.x86_64",
            "7Server-RHSCL-2.4-7.3.Z:rh-mysql57-mysql-common-0:5.7.19-6.el7.x86_64",
            "7Server-RHSCL-2.4-7.3.Z:rh-mysql57-mysql-config-0:5.7.19-6.el7.x86_64",
            "7Server-RHSCL-2.4-7.3.Z:rh-mysql57-mysql-debuginfo-0:5.7.19-6.el7.x86_64",
            "7Server-RHSCL-2.4-7.3.Z:rh-mysql57-mysql-devel-0:5.7.19-6.el7.x86_64",
            "7Server-RHSCL-2.4-7.3.Z:rh-mysql57-mysql-errmsg-0:5.7.19-6.el7.x86_64",
            "7Server-RHSCL-2.4-7.3.Z:rh-mysql57-mysql-server-0:5.7.19-6.el7.x86_64",
            "7Server-RHSCL-2.4-7.3.Z:rh-mysql57-mysql-test-0:5.7.19-6.el7.x86_64",
            "7Server-RHSCL-2.4:rh-mysql57-mysql-0:5.7.19-6.el7.src",
            "7Server-RHSCL-2.4:rh-mysql57-mysql-0:5.7.19-6.el7.x86_64",
            "7Server-RHSCL-2.4:rh-mysql57-mysql-common-0:5.7.19-6.el7.x86_64",
            "7Server-RHSCL-2.4:rh-mysql57-mysql-config-0:5.7.19-6.el7.x86_64",
            "7Server-RHSCL-2.4:rh-mysql57-mysql-debuginfo-0:5.7.19-6.el7.x86_64",
            "7Server-RHSCL-2.4:rh-mysql57-mysql-devel-0:5.7.19-6.el7.x86_64",
            "7Server-RHSCL-2.4:rh-mysql57-mysql-errmsg-0:5.7.19-6.el7.x86_64",
            "7Server-RHSCL-2.4:rh-mysql57-mysql-server-0:5.7.19-6.el7.x86_64",
            "7Server-RHSCL-2.4:rh-mysql57-mysql-test-0:5.7.19-6.el7.x86_64",
            "7Workstation-RHSCL-2.4:rh-mysql57-mysql-0:5.7.19-6.el7.src",
            "7Workstation-RHSCL-2.4:rh-mysql57-mysql-0:5.7.19-6.el7.x86_64",
            "7Workstation-RHSCL-2.4:rh-mysql57-mysql-common-0:5.7.19-6.el7.x86_64",
            "7Workstation-RHSCL-2.4:rh-mysql57-mysql-config-0:5.7.19-6.el7.x86_64",
            "7Workstation-RHSCL-2.4:rh-mysql57-mysql-debuginfo-0:5.7.19-6.el7.x86_64",
            "7Workstation-RHSCL-2.4:rh-mysql57-mysql-devel-0:5.7.19-6.el7.x86_64",
            "7Workstation-RHSCL-2.4:rh-mysql57-mysql-errmsg-0:5.7.19-6.el7.x86_64",
            "7Workstation-RHSCL-2.4:rh-mysql57-mysql-server-0:5.7.19-6.el7.x86_64",
            "7Workstation-RHSCL-2.4:rh-mysql57-mysql-test-0:5.7.19-6.el7.x86_64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2017:2886"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "HIGH",
            "attackVector": "NETWORK",
            "availabilityImpact": "NONE",
            "baseScore": 3.1,
            "baseSeverity": "LOW",
            "confidentialityImpact": "NONE",
            "integrityImpact": "LOW",
            "privilegesRequired": "LOW",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.0/AV:N/AC:H/PR:L/UI:N/S:U/C:N/I:L/A:N",
            "version": "3.0"
          },
          "products": [
            "6Server-RHSCL-2.4-6.7.Z:rh-mysql57-mysql-0:5.7.19-6.el6.src",
            "6Server-RHSCL-2.4-6.7.Z:rh-mysql57-mysql-0:5.7.19-6.el6.x86_64",
            "6Server-RHSCL-2.4-6.7.Z:rh-mysql57-mysql-common-0:5.7.19-6.el6.x86_64",
            "6Server-RHSCL-2.4-6.7.Z:rh-mysql57-mysql-config-0:5.7.19-6.el6.x86_64",
            "6Server-RHSCL-2.4-6.7.Z:rh-mysql57-mysql-debuginfo-0:5.7.19-6.el6.x86_64",
            "6Server-RHSCL-2.4-6.7.Z:rh-mysql57-mysql-devel-0:5.7.19-6.el6.x86_64",
            "6Server-RHSCL-2.4-6.7.Z:rh-mysql57-mysql-errmsg-0:5.7.19-6.el6.x86_64",
            "6Server-RHSCL-2.4-6.7.Z:rh-mysql57-mysql-server-0:5.7.19-6.el6.x86_64",
            "6Server-RHSCL-2.4-6.7.Z:rh-mysql57-mysql-test-0:5.7.19-6.el6.x86_64",
            "6Server-RHSCL-2.4:rh-mysql57-mysql-0:5.7.19-6.el6.src",
            "6Server-RHSCL-2.4:rh-mysql57-mysql-0:5.7.19-6.el6.x86_64",
            "6Server-RHSCL-2.4:rh-mysql57-mysql-common-0:5.7.19-6.el6.x86_64",
            "6Server-RHSCL-2.4:rh-mysql57-mysql-config-0:5.7.19-6.el6.x86_64",
            "6Server-RHSCL-2.4:rh-mysql57-mysql-debuginfo-0:5.7.19-6.el6.x86_64",
            "6Server-RHSCL-2.4:rh-mysql57-mysql-devel-0:5.7.19-6.el6.x86_64",
            "6Server-RHSCL-2.4:rh-mysql57-mysql-errmsg-0:5.7.19-6.el6.x86_64",
            "6Server-RHSCL-2.4:rh-mysql57-mysql-server-0:5.7.19-6.el6.x86_64",
            "6Server-RHSCL-2.4:rh-mysql57-mysql-test-0:5.7.19-6.el6.x86_64",
            "6Workstation-RHSCL-2.4:rh-mysql57-mysql-0:5.7.19-6.el6.src",
            "6Workstation-RHSCL-2.4:rh-mysql57-mysql-0:5.7.19-6.el6.x86_64",
            "6Workstation-RHSCL-2.4:rh-mysql57-mysql-common-0:5.7.19-6.el6.x86_64",
            "6Workstation-RHSCL-2.4:rh-mysql57-mysql-config-0:5.7.19-6.el6.x86_64",
            "6Workstation-RHSCL-2.4:rh-mysql57-mysql-debuginfo-0:5.7.19-6.el6.x86_64",
            "6Workstation-RHSCL-2.4:rh-mysql57-mysql-devel-0:5.7.19-6.el6.x86_64",
            "6Workstation-RHSCL-2.4:rh-mysql57-mysql-errmsg-0:5.7.19-6.el6.x86_64",
            "6Workstation-RHSCL-2.4:rh-mysql57-mysql-server-0:5.7.19-6.el6.x86_64",
            "6Workstation-RHSCL-2.4:rh-mysql57-mysql-test-0:5.7.19-6.el6.x86_64",
            "7Server-RHSCL-2.4-7.3.Z:rh-mysql57-mysql-0:5.7.19-6.el7.src",
            "7Server-RHSCL-2.4-7.3.Z:rh-mysql57-mysql-0:5.7.19-6.el7.x86_64",
            "7Server-RHSCL-2.4-7.3.Z:rh-mysql57-mysql-common-0:5.7.19-6.el7.x86_64",
            "7Server-RHSCL-2.4-7.3.Z:rh-mysql57-mysql-config-0:5.7.19-6.el7.x86_64",
            "7Server-RHSCL-2.4-7.3.Z:rh-mysql57-mysql-debuginfo-0:5.7.19-6.el7.x86_64",
            "7Server-RHSCL-2.4-7.3.Z:rh-mysql57-mysql-devel-0:5.7.19-6.el7.x86_64",
            "7Server-RHSCL-2.4-7.3.Z:rh-mysql57-mysql-errmsg-0:5.7.19-6.el7.x86_64",
            "7Server-RHSCL-2.4-7.3.Z:rh-mysql57-mysql-server-0:5.7.19-6.el7.x86_64",
            "7Server-RHSCL-2.4-7.3.Z:rh-mysql57-mysql-test-0:5.7.19-6.el7.x86_64",
            "7Server-RHSCL-2.4:rh-mysql57-mysql-0:5.7.19-6.el7.src",
            "7Server-RHSCL-2.4:rh-mysql57-mysql-0:5.7.19-6.el7.x86_64",
            "7Server-RHSCL-2.4:rh-mysql57-mysql-common-0:5.7.19-6.el7.x86_64",
            "7Server-RHSCL-2.4:rh-mysql57-mysql-config-0:5.7.19-6.el7.x86_64",
            "7Server-RHSCL-2.4:rh-mysql57-mysql-debuginfo-0:5.7.19-6.el7.x86_64",
            "7Server-RHSCL-2.4:rh-mysql57-mysql-devel-0:5.7.19-6.el7.x86_64",
            "7Server-RHSCL-2.4:rh-mysql57-mysql-errmsg-0:5.7.19-6.el7.x86_64",
            "7Server-RHSCL-2.4:rh-mysql57-mysql-server-0:5.7.19-6.el7.x86_64",
            "7Server-RHSCL-2.4:rh-mysql57-mysql-test-0:5.7.19-6.el7.x86_64",
            "7Workstation-RHSCL-2.4:rh-mysql57-mysql-0:5.7.19-6.el7.src",
            "7Workstation-RHSCL-2.4:rh-mysql57-mysql-0:5.7.19-6.el7.x86_64",
            "7Workstation-RHSCL-2.4:rh-mysql57-mysql-common-0:5.7.19-6.el7.x86_64",
            "7Workstation-RHSCL-2.4:rh-mysql57-mysql-config-0:5.7.19-6.el7.x86_64",
            "7Workstation-RHSCL-2.4:rh-mysql57-mysql-debuginfo-0:5.7.19-6.el7.x86_64",
            "7Workstation-RHSCL-2.4:rh-mysql57-mysql-devel-0:5.7.19-6.el7.x86_64",
            "7Workstation-RHSCL-2.4:rh-mysql57-mysql-errmsg-0:5.7.19-6.el7.x86_64",
            "7Workstation-RHSCL-2.4:rh-mysql57-mysql-server-0:5.7.19-6.el7.x86_64",
            "7Workstation-RHSCL-2.4:rh-mysql57-mysql-test-0:5.7.19-6.el7.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Low"
        }
      ],
      "title": "mysql: Server: Security: Encryption unspecified vulnerability (CPU Apr 2017)"
    },
    {
      "cve": "CVE-2017-3529",
      "discovery_date": "2017-07-19T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "1472682"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: UDF). Supported versions that are affected are 5.7.18 and earlier. Difficult to exploit vulnerability allows low privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.0 Base Score 5.3 (Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H).",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "mysql: Server: UDF unspecified vulnerability (CPU Jul 2017)",
          "title": "Vulnerability summary"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "6Server-RHSCL-2.4-6.7.Z:rh-mysql57-mysql-0:5.7.19-6.el6.src",
          "6Server-RHSCL-2.4-6.7.Z:rh-mysql57-mysql-0:5.7.19-6.el6.x86_64",
          "6Server-RHSCL-2.4-6.7.Z:rh-mysql57-mysql-common-0:5.7.19-6.el6.x86_64",
          "6Server-RHSCL-2.4-6.7.Z:rh-mysql57-mysql-config-0:5.7.19-6.el6.x86_64",
          "6Server-RHSCL-2.4-6.7.Z:rh-mysql57-mysql-debuginfo-0:5.7.19-6.el6.x86_64",
          "6Server-RHSCL-2.4-6.7.Z:rh-mysql57-mysql-devel-0:5.7.19-6.el6.x86_64",
          "6Server-RHSCL-2.4-6.7.Z:rh-mysql57-mysql-errmsg-0:5.7.19-6.el6.x86_64",
          "6Server-RHSCL-2.4-6.7.Z:rh-mysql57-mysql-server-0:5.7.19-6.el6.x86_64",
          "6Server-RHSCL-2.4-6.7.Z:rh-mysql57-mysql-test-0:5.7.19-6.el6.x86_64",
          "6Server-RHSCL-2.4:rh-mysql57-mysql-0:5.7.19-6.el6.src",
          "6Server-RHSCL-2.4:rh-mysql57-mysql-0:5.7.19-6.el6.x86_64",
          "6Server-RHSCL-2.4:rh-mysql57-mysql-common-0:5.7.19-6.el6.x86_64",
          "6Server-RHSCL-2.4:rh-mysql57-mysql-config-0:5.7.19-6.el6.x86_64",
          "6Server-RHSCL-2.4:rh-mysql57-mysql-debuginfo-0:5.7.19-6.el6.x86_64",
          "6Server-RHSCL-2.4:rh-mysql57-mysql-devel-0:5.7.19-6.el6.x86_64",
          "6Server-RHSCL-2.4:rh-mysql57-mysql-errmsg-0:5.7.19-6.el6.x86_64",
          "6Server-RHSCL-2.4:rh-mysql57-mysql-server-0:5.7.19-6.el6.x86_64",
          "6Server-RHSCL-2.4:rh-mysql57-mysql-test-0:5.7.19-6.el6.x86_64",
          "6Workstation-RHSCL-2.4:rh-mysql57-mysql-0:5.7.19-6.el6.src",
          "6Workstation-RHSCL-2.4:rh-mysql57-mysql-0:5.7.19-6.el6.x86_64",
          "6Workstation-RHSCL-2.4:rh-mysql57-mysql-common-0:5.7.19-6.el6.x86_64",
          "6Workstation-RHSCL-2.4:rh-mysql57-mysql-config-0:5.7.19-6.el6.x86_64",
          "6Workstation-RHSCL-2.4:rh-mysql57-mysql-debuginfo-0:5.7.19-6.el6.x86_64",
          "6Workstation-RHSCL-2.4:rh-mysql57-mysql-devel-0:5.7.19-6.el6.x86_64",
          "6Workstation-RHSCL-2.4:rh-mysql57-mysql-errmsg-0:5.7.19-6.el6.x86_64",
          "6Workstation-RHSCL-2.4:rh-mysql57-mysql-server-0:5.7.19-6.el6.x86_64",
          "6Workstation-RHSCL-2.4:rh-mysql57-mysql-test-0:5.7.19-6.el6.x86_64",
          "7Server-RHSCL-2.4-7.3.Z:rh-mysql57-mysql-0:5.7.19-6.el7.src",
          "7Server-RHSCL-2.4-7.3.Z:rh-mysql57-mysql-0:5.7.19-6.el7.x86_64",
          "7Server-RHSCL-2.4-7.3.Z:rh-mysql57-mysql-common-0:5.7.19-6.el7.x86_64",
          "7Server-RHSCL-2.4-7.3.Z:rh-mysql57-mysql-config-0:5.7.19-6.el7.x86_64",
          "7Server-RHSCL-2.4-7.3.Z:rh-mysql57-mysql-debuginfo-0:5.7.19-6.el7.x86_64",
          "7Server-RHSCL-2.4-7.3.Z:rh-mysql57-mysql-devel-0:5.7.19-6.el7.x86_64",
          "7Server-RHSCL-2.4-7.3.Z:rh-mysql57-mysql-errmsg-0:5.7.19-6.el7.x86_64",
          "7Server-RHSCL-2.4-7.3.Z:rh-mysql57-mysql-server-0:5.7.19-6.el7.x86_64",
          "7Server-RHSCL-2.4-7.3.Z:rh-mysql57-mysql-test-0:5.7.19-6.el7.x86_64",
          "7Server-RHSCL-2.4:rh-mysql57-mysql-0:5.7.19-6.el7.src",
          "7Server-RHSCL-2.4:rh-mysql57-mysql-0:5.7.19-6.el7.x86_64",
          "7Server-RHSCL-2.4:rh-mysql57-mysql-common-0:5.7.19-6.el7.x86_64",
          "7Server-RHSCL-2.4:rh-mysql57-mysql-config-0:5.7.19-6.el7.x86_64",
          "7Server-RHSCL-2.4:rh-mysql57-mysql-debuginfo-0:5.7.19-6.el7.x86_64",
          "7Server-RHSCL-2.4:rh-mysql57-mysql-devel-0:5.7.19-6.el7.x86_64",
          "7Server-RHSCL-2.4:rh-mysql57-mysql-errmsg-0:5.7.19-6.el7.x86_64",
          "7Server-RHSCL-2.4:rh-mysql57-mysql-server-0:5.7.19-6.el7.x86_64",
          "7Server-RHSCL-2.4:rh-mysql57-mysql-test-0:5.7.19-6.el7.x86_64",
          "7Workstation-RHSCL-2.4:rh-mysql57-mysql-0:5.7.19-6.el7.src",
          "7Workstation-RHSCL-2.4:rh-mysql57-mysql-0:5.7.19-6.el7.x86_64",
          "7Workstation-RHSCL-2.4:rh-mysql57-mysql-common-0:5.7.19-6.el7.x86_64",
          "7Workstation-RHSCL-2.4:rh-mysql57-mysql-config-0:5.7.19-6.el7.x86_64",
          "7Workstation-RHSCL-2.4:rh-mysql57-mysql-debuginfo-0:5.7.19-6.el7.x86_64",
          "7Workstation-RHSCL-2.4:rh-mysql57-mysql-devel-0:5.7.19-6.el7.x86_64",
          "7Workstation-RHSCL-2.4:rh-mysql57-mysql-errmsg-0:5.7.19-6.el7.x86_64",
          "7Workstation-RHSCL-2.4:rh-mysql57-mysql-server-0:5.7.19-6.el7.x86_64",
          "7Workstation-RHSCL-2.4:rh-mysql57-mysql-test-0:5.7.19-6.el7.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2017-3529"
        },
        {
          "category": "external",
          "summary": "RHBZ#1472682",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1472682"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2017-3529",
          "url": "https://www.cve.org/CVERecord?id=CVE-2017-3529"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2017-3529",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2017-3529"
        },
        {
          "category": "external",
          "summary": "http://www.oracle.com/technetwork/security-advisory/cpujul2017-3236622.html#AppendixMSQL",
          "url": "http://www.oracle.com/technetwork/security-advisory/cpujul2017-3236622.html#AppendixMSQL"
        }
      ],
      "release_date": "2017-07-19T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2017-10-12T07:53:15+00:00",
          "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAfter installing this update, the MySQL server daemon (mysqld) will be restarted automatically.",
          "product_ids": [
            "6Server-RHSCL-2.4-6.7.Z:rh-mysql57-mysql-0:5.7.19-6.el6.src",
            "6Server-RHSCL-2.4-6.7.Z:rh-mysql57-mysql-0:5.7.19-6.el6.x86_64",
            "6Server-RHSCL-2.4-6.7.Z:rh-mysql57-mysql-common-0:5.7.19-6.el6.x86_64",
            "6Server-RHSCL-2.4-6.7.Z:rh-mysql57-mysql-config-0:5.7.19-6.el6.x86_64",
            "6Server-RHSCL-2.4-6.7.Z:rh-mysql57-mysql-debuginfo-0:5.7.19-6.el6.x86_64",
            "6Server-RHSCL-2.4-6.7.Z:rh-mysql57-mysql-devel-0:5.7.19-6.el6.x86_64",
            "6Server-RHSCL-2.4-6.7.Z:rh-mysql57-mysql-errmsg-0:5.7.19-6.el6.x86_64",
            "6Server-RHSCL-2.4-6.7.Z:rh-mysql57-mysql-server-0:5.7.19-6.el6.x86_64",
            "6Server-RHSCL-2.4-6.7.Z:rh-mysql57-mysql-test-0:5.7.19-6.el6.x86_64",
            "6Server-RHSCL-2.4:rh-mysql57-mysql-0:5.7.19-6.el6.src",
            "6Server-RHSCL-2.4:rh-mysql57-mysql-0:5.7.19-6.el6.x86_64",
            "6Server-RHSCL-2.4:rh-mysql57-mysql-common-0:5.7.19-6.el6.x86_64",
            "6Server-RHSCL-2.4:rh-mysql57-mysql-config-0:5.7.19-6.el6.x86_64",
            "6Server-RHSCL-2.4:rh-mysql57-mysql-debuginfo-0:5.7.19-6.el6.x86_64",
            "6Server-RHSCL-2.4:rh-mysql57-mysql-devel-0:5.7.19-6.el6.x86_64",
            "6Server-RHSCL-2.4:rh-mysql57-mysql-errmsg-0:5.7.19-6.el6.x86_64",
            "6Server-RHSCL-2.4:rh-mysql57-mysql-server-0:5.7.19-6.el6.x86_64",
            "6Server-RHSCL-2.4:rh-mysql57-mysql-test-0:5.7.19-6.el6.x86_64",
            "6Workstation-RHSCL-2.4:rh-mysql57-mysql-0:5.7.19-6.el6.src",
            "6Workstation-RHSCL-2.4:rh-mysql57-mysql-0:5.7.19-6.el6.x86_64",
            "6Workstation-RHSCL-2.4:rh-mysql57-mysql-common-0:5.7.19-6.el6.x86_64",
            "6Workstation-RHSCL-2.4:rh-mysql57-mysql-config-0:5.7.19-6.el6.x86_64",
            "6Workstation-RHSCL-2.4:rh-mysql57-mysql-debuginfo-0:5.7.19-6.el6.x86_64",
            "6Workstation-RHSCL-2.4:rh-mysql57-mysql-devel-0:5.7.19-6.el6.x86_64",
            "6Workstation-RHSCL-2.4:rh-mysql57-mysql-errmsg-0:5.7.19-6.el6.x86_64",
            "6Workstation-RHSCL-2.4:rh-mysql57-mysql-server-0:5.7.19-6.el6.x86_64",
            "6Workstation-RHSCL-2.4:rh-mysql57-mysql-test-0:5.7.19-6.el6.x86_64",
            "7Server-RHSCL-2.4-7.3.Z:rh-mysql57-mysql-0:5.7.19-6.el7.src",
            "7Server-RHSCL-2.4-7.3.Z:rh-mysql57-mysql-0:5.7.19-6.el7.x86_64",
            "7Server-RHSCL-2.4-7.3.Z:rh-mysql57-mysql-common-0:5.7.19-6.el7.x86_64",
            "7Server-RHSCL-2.4-7.3.Z:rh-mysql57-mysql-config-0:5.7.19-6.el7.x86_64",
            "7Server-RHSCL-2.4-7.3.Z:rh-mysql57-mysql-debuginfo-0:5.7.19-6.el7.x86_64",
            "7Server-RHSCL-2.4-7.3.Z:rh-mysql57-mysql-devel-0:5.7.19-6.el7.x86_64",
            "7Server-RHSCL-2.4-7.3.Z:rh-mysql57-mysql-errmsg-0:5.7.19-6.el7.x86_64",
            "7Server-RHSCL-2.4-7.3.Z:rh-mysql57-mysql-server-0:5.7.19-6.el7.x86_64",
            "7Server-RHSCL-2.4-7.3.Z:rh-mysql57-mysql-test-0:5.7.19-6.el7.x86_64",
            "7Server-RHSCL-2.4:rh-mysql57-mysql-0:5.7.19-6.el7.src",
            "7Server-RHSCL-2.4:rh-mysql57-mysql-0:5.7.19-6.el7.x86_64",
            "7Server-RHSCL-2.4:rh-mysql57-mysql-common-0:5.7.19-6.el7.x86_64",
            "7Server-RHSCL-2.4:rh-mysql57-mysql-config-0:5.7.19-6.el7.x86_64",
            "7Server-RHSCL-2.4:rh-mysql57-mysql-debuginfo-0:5.7.19-6.el7.x86_64",
            "7Server-RHSCL-2.4:rh-mysql57-mysql-devel-0:5.7.19-6.el7.x86_64",
            "7Server-RHSCL-2.4:rh-mysql57-mysql-errmsg-0:5.7.19-6.el7.x86_64",
            "7Server-RHSCL-2.4:rh-mysql57-mysql-server-0:5.7.19-6.el7.x86_64",
            "7Server-RHSCL-2.4:rh-mysql57-mysql-test-0:5.7.19-6.el7.x86_64",
            "7Workstation-RHSCL-2.4:rh-mysql57-mysql-0:5.7.19-6.el7.src",
            "7Workstation-RHSCL-2.4:rh-mysql57-mysql-0:5.7.19-6.el7.x86_64",
            "7Workstation-RHSCL-2.4:rh-mysql57-mysql-common-0:5.7.19-6.el7.x86_64",
            "7Workstation-RHSCL-2.4:rh-mysql57-mysql-config-0:5.7.19-6.el7.x86_64",
            "7Workstation-RHSCL-2.4:rh-mysql57-mysql-debuginfo-0:5.7.19-6.el7.x86_64",
            "7Workstation-RHSCL-2.4:rh-mysql57-mysql-devel-0:5.7.19-6.el7.x86_64",
            "7Workstation-RHSCL-2.4:rh-mysql57-mysql-errmsg-0:5.7.19-6.el7.x86_64",
            "7Workstation-RHSCL-2.4:rh-mysql57-mysql-server-0:5.7.19-6.el7.x86_64",
            "7Workstation-RHSCL-2.4:rh-mysql57-mysql-test-0:5.7.19-6.el7.x86_64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2017:2886"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "HIGH",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 5.3,
            "baseSeverity": "MEDIUM",
            "confidentialityImpact": "NONE",
            "integrityImpact": "NONE",
            "privilegesRequired": "LOW",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.0/AV:N/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.0"
          },
          "products": [
            "6Server-RHSCL-2.4-6.7.Z:rh-mysql57-mysql-0:5.7.19-6.el6.src",
            "6Server-RHSCL-2.4-6.7.Z:rh-mysql57-mysql-0:5.7.19-6.el6.x86_64",
            "6Server-RHSCL-2.4-6.7.Z:rh-mysql57-mysql-common-0:5.7.19-6.el6.x86_64",
            "6Server-RHSCL-2.4-6.7.Z:rh-mysql57-mysql-config-0:5.7.19-6.el6.x86_64",
            "6Server-RHSCL-2.4-6.7.Z:rh-mysql57-mysql-debuginfo-0:5.7.19-6.el6.x86_64",
            "6Server-RHSCL-2.4-6.7.Z:rh-mysql57-mysql-devel-0:5.7.19-6.el6.x86_64",
            "6Server-RHSCL-2.4-6.7.Z:rh-mysql57-mysql-errmsg-0:5.7.19-6.el6.x86_64",
            "6Server-RHSCL-2.4-6.7.Z:rh-mysql57-mysql-server-0:5.7.19-6.el6.x86_64",
            "6Server-RHSCL-2.4-6.7.Z:rh-mysql57-mysql-test-0:5.7.19-6.el6.x86_64",
            "6Server-RHSCL-2.4:rh-mysql57-mysql-0:5.7.19-6.el6.src",
            "6Server-RHSCL-2.4:rh-mysql57-mysql-0:5.7.19-6.el6.x86_64",
            "6Server-RHSCL-2.4:rh-mysql57-mysql-common-0:5.7.19-6.el6.x86_64",
            "6Server-RHSCL-2.4:rh-mysql57-mysql-config-0:5.7.19-6.el6.x86_64",
            "6Server-RHSCL-2.4:rh-mysql57-mysql-debuginfo-0:5.7.19-6.el6.x86_64",
            "6Server-RHSCL-2.4:rh-mysql57-mysql-devel-0:5.7.19-6.el6.x86_64",
            "6Server-RHSCL-2.4:rh-mysql57-mysql-errmsg-0:5.7.19-6.el6.x86_64",
            "6Server-RHSCL-2.4:rh-mysql57-mysql-server-0:5.7.19-6.el6.x86_64",
            "6Server-RHSCL-2.4:rh-mysql57-mysql-test-0:5.7.19-6.el6.x86_64",
            "6Workstation-RHSCL-2.4:rh-mysql57-mysql-0:5.7.19-6.el6.src",
            "6Workstation-RHSCL-2.4:rh-mysql57-mysql-0:5.7.19-6.el6.x86_64",
            "6Workstation-RHSCL-2.4:rh-mysql57-mysql-common-0:5.7.19-6.el6.x86_64",
            "6Workstation-RHSCL-2.4:rh-mysql57-mysql-config-0:5.7.19-6.el6.x86_64",
            "6Workstation-RHSCL-2.4:rh-mysql57-mysql-debuginfo-0:5.7.19-6.el6.x86_64",
            "6Workstation-RHSCL-2.4:rh-mysql57-mysql-devel-0:5.7.19-6.el6.x86_64",
            "6Workstation-RHSCL-2.4:rh-mysql57-mysql-errmsg-0:5.7.19-6.el6.x86_64",
            "6Workstation-RHSCL-2.4:rh-mysql57-mysql-server-0:5.7.19-6.el6.x86_64",
            "6Workstation-RHSCL-2.4:rh-mysql57-mysql-test-0:5.7.19-6.el6.x86_64",
            "7Server-RHSCL-2.4-7.3.Z:rh-mysql57-mysql-0:5.7.19-6.el7.src",
            "7Server-RHSCL-2.4-7.3.Z:rh-mysql57-mysql-0:5.7.19-6.el7.x86_64",
            "7Server-RHSCL-2.4-7.3.Z:rh-mysql57-mysql-common-0:5.7.19-6.el7.x86_64",
            "7Server-RHSCL-2.4-7.3.Z:rh-mysql57-mysql-config-0:5.7.19-6.el7.x86_64",
            "7Server-RHSCL-2.4-7.3.Z:rh-mysql57-mysql-debuginfo-0:5.7.19-6.el7.x86_64",
            "7Server-RHSCL-2.4-7.3.Z:rh-mysql57-mysql-devel-0:5.7.19-6.el7.x86_64",
            "7Server-RHSCL-2.4-7.3.Z:rh-mysql57-mysql-errmsg-0:5.7.19-6.el7.x86_64",
            "7Server-RHSCL-2.4-7.3.Z:rh-mysql57-mysql-server-0:5.7.19-6.el7.x86_64",
            "7Server-RHSCL-2.4-7.3.Z:rh-mysql57-mysql-test-0:5.7.19-6.el7.x86_64",
            "7Server-RHSCL-2.4:rh-mysql57-mysql-0:5.7.19-6.el7.src",
            "7Server-RHSCL-2.4:rh-mysql57-mysql-0:5.7.19-6.el7.x86_64",
            "7Server-RHSCL-2.4:rh-mysql57-mysql-common-0:5.7.19-6.el7.x86_64",
            "7Server-RHSCL-2.4:rh-mysql57-mysql-config-0:5.7.19-6.el7.x86_64",
            "7Server-RHSCL-2.4:rh-mysql57-mysql-debuginfo-0:5.7.19-6.el7.x86_64",
            "7Server-RHSCL-2.4:rh-mysql57-mysql-devel-0:5.7.19-6.el7.x86_64",
            "7Server-RHSCL-2.4:rh-mysql57-mysql-errmsg-0:5.7.19-6.el7.x86_64",
            "7Server-RHSCL-2.4:rh-mysql57-mysql-server-0:5.7.19-6.el7.x86_64",
            "7Server-RHSCL-2.4:rh-mysql57-mysql-test-0:5.7.19-6.el7.x86_64",
            "7Workstation-RHSCL-2.4:rh-mysql57-mysql-0:5.7.19-6.el7.src",
            "7Workstation-RHSCL-2.4:rh-mysql57-mysql-0:5.7.19-6.el7.x86_64",
            "7Workstation-RHSCL-2.4:rh-mysql57-mysql-common-0:5.7.19-6.el7.x86_64",
            "7Workstation-RHSCL-2.4:rh-mysql57-mysql-config-0:5.7.19-6.el7.x86_64",
            "7Workstation-RHSCL-2.4:rh-mysql57-mysql-debuginfo-0:5.7.19-6.el7.x86_64",
            "7Workstation-RHSCL-2.4:rh-mysql57-mysql-devel-0:5.7.19-6.el7.x86_64",
            "7Workstation-RHSCL-2.4:rh-mysql57-mysql-errmsg-0:5.7.19-6.el7.x86_64",
            "7Workstation-RHSCL-2.4:rh-mysql57-mysql-server-0:5.7.19-6.el7.x86_64",
            "7Workstation-RHSCL-2.4:rh-mysql57-mysql-test-0:5.7.19-6.el7.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Moderate"
        }
      ],
      "title": "mysql: Server: UDF unspecified vulnerability (CPU Jul 2017)"
    },
    {
      "cve": "CVE-2017-3599",
      "cwe": {
        "id": "CWE-190",
        "name": "Integer Overflow or Wraparound"
      },
      "discovery_date": "2017-04-19T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "1443386"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "An integer overflow flaw leading to a buffer overflow was found in the way MySQL parsed connection handshake packets. An unauthenticated remote attacker with access to the MySQL port could use this flaw to crash the mysqld daemon.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "mysql: integer underflow in get_56_lenc_string() leading to DoS (CPU Apr 2017)",
          "title": "Vulnerability summary"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "6Server-RHSCL-2.4-6.7.Z:rh-mysql57-mysql-0:5.7.19-6.el6.src",
          "6Server-RHSCL-2.4-6.7.Z:rh-mysql57-mysql-0:5.7.19-6.el6.x86_64",
          "6Server-RHSCL-2.4-6.7.Z:rh-mysql57-mysql-common-0:5.7.19-6.el6.x86_64",
          "6Server-RHSCL-2.4-6.7.Z:rh-mysql57-mysql-config-0:5.7.19-6.el6.x86_64",
          "6Server-RHSCL-2.4-6.7.Z:rh-mysql57-mysql-debuginfo-0:5.7.19-6.el6.x86_64",
          "6Server-RHSCL-2.4-6.7.Z:rh-mysql57-mysql-devel-0:5.7.19-6.el6.x86_64",
          "6Server-RHSCL-2.4-6.7.Z:rh-mysql57-mysql-errmsg-0:5.7.19-6.el6.x86_64",
          "6Server-RHSCL-2.4-6.7.Z:rh-mysql57-mysql-server-0:5.7.19-6.el6.x86_64",
          "6Server-RHSCL-2.4-6.7.Z:rh-mysql57-mysql-test-0:5.7.19-6.el6.x86_64",
          "6Server-RHSCL-2.4:rh-mysql57-mysql-0:5.7.19-6.el6.src",
          "6Server-RHSCL-2.4:rh-mysql57-mysql-0:5.7.19-6.el6.x86_64",
          "6Server-RHSCL-2.4:rh-mysql57-mysql-common-0:5.7.19-6.el6.x86_64",
          "6Server-RHSCL-2.4:rh-mysql57-mysql-config-0:5.7.19-6.el6.x86_64",
          "6Server-RHSCL-2.4:rh-mysql57-mysql-debuginfo-0:5.7.19-6.el6.x86_64",
          "6Server-RHSCL-2.4:rh-mysql57-mysql-devel-0:5.7.19-6.el6.x86_64",
          "6Server-RHSCL-2.4:rh-mysql57-mysql-errmsg-0:5.7.19-6.el6.x86_64",
          "6Server-RHSCL-2.4:rh-mysql57-mysql-server-0:5.7.19-6.el6.x86_64",
          "6Server-RHSCL-2.4:rh-mysql57-mysql-test-0:5.7.19-6.el6.x86_64",
          "6Workstation-RHSCL-2.4:rh-mysql57-mysql-0:5.7.19-6.el6.src",
          "6Workstation-RHSCL-2.4:rh-mysql57-mysql-0:5.7.19-6.el6.x86_64",
          "6Workstation-RHSCL-2.4:rh-mysql57-mysql-common-0:5.7.19-6.el6.x86_64",
          "6Workstation-RHSCL-2.4:rh-mysql57-mysql-config-0:5.7.19-6.el6.x86_64",
          "6Workstation-RHSCL-2.4:rh-mysql57-mysql-debuginfo-0:5.7.19-6.el6.x86_64",
          "6Workstation-RHSCL-2.4:rh-mysql57-mysql-devel-0:5.7.19-6.el6.x86_64",
          "6Workstation-RHSCL-2.4:rh-mysql57-mysql-errmsg-0:5.7.19-6.el6.x86_64",
          "6Workstation-RHSCL-2.4:rh-mysql57-mysql-server-0:5.7.19-6.el6.x86_64",
          "6Workstation-RHSCL-2.4:rh-mysql57-mysql-test-0:5.7.19-6.el6.x86_64",
          "7Server-RHSCL-2.4-7.3.Z:rh-mysql57-mysql-0:5.7.19-6.el7.src",
          "7Server-RHSCL-2.4-7.3.Z:rh-mysql57-mysql-0:5.7.19-6.el7.x86_64",
          "7Server-RHSCL-2.4-7.3.Z:rh-mysql57-mysql-common-0:5.7.19-6.el7.x86_64",
          "7Server-RHSCL-2.4-7.3.Z:rh-mysql57-mysql-config-0:5.7.19-6.el7.x86_64",
          "7Server-RHSCL-2.4-7.3.Z:rh-mysql57-mysql-debuginfo-0:5.7.19-6.el7.x86_64",
          "7Server-RHSCL-2.4-7.3.Z:rh-mysql57-mysql-devel-0:5.7.19-6.el7.x86_64",
          "7Server-RHSCL-2.4-7.3.Z:rh-mysql57-mysql-errmsg-0:5.7.19-6.el7.x86_64",
          "7Server-RHSCL-2.4-7.3.Z:rh-mysql57-mysql-server-0:5.7.19-6.el7.x86_64",
          "7Server-RHSCL-2.4-7.3.Z:rh-mysql57-mysql-test-0:5.7.19-6.el7.x86_64",
          "7Server-RHSCL-2.4:rh-mysql57-mysql-0:5.7.19-6.el7.src",
          "7Server-RHSCL-2.4:rh-mysql57-mysql-0:5.7.19-6.el7.x86_64",
          "7Server-RHSCL-2.4:rh-mysql57-mysql-common-0:5.7.19-6.el7.x86_64",
          "7Server-RHSCL-2.4:rh-mysql57-mysql-config-0:5.7.19-6.el7.x86_64",
          "7Server-RHSCL-2.4:rh-mysql57-mysql-debuginfo-0:5.7.19-6.el7.x86_64",
          "7Server-RHSCL-2.4:rh-mysql57-mysql-devel-0:5.7.19-6.el7.x86_64",
          "7Server-RHSCL-2.4:rh-mysql57-mysql-errmsg-0:5.7.19-6.el7.x86_64",
          "7Server-RHSCL-2.4:rh-mysql57-mysql-server-0:5.7.19-6.el7.x86_64",
          "7Server-RHSCL-2.4:rh-mysql57-mysql-test-0:5.7.19-6.el7.x86_64",
          "7Workstation-RHSCL-2.4:rh-mysql57-mysql-0:5.7.19-6.el7.src",
          "7Workstation-RHSCL-2.4:rh-mysql57-mysql-0:5.7.19-6.el7.x86_64",
          "7Workstation-RHSCL-2.4:rh-mysql57-mysql-common-0:5.7.19-6.el7.x86_64",
          "7Workstation-RHSCL-2.4:rh-mysql57-mysql-config-0:5.7.19-6.el7.x86_64",
          "7Workstation-RHSCL-2.4:rh-mysql57-mysql-debuginfo-0:5.7.19-6.el7.x86_64",
          "7Workstation-RHSCL-2.4:rh-mysql57-mysql-devel-0:5.7.19-6.el7.x86_64",
          "7Workstation-RHSCL-2.4:rh-mysql57-mysql-errmsg-0:5.7.19-6.el7.x86_64",
          "7Workstation-RHSCL-2.4:rh-mysql57-mysql-server-0:5.7.19-6.el7.x86_64",
          "7Workstation-RHSCL-2.4:rh-mysql57-mysql-test-0:5.7.19-6.el7.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2017-3599"
        },
        {
          "category": "external",
          "summary": "RHBZ#1443386",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1443386"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2017-3599",
          "url": "https://www.cve.org/CVERecord?id=CVE-2017-3599"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2017-3599",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2017-3599"
        },
        {
          "category": "external",
          "summary": "http://www.oracle.com/technetwork/security-advisory/cpuapr2017-3236618.html#AppendixMSQL",
          "url": "http://www.oracle.com/technetwork/security-advisory/cpuapr2017-3236618.html#AppendixMSQL"
        },
        {
          "category": "external",
          "summary": "https://www.secforce.com/blog/2017/04/cve-2017-3599-pre-auth-mysql-remote-dos/",
          "url": "https://www.secforce.com/blog/2017/04/cve-2017-3599-pre-auth-mysql-remote-dos/"
        }
      ],
      "release_date": "2017-04-19T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2017-10-12T07:53:15+00:00",
          "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAfter installing this update, the MySQL server daemon (mysqld) will be restarted automatically.",
          "product_ids": [
            "6Server-RHSCL-2.4-6.7.Z:rh-mysql57-mysql-0:5.7.19-6.el6.src",
            "6Server-RHSCL-2.4-6.7.Z:rh-mysql57-mysql-0:5.7.19-6.el6.x86_64",
            "6Server-RHSCL-2.4-6.7.Z:rh-mysql57-mysql-common-0:5.7.19-6.el6.x86_64",
            "6Server-RHSCL-2.4-6.7.Z:rh-mysql57-mysql-config-0:5.7.19-6.el6.x86_64",
            "6Server-RHSCL-2.4-6.7.Z:rh-mysql57-mysql-debuginfo-0:5.7.19-6.el6.x86_64",
            "6Server-RHSCL-2.4-6.7.Z:rh-mysql57-mysql-devel-0:5.7.19-6.el6.x86_64",
            "6Server-RHSCL-2.4-6.7.Z:rh-mysql57-mysql-errmsg-0:5.7.19-6.el6.x86_64",
            "6Server-RHSCL-2.4-6.7.Z:rh-mysql57-mysql-server-0:5.7.19-6.el6.x86_64",
            "6Server-RHSCL-2.4-6.7.Z:rh-mysql57-mysql-test-0:5.7.19-6.el6.x86_64",
            "6Server-RHSCL-2.4:rh-mysql57-mysql-0:5.7.19-6.el6.src",
            "6Server-RHSCL-2.4:rh-mysql57-mysql-0:5.7.19-6.el6.x86_64",
            "6Server-RHSCL-2.4:rh-mysql57-mysql-common-0:5.7.19-6.el6.x86_64",
            "6Server-RHSCL-2.4:rh-mysql57-mysql-config-0:5.7.19-6.el6.x86_64",
            "6Server-RHSCL-2.4:rh-mysql57-mysql-debuginfo-0:5.7.19-6.el6.x86_64",
            "6Server-RHSCL-2.4:rh-mysql57-mysql-devel-0:5.7.19-6.el6.x86_64",
            "6Server-RHSCL-2.4:rh-mysql57-mysql-errmsg-0:5.7.19-6.el6.x86_64",
            "6Server-RHSCL-2.4:rh-mysql57-mysql-server-0:5.7.19-6.el6.x86_64",
            "6Server-RHSCL-2.4:rh-mysql57-mysql-test-0:5.7.19-6.el6.x86_64",
            "6Workstation-RHSCL-2.4:rh-mysql57-mysql-0:5.7.19-6.el6.src",
            "6Workstation-RHSCL-2.4:rh-mysql57-mysql-0:5.7.19-6.el6.x86_64",
            "6Workstation-RHSCL-2.4:rh-mysql57-mysql-common-0:5.7.19-6.el6.x86_64",
            "6Workstation-RHSCL-2.4:rh-mysql57-mysql-config-0:5.7.19-6.el6.x86_64",
            "6Workstation-RHSCL-2.4:rh-mysql57-mysql-debuginfo-0:5.7.19-6.el6.x86_64",
            "6Workstation-RHSCL-2.4:rh-mysql57-mysql-devel-0:5.7.19-6.el6.x86_64",
            "6Workstation-RHSCL-2.4:rh-mysql57-mysql-errmsg-0:5.7.19-6.el6.x86_64",
            "6Workstation-RHSCL-2.4:rh-mysql57-mysql-server-0:5.7.19-6.el6.x86_64",
            "6Workstation-RHSCL-2.4:rh-mysql57-mysql-test-0:5.7.19-6.el6.x86_64",
            "7Server-RHSCL-2.4-7.3.Z:rh-mysql57-mysql-0:5.7.19-6.el7.src",
            "7Server-RHSCL-2.4-7.3.Z:rh-mysql57-mysql-0:5.7.19-6.el7.x86_64",
            "7Server-RHSCL-2.4-7.3.Z:rh-mysql57-mysql-common-0:5.7.19-6.el7.x86_64",
            "7Server-RHSCL-2.4-7.3.Z:rh-mysql57-mysql-config-0:5.7.19-6.el7.x86_64",
            "7Server-RHSCL-2.4-7.3.Z:rh-mysql57-mysql-debuginfo-0:5.7.19-6.el7.x86_64",
            "7Server-RHSCL-2.4-7.3.Z:rh-mysql57-mysql-devel-0:5.7.19-6.el7.x86_64",
            "7Server-RHSCL-2.4-7.3.Z:rh-mysql57-mysql-errmsg-0:5.7.19-6.el7.x86_64",
            "7Server-RHSCL-2.4-7.3.Z:rh-mysql57-mysql-server-0:5.7.19-6.el7.x86_64",
            "7Server-RHSCL-2.4-7.3.Z:rh-mysql57-mysql-test-0:5.7.19-6.el7.x86_64",
            "7Server-RHSCL-2.4:rh-mysql57-mysql-0:5.7.19-6.el7.src",
            "7Server-RHSCL-2.4:rh-mysql57-mysql-0:5.7.19-6.el7.x86_64",
            "7Server-RHSCL-2.4:rh-mysql57-mysql-common-0:5.7.19-6.el7.x86_64",
            "7Server-RHSCL-2.4:rh-mysql57-mysql-config-0:5.7.19-6.el7.x86_64",
            "7Server-RHSCL-2.4:rh-mysql57-mysql-debuginfo-0:5.7.19-6.el7.x86_64",
            "7Server-RHSCL-2.4:rh-mysql57-mysql-devel-0:5.7.19-6.el7.x86_64",
            "7Server-RHSCL-2.4:rh-mysql57-mysql-errmsg-0:5.7.19-6.el7.x86_64",
            "7Server-RHSCL-2.4:rh-mysql57-mysql-server-0:5.7.19-6.el7.x86_64",
            "7Server-RHSCL-2.4:rh-mysql57-mysql-test-0:5.7.19-6.el7.x86_64",
            "7Workstation-RHSCL-2.4:rh-mysql57-mysql-0:5.7.19-6.el7.src",
            "7Workstation-RHSCL-2.4:rh-mysql57-mysql-0:5.7.19-6.el7.x86_64",
            "7Workstation-RHSCL-2.4:rh-mysql57-mysql-common-0:5.7.19-6.el7.x86_64",
            "7Workstation-RHSCL-2.4:rh-mysql57-mysql-config-0:5.7.19-6.el7.x86_64",
            "7Workstation-RHSCL-2.4:rh-mysql57-mysql-debuginfo-0:5.7.19-6.el7.x86_64",
            "7Workstation-RHSCL-2.4:rh-mysql57-mysql-devel-0:5.7.19-6.el7.x86_64",
            "7Workstation-RHSCL-2.4:rh-mysql57-mysql-errmsg-0:5.7.19-6.el7.x86_64",
            "7Workstation-RHSCL-2.4:rh-mysql57-mysql-server-0:5.7.19-6.el7.x86_64",
            "7Workstation-RHSCL-2.4:rh-mysql57-mysql-test-0:5.7.19-6.el7.x86_64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2017:2886"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "NONE",
            "integrityImpact": "NONE",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.0"
          },
          "products": [
            "6Server-RHSCL-2.4-6.7.Z:rh-mysql57-mysql-0:5.7.19-6.el6.src",
            "6Server-RHSCL-2.4-6.7.Z:rh-mysql57-mysql-0:5.7.19-6.el6.x86_64",
            "6Server-RHSCL-2.4-6.7.Z:rh-mysql57-mysql-common-0:5.7.19-6.el6.x86_64",
            "6Server-RHSCL-2.4-6.7.Z:rh-mysql57-mysql-config-0:5.7.19-6.el6.x86_64",
            "6Server-RHSCL-2.4-6.7.Z:rh-mysql57-mysql-debuginfo-0:5.7.19-6.el6.x86_64",
            "6Server-RHSCL-2.4-6.7.Z:rh-mysql57-mysql-devel-0:5.7.19-6.el6.x86_64",
            "6Server-RHSCL-2.4-6.7.Z:rh-mysql57-mysql-errmsg-0:5.7.19-6.el6.x86_64",
            "6Server-RHSCL-2.4-6.7.Z:rh-mysql57-mysql-server-0:5.7.19-6.el6.x86_64",
            "6Server-RHSCL-2.4-6.7.Z:rh-mysql57-mysql-test-0:5.7.19-6.el6.x86_64",
            "6Server-RHSCL-2.4:rh-mysql57-mysql-0:5.7.19-6.el6.src",
            "6Server-RHSCL-2.4:rh-mysql57-mysql-0:5.7.19-6.el6.x86_64",
            "6Server-RHSCL-2.4:rh-mysql57-mysql-common-0:5.7.19-6.el6.x86_64",
            "6Server-RHSCL-2.4:rh-mysql57-mysql-config-0:5.7.19-6.el6.x86_64",
            "6Server-RHSCL-2.4:rh-mysql57-mysql-debuginfo-0:5.7.19-6.el6.x86_64",
            "6Server-RHSCL-2.4:rh-mysql57-mysql-devel-0:5.7.19-6.el6.x86_64",
            "6Server-RHSCL-2.4:rh-mysql57-mysql-errmsg-0:5.7.19-6.el6.x86_64",
            "6Server-RHSCL-2.4:rh-mysql57-mysql-server-0:5.7.19-6.el6.x86_64",
            "6Server-RHSCL-2.4:rh-mysql57-mysql-test-0:5.7.19-6.el6.x86_64",
            "6Workstation-RHSCL-2.4:rh-mysql57-mysql-0:5.7.19-6.el6.src",
            "6Workstation-RHSCL-2.4:rh-mysql57-mysql-0:5.7.19-6.el6.x86_64",
            "6Workstation-RHSCL-2.4:rh-mysql57-mysql-common-0:5.7.19-6.el6.x86_64",
            "6Workstation-RHSCL-2.4:rh-mysql57-mysql-config-0:5.7.19-6.el6.x86_64",
            "6Workstation-RHSCL-2.4:rh-mysql57-mysql-debuginfo-0:5.7.19-6.el6.x86_64",
            "6Workstation-RHSCL-2.4:rh-mysql57-mysql-devel-0:5.7.19-6.el6.x86_64",
            "6Workstation-RHSCL-2.4:rh-mysql57-mysql-errmsg-0:5.7.19-6.el6.x86_64",
            "6Workstation-RHSCL-2.4:rh-mysql57-mysql-server-0:5.7.19-6.el6.x86_64",
            "6Workstation-RHSCL-2.4:rh-mysql57-mysql-test-0:5.7.19-6.el6.x86_64",
            "7Server-RHSCL-2.4-7.3.Z:rh-mysql57-mysql-0:5.7.19-6.el7.src",
            "7Server-RHSCL-2.4-7.3.Z:rh-mysql57-mysql-0:5.7.19-6.el7.x86_64",
            "7Server-RHSCL-2.4-7.3.Z:rh-mysql57-mysql-common-0:5.7.19-6.el7.x86_64",
            "7Server-RHSCL-2.4-7.3.Z:rh-mysql57-mysql-config-0:5.7.19-6.el7.x86_64",
            "7Server-RHSCL-2.4-7.3.Z:rh-mysql57-mysql-debuginfo-0:5.7.19-6.el7.x86_64",
            "7Server-RHSCL-2.4-7.3.Z:rh-mysql57-mysql-devel-0:5.7.19-6.el7.x86_64",
            "7Server-RHSCL-2.4-7.3.Z:rh-mysql57-mysql-errmsg-0:5.7.19-6.el7.x86_64",
            "7Server-RHSCL-2.4-7.3.Z:rh-mysql57-mysql-server-0:5.7.19-6.el7.x86_64",
            "7Server-RHSCL-2.4-7.3.Z:rh-mysql57-mysql-test-0:5.7.19-6.el7.x86_64",
            "7Server-RHSCL-2.4:rh-mysql57-mysql-0:5.7.19-6.el7.src",
            "7Server-RHSCL-2.4:rh-mysql57-mysql-0:5.7.19-6.el7.x86_64",
            "7Server-RHSCL-2.4:rh-mysql57-mysql-common-0:5.7.19-6.el7.x86_64",
            "7Server-RHSCL-2.4:rh-mysql57-mysql-config-0:5.7.19-6.el7.x86_64",
            "7Server-RHSCL-2.4:rh-mysql57-mysql-debuginfo-0:5.7.19-6.el7.x86_64",
            "7Server-RHSCL-2.4:rh-mysql57-mysql-devel-0:5.7.19-6.el7.x86_64",
            "7Server-RHSCL-2.4:rh-mysql57-mysql-errmsg-0:5.7.19-6.el7.x86_64",
            "7Server-RHSCL-2.4:rh-mysql57-mysql-server-0:5.7.19-6.el7.x86_64",
            "7Server-RHSCL-2.4:rh-mysql57-mysql-test-0:5.7.19-6.el7.x86_64",
            "7Workstation-RHSCL-2.4:rh-mysql57-mysql-0:5.7.19-6.el7.src",
            "7Workstation-RHSCL-2.4:rh-mysql57-mysql-0:5.7.19-6.el7.x86_64",
            "7Workstation-RHSCL-2.4:rh-mysql57-mysql-common-0:5.7.19-6.el7.x86_64",
            "7Workstation-RHSCL-2.4:rh-mysql57-mysql-config-0:5.7.19-6.el7.x86_64",
            "7Workstation-RHSCL-2.4:rh-mysql57-mysql-debuginfo-0:5.7.19-6.el7.x86_64",
            "7Workstation-RHSCL-2.4:rh-mysql57-mysql-devel-0:5.7.19-6.el7.x86_64",
            "7Workstation-RHSCL-2.4:rh-mysql57-mysql-errmsg-0:5.7.19-6.el7.x86_64",
            "7Workstation-RHSCL-2.4:rh-mysql57-mysql-server-0:5.7.19-6.el7.x86_64",
            "7Workstation-RHSCL-2.4:rh-mysql57-mysql-test-0:5.7.19-6.el7.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "mysql: integer underflow in get_56_lenc_string() leading to DoS (CPU Apr 2017)"
    },
    {
      "cve": "CVE-2017-3600",
      "cwe": {
        "id": "CWE-77",
        "name": "Improper Neutralization of Special Elements used in a Command (\u0027Command Injection\u0027)"
      },
      "discovery_date": "2017-03-11T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "1433010"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "It was discovered that the mysql and mysqldump tools did not correctly handle database and table names containing newline characters. A database user with privileges to create databases or tables could cause the mysql command to execute arbitrary shell or SQL commands while restoring database backup created using the mysqldump tool.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "mysql: Incorrect input validation allowing code execution via mysqldump",
          "title": "Vulnerability summary"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "6Server-RHSCL-2.4-6.7.Z:rh-mysql57-mysql-0:5.7.19-6.el6.src",
          "6Server-RHSCL-2.4-6.7.Z:rh-mysql57-mysql-0:5.7.19-6.el6.x86_64",
          "6Server-RHSCL-2.4-6.7.Z:rh-mysql57-mysql-common-0:5.7.19-6.el6.x86_64",
          "6Server-RHSCL-2.4-6.7.Z:rh-mysql57-mysql-config-0:5.7.19-6.el6.x86_64",
          "6Server-RHSCL-2.4-6.7.Z:rh-mysql57-mysql-debuginfo-0:5.7.19-6.el6.x86_64",
          "6Server-RHSCL-2.4-6.7.Z:rh-mysql57-mysql-devel-0:5.7.19-6.el6.x86_64",
          "6Server-RHSCL-2.4-6.7.Z:rh-mysql57-mysql-errmsg-0:5.7.19-6.el6.x86_64",
          "6Server-RHSCL-2.4-6.7.Z:rh-mysql57-mysql-server-0:5.7.19-6.el6.x86_64",
          "6Server-RHSCL-2.4-6.7.Z:rh-mysql57-mysql-test-0:5.7.19-6.el6.x86_64",
          "6Server-RHSCL-2.4:rh-mysql57-mysql-0:5.7.19-6.el6.src",
          "6Server-RHSCL-2.4:rh-mysql57-mysql-0:5.7.19-6.el6.x86_64",
          "6Server-RHSCL-2.4:rh-mysql57-mysql-common-0:5.7.19-6.el6.x86_64",
          "6Server-RHSCL-2.4:rh-mysql57-mysql-config-0:5.7.19-6.el6.x86_64",
          "6Server-RHSCL-2.4:rh-mysql57-mysql-debuginfo-0:5.7.19-6.el6.x86_64",
          "6Server-RHSCL-2.4:rh-mysql57-mysql-devel-0:5.7.19-6.el6.x86_64",
          "6Server-RHSCL-2.4:rh-mysql57-mysql-errmsg-0:5.7.19-6.el6.x86_64",
          "6Server-RHSCL-2.4:rh-mysql57-mysql-server-0:5.7.19-6.el6.x86_64",
          "6Server-RHSCL-2.4:rh-mysql57-mysql-test-0:5.7.19-6.el6.x86_64",
          "6Workstation-RHSCL-2.4:rh-mysql57-mysql-0:5.7.19-6.el6.src",
          "6Workstation-RHSCL-2.4:rh-mysql57-mysql-0:5.7.19-6.el6.x86_64",
          "6Workstation-RHSCL-2.4:rh-mysql57-mysql-common-0:5.7.19-6.el6.x86_64",
          "6Workstation-RHSCL-2.4:rh-mysql57-mysql-config-0:5.7.19-6.el6.x86_64",
          "6Workstation-RHSCL-2.4:rh-mysql57-mysql-debuginfo-0:5.7.19-6.el6.x86_64",
          "6Workstation-RHSCL-2.4:rh-mysql57-mysql-devel-0:5.7.19-6.el6.x86_64",
          "6Workstation-RHSCL-2.4:rh-mysql57-mysql-errmsg-0:5.7.19-6.el6.x86_64",
          "6Workstation-RHSCL-2.4:rh-mysql57-mysql-server-0:5.7.19-6.el6.x86_64",
          "6Workstation-RHSCL-2.4:rh-mysql57-mysql-test-0:5.7.19-6.el6.x86_64",
          "7Server-RHSCL-2.4-7.3.Z:rh-mysql57-mysql-0:5.7.19-6.el7.src",
          "7Server-RHSCL-2.4-7.3.Z:rh-mysql57-mysql-0:5.7.19-6.el7.x86_64",
          "7Server-RHSCL-2.4-7.3.Z:rh-mysql57-mysql-common-0:5.7.19-6.el7.x86_64",
          "7Server-RHSCL-2.4-7.3.Z:rh-mysql57-mysql-config-0:5.7.19-6.el7.x86_64",
          "7Server-RHSCL-2.4-7.3.Z:rh-mysql57-mysql-debuginfo-0:5.7.19-6.el7.x86_64",
          "7Server-RHSCL-2.4-7.3.Z:rh-mysql57-mysql-devel-0:5.7.19-6.el7.x86_64",
          "7Server-RHSCL-2.4-7.3.Z:rh-mysql57-mysql-errmsg-0:5.7.19-6.el7.x86_64",
          "7Server-RHSCL-2.4-7.3.Z:rh-mysql57-mysql-server-0:5.7.19-6.el7.x86_64",
          "7Server-RHSCL-2.4-7.3.Z:rh-mysql57-mysql-test-0:5.7.19-6.el7.x86_64",
          "7Server-RHSCL-2.4:rh-mysql57-mysql-0:5.7.19-6.el7.src",
          "7Server-RHSCL-2.4:rh-mysql57-mysql-0:5.7.19-6.el7.x86_64",
          "7Server-RHSCL-2.4:rh-mysql57-mysql-common-0:5.7.19-6.el7.x86_64",
          "7Server-RHSCL-2.4:rh-mysql57-mysql-config-0:5.7.19-6.el7.x86_64",
          "7Server-RHSCL-2.4:rh-mysql57-mysql-debuginfo-0:5.7.19-6.el7.x86_64",
          "7Server-RHSCL-2.4:rh-mysql57-mysql-devel-0:5.7.19-6.el7.x86_64",
          "7Server-RHSCL-2.4:rh-mysql57-mysql-errmsg-0:5.7.19-6.el7.x86_64",
          "7Server-RHSCL-2.4:rh-mysql57-mysql-server-0:5.7.19-6.el7.x86_64",
          "7Server-RHSCL-2.4:rh-mysql57-mysql-test-0:5.7.19-6.el7.x86_64",
          "7Workstation-RHSCL-2.4:rh-mysql57-mysql-0:5.7.19-6.el7.src",
          "7Workstation-RHSCL-2.4:rh-mysql57-mysql-0:5.7.19-6.el7.x86_64",
          "7Workstation-RHSCL-2.4:rh-mysql57-mysql-common-0:5.7.19-6.el7.x86_64",
          "7Workstation-RHSCL-2.4:rh-mysql57-mysql-config-0:5.7.19-6.el7.x86_64",
          "7Workstation-RHSCL-2.4:rh-mysql57-mysql-debuginfo-0:5.7.19-6.el7.x86_64",
          "7Workstation-RHSCL-2.4:rh-mysql57-mysql-devel-0:5.7.19-6.el7.x86_64",
          "7Workstation-RHSCL-2.4:rh-mysql57-mysql-errmsg-0:5.7.19-6.el7.x86_64",
          "7Workstation-RHSCL-2.4:rh-mysql57-mysql-server-0:5.7.19-6.el7.x86_64",
          "7Workstation-RHSCL-2.4:rh-mysql57-mysql-test-0:5.7.19-6.el7.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2017-3600"
        },
        {
          "category": "external",
          "summary": "RHBZ#1433010",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1433010"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2017-3600",
          "url": "https://www.cve.org/CVERecord?id=CVE-2017-3600"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2017-3600",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2017-3600"
        },
        {
          "category": "external",
          "summary": "https://blog.tarq.io/cve-2016-5483-backdooring-mysqldump-backups/",
          "url": "https://blog.tarq.io/cve-2016-5483-backdooring-mysqldump-backups/"
        },
        {
          "category": "external",
          "summary": "https://blog.tarq.io/cve-2016-5483-galera-remote-command-execution-via-crafted-database-name/",
          "url": "https://blog.tarq.io/cve-2016-5483-galera-remote-command-execution-via-crafted-database-name/"
        }
      ],
      "release_date": "2017-03-09T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2017-10-12T07:53:15+00:00",
          "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAfter installing this update, the MySQL server daemon (mysqld) will be restarted automatically.",
          "product_ids": [
            "6Server-RHSCL-2.4-6.7.Z:rh-mysql57-mysql-0:5.7.19-6.el6.src",
            "6Server-RHSCL-2.4-6.7.Z:rh-mysql57-mysql-0:5.7.19-6.el6.x86_64",
            "6Server-RHSCL-2.4-6.7.Z:rh-mysql57-mysql-common-0:5.7.19-6.el6.x86_64",
            "6Server-RHSCL-2.4-6.7.Z:rh-mysql57-mysql-config-0:5.7.19-6.el6.x86_64",
            "6Server-RHSCL-2.4-6.7.Z:rh-mysql57-mysql-debuginfo-0:5.7.19-6.el6.x86_64",
            "6Server-RHSCL-2.4-6.7.Z:rh-mysql57-mysql-devel-0:5.7.19-6.el6.x86_64",
            "6Server-RHSCL-2.4-6.7.Z:rh-mysql57-mysql-errmsg-0:5.7.19-6.el6.x86_64",
            "6Server-RHSCL-2.4-6.7.Z:rh-mysql57-mysql-server-0:5.7.19-6.el6.x86_64",
            "6Server-RHSCL-2.4-6.7.Z:rh-mysql57-mysql-test-0:5.7.19-6.el6.x86_64",
            "6Server-RHSCL-2.4:rh-mysql57-mysql-0:5.7.19-6.el6.src",
            "6Server-RHSCL-2.4:rh-mysql57-mysql-0:5.7.19-6.el6.x86_64",
            "6Server-RHSCL-2.4:rh-mysql57-mysql-common-0:5.7.19-6.el6.x86_64",
            "6Server-RHSCL-2.4:rh-mysql57-mysql-config-0:5.7.19-6.el6.x86_64",
            "6Server-RHSCL-2.4:rh-mysql57-mysql-debuginfo-0:5.7.19-6.el6.x86_64",
            "6Server-RHSCL-2.4:rh-mysql57-mysql-devel-0:5.7.19-6.el6.x86_64",
            "6Server-RHSCL-2.4:rh-mysql57-mysql-errmsg-0:5.7.19-6.el6.x86_64",
            "6Server-RHSCL-2.4:rh-mysql57-mysql-server-0:5.7.19-6.el6.x86_64",
            "6Server-RHSCL-2.4:rh-mysql57-mysql-test-0:5.7.19-6.el6.x86_64",
            "6Workstation-RHSCL-2.4:rh-mysql57-mysql-0:5.7.19-6.el6.src",
            "6Workstation-RHSCL-2.4:rh-mysql57-mysql-0:5.7.19-6.el6.x86_64",
            "6Workstation-RHSCL-2.4:rh-mysql57-mysql-common-0:5.7.19-6.el6.x86_64",
            "6Workstation-RHSCL-2.4:rh-mysql57-mysql-config-0:5.7.19-6.el6.x86_64",
            "6Workstation-RHSCL-2.4:rh-mysql57-mysql-debuginfo-0:5.7.19-6.el6.x86_64",
            "6Workstation-RHSCL-2.4:rh-mysql57-mysql-devel-0:5.7.19-6.el6.x86_64",
            "6Workstation-RHSCL-2.4:rh-mysql57-mysql-errmsg-0:5.7.19-6.el6.x86_64",
            "6Workstation-RHSCL-2.4:rh-mysql57-mysql-server-0:5.7.19-6.el6.x86_64",
            "6Workstation-RHSCL-2.4:rh-mysql57-mysql-test-0:5.7.19-6.el6.x86_64",
            "7Server-RHSCL-2.4-7.3.Z:rh-mysql57-mysql-0:5.7.19-6.el7.src",
            "7Server-RHSCL-2.4-7.3.Z:rh-mysql57-mysql-0:5.7.19-6.el7.x86_64",
            "7Server-RHSCL-2.4-7.3.Z:rh-mysql57-mysql-common-0:5.7.19-6.el7.x86_64",
            "7Server-RHSCL-2.4-7.3.Z:rh-mysql57-mysql-config-0:5.7.19-6.el7.x86_64",
            "7Server-RHSCL-2.4-7.3.Z:rh-mysql57-mysql-debuginfo-0:5.7.19-6.el7.x86_64",
            "7Server-RHSCL-2.4-7.3.Z:rh-mysql57-mysql-devel-0:5.7.19-6.el7.x86_64",
            "7Server-RHSCL-2.4-7.3.Z:rh-mysql57-mysql-errmsg-0:5.7.19-6.el7.x86_64",
            "7Server-RHSCL-2.4-7.3.Z:rh-mysql57-mysql-server-0:5.7.19-6.el7.x86_64",
            "7Server-RHSCL-2.4-7.3.Z:rh-mysql57-mysql-test-0:5.7.19-6.el7.x86_64",
            "7Server-RHSCL-2.4:rh-mysql57-mysql-0:5.7.19-6.el7.src",
            "7Server-RHSCL-2.4:rh-mysql57-mysql-0:5.7.19-6.el7.x86_64",
            "7Server-RHSCL-2.4:rh-mysql57-mysql-common-0:5.7.19-6.el7.x86_64",
            "7Server-RHSCL-2.4:rh-mysql57-mysql-config-0:5.7.19-6.el7.x86_64",
            "7Server-RHSCL-2.4:rh-mysql57-mysql-debuginfo-0:5.7.19-6.el7.x86_64",
            "7Server-RHSCL-2.4:rh-mysql57-mysql-devel-0:5.7.19-6.el7.x86_64",
            "7Server-RHSCL-2.4:rh-mysql57-mysql-errmsg-0:5.7.19-6.el7.x86_64",
            "7Server-RHSCL-2.4:rh-mysql57-mysql-server-0:5.7.19-6.el7.x86_64",
            "7Server-RHSCL-2.4:rh-mysql57-mysql-test-0:5.7.19-6.el7.x86_64",
            "7Workstation-RHSCL-2.4:rh-mysql57-mysql-0:5.7.19-6.el7.src",
            "7Workstation-RHSCL-2.4:rh-mysql57-mysql-0:5.7.19-6.el7.x86_64",
            "7Workstation-RHSCL-2.4:rh-mysql57-mysql-common-0:5.7.19-6.el7.x86_64",
            "7Workstation-RHSCL-2.4:rh-mysql57-mysql-config-0:5.7.19-6.el7.x86_64",
            "7Workstation-RHSCL-2.4:rh-mysql57-mysql-debuginfo-0:5.7.19-6.el7.x86_64",
            "7Workstation-RHSCL-2.4:rh-mysql57-mysql-devel-0:5.7.19-6.el7.x86_64",
            "7Workstation-RHSCL-2.4:rh-mysql57-mysql-errmsg-0:5.7.19-6.el7.x86_64",
            "7Workstation-RHSCL-2.4:rh-mysql57-mysql-server-0:5.7.19-6.el7.x86_64",
            "7Workstation-RHSCL-2.4:rh-mysql57-mysql-test-0:5.7.19-6.el7.x86_64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2017:2886"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "HIGH",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 6.4,
            "baseSeverity": "MEDIUM",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "HIGH",
            "privilegesRequired": "HIGH",
            "scope": "UNCHANGED",
            "userInteraction": "REQUIRED",
            "vectorString": "CVSS:3.0/AV:N/AC:H/PR:H/UI:R/S:U/C:H/I:H/A:H",
            "version": "3.0"
          },
          "products": [
            "6Server-RHSCL-2.4-6.7.Z:rh-mysql57-mysql-0:5.7.19-6.el6.src",
            "6Server-RHSCL-2.4-6.7.Z:rh-mysql57-mysql-0:5.7.19-6.el6.x86_64",
            "6Server-RHSCL-2.4-6.7.Z:rh-mysql57-mysql-common-0:5.7.19-6.el6.x86_64",
            "6Server-RHSCL-2.4-6.7.Z:rh-mysql57-mysql-config-0:5.7.19-6.el6.x86_64",
            "6Server-RHSCL-2.4-6.7.Z:rh-mysql57-mysql-debuginfo-0:5.7.19-6.el6.x86_64",
            "6Server-RHSCL-2.4-6.7.Z:rh-mysql57-mysql-devel-0:5.7.19-6.el6.x86_64",
            "6Server-RHSCL-2.4-6.7.Z:rh-mysql57-mysql-errmsg-0:5.7.19-6.el6.x86_64",
            "6Server-RHSCL-2.4-6.7.Z:rh-mysql57-mysql-server-0:5.7.19-6.el6.x86_64",
            "6Server-RHSCL-2.4-6.7.Z:rh-mysql57-mysql-test-0:5.7.19-6.el6.x86_64",
            "6Server-RHSCL-2.4:rh-mysql57-mysql-0:5.7.19-6.el6.src",
            "6Server-RHSCL-2.4:rh-mysql57-mysql-0:5.7.19-6.el6.x86_64",
            "6Server-RHSCL-2.4:rh-mysql57-mysql-common-0:5.7.19-6.el6.x86_64",
            "6Server-RHSCL-2.4:rh-mysql57-mysql-config-0:5.7.19-6.el6.x86_64",
            "6Server-RHSCL-2.4:rh-mysql57-mysql-debuginfo-0:5.7.19-6.el6.x86_64",
            "6Server-RHSCL-2.4:rh-mysql57-mysql-devel-0:5.7.19-6.el6.x86_64",
            "6Server-RHSCL-2.4:rh-mysql57-mysql-errmsg-0:5.7.19-6.el6.x86_64",
            "6Server-RHSCL-2.4:rh-mysql57-mysql-server-0:5.7.19-6.el6.x86_64",
            "6Server-RHSCL-2.4:rh-mysql57-mysql-test-0:5.7.19-6.el6.x86_64",
            "6Workstation-RHSCL-2.4:rh-mysql57-mysql-0:5.7.19-6.el6.src",
            "6Workstation-RHSCL-2.4:rh-mysql57-mysql-0:5.7.19-6.el6.x86_64",
            "6Workstation-RHSCL-2.4:rh-mysql57-mysql-common-0:5.7.19-6.el6.x86_64",
            "6Workstation-RHSCL-2.4:rh-mysql57-mysql-config-0:5.7.19-6.el6.x86_64",
            "6Workstation-RHSCL-2.4:rh-mysql57-mysql-debuginfo-0:5.7.19-6.el6.x86_64",
            "6Workstation-RHSCL-2.4:rh-mysql57-mysql-devel-0:5.7.19-6.el6.x86_64",
            "6Workstation-RHSCL-2.4:rh-mysql57-mysql-errmsg-0:5.7.19-6.el6.x86_64",
            "6Workstation-RHSCL-2.4:rh-mysql57-mysql-server-0:5.7.19-6.el6.x86_64",
            "6Workstation-RHSCL-2.4:rh-mysql57-mysql-test-0:5.7.19-6.el6.x86_64",
            "7Server-RHSCL-2.4-7.3.Z:rh-mysql57-mysql-0:5.7.19-6.el7.src",
            "7Server-RHSCL-2.4-7.3.Z:rh-mysql57-mysql-0:5.7.19-6.el7.x86_64",
            "7Server-RHSCL-2.4-7.3.Z:rh-mysql57-mysql-common-0:5.7.19-6.el7.x86_64",
            "7Server-RHSCL-2.4-7.3.Z:rh-mysql57-mysql-config-0:5.7.19-6.el7.x86_64",
            "7Server-RHSCL-2.4-7.3.Z:rh-mysql57-mysql-debuginfo-0:5.7.19-6.el7.x86_64",
            "7Server-RHSCL-2.4-7.3.Z:rh-mysql57-mysql-devel-0:5.7.19-6.el7.x86_64",
            "7Server-RHSCL-2.4-7.3.Z:rh-mysql57-mysql-errmsg-0:5.7.19-6.el7.x86_64",
            "7Server-RHSCL-2.4-7.3.Z:rh-mysql57-mysql-server-0:5.7.19-6.el7.x86_64",
            "7Server-RHSCL-2.4-7.3.Z:rh-mysql57-mysql-test-0:5.7.19-6.el7.x86_64",
            "7Server-RHSCL-2.4:rh-mysql57-mysql-0:5.7.19-6.el7.src",
            "7Server-RHSCL-2.4:rh-mysql57-mysql-0:5.7.19-6.el7.x86_64",
            "7Server-RHSCL-2.4:rh-mysql57-mysql-common-0:5.7.19-6.el7.x86_64",
            "7Server-RHSCL-2.4:rh-mysql57-mysql-config-0:5.7.19-6.el7.x86_64",
            "7Server-RHSCL-2.4:rh-mysql57-mysql-debuginfo-0:5.7.19-6.el7.x86_64",
            "7Server-RHSCL-2.4:rh-mysql57-mysql-devel-0:5.7.19-6.el7.x86_64",
            "7Server-RHSCL-2.4:rh-mysql57-mysql-errmsg-0:5.7.19-6.el7.x86_64",
            "7Server-RHSCL-2.4:rh-mysql57-mysql-server-0:5.7.19-6.el7.x86_64",
            "7Server-RHSCL-2.4:rh-mysql57-mysql-test-0:5.7.19-6.el7.x86_64",
            "7Workstation-RHSCL-2.4:rh-mysql57-mysql-0:5.7.19-6.el7.src",
            "7Workstation-RHSCL-2.4:rh-mysql57-mysql-0:5.7.19-6.el7.x86_64",
            "7Workstation-RHSCL-2.4:rh-mysql57-mysql-common-0:5.7.19-6.el7.x86_64",
            "7Workstation-RHSCL-2.4:rh-mysql57-mysql-config-0:5.7.19-6.el7.x86_64",
            "7Workstation-RHSCL-2.4:rh-mysql57-mysql-debuginfo-0:5.7.19-6.el7.x86_64",
            "7Workstation-RHSCL-2.4:rh-mysql57-mysql-devel-0:5.7.19-6.el7.x86_64",
            "7Workstation-RHSCL-2.4:rh-mysql57-mysql-errmsg-0:5.7.19-6.el7.x86_64",
            "7Workstation-RHSCL-2.4:rh-mysql57-mysql-server-0:5.7.19-6.el7.x86_64",
            "7Workstation-RHSCL-2.4:rh-mysql57-mysql-test-0:5.7.19-6.el7.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Moderate"
        }
      ],
      "title": "mysql: Incorrect input validation allowing code execution via mysqldump"
    },
    {
      "cve": "CVE-2017-3633",
      "discovery_date": "2017-07-19T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "1472683"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Memcached). Supported versions that are affected are 5.6.36 and earlier and 5.7.18 and earlier. Difficult to exploit vulnerability allows unauthenticated attacker with network access via Memcached to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server as well as unauthorized update, insert or delete access to some of MySQL Server accessible data. CVSS 3.0 Base Score 6.5 (Integrity and Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:H).",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "mysql: Server: Memcached unspecified vulnerability (CPU Jul 2017)",
          "title": "Vulnerability summary"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "6Server-RHSCL-2.4-6.7.Z:rh-mysql57-mysql-0:5.7.19-6.el6.src",
          "6Server-RHSCL-2.4-6.7.Z:rh-mysql57-mysql-0:5.7.19-6.el6.x86_64",
          "6Server-RHSCL-2.4-6.7.Z:rh-mysql57-mysql-common-0:5.7.19-6.el6.x86_64",
          "6Server-RHSCL-2.4-6.7.Z:rh-mysql57-mysql-config-0:5.7.19-6.el6.x86_64",
          "6Server-RHSCL-2.4-6.7.Z:rh-mysql57-mysql-debuginfo-0:5.7.19-6.el6.x86_64",
          "6Server-RHSCL-2.4-6.7.Z:rh-mysql57-mysql-devel-0:5.7.19-6.el6.x86_64",
          "6Server-RHSCL-2.4-6.7.Z:rh-mysql57-mysql-errmsg-0:5.7.19-6.el6.x86_64",
          "6Server-RHSCL-2.4-6.7.Z:rh-mysql57-mysql-server-0:5.7.19-6.el6.x86_64",
          "6Server-RHSCL-2.4-6.7.Z:rh-mysql57-mysql-test-0:5.7.19-6.el6.x86_64",
          "6Server-RHSCL-2.4:rh-mysql57-mysql-0:5.7.19-6.el6.src",
          "6Server-RHSCL-2.4:rh-mysql57-mysql-0:5.7.19-6.el6.x86_64",
          "6Server-RHSCL-2.4:rh-mysql57-mysql-common-0:5.7.19-6.el6.x86_64",
          "6Server-RHSCL-2.4:rh-mysql57-mysql-config-0:5.7.19-6.el6.x86_64",
          "6Server-RHSCL-2.4:rh-mysql57-mysql-debuginfo-0:5.7.19-6.el6.x86_64",
          "6Server-RHSCL-2.4:rh-mysql57-mysql-devel-0:5.7.19-6.el6.x86_64",
          "6Server-RHSCL-2.4:rh-mysql57-mysql-errmsg-0:5.7.19-6.el6.x86_64",
          "6Server-RHSCL-2.4:rh-mysql57-mysql-server-0:5.7.19-6.el6.x86_64",
          "6Server-RHSCL-2.4:rh-mysql57-mysql-test-0:5.7.19-6.el6.x86_64",
          "6Workstation-RHSCL-2.4:rh-mysql57-mysql-0:5.7.19-6.el6.src",
          "6Workstation-RHSCL-2.4:rh-mysql57-mysql-0:5.7.19-6.el6.x86_64",
          "6Workstation-RHSCL-2.4:rh-mysql57-mysql-common-0:5.7.19-6.el6.x86_64",
          "6Workstation-RHSCL-2.4:rh-mysql57-mysql-config-0:5.7.19-6.el6.x86_64",
          "6Workstation-RHSCL-2.4:rh-mysql57-mysql-debuginfo-0:5.7.19-6.el6.x86_64",
          "6Workstation-RHSCL-2.4:rh-mysql57-mysql-devel-0:5.7.19-6.el6.x86_64",
          "6Workstation-RHSCL-2.4:rh-mysql57-mysql-errmsg-0:5.7.19-6.el6.x86_64",
          "6Workstation-RHSCL-2.4:rh-mysql57-mysql-server-0:5.7.19-6.el6.x86_64",
          "6Workstation-RHSCL-2.4:rh-mysql57-mysql-test-0:5.7.19-6.el6.x86_64",
          "7Server-RHSCL-2.4-7.3.Z:rh-mysql57-mysql-0:5.7.19-6.el7.src",
          "7Server-RHSCL-2.4-7.3.Z:rh-mysql57-mysql-0:5.7.19-6.el7.x86_64",
          "7Server-RHSCL-2.4-7.3.Z:rh-mysql57-mysql-common-0:5.7.19-6.el7.x86_64",
          "7Server-RHSCL-2.4-7.3.Z:rh-mysql57-mysql-config-0:5.7.19-6.el7.x86_64",
          "7Server-RHSCL-2.4-7.3.Z:rh-mysql57-mysql-debuginfo-0:5.7.19-6.el7.x86_64",
          "7Server-RHSCL-2.4-7.3.Z:rh-mysql57-mysql-devel-0:5.7.19-6.el7.x86_64",
          "7Server-RHSCL-2.4-7.3.Z:rh-mysql57-mysql-errmsg-0:5.7.19-6.el7.x86_64",
          "7Server-RHSCL-2.4-7.3.Z:rh-mysql57-mysql-server-0:5.7.19-6.el7.x86_64",
          "7Server-RHSCL-2.4-7.3.Z:rh-mysql57-mysql-test-0:5.7.19-6.el7.x86_64",
          "7Server-RHSCL-2.4:rh-mysql57-mysql-0:5.7.19-6.el7.src",
          "7Server-RHSCL-2.4:rh-mysql57-mysql-0:5.7.19-6.el7.x86_64",
          "7Server-RHSCL-2.4:rh-mysql57-mysql-common-0:5.7.19-6.el7.x86_64",
          "7Server-RHSCL-2.4:rh-mysql57-mysql-config-0:5.7.19-6.el7.x86_64",
          "7Server-RHSCL-2.4:rh-mysql57-mysql-debuginfo-0:5.7.19-6.el7.x86_64",
          "7Server-RHSCL-2.4:rh-mysql57-mysql-devel-0:5.7.19-6.el7.x86_64",
          "7Server-RHSCL-2.4:rh-mysql57-mysql-errmsg-0:5.7.19-6.el7.x86_64",
          "7Server-RHSCL-2.4:rh-mysql57-mysql-server-0:5.7.19-6.el7.x86_64",
          "7Server-RHSCL-2.4:rh-mysql57-mysql-test-0:5.7.19-6.el7.x86_64",
          "7Workstation-RHSCL-2.4:rh-mysql57-mysql-0:5.7.19-6.el7.src",
          "7Workstation-RHSCL-2.4:rh-mysql57-mysql-0:5.7.19-6.el7.x86_64",
          "7Workstation-RHSCL-2.4:rh-mysql57-mysql-common-0:5.7.19-6.el7.x86_64",
          "7Workstation-RHSCL-2.4:rh-mysql57-mysql-config-0:5.7.19-6.el7.x86_64",
          "7Workstation-RHSCL-2.4:rh-mysql57-mysql-debuginfo-0:5.7.19-6.el7.x86_64",
          "7Workstation-RHSCL-2.4:rh-mysql57-mysql-devel-0:5.7.19-6.el7.x86_64",
          "7Workstation-RHSCL-2.4:rh-mysql57-mysql-errmsg-0:5.7.19-6.el7.x86_64",
          "7Workstation-RHSCL-2.4:rh-mysql57-mysql-server-0:5.7.19-6.el7.x86_64",
          "7Workstation-RHSCL-2.4:rh-mysql57-mysql-test-0:5.7.19-6.el7.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2017-3633"
        },
        {
          "category": "external",
          "summary": "RHBZ#1472683",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1472683"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2017-3633",
          "url": "https://www.cve.org/CVERecord?id=CVE-2017-3633"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2017-3633",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2017-3633"
        },
        {
          "category": "external",
          "summary": "http://www.oracle.com/technetwork/security-advisory/cpujul2017-3236622.html#AppendixMSQL",
          "url": "http://www.oracle.com/technetwork/security-advisory/cpujul2017-3236622.html#AppendixMSQL"
        }
      ],
      "release_date": "2017-07-19T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2017-10-12T07:53:15+00:00",
          "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAfter installing this update, the MySQL server daemon (mysqld) will be restarted automatically.",
          "product_ids": [
            "6Server-RHSCL-2.4-6.7.Z:rh-mysql57-mysql-0:5.7.19-6.el6.src",
            "6Server-RHSCL-2.4-6.7.Z:rh-mysql57-mysql-0:5.7.19-6.el6.x86_64",
            "6Server-RHSCL-2.4-6.7.Z:rh-mysql57-mysql-common-0:5.7.19-6.el6.x86_64",
            "6Server-RHSCL-2.4-6.7.Z:rh-mysql57-mysql-config-0:5.7.19-6.el6.x86_64",
            "6Server-RHSCL-2.4-6.7.Z:rh-mysql57-mysql-debuginfo-0:5.7.19-6.el6.x86_64",
            "6Server-RHSCL-2.4-6.7.Z:rh-mysql57-mysql-devel-0:5.7.19-6.el6.x86_64",
            "6Server-RHSCL-2.4-6.7.Z:rh-mysql57-mysql-errmsg-0:5.7.19-6.el6.x86_64",
            "6Server-RHSCL-2.4-6.7.Z:rh-mysql57-mysql-server-0:5.7.19-6.el6.x86_64",
            "6Server-RHSCL-2.4-6.7.Z:rh-mysql57-mysql-test-0:5.7.19-6.el6.x86_64",
            "6Server-RHSCL-2.4:rh-mysql57-mysql-0:5.7.19-6.el6.src",
            "6Server-RHSCL-2.4:rh-mysql57-mysql-0:5.7.19-6.el6.x86_64",
            "6Server-RHSCL-2.4:rh-mysql57-mysql-common-0:5.7.19-6.el6.x86_64",
            "6Server-RHSCL-2.4:rh-mysql57-mysql-config-0:5.7.19-6.el6.x86_64",
            "6Server-RHSCL-2.4:rh-mysql57-mysql-debuginfo-0:5.7.19-6.el6.x86_64",
            "6Server-RHSCL-2.4:rh-mysql57-mysql-devel-0:5.7.19-6.el6.x86_64",
            "6Server-RHSCL-2.4:rh-mysql57-mysql-errmsg-0:5.7.19-6.el6.x86_64",
            "6Server-RHSCL-2.4:rh-mysql57-mysql-server-0:5.7.19-6.el6.x86_64",
            "6Server-RHSCL-2.4:rh-mysql57-mysql-test-0:5.7.19-6.el6.x86_64",
            "6Workstation-RHSCL-2.4:rh-mysql57-mysql-0:5.7.19-6.el6.src",
            "6Workstation-RHSCL-2.4:rh-mysql57-mysql-0:5.7.19-6.el6.x86_64",
            "6Workstation-RHSCL-2.4:rh-mysql57-mysql-common-0:5.7.19-6.el6.x86_64",
            "6Workstation-RHSCL-2.4:rh-mysql57-mysql-config-0:5.7.19-6.el6.x86_64",
            "6Workstation-RHSCL-2.4:rh-mysql57-mysql-debuginfo-0:5.7.19-6.el6.x86_64",
            "6Workstation-RHSCL-2.4:rh-mysql57-mysql-devel-0:5.7.19-6.el6.x86_64",
            "6Workstation-RHSCL-2.4:rh-mysql57-mysql-errmsg-0:5.7.19-6.el6.x86_64",
            "6Workstation-RHSCL-2.4:rh-mysql57-mysql-server-0:5.7.19-6.el6.x86_64",
            "6Workstation-RHSCL-2.4:rh-mysql57-mysql-test-0:5.7.19-6.el6.x86_64",
            "7Server-RHSCL-2.4-7.3.Z:rh-mysql57-mysql-0:5.7.19-6.el7.src",
            "7Server-RHSCL-2.4-7.3.Z:rh-mysql57-mysql-0:5.7.19-6.el7.x86_64",
            "7Server-RHSCL-2.4-7.3.Z:rh-mysql57-mysql-common-0:5.7.19-6.el7.x86_64",
            "7Server-RHSCL-2.4-7.3.Z:rh-mysql57-mysql-config-0:5.7.19-6.el7.x86_64",
            "7Server-RHSCL-2.4-7.3.Z:rh-mysql57-mysql-debuginfo-0:5.7.19-6.el7.x86_64",
            "7Server-RHSCL-2.4-7.3.Z:rh-mysql57-mysql-devel-0:5.7.19-6.el7.x86_64",
            "7Server-RHSCL-2.4-7.3.Z:rh-mysql57-mysql-errmsg-0:5.7.19-6.el7.x86_64",
            "7Server-RHSCL-2.4-7.3.Z:rh-mysql57-mysql-server-0:5.7.19-6.el7.x86_64",
            "7Server-RHSCL-2.4-7.3.Z:rh-mysql57-mysql-test-0:5.7.19-6.el7.x86_64",
            "7Server-RHSCL-2.4:rh-mysql57-mysql-0:5.7.19-6.el7.src",
            "7Server-RHSCL-2.4:rh-mysql57-mysql-0:5.7.19-6.el7.x86_64",
            "7Server-RHSCL-2.4:rh-mysql57-mysql-common-0:5.7.19-6.el7.x86_64",
            "7Server-RHSCL-2.4:rh-mysql57-mysql-config-0:5.7.19-6.el7.x86_64",
            "7Server-RHSCL-2.4:rh-mysql57-mysql-debuginfo-0:5.7.19-6.el7.x86_64",
            "7Server-RHSCL-2.4:rh-mysql57-mysql-devel-0:5.7.19-6.el7.x86_64",
            "7Server-RHSCL-2.4:rh-mysql57-mysql-errmsg-0:5.7.19-6.el7.x86_64",
            "7Server-RHSCL-2.4:rh-mysql57-mysql-server-0:5.7.19-6.el7.x86_64",
            "7Server-RHSCL-2.4:rh-mysql57-mysql-test-0:5.7.19-6.el7.x86_64",
            "7Workstation-RHSCL-2.4:rh-mysql57-mysql-0:5.7.19-6.el7.src",
            "7Workstation-RHSCL-2.4:rh-mysql57-mysql-0:5.7.19-6.el7.x86_64",
            "7Workstation-RHSCL-2.4:rh-mysql57-mysql-common-0:5.7.19-6.el7.x86_64",
            "7Workstation-RHSCL-2.4:rh-mysql57-mysql-config-0:5.7.19-6.el7.x86_64",
            "7Workstation-RHSCL-2.4:rh-mysql57-mysql-debuginfo-0:5.7.19-6.el7.x86_64",
            "7Workstation-RHSCL-2.4:rh-mysql57-mysql-devel-0:5.7.19-6.el7.x86_64",
            "7Workstation-RHSCL-2.4:rh-mysql57-mysql-errmsg-0:5.7.19-6.el7.x86_64",
            "7Workstation-RHSCL-2.4:rh-mysql57-mysql-server-0:5.7.19-6.el7.x86_64",
            "7Workstation-RHSCL-2.4:rh-mysql57-mysql-test-0:5.7.19-6.el7.x86_64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2017:2886"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "HIGH",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 6.5,
            "baseSeverity": "MEDIUM",
            "confidentialityImpact": "NONE",
            "integrityImpact": "LOW",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:H",
            "version": "3.0"
          },
          "products": [
            "6Server-RHSCL-2.4-6.7.Z:rh-mysql57-mysql-0:5.7.19-6.el6.src",
            "6Server-RHSCL-2.4-6.7.Z:rh-mysql57-mysql-0:5.7.19-6.el6.x86_64",
            "6Server-RHSCL-2.4-6.7.Z:rh-mysql57-mysql-common-0:5.7.19-6.el6.x86_64",
            "6Server-RHSCL-2.4-6.7.Z:rh-mysql57-mysql-config-0:5.7.19-6.el6.x86_64",
            "6Server-RHSCL-2.4-6.7.Z:rh-mysql57-mysql-debuginfo-0:5.7.19-6.el6.x86_64",
            "6Server-RHSCL-2.4-6.7.Z:rh-mysql57-mysql-devel-0:5.7.19-6.el6.x86_64",
            "6Server-RHSCL-2.4-6.7.Z:rh-mysql57-mysql-errmsg-0:5.7.19-6.el6.x86_64",
            "6Server-RHSCL-2.4-6.7.Z:rh-mysql57-mysql-server-0:5.7.19-6.el6.x86_64",
            "6Server-RHSCL-2.4-6.7.Z:rh-mysql57-mysql-test-0:5.7.19-6.el6.x86_64",
            "6Server-RHSCL-2.4:rh-mysql57-mysql-0:5.7.19-6.el6.src",
            "6Server-RHSCL-2.4:rh-mysql57-mysql-0:5.7.19-6.el6.x86_64",
            "6Server-RHSCL-2.4:rh-mysql57-mysql-common-0:5.7.19-6.el6.x86_64",
            "6Server-RHSCL-2.4:rh-mysql57-mysql-config-0:5.7.19-6.el6.x86_64",
            "6Server-RHSCL-2.4:rh-mysql57-mysql-debuginfo-0:5.7.19-6.el6.x86_64",
            "6Server-RHSCL-2.4:rh-mysql57-mysql-devel-0:5.7.19-6.el6.x86_64",
            "6Server-RHSCL-2.4:rh-mysql57-mysql-errmsg-0:5.7.19-6.el6.x86_64",
            "6Server-RHSCL-2.4:rh-mysql57-mysql-server-0:5.7.19-6.el6.x86_64",
            "6Server-RHSCL-2.4:rh-mysql57-mysql-test-0:5.7.19-6.el6.x86_64",
            "6Workstation-RHSCL-2.4:rh-mysql57-mysql-0:5.7.19-6.el6.src",
            "6Workstation-RHSCL-2.4:rh-mysql57-mysql-0:5.7.19-6.el6.x86_64",
            "6Workstation-RHSCL-2.4:rh-mysql57-mysql-common-0:5.7.19-6.el6.x86_64",
            "6Workstation-RHSCL-2.4:rh-mysql57-mysql-config-0:5.7.19-6.el6.x86_64",
            "6Workstation-RHSCL-2.4:rh-mysql57-mysql-debuginfo-0:5.7.19-6.el6.x86_64",
            "6Workstation-RHSCL-2.4:rh-mysql57-mysql-devel-0:5.7.19-6.el6.x86_64",
            "6Workstation-RHSCL-2.4:rh-mysql57-mysql-errmsg-0:5.7.19-6.el6.x86_64",
            "6Workstation-RHSCL-2.4:rh-mysql57-mysql-server-0:5.7.19-6.el6.x86_64",
            "6Workstation-RHSCL-2.4:rh-mysql57-mysql-test-0:5.7.19-6.el6.x86_64",
            "7Server-RHSCL-2.4-7.3.Z:rh-mysql57-mysql-0:5.7.19-6.el7.src",
            "7Server-RHSCL-2.4-7.3.Z:rh-mysql57-mysql-0:5.7.19-6.el7.x86_64",
            "7Server-RHSCL-2.4-7.3.Z:rh-mysql57-mysql-common-0:5.7.19-6.el7.x86_64",
            "7Server-RHSCL-2.4-7.3.Z:rh-mysql57-mysql-config-0:5.7.19-6.el7.x86_64",
            "7Server-RHSCL-2.4-7.3.Z:rh-mysql57-mysql-debuginfo-0:5.7.19-6.el7.x86_64",
            "7Server-RHSCL-2.4-7.3.Z:rh-mysql57-mysql-devel-0:5.7.19-6.el7.x86_64",
            "7Server-RHSCL-2.4-7.3.Z:rh-mysql57-mysql-errmsg-0:5.7.19-6.el7.x86_64",
            "7Server-RHSCL-2.4-7.3.Z:rh-mysql57-mysql-server-0:5.7.19-6.el7.x86_64",
            "7Server-RHSCL-2.4-7.3.Z:rh-mysql57-mysql-test-0:5.7.19-6.el7.x86_64",
            "7Server-RHSCL-2.4:rh-mysql57-mysql-0:5.7.19-6.el7.src",
            "7Server-RHSCL-2.4:rh-mysql57-mysql-0:5.7.19-6.el7.x86_64",
            "7Server-RHSCL-2.4:rh-mysql57-mysql-common-0:5.7.19-6.el7.x86_64",
            "7Server-RHSCL-2.4:rh-mysql57-mysql-config-0:5.7.19-6.el7.x86_64",
            "7Server-RHSCL-2.4:rh-mysql57-mysql-debuginfo-0:5.7.19-6.el7.x86_64",
            "7Server-RHSCL-2.4:rh-mysql57-mysql-devel-0:5.7.19-6.el7.x86_64",
            "7Server-RHSCL-2.4:rh-mysql57-mysql-errmsg-0:5.7.19-6.el7.x86_64",
            "7Server-RHSCL-2.4:rh-mysql57-mysql-server-0:5.7.19-6.el7.x86_64",
            "7Server-RHSCL-2.4:rh-mysql57-mysql-test-0:5.7.19-6.el7.x86_64",
            "7Workstation-RHSCL-2.4:rh-mysql57-mysql-0:5.7.19-6.el7.src",
            "7Workstation-RHSCL-2.4:rh-mysql57-mysql-0:5.7.19-6.el7.x86_64",
            "7Workstation-RHSCL-2.4:rh-mysql57-mysql-common-0:5.7.19-6.el7.x86_64",
            "7Workstation-RHSCL-2.4:rh-mysql57-mysql-config-0:5.7.19-6.el7.x86_64",
            "7Workstation-RHSCL-2.4:rh-mysql57-mysql-debuginfo-0:5.7.19-6.el7.x86_64",
            "7Workstation-RHSCL-2.4:rh-mysql57-mysql-devel-0:5.7.19-6.el7.x86_64",
            "7Workstation-RHSCL-2.4:rh-mysql57-mysql-errmsg-0:5.7.19-6.el7.x86_64",
            "7Workstation-RHSCL-2.4:rh-mysql57-mysql-server-0:5.7.19-6.el7.x86_64",
            "7Workstation-RHSCL-2.4:rh-mysql57-mysql-test-0:5.7.19-6.el7.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Moderate"
        }
      ],
      "title": "mysql: Server: Memcached unspecified vulnerability (CPU Jul 2017)"
    },
    {
      "cve": "CVE-2017-3634",
      "discovery_date": "2017-07-19T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "1472684"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: DML). Supported versions that are affected are 5.6.36 and earlier and 5.7.18 and earlier. Easily exploitable vulnerability allows low privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.0 Base Score 6.5 (Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H).",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "mysql: Server: DML unspecified vulnerability (CPU Jul 2017)",
          "title": "Vulnerability summary"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "6Server-RHSCL-2.4-6.7.Z:rh-mysql57-mysql-0:5.7.19-6.el6.src",
          "6Server-RHSCL-2.4-6.7.Z:rh-mysql57-mysql-0:5.7.19-6.el6.x86_64",
          "6Server-RHSCL-2.4-6.7.Z:rh-mysql57-mysql-common-0:5.7.19-6.el6.x86_64",
          "6Server-RHSCL-2.4-6.7.Z:rh-mysql57-mysql-config-0:5.7.19-6.el6.x86_64",
          "6Server-RHSCL-2.4-6.7.Z:rh-mysql57-mysql-debuginfo-0:5.7.19-6.el6.x86_64",
          "6Server-RHSCL-2.4-6.7.Z:rh-mysql57-mysql-devel-0:5.7.19-6.el6.x86_64",
          "6Server-RHSCL-2.4-6.7.Z:rh-mysql57-mysql-errmsg-0:5.7.19-6.el6.x86_64",
          "6Server-RHSCL-2.4-6.7.Z:rh-mysql57-mysql-server-0:5.7.19-6.el6.x86_64",
          "6Server-RHSCL-2.4-6.7.Z:rh-mysql57-mysql-test-0:5.7.19-6.el6.x86_64",
          "6Server-RHSCL-2.4:rh-mysql57-mysql-0:5.7.19-6.el6.src",
          "6Server-RHSCL-2.4:rh-mysql57-mysql-0:5.7.19-6.el6.x86_64",
          "6Server-RHSCL-2.4:rh-mysql57-mysql-common-0:5.7.19-6.el6.x86_64",
          "6Server-RHSCL-2.4:rh-mysql57-mysql-config-0:5.7.19-6.el6.x86_64",
          "6Server-RHSCL-2.4:rh-mysql57-mysql-debuginfo-0:5.7.19-6.el6.x86_64",
          "6Server-RHSCL-2.4:rh-mysql57-mysql-devel-0:5.7.19-6.el6.x86_64",
          "6Server-RHSCL-2.4:rh-mysql57-mysql-errmsg-0:5.7.19-6.el6.x86_64",
          "6Server-RHSCL-2.4:rh-mysql57-mysql-server-0:5.7.19-6.el6.x86_64",
          "6Server-RHSCL-2.4:rh-mysql57-mysql-test-0:5.7.19-6.el6.x86_64",
          "6Workstation-RHSCL-2.4:rh-mysql57-mysql-0:5.7.19-6.el6.src",
          "6Workstation-RHSCL-2.4:rh-mysql57-mysql-0:5.7.19-6.el6.x86_64",
          "6Workstation-RHSCL-2.4:rh-mysql57-mysql-common-0:5.7.19-6.el6.x86_64",
          "6Workstation-RHSCL-2.4:rh-mysql57-mysql-config-0:5.7.19-6.el6.x86_64",
          "6Workstation-RHSCL-2.4:rh-mysql57-mysql-debuginfo-0:5.7.19-6.el6.x86_64",
          "6Workstation-RHSCL-2.4:rh-mysql57-mysql-devel-0:5.7.19-6.el6.x86_64",
          "6Workstation-RHSCL-2.4:rh-mysql57-mysql-errmsg-0:5.7.19-6.el6.x86_64",
          "6Workstation-RHSCL-2.4:rh-mysql57-mysql-server-0:5.7.19-6.el6.x86_64",
          "6Workstation-RHSCL-2.4:rh-mysql57-mysql-test-0:5.7.19-6.el6.x86_64",
          "7Server-RHSCL-2.4-7.3.Z:rh-mysql57-mysql-0:5.7.19-6.el7.src",
          "7Server-RHSCL-2.4-7.3.Z:rh-mysql57-mysql-0:5.7.19-6.el7.x86_64",
          "7Server-RHSCL-2.4-7.3.Z:rh-mysql57-mysql-common-0:5.7.19-6.el7.x86_64",
          "7Server-RHSCL-2.4-7.3.Z:rh-mysql57-mysql-config-0:5.7.19-6.el7.x86_64",
          "7Server-RHSCL-2.4-7.3.Z:rh-mysql57-mysql-debuginfo-0:5.7.19-6.el7.x86_64",
          "7Server-RHSCL-2.4-7.3.Z:rh-mysql57-mysql-devel-0:5.7.19-6.el7.x86_64",
          "7Server-RHSCL-2.4-7.3.Z:rh-mysql57-mysql-errmsg-0:5.7.19-6.el7.x86_64",
          "7Server-RHSCL-2.4-7.3.Z:rh-mysql57-mysql-server-0:5.7.19-6.el7.x86_64",
          "7Server-RHSCL-2.4-7.3.Z:rh-mysql57-mysql-test-0:5.7.19-6.el7.x86_64",
          "7Server-RHSCL-2.4:rh-mysql57-mysql-0:5.7.19-6.el7.src",
          "7Server-RHSCL-2.4:rh-mysql57-mysql-0:5.7.19-6.el7.x86_64",
          "7Server-RHSCL-2.4:rh-mysql57-mysql-common-0:5.7.19-6.el7.x86_64",
          "7Server-RHSCL-2.4:rh-mysql57-mysql-config-0:5.7.19-6.el7.x86_64",
          "7Server-RHSCL-2.4:rh-mysql57-mysql-debuginfo-0:5.7.19-6.el7.x86_64",
          "7Server-RHSCL-2.4:rh-mysql57-mysql-devel-0:5.7.19-6.el7.x86_64",
          "7Server-RHSCL-2.4:rh-mysql57-mysql-errmsg-0:5.7.19-6.el7.x86_64",
          "7Server-RHSCL-2.4:rh-mysql57-mysql-server-0:5.7.19-6.el7.x86_64",
          "7Server-RHSCL-2.4:rh-mysql57-mysql-test-0:5.7.19-6.el7.x86_64",
          "7Workstation-RHSCL-2.4:rh-mysql57-mysql-0:5.7.19-6.el7.src",
          "7Workstation-RHSCL-2.4:rh-mysql57-mysql-0:5.7.19-6.el7.x86_64",
          "7Workstation-RHSCL-2.4:rh-mysql57-mysql-common-0:5.7.19-6.el7.x86_64",
          "7Workstation-RHSCL-2.4:rh-mysql57-mysql-config-0:5.7.19-6.el7.x86_64",
          "7Workstation-RHSCL-2.4:rh-mysql57-mysql-debuginfo-0:5.7.19-6.el7.x86_64",
          "7Workstation-RHSCL-2.4:rh-mysql57-mysql-devel-0:5.7.19-6.el7.x86_64",
          "7Workstation-RHSCL-2.4:rh-mysql57-mysql-errmsg-0:5.7.19-6.el7.x86_64",
          "7Workstation-RHSCL-2.4:rh-mysql57-mysql-server-0:5.7.19-6.el7.x86_64",
          "7Workstation-RHSCL-2.4:rh-mysql57-mysql-test-0:5.7.19-6.el7.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2017-3634"
        },
        {
          "category": "external",
          "summary": "RHBZ#1472684",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1472684"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2017-3634",
          "url": "https://www.cve.org/CVERecord?id=CVE-2017-3634"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2017-3634",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2017-3634"
        },
        {
          "category": "external",
          "summary": "http://www.oracle.com/technetwork/security-advisory/cpujul2017-3236622.html#AppendixMSQL",
          "url": "http://www.oracle.com/technetwork/security-advisory/cpujul2017-3236622.html#AppendixMSQL"
        }
      ],
      "release_date": "2017-07-19T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2017-10-12T07:53:15+00:00",
          "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAfter installing this update, the MySQL server daemon (mysqld) will be restarted automatically.",
          "product_ids": [
            "6Server-RHSCL-2.4-6.7.Z:rh-mysql57-mysql-0:5.7.19-6.el6.src",
            "6Server-RHSCL-2.4-6.7.Z:rh-mysql57-mysql-0:5.7.19-6.el6.x86_64",
            "6Server-RHSCL-2.4-6.7.Z:rh-mysql57-mysql-common-0:5.7.19-6.el6.x86_64",
            "6Server-RHSCL-2.4-6.7.Z:rh-mysql57-mysql-config-0:5.7.19-6.el6.x86_64",
            "6Server-RHSCL-2.4-6.7.Z:rh-mysql57-mysql-debuginfo-0:5.7.19-6.el6.x86_64",
            "6Server-RHSCL-2.4-6.7.Z:rh-mysql57-mysql-devel-0:5.7.19-6.el6.x86_64",
            "6Server-RHSCL-2.4-6.7.Z:rh-mysql57-mysql-errmsg-0:5.7.19-6.el6.x86_64",
            "6Server-RHSCL-2.4-6.7.Z:rh-mysql57-mysql-server-0:5.7.19-6.el6.x86_64",
            "6Server-RHSCL-2.4-6.7.Z:rh-mysql57-mysql-test-0:5.7.19-6.el6.x86_64",
            "6Server-RHSCL-2.4:rh-mysql57-mysql-0:5.7.19-6.el6.src",
            "6Server-RHSCL-2.4:rh-mysql57-mysql-0:5.7.19-6.el6.x86_64",
            "6Server-RHSCL-2.4:rh-mysql57-mysql-common-0:5.7.19-6.el6.x86_64",
            "6Server-RHSCL-2.4:rh-mysql57-mysql-config-0:5.7.19-6.el6.x86_64",
            "6Server-RHSCL-2.4:rh-mysql57-mysql-debuginfo-0:5.7.19-6.el6.x86_64",
            "6Server-RHSCL-2.4:rh-mysql57-mysql-devel-0:5.7.19-6.el6.x86_64",
            "6Server-RHSCL-2.4:rh-mysql57-mysql-errmsg-0:5.7.19-6.el6.x86_64",
            "6Server-RHSCL-2.4:rh-mysql57-mysql-server-0:5.7.19-6.el6.x86_64",
            "6Server-RHSCL-2.4:rh-mysql57-mysql-test-0:5.7.19-6.el6.x86_64",
            "6Workstation-RHSCL-2.4:rh-mysql57-mysql-0:5.7.19-6.el6.src",
            "6Workstation-RHSCL-2.4:rh-mysql57-mysql-0:5.7.19-6.el6.x86_64",
            "6Workstation-RHSCL-2.4:rh-mysql57-mysql-common-0:5.7.19-6.el6.x86_64",
            "6Workstation-RHSCL-2.4:rh-mysql57-mysql-config-0:5.7.19-6.el6.x86_64",
            "6Workstation-RHSCL-2.4:rh-mysql57-mysql-debuginfo-0:5.7.19-6.el6.x86_64",
            "6Workstation-RHSCL-2.4:rh-mysql57-mysql-devel-0:5.7.19-6.el6.x86_64",
            "6Workstation-RHSCL-2.4:rh-mysql57-mysql-errmsg-0:5.7.19-6.el6.x86_64",
            "6Workstation-RHSCL-2.4:rh-mysql57-mysql-server-0:5.7.19-6.el6.x86_64",
            "6Workstation-RHSCL-2.4:rh-mysql57-mysql-test-0:5.7.19-6.el6.x86_64",
            "7Server-RHSCL-2.4-7.3.Z:rh-mysql57-mysql-0:5.7.19-6.el7.src",
            "7Server-RHSCL-2.4-7.3.Z:rh-mysql57-mysql-0:5.7.19-6.el7.x86_64",
            "7Server-RHSCL-2.4-7.3.Z:rh-mysql57-mysql-common-0:5.7.19-6.el7.x86_64",
            "7Server-RHSCL-2.4-7.3.Z:rh-mysql57-mysql-config-0:5.7.19-6.el7.x86_64",
            "7Server-RHSCL-2.4-7.3.Z:rh-mysql57-mysql-debuginfo-0:5.7.19-6.el7.x86_64",
            "7Server-RHSCL-2.4-7.3.Z:rh-mysql57-mysql-devel-0:5.7.19-6.el7.x86_64",
            "7Server-RHSCL-2.4-7.3.Z:rh-mysql57-mysql-errmsg-0:5.7.19-6.el7.x86_64",
            "7Server-RHSCL-2.4-7.3.Z:rh-mysql57-mysql-server-0:5.7.19-6.el7.x86_64",
            "7Server-RHSCL-2.4-7.3.Z:rh-mysql57-mysql-test-0:5.7.19-6.el7.x86_64",
            "7Server-RHSCL-2.4:rh-mysql57-mysql-0:5.7.19-6.el7.src",
            "7Server-RHSCL-2.4:rh-mysql57-mysql-0:5.7.19-6.el7.x86_64",
            "7Server-RHSCL-2.4:rh-mysql57-mysql-common-0:5.7.19-6.el7.x86_64",
            "7Server-RHSCL-2.4:rh-mysql57-mysql-config-0:5.7.19-6.el7.x86_64",
            "7Server-RHSCL-2.4:rh-mysql57-mysql-debuginfo-0:5.7.19-6.el7.x86_64",
            "7Server-RHSCL-2.4:rh-mysql57-mysql-devel-0:5.7.19-6.el7.x86_64",
            "7Server-RHSCL-2.4:rh-mysql57-mysql-errmsg-0:5.7.19-6.el7.x86_64",
            "7Server-RHSCL-2.4:rh-mysql57-mysql-server-0:5.7.19-6.el7.x86_64",
            "7Server-RHSCL-2.4:rh-mysql57-mysql-test-0:5.7.19-6.el7.x86_64",
            "7Workstation-RHSCL-2.4:rh-mysql57-mysql-0:5.7.19-6.el7.src",
            "7Workstation-RHSCL-2.4:rh-mysql57-mysql-0:5.7.19-6.el7.x86_64",
            "7Workstation-RHSCL-2.4:rh-mysql57-mysql-common-0:5.7.19-6.el7.x86_64",
            "7Workstation-RHSCL-2.4:rh-mysql57-mysql-config-0:5.7.19-6.el7.x86_64",
            "7Workstation-RHSCL-2.4:rh-mysql57-mysql-debuginfo-0:5.7.19-6.el7.x86_64",
            "7Workstation-RHSCL-2.4:rh-mysql57-mysql-devel-0:5.7.19-6.el7.x86_64",
            "7Workstation-RHSCL-2.4:rh-mysql57-mysql-errmsg-0:5.7.19-6.el7.x86_64",
            "7Workstation-RHSCL-2.4:rh-mysql57-mysql-server-0:5.7.19-6.el7.x86_64",
            "7Workstation-RHSCL-2.4:rh-mysql57-mysql-test-0:5.7.19-6.el7.x86_64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2017:2886"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 6.5,
            "baseSeverity": "MEDIUM",
            "confidentialityImpact": "NONE",
            "integrityImpact": "NONE",
            "privilegesRequired": "LOW",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.0"
          },
          "products": [
            "6Server-RHSCL-2.4-6.7.Z:rh-mysql57-mysql-0:5.7.19-6.el6.src",
            "6Server-RHSCL-2.4-6.7.Z:rh-mysql57-mysql-0:5.7.19-6.el6.x86_64",
            "6Server-RHSCL-2.4-6.7.Z:rh-mysql57-mysql-common-0:5.7.19-6.el6.x86_64",
            "6Server-RHSCL-2.4-6.7.Z:rh-mysql57-mysql-config-0:5.7.19-6.el6.x86_64",
            "6Server-RHSCL-2.4-6.7.Z:rh-mysql57-mysql-debuginfo-0:5.7.19-6.el6.x86_64",
            "6Server-RHSCL-2.4-6.7.Z:rh-mysql57-mysql-devel-0:5.7.19-6.el6.x86_64",
            "6Server-RHSCL-2.4-6.7.Z:rh-mysql57-mysql-errmsg-0:5.7.19-6.el6.x86_64",
            "6Server-RHSCL-2.4-6.7.Z:rh-mysql57-mysql-server-0:5.7.19-6.el6.x86_64",
            "6Server-RHSCL-2.4-6.7.Z:rh-mysql57-mysql-test-0:5.7.19-6.el6.x86_64",
            "6Server-RHSCL-2.4:rh-mysql57-mysql-0:5.7.19-6.el6.src",
            "6Server-RHSCL-2.4:rh-mysql57-mysql-0:5.7.19-6.el6.x86_64",
            "6Server-RHSCL-2.4:rh-mysql57-mysql-common-0:5.7.19-6.el6.x86_64",
            "6Server-RHSCL-2.4:rh-mysql57-mysql-config-0:5.7.19-6.el6.x86_64",
            "6Server-RHSCL-2.4:rh-mysql57-mysql-debuginfo-0:5.7.19-6.el6.x86_64",
            "6Server-RHSCL-2.4:rh-mysql57-mysql-devel-0:5.7.19-6.el6.x86_64",
            "6Server-RHSCL-2.4:rh-mysql57-mysql-errmsg-0:5.7.19-6.el6.x86_64",
            "6Server-RHSCL-2.4:rh-mysql57-mysql-server-0:5.7.19-6.el6.x86_64",
            "6Server-RHSCL-2.4:rh-mysql57-mysql-test-0:5.7.19-6.el6.x86_64",
            "6Workstation-RHSCL-2.4:rh-mysql57-mysql-0:5.7.19-6.el6.src",
            "6Workstation-RHSCL-2.4:rh-mysql57-mysql-0:5.7.19-6.el6.x86_64",
            "6Workstation-RHSCL-2.4:rh-mysql57-mysql-common-0:5.7.19-6.el6.x86_64",
            "6Workstation-RHSCL-2.4:rh-mysql57-mysql-config-0:5.7.19-6.el6.x86_64",
            "6Workstation-RHSCL-2.4:rh-mysql57-mysql-debuginfo-0:5.7.19-6.el6.x86_64",
            "6Workstation-RHSCL-2.4:rh-mysql57-mysql-devel-0:5.7.19-6.el6.x86_64",
            "6Workstation-RHSCL-2.4:rh-mysql57-mysql-errmsg-0:5.7.19-6.el6.x86_64",
            "6Workstation-RHSCL-2.4:rh-mysql57-mysql-server-0:5.7.19-6.el6.x86_64",
            "6Workstation-RHSCL-2.4:rh-mysql57-mysql-test-0:5.7.19-6.el6.x86_64",
            "7Server-RHSCL-2.4-7.3.Z:rh-mysql57-mysql-0:5.7.19-6.el7.src",
            "7Server-RHSCL-2.4-7.3.Z:rh-mysql57-mysql-0:5.7.19-6.el7.x86_64",
            "7Server-RHSCL-2.4-7.3.Z:rh-mysql57-mysql-common-0:5.7.19-6.el7.x86_64",
            "7Server-RHSCL-2.4-7.3.Z:rh-mysql57-mysql-config-0:5.7.19-6.el7.x86_64",
            "7Server-RHSCL-2.4-7.3.Z:rh-mysql57-mysql-debuginfo-0:5.7.19-6.el7.x86_64",
            "7Server-RHSCL-2.4-7.3.Z:rh-mysql57-mysql-devel-0:5.7.19-6.el7.x86_64",
            "7Server-RHSCL-2.4-7.3.Z:rh-mysql57-mysql-errmsg-0:5.7.19-6.el7.x86_64",
            "7Server-RHSCL-2.4-7.3.Z:rh-mysql57-mysql-server-0:5.7.19-6.el7.x86_64",
            "7Server-RHSCL-2.4-7.3.Z:rh-mysql57-mysql-test-0:5.7.19-6.el7.x86_64",
            "7Server-RHSCL-2.4:rh-mysql57-mysql-0:5.7.19-6.el7.src",
            "7Server-RHSCL-2.4:rh-mysql57-mysql-0:5.7.19-6.el7.x86_64",
            "7Server-RHSCL-2.4:rh-mysql57-mysql-common-0:5.7.19-6.el7.x86_64",
            "7Server-RHSCL-2.4:rh-mysql57-mysql-config-0:5.7.19-6.el7.x86_64",
            "7Server-RHSCL-2.4:rh-mysql57-mysql-debuginfo-0:5.7.19-6.el7.x86_64",
            "7Server-RHSCL-2.4:rh-mysql57-mysql-devel-0:5.7.19-6.el7.x86_64",
            "7Server-RHSCL-2.4:rh-mysql57-mysql-errmsg-0:5.7.19-6.el7.x86_64",
            "7Server-RHSCL-2.4:rh-mysql57-mysql-server-0:5.7.19-6.el7.x86_64",
            "7Server-RHSCL-2.4:rh-mysql57-mysql-test-0:5.7.19-6.el7.x86_64",
            "7Workstation-RHSCL-2.4:rh-mysql57-mysql-0:5.7.19-6.el7.src",
            "7Workstation-RHSCL-2.4:rh-mysql57-mysql-0:5.7.19-6.el7.x86_64",
            "7Workstation-RHSCL-2.4:rh-mysql57-mysql-common-0:5.7.19-6.el7.x86_64",
            "7Workstation-RHSCL-2.4:rh-mysql57-mysql-config-0:5.7.19-6.el7.x86_64",
            "7Workstation-RHSCL-2.4:rh-mysql57-mysql-debuginfo-0:5.7.19-6.el7.x86_64",
            "7Workstation-RHSCL-2.4:rh-mysql57-mysql-devel-0:5.7.19-6.el7.x86_64",
            "7Workstation-RHSCL-2.4:rh-mysql57-mysql-errmsg-0:5.7.19-6.el7.x86_64",
            "7Workstation-RHSCL-2.4:rh-mysql57-mysql-server-0:5.7.19-6.el7.x86_64",
            "7Workstation-RHSCL-2.4:rh-mysql57-mysql-test-0:5.7.19-6.el7.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Moderate"
        }
      ],
      "title": "mysql: Server: DML unspecified vulnerability (CPU Jul 2017)"
    },
    {
      "cve": "CVE-2017-3637",
      "discovery_date": "2017-07-19T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "1472687"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: X Plugin). Supported versions that are affected are 5.7.18 and earlier. Difficult to exploit vulnerability allows low privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.0 Base Score 5.3 (Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H).",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "mysql: X Plugin unspecified vulnerability (CPU Jul 2017)",
          "title": "Vulnerability summary"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "6Server-RHSCL-2.4-6.7.Z:rh-mysql57-mysql-0:5.7.19-6.el6.src",
          "6Server-RHSCL-2.4-6.7.Z:rh-mysql57-mysql-0:5.7.19-6.el6.x86_64",
          "6Server-RHSCL-2.4-6.7.Z:rh-mysql57-mysql-common-0:5.7.19-6.el6.x86_64",
          "6Server-RHSCL-2.4-6.7.Z:rh-mysql57-mysql-config-0:5.7.19-6.el6.x86_64",
          "6Server-RHSCL-2.4-6.7.Z:rh-mysql57-mysql-debuginfo-0:5.7.19-6.el6.x86_64",
          "6Server-RHSCL-2.4-6.7.Z:rh-mysql57-mysql-devel-0:5.7.19-6.el6.x86_64",
          "6Server-RHSCL-2.4-6.7.Z:rh-mysql57-mysql-errmsg-0:5.7.19-6.el6.x86_64",
          "6Server-RHSCL-2.4-6.7.Z:rh-mysql57-mysql-server-0:5.7.19-6.el6.x86_64",
          "6Server-RHSCL-2.4-6.7.Z:rh-mysql57-mysql-test-0:5.7.19-6.el6.x86_64",
          "6Server-RHSCL-2.4:rh-mysql57-mysql-0:5.7.19-6.el6.src",
          "6Server-RHSCL-2.4:rh-mysql57-mysql-0:5.7.19-6.el6.x86_64",
          "6Server-RHSCL-2.4:rh-mysql57-mysql-common-0:5.7.19-6.el6.x86_64",
          "6Server-RHSCL-2.4:rh-mysql57-mysql-config-0:5.7.19-6.el6.x86_64",
          "6Server-RHSCL-2.4:rh-mysql57-mysql-debuginfo-0:5.7.19-6.el6.x86_64",
          "6Server-RHSCL-2.4:rh-mysql57-mysql-devel-0:5.7.19-6.el6.x86_64",
          "6Server-RHSCL-2.4:rh-mysql57-mysql-errmsg-0:5.7.19-6.el6.x86_64",
          "6Server-RHSCL-2.4:rh-mysql57-mysql-server-0:5.7.19-6.el6.x86_64",
          "6Server-RHSCL-2.4:rh-mysql57-mysql-test-0:5.7.19-6.el6.x86_64",
          "6Workstation-RHSCL-2.4:rh-mysql57-mysql-0:5.7.19-6.el6.src",
          "6Workstation-RHSCL-2.4:rh-mysql57-mysql-0:5.7.19-6.el6.x86_64",
          "6Workstation-RHSCL-2.4:rh-mysql57-mysql-common-0:5.7.19-6.el6.x86_64",
          "6Workstation-RHSCL-2.4:rh-mysql57-mysql-config-0:5.7.19-6.el6.x86_64",
          "6Workstation-RHSCL-2.4:rh-mysql57-mysql-debuginfo-0:5.7.19-6.el6.x86_64",
          "6Workstation-RHSCL-2.4:rh-mysql57-mysql-devel-0:5.7.19-6.el6.x86_64",
          "6Workstation-RHSCL-2.4:rh-mysql57-mysql-errmsg-0:5.7.19-6.el6.x86_64",
          "6Workstation-RHSCL-2.4:rh-mysql57-mysql-server-0:5.7.19-6.el6.x86_64",
          "6Workstation-RHSCL-2.4:rh-mysql57-mysql-test-0:5.7.19-6.el6.x86_64",
          "7Server-RHSCL-2.4-7.3.Z:rh-mysql57-mysql-0:5.7.19-6.el7.src",
          "7Server-RHSCL-2.4-7.3.Z:rh-mysql57-mysql-0:5.7.19-6.el7.x86_64",
          "7Server-RHSCL-2.4-7.3.Z:rh-mysql57-mysql-common-0:5.7.19-6.el7.x86_64",
          "7Server-RHSCL-2.4-7.3.Z:rh-mysql57-mysql-config-0:5.7.19-6.el7.x86_64",
          "7Server-RHSCL-2.4-7.3.Z:rh-mysql57-mysql-debuginfo-0:5.7.19-6.el7.x86_64",
          "7Server-RHSCL-2.4-7.3.Z:rh-mysql57-mysql-devel-0:5.7.19-6.el7.x86_64",
          "7Server-RHSCL-2.4-7.3.Z:rh-mysql57-mysql-errmsg-0:5.7.19-6.el7.x86_64",
          "7Server-RHSCL-2.4-7.3.Z:rh-mysql57-mysql-server-0:5.7.19-6.el7.x86_64",
          "7Server-RHSCL-2.4-7.3.Z:rh-mysql57-mysql-test-0:5.7.19-6.el7.x86_64",
          "7Server-RHSCL-2.4:rh-mysql57-mysql-0:5.7.19-6.el7.src",
          "7Server-RHSCL-2.4:rh-mysql57-mysql-0:5.7.19-6.el7.x86_64",
          "7Server-RHSCL-2.4:rh-mysql57-mysql-common-0:5.7.19-6.el7.x86_64",
          "7Server-RHSCL-2.4:rh-mysql57-mysql-config-0:5.7.19-6.el7.x86_64",
          "7Server-RHSCL-2.4:rh-mysql57-mysql-debuginfo-0:5.7.19-6.el7.x86_64",
          "7Server-RHSCL-2.4:rh-mysql57-mysql-devel-0:5.7.19-6.el7.x86_64",
          "7Server-RHSCL-2.4:rh-mysql57-mysql-errmsg-0:5.7.19-6.el7.x86_64",
          "7Server-RHSCL-2.4:rh-mysql57-mysql-server-0:5.7.19-6.el7.x86_64",
          "7Server-RHSCL-2.4:rh-mysql57-mysql-test-0:5.7.19-6.el7.x86_64",
          "7Workstation-RHSCL-2.4:rh-mysql57-mysql-0:5.7.19-6.el7.src",
          "7Workstation-RHSCL-2.4:rh-mysql57-mysql-0:5.7.19-6.el7.x86_64",
          "7Workstation-RHSCL-2.4:rh-mysql57-mysql-common-0:5.7.19-6.el7.x86_64",
          "7Workstation-RHSCL-2.4:rh-mysql57-mysql-config-0:5.7.19-6.el7.x86_64",
          "7Workstation-RHSCL-2.4:rh-mysql57-mysql-debuginfo-0:5.7.19-6.el7.x86_64",
          "7Workstation-RHSCL-2.4:rh-mysql57-mysql-devel-0:5.7.19-6.el7.x86_64",
          "7Workstation-RHSCL-2.4:rh-mysql57-mysql-errmsg-0:5.7.19-6.el7.x86_64",
          "7Workstation-RHSCL-2.4:rh-mysql57-mysql-server-0:5.7.19-6.el7.x86_64",
          "7Workstation-RHSCL-2.4:rh-mysql57-mysql-test-0:5.7.19-6.el7.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2017-3637"
        },
        {
          "category": "external",
          "summary": "RHBZ#1472687",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1472687"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2017-3637",
          "url": "https://www.cve.org/CVERecord?id=CVE-2017-3637"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2017-3637",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2017-3637"
        },
        {
          "category": "external",
          "summary": "http://www.oracle.com/technetwork/security-advisory/cpujul2017-3236622.html#AppendixMSQL",
          "url": "http://www.oracle.com/technetwork/security-advisory/cpujul2017-3236622.html#AppendixMSQL"
        }
      ],
      "release_date": "2017-07-19T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2017-10-12T07:53:15+00:00",
          "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAfter installing this update, the MySQL server daemon (mysqld) will be restarted automatically.",
          "product_ids": [
            "6Server-RHSCL-2.4-6.7.Z:rh-mysql57-mysql-0:5.7.19-6.el6.src",
            "6Server-RHSCL-2.4-6.7.Z:rh-mysql57-mysql-0:5.7.19-6.el6.x86_64",
            "6Server-RHSCL-2.4-6.7.Z:rh-mysql57-mysql-common-0:5.7.19-6.el6.x86_64",
            "6Server-RHSCL-2.4-6.7.Z:rh-mysql57-mysql-config-0:5.7.19-6.el6.x86_64",
            "6Server-RHSCL-2.4-6.7.Z:rh-mysql57-mysql-debuginfo-0:5.7.19-6.el6.x86_64",
            "6Server-RHSCL-2.4-6.7.Z:rh-mysql57-mysql-devel-0:5.7.19-6.el6.x86_64",
            "6Server-RHSCL-2.4-6.7.Z:rh-mysql57-mysql-errmsg-0:5.7.19-6.el6.x86_64",
            "6Server-RHSCL-2.4-6.7.Z:rh-mysql57-mysql-server-0:5.7.19-6.el6.x86_64",
            "6Server-RHSCL-2.4-6.7.Z:rh-mysql57-mysql-test-0:5.7.19-6.el6.x86_64",
            "6Server-RHSCL-2.4:rh-mysql57-mysql-0:5.7.19-6.el6.src",
            "6Server-RHSCL-2.4:rh-mysql57-mysql-0:5.7.19-6.el6.x86_64",
            "6Server-RHSCL-2.4:rh-mysql57-mysql-common-0:5.7.19-6.el6.x86_64",
            "6Server-RHSCL-2.4:rh-mysql57-mysql-config-0:5.7.19-6.el6.x86_64",
            "6Server-RHSCL-2.4:rh-mysql57-mysql-debuginfo-0:5.7.19-6.el6.x86_64",
            "6Server-RHSCL-2.4:rh-mysql57-mysql-devel-0:5.7.19-6.el6.x86_64",
            "6Server-RHSCL-2.4:rh-mysql57-mysql-errmsg-0:5.7.19-6.el6.x86_64",
            "6Server-RHSCL-2.4:rh-mysql57-mysql-server-0:5.7.19-6.el6.x86_64",
            "6Server-RHSCL-2.4:rh-mysql57-mysql-test-0:5.7.19-6.el6.x86_64",
            "6Workstation-RHSCL-2.4:rh-mysql57-mysql-0:5.7.19-6.el6.src",
            "6Workstation-RHSCL-2.4:rh-mysql57-mysql-0:5.7.19-6.el6.x86_64",
            "6Workstation-RHSCL-2.4:rh-mysql57-mysql-common-0:5.7.19-6.el6.x86_64",
            "6Workstation-RHSCL-2.4:rh-mysql57-mysql-config-0:5.7.19-6.el6.x86_64",
            "6Workstation-RHSCL-2.4:rh-mysql57-mysql-debuginfo-0:5.7.19-6.el6.x86_64",
            "6Workstation-RHSCL-2.4:rh-mysql57-mysql-devel-0:5.7.19-6.el6.x86_64",
            "6Workstation-RHSCL-2.4:rh-mysql57-mysql-errmsg-0:5.7.19-6.el6.x86_64",
            "6Workstation-RHSCL-2.4:rh-mysql57-mysql-server-0:5.7.19-6.el6.x86_64",
            "6Workstation-RHSCL-2.4:rh-mysql57-mysql-test-0:5.7.19-6.el6.x86_64",
            "7Server-RHSCL-2.4-7.3.Z:rh-mysql57-mysql-0:5.7.19-6.el7.src",
            "7Server-RHSCL-2.4-7.3.Z:rh-mysql57-mysql-0:5.7.19-6.el7.x86_64",
            "7Server-RHSCL-2.4-7.3.Z:rh-mysql57-mysql-common-0:5.7.19-6.el7.x86_64",
            "7Server-RHSCL-2.4-7.3.Z:rh-mysql57-mysql-config-0:5.7.19-6.el7.x86_64",
            "7Server-RHSCL-2.4-7.3.Z:rh-mysql57-mysql-debuginfo-0:5.7.19-6.el7.x86_64",
            "7Server-RHSCL-2.4-7.3.Z:rh-mysql57-mysql-devel-0:5.7.19-6.el7.x86_64",
            "7Server-RHSCL-2.4-7.3.Z:rh-mysql57-mysql-errmsg-0:5.7.19-6.el7.x86_64",
            "7Server-RHSCL-2.4-7.3.Z:rh-mysql57-mysql-server-0:5.7.19-6.el7.x86_64",
            "7Server-RHSCL-2.4-7.3.Z:rh-mysql57-mysql-test-0:5.7.19-6.el7.x86_64",
            "7Server-RHSCL-2.4:rh-mysql57-mysql-0:5.7.19-6.el7.src",
            "7Server-RHSCL-2.4:rh-mysql57-mysql-0:5.7.19-6.el7.x86_64",
            "7Server-RHSCL-2.4:rh-mysql57-mysql-common-0:5.7.19-6.el7.x86_64",
            "7Server-RHSCL-2.4:rh-mysql57-mysql-config-0:5.7.19-6.el7.x86_64",
            "7Server-RHSCL-2.4:rh-mysql57-mysql-debuginfo-0:5.7.19-6.el7.x86_64",
            "7Server-RHSCL-2.4:rh-mysql57-mysql-devel-0:5.7.19-6.el7.x86_64",
            "7Server-RHSCL-2.4:rh-mysql57-mysql-errmsg-0:5.7.19-6.el7.x86_64",
            "7Server-RHSCL-2.4:rh-mysql57-mysql-server-0:5.7.19-6.el7.x86_64",
            "7Server-RHSCL-2.4:rh-mysql57-mysql-test-0:5.7.19-6.el7.x86_64",
            "7Workstation-RHSCL-2.4:rh-mysql57-mysql-0:5.7.19-6.el7.src",
            "7Workstation-RHSCL-2.4:rh-mysql57-mysql-0:5.7.19-6.el7.x86_64",
            "7Workstation-RHSCL-2.4:rh-mysql57-mysql-common-0:5.7.19-6.el7.x86_64",
            "7Workstation-RHSCL-2.4:rh-mysql57-mysql-config-0:5.7.19-6.el7.x86_64",
            "7Workstation-RHSCL-2.4:rh-mysql57-mysql-debuginfo-0:5.7.19-6.el7.x86_64",
            "7Workstation-RHSCL-2.4:rh-mysql57-mysql-devel-0:5.7.19-6.el7.x86_64",
            "7Workstation-RHSCL-2.4:rh-mysql57-mysql-errmsg-0:5.7.19-6.el7.x86_64",
            "7Workstation-RHSCL-2.4:rh-mysql57-mysql-server-0:5.7.19-6.el7.x86_64",
            "7Workstation-RHSCL-2.4:rh-mysql57-mysql-test-0:5.7.19-6.el7.x86_64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2017:2886"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "HIGH",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 5.3,
            "baseSeverity": "MEDIUM",
            "confidentialityImpact": "NONE",
            "integrityImpact": "NONE",
            "privilegesRequired": "LOW",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.0/AV:N/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.0"
          },
          "products": [
            "6Server-RHSCL-2.4-6.7.Z:rh-mysql57-mysql-0:5.7.19-6.el6.src",
            "6Server-RHSCL-2.4-6.7.Z:rh-mysql57-mysql-0:5.7.19-6.el6.x86_64",
            "6Server-RHSCL-2.4-6.7.Z:rh-mysql57-mysql-common-0:5.7.19-6.el6.x86_64",
            "6Server-RHSCL-2.4-6.7.Z:rh-mysql57-mysql-config-0:5.7.19-6.el6.x86_64",
            "6Server-RHSCL-2.4-6.7.Z:rh-mysql57-mysql-debuginfo-0:5.7.19-6.el6.x86_64",
            "6Server-RHSCL-2.4-6.7.Z:rh-mysql57-mysql-devel-0:5.7.19-6.el6.x86_64",
            "6Server-RHSCL-2.4-6.7.Z:rh-mysql57-mysql-errmsg-0:5.7.19-6.el6.x86_64",
            "6Server-RHSCL-2.4-6.7.Z:rh-mysql57-mysql-server-0:5.7.19-6.el6.x86_64",
            "6Server-RHSCL-2.4-6.7.Z:rh-mysql57-mysql-test-0:5.7.19-6.el6.x86_64",
            "6Server-RHSCL-2.4:rh-mysql57-mysql-0:5.7.19-6.el6.src",
            "6Server-RHSCL-2.4:rh-mysql57-mysql-0:5.7.19-6.el6.x86_64",
            "6Server-RHSCL-2.4:rh-mysql57-mysql-common-0:5.7.19-6.el6.x86_64",
            "6Server-RHSCL-2.4:rh-mysql57-mysql-config-0:5.7.19-6.el6.x86_64",
            "6Server-RHSCL-2.4:rh-mysql57-mysql-debuginfo-0:5.7.19-6.el6.x86_64",
            "6Server-RHSCL-2.4:rh-mysql57-mysql-devel-0:5.7.19-6.el6.x86_64",
            "6Server-RHSCL-2.4:rh-mysql57-mysql-errmsg-0:5.7.19-6.el6.x86_64",
            "6Server-RHSCL-2.4:rh-mysql57-mysql-server-0:5.7.19-6.el6.x86_64",
            "6Server-RHSCL-2.4:rh-mysql57-mysql-test-0:5.7.19-6.el6.x86_64",
            "6Workstation-RHSCL-2.4:rh-mysql57-mysql-0:5.7.19-6.el6.src",
            "6Workstation-RHSCL-2.4:rh-mysql57-mysql-0:5.7.19-6.el6.x86_64",
            "6Workstation-RHSCL-2.4:rh-mysql57-mysql-common-0:5.7.19-6.el6.x86_64",
            "6Workstation-RHSCL-2.4:rh-mysql57-mysql-config-0:5.7.19-6.el6.x86_64",
            "6Workstation-RHSCL-2.4:rh-mysql57-mysql-debuginfo-0:5.7.19-6.el6.x86_64",
            "6Workstation-RHSCL-2.4:rh-mysql57-mysql-devel-0:5.7.19-6.el6.x86_64",
            "6Workstation-RHSCL-2.4:rh-mysql57-mysql-errmsg-0:5.7.19-6.el6.x86_64",
            "6Workstation-RHSCL-2.4:rh-mysql57-mysql-server-0:5.7.19-6.el6.x86_64",
            "6Workstation-RHSCL-2.4:rh-mysql57-mysql-test-0:5.7.19-6.el6.x86_64",
            "7Server-RHSCL-2.4-7.3.Z:rh-mysql57-mysql-0:5.7.19-6.el7.src",
            "7Server-RHSCL-2.4-7.3.Z:rh-mysql57-mysql-0:5.7.19-6.el7.x86_64",
            "7Server-RHSCL-2.4-7.3.Z:rh-mysql57-mysql-common-0:5.7.19-6.el7.x86_64",
            "7Server-RHSCL-2.4-7.3.Z:rh-mysql57-mysql-config-0:5.7.19-6.el7.x86_64",
            "7Server-RHSCL-2.4-7.3.Z:rh-mysql57-mysql-debuginfo-0:5.7.19-6.el7.x86_64",
            "7Server-RHSCL-2.4-7.3.Z:rh-mysql57-mysql-devel-0:5.7.19-6.el7.x86_64",
            "7Server-RHSCL-2.4-7.3.Z:rh-mysql57-mysql-errmsg-0:5.7.19-6.el7.x86_64",
            "7Server-RHSCL-2.4-7.3.Z:rh-mysql57-mysql-server-0:5.7.19-6.el7.x86_64",
            "7Server-RHSCL-2.4-7.3.Z:rh-mysql57-mysql-test-0:5.7.19-6.el7.x86_64",
            "7Server-RHSCL-2.4:rh-mysql57-mysql-0:5.7.19-6.el7.src",
            "7Server-RHSCL-2.4:rh-mysql57-mysql-0:5.7.19-6.el7.x86_64",
            "7Server-RHSCL-2.4:rh-mysql57-mysql-common-0:5.7.19-6.el7.x86_64",
            "7Server-RHSCL-2.4:rh-mysql57-mysql-config-0:5.7.19-6.el7.x86_64",
            "7Server-RHSCL-2.4:rh-mysql57-mysql-debuginfo-0:5.7.19-6.el7.x86_64",
            "7Server-RHSCL-2.4:rh-mysql57-mysql-devel-0:5.7.19-6.el7.x86_64",
            "7Server-RHSCL-2.4:rh-mysql57-mysql-errmsg-0:5.7.19-6.el7.x86_64",
            "7Server-RHSCL-2.4:rh-mysql57-mysql-server-0:5.7.19-6.el7.x86_64",
            "7Server-RHSCL-2.4:rh-mysql57-mysql-test-0:5.7.19-6.el7.x86_64",
            "7Workstation-RHSCL-2.4:rh-mysql57-mysql-0:5.7.19-6.el7.src",
            "7Workstation-RHSCL-2.4:rh-mysql57-mysql-0:5.7.19-6.el7.x86_64",
            "7Workstation-RHSCL-2.4:rh-mysql57-mysql-common-0:5.7.19-6.el7.x86_64",
            "7Workstation-RHSCL-2.4:rh-mysql57-mysql-config-0:5.7.19-6.el7.x86_64",
            "7Workstation-RHSCL-2.4:rh-mysql57-mysql-debuginfo-0:5.7.19-6.el7.x86_64",
            "7Workstation-RHSCL-2.4:rh-mysql57-mysql-devel-0:5.7.19-6.el7.x86_64",
            "7Workstation-RHSCL-2.4:rh-mysql57-mysql-errmsg-0:5.7.19-6.el7.x86_64",
            "7Workstation-RHSCL-2.4:rh-mysql57-mysql-server-0:5.7.19-6.el7.x86_64",
            "7Workstation-RHSCL-2.4:rh-mysql57-mysql-test-0:5.7.19-6.el7.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Moderate"
        }
      ],
      "title": "mysql: X Plugin unspecified vulnerability (CPU Jul 2017)"
    },
    {
      "cve": "CVE-2017-3638",
      "discovery_date": "2017-07-19T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "1472688"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Optimizer). Supported versions that are affected are 5.7.18 and earlier. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.0 Base Score 4.9 (Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H).",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "mysql: Server: Optimizer unspecified vulnerability (CPU Jul 2017)",
          "title": "Vulnerability summary"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "6Server-RHSCL-2.4-6.7.Z:rh-mysql57-mysql-0:5.7.19-6.el6.src",
          "6Server-RHSCL-2.4-6.7.Z:rh-mysql57-mysql-0:5.7.19-6.el6.x86_64",
          "6Server-RHSCL-2.4-6.7.Z:rh-mysql57-mysql-common-0:5.7.19-6.el6.x86_64",
          "6Server-RHSCL-2.4-6.7.Z:rh-mysql57-mysql-config-0:5.7.19-6.el6.x86_64",
          "6Server-RHSCL-2.4-6.7.Z:rh-mysql57-mysql-debuginfo-0:5.7.19-6.el6.x86_64",
          "6Server-RHSCL-2.4-6.7.Z:rh-mysql57-mysql-devel-0:5.7.19-6.el6.x86_64",
          "6Server-RHSCL-2.4-6.7.Z:rh-mysql57-mysql-errmsg-0:5.7.19-6.el6.x86_64",
          "6Server-RHSCL-2.4-6.7.Z:rh-mysql57-mysql-server-0:5.7.19-6.el6.x86_64",
          "6Server-RHSCL-2.4-6.7.Z:rh-mysql57-mysql-test-0:5.7.19-6.el6.x86_64",
          "6Server-RHSCL-2.4:rh-mysql57-mysql-0:5.7.19-6.el6.src",
          "6Server-RHSCL-2.4:rh-mysql57-mysql-0:5.7.19-6.el6.x86_64",
          "6Server-RHSCL-2.4:rh-mysql57-mysql-common-0:5.7.19-6.el6.x86_64",
          "6Server-RHSCL-2.4:rh-mysql57-mysql-config-0:5.7.19-6.el6.x86_64",
          "6Server-RHSCL-2.4:rh-mysql57-mysql-debuginfo-0:5.7.19-6.el6.x86_64",
          "6Server-RHSCL-2.4:rh-mysql57-mysql-devel-0:5.7.19-6.el6.x86_64",
          "6Server-RHSCL-2.4:rh-mysql57-mysql-errmsg-0:5.7.19-6.el6.x86_64",
          "6Server-RHSCL-2.4:rh-mysql57-mysql-server-0:5.7.19-6.el6.x86_64",
          "6Server-RHSCL-2.4:rh-mysql57-mysql-test-0:5.7.19-6.el6.x86_64",
          "6Workstation-RHSCL-2.4:rh-mysql57-mysql-0:5.7.19-6.el6.src",
          "6Workstation-RHSCL-2.4:rh-mysql57-mysql-0:5.7.19-6.el6.x86_64",
          "6Workstation-RHSCL-2.4:rh-mysql57-mysql-common-0:5.7.19-6.el6.x86_64",
          "6Workstation-RHSCL-2.4:rh-mysql57-mysql-config-0:5.7.19-6.el6.x86_64",
          "6Workstation-RHSCL-2.4:rh-mysql57-mysql-debuginfo-0:5.7.19-6.el6.x86_64",
          "6Workstation-RHSCL-2.4:rh-mysql57-mysql-devel-0:5.7.19-6.el6.x86_64",
          "6Workstation-RHSCL-2.4:rh-mysql57-mysql-errmsg-0:5.7.19-6.el6.x86_64",
          "6Workstation-RHSCL-2.4:rh-mysql57-mysql-server-0:5.7.19-6.el6.x86_64",
          "6Workstation-RHSCL-2.4:rh-mysql57-mysql-test-0:5.7.19-6.el6.x86_64",
          "7Server-RHSCL-2.4-7.3.Z:rh-mysql57-mysql-0:5.7.19-6.el7.src",
          "7Server-RHSCL-2.4-7.3.Z:rh-mysql57-mysql-0:5.7.19-6.el7.x86_64",
          "7Server-RHSCL-2.4-7.3.Z:rh-mysql57-mysql-common-0:5.7.19-6.el7.x86_64",
          "7Server-RHSCL-2.4-7.3.Z:rh-mysql57-mysql-config-0:5.7.19-6.el7.x86_64",
          "7Server-RHSCL-2.4-7.3.Z:rh-mysql57-mysql-debuginfo-0:5.7.19-6.el7.x86_64",
          "7Server-RHSCL-2.4-7.3.Z:rh-mysql57-mysql-devel-0:5.7.19-6.el7.x86_64",
          "7Server-RHSCL-2.4-7.3.Z:rh-mysql57-mysql-errmsg-0:5.7.19-6.el7.x86_64",
          "7Server-RHSCL-2.4-7.3.Z:rh-mysql57-mysql-server-0:5.7.19-6.el7.x86_64",
          "7Server-RHSCL-2.4-7.3.Z:rh-mysql57-mysql-test-0:5.7.19-6.el7.x86_64",
          "7Server-RHSCL-2.4:rh-mysql57-mysql-0:5.7.19-6.el7.src",
          "7Server-RHSCL-2.4:rh-mysql57-mysql-0:5.7.19-6.el7.x86_64",
          "7Server-RHSCL-2.4:rh-mysql57-mysql-common-0:5.7.19-6.el7.x86_64",
          "7Server-RHSCL-2.4:rh-mysql57-mysql-config-0:5.7.19-6.el7.x86_64",
          "7Server-RHSCL-2.4:rh-mysql57-mysql-debuginfo-0:5.7.19-6.el7.x86_64",
          "7Server-RHSCL-2.4:rh-mysql57-mysql-devel-0:5.7.19-6.el7.x86_64",
          "7Server-RHSCL-2.4:rh-mysql57-mysql-errmsg-0:5.7.19-6.el7.x86_64",
          "7Server-RHSCL-2.4:rh-mysql57-mysql-server-0:5.7.19-6.el7.x86_64",
          "7Server-RHSCL-2.4:rh-mysql57-mysql-test-0:5.7.19-6.el7.x86_64",
          "7Workstation-RHSCL-2.4:rh-mysql57-mysql-0:5.7.19-6.el7.src",
          "7Workstation-RHSCL-2.4:rh-mysql57-mysql-0:5.7.19-6.el7.x86_64",
          "7Workstation-RHSCL-2.4:rh-mysql57-mysql-common-0:5.7.19-6.el7.x86_64",
          "7Workstation-RHSCL-2.4:rh-mysql57-mysql-config-0:5.7.19-6.el7.x86_64",
          "7Workstation-RHSCL-2.4:rh-mysql57-mysql-debuginfo-0:5.7.19-6.el7.x86_64",
          "7Workstation-RHSCL-2.4:rh-mysql57-mysql-devel-0:5.7.19-6.el7.x86_64",
          "7Workstation-RHSCL-2.4:rh-mysql57-mysql-errmsg-0:5.7.19-6.el7.x86_64",
          "7Workstation-RHSCL-2.4:rh-mysql57-mysql-server-0:5.7.19-6.el7.x86_64",
          "7Workstation-RHSCL-2.4:rh-mysql57-mysql-test-0:5.7.19-6.el7.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2017-3638"
        },
        {
          "category": "external",
          "summary": "RHBZ#1472688",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1472688"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2017-3638",
          "url": "https://www.cve.org/CVERecord?id=CVE-2017-3638"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2017-3638",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2017-3638"
        },
        {
          "category": "external",
          "summary": "http://www.oracle.com/technetwork/security-advisory/cpujul2017-3236622.html#AppendixMSQL",
          "url": "http://www.oracle.com/technetwork/security-advisory/cpujul2017-3236622.html#AppendixMSQL"
        }
      ],
      "release_date": "2017-07-19T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2017-10-12T07:53:15+00:00",
          "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAfter installing this update, the MySQL server daemon (mysqld) will be restarted automatically.",
          "product_ids": [
            "6Server-RHSCL-2.4-6.7.Z:rh-mysql57-mysql-0:5.7.19-6.el6.src",
            "6Server-RHSCL-2.4-6.7.Z:rh-mysql57-mysql-0:5.7.19-6.el6.x86_64",
            "6Server-RHSCL-2.4-6.7.Z:rh-mysql57-mysql-common-0:5.7.19-6.el6.x86_64",
            "6Server-RHSCL-2.4-6.7.Z:rh-mysql57-mysql-config-0:5.7.19-6.el6.x86_64",
            "6Server-RHSCL-2.4-6.7.Z:rh-mysql57-mysql-debuginfo-0:5.7.19-6.el6.x86_64",
            "6Server-RHSCL-2.4-6.7.Z:rh-mysql57-mysql-devel-0:5.7.19-6.el6.x86_64",
            "6Server-RHSCL-2.4-6.7.Z:rh-mysql57-mysql-errmsg-0:5.7.19-6.el6.x86_64",
            "6Server-RHSCL-2.4-6.7.Z:rh-mysql57-mysql-server-0:5.7.19-6.el6.x86_64",
            "6Server-RHSCL-2.4-6.7.Z:rh-mysql57-mysql-test-0:5.7.19-6.el6.x86_64",
            "6Server-RHSCL-2.4:rh-mysql57-mysql-0:5.7.19-6.el6.src",
            "6Server-RHSCL-2.4:rh-mysql57-mysql-0:5.7.19-6.el6.x86_64",
            "6Server-RHSCL-2.4:rh-mysql57-mysql-common-0:5.7.19-6.el6.x86_64",
            "6Server-RHSCL-2.4:rh-mysql57-mysql-config-0:5.7.19-6.el6.x86_64",
            "6Server-RHSCL-2.4:rh-mysql57-mysql-debuginfo-0:5.7.19-6.el6.x86_64",
            "6Server-RHSCL-2.4:rh-mysql57-mysql-devel-0:5.7.19-6.el6.x86_64",
            "6Server-RHSCL-2.4:rh-mysql57-mysql-errmsg-0:5.7.19-6.el6.x86_64",
            "6Server-RHSCL-2.4:rh-mysql57-mysql-server-0:5.7.19-6.el6.x86_64",
            "6Server-RHSCL-2.4:rh-mysql57-mysql-test-0:5.7.19-6.el6.x86_64",
            "6Workstation-RHSCL-2.4:rh-mysql57-mysql-0:5.7.19-6.el6.src",
            "6Workstation-RHSCL-2.4:rh-mysql57-mysql-0:5.7.19-6.el6.x86_64",
            "6Workstation-RHSCL-2.4:rh-mysql57-mysql-common-0:5.7.19-6.el6.x86_64",
            "6Workstation-RHSCL-2.4:rh-mysql57-mysql-config-0:5.7.19-6.el6.x86_64",
            "6Workstation-RHSCL-2.4:rh-mysql57-mysql-debuginfo-0:5.7.19-6.el6.x86_64",
            "6Workstation-RHSCL-2.4:rh-mysql57-mysql-devel-0:5.7.19-6.el6.x86_64",
            "6Workstation-RHSCL-2.4:rh-mysql57-mysql-errmsg-0:5.7.19-6.el6.x86_64",
            "6Workstation-RHSCL-2.4:rh-mysql57-mysql-server-0:5.7.19-6.el6.x86_64",
            "6Workstation-RHSCL-2.4:rh-mysql57-mysql-test-0:5.7.19-6.el6.x86_64",
            "7Server-RHSCL-2.4-7.3.Z:rh-mysql57-mysql-0:5.7.19-6.el7.src",
            "7Server-RHSCL-2.4-7.3.Z:rh-mysql57-mysql-0:5.7.19-6.el7.x86_64",
            "7Server-RHSCL-2.4-7.3.Z:rh-mysql57-mysql-common-0:5.7.19-6.el7.x86_64",
            "7Server-RHSCL-2.4-7.3.Z:rh-mysql57-mysql-config-0:5.7.19-6.el7.x86_64",
            "7Server-RHSCL-2.4-7.3.Z:rh-mysql57-mysql-debuginfo-0:5.7.19-6.el7.x86_64",
            "7Server-RHSCL-2.4-7.3.Z:rh-mysql57-mysql-devel-0:5.7.19-6.el7.x86_64",
            "7Server-RHSCL-2.4-7.3.Z:rh-mysql57-mysql-errmsg-0:5.7.19-6.el7.x86_64",
            "7Server-RHSCL-2.4-7.3.Z:rh-mysql57-mysql-server-0:5.7.19-6.el7.x86_64",
            "7Server-RHSCL-2.4-7.3.Z:rh-mysql57-mysql-test-0:5.7.19-6.el7.x86_64",
            "7Server-RHSCL-2.4:rh-mysql57-mysql-0:5.7.19-6.el7.src",
            "7Server-RHSCL-2.4:rh-mysql57-mysql-0:5.7.19-6.el7.x86_64",
            "7Server-RHSCL-2.4:rh-mysql57-mysql-common-0:5.7.19-6.el7.x86_64",
            "7Server-RHSCL-2.4:rh-mysql57-mysql-config-0:5.7.19-6.el7.x86_64",
            "7Server-RHSCL-2.4:rh-mysql57-mysql-debuginfo-0:5.7.19-6.el7.x86_64",
            "7Server-RHSCL-2.4:rh-mysql57-mysql-devel-0:5.7.19-6.el7.x86_64",
            "7Server-RHSCL-2.4:rh-mysql57-mysql-errmsg-0:5.7.19-6.el7.x86_64",
            "7Server-RHSCL-2.4:rh-mysql57-mysql-server-0:5.7.19-6.el7.x86_64",
            "7Server-RHSCL-2.4:rh-mysql57-mysql-test-0:5.7.19-6.el7.x86_64",
            "7Workstation-RHSCL-2.4:rh-mysql57-mysql-0:5.7.19-6.el7.src",
            "7Workstation-RHSCL-2.4:rh-mysql57-mysql-0:5.7.19-6.el7.x86_64",
            "7Workstation-RHSCL-2.4:rh-mysql57-mysql-common-0:5.7.19-6.el7.x86_64",
            "7Workstation-RHSCL-2.4:rh-mysql57-mysql-config-0:5.7.19-6.el7.x86_64",
            "7Workstation-RHSCL-2.4:rh-mysql57-mysql-debuginfo-0:5.7.19-6.el7.x86_64",
            "7Workstation-RHSCL-2.4:rh-mysql57-mysql-devel-0:5.7.19-6.el7.x86_64",
            "7Workstation-RHSCL-2.4:rh-mysql57-mysql-errmsg-0:5.7.19-6.el7.x86_64",
            "7Workstation-RHSCL-2.4:rh-mysql57-mysql-server-0:5.7.19-6.el7.x86_64",
            "7Workstation-RHSCL-2.4:rh-mysql57-mysql-test-0:5.7.19-6.el7.x86_64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2017:2886"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 4.9,
            "baseSeverity": "MEDIUM",
            "confidentialityImpact": "NONE",
            "integrityImpact": "NONE",
            "privilegesRequired": "HIGH",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.0"
          },
          "products": [
            "6Server-RHSCL-2.4-6.7.Z:rh-mysql57-mysql-0:5.7.19-6.el6.src",
            "6Server-RHSCL-2.4-6.7.Z:rh-mysql57-mysql-0:5.7.19-6.el6.x86_64",
            "6Server-RHSCL-2.4-6.7.Z:rh-mysql57-mysql-common-0:5.7.19-6.el6.x86_64",
            "6Server-RHSCL-2.4-6.7.Z:rh-mysql57-mysql-config-0:5.7.19-6.el6.x86_64",
            "6Server-RHSCL-2.4-6.7.Z:rh-mysql57-mysql-debuginfo-0:5.7.19-6.el6.x86_64",
            "6Server-RHSCL-2.4-6.7.Z:rh-mysql57-mysql-devel-0:5.7.19-6.el6.x86_64",
            "6Server-RHSCL-2.4-6.7.Z:rh-mysql57-mysql-errmsg-0:5.7.19-6.el6.x86_64",
            "6Server-RHSCL-2.4-6.7.Z:rh-mysql57-mysql-server-0:5.7.19-6.el6.x86_64",
            "6Server-RHSCL-2.4-6.7.Z:rh-mysql57-mysql-test-0:5.7.19-6.el6.x86_64",
            "6Server-RHSCL-2.4:rh-mysql57-mysql-0:5.7.19-6.el6.src",
            "6Server-RHSCL-2.4:rh-mysql57-mysql-0:5.7.19-6.el6.x86_64",
            "6Server-RHSCL-2.4:rh-mysql57-mysql-common-0:5.7.19-6.el6.x86_64",
            "6Server-RHSCL-2.4:rh-mysql57-mysql-config-0:5.7.19-6.el6.x86_64",
            "6Server-RHSCL-2.4:rh-mysql57-mysql-debuginfo-0:5.7.19-6.el6.x86_64",
            "6Server-RHSCL-2.4:rh-mysql57-mysql-devel-0:5.7.19-6.el6.x86_64",
            "6Server-RHSCL-2.4:rh-mysql57-mysql-errmsg-0:5.7.19-6.el6.x86_64",
            "6Server-RHSCL-2.4:rh-mysql57-mysql-server-0:5.7.19-6.el6.x86_64",
            "6Server-RHSCL-2.4:rh-mysql57-mysql-test-0:5.7.19-6.el6.x86_64",
            "6Workstation-RHSCL-2.4:rh-mysql57-mysql-0:5.7.19-6.el6.src",
            "6Workstation-RHSCL-2.4:rh-mysql57-mysql-0:5.7.19-6.el6.x86_64",
            "6Workstation-RHSCL-2.4:rh-mysql57-mysql-common-0:5.7.19-6.el6.x86_64",
            "6Workstation-RHSCL-2.4:rh-mysql57-mysql-config-0:5.7.19-6.el6.x86_64",
            "6Workstation-RHSCL-2.4:rh-mysql57-mysql-debuginfo-0:5.7.19-6.el6.x86_64",
            "6Workstation-RHSCL-2.4:rh-mysql57-mysql-devel-0:5.7.19-6.el6.x86_64",
            "6Workstation-RHSCL-2.4:rh-mysql57-mysql-errmsg-0:5.7.19-6.el6.x86_64",
            "6Workstation-RHSCL-2.4:rh-mysql57-mysql-server-0:5.7.19-6.el6.x86_64",
            "6Workstation-RHSCL-2.4:rh-mysql57-mysql-test-0:5.7.19-6.el6.x86_64",
            "7Server-RHSCL-2.4-7.3.Z:rh-mysql57-mysql-0:5.7.19-6.el7.src",
            "7Server-RHSCL-2.4-7.3.Z:rh-mysql57-mysql-0:5.7.19-6.el7.x86_64",
            "7Server-RHSCL-2.4-7.3.Z:rh-mysql57-mysql-common-0:5.7.19-6.el7.x86_64",
            "7Server-RHSCL-2.4-7.3.Z:rh-mysql57-mysql-config-0:5.7.19-6.el7.x86_64",
            "7Server-RHSCL-2.4-7.3.Z:rh-mysql57-mysql-debuginfo-0:5.7.19-6.el7.x86_64",
            "7Server-RHSCL-2.4-7.3.Z:rh-mysql57-mysql-devel-0:5.7.19-6.el7.x86_64",
            "7Server-RHSCL-2.4-7.3.Z:rh-mysql57-mysql-errmsg-0:5.7.19-6.el7.x86_64",
            "7Server-RHSCL-2.4-7.3.Z:rh-mysql57-mysql-server-0:5.7.19-6.el7.x86_64",
            "7Server-RHSCL-2.4-7.3.Z:rh-mysql57-mysql-test-0:5.7.19-6.el7.x86_64",
            "7Server-RHSCL-2.4:rh-mysql57-mysql-0:5.7.19-6.el7.src",
            "7Server-RHSCL-2.4:rh-mysql57-mysql-0:5.7.19-6.el7.x86_64",
            "7Server-RHSCL-2.4:rh-mysql57-mysql-common-0:5.7.19-6.el7.x86_64",
            "7Server-RHSCL-2.4:rh-mysql57-mysql-config-0:5.7.19-6.el7.x86_64",
            "7Server-RHSCL-2.4:rh-mysql57-mysql-debuginfo-0:5.7.19-6.el7.x86_64",
            "7Server-RHSCL-2.4:rh-mysql57-mysql-devel-0:5.7.19-6.el7.x86_64",
            "7Server-RHSCL-2.4:rh-mysql57-mysql-errmsg-0:5.7.19-6.el7.x86_64",
            "7Server-RHSCL-2.4:rh-mysql57-mysql-server-0:5.7.19-6.el7.x86_64",
            "7Server-RHSCL-2.4:rh-mysql57-mysql-test-0:5.7.19-6.el7.x86_64",
            "7Workstation-RHSCL-2.4:rh-mysql57-mysql-0:5.7.19-6.el7.src",
            "7Workstation-RHSCL-2.4:rh-mysql57-mysql-0:5.7.19-6.el7.x86_64",
            "7Workstation-RHSCL-2.4:rh-mysql57-mysql-common-0:5.7.19-6.el7.x86_64",
            "7Workstation-RHSCL-2.4:rh-mysql57-mysql-config-0:5.7.19-6.el7.x86_64",
            "7Workstation-RHSCL-2.4:rh-mysql57-mysql-debuginfo-0:5.7.19-6.el7.x86_64",
            "7Workstation-RHSCL-2.4:rh-mysql57-mysql-devel-0:5.7.19-6.el7.x86_64",
            "7Workstation-RHSCL-2.4:rh-mysql57-mysql-errmsg-0:5.7.19-6.el7.x86_64",
            "7Workstation-RHSCL-2.4:rh-mysql57-mysql-server-0:5.7.19-6.el7.x86_64",
            "7Workstation-RHSCL-2.4:rh-mysql57-mysql-test-0:5.7.19-6.el7.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Moderate"
        }
      ],
      "title": "mysql: Server: Optimizer unspecified vulnerability (CPU Jul 2017)"
    },
    {
      "cve": "CVE-2017-3639",
      "discovery_date": "2017-07-19T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "1472689"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: DML). Supported versions that are affected are 5.7.18 and earlier. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.0 Base Score 4.9 (Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H).",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "mysql: Server: DML unspecified vulnerability (CPU Jul 2017)",
          "title": "Vulnerability summary"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "6Server-RHSCL-2.4-6.7.Z:rh-mysql57-mysql-0:5.7.19-6.el6.src",
          "6Server-RHSCL-2.4-6.7.Z:rh-mysql57-mysql-0:5.7.19-6.el6.x86_64",
          "6Server-RHSCL-2.4-6.7.Z:rh-mysql57-mysql-common-0:5.7.19-6.el6.x86_64",
          "6Server-RHSCL-2.4-6.7.Z:rh-mysql57-mysql-config-0:5.7.19-6.el6.x86_64",
          "6Server-RHSCL-2.4-6.7.Z:rh-mysql57-mysql-debuginfo-0:5.7.19-6.el6.x86_64",
          "6Server-RHSCL-2.4-6.7.Z:rh-mysql57-mysql-devel-0:5.7.19-6.el6.x86_64",
          "6Server-RHSCL-2.4-6.7.Z:rh-mysql57-mysql-errmsg-0:5.7.19-6.el6.x86_64",
          "6Server-RHSCL-2.4-6.7.Z:rh-mysql57-mysql-server-0:5.7.19-6.el6.x86_64",
          "6Server-RHSCL-2.4-6.7.Z:rh-mysql57-mysql-test-0:5.7.19-6.el6.x86_64",
          "6Server-RHSCL-2.4:rh-mysql57-mysql-0:5.7.19-6.el6.src",
          "6Server-RHSCL-2.4:rh-mysql57-mysql-0:5.7.19-6.el6.x86_64",
          "6Server-RHSCL-2.4:rh-mysql57-mysql-common-0:5.7.19-6.el6.x86_64",
          "6Server-RHSCL-2.4:rh-mysql57-mysql-config-0:5.7.19-6.el6.x86_64",
          "6Server-RHSCL-2.4:rh-mysql57-mysql-debuginfo-0:5.7.19-6.el6.x86_64",
          "6Server-RHSCL-2.4:rh-mysql57-mysql-devel-0:5.7.19-6.el6.x86_64",
          "6Server-RHSCL-2.4:rh-mysql57-mysql-errmsg-0:5.7.19-6.el6.x86_64",
          "6Server-RHSCL-2.4:rh-mysql57-mysql-server-0:5.7.19-6.el6.x86_64",
          "6Server-RHSCL-2.4:rh-mysql57-mysql-test-0:5.7.19-6.el6.x86_64",
          "6Workstation-RHSCL-2.4:rh-mysql57-mysql-0:5.7.19-6.el6.src",
          "6Workstation-RHSCL-2.4:rh-mysql57-mysql-0:5.7.19-6.el6.x86_64",
          "6Workstation-RHSCL-2.4:rh-mysql57-mysql-common-0:5.7.19-6.el6.x86_64",
          "6Workstation-RHSCL-2.4:rh-mysql57-mysql-config-0:5.7.19-6.el6.x86_64",
          "6Workstation-RHSCL-2.4:rh-mysql57-mysql-debuginfo-0:5.7.19-6.el6.x86_64",
          "6Workstation-RHSCL-2.4:rh-mysql57-mysql-devel-0:5.7.19-6.el6.x86_64",
          "6Workstation-RHSCL-2.4:rh-mysql57-mysql-errmsg-0:5.7.19-6.el6.x86_64",
          "6Workstation-RHSCL-2.4:rh-mysql57-mysql-server-0:5.7.19-6.el6.x86_64",
          "6Workstation-RHSCL-2.4:rh-mysql57-mysql-test-0:5.7.19-6.el6.x86_64",
          "7Server-RHSCL-2.4-7.3.Z:rh-mysql57-mysql-0:5.7.19-6.el7.src",
          "7Server-RHSCL-2.4-7.3.Z:rh-mysql57-mysql-0:5.7.19-6.el7.x86_64",
          "7Server-RHSCL-2.4-7.3.Z:rh-mysql57-mysql-common-0:5.7.19-6.el7.x86_64",
          "7Server-RHSCL-2.4-7.3.Z:rh-mysql57-mysql-config-0:5.7.19-6.el7.x86_64",
          "7Server-RHSCL-2.4-7.3.Z:rh-mysql57-mysql-debuginfo-0:5.7.19-6.el7.x86_64",
          "7Server-RHSCL-2.4-7.3.Z:rh-mysql57-mysql-devel-0:5.7.19-6.el7.x86_64",
          "7Server-RHSCL-2.4-7.3.Z:rh-mysql57-mysql-errmsg-0:5.7.19-6.el7.x86_64",
          "7Server-RHSCL-2.4-7.3.Z:rh-mysql57-mysql-server-0:5.7.19-6.el7.x86_64",
          "7Server-RHSCL-2.4-7.3.Z:rh-mysql57-mysql-test-0:5.7.19-6.el7.x86_64",
          "7Server-RHSCL-2.4:rh-mysql57-mysql-0:5.7.19-6.el7.src",
          "7Server-RHSCL-2.4:rh-mysql57-mysql-0:5.7.19-6.el7.x86_64",
          "7Server-RHSCL-2.4:rh-mysql57-mysql-common-0:5.7.19-6.el7.x86_64",
          "7Server-RHSCL-2.4:rh-mysql57-mysql-config-0:5.7.19-6.el7.x86_64",
          "7Server-RHSCL-2.4:rh-mysql57-mysql-debuginfo-0:5.7.19-6.el7.x86_64",
          "7Server-RHSCL-2.4:rh-mysql57-mysql-devel-0:5.7.19-6.el7.x86_64",
          "7Server-RHSCL-2.4:rh-mysql57-mysql-errmsg-0:5.7.19-6.el7.x86_64",
          "7Server-RHSCL-2.4:rh-mysql57-mysql-server-0:5.7.19-6.el7.x86_64",
          "7Server-RHSCL-2.4:rh-mysql57-mysql-test-0:5.7.19-6.el7.x86_64",
          "7Workstation-RHSCL-2.4:rh-mysql57-mysql-0:5.7.19-6.el7.src",
          "7Workstation-RHSCL-2.4:rh-mysql57-mysql-0:5.7.19-6.el7.x86_64",
          "7Workstation-RHSCL-2.4:rh-mysql57-mysql-common-0:5.7.19-6.el7.x86_64",
          "7Workstation-RHSCL-2.4:rh-mysql57-mysql-config-0:5.7.19-6.el7.x86_64",
          "7Workstation-RHSCL-2.4:rh-mysql57-mysql-debuginfo-0:5.7.19-6.el7.x86_64",
          "7Workstation-RHSCL-2.4:rh-mysql57-mysql-devel-0:5.7.19-6.el7.x86_64",
          "7Workstation-RHSCL-2.4:rh-mysql57-mysql-errmsg-0:5.7.19-6.el7.x86_64",
          "7Workstation-RHSCL-2.4:rh-mysql57-mysql-server-0:5.7.19-6.el7.x86_64",
          "7Workstation-RHSCL-2.4:rh-mysql57-mysql-test-0:5.7.19-6.el7.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2017-3639"
        },
        {
          "category": "external",
          "summary": "RHBZ#1472689",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1472689"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2017-3639",
          "url": "https://www.cve.org/CVERecord?id=CVE-2017-3639"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2017-3639",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2017-3639"
        },
        {
          "category": "external",
          "summary": "http://www.oracle.com/technetwork/security-advisory/cpujul2017-3236622.html#AppendixMSQL",
          "url": "http://www.oracle.com/technetwork/security-advisory/cpujul2017-3236622.html#AppendixMSQL"
        }
      ],
      "release_date": "2017-07-19T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2017-10-12T07:53:15+00:00",
          "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAfter installing this update, the MySQL server daemon (mysqld) will be restarted automatically.",
          "product_ids": [
            "6Server-RHSCL-2.4-6.7.Z:rh-mysql57-mysql-0:5.7.19-6.el6.src",
            "6Server-RHSCL-2.4-6.7.Z:rh-mysql57-mysql-0:5.7.19-6.el6.x86_64",
            "6Server-RHSCL-2.4-6.7.Z:rh-mysql57-mysql-common-0:5.7.19-6.el6.x86_64",
            "6Server-RHSCL-2.4-6.7.Z:rh-mysql57-mysql-config-0:5.7.19-6.el6.x86_64",
            "6Server-RHSCL-2.4-6.7.Z:rh-mysql57-mysql-debuginfo-0:5.7.19-6.el6.x86_64",
            "6Server-RHSCL-2.4-6.7.Z:rh-mysql57-mysql-devel-0:5.7.19-6.el6.x86_64",
            "6Server-RHSCL-2.4-6.7.Z:rh-mysql57-mysql-errmsg-0:5.7.19-6.el6.x86_64",
            "6Server-RHSCL-2.4-6.7.Z:rh-mysql57-mysql-server-0:5.7.19-6.el6.x86_64",
            "6Server-RHSCL-2.4-6.7.Z:rh-mysql57-mysql-test-0:5.7.19-6.el6.x86_64",
            "6Server-RHSCL-2.4:rh-mysql57-mysql-0:5.7.19-6.el6.src",
            "6Server-RHSCL-2.4:rh-mysql57-mysql-0:5.7.19-6.el6.x86_64",
            "6Server-RHSCL-2.4:rh-mysql57-mysql-common-0:5.7.19-6.el6.x86_64",
            "6Server-RHSCL-2.4:rh-mysql57-mysql-config-0:5.7.19-6.el6.x86_64",
            "6Server-RHSCL-2.4:rh-mysql57-mysql-debuginfo-0:5.7.19-6.el6.x86_64",
            "6Server-RHSCL-2.4:rh-mysql57-mysql-devel-0:5.7.19-6.el6.x86_64",
            "6Server-RHSCL-2.4:rh-mysql57-mysql-errmsg-0:5.7.19-6.el6.x86_64",
            "6Server-RHSCL-2.4:rh-mysql57-mysql-server-0:5.7.19-6.el6.x86_64",
            "6Server-RHSCL-2.4:rh-mysql57-mysql-test-0:5.7.19-6.el6.x86_64",
            "6Workstation-RHSCL-2.4:rh-mysql57-mysql-0:5.7.19-6.el6.src",
            "6Workstation-RHSCL-2.4:rh-mysql57-mysql-0:5.7.19-6.el6.x86_64",
            "6Workstation-RHSCL-2.4:rh-mysql57-mysql-common-0:5.7.19-6.el6.x86_64",
            "6Workstation-RHSCL-2.4:rh-mysql57-mysql-config-0:5.7.19-6.el6.x86_64",
            "6Workstation-RHSCL-2.4:rh-mysql57-mysql-debuginfo-0:5.7.19-6.el6.x86_64",
            "6Workstation-RHSCL-2.4:rh-mysql57-mysql-devel-0:5.7.19-6.el6.x86_64",
            "6Workstation-RHSCL-2.4:rh-mysql57-mysql-errmsg-0:5.7.19-6.el6.x86_64",
            "6Workstation-RHSCL-2.4:rh-mysql57-mysql-server-0:5.7.19-6.el6.x86_64",
            "6Workstation-RHSCL-2.4:rh-mysql57-mysql-test-0:5.7.19-6.el6.x86_64",
            "7Server-RHSCL-2.4-7.3.Z:rh-mysql57-mysql-0:5.7.19-6.el7.src",
            "7Server-RHSCL-2.4-7.3.Z:rh-mysql57-mysql-0:5.7.19-6.el7.x86_64",
            "7Server-RHSCL-2.4-7.3.Z:rh-mysql57-mysql-common-0:5.7.19-6.el7.x86_64",
            "7Server-RHSCL-2.4-7.3.Z:rh-mysql57-mysql-config-0:5.7.19-6.el7.x86_64",
            "7Server-RHSCL-2.4-7.3.Z:rh-mysql57-mysql-debuginfo-0:5.7.19-6.el7.x86_64",
            "7Server-RHSCL-2.4-7.3.Z:rh-mysql57-mysql-devel-0:5.7.19-6.el7.x86_64",
            "7Server-RHSCL-2.4-7.3.Z:rh-mysql57-mysql-errmsg-0:5.7.19-6.el7.x86_64",
            "7Server-RHSCL-2.4-7.3.Z:rh-mysql57-mysql-server-0:5.7.19-6.el7.x86_64",
            "7Server-RHSCL-2.4-7.3.Z:rh-mysql57-mysql-test-0:5.7.19-6.el7.x86_64",
            "7Server-RHSCL-2.4:rh-mysql57-mysql-0:5.7.19-6.el7.src",
            "7Server-RHSCL-2.4:rh-mysql57-mysql-0:5.7.19-6.el7.x86_64",
            "7Server-RHSCL-2.4:rh-mysql57-mysql-common-0:5.7.19-6.el7.x86_64",
            "7Server-RHSCL-2.4:rh-mysql57-mysql-config-0:5.7.19-6.el7.x86_64",
            "7Server-RHSCL-2.4:rh-mysql57-mysql-debuginfo-0:5.7.19-6.el7.x86_64",
            "7Server-RHSCL-2.4:rh-mysql57-mysql-devel-0:5.7.19-6.el7.x86_64",
            "7Server-RHSCL-2.4:rh-mysql57-mysql-errmsg-0:5.7.19-6.el7.x86_64",
            "7Server-RHSCL-2.4:rh-mysql57-mysql-server-0:5.7.19-6.el7.x86_64",
            "7Server-RHSCL-2.4:rh-mysql57-mysql-test-0:5.7.19-6.el7.x86_64",
            "7Workstation-RHSCL-2.4:rh-mysql57-mysql-0:5.7.19-6.el7.src",
            "7Workstation-RHSCL-2.4:rh-mysql57-mysql-0:5.7.19-6.el7.x86_64",
            "7Workstation-RHSCL-2.4:rh-mysql57-mysql-common-0:5.7.19-6.el7.x86_64",
            "7Workstation-RHSCL-2.4:rh-mysql57-mysql-config-0:5.7.19-6.el7.x86_64",
            "7Workstation-RHSCL-2.4:rh-mysql57-mysql-debuginfo-0:5.7.19-6.el7.x86_64",
            "7Workstation-RHSCL-2.4:rh-mysql57-mysql-devel-0:5.7.19-6.el7.x86_64",
            "7Workstation-RHSCL-2.4:rh-mysql57-mysql-errmsg-0:5.7.19-6.el7.x86_64",
            "7Workstation-RHSCL-2.4:rh-mysql57-mysql-server-0:5.7.19-6.el7.x86_64",
            "7Workstation-RHSCL-2.4:rh-mysql57-mysql-test-0:5.7.19-6.el7.x86_64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2017:2886"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 4.9,
            "baseSeverity": "MEDIUM",
            "confidentialityImpact": "NONE",
            "integrityImpact": "NONE",
            "privilegesRequired": "HIGH",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.0"
          },
          "products": [
            "6Server-RHSCL-2.4-6.7.Z:rh-mysql57-mysql-0:5.7.19-6.el6.src",
            "6Server-RHSCL-2.4-6.7.Z:rh-mysql57-mysql-0:5.7.19-6.el6.x86_64",
            "6Server-RHSCL-2.4-6.7.Z:rh-mysql57-mysql-common-0:5.7.19-6.el6.x86_64",
            "6Server-RHSCL-2.4-6.7.Z:rh-mysql57-mysql-config-0:5.7.19-6.el6.x86_64",
            "6Server-RHSCL-2.4-6.7.Z:rh-mysql57-mysql-debuginfo-0:5.7.19-6.el6.x86_64",
            "6Server-RHSCL-2.4-6.7.Z:rh-mysql57-mysql-devel-0:5.7.19-6.el6.x86_64",
            "6Server-RHSCL-2.4-6.7.Z:rh-mysql57-mysql-errmsg-0:5.7.19-6.el6.x86_64",
            "6Server-RHSCL-2.4-6.7.Z:rh-mysql57-mysql-server-0:5.7.19-6.el6.x86_64",
            "6Server-RHSCL-2.4-6.7.Z:rh-mysql57-mysql-test-0:5.7.19-6.el6.x86_64",
            "6Server-RHSCL-2.4:rh-mysql57-mysql-0:5.7.19-6.el6.src",
            "6Server-RHSCL-2.4:rh-mysql57-mysql-0:5.7.19-6.el6.x86_64",
            "6Server-RHSCL-2.4:rh-mysql57-mysql-common-0:5.7.19-6.el6.x86_64",
            "6Server-RHSCL-2.4:rh-mysql57-mysql-config-0:5.7.19-6.el6.x86_64",
            "6Server-RHSCL-2.4:rh-mysql57-mysql-debuginfo-0:5.7.19-6.el6.x86_64",
            "6Server-RHSCL-2.4:rh-mysql57-mysql-devel-0:5.7.19-6.el6.x86_64",
            "6Server-RHSCL-2.4:rh-mysql57-mysql-errmsg-0:5.7.19-6.el6.x86_64",
            "6Server-RHSCL-2.4:rh-mysql57-mysql-server-0:5.7.19-6.el6.x86_64",
            "6Server-RHSCL-2.4:rh-mysql57-mysql-test-0:5.7.19-6.el6.x86_64",
            "6Workstation-RHSCL-2.4:rh-mysql57-mysql-0:5.7.19-6.el6.src",
            "6Workstation-RHSCL-2.4:rh-mysql57-mysql-0:5.7.19-6.el6.x86_64",
            "6Workstation-RHSCL-2.4:rh-mysql57-mysql-common-0:5.7.19-6.el6.x86_64",
            "6Workstation-RHSCL-2.4:rh-mysql57-mysql-config-0:5.7.19-6.el6.x86_64",
            "6Workstation-RHSCL-2.4:rh-mysql57-mysql-debuginfo-0:5.7.19-6.el6.x86_64",
            "6Workstation-RHSCL-2.4:rh-mysql57-mysql-devel-0:5.7.19-6.el6.x86_64",
            "6Workstation-RHSCL-2.4:rh-mysql57-mysql-errmsg-0:5.7.19-6.el6.x86_64",
            "6Workstation-RHSCL-2.4:rh-mysql57-mysql-server-0:5.7.19-6.el6.x86_64",
            "6Workstation-RHSCL-2.4:rh-mysql57-mysql-test-0:5.7.19-6.el6.x86_64",
            "7Server-RHSCL-2.4-7.3.Z:rh-mysql57-mysql-0:5.7.19-6.el7.src",
            "7Server-RHSCL-2.4-7.3.Z:rh-mysql57-mysql-0:5.7.19-6.el7.x86_64",
            "7Server-RHSCL-2.4-7.3.Z:rh-mysql57-mysql-common-0:5.7.19-6.el7.x86_64",
            "7Server-RHSCL-2.4-7.3.Z:rh-mysql57-mysql-config-0:5.7.19-6.el7.x86_64",
            "7Server-RHSCL-2.4-7.3.Z:rh-mysql57-mysql-debuginfo-0:5.7.19-6.el7.x86_64",
            "7Server-RHSCL-2.4-7.3.Z:rh-mysql57-mysql-devel-0:5.7.19-6.el7.x86_64",
            "7Server-RHSCL-2.4-7.3.Z:rh-mysql57-mysql-errmsg-0:5.7.19-6.el7.x86_64",
            "7Server-RHSCL-2.4-7.3.Z:rh-mysql57-mysql-server-0:5.7.19-6.el7.x86_64",
            "7Server-RHSCL-2.4-7.3.Z:rh-mysql57-mysql-test-0:5.7.19-6.el7.x86_64",
            "7Server-RHSCL-2.4:rh-mysql57-mysql-0:5.7.19-6.el7.src",
            "7Server-RHSCL-2.4:rh-mysql57-mysql-0:5.7.19-6.el7.x86_64",
            "7Server-RHSCL-2.4:rh-mysql57-mysql-common-0:5.7.19-6.el7.x86_64",
            "7Server-RHSCL-2.4:rh-mysql57-mysql-config-0:5.7.19-6.el7.x86_64",
            "7Server-RHSCL-2.4:rh-mysql57-mysql-debuginfo-0:5.7.19-6.el7.x86_64",
            "7Server-RHSCL-2.4:rh-mysql57-mysql-devel-0:5.7.19-6.el7.x86_64",
            "7Server-RHSCL-2.4:rh-mysql57-mysql-errmsg-0:5.7.19-6.el7.x86_64",
            "7Server-RHSCL-2.4:rh-mysql57-mysql-server-0:5.7.19-6.el7.x86_64",
            "7Server-RHSCL-2.4:rh-mysql57-mysql-test-0:5.7.19-6.el7.x86_64",
            "7Workstation-RHSCL-2.4:rh-mysql57-mysql-0:5.7.19-6.el7.src",
            "7Workstation-RHSCL-2.4:rh-mysql57-mysql-0:5.7.19-6.el7.x86_64",
            "7Workstation-RHSCL-2.4:rh-mysql57-mysql-common-0:5.7.19-6.el7.x86_64",
            "7Workstation-RHSCL-2.4:rh-mysql57-mysql-config-0:5.7.19-6.el7.x86_64",
            "7Workstation-RHSCL-2.4:rh-mysql57-mysql-debuginfo-0:5.7.19-6.el7.x86_64",
            "7Workstation-RHSCL-2.4:rh-mysql57-mysql-devel-0:5.7.19-6.el7.x86_64",
            "7Workstation-RHSCL-2.4:rh-mysql57-mysql-errmsg-0:5.7.19-6.el7.x86_64",
            "7Workstation-RHSCL-2.4:rh-mysql57-mysql-server-0:5.7.19-6.el7.x86_64",
            "7Workstation-RHSCL-2.4:rh-mysql57-mysql-test-0:5.7.19-6.el7.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Moderate"
        }
      ],
      "title": "mysql: Server: DML unspecified vulnerability (CPU Jul 2017)"
    },
    {
      "cve": "CVE-2017-3640",
      "discovery_date": "2017-07-19T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "1472692"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: DML). Supported versions that are affected are 5.7.18 and earlier. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.0 Base Score 4.9 (Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H).",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "mysql: Server: DML unspecified vulnerability (CPU Jul 2017)",
          "title": "Vulnerability summary"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "6Server-RHSCL-2.4-6.7.Z:rh-mysql57-mysql-0:5.7.19-6.el6.src",
          "6Server-RHSCL-2.4-6.7.Z:rh-mysql57-mysql-0:5.7.19-6.el6.x86_64",
          "6Server-RHSCL-2.4-6.7.Z:rh-mysql57-mysql-common-0:5.7.19-6.el6.x86_64",
          "6Server-RHSCL-2.4-6.7.Z:rh-mysql57-mysql-config-0:5.7.19-6.el6.x86_64",
          "6Server-RHSCL-2.4-6.7.Z:rh-mysql57-mysql-debuginfo-0:5.7.19-6.el6.x86_64",
          "6Server-RHSCL-2.4-6.7.Z:rh-mysql57-mysql-devel-0:5.7.19-6.el6.x86_64",
          "6Server-RHSCL-2.4-6.7.Z:rh-mysql57-mysql-errmsg-0:5.7.19-6.el6.x86_64",
          "6Server-RHSCL-2.4-6.7.Z:rh-mysql57-mysql-server-0:5.7.19-6.el6.x86_64",
          "6Server-RHSCL-2.4-6.7.Z:rh-mysql57-mysql-test-0:5.7.19-6.el6.x86_64",
          "6Server-RHSCL-2.4:rh-mysql57-mysql-0:5.7.19-6.el6.src",
          "6Server-RHSCL-2.4:rh-mysql57-mysql-0:5.7.19-6.el6.x86_64",
          "6Server-RHSCL-2.4:rh-mysql57-mysql-common-0:5.7.19-6.el6.x86_64",
          "6Server-RHSCL-2.4:rh-mysql57-mysql-config-0:5.7.19-6.el6.x86_64",
          "6Server-RHSCL-2.4:rh-mysql57-mysql-debuginfo-0:5.7.19-6.el6.x86_64",
          "6Server-RHSCL-2.4:rh-mysql57-mysql-devel-0:5.7.19-6.el6.x86_64",
          "6Server-RHSCL-2.4:rh-mysql57-mysql-errmsg-0:5.7.19-6.el6.x86_64",
          "6Server-RHSCL-2.4:rh-mysql57-mysql-server-0:5.7.19-6.el6.x86_64",
          "6Server-RHSCL-2.4:rh-mysql57-mysql-test-0:5.7.19-6.el6.x86_64",
          "6Workstation-RHSCL-2.4:rh-mysql57-mysql-0:5.7.19-6.el6.src",
          "6Workstation-RHSCL-2.4:rh-mysql57-mysql-0:5.7.19-6.el6.x86_64",
          "6Workstation-RHSCL-2.4:rh-mysql57-mysql-common-0:5.7.19-6.el6.x86_64",
          "6Workstation-RHSCL-2.4:rh-mysql57-mysql-config-0:5.7.19-6.el6.x86_64",
          "6Workstation-RHSCL-2.4:rh-mysql57-mysql-debuginfo-0:5.7.19-6.el6.x86_64",
          "6Workstation-RHSCL-2.4:rh-mysql57-mysql-devel-0:5.7.19-6.el6.x86_64",
          "6Workstation-RHSCL-2.4:rh-mysql57-mysql-errmsg-0:5.7.19-6.el6.x86_64",
          "6Workstation-RHSCL-2.4:rh-mysql57-mysql-server-0:5.7.19-6.el6.x86_64",
          "6Workstation-RHSCL-2.4:rh-mysql57-mysql-test-0:5.7.19-6.el6.x86_64",
          "7Server-RHSCL-2.4-7.3.Z:rh-mysql57-mysql-0:5.7.19-6.el7.src",
          "7Server-RHSCL-2.4-7.3.Z:rh-mysql57-mysql-0:5.7.19-6.el7.x86_64",
          "7Server-RHSCL-2.4-7.3.Z:rh-mysql57-mysql-common-0:5.7.19-6.el7.x86_64",
          "7Server-RHSCL-2.4-7.3.Z:rh-mysql57-mysql-config-0:5.7.19-6.el7.x86_64",
          "7Server-RHSCL-2.4-7.3.Z:rh-mysql57-mysql-debuginfo-0:5.7.19-6.el7.x86_64",
          "7Server-RHSCL-2.4-7.3.Z:rh-mysql57-mysql-devel-0:5.7.19-6.el7.x86_64",
          "7Server-RHSCL-2.4-7.3.Z:rh-mysql57-mysql-errmsg-0:5.7.19-6.el7.x86_64",
          "7Server-RHSCL-2.4-7.3.Z:rh-mysql57-mysql-server-0:5.7.19-6.el7.x86_64",
          "7Server-RHSCL-2.4-7.3.Z:rh-mysql57-mysql-test-0:5.7.19-6.el7.x86_64",
          "7Server-RHSCL-2.4:rh-mysql57-mysql-0:5.7.19-6.el7.src",
          "7Server-RHSCL-2.4:rh-mysql57-mysql-0:5.7.19-6.el7.x86_64",
          "7Server-RHSCL-2.4:rh-mysql57-mysql-common-0:5.7.19-6.el7.x86_64",
          "7Server-RHSCL-2.4:rh-mysql57-mysql-config-0:5.7.19-6.el7.x86_64",
          "7Server-RHSCL-2.4:rh-mysql57-mysql-debuginfo-0:5.7.19-6.el7.x86_64",
          "7Server-RHSCL-2.4:rh-mysql57-mysql-devel-0:5.7.19-6.el7.x86_64",
          "7Server-RHSCL-2.4:rh-mysql57-mysql-errmsg-0:5.7.19-6.el7.x86_64",
          "7Server-RHSCL-2.4:rh-mysql57-mysql-server-0:5.7.19-6.el7.x86_64",
          "7Server-RHSCL-2.4:rh-mysql57-mysql-test-0:5.7.19-6.el7.x86_64",
          "7Workstation-RHSCL-2.4:rh-mysql57-mysql-0:5.7.19-6.el7.src",
          "7Workstation-RHSCL-2.4:rh-mysql57-mysql-0:5.7.19-6.el7.x86_64",
          "7Workstation-RHSCL-2.4:rh-mysql57-mysql-common-0:5.7.19-6.el7.x86_64",
          "7Workstation-RHSCL-2.4:rh-mysql57-mysql-config-0:5.7.19-6.el7.x86_64",
          "7Workstation-RHSCL-2.4:rh-mysql57-mysql-debuginfo-0:5.7.19-6.el7.x86_64",
          "7Workstation-RHSCL-2.4:rh-mysql57-mysql-devel-0:5.7.19-6.el7.x86_64",
          "7Workstation-RHSCL-2.4:rh-mysql57-mysql-errmsg-0:5.7.19-6.el7.x86_64",
          "7Workstation-RHSCL-2.4:rh-mysql57-mysql-server-0:5.7.19-6.el7.x86_64",
          "7Workstation-RHSCL-2.4:rh-mysql57-mysql-test-0:5.7.19-6.el7.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2017-3640"
        },
        {
          "category": "external",
          "summary": "RHBZ#1472692",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1472692"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2017-3640",
          "url": "https://www.cve.org/CVERecord?id=CVE-2017-3640"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2017-3640",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2017-3640"
        },
        {
          "category": "external",
          "summary": "http://www.oracle.com/technetwork/security-advisory/cpujul2017-3236622.html#AppendixMSQL",
          "url": "http://www.oracle.com/technetwork/security-advisory/cpujul2017-3236622.html#AppendixMSQL"
        }
      ],
      "release_date": "2017-07-19T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2017-10-12T07:53:15+00:00",
          "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAfter installing this update, the MySQL server daemon (mysqld) will be restarted automatically.",
          "product_ids": [
            "6Server-RHSCL-2.4-6.7.Z:rh-mysql57-mysql-0:5.7.19-6.el6.src",
            "6Server-RHSCL-2.4-6.7.Z:rh-mysql57-mysql-0:5.7.19-6.el6.x86_64",
            "6Server-RHSCL-2.4-6.7.Z:rh-mysql57-mysql-common-0:5.7.19-6.el6.x86_64",
            "6Server-RHSCL-2.4-6.7.Z:rh-mysql57-mysql-config-0:5.7.19-6.el6.x86_64",
            "6Server-RHSCL-2.4-6.7.Z:rh-mysql57-mysql-debuginfo-0:5.7.19-6.el6.x86_64",
            "6Server-RHSCL-2.4-6.7.Z:rh-mysql57-mysql-devel-0:5.7.19-6.el6.x86_64",
            "6Server-RHSCL-2.4-6.7.Z:rh-mysql57-mysql-errmsg-0:5.7.19-6.el6.x86_64",
            "6Server-RHSCL-2.4-6.7.Z:rh-mysql57-mysql-server-0:5.7.19-6.el6.x86_64",
            "6Server-RHSCL-2.4-6.7.Z:rh-mysql57-mysql-test-0:5.7.19-6.el6.x86_64",
            "6Server-RHSCL-2.4:rh-mysql57-mysql-0:5.7.19-6.el6.src",
            "6Server-RHSCL-2.4:rh-mysql57-mysql-0:5.7.19-6.el6.x86_64",
            "6Server-RHSCL-2.4:rh-mysql57-mysql-common-0:5.7.19-6.el6.x86_64",
            "6Server-RHSCL-2.4:rh-mysql57-mysql-config-0:5.7.19-6.el6.x86_64",
            "6Server-RHSCL-2.4:rh-mysql57-mysql-debuginfo-0:5.7.19-6.el6.x86_64",
            "6Server-RHSCL-2.4:rh-mysql57-mysql-devel-0:5.7.19-6.el6.x86_64",
            "6Server-RHSCL-2.4:rh-mysql57-mysql-errmsg-0:5.7.19-6.el6.x86_64",
            "6Server-RHSCL-2.4:rh-mysql57-mysql-server-0:5.7.19-6.el6.x86_64",
            "6Server-RHSCL-2.4:rh-mysql57-mysql-test-0:5.7.19-6.el6.x86_64",
            "6Workstation-RHSCL-2.4:rh-mysql57-mysql-0:5.7.19-6.el6.src",
            "6Workstation-RHSCL-2.4:rh-mysql57-mysql-0:5.7.19-6.el6.x86_64",
            "6Workstation-RHSCL-2.4:rh-mysql57-mysql-common-0:5.7.19-6.el6.x86_64",
            "6Workstation-RHSCL-2.4:rh-mysql57-mysql-config-0:5.7.19-6.el6.x86_64",
            "6Workstation-RHSCL-2.4:rh-mysql57-mysql-debuginfo-0:5.7.19-6.el6.x86_64",
            "6Workstation-RHSCL-2.4:rh-mysql57-mysql-devel-0:5.7.19-6.el6.x86_64",
            "6Workstation-RHSCL-2.4:rh-mysql57-mysql-errmsg-0:5.7.19-6.el6.x86_64",
            "6Workstation-RHSCL-2.4:rh-mysql57-mysql-server-0:5.7.19-6.el6.x86_64",
            "6Workstation-RHSCL-2.4:rh-mysql57-mysql-test-0:5.7.19-6.el6.x86_64",
            "7Server-RHSCL-2.4-7.3.Z:rh-mysql57-mysql-0:5.7.19-6.el7.src",
            "7Server-RHSCL-2.4-7.3.Z:rh-mysql57-mysql-0:5.7.19-6.el7.x86_64",
            "7Server-RHSCL-2.4-7.3.Z:rh-mysql57-mysql-common-0:5.7.19-6.el7.x86_64",
            "7Server-RHSCL-2.4-7.3.Z:rh-mysql57-mysql-config-0:5.7.19-6.el7.x86_64",
            "7Server-RHSCL-2.4-7.3.Z:rh-mysql57-mysql-debuginfo-0:5.7.19-6.el7.x86_64",
            "7Server-RHSCL-2.4-7.3.Z:rh-mysql57-mysql-devel-0:5.7.19-6.el7.x86_64",
            "7Server-RHSCL-2.4-7.3.Z:rh-mysql57-mysql-errmsg-0:5.7.19-6.el7.x86_64",
            "7Server-RHSCL-2.4-7.3.Z:rh-mysql57-mysql-server-0:5.7.19-6.el7.x86_64",
            "7Server-RHSCL-2.4-7.3.Z:rh-mysql57-mysql-test-0:5.7.19-6.el7.x86_64",
            "7Server-RHSCL-2.4:rh-mysql57-mysql-0:5.7.19-6.el7.src",
            "7Server-RHSCL-2.4:rh-mysql57-mysql-0:5.7.19-6.el7.x86_64",
            "7Server-RHSCL-2.4:rh-mysql57-mysql-common-0:5.7.19-6.el7.x86_64",
            "7Server-RHSCL-2.4:rh-mysql57-mysql-config-0:5.7.19-6.el7.x86_64",
            "7Server-RHSCL-2.4:rh-mysql57-mysql-debuginfo-0:5.7.19-6.el7.x86_64",
            "7Server-RHSCL-2.4:rh-mysql57-mysql-devel-0:5.7.19-6.el7.x86_64",
            "7Server-RHSCL-2.4:rh-mysql57-mysql-errmsg-0:5.7.19-6.el7.x86_64",
            "7Server-RHSCL-2.4:rh-mysql57-mysql-server-0:5.7.19-6.el7.x86_64",
            "7Server-RHSCL-2.4:rh-mysql57-mysql-test-0:5.7.19-6.el7.x86_64",
            "7Workstation-RHSCL-2.4:rh-mysql57-mysql-0:5.7.19-6.el7.src",
            "7Workstation-RHSCL-2.4:rh-mysql57-mysql-0:5.7.19-6.el7.x86_64",
            "7Workstation-RHSCL-2.4:rh-mysql57-mysql-common-0:5.7.19-6.el7.x86_64",
            "7Workstation-RHSCL-2.4:rh-mysql57-mysql-config-0:5.7.19-6.el7.x86_64",
            "7Workstation-RHSCL-2.4:rh-mysql57-mysql-debuginfo-0:5.7.19-6.el7.x86_64",
            "7Workstation-RHSCL-2.4:rh-mysql57-mysql-devel-0:5.7.19-6.el7.x86_64",
            "7Workstation-RHSCL-2.4:rh-mysql57-mysql-errmsg-0:5.7.19-6.el7.x86_64",
            "7Workstation-RHSCL-2.4:rh-mysql57-mysql-server-0:5.7.19-6.el7.x86_64",
            "7Workstation-RHSCL-2.4:rh-mysql57-mysql-test-0:5.7.19-6.el7.x86_64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2017:2886"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 4.9,
            "baseSeverity": "MEDIUM",
            "confidentialityImpact": "NONE",
            "integrityImpact": "NONE",
            "privilegesRequired": "HIGH",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.0"
          },
          "products": [
            "6Server-RHSCL-2.4-6.7.Z:rh-mysql57-mysql-0:5.7.19-6.el6.src",
            "6Server-RHSCL-2.4-6.7.Z:rh-mysql57-mysql-0:5.7.19-6.el6.x86_64",
            "6Server-RHSCL-2.4-6.7.Z:rh-mysql57-mysql-common-0:5.7.19-6.el6.x86_64",
            "6Server-RHSCL-2.4-6.7.Z:rh-mysql57-mysql-config-0:5.7.19-6.el6.x86_64",
            "6Server-RHSCL-2.4-6.7.Z:rh-mysql57-mysql-debuginfo-0:5.7.19-6.el6.x86_64",
            "6Server-RHSCL-2.4-6.7.Z:rh-mysql57-mysql-devel-0:5.7.19-6.el6.x86_64",
            "6Server-RHSCL-2.4-6.7.Z:rh-mysql57-mysql-errmsg-0:5.7.19-6.el6.x86_64",
            "6Server-RHSCL-2.4-6.7.Z:rh-mysql57-mysql-server-0:5.7.19-6.el6.x86_64",
            "6Server-RHSCL-2.4-6.7.Z:rh-mysql57-mysql-test-0:5.7.19-6.el6.x86_64",
            "6Server-RHSCL-2.4:rh-mysql57-mysql-0:5.7.19-6.el6.src",
            "6Server-RHSCL-2.4:rh-mysql57-mysql-0:5.7.19-6.el6.x86_64",
            "6Server-RHSCL-2.4:rh-mysql57-mysql-common-0:5.7.19-6.el6.x86_64",
            "6Server-RHSCL-2.4:rh-mysql57-mysql-config-0:5.7.19-6.el6.x86_64",
            "6Server-RHSCL-2.4:rh-mysql57-mysql-debuginfo-0:5.7.19-6.el6.x86_64",
            "6Server-RHSCL-2.4:rh-mysql57-mysql-devel-0:5.7.19-6.el6.x86_64",
            "6Server-RHSCL-2.4:rh-mysql57-mysql-errmsg-0:5.7.19-6.el6.x86_64",
            "6Server-RHSCL-2.4:rh-mysql57-mysql-server-0:5.7.19-6.el6.x86_64",
            "6Server-RHSCL-2.4:rh-mysql57-mysql-test-0:5.7.19-6.el6.x86_64",
            "6Workstation-RHSCL-2.4:rh-mysql57-mysql-0:5.7.19-6.el6.src",
            "6Workstation-RHSCL-2.4:rh-mysql57-mysql-0:5.7.19-6.el6.x86_64",
            "6Workstation-RHSCL-2.4:rh-mysql57-mysql-common-0:5.7.19-6.el6.x86_64",
            "6Workstation-RHSCL-2.4:rh-mysql57-mysql-config-0:5.7.19-6.el6.x86_64",
            "6Workstation-RHSCL-2.4:rh-mysql57-mysql-debuginfo-0:5.7.19-6.el6.x86_64",
            "6Workstation-RHSCL-2.4:rh-mysql57-mysql-devel-0:5.7.19-6.el6.x86_64",
            "6Workstation-RHSCL-2.4:rh-mysql57-mysql-errmsg-0:5.7.19-6.el6.x86_64",
            "6Workstation-RHSCL-2.4:rh-mysql57-mysql-server-0:5.7.19-6.el6.x86_64",
            "6Workstation-RHSCL-2.4:rh-mysql57-mysql-test-0:5.7.19-6.el6.x86_64",
            "7Server-RHSCL-2.4-7.3.Z:rh-mysql57-mysql-0:5.7.19-6.el7.src",
            "7Server-RHSCL-2.4-7.3.Z:rh-mysql57-mysql-0:5.7.19-6.el7.x86_64",
            "7Server-RHSCL-2.4-7.3.Z:rh-mysql57-mysql-common-0:5.7.19-6.el7.x86_64",
            "7Server-RHSCL-2.4-7.3.Z:rh-mysql57-mysql-config-0:5.7.19-6.el7.x86_64",
            "7Server-RHSCL-2.4-7.3.Z:rh-mysql57-mysql-debuginfo-0:5.7.19-6.el7.x86_64",
            "7Server-RHSCL-2.4-7.3.Z:rh-mysql57-mysql-devel-0:5.7.19-6.el7.x86_64",
            "7Server-RHSCL-2.4-7.3.Z:rh-mysql57-mysql-errmsg-0:5.7.19-6.el7.x86_64",
            "7Server-RHSCL-2.4-7.3.Z:rh-mysql57-mysql-server-0:5.7.19-6.el7.x86_64",
            "7Server-RHSCL-2.4-7.3.Z:rh-mysql57-mysql-test-0:5.7.19-6.el7.x86_64",
            "7Server-RHSCL-2.4:rh-mysql57-mysql-0:5.7.19-6.el7.src",
            "7Server-RHSCL-2.4:rh-mysql57-mysql-0:5.7.19-6.el7.x86_64",
            "7Server-RHSCL-2.4:rh-mysql57-mysql-common-0:5.7.19-6.el7.x86_64",
            "7Server-RHSCL-2.4:rh-mysql57-mysql-config-0:5.7.19-6.el7.x86_64",
            "7Server-RHSCL-2.4:rh-mysql57-mysql-debuginfo-0:5.7.19-6.el7.x86_64",
            "7Server-RHSCL-2.4:rh-mysql57-mysql-devel-0:5.7.19-6.el7.x86_64",
            "7Server-RHSCL-2.4:rh-mysql57-mysql-errmsg-0:5.7.19-6.el7.x86_64",
            "7Server-RHSCL-2.4:rh-mysql57-mysql-server-0:5.7.19-6.el7.x86_64",
            "7Server-RHSCL-2.4:rh-mysql57-mysql-test-0:5.7.19-6.el7.x86_64",
            "7Workstation-RHSCL-2.4:rh-mysql57-mysql-0:5.7.19-6.el7.src",
            "7Workstation-RHSCL-2.4:rh-mysql57-mysql-0:5.7.19-6.el7.x86_64",
            "7Workstation-RHSCL-2.4:rh-mysql57-mysql-common-0:5.7.19-6.el7.x86_64",
            "7Workstation-RHSCL-2.4:rh-mysql57-mysql-config-0:5.7.19-6.el7.x86_64",
            "7Workstation-RHSCL-2.4:rh-mysql57-mysql-debuginfo-0:5.7.19-6.el7.x86_64",
            "7Workstation-RHSCL-2.4:rh-mysql57-mysql-devel-0:5.7.19-6.el7.x86_64",
            "7Workstation-RHSCL-2.4:rh-mysql57-mysql-errmsg-0:5.7.19-6.el7.x86_64",
            "7Workstation-RHSCL-2.4:rh-mysql57-mysql-server-0:5.7.19-6.el7.x86_64",
            "7Workstation-RHSCL-2.4:rh-mysql57-mysql-test-0:5.7.19-6.el7.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Moderate"
        }
      ],
      "title": "mysql: Server: DML unspecified vulnerability (CPU Jul 2017)"
    },
    {
      "cve": "CVE-2017-3641",
      "discovery_date": "2017-07-19T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "1472693"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: DML). Supported versions that are affected are 5.5.56 and earlier, 5.6.36 and earlier and 5.7.18 and earlier. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.0 Base Score 4.9 (Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H).",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "mysql: Server: DML unspecified vulnerability (CPU Jul 2017)",
          "title": "Vulnerability summary"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "6Server-RHSCL-2.4-6.7.Z:rh-mysql57-mysql-0:5.7.19-6.el6.src",
          "6Server-RHSCL-2.4-6.7.Z:rh-mysql57-mysql-0:5.7.19-6.el6.x86_64",
          "6Server-RHSCL-2.4-6.7.Z:rh-mysql57-mysql-common-0:5.7.19-6.el6.x86_64",
          "6Server-RHSCL-2.4-6.7.Z:rh-mysql57-mysql-config-0:5.7.19-6.el6.x86_64",
          "6Server-RHSCL-2.4-6.7.Z:rh-mysql57-mysql-debuginfo-0:5.7.19-6.el6.x86_64",
          "6Server-RHSCL-2.4-6.7.Z:rh-mysql57-mysql-devel-0:5.7.19-6.el6.x86_64",
          "6Server-RHSCL-2.4-6.7.Z:rh-mysql57-mysql-errmsg-0:5.7.19-6.el6.x86_64",
          "6Server-RHSCL-2.4-6.7.Z:rh-mysql57-mysql-server-0:5.7.19-6.el6.x86_64",
          "6Server-RHSCL-2.4-6.7.Z:rh-mysql57-mysql-test-0:5.7.19-6.el6.x86_64",
          "6Server-RHSCL-2.4:rh-mysql57-mysql-0:5.7.19-6.el6.src",
          "6Server-RHSCL-2.4:rh-mysql57-mysql-0:5.7.19-6.el6.x86_64",
          "6Server-RHSCL-2.4:rh-mysql57-mysql-common-0:5.7.19-6.el6.x86_64",
          "6Server-RHSCL-2.4:rh-mysql57-mysql-config-0:5.7.19-6.el6.x86_64",
          "6Server-RHSCL-2.4:rh-mysql57-mysql-debuginfo-0:5.7.19-6.el6.x86_64",
          "6Server-RHSCL-2.4:rh-mysql57-mysql-devel-0:5.7.19-6.el6.x86_64",
          "6Server-RHSCL-2.4:rh-mysql57-mysql-errmsg-0:5.7.19-6.el6.x86_64",
          "6Server-RHSCL-2.4:rh-mysql57-mysql-server-0:5.7.19-6.el6.x86_64",
          "6Server-RHSCL-2.4:rh-mysql57-mysql-test-0:5.7.19-6.el6.x86_64",
          "6Workstation-RHSCL-2.4:rh-mysql57-mysql-0:5.7.19-6.el6.src",
          "6Workstation-RHSCL-2.4:rh-mysql57-mysql-0:5.7.19-6.el6.x86_64",
          "6Workstation-RHSCL-2.4:rh-mysql57-mysql-common-0:5.7.19-6.el6.x86_64",
          "6Workstation-RHSCL-2.4:rh-mysql57-mysql-config-0:5.7.19-6.el6.x86_64",
          "6Workstation-RHSCL-2.4:rh-mysql57-mysql-debuginfo-0:5.7.19-6.el6.x86_64",
          "6Workstation-RHSCL-2.4:rh-mysql57-mysql-devel-0:5.7.19-6.el6.x86_64",
          "6Workstation-RHSCL-2.4:rh-mysql57-mysql-errmsg-0:5.7.19-6.el6.x86_64",
          "6Workstation-RHSCL-2.4:rh-mysql57-mysql-server-0:5.7.19-6.el6.x86_64",
          "6Workstation-RHSCL-2.4:rh-mysql57-mysql-test-0:5.7.19-6.el6.x86_64",
          "7Server-RHSCL-2.4-7.3.Z:rh-mysql57-mysql-0:5.7.19-6.el7.src",
          "7Server-RHSCL-2.4-7.3.Z:rh-mysql57-mysql-0:5.7.19-6.el7.x86_64",
          "7Server-RHSCL-2.4-7.3.Z:rh-mysql57-mysql-common-0:5.7.19-6.el7.x86_64",
          "7Server-RHSCL-2.4-7.3.Z:rh-mysql57-mysql-config-0:5.7.19-6.el7.x86_64",
          "7Server-RHSCL-2.4-7.3.Z:rh-mysql57-mysql-debuginfo-0:5.7.19-6.el7.x86_64",
          "7Server-RHSCL-2.4-7.3.Z:rh-mysql57-mysql-devel-0:5.7.19-6.el7.x86_64",
          "7Server-RHSCL-2.4-7.3.Z:rh-mysql57-mysql-errmsg-0:5.7.19-6.el7.x86_64",
          "7Server-RHSCL-2.4-7.3.Z:rh-mysql57-mysql-server-0:5.7.19-6.el7.x86_64",
          "7Server-RHSCL-2.4-7.3.Z:rh-mysql57-mysql-test-0:5.7.19-6.el7.x86_64",
          "7Server-RHSCL-2.4:rh-mysql57-mysql-0:5.7.19-6.el7.src",
          "7Server-RHSCL-2.4:rh-mysql57-mysql-0:5.7.19-6.el7.x86_64",
          "7Server-RHSCL-2.4:rh-mysql57-mysql-common-0:5.7.19-6.el7.x86_64",
          "7Server-RHSCL-2.4:rh-mysql57-mysql-config-0:5.7.19-6.el7.x86_64",
          "7Server-RHSCL-2.4:rh-mysql57-mysql-debuginfo-0:5.7.19-6.el7.x86_64",
          "7Server-RHSCL-2.4:rh-mysql57-mysql-devel-0:5.7.19-6.el7.x86_64",
          "7Server-RHSCL-2.4:rh-mysql57-mysql-errmsg-0:5.7.19-6.el7.x86_64",
          "7Server-RHSCL-2.4:rh-mysql57-mysql-server-0:5.7.19-6.el7.x86_64",
          "7Server-RHSCL-2.4:rh-mysql57-mysql-test-0:5.7.19-6.el7.x86_64",
          "7Workstation-RHSCL-2.4:rh-mysql57-mysql-0:5.7.19-6.el7.src",
          "7Workstation-RHSCL-2.4:rh-mysql57-mysql-0:5.7.19-6.el7.x86_64",
          "7Workstation-RHSCL-2.4:rh-mysql57-mysql-common-0:5.7.19-6.el7.x86_64",
          "7Workstation-RHSCL-2.4:rh-mysql57-mysql-config-0:5.7.19-6.el7.x86_64",
          "7Workstation-RHSCL-2.4:rh-mysql57-mysql-debuginfo-0:5.7.19-6.el7.x86_64",
          "7Workstation-RHSCL-2.4:rh-mysql57-mysql-devel-0:5.7.19-6.el7.x86_64",
          "7Workstation-RHSCL-2.4:rh-mysql57-mysql-errmsg-0:5.7.19-6.el7.x86_64",
          "7Workstation-RHSCL-2.4:rh-mysql57-mysql-server-0:5.7.19-6.el7.x86_64",
          "7Workstation-RHSCL-2.4:rh-mysql57-mysql-test-0:5.7.19-6.el7.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2017-3641"
        },
        {
          "category": "external",
          "summary": "RHBZ#1472693",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1472693"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2017-3641",
          "url": "https://www.cve.org/CVERecord?id=CVE-2017-3641"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2017-3641",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2017-3641"
        },
        {
          "category": "external",
          "summary": "http://www.oracle.com/technetwork/security-advisory/cpujul2017-3236622.html#AppendixMSQL",
          "url": "http://www.oracle.com/technetwork/security-advisory/cpujul2017-3236622.html#AppendixMSQL"
        }
      ],
      "release_date": "2017-07-19T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2017-10-12T07:53:15+00:00",
          "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAfter installing this update, the MySQL server daemon (mysqld) will be restarted automatically.",
          "product_ids": [
            "6Server-RHSCL-2.4-6.7.Z:rh-mysql57-mysql-0:5.7.19-6.el6.src",
            "6Server-RHSCL-2.4-6.7.Z:rh-mysql57-mysql-0:5.7.19-6.el6.x86_64",
            "6Server-RHSCL-2.4-6.7.Z:rh-mysql57-mysql-common-0:5.7.19-6.el6.x86_64",
            "6Server-RHSCL-2.4-6.7.Z:rh-mysql57-mysql-config-0:5.7.19-6.el6.x86_64",
            "6Server-RHSCL-2.4-6.7.Z:rh-mysql57-mysql-debuginfo-0:5.7.19-6.el6.x86_64",
            "6Server-RHSCL-2.4-6.7.Z:rh-mysql57-mysql-devel-0:5.7.19-6.el6.x86_64",
            "6Server-RHSCL-2.4-6.7.Z:rh-mysql57-mysql-errmsg-0:5.7.19-6.el6.x86_64",
            "6Server-RHSCL-2.4-6.7.Z:rh-mysql57-mysql-server-0:5.7.19-6.el6.x86_64",
            "6Server-RHSCL-2.4-6.7.Z:rh-mysql57-mysql-test-0:5.7.19-6.el6.x86_64",
            "6Server-RHSCL-2.4:rh-mysql57-mysql-0:5.7.19-6.el6.src",
            "6Server-RHSCL-2.4:rh-mysql57-mysql-0:5.7.19-6.el6.x86_64",
            "6Server-RHSCL-2.4:rh-mysql57-mysql-common-0:5.7.19-6.el6.x86_64",
            "6Server-RHSCL-2.4:rh-mysql57-mysql-config-0:5.7.19-6.el6.x86_64",
            "6Server-RHSCL-2.4:rh-mysql57-mysql-debuginfo-0:5.7.19-6.el6.x86_64",
            "6Server-RHSCL-2.4:rh-mysql57-mysql-devel-0:5.7.19-6.el6.x86_64",
            "6Server-RHSCL-2.4:rh-mysql57-mysql-errmsg-0:5.7.19-6.el6.x86_64",
            "6Server-RHSCL-2.4:rh-mysql57-mysql-server-0:5.7.19-6.el6.x86_64",
            "6Server-RHSCL-2.4:rh-mysql57-mysql-test-0:5.7.19-6.el6.x86_64",
            "6Workstation-RHSCL-2.4:rh-mysql57-mysql-0:5.7.19-6.el6.src",
            "6Workstation-RHSCL-2.4:rh-mysql57-mysql-0:5.7.19-6.el6.x86_64",
            "6Workstation-RHSCL-2.4:rh-mysql57-mysql-common-0:5.7.19-6.el6.x86_64",
            "6Workstation-RHSCL-2.4:rh-mysql57-mysql-config-0:5.7.19-6.el6.x86_64",
            "6Workstation-RHSCL-2.4:rh-mysql57-mysql-debuginfo-0:5.7.19-6.el6.x86_64",
            "6Workstation-RHSCL-2.4:rh-mysql57-mysql-devel-0:5.7.19-6.el6.x86_64",
            "6Workstation-RHSCL-2.4:rh-mysql57-mysql-errmsg-0:5.7.19-6.el6.x86_64",
            "6Workstation-RHSCL-2.4:rh-mysql57-mysql-server-0:5.7.19-6.el6.x86_64",
            "6Workstation-RHSCL-2.4:rh-mysql57-mysql-test-0:5.7.19-6.el6.x86_64",
            "7Server-RHSCL-2.4-7.3.Z:rh-mysql57-mysql-0:5.7.19-6.el7.src",
            "7Server-RHSCL-2.4-7.3.Z:rh-mysql57-mysql-0:5.7.19-6.el7.x86_64",
            "7Server-RHSCL-2.4-7.3.Z:rh-mysql57-mysql-common-0:5.7.19-6.el7.x86_64",
            "7Server-RHSCL-2.4-7.3.Z:rh-mysql57-mysql-config-0:5.7.19-6.el7.x86_64",
            "7Server-RHSCL-2.4-7.3.Z:rh-mysql57-mysql-debuginfo-0:5.7.19-6.el7.x86_64",
            "7Server-RHSCL-2.4-7.3.Z:rh-mysql57-mysql-devel-0:5.7.19-6.el7.x86_64",
            "7Server-RHSCL-2.4-7.3.Z:rh-mysql57-mysql-errmsg-0:5.7.19-6.el7.x86_64",
            "7Server-RHSCL-2.4-7.3.Z:rh-mysql57-mysql-server-0:5.7.19-6.el7.x86_64",
            "7Server-RHSCL-2.4-7.3.Z:rh-mysql57-mysql-test-0:5.7.19-6.el7.x86_64",
            "7Server-RHSCL-2.4:rh-mysql57-mysql-0:5.7.19-6.el7.src",
            "7Server-RHSCL-2.4:rh-mysql57-mysql-0:5.7.19-6.el7.x86_64",
            "7Server-RHSCL-2.4:rh-mysql57-mysql-common-0:5.7.19-6.el7.x86_64",
            "7Server-RHSCL-2.4:rh-mysql57-mysql-config-0:5.7.19-6.el7.x86_64",
            "7Server-RHSCL-2.4:rh-mysql57-mysql-debuginfo-0:5.7.19-6.el7.x86_64",
            "7Server-RHSCL-2.4:rh-mysql57-mysql-devel-0:5.7.19-6.el7.x86_64",
            "7Server-RHSCL-2.4:rh-mysql57-mysql-errmsg-0:5.7.19-6.el7.x86_64",
            "7Server-RHSCL-2.4:rh-mysql57-mysql-server-0:5.7.19-6.el7.x86_64",
            "7Server-RHSCL-2.4:rh-mysql57-mysql-test-0:5.7.19-6.el7.x86_64",
            "7Workstation-RHSCL-2.4:rh-mysql57-mysql-0:5.7.19-6.el7.src",
            "7Workstation-RHSCL-2.4:rh-mysql57-mysql-0:5.7.19-6.el7.x86_64",
            "7Workstation-RHSCL-2.4:rh-mysql57-mysql-common-0:5.7.19-6.el7.x86_64",
            "7Workstation-RHSCL-2.4:rh-mysql57-mysql-config-0:5.7.19-6.el7.x86_64",
            "7Workstation-RHSCL-2.4:rh-mysql57-mysql-debuginfo-0:5.7.19-6.el7.x86_64",
            "7Workstation-RHSCL-2.4:rh-mysql57-mysql-devel-0:5.7.19-6.el7.x86_64",
            "7Workstation-RHSCL-2.4:rh-mysql57-mysql-errmsg-0:5.7.19-6.el7.x86_64",
            "7Workstation-RHSCL-2.4:rh-mysql57-mysql-server-0:5.7.19-6.el7.x86_64",
            "7Workstation-RHSCL-2.4:rh-mysql57-mysql-test-0:5.7.19-6.el7.x86_64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2017:2886"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 4.9,
            "baseSeverity": "MEDIUM",
            "confidentialityImpact": "NONE",
            "integrityImpact": "NONE",
            "privilegesRequired": "HIGH",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.0"
          },
          "products": [
            "6Server-RHSCL-2.4-6.7.Z:rh-mysql57-mysql-0:5.7.19-6.el6.src",
            "6Server-RHSCL-2.4-6.7.Z:rh-mysql57-mysql-0:5.7.19-6.el6.x86_64",
            "6Server-RHSCL-2.4-6.7.Z:rh-mysql57-mysql-common-0:5.7.19-6.el6.x86_64",
            "6Server-RHSCL-2.4-6.7.Z:rh-mysql57-mysql-config-0:5.7.19-6.el6.x86_64",
            "6Server-RHSCL-2.4-6.7.Z:rh-mysql57-mysql-debuginfo-0:5.7.19-6.el6.x86_64",
            "6Server-RHSCL-2.4-6.7.Z:rh-mysql57-mysql-devel-0:5.7.19-6.el6.x86_64",
            "6Server-RHSCL-2.4-6.7.Z:rh-mysql57-mysql-errmsg-0:5.7.19-6.el6.x86_64",
            "6Server-RHSCL-2.4-6.7.Z:rh-mysql57-mysql-server-0:5.7.19-6.el6.x86_64",
            "6Server-RHSCL-2.4-6.7.Z:rh-mysql57-mysql-test-0:5.7.19-6.el6.x86_64",
            "6Server-RHSCL-2.4:rh-mysql57-mysql-0:5.7.19-6.el6.src",
            "6Server-RHSCL-2.4:rh-mysql57-mysql-0:5.7.19-6.el6.x86_64",
            "6Server-RHSCL-2.4:rh-mysql57-mysql-common-0:5.7.19-6.el6.x86_64",
            "6Server-RHSCL-2.4:rh-mysql57-mysql-config-0:5.7.19-6.el6.x86_64",
            "6Server-RHSCL-2.4:rh-mysql57-mysql-debuginfo-0:5.7.19-6.el6.x86_64",
            "6Server-RHSCL-2.4:rh-mysql57-mysql-devel-0:5.7.19-6.el6.x86_64",
            "6Server-RHSCL-2.4:rh-mysql57-mysql-errmsg-0:5.7.19-6.el6.x86_64",
            "6Server-RHSCL-2.4:rh-mysql57-mysql-server-0:5.7.19-6.el6.x86_64",
            "6Server-RHSCL-2.4:rh-mysql57-mysql-test-0:5.7.19-6.el6.x86_64",
            "6Workstation-RHSCL-2.4:rh-mysql57-mysql-0:5.7.19-6.el6.src",
            "6Workstation-RHSCL-2.4:rh-mysql57-mysql-0:5.7.19-6.el6.x86_64",
            "6Workstation-RHSCL-2.4:rh-mysql57-mysql-common-0:5.7.19-6.el6.x86_64",
            "6Workstation-RHSCL-2.4:rh-mysql57-mysql-config-0:5.7.19-6.el6.x86_64",
            "6Workstation-RHSCL-2.4:rh-mysql57-mysql-debuginfo-0:5.7.19-6.el6.x86_64",
            "6Workstation-RHSCL-2.4:rh-mysql57-mysql-devel-0:5.7.19-6.el6.x86_64",
            "6Workstation-RHSCL-2.4:rh-mysql57-mysql-errmsg-0:5.7.19-6.el6.x86_64",
            "6Workstation-RHSCL-2.4:rh-mysql57-mysql-server-0:5.7.19-6.el6.x86_64",
            "6Workstation-RHSCL-2.4:rh-mysql57-mysql-test-0:5.7.19-6.el6.x86_64",
            "7Server-RHSCL-2.4-7.3.Z:rh-mysql57-mysql-0:5.7.19-6.el7.src",
            "7Server-RHSCL-2.4-7.3.Z:rh-mysql57-mysql-0:5.7.19-6.el7.x86_64",
            "7Server-RHSCL-2.4-7.3.Z:rh-mysql57-mysql-common-0:5.7.19-6.el7.x86_64",
            "7Server-RHSCL-2.4-7.3.Z:rh-mysql57-mysql-config-0:5.7.19-6.el7.x86_64",
            "7Server-RHSCL-2.4-7.3.Z:rh-mysql57-mysql-debuginfo-0:5.7.19-6.el7.x86_64",
            "7Server-RHSCL-2.4-7.3.Z:rh-mysql57-mysql-devel-0:5.7.19-6.el7.x86_64",
            "7Server-RHSCL-2.4-7.3.Z:rh-mysql57-mysql-errmsg-0:5.7.19-6.el7.x86_64",
            "7Server-RHSCL-2.4-7.3.Z:rh-mysql57-mysql-server-0:5.7.19-6.el7.x86_64",
            "7Server-RHSCL-2.4-7.3.Z:rh-mysql57-mysql-test-0:5.7.19-6.el7.x86_64",
            "7Server-RHSCL-2.4:rh-mysql57-mysql-0:5.7.19-6.el7.src",
            "7Server-RHSCL-2.4:rh-mysql57-mysql-0:5.7.19-6.el7.x86_64",
            "7Server-RHSCL-2.4:rh-mysql57-mysql-common-0:5.7.19-6.el7.x86_64",
            "7Server-RHSCL-2.4:rh-mysql57-mysql-config-0:5.7.19-6.el7.x86_64",
            "7Server-RHSCL-2.4:rh-mysql57-mysql-debuginfo-0:5.7.19-6.el7.x86_64",
            "7Server-RHSCL-2.4:rh-mysql57-mysql-devel-0:5.7.19-6.el7.x86_64",
            "7Server-RHSCL-2.4:rh-mysql57-mysql-errmsg-0:5.7.19-6.el7.x86_64",
            "7Server-RHSCL-2.4:rh-mysql57-mysql-server-0:5.7.19-6.el7.x86_64",
            "7Server-RHSCL-2.4:rh-mysql57-mysql-test-0:5.7.19-6.el7.x86_64",
            "7Workstation-RHSCL-2.4:rh-mysql57-mysql-0:5.7.19-6.el7.src",
            "7Workstation-RHSCL-2.4:rh-mysql57-mysql-0:5.7.19-6.el7.x86_64",
            "7Workstation-RHSCL-2.4:rh-mysql57-mysql-common-0:5.7.19-6.el7.x86_64",
            "7Workstation-RHSCL-2.4:rh-mysql57-mysql-config-0:5.7.19-6.el7.x86_64",
            "7Workstation-RHSCL-2.4:rh-mysql57-mysql-debuginfo-0:5.7.19-6.el7.x86_64",
            "7Workstation-RHSCL-2.4:rh-mysql57-mysql-devel-0:5.7.19-6.el7.x86_64",
            "7Workstation-RHSCL-2.4:rh-mysql57-mysql-errmsg-0:5.7.19-6.el7.x86_64",
            "7Workstation-RHSCL-2.4:rh-mysql57-mysql-server-0:5.7.19-6.el7.x86_64",
            "7Workstation-RHSCL-2.4:rh-mysql57-mysql-test-0:5.7.19-6.el7.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Moderate"
        }
      ],
      "title": "mysql: Server: DML unspecified vulnerability (CPU Jul 2017)"
    },
    {
      "cve": "CVE-2017-3642",
      "discovery_date": "2017-07-19T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "1472695"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Optimizer). Supported versions that are affected are 5.7.18 and earlier. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.0 Base Score 4.9 (Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H).",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "mysql: Server: Optimizer unspecified vulnerability (CPU Jul 2017)",
          "title": "Vulnerability summary"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "6Server-RHSCL-2.4-6.7.Z:rh-mysql57-mysql-0:5.7.19-6.el6.src",
          "6Server-RHSCL-2.4-6.7.Z:rh-mysql57-mysql-0:5.7.19-6.el6.x86_64",
          "6Server-RHSCL-2.4-6.7.Z:rh-mysql57-mysql-common-0:5.7.19-6.el6.x86_64",
          "6Server-RHSCL-2.4-6.7.Z:rh-mysql57-mysql-config-0:5.7.19-6.el6.x86_64",
          "6Server-RHSCL-2.4-6.7.Z:rh-mysql57-mysql-debuginfo-0:5.7.19-6.el6.x86_64",
          "6Server-RHSCL-2.4-6.7.Z:rh-mysql57-mysql-devel-0:5.7.19-6.el6.x86_64",
          "6Server-RHSCL-2.4-6.7.Z:rh-mysql57-mysql-errmsg-0:5.7.19-6.el6.x86_64",
          "6Server-RHSCL-2.4-6.7.Z:rh-mysql57-mysql-server-0:5.7.19-6.el6.x86_64",
          "6Server-RHSCL-2.4-6.7.Z:rh-mysql57-mysql-test-0:5.7.19-6.el6.x86_64",
          "6Server-RHSCL-2.4:rh-mysql57-mysql-0:5.7.19-6.el6.src",
          "6Server-RHSCL-2.4:rh-mysql57-mysql-0:5.7.19-6.el6.x86_64",
          "6Server-RHSCL-2.4:rh-mysql57-mysql-common-0:5.7.19-6.el6.x86_64",
          "6Server-RHSCL-2.4:rh-mysql57-mysql-config-0:5.7.19-6.el6.x86_64",
          "6Server-RHSCL-2.4:rh-mysql57-mysql-debuginfo-0:5.7.19-6.el6.x86_64",
          "6Server-RHSCL-2.4:rh-mysql57-mysql-devel-0:5.7.19-6.el6.x86_64",
          "6Server-RHSCL-2.4:rh-mysql57-mysql-errmsg-0:5.7.19-6.el6.x86_64",
          "6Server-RHSCL-2.4:rh-mysql57-mysql-server-0:5.7.19-6.el6.x86_64",
          "6Server-RHSCL-2.4:rh-mysql57-mysql-test-0:5.7.19-6.el6.x86_64",
          "6Workstation-RHSCL-2.4:rh-mysql57-mysql-0:5.7.19-6.el6.src",
          "6Workstation-RHSCL-2.4:rh-mysql57-mysql-0:5.7.19-6.el6.x86_64",
          "6Workstation-RHSCL-2.4:rh-mysql57-mysql-common-0:5.7.19-6.el6.x86_64",
          "6Workstation-RHSCL-2.4:rh-mysql57-mysql-config-0:5.7.19-6.el6.x86_64",
          "6Workstation-RHSCL-2.4:rh-mysql57-mysql-debuginfo-0:5.7.19-6.el6.x86_64",
          "6Workstation-RHSCL-2.4:rh-mysql57-mysql-devel-0:5.7.19-6.el6.x86_64",
          "6Workstation-RHSCL-2.4:rh-mysql57-mysql-errmsg-0:5.7.19-6.el6.x86_64",
          "6Workstation-RHSCL-2.4:rh-mysql57-mysql-server-0:5.7.19-6.el6.x86_64",
          "6Workstation-RHSCL-2.4:rh-mysql57-mysql-test-0:5.7.19-6.el6.x86_64",
          "7Server-RHSCL-2.4-7.3.Z:rh-mysql57-mysql-0:5.7.19-6.el7.src",
          "7Server-RHSCL-2.4-7.3.Z:rh-mysql57-mysql-0:5.7.19-6.el7.x86_64",
          "7Server-RHSCL-2.4-7.3.Z:rh-mysql57-mysql-common-0:5.7.19-6.el7.x86_64",
          "7Server-RHSCL-2.4-7.3.Z:rh-mysql57-mysql-config-0:5.7.19-6.el7.x86_64",
          "7Server-RHSCL-2.4-7.3.Z:rh-mysql57-mysql-debuginfo-0:5.7.19-6.el7.x86_64",
          "7Server-RHSCL-2.4-7.3.Z:rh-mysql57-mysql-devel-0:5.7.19-6.el7.x86_64",
          "7Server-RHSCL-2.4-7.3.Z:rh-mysql57-mysql-errmsg-0:5.7.19-6.el7.x86_64",
          "7Server-RHSCL-2.4-7.3.Z:rh-mysql57-mysql-server-0:5.7.19-6.el7.x86_64",
          "7Server-RHSCL-2.4-7.3.Z:rh-mysql57-mysql-test-0:5.7.19-6.el7.x86_64",
          "7Server-RHSCL-2.4:rh-mysql57-mysql-0:5.7.19-6.el7.src",
          "7Server-RHSCL-2.4:rh-mysql57-mysql-0:5.7.19-6.el7.x86_64",
          "7Server-RHSCL-2.4:rh-mysql57-mysql-common-0:5.7.19-6.el7.x86_64",
          "7Server-RHSCL-2.4:rh-mysql57-mysql-config-0:5.7.19-6.el7.x86_64",
          "7Server-RHSCL-2.4:rh-mysql57-mysql-debuginfo-0:5.7.19-6.el7.x86_64",
          "7Server-RHSCL-2.4:rh-mysql57-mysql-devel-0:5.7.19-6.el7.x86_64",
          "7Server-RHSCL-2.4:rh-mysql57-mysql-errmsg-0:5.7.19-6.el7.x86_64",
          "7Server-RHSCL-2.4:rh-mysql57-mysql-server-0:5.7.19-6.el7.x86_64",
          "7Server-RHSCL-2.4:rh-mysql57-mysql-test-0:5.7.19-6.el7.x86_64",
          "7Workstation-RHSCL-2.4:rh-mysql57-mysql-0:5.7.19-6.el7.src",
          "7Workstation-RHSCL-2.4:rh-mysql57-mysql-0:5.7.19-6.el7.x86_64",
          "7Workstation-RHSCL-2.4:rh-mysql57-mysql-common-0:5.7.19-6.el7.x86_64",
          "7Workstation-RHSCL-2.4:rh-mysql57-mysql-config-0:5.7.19-6.el7.x86_64",
          "7Workstation-RHSCL-2.4:rh-mysql57-mysql-debuginfo-0:5.7.19-6.el7.x86_64",
          "7Workstation-RHSCL-2.4:rh-mysql57-mysql-devel-0:5.7.19-6.el7.x86_64",
          "7Workstation-RHSCL-2.4:rh-mysql57-mysql-errmsg-0:5.7.19-6.el7.x86_64",
          "7Workstation-RHSCL-2.4:rh-mysql57-mysql-server-0:5.7.19-6.el7.x86_64",
          "7Workstation-RHSCL-2.4:rh-mysql57-mysql-test-0:5.7.19-6.el7.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2017-3642"
        },
        {
          "category": "external",
          "summary": "RHBZ#1472695",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1472695"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2017-3642",
          "url": "https://www.cve.org/CVERecord?id=CVE-2017-3642"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2017-3642",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2017-3642"
        },
        {
          "category": "external",
          "summary": "http://www.oracle.com/technetwork/security-advisory/cpujul2017-3236622.html#AppendixMSQL",
          "url": "http://www.oracle.com/technetwork/security-advisory/cpujul2017-3236622.html#AppendixMSQL"
        }
      ],
      "release_date": "2017-07-19T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2017-10-12T07:53:15+00:00",
          "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAfter installing this update, the MySQL server daemon (mysqld) will be restarted automatically.",
          "product_ids": [
            "6Server-RHSCL-2.4-6.7.Z:rh-mysql57-mysql-0:5.7.19-6.el6.src",
            "6Server-RHSCL-2.4-6.7.Z:rh-mysql57-mysql-0:5.7.19-6.el6.x86_64",
            "6Server-RHSCL-2.4-6.7.Z:rh-mysql57-mysql-common-0:5.7.19-6.el6.x86_64",
            "6Server-RHSCL-2.4-6.7.Z:rh-mysql57-mysql-config-0:5.7.19-6.el6.x86_64",
            "6Server-RHSCL-2.4-6.7.Z:rh-mysql57-mysql-debuginfo-0:5.7.19-6.el6.x86_64",
            "6Server-RHSCL-2.4-6.7.Z:rh-mysql57-mysql-devel-0:5.7.19-6.el6.x86_64",
            "6Server-RHSCL-2.4-6.7.Z:rh-mysql57-mysql-errmsg-0:5.7.19-6.el6.x86_64",
            "6Server-RHSCL-2.4-6.7.Z:rh-mysql57-mysql-server-0:5.7.19-6.el6.x86_64",
            "6Server-RHSCL-2.4-6.7.Z:rh-mysql57-mysql-test-0:5.7.19-6.el6.x86_64",
            "6Server-RHSCL-2.4:rh-mysql57-mysql-0:5.7.19-6.el6.src",
            "6Server-RHSCL-2.4:rh-mysql57-mysql-0:5.7.19-6.el6.x86_64",
            "6Server-RHSCL-2.4:rh-mysql57-mysql-common-0:5.7.19-6.el6.x86_64",
            "6Server-RHSCL-2.4:rh-mysql57-mysql-config-0:5.7.19-6.el6.x86_64",
            "6Server-RHSCL-2.4:rh-mysql57-mysql-debuginfo-0:5.7.19-6.el6.x86_64",
            "6Server-RHSCL-2.4:rh-mysql57-mysql-devel-0:5.7.19-6.el6.x86_64",
            "6Server-RHSCL-2.4:rh-mysql57-mysql-errmsg-0:5.7.19-6.el6.x86_64",
            "6Server-RHSCL-2.4:rh-mysql57-mysql-server-0:5.7.19-6.el6.x86_64",
            "6Server-RHSCL-2.4:rh-mysql57-mysql-test-0:5.7.19-6.el6.x86_64",
            "6Workstation-RHSCL-2.4:rh-mysql57-mysql-0:5.7.19-6.el6.src",
            "6Workstation-RHSCL-2.4:rh-mysql57-mysql-0:5.7.19-6.el6.x86_64",
            "6Workstation-RHSCL-2.4:rh-mysql57-mysql-common-0:5.7.19-6.el6.x86_64",
            "6Workstation-RHSCL-2.4:rh-mysql57-mysql-config-0:5.7.19-6.el6.x86_64",
            "6Workstation-RHSCL-2.4:rh-mysql57-mysql-debuginfo-0:5.7.19-6.el6.x86_64",
            "6Workstation-RHSCL-2.4:rh-mysql57-mysql-devel-0:5.7.19-6.el6.x86_64",
            "6Workstation-RHSCL-2.4:rh-mysql57-mysql-errmsg-0:5.7.19-6.el6.x86_64",
            "6Workstation-RHSCL-2.4:rh-mysql57-mysql-server-0:5.7.19-6.el6.x86_64",
            "6Workstation-RHSCL-2.4:rh-mysql57-mysql-test-0:5.7.19-6.el6.x86_64",
            "7Server-RHSCL-2.4-7.3.Z:rh-mysql57-mysql-0:5.7.19-6.el7.src",
            "7Server-RHSCL-2.4-7.3.Z:rh-mysql57-mysql-0:5.7.19-6.el7.x86_64",
            "7Server-RHSCL-2.4-7.3.Z:rh-mysql57-mysql-common-0:5.7.19-6.el7.x86_64",
            "7Server-RHSCL-2.4-7.3.Z:rh-mysql57-mysql-config-0:5.7.19-6.el7.x86_64",
            "7Server-RHSCL-2.4-7.3.Z:rh-mysql57-mysql-debuginfo-0:5.7.19-6.el7.x86_64",
            "7Server-RHSCL-2.4-7.3.Z:rh-mysql57-mysql-devel-0:5.7.19-6.el7.x86_64",
            "7Server-RHSCL-2.4-7.3.Z:rh-mysql57-mysql-errmsg-0:5.7.19-6.el7.x86_64",
            "7Server-RHSCL-2.4-7.3.Z:rh-mysql57-mysql-server-0:5.7.19-6.el7.x86_64",
            "7Server-RHSCL-2.4-7.3.Z:rh-mysql57-mysql-test-0:5.7.19-6.el7.x86_64",
            "7Server-RHSCL-2.4:rh-mysql57-mysql-0:5.7.19-6.el7.src",
            "7Server-RHSCL-2.4:rh-mysql57-mysql-0:5.7.19-6.el7.x86_64",
            "7Server-RHSCL-2.4:rh-mysql57-mysql-common-0:5.7.19-6.el7.x86_64",
            "7Server-RHSCL-2.4:rh-mysql57-mysql-config-0:5.7.19-6.el7.x86_64",
            "7Server-RHSCL-2.4:rh-mysql57-mysql-debuginfo-0:5.7.19-6.el7.x86_64",
            "7Server-RHSCL-2.4:rh-mysql57-mysql-devel-0:5.7.19-6.el7.x86_64",
            "7Server-RHSCL-2.4:rh-mysql57-mysql-errmsg-0:5.7.19-6.el7.x86_64",
            "7Server-RHSCL-2.4:rh-mysql57-mysql-server-0:5.7.19-6.el7.x86_64",
            "7Server-RHSCL-2.4:rh-mysql57-mysql-test-0:5.7.19-6.el7.x86_64",
            "7Workstation-RHSCL-2.4:rh-mysql57-mysql-0:5.7.19-6.el7.src",
            "7Workstation-RHSCL-2.4:rh-mysql57-mysql-0:5.7.19-6.el7.x86_64",
            "7Workstation-RHSCL-2.4:rh-mysql57-mysql-common-0:5.7.19-6.el7.x86_64",
            "7Workstation-RHSCL-2.4:rh-mysql57-mysql-config-0:5.7.19-6.el7.x86_64",
            "7Workstation-RHSCL-2.4:rh-mysql57-mysql-debuginfo-0:5.7.19-6.el7.x86_64",
            "7Workstation-RHSCL-2.4:rh-mysql57-mysql-devel-0:5.7.19-6.el7.x86_64",
            "7Workstation-RHSCL-2.4:rh-mysql57-mysql-errmsg-0:5.7.19-6.el7.x86_64",
            "7Workstation-RHSCL-2.4:rh-mysql57-mysql-server-0:5.7.19-6.el7.x86_64",
            "7Workstation-RHSCL-2.4:rh-mysql57-mysql-test-0:5.7.19-6.el7.x86_64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2017:2886"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 4.9,
            "baseSeverity": "MEDIUM",
            "confidentialityImpact": "NONE",
            "integrityImpact": "NONE",
            "privilegesRequired": "HIGH",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.0"
          },
          "products": [
            "6Server-RHSCL-2.4-6.7.Z:rh-mysql57-mysql-0:5.7.19-6.el6.src",
            "6Server-RHSCL-2.4-6.7.Z:rh-mysql57-mysql-0:5.7.19-6.el6.x86_64",
            "6Server-RHSCL-2.4-6.7.Z:rh-mysql57-mysql-common-0:5.7.19-6.el6.x86_64",
            "6Server-RHSCL-2.4-6.7.Z:rh-mysql57-mysql-config-0:5.7.19-6.el6.x86_64",
            "6Server-RHSCL-2.4-6.7.Z:rh-mysql57-mysql-debuginfo-0:5.7.19-6.el6.x86_64",
            "6Server-RHSCL-2.4-6.7.Z:rh-mysql57-mysql-devel-0:5.7.19-6.el6.x86_64",
            "6Server-RHSCL-2.4-6.7.Z:rh-mysql57-mysql-errmsg-0:5.7.19-6.el6.x86_64",
            "6Server-RHSCL-2.4-6.7.Z:rh-mysql57-mysql-server-0:5.7.19-6.el6.x86_64",
            "6Server-RHSCL-2.4-6.7.Z:rh-mysql57-mysql-test-0:5.7.19-6.el6.x86_64",
            "6Server-RHSCL-2.4:rh-mysql57-mysql-0:5.7.19-6.el6.src",
            "6Server-RHSCL-2.4:rh-mysql57-mysql-0:5.7.19-6.el6.x86_64",
            "6Server-RHSCL-2.4:rh-mysql57-mysql-common-0:5.7.19-6.el6.x86_64",
            "6Server-RHSCL-2.4:rh-mysql57-mysql-config-0:5.7.19-6.el6.x86_64",
            "6Server-RHSCL-2.4:rh-mysql57-mysql-debuginfo-0:5.7.19-6.el6.x86_64",
            "6Server-RHSCL-2.4:rh-mysql57-mysql-devel-0:5.7.19-6.el6.x86_64",
            "6Server-RHSCL-2.4:rh-mysql57-mysql-errmsg-0:5.7.19-6.el6.x86_64",
            "6Server-RHSCL-2.4:rh-mysql57-mysql-server-0:5.7.19-6.el6.x86_64",
            "6Server-RHSCL-2.4:rh-mysql57-mysql-test-0:5.7.19-6.el6.x86_64",
            "6Workstation-RHSCL-2.4:rh-mysql57-mysql-0:5.7.19-6.el6.src",
            "6Workstation-RHSCL-2.4:rh-mysql57-mysql-0:5.7.19-6.el6.x86_64",
            "6Workstation-RHSCL-2.4:rh-mysql57-mysql-common-0:5.7.19-6.el6.x86_64",
            "6Workstation-RHSCL-2.4:rh-mysql57-mysql-config-0:5.7.19-6.el6.x86_64",
            "6Workstation-RHSCL-2.4:rh-mysql57-mysql-debuginfo-0:5.7.19-6.el6.x86_64",
            "6Workstation-RHSCL-2.4:rh-mysql57-mysql-devel-0:5.7.19-6.el6.x86_64",
            "6Workstation-RHSCL-2.4:rh-mysql57-mysql-errmsg-0:5.7.19-6.el6.x86_64",
            "6Workstation-RHSCL-2.4:rh-mysql57-mysql-server-0:5.7.19-6.el6.x86_64",
            "6Workstation-RHSCL-2.4:rh-mysql57-mysql-test-0:5.7.19-6.el6.x86_64",
            "7Server-RHSCL-2.4-7.3.Z:rh-mysql57-mysql-0:5.7.19-6.el7.src",
            "7Server-RHSCL-2.4-7.3.Z:rh-mysql57-mysql-0:5.7.19-6.el7.x86_64",
            "7Server-RHSCL-2.4-7.3.Z:rh-mysql57-mysql-common-0:5.7.19-6.el7.x86_64",
            "7Server-RHSCL-2.4-7.3.Z:rh-mysql57-mysql-config-0:5.7.19-6.el7.x86_64",
            "7Server-RHSCL-2.4-7.3.Z:rh-mysql57-mysql-debuginfo-0:5.7.19-6.el7.x86_64",
            "7Server-RHSCL-2.4-7.3.Z:rh-mysql57-mysql-devel-0:5.7.19-6.el7.x86_64",
            "7Server-RHSCL-2.4-7.3.Z:rh-mysql57-mysql-errmsg-0:5.7.19-6.el7.x86_64",
            "7Server-RHSCL-2.4-7.3.Z:rh-mysql57-mysql-server-0:5.7.19-6.el7.x86_64",
            "7Server-RHSCL-2.4-7.3.Z:rh-mysql57-mysql-test-0:5.7.19-6.el7.x86_64",
            "7Server-RHSCL-2.4:rh-mysql57-mysql-0:5.7.19-6.el7.src",
            "7Server-RHSCL-2.4:rh-mysql57-mysql-0:5.7.19-6.el7.x86_64",
            "7Server-RHSCL-2.4:rh-mysql57-mysql-common-0:5.7.19-6.el7.x86_64",
            "7Server-RHSCL-2.4:rh-mysql57-mysql-config-0:5.7.19-6.el7.x86_64",
            "7Server-RHSCL-2.4:rh-mysql57-mysql-debuginfo-0:5.7.19-6.el7.x86_64",
            "7Server-RHSCL-2.4:rh-mysql57-mysql-devel-0:5.7.19-6.el7.x86_64",
            "7Server-RHSCL-2.4:rh-mysql57-mysql-errmsg-0:5.7.19-6.el7.x86_64",
            "7Server-RHSCL-2.4:rh-mysql57-mysql-server-0:5.7.19-6.el7.x86_64",
            "7Server-RHSCL-2.4:rh-mysql57-mysql-test-0:5.7.19-6.el7.x86_64",
            "7Workstation-RHSCL-2.4:rh-mysql57-mysql-0:5.7.19-6.el7.src",
            "7Workstation-RHSCL-2.4:rh-mysql57-mysql-0:5.7.19-6.el7.x86_64",
            "7Workstation-RHSCL-2.4:rh-mysql57-mysql-common-0:5.7.19-6.el7.x86_64",
            "7Workstation-RHSCL-2.4:rh-mysql57-mysql-config-0:5.7.19-6.el7.x86_64",
            "7Workstation-RHSCL-2.4:rh-mysql57-mysql-debuginfo-0:5.7.19-6.el7.x86_64",
            "7Workstation-RHSCL-2.4:rh-mysql57-mysql-devel-0:5.7.19-6.el7.x86_64",
            "7Workstation-RHSCL-2.4:rh-mysql57-mysql-errmsg-0:5.7.19-6.el7.x86_64",
            "7Workstation-RHSCL-2.4:rh-mysql57-mysql-server-0:5.7.19-6.el7.x86_64",
            "7Workstation-RHSCL-2.4:rh-mysql57-mysql-test-0:5.7.19-6.el7.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Moderate"
        }
      ],
      "title": "mysql: Server: Optimizer unspecified vulnerability (CPU Jul 2017)"
    },
    {
      "cve": "CVE-2017-3643",
      "discovery_date": "2017-07-19T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "1472697"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: DML). Supported versions that are affected are 5.7.18 and earlier. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.0 Base Score 4.9 (Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H).",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "mysql: Server: DML unspecified vulnerability (CPU Jul 2017)",
          "title": "Vulnerability summary"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "6Server-RHSCL-2.4-6.7.Z:rh-mysql57-mysql-0:5.7.19-6.el6.src",
          "6Server-RHSCL-2.4-6.7.Z:rh-mysql57-mysql-0:5.7.19-6.el6.x86_64",
          "6Server-RHSCL-2.4-6.7.Z:rh-mysql57-mysql-common-0:5.7.19-6.el6.x86_64",
          "6Server-RHSCL-2.4-6.7.Z:rh-mysql57-mysql-config-0:5.7.19-6.el6.x86_64",
          "6Server-RHSCL-2.4-6.7.Z:rh-mysql57-mysql-debuginfo-0:5.7.19-6.el6.x86_64",
          "6Server-RHSCL-2.4-6.7.Z:rh-mysql57-mysql-devel-0:5.7.19-6.el6.x86_64",
          "6Server-RHSCL-2.4-6.7.Z:rh-mysql57-mysql-errmsg-0:5.7.19-6.el6.x86_64",
          "6Server-RHSCL-2.4-6.7.Z:rh-mysql57-mysql-server-0:5.7.19-6.el6.x86_64",
          "6Server-RHSCL-2.4-6.7.Z:rh-mysql57-mysql-test-0:5.7.19-6.el6.x86_64",
          "6Server-RHSCL-2.4:rh-mysql57-mysql-0:5.7.19-6.el6.src",
          "6Server-RHSCL-2.4:rh-mysql57-mysql-0:5.7.19-6.el6.x86_64",
          "6Server-RHSCL-2.4:rh-mysql57-mysql-common-0:5.7.19-6.el6.x86_64",
          "6Server-RHSCL-2.4:rh-mysql57-mysql-config-0:5.7.19-6.el6.x86_64",
          "6Server-RHSCL-2.4:rh-mysql57-mysql-debuginfo-0:5.7.19-6.el6.x86_64",
          "6Server-RHSCL-2.4:rh-mysql57-mysql-devel-0:5.7.19-6.el6.x86_64",
          "6Server-RHSCL-2.4:rh-mysql57-mysql-errmsg-0:5.7.19-6.el6.x86_64",
          "6Server-RHSCL-2.4:rh-mysql57-mysql-server-0:5.7.19-6.el6.x86_64",
          "6Server-RHSCL-2.4:rh-mysql57-mysql-test-0:5.7.19-6.el6.x86_64",
          "6Workstation-RHSCL-2.4:rh-mysql57-mysql-0:5.7.19-6.el6.src",
          "6Workstation-RHSCL-2.4:rh-mysql57-mysql-0:5.7.19-6.el6.x86_64",
          "6Workstation-RHSCL-2.4:rh-mysql57-mysql-common-0:5.7.19-6.el6.x86_64",
          "6Workstation-RHSCL-2.4:rh-mysql57-mysql-config-0:5.7.19-6.el6.x86_64",
          "6Workstation-RHSCL-2.4:rh-mysql57-mysql-debuginfo-0:5.7.19-6.el6.x86_64",
          "6Workstation-RHSCL-2.4:rh-mysql57-mysql-devel-0:5.7.19-6.el6.x86_64",
          "6Workstation-RHSCL-2.4:rh-mysql57-mysql-errmsg-0:5.7.19-6.el6.x86_64",
          "6Workstation-RHSCL-2.4:rh-mysql57-mysql-server-0:5.7.19-6.el6.x86_64",
          "6Workstation-RHSCL-2.4:rh-mysql57-mysql-test-0:5.7.19-6.el6.x86_64",
          "7Server-RHSCL-2.4-7.3.Z:rh-mysql57-mysql-0:5.7.19-6.el7.src",
          "7Server-RHSCL-2.4-7.3.Z:rh-mysql57-mysql-0:5.7.19-6.el7.x86_64",
          "7Server-RHSCL-2.4-7.3.Z:rh-mysql57-mysql-common-0:5.7.19-6.el7.x86_64",
          "7Server-RHSCL-2.4-7.3.Z:rh-mysql57-mysql-config-0:5.7.19-6.el7.x86_64",
          "7Server-RHSCL-2.4-7.3.Z:rh-mysql57-mysql-debuginfo-0:5.7.19-6.el7.x86_64",
          "7Server-RHSCL-2.4-7.3.Z:rh-mysql57-mysql-devel-0:5.7.19-6.el7.x86_64",
          "7Server-RHSCL-2.4-7.3.Z:rh-mysql57-mysql-errmsg-0:5.7.19-6.el7.x86_64",
          "7Server-RHSCL-2.4-7.3.Z:rh-mysql57-mysql-server-0:5.7.19-6.el7.x86_64",
          "7Server-RHSCL-2.4-7.3.Z:rh-mysql57-mysql-test-0:5.7.19-6.el7.x86_64",
          "7Server-RHSCL-2.4:rh-mysql57-mysql-0:5.7.19-6.el7.src",
          "7Server-RHSCL-2.4:rh-mysql57-mysql-0:5.7.19-6.el7.x86_64",
          "7Server-RHSCL-2.4:rh-mysql57-mysql-common-0:5.7.19-6.el7.x86_64",
          "7Server-RHSCL-2.4:rh-mysql57-mysql-config-0:5.7.19-6.el7.x86_64",
          "7Server-RHSCL-2.4:rh-mysql57-mysql-debuginfo-0:5.7.19-6.el7.x86_64",
          "7Server-RHSCL-2.4:rh-mysql57-mysql-devel-0:5.7.19-6.el7.x86_64",
          "7Server-RHSCL-2.4:rh-mysql57-mysql-errmsg-0:5.7.19-6.el7.x86_64",
          "7Server-RHSCL-2.4:rh-mysql57-mysql-server-0:5.7.19-6.el7.x86_64",
          "7Server-RHSCL-2.4:rh-mysql57-mysql-test-0:5.7.19-6.el7.x86_64",
          "7Workstation-RHSCL-2.4:rh-mysql57-mysql-0:5.7.19-6.el7.src",
          "7Workstation-RHSCL-2.4:rh-mysql57-mysql-0:5.7.19-6.el7.x86_64",
          "7Workstation-RHSCL-2.4:rh-mysql57-mysql-common-0:5.7.19-6.el7.x86_64",
          "7Workstation-RHSCL-2.4:rh-mysql57-mysql-config-0:5.7.19-6.el7.x86_64",
          "7Workstation-RHSCL-2.4:rh-mysql57-mysql-debuginfo-0:5.7.19-6.el7.x86_64",
          "7Workstation-RHSCL-2.4:rh-mysql57-mysql-devel-0:5.7.19-6.el7.x86_64",
          "7Workstation-RHSCL-2.4:rh-mysql57-mysql-errmsg-0:5.7.19-6.el7.x86_64",
          "7Workstation-RHSCL-2.4:rh-mysql57-mysql-server-0:5.7.19-6.el7.x86_64",
          "7Workstation-RHSCL-2.4:rh-mysql57-mysql-test-0:5.7.19-6.el7.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2017-3643"
        },
        {
          "category": "external",
          "summary": "RHBZ#1472697",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1472697"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2017-3643",
          "url": "https://www.cve.org/CVERecord?id=CVE-2017-3643"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2017-3643",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2017-3643"
        },
        {
          "category": "external",
          "summary": "http://www.oracle.com/technetwork/security-advisory/cpujul2017-3236622.html#AppendixMSQL",
          "url": "http://www.oracle.com/technetwork/security-advisory/cpujul2017-3236622.html#AppendixMSQL"
        }
      ],
      "release_date": "2017-07-19T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2017-10-12T07:53:15+00:00",
          "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAfter installing this update, the MySQL server daemon (mysqld) will be restarted automatically.",
          "product_ids": [
            "6Server-RHSCL-2.4-6.7.Z:rh-mysql57-mysql-0:5.7.19-6.el6.src",
            "6Server-RHSCL-2.4-6.7.Z:rh-mysql57-mysql-0:5.7.19-6.el6.x86_64",
            "6Server-RHSCL-2.4-6.7.Z:rh-mysql57-mysql-common-0:5.7.19-6.el6.x86_64",
            "6Server-RHSCL-2.4-6.7.Z:rh-mysql57-mysql-config-0:5.7.19-6.el6.x86_64",
            "6Server-RHSCL-2.4-6.7.Z:rh-mysql57-mysql-debuginfo-0:5.7.19-6.el6.x86_64",
            "6Server-RHSCL-2.4-6.7.Z:rh-mysql57-mysql-devel-0:5.7.19-6.el6.x86_64",
            "6Server-RHSCL-2.4-6.7.Z:rh-mysql57-mysql-errmsg-0:5.7.19-6.el6.x86_64",
            "6Server-RHSCL-2.4-6.7.Z:rh-mysql57-mysql-server-0:5.7.19-6.el6.x86_64",
            "6Server-RHSCL-2.4-6.7.Z:rh-mysql57-mysql-test-0:5.7.19-6.el6.x86_64",
            "6Server-RHSCL-2.4:rh-mysql57-mysql-0:5.7.19-6.el6.src",
            "6Server-RHSCL-2.4:rh-mysql57-mysql-0:5.7.19-6.el6.x86_64",
            "6Server-RHSCL-2.4:rh-mysql57-mysql-common-0:5.7.19-6.el6.x86_64",
            "6Server-RHSCL-2.4:rh-mysql57-mysql-config-0:5.7.19-6.el6.x86_64",
            "6Server-RHSCL-2.4:rh-mysql57-mysql-debuginfo-0:5.7.19-6.el6.x86_64",
            "6Server-RHSCL-2.4:rh-mysql57-mysql-devel-0:5.7.19-6.el6.x86_64",
            "6Server-RHSCL-2.4:rh-mysql57-mysql-errmsg-0:5.7.19-6.el6.x86_64",
            "6Server-RHSCL-2.4:rh-mysql57-mysql-server-0:5.7.19-6.el6.x86_64",
            "6Server-RHSCL-2.4:rh-mysql57-mysql-test-0:5.7.19-6.el6.x86_64",
            "6Workstation-RHSCL-2.4:rh-mysql57-mysql-0:5.7.19-6.el6.src",
            "6Workstation-RHSCL-2.4:rh-mysql57-mysql-0:5.7.19-6.el6.x86_64",
            "6Workstation-RHSCL-2.4:rh-mysql57-mysql-common-0:5.7.19-6.el6.x86_64",
            "6Workstation-RHSCL-2.4:rh-mysql57-mysql-config-0:5.7.19-6.el6.x86_64",
            "6Workstation-RHSCL-2.4:rh-mysql57-mysql-debuginfo-0:5.7.19-6.el6.x86_64",
            "6Workstation-RHSCL-2.4:rh-mysql57-mysql-devel-0:5.7.19-6.el6.x86_64",
            "6Workstation-RHSCL-2.4:rh-mysql57-mysql-errmsg-0:5.7.19-6.el6.x86_64",
            "6Workstation-RHSCL-2.4:rh-mysql57-mysql-server-0:5.7.19-6.el6.x86_64",
            "6Workstation-RHSCL-2.4:rh-mysql57-mysql-test-0:5.7.19-6.el6.x86_64",
            "7Server-RHSCL-2.4-7.3.Z:rh-mysql57-mysql-0:5.7.19-6.el7.src",
            "7Server-RHSCL-2.4-7.3.Z:rh-mysql57-mysql-0:5.7.19-6.el7.x86_64",
            "7Server-RHSCL-2.4-7.3.Z:rh-mysql57-mysql-common-0:5.7.19-6.el7.x86_64",
            "7Server-RHSCL-2.4-7.3.Z:rh-mysql57-mysql-config-0:5.7.19-6.el7.x86_64",
            "7Server-RHSCL-2.4-7.3.Z:rh-mysql57-mysql-debuginfo-0:5.7.19-6.el7.x86_64",
            "7Server-RHSCL-2.4-7.3.Z:rh-mysql57-mysql-devel-0:5.7.19-6.el7.x86_64",
            "7Server-RHSCL-2.4-7.3.Z:rh-mysql57-mysql-errmsg-0:5.7.19-6.el7.x86_64",
            "7Server-RHSCL-2.4-7.3.Z:rh-mysql57-mysql-server-0:5.7.19-6.el7.x86_64",
            "7Server-RHSCL-2.4-7.3.Z:rh-mysql57-mysql-test-0:5.7.19-6.el7.x86_64",
            "7Server-RHSCL-2.4:rh-mysql57-mysql-0:5.7.19-6.el7.src",
            "7Server-RHSCL-2.4:rh-mysql57-mysql-0:5.7.19-6.el7.x86_64",
            "7Server-RHSCL-2.4:rh-mysql57-mysql-common-0:5.7.19-6.el7.x86_64",
            "7Server-RHSCL-2.4:rh-mysql57-mysql-config-0:5.7.19-6.el7.x86_64",
            "7Server-RHSCL-2.4:rh-mysql57-mysql-debuginfo-0:5.7.19-6.el7.x86_64",
            "7Server-RHSCL-2.4:rh-mysql57-mysql-devel-0:5.7.19-6.el7.x86_64",
            "7Server-RHSCL-2.4:rh-mysql57-mysql-errmsg-0:5.7.19-6.el7.x86_64",
            "7Server-RHSCL-2.4:rh-mysql57-mysql-server-0:5.7.19-6.el7.x86_64",
            "7Server-RHSCL-2.4:rh-mysql57-mysql-test-0:5.7.19-6.el7.x86_64",
            "7Workstation-RHSCL-2.4:rh-mysql57-mysql-0:5.7.19-6.el7.src",
            "7Workstation-RHSCL-2.4:rh-mysql57-mysql-0:5.7.19-6.el7.x86_64",
            "7Workstation-RHSCL-2.4:rh-mysql57-mysql-common-0:5.7.19-6.el7.x86_64",
            "7Workstation-RHSCL-2.4:rh-mysql57-mysql-config-0:5.7.19-6.el7.x86_64",
            "7Workstation-RHSCL-2.4:rh-mysql57-mysql-debuginfo-0:5.7.19-6.el7.x86_64",
            "7Workstation-RHSCL-2.4:rh-mysql57-mysql-devel-0:5.7.19-6.el7.x86_64",
            "7Workstation-RHSCL-2.4:rh-mysql57-mysql-errmsg-0:5.7.19-6.el7.x86_64",
            "7Workstation-RHSCL-2.4:rh-mysql57-mysql-server-0:5.7.19-6.el7.x86_64",
            "7Workstation-RHSCL-2.4:rh-mysql57-mysql-test-0:5.7.19-6.el7.x86_64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2017:2886"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 4.9,
            "baseSeverity": "MEDIUM",
            "confidentialityImpact": "NONE",
            "integrityImpact": "NONE",
            "privilegesRequired": "HIGH",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.0"
          },
          "products": [
            "6Server-RHSCL-2.4-6.7.Z:rh-mysql57-mysql-0:5.7.19-6.el6.src",
            "6Server-RHSCL-2.4-6.7.Z:rh-mysql57-mysql-0:5.7.19-6.el6.x86_64",
            "6Server-RHSCL-2.4-6.7.Z:rh-mysql57-mysql-common-0:5.7.19-6.el6.x86_64",
            "6Server-RHSCL-2.4-6.7.Z:rh-mysql57-mysql-config-0:5.7.19-6.el6.x86_64",
            "6Server-RHSCL-2.4-6.7.Z:rh-mysql57-mysql-debuginfo-0:5.7.19-6.el6.x86_64",
            "6Server-RHSCL-2.4-6.7.Z:rh-mysql57-mysql-devel-0:5.7.19-6.el6.x86_64",
            "6Server-RHSCL-2.4-6.7.Z:rh-mysql57-mysql-errmsg-0:5.7.19-6.el6.x86_64",
            "6Server-RHSCL-2.4-6.7.Z:rh-mysql57-mysql-server-0:5.7.19-6.el6.x86_64",
            "6Server-RHSCL-2.4-6.7.Z:rh-mysql57-mysql-test-0:5.7.19-6.el6.x86_64",
            "6Server-RHSCL-2.4:rh-mysql57-mysql-0:5.7.19-6.el6.src",
            "6Server-RHSCL-2.4:rh-mysql57-mysql-0:5.7.19-6.el6.x86_64",
            "6Server-RHSCL-2.4:rh-mysql57-mysql-common-0:5.7.19-6.el6.x86_64",
            "6Server-RHSCL-2.4:rh-mysql57-mysql-config-0:5.7.19-6.el6.x86_64",
            "6Server-RHSCL-2.4:rh-mysql57-mysql-debuginfo-0:5.7.19-6.el6.x86_64",
            "6Server-RHSCL-2.4:rh-mysql57-mysql-devel-0:5.7.19-6.el6.x86_64",
            "6Server-RHSCL-2.4:rh-mysql57-mysql-errmsg-0:5.7.19-6.el6.x86_64",
            "6Server-RHSCL-2.4:rh-mysql57-mysql-server-0:5.7.19-6.el6.x86_64",
            "6Server-RHSCL-2.4:rh-mysql57-mysql-test-0:5.7.19-6.el6.x86_64",
            "6Workstation-RHSCL-2.4:rh-mysql57-mysql-0:5.7.19-6.el6.src",
            "6Workstation-RHSCL-2.4:rh-mysql57-mysql-0:5.7.19-6.el6.x86_64",
            "6Workstation-RHSCL-2.4:rh-mysql57-mysql-common-0:5.7.19-6.el6.x86_64",
            "6Workstation-RHSCL-2.4:rh-mysql57-mysql-config-0:5.7.19-6.el6.x86_64",
            "6Workstation-RHSCL-2.4:rh-mysql57-mysql-debuginfo-0:5.7.19-6.el6.x86_64",
            "6Workstation-RHSCL-2.4:rh-mysql57-mysql-devel-0:5.7.19-6.el6.x86_64",
            "6Workstation-RHSCL-2.4:rh-mysql57-mysql-errmsg-0:5.7.19-6.el6.x86_64",
            "6Workstation-RHSCL-2.4:rh-mysql57-mysql-server-0:5.7.19-6.el6.x86_64",
            "6Workstation-RHSCL-2.4:rh-mysql57-mysql-test-0:5.7.19-6.el6.x86_64",
            "7Server-RHSCL-2.4-7.3.Z:rh-mysql57-mysql-0:5.7.19-6.el7.src",
            "7Server-RHSCL-2.4-7.3.Z:rh-mysql57-mysql-0:5.7.19-6.el7.x86_64",
            "7Server-RHSCL-2.4-7.3.Z:rh-mysql57-mysql-common-0:5.7.19-6.el7.x86_64",
            "7Server-RHSCL-2.4-7.3.Z:rh-mysql57-mysql-config-0:5.7.19-6.el7.x86_64",
            "7Server-RHSCL-2.4-7.3.Z:rh-mysql57-mysql-debuginfo-0:5.7.19-6.el7.x86_64",
            "7Server-RHSCL-2.4-7.3.Z:rh-mysql57-mysql-devel-0:5.7.19-6.el7.x86_64",
            "7Server-RHSCL-2.4-7.3.Z:rh-mysql57-mysql-errmsg-0:5.7.19-6.el7.x86_64",
            "7Server-RHSCL-2.4-7.3.Z:rh-mysql57-mysql-server-0:5.7.19-6.el7.x86_64",
            "7Server-RHSCL-2.4-7.3.Z:rh-mysql57-mysql-test-0:5.7.19-6.el7.x86_64",
            "7Server-RHSCL-2.4:rh-mysql57-mysql-0:5.7.19-6.el7.src",
            "7Server-RHSCL-2.4:rh-mysql57-mysql-0:5.7.19-6.el7.x86_64",
            "7Server-RHSCL-2.4:rh-mysql57-mysql-common-0:5.7.19-6.el7.x86_64",
            "7Server-RHSCL-2.4:rh-mysql57-mysql-config-0:5.7.19-6.el7.x86_64",
            "7Server-RHSCL-2.4:rh-mysql57-mysql-debuginfo-0:5.7.19-6.el7.x86_64",
            "7Server-RHSCL-2.4:rh-mysql57-mysql-devel-0:5.7.19-6.el7.x86_64",
            "7Server-RHSCL-2.4:rh-mysql57-mysql-errmsg-0:5.7.19-6.el7.x86_64",
            "7Server-RHSCL-2.4:rh-mysql57-mysql-server-0:5.7.19-6.el7.x86_64",
            "7Server-RHSCL-2.4:rh-mysql57-mysql-test-0:5.7.19-6.el7.x86_64",
            "7Workstation-RHSCL-2.4:rh-mysql57-mysql-0:5.7.19-6.el7.src",
            "7Workstation-RHSCL-2.4:rh-mysql57-mysql-0:5.7.19-6.el7.x86_64",
            "7Workstation-RHSCL-2.4:rh-mysql57-mysql-common-0:5.7.19-6.el7.x86_64",
            "7Workstation-RHSCL-2.4:rh-mysql57-mysql-config-0:5.7.19-6.el7.x86_64",
            "7Workstation-RHSCL-2.4:rh-mysql57-mysql-debuginfo-0:5.7.19-6.el7.x86_64",
            "7Workstation-RHSCL-2.4:rh-mysql57-mysql-devel-0:5.7.19-6.el7.x86_64",
            "7Workstation-RHSCL-2.4:rh-mysql57-mysql-errmsg-0:5.7.19-6.el7.x86_64",
            "7Workstation-RHSCL-2.4:rh-mysql57-mysql-server-0:5.7.19-6.el7.x86_64",
            "7Workstation-RHSCL-2.4:rh-mysql57-mysql-test-0:5.7.19-6.el7.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Moderate"
        }
      ],
      "title": "mysql: Server: DML unspecified vulnerability (CPU Jul 2017)"
    },
    {
      "cve": "CVE-2017-3644",
      "discovery_date": "2017-07-19T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "1472698"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: DML). Supported versions that are affected are 5.7.18 and earlier. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.0 Base Score 4.9 (Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H).",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "mysql: Server: DML unspecified vulnerability (CPU Jul 2017)",
          "title": "Vulnerability summary"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "6Server-RHSCL-2.4-6.7.Z:rh-mysql57-mysql-0:5.7.19-6.el6.src",
          "6Server-RHSCL-2.4-6.7.Z:rh-mysql57-mysql-0:5.7.19-6.el6.x86_64",
          "6Server-RHSCL-2.4-6.7.Z:rh-mysql57-mysql-common-0:5.7.19-6.el6.x86_64",
          "6Server-RHSCL-2.4-6.7.Z:rh-mysql57-mysql-config-0:5.7.19-6.el6.x86_64",
          "6Server-RHSCL-2.4-6.7.Z:rh-mysql57-mysql-debuginfo-0:5.7.19-6.el6.x86_64",
          "6Server-RHSCL-2.4-6.7.Z:rh-mysql57-mysql-devel-0:5.7.19-6.el6.x86_64",
          "6Server-RHSCL-2.4-6.7.Z:rh-mysql57-mysql-errmsg-0:5.7.19-6.el6.x86_64",
          "6Server-RHSCL-2.4-6.7.Z:rh-mysql57-mysql-server-0:5.7.19-6.el6.x86_64",
          "6Server-RHSCL-2.4-6.7.Z:rh-mysql57-mysql-test-0:5.7.19-6.el6.x86_64",
          "6Server-RHSCL-2.4:rh-mysql57-mysql-0:5.7.19-6.el6.src",
          "6Server-RHSCL-2.4:rh-mysql57-mysql-0:5.7.19-6.el6.x86_64",
          "6Server-RHSCL-2.4:rh-mysql57-mysql-common-0:5.7.19-6.el6.x86_64",
          "6Server-RHSCL-2.4:rh-mysql57-mysql-config-0:5.7.19-6.el6.x86_64",
          "6Server-RHSCL-2.4:rh-mysql57-mysql-debuginfo-0:5.7.19-6.el6.x86_64",
          "6Server-RHSCL-2.4:rh-mysql57-mysql-devel-0:5.7.19-6.el6.x86_64",
          "6Server-RHSCL-2.4:rh-mysql57-mysql-errmsg-0:5.7.19-6.el6.x86_64",
          "6Server-RHSCL-2.4:rh-mysql57-mysql-server-0:5.7.19-6.el6.x86_64",
          "6Server-RHSCL-2.4:rh-mysql57-mysql-test-0:5.7.19-6.el6.x86_64",
          "6Workstation-RHSCL-2.4:rh-mysql57-mysql-0:5.7.19-6.el6.src",
          "6Workstation-RHSCL-2.4:rh-mysql57-mysql-0:5.7.19-6.el6.x86_64",
          "6Workstation-RHSCL-2.4:rh-mysql57-mysql-common-0:5.7.19-6.el6.x86_64",
          "6Workstation-RHSCL-2.4:rh-mysql57-mysql-config-0:5.7.19-6.el6.x86_64",
          "6Workstation-RHSCL-2.4:rh-mysql57-mysql-debuginfo-0:5.7.19-6.el6.x86_64",
          "6Workstation-RHSCL-2.4:rh-mysql57-mysql-devel-0:5.7.19-6.el6.x86_64",
          "6Workstation-RHSCL-2.4:rh-mysql57-mysql-errmsg-0:5.7.19-6.el6.x86_64",
          "6Workstation-RHSCL-2.4:rh-mysql57-mysql-server-0:5.7.19-6.el6.x86_64",
          "6Workstation-RHSCL-2.4:rh-mysql57-mysql-test-0:5.7.19-6.el6.x86_64",
          "7Server-RHSCL-2.4-7.3.Z:rh-mysql57-mysql-0:5.7.19-6.el7.src",
          "7Server-RHSCL-2.4-7.3.Z:rh-mysql57-mysql-0:5.7.19-6.el7.x86_64",
          "7Server-RHSCL-2.4-7.3.Z:rh-mysql57-mysql-common-0:5.7.19-6.el7.x86_64",
          "7Server-RHSCL-2.4-7.3.Z:rh-mysql57-mysql-config-0:5.7.19-6.el7.x86_64",
          "7Server-RHSCL-2.4-7.3.Z:rh-mysql57-mysql-debuginfo-0:5.7.19-6.el7.x86_64",
          "7Server-RHSCL-2.4-7.3.Z:rh-mysql57-mysql-devel-0:5.7.19-6.el7.x86_64",
          "7Server-RHSCL-2.4-7.3.Z:rh-mysql57-mysql-errmsg-0:5.7.19-6.el7.x86_64",
          "7Server-RHSCL-2.4-7.3.Z:rh-mysql57-mysql-server-0:5.7.19-6.el7.x86_64",
          "7Server-RHSCL-2.4-7.3.Z:rh-mysql57-mysql-test-0:5.7.19-6.el7.x86_64",
          "7Server-RHSCL-2.4:rh-mysql57-mysql-0:5.7.19-6.el7.src",
          "7Server-RHSCL-2.4:rh-mysql57-mysql-0:5.7.19-6.el7.x86_64",
          "7Server-RHSCL-2.4:rh-mysql57-mysql-common-0:5.7.19-6.el7.x86_64",
          "7Server-RHSCL-2.4:rh-mysql57-mysql-config-0:5.7.19-6.el7.x86_64",
          "7Server-RHSCL-2.4:rh-mysql57-mysql-debuginfo-0:5.7.19-6.el7.x86_64",
          "7Server-RHSCL-2.4:rh-mysql57-mysql-devel-0:5.7.19-6.el7.x86_64",
          "7Server-RHSCL-2.4:rh-mysql57-mysql-errmsg-0:5.7.19-6.el7.x86_64",
          "7Server-RHSCL-2.4:rh-mysql57-mysql-server-0:5.7.19-6.el7.x86_64",
          "7Server-RHSCL-2.4:rh-mysql57-mysql-test-0:5.7.19-6.el7.x86_64",
          "7Workstation-RHSCL-2.4:rh-mysql57-mysql-0:5.7.19-6.el7.src",
          "7Workstation-RHSCL-2.4:rh-mysql57-mysql-0:5.7.19-6.el7.x86_64",
          "7Workstation-RHSCL-2.4:rh-mysql57-mysql-common-0:5.7.19-6.el7.x86_64",
          "7Workstation-RHSCL-2.4:rh-mysql57-mysql-config-0:5.7.19-6.el7.x86_64",
          "7Workstation-RHSCL-2.4:rh-mysql57-mysql-debuginfo-0:5.7.19-6.el7.x86_64",
          "7Workstation-RHSCL-2.4:rh-mysql57-mysql-devel-0:5.7.19-6.el7.x86_64",
          "7Workstation-RHSCL-2.4:rh-mysql57-mysql-errmsg-0:5.7.19-6.el7.x86_64",
          "7Workstation-RHSCL-2.4:rh-mysql57-mysql-server-0:5.7.19-6.el7.x86_64",
          "7Workstation-RHSCL-2.4:rh-mysql57-mysql-test-0:5.7.19-6.el7.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2017-3644"
        },
        {
          "category": "external",
          "summary": "RHBZ#1472698",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1472698"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2017-3644",
          "url": "https://www.cve.org/CVERecord?id=CVE-2017-3644"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2017-3644",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2017-3644"
        },
        {
          "category": "external",
          "summary": "http://www.oracle.com/technetwork/security-advisory/cpujul2017-3236622.html#AppendixMSQL",
          "url": "http://www.oracle.com/technetwork/security-advisory/cpujul2017-3236622.html#AppendixMSQL"
        }
      ],
      "release_date": "2017-07-19T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2017-10-12T07:53:15+00:00",
          "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAfter installing this update, the MySQL server daemon (mysqld) will be restarted automatically.",
          "product_ids": [
            "6Server-RHSCL-2.4-6.7.Z:rh-mysql57-mysql-0:5.7.19-6.el6.src",
            "6Server-RHSCL-2.4-6.7.Z:rh-mysql57-mysql-0:5.7.19-6.el6.x86_64",
            "6Server-RHSCL-2.4-6.7.Z:rh-mysql57-mysql-common-0:5.7.19-6.el6.x86_64",
            "6Server-RHSCL-2.4-6.7.Z:rh-mysql57-mysql-config-0:5.7.19-6.el6.x86_64",
            "6Server-RHSCL-2.4-6.7.Z:rh-mysql57-mysql-debuginfo-0:5.7.19-6.el6.x86_64",
            "6Server-RHSCL-2.4-6.7.Z:rh-mysql57-mysql-devel-0:5.7.19-6.el6.x86_64",
            "6Server-RHSCL-2.4-6.7.Z:rh-mysql57-mysql-errmsg-0:5.7.19-6.el6.x86_64",
            "6Server-RHSCL-2.4-6.7.Z:rh-mysql57-mysql-server-0:5.7.19-6.el6.x86_64",
            "6Server-RHSCL-2.4-6.7.Z:rh-mysql57-mysql-test-0:5.7.19-6.el6.x86_64",
            "6Server-RHSCL-2.4:rh-mysql57-mysql-0:5.7.19-6.el6.src",
            "6Server-RHSCL-2.4:rh-mysql57-mysql-0:5.7.19-6.el6.x86_64",
            "6Server-RHSCL-2.4:rh-mysql57-mysql-common-0:5.7.19-6.el6.x86_64",
            "6Server-RHSCL-2.4:rh-mysql57-mysql-config-0:5.7.19-6.el6.x86_64",
            "6Server-RHSCL-2.4:rh-mysql57-mysql-debuginfo-0:5.7.19-6.el6.x86_64",
            "6Server-RHSCL-2.4:rh-mysql57-mysql-devel-0:5.7.19-6.el6.x86_64",
            "6Server-RHSCL-2.4:rh-mysql57-mysql-errmsg-0:5.7.19-6.el6.x86_64",
            "6Server-RHSCL-2.4:rh-mysql57-mysql-server-0:5.7.19-6.el6.x86_64",
            "6Server-RHSCL-2.4:rh-mysql57-mysql-test-0:5.7.19-6.el6.x86_64",
            "6Workstation-RHSCL-2.4:rh-mysql57-mysql-0:5.7.19-6.el6.src",
            "6Workstation-RHSCL-2.4:rh-mysql57-mysql-0:5.7.19-6.el6.x86_64",
            "6Workstation-RHSCL-2.4:rh-mysql57-mysql-common-0:5.7.19-6.el6.x86_64",
            "6Workstation-RHSCL-2.4:rh-mysql57-mysql-config-0:5.7.19-6.el6.x86_64",
            "6Workstation-RHSCL-2.4:rh-mysql57-mysql-debuginfo-0:5.7.19-6.el6.x86_64",
            "6Workstation-RHSCL-2.4:rh-mysql57-mysql-devel-0:5.7.19-6.el6.x86_64",
            "6Workstation-RHSCL-2.4:rh-mysql57-mysql-errmsg-0:5.7.19-6.el6.x86_64",
            "6Workstation-RHSCL-2.4:rh-mysql57-mysql-server-0:5.7.19-6.el6.x86_64",
            "6Workstation-RHSCL-2.4:rh-mysql57-mysql-test-0:5.7.19-6.el6.x86_64",
            "7Server-RHSCL-2.4-7.3.Z:rh-mysql57-mysql-0:5.7.19-6.el7.src",
            "7Server-RHSCL-2.4-7.3.Z:rh-mysql57-mysql-0:5.7.19-6.el7.x86_64",
            "7Server-RHSCL-2.4-7.3.Z:rh-mysql57-mysql-common-0:5.7.19-6.el7.x86_64",
            "7Server-RHSCL-2.4-7.3.Z:rh-mysql57-mysql-config-0:5.7.19-6.el7.x86_64",
            "7Server-RHSCL-2.4-7.3.Z:rh-mysql57-mysql-debuginfo-0:5.7.19-6.el7.x86_64",
            "7Server-RHSCL-2.4-7.3.Z:rh-mysql57-mysql-devel-0:5.7.19-6.el7.x86_64",
            "7Server-RHSCL-2.4-7.3.Z:rh-mysql57-mysql-errmsg-0:5.7.19-6.el7.x86_64",
            "7Server-RHSCL-2.4-7.3.Z:rh-mysql57-mysql-server-0:5.7.19-6.el7.x86_64",
            "7Server-RHSCL-2.4-7.3.Z:rh-mysql57-mysql-test-0:5.7.19-6.el7.x86_64",
            "7Server-RHSCL-2.4:rh-mysql57-mysql-0:5.7.19-6.el7.src",
            "7Server-RHSCL-2.4:rh-mysql57-mysql-0:5.7.19-6.el7.x86_64",
            "7Server-RHSCL-2.4:rh-mysql57-mysql-common-0:5.7.19-6.el7.x86_64",
            "7Server-RHSCL-2.4:rh-mysql57-mysql-config-0:5.7.19-6.el7.x86_64",
            "7Server-RHSCL-2.4:rh-mysql57-mysql-debuginfo-0:5.7.19-6.el7.x86_64",
            "7Server-RHSCL-2.4:rh-mysql57-mysql-devel-0:5.7.19-6.el7.x86_64",
            "7Server-RHSCL-2.4:rh-mysql57-mysql-errmsg-0:5.7.19-6.el7.x86_64",
            "7Server-RHSCL-2.4:rh-mysql57-mysql-server-0:5.7.19-6.el7.x86_64",
            "7Server-RHSCL-2.4:rh-mysql57-mysql-test-0:5.7.19-6.el7.x86_64",
            "7Workstation-RHSCL-2.4:rh-mysql57-mysql-0:5.7.19-6.el7.src",
            "7Workstation-RHSCL-2.4:rh-mysql57-mysql-0:5.7.19-6.el7.x86_64",
            "7Workstation-RHSCL-2.4:rh-mysql57-mysql-common-0:5.7.19-6.el7.x86_64",
            "7Workstation-RHSCL-2.4:rh-mysql57-mysql-config-0:5.7.19-6.el7.x86_64",
            "7Workstation-RHSCL-2.4:rh-mysql57-mysql-debuginfo-0:5.7.19-6.el7.x86_64",
            "7Workstation-RHSCL-2.4:rh-mysql57-mysql-devel-0:5.7.19-6.el7.x86_64",
            "7Workstation-RHSCL-2.4:rh-mysql57-mysql-errmsg-0:5.7.19-6.el7.x86_64",
            "7Workstation-RHSCL-2.4:rh-mysql57-mysql-server-0:5.7.19-6.el7.x86_64",
            "7Workstation-RHSCL-2.4:rh-mysql57-mysql-test-0:5.7.19-6.el7.x86_64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2017:2886"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 4.9,
            "baseSeverity": "MEDIUM",
            "confidentialityImpact": "NONE",
            "integrityImpact": "NONE",
            "privilegesRequired": "HIGH",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.0"
          },
          "products": [
            "6Server-RHSCL-2.4-6.7.Z:rh-mysql57-mysql-0:5.7.19-6.el6.src",
            "6Server-RHSCL-2.4-6.7.Z:rh-mysql57-mysql-0:5.7.19-6.el6.x86_64",
            "6Server-RHSCL-2.4-6.7.Z:rh-mysql57-mysql-common-0:5.7.19-6.el6.x86_64",
            "6Server-RHSCL-2.4-6.7.Z:rh-mysql57-mysql-config-0:5.7.19-6.el6.x86_64",
            "6Server-RHSCL-2.4-6.7.Z:rh-mysql57-mysql-debuginfo-0:5.7.19-6.el6.x86_64",
            "6Server-RHSCL-2.4-6.7.Z:rh-mysql57-mysql-devel-0:5.7.19-6.el6.x86_64",
            "6Server-RHSCL-2.4-6.7.Z:rh-mysql57-mysql-errmsg-0:5.7.19-6.el6.x86_64",
            "6Server-RHSCL-2.4-6.7.Z:rh-mysql57-mysql-server-0:5.7.19-6.el6.x86_64",
            "6Server-RHSCL-2.4-6.7.Z:rh-mysql57-mysql-test-0:5.7.19-6.el6.x86_64",
            "6Server-RHSCL-2.4:rh-mysql57-mysql-0:5.7.19-6.el6.src",
            "6Server-RHSCL-2.4:rh-mysql57-mysql-0:5.7.19-6.el6.x86_64",
            "6Server-RHSCL-2.4:rh-mysql57-mysql-common-0:5.7.19-6.el6.x86_64",
            "6Server-RHSCL-2.4:rh-mysql57-mysql-config-0:5.7.19-6.el6.x86_64",
            "6Server-RHSCL-2.4:rh-mysql57-mysql-debuginfo-0:5.7.19-6.el6.x86_64",
            "6Server-RHSCL-2.4:rh-mysql57-mysql-devel-0:5.7.19-6.el6.x86_64",
            "6Server-RHSCL-2.4:rh-mysql57-mysql-errmsg-0:5.7.19-6.el6.x86_64",
            "6Server-RHSCL-2.4:rh-mysql57-mysql-server-0:5.7.19-6.el6.x86_64",
            "6Server-RHSCL-2.4:rh-mysql57-mysql-test-0:5.7.19-6.el6.x86_64",
            "6Workstation-RHSCL-2.4:rh-mysql57-mysql-0:5.7.19-6.el6.src",
            "6Workstation-RHSCL-2.4:rh-mysql57-mysql-0:5.7.19-6.el6.x86_64",
            "6Workstation-RHSCL-2.4:rh-mysql57-mysql-common-0:5.7.19-6.el6.x86_64",
            "6Workstation-RHSCL-2.4:rh-mysql57-mysql-config-0:5.7.19-6.el6.x86_64",
            "6Workstation-RHSCL-2.4:rh-mysql57-mysql-debuginfo-0:5.7.19-6.el6.x86_64",
            "6Workstation-RHSCL-2.4:rh-mysql57-mysql-devel-0:5.7.19-6.el6.x86_64",
            "6Workstation-RHSCL-2.4:rh-mysql57-mysql-errmsg-0:5.7.19-6.el6.x86_64",
            "6Workstation-RHSCL-2.4:rh-mysql57-mysql-server-0:5.7.19-6.el6.x86_64",
            "6Workstation-RHSCL-2.4:rh-mysql57-mysql-test-0:5.7.19-6.el6.x86_64",
            "7Server-RHSCL-2.4-7.3.Z:rh-mysql57-mysql-0:5.7.19-6.el7.src",
            "7Server-RHSCL-2.4-7.3.Z:rh-mysql57-mysql-0:5.7.19-6.el7.x86_64",
            "7Server-RHSCL-2.4-7.3.Z:rh-mysql57-mysql-common-0:5.7.19-6.el7.x86_64",
            "7Server-RHSCL-2.4-7.3.Z:rh-mysql57-mysql-config-0:5.7.19-6.el7.x86_64",
            "7Server-RHSCL-2.4-7.3.Z:rh-mysql57-mysql-debuginfo-0:5.7.19-6.el7.x86_64",
            "7Server-RHSCL-2.4-7.3.Z:rh-mysql57-mysql-devel-0:5.7.19-6.el7.x86_64",
            "7Server-RHSCL-2.4-7.3.Z:rh-mysql57-mysql-errmsg-0:5.7.19-6.el7.x86_64",
            "7Server-RHSCL-2.4-7.3.Z:rh-mysql57-mysql-server-0:5.7.19-6.el7.x86_64",
            "7Server-RHSCL-2.4-7.3.Z:rh-mysql57-mysql-test-0:5.7.19-6.el7.x86_64",
            "7Server-RHSCL-2.4:rh-mysql57-mysql-0:5.7.19-6.el7.src",
            "7Server-RHSCL-2.4:rh-mysql57-mysql-0:5.7.19-6.el7.x86_64",
            "7Server-RHSCL-2.4:rh-mysql57-mysql-common-0:5.7.19-6.el7.x86_64",
            "7Server-RHSCL-2.4:rh-mysql57-mysql-config-0:5.7.19-6.el7.x86_64",
            "7Server-RHSCL-2.4:rh-mysql57-mysql-debuginfo-0:5.7.19-6.el7.x86_64",
            "7Server-RHSCL-2.4:rh-mysql57-mysql-devel-0:5.7.19-6.el7.x86_64",
            "7Server-RHSCL-2.4:rh-mysql57-mysql-errmsg-0:5.7.19-6.el7.x86_64",
            "7Server-RHSCL-2.4:rh-mysql57-mysql-server-0:5.7.19-6.el7.x86_64",
            "7Server-RHSCL-2.4:rh-mysql57-mysql-test-0:5.7.19-6.el7.x86_64",
            "7Workstation-RHSCL-2.4:rh-mysql57-mysql-0:5.7.19-6.el7.src",
            "7Workstation-RHSCL-2.4:rh-mysql57-mysql-0:5.7.19-6.el7.x86_64",
            "7Workstation-RHSCL-2.4:rh-mysql57-mysql-common-0:5.7.19-6.el7.x86_64",
            "7Workstation-RHSCL-2.4:rh-mysql57-mysql-config-0:5.7.19-6.el7.x86_64",
            "7Workstation-RHSCL-2.4:rh-mysql57-mysql-debuginfo-0:5.7.19-6.el7.x86_64",
            "7Workstation-RHSCL-2.4:rh-mysql57-mysql-devel-0:5.7.19-6.el7.x86_64",
            "7Workstation-RHSCL-2.4:rh-mysql57-mysql-errmsg-0:5.7.19-6.el7.x86_64",
            "7Workstation-RHSCL-2.4:rh-mysql57-mysql-server-0:5.7.19-6.el7.x86_64",
            "7Workstation-RHSCL-2.4:rh-mysql57-mysql-test-0:5.7.19-6.el7.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Moderate"
        }
      ],
      "title": "mysql: Server: DML unspecified vulnerability (CPU Jul 2017)"
    },
    {
      "cve": "CVE-2017-3645",
      "discovery_date": "2017-07-19T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "1472700"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Optimizer). Supported versions that are affected are 5.7.18 and earlier. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.0 Base Score 4.9 (Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H).",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "mysql: Server: Optimizer unspecified vulnerability (CPU Jul 2017)",
          "title": "Vulnerability summary"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "6Server-RHSCL-2.4-6.7.Z:rh-mysql57-mysql-0:5.7.19-6.el6.src",
          "6Server-RHSCL-2.4-6.7.Z:rh-mysql57-mysql-0:5.7.19-6.el6.x86_64",
          "6Server-RHSCL-2.4-6.7.Z:rh-mysql57-mysql-common-0:5.7.19-6.el6.x86_64",
          "6Server-RHSCL-2.4-6.7.Z:rh-mysql57-mysql-config-0:5.7.19-6.el6.x86_64",
          "6Server-RHSCL-2.4-6.7.Z:rh-mysql57-mysql-debuginfo-0:5.7.19-6.el6.x86_64",
          "6Server-RHSCL-2.4-6.7.Z:rh-mysql57-mysql-devel-0:5.7.19-6.el6.x86_64",
          "6Server-RHSCL-2.4-6.7.Z:rh-mysql57-mysql-errmsg-0:5.7.19-6.el6.x86_64",
          "6Server-RHSCL-2.4-6.7.Z:rh-mysql57-mysql-server-0:5.7.19-6.el6.x86_64",
          "6Server-RHSCL-2.4-6.7.Z:rh-mysql57-mysql-test-0:5.7.19-6.el6.x86_64",
          "6Server-RHSCL-2.4:rh-mysql57-mysql-0:5.7.19-6.el6.src",
          "6Server-RHSCL-2.4:rh-mysql57-mysql-0:5.7.19-6.el6.x86_64",
          "6Server-RHSCL-2.4:rh-mysql57-mysql-common-0:5.7.19-6.el6.x86_64",
          "6Server-RHSCL-2.4:rh-mysql57-mysql-config-0:5.7.19-6.el6.x86_64",
          "6Server-RHSCL-2.4:rh-mysql57-mysql-debuginfo-0:5.7.19-6.el6.x86_64",
          "6Server-RHSCL-2.4:rh-mysql57-mysql-devel-0:5.7.19-6.el6.x86_64",
          "6Server-RHSCL-2.4:rh-mysql57-mysql-errmsg-0:5.7.19-6.el6.x86_64",
          "6Server-RHSCL-2.4:rh-mysql57-mysql-server-0:5.7.19-6.el6.x86_64",
          "6Server-RHSCL-2.4:rh-mysql57-mysql-test-0:5.7.19-6.el6.x86_64",
          "6Workstation-RHSCL-2.4:rh-mysql57-mysql-0:5.7.19-6.el6.src",
          "6Workstation-RHSCL-2.4:rh-mysql57-mysql-0:5.7.19-6.el6.x86_64",
          "6Workstation-RHSCL-2.4:rh-mysql57-mysql-common-0:5.7.19-6.el6.x86_64",
          "6Workstation-RHSCL-2.4:rh-mysql57-mysql-config-0:5.7.19-6.el6.x86_64",
          "6Workstation-RHSCL-2.4:rh-mysql57-mysql-debuginfo-0:5.7.19-6.el6.x86_64",
          "6Workstation-RHSCL-2.4:rh-mysql57-mysql-devel-0:5.7.19-6.el6.x86_64",
          "6Workstation-RHSCL-2.4:rh-mysql57-mysql-errmsg-0:5.7.19-6.el6.x86_64",
          "6Workstation-RHSCL-2.4:rh-mysql57-mysql-server-0:5.7.19-6.el6.x86_64",
          "6Workstation-RHSCL-2.4:rh-mysql57-mysql-test-0:5.7.19-6.el6.x86_64",
          "7Server-RHSCL-2.4-7.3.Z:rh-mysql57-mysql-0:5.7.19-6.el7.src",
          "7Server-RHSCL-2.4-7.3.Z:rh-mysql57-mysql-0:5.7.19-6.el7.x86_64",
          "7Server-RHSCL-2.4-7.3.Z:rh-mysql57-mysql-common-0:5.7.19-6.el7.x86_64",
          "7Server-RHSCL-2.4-7.3.Z:rh-mysql57-mysql-config-0:5.7.19-6.el7.x86_64",
          "7Server-RHSCL-2.4-7.3.Z:rh-mysql57-mysql-debuginfo-0:5.7.19-6.el7.x86_64",
          "7Server-RHSCL-2.4-7.3.Z:rh-mysql57-mysql-devel-0:5.7.19-6.el7.x86_64",
          "7Server-RHSCL-2.4-7.3.Z:rh-mysql57-mysql-errmsg-0:5.7.19-6.el7.x86_64",
          "7Server-RHSCL-2.4-7.3.Z:rh-mysql57-mysql-server-0:5.7.19-6.el7.x86_64",
          "7Server-RHSCL-2.4-7.3.Z:rh-mysql57-mysql-test-0:5.7.19-6.el7.x86_64",
          "7Server-RHSCL-2.4:rh-mysql57-mysql-0:5.7.19-6.el7.src",
          "7Server-RHSCL-2.4:rh-mysql57-mysql-0:5.7.19-6.el7.x86_64",
          "7Server-RHSCL-2.4:rh-mysql57-mysql-common-0:5.7.19-6.el7.x86_64",
          "7Server-RHSCL-2.4:rh-mysql57-mysql-config-0:5.7.19-6.el7.x86_64",
          "7Server-RHSCL-2.4:rh-mysql57-mysql-debuginfo-0:5.7.19-6.el7.x86_64",
          "7Server-RHSCL-2.4:rh-mysql57-mysql-devel-0:5.7.19-6.el7.x86_64",
          "7Server-RHSCL-2.4:rh-mysql57-mysql-errmsg-0:5.7.19-6.el7.x86_64",
          "7Server-RHSCL-2.4:rh-mysql57-mysql-server-0:5.7.19-6.el7.x86_64",
          "7Server-RHSCL-2.4:rh-mysql57-mysql-test-0:5.7.19-6.el7.x86_64",
          "7Workstation-RHSCL-2.4:rh-mysql57-mysql-0:5.7.19-6.el7.src",
          "7Workstation-RHSCL-2.4:rh-mysql57-mysql-0:5.7.19-6.el7.x86_64",
          "7Workstation-RHSCL-2.4:rh-mysql57-mysql-common-0:5.7.19-6.el7.x86_64",
          "7Workstation-RHSCL-2.4:rh-mysql57-mysql-config-0:5.7.19-6.el7.x86_64",
          "7Workstation-RHSCL-2.4:rh-mysql57-mysql-debuginfo-0:5.7.19-6.el7.x86_64",
          "7Workstation-RHSCL-2.4:rh-mysql57-mysql-devel-0:5.7.19-6.el7.x86_64",
          "7Workstation-RHSCL-2.4:rh-mysql57-mysql-errmsg-0:5.7.19-6.el7.x86_64",
          "7Workstation-RHSCL-2.4:rh-mysql57-mysql-server-0:5.7.19-6.el7.x86_64",
          "7Workstation-RHSCL-2.4:rh-mysql57-mysql-test-0:5.7.19-6.el7.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2017-3645"
        },
        {
          "category": "external",
          "summary": "RHBZ#1472700",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1472700"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2017-3645",
          "url": "https://www.cve.org/CVERecord?id=CVE-2017-3645"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2017-3645",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2017-3645"
        },
        {
          "category": "external",
          "summary": "http://www.oracle.com/technetwork/security-advisory/cpujul2017-3236622.html#AppendixMSQL",
          "url": "http://www.oracle.com/technetwork/security-advisory/cpujul2017-3236622.html#AppendixMSQL"
        }
      ],
      "release_date": "2017-07-19T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2017-10-12T07:53:15+00:00",
          "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAfter installing this update, the MySQL server daemon (mysqld) will be restarted automatically.",
          "product_ids": [
            "6Server-RHSCL-2.4-6.7.Z:rh-mysql57-mysql-0:5.7.19-6.el6.src",
            "6Server-RHSCL-2.4-6.7.Z:rh-mysql57-mysql-0:5.7.19-6.el6.x86_64",
            "6Server-RHSCL-2.4-6.7.Z:rh-mysql57-mysql-common-0:5.7.19-6.el6.x86_64",
            "6Server-RHSCL-2.4-6.7.Z:rh-mysql57-mysql-config-0:5.7.19-6.el6.x86_64",
            "6Server-RHSCL-2.4-6.7.Z:rh-mysql57-mysql-debuginfo-0:5.7.19-6.el6.x86_64",
            "6Server-RHSCL-2.4-6.7.Z:rh-mysql57-mysql-devel-0:5.7.19-6.el6.x86_64",
            "6Server-RHSCL-2.4-6.7.Z:rh-mysql57-mysql-errmsg-0:5.7.19-6.el6.x86_64",
            "6Server-RHSCL-2.4-6.7.Z:rh-mysql57-mysql-server-0:5.7.19-6.el6.x86_64",
            "6Server-RHSCL-2.4-6.7.Z:rh-mysql57-mysql-test-0:5.7.19-6.el6.x86_64",
            "6Server-RHSCL-2.4:rh-mysql57-mysql-0:5.7.19-6.el6.src",
            "6Server-RHSCL-2.4:rh-mysql57-mysql-0:5.7.19-6.el6.x86_64",
            "6Server-RHSCL-2.4:rh-mysql57-mysql-common-0:5.7.19-6.el6.x86_64",
            "6Server-RHSCL-2.4:rh-mysql57-mysql-config-0:5.7.19-6.el6.x86_64",
            "6Server-RHSCL-2.4:rh-mysql57-mysql-debuginfo-0:5.7.19-6.el6.x86_64",
            "6Server-RHSCL-2.4:rh-mysql57-mysql-devel-0:5.7.19-6.el6.x86_64",
            "6Server-RHSCL-2.4:rh-mysql57-mysql-errmsg-0:5.7.19-6.el6.x86_64",
            "6Server-RHSCL-2.4:rh-mysql57-mysql-server-0:5.7.19-6.el6.x86_64",
            "6Server-RHSCL-2.4:rh-mysql57-mysql-test-0:5.7.19-6.el6.x86_64",
            "6Workstation-RHSCL-2.4:rh-mysql57-mysql-0:5.7.19-6.el6.src",
            "6Workstation-RHSCL-2.4:rh-mysql57-mysql-0:5.7.19-6.el6.x86_64",
            "6Workstation-RHSCL-2.4:rh-mysql57-mysql-common-0:5.7.19-6.el6.x86_64",
            "6Workstation-RHSCL-2.4:rh-mysql57-mysql-config-0:5.7.19-6.el6.x86_64",
            "6Workstation-RHSCL-2.4:rh-mysql57-mysql-debuginfo-0:5.7.19-6.el6.x86_64",
            "6Workstation-RHSCL-2.4:rh-mysql57-mysql-devel-0:5.7.19-6.el6.x86_64",
            "6Workstation-RHSCL-2.4:rh-mysql57-mysql-errmsg-0:5.7.19-6.el6.x86_64",
            "6Workstation-RHSCL-2.4:rh-mysql57-mysql-server-0:5.7.19-6.el6.x86_64",
            "6Workstation-RHSCL-2.4:rh-mysql57-mysql-test-0:5.7.19-6.el6.x86_64",
            "7Server-RHSCL-2.4-7.3.Z:rh-mysql57-mysql-0:5.7.19-6.el7.src",
            "7Server-RHSCL-2.4-7.3.Z:rh-mysql57-mysql-0:5.7.19-6.el7.x86_64",
            "7Server-RHSCL-2.4-7.3.Z:rh-mysql57-mysql-common-0:5.7.19-6.el7.x86_64",
            "7Server-RHSCL-2.4-7.3.Z:rh-mysql57-mysql-config-0:5.7.19-6.el7.x86_64",
            "7Server-RHSCL-2.4-7.3.Z:rh-mysql57-mysql-debuginfo-0:5.7.19-6.el7.x86_64",
            "7Server-RHSCL-2.4-7.3.Z:rh-mysql57-mysql-devel-0:5.7.19-6.el7.x86_64",
            "7Server-RHSCL-2.4-7.3.Z:rh-mysql57-mysql-errmsg-0:5.7.19-6.el7.x86_64",
            "7Server-RHSCL-2.4-7.3.Z:rh-mysql57-mysql-server-0:5.7.19-6.el7.x86_64",
            "7Server-RHSCL-2.4-7.3.Z:rh-mysql57-mysql-test-0:5.7.19-6.el7.x86_64",
            "7Server-RHSCL-2.4:rh-mysql57-mysql-0:5.7.19-6.el7.src",
            "7Server-RHSCL-2.4:rh-mysql57-mysql-0:5.7.19-6.el7.x86_64",
            "7Server-RHSCL-2.4:rh-mysql57-mysql-common-0:5.7.19-6.el7.x86_64",
            "7Server-RHSCL-2.4:rh-mysql57-mysql-config-0:5.7.19-6.el7.x86_64",
            "7Server-RHSCL-2.4:rh-mysql57-mysql-debuginfo-0:5.7.19-6.el7.x86_64",
            "7Server-RHSCL-2.4:rh-mysql57-mysql-devel-0:5.7.19-6.el7.x86_64",
            "7Server-RHSCL-2.4:rh-mysql57-mysql-errmsg-0:5.7.19-6.el7.x86_64",
            "7Server-RHSCL-2.4:rh-mysql57-mysql-server-0:5.7.19-6.el7.x86_64",
            "7Server-RHSCL-2.4:rh-mysql57-mysql-test-0:5.7.19-6.el7.x86_64",
            "7Workstation-RHSCL-2.4:rh-mysql57-mysql-0:5.7.19-6.el7.src",
            "7Workstation-RHSCL-2.4:rh-mysql57-mysql-0:5.7.19-6.el7.x86_64",
            "7Workstation-RHSCL-2.4:rh-mysql57-mysql-common-0:5.7.19-6.el7.x86_64",
            "7Workstation-RHSCL-2.4:rh-mysql57-mysql-config-0:5.7.19-6.el7.x86_64",
            "7Workstation-RHSCL-2.4:rh-mysql57-mysql-debuginfo-0:5.7.19-6.el7.x86_64",
            "7Workstation-RHSCL-2.4:rh-mysql57-mysql-devel-0:5.7.19-6.el7.x86_64",
            "7Workstation-RHSCL-2.4:rh-mysql57-mysql-errmsg-0:5.7.19-6.el7.x86_64",
            "7Workstation-RHSCL-2.4:rh-mysql57-mysql-server-0:5.7.19-6.el7.x86_64",
            "7Workstation-RHSCL-2.4:rh-mysql57-mysql-test-0:5.7.19-6.el7.x86_64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2017:2886"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 4.9,
            "baseSeverity": "MEDIUM",
            "confidentialityImpact": "NONE",
            "integrityImpact": "NONE",
            "privilegesRequired": "HIGH",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.0"
          },
          "products": [
            "6Server-RHSCL-2.4-6.7.Z:rh-mysql57-mysql-0:5.7.19-6.el6.src",
            "6Server-RHSCL-2.4-6.7.Z:rh-mysql57-mysql-0:5.7.19-6.el6.x86_64",
            "6Server-RHSCL-2.4-6.7.Z:rh-mysql57-mysql-common-0:5.7.19-6.el6.x86_64",
            "6Server-RHSCL-2.4-6.7.Z:rh-mysql57-mysql-config-0:5.7.19-6.el6.x86_64",
            "6Server-RHSCL-2.4-6.7.Z:rh-mysql57-mysql-debuginfo-0:5.7.19-6.el6.x86_64",
            "6Server-RHSCL-2.4-6.7.Z:rh-mysql57-mysql-devel-0:5.7.19-6.el6.x86_64",
            "6Server-RHSCL-2.4-6.7.Z:rh-mysql57-mysql-errmsg-0:5.7.19-6.el6.x86_64",
            "6Server-RHSCL-2.4-6.7.Z:rh-mysql57-mysql-server-0:5.7.19-6.el6.x86_64",
            "6Server-RHSCL-2.4-6.7.Z:rh-mysql57-mysql-test-0:5.7.19-6.el6.x86_64",
            "6Server-RHSCL-2.4:rh-mysql57-mysql-0:5.7.19-6.el6.src",
            "6Server-RHSCL-2.4:rh-mysql57-mysql-0:5.7.19-6.el6.x86_64",
            "6Server-RHSCL-2.4:rh-mysql57-mysql-common-0:5.7.19-6.el6.x86_64",
            "6Server-RHSCL-2.4:rh-mysql57-mysql-config-0:5.7.19-6.el6.x86_64",
            "6Server-RHSCL-2.4:rh-mysql57-mysql-debuginfo-0:5.7.19-6.el6.x86_64",
            "6Server-RHSCL-2.4:rh-mysql57-mysql-devel-0:5.7.19-6.el6.x86_64",
            "6Server-RHSCL-2.4:rh-mysql57-mysql-errmsg-0:5.7.19-6.el6.x86_64",
            "6Server-RHSCL-2.4:rh-mysql57-mysql-server-0:5.7.19-6.el6.x86_64",
            "6Server-RHSCL-2.4:rh-mysql57-mysql-test-0:5.7.19-6.el6.x86_64",
            "6Workstation-RHSCL-2.4:rh-mysql57-mysql-0:5.7.19-6.el6.src",
            "6Workstation-RHSCL-2.4:rh-mysql57-mysql-0:5.7.19-6.el6.x86_64",
            "6Workstation-RHSCL-2.4:rh-mysql57-mysql-common-0:5.7.19-6.el6.x86_64",
            "6Workstation-RHSCL-2.4:rh-mysql57-mysql-config-0:5.7.19-6.el6.x86_64",
            "6Workstation-RHSCL-2.4:rh-mysql57-mysql-debuginfo-0:5.7.19-6.el6.x86_64",
            "6Workstation-RHSCL-2.4:rh-mysql57-mysql-devel-0:5.7.19-6.el6.x86_64",
            "6Workstation-RHSCL-2.4:rh-mysql57-mysql-errmsg-0:5.7.19-6.el6.x86_64",
            "6Workstation-RHSCL-2.4:rh-mysql57-mysql-server-0:5.7.19-6.el6.x86_64",
            "6Workstation-RHSCL-2.4:rh-mysql57-mysql-test-0:5.7.19-6.el6.x86_64",
            "7Server-RHSCL-2.4-7.3.Z:rh-mysql57-mysql-0:5.7.19-6.el7.src",
            "7Server-RHSCL-2.4-7.3.Z:rh-mysql57-mysql-0:5.7.19-6.el7.x86_64",
            "7Server-RHSCL-2.4-7.3.Z:rh-mysql57-mysql-common-0:5.7.19-6.el7.x86_64",
            "7Server-RHSCL-2.4-7.3.Z:rh-mysql57-mysql-config-0:5.7.19-6.el7.x86_64",
            "7Server-RHSCL-2.4-7.3.Z:rh-mysql57-mysql-debuginfo-0:5.7.19-6.el7.x86_64",
            "7Server-RHSCL-2.4-7.3.Z:rh-mysql57-mysql-devel-0:5.7.19-6.el7.x86_64",
            "7Server-RHSCL-2.4-7.3.Z:rh-mysql57-mysql-errmsg-0:5.7.19-6.el7.x86_64",
            "7Server-RHSCL-2.4-7.3.Z:rh-mysql57-mysql-server-0:5.7.19-6.el7.x86_64",
            "7Server-RHSCL-2.4-7.3.Z:rh-mysql57-mysql-test-0:5.7.19-6.el7.x86_64",
            "7Server-RHSCL-2.4:rh-mysql57-mysql-0:5.7.19-6.el7.src",
            "7Server-RHSCL-2.4:rh-mysql57-mysql-0:5.7.19-6.el7.x86_64",
            "7Server-RHSCL-2.4:rh-mysql57-mysql-common-0:5.7.19-6.el7.x86_64",
            "7Server-RHSCL-2.4:rh-mysql57-mysql-config-0:5.7.19-6.el7.x86_64",
            "7Server-RHSCL-2.4:rh-mysql57-mysql-debuginfo-0:5.7.19-6.el7.x86_64",
            "7Server-RHSCL-2.4:rh-mysql57-mysql-devel-0:5.7.19-6.el7.x86_64",
            "7Server-RHSCL-2.4:rh-mysql57-mysql-errmsg-0:5.7.19-6.el7.x86_64",
            "7Server-RHSCL-2.4:rh-mysql57-mysql-server-0:5.7.19-6.el7.x86_64",
            "7Server-RHSCL-2.4:rh-mysql57-mysql-test-0:5.7.19-6.el7.x86_64",
            "7Workstation-RHSCL-2.4:rh-mysql57-mysql-0:5.7.19-6.el7.src",
            "7Workstation-RHSCL-2.4:rh-mysql57-mysql-0:5.7.19-6.el7.x86_64",
            "7Workstation-RHSCL-2.4:rh-mysql57-mysql-common-0:5.7.19-6.el7.x86_64",
            "7Workstation-RHSCL-2.4:rh-mysql57-mysql-config-0:5.7.19-6.el7.x86_64",
            "7Workstation-RHSCL-2.4:rh-mysql57-mysql-debuginfo-0:5.7.19-6.el7.x86_64",
            "7Workstation-RHSCL-2.4:rh-mysql57-mysql-devel-0:5.7.19-6.el7.x86_64",
            "7Workstation-RHSCL-2.4:rh-mysql57-mysql-errmsg-0:5.7.19-6.el7.x86_64",
            "7Workstation-RHSCL-2.4:rh-mysql57-mysql-server-0:5.7.19-6.el7.x86_64",
            "7Workstation-RHSCL-2.4:rh-mysql57-mysql-test-0:5.7.19-6.el7.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Moderate"
        }
      ],
      "title": "mysql: Server: Optimizer unspecified vulnerability (CPU Jul 2017)"
    },
    {
      "cve": "CVE-2017-3646",
      "discovery_date": "2017-07-19T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "1472701"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: X Plugin). Supported versions that are affected are 5.7.16 and earlier. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.0 Base Score 4.9 (Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H).",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "mysql: X Plugin unspecified vulnerability (CPU Jul 2017)",
          "title": "Vulnerability summary"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "6Server-RHSCL-2.4-6.7.Z:rh-mysql57-mysql-0:5.7.19-6.el6.src",
          "6Server-RHSCL-2.4-6.7.Z:rh-mysql57-mysql-0:5.7.19-6.el6.x86_64",
          "6Server-RHSCL-2.4-6.7.Z:rh-mysql57-mysql-common-0:5.7.19-6.el6.x86_64",
          "6Server-RHSCL-2.4-6.7.Z:rh-mysql57-mysql-config-0:5.7.19-6.el6.x86_64",
          "6Server-RHSCL-2.4-6.7.Z:rh-mysql57-mysql-debuginfo-0:5.7.19-6.el6.x86_64",
          "6Server-RHSCL-2.4-6.7.Z:rh-mysql57-mysql-devel-0:5.7.19-6.el6.x86_64",
          "6Server-RHSCL-2.4-6.7.Z:rh-mysql57-mysql-errmsg-0:5.7.19-6.el6.x86_64",
          "6Server-RHSCL-2.4-6.7.Z:rh-mysql57-mysql-server-0:5.7.19-6.el6.x86_64",
          "6Server-RHSCL-2.4-6.7.Z:rh-mysql57-mysql-test-0:5.7.19-6.el6.x86_64",
          "6Server-RHSCL-2.4:rh-mysql57-mysql-0:5.7.19-6.el6.src",
          "6Server-RHSCL-2.4:rh-mysql57-mysql-0:5.7.19-6.el6.x86_64",
          "6Server-RHSCL-2.4:rh-mysql57-mysql-common-0:5.7.19-6.el6.x86_64",
          "6Server-RHSCL-2.4:rh-mysql57-mysql-config-0:5.7.19-6.el6.x86_64",
          "6Server-RHSCL-2.4:rh-mysql57-mysql-debuginfo-0:5.7.19-6.el6.x86_64",
          "6Server-RHSCL-2.4:rh-mysql57-mysql-devel-0:5.7.19-6.el6.x86_64",
          "6Server-RHSCL-2.4:rh-mysql57-mysql-errmsg-0:5.7.19-6.el6.x86_64",
          "6Server-RHSCL-2.4:rh-mysql57-mysql-server-0:5.7.19-6.el6.x86_64",
          "6Server-RHSCL-2.4:rh-mysql57-mysql-test-0:5.7.19-6.el6.x86_64",
          "6Workstation-RHSCL-2.4:rh-mysql57-mysql-0:5.7.19-6.el6.src",
          "6Workstation-RHSCL-2.4:rh-mysql57-mysql-0:5.7.19-6.el6.x86_64",
          "6Workstation-RHSCL-2.4:rh-mysql57-mysql-common-0:5.7.19-6.el6.x86_64",
          "6Workstation-RHSCL-2.4:rh-mysql57-mysql-config-0:5.7.19-6.el6.x86_64",
          "6Workstation-RHSCL-2.4:rh-mysql57-mysql-debuginfo-0:5.7.19-6.el6.x86_64",
          "6Workstation-RHSCL-2.4:rh-mysql57-mysql-devel-0:5.7.19-6.el6.x86_64",
          "6Workstation-RHSCL-2.4:rh-mysql57-mysql-errmsg-0:5.7.19-6.el6.x86_64",
          "6Workstation-RHSCL-2.4:rh-mysql57-mysql-server-0:5.7.19-6.el6.x86_64",
          "6Workstation-RHSCL-2.4:rh-mysql57-mysql-test-0:5.7.19-6.el6.x86_64",
          "7Server-RHSCL-2.4-7.3.Z:rh-mysql57-mysql-0:5.7.19-6.el7.src",
          "7Server-RHSCL-2.4-7.3.Z:rh-mysql57-mysql-0:5.7.19-6.el7.x86_64",
          "7Server-RHSCL-2.4-7.3.Z:rh-mysql57-mysql-common-0:5.7.19-6.el7.x86_64",
          "7Server-RHSCL-2.4-7.3.Z:rh-mysql57-mysql-config-0:5.7.19-6.el7.x86_64",
          "7Server-RHSCL-2.4-7.3.Z:rh-mysql57-mysql-debuginfo-0:5.7.19-6.el7.x86_64",
          "7Server-RHSCL-2.4-7.3.Z:rh-mysql57-mysql-devel-0:5.7.19-6.el7.x86_64",
          "7Server-RHSCL-2.4-7.3.Z:rh-mysql57-mysql-errmsg-0:5.7.19-6.el7.x86_64",
          "7Server-RHSCL-2.4-7.3.Z:rh-mysql57-mysql-server-0:5.7.19-6.el7.x86_64",
          "7Server-RHSCL-2.4-7.3.Z:rh-mysql57-mysql-test-0:5.7.19-6.el7.x86_64",
          "7Server-RHSCL-2.4:rh-mysql57-mysql-0:5.7.19-6.el7.src",
          "7Server-RHSCL-2.4:rh-mysql57-mysql-0:5.7.19-6.el7.x86_64",
          "7Server-RHSCL-2.4:rh-mysql57-mysql-common-0:5.7.19-6.el7.x86_64",
          "7Server-RHSCL-2.4:rh-mysql57-mysql-config-0:5.7.19-6.el7.x86_64",
          "7Server-RHSCL-2.4:rh-mysql57-mysql-debuginfo-0:5.7.19-6.el7.x86_64",
          "7Server-RHSCL-2.4:rh-mysql57-mysql-devel-0:5.7.19-6.el7.x86_64",
          "7Server-RHSCL-2.4:rh-mysql57-mysql-errmsg-0:5.7.19-6.el7.x86_64",
          "7Server-RHSCL-2.4:rh-mysql57-mysql-server-0:5.7.19-6.el7.x86_64",
          "7Server-RHSCL-2.4:rh-mysql57-mysql-test-0:5.7.19-6.el7.x86_64",
          "7Workstation-RHSCL-2.4:rh-mysql57-mysql-0:5.7.19-6.el7.src",
          "7Workstation-RHSCL-2.4:rh-mysql57-mysql-0:5.7.19-6.el7.x86_64",
          "7Workstation-RHSCL-2.4:rh-mysql57-mysql-common-0:5.7.19-6.el7.x86_64",
          "7Workstation-RHSCL-2.4:rh-mysql57-mysql-config-0:5.7.19-6.el7.x86_64",
          "7Workstation-RHSCL-2.4:rh-mysql57-mysql-debuginfo-0:5.7.19-6.el7.x86_64",
          "7Workstation-RHSCL-2.4:rh-mysql57-mysql-devel-0:5.7.19-6.el7.x86_64",
          "7Workstation-RHSCL-2.4:rh-mysql57-mysql-errmsg-0:5.7.19-6.el7.x86_64",
          "7Workstation-RHSCL-2.4:rh-mysql57-mysql-server-0:5.7.19-6.el7.x86_64",
          "7Workstation-RHSCL-2.4:rh-mysql57-mysql-test-0:5.7.19-6.el7.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2017-3646"
        },
        {
          "category": "external",
          "summary": "RHBZ#1472701",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1472701"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2017-3646",
          "url": "https://www.cve.org/CVERecord?id=CVE-2017-3646"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2017-3646",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2017-3646"
        },
        {
          "category": "external",
          "summary": "http://www.oracle.com/technetwork/security-advisory/cpujul2017-3236622.html#AppendixMSQL",
          "url": "http://www.oracle.com/technetwork/security-advisory/cpujul2017-3236622.html#AppendixMSQL"
        }
      ],
      "release_date": "2017-07-19T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2017-10-12T07:53:15+00:00",
          "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAfter installing this update, the MySQL server daemon (mysqld) will be restarted automatically.",
          "product_ids": [
            "6Server-RHSCL-2.4-6.7.Z:rh-mysql57-mysql-0:5.7.19-6.el6.src",
            "6Server-RHSCL-2.4-6.7.Z:rh-mysql57-mysql-0:5.7.19-6.el6.x86_64",
            "6Server-RHSCL-2.4-6.7.Z:rh-mysql57-mysql-common-0:5.7.19-6.el6.x86_64",
            "6Server-RHSCL-2.4-6.7.Z:rh-mysql57-mysql-config-0:5.7.19-6.el6.x86_64",
            "6Server-RHSCL-2.4-6.7.Z:rh-mysql57-mysql-debuginfo-0:5.7.19-6.el6.x86_64",
            "6Server-RHSCL-2.4-6.7.Z:rh-mysql57-mysql-devel-0:5.7.19-6.el6.x86_64",
            "6Server-RHSCL-2.4-6.7.Z:rh-mysql57-mysql-errmsg-0:5.7.19-6.el6.x86_64",
            "6Server-RHSCL-2.4-6.7.Z:rh-mysql57-mysql-server-0:5.7.19-6.el6.x86_64",
            "6Server-RHSCL-2.4-6.7.Z:rh-mysql57-mysql-test-0:5.7.19-6.el6.x86_64",
            "6Server-RHSCL-2.4:rh-mysql57-mysql-0:5.7.19-6.el6.src",
            "6Server-RHSCL-2.4:rh-mysql57-mysql-0:5.7.19-6.el6.x86_64",
            "6Server-RHSCL-2.4:rh-mysql57-mysql-common-0:5.7.19-6.el6.x86_64",
            "6Server-RHSCL-2.4:rh-mysql57-mysql-config-0:5.7.19-6.el6.x86_64",
            "6Server-RHSCL-2.4:rh-mysql57-mysql-debuginfo-0:5.7.19-6.el6.x86_64",
            "6Server-RHSCL-2.4:rh-mysql57-mysql-devel-0:5.7.19-6.el6.x86_64",
            "6Server-RHSCL-2.4:rh-mysql57-mysql-errmsg-0:5.7.19-6.el6.x86_64",
            "6Server-RHSCL-2.4:rh-mysql57-mysql-server-0:5.7.19-6.el6.x86_64",
            "6Server-RHSCL-2.4:rh-mysql57-mysql-test-0:5.7.19-6.el6.x86_64",
            "6Workstation-RHSCL-2.4:rh-mysql57-mysql-0:5.7.19-6.el6.src",
            "6Workstation-RHSCL-2.4:rh-mysql57-mysql-0:5.7.19-6.el6.x86_64",
            "6Workstation-RHSCL-2.4:rh-mysql57-mysql-common-0:5.7.19-6.el6.x86_64",
            "6Workstation-RHSCL-2.4:rh-mysql57-mysql-config-0:5.7.19-6.el6.x86_64",
            "6Workstation-RHSCL-2.4:rh-mysql57-mysql-debuginfo-0:5.7.19-6.el6.x86_64",
            "6Workstation-RHSCL-2.4:rh-mysql57-mysql-devel-0:5.7.19-6.el6.x86_64",
            "6Workstation-RHSCL-2.4:rh-mysql57-mysql-errmsg-0:5.7.19-6.el6.x86_64",
            "6Workstation-RHSCL-2.4:rh-mysql57-mysql-server-0:5.7.19-6.el6.x86_64",
            "6Workstation-RHSCL-2.4:rh-mysql57-mysql-test-0:5.7.19-6.el6.x86_64",
            "7Server-RHSCL-2.4-7.3.Z:rh-mysql57-mysql-0:5.7.19-6.el7.src",
            "7Server-RHSCL-2.4-7.3.Z:rh-mysql57-mysql-0:5.7.19-6.el7.x86_64",
            "7Server-RHSCL-2.4-7.3.Z:rh-mysql57-mysql-common-0:5.7.19-6.el7.x86_64",
            "7Server-RHSCL-2.4-7.3.Z:rh-mysql57-mysql-config-0:5.7.19-6.el7.x86_64",
            "7Server-RHSCL-2.4-7.3.Z:rh-mysql57-mysql-debuginfo-0:5.7.19-6.el7.x86_64",
            "7Server-RHSCL-2.4-7.3.Z:rh-mysql57-mysql-devel-0:5.7.19-6.el7.x86_64",
            "7Server-RHSCL-2.4-7.3.Z:rh-mysql57-mysql-errmsg-0:5.7.19-6.el7.x86_64",
            "7Server-RHSCL-2.4-7.3.Z:rh-mysql57-mysql-server-0:5.7.19-6.el7.x86_64",
            "7Server-RHSCL-2.4-7.3.Z:rh-mysql57-mysql-test-0:5.7.19-6.el7.x86_64",
            "7Server-RHSCL-2.4:rh-mysql57-mysql-0:5.7.19-6.el7.src",
            "7Server-RHSCL-2.4:rh-mysql57-mysql-0:5.7.19-6.el7.x86_64",
            "7Server-RHSCL-2.4:rh-mysql57-mysql-common-0:5.7.19-6.el7.x86_64",
            "7Server-RHSCL-2.4:rh-mysql57-mysql-config-0:5.7.19-6.el7.x86_64",
            "7Server-RHSCL-2.4:rh-mysql57-mysql-debuginfo-0:5.7.19-6.el7.x86_64",
            "7Server-RHSCL-2.4:rh-mysql57-mysql-devel-0:5.7.19-6.el7.x86_64",
            "7Server-RHSCL-2.4:rh-mysql57-mysql-errmsg-0:5.7.19-6.el7.x86_64",
            "7Server-RHSCL-2.4:rh-mysql57-mysql-server-0:5.7.19-6.el7.x86_64",
            "7Server-RHSCL-2.4:rh-mysql57-mysql-test-0:5.7.19-6.el7.x86_64",
            "7Workstation-RHSCL-2.4:rh-mysql57-mysql-0:5.7.19-6.el7.src",
            "7Workstation-RHSCL-2.4:rh-mysql57-mysql-0:5.7.19-6.el7.x86_64",
            "7Workstation-RHSCL-2.4:rh-mysql57-mysql-common-0:5.7.19-6.el7.x86_64",
            "7Workstation-RHSCL-2.4:rh-mysql57-mysql-config-0:5.7.19-6.el7.x86_64",
            "7Workstation-RHSCL-2.4:rh-mysql57-mysql-debuginfo-0:5.7.19-6.el7.x86_64",
            "7Workstation-RHSCL-2.4:rh-mysql57-mysql-devel-0:5.7.19-6.el7.x86_64",
            "7Workstation-RHSCL-2.4:rh-mysql57-mysql-errmsg-0:5.7.19-6.el7.x86_64",
            "7Workstation-RHSCL-2.4:rh-mysql57-mysql-server-0:5.7.19-6.el7.x86_64",
            "7Workstation-RHSCL-2.4:rh-mysql57-mysql-test-0:5.7.19-6.el7.x86_64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2017:2886"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 4.9,
            "baseSeverity": "MEDIUM",
            "confidentialityImpact": "NONE",
            "integrityImpact": "NONE",
            "privilegesRequired": "HIGH",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.0"
          },
          "products": [
            "6Server-RHSCL-2.4-6.7.Z:rh-mysql57-mysql-0:5.7.19-6.el6.src",
            "6Server-RHSCL-2.4-6.7.Z:rh-mysql57-mysql-0:5.7.19-6.el6.x86_64",
            "6Server-RHSCL-2.4-6.7.Z:rh-mysql57-mysql-common-0:5.7.19-6.el6.x86_64",
            "6Server-RHSCL-2.4-6.7.Z:rh-mysql57-mysql-config-0:5.7.19-6.el6.x86_64",
            "6Server-RHSCL-2.4-6.7.Z:rh-mysql57-mysql-debuginfo-0:5.7.19-6.el6.x86_64",
            "6Server-RHSCL-2.4-6.7.Z:rh-mysql57-mysql-devel-0:5.7.19-6.el6.x86_64",
            "6Server-RHSCL-2.4-6.7.Z:rh-mysql57-mysql-errmsg-0:5.7.19-6.el6.x86_64",
            "6Server-RHSCL-2.4-6.7.Z:rh-mysql57-mysql-server-0:5.7.19-6.el6.x86_64",
            "6Server-RHSCL-2.4-6.7.Z:rh-mysql57-mysql-test-0:5.7.19-6.el6.x86_64",
            "6Server-RHSCL-2.4:rh-mysql57-mysql-0:5.7.19-6.el6.src",
            "6Server-RHSCL-2.4:rh-mysql57-mysql-0:5.7.19-6.el6.x86_64",
            "6Server-RHSCL-2.4:rh-mysql57-mysql-common-0:5.7.19-6.el6.x86_64",
            "6Server-RHSCL-2.4:rh-mysql57-mysql-config-0:5.7.19-6.el6.x86_64",
            "6Server-RHSCL-2.4:rh-mysql57-mysql-debuginfo-0:5.7.19-6.el6.x86_64",
            "6Server-RHSCL-2.4:rh-mysql57-mysql-devel-0:5.7.19-6.el6.x86_64",
            "6Server-RHSCL-2.4:rh-mysql57-mysql-errmsg-0:5.7.19-6.el6.x86_64",
            "6Server-RHSCL-2.4:rh-mysql57-mysql-server-0:5.7.19-6.el6.x86_64",
            "6Server-RHSCL-2.4:rh-mysql57-mysql-test-0:5.7.19-6.el6.x86_64",
            "6Workstation-RHSCL-2.4:rh-mysql57-mysql-0:5.7.19-6.el6.src",
            "6Workstation-RHSCL-2.4:rh-mysql57-mysql-0:5.7.19-6.el6.x86_64",
            "6Workstation-RHSCL-2.4:rh-mysql57-mysql-common-0:5.7.19-6.el6.x86_64",
            "6Workstation-RHSCL-2.4:rh-mysql57-mysql-config-0:5.7.19-6.el6.x86_64",
            "6Workstation-RHSCL-2.4:rh-mysql57-mysql-debuginfo-0:5.7.19-6.el6.x86_64",
            "6Workstation-RHSCL-2.4:rh-mysql57-mysql-devel-0:5.7.19-6.el6.x86_64",
            "6Workstation-RHSCL-2.4:rh-mysql57-mysql-errmsg-0:5.7.19-6.el6.x86_64",
            "6Workstation-RHSCL-2.4:rh-mysql57-mysql-server-0:5.7.19-6.el6.x86_64",
            "6Workstation-RHSCL-2.4:rh-mysql57-mysql-test-0:5.7.19-6.el6.x86_64",
            "7Server-RHSCL-2.4-7.3.Z:rh-mysql57-mysql-0:5.7.19-6.el7.src",
            "7Server-RHSCL-2.4-7.3.Z:rh-mysql57-mysql-0:5.7.19-6.el7.x86_64",
            "7Server-RHSCL-2.4-7.3.Z:rh-mysql57-mysql-common-0:5.7.19-6.el7.x86_64",
            "7Server-RHSCL-2.4-7.3.Z:rh-mysql57-mysql-config-0:5.7.19-6.el7.x86_64",
            "7Server-RHSCL-2.4-7.3.Z:rh-mysql57-mysql-debuginfo-0:5.7.19-6.el7.x86_64",
            "7Server-RHSCL-2.4-7.3.Z:rh-mysql57-mysql-devel-0:5.7.19-6.el7.x86_64",
            "7Server-RHSCL-2.4-7.3.Z:rh-mysql57-mysql-errmsg-0:5.7.19-6.el7.x86_64",
            "7Server-RHSCL-2.4-7.3.Z:rh-mysql57-mysql-server-0:5.7.19-6.el7.x86_64",
            "7Server-RHSCL-2.4-7.3.Z:rh-mysql57-mysql-test-0:5.7.19-6.el7.x86_64",
            "7Server-RHSCL-2.4:rh-mysql57-mysql-0:5.7.19-6.el7.src",
            "7Server-RHSCL-2.4:rh-mysql57-mysql-0:5.7.19-6.el7.x86_64",
            "7Server-RHSCL-2.4:rh-mysql57-mysql-common-0:5.7.19-6.el7.x86_64",
            "7Server-RHSCL-2.4:rh-mysql57-mysql-config-0:5.7.19-6.el7.x86_64",
            "7Server-RHSCL-2.4:rh-mysql57-mysql-debuginfo-0:5.7.19-6.el7.x86_64",
            "7Server-RHSCL-2.4:rh-mysql57-mysql-devel-0:5.7.19-6.el7.x86_64",
            "7Server-RHSCL-2.4:rh-mysql57-mysql-errmsg-0:5.7.19-6.el7.x86_64",
            "7Server-RHSCL-2.4:rh-mysql57-mysql-server-0:5.7.19-6.el7.x86_64",
            "7Server-RHSCL-2.4:rh-mysql57-mysql-test-0:5.7.19-6.el7.x86_64",
            "7Workstation-RHSCL-2.4:rh-mysql57-mysql-0:5.7.19-6.el7.src",
            "7Workstation-RHSCL-2.4:rh-mysql57-mysql-0:5.7.19-6.el7.x86_64",
            "7Workstation-RHSCL-2.4:rh-mysql57-mysql-common-0:5.7.19-6.el7.x86_64",
            "7Workstation-RHSCL-2.4:rh-mysql57-mysql-config-0:5.7.19-6.el7.x86_64",
            "7Workstation-RHSCL-2.4:rh-mysql57-mysql-debuginfo-0:5.7.19-6.el7.x86_64",
            "7Workstation-RHSCL-2.4:rh-mysql57-mysql-devel-0:5.7.19-6.el7.x86_64",
            "7Workstation-RHSCL-2.4:rh-mysql57-mysql-errmsg-0:5.7.19-6.el7.x86_64",
            "7Workstation-RHSCL-2.4:rh-mysql57-mysql-server-0:5.7.19-6.el7.x86_64",
            "7Workstation-RHSCL-2.4:rh-mysql57-mysql-test-0:5.7.19-6.el7.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Moderate"
        }
      ],
      "title": "mysql: X Plugin unspecified vulnerability (CPU Jul 2017)"
    },
    {
      "cve": "CVE-2017-3647",
      "discovery_date": "2017-07-19T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "1472703"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Replication). Supported versions that are affected are 5.6.36 and earlier and 5.7.18 and earlier. Difficult to exploit vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.0 Base Score 4.4 (Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:H).",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "mysql: Server: Replication unspecified vulnerability (CPU Jul 2017)",
          "title": "Vulnerability summary"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "6Server-RHSCL-2.4-6.7.Z:rh-mysql57-mysql-0:5.7.19-6.el6.src",
          "6Server-RHSCL-2.4-6.7.Z:rh-mysql57-mysql-0:5.7.19-6.el6.x86_64",
          "6Server-RHSCL-2.4-6.7.Z:rh-mysql57-mysql-common-0:5.7.19-6.el6.x86_64",
          "6Server-RHSCL-2.4-6.7.Z:rh-mysql57-mysql-config-0:5.7.19-6.el6.x86_64",
          "6Server-RHSCL-2.4-6.7.Z:rh-mysql57-mysql-debuginfo-0:5.7.19-6.el6.x86_64",
          "6Server-RHSCL-2.4-6.7.Z:rh-mysql57-mysql-devel-0:5.7.19-6.el6.x86_64",
          "6Server-RHSCL-2.4-6.7.Z:rh-mysql57-mysql-errmsg-0:5.7.19-6.el6.x86_64",
          "6Server-RHSCL-2.4-6.7.Z:rh-mysql57-mysql-server-0:5.7.19-6.el6.x86_64",
          "6Server-RHSCL-2.4-6.7.Z:rh-mysql57-mysql-test-0:5.7.19-6.el6.x86_64",
          "6Server-RHSCL-2.4:rh-mysql57-mysql-0:5.7.19-6.el6.src",
          "6Server-RHSCL-2.4:rh-mysql57-mysql-0:5.7.19-6.el6.x86_64",
          "6Server-RHSCL-2.4:rh-mysql57-mysql-common-0:5.7.19-6.el6.x86_64",
          "6Server-RHSCL-2.4:rh-mysql57-mysql-config-0:5.7.19-6.el6.x86_64",
          "6Server-RHSCL-2.4:rh-mysql57-mysql-debuginfo-0:5.7.19-6.el6.x86_64",
          "6Server-RHSCL-2.4:rh-mysql57-mysql-devel-0:5.7.19-6.el6.x86_64",
          "6Server-RHSCL-2.4:rh-mysql57-mysql-errmsg-0:5.7.19-6.el6.x86_64",
          "6Server-RHSCL-2.4:rh-mysql57-mysql-server-0:5.7.19-6.el6.x86_64",
          "6Server-RHSCL-2.4:rh-mysql57-mysql-test-0:5.7.19-6.el6.x86_64",
          "6Workstation-RHSCL-2.4:rh-mysql57-mysql-0:5.7.19-6.el6.src",
          "6Workstation-RHSCL-2.4:rh-mysql57-mysql-0:5.7.19-6.el6.x86_64",
          "6Workstation-RHSCL-2.4:rh-mysql57-mysql-common-0:5.7.19-6.el6.x86_64",
          "6Workstation-RHSCL-2.4:rh-mysql57-mysql-config-0:5.7.19-6.el6.x86_64",
          "6Workstation-RHSCL-2.4:rh-mysql57-mysql-debuginfo-0:5.7.19-6.el6.x86_64",
          "6Workstation-RHSCL-2.4:rh-mysql57-mysql-devel-0:5.7.19-6.el6.x86_64",
          "6Workstation-RHSCL-2.4:rh-mysql57-mysql-errmsg-0:5.7.19-6.el6.x86_64",
          "6Workstation-RHSCL-2.4:rh-mysql57-mysql-server-0:5.7.19-6.el6.x86_64",
          "6Workstation-RHSCL-2.4:rh-mysql57-mysql-test-0:5.7.19-6.el6.x86_64",
          "7Server-RHSCL-2.4-7.3.Z:rh-mysql57-mysql-0:5.7.19-6.el7.src",
          "7Server-RHSCL-2.4-7.3.Z:rh-mysql57-mysql-0:5.7.19-6.el7.x86_64",
          "7Server-RHSCL-2.4-7.3.Z:rh-mysql57-mysql-common-0:5.7.19-6.el7.x86_64",
          "7Server-RHSCL-2.4-7.3.Z:rh-mysql57-mysql-config-0:5.7.19-6.el7.x86_64",
          "7Server-RHSCL-2.4-7.3.Z:rh-mysql57-mysql-debuginfo-0:5.7.19-6.el7.x86_64",
          "7Server-RHSCL-2.4-7.3.Z:rh-mysql57-mysql-devel-0:5.7.19-6.el7.x86_64",
          "7Server-RHSCL-2.4-7.3.Z:rh-mysql57-mysql-errmsg-0:5.7.19-6.el7.x86_64",
          "7Server-RHSCL-2.4-7.3.Z:rh-mysql57-mysql-server-0:5.7.19-6.el7.x86_64",
          "7Server-RHSCL-2.4-7.3.Z:rh-mysql57-mysql-test-0:5.7.19-6.el7.x86_64",
          "7Server-RHSCL-2.4:rh-mysql57-mysql-0:5.7.19-6.el7.src",
          "7Server-RHSCL-2.4:rh-mysql57-mysql-0:5.7.19-6.el7.x86_64",
          "7Server-RHSCL-2.4:rh-mysql57-mysql-common-0:5.7.19-6.el7.x86_64",
          "7Server-RHSCL-2.4:rh-mysql57-mysql-config-0:5.7.19-6.el7.x86_64",
          "7Server-RHSCL-2.4:rh-mysql57-mysql-debuginfo-0:5.7.19-6.el7.x86_64",
          "7Server-RHSCL-2.4:rh-mysql57-mysql-devel-0:5.7.19-6.el7.x86_64",
          "7Server-RHSCL-2.4:rh-mysql57-mysql-errmsg-0:5.7.19-6.el7.x86_64",
          "7Server-RHSCL-2.4:rh-mysql57-mysql-server-0:5.7.19-6.el7.x86_64",
          "7Server-RHSCL-2.4:rh-mysql57-mysql-test-0:5.7.19-6.el7.x86_64",
          "7Workstation-RHSCL-2.4:rh-mysql57-mysql-0:5.7.19-6.el7.src",
          "7Workstation-RHSCL-2.4:rh-mysql57-mysql-0:5.7.19-6.el7.x86_64",
          "7Workstation-RHSCL-2.4:rh-mysql57-mysql-common-0:5.7.19-6.el7.x86_64",
          "7Workstation-RHSCL-2.4:rh-mysql57-mysql-config-0:5.7.19-6.el7.x86_64",
          "7Workstation-RHSCL-2.4:rh-mysql57-mysql-debuginfo-0:5.7.19-6.el7.x86_64",
          "7Workstation-RHSCL-2.4:rh-mysql57-mysql-devel-0:5.7.19-6.el7.x86_64",
          "7Workstation-RHSCL-2.4:rh-mysql57-mysql-errmsg-0:5.7.19-6.el7.x86_64",
          "7Workstation-RHSCL-2.4:rh-mysql57-mysql-server-0:5.7.19-6.el7.x86_64",
          "7Workstation-RHSCL-2.4:rh-mysql57-mysql-test-0:5.7.19-6.el7.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2017-3647"
        },
        {
          "category": "external",
          "summary": "RHBZ#1472703",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1472703"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2017-3647",
          "url": "https://www.cve.org/CVERecord?id=CVE-2017-3647"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2017-3647",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2017-3647"
        },
        {
          "category": "external",
          "summary": "http://www.oracle.com/technetwork/security-advisory/cpujul2017-3236622.html#AppendixMSQL",
          "url": "http://www.oracle.com/technetwork/security-advisory/cpujul2017-3236622.html#AppendixMSQL"
        }
      ],
      "release_date": "2017-07-19T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2017-10-12T07:53:15+00:00",
          "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAfter installing this update, the MySQL server daemon (mysqld) will be restarted automatically.",
          "product_ids": [
            "6Server-RHSCL-2.4-6.7.Z:rh-mysql57-mysql-0:5.7.19-6.el6.src",
            "6Server-RHSCL-2.4-6.7.Z:rh-mysql57-mysql-0:5.7.19-6.el6.x86_64",
            "6Server-RHSCL-2.4-6.7.Z:rh-mysql57-mysql-common-0:5.7.19-6.el6.x86_64",
            "6Server-RHSCL-2.4-6.7.Z:rh-mysql57-mysql-config-0:5.7.19-6.el6.x86_64",
            "6Server-RHSCL-2.4-6.7.Z:rh-mysql57-mysql-debuginfo-0:5.7.19-6.el6.x86_64",
            "6Server-RHSCL-2.4-6.7.Z:rh-mysql57-mysql-devel-0:5.7.19-6.el6.x86_64",
            "6Server-RHSCL-2.4-6.7.Z:rh-mysql57-mysql-errmsg-0:5.7.19-6.el6.x86_64",
            "6Server-RHSCL-2.4-6.7.Z:rh-mysql57-mysql-server-0:5.7.19-6.el6.x86_64",
            "6Server-RHSCL-2.4-6.7.Z:rh-mysql57-mysql-test-0:5.7.19-6.el6.x86_64",
            "6Server-RHSCL-2.4:rh-mysql57-mysql-0:5.7.19-6.el6.src",
            "6Server-RHSCL-2.4:rh-mysql57-mysql-0:5.7.19-6.el6.x86_64",
            "6Server-RHSCL-2.4:rh-mysql57-mysql-common-0:5.7.19-6.el6.x86_64",
            "6Server-RHSCL-2.4:rh-mysql57-mysql-config-0:5.7.19-6.el6.x86_64",
            "6Server-RHSCL-2.4:rh-mysql57-mysql-debuginfo-0:5.7.19-6.el6.x86_64",
            "6Server-RHSCL-2.4:rh-mysql57-mysql-devel-0:5.7.19-6.el6.x86_64",
            "6Server-RHSCL-2.4:rh-mysql57-mysql-errmsg-0:5.7.19-6.el6.x86_64",
            "6Server-RHSCL-2.4:rh-mysql57-mysql-server-0:5.7.19-6.el6.x86_64",
            "6Server-RHSCL-2.4:rh-mysql57-mysql-test-0:5.7.19-6.el6.x86_64",
            "6Workstation-RHSCL-2.4:rh-mysql57-mysql-0:5.7.19-6.el6.src",
            "6Workstation-RHSCL-2.4:rh-mysql57-mysql-0:5.7.19-6.el6.x86_64",
            "6Workstation-RHSCL-2.4:rh-mysql57-mysql-common-0:5.7.19-6.el6.x86_64",
            "6Workstation-RHSCL-2.4:rh-mysql57-mysql-config-0:5.7.19-6.el6.x86_64",
            "6Workstation-RHSCL-2.4:rh-mysql57-mysql-debuginfo-0:5.7.19-6.el6.x86_64",
            "6Workstation-RHSCL-2.4:rh-mysql57-mysql-devel-0:5.7.19-6.el6.x86_64",
            "6Workstation-RHSCL-2.4:rh-mysql57-mysql-errmsg-0:5.7.19-6.el6.x86_64",
            "6Workstation-RHSCL-2.4:rh-mysql57-mysql-server-0:5.7.19-6.el6.x86_64",
            "6Workstation-RHSCL-2.4:rh-mysql57-mysql-test-0:5.7.19-6.el6.x86_64",
            "7Server-RHSCL-2.4-7.3.Z:rh-mysql57-mysql-0:5.7.19-6.el7.src",
            "7Server-RHSCL-2.4-7.3.Z:rh-mysql57-mysql-0:5.7.19-6.el7.x86_64",
            "7Server-RHSCL-2.4-7.3.Z:rh-mysql57-mysql-common-0:5.7.19-6.el7.x86_64",
            "7Server-RHSCL-2.4-7.3.Z:rh-mysql57-mysql-config-0:5.7.19-6.el7.x86_64",
            "7Server-RHSCL-2.4-7.3.Z:rh-mysql57-mysql-debuginfo-0:5.7.19-6.el7.x86_64",
            "7Server-RHSCL-2.4-7.3.Z:rh-mysql57-mysql-devel-0:5.7.19-6.el7.x86_64",
            "7Server-RHSCL-2.4-7.3.Z:rh-mysql57-mysql-errmsg-0:5.7.19-6.el7.x86_64",
            "7Server-RHSCL-2.4-7.3.Z:rh-mysql57-mysql-server-0:5.7.19-6.el7.x86_64",
            "7Server-RHSCL-2.4-7.3.Z:rh-mysql57-mysql-test-0:5.7.19-6.el7.x86_64",
            "7Server-RHSCL-2.4:rh-mysql57-mysql-0:5.7.19-6.el7.src",
            "7Server-RHSCL-2.4:rh-mysql57-mysql-0:5.7.19-6.el7.x86_64",
            "7Server-RHSCL-2.4:rh-mysql57-mysql-common-0:5.7.19-6.el7.x86_64",
            "7Server-RHSCL-2.4:rh-mysql57-mysql-config-0:5.7.19-6.el7.x86_64",
            "7Server-RHSCL-2.4:rh-mysql57-mysql-debuginfo-0:5.7.19-6.el7.x86_64",
            "7Server-RHSCL-2.4:rh-mysql57-mysql-devel-0:5.7.19-6.el7.x86_64",
            "7Server-RHSCL-2.4:rh-mysql57-mysql-errmsg-0:5.7.19-6.el7.x86_64",
            "7Server-RHSCL-2.4:rh-mysql57-mysql-server-0:5.7.19-6.el7.x86_64",
            "7Server-RHSCL-2.4:rh-mysql57-mysql-test-0:5.7.19-6.el7.x86_64",
            "7Workstation-RHSCL-2.4:rh-mysql57-mysql-0:5.7.19-6.el7.src",
            "7Workstation-RHSCL-2.4:rh-mysql57-mysql-0:5.7.19-6.el7.x86_64",
            "7Workstation-RHSCL-2.4:rh-mysql57-mysql-common-0:5.7.19-6.el7.x86_64",
            "7Workstation-RHSCL-2.4:rh-mysql57-mysql-config-0:5.7.19-6.el7.x86_64",
            "7Workstation-RHSCL-2.4:rh-mysql57-mysql-debuginfo-0:5.7.19-6.el7.x86_64",
            "7Workstation-RHSCL-2.4:rh-mysql57-mysql-devel-0:5.7.19-6.el7.x86_64",
            "7Workstation-RHSCL-2.4:rh-mysql57-mysql-errmsg-0:5.7.19-6.el7.x86_64",
            "7Workstation-RHSCL-2.4:rh-mysql57-mysql-server-0:5.7.19-6.el7.x86_64",
            "7Workstation-RHSCL-2.4:rh-mysql57-mysql-test-0:5.7.19-6.el7.x86_64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2017:2886"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "HIGH",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 4.4,
            "baseSeverity": "MEDIUM",
            "confidentialityImpact": "NONE",
            "integrityImpact": "NONE",
            "privilegesRequired": "HIGH",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.0/AV:N/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.0"
          },
          "products": [
            "6Server-RHSCL-2.4-6.7.Z:rh-mysql57-mysql-0:5.7.19-6.el6.src",
            "6Server-RHSCL-2.4-6.7.Z:rh-mysql57-mysql-0:5.7.19-6.el6.x86_64",
            "6Server-RHSCL-2.4-6.7.Z:rh-mysql57-mysql-common-0:5.7.19-6.el6.x86_64",
            "6Server-RHSCL-2.4-6.7.Z:rh-mysql57-mysql-config-0:5.7.19-6.el6.x86_64",
            "6Server-RHSCL-2.4-6.7.Z:rh-mysql57-mysql-debuginfo-0:5.7.19-6.el6.x86_64",
            "6Server-RHSCL-2.4-6.7.Z:rh-mysql57-mysql-devel-0:5.7.19-6.el6.x86_64",
            "6Server-RHSCL-2.4-6.7.Z:rh-mysql57-mysql-errmsg-0:5.7.19-6.el6.x86_64",
            "6Server-RHSCL-2.4-6.7.Z:rh-mysql57-mysql-server-0:5.7.19-6.el6.x86_64",
            "6Server-RHSCL-2.4-6.7.Z:rh-mysql57-mysql-test-0:5.7.19-6.el6.x86_64",
            "6Server-RHSCL-2.4:rh-mysql57-mysql-0:5.7.19-6.el6.src",
            "6Server-RHSCL-2.4:rh-mysql57-mysql-0:5.7.19-6.el6.x86_64",
            "6Server-RHSCL-2.4:rh-mysql57-mysql-common-0:5.7.19-6.el6.x86_64",
            "6Server-RHSCL-2.4:rh-mysql57-mysql-config-0:5.7.19-6.el6.x86_64",
            "6Server-RHSCL-2.4:rh-mysql57-mysql-debuginfo-0:5.7.19-6.el6.x86_64",
            "6Server-RHSCL-2.4:rh-mysql57-mysql-devel-0:5.7.19-6.el6.x86_64",
            "6Server-RHSCL-2.4:rh-mysql57-mysql-errmsg-0:5.7.19-6.el6.x86_64",
            "6Server-RHSCL-2.4:rh-mysql57-mysql-server-0:5.7.19-6.el6.x86_64",
            "6Server-RHSCL-2.4:rh-mysql57-mysql-test-0:5.7.19-6.el6.x86_64",
            "6Workstation-RHSCL-2.4:rh-mysql57-mysql-0:5.7.19-6.el6.src",
            "6Workstation-RHSCL-2.4:rh-mysql57-mysql-0:5.7.19-6.el6.x86_64",
            "6Workstation-RHSCL-2.4:rh-mysql57-mysql-common-0:5.7.19-6.el6.x86_64",
            "6Workstation-RHSCL-2.4:rh-mysql57-mysql-config-0:5.7.19-6.el6.x86_64",
            "6Workstation-RHSCL-2.4:rh-mysql57-mysql-debuginfo-0:5.7.19-6.el6.x86_64",
            "6Workstation-RHSCL-2.4:rh-mysql57-mysql-devel-0:5.7.19-6.el6.x86_64",
            "6Workstation-RHSCL-2.4:rh-mysql57-mysql-errmsg-0:5.7.19-6.el6.x86_64",
            "6Workstation-RHSCL-2.4:rh-mysql57-mysql-server-0:5.7.19-6.el6.x86_64",
            "6Workstation-RHSCL-2.4:rh-mysql57-mysql-test-0:5.7.19-6.el6.x86_64",
            "7Server-RHSCL-2.4-7.3.Z:rh-mysql57-mysql-0:5.7.19-6.el7.src",
            "7Server-RHSCL-2.4-7.3.Z:rh-mysql57-mysql-0:5.7.19-6.el7.x86_64",
            "7Server-RHSCL-2.4-7.3.Z:rh-mysql57-mysql-common-0:5.7.19-6.el7.x86_64",
            "7Server-RHSCL-2.4-7.3.Z:rh-mysql57-mysql-config-0:5.7.19-6.el7.x86_64",
            "7Server-RHSCL-2.4-7.3.Z:rh-mysql57-mysql-debuginfo-0:5.7.19-6.el7.x86_64",
            "7Server-RHSCL-2.4-7.3.Z:rh-mysql57-mysql-devel-0:5.7.19-6.el7.x86_64",
            "7Server-RHSCL-2.4-7.3.Z:rh-mysql57-mysql-errmsg-0:5.7.19-6.el7.x86_64",
            "7Server-RHSCL-2.4-7.3.Z:rh-mysql57-mysql-server-0:5.7.19-6.el7.x86_64",
            "7Server-RHSCL-2.4-7.3.Z:rh-mysql57-mysql-test-0:5.7.19-6.el7.x86_64",
            "7Server-RHSCL-2.4:rh-mysql57-mysql-0:5.7.19-6.el7.src",
            "7Server-RHSCL-2.4:rh-mysql57-mysql-0:5.7.19-6.el7.x86_64",
            "7Server-RHSCL-2.4:rh-mysql57-mysql-common-0:5.7.19-6.el7.x86_64",
            "7Server-RHSCL-2.4:rh-mysql57-mysql-config-0:5.7.19-6.el7.x86_64",
            "7Server-RHSCL-2.4:rh-mysql57-mysql-debuginfo-0:5.7.19-6.el7.x86_64",
            "7Server-RHSCL-2.4:rh-mysql57-mysql-devel-0:5.7.19-6.el7.x86_64",
            "7Server-RHSCL-2.4:rh-mysql57-mysql-errmsg-0:5.7.19-6.el7.x86_64",
            "7Server-RHSCL-2.4:rh-mysql57-mysql-server-0:5.7.19-6.el7.x86_64",
            "7Server-RHSCL-2.4:rh-mysql57-mysql-test-0:5.7.19-6.el7.x86_64",
            "7Workstation-RHSCL-2.4:rh-mysql57-mysql-0:5.7.19-6.el7.src",
            "7Workstation-RHSCL-2.4:rh-mysql57-mysql-0:5.7.19-6.el7.x86_64",
            "7Workstation-RHSCL-2.4:rh-mysql57-mysql-common-0:5.7.19-6.el7.x86_64",
            "7Workstation-RHSCL-2.4:rh-mysql57-mysql-config-0:5.7.19-6.el7.x86_64",
            "7Workstation-RHSCL-2.4:rh-mysql57-mysql-debuginfo-0:5.7.19-6.el7.x86_64",
            "7Workstation-RHSCL-2.4:rh-mysql57-mysql-devel-0:5.7.19-6.el7.x86_64",
            "7Workstation-RHSCL-2.4:rh-mysql57-mysql-errmsg-0:5.7.19-6.el7.x86_64",
            "7Workstation-RHSCL-2.4:rh-mysql57-mysql-server-0:5.7.19-6.el7.x86_64",
            "7Workstation-RHSCL-2.4:rh-mysql57-mysql-test-0:5.7.19-6.el7.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Moderate"
        }
      ],
      "title": "mysql: Server: Replication unspecified vulnerability (CPU Jul 2017)"
    },
    {
      "cve": "CVE-2017-3648",
      "discovery_date": "2017-07-19T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "1472704"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Charsets). Supported versions that are affected are 5.5.56 and earlier, 5.6.36 and earlier and 5.7.18 and earlier. Difficult to exploit vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.0 Base Score 4.4 (Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:H).",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "mysql: Server: Charsets unspecified vulnerability (CPU Jul 2017)",
          "title": "Vulnerability summary"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "6Server-RHSCL-2.4-6.7.Z:rh-mysql57-mysql-0:5.7.19-6.el6.src",
          "6Server-RHSCL-2.4-6.7.Z:rh-mysql57-mysql-0:5.7.19-6.el6.x86_64",
          "6Server-RHSCL-2.4-6.7.Z:rh-mysql57-mysql-common-0:5.7.19-6.el6.x86_64",
          "6Server-RHSCL-2.4-6.7.Z:rh-mysql57-mysql-config-0:5.7.19-6.el6.x86_64",
          "6Server-RHSCL-2.4-6.7.Z:rh-mysql57-mysql-debuginfo-0:5.7.19-6.el6.x86_64",
          "6Server-RHSCL-2.4-6.7.Z:rh-mysql57-mysql-devel-0:5.7.19-6.el6.x86_64",
          "6Server-RHSCL-2.4-6.7.Z:rh-mysql57-mysql-errmsg-0:5.7.19-6.el6.x86_64",
          "6Server-RHSCL-2.4-6.7.Z:rh-mysql57-mysql-server-0:5.7.19-6.el6.x86_64",
          "6Server-RHSCL-2.4-6.7.Z:rh-mysql57-mysql-test-0:5.7.19-6.el6.x86_64",
          "6Server-RHSCL-2.4:rh-mysql57-mysql-0:5.7.19-6.el6.src",
          "6Server-RHSCL-2.4:rh-mysql57-mysql-0:5.7.19-6.el6.x86_64",
          "6Server-RHSCL-2.4:rh-mysql57-mysql-common-0:5.7.19-6.el6.x86_64",
          "6Server-RHSCL-2.4:rh-mysql57-mysql-config-0:5.7.19-6.el6.x86_64",
          "6Server-RHSCL-2.4:rh-mysql57-mysql-debuginfo-0:5.7.19-6.el6.x86_64",
          "6Server-RHSCL-2.4:rh-mysql57-mysql-devel-0:5.7.19-6.el6.x86_64",
          "6Server-RHSCL-2.4:rh-mysql57-mysql-errmsg-0:5.7.19-6.el6.x86_64",
          "6Server-RHSCL-2.4:rh-mysql57-mysql-server-0:5.7.19-6.el6.x86_64",
          "6Server-RHSCL-2.4:rh-mysql57-mysql-test-0:5.7.19-6.el6.x86_64",
          "6Workstation-RHSCL-2.4:rh-mysql57-mysql-0:5.7.19-6.el6.src",
          "6Workstation-RHSCL-2.4:rh-mysql57-mysql-0:5.7.19-6.el6.x86_64",
          "6Workstation-RHSCL-2.4:rh-mysql57-mysql-common-0:5.7.19-6.el6.x86_64",
          "6Workstation-RHSCL-2.4:rh-mysql57-mysql-config-0:5.7.19-6.el6.x86_64",
          "6Workstation-RHSCL-2.4:rh-mysql57-mysql-debuginfo-0:5.7.19-6.el6.x86_64",
          "6Workstation-RHSCL-2.4:rh-mysql57-mysql-devel-0:5.7.19-6.el6.x86_64",
          "6Workstation-RHSCL-2.4:rh-mysql57-mysql-errmsg-0:5.7.19-6.el6.x86_64",
          "6Workstation-RHSCL-2.4:rh-mysql57-mysql-server-0:5.7.19-6.el6.x86_64",
          "6Workstation-RHSCL-2.4:rh-mysql57-mysql-test-0:5.7.19-6.el6.x86_64",
          "7Server-RHSCL-2.4-7.3.Z:rh-mysql57-mysql-0:5.7.19-6.el7.src",
          "7Server-RHSCL-2.4-7.3.Z:rh-mysql57-mysql-0:5.7.19-6.el7.x86_64",
          "7Server-RHSCL-2.4-7.3.Z:rh-mysql57-mysql-common-0:5.7.19-6.el7.x86_64",
          "7Server-RHSCL-2.4-7.3.Z:rh-mysql57-mysql-config-0:5.7.19-6.el7.x86_64",
          "7Server-RHSCL-2.4-7.3.Z:rh-mysql57-mysql-debuginfo-0:5.7.19-6.el7.x86_64",
          "7Server-RHSCL-2.4-7.3.Z:rh-mysql57-mysql-devel-0:5.7.19-6.el7.x86_64",
          "7Server-RHSCL-2.4-7.3.Z:rh-mysql57-mysql-errmsg-0:5.7.19-6.el7.x86_64",
          "7Server-RHSCL-2.4-7.3.Z:rh-mysql57-mysql-server-0:5.7.19-6.el7.x86_64",
          "7Server-RHSCL-2.4-7.3.Z:rh-mysql57-mysql-test-0:5.7.19-6.el7.x86_64",
          "7Server-RHSCL-2.4:rh-mysql57-mysql-0:5.7.19-6.el7.src",
          "7Server-RHSCL-2.4:rh-mysql57-mysql-0:5.7.19-6.el7.x86_64",
          "7Server-RHSCL-2.4:rh-mysql57-mysql-common-0:5.7.19-6.el7.x86_64",
          "7Server-RHSCL-2.4:rh-mysql57-mysql-config-0:5.7.19-6.el7.x86_64",
          "7Server-RHSCL-2.4:rh-mysql57-mysql-debuginfo-0:5.7.19-6.el7.x86_64",
          "7Server-RHSCL-2.4:rh-mysql57-mysql-devel-0:5.7.19-6.el7.x86_64",
          "7Server-RHSCL-2.4:rh-mysql57-mysql-errmsg-0:5.7.19-6.el7.x86_64",
          "7Server-RHSCL-2.4:rh-mysql57-mysql-server-0:5.7.19-6.el7.x86_64",
          "7Server-RHSCL-2.4:rh-mysql57-mysql-test-0:5.7.19-6.el7.x86_64",
          "7Workstation-RHSCL-2.4:rh-mysql57-mysql-0:5.7.19-6.el7.src",
          "7Workstation-RHSCL-2.4:rh-mysql57-mysql-0:5.7.19-6.el7.x86_64",
          "7Workstation-RHSCL-2.4:rh-mysql57-mysql-common-0:5.7.19-6.el7.x86_64",
          "7Workstation-RHSCL-2.4:rh-mysql57-mysql-config-0:5.7.19-6.el7.x86_64",
          "7Workstation-RHSCL-2.4:rh-mysql57-mysql-debuginfo-0:5.7.19-6.el7.x86_64",
          "7Workstation-RHSCL-2.4:rh-mysql57-mysql-devel-0:5.7.19-6.el7.x86_64",
          "7Workstation-RHSCL-2.4:rh-mysql57-mysql-errmsg-0:5.7.19-6.el7.x86_64",
          "7Workstation-RHSCL-2.4:rh-mysql57-mysql-server-0:5.7.19-6.el7.x86_64",
          "7Workstation-RHSCL-2.4:rh-mysql57-mysql-test-0:5.7.19-6.el7.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2017-3648"
        },
        {
          "category": "external",
          "summary": "RHBZ#1472704",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1472704"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2017-3648",
          "url": "https://www.cve.org/CVERecord?id=CVE-2017-3648"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2017-3648",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2017-3648"
        },
        {
          "category": "external",
          "summary": "http://www.oracle.com/technetwork/security-advisory/cpujul2017-3236622.html#AppendixMSQL",
          "url": "http://www.oracle.com/technetwork/security-advisory/cpujul2017-3236622.html#AppendixMSQL"
        }
      ],
      "release_date": "2017-07-19T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2017-10-12T07:53:15+00:00",
          "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAfter installing this update, the MySQL server daemon (mysqld) will be restarted automatically.",
          "product_ids": [
            "6Server-RHSCL-2.4-6.7.Z:rh-mysql57-mysql-0:5.7.19-6.el6.src",
            "6Server-RHSCL-2.4-6.7.Z:rh-mysql57-mysql-0:5.7.19-6.el6.x86_64",
            "6Server-RHSCL-2.4-6.7.Z:rh-mysql57-mysql-common-0:5.7.19-6.el6.x86_64",
            "6Server-RHSCL-2.4-6.7.Z:rh-mysql57-mysql-config-0:5.7.19-6.el6.x86_64",
            "6Server-RHSCL-2.4-6.7.Z:rh-mysql57-mysql-debuginfo-0:5.7.19-6.el6.x86_64",
            "6Server-RHSCL-2.4-6.7.Z:rh-mysql57-mysql-devel-0:5.7.19-6.el6.x86_64",
            "6Server-RHSCL-2.4-6.7.Z:rh-mysql57-mysql-errmsg-0:5.7.19-6.el6.x86_64",
            "6Server-RHSCL-2.4-6.7.Z:rh-mysql57-mysql-server-0:5.7.19-6.el6.x86_64",
            "6Server-RHSCL-2.4-6.7.Z:rh-mysql57-mysql-test-0:5.7.19-6.el6.x86_64",
            "6Server-RHSCL-2.4:rh-mysql57-mysql-0:5.7.19-6.el6.src",
            "6Server-RHSCL-2.4:rh-mysql57-mysql-0:5.7.19-6.el6.x86_64",
            "6Server-RHSCL-2.4:rh-mysql57-mysql-common-0:5.7.19-6.el6.x86_64",
            "6Server-RHSCL-2.4:rh-mysql57-mysql-config-0:5.7.19-6.el6.x86_64",
            "6Server-RHSCL-2.4:rh-mysql57-mysql-debuginfo-0:5.7.19-6.el6.x86_64",
            "6Server-RHSCL-2.4:rh-mysql57-mysql-devel-0:5.7.19-6.el6.x86_64",
            "6Server-RHSCL-2.4:rh-mysql57-mysql-errmsg-0:5.7.19-6.el6.x86_64",
            "6Server-RHSCL-2.4:rh-mysql57-mysql-server-0:5.7.19-6.el6.x86_64",
            "6Server-RHSCL-2.4:rh-mysql57-mysql-test-0:5.7.19-6.el6.x86_64",
            "6Workstation-RHSCL-2.4:rh-mysql57-mysql-0:5.7.19-6.el6.src",
            "6Workstation-RHSCL-2.4:rh-mysql57-mysql-0:5.7.19-6.el6.x86_64",
            "6Workstation-RHSCL-2.4:rh-mysql57-mysql-common-0:5.7.19-6.el6.x86_64",
            "6Workstation-RHSCL-2.4:rh-mysql57-mysql-config-0:5.7.19-6.el6.x86_64",
            "6Workstation-RHSCL-2.4:rh-mysql57-mysql-debuginfo-0:5.7.19-6.el6.x86_64",
            "6Workstation-RHSCL-2.4:rh-mysql57-mysql-devel-0:5.7.19-6.el6.x86_64",
            "6Workstation-RHSCL-2.4:rh-mysql57-mysql-errmsg-0:5.7.19-6.el6.x86_64",
            "6Workstation-RHSCL-2.4:rh-mysql57-mysql-server-0:5.7.19-6.el6.x86_64",
            "6Workstation-RHSCL-2.4:rh-mysql57-mysql-test-0:5.7.19-6.el6.x86_64",
            "7Server-RHSCL-2.4-7.3.Z:rh-mysql57-mysql-0:5.7.19-6.el7.src",
            "7Server-RHSCL-2.4-7.3.Z:rh-mysql57-mysql-0:5.7.19-6.el7.x86_64",
            "7Server-RHSCL-2.4-7.3.Z:rh-mysql57-mysql-common-0:5.7.19-6.el7.x86_64",
            "7Server-RHSCL-2.4-7.3.Z:rh-mysql57-mysql-config-0:5.7.19-6.el7.x86_64",
            "7Server-RHSCL-2.4-7.3.Z:rh-mysql57-mysql-debuginfo-0:5.7.19-6.el7.x86_64",
            "7Server-RHSCL-2.4-7.3.Z:rh-mysql57-mysql-devel-0:5.7.19-6.el7.x86_64",
            "7Server-RHSCL-2.4-7.3.Z:rh-mysql57-mysql-errmsg-0:5.7.19-6.el7.x86_64",
            "7Server-RHSCL-2.4-7.3.Z:rh-mysql57-mysql-server-0:5.7.19-6.el7.x86_64",
            "7Server-RHSCL-2.4-7.3.Z:rh-mysql57-mysql-test-0:5.7.19-6.el7.x86_64",
            "7Server-RHSCL-2.4:rh-mysql57-mysql-0:5.7.19-6.el7.src",
            "7Server-RHSCL-2.4:rh-mysql57-mysql-0:5.7.19-6.el7.x86_64",
            "7Server-RHSCL-2.4:rh-mysql57-mysql-common-0:5.7.19-6.el7.x86_64",
            "7Server-RHSCL-2.4:rh-mysql57-mysql-config-0:5.7.19-6.el7.x86_64",
            "7Server-RHSCL-2.4:rh-mysql57-mysql-debuginfo-0:5.7.19-6.el7.x86_64",
            "7Server-RHSCL-2.4:rh-mysql57-mysql-devel-0:5.7.19-6.el7.x86_64",
            "7Server-RHSCL-2.4:rh-mysql57-mysql-errmsg-0:5.7.19-6.el7.x86_64",
            "7Server-RHSCL-2.4:rh-mysql57-mysql-server-0:5.7.19-6.el7.x86_64",
            "7Server-RHSCL-2.4:rh-mysql57-mysql-test-0:5.7.19-6.el7.x86_64",
            "7Workstation-RHSCL-2.4:rh-mysql57-mysql-0:5.7.19-6.el7.src",
            "7Workstation-RHSCL-2.4:rh-mysql57-mysql-0:5.7.19-6.el7.x86_64",
            "7Workstation-RHSCL-2.4:rh-mysql57-mysql-common-0:5.7.19-6.el7.x86_64",
            "7Workstation-RHSCL-2.4:rh-mysql57-mysql-config-0:5.7.19-6.el7.x86_64",
            "7Workstation-RHSCL-2.4:rh-mysql57-mysql-debuginfo-0:5.7.19-6.el7.x86_64",
            "7Workstation-RHSCL-2.4:rh-mysql57-mysql-devel-0:5.7.19-6.el7.x86_64",
            "7Workstation-RHSCL-2.4:rh-mysql57-mysql-errmsg-0:5.7.19-6.el7.x86_64",
            "7Workstation-RHSCL-2.4:rh-mysql57-mysql-server-0:5.7.19-6.el7.x86_64",
            "7Workstation-RHSCL-2.4:rh-mysql57-mysql-test-0:5.7.19-6.el7.x86_64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2017:2886"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "HIGH",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 4.4,
            "baseSeverity": "MEDIUM",
            "confidentialityImpact": "NONE",
            "integrityImpact": "NONE",
            "privilegesRequired": "HIGH",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.0/AV:N/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.0"
          },
          "products": [
            "6Server-RHSCL-2.4-6.7.Z:rh-mysql57-mysql-0:5.7.19-6.el6.src",
            "6Server-RHSCL-2.4-6.7.Z:rh-mysql57-mysql-0:5.7.19-6.el6.x86_64",
            "6Server-RHSCL-2.4-6.7.Z:rh-mysql57-mysql-common-0:5.7.19-6.el6.x86_64",
            "6Server-RHSCL-2.4-6.7.Z:rh-mysql57-mysql-config-0:5.7.19-6.el6.x86_64",
            "6Server-RHSCL-2.4-6.7.Z:rh-mysql57-mysql-debuginfo-0:5.7.19-6.el6.x86_64",
            "6Server-RHSCL-2.4-6.7.Z:rh-mysql57-mysql-devel-0:5.7.19-6.el6.x86_64",
            "6Server-RHSCL-2.4-6.7.Z:rh-mysql57-mysql-errmsg-0:5.7.19-6.el6.x86_64",
            "6Server-RHSCL-2.4-6.7.Z:rh-mysql57-mysql-server-0:5.7.19-6.el6.x86_64",
            "6Server-RHSCL-2.4-6.7.Z:rh-mysql57-mysql-test-0:5.7.19-6.el6.x86_64",
            "6Server-RHSCL-2.4:rh-mysql57-mysql-0:5.7.19-6.el6.src",
            "6Server-RHSCL-2.4:rh-mysql57-mysql-0:5.7.19-6.el6.x86_64",
            "6Server-RHSCL-2.4:rh-mysql57-mysql-common-0:5.7.19-6.el6.x86_64",
            "6Server-RHSCL-2.4:rh-mysql57-mysql-config-0:5.7.19-6.el6.x86_64",
            "6Server-RHSCL-2.4:rh-mysql57-mysql-debuginfo-0:5.7.19-6.el6.x86_64",
            "6Server-RHSCL-2.4:rh-mysql57-mysql-devel-0:5.7.19-6.el6.x86_64",
            "6Server-RHSCL-2.4:rh-mysql57-mysql-errmsg-0:5.7.19-6.el6.x86_64",
            "6Server-RHSCL-2.4:rh-mysql57-mysql-server-0:5.7.19-6.el6.x86_64",
            "6Server-RHSCL-2.4:rh-mysql57-mysql-test-0:5.7.19-6.el6.x86_64",
            "6Workstation-RHSCL-2.4:rh-mysql57-mysql-0:5.7.19-6.el6.src",
            "6Workstation-RHSCL-2.4:rh-mysql57-mysql-0:5.7.19-6.el6.x86_64",
            "6Workstation-RHSCL-2.4:rh-mysql57-mysql-common-0:5.7.19-6.el6.x86_64",
            "6Workstation-RHSCL-2.4:rh-mysql57-mysql-config-0:5.7.19-6.el6.x86_64",
            "6Workstation-RHSCL-2.4:rh-mysql57-mysql-debuginfo-0:5.7.19-6.el6.x86_64",
            "6Workstation-RHSCL-2.4:rh-mysql57-mysql-devel-0:5.7.19-6.el6.x86_64",
            "6Workstation-RHSCL-2.4:rh-mysql57-mysql-errmsg-0:5.7.19-6.el6.x86_64",
            "6Workstation-RHSCL-2.4:rh-mysql57-mysql-server-0:5.7.19-6.el6.x86_64",
            "6Workstation-RHSCL-2.4:rh-mysql57-mysql-test-0:5.7.19-6.el6.x86_64",
            "7Server-RHSCL-2.4-7.3.Z:rh-mysql57-mysql-0:5.7.19-6.el7.src",
            "7Server-RHSCL-2.4-7.3.Z:rh-mysql57-mysql-0:5.7.19-6.el7.x86_64",
            "7Server-RHSCL-2.4-7.3.Z:rh-mysql57-mysql-common-0:5.7.19-6.el7.x86_64",
            "7Server-RHSCL-2.4-7.3.Z:rh-mysql57-mysql-config-0:5.7.19-6.el7.x86_64",
            "7Server-RHSCL-2.4-7.3.Z:rh-mysql57-mysql-debuginfo-0:5.7.19-6.el7.x86_64",
            "7Server-RHSCL-2.4-7.3.Z:rh-mysql57-mysql-devel-0:5.7.19-6.el7.x86_64",
            "7Server-RHSCL-2.4-7.3.Z:rh-mysql57-mysql-errmsg-0:5.7.19-6.el7.x86_64",
            "7Server-RHSCL-2.4-7.3.Z:rh-mysql57-mysql-server-0:5.7.19-6.el7.x86_64",
            "7Server-RHSCL-2.4-7.3.Z:rh-mysql57-mysql-test-0:5.7.19-6.el7.x86_64",
            "7Server-RHSCL-2.4:rh-mysql57-mysql-0:5.7.19-6.el7.src",
            "7Server-RHSCL-2.4:rh-mysql57-mysql-0:5.7.19-6.el7.x86_64",
            "7Server-RHSCL-2.4:rh-mysql57-mysql-common-0:5.7.19-6.el7.x86_64",
            "7Server-RHSCL-2.4:rh-mysql57-mysql-config-0:5.7.19-6.el7.x86_64",
            "7Server-RHSCL-2.4:rh-mysql57-mysql-debuginfo-0:5.7.19-6.el7.x86_64",
            "7Server-RHSCL-2.4:rh-mysql57-mysql-devel-0:5.7.19-6.el7.x86_64",
            "7Server-RHSCL-2.4:rh-mysql57-mysql-errmsg-0:5.7.19-6.el7.x86_64",
            "7Server-RHSCL-2.4:rh-mysql57-mysql-server-0:5.7.19-6.el7.x86_64",
            "7Server-RHSCL-2.4:rh-mysql57-mysql-test-0:5.7.19-6.el7.x86_64",
            "7Workstation-RHSCL-2.4:rh-mysql57-mysql-0:5.7.19-6.el7.src",
            "7Workstation-RHSCL-2.4:rh-mysql57-mysql-0:5.7.19-6.el7.x86_64",
            "7Workstation-RHSCL-2.4:rh-mysql57-mysql-common-0:5.7.19-6.el7.x86_64",
            "7Workstation-RHSCL-2.4:rh-mysql57-mysql-config-0:5.7.19-6.el7.x86_64",
            "7Workstation-RHSCL-2.4:rh-mysql57-mysql-debuginfo-0:5.7.19-6.el7.x86_64",
            "7Workstation-RHSCL-2.4:rh-mysql57-mysql-devel-0:5.7.19-6.el7.x86_64",
            "7Workstation-RHSCL-2.4:rh-mysql57-mysql-errmsg-0:5.7.19-6.el7.x86_64",
            "7Workstation-RHSCL-2.4:rh-mysql57-mysql-server-0:5.7.19-6.el7.x86_64",
            "7Workstation-RHSCL-2.4:rh-mysql57-mysql-test-0:5.7.19-6.el7.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Moderate"
        }
      ],
      "title": "mysql: Server: Charsets unspecified vulnerability (CPU Jul 2017)"
    },
    {
      "cve": "CVE-2017-3649",
      "discovery_date": "2017-07-19T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "1472705"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Replication). Supported versions that are affected are 5.6.36 and earlier and 5.7.18 and earlier. Difficult to exploit vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.0 Base Score 4.4 (Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:H).",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "mysql: Server: Replication unspecified vulnerability (CPU Jul 2017)",
          "title": "Vulnerability summary"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "6Server-RHSCL-2.4-6.7.Z:rh-mysql57-mysql-0:5.7.19-6.el6.src",
          "6Server-RHSCL-2.4-6.7.Z:rh-mysql57-mysql-0:5.7.19-6.el6.x86_64",
          "6Server-RHSCL-2.4-6.7.Z:rh-mysql57-mysql-common-0:5.7.19-6.el6.x86_64",
          "6Server-RHSCL-2.4-6.7.Z:rh-mysql57-mysql-config-0:5.7.19-6.el6.x86_64",
          "6Server-RHSCL-2.4-6.7.Z:rh-mysql57-mysql-debuginfo-0:5.7.19-6.el6.x86_64",
          "6Server-RHSCL-2.4-6.7.Z:rh-mysql57-mysql-devel-0:5.7.19-6.el6.x86_64",
          "6Server-RHSCL-2.4-6.7.Z:rh-mysql57-mysql-errmsg-0:5.7.19-6.el6.x86_64",
          "6Server-RHSCL-2.4-6.7.Z:rh-mysql57-mysql-server-0:5.7.19-6.el6.x86_64",
          "6Server-RHSCL-2.4-6.7.Z:rh-mysql57-mysql-test-0:5.7.19-6.el6.x86_64",
          "6Server-RHSCL-2.4:rh-mysql57-mysql-0:5.7.19-6.el6.src",
          "6Server-RHSCL-2.4:rh-mysql57-mysql-0:5.7.19-6.el6.x86_64",
          "6Server-RHSCL-2.4:rh-mysql57-mysql-common-0:5.7.19-6.el6.x86_64",
          "6Server-RHSCL-2.4:rh-mysql57-mysql-config-0:5.7.19-6.el6.x86_64",
          "6Server-RHSCL-2.4:rh-mysql57-mysql-debuginfo-0:5.7.19-6.el6.x86_64",
          "6Server-RHSCL-2.4:rh-mysql57-mysql-devel-0:5.7.19-6.el6.x86_64",
          "6Server-RHSCL-2.4:rh-mysql57-mysql-errmsg-0:5.7.19-6.el6.x86_64",
          "6Server-RHSCL-2.4:rh-mysql57-mysql-server-0:5.7.19-6.el6.x86_64",
          "6Server-RHSCL-2.4:rh-mysql57-mysql-test-0:5.7.19-6.el6.x86_64",
          "6Workstation-RHSCL-2.4:rh-mysql57-mysql-0:5.7.19-6.el6.src",
          "6Workstation-RHSCL-2.4:rh-mysql57-mysql-0:5.7.19-6.el6.x86_64",
          "6Workstation-RHSCL-2.4:rh-mysql57-mysql-common-0:5.7.19-6.el6.x86_64",
          "6Workstation-RHSCL-2.4:rh-mysql57-mysql-config-0:5.7.19-6.el6.x86_64",
          "6Workstation-RHSCL-2.4:rh-mysql57-mysql-debuginfo-0:5.7.19-6.el6.x86_64",
          "6Workstation-RHSCL-2.4:rh-mysql57-mysql-devel-0:5.7.19-6.el6.x86_64",
          "6Workstation-RHSCL-2.4:rh-mysql57-mysql-errmsg-0:5.7.19-6.el6.x86_64",
          "6Workstation-RHSCL-2.4:rh-mysql57-mysql-server-0:5.7.19-6.el6.x86_64",
          "6Workstation-RHSCL-2.4:rh-mysql57-mysql-test-0:5.7.19-6.el6.x86_64",
          "7Server-RHSCL-2.4-7.3.Z:rh-mysql57-mysql-0:5.7.19-6.el7.src",
          "7Server-RHSCL-2.4-7.3.Z:rh-mysql57-mysql-0:5.7.19-6.el7.x86_64",
          "7Server-RHSCL-2.4-7.3.Z:rh-mysql57-mysql-common-0:5.7.19-6.el7.x86_64",
          "7Server-RHSCL-2.4-7.3.Z:rh-mysql57-mysql-config-0:5.7.19-6.el7.x86_64",
          "7Server-RHSCL-2.4-7.3.Z:rh-mysql57-mysql-debuginfo-0:5.7.19-6.el7.x86_64",
          "7Server-RHSCL-2.4-7.3.Z:rh-mysql57-mysql-devel-0:5.7.19-6.el7.x86_64",
          "7Server-RHSCL-2.4-7.3.Z:rh-mysql57-mysql-errmsg-0:5.7.19-6.el7.x86_64",
          "7Server-RHSCL-2.4-7.3.Z:rh-mysql57-mysql-server-0:5.7.19-6.el7.x86_64",
          "7Server-RHSCL-2.4-7.3.Z:rh-mysql57-mysql-test-0:5.7.19-6.el7.x86_64",
          "7Server-RHSCL-2.4:rh-mysql57-mysql-0:5.7.19-6.el7.src",
          "7Server-RHSCL-2.4:rh-mysql57-mysql-0:5.7.19-6.el7.x86_64",
          "7Server-RHSCL-2.4:rh-mysql57-mysql-common-0:5.7.19-6.el7.x86_64",
          "7Server-RHSCL-2.4:rh-mysql57-mysql-config-0:5.7.19-6.el7.x86_64",
          "7Server-RHSCL-2.4:rh-mysql57-mysql-debuginfo-0:5.7.19-6.el7.x86_64",
          "7Server-RHSCL-2.4:rh-mysql57-mysql-devel-0:5.7.19-6.el7.x86_64",
          "7Server-RHSCL-2.4:rh-mysql57-mysql-errmsg-0:5.7.19-6.el7.x86_64",
          "7Server-RHSCL-2.4:rh-mysql57-mysql-server-0:5.7.19-6.el7.x86_64",
          "7Server-RHSCL-2.4:rh-mysql57-mysql-test-0:5.7.19-6.el7.x86_64",
          "7Workstation-RHSCL-2.4:rh-mysql57-mysql-0:5.7.19-6.el7.src",
          "7Workstation-RHSCL-2.4:rh-mysql57-mysql-0:5.7.19-6.el7.x86_64",
          "7Workstation-RHSCL-2.4:rh-mysql57-mysql-common-0:5.7.19-6.el7.x86_64",
          "7Workstation-RHSCL-2.4:rh-mysql57-mysql-config-0:5.7.19-6.el7.x86_64",
          "7Workstation-RHSCL-2.4:rh-mysql57-mysql-debuginfo-0:5.7.19-6.el7.x86_64",
          "7Workstation-RHSCL-2.4:rh-mysql57-mysql-devel-0:5.7.19-6.el7.x86_64",
          "7Workstation-RHSCL-2.4:rh-mysql57-mysql-errmsg-0:5.7.19-6.el7.x86_64",
          "7Workstation-RHSCL-2.4:rh-mysql57-mysql-server-0:5.7.19-6.el7.x86_64",
          "7Workstation-RHSCL-2.4:rh-mysql57-mysql-test-0:5.7.19-6.el7.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2017-3649"
        },
        {
          "category": "external",
          "summary": "RHBZ#1472705",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1472705"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2017-3649",
          "url": "https://www.cve.org/CVERecord?id=CVE-2017-3649"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2017-3649",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2017-3649"
        },
        {
          "category": "external",
          "summary": "http://www.oracle.com/technetwork/security-advisory/cpujul2017-3236622.html#AppendixMSQL",
          "url": "http://www.oracle.com/technetwork/security-advisory/cpujul2017-3236622.html#AppendixMSQL"
        }
      ],
      "release_date": "2017-07-19T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2017-10-12T07:53:15+00:00",
          "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAfter installing this update, the MySQL server daemon (mysqld) will be restarted automatically.",
          "product_ids": [
            "6Server-RHSCL-2.4-6.7.Z:rh-mysql57-mysql-0:5.7.19-6.el6.src",
            "6Server-RHSCL-2.4-6.7.Z:rh-mysql57-mysql-0:5.7.19-6.el6.x86_64",
            "6Server-RHSCL-2.4-6.7.Z:rh-mysql57-mysql-common-0:5.7.19-6.el6.x86_64",
            "6Server-RHSCL-2.4-6.7.Z:rh-mysql57-mysql-config-0:5.7.19-6.el6.x86_64",
            "6Server-RHSCL-2.4-6.7.Z:rh-mysql57-mysql-debuginfo-0:5.7.19-6.el6.x86_64",
            "6Server-RHSCL-2.4-6.7.Z:rh-mysql57-mysql-devel-0:5.7.19-6.el6.x86_64",
            "6Server-RHSCL-2.4-6.7.Z:rh-mysql57-mysql-errmsg-0:5.7.19-6.el6.x86_64",
            "6Server-RHSCL-2.4-6.7.Z:rh-mysql57-mysql-server-0:5.7.19-6.el6.x86_64",
            "6Server-RHSCL-2.4-6.7.Z:rh-mysql57-mysql-test-0:5.7.19-6.el6.x86_64",
            "6Server-RHSCL-2.4:rh-mysql57-mysql-0:5.7.19-6.el6.src",
            "6Server-RHSCL-2.4:rh-mysql57-mysql-0:5.7.19-6.el6.x86_64",
            "6Server-RHSCL-2.4:rh-mysql57-mysql-common-0:5.7.19-6.el6.x86_64",
            "6Server-RHSCL-2.4:rh-mysql57-mysql-config-0:5.7.19-6.el6.x86_64",
            "6Server-RHSCL-2.4:rh-mysql57-mysql-debuginfo-0:5.7.19-6.el6.x86_64",
            "6Server-RHSCL-2.4:rh-mysql57-mysql-devel-0:5.7.19-6.el6.x86_64",
            "6Server-RHSCL-2.4:rh-mysql57-mysql-errmsg-0:5.7.19-6.el6.x86_64",
            "6Server-RHSCL-2.4:rh-mysql57-mysql-server-0:5.7.19-6.el6.x86_64",
            "6Server-RHSCL-2.4:rh-mysql57-mysql-test-0:5.7.19-6.el6.x86_64",
            "6Workstation-RHSCL-2.4:rh-mysql57-mysql-0:5.7.19-6.el6.src",
            "6Workstation-RHSCL-2.4:rh-mysql57-mysql-0:5.7.19-6.el6.x86_64",
            "6Workstation-RHSCL-2.4:rh-mysql57-mysql-common-0:5.7.19-6.el6.x86_64",
            "6Workstation-RHSCL-2.4:rh-mysql57-mysql-config-0:5.7.19-6.el6.x86_64",
            "6Workstation-RHSCL-2.4:rh-mysql57-mysql-debuginfo-0:5.7.19-6.el6.x86_64",
            "6Workstation-RHSCL-2.4:rh-mysql57-mysql-devel-0:5.7.19-6.el6.x86_64",
            "6Workstation-RHSCL-2.4:rh-mysql57-mysql-errmsg-0:5.7.19-6.el6.x86_64",
            "6Workstation-RHSCL-2.4:rh-mysql57-mysql-server-0:5.7.19-6.el6.x86_64",
            "6Workstation-RHSCL-2.4:rh-mysql57-mysql-test-0:5.7.19-6.el6.x86_64",
            "7Server-RHSCL-2.4-7.3.Z:rh-mysql57-mysql-0:5.7.19-6.el7.src",
            "7Server-RHSCL-2.4-7.3.Z:rh-mysql57-mysql-0:5.7.19-6.el7.x86_64",
            "7Server-RHSCL-2.4-7.3.Z:rh-mysql57-mysql-common-0:5.7.19-6.el7.x86_64",
            "7Server-RHSCL-2.4-7.3.Z:rh-mysql57-mysql-config-0:5.7.19-6.el7.x86_64",
            "7Server-RHSCL-2.4-7.3.Z:rh-mysql57-mysql-debuginfo-0:5.7.19-6.el7.x86_64",
            "7Server-RHSCL-2.4-7.3.Z:rh-mysql57-mysql-devel-0:5.7.19-6.el7.x86_64",
            "7Server-RHSCL-2.4-7.3.Z:rh-mysql57-mysql-errmsg-0:5.7.19-6.el7.x86_64",
            "7Server-RHSCL-2.4-7.3.Z:rh-mysql57-mysql-server-0:5.7.19-6.el7.x86_64",
            "7Server-RHSCL-2.4-7.3.Z:rh-mysql57-mysql-test-0:5.7.19-6.el7.x86_64",
            "7Server-RHSCL-2.4:rh-mysql57-mysql-0:5.7.19-6.el7.src",
            "7Server-RHSCL-2.4:rh-mysql57-mysql-0:5.7.19-6.el7.x86_64",
            "7Server-RHSCL-2.4:rh-mysql57-mysql-common-0:5.7.19-6.el7.x86_64",
            "7Server-RHSCL-2.4:rh-mysql57-mysql-config-0:5.7.19-6.el7.x86_64",
            "7Server-RHSCL-2.4:rh-mysql57-mysql-debuginfo-0:5.7.19-6.el7.x86_64",
            "7Server-RHSCL-2.4:rh-mysql57-mysql-devel-0:5.7.19-6.el7.x86_64",
            "7Server-RHSCL-2.4:rh-mysql57-mysql-errmsg-0:5.7.19-6.el7.x86_64",
            "7Server-RHSCL-2.4:rh-mysql57-mysql-server-0:5.7.19-6.el7.x86_64",
            "7Server-RHSCL-2.4:rh-mysql57-mysql-test-0:5.7.19-6.el7.x86_64",
            "7Workstation-RHSCL-2.4:rh-mysql57-mysql-0:5.7.19-6.el7.src",
            "7Workstation-RHSCL-2.4:rh-mysql57-mysql-0:5.7.19-6.el7.x86_64",
            "7Workstation-RHSCL-2.4:rh-mysql57-mysql-common-0:5.7.19-6.el7.x86_64",
            "7Workstation-RHSCL-2.4:rh-mysql57-mysql-config-0:5.7.19-6.el7.x86_64",
            "7Workstation-RHSCL-2.4:rh-mysql57-mysql-debuginfo-0:5.7.19-6.el7.x86_64",
            "7Workstation-RHSCL-2.4:rh-mysql57-mysql-devel-0:5.7.19-6.el7.x86_64",
            "7Workstation-RHSCL-2.4:rh-mysql57-mysql-errmsg-0:5.7.19-6.el7.x86_64",
            "7Workstation-RHSCL-2.4:rh-mysql57-mysql-server-0:5.7.19-6.el7.x86_64",
            "7Workstation-RHSCL-2.4:rh-mysql57-mysql-test-0:5.7.19-6.el7.x86_64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2017:2886"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "HIGH",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 4.4,
            "baseSeverity": "MEDIUM",
            "confidentialityImpact": "NONE",
            "integrityImpact": "NONE",
            "privilegesRequired": "HIGH",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.0/AV:N/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.0"
          },
          "products": [
            "6Server-RHSCL-2.4-6.7.Z:rh-mysql57-mysql-0:5.7.19-6.el6.src",
            "6Server-RHSCL-2.4-6.7.Z:rh-mysql57-mysql-0:5.7.19-6.el6.x86_64",
            "6Server-RHSCL-2.4-6.7.Z:rh-mysql57-mysql-common-0:5.7.19-6.el6.x86_64",
            "6Server-RHSCL-2.4-6.7.Z:rh-mysql57-mysql-config-0:5.7.19-6.el6.x86_64",
            "6Server-RHSCL-2.4-6.7.Z:rh-mysql57-mysql-debuginfo-0:5.7.19-6.el6.x86_64",
            "6Server-RHSCL-2.4-6.7.Z:rh-mysql57-mysql-devel-0:5.7.19-6.el6.x86_64",
            "6Server-RHSCL-2.4-6.7.Z:rh-mysql57-mysql-errmsg-0:5.7.19-6.el6.x86_64",
            "6Server-RHSCL-2.4-6.7.Z:rh-mysql57-mysql-server-0:5.7.19-6.el6.x86_64",
            "6Server-RHSCL-2.4-6.7.Z:rh-mysql57-mysql-test-0:5.7.19-6.el6.x86_64",
            "6Server-RHSCL-2.4:rh-mysql57-mysql-0:5.7.19-6.el6.src",
            "6Server-RHSCL-2.4:rh-mysql57-mysql-0:5.7.19-6.el6.x86_64",
            "6Server-RHSCL-2.4:rh-mysql57-mysql-common-0:5.7.19-6.el6.x86_64",
            "6Server-RHSCL-2.4:rh-mysql57-mysql-config-0:5.7.19-6.el6.x86_64",
            "6Server-RHSCL-2.4:rh-mysql57-mysql-debuginfo-0:5.7.19-6.el6.x86_64",
            "6Server-RHSCL-2.4:rh-mysql57-mysql-devel-0:5.7.19-6.el6.x86_64",
            "6Server-RHSCL-2.4:rh-mysql57-mysql-errmsg-0:5.7.19-6.el6.x86_64",
            "6Server-RHSCL-2.4:rh-mysql57-mysql-server-0:5.7.19-6.el6.x86_64",
            "6Server-RHSCL-2.4:rh-mysql57-mysql-test-0:5.7.19-6.el6.x86_64",
            "6Workstation-RHSCL-2.4:rh-mysql57-mysql-0:5.7.19-6.el6.src",
            "6Workstation-RHSCL-2.4:rh-mysql57-mysql-0:5.7.19-6.el6.x86_64",
            "6Workstation-RHSCL-2.4:rh-mysql57-mysql-common-0:5.7.19-6.el6.x86_64",
            "6Workstation-RHSCL-2.4:rh-mysql57-mysql-config-0:5.7.19-6.el6.x86_64",
            "6Workstation-RHSCL-2.4:rh-mysql57-mysql-debuginfo-0:5.7.19-6.el6.x86_64",
            "6Workstation-RHSCL-2.4:rh-mysql57-mysql-devel-0:5.7.19-6.el6.x86_64",
            "6Workstation-RHSCL-2.4:rh-mysql57-mysql-errmsg-0:5.7.19-6.el6.x86_64",
            "6Workstation-RHSCL-2.4:rh-mysql57-mysql-server-0:5.7.19-6.el6.x86_64",
            "6Workstation-RHSCL-2.4:rh-mysql57-mysql-test-0:5.7.19-6.el6.x86_64",
            "7Server-RHSCL-2.4-7.3.Z:rh-mysql57-mysql-0:5.7.19-6.el7.src",
            "7Server-RHSCL-2.4-7.3.Z:rh-mysql57-mysql-0:5.7.19-6.el7.x86_64",
            "7Server-RHSCL-2.4-7.3.Z:rh-mysql57-mysql-common-0:5.7.19-6.el7.x86_64",
            "7Server-RHSCL-2.4-7.3.Z:rh-mysql57-mysql-config-0:5.7.19-6.el7.x86_64",
            "7Server-RHSCL-2.4-7.3.Z:rh-mysql57-mysql-debuginfo-0:5.7.19-6.el7.x86_64",
            "7Server-RHSCL-2.4-7.3.Z:rh-mysql57-mysql-devel-0:5.7.19-6.el7.x86_64",
            "7Server-RHSCL-2.4-7.3.Z:rh-mysql57-mysql-errmsg-0:5.7.19-6.el7.x86_64",
            "7Server-RHSCL-2.4-7.3.Z:rh-mysql57-mysql-server-0:5.7.19-6.el7.x86_64",
            "7Server-RHSCL-2.4-7.3.Z:rh-mysql57-mysql-test-0:5.7.19-6.el7.x86_64",
            "7Server-RHSCL-2.4:rh-mysql57-mysql-0:5.7.19-6.el7.src",
            "7Server-RHSCL-2.4:rh-mysql57-mysql-0:5.7.19-6.el7.x86_64",
            "7Server-RHSCL-2.4:rh-mysql57-mysql-common-0:5.7.19-6.el7.x86_64",
            "7Server-RHSCL-2.4:rh-mysql57-mysql-config-0:5.7.19-6.el7.x86_64",
            "7Server-RHSCL-2.4:rh-mysql57-mysql-debuginfo-0:5.7.19-6.el7.x86_64",
            "7Server-RHSCL-2.4:rh-mysql57-mysql-devel-0:5.7.19-6.el7.x86_64",
            "7Server-RHSCL-2.4:rh-mysql57-mysql-errmsg-0:5.7.19-6.el7.x86_64",
            "7Server-RHSCL-2.4:rh-mysql57-mysql-server-0:5.7.19-6.el7.x86_64",
            "7Server-RHSCL-2.4:rh-mysql57-mysql-test-0:5.7.19-6.el7.x86_64",
            "7Workstation-RHSCL-2.4:rh-mysql57-mysql-0:5.7.19-6.el7.src",
            "7Workstation-RHSCL-2.4:rh-mysql57-mysql-0:5.7.19-6.el7.x86_64",
            "7Workstation-RHSCL-2.4:rh-mysql57-mysql-common-0:5.7.19-6.el7.x86_64",
            "7Workstation-RHSCL-2.4:rh-mysql57-mysql-config-0:5.7.19-6.el7.x86_64",
            "7Workstation-RHSCL-2.4:rh-mysql57-mysql-debuginfo-0:5.7.19-6.el7.x86_64",
            "7Workstation-RHSCL-2.4:rh-mysql57-mysql-devel-0:5.7.19-6.el7.x86_64",
            "7Workstation-RHSCL-2.4:rh-mysql57-mysql-errmsg-0:5.7.19-6.el7.x86_64",
            "7Workstation-RHSCL-2.4:rh-mysql57-mysql-server-0:5.7.19-6.el7.x86_64",
            "7Workstation-RHSCL-2.4:rh-mysql57-mysql-test-0:5.7.19-6.el7.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Moderate"
        }
      ],
      "title": "mysql: Server: Replication unspecified vulnerability (CPU Jul 2017)"
    },
    {
      "cve": "CVE-2017-3650",
      "discovery_date": "2017-07-19T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "1472706"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: C API). Supported versions that are affected are 5.7.18 and earlier. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized read access to a subset of MySQL Server accessible data. CVSS 3.0 Base Score 3.7 (Confidentiality impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N).",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "mysql: C API unspecified vulnerability (CPU Jul 2017)",
          "title": "Vulnerability summary"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "6Server-RHSCL-2.4-6.7.Z:rh-mysql57-mysql-0:5.7.19-6.el6.src",
          "6Server-RHSCL-2.4-6.7.Z:rh-mysql57-mysql-0:5.7.19-6.el6.x86_64",
          "6Server-RHSCL-2.4-6.7.Z:rh-mysql57-mysql-common-0:5.7.19-6.el6.x86_64",
          "6Server-RHSCL-2.4-6.7.Z:rh-mysql57-mysql-config-0:5.7.19-6.el6.x86_64",
          "6Server-RHSCL-2.4-6.7.Z:rh-mysql57-mysql-debuginfo-0:5.7.19-6.el6.x86_64",
          "6Server-RHSCL-2.4-6.7.Z:rh-mysql57-mysql-devel-0:5.7.19-6.el6.x86_64",
          "6Server-RHSCL-2.4-6.7.Z:rh-mysql57-mysql-errmsg-0:5.7.19-6.el6.x86_64",
          "6Server-RHSCL-2.4-6.7.Z:rh-mysql57-mysql-server-0:5.7.19-6.el6.x86_64",
          "6Server-RHSCL-2.4-6.7.Z:rh-mysql57-mysql-test-0:5.7.19-6.el6.x86_64",
          "6Server-RHSCL-2.4:rh-mysql57-mysql-0:5.7.19-6.el6.src",
          "6Server-RHSCL-2.4:rh-mysql57-mysql-0:5.7.19-6.el6.x86_64",
          "6Server-RHSCL-2.4:rh-mysql57-mysql-common-0:5.7.19-6.el6.x86_64",
          "6Server-RHSCL-2.4:rh-mysql57-mysql-config-0:5.7.19-6.el6.x86_64",
          "6Server-RHSCL-2.4:rh-mysql57-mysql-debuginfo-0:5.7.19-6.el6.x86_64",
          "6Server-RHSCL-2.4:rh-mysql57-mysql-devel-0:5.7.19-6.el6.x86_64",
          "6Server-RHSCL-2.4:rh-mysql57-mysql-errmsg-0:5.7.19-6.el6.x86_64",
          "6Server-RHSCL-2.4:rh-mysql57-mysql-server-0:5.7.19-6.el6.x86_64",
          "6Server-RHSCL-2.4:rh-mysql57-mysql-test-0:5.7.19-6.el6.x86_64",
          "6Workstation-RHSCL-2.4:rh-mysql57-mysql-0:5.7.19-6.el6.src",
          "6Workstation-RHSCL-2.4:rh-mysql57-mysql-0:5.7.19-6.el6.x86_64",
          "6Workstation-RHSCL-2.4:rh-mysql57-mysql-common-0:5.7.19-6.el6.x86_64",
          "6Workstation-RHSCL-2.4:rh-mysql57-mysql-config-0:5.7.19-6.el6.x86_64",
          "6Workstation-RHSCL-2.4:rh-mysql57-mysql-debuginfo-0:5.7.19-6.el6.x86_64",
          "6Workstation-RHSCL-2.4:rh-mysql57-mysql-devel-0:5.7.19-6.el6.x86_64",
          "6Workstation-RHSCL-2.4:rh-mysql57-mysql-errmsg-0:5.7.19-6.el6.x86_64",
          "6Workstation-RHSCL-2.4:rh-mysql57-mysql-server-0:5.7.19-6.el6.x86_64",
          "6Workstation-RHSCL-2.4:rh-mysql57-mysql-test-0:5.7.19-6.el6.x86_64",
          "7Server-RHSCL-2.4-7.3.Z:rh-mysql57-mysql-0:5.7.19-6.el7.src",
          "7Server-RHSCL-2.4-7.3.Z:rh-mysql57-mysql-0:5.7.19-6.el7.x86_64",
          "7Server-RHSCL-2.4-7.3.Z:rh-mysql57-mysql-common-0:5.7.19-6.el7.x86_64",
          "7Server-RHSCL-2.4-7.3.Z:rh-mysql57-mysql-config-0:5.7.19-6.el7.x86_64",
          "7Server-RHSCL-2.4-7.3.Z:rh-mysql57-mysql-debuginfo-0:5.7.19-6.el7.x86_64",
          "7Server-RHSCL-2.4-7.3.Z:rh-mysql57-mysql-devel-0:5.7.19-6.el7.x86_64",
          "7Server-RHSCL-2.4-7.3.Z:rh-mysql57-mysql-errmsg-0:5.7.19-6.el7.x86_64",
          "7Server-RHSCL-2.4-7.3.Z:rh-mysql57-mysql-server-0:5.7.19-6.el7.x86_64",
          "7Server-RHSCL-2.4-7.3.Z:rh-mysql57-mysql-test-0:5.7.19-6.el7.x86_64",
          "7Server-RHSCL-2.4:rh-mysql57-mysql-0:5.7.19-6.el7.src",
          "7Server-RHSCL-2.4:rh-mysql57-mysql-0:5.7.19-6.el7.x86_64",
          "7Server-RHSCL-2.4:rh-mysql57-mysql-common-0:5.7.19-6.el7.x86_64",
          "7Server-RHSCL-2.4:rh-mysql57-mysql-config-0:5.7.19-6.el7.x86_64",
          "7Server-RHSCL-2.4:rh-mysql57-mysql-debuginfo-0:5.7.19-6.el7.x86_64",
          "7Server-RHSCL-2.4:rh-mysql57-mysql-devel-0:5.7.19-6.el7.x86_64",
          "7Server-RHSCL-2.4:rh-mysql57-mysql-errmsg-0:5.7.19-6.el7.x86_64",
          "7Server-RHSCL-2.4:rh-mysql57-mysql-server-0:5.7.19-6.el7.x86_64",
          "7Server-RHSCL-2.4:rh-mysql57-mysql-test-0:5.7.19-6.el7.x86_64",
          "7Workstation-RHSCL-2.4:rh-mysql57-mysql-0:5.7.19-6.el7.src",
          "7Workstation-RHSCL-2.4:rh-mysql57-mysql-0:5.7.19-6.el7.x86_64",
          "7Workstation-RHSCL-2.4:rh-mysql57-mysql-common-0:5.7.19-6.el7.x86_64",
          "7Workstation-RHSCL-2.4:rh-mysql57-mysql-config-0:5.7.19-6.el7.x86_64",
          "7Workstation-RHSCL-2.4:rh-mysql57-mysql-debuginfo-0:5.7.19-6.el7.x86_64",
          "7Workstation-RHSCL-2.4:rh-mysql57-mysql-devel-0:5.7.19-6.el7.x86_64",
          "7Workstation-RHSCL-2.4:rh-mysql57-mysql-errmsg-0:5.7.19-6.el7.x86_64",
          "7Workstation-RHSCL-2.4:rh-mysql57-mysql-server-0:5.7.19-6.el7.x86_64",
          "7Workstation-RHSCL-2.4:rh-mysql57-mysql-test-0:5.7.19-6.el7.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2017-3650"
        },
        {
          "category": "external",
          "summary": "RHBZ#1472706",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1472706"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2017-3650",
          "url": "https://www.cve.org/CVERecord?id=CVE-2017-3650"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2017-3650",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2017-3650"
        },
        {
          "category": "external",
          "summary": "http://www.oracle.com/technetwork/security-advisory/cpujul2017-3236622.html#AppendixMSQL",
          "url": "http://www.oracle.com/technetwork/security-advisory/cpujul2017-3236622.html#AppendixMSQL"
        }
      ],
      "release_date": "2017-07-19T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2017-10-12T07:53:15+00:00",
          "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAfter installing this update, the MySQL server daemon (mysqld) will be restarted automatically.",
          "product_ids": [
            "6Server-RHSCL-2.4-6.7.Z:rh-mysql57-mysql-0:5.7.19-6.el6.src",
            "6Server-RHSCL-2.4-6.7.Z:rh-mysql57-mysql-0:5.7.19-6.el6.x86_64",
            "6Server-RHSCL-2.4-6.7.Z:rh-mysql57-mysql-common-0:5.7.19-6.el6.x86_64",
            "6Server-RHSCL-2.4-6.7.Z:rh-mysql57-mysql-config-0:5.7.19-6.el6.x86_64",
            "6Server-RHSCL-2.4-6.7.Z:rh-mysql57-mysql-debuginfo-0:5.7.19-6.el6.x86_64",
            "6Server-RHSCL-2.4-6.7.Z:rh-mysql57-mysql-devel-0:5.7.19-6.el6.x86_64",
            "6Server-RHSCL-2.4-6.7.Z:rh-mysql57-mysql-errmsg-0:5.7.19-6.el6.x86_64",
            "6Server-RHSCL-2.4-6.7.Z:rh-mysql57-mysql-server-0:5.7.19-6.el6.x86_64",
            "6Server-RHSCL-2.4-6.7.Z:rh-mysql57-mysql-test-0:5.7.19-6.el6.x86_64",
            "6Server-RHSCL-2.4:rh-mysql57-mysql-0:5.7.19-6.el6.src",
            "6Server-RHSCL-2.4:rh-mysql57-mysql-0:5.7.19-6.el6.x86_64",
            "6Server-RHSCL-2.4:rh-mysql57-mysql-common-0:5.7.19-6.el6.x86_64",
            "6Server-RHSCL-2.4:rh-mysql57-mysql-config-0:5.7.19-6.el6.x86_64",
            "6Server-RHSCL-2.4:rh-mysql57-mysql-debuginfo-0:5.7.19-6.el6.x86_64",
            "6Server-RHSCL-2.4:rh-mysql57-mysql-devel-0:5.7.19-6.el6.x86_64",
            "6Server-RHSCL-2.4:rh-mysql57-mysql-errmsg-0:5.7.19-6.el6.x86_64",
            "6Server-RHSCL-2.4:rh-mysql57-mysql-server-0:5.7.19-6.el6.x86_64",
            "6Server-RHSCL-2.4:rh-mysql57-mysql-test-0:5.7.19-6.el6.x86_64",
            "6Workstation-RHSCL-2.4:rh-mysql57-mysql-0:5.7.19-6.el6.src",
            "6Workstation-RHSCL-2.4:rh-mysql57-mysql-0:5.7.19-6.el6.x86_64",
            "6Workstation-RHSCL-2.4:rh-mysql57-mysql-common-0:5.7.19-6.el6.x86_64",
            "6Workstation-RHSCL-2.4:rh-mysql57-mysql-config-0:5.7.19-6.el6.x86_64",
            "6Workstation-RHSCL-2.4:rh-mysql57-mysql-debuginfo-0:5.7.19-6.el6.x86_64",
            "6Workstation-RHSCL-2.4:rh-mysql57-mysql-devel-0:5.7.19-6.el6.x86_64",
            "6Workstation-RHSCL-2.4:rh-mysql57-mysql-errmsg-0:5.7.19-6.el6.x86_64",
            "6Workstation-RHSCL-2.4:rh-mysql57-mysql-server-0:5.7.19-6.el6.x86_64",
            "6Workstation-RHSCL-2.4:rh-mysql57-mysql-test-0:5.7.19-6.el6.x86_64",
            "7Server-RHSCL-2.4-7.3.Z:rh-mysql57-mysql-0:5.7.19-6.el7.src",
            "7Server-RHSCL-2.4-7.3.Z:rh-mysql57-mysql-0:5.7.19-6.el7.x86_64",
            "7Server-RHSCL-2.4-7.3.Z:rh-mysql57-mysql-common-0:5.7.19-6.el7.x86_64",
            "7Server-RHSCL-2.4-7.3.Z:rh-mysql57-mysql-config-0:5.7.19-6.el7.x86_64",
            "7Server-RHSCL-2.4-7.3.Z:rh-mysql57-mysql-debuginfo-0:5.7.19-6.el7.x86_64",
            "7Server-RHSCL-2.4-7.3.Z:rh-mysql57-mysql-devel-0:5.7.19-6.el7.x86_64",
            "7Server-RHSCL-2.4-7.3.Z:rh-mysql57-mysql-errmsg-0:5.7.19-6.el7.x86_64",
            "7Server-RHSCL-2.4-7.3.Z:rh-mysql57-mysql-server-0:5.7.19-6.el7.x86_64",
            "7Server-RHSCL-2.4-7.3.Z:rh-mysql57-mysql-test-0:5.7.19-6.el7.x86_64",
            "7Server-RHSCL-2.4:rh-mysql57-mysql-0:5.7.19-6.el7.src",
            "7Server-RHSCL-2.4:rh-mysql57-mysql-0:5.7.19-6.el7.x86_64",
            "7Server-RHSCL-2.4:rh-mysql57-mysql-common-0:5.7.19-6.el7.x86_64",
            "7Server-RHSCL-2.4:rh-mysql57-mysql-config-0:5.7.19-6.el7.x86_64",
            "7Server-RHSCL-2.4:rh-mysql57-mysql-debuginfo-0:5.7.19-6.el7.x86_64",
            "7Server-RHSCL-2.4:rh-mysql57-mysql-devel-0:5.7.19-6.el7.x86_64",
            "7Server-RHSCL-2.4:rh-mysql57-mysql-errmsg-0:5.7.19-6.el7.x86_64",
            "7Server-RHSCL-2.4:rh-mysql57-mysql-server-0:5.7.19-6.el7.x86_64",
            "7Server-RHSCL-2.4:rh-mysql57-mysql-test-0:5.7.19-6.el7.x86_64",
            "7Workstation-RHSCL-2.4:rh-mysql57-mysql-0:5.7.19-6.el7.src",
            "7Workstation-RHSCL-2.4:rh-mysql57-mysql-0:5.7.19-6.el7.x86_64",
            "7Workstation-RHSCL-2.4:rh-mysql57-mysql-common-0:5.7.19-6.el7.x86_64",
            "7Workstation-RHSCL-2.4:rh-mysql57-mysql-config-0:5.7.19-6.el7.x86_64",
            "7Workstation-RHSCL-2.4:rh-mysql57-mysql-debuginfo-0:5.7.19-6.el7.x86_64",
            "7Workstation-RHSCL-2.4:rh-mysql57-mysql-devel-0:5.7.19-6.el7.x86_64",
            "7Workstation-RHSCL-2.4:rh-mysql57-mysql-errmsg-0:5.7.19-6.el7.x86_64",
            "7Workstation-RHSCL-2.4:rh-mysql57-mysql-server-0:5.7.19-6.el7.x86_64",
            "7Workstation-RHSCL-2.4:rh-mysql57-mysql-test-0:5.7.19-6.el7.x86_64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2017:2886"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "HIGH",
            "attackVector": "NETWORK",
            "availabilityImpact": "NONE",
            "baseScore": 3.7,
            "baseSeverity": "LOW",
            "confidentialityImpact": "LOW",
            "integrityImpact": "NONE",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N",
            "version": "3.0"
          },
          "products": [
            "6Server-RHSCL-2.4-6.7.Z:rh-mysql57-mysql-0:5.7.19-6.el6.src",
            "6Server-RHSCL-2.4-6.7.Z:rh-mysql57-mysql-0:5.7.19-6.el6.x86_64",
            "6Server-RHSCL-2.4-6.7.Z:rh-mysql57-mysql-common-0:5.7.19-6.el6.x86_64",
            "6Server-RHSCL-2.4-6.7.Z:rh-mysql57-mysql-config-0:5.7.19-6.el6.x86_64",
            "6Server-RHSCL-2.4-6.7.Z:rh-mysql57-mysql-debuginfo-0:5.7.19-6.el6.x86_64",
            "6Server-RHSCL-2.4-6.7.Z:rh-mysql57-mysql-devel-0:5.7.19-6.el6.x86_64",
            "6Server-RHSCL-2.4-6.7.Z:rh-mysql57-mysql-errmsg-0:5.7.19-6.el6.x86_64",
            "6Server-RHSCL-2.4-6.7.Z:rh-mysql57-mysql-server-0:5.7.19-6.el6.x86_64",
            "6Server-RHSCL-2.4-6.7.Z:rh-mysql57-mysql-test-0:5.7.19-6.el6.x86_64",
            "6Server-RHSCL-2.4:rh-mysql57-mysql-0:5.7.19-6.el6.src",
            "6Server-RHSCL-2.4:rh-mysql57-mysql-0:5.7.19-6.el6.x86_64",
            "6Server-RHSCL-2.4:rh-mysql57-mysql-common-0:5.7.19-6.el6.x86_64",
            "6Server-RHSCL-2.4:rh-mysql57-mysql-config-0:5.7.19-6.el6.x86_64",
            "6Server-RHSCL-2.4:rh-mysql57-mysql-debuginfo-0:5.7.19-6.el6.x86_64",
            "6Server-RHSCL-2.4:rh-mysql57-mysql-devel-0:5.7.19-6.el6.x86_64",
            "6Server-RHSCL-2.4:rh-mysql57-mysql-errmsg-0:5.7.19-6.el6.x86_64",
            "6Server-RHSCL-2.4:rh-mysql57-mysql-server-0:5.7.19-6.el6.x86_64",
            "6Server-RHSCL-2.4:rh-mysql57-mysql-test-0:5.7.19-6.el6.x86_64",
            "6Workstation-RHSCL-2.4:rh-mysql57-mysql-0:5.7.19-6.el6.src",
            "6Workstation-RHSCL-2.4:rh-mysql57-mysql-0:5.7.19-6.el6.x86_64",
            "6Workstation-RHSCL-2.4:rh-mysql57-mysql-common-0:5.7.19-6.el6.x86_64",
            "6Workstation-RHSCL-2.4:rh-mysql57-mysql-config-0:5.7.19-6.el6.x86_64",
            "6Workstation-RHSCL-2.4:rh-mysql57-mysql-debuginfo-0:5.7.19-6.el6.x86_64",
            "6Workstation-RHSCL-2.4:rh-mysql57-mysql-devel-0:5.7.19-6.el6.x86_64",
            "6Workstation-RHSCL-2.4:rh-mysql57-mysql-errmsg-0:5.7.19-6.el6.x86_64",
            "6Workstation-RHSCL-2.4:rh-mysql57-mysql-server-0:5.7.19-6.el6.x86_64",
            "6Workstation-RHSCL-2.4:rh-mysql57-mysql-test-0:5.7.19-6.el6.x86_64",
            "7Server-RHSCL-2.4-7.3.Z:rh-mysql57-mysql-0:5.7.19-6.el7.src",
            "7Server-RHSCL-2.4-7.3.Z:rh-mysql57-mysql-0:5.7.19-6.el7.x86_64",
            "7Server-RHSCL-2.4-7.3.Z:rh-mysql57-mysql-common-0:5.7.19-6.el7.x86_64",
            "7Server-RHSCL-2.4-7.3.Z:rh-mysql57-mysql-config-0:5.7.19-6.el7.x86_64",
            "7Server-RHSCL-2.4-7.3.Z:rh-mysql57-mysql-debuginfo-0:5.7.19-6.el7.x86_64",
            "7Server-RHSCL-2.4-7.3.Z:rh-mysql57-mysql-devel-0:5.7.19-6.el7.x86_64",
            "7Server-RHSCL-2.4-7.3.Z:rh-mysql57-mysql-errmsg-0:5.7.19-6.el7.x86_64",
            "7Server-RHSCL-2.4-7.3.Z:rh-mysql57-mysql-server-0:5.7.19-6.el7.x86_64",
            "7Server-RHSCL-2.4-7.3.Z:rh-mysql57-mysql-test-0:5.7.19-6.el7.x86_64",
            "7Server-RHSCL-2.4:rh-mysql57-mysql-0:5.7.19-6.el7.src",
            "7Server-RHSCL-2.4:rh-mysql57-mysql-0:5.7.19-6.el7.x86_64",
            "7Server-RHSCL-2.4:rh-mysql57-mysql-common-0:5.7.19-6.el7.x86_64",
            "7Server-RHSCL-2.4:rh-mysql57-mysql-config-0:5.7.19-6.el7.x86_64",
            "7Server-RHSCL-2.4:rh-mysql57-mysql-debuginfo-0:5.7.19-6.el7.x86_64",
            "7Server-RHSCL-2.4:rh-mysql57-mysql-devel-0:5.7.19-6.el7.x86_64",
            "7Server-RHSCL-2.4:rh-mysql57-mysql-errmsg-0:5.7.19-6.el7.x86_64",
            "7Server-RHSCL-2.4:rh-mysql57-mysql-server-0:5.7.19-6.el7.x86_64",
            "7Server-RHSCL-2.4:rh-mysql57-mysql-test-0:5.7.19-6.el7.x86_64",
            "7Workstation-RHSCL-2.4:rh-mysql57-mysql-0:5.7.19-6.el7.src",
            "7Workstation-RHSCL-2.4:rh-mysql57-mysql-0:5.7.19-6.el7.x86_64",
            "7Workstation-RHSCL-2.4:rh-mysql57-mysql-common-0:5.7.19-6.el7.x86_64",
            "7Workstation-RHSCL-2.4:rh-mysql57-mysql-config-0:5.7.19-6.el7.x86_64",
            "7Workstation-RHSCL-2.4:rh-mysql57-mysql-debuginfo-0:5.7.19-6.el7.x86_64",
            "7Workstation-RHSCL-2.4:rh-mysql57-mysql-devel-0:5.7.19-6.el7.x86_64",
            "7Workstation-RHSCL-2.4:rh-mysql57-mysql-errmsg-0:5.7.19-6.el7.x86_64",
            "7Workstation-RHSCL-2.4:rh-mysql57-mysql-server-0:5.7.19-6.el7.x86_64",
            "7Workstation-RHSCL-2.4:rh-mysql57-mysql-test-0:5.7.19-6.el7.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Low"
        }
      ],
      "title": "mysql: C API unspecified vulnerability (CPU Jul 2017)"
    },
    {
      "cve": "CVE-2017-3651",
      "discovery_date": "2017-07-19T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "1472708"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Client mysqldump). Supported versions that are affected are 5.5.56 and earlier, 5.6.36 and earlier and 5.7.18 and earlier. Easily exploitable vulnerability allows low privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of MySQL Server accessible data. CVSS 3.0 Base Score 4.3 (Integrity impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N).",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "mysql: Client mysqldump unspecified vulnerability (CPU Jul 2017)",
          "title": "Vulnerability summary"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "6Server-RHSCL-2.4-6.7.Z:rh-mysql57-mysql-0:5.7.19-6.el6.src",
          "6Server-RHSCL-2.4-6.7.Z:rh-mysql57-mysql-0:5.7.19-6.el6.x86_64",
          "6Server-RHSCL-2.4-6.7.Z:rh-mysql57-mysql-common-0:5.7.19-6.el6.x86_64",
          "6Server-RHSCL-2.4-6.7.Z:rh-mysql57-mysql-config-0:5.7.19-6.el6.x86_64",
          "6Server-RHSCL-2.4-6.7.Z:rh-mysql57-mysql-debuginfo-0:5.7.19-6.el6.x86_64",
          "6Server-RHSCL-2.4-6.7.Z:rh-mysql57-mysql-devel-0:5.7.19-6.el6.x86_64",
          "6Server-RHSCL-2.4-6.7.Z:rh-mysql57-mysql-errmsg-0:5.7.19-6.el6.x86_64",
          "6Server-RHSCL-2.4-6.7.Z:rh-mysql57-mysql-server-0:5.7.19-6.el6.x86_64",
          "6Server-RHSCL-2.4-6.7.Z:rh-mysql57-mysql-test-0:5.7.19-6.el6.x86_64",
          "6Server-RHSCL-2.4:rh-mysql57-mysql-0:5.7.19-6.el6.src",
          "6Server-RHSCL-2.4:rh-mysql57-mysql-0:5.7.19-6.el6.x86_64",
          "6Server-RHSCL-2.4:rh-mysql57-mysql-common-0:5.7.19-6.el6.x86_64",
          "6Server-RHSCL-2.4:rh-mysql57-mysql-config-0:5.7.19-6.el6.x86_64",
          "6Server-RHSCL-2.4:rh-mysql57-mysql-debuginfo-0:5.7.19-6.el6.x86_64",
          "6Server-RHSCL-2.4:rh-mysql57-mysql-devel-0:5.7.19-6.el6.x86_64",
          "6Server-RHSCL-2.4:rh-mysql57-mysql-errmsg-0:5.7.19-6.el6.x86_64",
          "6Server-RHSCL-2.4:rh-mysql57-mysql-server-0:5.7.19-6.el6.x86_64",
          "6Server-RHSCL-2.4:rh-mysql57-mysql-test-0:5.7.19-6.el6.x86_64",
          "6Workstation-RHSCL-2.4:rh-mysql57-mysql-0:5.7.19-6.el6.src",
          "6Workstation-RHSCL-2.4:rh-mysql57-mysql-0:5.7.19-6.el6.x86_64",
          "6Workstation-RHSCL-2.4:rh-mysql57-mysql-common-0:5.7.19-6.el6.x86_64",
          "6Workstation-RHSCL-2.4:rh-mysql57-mysql-config-0:5.7.19-6.el6.x86_64",
          "6Workstation-RHSCL-2.4:rh-mysql57-mysql-debuginfo-0:5.7.19-6.el6.x86_64",
          "6Workstation-RHSCL-2.4:rh-mysql57-mysql-devel-0:5.7.19-6.el6.x86_64",
          "6Workstation-RHSCL-2.4:rh-mysql57-mysql-errmsg-0:5.7.19-6.el6.x86_64",
          "6Workstation-RHSCL-2.4:rh-mysql57-mysql-server-0:5.7.19-6.el6.x86_64",
          "6Workstation-RHSCL-2.4:rh-mysql57-mysql-test-0:5.7.19-6.el6.x86_64",
          "7Server-RHSCL-2.4-7.3.Z:rh-mysql57-mysql-0:5.7.19-6.el7.src",
          "7Server-RHSCL-2.4-7.3.Z:rh-mysql57-mysql-0:5.7.19-6.el7.x86_64",
          "7Server-RHSCL-2.4-7.3.Z:rh-mysql57-mysql-common-0:5.7.19-6.el7.x86_64",
          "7Server-RHSCL-2.4-7.3.Z:rh-mysql57-mysql-config-0:5.7.19-6.el7.x86_64",
          "7Server-RHSCL-2.4-7.3.Z:rh-mysql57-mysql-debuginfo-0:5.7.19-6.el7.x86_64",
          "7Server-RHSCL-2.4-7.3.Z:rh-mysql57-mysql-devel-0:5.7.19-6.el7.x86_64",
          "7Server-RHSCL-2.4-7.3.Z:rh-mysql57-mysql-errmsg-0:5.7.19-6.el7.x86_64",
          "7Server-RHSCL-2.4-7.3.Z:rh-mysql57-mysql-server-0:5.7.19-6.el7.x86_64",
          "7Server-RHSCL-2.4-7.3.Z:rh-mysql57-mysql-test-0:5.7.19-6.el7.x86_64",
          "7Server-RHSCL-2.4:rh-mysql57-mysql-0:5.7.19-6.el7.src",
          "7Server-RHSCL-2.4:rh-mysql57-mysql-0:5.7.19-6.el7.x86_64",
          "7Server-RHSCL-2.4:rh-mysql57-mysql-common-0:5.7.19-6.el7.x86_64",
          "7Server-RHSCL-2.4:rh-mysql57-mysql-config-0:5.7.19-6.el7.x86_64",
          "7Server-RHSCL-2.4:rh-mysql57-mysql-debuginfo-0:5.7.19-6.el7.x86_64",
          "7Server-RHSCL-2.4:rh-mysql57-mysql-devel-0:5.7.19-6.el7.x86_64",
          "7Server-RHSCL-2.4:rh-mysql57-mysql-errmsg-0:5.7.19-6.el7.x86_64",
          "7Server-RHSCL-2.4:rh-mysql57-mysql-server-0:5.7.19-6.el7.x86_64",
          "7Server-RHSCL-2.4:rh-mysql57-mysql-test-0:5.7.19-6.el7.x86_64",
          "7Workstation-RHSCL-2.4:rh-mysql57-mysql-0:5.7.19-6.el7.src",
          "7Workstation-RHSCL-2.4:rh-mysql57-mysql-0:5.7.19-6.el7.x86_64",
          "7Workstation-RHSCL-2.4:rh-mysql57-mysql-common-0:5.7.19-6.el7.x86_64",
          "7Workstation-RHSCL-2.4:rh-mysql57-mysql-config-0:5.7.19-6.el7.x86_64",
          "7Workstation-RHSCL-2.4:rh-mysql57-mysql-debuginfo-0:5.7.19-6.el7.x86_64",
          "7Workstation-RHSCL-2.4:rh-mysql57-mysql-devel-0:5.7.19-6.el7.x86_64",
          "7Workstation-RHSCL-2.4:rh-mysql57-mysql-errmsg-0:5.7.19-6.el7.x86_64",
          "7Workstation-RHSCL-2.4:rh-mysql57-mysql-server-0:5.7.19-6.el7.x86_64",
          "7Workstation-RHSCL-2.4:rh-mysql57-mysql-test-0:5.7.19-6.el7.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2017-3651"
        },
        {
          "category": "external",
          "summary": "RHBZ#1472708",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1472708"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2017-3651",
          "url": "https://www.cve.org/CVERecord?id=CVE-2017-3651"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2017-3651",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2017-3651"
        },
        {
          "category": "external",
          "summary": "http://www.oracle.com/technetwork/security-advisory/cpujul2017-3236622.html#AppendixMSQL",
          "url": "http://www.oracle.com/technetwork/security-advisory/cpujul2017-3236622.html#AppendixMSQL"
        }
      ],
      "release_date": "2017-07-19T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2017-10-12T07:53:15+00:00",
          "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAfter installing this update, the MySQL server daemon (mysqld) will be restarted automatically.",
          "product_ids": [
            "6Server-RHSCL-2.4-6.7.Z:rh-mysql57-mysql-0:5.7.19-6.el6.src",
            "6Server-RHSCL-2.4-6.7.Z:rh-mysql57-mysql-0:5.7.19-6.el6.x86_64",
            "6Server-RHSCL-2.4-6.7.Z:rh-mysql57-mysql-common-0:5.7.19-6.el6.x86_64",
            "6Server-RHSCL-2.4-6.7.Z:rh-mysql57-mysql-config-0:5.7.19-6.el6.x86_64",
            "6Server-RHSCL-2.4-6.7.Z:rh-mysql57-mysql-debuginfo-0:5.7.19-6.el6.x86_64",
            "6Server-RHSCL-2.4-6.7.Z:rh-mysql57-mysql-devel-0:5.7.19-6.el6.x86_64",
            "6Server-RHSCL-2.4-6.7.Z:rh-mysql57-mysql-errmsg-0:5.7.19-6.el6.x86_64",
            "6Server-RHSCL-2.4-6.7.Z:rh-mysql57-mysql-server-0:5.7.19-6.el6.x86_64",
            "6Server-RHSCL-2.4-6.7.Z:rh-mysql57-mysql-test-0:5.7.19-6.el6.x86_64",
            "6Server-RHSCL-2.4:rh-mysql57-mysql-0:5.7.19-6.el6.src",
            "6Server-RHSCL-2.4:rh-mysql57-mysql-0:5.7.19-6.el6.x86_64",
            "6Server-RHSCL-2.4:rh-mysql57-mysql-common-0:5.7.19-6.el6.x86_64",
            "6Server-RHSCL-2.4:rh-mysql57-mysql-config-0:5.7.19-6.el6.x86_64",
            "6Server-RHSCL-2.4:rh-mysql57-mysql-debuginfo-0:5.7.19-6.el6.x86_64",
            "6Server-RHSCL-2.4:rh-mysql57-mysql-devel-0:5.7.19-6.el6.x86_64",
            "6Server-RHSCL-2.4:rh-mysql57-mysql-errmsg-0:5.7.19-6.el6.x86_64",
            "6Server-RHSCL-2.4:rh-mysql57-mysql-server-0:5.7.19-6.el6.x86_64",
            "6Server-RHSCL-2.4:rh-mysql57-mysql-test-0:5.7.19-6.el6.x86_64",
            "6Workstation-RHSCL-2.4:rh-mysql57-mysql-0:5.7.19-6.el6.src",
            "6Workstation-RHSCL-2.4:rh-mysql57-mysql-0:5.7.19-6.el6.x86_64",
            "6Workstation-RHSCL-2.4:rh-mysql57-mysql-common-0:5.7.19-6.el6.x86_64",
            "6Workstation-RHSCL-2.4:rh-mysql57-mysql-config-0:5.7.19-6.el6.x86_64",
            "6Workstation-RHSCL-2.4:rh-mysql57-mysql-debuginfo-0:5.7.19-6.el6.x86_64",
            "6Workstation-RHSCL-2.4:rh-mysql57-mysql-devel-0:5.7.19-6.el6.x86_64",
            "6Workstation-RHSCL-2.4:rh-mysql57-mysql-errmsg-0:5.7.19-6.el6.x86_64",
            "6Workstation-RHSCL-2.4:rh-mysql57-mysql-server-0:5.7.19-6.el6.x86_64",
            "6Workstation-RHSCL-2.4:rh-mysql57-mysql-test-0:5.7.19-6.el6.x86_64",
            "7Server-RHSCL-2.4-7.3.Z:rh-mysql57-mysql-0:5.7.19-6.el7.src",
            "7Server-RHSCL-2.4-7.3.Z:rh-mysql57-mysql-0:5.7.19-6.el7.x86_64",
            "7Server-RHSCL-2.4-7.3.Z:rh-mysql57-mysql-common-0:5.7.19-6.el7.x86_64",
            "7Server-RHSCL-2.4-7.3.Z:rh-mysql57-mysql-config-0:5.7.19-6.el7.x86_64",
            "7Server-RHSCL-2.4-7.3.Z:rh-mysql57-mysql-debuginfo-0:5.7.19-6.el7.x86_64",
            "7Server-RHSCL-2.4-7.3.Z:rh-mysql57-mysql-devel-0:5.7.19-6.el7.x86_64",
            "7Server-RHSCL-2.4-7.3.Z:rh-mysql57-mysql-errmsg-0:5.7.19-6.el7.x86_64",
            "7Server-RHSCL-2.4-7.3.Z:rh-mysql57-mysql-server-0:5.7.19-6.el7.x86_64",
            "7Server-RHSCL-2.4-7.3.Z:rh-mysql57-mysql-test-0:5.7.19-6.el7.x86_64",
            "7Server-RHSCL-2.4:rh-mysql57-mysql-0:5.7.19-6.el7.src",
            "7Server-RHSCL-2.4:rh-mysql57-mysql-0:5.7.19-6.el7.x86_64",
            "7Server-RHSCL-2.4:rh-mysql57-mysql-common-0:5.7.19-6.el7.x86_64",
            "7Server-RHSCL-2.4:rh-mysql57-mysql-config-0:5.7.19-6.el7.x86_64",
            "7Server-RHSCL-2.4:rh-mysql57-mysql-debuginfo-0:5.7.19-6.el7.x86_64",
            "7Server-RHSCL-2.4:rh-mysql57-mysql-devel-0:5.7.19-6.el7.x86_64",
            "7Server-RHSCL-2.4:rh-mysql57-mysql-errmsg-0:5.7.19-6.el7.x86_64",
            "7Server-RHSCL-2.4:rh-mysql57-mysql-server-0:5.7.19-6.el7.x86_64",
            "7Server-RHSCL-2.4:rh-mysql57-mysql-test-0:5.7.19-6.el7.x86_64",
            "7Workstation-RHSCL-2.4:rh-mysql57-mysql-0:5.7.19-6.el7.src",
            "7Workstation-RHSCL-2.4:rh-mysql57-mysql-0:5.7.19-6.el7.x86_64",
            "7Workstation-RHSCL-2.4:rh-mysql57-mysql-common-0:5.7.19-6.el7.x86_64",
            "7Workstation-RHSCL-2.4:rh-mysql57-mysql-config-0:5.7.19-6.el7.x86_64",
            "7Workstation-RHSCL-2.4:rh-mysql57-mysql-debuginfo-0:5.7.19-6.el7.x86_64",
            "7Workstation-RHSCL-2.4:rh-mysql57-mysql-devel-0:5.7.19-6.el7.x86_64",
            "7Workstation-RHSCL-2.4:rh-mysql57-mysql-errmsg-0:5.7.19-6.el7.x86_64",
            "7Workstation-RHSCL-2.4:rh-mysql57-mysql-server-0:5.7.19-6.el7.x86_64",
            "7Workstation-RHSCL-2.4:rh-mysql57-mysql-test-0:5.7.19-6.el7.x86_64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2017:2886"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "NONE",
            "baseScore": 4.3,
            "baseSeverity": "MEDIUM",
            "confidentialityImpact": "NONE",
            "integrityImpact": "LOW",
            "privilegesRequired": "LOW",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N",
            "version": "3.0"
          },
          "products": [
            "6Server-RHSCL-2.4-6.7.Z:rh-mysql57-mysql-0:5.7.19-6.el6.src",
            "6Server-RHSCL-2.4-6.7.Z:rh-mysql57-mysql-0:5.7.19-6.el6.x86_64",
            "6Server-RHSCL-2.4-6.7.Z:rh-mysql57-mysql-common-0:5.7.19-6.el6.x86_64",
            "6Server-RHSCL-2.4-6.7.Z:rh-mysql57-mysql-config-0:5.7.19-6.el6.x86_64",
            "6Server-RHSCL-2.4-6.7.Z:rh-mysql57-mysql-debuginfo-0:5.7.19-6.el6.x86_64",
            "6Server-RHSCL-2.4-6.7.Z:rh-mysql57-mysql-devel-0:5.7.19-6.el6.x86_64",
            "6Server-RHSCL-2.4-6.7.Z:rh-mysql57-mysql-errmsg-0:5.7.19-6.el6.x86_64",
            "6Server-RHSCL-2.4-6.7.Z:rh-mysql57-mysql-server-0:5.7.19-6.el6.x86_64",
            "6Server-RHSCL-2.4-6.7.Z:rh-mysql57-mysql-test-0:5.7.19-6.el6.x86_64",
            "6Server-RHSCL-2.4:rh-mysql57-mysql-0:5.7.19-6.el6.src",
            "6Server-RHSCL-2.4:rh-mysql57-mysql-0:5.7.19-6.el6.x86_64",
            "6Server-RHSCL-2.4:rh-mysql57-mysql-common-0:5.7.19-6.el6.x86_64",
            "6Server-RHSCL-2.4:rh-mysql57-mysql-config-0:5.7.19-6.el6.x86_64",
            "6Server-RHSCL-2.4:rh-mysql57-mysql-debuginfo-0:5.7.19-6.el6.x86_64",
            "6Server-RHSCL-2.4:rh-mysql57-mysql-devel-0:5.7.19-6.el6.x86_64",
            "6Server-RHSCL-2.4:rh-mysql57-mysql-errmsg-0:5.7.19-6.el6.x86_64",
            "6Server-RHSCL-2.4:rh-mysql57-mysql-server-0:5.7.19-6.el6.x86_64",
            "6Server-RHSCL-2.4:rh-mysql57-mysql-test-0:5.7.19-6.el6.x86_64",
            "6Workstation-RHSCL-2.4:rh-mysql57-mysql-0:5.7.19-6.el6.src",
            "6Workstation-RHSCL-2.4:rh-mysql57-mysql-0:5.7.19-6.el6.x86_64",
            "6Workstation-RHSCL-2.4:rh-mysql57-mysql-common-0:5.7.19-6.el6.x86_64",
            "6Workstation-RHSCL-2.4:rh-mysql57-mysql-config-0:5.7.19-6.el6.x86_64",
            "6Workstation-RHSCL-2.4:rh-mysql57-mysql-debuginfo-0:5.7.19-6.el6.x86_64",
            "6Workstation-RHSCL-2.4:rh-mysql57-mysql-devel-0:5.7.19-6.el6.x86_64",
            "6Workstation-RHSCL-2.4:rh-mysql57-mysql-errmsg-0:5.7.19-6.el6.x86_64",
            "6Workstation-RHSCL-2.4:rh-mysql57-mysql-server-0:5.7.19-6.el6.x86_64",
            "6Workstation-RHSCL-2.4:rh-mysql57-mysql-test-0:5.7.19-6.el6.x86_64",
            "7Server-RHSCL-2.4-7.3.Z:rh-mysql57-mysql-0:5.7.19-6.el7.src",
            "7Server-RHSCL-2.4-7.3.Z:rh-mysql57-mysql-0:5.7.19-6.el7.x86_64",
            "7Server-RHSCL-2.4-7.3.Z:rh-mysql57-mysql-common-0:5.7.19-6.el7.x86_64",
            "7Server-RHSCL-2.4-7.3.Z:rh-mysql57-mysql-config-0:5.7.19-6.el7.x86_64",
            "7Server-RHSCL-2.4-7.3.Z:rh-mysql57-mysql-debuginfo-0:5.7.19-6.el7.x86_64",
            "7Server-RHSCL-2.4-7.3.Z:rh-mysql57-mysql-devel-0:5.7.19-6.el7.x86_64",
            "7Server-RHSCL-2.4-7.3.Z:rh-mysql57-mysql-errmsg-0:5.7.19-6.el7.x86_64",
            "7Server-RHSCL-2.4-7.3.Z:rh-mysql57-mysql-server-0:5.7.19-6.el7.x86_64",
            "7Server-RHSCL-2.4-7.3.Z:rh-mysql57-mysql-test-0:5.7.19-6.el7.x86_64",
            "7Server-RHSCL-2.4:rh-mysql57-mysql-0:5.7.19-6.el7.src",
            "7Server-RHSCL-2.4:rh-mysql57-mysql-0:5.7.19-6.el7.x86_64",
            "7Server-RHSCL-2.4:rh-mysql57-mysql-common-0:5.7.19-6.el7.x86_64",
            "7Server-RHSCL-2.4:rh-mysql57-mysql-config-0:5.7.19-6.el7.x86_64",
            "7Server-RHSCL-2.4:rh-mysql57-mysql-debuginfo-0:5.7.19-6.el7.x86_64",
            "7Server-RHSCL-2.4:rh-mysql57-mysql-devel-0:5.7.19-6.el7.x86_64",
            "7Server-RHSCL-2.4:rh-mysql57-mysql-errmsg-0:5.7.19-6.el7.x86_64",
            "7Server-RHSCL-2.4:rh-mysql57-mysql-server-0:5.7.19-6.el7.x86_64",
            "7Server-RHSCL-2.4:rh-mysql57-mysql-test-0:5.7.19-6.el7.x86_64",
            "7Workstation-RHSCL-2.4:rh-mysql57-mysql-0:5.7.19-6.el7.src",
            "7Workstation-RHSCL-2.4:rh-mysql57-mysql-0:5.7.19-6.el7.x86_64",
            "7Workstation-RHSCL-2.4:rh-mysql57-mysql-common-0:5.7.19-6.el7.x86_64",
            "7Workstation-RHSCL-2.4:rh-mysql57-mysql-config-0:5.7.19-6.el7.x86_64",
            "7Workstation-RHSCL-2.4:rh-mysql57-mysql-debuginfo-0:5.7.19-6.el7.x86_64",
            "7Workstation-RHSCL-2.4:rh-mysql57-mysql-devel-0:5.7.19-6.el7.x86_64",
            "7Workstation-RHSCL-2.4:rh-mysql57-mysql-errmsg-0:5.7.19-6.el7.x86_64",
            "7Workstation-RHSCL-2.4:rh-mysql57-mysql-server-0:5.7.19-6.el7.x86_64",
            "7Workstation-RHSCL-2.4:rh-mysql57-mysql-test-0:5.7.19-6.el7.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Moderate"
        }
      ],
      "title": "mysql: Client mysqldump unspecified vulnerability (CPU Jul 2017)"
    },
    {
      "cve": "CVE-2017-3652",
      "discovery_date": "2017-07-19T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "1472710"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: DDL). Supported versions that are affected are 5.5.56 and earlier, 5.6.36 and earlier and 5.7.18 and earlier. Difficult to exploit vulnerability allows low privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of MySQL Server accessible data as well as unauthorized read access to a subset of MySQL Server accessible data. CVSS 3.0 Base Score 4.2 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:H/PR:L/UI:N/S:U/C:L/I:L/A:N).",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "mysql: Server: DDL unspecified vulnerability (CPU Jul 2017)",
          "title": "Vulnerability summary"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "6Server-RHSCL-2.4-6.7.Z:rh-mysql57-mysql-0:5.7.19-6.el6.src",
          "6Server-RHSCL-2.4-6.7.Z:rh-mysql57-mysql-0:5.7.19-6.el6.x86_64",
          "6Server-RHSCL-2.4-6.7.Z:rh-mysql57-mysql-common-0:5.7.19-6.el6.x86_64",
          "6Server-RHSCL-2.4-6.7.Z:rh-mysql57-mysql-config-0:5.7.19-6.el6.x86_64",
          "6Server-RHSCL-2.4-6.7.Z:rh-mysql57-mysql-debuginfo-0:5.7.19-6.el6.x86_64",
          "6Server-RHSCL-2.4-6.7.Z:rh-mysql57-mysql-devel-0:5.7.19-6.el6.x86_64",
          "6Server-RHSCL-2.4-6.7.Z:rh-mysql57-mysql-errmsg-0:5.7.19-6.el6.x86_64",
          "6Server-RHSCL-2.4-6.7.Z:rh-mysql57-mysql-server-0:5.7.19-6.el6.x86_64",
          "6Server-RHSCL-2.4-6.7.Z:rh-mysql57-mysql-test-0:5.7.19-6.el6.x86_64",
          "6Server-RHSCL-2.4:rh-mysql57-mysql-0:5.7.19-6.el6.src",
          "6Server-RHSCL-2.4:rh-mysql57-mysql-0:5.7.19-6.el6.x86_64",
          "6Server-RHSCL-2.4:rh-mysql57-mysql-common-0:5.7.19-6.el6.x86_64",
          "6Server-RHSCL-2.4:rh-mysql57-mysql-config-0:5.7.19-6.el6.x86_64",
          "6Server-RHSCL-2.4:rh-mysql57-mysql-debuginfo-0:5.7.19-6.el6.x86_64",
          "6Server-RHSCL-2.4:rh-mysql57-mysql-devel-0:5.7.19-6.el6.x86_64",
          "6Server-RHSCL-2.4:rh-mysql57-mysql-errmsg-0:5.7.19-6.el6.x86_64",
          "6Server-RHSCL-2.4:rh-mysql57-mysql-server-0:5.7.19-6.el6.x86_64",
          "6Server-RHSCL-2.4:rh-mysql57-mysql-test-0:5.7.19-6.el6.x86_64",
          "6Workstation-RHSCL-2.4:rh-mysql57-mysql-0:5.7.19-6.el6.src",
          "6Workstation-RHSCL-2.4:rh-mysql57-mysql-0:5.7.19-6.el6.x86_64",
          "6Workstation-RHSCL-2.4:rh-mysql57-mysql-common-0:5.7.19-6.el6.x86_64",
          "6Workstation-RHSCL-2.4:rh-mysql57-mysql-config-0:5.7.19-6.el6.x86_64",
          "6Workstation-RHSCL-2.4:rh-mysql57-mysql-debuginfo-0:5.7.19-6.el6.x86_64",
          "6Workstation-RHSCL-2.4:rh-mysql57-mysql-devel-0:5.7.19-6.el6.x86_64",
          "6Workstation-RHSCL-2.4:rh-mysql57-mysql-errmsg-0:5.7.19-6.el6.x86_64",
          "6Workstation-RHSCL-2.4:rh-mysql57-mysql-server-0:5.7.19-6.el6.x86_64",
          "6Workstation-RHSCL-2.4:rh-mysql57-mysql-test-0:5.7.19-6.el6.x86_64",
          "7Server-RHSCL-2.4-7.3.Z:rh-mysql57-mysql-0:5.7.19-6.el7.src",
          "7Server-RHSCL-2.4-7.3.Z:rh-mysql57-mysql-0:5.7.19-6.el7.x86_64",
          "7Server-RHSCL-2.4-7.3.Z:rh-mysql57-mysql-common-0:5.7.19-6.el7.x86_64",
          "7Server-RHSCL-2.4-7.3.Z:rh-mysql57-mysql-config-0:5.7.19-6.el7.x86_64",
          "7Server-RHSCL-2.4-7.3.Z:rh-mysql57-mysql-debuginfo-0:5.7.19-6.el7.x86_64",
          "7Server-RHSCL-2.4-7.3.Z:rh-mysql57-mysql-devel-0:5.7.19-6.el7.x86_64",
          "7Server-RHSCL-2.4-7.3.Z:rh-mysql57-mysql-errmsg-0:5.7.19-6.el7.x86_64",
          "7Server-RHSCL-2.4-7.3.Z:rh-mysql57-mysql-server-0:5.7.19-6.el7.x86_64",
          "7Server-RHSCL-2.4-7.3.Z:rh-mysql57-mysql-test-0:5.7.19-6.el7.x86_64",
          "7Server-RHSCL-2.4:rh-mysql57-mysql-0:5.7.19-6.el7.src",
          "7Server-RHSCL-2.4:rh-mysql57-mysql-0:5.7.19-6.el7.x86_64",
          "7Server-RHSCL-2.4:rh-mysql57-mysql-common-0:5.7.19-6.el7.x86_64",
          "7Server-RHSCL-2.4:rh-mysql57-mysql-config-0:5.7.19-6.el7.x86_64",
          "7Server-RHSCL-2.4:rh-mysql57-mysql-debuginfo-0:5.7.19-6.el7.x86_64",
          "7Server-RHSCL-2.4:rh-mysql57-mysql-devel-0:5.7.19-6.el7.x86_64",
          "7Server-RHSCL-2.4:rh-mysql57-mysql-errmsg-0:5.7.19-6.el7.x86_64",
          "7Server-RHSCL-2.4:rh-mysql57-mysql-server-0:5.7.19-6.el7.x86_64",
          "7Server-RHSCL-2.4:rh-mysql57-mysql-test-0:5.7.19-6.el7.x86_64",
          "7Workstation-RHSCL-2.4:rh-mysql57-mysql-0:5.7.19-6.el7.src",
          "7Workstation-RHSCL-2.4:rh-mysql57-mysql-0:5.7.19-6.el7.x86_64",
          "7Workstation-RHSCL-2.4:rh-mysql57-mysql-common-0:5.7.19-6.el7.x86_64",
          "7Workstation-RHSCL-2.4:rh-mysql57-mysql-config-0:5.7.19-6.el7.x86_64",
          "7Workstation-RHSCL-2.4:rh-mysql57-mysql-debuginfo-0:5.7.19-6.el7.x86_64",
          "7Workstation-RHSCL-2.4:rh-mysql57-mysql-devel-0:5.7.19-6.el7.x86_64",
          "7Workstation-RHSCL-2.4:rh-mysql57-mysql-errmsg-0:5.7.19-6.el7.x86_64",
          "7Workstation-RHSCL-2.4:rh-mysql57-mysql-server-0:5.7.19-6.el7.x86_64",
          "7Workstation-RHSCL-2.4:rh-mysql57-mysql-test-0:5.7.19-6.el7.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2017-3652"
        },
        {
          "category": "external",
          "summary": "RHBZ#1472710",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1472710"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2017-3652",
          "url": "https://www.cve.org/CVERecord?id=CVE-2017-3652"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2017-3652",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2017-3652"
        },
        {
          "category": "external",
          "summary": "http://www.oracle.com/technetwork/security-advisory/cpujul2017-3236622.html#AppendixMSQL",
          "url": "http://www.oracle.com/technetwork/security-advisory/cpujul2017-3236622.html#AppendixMSQL"
        }
      ],
      "release_date": "2017-07-19T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2017-10-12T07:53:15+00:00",
          "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAfter installing this update, the MySQL server daemon (mysqld) will be restarted automatically.",
          "product_ids": [
            "6Server-RHSCL-2.4-6.7.Z:rh-mysql57-mysql-0:5.7.19-6.el6.src",
            "6Server-RHSCL-2.4-6.7.Z:rh-mysql57-mysql-0:5.7.19-6.el6.x86_64",
            "6Server-RHSCL-2.4-6.7.Z:rh-mysql57-mysql-common-0:5.7.19-6.el6.x86_64",
            "6Server-RHSCL-2.4-6.7.Z:rh-mysql57-mysql-config-0:5.7.19-6.el6.x86_64",
            "6Server-RHSCL-2.4-6.7.Z:rh-mysql57-mysql-debuginfo-0:5.7.19-6.el6.x86_64",
            "6Server-RHSCL-2.4-6.7.Z:rh-mysql57-mysql-devel-0:5.7.19-6.el6.x86_64",
            "6Server-RHSCL-2.4-6.7.Z:rh-mysql57-mysql-errmsg-0:5.7.19-6.el6.x86_64",
            "6Server-RHSCL-2.4-6.7.Z:rh-mysql57-mysql-server-0:5.7.19-6.el6.x86_64",
            "6Server-RHSCL-2.4-6.7.Z:rh-mysql57-mysql-test-0:5.7.19-6.el6.x86_64",
            "6Server-RHSCL-2.4:rh-mysql57-mysql-0:5.7.19-6.el6.src",
            "6Server-RHSCL-2.4:rh-mysql57-mysql-0:5.7.19-6.el6.x86_64",
            "6Server-RHSCL-2.4:rh-mysql57-mysql-common-0:5.7.19-6.el6.x86_64",
            "6Server-RHSCL-2.4:rh-mysql57-mysql-config-0:5.7.19-6.el6.x86_64",
            "6Server-RHSCL-2.4:rh-mysql57-mysql-debuginfo-0:5.7.19-6.el6.x86_64",
            "6Server-RHSCL-2.4:rh-mysql57-mysql-devel-0:5.7.19-6.el6.x86_64",
            "6Server-RHSCL-2.4:rh-mysql57-mysql-errmsg-0:5.7.19-6.el6.x86_64",
            "6Server-RHSCL-2.4:rh-mysql57-mysql-server-0:5.7.19-6.el6.x86_64",
            "6Server-RHSCL-2.4:rh-mysql57-mysql-test-0:5.7.19-6.el6.x86_64",
            "6Workstation-RHSCL-2.4:rh-mysql57-mysql-0:5.7.19-6.el6.src",
            "6Workstation-RHSCL-2.4:rh-mysql57-mysql-0:5.7.19-6.el6.x86_64",
            "6Workstation-RHSCL-2.4:rh-mysql57-mysql-common-0:5.7.19-6.el6.x86_64",
            "6Workstation-RHSCL-2.4:rh-mysql57-mysql-config-0:5.7.19-6.el6.x86_64",
            "6Workstation-RHSCL-2.4:rh-mysql57-mysql-debuginfo-0:5.7.19-6.el6.x86_64",
            "6Workstation-RHSCL-2.4:rh-mysql57-mysql-devel-0:5.7.19-6.el6.x86_64",
            "6Workstation-RHSCL-2.4:rh-mysql57-mysql-errmsg-0:5.7.19-6.el6.x86_64",
            "6Workstation-RHSCL-2.4:rh-mysql57-mysql-server-0:5.7.19-6.el6.x86_64",
            "6Workstation-RHSCL-2.4:rh-mysql57-mysql-test-0:5.7.19-6.el6.x86_64",
            "7Server-RHSCL-2.4-7.3.Z:rh-mysql57-mysql-0:5.7.19-6.el7.src",
            "7Server-RHSCL-2.4-7.3.Z:rh-mysql57-mysql-0:5.7.19-6.el7.x86_64",
            "7Server-RHSCL-2.4-7.3.Z:rh-mysql57-mysql-common-0:5.7.19-6.el7.x86_64",
            "7Server-RHSCL-2.4-7.3.Z:rh-mysql57-mysql-config-0:5.7.19-6.el7.x86_64",
            "7Server-RHSCL-2.4-7.3.Z:rh-mysql57-mysql-debuginfo-0:5.7.19-6.el7.x86_64",
            "7Server-RHSCL-2.4-7.3.Z:rh-mysql57-mysql-devel-0:5.7.19-6.el7.x86_64",
            "7Server-RHSCL-2.4-7.3.Z:rh-mysql57-mysql-errmsg-0:5.7.19-6.el7.x86_64",
            "7Server-RHSCL-2.4-7.3.Z:rh-mysql57-mysql-server-0:5.7.19-6.el7.x86_64",
            "7Server-RHSCL-2.4-7.3.Z:rh-mysql57-mysql-test-0:5.7.19-6.el7.x86_64",
            "7Server-RHSCL-2.4:rh-mysql57-mysql-0:5.7.19-6.el7.src",
            "7Server-RHSCL-2.4:rh-mysql57-mysql-0:5.7.19-6.el7.x86_64",
            "7Server-RHSCL-2.4:rh-mysql57-mysql-common-0:5.7.19-6.el7.x86_64",
            "7Server-RHSCL-2.4:rh-mysql57-mysql-config-0:5.7.19-6.el7.x86_64",
            "7Server-RHSCL-2.4:rh-mysql57-mysql-debuginfo-0:5.7.19-6.el7.x86_64",
            "7Server-RHSCL-2.4:rh-mysql57-mysql-devel-0:5.7.19-6.el7.x86_64",
            "7Server-RHSCL-2.4:rh-mysql57-mysql-errmsg-0:5.7.19-6.el7.x86_64",
            "7Server-RHSCL-2.4:rh-mysql57-mysql-server-0:5.7.19-6.el7.x86_64",
            "7Server-RHSCL-2.4:rh-mysql57-mysql-test-0:5.7.19-6.el7.x86_64",
            "7Workstation-RHSCL-2.4:rh-mysql57-mysql-0:5.7.19-6.el7.src",
            "7Workstation-RHSCL-2.4:rh-mysql57-mysql-0:5.7.19-6.el7.x86_64",
            "7Workstation-RHSCL-2.4:rh-mysql57-mysql-common-0:5.7.19-6.el7.x86_64",
            "7Workstation-RHSCL-2.4:rh-mysql57-mysql-config-0:5.7.19-6.el7.x86_64",
            "7Workstation-RHSCL-2.4:rh-mysql57-mysql-debuginfo-0:5.7.19-6.el7.x86_64",
            "7Workstation-RHSCL-2.4:rh-mysql57-mysql-devel-0:5.7.19-6.el7.x86_64",
            "7Workstation-RHSCL-2.4:rh-mysql57-mysql-errmsg-0:5.7.19-6.el7.x86_64",
            "7Workstation-RHSCL-2.4:rh-mysql57-mysql-server-0:5.7.19-6.el7.x86_64",
            "7Workstation-RHSCL-2.4:rh-mysql57-mysql-test-0:5.7.19-6.el7.x86_64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2017:2886"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "HIGH",
            "attackVector": "NETWORK",
            "availabilityImpact": "NONE",
            "baseScore": 4.2,
            "baseSeverity": "MEDIUM",
            "confidentialityImpact": "LOW",
            "integrityImpact": "LOW",
            "privilegesRequired": "LOW",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.0/AV:N/AC:H/PR:L/UI:N/S:U/C:L/I:L/A:N",
            "version": "3.0"
          },
          "products": [
            "6Server-RHSCL-2.4-6.7.Z:rh-mysql57-mysql-0:5.7.19-6.el6.src",
            "6Server-RHSCL-2.4-6.7.Z:rh-mysql57-mysql-0:5.7.19-6.el6.x86_64",
            "6Server-RHSCL-2.4-6.7.Z:rh-mysql57-mysql-common-0:5.7.19-6.el6.x86_64",
            "6Server-RHSCL-2.4-6.7.Z:rh-mysql57-mysql-config-0:5.7.19-6.el6.x86_64",
            "6Server-RHSCL-2.4-6.7.Z:rh-mysql57-mysql-debuginfo-0:5.7.19-6.el6.x86_64",
            "6Server-RHSCL-2.4-6.7.Z:rh-mysql57-mysql-devel-0:5.7.19-6.el6.x86_64",
            "6Server-RHSCL-2.4-6.7.Z:rh-mysql57-mysql-errmsg-0:5.7.19-6.el6.x86_64",
            "6Server-RHSCL-2.4-6.7.Z:rh-mysql57-mysql-server-0:5.7.19-6.el6.x86_64",
            "6Server-RHSCL-2.4-6.7.Z:rh-mysql57-mysql-test-0:5.7.19-6.el6.x86_64",
            "6Server-RHSCL-2.4:rh-mysql57-mysql-0:5.7.19-6.el6.src",
            "6Server-RHSCL-2.4:rh-mysql57-mysql-0:5.7.19-6.el6.x86_64",
            "6Server-RHSCL-2.4:rh-mysql57-mysql-common-0:5.7.19-6.el6.x86_64",
            "6Server-RHSCL-2.4:rh-mysql57-mysql-config-0:5.7.19-6.el6.x86_64",
            "6Server-RHSCL-2.4:rh-mysql57-mysql-debuginfo-0:5.7.19-6.el6.x86_64",
            "6Server-RHSCL-2.4:rh-mysql57-mysql-devel-0:5.7.19-6.el6.x86_64",
            "6Server-RHSCL-2.4:rh-mysql57-mysql-errmsg-0:5.7.19-6.el6.x86_64",
            "6Server-RHSCL-2.4:rh-mysql57-mysql-server-0:5.7.19-6.el6.x86_64",
            "6Server-RHSCL-2.4:rh-mysql57-mysql-test-0:5.7.19-6.el6.x86_64",
            "6Workstation-RHSCL-2.4:rh-mysql57-mysql-0:5.7.19-6.el6.src",
            "6Workstation-RHSCL-2.4:rh-mysql57-mysql-0:5.7.19-6.el6.x86_64",
            "6Workstation-RHSCL-2.4:rh-mysql57-mysql-common-0:5.7.19-6.el6.x86_64",
            "6Workstation-RHSCL-2.4:rh-mysql57-mysql-config-0:5.7.19-6.el6.x86_64",
            "6Workstation-RHSCL-2.4:rh-mysql57-mysql-debuginfo-0:5.7.19-6.el6.x86_64",
            "6Workstation-RHSCL-2.4:rh-mysql57-mysql-devel-0:5.7.19-6.el6.x86_64",
            "6Workstation-RHSCL-2.4:rh-mysql57-mysql-errmsg-0:5.7.19-6.el6.x86_64",
            "6Workstation-RHSCL-2.4:rh-mysql57-mysql-server-0:5.7.19-6.el6.x86_64",
            "6Workstation-RHSCL-2.4:rh-mysql57-mysql-test-0:5.7.19-6.el6.x86_64",
            "7Server-RHSCL-2.4-7.3.Z:rh-mysql57-mysql-0:5.7.19-6.el7.src",
            "7Server-RHSCL-2.4-7.3.Z:rh-mysql57-mysql-0:5.7.19-6.el7.x86_64",
            "7Server-RHSCL-2.4-7.3.Z:rh-mysql57-mysql-common-0:5.7.19-6.el7.x86_64",
            "7Server-RHSCL-2.4-7.3.Z:rh-mysql57-mysql-config-0:5.7.19-6.el7.x86_64",
            "7Server-RHSCL-2.4-7.3.Z:rh-mysql57-mysql-debuginfo-0:5.7.19-6.el7.x86_64",
            "7Server-RHSCL-2.4-7.3.Z:rh-mysql57-mysql-devel-0:5.7.19-6.el7.x86_64",
            "7Server-RHSCL-2.4-7.3.Z:rh-mysql57-mysql-errmsg-0:5.7.19-6.el7.x86_64",
            "7Server-RHSCL-2.4-7.3.Z:rh-mysql57-mysql-server-0:5.7.19-6.el7.x86_64",
            "7Server-RHSCL-2.4-7.3.Z:rh-mysql57-mysql-test-0:5.7.19-6.el7.x86_64",
            "7Server-RHSCL-2.4:rh-mysql57-mysql-0:5.7.19-6.el7.src",
            "7Server-RHSCL-2.4:rh-mysql57-mysql-0:5.7.19-6.el7.x86_64",
            "7Server-RHSCL-2.4:rh-mysql57-mysql-common-0:5.7.19-6.el7.x86_64",
            "7Server-RHSCL-2.4:rh-mysql57-mysql-config-0:5.7.19-6.el7.x86_64",
            "7Server-RHSCL-2.4:rh-mysql57-mysql-debuginfo-0:5.7.19-6.el7.x86_64",
            "7Server-RHSCL-2.4:rh-mysql57-mysql-devel-0:5.7.19-6.el7.x86_64",
            "7Server-RHSCL-2.4:rh-mysql57-mysql-errmsg-0:5.7.19-6.el7.x86_64",
            "7Server-RHSCL-2.4:rh-mysql57-mysql-server-0:5.7.19-6.el7.x86_64",
            "7Server-RHSCL-2.4:rh-mysql57-mysql-test-0:5.7.19-6.el7.x86_64",
            "7Workstation-RHSCL-2.4:rh-mysql57-mysql-0:5.7.19-6.el7.src",
            "7Workstation-RHSCL-2.4:rh-mysql57-mysql-0:5.7.19-6.el7.x86_64",
            "7Workstation-RHSCL-2.4:rh-mysql57-mysql-common-0:5.7.19-6.el7.x86_64",
            "7Workstation-RHSCL-2.4:rh-mysql57-mysql-config-0:5.7.19-6.el7.x86_64",
            "7Workstation-RHSCL-2.4:rh-mysql57-mysql-debuginfo-0:5.7.19-6.el7.x86_64",
            "7Workstation-RHSCL-2.4:rh-mysql57-mysql-devel-0:5.7.19-6.el7.x86_64",
            "7Workstation-RHSCL-2.4:rh-mysql57-mysql-errmsg-0:5.7.19-6.el7.x86_64",
            "7Workstation-RHSCL-2.4:rh-mysql57-mysql-server-0:5.7.19-6.el7.x86_64",
            "7Workstation-RHSCL-2.4:rh-mysql57-mysql-test-0:5.7.19-6.el7.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Moderate"
        }
      ],
      "title": "mysql: Server: DDL unspecified vulnerability (CPU Jul 2017)"
    },
    {
      "cve": "CVE-2017-3653",
      "discovery_date": "2017-07-19T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "1472711"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: DDL). Supported versions that are affected are 5.5.56 and earlier, 5.6.36 and earlier and 5.7.18 and earlier. Difficult to exploit vulnerability allows low privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of MySQL Server accessible data. CVSS 3.0 Base Score 3.1 (Integrity impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:H/PR:L/UI:N/S:U/C:N/I:L/A:N).",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "mysql: Server: DDL unspecified vulnerability (CPU Jul 2017)",
          "title": "Vulnerability summary"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "6Server-RHSCL-2.4-6.7.Z:rh-mysql57-mysql-0:5.7.19-6.el6.src",
          "6Server-RHSCL-2.4-6.7.Z:rh-mysql57-mysql-0:5.7.19-6.el6.x86_64",
          "6Server-RHSCL-2.4-6.7.Z:rh-mysql57-mysql-common-0:5.7.19-6.el6.x86_64",
          "6Server-RHSCL-2.4-6.7.Z:rh-mysql57-mysql-config-0:5.7.19-6.el6.x86_64",
          "6Server-RHSCL-2.4-6.7.Z:rh-mysql57-mysql-debuginfo-0:5.7.19-6.el6.x86_64",
          "6Server-RHSCL-2.4-6.7.Z:rh-mysql57-mysql-devel-0:5.7.19-6.el6.x86_64",
          "6Server-RHSCL-2.4-6.7.Z:rh-mysql57-mysql-errmsg-0:5.7.19-6.el6.x86_64",
          "6Server-RHSCL-2.4-6.7.Z:rh-mysql57-mysql-server-0:5.7.19-6.el6.x86_64",
          "6Server-RHSCL-2.4-6.7.Z:rh-mysql57-mysql-test-0:5.7.19-6.el6.x86_64",
          "6Server-RHSCL-2.4:rh-mysql57-mysql-0:5.7.19-6.el6.src",
          "6Server-RHSCL-2.4:rh-mysql57-mysql-0:5.7.19-6.el6.x86_64",
          "6Server-RHSCL-2.4:rh-mysql57-mysql-common-0:5.7.19-6.el6.x86_64",
          "6Server-RHSCL-2.4:rh-mysql57-mysql-config-0:5.7.19-6.el6.x86_64",
          "6Server-RHSCL-2.4:rh-mysql57-mysql-debuginfo-0:5.7.19-6.el6.x86_64",
          "6Server-RHSCL-2.4:rh-mysql57-mysql-devel-0:5.7.19-6.el6.x86_64",
          "6Server-RHSCL-2.4:rh-mysql57-mysql-errmsg-0:5.7.19-6.el6.x86_64",
          "6Server-RHSCL-2.4:rh-mysql57-mysql-server-0:5.7.19-6.el6.x86_64",
          "6Server-RHSCL-2.4:rh-mysql57-mysql-test-0:5.7.19-6.el6.x86_64",
          "6Workstation-RHSCL-2.4:rh-mysql57-mysql-0:5.7.19-6.el6.src",
          "6Workstation-RHSCL-2.4:rh-mysql57-mysql-0:5.7.19-6.el6.x86_64",
          "6Workstation-RHSCL-2.4:rh-mysql57-mysql-common-0:5.7.19-6.el6.x86_64",
          "6Workstation-RHSCL-2.4:rh-mysql57-mysql-config-0:5.7.19-6.el6.x86_64",
          "6Workstation-RHSCL-2.4:rh-mysql57-mysql-debuginfo-0:5.7.19-6.el6.x86_64",
          "6Workstation-RHSCL-2.4:rh-mysql57-mysql-devel-0:5.7.19-6.el6.x86_64",
          "6Workstation-RHSCL-2.4:rh-mysql57-mysql-errmsg-0:5.7.19-6.el6.x86_64",
          "6Workstation-RHSCL-2.4:rh-mysql57-mysql-server-0:5.7.19-6.el6.x86_64",
          "6Workstation-RHSCL-2.4:rh-mysql57-mysql-test-0:5.7.19-6.el6.x86_64",
          "7Server-RHSCL-2.4-7.3.Z:rh-mysql57-mysql-0:5.7.19-6.el7.src",
          "7Server-RHSCL-2.4-7.3.Z:rh-mysql57-mysql-0:5.7.19-6.el7.x86_64",
          "7Server-RHSCL-2.4-7.3.Z:rh-mysql57-mysql-common-0:5.7.19-6.el7.x86_64",
          "7Server-RHSCL-2.4-7.3.Z:rh-mysql57-mysql-config-0:5.7.19-6.el7.x86_64",
          "7Server-RHSCL-2.4-7.3.Z:rh-mysql57-mysql-debuginfo-0:5.7.19-6.el7.x86_64",
          "7Server-RHSCL-2.4-7.3.Z:rh-mysql57-mysql-devel-0:5.7.19-6.el7.x86_64",
          "7Server-RHSCL-2.4-7.3.Z:rh-mysql57-mysql-errmsg-0:5.7.19-6.el7.x86_64",
          "7Server-RHSCL-2.4-7.3.Z:rh-mysql57-mysql-server-0:5.7.19-6.el7.x86_64",
          "7Server-RHSCL-2.4-7.3.Z:rh-mysql57-mysql-test-0:5.7.19-6.el7.x86_64",
          "7Server-RHSCL-2.4:rh-mysql57-mysql-0:5.7.19-6.el7.src",
          "7Server-RHSCL-2.4:rh-mysql57-mysql-0:5.7.19-6.el7.x86_64",
          "7Server-RHSCL-2.4:rh-mysql57-mysql-common-0:5.7.19-6.el7.x86_64",
          "7Server-RHSCL-2.4:rh-mysql57-mysql-config-0:5.7.19-6.el7.x86_64",
          "7Server-RHSCL-2.4:rh-mysql57-mysql-debuginfo-0:5.7.19-6.el7.x86_64",
          "7Server-RHSCL-2.4:rh-mysql57-mysql-devel-0:5.7.19-6.el7.x86_64",
          "7Server-RHSCL-2.4:rh-mysql57-mysql-errmsg-0:5.7.19-6.el7.x86_64",
          "7Server-RHSCL-2.4:rh-mysql57-mysql-server-0:5.7.19-6.el7.x86_64",
          "7Server-RHSCL-2.4:rh-mysql57-mysql-test-0:5.7.19-6.el7.x86_64",
          "7Workstation-RHSCL-2.4:rh-mysql57-mysql-0:5.7.19-6.el7.src",
          "7Workstation-RHSCL-2.4:rh-mysql57-mysql-0:5.7.19-6.el7.x86_64",
          "7Workstation-RHSCL-2.4:rh-mysql57-mysql-common-0:5.7.19-6.el7.x86_64",
          "7Workstation-RHSCL-2.4:rh-mysql57-mysql-config-0:5.7.19-6.el7.x86_64",
          "7Workstation-RHSCL-2.4:rh-mysql57-mysql-debuginfo-0:5.7.19-6.el7.x86_64",
          "7Workstation-RHSCL-2.4:rh-mysql57-mysql-devel-0:5.7.19-6.el7.x86_64",
          "7Workstation-RHSCL-2.4:rh-mysql57-mysql-errmsg-0:5.7.19-6.el7.x86_64",
          "7Workstation-RHSCL-2.4:rh-mysql57-mysql-server-0:5.7.19-6.el7.x86_64",
          "7Workstation-RHSCL-2.4:rh-mysql57-mysql-test-0:5.7.19-6.el7.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2017-3653"
        },
        {
          "category": "external",
          "summary": "RHBZ#1472711",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1472711"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2017-3653",
          "url": "https://www.cve.org/CVERecord?id=CVE-2017-3653"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2017-3653",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2017-3653"
        },
        {
          "category": "external",
          "summary": "http://www.oracle.com/technetwork/security-advisory/cpujul2017-3236622.html#AppendixMSQL",
          "url": "http://www.oracle.com/technetwork/security-advisory/cpujul2017-3236622.html#AppendixMSQL"
        }
      ],
      "release_date": "2017-07-19T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2017-10-12T07:53:15+00:00",
          "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAfter installing this update, the MySQL server daemon (mysqld) will be restarted automatically.",
          "product_ids": [
            "6Server-RHSCL-2.4-6.7.Z:rh-mysql57-mysql-0:5.7.19-6.el6.src",
            "6Server-RHSCL-2.4-6.7.Z:rh-mysql57-mysql-0:5.7.19-6.el6.x86_64",
            "6Server-RHSCL-2.4-6.7.Z:rh-mysql57-mysql-common-0:5.7.19-6.el6.x86_64",
            "6Server-RHSCL-2.4-6.7.Z:rh-mysql57-mysql-config-0:5.7.19-6.el6.x86_64",
            "6Server-RHSCL-2.4-6.7.Z:rh-mysql57-mysql-debuginfo-0:5.7.19-6.el6.x86_64",
            "6Server-RHSCL-2.4-6.7.Z:rh-mysql57-mysql-devel-0:5.7.19-6.el6.x86_64",
            "6Server-RHSCL-2.4-6.7.Z:rh-mysql57-mysql-errmsg-0:5.7.19-6.el6.x86_64",
            "6Server-RHSCL-2.4-6.7.Z:rh-mysql57-mysql-server-0:5.7.19-6.el6.x86_64",
            "6Server-RHSCL-2.4-6.7.Z:rh-mysql57-mysql-test-0:5.7.19-6.el6.x86_64",
            "6Server-RHSCL-2.4:rh-mysql57-mysql-0:5.7.19-6.el6.src",
            "6Server-RHSCL-2.4:rh-mysql57-mysql-0:5.7.19-6.el6.x86_64",
            "6Server-RHSCL-2.4:rh-mysql57-mysql-common-0:5.7.19-6.el6.x86_64",
            "6Server-RHSCL-2.4:rh-mysql57-mysql-config-0:5.7.19-6.el6.x86_64",
            "6Server-RHSCL-2.4:rh-mysql57-mysql-debuginfo-0:5.7.19-6.el6.x86_64",
            "6Server-RHSCL-2.4:rh-mysql57-mysql-devel-0:5.7.19-6.el6.x86_64",
            "6Server-RHSCL-2.4:rh-mysql57-mysql-errmsg-0:5.7.19-6.el6.x86_64",
            "6Server-RHSCL-2.4:rh-mysql57-mysql-server-0:5.7.19-6.el6.x86_64",
            "6Server-RHSCL-2.4:rh-mysql57-mysql-test-0:5.7.19-6.el6.x86_64",
            "6Workstation-RHSCL-2.4:rh-mysql57-mysql-0:5.7.19-6.el6.src",
            "6Workstation-RHSCL-2.4:rh-mysql57-mysql-0:5.7.19-6.el6.x86_64",
            "6Workstation-RHSCL-2.4:rh-mysql57-mysql-common-0:5.7.19-6.el6.x86_64",
            "6Workstation-RHSCL-2.4:rh-mysql57-mysql-config-0:5.7.19-6.el6.x86_64",
            "6Workstation-RHSCL-2.4:rh-mysql57-mysql-debuginfo-0:5.7.19-6.el6.x86_64",
            "6Workstation-RHSCL-2.4:rh-mysql57-mysql-devel-0:5.7.19-6.el6.x86_64",
            "6Workstation-RHSCL-2.4:rh-mysql57-mysql-errmsg-0:5.7.19-6.el6.x86_64",
            "6Workstation-RHSCL-2.4:rh-mysql57-mysql-server-0:5.7.19-6.el6.x86_64",
            "6Workstation-RHSCL-2.4:rh-mysql57-mysql-test-0:5.7.19-6.el6.x86_64",
            "7Server-RHSCL-2.4-7.3.Z:rh-mysql57-mysql-0:5.7.19-6.el7.src",
            "7Server-RHSCL-2.4-7.3.Z:rh-mysql57-mysql-0:5.7.19-6.el7.x86_64",
            "7Server-RHSCL-2.4-7.3.Z:rh-mysql57-mysql-common-0:5.7.19-6.el7.x86_64",
            "7Server-RHSCL-2.4-7.3.Z:rh-mysql57-mysql-config-0:5.7.19-6.el7.x86_64",
            "7Server-RHSCL-2.4-7.3.Z:rh-mysql57-mysql-debuginfo-0:5.7.19-6.el7.x86_64",
            "7Server-RHSCL-2.4-7.3.Z:rh-mysql57-mysql-devel-0:5.7.19-6.el7.x86_64",
            "7Server-RHSCL-2.4-7.3.Z:rh-mysql57-mysql-errmsg-0:5.7.19-6.el7.x86_64",
            "7Server-RHSCL-2.4-7.3.Z:rh-mysql57-mysql-server-0:5.7.19-6.el7.x86_64",
            "7Server-RHSCL-2.4-7.3.Z:rh-mysql57-mysql-test-0:5.7.19-6.el7.x86_64",
            "7Server-RHSCL-2.4:rh-mysql57-mysql-0:5.7.19-6.el7.src",
            "7Server-RHSCL-2.4:rh-mysql57-mysql-0:5.7.19-6.el7.x86_64",
            "7Server-RHSCL-2.4:rh-mysql57-mysql-common-0:5.7.19-6.el7.x86_64",
            "7Server-RHSCL-2.4:rh-mysql57-mysql-config-0:5.7.19-6.el7.x86_64",
            "7Server-RHSCL-2.4:rh-mysql57-mysql-debuginfo-0:5.7.19-6.el7.x86_64",
            "7Server-RHSCL-2.4:rh-mysql57-mysql-devel-0:5.7.19-6.el7.x86_64",
            "7Server-RHSCL-2.4:rh-mysql57-mysql-errmsg-0:5.7.19-6.el7.x86_64",
            "7Server-RHSCL-2.4:rh-mysql57-mysql-server-0:5.7.19-6.el7.x86_64",
            "7Server-RHSCL-2.4:rh-mysql57-mysql-test-0:5.7.19-6.el7.x86_64",
            "7Workstation-RHSCL-2.4:rh-mysql57-mysql-0:5.7.19-6.el7.src",
            "7Workstation-RHSCL-2.4:rh-mysql57-mysql-0:5.7.19-6.el7.x86_64",
            "7Workstation-RHSCL-2.4:rh-mysql57-mysql-common-0:5.7.19-6.el7.x86_64",
            "7Workstation-RHSCL-2.4:rh-mysql57-mysql-config-0:5.7.19-6.el7.x86_64",
            "7Workstation-RHSCL-2.4:rh-mysql57-mysql-debuginfo-0:5.7.19-6.el7.x86_64",
            "7Workstation-RHSCL-2.4:rh-mysql57-mysql-devel-0:5.7.19-6.el7.x86_64",
            "7Workstation-RHSCL-2.4:rh-mysql57-mysql-errmsg-0:5.7.19-6.el7.x86_64",
            "7Workstation-RHSCL-2.4:rh-mysql57-mysql-server-0:5.7.19-6.el7.x86_64",
            "7Workstation-RHSCL-2.4:rh-mysql57-mysql-test-0:5.7.19-6.el7.x86_64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2017:2886"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "HIGH",
            "attackVector": "NETWORK",
            "availabilityImpact": "NONE",
            "baseScore": 3.1,
            "baseSeverity": "LOW",
            "confidentialityImpact": "NONE",
            "integrityImpact": "LOW",
            "privilegesRequired": "LOW",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.0/AV:N/AC:H/PR:L/UI:N/S:U/C:N/I:L/A:N",
            "version": "3.0"
          },
          "products": [
            "6Server-RHSCL-2.4-6.7.Z:rh-mysql57-mysql-0:5.7.19-6.el6.src",
            "6Server-RHSCL-2.4-6.7.Z:rh-mysql57-mysql-0:5.7.19-6.el6.x86_64",
            "6Server-RHSCL-2.4-6.7.Z:rh-mysql57-mysql-common-0:5.7.19-6.el6.x86_64",
            "6Server-RHSCL-2.4-6.7.Z:rh-mysql57-mysql-config-0:5.7.19-6.el6.x86_64",
            "6Server-RHSCL-2.4-6.7.Z:rh-mysql57-mysql-debuginfo-0:5.7.19-6.el6.x86_64",
            "6Server-RHSCL-2.4-6.7.Z:rh-mysql57-mysql-devel-0:5.7.19-6.el6.x86_64",
            "6Server-RHSCL-2.4-6.7.Z:rh-mysql57-mysql-errmsg-0:5.7.19-6.el6.x86_64",
            "6Server-RHSCL-2.4-6.7.Z:rh-mysql57-mysql-server-0:5.7.19-6.el6.x86_64",
            "6Server-RHSCL-2.4-6.7.Z:rh-mysql57-mysql-test-0:5.7.19-6.el6.x86_64",
            "6Server-RHSCL-2.4:rh-mysql57-mysql-0:5.7.19-6.el6.src",
            "6Server-RHSCL-2.4:rh-mysql57-mysql-0:5.7.19-6.el6.x86_64",
            "6Server-RHSCL-2.4:rh-mysql57-mysql-common-0:5.7.19-6.el6.x86_64",
            "6Server-RHSCL-2.4:rh-mysql57-mysql-config-0:5.7.19-6.el6.x86_64",
            "6Server-RHSCL-2.4:rh-mysql57-mysql-debuginfo-0:5.7.19-6.el6.x86_64",
            "6Server-RHSCL-2.4:rh-mysql57-mysql-devel-0:5.7.19-6.el6.x86_64",
            "6Server-RHSCL-2.4:rh-mysql57-mysql-errmsg-0:5.7.19-6.el6.x86_64",
            "6Server-RHSCL-2.4:rh-mysql57-mysql-server-0:5.7.19-6.el6.x86_64",
            "6Server-RHSCL-2.4:rh-mysql57-mysql-test-0:5.7.19-6.el6.x86_64",
            "6Workstation-RHSCL-2.4:rh-mysql57-mysql-0:5.7.19-6.el6.src",
            "6Workstation-RHSCL-2.4:rh-mysql57-mysql-0:5.7.19-6.el6.x86_64",
            "6Workstation-RHSCL-2.4:rh-mysql57-mysql-common-0:5.7.19-6.el6.x86_64",
            "6Workstation-RHSCL-2.4:rh-mysql57-mysql-config-0:5.7.19-6.el6.x86_64",
            "6Workstation-RHSCL-2.4:rh-mysql57-mysql-debuginfo-0:5.7.19-6.el6.x86_64",
            "6Workstation-RHSCL-2.4:rh-mysql57-mysql-devel-0:5.7.19-6.el6.x86_64",
            "6Workstation-RHSCL-2.4:rh-mysql57-mysql-errmsg-0:5.7.19-6.el6.x86_64",
            "6Workstation-RHSCL-2.4:rh-mysql57-mysql-server-0:5.7.19-6.el6.x86_64",
            "6Workstation-RHSCL-2.4:rh-mysql57-mysql-test-0:5.7.19-6.el6.x86_64",
            "7Server-RHSCL-2.4-7.3.Z:rh-mysql57-mysql-0:5.7.19-6.el7.src",
            "7Server-RHSCL-2.4-7.3.Z:rh-mysql57-mysql-0:5.7.19-6.el7.x86_64",
            "7Server-RHSCL-2.4-7.3.Z:rh-mysql57-mysql-common-0:5.7.19-6.el7.x86_64",
            "7Server-RHSCL-2.4-7.3.Z:rh-mysql57-mysql-config-0:5.7.19-6.el7.x86_64",
            "7Server-RHSCL-2.4-7.3.Z:rh-mysql57-mysql-debuginfo-0:5.7.19-6.el7.x86_64",
            "7Server-RHSCL-2.4-7.3.Z:rh-mysql57-mysql-devel-0:5.7.19-6.el7.x86_64",
            "7Server-RHSCL-2.4-7.3.Z:rh-mysql57-mysql-errmsg-0:5.7.19-6.el7.x86_64",
            "7Server-RHSCL-2.4-7.3.Z:rh-mysql57-mysql-server-0:5.7.19-6.el7.x86_64",
            "7Server-RHSCL-2.4-7.3.Z:rh-mysql57-mysql-test-0:5.7.19-6.el7.x86_64",
            "7Server-RHSCL-2.4:rh-mysql57-mysql-0:5.7.19-6.el7.src",
            "7Server-RHSCL-2.4:rh-mysql57-mysql-0:5.7.19-6.el7.x86_64",
            "7Server-RHSCL-2.4:rh-mysql57-mysql-common-0:5.7.19-6.el7.x86_64",
            "7Server-RHSCL-2.4:rh-mysql57-mysql-config-0:5.7.19-6.el7.x86_64",
            "7Server-RHSCL-2.4:rh-mysql57-mysql-debuginfo-0:5.7.19-6.el7.x86_64",
            "7Server-RHSCL-2.4:rh-mysql57-mysql-devel-0:5.7.19-6.el7.x86_64",
            "7Server-RHSCL-2.4:rh-mysql57-mysql-errmsg-0:5.7.19-6.el7.x86_64",
            "7Server-RHSCL-2.4:rh-mysql57-mysql-server-0:5.7.19-6.el7.x86_64",
            "7Server-RHSCL-2.4:rh-mysql57-mysql-test-0:5.7.19-6.el7.x86_64",
            "7Workstation-RHSCL-2.4:rh-mysql57-mysql-0:5.7.19-6.el7.src",
            "7Workstation-RHSCL-2.4:rh-mysql57-mysql-0:5.7.19-6.el7.x86_64",
            "7Workstation-RHSCL-2.4:rh-mysql57-mysql-common-0:5.7.19-6.el7.x86_64",
            "7Workstation-RHSCL-2.4:rh-mysql57-mysql-config-0:5.7.19-6.el7.x86_64",
            "7Workstation-RHSCL-2.4:rh-mysql57-mysql-debuginfo-0:5.7.19-6.el7.x86_64",
            "7Workstation-RHSCL-2.4:rh-mysql57-mysql-devel-0:5.7.19-6.el7.x86_64",
            "7Workstation-RHSCL-2.4:rh-mysql57-mysql-errmsg-0:5.7.19-6.el7.x86_64",
            "7Workstation-RHSCL-2.4:rh-mysql57-mysql-server-0:5.7.19-6.el7.x86_64",
            "7Workstation-RHSCL-2.4:rh-mysql57-mysql-test-0:5.7.19-6.el7.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Low"
        }
      ],
      "title": "mysql: Server: DDL unspecified vulnerability (CPU Jul 2017)"
    },
    {
      "cve": "CVE-2019-2730",
      "discovery_date": "2019-07-22T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "1731995"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Security: Privileges). Supported versions that are affected are 5.6.44 and prior and 5.7.18 and prior. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of MySQL Server accessible data. CVSS 3.0 Base Score 2.7 (Integrity impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:L/A:N).",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "mysql: Server: Security: Privileges unspecified vulnerability (CPU Jul 2019)",
          "title": "Vulnerability summary"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "6Server-RHSCL-2.4-6.7.Z:rh-mysql57-mysql-0:5.7.19-6.el6.src",
          "6Server-RHSCL-2.4-6.7.Z:rh-mysql57-mysql-0:5.7.19-6.el6.x86_64",
          "6Server-RHSCL-2.4-6.7.Z:rh-mysql57-mysql-common-0:5.7.19-6.el6.x86_64",
          "6Server-RHSCL-2.4-6.7.Z:rh-mysql57-mysql-config-0:5.7.19-6.el6.x86_64",
          "6Server-RHSCL-2.4-6.7.Z:rh-mysql57-mysql-debuginfo-0:5.7.19-6.el6.x86_64",
          "6Server-RHSCL-2.4-6.7.Z:rh-mysql57-mysql-devel-0:5.7.19-6.el6.x86_64",
          "6Server-RHSCL-2.4-6.7.Z:rh-mysql57-mysql-errmsg-0:5.7.19-6.el6.x86_64",
          "6Server-RHSCL-2.4-6.7.Z:rh-mysql57-mysql-server-0:5.7.19-6.el6.x86_64",
          "6Server-RHSCL-2.4-6.7.Z:rh-mysql57-mysql-test-0:5.7.19-6.el6.x86_64",
          "6Server-RHSCL-2.4:rh-mysql57-mysql-0:5.7.19-6.el6.src",
          "6Server-RHSCL-2.4:rh-mysql57-mysql-0:5.7.19-6.el6.x86_64",
          "6Server-RHSCL-2.4:rh-mysql57-mysql-common-0:5.7.19-6.el6.x86_64",
          "6Server-RHSCL-2.4:rh-mysql57-mysql-config-0:5.7.19-6.el6.x86_64",
          "6Server-RHSCL-2.4:rh-mysql57-mysql-debuginfo-0:5.7.19-6.el6.x86_64",
          "6Server-RHSCL-2.4:rh-mysql57-mysql-devel-0:5.7.19-6.el6.x86_64",
          "6Server-RHSCL-2.4:rh-mysql57-mysql-errmsg-0:5.7.19-6.el6.x86_64",
          "6Server-RHSCL-2.4:rh-mysql57-mysql-server-0:5.7.19-6.el6.x86_64",
          "6Server-RHSCL-2.4:rh-mysql57-mysql-test-0:5.7.19-6.el6.x86_64",
          "6Workstation-RHSCL-2.4:rh-mysql57-mysql-0:5.7.19-6.el6.src",
          "6Workstation-RHSCL-2.4:rh-mysql57-mysql-0:5.7.19-6.el6.x86_64",
          "6Workstation-RHSCL-2.4:rh-mysql57-mysql-common-0:5.7.19-6.el6.x86_64",
          "6Workstation-RHSCL-2.4:rh-mysql57-mysql-config-0:5.7.19-6.el6.x86_64",
          "6Workstation-RHSCL-2.4:rh-mysql57-mysql-debuginfo-0:5.7.19-6.el6.x86_64",
          "6Workstation-RHSCL-2.4:rh-mysql57-mysql-devel-0:5.7.19-6.el6.x86_64",
          "6Workstation-RHSCL-2.4:rh-mysql57-mysql-errmsg-0:5.7.19-6.el6.x86_64",
          "6Workstation-RHSCL-2.4:rh-mysql57-mysql-server-0:5.7.19-6.el6.x86_64",
          "6Workstation-RHSCL-2.4:rh-mysql57-mysql-test-0:5.7.19-6.el6.x86_64",
          "7Server-RHSCL-2.4-7.3.Z:rh-mysql57-mysql-0:5.7.19-6.el7.src",
          "7Server-RHSCL-2.4-7.3.Z:rh-mysql57-mysql-0:5.7.19-6.el7.x86_64",
          "7Server-RHSCL-2.4-7.3.Z:rh-mysql57-mysql-common-0:5.7.19-6.el7.x86_64",
          "7Server-RHSCL-2.4-7.3.Z:rh-mysql57-mysql-config-0:5.7.19-6.el7.x86_64",
          "7Server-RHSCL-2.4-7.3.Z:rh-mysql57-mysql-debuginfo-0:5.7.19-6.el7.x86_64",
          "7Server-RHSCL-2.4-7.3.Z:rh-mysql57-mysql-devel-0:5.7.19-6.el7.x86_64",
          "7Server-RHSCL-2.4-7.3.Z:rh-mysql57-mysql-errmsg-0:5.7.19-6.el7.x86_64",
          "7Server-RHSCL-2.4-7.3.Z:rh-mysql57-mysql-server-0:5.7.19-6.el7.x86_64",
          "7Server-RHSCL-2.4-7.3.Z:rh-mysql57-mysql-test-0:5.7.19-6.el7.x86_64",
          "7Server-RHSCL-2.4:rh-mysql57-mysql-0:5.7.19-6.el7.src",
          "7Server-RHSCL-2.4:rh-mysql57-mysql-0:5.7.19-6.el7.x86_64",
          "7Server-RHSCL-2.4:rh-mysql57-mysql-common-0:5.7.19-6.el7.x86_64",
          "7Server-RHSCL-2.4:rh-mysql57-mysql-config-0:5.7.19-6.el7.x86_64",
          "7Server-RHSCL-2.4:rh-mysql57-mysql-debuginfo-0:5.7.19-6.el7.x86_64",
          "7Server-RHSCL-2.4:rh-mysql57-mysql-devel-0:5.7.19-6.el7.x86_64",
          "7Server-RHSCL-2.4:rh-mysql57-mysql-errmsg-0:5.7.19-6.el7.x86_64",
          "7Server-RHSCL-2.4:rh-mysql57-mysql-server-0:5.7.19-6.el7.x86_64",
          "7Server-RHSCL-2.4:rh-mysql57-mysql-test-0:5.7.19-6.el7.x86_64",
          "7Workstation-RHSCL-2.4:rh-mysql57-mysql-0:5.7.19-6.el7.src",
          "7Workstation-RHSCL-2.4:rh-mysql57-mysql-0:5.7.19-6.el7.x86_64",
          "7Workstation-RHSCL-2.4:rh-mysql57-mysql-common-0:5.7.19-6.el7.x86_64",
          "7Workstation-RHSCL-2.4:rh-mysql57-mysql-config-0:5.7.19-6.el7.x86_64",
          "7Workstation-RHSCL-2.4:rh-mysql57-mysql-debuginfo-0:5.7.19-6.el7.x86_64",
          "7Workstation-RHSCL-2.4:rh-mysql57-mysql-devel-0:5.7.19-6.el7.x86_64",
          "7Workstation-RHSCL-2.4:rh-mysql57-mysql-errmsg-0:5.7.19-6.el7.x86_64",
          "7Workstation-RHSCL-2.4:rh-mysql57-mysql-server-0:5.7.19-6.el7.x86_64",
          "7Workstation-RHSCL-2.4:rh-mysql57-mysql-test-0:5.7.19-6.el7.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2019-2730"
        },
        {
          "category": "external",
          "summary": "RHBZ#1731995",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1731995"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2019-2730",
          "url": "https://www.cve.org/CVERecord?id=CVE-2019-2730"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2019-2730",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2019-2730"
        },
        {
          "category": "external",
          "summary": "http://www.oracle.com/technetwork/security-advisory/cpujul2019-5072835.html",
          "url": "http://www.oracle.com/technetwork/security-advisory/cpujul2019-5072835.html"
        }
      ],
      "release_date": "2019-07-16T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2017-10-12T07:53:15+00:00",
          "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAfter installing this update, the MySQL server daemon (mysqld) will be restarted automatically.",
          "product_ids": [
            "6Server-RHSCL-2.4-6.7.Z:rh-mysql57-mysql-0:5.7.19-6.el6.src",
            "6Server-RHSCL-2.4-6.7.Z:rh-mysql57-mysql-0:5.7.19-6.el6.x86_64",
            "6Server-RHSCL-2.4-6.7.Z:rh-mysql57-mysql-common-0:5.7.19-6.el6.x86_64",
            "6Server-RHSCL-2.4-6.7.Z:rh-mysql57-mysql-config-0:5.7.19-6.el6.x86_64",
            "6Server-RHSCL-2.4-6.7.Z:rh-mysql57-mysql-debuginfo-0:5.7.19-6.el6.x86_64",
            "6Server-RHSCL-2.4-6.7.Z:rh-mysql57-mysql-devel-0:5.7.19-6.el6.x86_64",
            "6Server-RHSCL-2.4-6.7.Z:rh-mysql57-mysql-errmsg-0:5.7.19-6.el6.x86_64",
            "6Server-RHSCL-2.4-6.7.Z:rh-mysql57-mysql-server-0:5.7.19-6.el6.x86_64",
            "6Server-RHSCL-2.4-6.7.Z:rh-mysql57-mysql-test-0:5.7.19-6.el6.x86_64",
            "6Server-RHSCL-2.4:rh-mysql57-mysql-0:5.7.19-6.el6.src",
            "6Server-RHSCL-2.4:rh-mysql57-mysql-0:5.7.19-6.el6.x86_64",
            "6Server-RHSCL-2.4:rh-mysql57-mysql-common-0:5.7.19-6.el6.x86_64",
            "6Server-RHSCL-2.4:rh-mysql57-mysql-config-0:5.7.19-6.el6.x86_64",
            "6Server-RHSCL-2.4:rh-mysql57-mysql-debuginfo-0:5.7.19-6.el6.x86_64",
            "6Server-RHSCL-2.4:rh-mysql57-mysql-devel-0:5.7.19-6.el6.x86_64",
            "6Server-RHSCL-2.4:rh-mysql57-mysql-errmsg-0:5.7.19-6.el6.x86_64",
            "6Server-RHSCL-2.4:rh-mysql57-mysql-server-0:5.7.19-6.el6.x86_64",
            "6Server-RHSCL-2.4:rh-mysql57-mysql-test-0:5.7.19-6.el6.x86_64",
            "6Workstation-RHSCL-2.4:rh-mysql57-mysql-0:5.7.19-6.el6.src",
            "6Workstation-RHSCL-2.4:rh-mysql57-mysql-0:5.7.19-6.el6.x86_64",
            "6Workstation-RHSCL-2.4:rh-mysql57-mysql-common-0:5.7.19-6.el6.x86_64",
            "6Workstation-RHSCL-2.4:rh-mysql57-mysql-config-0:5.7.19-6.el6.x86_64",
            "6Workstation-RHSCL-2.4:rh-mysql57-mysql-debuginfo-0:5.7.19-6.el6.x86_64",
            "6Workstation-RHSCL-2.4:rh-mysql57-mysql-devel-0:5.7.19-6.el6.x86_64",
            "6Workstation-RHSCL-2.4:rh-mysql57-mysql-errmsg-0:5.7.19-6.el6.x86_64",
            "6Workstation-RHSCL-2.4:rh-mysql57-mysql-server-0:5.7.19-6.el6.x86_64",
            "6Workstation-RHSCL-2.4:rh-mysql57-mysql-test-0:5.7.19-6.el6.x86_64",
            "7Server-RHSCL-2.4-7.3.Z:rh-mysql57-mysql-0:5.7.19-6.el7.src",
            "7Server-RHSCL-2.4-7.3.Z:rh-mysql57-mysql-0:5.7.19-6.el7.x86_64",
            "7Server-RHSCL-2.4-7.3.Z:rh-mysql57-mysql-common-0:5.7.19-6.el7.x86_64",
            "7Server-RHSCL-2.4-7.3.Z:rh-mysql57-mysql-config-0:5.7.19-6.el7.x86_64",
            "7Server-RHSCL-2.4-7.3.Z:rh-mysql57-mysql-debuginfo-0:5.7.19-6.el7.x86_64",
            "7Server-RHSCL-2.4-7.3.Z:rh-mysql57-mysql-devel-0:5.7.19-6.el7.x86_64",
            "7Server-RHSCL-2.4-7.3.Z:rh-mysql57-mysql-errmsg-0:5.7.19-6.el7.x86_64",
            "7Server-RHSCL-2.4-7.3.Z:rh-mysql57-mysql-server-0:5.7.19-6.el7.x86_64",
            "7Server-RHSCL-2.4-7.3.Z:rh-mysql57-mysql-test-0:5.7.19-6.el7.x86_64",
            "7Server-RHSCL-2.4:rh-mysql57-mysql-0:5.7.19-6.el7.src",
            "7Server-RHSCL-2.4:rh-mysql57-mysql-0:5.7.19-6.el7.x86_64",
            "7Server-RHSCL-2.4:rh-mysql57-mysql-common-0:5.7.19-6.el7.x86_64",
            "7Server-RHSCL-2.4:rh-mysql57-mysql-config-0:5.7.19-6.el7.x86_64",
            "7Server-RHSCL-2.4:rh-mysql57-mysql-debuginfo-0:5.7.19-6.el7.x86_64",
            "7Server-RHSCL-2.4:rh-mysql57-mysql-devel-0:5.7.19-6.el7.x86_64",
            "7Server-RHSCL-2.4:rh-mysql57-mysql-errmsg-0:5.7.19-6.el7.x86_64",
            "7Server-RHSCL-2.4:rh-mysql57-mysql-server-0:5.7.19-6.el7.x86_64",
            "7Server-RHSCL-2.4:rh-mysql57-mysql-test-0:5.7.19-6.el7.x86_64",
            "7Workstation-RHSCL-2.4:rh-mysql57-mysql-0:5.7.19-6.el7.src",
            "7Workstation-RHSCL-2.4:rh-mysql57-mysql-0:5.7.19-6.el7.x86_64",
            "7Workstation-RHSCL-2.4:rh-mysql57-mysql-common-0:5.7.19-6.el7.x86_64",
            "7Workstation-RHSCL-2.4:rh-mysql57-mysql-config-0:5.7.19-6.el7.x86_64",
            "7Workstation-RHSCL-2.4:rh-mysql57-mysql-debuginfo-0:5.7.19-6.el7.x86_64",
            "7Workstation-RHSCL-2.4:rh-mysql57-mysql-devel-0:5.7.19-6.el7.x86_64",
            "7Workstation-RHSCL-2.4:rh-mysql57-mysql-errmsg-0:5.7.19-6.el7.x86_64",
            "7Workstation-RHSCL-2.4:rh-mysql57-mysql-server-0:5.7.19-6.el7.x86_64",
            "7Workstation-RHSCL-2.4:rh-mysql57-mysql-test-0:5.7.19-6.el7.x86_64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2017:2886"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "NONE",
            "baseScore": 2.7,
            "baseSeverity": "LOW",
            "confidentialityImpact": "NONE",
            "integrityImpact": "LOW",
            "privilegesRequired": "HIGH",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:L/A:N",
            "version": "3.0"
          },
          "products": [
            "6Server-RHSCL-2.4-6.7.Z:rh-mysql57-mysql-0:5.7.19-6.el6.src",
            "6Server-RHSCL-2.4-6.7.Z:rh-mysql57-mysql-0:5.7.19-6.el6.x86_64",
            "6Server-RHSCL-2.4-6.7.Z:rh-mysql57-mysql-common-0:5.7.19-6.el6.x86_64",
            "6Server-RHSCL-2.4-6.7.Z:rh-mysql57-mysql-config-0:5.7.19-6.el6.x86_64",
            "6Server-RHSCL-2.4-6.7.Z:rh-mysql57-mysql-debuginfo-0:5.7.19-6.el6.x86_64",
            "6Server-RHSCL-2.4-6.7.Z:rh-mysql57-mysql-devel-0:5.7.19-6.el6.x86_64",
            "6Server-RHSCL-2.4-6.7.Z:rh-mysql57-mysql-errmsg-0:5.7.19-6.el6.x86_64",
            "6Server-RHSCL-2.4-6.7.Z:rh-mysql57-mysql-server-0:5.7.19-6.el6.x86_64",
            "6Server-RHSCL-2.4-6.7.Z:rh-mysql57-mysql-test-0:5.7.19-6.el6.x86_64",
            "6Server-RHSCL-2.4:rh-mysql57-mysql-0:5.7.19-6.el6.src",
            "6Server-RHSCL-2.4:rh-mysql57-mysql-0:5.7.19-6.el6.x86_64",
            "6Server-RHSCL-2.4:rh-mysql57-mysql-common-0:5.7.19-6.el6.x86_64",
            "6Server-RHSCL-2.4:rh-mysql57-mysql-config-0:5.7.19-6.el6.x86_64",
            "6Server-RHSCL-2.4:rh-mysql57-mysql-debuginfo-0:5.7.19-6.el6.x86_64",
            "6Server-RHSCL-2.4:rh-mysql57-mysql-devel-0:5.7.19-6.el6.x86_64",
            "6Server-RHSCL-2.4:rh-mysql57-mysql-errmsg-0:5.7.19-6.el6.x86_64",
            "6Server-RHSCL-2.4:rh-mysql57-mysql-server-0:5.7.19-6.el6.x86_64",
            "6Server-RHSCL-2.4:rh-mysql57-mysql-test-0:5.7.19-6.el6.x86_64",
            "6Workstation-RHSCL-2.4:rh-mysql57-mysql-0:5.7.19-6.el6.src",
            "6Workstation-RHSCL-2.4:rh-mysql57-mysql-0:5.7.19-6.el6.x86_64",
            "6Workstation-RHSCL-2.4:rh-mysql57-mysql-common-0:5.7.19-6.el6.x86_64",
            "6Workstation-RHSCL-2.4:rh-mysql57-mysql-config-0:5.7.19-6.el6.x86_64",
            "6Workstation-RHSCL-2.4:rh-mysql57-mysql-debuginfo-0:5.7.19-6.el6.x86_64",
            "6Workstation-RHSCL-2.4:rh-mysql57-mysql-devel-0:5.7.19-6.el6.x86_64",
            "6Workstation-RHSCL-2.4:rh-mysql57-mysql-errmsg-0:5.7.19-6.el6.x86_64",
            "6Workstation-RHSCL-2.4:rh-mysql57-mysql-server-0:5.7.19-6.el6.x86_64",
            "6Workstation-RHSCL-2.4:rh-mysql57-mysql-test-0:5.7.19-6.el6.x86_64",
            "7Server-RHSCL-2.4-7.3.Z:rh-mysql57-mysql-0:5.7.19-6.el7.src",
            "7Server-RHSCL-2.4-7.3.Z:rh-mysql57-mysql-0:5.7.19-6.el7.x86_64",
            "7Server-RHSCL-2.4-7.3.Z:rh-mysql57-mysql-common-0:5.7.19-6.el7.x86_64",
            "7Server-RHSCL-2.4-7.3.Z:rh-mysql57-mysql-config-0:5.7.19-6.el7.x86_64",
            "7Server-RHSCL-2.4-7.3.Z:rh-mysql57-mysql-debuginfo-0:5.7.19-6.el7.x86_64",
            "7Server-RHSCL-2.4-7.3.Z:rh-mysql57-mysql-devel-0:5.7.19-6.el7.x86_64",
            "7Server-RHSCL-2.4-7.3.Z:rh-mysql57-mysql-errmsg-0:5.7.19-6.el7.x86_64",
            "7Server-RHSCL-2.4-7.3.Z:rh-mysql57-mysql-server-0:5.7.19-6.el7.x86_64",
            "7Server-RHSCL-2.4-7.3.Z:rh-mysql57-mysql-test-0:5.7.19-6.el7.x86_64",
            "7Server-RHSCL-2.4:rh-mysql57-mysql-0:5.7.19-6.el7.src",
            "7Server-RHSCL-2.4:rh-mysql57-mysql-0:5.7.19-6.el7.x86_64",
            "7Server-RHSCL-2.4:rh-mysql57-mysql-common-0:5.7.19-6.el7.x86_64",
            "7Server-RHSCL-2.4:rh-mysql57-mysql-config-0:5.7.19-6.el7.x86_64",
            "7Server-RHSCL-2.4:rh-mysql57-mysql-debuginfo-0:5.7.19-6.el7.x86_64",
            "7Server-RHSCL-2.4:rh-mysql57-mysql-devel-0:5.7.19-6.el7.x86_64",
            "7Server-RHSCL-2.4:rh-mysql57-mysql-errmsg-0:5.7.19-6.el7.x86_64",
            "7Server-RHSCL-2.4:rh-mysql57-mysql-server-0:5.7.19-6.el7.x86_64",
            "7Server-RHSCL-2.4:rh-mysql57-mysql-test-0:5.7.19-6.el7.x86_64",
            "7Workstation-RHSCL-2.4:rh-mysql57-mysql-0:5.7.19-6.el7.src",
            "7Workstation-RHSCL-2.4:rh-mysql57-mysql-0:5.7.19-6.el7.x86_64",
            "7Workstation-RHSCL-2.4:rh-mysql57-mysql-common-0:5.7.19-6.el7.x86_64",
            "7Workstation-RHSCL-2.4:rh-mysql57-mysql-config-0:5.7.19-6.el7.x86_64",
            "7Workstation-RHSCL-2.4:rh-mysql57-mysql-debuginfo-0:5.7.19-6.el7.x86_64",
            "7Workstation-RHSCL-2.4:rh-mysql57-mysql-devel-0:5.7.19-6.el7.x86_64",
            "7Workstation-RHSCL-2.4:rh-mysql57-mysql-errmsg-0:5.7.19-6.el7.x86_64",
            "7Workstation-RHSCL-2.4:rh-mysql57-mysql-server-0:5.7.19-6.el7.x86_64",
            "7Workstation-RHSCL-2.4:rh-mysql57-mysql-test-0:5.7.19-6.el7.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Low"
        }
      ],
      "title": "mysql: Server: Security: Privileges unspecified vulnerability (CPU Jul 2019)"
    }
  ]
}

CVE-2017-3640 (GCVE-0-2017-3640)

Vulnerability from cvelistv5

Published

2017-08-08 15:00

Modified

2024-10-04 17:02

Severity ?

CWE

Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server.

Summary

Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: DML). Supported versions that are affected are 5.7.18 and earlier. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.0 Base Score 4.9 (Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H).

References

URL

Tags

	http://www.securitytracker.com/id/1038928	vdb-entry, x_refsource_SECTRACK
	http://www.securityfocus.com/bid/99765	vdb-entry, x_refsource_BID
	https://access.redhat.com/errata/RHSA-2017:2886	vendor-advisory, x_refsource_REDHAT
	http://www.oracle.com/technetwork/security-advisory/cpujul2017-3236622.html	x_refsource_CONFIRM

Impacted products

	Vendor	Product	Version
	Oracle Corporation	MySQL Server	Version: 5.7.18 and earlier

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-05T14:30:59.215Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "name": "1038928",
            "tags": [
              "vdb-entry",
              "x_refsource_SECTRACK",
              "x_transferred"
            ],
            "url": "http://www.securitytracker.com/id/1038928"
          },
          {
            "name": "99765",
            "tags": [
              "vdb-entry",
              "x_refsource_BID",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/bid/99765"
          },
          {
            "name": "RHSA-2017:2886",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2017:2886"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://www.oracle.com/technetwork/security-advisory/cpujul2017-3236622.html"
          }
        ],
        "title": "CVE Program Container"
      },
      {
        "metrics": [
          {
            "other": {
              "content": {
                "id": "CVE-2017-3640",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "partial"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2024-10-04T15:48:16.864030Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2024-10-04T17:02:36.182Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "MySQL Server",
          "vendor": "Oracle Corporation",
          "versions": [
            {
              "status": "affected",
              "version": "5.7.18 and earlier"
            }
          ]
        }
      ],
      "datePublic": "2017-07-18T00:00:00",
      "descriptions": [
        {
          "lang": "en",
          "value": "Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: DML). Supported versions that are affected are 5.7.18 and earlier. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.0 Base Score 4.9 (Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H)."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server.  Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server.",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2017-12-07T10:57:01",
        "orgId": "43595867-4340-4103-b7a2-9a5208d29a85",
        "shortName": "oracle"
      },
      "references": [
        {
          "name": "1038928",
          "tags": [
            "vdb-entry",
            "x_refsource_SECTRACK"
          ],
          "url": "http://www.securitytracker.com/id/1038928"
        },
        {
          "name": "99765",
          "tags": [
            "vdb-entry",
            "x_refsource_BID"
          ],
          "url": "http://www.securityfocus.com/bid/99765"
        },
        {
          "name": "RHSA-2017:2886",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2017:2886"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://www.oracle.com/technetwork/security-advisory/cpujul2017-3236622.html"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "secalert_us@oracle.com",
          "ID": "CVE-2017-3640",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "MySQL Server",
                      "version": {
                        "version_data": [
                          {
                            "version_affected": "=",
                            "version_value": "5.7.18 and earlier"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "Oracle Corporation"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: DML). Supported versions that are affected are 5.7.18 and earlier. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.0 Base Score 4.9 (Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H)."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server.  Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server."
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "1038928",
              "refsource": "SECTRACK",
              "url": "http://www.securitytracker.com/id/1038928"
            },
            {
              "name": "99765",
              "refsource": "BID",
              "url": "http://www.securityfocus.com/bid/99765"
            },
            {
              "name": "RHSA-2017:2886",
              "refsource": "REDHAT",
              "url": "https://access.redhat.com/errata/RHSA-2017:2886"
            },
            {
              "name": "http://www.oracle.com/technetwork/security-advisory/cpujul2017-3236622.html",
              "refsource": "CONFIRM",
              "url": "http://www.oracle.com/technetwork/security-advisory/cpujul2017-3236622.html"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "43595867-4340-4103-b7a2-9a5208d29a85",
    "assignerShortName": "oracle",
    "cveId": "CVE-2017-3640",
    "datePublished": "2017-08-08T15:00:00",
    "dateReserved": "2016-12-06T00:00:00",
    "dateUpdated": "2024-10-04T17:02:36.182Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

CVE-2017-3648 (GCVE-0-2017-3648)

Vulnerability from cvelistv5

Published

2017-08-08 15:00

Modified

2024-10-04 17:01

Severity ?

CWE

Difficult to exploit vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server.

Summary

Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Charsets). Supported versions that are affected are 5.5.56 and earlier, 5.6.36 and earlier and 5.7.18 and earlier. Difficult to exploit vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.0 Base Score 4.4 (Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:H).

References

URL

Tags

	https://access.redhat.com/errata/RHSA-2017:2787	vendor-advisory, x_refsource_REDHAT
	http://www.securitytracker.com/id/1038928	vdb-entry, x_refsource_SECTRACK
	http://www.debian.org/security/2017/dsa-3922	vendor-advisory, x_refsource_DEBIAN
	https://access.redhat.com/errata/RHSA-2017:2886	vendor-advisory, x_refsource_REDHAT
	http://www.securityfocus.com/bid/99789	vdb-entry, x_refsource_BID
	http://www.oracle.com/technetwork/security-advisory/cpujul2017-3236622.html	x_refsource_CONFIRM

Impacted products

	Vendor	Product	Version
	Oracle Corporation	MySQL Server	Version: 5.5.56 and earlier Version: 5.6.36 and earlier Version: 5.7.18 and earlier

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-05T14:30:58.961Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "name": "RHSA-2017:2787",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2017:2787"
          },
          {
            "name": "1038928",
            "tags": [
              "vdb-entry",
              "x_refsource_SECTRACK",
              "x_transferred"
            ],
            "url": "http://www.securitytracker.com/id/1038928"
          },
          {
            "name": "DSA-3922",
            "tags": [
              "vendor-advisory",
              "x_refsource_DEBIAN",
              "x_transferred"
            ],
            "url": "http://www.debian.org/security/2017/dsa-3922"
          },
          {
            "name": "RHSA-2017:2886",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2017:2886"
          },
          {
            "name": "99789",
            "tags": [
              "vdb-entry",
              "x_refsource_BID",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/bid/99789"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://www.oracle.com/technetwork/security-advisory/cpujul2017-3236622.html"
          }
        ],
        "title": "CVE Program Container"
      },
      {
        "metrics": [
          {
            "other": {
              "content": {
                "id": "CVE-2017-3648",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "partial"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2024-10-04T15:47:53.839660Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2024-10-04T17:01:38.109Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "MySQL Server",
          "vendor": "Oracle Corporation",
          "versions": [
            {
              "status": "affected",
              "version": "5.5.56 and earlier"
            },
            {
              "status": "affected",
              "version": "5.6.36 and earlier"
            },
            {
              "status": "affected",
              "version": "5.7.18 and earlier"
            }
          ]
        }
      ],
      "datePublic": "2017-07-18T00:00:00",
      "descriptions": [
        {
          "lang": "en",
          "value": "Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Charsets). Supported versions that are affected are 5.5.56 and earlier, 5.6.36 and earlier and 5.7.18 and earlier. Difficult to exploit vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.0 Base Score 4.4 (Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:H)."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "Difficult to exploit vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server.  Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server.",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2017-12-08T10:57:01",
        "orgId": "43595867-4340-4103-b7a2-9a5208d29a85",
        "shortName": "oracle"
      },
      "references": [
        {
          "name": "RHSA-2017:2787",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2017:2787"
        },
        {
          "name": "1038928",
          "tags": [
            "vdb-entry",
            "x_refsource_SECTRACK"
          ],
          "url": "http://www.securitytracker.com/id/1038928"
        },
        {
          "name": "DSA-3922",
          "tags": [
            "vendor-advisory",
            "x_refsource_DEBIAN"
          ],
          "url": "http://www.debian.org/security/2017/dsa-3922"
        },
        {
          "name": "RHSA-2017:2886",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2017:2886"
        },
        {
          "name": "99789",
          "tags": [
            "vdb-entry",
            "x_refsource_BID"
          ],
          "url": "http://www.securityfocus.com/bid/99789"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://www.oracle.com/technetwork/security-advisory/cpujul2017-3236622.html"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "secalert_us@oracle.com",
          "ID": "CVE-2017-3648",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "MySQL Server",
                      "version": {
                        "version_data": [
                          {
                            "version_affected": "=",
                            "version_value": "5.5.56 and earlier"
                          },
                          {
                            "version_affected": "=",
                            "version_value": "5.6.36 and earlier"
                          },
                          {
                            "version_affected": "=",
                            "version_value": "5.7.18 and earlier"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "Oracle Corporation"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Charsets). Supported versions that are affected are 5.5.56 and earlier, 5.6.36 and earlier and 5.7.18 and earlier. Difficult to exploit vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.0 Base Score 4.4 (Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:H)."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "Difficult to exploit vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server.  Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server."
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "RHSA-2017:2787",
              "refsource": "REDHAT",
              "url": "https://access.redhat.com/errata/RHSA-2017:2787"
            },
            {
              "name": "1038928",
              "refsource": "SECTRACK",
              "url": "http://www.securitytracker.com/id/1038928"
            },
            {
              "name": "DSA-3922",
              "refsource": "DEBIAN",
              "url": "http://www.debian.org/security/2017/dsa-3922"
            },
            {
              "name": "RHSA-2017:2886",
              "refsource": "REDHAT",
              "url": "https://access.redhat.com/errata/RHSA-2017:2886"
            },
            {
              "name": "99789",
              "refsource": "BID",
              "url": "http://www.securityfocus.com/bid/99789"
            },
            {
              "name": "http://www.oracle.com/technetwork/security-advisory/cpujul2017-3236622.html",
              "refsource": "CONFIRM",
              "url": "http://www.oracle.com/technetwork/security-advisory/cpujul2017-3236622.html"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "43595867-4340-4103-b7a2-9a5208d29a85",
    "assignerShortName": "oracle",
    "cveId": "CVE-2017-3648",
    "datePublished": "2017-08-08T15:00:00",
    "dateReserved": "2016-12-06T00:00:00",
    "dateUpdated": "2024-10-04T17:01:38.109Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

CVE-2017-3256 (GCVE-0-2017-3256)

Vulnerability from cvelistv5

Published

2017-01-27 22:01

Modified

2024-10-09 19:40

Severity ?

CWE

CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Summary

Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Replication). Supported versions that are affected are 5.7.16 and earlier. Easily exploitable vulnerability allows low privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS v3.0 Base Score 6.5 (Availability impacts).

References

URL

Tags

	https://security.gentoo.org/glsa/201702-17	vendor-advisory, x_refsource_GENTOO
	http://www.securitytracker.com/id/1037640	vdb-entry, x_refsource_SECTRACK
	https://access.redhat.com/errata/RHSA-2017:2886	vendor-advisory, x_refsource_REDHAT
	http://www.securityfocus.com/bid/95486	vdb-entry, x_refsource_BID
	http://www.oracle.com/technetwork/security-advisory/cpujan2017-2881727.html	x_refsource_CONFIRM

Impacted products

	Vendor	Product	Version
	Oracle	MySQL Server	Version: 5.7.16 and earlier

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-05T14:23:33.088Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "name": "GLSA-201702-17",
            "tags": [
              "vendor-advisory",
              "x_refsource_GENTOO",
              "x_transferred"
            ],
            "url": "https://security.gentoo.org/glsa/201702-17"
          },
          {
            "name": "1037640",
            "tags": [
              "vdb-entry",
              "x_refsource_SECTRACK",
              "x_transferred"
            ],
            "url": "http://www.securitytracker.com/id/1037640"
          },
          {
            "name": "RHSA-2017:2886",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2017:2886"
          },
          {
            "name": "95486",
            "tags": [
              "vdb-entry",
              "x_refsource_BID",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/bid/95486"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://www.oracle.com/technetwork/security-advisory/cpujan2017-2881727.html"
          }
        ],
        "title": "CVE Program Container"
      },
      {
        "metrics": [
          {
            "other": {
              "content": {
                "id": "CVE-2017-3256",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "partial"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2024-10-09T19:30:14.306396Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2024-10-09T19:40:55.196Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "MySQL Server",
          "vendor": "Oracle",
          "versions": [
            {
              "status": "affected",
              "version": "5.7.16 and earlier"
            }
          ]
        }
      ],
      "datePublic": "2017-01-17T00:00:00",
      "descriptions": [
        {
          "lang": "en",
          "value": "Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Replication). Supported versions that are affected are 5.7.16 and earlier. Easily exploitable vulnerability allows low privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS v3.0 Base Score 6.5 (Availability impacts)."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2017-12-07T10:57:01",
        "orgId": "43595867-4340-4103-b7a2-9a5208d29a85",
        "shortName": "oracle"
      },
      "references": [
        {
          "name": "GLSA-201702-17",
          "tags": [
            "vendor-advisory",
            "x_refsource_GENTOO"
          ],
          "url": "https://security.gentoo.org/glsa/201702-17"
        },
        {
          "name": "1037640",
          "tags": [
            "vdb-entry",
            "x_refsource_SECTRACK"
          ],
          "url": "http://www.securitytracker.com/id/1037640"
        },
        {
          "name": "RHSA-2017:2886",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2017:2886"
        },
        {
          "name": "95486",
          "tags": [
            "vdb-entry",
            "x_refsource_BID"
          ],
          "url": "http://www.securityfocus.com/bid/95486"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://www.oracle.com/technetwork/security-advisory/cpujan2017-2881727.html"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "secalert_us@oracle.com",
          "ID": "CVE-2017-3256",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "MySQL Server",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "5.7.16 and earlier"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "Oracle"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Replication). Supported versions that are affected are 5.7.16 and earlier. Easily exploitable vulnerability allows low privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS v3.0 Base Score 6.5 (Availability impacts)."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "GLSA-201702-17",
              "refsource": "GENTOO",
              "url": "https://security.gentoo.org/glsa/201702-17"
            },
            {
              "name": "1037640",
              "refsource": "SECTRACK",
              "url": "http://www.securitytracker.com/id/1037640"
            },
            {
              "name": "RHSA-2017:2886",
              "refsource": "REDHAT",
              "url": "https://access.redhat.com/errata/RHSA-2017:2886"
            },
            {
              "name": "95486",
              "refsource": "BID",
              "url": "http://www.securityfocus.com/bid/95486"
            },
            {
              "name": "http://www.oracle.com/technetwork/security-advisory/cpujan2017-2881727.html",
              "refsource": "CONFIRM",
              "url": "http://www.oracle.com/technetwork/security-advisory/cpujan2017-2881727.html"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "43595867-4340-4103-b7a2-9a5208d29a85",
    "assignerShortName": "oracle",
    "cveId": "CVE-2017-3256",
    "datePublished": "2017-01-27T22:01:00",
    "dateReserved": "2016-12-06T00:00:00",
    "dateUpdated": "2024-10-09T19:40:55.196Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

CVE-2017-3468 (GCVE-0-2017-3468)

Vulnerability from cvelistv5

Published

2017-04-24 19:00

Modified

2024-10-07 16:18

Severity ?

CWE

Difficult to exploit vulnerability allows low privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of MySQL Server accessible data.

Summary

Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Security: Encryption). Supported versions that are affected are 5.7.17 and earlier. Difficult to exploit vulnerability allows low privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of MySQL Server accessible data. CVSS 3.0 Base Score 3.1 (Integrity impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:H/PR:L/UI:N/S:U/C:N/I:L/A:N).

References

URL

Tags

	http://www.securityfocus.com/bid/97848	vdb-entry, x_refsource_BID
	http://www.securitytracker.com/id/1038287	vdb-entry, x_refsource_SECTRACK
	http://www.oracle.com/technetwork/security-advisory/cpuapr2017-3236618.html	x_refsource_CONFIRM
	https://access.redhat.com/errata/RHSA-2017:2886	vendor-advisory, x_refsource_REDHAT

Impacted products

	Vendor	Product	Version
	Oracle Corporation	MySQL Server	Version: 5.7.17 and earlier

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-05T14:30:57.680Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "name": "97848",
            "tags": [
              "vdb-entry",
              "x_refsource_BID",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/bid/97848"
          },
          {
            "name": "1038287",
            "tags": [
              "vdb-entry",
              "x_refsource_SECTRACK",
              "x_transferred"
            ],
            "url": "http://www.securitytracker.com/id/1038287"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://www.oracle.com/technetwork/security-advisory/cpuapr2017-3236618.html"
          },
          {
            "name": "RHSA-2017:2886",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2017:2886"
          }
        ],
        "title": "CVE Program Container"
      },
      {
        "metrics": [
          {
            "other": {
              "content": {
                "id": "CVE-2017-3468",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "partial"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2024-10-07T15:45:52.500444Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2024-10-07T16:18:31.515Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "MySQL Server",
          "vendor": "Oracle Corporation",
          "versions": [
            {
              "status": "affected",
              "version": "5.7.17 and earlier"
            }
          ]
        }
      ],
      "datePublic": "2017-04-18T00:00:00",
      "descriptions": [
        {
          "lang": "en",
          "value": "Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Security: Encryption). Supported versions that are affected are 5.7.17 and earlier. Difficult to exploit vulnerability allows low privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of MySQL Server accessible data. CVSS 3.0 Base Score 3.1 (Integrity impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:H/PR:L/UI:N/S:U/C:N/I:L/A:N)."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "Difficult to exploit vulnerability allows low privileged attacker with network access via multiple protocols to compromise MySQL Server.  Successful attacks of this vulnerability can result in  unauthorized update, insert or delete access to some of MySQL Server accessible data.",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2017-12-07T10:57:01",
        "orgId": "43595867-4340-4103-b7a2-9a5208d29a85",
        "shortName": "oracle"
      },
      "references": [
        {
          "name": "97848",
          "tags": [
            "vdb-entry",
            "x_refsource_BID"
          ],
          "url": "http://www.securityfocus.com/bid/97848"
        },
        {
          "name": "1038287",
          "tags": [
            "vdb-entry",
            "x_refsource_SECTRACK"
          ],
          "url": "http://www.securitytracker.com/id/1038287"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://www.oracle.com/technetwork/security-advisory/cpuapr2017-3236618.html"
        },
        {
          "name": "RHSA-2017:2886",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2017:2886"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "secalert_us@oracle.com",
          "ID": "CVE-2017-3468",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "MySQL Server",
                      "version": {
                        "version_data": [
                          {
                            "version_affected": "=",
                            "version_value": "5.7.17 and earlier"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "Oracle Corporation"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Security: Encryption). Supported versions that are affected are 5.7.17 and earlier. Difficult to exploit vulnerability allows low privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of MySQL Server accessible data. CVSS 3.0 Base Score 3.1 (Integrity impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:H/PR:L/UI:N/S:U/C:N/I:L/A:N)."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "Difficult to exploit vulnerability allows low privileged attacker with network access via multiple protocols to compromise MySQL Server.  Successful attacks of this vulnerability can result in  unauthorized update, insert or delete access to some of MySQL Server accessible data."
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "97848",
              "refsource": "BID",
              "url": "http://www.securityfocus.com/bid/97848"
            },
            {
              "name": "1038287",
              "refsource": "SECTRACK",
              "url": "http://www.securitytracker.com/id/1038287"
            },
            {
              "name": "http://www.oracle.com/technetwork/security-advisory/cpuapr2017-3236618.html",
              "refsource": "CONFIRM",
              "url": "http://www.oracle.com/technetwork/security-advisory/cpuapr2017-3236618.html"
            },
            {
              "name": "RHSA-2017:2886",
              "refsource": "REDHAT",
              "url": "https://access.redhat.com/errata/RHSA-2017:2886"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "43595867-4340-4103-b7a2-9a5208d29a85",
    "assignerShortName": "oracle",
    "cveId": "CVE-2017-3468",
    "datePublished": "2017-04-24T19:00:00",
    "dateReserved": "2016-12-06T00:00:00",
    "dateUpdated": "2024-10-07T16:18:31.515Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

CVE-2017-3641 (GCVE-0-2017-3641)

Vulnerability from cvelistv5

Published

2017-08-08 15:00

Modified

2024-10-04 17:02

Severity ?

CWE

Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server.

Summary

Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: DML). Supported versions that are affected are 5.5.56 and earlier, 5.6.36 and earlier and 5.7.18 and earlier. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.0 Base Score 4.9 (Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H).

References

URL

Tags

	https://access.redhat.com/errata/RHSA-2017:2787	vendor-advisory, x_refsource_REDHAT
	http://www.securityfocus.com/bid/99767	vdb-entry, x_refsource_BID
	https://access.redhat.com/errata/RHSA-2018:2729	vendor-advisory, x_refsource_REDHAT
	https://access.redhat.com/errata/RHSA-2018:0574	vendor-advisory, x_refsource_REDHAT
	http://www.debian.org/security/2017/dsa-3944	vendor-advisory, x_refsource_DEBIAN
	http://www.securitytracker.com/id/1038928	vdb-entry, x_refsource_SECTRACK
	https://www.debian.org/security/2017/dsa-3955	vendor-advisory, x_refsource_DEBIAN
	https://access.redhat.com/errata/RHSA-2018:0279	vendor-advisory, x_refsource_REDHAT
	https://access.redhat.com/errata/RHSA-2018:2439	vendor-advisory, x_refsource_REDHAT
	http://www.debian.org/security/2017/dsa-3922	vendor-advisory, x_refsource_DEBIAN
	https://access.redhat.com/errata/RHSA-2017:2886	vendor-advisory, x_refsource_REDHAT
	http://www.oracle.com/technetwork/security-advisory/cpujul2017-3236622.html	x_refsource_CONFIRM

Impacted products

	Vendor	Product	Version
	Oracle Corporation	MySQL Server	Version: 5.5.56 and earlier Version: 5.6.36 and earlier Version: 5.7.18 and earlier

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-05T14:30:58.980Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "name": "RHSA-2017:2787",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2017:2787"
          },
          {
            "name": "99767",
            "tags": [
              "vdb-entry",
              "x_refsource_BID",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/bid/99767"
          },
          {
            "name": "RHSA-2018:2729",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2018:2729"
          },
          {
            "name": "RHSA-2018:0574",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2018:0574"
          },
          {
            "name": "DSA-3944",
            "tags": [
              "vendor-advisory",
              "x_refsource_DEBIAN",
              "x_transferred"
            ],
            "url": "http://www.debian.org/security/2017/dsa-3944"
          },
          {
            "name": "1038928",
            "tags": [
              "vdb-entry",
              "x_refsource_SECTRACK",
              "x_transferred"
            ],
            "url": "http://www.securitytracker.com/id/1038928"
          },
          {
            "name": "DSA-3955",
            "tags": [
              "vendor-advisory",
              "x_refsource_DEBIAN",
              "x_transferred"
            ],
            "url": "https://www.debian.org/security/2017/dsa-3955"
          },
          {
            "name": "RHSA-2018:0279",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2018:0279"
          },
          {
            "name": "RHSA-2018:2439",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2018:2439"
          },
          {
            "name": "DSA-3922",
            "tags": [
              "vendor-advisory",
              "x_refsource_DEBIAN",
              "x_transferred"
            ],
            "url": "http://www.debian.org/security/2017/dsa-3922"
          },
          {
            "name": "RHSA-2017:2886",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2017:2886"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://www.oracle.com/technetwork/security-advisory/cpujul2017-3236622.html"
          }
        ],
        "title": "CVE Program Container"
      },
      {
        "metrics": [
          {
            "other": {
              "content": {
                "id": "CVE-2017-3641",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "partial"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2024-10-04T15:48:15.379439Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2024-10-04T17:02:28.358Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "MySQL Server",
          "vendor": "Oracle Corporation",
          "versions": [
            {
              "status": "affected",
              "version": "5.5.56 and earlier"
            },
            {
              "status": "affected",
              "version": "5.6.36 and earlier"
            },
            {
              "status": "affected",
              "version": "5.7.18 and earlier"
            }
          ]
        }
      ],
      "datePublic": "2017-07-18T00:00:00",
      "descriptions": [
        {
          "lang": "en",
          "value": "Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: DML). Supported versions that are affected are 5.5.56 and earlier, 5.6.36 and earlier and 5.7.18 and earlier. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.0 Base Score 4.9 (Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H)."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server.  Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server.",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2018-09-21T09:57:01",
        "orgId": "43595867-4340-4103-b7a2-9a5208d29a85",
        "shortName": "oracle"
      },
      "references": [
        {
          "name": "RHSA-2017:2787",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2017:2787"
        },
        {
          "name": "99767",
          "tags": [
            "vdb-entry",
            "x_refsource_BID"
          ],
          "url": "http://www.securityfocus.com/bid/99767"
        },
        {
          "name": "RHSA-2018:2729",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2018:2729"
        },
        {
          "name": "RHSA-2018:0574",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2018:0574"
        },
        {
          "name": "DSA-3944",
          "tags": [
            "vendor-advisory",
            "x_refsource_DEBIAN"
          ],
          "url": "http://www.debian.org/security/2017/dsa-3944"
        },
        {
          "name": "1038928",
          "tags": [
            "vdb-entry",
            "x_refsource_SECTRACK"
          ],
          "url": "http://www.securitytracker.com/id/1038928"
        },
        {
          "name": "DSA-3955",
          "tags": [
            "vendor-advisory",
            "x_refsource_DEBIAN"
          ],
          "url": "https://www.debian.org/security/2017/dsa-3955"
        },
        {
          "name": "RHSA-2018:0279",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2018:0279"
        },
        {
          "name": "RHSA-2018:2439",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2018:2439"
        },
        {
          "name": "DSA-3922",
          "tags": [
            "vendor-advisory",
            "x_refsource_DEBIAN"
          ],
          "url": "http://www.debian.org/security/2017/dsa-3922"
        },
        {
          "name": "RHSA-2017:2886",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2017:2886"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://www.oracle.com/technetwork/security-advisory/cpujul2017-3236622.html"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "secalert_us@oracle.com",
          "ID": "CVE-2017-3641",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "MySQL Server",
                      "version": {
                        "version_data": [
                          {
                            "version_affected": "=",
                            "version_value": "5.5.56 and earlier"
                          },
                          {
                            "version_affected": "=",
                            "version_value": "5.6.36 and earlier"
                          },
                          {
                            "version_affected": "=",
                            "version_value": "5.7.18 and earlier"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "Oracle Corporation"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: DML). Supported versions that are affected are 5.5.56 and earlier, 5.6.36 and earlier and 5.7.18 and earlier. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.0 Base Score 4.9 (Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H)."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server.  Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server."
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "RHSA-2017:2787",
              "refsource": "REDHAT",
              "url": "https://access.redhat.com/errata/RHSA-2017:2787"
            },
            {
              "name": "99767",
              "refsource": "BID",
              "url": "http://www.securityfocus.com/bid/99767"
            },
            {
              "name": "RHSA-2018:2729",
              "refsource": "REDHAT",
              "url": "https://access.redhat.com/errata/RHSA-2018:2729"
            },
            {
              "name": "RHSA-2018:0574",
              "refsource": "REDHAT",
              "url": "https://access.redhat.com/errata/RHSA-2018:0574"
            },
            {
              "name": "DSA-3944",
              "refsource": "DEBIAN",
              "url": "http://www.debian.org/security/2017/dsa-3944"
            },
            {
              "name": "1038928",
              "refsource": "SECTRACK",
              "url": "http://www.securitytracker.com/id/1038928"
            },
            {
              "name": "DSA-3955",
              "refsource": "DEBIAN",
              "url": "https://www.debian.org/security/2017/dsa-3955"
            },
            {
              "name": "RHSA-2018:0279",
              "refsource": "REDHAT",
              "url": "https://access.redhat.com/errata/RHSA-2018:0279"
            },
            {
              "name": "RHSA-2018:2439",
              "refsource": "REDHAT",
              "url": "https://access.redhat.com/errata/RHSA-2018:2439"
            },
            {
              "name": "DSA-3922",
              "refsource": "DEBIAN",
              "url": "http://www.debian.org/security/2017/dsa-3922"
            },
            {
              "name": "RHSA-2017:2886",
              "refsource": "REDHAT",
              "url": "https://access.redhat.com/errata/RHSA-2017:2886"
            },
            {
              "name": "http://www.oracle.com/technetwork/security-advisory/cpujul2017-3236622.html",
              "refsource": "CONFIRM",
              "url": "http://www.oracle.com/technetwork/security-advisory/cpujul2017-3236622.html"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "43595867-4340-4103-b7a2-9a5208d29a85",
    "assignerShortName": "oracle",
    "cveId": "CVE-2017-3641",
    "datePublished": "2017-08-08T15:00:00",
    "dateReserved": "2016-12-06T00:00:00",
    "dateUpdated": "2024-10-04T17:02:28.358Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

CVE-2017-3251 (GCVE-0-2017-3251)

Vulnerability from cvelistv5

Published

2017-01-27 22:01

Modified

2024-10-09 19:44

Severity ?

CWE

CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H

Summary

Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Optimizer). Supported versions that are affected are 5.7.16 and earlier. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS v3.0 Base Score 4.9 (Availability impacts).

References

URL

Tags

	https://security.gentoo.org/glsa/201702-17	vendor-advisory, x_refsource_GENTOO
	http://www.securitytracker.com/id/1037640	vdb-entry, x_refsource_SECTRACK
	http://www.securityfocus.com/bid/95482	vdb-entry, x_refsource_BID
	https://access.redhat.com/errata/RHSA-2017:2886	vendor-advisory, x_refsource_REDHAT
	http://www.oracle.com/technetwork/security-advisory/cpujan2017-2881727.html	x_refsource_CONFIRM

Impacted products

	Vendor	Product	Version
	Oracle	MySQL Server	Version: 5.7.16 and earlier

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-05T14:23:32.883Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "name": "GLSA-201702-17",
            "tags": [
              "vendor-advisory",
              "x_refsource_GENTOO",
              "x_transferred"
            ],
            "url": "https://security.gentoo.org/glsa/201702-17"
          },
          {
            "name": "1037640",
            "tags": [
              "vdb-entry",
              "x_refsource_SECTRACK",
              "x_transferred"
            ],
            "url": "http://www.securitytracker.com/id/1037640"
          },
          {
            "name": "95482",
            "tags": [
              "vdb-entry",
              "x_refsource_BID",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/bid/95482"
          },
          {
            "name": "RHSA-2017:2886",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2017:2886"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://www.oracle.com/technetwork/security-advisory/cpujan2017-2881727.html"
          }
        ],
        "title": "CVE Program Container"
      },
      {
        "metrics": [
          {
            "other": {
              "content": {
                "id": "CVE-2017-3251",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "partial"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2024-10-09T19:30:18.206704Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2024-10-09T19:44:55.694Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "MySQL Server",
          "vendor": "Oracle",
          "versions": [
            {
              "status": "affected",
              "version": "5.7.16 and earlier"
            }
          ]
        }
      ],
      "datePublic": "2017-01-17T00:00:00",
      "descriptions": [
        {
          "lang": "en",
          "value": "Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Optimizer). Supported versions that are affected are 5.7.16 and earlier. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS v3.0 Base Score 4.9 (Availability impacts)."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2017-12-07T10:57:01",
        "orgId": "43595867-4340-4103-b7a2-9a5208d29a85",
        "shortName": "oracle"
      },
      "references": [
        {
          "name": "GLSA-201702-17",
          "tags": [
            "vendor-advisory",
            "x_refsource_GENTOO"
          ],
          "url": "https://security.gentoo.org/glsa/201702-17"
        },
        {
          "name": "1037640",
          "tags": [
            "vdb-entry",
            "x_refsource_SECTRACK"
          ],
          "url": "http://www.securitytracker.com/id/1037640"
        },
        {
          "name": "95482",
          "tags": [
            "vdb-entry",
            "x_refsource_BID"
          ],
          "url": "http://www.securityfocus.com/bid/95482"
        },
        {
          "name": "RHSA-2017:2886",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2017:2886"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://www.oracle.com/technetwork/security-advisory/cpujan2017-2881727.html"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "secalert_us@oracle.com",
          "ID": "CVE-2017-3251",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "MySQL Server",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "5.7.16 and earlier"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "Oracle"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Optimizer). Supported versions that are affected are 5.7.16 and earlier. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS v3.0 Base Score 4.9 (Availability impacts)."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "GLSA-201702-17",
              "refsource": "GENTOO",
              "url": "https://security.gentoo.org/glsa/201702-17"
            },
            {
              "name": "1037640",
              "refsource": "SECTRACK",
              "url": "http://www.securitytracker.com/id/1037640"
            },
            {
              "name": "95482",
              "refsource": "BID",
              "url": "http://www.securityfocus.com/bid/95482"
            },
            {
              "name": "RHSA-2017:2886",
              "refsource": "REDHAT",
              "url": "https://access.redhat.com/errata/RHSA-2017:2886"
            },
            {
              "name": "http://www.oracle.com/technetwork/security-advisory/cpujan2017-2881727.html",
              "refsource": "CONFIRM",
              "url": "http://www.oracle.com/technetwork/security-advisory/cpujan2017-2881727.html"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "43595867-4340-4103-b7a2-9a5208d29a85",
    "assignerShortName": "oracle",
    "cveId": "CVE-2017-3251",
    "datePublished": "2017-01-27T22:01:00",
    "dateReserved": "2016-12-06T00:00:00",
    "dateUpdated": "2024-10-09T19:44:55.694Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

CVE-2017-3258 (GCVE-0-2017-3258)

Vulnerability from cvelistv5

Published

2017-01-27 22:01

Modified

2024-10-09 19:40

Severity ?

CWE

CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Summary

Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: DDL). Supported versions that are affected are 5.5.53 and earlier, 5.6.34 and earlier and 5.7.16 and earlier. Easily exploitable vulnerability allows low privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS v3.0 Base Score 6.5 (Availability impacts).

References

URL

Tags

	https://access.redhat.com/errata/RHSA-2017:2787	vendor-advisory, x_refsource_REDHAT
	http://www.securityfocus.com/bid/95560	vdb-entry, x_refsource_BID
	https://security.gentoo.org/glsa/201702-17	vendor-advisory, x_refsource_GENTOO
	https://access.redhat.com/errata/RHSA-2018:0574	vendor-advisory, x_refsource_REDHAT
	https://security.gentoo.org/glsa/201702-18	vendor-advisory, x_refsource_GENTOO
	http://www.securitytracker.com/id/1037640	vdb-entry, x_refsource_SECTRACK
	https://access.redhat.com/errata/RHSA-2018:0279	vendor-advisory, x_refsource_REDHAT
	http://www.debian.org/security/2017/dsa-3767	vendor-advisory, x_refsource_DEBIAN
	https://access.redhat.com/errata/RHSA-2017:2886	vendor-advisory, x_refsource_REDHAT
	http://www.oracle.com/technetwork/security-advisory/cpujan2017-2881727.html	x_refsource_CONFIRM
	http://www.debian.org/security/2017/dsa-3770	vendor-advisory, x_refsource_DEBIAN
	https://access.redhat.com/errata/RHSA-2017:2192	vendor-advisory, x_refsource_REDHAT

Impacted products

	Vendor	Product	Version
	Oracle	MySQL Server	Version: 5.5.53 and earlier Version: 5.6.34 and earlier Version: 5.7.16 and earlier

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-05T14:23:33.139Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "name": "RHSA-2017:2787",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2017:2787"
          },
          {
            "name": "95560",
            "tags": [
              "vdb-entry",
              "x_refsource_BID",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/bid/95560"
          },
          {
            "name": "GLSA-201702-17",
            "tags": [
              "vendor-advisory",
              "x_refsource_GENTOO",
              "x_transferred"
            ],
            "url": "https://security.gentoo.org/glsa/201702-17"
          },
          {
            "name": "RHSA-2018:0574",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2018:0574"
          },
          {
            "name": "GLSA-201702-18",
            "tags": [
              "vendor-advisory",
              "x_refsource_GENTOO",
              "x_transferred"
            ],
            "url": "https://security.gentoo.org/glsa/201702-18"
          },
          {
            "name": "1037640",
            "tags": [
              "vdb-entry",
              "x_refsource_SECTRACK",
              "x_transferred"
            ],
            "url": "http://www.securitytracker.com/id/1037640"
          },
          {
            "name": "RHSA-2018:0279",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2018:0279"
          },
          {
            "name": "DSA-3767",
            "tags": [
              "vendor-advisory",
              "x_refsource_DEBIAN",
              "x_transferred"
            ],
            "url": "http://www.debian.org/security/2017/dsa-3767"
          },
          {
            "name": "RHSA-2017:2886",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2017:2886"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://www.oracle.com/technetwork/security-advisory/cpujan2017-2881727.html"
          },
          {
            "name": "DSA-3770",
            "tags": [
              "vendor-advisory",
              "x_refsource_DEBIAN",
              "x_transferred"
            ],
            "url": "http://www.debian.org/security/2017/dsa-3770"
          },
          {
            "name": "RHSA-2017:2192",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2017:2192"
          }
        ],
        "title": "CVE Program Container"
      },
      {
        "metrics": [
          {
            "other": {
              "content": {
                "id": "CVE-2017-3258",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "partial"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2024-10-09T19:30:10.918309Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2024-10-09T19:40:31.532Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "MySQL Server",
          "vendor": "Oracle",
          "versions": [
            {
              "status": "affected",
              "version": "5.5.53 and earlier"
            },
            {
              "status": "affected",
              "version": "5.6.34 and earlier"
            },
            {
              "status": "affected",
              "version": "5.7.16 and earlier"
            }
          ]
        }
      ],
      "datePublic": "2017-01-17T00:00:00",
      "descriptions": [
        {
          "lang": "en",
          "value": "Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: DDL). Supported versions that are affected are 5.5.53 and earlier, 5.6.34 and earlier and 5.7.16 and earlier. Easily exploitable vulnerability allows low privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS v3.0 Base Score 6.5 (Availability impacts)."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2018-03-22T09:57:01",
        "orgId": "43595867-4340-4103-b7a2-9a5208d29a85",
        "shortName": "oracle"
      },
      "references": [
        {
          "name": "RHSA-2017:2787",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2017:2787"
        },
        {
          "name": "95560",
          "tags": [
            "vdb-entry",
            "x_refsource_BID"
          ],
          "url": "http://www.securityfocus.com/bid/95560"
        },
        {
          "name": "GLSA-201702-17",
          "tags": [
            "vendor-advisory",
            "x_refsource_GENTOO"
          ],
          "url": "https://security.gentoo.org/glsa/201702-17"
        },
        {
          "name": "RHSA-2018:0574",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2018:0574"
        },
        {
          "name": "GLSA-201702-18",
          "tags": [
            "vendor-advisory",
            "x_refsource_GENTOO"
          ],
          "url": "https://security.gentoo.org/glsa/201702-18"
        },
        {
          "name": "1037640",
          "tags": [
            "vdb-entry",
            "x_refsource_SECTRACK"
          ],
          "url": "http://www.securitytracker.com/id/1037640"
        },
        {
          "name": "RHSA-2018:0279",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2018:0279"
        },
        {
          "name": "DSA-3767",
          "tags": [
            "vendor-advisory",
            "x_refsource_DEBIAN"
          ],
          "url": "http://www.debian.org/security/2017/dsa-3767"
        },
        {
          "name": "RHSA-2017:2886",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2017:2886"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://www.oracle.com/technetwork/security-advisory/cpujan2017-2881727.html"
        },
        {
          "name": "DSA-3770",
          "tags": [
            "vendor-advisory",
            "x_refsource_DEBIAN"
          ],
          "url": "http://www.debian.org/security/2017/dsa-3770"
        },
        {
          "name": "RHSA-2017:2192",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2017:2192"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "secalert_us@oracle.com",
          "ID": "CVE-2017-3258",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "MySQL Server",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "5.5.53 and earlier"
                          },
                          {
                            "version_value": "5.6.34 and earlier"
                          },
                          {
                            "version_value": "5.7.16 and earlier"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "Oracle"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: DDL). Supported versions that are affected are 5.5.53 and earlier, 5.6.34 and earlier and 5.7.16 and earlier. Easily exploitable vulnerability allows low privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS v3.0 Base Score 6.5 (Availability impacts)."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "RHSA-2017:2787",
              "refsource": "REDHAT",
              "url": "https://access.redhat.com/errata/RHSA-2017:2787"
            },
            {
              "name": "95560",
              "refsource": "BID",
              "url": "http://www.securityfocus.com/bid/95560"
            },
            {
              "name": "GLSA-201702-17",
              "refsource": "GENTOO",
              "url": "https://security.gentoo.org/glsa/201702-17"
            },
            {
              "name": "RHSA-2018:0574",
              "refsource": "REDHAT",
              "url": "https://access.redhat.com/errata/RHSA-2018:0574"
            },
            {
              "name": "GLSA-201702-18",
              "refsource": "GENTOO",
              "url": "https://security.gentoo.org/glsa/201702-18"
            },
            {
              "name": "1037640",
              "refsource": "SECTRACK",
              "url": "http://www.securitytracker.com/id/1037640"
            },
            {
              "name": "RHSA-2018:0279",
              "refsource": "REDHAT",
              "url": "https://access.redhat.com/errata/RHSA-2018:0279"
            },
            {
              "name": "DSA-3767",
              "refsource": "DEBIAN",
              "url": "http://www.debian.org/security/2017/dsa-3767"
            },
            {
              "name": "RHSA-2017:2886",
              "refsource": "REDHAT",
              "url": "https://access.redhat.com/errata/RHSA-2017:2886"
            },
            {
              "name": "http://www.oracle.com/technetwork/security-advisory/cpujan2017-2881727.html",
              "refsource": "CONFIRM",
              "url": "http://www.oracle.com/technetwork/security-advisory/cpujan2017-2881727.html"
            },
            {
              "name": "DSA-3770",
              "refsource": "DEBIAN",
              "url": "http://www.debian.org/security/2017/dsa-3770"
            },
            {
              "name": "RHSA-2017:2192",
              "refsource": "REDHAT",
              "url": "https://access.redhat.com/errata/RHSA-2017:2192"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "43595867-4340-4103-b7a2-9a5208d29a85",
    "assignerShortName": "oracle",
    "cveId": "CVE-2017-3258",
    "datePublished": "2017-01-27T22:01:00",
    "dateReserved": "2016-12-06T00:00:00",
    "dateUpdated": "2024-10-09T19:40:31.532Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

CVE-2017-3599 (GCVE-0-2017-3599)

Vulnerability from cvelistv5

Published

2017-04-24 19:00

Modified

2024-10-04 19:18

Severity ?

CWE

Summary

Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Pluggable Auth). Supported versions that are affected are 5.6.35 and earlier and 5.7.17 and earlier. Easily "exploitable" vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.0 Base Score 7.5 (Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H). NOTE: the previous information is from the April 2017 CPU. Oracle has not commented on third-party claims that this issue is an integer overflow in sql/auth/sql_authentication.cc which allows remote attackers to cause a denial of service via a crafted authentication packet.

References

URL

Tags

	https://access.redhat.com/errata/RHSA-2017:2787	vendor-advisory, x_refsource_REDHAT
	http://www.securitytracker.com/id/1038287	vdb-entry, x_refsource_SECTRACK
	http://www.oracle.com/technetwork/security-advisory/cpuapr2017-3236618.html	x_refsource_CONFIRM
	https://www.exploit-db.com/exploits/41954/	exploit, x_refsource_EXPLOIT-DB
	https://www.secforce.com/blog/2017/04/cve-2017-3599-pre-auth-mysql-remote-dos/	x_refsource_MISC
	https://access.redhat.com/errata/RHSA-2017:2886	vendor-advisory, x_refsource_REDHAT
	http://www.securityfocus.com/bid/97754	vdb-entry, x_refsource_BID

Impacted products

	Vendor	Product	Version
	n/a	n/a	Version: n/a

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-05T14:30:58.978Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "name": "RHSA-2017:2787",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2017:2787"
          },
          {
            "name": "1038287",
            "tags": [
              "vdb-entry",
              "x_refsource_SECTRACK",
              "x_transferred"
            ],
            "url": "http://www.securitytracker.com/id/1038287"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://www.oracle.com/technetwork/security-advisory/cpuapr2017-3236618.html"
          },
          {
            "name": "41954",
            "tags": [
              "exploit",
              "x_refsource_EXPLOIT-DB",
              "x_transferred"
            ],
            "url": "https://www.exploit-db.com/exploits/41954/"
          },
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "https://www.secforce.com/blog/2017/04/cve-2017-3599-pre-auth-mysql-remote-dos/"
          },
          {
            "name": "RHSA-2017:2886",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2017:2886"
          },
          {
            "name": "97754",
            "tags": [
              "vdb-entry",
              "x_refsource_BID",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/bid/97754"
          }
        ],
        "title": "CVE Program Container"
      },
      {
        "metrics": [
          {
            "other": {
              "content": {
                "id": "CVE-2017-3599",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "yes"
                  },
                  {
                    "Technical Impact": "partial"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2024-10-04T16:19:42.749760Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2024-10-04T19:18:52.491Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "datePublic": "2017-04-18T00:00:00",
      "descriptions": [
        {
          "lang": "en",
          "value": "Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Pluggable Auth). Supported versions that are affected are 5.6.35 and earlier and 5.7.17 and earlier. Easily \"exploitable\" vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.0 Base Score 7.5 (Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H). NOTE: the previous information is from the April 2017 CPU. Oracle has not commented on third-party claims that this issue is an integer overflow in sql/auth/sql_authentication.cc which allows remote attackers to cause a denial of service via a crafted authentication packet."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "n/a",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2017-12-08T10:57:01",
        "orgId": "43595867-4340-4103-b7a2-9a5208d29a85",
        "shortName": "oracle"
      },
      "references": [
        {
          "name": "RHSA-2017:2787",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2017:2787"
        },
        {
          "name": "1038287",
          "tags": [
            "vdb-entry",
            "x_refsource_SECTRACK"
          ],
          "url": "http://www.securitytracker.com/id/1038287"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://www.oracle.com/technetwork/security-advisory/cpuapr2017-3236618.html"
        },
        {
          "name": "41954",
          "tags": [
            "exploit",
            "x_refsource_EXPLOIT-DB"
          ],
          "url": "https://www.exploit-db.com/exploits/41954/"
        },
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://www.secforce.com/blog/2017/04/cve-2017-3599-pre-auth-mysql-remote-dos/"
        },
        {
          "name": "RHSA-2017:2886",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2017:2886"
        },
        {
          "name": "97754",
          "tags": [
            "vdb-entry",
            "x_refsource_BID"
          ],
          "url": "http://www.securityfocus.com/bid/97754"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "secalert_us@oracle.com",
          "ID": "CVE-2017-3599",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "n/a",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "n/a"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "n/a"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Pluggable Auth). Supported versions that are affected are 5.6.35 and earlier and 5.7.17 and earlier. Easily \"exploitable\" vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.0 Base Score 7.5 (Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H). NOTE: the previous information is from the April 2017 CPU. Oracle has not commented on third-party claims that this issue is an integer overflow in sql/auth/sql_authentication.cc which allows remote attackers to cause a denial of service via a crafted authentication packet."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "n/a"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "RHSA-2017:2787",
              "refsource": "REDHAT",
              "url": "https://access.redhat.com/errata/RHSA-2017:2787"
            },
            {
              "name": "1038287",
              "refsource": "SECTRACK",
              "url": "http://www.securitytracker.com/id/1038287"
            },
            {
              "name": "http://www.oracle.com/technetwork/security-advisory/cpuapr2017-3236618.html",
              "refsource": "CONFIRM",
              "url": "http://www.oracle.com/technetwork/security-advisory/cpuapr2017-3236618.html"
            },
            {
              "name": "41954",
              "refsource": "EXPLOIT-DB",
              "url": "https://www.exploit-db.com/exploits/41954/"
            },
            {
              "name": "https://www.secforce.com/blog/2017/04/cve-2017-3599-pre-auth-mysql-remote-dos/",
              "refsource": "MISC",
              "url": "https://www.secforce.com/blog/2017/04/cve-2017-3599-pre-auth-mysql-remote-dos/"
            },
            {
              "name": "RHSA-2017:2886",
              "refsource": "REDHAT",
              "url": "https://access.redhat.com/errata/RHSA-2017:2886"
            },
            {
              "name": "97754",
              "refsource": "BID",
              "url": "http://www.securityfocus.com/bid/97754"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "43595867-4340-4103-b7a2-9a5208d29a85",
    "assignerShortName": "oracle",
    "cveId": "CVE-2017-3599",
    "datePublished": "2017-04-24T19:00:00",
    "dateReserved": "2016-12-06T00:00:00",
    "dateUpdated": "2024-10-04T19:18:52.491Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

CVE-2017-3646 (GCVE-0-2017-3646)

Vulnerability from cvelistv5

Published

2017-08-08 15:00

Modified

2024-10-04 17:01

Severity ?

CWE

Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server.

Summary

Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: X Plugin). Supported versions that are affected are 5.7.16 and earlier. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.0 Base Score 4.9 (Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H).

References

URL

Tags

	http://www.securitytracker.com/id/1038928	vdb-entry, x_refsource_SECTRACK
	https://access.redhat.com/errata/RHSA-2017:2886	vendor-advisory, x_refsource_REDHAT
	http://www.oracle.com/technetwork/security-advisory/cpujul2017-3236622.html	x_refsource_CONFIRM
	http://www.securityfocus.com/bid/99786	vdb-entry, x_refsource_BID

Impacted products

	Vendor	Product	Version
	Oracle Corporation	MySQL Server	Version: 5.7.16 and earlier

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-05T14:30:58.654Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "name": "1038928",
            "tags": [
              "vdb-entry",
              "x_refsource_SECTRACK",
              "x_transferred"
            ],
            "url": "http://www.securitytracker.com/id/1038928"
          },
          {
            "name": "RHSA-2017:2886",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2017:2886"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://www.oracle.com/technetwork/security-advisory/cpujul2017-3236622.html"
          },
          {
            "name": "99786",
            "tags": [
              "vdb-entry",
              "x_refsource_BID",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/bid/99786"
          }
        ],
        "title": "CVE Program Container"
      },
      {
        "metrics": [
          {
            "other": {
              "content": {
                "id": "CVE-2017-3646",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "partial"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2024-10-04T15:47:58.031577Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2024-10-04T17:01:51.744Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "MySQL Server",
          "vendor": "Oracle Corporation",
          "versions": [
            {
              "status": "affected",
              "version": "5.7.16 and earlier"
            }
          ]
        }
      ],
      "datePublic": "2017-07-18T00:00:00",
      "descriptions": [
        {
          "lang": "en",
          "value": "Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: X Plugin). Supported versions that are affected are 5.7.16 and earlier. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.0 Base Score 4.9 (Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H)."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server.  Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server.",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2017-12-07T10:57:01",
        "orgId": "43595867-4340-4103-b7a2-9a5208d29a85",
        "shortName": "oracle"
      },
      "references": [
        {
          "name": "1038928",
          "tags": [
            "vdb-entry",
            "x_refsource_SECTRACK"
          ],
          "url": "http://www.securitytracker.com/id/1038928"
        },
        {
          "name": "RHSA-2017:2886",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2017:2886"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://www.oracle.com/technetwork/security-advisory/cpujul2017-3236622.html"
        },
        {
          "name": "99786",
          "tags": [
            "vdb-entry",
            "x_refsource_BID"
          ],
          "url": "http://www.securityfocus.com/bid/99786"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "secalert_us@oracle.com",
          "ID": "CVE-2017-3646",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "MySQL Server",
                      "version": {
                        "version_data": [
                          {
                            "version_affected": "=",
                            "version_value": "5.7.16 and earlier"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "Oracle Corporation"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: X Plugin). Supported versions that are affected are 5.7.16 and earlier. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.0 Base Score 4.9 (Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H)."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server.  Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server."
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "1038928",
              "refsource": "SECTRACK",
              "url": "http://www.securitytracker.com/id/1038928"
            },
            {
              "name": "RHSA-2017:2886",
              "refsource": "REDHAT",
              "url": "https://access.redhat.com/errata/RHSA-2017:2886"
            },
            {
              "name": "http://www.oracle.com/technetwork/security-advisory/cpujul2017-3236622.html",
              "refsource": "CONFIRM",
              "url": "http://www.oracle.com/technetwork/security-advisory/cpujul2017-3236622.html"
            },
            {
              "name": "99786",
              "refsource": "BID",
              "url": "http://www.securityfocus.com/bid/99786"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "43595867-4340-4103-b7a2-9a5208d29a85",
    "assignerShortName": "oracle",
    "cveId": "CVE-2017-3646",
    "datePublished": "2017-08-08T15:00:00",
    "dateReserved": "2016-12-06T00:00:00",
    "dateUpdated": "2024-10-04T17:01:51.744Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

CVE-2017-3454 (GCVE-0-2017-3454)

Vulnerability from cvelistv5

Published

2017-04-24 19:00

Modified

2024-10-07 16:20

Severity ?

CWE

Easily "exploitable" vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server as well as unauthorized update, insert or delete access to some of MySQL Server accessible data.

Summary

Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: InnoDB). Supported versions that are affected are 5.7.17 and earlier. Easily "exploitable" vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server as well as unauthorized update, insert or delete access to some of MySQL Server accessible data. CVSS 3.0 Base Score 5.5 (Integrity and Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:L/A:H).

References

URL

Tags

	http://www.securitytracker.com/id/1038287	vdb-entry, x_refsource_SECTRACK
	http://www.oracle.com/technetwork/security-advisory/cpuapr2017-3236618.html	x_refsource_CONFIRM
	http://www.securityfocus.com/bid/97791	vdb-entry, x_refsource_BID
	https://access.redhat.com/errata/RHSA-2017:2886	vendor-advisory, x_refsource_REDHAT

Impacted products

	Vendor	Product	Version
	Oracle Corporation	MySQL Server	Version: 5.7.17 and earlier

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-05T14:30:56.933Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "name": "1038287",
            "tags": [
              "vdb-entry",
              "x_refsource_SECTRACK",
              "x_transferred"
            ],
            "url": "http://www.securitytracker.com/id/1038287"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://www.oracle.com/technetwork/security-advisory/cpuapr2017-3236618.html"
          },
          {
            "name": "97791",
            "tags": [
              "vdb-entry",
              "x_refsource_BID",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/bid/97791"
          },
          {
            "name": "RHSA-2017:2886",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2017:2886"
          }
        ],
        "title": "CVE Program Container"
      },
      {
        "metrics": [
          {
            "other": {
              "content": {
                "id": "CVE-2017-3454",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "partial"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2024-10-07T15:46:06.668451Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2024-10-07T16:20:21.195Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "MySQL Server",
          "vendor": "Oracle Corporation",
          "versions": [
            {
              "status": "affected",
              "version": "5.7.17 and earlier"
            }
          ]
        }
      ],
      "datePublic": "2017-04-18T00:00:00",
      "descriptions": [
        {
          "lang": "en",
          "value": "Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: InnoDB). Supported versions that are affected are 5.7.17 and earlier. Easily \"exploitable\" vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server as well as unauthorized update, insert or delete access to some of MySQL Server accessible data. CVSS 3.0 Base Score 5.5 (Integrity and Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:L/A:H)."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "Easily \"exploitable\" vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server.  Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server as well as  unauthorized update, insert or delete access to some of MySQL Server accessible data.",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2017-12-07T10:57:01",
        "orgId": "43595867-4340-4103-b7a2-9a5208d29a85",
        "shortName": "oracle"
      },
      "references": [
        {
          "name": "1038287",
          "tags": [
            "vdb-entry",
            "x_refsource_SECTRACK"
          ],
          "url": "http://www.securitytracker.com/id/1038287"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://www.oracle.com/technetwork/security-advisory/cpuapr2017-3236618.html"
        },
        {
          "name": "97791",
          "tags": [
            "vdb-entry",
            "x_refsource_BID"
          ],
          "url": "http://www.securityfocus.com/bid/97791"
        },
        {
          "name": "RHSA-2017:2886",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2017:2886"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "secalert_us@oracle.com",
          "ID": "CVE-2017-3454",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "MySQL Server",
                      "version": {
                        "version_data": [
                          {
                            "version_affected": "=",
                            "version_value": "5.7.17 and earlier"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "Oracle Corporation"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: InnoDB). Supported versions that are affected are 5.7.17 and earlier. Easily \"exploitable\" vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server as well as unauthorized update, insert or delete access to some of MySQL Server accessible data. CVSS 3.0 Base Score 5.5 (Integrity and Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:L/A:H)."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "Easily \"exploitable\" vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server.  Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server as well as  unauthorized update, insert or delete access to some of MySQL Server accessible data."
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "1038287",
              "refsource": "SECTRACK",
              "url": "http://www.securitytracker.com/id/1038287"
            },
            {
              "name": "http://www.oracle.com/technetwork/security-advisory/cpuapr2017-3236618.html",
              "refsource": "CONFIRM",
              "url": "http://www.oracle.com/technetwork/security-advisory/cpuapr2017-3236618.html"
            },
            {
              "name": "97791",
              "refsource": "BID",
              "url": "http://www.securityfocus.com/bid/97791"
            },
            {
              "name": "RHSA-2017:2886",
              "refsource": "REDHAT",
              "url": "https://access.redhat.com/errata/RHSA-2017:2886"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "43595867-4340-4103-b7a2-9a5208d29a85",
    "assignerShortName": "oracle",
    "cveId": "CVE-2017-3454",
    "datePublished": "2017-04-24T19:00:00",
    "dateReserved": "2016-12-06T00:00:00",
    "dateUpdated": "2024-10-07T16:20:21.195Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

CVE-2017-3529 (GCVE-0-2017-3529)

Vulnerability from cvelistv5

Published

2017-08-08 15:00

Modified

2024-10-04 17:03

Severity ?

CWE

Difficult to exploit vulnerability allows low privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server.

Summary

Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: UDF). Supported versions that are affected are 5.7.18 and earlier. Difficult to exploit vulnerability allows low privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.0 Base Score 5.3 (Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H).

References

URL

Tags

	http://www.securitytracker.com/id/1038928	vdb-entry, x_refsource_SECTRACK
	http://www.securityfocus.com/bid/99746	vdb-entry, x_refsource_BID
	https://access.redhat.com/errata/RHSA-2017:2886	vendor-advisory, x_refsource_REDHAT
	http://www.oracle.com/technetwork/security-advisory/cpujul2017-3236622.html	x_refsource_CONFIRM

Impacted products

	Vendor	Product	Version
	Oracle Corporation	MySQL Server	Version: 5.7.18 and earlier

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-05T14:30:58.116Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "name": "1038928",
            "tags": [
              "vdb-entry",
              "x_refsource_SECTRACK",
              "x_transferred"
            ],
            "url": "http://www.securitytracker.com/id/1038928"
          },
          {
            "name": "99746",
            "tags": [
              "vdb-entry",
              "x_refsource_BID",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/bid/99746"
          },
          {
            "name": "RHSA-2017:2886",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2017:2886"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://www.oracle.com/technetwork/security-advisory/cpujul2017-3236622.html"
          }
        ],
        "title": "CVE Program Container"
      },
      {
        "metrics": [
          {
            "other": {
              "content": {
                "id": "CVE-2017-3529",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "partial"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2024-10-04T15:48:32.989289Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2024-10-04T17:03:43.381Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "MySQL Server",
          "vendor": "Oracle Corporation",
          "versions": [
            {
              "status": "affected",
              "version": "5.7.18 and earlier"
            }
          ]
        }
      ],
      "datePublic": "2017-07-18T00:00:00",
      "descriptions": [
        {
          "lang": "en",
          "value": "Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: UDF). Supported versions that are affected are 5.7.18 and earlier. Difficult to exploit vulnerability allows low privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.0 Base Score 5.3 (Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H)."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "Difficult to exploit vulnerability allows low privileged attacker with network access via multiple protocols to compromise MySQL Server.  Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server.",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2017-12-07T10:57:01",
        "orgId": "43595867-4340-4103-b7a2-9a5208d29a85",
        "shortName": "oracle"
      },
      "references": [
        {
          "name": "1038928",
          "tags": [
            "vdb-entry",
            "x_refsource_SECTRACK"
          ],
          "url": "http://www.securitytracker.com/id/1038928"
        },
        {
          "name": "99746",
          "tags": [
            "vdb-entry",
            "x_refsource_BID"
          ],
          "url": "http://www.securityfocus.com/bid/99746"
        },
        {
          "name": "RHSA-2017:2886",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2017:2886"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://www.oracle.com/technetwork/security-advisory/cpujul2017-3236622.html"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "secalert_us@oracle.com",
          "ID": "CVE-2017-3529",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "MySQL Server",
                      "version": {
                        "version_data": [
                          {
                            "version_affected": "=",
                            "version_value": "5.7.18 and earlier"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "Oracle Corporation"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: UDF). Supported versions that are affected are 5.7.18 and earlier. Difficult to exploit vulnerability allows low privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.0 Base Score 5.3 (Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H)."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "Difficult to exploit vulnerability allows low privileged attacker with network access via multiple protocols to compromise MySQL Server.  Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server."
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "1038928",
              "refsource": "SECTRACK",
              "url": "http://www.securitytracker.com/id/1038928"
            },
            {
              "name": "99746",
              "refsource": "BID",
              "url": "http://www.securityfocus.com/bid/99746"
            },
            {
              "name": "RHSA-2017:2886",
              "refsource": "REDHAT",
              "url": "https://access.redhat.com/errata/RHSA-2017:2886"
            },
            {
              "name": "http://www.oracle.com/technetwork/security-advisory/cpujul2017-3236622.html",
              "refsource": "CONFIRM",
              "url": "http://www.oracle.com/technetwork/security-advisory/cpujul2017-3236622.html"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "43595867-4340-4103-b7a2-9a5208d29a85",
    "assignerShortName": "oracle",
    "cveId": "CVE-2017-3529",
    "datePublished": "2017-08-08T15:00:00",
    "dateReserved": "2016-12-06T00:00:00",
    "dateUpdated": "2024-10-04T17:03:43.381Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

CVE-2017-3639 (GCVE-0-2017-3639)

Vulnerability from cvelistv5

Published

2017-08-08 15:00

Modified

2024-10-04 17:02

Severity ?

CWE

Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server.

Summary

References

URL

Tags

	http://www.securityfocus.com/bid/99753	vdb-entry, x_refsource_BID
	http://www.securitytracker.com/id/1038928	vdb-entry, x_refsource_SECTRACK
	https://access.redhat.com/errata/RHSA-2017:2886	vendor-advisory, x_refsource_REDHAT
	http://www.oracle.com/technetwork/security-advisory/cpujul2017-3236622.html	x_refsource_CONFIRM

Impacted products

	Vendor	Product	Version
	Oracle Corporation	MySQL Server	Version: 5.7.18 and earlier

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-05T14:30:58.974Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "name": "99753",
            "tags": [
              "vdb-entry",
              "x_refsource_BID",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/bid/99753"
          },
          {
            "name": "1038928",
            "tags": [
              "vdb-entry",
              "x_refsource_SECTRACK",
              "x_transferred"
            ],
            "url": "http://www.securitytracker.com/id/1038928"
          },
          {
            "name": "RHSA-2017:2886",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2017:2886"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://www.oracle.com/technetwork/security-advisory/cpujul2017-3236622.html"
          }
        ],
        "title": "CVE Program Container"
      },
      {
        "metrics": [
          {
            "other": {
              "content": {
                "id": "CVE-2017-3639",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "partial"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2024-10-04T15:48:18.788040Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2024-10-04T17:02:44.692Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "MySQL Server",
          "vendor": "Oracle Corporation",
          "versions": [
            {
              "status": "affected",
              "version": "5.7.18 and earlier"
            }
          ]
        }
      ],
      "datePublic": "2017-07-18T00:00:00",
      "descriptions": [
        {
          "lang": "en",
          "value": "Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: DML). Supported versions that are affected are 5.7.18 and earlier. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.0 Base Score 4.9 (Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H)."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server.  Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server.",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2017-12-07T10:57:01",
        "orgId": "43595867-4340-4103-b7a2-9a5208d29a85",
        "shortName": "oracle"
      },
      "references": [
        {
          "name": "99753",
          "tags": [
            "vdb-entry",
            "x_refsource_BID"
          ],
          "url": "http://www.securityfocus.com/bid/99753"
        },
        {
          "name": "1038928",
          "tags": [
            "vdb-entry",
            "x_refsource_SECTRACK"
          ],
          "url": "http://www.securitytracker.com/id/1038928"
        },
        {
          "name": "RHSA-2017:2886",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2017:2886"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://www.oracle.com/technetwork/security-advisory/cpujul2017-3236622.html"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "secalert_us@oracle.com",
          "ID": "CVE-2017-3639",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "MySQL Server",
                      "version": {
                        "version_data": [
                          {
                            "version_affected": "=",
                            "version_value": "5.7.18 and earlier"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "Oracle Corporation"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: DML). Supported versions that are affected are 5.7.18 and earlier. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.0 Base Score 4.9 (Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H)."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server.  Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server."
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "99753",
              "refsource": "BID",
              "url": "http://www.securityfocus.com/bid/99753"
            },
            {
              "name": "1038928",
              "refsource": "SECTRACK",
              "url": "http://www.securitytracker.com/id/1038928"
            },
            {
              "name": "RHSA-2017:2886",
              "refsource": "REDHAT",
              "url": "https://access.redhat.com/errata/RHSA-2017:2886"
            },
            {
              "name": "http://www.oracle.com/technetwork/security-advisory/cpujul2017-3236622.html",
              "refsource": "CONFIRM",
              "url": "http://www.oracle.com/technetwork/security-advisory/cpujul2017-3236622.html"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "43595867-4340-4103-b7a2-9a5208d29a85",
    "assignerShortName": "oracle",
    "cveId": "CVE-2017-3639",
    "datePublished": "2017-08-08T15:00:00",
    "dateReserved": "2016-12-06T00:00:00",
    "dateUpdated": "2024-10-04T17:02:44.692Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

CVE-2017-3645 (GCVE-0-2017-3645)

Vulnerability from cvelistv5

Published

2017-08-08 15:00

Modified

2024-10-04 17:01

Severity ?

CWE

Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server.

Summary

Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Optimizer). Supported versions that are affected are 5.7.18 and earlier. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.0 Base Score 4.9 (Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H).

References

URL

Tags

	http://www.securityfocus.com/bid/99783	vdb-entry, x_refsource_BID
	http://www.securitytracker.com/id/1038928	vdb-entry, x_refsource_SECTRACK
	https://access.redhat.com/errata/RHSA-2017:2886	vendor-advisory, x_refsource_REDHAT
	http://www.oracle.com/technetwork/security-advisory/cpujul2017-3236622.html	x_refsource_CONFIRM

Impacted products

	Vendor	Product	Version
	Oracle Corporation	MySQL Server	Version: 5.7.18 and earlier

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-05T14:30:59.097Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "name": "99783",
            "tags": [
              "vdb-entry",
              "x_refsource_BID",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/bid/99783"
          },
          {
            "name": "1038928",
            "tags": [
              "vdb-entry",
              "x_refsource_SECTRACK",
              "x_transferred"
            ],
            "url": "http://www.securitytracker.com/id/1038928"
          },
          {
            "name": "RHSA-2017:2886",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2017:2886"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://www.oracle.com/technetwork/security-advisory/cpujul2017-3236622.html"
          }
        ],
        "title": "CVE Program Container"
      },
      {
        "metrics": [
          {
            "other": {
              "content": {
                "id": "CVE-2017-3645",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "partial"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2024-10-04T15:47:59.197056Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2024-10-04T17:01:57.717Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "MySQL Server",
          "vendor": "Oracle Corporation",
          "versions": [
            {
              "status": "affected",
              "version": "5.7.18 and earlier"
            }
          ]
        }
      ],
      "datePublic": "2017-07-18T00:00:00",
      "descriptions": [
        {
          "lang": "en",
          "value": "Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Optimizer). Supported versions that are affected are 5.7.18 and earlier. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.0 Base Score 4.9 (Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H)."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server.  Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server.",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2017-12-07T10:57:01",
        "orgId": "43595867-4340-4103-b7a2-9a5208d29a85",
        "shortName": "oracle"
      },
      "references": [
        {
          "name": "99783",
          "tags": [
            "vdb-entry",
            "x_refsource_BID"
          ],
          "url": "http://www.securityfocus.com/bid/99783"
        },
        {
          "name": "1038928",
          "tags": [
            "vdb-entry",
            "x_refsource_SECTRACK"
          ],
          "url": "http://www.securitytracker.com/id/1038928"
        },
        {
          "name": "RHSA-2017:2886",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2017:2886"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://www.oracle.com/technetwork/security-advisory/cpujul2017-3236622.html"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "secalert_us@oracle.com",
          "ID": "CVE-2017-3645",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "MySQL Server",
                      "version": {
                        "version_data": [
                          {
                            "version_affected": "=",
                            "version_value": "5.7.18 and earlier"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "Oracle Corporation"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Optimizer). Supported versions that are affected are 5.7.18 and earlier. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.0 Base Score 4.9 (Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H)."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server.  Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server."
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "99783",
              "refsource": "BID",
              "url": "http://www.securityfocus.com/bid/99783"
            },
            {
              "name": "1038928",
              "refsource": "SECTRACK",
              "url": "http://www.securitytracker.com/id/1038928"
            },
            {
              "name": "RHSA-2017:2886",
              "refsource": "REDHAT",
              "url": "https://access.redhat.com/errata/RHSA-2017:2886"
            },
            {
              "name": "http://www.oracle.com/technetwork/security-advisory/cpujul2017-3236622.html",
              "refsource": "CONFIRM",
              "url": "http://www.oracle.com/technetwork/security-advisory/cpujul2017-3236622.html"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "43595867-4340-4103-b7a2-9a5208d29a85",
    "assignerShortName": "oracle",
    "cveId": "CVE-2017-3645",
    "datePublished": "2017-08-08T15:00:00",
    "dateReserved": "2016-12-06T00:00:00",
    "dateUpdated": "2024-10-04T17:01:57.717Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

CVE-2017-3456 (GCVE-0-2017-3456)

Vulnerability from cvelistv5

Published

2017-04-24 19:00

Modified

2024-10-07 16:20

Severity ?

CWE

Easily "exploitable" vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server.

Summary

Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: DML). Supported versions that are affected are 5.5.54 and earlier, 5.6.35 and earlier and 5.7.17 and earlier. Easily "exploitable" vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.0 Base Score 4.9 (Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H).

References

URL

Tags

	https://access.redhat.com/errata/RHSA-2017:2787	vendor-advisory, x_refsource_REDHAT
	http://www.securitytracker.com/id/1038287	vdb-entry, x_refsource_SECTRACK
	http://www.oracle.com/technetwork/security-advisory/cpuapr2017-3236618.html	x_refsource_CONFIRM
	https://access.redhat.com/errata/RHSA-2018:0574	vendor-advisory, x_refsource_REDHAT
	http://www.debian.org/security/2017/dsa-3944	vendor-advisory, x_refsource_DEBIAN
	https://access.redhat.com/errata/RHSA-2018:0279	vendor-advisory, x_refsource_REDHAT
	http://www.debian.org/security/2017/dsa-3834	vendor-advisory, x_refsource_DEBIAN
	https://access.redhat.com/errata/RHSA-2017:2886	vendor-advisory, x_refsource_REDHAT
	http://www.securityfocus.com/bid/97831	vdb-entry, x_refsource_BID
	https://access.redhat.com/errata/RHSA-2017:2192	vendor-advisory, x_refsource_REDHAT

Impacted products

	Vendor	Product	Version
	Oracle Corporation	MySQL Server	Version: 5.5.54 and earlier Version: 5.6.35 and earlier Version: 5.7.17 and earlier

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-05T14:30:56.940Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "name": "RHSA-2017:2787",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2017:2787"
          },
          {
            "name": "1038287",
            "tags": [
              "vdb-entry",
              "x_refsource_SECTRACK",
              "x_transferred"
            ],
            "url": "http://www.securitytracker.com/id/1038287"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://www.oracle.com/technetwork/security-advisory/cpuapr2017-3236618.html"
          },
          {
            "name": "RHSA-2018:0574",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2018:0574"
          },
          {
            "name": "DSA-3944",
            "tags": [
              "vendor-advisory",
              "x_refsource_DEBIAN",
              "x_transferred"
            ],
            "url": "http://www.debian.org/security/2017/dsa-3944"
          },
          {
            "name": "RHSA-2018:0279",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2018:0279"
          },
          {
            "name": "DSA-3834",
            "tags": [
              "vendor-advisory",
              "x_refsource_DEBIAN",
              "x_transferred"
            ],
            "url": "http://www.debian.org/security/2017/dsa-3834"
          },
          {
            "name": "RHSA-2017:2886",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2017:2886"
          },
          {
            "name": "97831",
            "tags": [
              "vdb-entry",
              "x_refsource_BID",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/bid/97831"
          },
          {
            "name": "RHSA-2017:2192",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2017:2192"
          }
        ],
        "title": "CVE Program Container"
      },
      {
        "metrics": [
          {
            "other": {
              "content": {
                "id": "CVE-2017-3456",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "partial"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2024-10-07T15:46:04.588617Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2024-10-07T16:20:04.992Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "MySQL Server",
          "vendor": "Oracle Corporation",
          "versions": [
            {
              "status": "affected",
              "version": "5.5.54 and earlier"
            },
            {
              "status": "affected",
              "version": "5.6.35 and earlier"
            },
            {
              "status": "affected",
              "version": "5.7.17 and earlier"
            }
          ]
        }
      ],
      "datePublic": "2017-04-18T00:00:00",
      "descriptions": [
        {
          "lang": "en",
          "value": "Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: DML). Supported versions that are affected are 5.5.54 and earlier, 5.6.35 and earlier and 5.7.17 and earlier. Easily \"exploitable\" vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.0 Base Score 4.9 (Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H)."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "Easily \"exploitable\" vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server.  Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server.",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2018-03-22T09:57:01",
        "orgId": "43595867-4340-4103-b7a2-9a5208d29a85",
        "shortName": "oracle"
      },
      "references": [
        {
          "name": "RHSA-2017:2787",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2017:2787"
        },
        {
          "name": "1038287",
          "tags": [
            "vdb-entry",
            "x_refsource_SECTRACK"
          ],
          "url": "http://www.securitytracker.com/id/1038287"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://www.oracle.com/technetwork/security-advisory/cpuapr2017-3236618.html"
        },
        {
          "name": "RHSA-2018:0574",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2018:0574"
        },
        {
          "name": "DSA-3944",
          "tags": [
            "vendor-advisory",
            "x_refsource_DEBIAN"
          ],
          "url": "http://www.debian.org/security/2017/dsa-3944"
        },
        {
          "name": "RHSA-2018:0279",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2018:0279"
        },
        {
          "name": "DSA-3834",
          "tags": [
            "vendor-advisory",
            "x_refsource_DEBIAN"
          ],
          "url": "http://www.debian.org/security/2017/dsa-3834"
        },
        {
          "name": "RHSA-2017:2886",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2017:2886"
        },
        {
          "name": "97831",
          "tags": [
            "vdb-entry",
            "x_refsource_BID"
          ],
          "url": "http://www.securityfocus.com/bid/97831"
        },
        {
          "name": "RHSA-2017:2192",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2017:2192"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "secalert_us@oracle.com",
          "ID": "CVE-2017-3456",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "MySQL Server",
                      "version": {
                        "version_data": [
                          {
                            "version_affected": "=",
                            "version_value": "5.5.54 and earlier"
                          },
                          {
                            "version_affected": "=",
                            "version_value": "5.6.35 and earlier"
                          },
                          {
                            "version_affected": "=",
                            "version_value": "5.7.17 and earlier"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "Oracle Corporation"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: DML). Supported versions that are affected are 5.5.54 and earlier, 5.6.35 and earlier and 5.7.17 and earlier. Easily \"exploitable\" vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.0 Base Score 4.9 (Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H)."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "Easily \"exploitable\" vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server.  Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server."
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "RHSA-2017:2787",
              "refsource": "REDHAT",
              "url": "https://access.redhat.com/errata/RHSA-2017:2787"
            },
            {
              "name": "1038287",
              "refsource": "SECTRACK",
              "url": "http://www.securitytracker.com/id/1038287"
            },
            {
              "name": "http://www.oracle.com/technetwork/security-advisory/cpuapr2017-3236618.html",
              "refsource": "CONFIRM",
              "url": "http://www.oracle.com/technetwork/security-advisory/cpuapr2017-3236618.html"
            },
            {
              "name": "RHSA-2018:0574",
              "refsource": "REDHAT",
              "url": "https://access.redhat.com/errata/RHSA-2018:0574"
            },
            {
              "name": "DSA-3944",
              "refsource": "DEBIAN",
              "url": "http://www.debian.org/security/2017/dsa-3944"
            },
            {
              "name": "RHSA-2018:0279",
              "refsource": "REDHAT",
              "url": "https://access.redhat.com/errata/RHSA-2018:0279"
            },
            {
              "name": "DSA-3834",
              "refsource": "DEBIAN",
              "url": "http://www.debian.org/security/2017/dsa-3834"
            },
            {
              "name": "RHSA-2017:2886",
              "refsource": "REDHAT",
              "url": "https://access.redhat.com/errata/RHSA-2017:2886"
            },
            {
              "name": "97831",
              "refsource": "BID",
              "url": "http://www.securityfocus.com/bid/97831"
            },
            {
              "name": "RHSA-2017:2192",
              "refsource": "REDHAT",
              "url": "https://access.redhat.com/errata/RHSA-2017:2192"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "43595867-4340-4103-b7a2-9a5208d29a85",
    "assignerShortName": "oracle",
    "cveId": "CVE-2017-3456",
    "datePublished": "2017-04-24T19:00:00",
    "dateReserved": "2016-12-06T00:00:00",
    "dateUpdated": "2024-10-07T16:20:04.992Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

CVE-2017-3317 (GCVE-0-2017-3317)

Vulnerability from cvelistv5

Published

2017-01-27 22:01

Modified

2024-10-08 20:34

Severity ?

CWE

CVSS:3.0/AV:L/AC:H/PR:H/UI:R/S:U/C:N/I:N/A:H

Summary

Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Logging). Supported versions that are affected are 5.5.53 and earlier, 5.6.34 and earlier and 5.7.16 and earlier. Difficult to exploit vulnerability allows high privileged attacker with logon to the infrastructure where MySQL Server executes to compromise MySQL Server. Successful attacks require human interaction from a person other than the attacker. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS v3.0 Base Score 4.0 (Availability impacts).

References

URL

Tags

	https://access.redhat.com/errata/RHSA-2017:2787	vendor-advisory, x_refsource_REDHAT
	https://security.gentoo.org/glsa/201702-17	vendor-advisory, x_refsource_GENTOO
	https://access.redhat.com/errata/RHSA-2018:0574	vendor-advisory, x_refsource_REDHAT
	https://security.gentoo.org/glsa/201702-18	vendor-advisory, x_refsource_GENTOO
	http://www.securitytracker.com/id/1037640	vdb-entry, x_refsource_SECTRACK
	http://www.securityfocus.com/bid/95585	vdb-entry, x_refsource_BID
	https://access.redhat.com/errata/RHSA-2018:0279	vendor-advisory, x_refsource_REDHAT
	http://www.debian.org/security/2017/dsa-3767	vendor-advisory, x_refsource_DEBIAN
	https://access.redhat.com/errata/RHSA-2017:2886	vendor-advisory, x_refsource_REDHAT
	http://www.oracle.com/technetwork/security-advisory/cpujan2017-2881727.html	x_refsource_CONFIRM
	http://www.debian.org/security/2017/dsa-3770	vendor-advisory, x_refsource_DEBIAN
	https://access.redhat.com/errata/RHSA-2017:2192	vendor-advisory, x_refsource_REDHAT

Impacted products

	Vendor	Product	Version
	Oracle	MySQL Server	Version: 5.5.53 and earlier Version: 5.6.34 and earlier Version: 5.7.16 and earlier

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-05T14:23:34.117Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "name": "RHSA-2017:2787",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2017:2787"
          },
          {
            "name": "GLSA-201702-17",
            "tags": [
              "vendor-advisory",
              "x_refsource_GENTOO",
              "x_transferred"
            ],
            "url": "https://security.gentoo.org/glsa/201702-17"
          },
          {
            "name": "RHSA-2018:0574",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2018:0574"
          },
          {
            "name": "GLSA-201702-18",
            "tags": [
              "vendor-advisory",
              "x_refsource_GENTOO",
              "x_transferred"
            ],
            "url": "https://security.gentoo.org/glsa/201702-18"
          },
          {
            "name": "1037640",
            "tags": [
              "vdb-entry",
              "x_refsource_SECTRACK",
              "x_transferred"
            ],
            "url": "http://www.securitytracker.com/id/1037640"
          },
          {
            "name": "95585",
            "tags": [
              "vdb-entry",
              "x_refsource_BID",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/bid/95585"
          },
          {
            "name": "RHSA-2018:0279",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2018:0279"
          },
          {
            "name": "DSA-3767",
            "tags": [
              "vendor-advisory",
              "x_refsource_DEBIAN",
              "x_transferred"
            ],
            "url": "http://www.debian.org/security/2017/dsa-3767"
          },
          {
            "name": "RHSA-2017:2886",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2017:2886"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://www.oracle.com/technetwork/security-advisory/cpujan2017-2881727.html"
          },
          {
            "name": "DSA-3770",
            "tags": [
              "vendor-advisory",
              "x_refsource_DEBIAN",
              "x_transferred"
            ],
            "url": "http://www.debian.org/security/2017/dsa-3770"
          },
          {
            "name": "RHSA-2017:2192",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2017:2192"
          }
        ],
        "title": "CVE Program Container"
      },
      {
        "metrics": [
          {
            "other": {
              "content": {
                "id": "CVE-2017-3317",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "partial"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2024-10-08T20:09:31.756150Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2024-10-08T20:34:17.556Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "MySQL Server",
          "vendor": "Oracle",
          "versions": [
            {
              "status": "affected",
              "version": "5.5.53 and earlier"
            },
            {
              "status": "affected",
              "version": "5.6.34 and earlier"
            },
            {
              "status": "affected",
              "version": "5.7.16 and earlier"
            }
          ]
        }
      ],
      "datePublic": "2017-01-17T00:00:00",
      "descriptions": [
        {
          "lang": "en",
          "value": "Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Logging). Supported versions that are affected are 5.5.53 and earlier, 5.6.34 and earlier and 5.7.16 and earlier. Difficult to exploit vulnerability allows high privileged attacker with logon to the infrastructure where MySQL Server executes to compromise MySQL Server. Successful attacks require human interaction from a person other than the attacker. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS v3.0 Base Score 4.0 (Availability impacts)."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "CVSS:3.0/AV:L/AC:H/PR:H/UI:R/S:U/C:N/I:N/A:H",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2018-03-22T09:57:01",
        "orgId": "43595867-4340-4103-b7a2-9a5208d29a85",
        "shortName": "oracle"
      },
      "references": [
        {
          "name": "RHSA-2017:2787",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2017:2787"
        },
        {
          "name": "GLSA-201702-17",
          "tags": [
            "vendor-advisory",
            "x_refsource_GENTOO"
          ],
          "url": "https://security.gentoo.org/glsa/201702-17"
        },
        {
          "name": "RHSA-2018:0574",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2018:0574"
        },
        {
          "name": "GLSA-201702-18",
          "tags": [
            "vendor-advisory",
            "x_refsource_GENTOO"
          ],
          "url": "https://security.gentoo.org/glsa/201702-18"
        },
        {
          "name": "1037640",
          "tags": [
            "vdb-entry",
            "x_refsource_SECTRACK"
          ],
          "url": "http://www.securitytracker.com/id/1037640"
        },
        {
          "name": "95585",
          "tags": [
            "vdb-entry",
            "x_refsource_BID"
          ],
          "url": "http://www.securityfocus.com/bid/95585"
        },
        {
          "name": "RHSA-2018:0279",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2018:0279"
        },
        {
          "name": "DSA-3767",
          "tags": [
            "vendor-advisory",
            "x_refsource_DEBIAN"
          ],
          "url": "http://www.debian.org/security/2017/dsa-3767"
        },
        {
          "name": "RHSA-2017:2886",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2017:2886"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://www.oracle.com/technetwork/security-advisory/cpujan2017-2881727.html"
        },
        {
          "name": "DSA-3770",
          "tags": [
            "vendor-advisory",
            "x_refsource_DEBIAN"
          ],
          "url": "http://www.debian.org/security/2017/dsa-3770"
        },
        {
          "name": "RHSA-2017:2192",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2017:2192"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "secalert_us@oracle.com",
          "ID": "CVE-2017-3317",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "MySQL Server",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "5.5.53 and earlier"
                          },
                          {
                            "version_value": "5.6.34 and earlier"
                          },
                          {
                            "version_value": "5.7.16 and earlier"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "Oracle"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Logging). Supported versions that are affected are 5.5.53 and earlier, 5.6.34 and earlier and 5.7.16 and earlier. Difficult to exploit vulnerability allows high privileged attacker with logon to the infrastructure where MySQL Server executes to compromise MySQL Server. Successful attacks require human interaction from a person other than the attacker. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS v3.0 Base Score 4.0 (Availability impacts)."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "CVSS:3.0/AV:L/AC:H/PR:H/UI:R/S:U/C:N/I:N/A:H"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "RHSA-2017:2787",
              "refsource": "REDHAT",
              "url": "https://access.redhat.com/errata/RHSA-2017:2787"
            },
            {
              "name": "GLSA-201702-17",
              "refsource": "GENTOO",
              "url": "https://security.gentoo.org/glsa/201702-17"
            },
            {
              "name": "RHSA-2018:0574",
              "refsource": "REDHAT",
              "url": "https://access.redhat.com/errata/RHSA-2018:0574"
            },
            {
              "name": "GLSA-201702-18",
              "refsource": "GENTOO",
              "url": "https://security.gentoo.org/glsa/201702-18"
            },
            {
              "name": "1037640",
              "refsource": "SECTRACK",
              "url": "http://www.securitytracker.com/id/1037640"
            },
            {
              "name": "95585",
              "refsource": "BID",
              "url": "http://www.securityfocus.com/bid/95585"
            },
            {
              "name": "RHSA-2018:0279",
              "refsource": "REDHAT",
              "url": "https://access.redhat.com/errata/RHSA-2018:0279"
            },
            {
              "name": "DSA-3767",
              "refsource": "DEBIAN",
              "url": "http://www.debian.org/security/2017/dsa-3767"
            },
            {
              "name": "RHSA-2017:2886",
              "refsource": "REDHAT",
              "url": "https://access.redhat.com/errata/RHSA-2017:2886"
            },
            {
              "name": "http://www.oracle.com/technetwork/security-advisory/cpujan2017-2881727.html",
              "refsource": "CONFIRM",
              "url": "http://www.oracle.com/technetwork/security-advisory/cpujan2017-2881727.html"
            },
            {
              "name": "DSA-3770",
              "refsource": "DEBIAN",
              "url": "http://www.debian.org/security/2017/dsa-3770"
            },
            {
              "name": "RHSA-2017:2192",
              "refsource": "REDHAT",
              "url": "https://access.redhat.com/errata/RHSA-2017:2192"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "43595867-4340-4103-b7a2-9a5208d29a85",
    "assignerShortName": "oracle",
    "cveId": "CVE-2017-3317",
    "datePublished": "2017-01-27T22:01:00",
    "dateReserved": "2016-12-06T00:00:00",
    "dateUpdated": "2024-10-08T20:34:17.556Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

CVE-2017-3455 (GCVE-0-2017-3455)

Vulnerability from cvelistv5

Published

2017-04-24 19:00

Modified

2024-10-07 16:20

Severity ?

CWE

Easily "exploitable" vulnerability allows low privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of MySQL Server accessible data as well as unauthorized read access to a subset of MySQL Server accessible data.

Summary

Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Security: Privileges). Supported versions that are affected are 5.7.17 and earlier. Easily "exploitable" vulnerability allows low privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of MySQL Server accessible data as well as unauthorized read access to a subset of MySQL Server accessible data. CVSS 3.0 Base Score 5.4 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N).

References

URL

Tags

	http://www.securitytracker.com/id/1038287	vdb-entry, x_refsource_SECTRACK
	http://www.oracle.com/technetwork/security-advisory/cpuapr2017-3236618.html	x_refsource_CONFIRM
	http://www.securityfocus.com/bid/97820	vdb-entry, x_refsource_BID
	https://access.redhat.com/errata/RHSA-2017:2886	vendor-advisory, x_refsource_REDHAT

Impacted products

	Vendor	Product	Version
	Oracle Corporation	MySQL Server	Version: 5.7.17 and earlier

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-05T14:30:56.946Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "name": "1038287",
            "tags": [
              "vdb-entry",
              "x_refsource_SECTRACK",
              "x_transferred"
            ],
            "url": "http://www.securitytracker.com/id/1038287"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://www.oracle.com/technetwork/security-advisory/cpuapr2017-3236618.html"
          },
          {
            "name": "97820",
            "tags": [
              "vdb-entry",
              "x_refsource_BID",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/bid/97820"
          },
          {
            "name": "RHSA-2017:2886",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2017:2886"
          }
        ],
        "title": "CVE Program Container"
      },
      {
        "metrics": [
          {
            "other": {
              "content": {
                "id": "CVE-2017-3455",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "partial"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2024-10-07T15:46:05.601297Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2024-10-07T16:20:14.570Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "MySQL Server",
          "vendor": "Oracle Corporation",
          "versions": [
            {
              "status": "affected",
              "version": "5.7.17 and earlier"
            }
          ]
        }
      ],
      "datePublic": "2017-04-18T00:00:00",
      "descriptions": [
        {
          "lang": "en",
          "value": "Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Security: Privileges). Supported versions that are affected are 5.7.17 and earlier. Easily \"exploitable\" vulnerability allows low privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of MySQL Server accessible data as well as unauthorized read access to a subset of MySQL Server accessible data. CVSS 3.0 Base Score 5.4 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N)."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "Easily \"exploitable\" vulnerability allows low privileged attacker with network access via multiple protocols to compromise MySQL Server.  Successful attacks of this vulnerability can result in  unauthorized update, insert or delete access to some of MySQL Server accessible data as well as  unauthorized read access to a subset of MySQL Server accessible data.",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2017-12-07T10:57:01",
        "orgId": "43595867-4340-4103-b7a2-9a5208d29a85",
        "shortName": "oracle"
      },
      "references": [
        {
          "name": "1038287",
          "tags": [
            "vdb-entry",
            "x_refsource_SECTRACK"
          ],
          "url": "http://www.securitytracker.com/id/1038287"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://www.oracle.com/technetwork/security-advisory/cpuapr2017-3236618.html"
        },
        {
          "name": "97820",
          "tags": [
            "vdb-entry",
            "x_refsource_BID"
          ],
          "url": "http://www.securityfocus.com/bid/97820"
        },
        {
          "name": "RHSA-2017:2886",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2017:2886"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "secalert_us@oracle.com",
          "ID": "CVE-2017-3455",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "MySQL Server",
                      "version": {
                        "version_data": [
                          {
                            "version_affected": "=",
                            "version_value": "5.7.17 and earlier"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "Oracle Corporation"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Security: Privileges). Supported versions that are affected are 5.7.17 and earlier. Easily \"exploitable\" vulnerability allows low privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of MySQL Server accessible data as well as unauthorized read access to a subset of MySQL Server accessible data. CVSS 3.0 Base Score 5.4 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N)."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "Easily \"exploitable\" vulnerability allows low privileged attacker with network access via multiple protocols to compromise MySQL Server.  Successful attacks of this vulnerability can result in  unauthorized update, insert or delete access to some of MySQL Server accessible data as well as  unauthorized read access to a subset of MySQL Server accessible data."
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "1038287",
              "refsource": "SECTRACK",
              "url": "http://www.securitytracker.com/id/1038287"
            },
            {
              "name": "http://www.oracle.com/technetwork/security-advisory/cpuapr2017-3236618.html",
              "refsource": "CONFIRM",
              "url": "http://www.oracle.com/technetwork/security-advisory/cpuapr2017-3236618.html"
            },
            {
              "name": "97820",
              "refsource": "BID",
              "url": "http://www.securityfocus.com/bid/97820"
            },
            {
              "name": "RHSA-2017:2886",
              "refsource": "REDHAT",
              "url": "https://access.redhat.com/errata/RHSA-2017:2886"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "43595867-4340-4103-b7a2-9a5208d29a85",
    "assignerShortName": "oracle",
    "cveId": "CVE-2017-3455",
    "datePublished": "2017-04-24T19:00:00",
    "dateReserved": "2016-12-06T00:00:00",
    "dateUpdated": "2024-10-07T16:20:14.570Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

CVE-2017-3650 (GCVE-0-2017-3650)

Vulnerability from cvelistv5

Published

2017-08-08 15:00

Modified

2024-10-04 17:01

Severity ?

CWE

Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized read access to a subset of MySQL Server accessible data.

Summary

Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: C API). Supported versions that are affected are 5.7.18 and earlier. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized read access to a subset of MySQL Server accessible data. CVSS 3.0 Base Score 3.7 (Confidentiality impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N).

References

URL

Tags

	http://www.securityfocus.com/bid/99808	vdb-entry, x_refsource_BID
	http://www.securitytracker.com/id/1038928	vdb-entry, x_refsource_SECTRACK
	https://access.redhat.com/errata/RHSA-2017:2886	vendor-advisory, x_refsource_REDHAT
	http://www.oracle.com/technetwork/security-advisory/cpujul2017-3236622.html	x_refsource_CONFIRM

Impacted products

	Vendor	Product	Version
	Oracle Corporation	MySQL Server	Version: 5.7.18 and earlier

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-05T14:30:58.972Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "name": "99808",
            "tags": [
              "vdb-entry",
              "x_refsource_BID",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/bid/99808"
          },
          {
            "name": "1038928",
            "tags": [
              "vdb-entry",
              "x_refsource_SECTRACK",
              "x_transferred"
            ],
            "url": "http://www.securitytracker.com/id/1038928"
          },
          {
            "name": "RHSA-2017:2886",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2017:2886"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://www.oracle.com/technetwork/security-advisory/cpujul2017-3236622.html"
          }
        ],
        "title": "CVE Program Container"
      },
      {
        "metrics": [
          {
            "other": {
              "content": {
                "id": "CVE-2017-3650",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "partial"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2024-10-04T15:47:46.447982Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2024-10-04T17:01:24.608Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "MySQL Server",
          "vendor": "Oracle Corporation",
          "versions": [
            {
              "status": "affected",
              "version": "5.7.18 and earlier"
            }
          ]
        }
      ],
      "datePublic": "2017-07-18T00:00:00",
      "descriptions": [
        {
          "lang": "en",
          "value": "Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: C API). Supported versions that are affected are 5.7.18 and earlier. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized read access to a subset of MySQL Server accessible data. CVSS 3.0 Base Score 3.7 (Confidentiality impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N)."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise MySQL Server.  Successful attacks of this vulnerability can result in  unauthorized read access to a subset of MySQL Server accessible data.",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2017-12-07T10:57:01",
        "orgId": "43595867-4340-4103-b7a2-9a5208d29a85",
        "shortName": "oracle"
      },
      "references": [
        {
          "name": "99808",
          "tags": [
            "vdb-entry",
            "x_refsource_BID"
          ],
          "url": "http://www.securityfocus.com/bid/99808"
        },
        {
          "name": "1038928",
          "tags": [
            "vdb-entry",
            "x_refsource_SECTRACK"
          ],
          "url": "http://www.securitytracker.com/id/1038928"
        },
        {
          "name": "RHSA-2017:2886",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2017:2886"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://www.oracle.com/technetwork/security-advisory/cpujul2017-3236622.html"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "secalert_us@oracle.com",
          "ID": "CVE-2017-3650",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "MySQL Server",
                      "version": {
                        "version_data": [
                          {
                            "version_affected": "=",
                            "version_value": "5.7.18 and earlier"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "Oracle Corporation"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: C API). Supported versions that are affected are 5.7.18 and earlier. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized read access to a subset of MySQL Server accessible data. CVSS 3.0 Base Score 3.7 (Confidentiality impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N)."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise MySQL Server.  Successful attacks of this vulnerability can result in  unauthorized read access to a subset of MySQL Server accessible data."
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "99808",
              "refsource": "BID",
              "url": "http://www.securityfocus.com/bid/99808"
            },
            {
              "name": "1038928",
              "refsource": "SECTRACK",
              "url": "http://www.securitytracker.com/id/1038928"
            },
            {
              "name": "RHSA-2017:2886",
              "refsource": "REDHAT",
              "url": "https://access.redhat.com/errata/RHSA-2017:2886"
            },
            {
              "name": "http://www.oracle.com/technetwork/security-advisory/cpujul2017-3236622.html",
              "refsource": "CONFIRM",
              "url": "http://www.oracle.com/technetwork/security-advisory/cpujul2017-3236622.html"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "43595867-4340-4103-b7a2-9a5208d29a85",
    "assignerShortName": "oracle",
    "cveId": "CVE-2017-3650",
    "datePublished": "2017-08-08T15:00:00",
    "dateReserved": "2016-12-06T00:00:00",
    "dateUpdated": "2024-10-04T17:01:24.608Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

CVE-2017-3462 (GCVE-0-2017-3462)

Vulnerability from cvelistv5

Published

2017-04-24 19:00

Modified

2024-10-07 16:19

Severity ?

CWE

Easily "exploitable" vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server.

Summary

Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Security: Privileges). Supported versions that are affected are 5.5.54 and earlier, 5.6.35 and earlier and 5.7.17 and earlier. Easily "exploitable" vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.0 Base Score 4.9 (Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H).

References

URL

Tags

	https://access.redhat.com/errata/RHSA-2017:2787	vendor-advisory, x_refsource_REDHAT
	http://www.securitytracker.com/id/1038287	vdb-entry, x_refsource_SECTRACK
	http://www.oracle.com/technetwork/security-advisory/cpuapr2017-3236618.html	x_refsource_CONFIRM
	http://www.securityfocus.com/bid/97851	vdb-entry, x_refsource_BID
	http://www.debian.org/security/2017/dsa-3834	vendor-advisory, x_refsource_DEBIAN
	https://access.redhat.com/errata/RHSA-2017:2886	vendor-advisory, x_refsource_REDHAT

Impacted products

	Vendor	Product	Version
	Oracle Corporation	MySQL Server	Version: 5.5.54 and earlier Version: 5.6.35 and earlier Version: 5.7.17 and earlier

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-05T14:30:56.933Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "name": "RHSA-2017:2787",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2017:2787"
          },
          {
            "name": "1038287",
            "tags": [
              "vdb-entry",
              "x_refsource_SECTRACK",
              "x_transferred"
            ],
            "url": "http://www.securitytracker.com/id/1038287"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://www.oracle.com/technetwork/security-advisory/cpuapr2017-3236618.html"
          },
          {
            "name": "97851",
            "tags": [
              "vdb-entry",
              "x_refsource_BID",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/bid/97851"
          },
          {
            "name": "DSA-3834",
            "tags": [
              "vendor-advisory",
              "x_refsource_DEBIAN",
              "x_transferred"
            ],
            "url": "http://www.debian.org/security/2017/dsa-3834"
          },
          {
            "name": "RHSA-2017:2886",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2017:2886"
          }
        ],
        "title": "CVE Program Container"
      },
      {
        "metrics": [
          {
            "other": {
              "content": {
                "id": "CVE-2017-3462",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "partial"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2024-10-07T15:45:57.832990Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2024-10-07T16:19:12.083Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "MySQL Server",
          "vendor": "Oracle Corporation",
          "versions": [
            {
              "status": "affected",
              "version": "5.5.54 and earlier"
            },
            {
              "status": "affected",
              "version": "5.6.35 and earlier"
            },
            {
              "status": "affected",
              "version": "5.7.17 and earlier"
            }
          ]
        }
      ],
      "datePublic": "2017-04-18T00:00:00",
      "descriptions": [
        {
          "lang": "en",
          "value": "Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Security: Privileges). Supported versions that are affected are 5.5.54 and earlier, 5.6.35 and earlier and 5.7.17 and earlier. Easily \"exploitable\" vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.0 Base Score 4.9 (Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H)."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "Easily \"exploitable\" vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server.  Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server.",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2017-12-08T10:57:01",
        "orgId": "43595867-4340-4103-b7a2-9a5208d29a85",
        "shortName": "oracle"
      },
      "references": [
        {
          "name": "RHSA-2017:2787",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2017:2787"
        },
        {
          "name": "1038287",
          "tags": [
            "vdb-entry",
            "x_refsource_SECTRACK"
          ],
          "url": "http://www.securitytracker.com/id/1038287"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://www.oracle.com/technetwork/security-advisory/cpuapr2017-3236618.html"
        },
        {
          "name": "97851",
          "tags": [
            "vdb-entry",
            "x_refsource_BID"
          ],
          "url": "http://www.securityfocus.com/bid/97851"
        },
        {
          "name": "DSA-3834",
          "tags": [
            "vendor-advisory",
            "x_refsource_DEBIAN"
          ],
          "url": "http://www.debian.org/security/2017/dsa-3834"
        },
        {
          "name": "RHSA-2017:2886",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2017:2886"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "secalert_us@oracle.com",
          "ID": "CVE-2017-3462",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "MySQL Server",
                      "version": {
                        "version_data": [
                          {
                            "version_affected": "=",
                            "version_value": "5.5.54 and earlier"
                          },
                          {
                            "version_affected": "=",
                            "version_value": "5.6.35 and earlier"
                          },
                          {
                            "version_affected": "=",
                            "version_value": "5.7.17 and earlier"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "Oracle Corporation"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Security: Privileges). Supported versions that are affected are 5.5.54 and earlier, 5.6.35 and earlier and 5.7.17 and earlier. Easily \"exploitable\" vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.0 Base Score 4.9 (Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H)."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "Easily \"exploitable\" vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server.  Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server."
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "RHSA-2017:2787",
              "refsource": "REDHAT",
              "url": "https://access.redhat.com/errata/RHSA-2017:2787"
            },
            {
              "name": "1038287",
              "refsource": "SECTRACK",
              "url": "http://www.securitytracker.com/id/1038287"
            },
            {
              "name": "http://www.oracle.com/technetwork/security-advisory/cpuapr2017-3236618.html",
              "refsource": "CONFIRM",
              "url": "http://www.oracle.com/technetwork/security-advisory/cpuapr2017-3236618.html"
            },
            {
              "name": "97851",
              "refsource": "BID",
              "url": "http://www.securityfocus.com/bid/97851"
            },
            {
              "name": "DSA-3834",
              "refsource": "DEBIAN",
              "url": "http://www.debian.org/security/2017/dsa-3834"
            },
            {
              "name": "RHSA-2017:2886",
              "refsource": "REDHAT",
              "url": "https://access.redhat.com/errata/RHSA-2017:2886"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "43595867-4340-4103-b7a2-9a5208d29a85",
    "assignerShortName": "oracle",
    "cveId": "CVE-2017-3462",
    "datePublished": "2017-04-24T19:00:00",
    "dateReserved": "2016-12-06T00:00:00",
    "dateUpdated": "2024-10-07T16:19:12.083Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

CVE-2017-3463 (GCVE-0-2017-3463)

Vulnerability from cvelistv5

Published

2017-04-24 19:00

Modified

2024-10-07 16:19

Severity ?

CWE

Easily "exploitable" vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server.

Summary

References

URL

Tags

	https://access.redhat.com/errata/RHSA-2017:2787	vendor-advisory, x_refsource_REDHAT
	http://www.securitytracker.com/id/1038287	vdb-entry, x_refsource_SECTRACK
	http://www.oracle.com/technetwork/security-advisory/cpuapr2017-3236618.html	x_refsource_CONFIRM
	http://www.securityfocus.com/bid/97849	vdb-entry, x_refsource_BID
	http://www.debian.org/security/2017/dsa-3834	vendor-advisory, x_refsource_DEBIAN
	https://access.redhat.com/errata/RHSA-2017:2886	vendor-advisory, x_refsource_REDHAT

Impacted products

	Vendor	Product	Version
	Oracle Corporation	MySQL Server	Version: 5.5.54 and earlier Version: 5.6.35 and earlier Version: 5.7.17 and earlier

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-05T14:30:56.792Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "name": "RHSA-2017:2787",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2017:2787"
          },
          {
            "name": "1038287",
            "tags": [
              "vdb-entry",
              "x_refsource_SECTRACK",
              "x_transferred"
            ],
            "url": "http://www.securitytracker.com/id/1038287"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://www.oracle.com/technetwork/security-advisory/cpuapr2017-3236618.html"
          },
          {
            "name": "97849",
            "tags": [
              "vdb-entry",
              "x_refsource_BID",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/bid/97849"
          },
          {
            "name": "DSA-3834",
            "tags": [
              "vendor-advisory",
              "x_refsource_DEBIAN",
              "x_transferred"
            ],
            "url": "http://www.debian.org/security/2017/dsa-3834"
          },
          {
            "name": "RHSA-2017:2886",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2017:2886"
          }
        ],
        "title": "CVE Program Container"
      },
      {
        "metrics": [
          {
            "other": {
              "content": {
                "id": "CVE-2017-3463",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "partial"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2024-10-07T15:45:56.658776Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2024-10-07T16:19:03.111Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "MySQL Server",
          "vendor": "Oracle Corporation",
          "versions": [
            {
              "status": "affected",
              "version": "5.5.54 and earlier"
            },
            {
              "status": "affected",
              "version": "5.6.35 and earlier"
            },
            {
              "status": "affected",
              "version": "5.7.17 and earlier"
            }
          ]
        }
      ],
      "datePublic": "2017-04-18T00:00:00",
      "descriptions": [
        {
          "lang": "en",
          "value": "Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Security: Privileges). Supported versions that are affected are 5.5.54 and earlier, 5.6.35 and earlier and 5.7.17 and earlier. Easily \"exploitable\" vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.0 Base Score 4.9 (Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H)."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "Easily \"exploitable\" vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server.  Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server.",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2017-12-08T10:57:01",
        "orgId": "43595867-4340-4103-b7a2-9a5208d29a85",
        "shortName": "oracle"
      },
      "references": [
        {
          "name": "RHSA-2017:2787",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2017:2787"
        },
        {
          "name": "1038287",
          "tags": [
            "vdb-entry",
            "x_refsource_SECTRACK"
          ],
          "url": "http://www.securitytracker.com/id/1038287"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://www.oracle.com/technetwork/security-advisory/cpuapr2017-3236618.html"
        },
        {
          "name": "97849",
          "tags": [
            "vdb-entry",
            "x_refsource_BID"
          ],
          "url": "http://www.securityfocus.com/bid/97849"
        },
        {
          "name": "DSA-3834",
          "tags": [
            "vendor-advisory",
            "x_refsource_DEBIAN"
          ],
          "url": "http://www.debian.org/security/2017/dsa-3834"
        },
        {
          "name": "RHSA-2017:2886",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2017:2886"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "secalert_us@oracle.com",
          "ID": "CVE-2017-3463",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "MySQL Server",
                      "version": {
                        "version_data": [
                          {
                            "version_affected": "=",
                            "version_value": "5.5.54 and earlier"
                          },
                          {
                            "version_affected": "=",
                            "version_value": "5.6.35 and earlier"
                          },
                          {
                            "version_affected": "=",
                            "version_value": "5.7.17 and earlier"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "Oracle Corporation"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Security: Privileges). Supported versions that are affected are 5.5.54 and earlier, 5.6.35 and earlier and 5.7.17 and earlier. Easily \"exploitable\" vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.0 Base Score 4.9 (Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H)."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "Easily \"exploitable\" vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server.  Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server."
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "RHSA-2017:2787",
              "refsource": "REDHAT",
              "url": "https://access.redhat.com/errata/RHSA-2017:2787"
            },
            {
              "name": "1038287",
              "refsource": "SECTRACK",
              "url": "http://www.securitytracker.com/id/1038287"
            },
            {
              "name": "http://www.oracle.com/technetwork/security-advisory/cpuapr2017-3236618.html",
              "refsource": "CONFIRM",
              "url": "http://www.oracle.com/technetwork/security-advisory/cpuapr2017-3236618.html"
            },
            {
              "name": "97849",
              "refsource": "BID",
              "url": "http://www.securityfocus.com/bid/97849"
            },
            {
              "name": "DSA-3834",
              "refsource": "DEBIAN",
              "url": "http://www.debian.org/security/2017/dsa-3834"
            },
            {
              "name": "RHSA-2017:2886",
              "refsource": "REDHAT",
              "url": "https://access.redhat.com/errata/RHSA-2017:2886"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "43595867-4340-4103-b7a2-9a5208d29a85",
    "assignerShortName": "oracle",
    "cveId": "CVE-2017-3463",
    "datePublished": "2017-04-24T19:00:00",
    "dateReserved": "2016-12-06T00:00:00",
    "dateUpdated": "2024-10-07T16:19:03.111Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

CVE-2017-3238 (GCVE-0-2017-3238)

Vulnerability from cvelistv5

Published

2017-01-27 22:01

Modified

2024-10-09 19:51

Severity ?

CWE

CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Summary

Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Optimizer). Supported versions that are affected are 5.5.53 and earlier, 5.6.34 and earlier and 5.7.16 and earlier. Easily exploitable vulnerability allows low privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS v3.0 Base Score 6.5 (Availability impacts).

References

URL

Tags

	https://access.redhat.com/errata/RHSA-2017:2787	vendor-advisory, x_refsource_REDHAT
	https://security.gentoo.org/glsa/201702-17	vendor-advisory, x_refsource_GENTOO
	https://access.redhat.com/errata/RHSA-2018:0574	vendor-advisory, x_refsource_REDHAT
	https://security.gentoo.org/glsa/201702-18	vendor-advisory, x_refsource_GENTOO
	http://www.securitytracker.com/id/1037640	vdb-entry, x_refsource_SECTRACK
	https://access.redhat.com/errata/RHSA-2018:0279	vendor-advisory, x_refsource_REDHAT
	http://www.debian.org/security/2017/dsa-3767	vendor-advisory, x_refsource_DEBIAN
	http://www.securityfocus.com/bid/95571	vdb-entry, x_refsource_BID
	https://access.redhat.com/errata/RHSA-2017:2886	vendor-advisory, x_refsource_REDHAT
	http://www.oracle.com/technetwork/security-advisory/cpujan2017-2881727.html	x_refsource_CONFIRM
	http://www.debian.org/security/2017/dsa-3770	vendor-advisory, x_refsource_DEBIAN
	https://access.redhat.com/errata/RHSA-2017:2192	vendor-advisory, x_refsource_REDHAT

Impacted products

	Vendor	Product	Version
	Oracle	MySQL Server	Version: 5.5.53 and earlier Version: 5.6.34 and earlier Version: 5.7.16 and earlier

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-05T14:16:28.484Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "name": "RHSA-2017:2787",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2017:2787"
          },
          {
            "name": "GLSA-201702-17",
            "tags": [
              "vendor-advisory",
              "x_refsource_GENTOO",
              "x_transferred"
            ],
            "url": "https://security.gentoo.org/glsa/201702-17"
          },
          {
            "name": "RHSA-2018:0574",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2018:0574"
          },
          {
            "name": "GLSA-201702-18",
            "tags": [
              "vendor-advisory",
              "x_refsource_GENTOO",
              "x_transferred"
            ],
            "url": "https://security.gentoo.org/glsa/201702-18"
          },
          {
            "name": "1037640",
            "tags": [
              "vdb-entry",
              "x_refsource_SECTRACK",
              "x_transferred"
            ],
            "url": "http://www.securitytracker.com/id/1037640"
          },
          {
            "name": "RHSA-2018:0279",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2018:0279"
          },
          {
            "name": "DSA-3767",
            "tags": [
              "vendor-advisory",
              "x_refsource_DEBIAN",
              "x_transferred"
            ],
            "url": "http://www.debian.org/security/2017/dsa-3767"
          },
          {
            "name": "95571",
            "tags": [
              "vdb-entry",
              "x_refsource_BID",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/bid/95571"
          },
          {
            "name": "RHSA-2017:2886",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2017:2886"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://www.oracle.com/technetwork/security-advisory/cpujan2017-2881727.html"
          },
          {
            "name": "DSA-3770",
            "tags": [
              "vendor-advisory",
              "x_refsource_DEBIAN",
              "x_transferred"
            ],
            "url": "http://www.debian.org/security/2017/dsa-3770"
          },
          {
            "name": "RHSA-2017:2192",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2017:2192"
          }
        ],
        "title": "CVE Program Container"
      },
      {
        "metrics": [
          {
            "other": {
              "content": {
                "id": "CVE-2017-3238",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "partial"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2024-10-09T19:30:35.266321Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2024-10-09T19:51:59.764Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "MySQL Server",
          "vendor": "Oracle",
          "versions": [
            {
              "status": "affected",
              "version": "5.5.53 and earlier"
            },
            {
              "status": "affected",
              "version": "5.6.34 and earlier"
            },
            {
              "status": "affected",
              "version": "5.7.16 and earlier"
            }
          ]
        }
      ],
      "datePublic": "2017-01-17T00:00:00",
      "descriptions": [
        {
          "lang": "en",
          "value": "Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Optimizer). Supported versions that are affected are 5.5.53 and earlier, 5.6.34 and earlier and 5.7.16 and earlier. Easily exploitable vulnerability allows low privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS v3.0 Base Score 6.5 (Availability impacts)."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2018-03-22T09:57:01",
        "orgId": "43595867-4340-4103-b7a2-9a5208d29a85",
        "shortName": "oracle"
      },
      "references": [
        {
          "name": "RHSA-2017:2787",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2017:2787"
        },
        {
          "name": "GLSA-201702-17",
          "tags": [
            "vendor-advisory",
            "x_refsource_GENTOO"
          ],
          "url": "https://security.gentoo.org/glsa/201702-17"
        },
        {
          "name": "RHSA-2018:0574",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2018:0574"
        },
        {
          "name": "GLSA-201702-18",
          "tags": [
            "vendor-advisory",
            "x_refsource_GENTOO"
          ],
          "url": "https://security.gentoo.org/glsa/201702-18"
        },
        {
          "name": "1037640",
          "tags": [
            "vdb-entry",
            "x_refsource_SECTRACK"
          ],
          "url": "http://www.securitytracker.com/id/1037640"
        },
        {
          "name": "RHSA-2018:0279",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2018:0279"
        },
        {
          "name": "DSA-3767",
          "tags": [
            "vendor-advisory",
            "x_refsource_DEBIAN"
          ],
          "url": "http://www.debian.org/security/2017/dsa-3767"
        },
        {
          "name": "95571",
          "tags": [
            "vdb-entry",
            "x_refsource_BID"
          ],
          "url": "http://www.securityfocus.com/bid/95571"
        },
        {
          "name": "RHSA-2017:2886",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2017:2886"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://www.oracle.com/technetwork/security-advisory/cpujan2017-2881727.html"
        },
        {
          "name": "DSA-3770",
          "tags": [
            "vendor-advisory",
            "x_refsource_DEBIAN"
          ],
          "url": "http://www.debian.org/security/2017/dsa-3770"
        },
        {
          "name": "RHSA-2017:2192",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2017:2192"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "secalert_us@oracle.com",
          "ID": "CVE-2017-3238",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "MySQL Server",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "5.5.53 and earlier"
                          },
                          {
                            "version_value": "5.6.34 and earlier"
                          },
                          {
                            "version_value": "5.7.16 and earlier"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "Oracle"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Optimizer). Supported versions that are affected are 5.5.53 and earlier, 5.6.34 and earlier and 5.7.16 and earlier. Easily exploitable vulnerability allows low privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS v3.0 Base Score 6.5 (Availability impacts)."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "RHSA-2017:2787",
              "refsource": "REDHAT",
              "url": "https://access.redhat.com/errata/RHSA-2017:2787"
            },
            {
              "name": "GLSA-201702-17",
              "refsource": "GENTOO",
              "url": "https://security.gentoo.org/glsa/201702-17"
            },
            {
              "name": "RHSA-2018:0574",
              "refsource": "REDHAT",
              "url": "https://access.redhat.com/errata/RHSA-2018:0574"
            },
            {
              "name": "GLSA-201702-18",
              "refsource": "GENTOO",
              "url": "https://security.gentoo.org/glsa/201702-18"
            },
            {
              "name": "1037640",
              "refsource": "SECTRACK",
              "url": "http://www.securitytracker.com/id/1037640"
            },
            {
              "name": "RHSA-2018:0279",
              "refsource": "REDHAT",
              "url": "https://access.redhat.com/errata/RHSA-2018:0279"
            },
            {
              "name": "DSA-3767",
              "refsource": "DEBIAN",
              "url": "http://www.debian.org/security/2017/dsa-3767"
            },
            {
              "name": "95571",
              "refsource": "BID",
              "url": "http://www.securityfocus.com/bid/95571"
            },
            {
              "name": "RHSA-2017:2886",
              "refsource": "REDHAT",
              "url": "https://access.redhat.com/errata/RHSA-2017:2886"
            },
            {
              "name": "http://www.oracle.com/technetwork/security-advisory/cpujan2017-2881727.html",
              "refsource": "CONFIRM",
              "url": "http://www.oracle.com/technetwork/security-advisory/cpujan2017-2881727.html"
            },
            {
              "name": "DSA-3770",
              "refsource": "DEBIAN",
              "url": "http://www.debian.org/security/2017/dsa-3770"
            },
            {
              "name": "RHSA-2017:2192",
              "refsource": "REDHAT",
              "url": "https://access.redhat.com/errata/RHSA-2017:2192"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "43595867-4340-4103-b7a2-9a5208d29a85",
    "assignerShortName": "oracle",
    "cveId": "CVE-2017-3238",
    "datePublished": "2017-01-27T22:01:00",
    "dateReserved": "2016-12-06T00:00:00",
    "dateUpdated": "2024-10-09T19:51:59.764Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

CVE-2019-2730 (GCVE-0-2019-2730)

Vulnerability from cvelistv5

Published

2019-07-23 22:31

Modified

2024-10-01 16:45

Severity ?

CWE

Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of MySQL Server accessible data.

Summary

Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Security: Privileges). Supported versions that are affected are 5.6.44 and prior and 5.7.18 and prior. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of MySQL Server accessible data. CVSS 3.0 Base Score 2.7 (Integrity impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:L/A:N).

References

URL

Tags

	http://www.oracle.com/technetwork/security-advisory/cpujul2019-5072835.html	x_refsource_MISC
	https://support.f5.com/csp/article/K51272092	x_refsource_CONFIRM
	https://support.f5.com/csp/article/K51272092?utm_source=f5support&amp%3Butm_medium=RSS	x_refsource_CONFIRM

Impacted products

	Vendor	Product	Version
	Oracle Corporation	MySQL Server	Version: 5.6.44 and prior Version: 5.7.18 and prior

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-04T18:56:45.765Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "http://www.oracle.com/technetwork/security-advisory/cpujul2019-5072835.html"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://support.f5.com/csp/article/K51272092"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://support.f5.com/csp/article/K51272092?utm_source=f5support\u0026amp%3Butm_medium=RSS"
          }
        ],
        "title": "CVE Program Container"
      },
      {
        "metrics": [
          {
            "other": {
              "content": {
                "id": "CVE-2019-2730",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "partial"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2024-10-01T16:18:38.157117Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2024-10-01T16:45:56.295Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "MySQL Server",
          "vendor": "Oracle Corporation",
          "versions": [
            {
              "status": "affected",
              "version": "5.6.44 and prior"
            },
            {
              "status": "affected",
              "version": "5.7.18 and prior"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Security: Privileges). Supported versions that are affected are 5.6.44 and prior and 5.7.18 and prior. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of MySQL Server accessible data. CVSS 3.0 Base Score 2.7 (Integrity impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:L/A:N)."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server.  Successful attacks of this vulnerability can result in  unauthorized update, insert or delete access to some of MySQL Server accessible data.",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2019-10-09T19:08:03",
        "orgId": "43595867-4340-4103-b7a2-9a5208d29a85",
        "shortName": "oracle"
      },
      "references": [
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "http://www.oracle.com/technetwork/security-advisory/cpujul2019-5072835.html"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://support.f5.com/csp/article/K51272092"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://support.f5.com/csp/article/K51272092?utm_source=f5support\u0026amp%3Butm_medium=RSS"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "secalert_us@oracle.com",
          "ID": "CVE-2019-2730",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "MySQL Server",
                      "version": {
                        "version_data": [
                          {
                            "version_affected": "=",
                            "version_value": "5.6.44 and prior"
                          },
                          {
                            "version_affected": "=",
                            "version_value": "5.7.18 and prior"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "Oracle Corporation"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Security: Privileges). Supported versions that are affected are 5.6.44 and prior and 5.7.18 and prior. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of MySQL Server accessible data. CVSS 3.0 Base Score 2.7 (Integrity impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:L/A:N)."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server.  Successful attacks of this vulnerability can result in  unauthorized update, insert or delete access to some of MySQL Server accessible data."
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "http://www.oracle.com/technetwork/security-advisory/cpujul2019-5072835.html",
              "refsource": "MISC",
              "url": "http://www.oracle.com/technetwork/security-advisory/cpujul2019-5072835.html"
            },
            {
              "name": "https://support.f5.com/csp/article/K51272092",
              "refsource": "CONFIRM",
              "url": "https://support.f5.com/csp/article/K51272092"
            },
            {
              "name": "https://support.f5.com/csp/article/K51272092?utm_source=f5support\u0026amp;utm_medium=RSS",
              "refsource": "CONFIRM",
              "url": "https://support.f5.com/csp/article/K51272092?utm_source=f5support\u0026amp;utm_medium=RSS"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "43595867-4340-4103-b7a2-9a5208d29a85",
    "assignerShortName": "oracle",
    "cveId": "CVE-2019-2730",
    "datePublished": "2019-07-23T22:31:42",
    "dateReserved": "2018-12-14T00:00:00",
    "dateUpdated": "2024-10-01T16:45:56.295Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

CVE-2016-8327 (GCVE-0-2016-8327)

Vulnerability from cvelistv5

Published

2017-01-27 22:01

Modified

2024-10-09 19:55

Severity ?

CWE

CVSS:3.0/AV:N/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:H

Summary

Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Replication). Supported versions that are affected are 5.6.34 and earlier and 5.7.16 and earlier. Difficult to exploit vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS v3.0 Base Score 4.4 (Availability impacts).

References

URL

Tags

	https://access.redhat.com/errata/RHSA-2017:2787	vendor-advisory, x_refsource_REDHAT
	https://security.gentoo.org/glsa/201702-17	vendor-advisory, x_refsource_GENTOO
	http://www.securityfocus.com/bid/95557	vdb-entry, x_refsource_BID
	http://www.securitytracker.com/id/1037640	vdb-entry, x_refsource_SECTRACK
	https://access.redhat.com/errata/RHSA-2017:2886	vendor-advisory, x_refsource_REDHAT
	http://www.oracle.com/technetwork/security-advisory/cpujan2017-2881727.html	x_refsource_CONFIRM

Impacted products

	Vendor	Product	Version
	Oracle	MySQL Server	Version: 5.6.34 and earlier Version: 5.7.16 and earlier

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-06T02:20:30.685Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "name": "RHSA-2017:2787",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2017:2787"
          },
          {
            "name": "GLSA-201702-17",
            "tags": [
              "vendor-advisory",
              "x_refsource_GENTOO",
              "x_transferred"
            ],
            "url": "https://security.gentoo.org/glsa/201702-17"
          },
          {
            "name": "95557",
            "tags": [
              "vdb-entry",
              "x_refsource_BID",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/bid/95557"
          },
          {
            "name": "1037640",
            "tags": [
              "vdb-entry",
              "x_refsource_SECTRACK",
              "x_transferred"
            ],
            "url": "http://www.securitytracker.com/id/1037640"
          },
          {
            "name": "RHSA-2017:2886",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2017:2886"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://www.oracle.com/technetwork/security-advisory/cpujan2017-2881727.html"
          }
        ],
        "title": "CVE Program Container"
      },
      {
        "metrics": [
          {
            "other": {
              "content": {
                "id": "CVE-2016-8327",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "partial"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2024-10-09T19:30:49.114773Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2024-10-09T19:55:41.512Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "MySQL Server",
          "vendor": "Oracle",
          "versions": [
            {
              "status": "affected",
              "version": "5.6.34 and earlier"
            },
            {
              "status": "affected",
              "version": "5.7.16 and earlier"
            }
          ]
        }
      ],
      "datePublic": "2017-01-17T00:00:00",
      "descriptions": [
        {
          "lang": "en",
          "value": "Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Replication). Supported versions that are affected are 5.6.34 and earlier and 5.7.16 and earlier. Difficult to exploit vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS v3.0 Base Score 4.4 (Availability impacts)."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "CVSS:3.0/AV:N/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:H",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2017-12-08T10:57:01",
        "orgId": "43595867-4340-4103-b7a2-9a5208d29a85",
        "shortName": "oracle"
      },
      "references": [
        {
          "name": "RHSA-2017:2787",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2017:2787"
        },
        {
          "name": "GLSA-201702-17",
          "tags": [
            "vendor-advisory",
            "x_refsource_GENTOO"
          ],
          "url": "https://security.gentoo.org/glsa/201702-17"
        },
        {
          "name": "95557",
          "tags": [
            "vdb-entry",
            "x_refsource_BID"
          ],
          "url": "http://www.securityfocus.com/bid/95557"
        },
        {
          "name": "1037640",
          "tags": [
            "vdb-entry",
            "x_refsource_SECTRACK"
          ],
          "url": "http://www.securitytracker.com/id/1037640"
        },
        {
          "name": "RHSA-2017:2886",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2017:2886"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://www.oracle.com/technetwork/security-advisory/cpujan2017-2881727.html"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "secalert_us@oracle.com",
          "ID": "CVE-2016-8327",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "MySQL Server",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "5.6.34 and earlier"
                          },
                          {
                            "version_value": "5.7.16 and earlier"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "Oracle"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Replication). Supported versions that are affected are 5.6.34 and earlier and 5.7.16 and earlier. Difficult to exploit vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS v3.0 Base Score 4.4 (Availability impacts)."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "CVSS:3.0/AV:N/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:H"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "RHSA-2017:2787",
              "refsource": "REDHAT",
              "url": "https://access.redhat.com/errata/RHSA-2017:2787"
            },
            {
              "name": "GLSA-201702-17",
              "refsource": "GENTOO",
              "url": "https://security.gentoo.org/glsa/201702-17"
            },
            {
              "name": "95557",
              "refsource": "BID",
              "url": "http://www.securityfocus.com/bid/95557"
            },
            {
              "name": "1037640",
              "refsource": "SECTRACK",
              "url": "http://www.securitytracker.com/id/1037640"
            },
            {
              "name": "RHSA-2017:2886",
              "refsource": "REDHAT",
              "url": "https://access.redhat.com/errata/RHSA-2017:2886"
            },
            {
              "name": "http://www.oracle.com/technetwork/security-advisory/cpujan2017-2881727.html",
              "refsource": "CONFIRM",
              "url": "http://www.oracle.com/technetwork/security-advisory/cpujan2017-2881727.html"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "43595867-4340-4103-b7a2-9a5208d29a85",
    "assignerShortName": "oracle",
    "cveId": "CVE-2016-8327",
    "datePublished": "2017-01-27T22:01:00",
    "dateReserved": "2016-09-26T00:00:00",
    "dateUpdated": "2024-10-09T19:55:41.512Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

CVE-2017-3309 (GCVE-0-2017-3309)

Vulnerability from cvelistv5

Published

2017-04-24 19:00

Modified

2024-10-07 16:21

Severity ?

CWE

Easily "exploitable" vulnerability allows low privileged attacker with network access via multiple protocols to compromise MySQL Server. While the vulnerability is in MySQL Server, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server.

Summary

Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Optimizer). Supported versions that are affected are 5.5.54 and earlier, 5.6.35 and earlier and 5.7.17 and earlier. Easily "exploitable" vulnerability allows low privileged attacker with network access via multiple protocols to compromise MySQL Server. While the vulnerability is in MySQL Server, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.0 Base Score 7.7 (Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H).

References

URL

Tags

	https://access.redhat.com/errata/RHSA-2017:2787	vendor-advisory, x_refsource_REDHAT
	http://www.securitytracker.com/id/1038287	vdb-entry, x_refsource_SECTRACK
	http://www.oracle.com/technetwork/security-advisory/cpuapr2017-3236618.html	x_refsource_CONFIRM
	https://access.redhat.com/errata/RHSA-2018:0574	vendor-advisory, x_refsource_REDHAT
	http://www.debian.org/security/2017/dsa-3944	vendor-advisory, x_refsource_DEBIAN
	http://www.securityfocus.com/bid/97742	vdb-entry, x_refsource_BID
	https://access.redhat.com/errata/RHSA-2018:0279	vendor-advisory, x_refsource_REDHAT
	http://www.debian.org/security/2017/dsa-3834	vendor-advisory, x_refsource_DEBIAN
	https://access.redhat.com/errata/RHSA-2017:2886	vendor-advisory, x_refsource_REDHAT
	https://access.redhat.com/errata/RHSA-2017:2192	vendor-advisory, x_refsource_REDHAT

Impacted products

	Vendor	Product	Version
	Oracle Corporation	MySQL Server	Version: 5.5.54 and earlier Version: 5.6.35 and earlier Version: 5.7.17 and earlier

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-05T14:23:34.182Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "name": "RHSA-2017:2787",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2017:2787"
          },
          {
            "name": "1038287",
            "tags": [
              "vdb-entry",
              "x_refsource_SECTRACK",
              "x_transferred"
            ],
            "url": "http://www.securitytracker.com/id/1038287"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://www.oracle.com/technetwork/security-advisory/cpuapr2017-3236618.html"
          },
          {
            "name": "RHSA-2018:0574",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2018:0574"
          },
          {
            "name": "DSA-3944",
            "tags": [
              "vendor-advisory",
              "x_refsource_DEBIAN",
              "x_transferred"
            ],
            "url": "http://www.debian.org/security/2017/dsa-3944"
          },
          {
            "name": "97742",
            "tags": [
              "vdb-entry",
              "x_refsource_BID",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/bid/97742"
          },
          {
            "name": "RHSA-2018:0279",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2018:0279"
          },
          {
            "name": "DSA-3834",
            "tags": [
              "vendor-advisory",
              "x_refsource_DEBIAN",
              "x_transferred"
            ],
            "url": "http://www.debian.org/security/2017/dsa-3834"
          },
          {
            "name": "RHSA-2017:2886",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2017:2886"
          },
          {
            "name": "RHSA-2017:2192",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2017:2192"
          }
        ],
        "title": "CVE Program Container"
      },
      {
        "metrics": [
          {
            "other": {
              "content": {
                "id": "CVE-2017-3309",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "partial"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2024-10-07T15:46:17.228879Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2024-10-07T16:21:43.974Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "MySQL Server",
          "vendor": "Oracle Corporation",
          "versions": [
            {
              "status": "affected",
              "version": "5.5.54 and earlier"
            },
            {
              "status": "affected",
              "version": "5.6.35 and earlier"
            },
            {
              "status": "affected",
              "version": "5.7.17 and earlier"
            }
          ]
        }
      ],
      "datePublic": "2017-04-18T00:00:00",
      "descriptions": [
        {
          "lang": "en",
          "value": "Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Optimizer). Supported versions that are affected are 5.5.54 and earlier, 5.6.35 and earlier and 5.7.17 and earlier. Easily \"exploitable\" vulnerability allows low privileged attacker with network access via multiple protocols to compromise MySQL Server. While the vulnerability is in MySQL Server, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.0 Base Score 7.7 (Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H)."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "Easily \"exploitable\" vulnerability allows low privileged attacker with network access via multiple protocols to compromise MySQL Server.  While the vulnerability is in MySQL Server, attacks may significantly impact additional products.  Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server.",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2018-03-22T09:57:01",
        "orgId": "43595867-4340-4103-b7a2-9a5208d29a85",
        "shortName": "oracle"
      },
      "references": [
        {
          "name": "RHSA-2017:2787",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2017:2787"
        },
        {
          "name": "1038287",
          "tags": [
            "vdb-entry",
            "x_refsource_SECTRACK"
          ],
          "url": "http://www.securitytracker.com/id/1038287"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://www.oracle.com/technetwork/security-advisory/cpuapr2017-3236618.html"
        },
        {
          "name": "RHSA-2018:0574",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2018:0574"
        },
        {
          "name": "DSA-3944",
          "tags": [
            "vendor-advisory",
            "x_refsource_DEBIAN"
          ],
          "url": "http://www.debian.org/security/2017/dsa-3944"
        },
        {
          "name": "97742",
          "tags": [
            "vdb-entry",
            "x_refsource_BID"
          ],
          "url": "http://www.securityfocus.com/bid/97742"
        },
        {
          "name": "RHSA-2018:0279",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2018:0279"
        },
        {
          "name": "DSA-3834",
          "tags": [
            "vendor-advisory",
            "x_refsource_DEBIAN"
          ],
          "url": "http://www.debian.org/security/2017/dsa-3834"
        },
        {
          "name": "RHSA-2017:2886",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2017:2886"
        },
        {
          "name": "RHSA-2017:2192",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2017:2192"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "secalert_us@oracle.com",
          "ID": "CVE-2017-3309",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "MySQL Server",
                      "version": {
                        "version_data": [
                          {
                            "version_affected": "=",
                            "version_value": "5.5.54 and earlier"
                          },
                          {
                            "version_affected": "=",
                            "version_value": "5.6.35 and earlier"
                          },
                          {
                            "version_affected": "=",
                            "version_value": "5.7.17 and earlier"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "Oracle Corporation"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Optimizer). Supported versions that are affected are 5.5.54 and earlier, 5.6.35 and earlier and 5.7.17 and earlier. Easily \"exploitable\" vulnerability allows low privileged attacker with network access via multiple protocols to compromise MySQL Server. While the vulnerability is in MySQL Server, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.0 Base Score 7.7 (Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H)."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "Easily \"exploitable\" vulnerability allows low privileged attacker with network access via multiple protocols to compromise MySQL Server.  While the vulnerability is in MySQL Server, attacks may significantly impact additional products.  Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server."
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "RHSA-2017:2787",
              "refsource": "REDHAT",
              "url": "https://access.redhat.com/errata/RHSA-2017:2787"
            },
            {
              "name": "1038287",
              "refsource": "SECTRACK",
              "url": "http://www.securitytracker.com/id/1038287"
            },
            {
              "name": "http://www.oracle.com/technetwork/security-advisory/cpuapr2017-3236618.html",
              "refsource": "CONFIRM",
              "url": "http://www.oracle.com/technetwork/security-advisory/cpuapr2017-3236618.html"
            },
            {
              "name": "RHSA-2018:0574",
              "refsource": "REDHAT",
              "url": "https://access.redhat.com/errata/RHSA-2018:0574"
            },
            {
              "name": "DSA-3944",
              "refsource": "DEBIAN",
              "url": "http://www.debian.org/security/2017/dsa-3944"
            },
            {
              "name": "97742",
              "refsource": "BID",
              "url": "http://www.securityfocus.com/bid/97742"
            },
            {
              "name": "RHSA-2018:0279",
              "refsource": "REDHAT",
              "url": "https://access.redhat.com/errata/RHSA-2018:0279"
            },
            {
              "name": "DSA-3834",
              "refsource": "DEBIAN",
              "url": "http://www.debian.org/security/2017/dsa-3834"
            },
            {
              "name": "RHSA-2017:2886",
              "refsource": "REDHAT",
              "url": "https://access.redhat.com/errata/RHSA-2017:2886"
            },
            {
              "name": "RHSA-2017:2192",
              "refsource": "REDHAT",
              "url": "https://access.redhat.com/errata/RHSA-2017:2192"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "43595867-4340-4103-b7a2-9a5208d29a85",
    "assignerShortName": "oracle",
    "cveId": "CVE-2017-3309",
    "datePublished": "2017-04-24T19:00:00",
    "dateReserved": "2016-12-06T00:00:00",
    "dateUpdated": "2024-10-07T16:21:43.974Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

CVE-2017-3643 (GCVE-0-2017-3643)

Vulnerability from cvelistv5

Published

2017-08-08 15:00

Modified

2024-10-04 17:02

Severity ?

CWE

Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server.

Summary

References

URL

Tags

	http://www.securityfocus.com/bid/99772	vdb-entry, x_refsource_BID
	http://www.securitytracker.com/id/1038928	vdb-entry, x_refsource_SECTRACK
	https://access.redhat.com/errata/RHSA-2017:2886	vendor-advisory, x_refsource_REDHAT
	http://www.oracle.com/technetwork/security-advisory/cpujul2017-3236622.html	x_refsource_CONFIRM

Impacted products

	Vendor	Product	Version
	Oracle Corporation	MySQL Server	Version: 5.7.18 and earlier

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-05T14:30:58.885Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "name": "99772",
            "tags": [
              "vdb-entry",
              "x_refsource_BID",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/bid/99772"
          },
          {
            "name": "1038928",
            "tags": [
              "vdb-entry",
              "x_refsource_SECTRACK",
              "x_transferred"
            ],
            "url": "http://www.securitytracker.com/id/1038928"
          },
          {
            "name": "RHSA-2017:2886",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2017:2886"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://www.oracle.com/technetwork/security-advisory/cpujul2017-3236622.html"
          }
        ],
        "title": "CVE Program Container"
      },
      {
        "metrics": [
          {
            "other": {
              "content": {
                "id": "CVE-2017-3643",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "partial"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2024-10-04T15:48:09.718565Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2024-10-04T17:02:11.198Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "MySQL Server",
          "vendor": "Oracle Corporation",
          "versions": [
            {
              "status": "affected",
              "version": "5.7.18 and earlier"
            }
          ]
        }
      ],
      "datePublic": "2017-07-18T00:00:00",
      "descriptions": [
        {
          "lang": "en",
          "value": "Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: DML). Supported versions that are affected are 5.7.18 and earlier. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.0 Base Score 4.9 (Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H)."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server.  Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server.",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2017-12-07T10:57:01",
        "orgId": "43595867-4340-4103-b7a2-9a5208d29a85",
        "shortName": "oracle"
      },
      "references": [
        {
          "name": "99772",
          "tags": [
            "vdb-entry",
            "x_refsource_BID"
          ],
          "url": "http://www.securityfocus.com/bid/99772"
        },
        {
          "name": "1038928",
          "tags": [
            "vdb-entry",
            "x_refsource_SECTRACK"
          ],
          "url": "http://www.securitytracker.com/id/1038928"
        },
        {
          "name": "RHSA-2017:2886",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2017:2886"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://www.oracle.com/technetwork/security-advisory/cpujul2017-3236622.html"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "secalert_us@oracle.com",
          "ID": "CVE-2017-3643",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "MySQL Server",
                      "version": {
                        "version_data": [
                          {
                            "version_affected": "=",
                            "version_value": "5.7.18 and earlier"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "Oracle Corporation"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: DML). Supported versions that are affected are 5.7.18 and earlier. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.0 Base Score 4.9 (Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H)."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server.  Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server."
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "99772",
              "refsource": "BID",
              "url": "http://www.securityfocus.com/bid/99772"
            },
            {
              "name": "1038928",
              "refsource": "SECTRACK",
              "url": "http://www.securitytracker.com/id/1038928"
            },
            {
              "name": "RHSA-2017:2886",
              "refsource": "REDHAT",
              "url": "https://access.redhat.com/errata/RHSA-2017:2886"
            },
            {
              "name": "http://www.oracle.com/technetwork/security-advisory/cpujul2017-3236622.html",
              "refsource": "CONFIRM",
              "url": "http://www.oracle.com/technetwork/security-advisory/cpujul2017-3236622.html"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "43595867-4340-4103-b7a2-9a5208d29a85",
    "assignerShortName": "oracle",
    "cveId": "CVE-2017-3643",
    "datePublished": "2017-08-08T15:00:00",
    "dateReserved": "2016-12-06T00:00:00",
    "dateUpdated": "2024-10-04T17:02:11.198Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

CVE-2017-3642 (GCVE-0-2017-3642)

Vulnerability from cvelistv5

Published

2017-08-08 15:00

Modified

2024-10-04 17:02

Severity ?

CWE

Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server.

Summary

References

URL

Tags

	http://www.securitytracker.com/id/1038928	vdb-entry, x_refsource_SECTRACK
	http://www.securityfocus.com/bid/99779	vdb-entry, x_refsource_BID
	https://access.redhat.com/errata/RHSA-2017:2886	vendor-advisory, x_refsource_REDHAT
	http://www.oracle.com/technetwork/security-advisory/cpujul2017-3236622.html	x_refsource_CONFIRM

Impacted products

	Vendor	Product	Version
	Oracle Corporation	MySQL Server	Version: 5.7.18 and earlier

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-05T14:30:58.974Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "name": "1038928",
            "tags": [
              "vdb-entry",
              "x_refsource_SECTRACK",
              "x_transferred"
            ],
            "url": "http://www.securitytracker.com/id/1038928"
          },
          {
            "name": "99779",
            "tags": [
              "vdb-entry",
              "x_refsource_BID",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/bid/99779"
          },
          {
            "name": "RHSA-2017:2886",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2017:2886"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://www.oracle.com/technetwork/security-advisory/cpujul2017-3236622.html"
          }
        ],
        "title": "CVE Program Container"
      },
      {
        "metrics": [
          {
            "other": {
              "content": {
                "id": "CVE-2017-3642",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "partial"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2024-10-04T15:48:13.915768Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2024-10-04T17:02:19.186Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "MySQL Server",
          "vendor": "Oracle Corporation",
          "versions": [
            {
              "status": "affected",
              "version": "5.7.18 and earlier"
            }
          ]
        }
      ],
      "datePublic": "2017-07-18T00:00:00",
      "descriptions": [
        {
          "lang": "en",
          "value": "Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Optimizer). Supported versions that are affected are 5.7.18 and earlier. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.0 Base Score 4.9 (Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H)."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server.  Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server.",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2017-12-07T10:57:01",
        "orgId": "43595867-4340-4103-b7a2-9a5208d29a85",
        "shortName": "oracle"
      },
      "references": [
        {
          "name": "1038928",
          "tags": [
            "vdb-entry",
            "x_refsource_SECTRACK"
          ],
          "url": "http://www.securitytracker.com/id/1038928"
        },
        {
          "name": "99779",
          "tags": [
            "vdb-entry",
            "x_refsource_BID"
          ],
          "url": "http://www.securityfocus.com/bid/99779"
        },
        {
          "name": "RHSA-2017:2886",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2017:2886"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://www.oracle.com/technetwork/security-advisory/cpujul2017-3236622.html"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "secalert_us@oracle.com",
          "ID": "CVE-2017-3642",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "MySQL Server",
                      "version": {
                        "version_data": [
                          {
                            "version_affected": "=",
                            "version_value": "5.7.18 and earlier"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "Oracle Corporation"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Optimizer). Supported versions that are affected are 5.7.18 and earlier. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.0 Base Score 4.9 (Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H)."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server.  Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server."
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "1038928",
              "refsource": "SECTRACK",
              "url": "http://www.securitytracker.com/id/1038928"
            },
            {
              "name": "99779",
              "refsource": "BID",
              "url": "http://www.securityfocus.com/bid/99779"
            },
            {
              "name": "RHSA-2017:2886",
              "refsource": "REDHAT",
              "url": "https://access.redhat.com/errata/RHSA-2017:2886"
            },
            {
              "name": "http://www.oracle.com/technetwork/security-advisory/cpujul2017-3236622.html",
              "refsource": "CONFIRM",
              "url": "http://www.oracle.com/technetwork/security-advisory/cpujul2017-3236622.html"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "43595867-4340-4103-b7a2-9a5208d29a85",
    "assignerShortName": "oracle",
    "cveId": "CVE-2017-3642",
    "datePublished": "2017-08-08T15:00:00",
    "dateReserved": "2016-12-06T00:00:00",
    "dateUpdated": "2024-10-04T17:02:19.186Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

CVE-2017-3318 (GCVE-0-2017-3318)

Vulnerability from cvelistv5

Published

2017-01-27 22:01

Modified

2024-10-08 20:29

Severity ?

CWE

CVSS:3.0/AV:L/AC:H/PR:H/UI:R/S:U/C:H/I:N/A:N

Summary

Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Error Handling). Supported versions that are affected are 5.5.53 and earlier, 5.6.34 and earlier and 5.7.16 and earlier. Difficult to exploit vulnerability allows high privileged attacker with logon to the infrastructure where MySQL Server executes to compromise MySQL Server. Successful attacks require human interaction from a person other than the attacker. Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all MySQL Server accessible data. CVSS v3.0 Base Score 4.0 (Confidentiality impacts).

References

URL

Tags

	https://access.redhat.com/errata/RHSA-2017:2787	vendor-advisory, x_refsource_REDHAT
	https://security.gentoo.org/glsa/201702-17	vendor-advisory, x_refsource_GENTOO
	https://access.redhat.com/errata/RHSA-2018:0574	vendor-advisory, x_refsource_REDHAT
	https://security.gentoo.org/glsa/201702-18	vendor-advisory, x_refsource_GENTOO
	http://www.securitytracker.com/id/1037640	vdb-entry, x_refsource_SECTRACK
	http://www.securityfocus.com/bid/95588	vdb-entry, x_refsource_BID
	https://access.redhat.com/errata/RHSA-2018:0279	vendor-advisory, x_refsource_REDHAT
	http://www.debian.org/security/2017/dsa-3767	vendor-advisory, x_refsource_DEBIAN
	https://access.redhat.com/errata/RHSA-2017:2886	vendor-advisory, x_refsource_REDHAT
	http://www.oracle.com/technetwork/security-advisory/cpujan2017-2881727.html	x_refsource_CONFIRM
	http://www.debian.org/security/2017/dsa-3770	vendor-advisory, x_refsource_DEBIAN
	https://access.redhat.com/errata/RHSA-2017:2192	vendor-advisory, x_refsource_REDHAT

Impacted products

	Vendor	Product	Version
	Oracle	MySQL Server	Version: 5.5.53 and earlier Version: 5.6.34 and earlier Version: 5.7.16 and earlier

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-05T14:23:33.893Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "name": "RHSA-2017:2787",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2017:2787"
          },
          {
            "name": "GLSA-201702-17",
            "tags": [
              "vendor-advisory",
              "x_refsource_GENTOO",
              "x_transferred"
            ],
            "url": "https://security.gentoo.org/glsa/201702-17"
          },
          {
            "name": "RHSA-2018:0574",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2018:0574"
          },
          {
            "name": "GLSA-201702-18",
            "tags": [
              "vendor-advisory",
              "x_refsource_GENTOO",
              "x_transferred"
            ],
            "url": "https://security.gentoo.org/glsa/201702-18"
          },
          {
            "name": "1037640",
            "tags": [
              "vdb-entry",
              "x_refsource_SECTRACK",
              "x_transferred"
            ],
            "url": "http://www.securitytracker.com/id/1037640"
          },
          {
            "name": "95588",
            "tags": [
              "vdb-entry",
              "x_refsource_BID",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/bid/95588"
          },
          {
            "name": "RHSA-2018:0279",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2018:0279"
          },
          {
            "name": "DSA-3767",
            "tags": [
              "vendor-advisory",
              "x_refsource_DEBIAN",
              "x_transferred"
            ],
            "url": "http://www.debian.org/security/2017/dsa-3767"
          },
          {
            "name": "RHSA-2017:2886",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2017:2886"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://www.oracle.com/technetwork/security-advisory/cpujan2017-2881727.html"
          },
          {
            "name": "DSA-3770",
            "tags": [
              "vendor-advisory",
              "x_refsource_DEBIAN",
              "x_transferred"
            ],
            "url": "http://www.debian.org/security/2017/dsa-3770"
          },
          {
            "name": "RHSA-2017:2192",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2017:2192"
          }
        ],
        "title": "CVE Program Container"
      },
      {
        "metrics": [
          {
            "other": {
              "content": {
                "id": "CVE-2017-3318",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "partial"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2024-10-08T20:09:30.630517Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2024-10-08T20:29:35.165Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "MySQL Server",
          "vendor": "Oracle",
          "versions": [
            {
              "status": "affected",
              "version": "5.5.53 and earlier"
            },
            {
              "status": "affected",
              "version": "5.6.34 and earlier"
            },
            {
              "status": "affected",
              "version": "5.7.16 and earlier"
            }
          ]
        }
      ],
      "datePublic": "2017-01-17T00:00:00",
      "descriptions": [
        {
          "lang": "en",
          "value": "Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Error Handling). Supported versions that are affected are 5.5.53 and earlier, 5.6.34 and earlier and 5.7.16 and earlier. Difficult to exploit vulnerability allows high privileged attacker with logon to the infrastructure where MySQL Server executes to compromise MySQL Server. Successful attacks require human interaction from a person other than the attacker. Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all MySQL Server accessible data. CVSS v3.0 Base Score 4.0 (Confidentiality impacts)."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "CVSS:3.0/AV:L/AC:H/PR:H/UI:R/S:U/C:H/I:N/A:N",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2018-03-22T09:57:01",
        "orgId": "43595867-4340-4103-b7a2-9a5208d29a85",
        "shortName": "oracle"
      },
      "references": [
        {
          "name": "RHSA-2017:2787",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2017:2787"
        },
        {
          "name": "GLSA-201702-17",
          "tags": [
            "vendor-advisory",
            "x_refsource_GENTOO"
          ],
          "url": "https://security.gentoo.org/glsa/201702-17"
        },
        {
          "name": "RHSA-2018:0574",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2018:0574"
        },
        {
          "name": "GLSA-201702-18",
          "tags": [
            "vendor-advisory",
            "x_refsource_GENTOO"
          ],
          "url": "https://security.gentoo.org/glsa/201702-18"
        },
        {
          "name": "1037640",
          "tags": [
            "vdb-entry",
            "x_refsource_SECTRACK"
          ],
          "url": "http://www.securitytracker.com/id/1037640"
        },
        {
          "name": "95588",
          "tags": [
            "vdb-entry",
            "x_refsource_BID"
          ],
          "url": "http://www.securityfocus.com/bid/95588"
        },
        {
          "name": "RHSA-2018:0279",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2018:0279"
        },
        {
          "name": "DSA-3767",
          "tags": [
            "vendor-advisory",
            "x_refsource_DEBIAN"
          ],
          "url": "http://www.debian.org/security/2017/dsa-3767"
        },
        {
          "name": "RHSA-2017:2886",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2017:2886"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://www.oracle.com/technetwork/security-advisory/cpujan2017-2881727.html"
        },
        {
          "name": "DSA-3770",
          "tags": [
            "vendor-advisory",
            "x_refsource_DEBIAN"
          ],
          "url": "http://www.debian.org/security/2017/dsa-3770"
        },
        {
          "name": "RHSA-2017:2192",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2017:2192"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "secalert_us@oracle.com",
          "ID": "CVE-2017-3318",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "MySQL Server",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "5.5.53 and earlier"
                          },
                          {
                            "version_value": "5.6.34 and earlier"
                          },
                          {
                            "version_value": "5.7.16 and earlier"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "Oracle"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Error Handling). Supported versions that are affected are 5.5.53 and earlier, 5.6.34 and earlier and 5.7.16 and earlier. Difficult to exploit vulnerability allows high privileged attacker with logon to the infrastructure where MySQL Server executes to compromise MySQL Server. Successful attacks require human interaction from a person other than the attacker. Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all MySQL Server accessible data. CVSS v3.0 Base Score 4.0 (Confidentiality impacts)."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "CVSS:3.0/AV:L/AC:H/PR:H/UI:R/S:U/C:H/I:N/A:N"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "RHSA-2017:2787",
              "refsource": "REDHAT",
              "url": "https://access.redhat.com/errata/RHSA-2017:2787"
            },
            {
              "name": "GLSA-201702-17",
              "refsource": "GENTOO",
              "url": "https://security.gentoo.org/glsa/201702-17"
            },
            {
              "name": "RHSA-2018:0574",
              "refsource": "REDHAT",
              "url": "https://access.redhat.com/errata/RHSA-2018:0574"
            },
            {
              "name": "GLSA-201702-18",
              "refsource": "GENTOO",
              "url": "https://security.gentoo.org/glsa/201702-18"
            },
            {
              "name": "1037640",
              "refsource": "SECTRACK",
              "url": "http://www.securitytracker.com/id/1037640"
            },
            {
              "name": "95588",
              "refsource": "BID",
              "url": "http://www.securityfocus.com/bid/95588"
            },
            {
              "name": "RHSA-2018:0279",
              "refsource": "REDHAT",
              "url": "https://access.redhat.com/errata/RHSA-2018:0279"
            },
            {
              "name": "DSA-3767",
              "refsource": "DEBIAN",
              "url": "http://www.debian.org/security/2017/dsa-3767"
            },
            {
              "name": "RHSA-2017:2886",
              "refsource": "REDHAT",
              "url": "https://access.redhat.com/errata/RHSA-2017:2886"
            },
            {
              "name": "http://www.oracle.com/technetwork/security-advisory/cpujan2017-2881727.html",
              "refsource": "CONFIRM",
              "url": "http://www.oracle.com/technetwork/security-advisory/cpujan2017-2881727.html"
            },
            {
              "name": "DSA-3770",
              "refsource": "DEBIAN",
              "url": "http://www.debian.org/security/2017/dsa-3770"
            },
            {
              "name": "RHSA-2017:2192",
              "refsource": "REDHAT",
              "url": "https://access.redhat.com/errata/RHSA-2017:2192"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "43595867-4340-4103-b7a2-9a5208d29a85",
    "assignerShortName": "oracle",
    "cveId": "CVE-2017-3318",
    "datePublished": "2017-01-27T22:01:00",
    "dateReserved": "2016-12-06T00:00:00",
    "dateUpdated": "2024-10-08T20:29:35.165Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

CVE-2017-3652 (GCVE-0-2017-3652)

Vulnerability from cvelistv5

Published

2017-08-08 15:00

Modified

2024-10-04 17:01

Severity ?

CWE

Difficult to exploit vulnerability allows low privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of MySQL Server accessible data as well as unauthorized read access to a subset of MySQL Server accessible data.

Summary

Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: DDL). Supported versions that are affected are 5.5.56 and earlier, 5.6.36 and earlier and 5.7.18 and earlier. Difficult to exploit vulnerability allows low privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of MySQL Server accessible data as well as unauthorized read access to a subset of MySQL Server accessible data. CVSS 3.0 Base Score 4.2 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:H/PR:L/UI:N/S:U/C:L/I:L/A:N).

References

URL

Tags

	https://access.redhat.com/errata/RHSA-2017:2787	vendor-advisory, x_refsource_REDHAT
	http://www.securityfocus.com/bid/99805	vdb-entry, x_refsource_BID
	http://www.securitytracker.com/id/1038928	vdb-entry, x_refsource_SECTRACK
	http://www.debian.org/security/2017/dsa-3922	vendor-advisory, x_refsource_DEBIAN
	https://access.redhat.com/errata/RHSA-2017:2886	vendor-advisory, x_refsource_REDHAT
	http://www.oracle.com/technetwork/security-advisory/cpujul2017-3236622.html	x_refsource_CONFIRM

Impacted products

	Vendor	Product	Version
	Oracle Corporation	MySQL Server	Version: 5.5.56 and earlier Version: 5.6.36 and earlier Version: 5.7.18 and earlier

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-05T14:39:41.146Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "name": "RHSA-2017:2787",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2017:2787"
          },
          {
            "name": "99805",
            "tags": [
              "vdb-entry",
              "x_refsource_BID",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/bid/99805"
          },
          {
            "name": "1038928",
            "tags": [
              "vdb-entry",
              "x_refsource_SECTRACK",
              "x_transferred"
            ],
            "url": "http://www.securitytracker.com/id/1038928"
          },
          {
            "name": "DSA-3922",
            "tags": [
              "vendor-advisory",
              "x_refsource_DEBIAN",
              "x_transferred"
            ],
            "url": "http://www.debian.org/security/2017/dsa-3922"
          },
          {
            "name": "RHSA-2017:2886",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2017:2886"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://www.oracle.com/technetwork/security-advisory/cpujul2017-3236622.html"
          }
        ],
        "title": "CVE Program Container"
      },
      {
        "metrics": [
          {
            "other": {
              "content": {
                "id": "CVE-2017-3652",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "partial"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2024-10-04T15:47:43.403835Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2024-10-04T17:01:11.742Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "MySQL Server",
          "vendor": "Oracle Corporation",
          "versions": [
            {
              "status": "affected",
              "version": "5.5.56 and earlier"
            },
            {
              "status": "affected",
              "version": "5.6.36 and earlier"
            },
            {
              "status": "affected",
              "version": "5.7.18 and earlier"
            }
          ]
        }
      ],
      "datePublic": "2017-07-18T00:00:00",
      "descriptions": [
        {
          "lang": "en",
          "value": "Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: DDL). Supported versions that are affected are 5.5.56 and earlier, 5.6.36 and earlier and 5.7.18 and earlier. Difficult to exploit vulnerability allows low privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of MySQL Server accessible data as well as unauthorized read access to a subset of MySQL Server accessible data. CVSS 3.0 Base Score 4.2 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:H/PR:L/UI:N/S:U/C:L/I:L/A:N)."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "Difficult to exploit vulnerability allows low privileged attacker with network access via multiple protocols to compromise MySQL Server.  Successful attacks of this vulnerability can result in  unauthorized update, insert or delete access to some of MySQL Server accessible data as well as  unauthorized read access to a subset of MySQL Server accessible data.",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2017-12-08T10:57:01",
        "orgId": "43595867-4340-4103-b7a2-9a5208d29a85",
        "shortName": "oracle"
      },
      "references": [
        {
          "name": "RHSA-2017:2787",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2017:2787"
        },
        {
          "name": "99805",
          "tags": [
            "vdb-entry",
            "x_refsource_BID"
          ],
          "url": "http://www.securityfocus.com/bid/99805"
        },
        {
          "name": "1038928",
          "tags": [
            "vdb-entry",
            "x_refsource_SECTRACK"
          ],
          "url": "http://www.securitytracker.com/id/1038928"
        },
        {
          "name": "DSA-3922",
          "tags": [
            "vendor-advisory",
            "x_refsource_DEBIAN"
          ],
          "url": "http://www.debian.org/security/2017/dsa-3922"
        },
        {
          "name": "RHSA-2017:2886",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2017:2886"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://www.oracle.com/technetwork/security-advisory/cpujul2017-3236622.html"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "secalert_us@oracle.com",
          "ID": "CVE-2017-3652",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "MySQL Server",
                      "version": {
                        "version_data": [
                          {
                            "version_affected": "=",
                            "version_value": "5.5.56 and earlier"
                          },
                          {
                            "version_affected": "=",
                            "version_value": "5.6.36 and earlier"
                          },
                          {
                            "version_affected": "=",
                            "version_value": "5.7.18 and earlier"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "Oracle Corporation"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: DDL). Supported versions that are affected are 5.5.56 and earlier, 5.6.36 and earlier and 5.7.18 and earlier. Difficult to exploit vulnerability allows low privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of MySQL Server accessible data as well as unauthorized read access to a subset of MySQL Server accessible data. CVSS 3.0 Base Score 4.2 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:H/PR:L/UI:N/S:U/C:L/I:L/A:N)."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "Difficult to exploit vulnerability allows low privileged attacker with network access via multiple protocols to compromise MySQL Server.  Successful attacks of this vulnerability can result in  unauthorized update, insert or delete access to some of MySQL Server accessible data as well as  unauthorized read access to a subset of MySQL Server accessible data."
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "RHSA-2017:2787",
              "refsource": "REDHAT",
              "url": "https://access.redhat.com/errata/RHSA-2017:2787"
            },
            {
              "name": "99805",
              "refsource": "BID",
              "url": "http://www.securityfocus.com/bid/99805"
            },
            {
              "name": "1038928",
              "refsource": "SECTRACK",
              "url": "http://www.securitytracker.com/id/1038928"
            },
            {
              "name": "DSA-3922",
              "refsource": "DEBIAN",
              "url": "http://www.debian.org/security/2017/dsa-3922"
            },
            {
              "name": "RHSA-2017:2886",
              "refsource": "REDHAT",
              "url": "https://access.redhat.com/errata/RHSA-2017:2886"
            },
            {
              "name": "http://www.oracle.com/technetwork/security-advisory/cpujul2017-3236622.html",
              "refsource": "CONFIRM",
              "url": "http://www.oracle.com/technetwork/security-advisory/cpujul2017-3236622.html"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "43595867-4340-4103-b7a2-9a5208d29a85",
    "assignerShortName": "oracle",
    "cveId": "CVE-2017-3652",
    "datePublished": "2017-08-08T15:00:00",
    "dateReserved": "2016-12-06T00:00:00",
    "dateUpdated": "2024-10-04T17:01:11.742Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

CVE-2017-3461 (GCVE-0-2017-3461)

Vulnerability from cvelistv5

Published

2017-04-24 19:00

Modified

2024-10-07 16:19

Severity ?

CWE

Easily "exploitable" vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server.

Summary

References

URL

Tags

	https://access.redhat.com/errata/RHSA-2017:2787	vendor-advisory, x_refsource_REDHAT
	http://www.securitytracker.com/id/1038287	vdb-entry, x_refsource_SECTRACK
	http://www.oracle.com/technetwork/security-advisory/cpuapr2017-3236618.html	x_refsource_CONFIRM
	http://www.debian.org/security/2017/dsa-3834	vendor-advisory, x_refsource_DEBIAN
	https://access.redhat.com/errata/RHSA-2017:2886	vendor-advisory, x_refsource_REDHAT
	http://www.securityfocus.com/bid/97812	vdb-entry, x_refsource_BID

Impacted products

	Vendor	Product	Version
	Oracle Corporation	MySQL Server	Version: 5.5.54 and earlier Version: 5.6.35 and earlier Version: 5.7.17 and earlier

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-05T14:30:56.882Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "name": "RHSA-2017:2787",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2017:2787"
          },
          {
            "name": "1038287",
            "tags": [
              "vdb-entry",
              "x_refsource_SECTRACK",
              "x_transferred"
            ],
            "url": "http://www.securitytracker.com/id/1038287"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://www.oracle.com/technetwork/security-advisory/cpuapr2017-3236618.html"
          },
          {
            "name": "DSA-3834",
            "tags": [
              "vendor-advisory",
              "x_refsource_DEBIAN",
              "x_transferred"
            ],
            "url": "http://www.debian.org/security/2017/dsa-3834"
          },
          {
            "name": "RHSA-2017:2886",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2017:2886"
          },
          {
            "name": "97812",
            "tags": [
              "vdb-entry",
              "x_refsource_BID",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/bid/97812"
          }
        ],
        "title": "CVE Program Container"
      },
      {
        "metrics": [
          {
            "other": {
              "content": {
                "id": "CVE-2017-3461",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "partial"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2024-10-07T15:45:58.910751Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2024-10-07T16:19:23.117Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "MySQL Server",
          "vendor": "Oracle Corporation",
          "versions": [
            {
              "status": "affected",
              "version": "5.5.54 and earlier"
            },
            {
              "status": "affected",
              "version": "5.6.35 and earlier"
            },
            {
              "status": "affected",
              "version": "5.7.17 and earlier"
            }
          ]
        }
      ],
      "datePublic": "2017-04-18T00:00:00",
      "descriptions": [
        {
          "lang": "en",
          "value": "Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Security: Privileges). Supported versions that are affected are 5.5.54 and earlier, 5.6.35 and earlier and 5.7.17 and earlier. Easily \"exploitable\" vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.0 Base Score 4.9 (Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H)."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "Easily \"exploitable\" vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server.  Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server.",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2017-12-08T10:57:01",
        "orgId": "43595867-4340-4103-b7a2-9a5208d29a85",
        "shortName": "oracle"
      },
      "references": [
        {
          "name": "RHSA-2017:2787",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2017:2787"
        },
        {
          "name": "1038287",
          "tags": [
            "vdb-entry",
            "x_refsource_SECTRACK"
          ],
          "url": "http://www.securitytracker.com/id/1038287"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://www.oracle.com/technetwork/security-advisory/cpuapr2017-3236618.html"
        },
        {
          "name": "DSA-3834",
          "tags": [
            "vendor-advisory",
            "x_refsource_DEBIAN"
          ],
          "url": "http://www.debian.org/security/2017/dsa-3834"
        },
        {
          "name": "RHSA-2017:2886",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2017:2886"
        },
        {
          "name": "97812",
          "tags": [
            "vdb-entry",
            "x_refsource_BID"
          ],
          "url": "http://www.securityfocus.com/bid/97812"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "secalert_us@oracle.com",
          "ID": "CVE-2017-3461",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "MySQL Server",
                      "version": {
                        "version_data": [
                          {
                            "version_affected": "=",
                            "version_value": "5.5.54 and earlier"
                          },
                          {
                            "version_affected": "=",
                            "version_value": "5.6.35 and earlier"
                          },
                          {
                            "version_affected": "=",
                            "version_value": "5.7.17 and earlier"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "Oracle Corporation"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Security: Privileges). Supported versions that are affected are 5.5.54 and earlier, 5.6.35 and earlier and 5.7.17 and earlier. Easily \"exploitable\" vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.0 Base Score 4.9 (Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H)."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "Easily \"exploitable\" vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server.  Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server."
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "RHSA-2017:2787",
              "refsource": "REDHAT",
              "url": "https://access.redhat.com/errata/RHSA-2017:2787"
            },
            {
              "name": "1038287",
              "refsource": "SECTRACK",
              "url": "http://www.securitytracker.com/id/1038287"
            },
            {
              "name": "http://www.oracle.com/technetwork/security-advisory/cpuapr2017-3236618.html",
              "refsource": "CONFIRM",
              "url": "http://www.oracle.com/technetwork/security-advisory/cpuapr2017-3236618.html"
            },
            {
              "name": "DSA-3834",
              "refsource": "DEBIAN",
              "url": "http://www.debian.org/security/2017/dsa-3834"
            },
            {
              "name": "RHSA-2017:2886",
              "refsource": "REDHAT",
              "url": "https://access.redhat.com/errata/RHSA-2017:2886"
            },
            {
              "name": "97812",
              "refsource": "BID",
              "url": "http://www.securityfocus.com/bid/97812"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "43595867-4340-4103-b7a2-9a5208d29a85",
    "assignerShortName": "oracle",
    "cveId": "CVE-2017-3461",
    "datePublished": "2017-04-24T19:00:00",
    "dateReserved": "2016-12-06T00:00:00",
    "dateUpdated": "2024-10-07T16:19:23.117Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

CVE-2017-3244 (GCVE-0-2017-3244)

Vulnerability from cvelistv5

Published

2017-01-27 22:01

Modified

2024-10-09 19:50

Severity ?

CWE

CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Summary

Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: DML). Supported versions that are affected are 5.5.53 and earlier, 5.6.34 and earlier and 5.7.16 and earlier. Easily exploitable vulnerability allows low privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS v3.0 Base Score 6.5 (Availability impacts).

References

URL

Tags

	https://access.redhat.com/errata/RHSA-2017:2787	vendor-advisory, x_refsource_REDHAT
	https://security.gentoo.org/glsa/201702-17	vendor-advisory, x_refsource_GENTOO
	https://access.redhat.com/errata/RHSA-2018:0574	vendor-advisory, x_refsource_REDHAT
	https://security.gentoo.org/glsa/201702-18	vendor-advisory, x_refsource_GENTOO
	http://www.securitytracker.com/id/1037640	vdb-entry, x_refsource_SECTRACK
	http://www.securityfocus.com/bid/95565	vdb-entry, x_refsource_BID
	https://access.redhat.com/errata/RHSA-2018:0279	vendor-advisory, x_refsource_REDHAT
	http://www.debian.org/security/2017/dsa-3767	vendor-advisory, x_refsource_DEBIAN
	https://access.redhat.com/errata/RHSA-2017:2886	vendor-advisory, x_refsource_REDHAT
	http://www.oracle.com/technetwork/security-advisory/cpujan2017-2881727.html	x_refsource_CONFIRM
	http://www.debian.org/security/2017/dsa-3770	vendor-advisory, x_refsource_DEBIAN
	https://access.redhat.com/errata/RHSA-2017:2192	vendor-advisory, x_refsource_REDHAT

Impacted products

	Vendor	Product	Version
	Oracle	MySQL Server	Version: 5.5.53 and earlier Version: 5.6.34 and earlier Version: 5.7.16 and earlier

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-05T14:23:32.874Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "name": "RHSA-2017:2787",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2017:2787"
          },
          {
            "name": "GLSA-201702-17",
            "tags": [
              "vendor-advisory",
              "x_refsource_GENTOO",
              "x_transferred"
            ],
            "url": "https://security.gentoo.org/glsa/201702-17"
          },
          {
            "name": "RHSA-2018:0574",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2018:0574"
          },
          {
            "name": "GLSA-201702-18",
            "tags": [
              "vendor-advisory",
              "x_refsource_GENTOO",
              "x_transferred"
            ],
            "url": "https://security.gentoo.org/glsa/201702-18"
          },
          {
            "name": "1037640",
            "tags": [
              "vdb-entry",
              "x_refsource_SECTRACK",
              "x_transferred"
            ],
            "url": "http://www.securitytracker.com/id/1037640"
          },
          {
            "name": "95565",
            "tags": [
              "vdb-entry",
              "x_refsource_BID",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/bid/95565"
          },
          {
            "name": "RHSA-2018:0279",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2018:0279"
          },
          {
            "name": "DSA-3767",
            "tags": [
              "vendor-advisory",
              "x_refsource_DEBIAN",
              "x_transferred"
            ],
            "url": "http://www.debian.org/security/2017/dsa-3767"
          },
          {
            "name": "RHSA-2017:2886",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2017:2886"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://www.oracle.com/technetwork/security-advisory/cpujan2017-2881727.html"
          },
          {
            "name": "DSA-3770",
            "tags": [
              "vendor-advisory",
              "x_refsource_DEBIAN",
              "x_transferred"
            ],
            "url": "http://www.debian.org/security/2017/dsa-3770"
          },
          {
            "name": "RHSA-2017:2192",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2017:2192"
          }
        ],
        "title": "CVE Program Container"
      },
      {
        "metrics": [
          {
            "other": {
              "content": {
                "id": "CVE-2017-3244",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "partial"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2024-10-09T19:30:25.842291Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2024-10-09T19:50:06.509Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "MySQL Server",
          "vendor": "Oracle",
          "versions": [
            {
              "status": "affected",
              "version": "5.5.53 and earlier"
            },
            {
              "status": "affected",
              "version": "5.6.34 and earlier"
            },
            {
              "status": "affected",
              "version": "5.7.16 and earlier"
            }
          ]
        }
      ],
      "datePublic": "2017-01-17T00:00:00",
      "descriptions": [
        {
          "lang": "en",
          "value": "Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: DML). Supported versions that are affected are 5.5.53 and earlier, 5.6.34 and earlier and 5.7.16 and earlier. Easily exploitable vulnerability allows low privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS v3.0 Base Score 6.5 (Availability impacts)."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2018-03-22T09:57:01",
        "orgId": "43595867-4340-4103-b7a2-9a5208d29a85",
        "shortName": "oracle"
      },
      "references": [
        {
          "name": "RHSA-2017:2787",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2017:2787"
        },
        {
          "name": "GLSA-201702-17",
          "tags": [
            "vendor-advisory",
            "x_refsource_GENTOO"
          ],
          "url": "https://security.gentoo.org/glsa/201702-17"
        },
        {
          "name": "RHSA-2018:0574",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2018:0574"
        },
        {
          "name": "GLSA-201702-18",
          "tags": [
            "vendor-advisory",
            "x_refsource_GENTOO"
          ],
          "url": "https://security.gentoo.org/glsa/201702-18"
        },
        {
          "name": "1037640",
          "tags": [
            "vdb-entry",
            "x_refsource_SECTRACK"
          ],
          "url": "http://www.securitytracker.com/id/1037640"
        },
        {
          "name": "95565",
          "tags": [
            "vdb-entry",
            "x_refsource_BID"
          ],
          "url": "http://www.securityfocus.com/bid/95565"
        },
        {
          "name": "RHSA-2018:0279",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2018:0279"
        },
        {
          "name": "DSA-3767",
          "tags": [
            "vendor-advisory",
            "x_refsource_DEBIAN"
          ],
          "url": "http://www.debian.org/security/2017/dsa-3767"
        },
        {
          "name": "RHSA-2017:2886",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2017:2886"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://www.oracle.com/technetwork/security-advisory/cpujan2017-2881727.html"
        },
        {
          "name": "DSA-3770",
          "tags": [
            "vendor-advisory",
            "x_refsource_DEBIAN"
          ],
          "url": "http://www.debian.org/security/2017/dsa-3770"
        },
        {
          "name": "RHSA-2017:2192",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2017:2192"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "secalert_us@oracle.com",
          "ID": "CVE-2017-3244",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "MySQL Server",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "5.5.53 and earlier"
                          },
                          {
                            "version_value": "5.6.34 and earlier"
                          },
                          {
                            "version_value": "5.7.16 and earlier"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "Oracle"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: DML). Supported versions that are affected are 5.5.53 and earlier, 5.6.34 and earlier and 5.7.16 and earlier. Easily exploitable vulnerability allows low privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS v3.0 Base Score 6.5 (Availability impacts)."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "RHSA-2017:2787",
              "refsource": "REDHAT",
              "url": "https://access.redhat.com/errata/RHSA-2017:2787"
            },
            {
              "name": "GLSA-201702-17",
              "refsource": "GENTOO",
              "url": "https://security.gentoo.org/glsa/201702-17"
            },
            {
              "name": "RHSA-2018:0574",
              "refsource": "REDHAT",
              "url": "https://access.redhat.com/errata/RHSA-2018:0574"
            },
            {
              "name": "GLSA-201702-18",
              "refsource": "GENTOO",
              "url": "https://security.gentoo.org/glsa/201702-18"
            },
            {
              "name": "1037640",
              "refsource": "SECTRACK",
              "url": "http://www.securitytracker.com/id/1037640"
            },
            {
              "name": "95565",
              "refsource": "BID",
              "url": "http://www.securityfocus.com/bid/95565"
            },
            {
              "name": "RHSA-2018:0279",
              "refsource": "REDHAT",
              "url": "https://access.redhat.com/errata/RHSA-2018:0279"
            },
            {
              "name": "DSA-3767",
              "refsource": "DEBIAN",
              "url": "http://www.debian.org/security/2017/dsa-3767"
            },
            {
              "name": "RHSA-2017:2886",
              "refsource": "REDHAT",
              "url": "https://access.redhat.com/errata/RHSA-2017:2886"
            },
            {
              "name": "http://www.oracle.com/technetwork/security-advisory/cpujan2017-2881727.html",
              "refsource": "CONFIRM",
              "url": "http://www.oracle.com/technetwork/security-advisory/cpujan2017-2881727.html"
            },
            {
              "name": "DSA-3770",
              "refsource": "DEBIAN",
              "url": "http://www.debian.org/security/2017/dsa-3770"
            },
            {
              "name": "RHSA-2017:2192",
              "refsource": "REDHAT",
              "url": "https://access.redhat.com/errata/RHSA-2017:2192"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "43595867-4340-4103-b7a2-9a5208d29a85",
    "assignerShortName": "oracle",
    "cveId": "CVE-2017-3244",
    "datePublished": "2017-01-27T22:01:00",
    "dateReserved": "2016-12-06T00:00:00",
    "dateUpdated": "2024-10-09T19:50:06.509Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

CVE-2017-3453 (GCVE-0-2017-3453)

Vulnerability from cvelistv5

Published

2017-04-24 19:00

Modified

2024-10-07 16:20

Severity ?

CWE

Easily "exploitable" vulnerability allows low privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server.

Summary

Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Optimizer). Supported versions that are affected are 5.5.54 and earlier, 5.6.35 and earlier and 5.7.17 and earlier. Easily "exploitable" vulnerability allows low privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.0 Base Score 6.5 (Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H).

References

URL

Tags

	https://access.redhat.com/errata/RHSA-2017:2787	vendor-advisory, x_refsource_REDHAT
	http://www.securityfocus.com/bid/97776	vdb-entry, x_refsource_BID
	http://www.securitytracker.com/id/1038287	vdb-entry, x_refsource_SECTRACK
	http://www.oracle.com/technetwork/security-advisory/cpuapr2017-3236618.html	x_refsource_CONFIRM
	https://access.redhat.com/errata/RHSA-2018:0574	vendor-advisory, x_refsource_REDHAT
	http://www.debian.org/security/2017/dsa-3944	vendor-advisory, x_refsource_DEBIAN
	https://access.redhat.com/errata/RHSA-2018:0279	vendor-advisory, x_refsource_REDHAT
	http://www.debian.org/security/2017/dsa-3834	vendor-advisory, x_refsource_DEBIAN
	https://access.redhat.com/errata/RHSA-2017:2886	vendor-advisory, x_refsource_REDHAT
	https://access.redhat.com/errata/RHSA-2017:2192	vendor-advisory, x_refsource_REDHAT

Impacted products

	Vendor	Product	Version
	Oracle Corporation	MySQL Server	Version: 5.5.54 and earlier Version: 5.6.35 and earlier Version: 5.7.17 and earlier

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-05T14:30:56.871Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "name": "RHSA-2017:2787",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2017:2787"
          },
          {
            "name": "97776",
            "tags": [
              "vdb-entry",
              "x_refsource_BID",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/bid/97776"
          },
          {
            "name": "1038287",
            "tags": [
              "vdb-entry",
              "x_refsource_SECTRACK",
              "x_transferred"
            ],
            "url": "http://www.securitytracker.com/id/1038287"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://www.oracle.com/technetwork/security-advisory/cpuapr2017-3236618.html"
          },
          {
            "name": "RHSA-2018:0574",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2018:0574"
          },
          {
            "name": "DSA-3944",
            "tags": [
              "vendor-advisory",
              "x_refsource_DEBIAN",
              "x_transferred"
            ],
            "url": "http://www.debian.org/security/2017/dsa-3944"
          },
          {
            "name": "RHSA-2018:0279",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2018:0279"
          },
          {
            "name": "DSA-3834",
            "tags": [
              "vendor-advisory",
              "x_refsource_DEBIAN",
              "x_transferred"
            ],
            "url": "http://www.debian.org/security/2017/dsa-3834"
          },
          {
            "name": "RHSA-2017:2886",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2017:2886"
          },
          {
            "name": "RHSA-2017:2192",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2017:2192"
          }
        ],
        "title": "CVE Program Container"
      },
      {
        "metrics": [
          {
            "other": {
              "content": {
                "id": "CVE-2017-3453",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "partial"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2024-10-07T15:46:07.940629Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2024-10-07T16:20:29.780Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "MySQL Server",
          "vendor": "Oracle Corporation",
          "versions": [
            {
              "status": "affected",
              "version": "5.5.54 and earlier"
            },
            {
              "status": "affected",
              "version": "5.6.35 and earlier"
            },
            {
              "status": "affected",
              "version": "5.7.17 and earlier"
            }
          ]
        }
      ],
      "datePublic": "2017-04-18T00:00:00",
      "descriptions": [
        {
          "lang": "en",
          "value": "Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Optimizer). Supported versions that are affected are 5.5.54 and earlier, 5.6.35 and earlier and 5.7.17 and earlier. Easily \"exploitable\" vulnerability allows low privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.0 Base Score 6.5 (Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H)."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "Easily \"exploitable\" vulnerability allows low privileged attacker with network access via multiple protocols to compromise MySQL Server.  Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server.",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2018-03-22T09:57:01",
        "orgId": "43595867-4340-4103-b7a2-9a5208d29a85",
        "shortName": "oracle"
      },
      "references": [
        {
          "name": "RHSA-2017:2787",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2017:2787"
        },
        {
          "name": "97776",
          "tags": [
            "vdb-entry",
            "x_refsource_BID"
          ],
          "url": "http://www.securityfocus.com/bid/97776"
        },
        {
          "name": "1038287",
          "tags": [
            "vdb-entry",
            "x_refsource_SECTRACK"
          ],
          "url": "http://www.securitytracker.com/id/1038287"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://www.oracle.com/technetwork/security-advisory/cpuapr2017-3236618.html"
        },
        {
          "name": "RHSA-2018:0574",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2018:0574"
        },
        {
          "name": "DSA-3944",
          "tags": [
            "vendor-advisory",
            "x_refsource_DEBIAN"
          ],
          "url": "http://www.debian.org/security/2017/dsa-3944"
        },
        {
          "name": "RHSA-2018:0279",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2018:0279"
        },
        {
          "name": "DSA-3834",
          "tags": [
            "vendor-advisory",
            "x_refsource_DEBIAN"
          ],
          "url": "http://www.debian.org/security/2017/dsa-3834"
        },
        {
          "name": "RHSA-2017:2886",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2017:2886"
        },
        {
          "name": "RHSA-2017:2192",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2017:2192"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "secalert_us@oracle.com",
          "ID": "CVE-2017-3453",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "MySQL Server",
                      "version": {
                        "version_data": [
                          {
                            "version_affected": "=",
                            "version_value": "5.5.54 and earlier"
                          },
                          {
                            "version_affected": "=",
                            "version_value": "5.6.35 and earlier"
                          },
                          {
                            "version_affected": "=",
                            "version_value": "5.7.17 and earlier"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "Oracle Corporation"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Optimizer). Supported versions that are affected are 5.5.54 and earlier, 5.6.35 and earlier and 5.7.17 and earlier. Easily \"exploitable\" vulnerability allows low privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.0 Base Score 6.5 (Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H)."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "Easily \"exploitable\" vulnerability allows low privileged attacker with network access via multiple protocols to compromise MySQL Server.  Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server."
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "RHSA-2017:2787",
              "refsource": "REDHAT",
              "url": "https://access.redhat.com/errata/RHSA-2017:2787"
            },
            {
              "name": "97776",
              "refsource": "BID",
              "url": "http://www.securityfocus.com/bid/97776"
            },
            {
              "name": "1038287",
              "refsource": "SECTRACK",
              "url": "http://www.securitytracker.com/id/1038287"
            },
            {
              "name": "http://www.oracle.com/technetwork/security-advisory/cpuapr2017-3236618.html",
              "refsource": "CONFIRM",
              "url": "http://www.oracle.com/technetwork/security-advisory/cpuapr2017-3236618.html"
            },
            {
              "name": "RHSA-2018:0574",
              "refsource": "REDHAT",
              "url": "https://access.redhat.com/errata/RHSA-2018:0574"
            },
            {
              "name": "DSA-3944",
              "refsource": "DEBIAN",
              "url": "http://www.debian.org/security/2017/dsa-3944"
            },
            {
              "name": "RHSA-2018:0279",
              "refsource": "REDHAT",
              "url": "https://access.redhat.com/errata/RHSA-2018:0279"
            },
            {
              "name": "DSA-3834",
              "refsource": "DEBIAN",
              "url": "http://www.debian.org/security/2017/dsa-3834"
            },
            {
              "name": "RHSA-2017:2886",
              "refsource": "REDHAT",
              "url": "https://access.redhat.com/errata/RHSA-2017:2886"
            },
            {
              "name": "RHSA-2017:2192",
              "refsource": "REDHAT",
              "url": "https://access.redhat.com/errata/RHSA-2017:2192"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "43595867-4340-4103-b7a2-9a5208d29a85",
    "assignerShortName": "oracle",
    "cveId": "CVE-2017-3453",
    "datePublished": "2017-04-24T19:00:00",
    "dateReserved": "2016-12-06T00:00:00",
    "dateUpdated": "2024-10-07T16:20:29.780Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

CVE-2017-3458 (GCVE-0-2017-3458)

Vulnerability from cvelistv5

Published

2017-04-24 19:00

Modified

2024-10-07 16:19

Severity ?

CWE

Easily "exploitable" vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server.

Summary

Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: DML). Supported versions that are affected are 5.7.17 and earlier. Easily "exploitable" vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.0 Base Score 4.9 (Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H).

References

URL

Tags

	http://www.securitytracker.com/id/1038287	vdb-entry, x_refsource_SECTRACK
	http://www.oracle.com/technetwork/security-advisory/cpuapr2017-3236618.html	x_refsource_CONFIRM
	http://www.securityfocus.com/bid/97837	vdb-entry, x_refsource_BID
	https://access.redhat.com/errata/RHSA-2017:2886	vendor-advisory, x_refsource_REDHAT

Impacted products

	Vendor	Product	Version
	Oracle Corporation	MySQL Server	Version: 5.7.17 and earlier

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-05T14:30:56.913Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "name": "1038287",
            "tags": [
              "vdb-entry",
              "x_refsource_SECTRACK",
              "x_transferred"
            ],
            "url": "http://www.securitytracker.com/id/1038287"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://www.oracle.com/technetwork/security-advisory/cpuapr2017-3236618.html"
          },
          {
            "name": "97837",
            "tags": [
              "vdb-entry",
              "x_refsource_BID",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/bid/97837"
          },
          {
            "name": "RHSA-2017:2886",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2017:2886"
          }
        ],
        "title": "CVE Program Container"
      },
      {
        "metrics": [
          {
            "other": {
              "content": {
                "id": "CVE-2017-3458",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "partial"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2024-10-07T15:46:02.231800Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2024-10-07T16:19:47.020Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "MySQL Server",
          "vendor": "Oracle Corporation",
          "versions": [
            {
              "status": "affected",
              "version": "5.7.17 and earlier"
            }
          ]
        }
      ],
      "datePublic": "2017-04-18T00:00:00",
      "descriptions": [
        {
          "lang": "en",
          "value": "Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: DML). Supported versions that are affected are 5.7.17 and earlier. Easily \"exploitable\" vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.0 Base Score 4.9 (Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H)."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "Easily \"exploitable\" vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server.  Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server.",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2017-12-07T10:57:01",
        "orgId": "43595867-4340-4103-b7a2-9a5208d29a85",
        "shortName": "oracle"
      },
      "references": [
        {
          "name": "1038287",
          "tags": [
            "vdb-entry",
            "x_refsource_SECTRACK"
          ],
          "url": "http://www.securitytracker.com/id/1038287"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://www.oracle.com/technetwork/security-advisory/cpuapr2017-3236618.html"
        },
        {
          "name": "97837",
          "tags": [
            "vdb-entry",
            "x_refsource_BID"
          ],
          "url": "http://www.securityfocus.com/bid/97837"
        },
        {
          "name": "RHSA-2017:2886",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2017:2886"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "secalert_us@oracle.com",
          "ID": "CVE-2017-3458",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "MySQL Server",
                      "version": {
                        "version_data": [
                          {
                            "version_affected": "=",
                            "version_value": "5.7.17 and earlier"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "Oracle Corporation"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: DML). Supported versions that are affected are 5.7.17 and earlier. Easily \"exploitable\" vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.0 Base Score 4.9 (Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H)."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "Easily \"exploitable\" vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server.  Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server."
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "1038287",
              "refsource": "SECTRACK",
              "url": "http://www.securitytracker.com/id/1038287"
            },
            {
              "name": "http://www.oracle.com/technetwork/security-advisory/cpuapr2017-3236618.html",
              "refsource": "CONFIRM",
              "url": "http://www.oracle.com/technetwork/security-advisory/cpuapr2017-3236618.html"
            },
            {
              "name": "97837",
              "refsource": "BID",
              "url": "http://www.securityfocus.com/bid/97837"
            },
            {
              "name": "RHSA-2017:2886",
              "refsource": "REDHAT",
              "url": "https://access.redhat.com/errata/RHSA-2017:2886"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "43595867-4340-4103-b7a2-9a5208d29a85",
    "assignerShortName": "oracle",
    "cveId": "CVE-2017-3458",
    "datePublished": "2017-04-24T19:00:00",
    "dateReserved": "2016-12-06T00:00:00",
    "dateUpdated": "2024-10-07T16:19:47.020Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

CVE-2017-3644 (GCVE-0-2017-3644)

Vulnerability from cvelistv5

Published

2017-08-08 15:00

Modified

2024-10-04 17:02

Severity ?

CWE

Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server.

Summary

References

URL

Tags

	http://www.securityfocus.com/bid/99775	vdb-entry, x_refsource_BID
	http://www.securitytracker.com/id/1038928	vdb-entry, x_refsource_SECTRACK
	https://access.redhat.com/errata/RHSA-2017:2886	vendor-advisory, x_refsource_REDHAT
	http://www.oracle.com/technetwork/security-advisory/cpujul2017-3236622.html	x_refsource_CONFIRM

Impacted products

	Vendor	Product	Version
	Oracle Corporation	MySQL Server	Version: 5.7.18 and earlier

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-05T14:30:58.804Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "name": "99775",
            "tags": [
              "vdb-entry",
              "x_refsource_BID",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/bid/99775"
          },
          {
            "name": "1038928",
            "tags": [
              "vdb-entry",
              "x_refsource_SECTRACK",
              "x_transferred"
            ],
            "url": "http://www.securitytracker.com/id/1038928"
          },
          {
            "name": "RHSA-2017:2886",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2017:2886"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://www.oracle.com/technetwork/security-advisory/cpujul2017-3236622.html"
          }
        ],
        "title": "CVE Program Container"
      },
      {
        "metrics": [
          {
            "other": {
              "content": {
                "id": "CVE-2017-3644",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "partial"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2024-10-04T15:48:02.058110Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2024-10-04T17:02:04.544Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "MySQL Server",
          "vendor": "Oracle Corporation",
          "versions": [
            {
              "status": "affected",
              "version": "5.7.18 and earlier"
            }
          ]
        }
      ],
      "datePublic": "2017-07-18T00:00:00",
      "descriptions": [
        {
          "lang": "en",
          "value": "Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: DML). Supported versions that are affected are 5.7.18 and earlier. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.0 Base Score 4.9 (Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H)."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server.  Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server.",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2017-12-07T10:57:01",
        "orgId": "43595867-4340-4103-b7a2-9a5208d29a85",
        "shortName": "oracle"
      },
      "references": [
        {
          "name": "99775",
          "tags": [
            "vdb-entry",
            "x_refsource_BID"
          ],
          "url": "http://www.securityfocus.com/bid/99775"
        },
        {
          "name": "1038928",
          "tags": [
            "vdb-entry",
            "x_refsource_SECTRACK"
          ],
          "url": "http://www.securitytracker.com/id/1038928"
        },
        {
          "name": "RHSA-2017:2886",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2017:2886"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://www.oracle.com/technetwork/security-advisory/cpujul2017-3236622.html"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "secalert_us@oracle.com",
          "ID": "CVE-2017-3644",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "MySQL Server",
                      "version": {
                        "version_data": [
                          {
                            "version_affected": "=",
                            "version_value": "5.7.18 and earlier"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "Oracle Corporation"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: DML). Supported versions that are affected are 5.7.18 and earlier. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.0 Base Score 4.9 (Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H)."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server.  Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server."
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "99775",
              "refsource": "BID",
              "url": "http://www.securityfocus.com/bid/99775"
            },
            {
              "name": "1038928",
              "refsource": "SECTRACK",
              "url": "http://www.securitytracker.com/id/1038928"
            },
            {
              "name": "RHSA-2017:2886",
              "refsource": "REDHAT",
              "url": "https://access.redhat.com/errata/RHSA-2017:2886"
            },
            {
              "name": "http://www.oracle.com/technetwork/security-advisory/cpujul2017-3236622.html",
              "refsource": "CONFIRM",
              "url": "http://www.oracle.com/technetwork/security-advisory/cpujul2017-3236622.html"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "43595867-4340-4103-b7a2-9a5208d29a85",
    "assignerShortName": "oracle",
    "cveId": "CVE-2017-3644",
    "datePublished": "2017-08-08T15:00:00",
    "dateReserved": "2016-12-06T00:00:00",
    "dateUpdated": "2024-10-04T17:02:04.544Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

CVE-2017-3450 (GCVE-0-2017-3450)

Vulnerability from cvelistv5

Published

2017-04-24 19:00

Modified

2024-10-07 16:20

Severity ?

CWE

Easily "exploitable" vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server.

Summary

Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Memcached). Supported versions that are affected are 5.6.35 and earlier and 5.7.17 and earlier. Easily "exploitable" vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.0 Base Score 7.5 (Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H).

References

URL

Tags

	https://access.redhat.com/errata/RHSA-2017:2787	vendor-advisory, x_refsource_REDHAT
	http://www.securitytracker.com/id/1038287	vdb-entry, x_refsource_SECTRACK
	http://www.oracle.com/technetwork/security-advisory/cpuapr2017-3236618.html	x_refsource_CONFIRM
	http://www.securityfocus.com/bid/97747	vdb-entry, x_refsource_BID
	https://access.redhat.com/errata/RHSA-2017:2886	vendor-advisory, x_refsource_REDHAT

Impacted products

	Vendor	Product	Version
	Oracle Corporation	MySQL Server	Version: 5.6.35 and earlier Version: 5.7.17 and earlier

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-05T14:30:56.917Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "name": "RHSA-2017:2787",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2017:2787"
          },
          {
            "name": "1038287",
            "tags": [
              "vdb-entry",
              "x_refsource_SECTRACK",
              "x_transferred"
            ],
            "url": "http://www.securitytracker.com/id/1038287"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://www.oracle.com/technetwork/security-advisory/cpuapr2017-3236618.html"
          },
          {
            "name": "97747",
            "tags": [
              "vdb-entry",
              "x_refsource_BID",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/bid/97747"
          },
          {
            "name": "RHSA-2017:2886",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2017:2886"
          }
        ],
        "title": "CVE Program Container"
      },
      {
        "metrics": [
          {
            "other": {
              "content": {
                "id": "CVE-2017-3450",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "yes"
                  },
                  {
                    "Technical Impact": "partial"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2024-10-07T15:40:28.626571Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2024-10-07T16:20:50.873Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "MySQL Server",
          "vendor": "Oracle Corporation",
          "versions": [
            {
              "status": "affected",
              "version": "5.6.35 and earlier"
            },
            {
              "status": "affected",
              "version": "5.7.17 and earlier"
            }
          ]
        }
      ],
      "datePublic": "2017-04-18T00:00:00",
      "descriptions": [
        {
          "lang": "en",
          "value": "Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Memcached). Supported versions that are affected are 5.6.35 and earlier and 5.7.17 and earlier. Easily \"exploitable\" vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.0 Base Score 7.5 (Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H)."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "Easily \"exploitable\" vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise MySQL Server.  Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server.",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2017-12-08T10:57:01",
        "orgId": "43595867-4340-4103-b7a2-9a5208d29a85",
        "shortName": "oracle"
      },
      "references": [
        {
          "name": "RHSA-2017:2787",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2017:2787"
        },
        {
          "name": "1038287",
          "tags": [
            "vdb-entry",
            "x_refsource_SECTRACK"
          ],
          "url": "http://www.securitytracker.com/id/1038287"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://www.oracle.com/technetwork/security-advisory/cpuapr2017-3236618.html"
        },
        {
          "name": "97747",
          "tags": [
            "vdb-entry",
            "x_refsource_BID"
          ],
          "url": "http://www.securityfocus.com/bid/97747"
        },
        {
          "name": "RHSA-2017:2886",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2017:2886"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "secalert_us@oracle.com",
          "ID": "CVE-2017-3450",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "MySQL Server",
                      "version": {
                        "version_data": [
                          {
                            "version_affected": "=",
                            "version_value": "5.6.35 and earlier"
                          },
                          {
                            "version_affected": "=",
                            "version_value": "5.7.17 and earlier"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "Oracle Corporation"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Memcached). Supported versions that are affected are 5.6.35 and earlier and 5.7.17 and earlier. Easily \"exploitable\" vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.0 Base Score 7.5 (Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H)."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "Easily \"exploitable\" vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise MySQL Server.  Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server."
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "RHSA-2017:2787",
              "refsource": "REDHAT",
              "url": "https://access.redhat.com/errata/RHSA-2017:2787"
            },
            {
              "name": "1038287",
              "refsource": "SECTRACK",
              "url": "http://www.securitytracker.com/id/1038287"
            },
            {
              "name": "http://www.oracle.com/technetwork/security-advisory/cpuapr2017-3236618.html",
              "refsource": "CONFIRM",
              "url": "http://www.oracle.com/technetwork/security-advisory/cpuapr2017-3236618.html"
            },
            {
              "name": "97747",
              "refsource": "BID",
              "url": "http://www.securityfocus.com/bid/97747"
            },
            {
              "name": "RHSA-2017:2886",
              "refsource": "REDHAT",
              "url": "https://access.redhat.com/errata/RHSA-2017:2886"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "43595867-4340-4103-b7a2-9a5208d29a85",
    "assignerShortName": "oracle",
    "cveId": "CVE-2017-3450",
    "datePublished": "2017-04-24T19:00:00",
    "dateReserved": "2016-12-06T00:00:00",
    "dateUpdated": "2024-10-07T16:20:50.873Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

CVE-2017-3634 (GCVE-0-2017-3634)

Vulnerability from cvelistv5

Published

2017-08-08 15:00

Modified

2024-10-04 17:03

Severity ?

CWE

Summary

Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: DML). Supported versions that are affected are 5.6.36 and earlier and 5.7.18 and earlier. Easily exploitable vulnerability allows low privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.0 Base Score 6.5 (Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H).

References

URL

Tags

	https://access.redhat.com/errata/RHSA-2017:2787	vendor-advisory, x_refsource_REDHAT
	http://www.securitytracker.com/id/1038928	vdb-entry, x_refsource_SECTRACK
	http://www.securityfocus.com/bid/99729	vdb-entry, x_refsource_BID
	https://access.redhat.com/errata/RHSA-2017:2886	vendor-advisory, x_refsource_REDHAT
	http://www.oracle.com/technetwork/security-advisory/cpujul2017-3236622.html	x_refsource_CONFIRM

Impacted products

	Vendor	Product	Version
	n/a	n/a	Version: n/a

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-05T14:30:58.972Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "name": "RHSA-2017:2787",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2017:2787"
          },
          {
            "name": "1038928",
            "tags": [
              "vdb-entry",
              "x_refsource_SECTRACK",
              "x_transferred"
            ],
            "url": "http://www.securitytracker.com/id/1038928"
          },
          {
            "name": "99729",
            "tags": [
              "vdb-entry",
              "x_refsource_BID",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/bid/99729"
          },
          {
            "name": "RHSA-2017:2886",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2017:2886"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://www.oracle.com/technetwork/security-advisory/cpujul2017-3236622.html"
          }
        ],
        "title": "CVE Program Container"
      },
      {
        "metrics": [
          {
            "other": {
              "content": {
                "id": "CVE-2017-3634",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "partial"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2024-10-04T15:48:27.985093Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2024-10-04T17:03:18.561Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "datePublic": "2017-07-18T00:00:00",
      "descriptions": [
        {
          "lang": "en",
          "value": "Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: DML). Supported versions that are affected are 5.6.36 and earlier and 5.7.18 and earlier. Easily exploitable vulnerability allows low privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.0 Base Score 6.5 (Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H)."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "n/a",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2017-12-08T10:57:01",
        "orgId": "43595867-4340-4103-b7a2-9a5208d29a85",
        "shortName": "oracle"
      },
      "references": [
        {
          "name": "RHSA-2017:2787",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2017:2787"
        },
        {
          "name": "1038928",
          "tags": [
            "vdb-entry",
            "x_refsource_SECTRACK"
          ],
          "url": "http://www.securitytracker.com/id/1038928"
        },
        {
          "name": "99729",
          "tags": [
            "vdb-entry",
            "x_refsource_BID"
          ],
          "url": "http://www.securityfocus.com/bid/99729"
        },
        {
          "name": "RHSA-2017:2886",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2017:2886"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://www.oracle.com/technetwork/security-advisory/cpujul2017-3236622.html"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "secalert_us@oracle.com",
          "ID": "CVE-2017-3634",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "n/a",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "n/a"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "n/a"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: DML). Supported versions that are affected are 5.6.36 and earlier and 5.7.18 and earlier. Easily exploitable vulnerability allows low privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.0 Base Score 6.5 (Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H)."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "n/a"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "RHSA-2017:2787",
              "refsource": "REDHAT",
              "url": "https://access.redhat.com/errata/RHSA-2017:2787"
            },
            {
              "name": "1038928",
              "refsource": "SECTRACK",
              "url": "http://www.securitytracker.com/id/1038928"
            },
            {
              "name": "99729",
              "refsource": "BID",
              "url": "http://www.securityfocus.com/bid/99729"
            },
            {
              "name": "RHSA-2017:2886",
              "refsource": "REDHAT",
              "url": "https://access.redhat.com/errata/RHSA-2017:2886"
            },
            {
              "name": "http://www.oracle.com/technetwork/security-advisory/cpujul2017-3236622.html",
              "refsource": "CONFIRM",
              "url": "http://www.oracle.com/technetwork/security-advisory/cpujul2017-3236622.html"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "43595867-4340-4103-b7a2-9a5208d29a85",
    "assignerShortName": "oracle",
    "cveId": "CVE-2017-3634",
    "datePublished": "2017-08-08T15:00:00",
    "dateReserved": "2016-12-06T00:00:00",
    "dateUpdated": "2024-10-04T17:03:18.561Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

CVE-2017-3313 (GCVE-0-2017-3313)

Vulnerability from cvelistv5

Published

2017-01-27 22:01

Modified

2024-10-08 20:34

Severity ?

CWE

CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N

Summary

Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: MyISAM). Supported versions that are affected are 5.5.53 and earlier, 5.6.34 and earlier and 5.7.16 and earlier. Difficult to exploit vulnerability allows low privileged attacker with logon to the infrastructure where MySQL Server executes to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all MySQL Server accessible data. CVSS v3.0 Base Score 4.7 (Confidentiality impacts).

References

URL

Tags

	https://access.redhat.com/errata/RHSA-2017:2787	vendor-advisory, x_refsource_REDHAT
	http://www.securityfocus.com/bid/95527	vdb-entry, x_refsource_BID
	https://security.gentoo.org/glsa/201702-17	vendor-advisory, x_refsource_GENTOO
	https://access.redhat.com/errata/RHSA-2018:0574	vendor-advisory, x_refsource_REDHAT
	http://www.securitytracker.com/id/1037640	vdb-entry, x_refsource_SECTRACK
	https://access.redhat.com/errata/RHSA-2018:0279	vendor-advisory, x_refsource_REDHAT
	http://www.debian.org/security/2017/dsa-3767	vendor-advisory, x_refsource_DEBIAN
	https://access.redhat.com/errata/RHSA-2017:2886	vendor-advisory, x_refsource_REDHAT
	http://www.debian.org/security/2017/dsa-3809	vendor-advisory, x_refsource_DEBIAN
	http://www.oracle.com/technetwork/security-advisory/cpujan2017-2881727.html	x_refsource_CONFIRM
	https://access.redhat.com/errata/RHSA-2017:2192	vendor-advisory, x_refsource_REDHAT

Impacted products

	Vendor	Product	Version
	Oracle	MySQL Server	Version: 5.5.53 and earlier Version: 5.6.34 and earlier Version: 5.7.16 and earlier

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-05T14:23:33.213Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "name": "RHSA-2017:2787",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2017:2787"
          },
          {
            "name": "95527",
            "tags": [
              "vdb-entry",
              "x_refsource_BID",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/bid/95527"
          },
          {
            "name": "GLSA-201702-17",
            "tags": [
              "vendor-advisory",
              "x_refsource_GENTOO",
              "x_transferred"
            ],
            "url": "https://security.gentoo.org/glsa/201702-17"
          },
          {
            "name": "RHSA-2018:0574",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2018:0574"
          },
          {
            "name": "1037640",
            "tags": [
              "vdb-entry",
              "x_refsource_SECTRACK",
              "x_transferred"
            ],
            "url": "http://www.securitytracker.com/id/1037640"
          },
          {
            "name": "RHSA-2018:0279",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2018:0279"
          },
          {
            "name": "DSA-3767",
            "tags": [
              "vendor-advisory",
              "x_refsource_DEBIAN",
              "x_transferred"
            ],
            "url": "http://www.debian.org/security/2017/dsa-3767"
          },
          {
            "name": "RHSA-2017:2886",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2017:2886"
          },
          {
            "name": "DSA-3809",
            "tags": [
              "vendor-advisory",
              "x_refsource_DEBIAN",
              "x_transferred"
            ],
            "url": "http://www.debian.org/security/2017/dsa-3809"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://www.oracle.com/technetwork/security-advisory/cpujan2017-2881727.html"
          },
          {
            "name": "RHSA-2017:2192",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2017:2192"
          }
        ],
        "title": "CVE Program Container"
      },
      {
        "metrics": [
          {
            "other": {
              "content": {
                "id": "CVE-2017-3313",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "partial"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2024-10-08T20:09:35.091283Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2024-10-08T20:34:44.994Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "MySQL Server",
          "vendor": "Oracle",
          "versions": [
            {
              "status": "affected",
              "version": "5.5.53 and earlier"
            },
            {
              "status": "affected",
              "version": "5.6.34 and earlier"
            },
            {
              "status": "affected",
              "version": "5.7.16 and earlier"
            }
          ]
        }
      ],
      "datePublic": "2017-01-17T00:00:00",
      "descriptions": [
        {
          "lang": "en",
          "value": "Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: MyISAM). Supported versions that are affected are 5.5.53 and earlier, 5.6.34 and earlier and 5.7.16 and earlier. Difficult to exploit vulnerability allows low privileged attacker with logon to the infrastructure where MySQL Server executes to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all MySQL Server accessible data. CVSS v3.0 Base Score 4.7 (Confidentiality impacts)."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2018-03-22T09:57:01",
        "orgId": "43595867-4340-4103-b7a2-9a5208d29a85",
        "shortName": "oracle"
      },
      "references": [
        {
          "name": "RHSA-2017:2787",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2017:2787"
        },
        {
          "name": "95527",
          "tags": [
            "vdb-entry",
            "x_refsource_BID"
          ],
          "url": "http://www.securityfocus.com/bid/95527"
        },
        {
          "name": "GLSA-201702-17",
          "tags": [
            "vendor-advisory",
            "x_refsource_GENTOO"
          ],
          "url": "https://security.gentoo.org/glsa/201702-17"
        },
        {
          "name": "RHSA-2018:0574",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2018:0574"
        },
        {
          "name": "1037640",
          "tags": [
            "vdb-entry",
            "x_refsource_SECTRACK"
          ],
          "url": "http://www.securitytracker.com/id/1037640"
        },
        {
          "name": "RHSA-2018:0279",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2018:0279"
        },
        {
          "name": "DSA-3767",
          "tags": [
            "vendor-advisory",
            "x_refsource_DEBIAN"
          ],
          "url": "http://www.debian.org/security/2017/dsa-3767"
        },
        {
          "name": "RHSA-2017:2886",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2017:2886"
        },
        {
          "name": "DSA-3809",
          "tags": [
            "vendor-advisory",
            "x_refsource_DEBIAN"
          ],
          "url": "http://www.debian.org/security/2017/dsa-3809"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://www.oracle.com/technetwork/security-advisory/cpujan2017-2881727.html"
        },
        {
          "name": "RHSA-2017:2192",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2017:2192"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "secalert_us@oracle.com",
          "ID": "CVE-2017-3313",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "MySQL Server",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "5.5.53 and earlier"
                          },
                          {
                            "version_value": "5.6.34 and earlier"
                          },
                          {
                            "version_value": "5.7.16 and earlier"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "Oracle"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: MyISAM). Supported versions that are affected are 5.5.53 and earlier, 5.6.34 and earlier and 5.7.16 and earlier. Difficult to exploit vulnerability allows low privileged attacker with logon to the infrastructure where MySQL Server executes to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all MySQL Server accessible data. CVSS v3.0 Base Score 4.7 (Confidentiality impacts)."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "RHSA-2017:2787",
              "refsource": "REDHAT",
              "url": "https://access.redhat.com/errata/RHSA-2017:2787"
            },
            {
              "name": "95527",
              "refsource": "BID",
              "url": "http://www.securityfocus.com/bid/95527"
            },
            {
              "name": "GLSA-201702-17",
              "refsource": "GENTOO",
              "url": "https://security.gentoo.org/glsa/201702-17"
            },
            {
              "name": "RHSA-2018:0574",
              "refsource": "REDHAT",
              "url": "https://access.redhat.com/errata/RHSA-2018:0574"
            },
            {
              "name": "1037640",
              "refsource": "SECTRACK",
              "url": "http://www.securitytracker.com/id/1037640"
            },
            {
              "name": "RHSA-2018:0279",
              "refsource": "REDHAT",
              "url": "https://access.redhat.com/errata/RHSA-2018:0279"
            },
            {
              "name": "DSA-3767",
              "refsource": "DEBIAN",
              "url": "http://www.debian.org/security/2017/dsa-3767"
            },
            {
              "name": "RHSA-2017:2886",
              "refsource": "REDHAT",
              "url": "https://access.redhat.com/errata/RHSA-2017:2886"
            },
            {
              "name": "DSA-3809",
              "refsource": "DEBIAN",
              "url": "http://www.debian.org/security/2017/dsa-3809"
            },
            {
              "name": "http://www.oracle.com/technetwork/security-advisory/cpujan2017-2881727.html",
              "refsource": "CONFIRM",
              "url": "http://www.oracle.com/technetwork/security-advisory/cpujan2017-2881727.html"
            },
            {
              "name": "RHSA-2017:2192",
              "refsource": "REDHAT",
              "url": "https://access.redhat.com/errata/RHSA-2017:2192"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "43595867-4340-4103-b7a2-9a5208d29a85",
    "assignerShortName": "oracle",
    "cveId": "CVE-2017-3313",
    "datePublished": "2017-01-27T22:01:00",
    "dateReserved": "2016-12-06T00:00:00",
    "dateUpdated": "2024-10-08T20:34:44.994Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

CVE-2017-3638 (GCVE-0-2017-3638)

Vulnerability from cvelistv5

Published

2017-08-08 15:00

Modified

2024-10-04 17:02

Severity ?

CWE

Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server.

Summary

References

URL

Tags

	http://www.securityfocus.com/bid/99778	vdb-entry, x_refsource_BID
	http://www.securitytracker.com/id/1038928	vdb-entry, x_refsource_SECTRACK
	https://access.redhat.com/errata/RHSA-2017:2886	vendor-advisory, x_refsource_REDHAT
	http://www.oracle.com/technetwork/security-advisory/cpujul2017-3236622.html	x_refsource_CONFIRM

Impacted products

	Vendor	Product	Version
	Oracle Corporation	MySQL Server	Version: 5.7.18 and earlier

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-05T14:30:59.060Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "name": "99778",
            "tags": [
              "vdb-entry",
              "x_refsource_BID",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/bid/99778"
          },
          {
            "name": "1038928",
            "tags": [
              "vdb-entry",
              "x_refsource_SECTRACK",
              "x_transferred"
            ],
            "url": "http://www.securitytracker.com/id/1038928"
          },
          {
            "name": "RHSA-2017:2886",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2017:2886"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://www.oracle.com/technetwork/security-advisory/cpujul2017-3236622.html"
          }
        ],
        "title": "CVE Program Container"
      },
      {
        "metrics": [
          {
            "other": {
              "content": {
                "id": "CVE-2017-3638",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "partial"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2024-10-04T15:48:19.756889Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2024-10-04T17:02:52.686Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "MySQL Server",
          "vendor": "Oracle Corporation",
          "versions": [
            {
              "status": "affected",
              "version": "5.7.18 and earlier"
            }
          ]
        }
      ],
      "datePublic": "2017-07-18T00:00:00",
      "descriptions": [
        {
          "lang": "en",
          "value": "Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Optimizer). Supported versions that are affected are 5.7.18 and earlier. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.0 Base Score 4.9 (Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H)."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server.  Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server.",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2017-12-07T10:57:01",
        "orgId": "43595867-4340-4103-b7a2-9a5208d29a85",
        "shortName": "oracle"
      },
      "references": [
        {
          "name": "99778",
          "tags": [
            "vdb-entry",
            "x_refsource_BID"
          ],
          "url": "http://www.securityfocus.com/bid/99778"
        },
        {
          "name": "1038928",
          "tags": [
            "vdb-entry",
            "x_refsource_SECTRACK"
          ],
          "url": "http://www.securitytracker.com/id/1038928"
        },
        {
          "name": "RHSA-2017:2886",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2017:2886"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://www.oracle.com/technetwork/security-advisory/cpujul2017-3236622.html"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "secalert_us@oracle.com",
          "ID": "CVE-2017-3638",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "MySQL Server",
                      "version": {
                        "version_data": [
                          {
                            "version_affected": "=",
                            "version_value": "5.7.18 and earlier"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "Oracle Corporation"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Optimizer). Supported versions that are affected are 5.7.18 and earlier. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.0 Base Score 4.9 (Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H)."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server.  Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server."
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "99778",
              "refsource": "BID",
              "url": "http://www.securityfocus.com/bid/99778"
            },
            {
              "name": "1038928",
              "refsource": "SECTRACK",
              "url": "http://www.securitytracker.com/id/1038928"
            },
            {
              "name": "RHSA-2017:2886",
              "refsource": "REDHAT",
              "url": "https://access.redhat.com/errata/RHSA-2017:2886"
            },
            {
              "name": "http://www.oracle.com/technetwork/security-advisory/cpujul2017-3236622.html",
              "refsource": "CONFIRM",
              "url": "http://www.oracle.com/technetwork/security-advisory/cpujul2017-3236622.html"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "43595867-4340-4103-b7a2-9a5208d29a85",
    "assignerShortName": "oracle",
    "cveId": "CVE-2017-3638",
    "datePublished": "2017-08-08T15:00:00",
    "dateReserved": "2016-12-06T00:00:00",
    "dateUpdated": "2024-10-04T17:02:52.686Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

CVE-2017-3319 (GCVE-0-2017-3319)

Vulnerability from cvelistv5

Published

2017-01-27 22:01

Modified

2024-10-08 20:29

Severity ?

CWE

CVSS:3.0/AV:N/AC:H/PR:L/UI:N/S:U/C:L/I:N/A:N

Summary

Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: X Plugin). Supported versions that are affected are 5.7.16 and earlier. Difficult to exploit vulnerability allows low privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized read access to a subset of MySQL Server accessible data. CVSS v3.0 Base Score 3.1 (Confidentiality impacts).

References

URL

Tags

	https://security.gentoo.org/glsa/201702-17	vendor-advisory, x_refsource_GENTOO
	http://www.securitytracker.com/id/1037640	vdb-entry, x_refsource_SECTRACK
	https://access.redhat.com/errata/RHSA-2017:2886	vendor-advisory, x_refsource_REDHAT
	http://www.securityfocus.com/bid/95479	vdb-entry, x_refsource_BID
	http://www.oracle.com/technetwork/security-advisory/cpujan2017-2881727.html	x_refsource_CONFIRM

Impacted products

	Vendor	Product	Version
	Oracle	MySQL Server	Version: 5.7.16 and earlier

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-05T14:23:34.168Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "name": "GLSA-201702-17",
            "tags": [
              "vendor-advisory",
              "x_refsource_GENTOO",
              "x_transferred"
            ],
            "url": "https://security.gentoo.org/glsa/201702-17"
          },
          {
            "name": "1037640",
            "tags": [
              "vdb-entry",
              "x_refsource_SECTRACK",
              "x_transferred"
            ],
            "url": "http://www.securitytracker.com/id/1037640"
          },
          {
            "name": "RHSA-2017:2886",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2017:2886"
          },
          {
            "name": "95479",
            "tags": [
              "vdb-entry",
              "x_refsource_BID",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/bid/95479"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://www.oracle.com/technetwork/security-advisory/cpujan2017-2881727.html"
          }
        ],
        "title": "CVE Program Container"
      },
      {
        "metrics": [
          {
            "other": {
              "content": {
                "id": "CVE-2017-3319",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "partial"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2024-10-08T20:09:29.656461Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2024-10-08T20:29:20.975Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "MySQL Server",
          "vendor": "Oracle",
          "versions": [
            {
              "status": "affected",
              "version": "5.7.16 and earlier"
            }
          ]
        }
      ],
      "datePublic": "2017-01-17T00:00:00",
      "descriptions": [
        {
          "lang": "en",
          "value": "Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: X Plugin). Supported versions that are affected are 5.7.16 and earlier. Difficult to exploit vulnerability allows low privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized read access to a subset of MySQL Server accessible data. CVSS v3.0 Base Score 3.1 (Confidentiality impacts)."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "CVSS:3.0/AV:N/AC:H/PR:L/UI:N/S:U/C:L/I:N/A:N",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2017-12-07T10:57:01",
        "orgId": "43595867-4340-4103-b7a2-9a5208d29a85",
        "shortName": "oracle"
      },
      "references": [
        {
          "name": "GLSA-201702-17",
          "tags": [
            "vendor-advisory",
            "x_refsource_GENTOO"
          ],
          "url": "https://security.gentoo.org/glsa/201702-17"
        },
        {
          "name": "1037640",
          "tags": [
            "vdb-entry",
            "x_refsource_SECTRACK"
          ],
          "url": "http://www.securitytracker.com/id/1037640"
        },
        {
          "name": "RHSA-2017:2886",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2017:2886"
        },
        {
          "name": "95479",
          "tags": [
            "vdb-entry",
            "x_refsource_BID"
          ],
          "url": "http://www.securityfocus.com/bid/95479"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://www.oracle.com/technetwork/security-advisory/cpujan2017-2881727.html"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "secalert_us@oracle.com",
          "ID": "CVE-2017-3319",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "MySQL Server",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "5.7.16 and earlier"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "Oracle"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: X Plugin). Supported versions that are affected are 5.7.16 and earlier. Difficult to exploit vulnerability allows low privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized read access to a subset of MySQL Server accessible data. CVSS v3.0 Base Score 3.1 (Confidentiality impacts)."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "CVSS:3.0/AV:N/AC:H/PR:L/UI:N/S:U/C:L/I:N/A:N"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "GLSA-201702-17",
              "refsource": "GENTOO",
              "url": "https://security.gentoo.org/glsa/201702-17"
            },
            {
              "name": "1037640",
              "refsource": "SECTRACK",
              "url": "http://www.securitytracker.com/id/1037640"
            },
            {
              "name": "RHSA-2017:2886",
              "refsource": "REDHAT",
              "url": "https://access.redhat.com/errata/RHSA-2017:2886"
            },
            {
              "name": "95479",
              "refsource": "BID",
              "url": "http://www.securityfocus.com/bid/95479"
            },
            {
              "name": "http://www.oracle.com/technetwork/security-advisory/cpujan2017-2881727.html",
              "refsource": "CONFIRM",
              "url": "http://www.oracle.com/technetwork/security-advisory/cpujan2017-2881727.html"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "43595867-4340-4103-b7a2-9a5208d29a85",
    "assignerShortName": "oracle",
    "cveId": "CVE-2017-3319",
    "datePublished": "2017-01-27T22:01:00",
    "dateReserved": "2016-12-06T00:00:00",
    "dateUpdated": "2024-10-08T20:29:20.975Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

CVE-2017-3312 (GCVE-0-2017-3312)

Vulnerability from cvelistv5

Published

2017-01-27 22:01

Modified

2024-10-08 20:34

Severity ?

CWE

CVSS:3.0/AV:L/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:H

Summary

Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Packaging). Supported versions that are affected are 5.5.53 and earlier, 5.6.34 and earlier and 5.7.16 and earlier. Difficult to exploit vulnerability allows low privileged attacker with logon to the infrastructure where MySQL Server executes to compromise MySQL Server. Successful attacks require human interaction from a person other than the attacker. Successful attacks of this vulnerability can result in takeover of MySQL Server. CVSS v3.0 Base Score 6.7 (Confidentiality, Integrity and Availability impacts).

References

URL

Tags

	https://access.redhat.com/errata/RHSA-2017:2787	vendor-advisory, x_refsource_REDHAT
	https://security.gentoo.org/glsa/201702-17	vendor-advisory, x_refsource_GENTOO
	http://www.securityfocus.com/bid/95491	vdb-entry, x_refsource_BID
	https://access.redhat.com/errata/RHSA-2018:0574	vendor-advisory, x_refsource_REDHAT
	https://security.gentoo.org/glsa/201702-18	vendor-advisory, x_refsource_GENTOO
	http://www.securitytracker.com/id/1037640	vdb-entry, x_refsource_SECTRACK
	https://access.redhat.com/errata/RHSA-2018:0279	vendor-advisory, x_refsource_REDHAT
	http://www.debian.org/security/2017/dsa-3767	vendor-advisory, x_refsource_DEBIAN
	https://access.redhat.com/errata/RHSA-2017:2886	vendor-advisory, x_refsource_REDHAT
	http://www.oracle.com/technetwork/security-advisory/cpujan2017-2881727.html	x_refsource_CONFIRM
	http://www.debian.org/security/2017/dsa-3770	vendor-advisory, x_refsource_DEBIAN
	https://access.redhat.com/errata/RHSA-2017:2192	vendor-advisory, x_refsource_REDHAT

Impacted products

	Vendor	Product	Version
	Oracle	MySQL Server	Version: 5.5.53 and earlier Version: 5.6.34 and earlier Version: 5.7.16 and earlier

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-05T14:23:33.717Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "name": "RHSA-2017:2787",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2017:2787"
          },
          {
            "name": "GLSA-201702-17",
            "tags": [
              "vendor-advisory",
              "x_refsource_GENTOO",
              "x_transferred"
            ],
            "url": "https://security.gentoo.org/glsa/201702-17"
          },
          {
            "name": "95491",
            "tags": [
              "vdb-entry",
              "x_refsource_BID",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/bid/95491"
          },
          {
            "name": "RHSA-2018:0574",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2018:0574"
          },
          {
            "name": "GLSA-201702-18",
            "tags": [
              "vendor-advisory",
              "x_refsource_GENTOO",
              "x_transferred"
            ],
            "url": "https://security.gentoo.org/glsa/201702-18"
          },
          {
            "name": "1037640",
            "tags": [
              "vdb-entry",
              "x_refsource_SECTRACK",
              "x_transferred"
            ],
            "url": "http://www.securitytracker.com/id/1037640"
          },
          {
            "name": "RHSA-2018:0279",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2018:0279"
          },
          {
            "name": "DSA-3767",
            "tags": [
              "vendor-advisory",
              "x_refsource_DEBIAN",
              "x_transferred"
            ],
            "url": "http://www.debian.org/security/2017/dsa-3767"
          },
          {
            "name": "RHSA-2017:2886",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2017:2886"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://www.oracle.com/technetwork/security-advisory/cpujan2017-2881727.html"
          },
          {
            "name": "DSA-3770",
            "tags": [
              "vendor-advisory",
              "x_refsource_DEBIAN",
              "x_transferred"
            ],
            "url": "http://www.debian.org/security/2017/dsa-3770"
          },
          {
            "name": "RHSA-2017:2192",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2017:2192"
          }
        ],
        "title": "CVE Program Container"
      },
      {
        "metrics": [
          {
            "other": {
              "content": {
                "id": "CVE-2017-3312",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "total"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2024-10-08T20:06:01.608682Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2024-10-08T20:34:53.133Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "MySQL Server",
          "vendor": "Oracle",
          "versions": [
            {
              "status": "affected",
              "version": "5.5.53 and earlier"
            },
            {
              "status": "affected",
              "version": "5.6.34 and earlier"
            },
            {
              "status": "affected",
              "version": "5.7.16 and earlier"
            }
          ]
        }
      ],
      "datePublic": "2017-01-17T00:00:00",
      "descriptions": [
        {
          "lang": "en",
          "value": "Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Packaging). Supported versions that are affected are 5.5.53 and earlier, 5.6.34 and earlier and 5.7.16 and earlier. Difficult to exploit vulnerability allows low privileged attacker with logon to the infrastructure where MySQL Server executes to compromise MySQL Server. Successful attacks require human interaction from a person other than the attacker. Successful attacks of this vulnerability can result in takeover of MySQL Server. CVSS v3.0 Base Score 6.7 (Confidentiality, Integrity and Availability impacts)."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "CVSS:3.0/AV:L/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:H",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2018-03-22T09:57:01",
        "orgId": "43595867-4340-4103-b7a2-9a5208d29a85",
        "shortName": "oracle"
      },
      "references": [
        {
          "name": "RHSA-2017:2787",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2017:2787"
        },
        {
          "name": "GLSA-201702-17",
          "tags": [
            "vendor-advisory",
            "x_refsource_GENTOO"
          ],
          "url": "https://security.gentoo.org/glsa/201702-17"
        },
        {
          "name": "95491",
          "tags": [
            "vdb-entry",
            "x_refsource_BID"
          ],
          "url": "http://www.securityfocus.com/bid/95491"
        },
        {
          "name": "RHSA-2018:0574",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2018:0574"
        },
        {
          "name": "GLSA-201702-18",
          "tags": [
            "vendor-advisory",
            "x_refsource_GENTOO"
          ],
          "url": "https://security.gentoo.org/glsa/201702-18"
        },
        {
          "name": "1037640",
          "tags": [
            "vdb-entry",
            "x_refsource_SECTRACK"
          ],
          "url": "http://www.securitytracker.com/id/1037640"
        },
        {
          "name": "RHSA-2018:0279",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2018:0279"
        },
        {
          "name": "DSA-3767",
          "tags": [
            "vendor-advisory",
            "x_refsource_DEBIAN"
          ],
          "url": "http://www.debian.org/security/2017/dsa-3767"
        },
        {
          "name": "RHSA-2017:2886",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2017:2886"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://www.oracle.com/technetwork/security-advisory/cpujan2017-2881727.html"
        },
        {
          "name": "DSA-3770",
          "tags": [
            "vendor-advisory",
            "x_refsource_DEBIAN"
          ],
          "url": "http://www.debian.org/security/2017/dsa-3770"
        },
        {
          "name": "RHSA-2017:2192",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2017:2192"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "secalert_us@oracle.com",
          "ID": "CVE-2017-3312",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "MySQL Server",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "5.5.53 and earlier"
                          },
                          {
                            "version_value": "5.6.34 and earlier"
                          },
                          {
                            "version_value": "5.7.16 and earlier"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "Oracle"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Packaging). Supported versions that are affected are 5.5.53 and earlier, 5.6.34 and earlier and 5.7.16 and earlier. Difficult to exploit vulnerability allows low privileged attacker with logon to the infrastructure where MySQL Server executes to compromise MySQL Server. Successful attacks require human interaction from a person other than the attacker. Successful attacks of this vulnerability can result in takeover of MySQL Server. CVSS v3.0 Base Score 6.7 (Confidentiality, Integrity and Availability impacts)."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "CVSS:3.0/AV:L/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:H"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "RHSA-2017:2787",
              "refsource": "REDHAT",
              "url": "https://access.redhat.com/errata/RHSA-2017:2787"
            },
            {
              "name": "GLSA-201702-17",
              "refsource": "GENTOO",
              "url": "https://security.gentoo.org/glsa/201702-17"
            },
            {
              "name": "95491",
              "refsource": "BID",
              "url": "http://www.securityfocus.com/bid/95491"
            },
            {
              "name": "RHSA-2018:0574",
              "refsource": "REDHAT",
              "url": "https://access.redhat.com/errata/RHSA-2018:0574"
            },
            {
              "name": "GLSA-201702-18",
              "refsource": "GENTOO",
              "url": "https://security.gentoo.org/glsa/201702-18"
            },
            {
              "name": "1037640",
              "refsource": "SECTRACK",
              "url": "http://www.securitytracker.com/id/1037640"
            },
            {
              "name": "RHSA-2018:0279",
              "refsource": "REDHAT",
              "url": "https://access.redhat.com/errata/RHSA-2018:0279"
            },
            {
              "name": "DSA-3767",
              "refsource": "DEBIAN",
              "url": "http://www.debian.org/security/2017/dsa-3767"
            },
            {
              "name": "RHSA-2017:2886",
              "refsource": "REDHAT",
              "url": "https://access.redhat.com/errata/RHSA-2017:2886"
            },
            {
              "name": "http://www.oracle.com/technetwork/security-advisory/cpujan2017-2881727.html",
              "refsource": "CONFIRM",
              "url": "http://www.oracle.com/technetwork/security-advisory/cpujan2017-2881727.html"
            },
            {
              "name": "DSA-3770",
              "refsource": "DEBIAN",
              "url": "http://www.debian.org/security/2017/dsa-3770"
            },
            {
              "name": "RHSA-2017:2192",
              "refsource": "REDHAT",
              "url": "https://access.redhat.com/errata/RHSA-2017:2192"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "43595867-4340-4103-b7a2-9a5208d29a85",
    "assignerShortName": "oracle",
    "cveId": "CVE-2017-3312",
    "datePublished": "2017-01-27T22:01:00",
    "dateReserved": "2016-12-06T00:00:00",
    "dateUpdated": "2024-10-08T20:34:53.133Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

CVE-2016-5483 (GCVE-0-2016-5483)

Vulnerability from cvelistv5

DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2017-3600. Reason: This candidate is a reservation duplicate of CVE-2017-3600. Notes: All CVE users should reference CVE-2017-3600 instead of this candidate. All references and descriptions in this candidate have been removed to prevent accidental usage

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "cna": {
      "providerMetadata": {
        "dateUpdated": "2017-04-25T18:57:01",
        "orgId": "43595867-4340-4103-b7a2-9a5208d29a85",
        "shortName": "oracle"
      },
      "rejectedReasons": [
        {
          "lang": "en",
          "value": "DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: CVE-2017-3600.  Reason: This candidate is a reservation duplicate of CVE-2017-3600.  Notes: All CVE users should reference CVE-2017-3600 instead of this candidate. All references and descriptions in this candidate have been removed to prevent accidental usage"
        }
      ]
    }
  },
  "cveMetadata": {
    "assignerOrgId": "43595867-4340-4103-b7a2-9a5208d29a85",
    "assignerShortName": "oracle",
    "cveId": "CVE-2016-5483",
    "datePublished": "2017-04-25T19:00:00",
    "dateRejected": "2017-04-25T18:57:01",
    "dateReserved": "2016-06-16T00:00:00",
    "dateUpdated": "2017-04-25T18:57:01",
    "state": "REJECTED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.0"
}

CVE-2017-3308 (GCVE-0-2017-3308)

Vulnerability from cvelistv5

Published

2017-04-24 19:00

Modified

2024-10-07 16:21

Severity ?

CWE

Easily "exploitable" vulnerability allows low privileged attacker with network access via multiple protocols to compromise MySQL Server. While the vulnerability is in MySQL Server, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server.

Summary

Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: DML). Supported versions that are affected are 5.5.54 and earlier, 5.6.35 and earlier and 5.7.17 and earlier. Easily "exploitable" vulnerability allows low privileged attacker with network access via multiple protocols to compromise MySQL Server. While the vulnerability is in MySQL Server, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.0 Base Score 7.7 (Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H).

References

URL

Tags

	https://access.redhat.com/errata/RHSA-2017:2787	vendor-advisory, x_refsource_REDHAT
	http://www.securitytracker.com/id/1038287	vdb-entry, x_refsource_SECTRACK
	http://www.oracle.com/technetwork/security-advisory/cpuapr2017-3236618.html	x_refsource_CONFIRM
	https://access.redhat.com/errata/RHSA-2018:0574	vendor-advisory, x_refsource_REDHAT
	http://www.debian.org/security/2017/dsa-3944	vendor-advisory, x_refsource_DEBIAN
	https://access.redhat.com/errata/RHSA-2018:0279	vendor-advisory, x_refsource_REDHAT
	http://www.securityfocus.com/bid/97725	vdb-entry, x_refsource_BID
	http://www.debian.org/security/2017/dsa-3834	vendor-advisory, x_refsource_DEBIAN
	https://access.redhat.com/errata/RHSA-2017:2886	vendor-advisory, x_refsource_REDHAT
	https://access.redhat.com/errata/RHSA-2017:2192	vendor-advisory, x_refsource_REDHAT

Impacted products

	Vendor	Product	Version
	Oracle Corporation	MySQL Server	Version: 5.5.54 and earlier Version: 5.6.35 and earlier Version: 5.7.17 and earlier

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-05T14:23:33.697Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "name": "RHSA-2017:2787",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2017:2787"
          },
          {
            "name": "1038287",
            "tags": [
              "vdb-entry",
              "x_refsource_SECTRACK",
              "x_transferred"
            ],
            "url": "http://www.securitytracker.com/id/1038287"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://www.oracle.com/technetwork/security-advisory/cpuapr2017-3236618.html"
          },
          {
            "name": "RHSA-2018:0574",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2018:0574"
          },
          {
            "name": "DSA-3944",
            "tags": [
              "vendor-advisory",
              "x_refsource_DEBIAN",
              "x_transferred"
            ],
            "url": "http://www.debian.org/security/2017/dsa-3944"
          },
          {
            "name": "RHSA-2018:0279",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2018:0279"
          },
          {
            "name": "97725",
            "tags": [
              "vdb-entry",
              "x_refsource_BID",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/bid/97725"
          },
          {
            "name": "DSA-3834",
            "tags": [
              "vendor-advisory",
              "x_refsource_DEBIAN",
              "x_transferred"
            ],
            "url": "http://www.debian.org/security/2017/dsa-3834"
          },
          {
            "name": "RHSA-2017:2886",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2017:2886"
          },
          {
            "name": "RHSA-2017:2192",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2017:2192"
          }
        ],
        "title": "CVE Program Container"
      },
      {
        "metrics": [
          {
            "other": {
              "content": {
                "id": "CVE-2017-3308",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "partial"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2024-10-07T15:46:18.576498Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2024-10-07T16:21:57.126Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "MySQL Server",
          "vendor": "Oracle Corporation",
          "versions": [
            {
              "status": "affected",
              "version": "5.5.54 and earlier"
            },
            {
              "status": "affected",
              "version": "5.6.35 and earlier"
            },
            {
              "status": "affected",
              "version": "5.7.17 and earlier"
            }
          ]
        }
      ],
      "datePublic": "2017-04-18T00:00:00",
      "descriptions": [
        {
          "lang": "en",
          "value": "Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: DML). Supported versions that are affected are 5.5.54 and earlier, 5.6.35 and earlier and 5.7.17 and earlier. Easily \"exploitable\" vulnerability allows low privileged attacker with network access via multiple protocols to compromise MySQL Server. While the vulnerability is in MySQL Server, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.0 Base Score 7.7 (Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H)."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "Easily \"exploitable\" vulnerability allows low privileged attacker with network access via multiple protocols to compromise MySQL Server.  While the vulnerability is in MySQL Server, attacks may significantly impact additional products.  Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server.",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2018-03-22T09:57:01",
        "orgId": "43595867-4340-4103-b7a2-9a5208d29a85",
        "shortName": "oracle"
      },
      "references": [
        {
          "name": "RHSA-2017:2787",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2017:2787"
        },
        {
          "name": "1038287",
          "tags": [
            "vdb-entry",
            "x_refsource_SECTRACK"
          ],
          "url": "http://www.securitytracker.com/id/1038287"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://www.oracle.com/technetwork/security-advisory/cpuapr2017-3236618.html"
        },
        {
          "name": "RHSA-2018:0574",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2018:0574"
        },
        {
          "name": "DSA-3944",
          "tags": [
            "vendor-advisory",
            "x_refsource_DEBIAN"
          ],
          "url": "http://www.debian.org/security/2017/dsa-3944"
        },
        {
          "name": "RHSA-2018:0279",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2018:0279"
        },
        {
          "name": "97725",
          "tags": [
            "vdb-entry",
            "x_refsource_BID"
          ],
          "url": "http://www.securityfocus.com/bid/97725"
        },
        {
          "name": "DSA-3834",
          "tags": [
            "vendor-advisory",
            "x_refsource_DEBIAN"
          ],
          "url": "http://www.debian.org/security/2017/dsa-3834"
        },
        {
          "name": "RHSA-2017:2886",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2017:2886"
        },
        {
          "name": "RHSA-2017:2192",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2017:2192"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "secalert_us@oracle.com",
          "ID": "CVE-2017-3308",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "MySQL Server",
                      "version": {
                        "version_data": [
                          {
                            "version_affected": "=",
                            "version_value": "5.5.54 and earlier"
                          },
                          {
                            "version_affected": "=",
                            "version_value": "5.6.35 and earlier"
                          },
                          {
                            "version_affected": "=",
                            "version_value": "5.7.17 and earlier"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "Oracle Corporation"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: DML). Supported versions that are affected are 5.5.54 and earlier, 5.6.35 and earlier and 5.7.17 and earlier. Easily \"exploitable\" vulnerability allows low privileged attacker with network access via multiple protocols to compromise MySQL Server. While the vulnerability is in MySQL Server, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.0 Base Score 7.7 (Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H)."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "Easily \"exploitable\" vulnerability allows low privileged attacker with network access via multiple protocols to compromise MySQL Server.  While the vulnerability is in MySQL Server, attacks may significantly impact additional products.  Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server."
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "RHSA-2017:2787",
              "refsource": "REDHAT",
              "url": "https://access.redhat.com/errata/RHSA-2017:2787"
            },
            {
              "name": "1038287",
              "refsource": "SECTRACK",
              "url": "http://www.securitytracker.com/id/1038287"
            },
            {
              "name": "http://www.oracle.com/technetwork/security-advisory/cpuapr2017-3236618.html",
              "refsource": "CONFIRM",
              "url": "http://www.oracle.com/technetwork/security-advisory/cpuapr2017-3236618.html"
            },
            {
              "name": "RHSA-2018:0574",
              "refsource": "REDHAT",
              "url": "https://access.redhat.com/errata/RHSA-2018:0574"
            },
            {
              "name": "DSA-3944",
              "refsource": "DEBIAN",
              "url": "http://www.debian.org/security/2017/dsa-3944"
            },
            {
              "name": "RHSA-2018:0279",
              "refsource": "REDHAT",
              "url": "https://access.redhat.com/errata/RHSA-2018:0279"
            },
            {
              "name": "97725",
              "refsource": "BID",
              "url": "http://www.securityfocus.com/bid/97725"
            },
            {
              "name": "DSA-3834",
              "refsource": "DEBIAN",
              "url": "http://www.debian.org/security/2017/dsa-3834"
            },
            {
              "name": "RHSA-2017:2886",
              "refsource": "REDHAT",
              "url": "https://access.redhat.com/errata/RHSA-2017:2886"
            },
            {
              "name": "RHSA-2017:2192",
              "refsource": "REDHAT",
              "url": "https://access.redhat.com/errata/RHSA-2017:2192"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "43595867-4340-4103-b7a2-9a5208d29a85",
    "assignerShortName": "oracle",
    "cveId": "CVE-2017-3308",
    "datePublished": "2017-04-24T19:00:00",
    "dateReserved": "2016-12-06T00:00:00",
    "dateUpdated": "2024-10-07T16:21:57.126Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

CVE-2017-3467 (GCVE-0-2017-3467)

Vulnerability from cvelistv5

Published

2017-04-24 19:00

Modified

2024-10-07 16:18

Severity ?

CWE

Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized read access to a subset of MySQL Server accessible data.

Summary

Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: C API). Supported versions that are affected are 5.7.17 and earlier. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized read access to a subset of MySQL Server accessible data. CVSS 3.0 Base Score 3.7 (Confidentiality impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N).

References

URL

Tags

	http://www.securitytracker.com/id/1038287	vdb-entry, x_refsource_SECTRACK
	http://www.securityfocus.com/bid/97825	vdb-entry, x_refsource_BID
	http://www.oracle.com/technetwork/security-advisory/cpuapr2017-3236618.html	x_refsource_CONFIRM
	https://access.redhat.com/errata/RHSA-2017:2886	vendor-advisory, x_refsource_REDHAT

Impacted products

	Vendor	Product	Version
	Oracle Corporation	MySQL Server	Version: 5.7.17 and earlier

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-05T14:30:57.370Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "name": "1038287",
            "tags": [
              "vdb-entry",
              "x_refsource_SECTRACK",
              "x_transferred"
            ],
            "url": "http://www.securitytracker.com/id/1038287"
          },
          {
            "name": "97825",
            "tags": [
              "vdb-entry",
              "x_refsource_BID",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/bid/97825"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://www.oracle.com/technetwork/security-advisory/cpuapr2017-3236618.html"
          },
          {
            "name": "RHSA-2017:2886",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2017:2886"
          }
        ],
        "title": "CVE Program Container"
      },
      {
        "metrics": [
          {
            "other": {
              "content": {
                "id": "CVE-2017-3467",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "partial"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2024-10-07T15:45:53.625128Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2024-10-07T16:18:39.866Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "MySQL Server",
          "vendor": "Oracle Corporation",
          "versions": [
            {
              "status": "affected",
              "version": "5.7.17 and earlier"
            }
          ]
        }
      ],
      "datePublic": "2017-04-18T00:00:00",
      "descriptions": [
        {
          "lang": "en",
          "value": "Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: C API). Supported versions that are affected are 5.7.17 and earlier. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized read access to a subset of MySQL Server accessible data. CVSS 3.0 Base Score 3.7 (Confidentiality impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N)."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise MySQL Server.  Successful attacks of this vulnerability can result in  unauthorized read access to a subset of MySQL Server accessible data.",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2017-12-07T10:57:01",
        "orgId": "43595867-4340-4103-b7a2-9a5208d29a85",
        "shortName": "oracle"
      },
      "references": [
        {
          "name": "1038287",
          "tags": [
            "vdb-entry",
            "x_refsource_SECTRACK"
          ],
          "url": "http://www.securitytracker.com/id/1038287"
        },
        {
          "name": "97825",
          "tags": [
            "vdb-entry",
            "x_refsource_BID"
          ],
          "url": "http://www.securityfocus.com/bid/97825"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://www.oracle.com/technetwork/security-advisory/cpuapr2017-3236618.html"
        },
        {
          "name": "RHSA-2017:2886",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2017:2886"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "secalert_us@oracle.com",
          "ID": "CVE-2017-3467",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "MySQL Server",
                      "version": {
                        "version_data": [
                          {
                            "version_affected": "=",
                            "version_value": "5.7.17 and earlier"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "Oracle Corporation"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: C API). Supported versions that are affected are 5.7.17 and earlier. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized read access to a subset of MySQL Server accessible data. CVSS 3.0 Base Score 3.7 (Confidentiality impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N)."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise MySQL Server.  Successful attacks of this vulnerability can result in  unauthorized read access to a subset of MySQL Server accessible data."
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "1038287",
              "refsource": "SECTRACK",
              "url": "http://www.securitytracker.com/id/1038287"
            },
            {
              "name": "97825",
              "refsource": "BID",
              "url": "http://www.securityfocus.com/bid/97825"
            },
            {
              "name": "http://www.oracle.com/technetwork/security-advisory/cpuapr2017-3236618.html",
              "refsource": "CONFIRM",
              "url": "http://www.oracle.com/technetwork/security-advisory/cpuapr2017-3236618.html"
            },
            {
              "name": "RHSA-2017:2886",
              "refsource": "REDHAT",
              "url": "https://access.redhat.com/errata/RHSA-2017:2886"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "43595867-4340-4103-b7a2-9a5208d29a85",
    "assignerShortName": "oracle",
    "cveId": "CVE-2017-3467",
    "datePublished": "2017-04-24T19:00:00",
    "dateReserved": "2016-12-06T00:00:00",
    "dateUpdated": "2024-10-07T16:18:39.866Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

CVE-2017-3633 (GCVE-0-2017-3633)

Vulnerability from cvelistv5

Published

2017-08-08 15:00

Modified

2024-10-04 17:03

Severity ?

CWE

Difficult to exploit vulnerability allows unauthenticated attacker with network access via Memcached to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server as well as unauthorized update, insert or delete access to some of MySQL Server accessible data.

Summary

Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Memcached). Supported versions that are affected are 5.6.36 and earlier and 5.7.18 and earlier. Difficult to exploit vulnerability allows unauthenticated attacker with network access via Memcached to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server as well as unauthorized update, insert or delete access to some of MySQL Server accessible data. CVSS 3.0 Base Score 6.5 (Integrity and Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:H).

References

URL

Tags

	https://access.redhat.com/errata/RHSA-2017:2787	vendor-advisory, x_refsource_REDHAT
	http://www.oracle.com/technetwork/security-advisory/cpujul2018-4258247.html	x_refsource_CONFIRM
	http://www.securitytracker.com/id/1038928	vdb-entry, x_refsource_SECTRACK
	http://www.securityfocus.com/bid/99722	vdb-entry, x_refsource_BID
	https://access.redhat.com/errata/RHSA-2017:2886	vendor-advisory, x_refsource_REDHAT
	http://www.oracle.com/technetwork/security-advisory/cpujul2017-3236622.html	x_refsource_CONFIRM

Impacted products

Vendor

Product

Version

Oracle Corporation

MySQL Server

Version: 5.6.36 and earlier
Version: 5.7.18 and earlier

Oracle Corporation

Communications Policy Management

Version: 12.x

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-05T14:30:58.974Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "name": "RHSA-2017:2787",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2017:2787"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://www.oracle.com/technetwork/security-advisory/cpujul2018-4258247.html"
          },
          {
            "name": "1038928",
            "tags": [
              "vdb-entry",
              "x_refsource_SECTRACK",
              "x_transferred"
            ],
            "url": "http://www.securitytracker.com/id/1038928"
          },
          {
            "name": "99722",
            "tags": [
              "vdb-entry",
              "x_refsource_BID",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/bid/99722"
          },
          {
            "name": "RHSA-2017:2886",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2017:2886"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://www.oracle.com/technetwork/security-advisory/cpujul2017-3236622.html"
          }
        ],
        "title": "CVE Program Container"
      },
      {
        "metrics": [
          {
            "other": {
              "content": {
                "id": "CVE-2017-3633",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "partial"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2024-10-04T15:48:30.455147Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2024-10-04T17:03:24.008Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "MySQL Server",
          "vendor": "Oracle Corporation",
          "versions": [
            {
              "status": "affected",
              "version": "5.6.36 and earlier"
            },
            {
              "status": "affected",
              "version": "5.7.18 and earlier"
            }
          ]
        },
        {
          "product": "Communications Policy Management",
          "vendor": "Oracle Corporation",
          "versions": [
            {
              "status": "affected",
              "version": "12.x"
            }
          ]
        }
      ],
      "datePublic": "2017-07-18T00:00:00",
      "descriptions": [
        {
          "lang": "en",
          "value": "Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Memcached). Supported versions that are affected are 5.6.36 and earlier and 5.7.18 and earlier. Difficult to exploit vulnerability allows unauthenticated attacker with network access via Memcached to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server as well as unauthorized update, insert or delete access to some of MySQL Server accessible data. CVSS 3.0 Base Score 6.5 (Integrity and Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:H)."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "Difficult to exploit vulnerability allows unauthenticated attacker with network access via Memcached to compromise MySQL Server.  Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server as well as  unauthorized update, insert or delete access to some of MySQL Server accessible data.",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2018-07-18T12:57:01",
        "orgId": "43595867-4340-4103-b7a2-9a5208d29a85",
        "shortName": "oracle"
      },
      "references": [
        {
          "name": "RHSA-2017:2787",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2017:2787"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://www.oracle.com/technetwork/security-advisory/cpujul2018-4258247.html"
        },
        {
          "name": "1038928",
          "tags": [
            "vdb-entry",
            "x_refsource_SECTRACK"
          ],
          "url": "http://www.securitytracker.com/id/1038928"
        },
        {
          "name": "99722",
          "tags": [
            "vdb-entry",
            "x_refsource_BID"
          ],
          "url": "http://www.securityfocus.com/bid/99722"
        },
        {
          "name": "RHSA-2017:2886",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2017:2886"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://www.oracle.com/technetwork/security-advisory/cpujul2017-3236622.html"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "secalert_us@oracle.com",
          "ID": "CVE-2017-3633",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "MySQL Server",
                      "version": {
                        "version_data": [
                          {
                            "version_affected": "=",
                            "version_value": "5.6.36 and earlier"
                          },
                          {
                            "version_affected": "=",
                            "version_value": "5.7.18 and earlier"
                          }
                        ]
                      }
                    },
                    {
                      "product_name": "Communications Policy Management",
                      "version": {
                        "version_data": [
                          {
                            "version_affected": "=",
                            "version_value": "12.x"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "Oracle Corporation"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Memcached). Supported versions that are affected are 5.6.36 and earlier and 5.7.18 and earlier. Difficult to exploit vulnerability allows unauthenticated attacker with network access via Memcached to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server as well as unauthorized update, insert or delete access to some of MySQL Server accessible data. CVSS 3.0 Base Score 6.5 (Integrity and Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:H)."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "Difficult to exploit vulnerability allows unauthenticated attacker with network access via Memcached to compromise MySQL Server.  Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server as well as  unauthorized update, insert or delete access to some of MySQL Server accessible data."
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "RHSA-2017:2787",
              "refsource": "REDHAT",
              "url": "https://access.redhat.com/errata/RHSA-2017:2787"
            },
            {
              "name": "http://www.oracle.com/technetwork/security-advisory/cpujul2018-4258247.html",
              "refsource": "CONFIRM",
              "url": "http://www.oracle.com/technetwork/security-advisory/cpujul2018-4258247.html"
            },
            {
              "name": "1038928",
              "refsource": "SECTRACK",
              "url": "http://www.securitytracker.com/id/1038928"
            },
            {
              "name": "99722",
              "refsource": "BID",
              "url": "http://www.securityfocus.com/bid/99722"
            },
            {
              "name": "RHSA-2017:2886",
              "refsource": "REDHAT",
              "url": "https://access.redhat.com/errata/RHSA-2017:2886"
            },
            {
              "name": "http://www.oracle.com/technetwork/security-advisory/cpujul2017-3236622.html",
              "refsource": "CONFIRM",
              "url": "http://www.oracle.com/technetwork/security-advisory/cpujul2017-3236622.html"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "43595867-4340-4103-b7a2-9a5208d29a85",
    "assignerShortName": "oracle",
    "cveId": "CVE-2017-3633",
    "datePublished": "2017-08-08T15:00:00",
    "dateReserved": "2016-12-06T00:00:00",
    "dateUpdated": "2024-10-04T17:03:24.008Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

CVE-2017-3651 (GCVE-0-2017-3651)

Vulnerability from cvelistv5

Published

2017-08-08 15:00

Modified

2024-10-04 17:01

Severity ?

CWE

Easily exploitable vulnerability allows low privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of MySQL Server accessible data.

Summary

Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Client mysqldump). Supported versions that are affected are 5.5.56 and earlier, 5.6.36 and earlier and 5.7.18 and earlier. Easily exploitable vulnerability allows low privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of MySQL Server accessible data. CVSS 3.0 Base Score 4.3 (Integrity impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N).

References

URL

Tags

	https://access.redhat.com/errata/RHSA-2017:2787	vendor-advisory, x_refsource_REDHAT
	https://access.redhat.com/errata/RHSA-2018:2729	vendor-advisory, x_refsource_REDHAT
	http://www.securitytracker.com/id/1038928	vdb-entry, x_refsource_SECTRACK
	http://www.securityfocus.com/bid/99802	vdb-entry, x_refsource_BID
	http://rhn.redhat.com/errata/RHSA-2016-2927.html	vendor-advisory, x_refsource_REDHAT
	https://access.redhat.com/errata/RHSA-2018:2439	vendor-advisory, x_refsource_REDHAT
	http://www.debian.org/security/2017/dsa-3922	vendor-advisory, x_refsource_DEBIAN
	https://access.redhat.com/errata/RHSA-2017:2886	vendor-advisory, x_refsource_REDHAT
	http://www.oracle.com/technetwork/security-advisory/cpujul2017-3236622.html	x_refsource_CONFIRM
	http://rhn.redhat.com/errata/RHSA-2016-2928.html	vendor-advisory, x_refsource_REDHAT
	https://access.redhat.com/errata/RHSA-2017:2192	vendor-advisory, x_refsource_REDHAT

Impacted products

	Vendor	Product	Version
	Oracle Corporation	MySQL Server	Version: 5.5.56 and earlier Version: 5.6.36 and earlier Version: 5.7.18 and earlier

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-05T14:39:40.702Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "name": "RHSA-2017:2787",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2017:2787"
          },
          {
            "name": "RHSA-2018:2729",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2018:2729"
          },
          {
            "name": "1038928",
            "tags": [
              "vdb-entry",
              "x_refsource_SECTRACK",
              "x_transferred"
            ],
            "url": "http://www.securitytracker.com/id/1038928"
          },
          {
            "name": "99802",
            "tags": [
              "vdb-entry",
              "x_refsource_BID",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/bid/99802"
          },
          {
            "name": "RHSA-2016:2927",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://rhn.redhat.com/errata/RHSA-2016-2927.html"
          },
          {
            "name": "RHSA-2018:2439",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2018:2439"
          },
          {
            "name": "DSA-3922",
            "tags": [
              "vendor-advisory",
              "x_refsource_DEBIAN",
              "x_transferred"
            ],
            "url": "http://www.debian.org/security/2017/dsa-3922"
          },
          {
            "name": "RHSA-2017:2886",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2017:2886"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://www.oracle.com/technetwork/security-advisory/cpujul2017-3236622.html"
          },
          {
            "name": "RHSA-2016:2928",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://rhn.redhat.com/errata/RHSA-2016-2928.html"
          },
          {
            "name": "RHSA-2017:2192",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2017:2192"
          }
        ],
        "title": "CVE Program Container"
      },
      {
        "metrics": [
          {
            "other": {
              "content": {
                "id": "CVE-2017-3651",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "partial"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2024-10-04T15:47:44.475749Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2024-10-04T17:01:18.393Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "MySQL Server",
          "vendor": "Oracle Corporation",
          "versions": [
            {
              "status": "affected",
              "version": "5.5.56 and earlier"
            },
            {
              "status": "affected",
              "version": "5.6.36 and earlier"
            },
            {
              "status": "affected",
              "version": "5.7.18 and earlier"
            }
          ]
        }
      ],
      "datePublic": "2017-07-18T00:00:00",
      "descriptions": [
        {
          "lang": "en",
          "value": "Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Client mysqldump). Supported versions that are affected are 5.5.56 and earlier, 5.6.36 and earlier and 5.7.18 and earlier. Easily exploitable vulnerability allows low privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of MySQL Server accessible data. CVSS 3.0 Base Score 4.3 (Integrity impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N)."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "Easily exploitable vulnerability allows low privileged attacker with network access via multiple protocols to compromise MySQL Server.  Successful attacks of this vulnerability can result in  unauthorized update, insert or delete access to some of MySQL Server accessible data.",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2018-09-21T09:57:01",
        "orgId": "43595867-4340-4103-b7a2-9a5208d29a85",
        "shortName": "oracle"
      },
      "references": [
        {
          "name": "RHSA-2017:2787",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2017:2787"
        },
        {
          "name": "RHSA-2018:2729",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2018:2729"
        },
        {
          "name": "1038928",
          "tags": [
            "vdb-entry",
            "x_refsource_SECTRACK"
          ],
          "url": "http://www.securitytracker.com/id/1038928"
        },
        {
          "name": "99802",
          "tags": [
            "vdb-entry",
            "x_refsource_BID"
          ],
          "url": "http://www.securityfocus.com/bid/99802"
        },
        {
          "name": "RHSA-2016:2927",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://rhn.redhat.com/errata/RHSA-2016-2927.html"
        },
        {
          "name": "RHSA-2018:2439",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2018:2439"
        },
        {
          "name": "DSA-3922",
          "tags": [
            "vendor-advisory",
            "x_refsource_DEBIAN"
          ],
          "url": "http://www.debian.org/security/2017/dsa-3922"
        },
        {
          "name": "RHSA-2017:2886",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2017:2886"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://www.oracle.com/technetwork/security-advisory/cpujul2017-3236622.html"
        },
        {
          "name": "RHSA-2016:2928",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://rhn.redhat.com/errata/RHSA-2016-2928.html"
        },
        {
          "name": "RHSA-2017:2192",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2017:2192"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "secalert_us@oracle.com",
          "ID": "CVE-2017-3651",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "MySQL Server",
                      "version": {
                        "version_data": [
                          {
                            "version_affected": "=",
                            "version_value": "5.5.56 and earlier"
                          },
                          {
                            "version_affected": "=",
                            "version_value": "5.6.36 and earlier"
                          },
                          {
                            "version_affected": "=",
                            "version_value": "5.7.18 and earlier"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "Oracle Corporation"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Client mysqldump). Supported versions that are affected are 5.5.56 and earlier, 5.6.36 and earlier and 5.7.18 and earlier. Easily exploitable vulnerability allows low privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of MySQL Server accessible data. CVSS 3.0 Base Score 4.3 (Integrity impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N)."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "Easily exploitable vulnerability allows low privileged attacker with network access via multiple protocols to compromise MySQL Server.  Successful attacks of this vulnerability can result in  unauthorized update, insert or delete access to some of MySQL Server accessible data."
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "RHSA-2017:2787",
              "refsource": "REDHAT",
              "url": "https://access.redhat.com/errata/RHSA-2017:2787"
            },
            {
              "name": "RHSA-2018:2729",
              "refsource": "REDHAT",
              "url": "https://access.redhat.com/errata/RHSA-2018:2729"
            },
            {
              "name": "1038928",
              "refsource": "SECTRACK",
              "url": "http://www.securitytracker.com/id/1038928"
            },
            {
              "name": "99802",
              "refsource": "BID",
              "url": "http://www.securityfocus.com/bid/99802"
            },
            {
              "name": "RHSA-2016:2927",
              "refsource": "REDHAT",
              "url": "http://rhn.redhat.com/errata/RHSA-2016-2927.html"
            },
            {
              "name": "RHSA-2018:2439",
              "refsource": "REDHAT",
              "url": "https://access.redhat.com/errata/RHSA-2018:2439"
            },
            {
              "name": "DSA-3922",
              "refsource": "DEBIAN",
              "url": "http://www.debian.org/security/2017/dsa-3922"
            },
            {
              "name": "RHSA-2017:2886",
              "refsource": "REDHAT",
              "url": "https://access.redhat.com/errata/RHSA-2017:2886"
            },
            {
              "name": "http://www.oracle.com/technetwork/security-advisory/cpujul2017-3236622.html",
              "refsource": "CONFIRM",
              "url": "http://www.oracle.com/technetwork/security-advisory/cpujul2017-3236622.html"
            },
            {
              "name": "RHSA-2016:2928",
              "refsource": "REDHAT",
              "url": "http://rhn.redhat.com/errata/RHSA-2016-2928.html"
            },
            {
              "name": "RHSA-2017:2192",
              "refsource": "REDHAT",
              "url": "https://access.redhat.com/errata/RHSA-2017:2192"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "43595867-4340-4103-b7a2-9a5208d29a85",
    "assignerShortName": "oracle",
    "cveId": "CVE-2017-3651",
    "datePublished": "2017-08-08T15:00:00",
    "dateReserved": "2016-12-06T00:00:00",
    "dateUpdated": "2024-10-04T17:01:18.393Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

CVE-2017-3600 (GCVE-0-2017-3600)

Vulnerability from cvelistv5

Published

2017-04-24 19:00

Modified

2024-10-04 19:18

Severity ?

CWE

Difficult to exploit vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in takeover of MySQL Server.

Summary

Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Client mysqldump). Supported versions that are affected are 5.5.54 and earlier, 5.6.35 and earlier and 5.7.17 and earlier. Difficult to exploit vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in takeover of MySQL Server. Note: CVE-2017-3600 is equivalent to CVE-2016-5483. CVSS 3.0 Base Score 6.6 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H).

References

URL

Tags

	https://access.redhat.com/errata/RHSA-2017:2787	vendor-advisory, x_refsource_REDHAT
	http://www.securitytracker.com/id/1038287	vdb-entry, x_refsource_SECTRACK
	http://www.oracle.com/technetwork/security-advisory/cpuapr2017-3236618.html	x_refsource_CONFIRM
	http://rhn.redhat.com/errata/RHSA-2016-2927.html	vendor-advisory, x_refsource_REDHAT
	http://www.debian.org/security/2017/dsa-3834	vendor-advisory, x_refsource_DEBIAN
	https://access.redhat.com/errata/RHSA-2017:2886	vendor-advisory, x_refsource_REDHAT
	http://www.securityfocus.com/bid/97765	vdb-entry, x_refsource_BID
	http://rhn.redhat.com/errata/RHSA-2016-2928.html	vendor-advisory, x_refsource_REDHAT
	https://access.redhat.com/errata/RHSA-2017:2192	vendor-advisory, x_refsource_REDHAT

Impacted products

	Vendor	Product	Version
	Oracle Corporation	MySQL Server	Version: 5.5.54 and earlier Version: 5.6.35 and earlier Version: 5.7.17 and earlier

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-05T14:30:58.630Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "name": "RHSA-2017:2787",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2017:2787"
          },
          {
            "name": "1038287",
            "tags": [
              "vdb-entry",
              "x_refsource_SECTRACK",
              "x_transferred"
            ],
            "url": "http://www.securitytracker.com/id/1038287"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://www.oracle.com/technetwork/security-advisory/cpuapr2017-3236618.html"
          },
          {
            "name": "RHSA-2016:2927",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://rhn.redhat.com/errata/RHSA-2016-2927.html"
          },
          {
            "name": "DSA-3834",
            "tags": [
              "vendor-advisory",
              "x_refsource_DEBIAN",
              "x_transferred"
            ],
            "url": "http://www.debian.org/security/2017/dsa-3834"
          },
          {
            "name": "RHSA-2017:2886",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2017:2886"
          },
          {
            "name": "97765",
            "tags": [
              "vdb-entry",
              "x_refsource_BID",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/bid/97765"
          },
          {
            "name": "RHSA-2016:2928",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://rhn.redhat.com/errata/RHSA-2016-2928.html"
          },
          {
            "name": "RHSA-2017:2192",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2017:2192"
          }
        ],
        "title": "CVE Program Container"
      },
      {
        "metrics": [
          {
            "other": {
              "content": {
                "id": "CVE-2017-3600",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "total"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2024-10-04T16:21:49.705835Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2024-10-04T19:18:40.595Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "MySQL Server",
          "vendor": "Oracle Corporation",
          "versions": [
            {
              "status": "affected",
              "version": "5.5.54 and earlier"
            },
            {
              "status": "affected",
              "version": "5.6.35 and earlier"
            },
            {
              "status": "affected",
              "version": "5.7.17 and earlier"
            }
          ]
        }
      ],
      "datePublic": "2017-04-18T00:00:00",
      "descriptions": [
        {
          "lang": "en",
          "value": "Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Client mysqldump). Supported versions that are affected are 5.5.54 and earlier, 5.6.35 and earlier and 5.7.17 and earlier. Difficult to exploit vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in takeover of MySQL Server. Note: CVE-2017-3600 is equivalent to CVE-2016-5483. CVSS 3.0 Base Score 6.6 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H)."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "Difficult to exploit vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server.  Successful attacks of this vulnerability can result in takeover of MySQL Server.",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2018-01-04T19:57:01",
        "orgId": "43595867-4340-4103-b7a2-9a5208d29a85",
        "shortName": "oracle"
      },
      "references": [
        {
          "name": "RHSA-2017:2787",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2017:2787"
        },
        {
          "name": "1038287",
          "tags": [
            "vdb-entry",
            "x_refsource_SECTRACK"
          ],
          "url": "http://www.securitytracker.com/id/1038287"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://www.oracle.com/technetwork/security-advisory/cpuapr2017-3236618.html"
        },
        {
          "name": "RHSA-2016:2927",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://rhn.redhat.com/errata/RHSA-2016-2927.html"
        },
        {
          "name": "DSA-3834",
          "tags": [
            "vendor-advisory",
            "x_refsource_DEBIAN"
          ],
          "url": "http://www.debian.org/security/2017/dsa-3834"
        },
        {
          "name": "RHSA-2017:2886",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2017:2886"
        },
        {
          "name": "97765",
          "tags": [
            "vdb-entry",
            "x_refsource_BID"
          ],
          "url": "http://www.securityfocus.com/bid/97765"
        },
        {
          "name": "RHSA-2016:2928",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://rhn.redhat.com/errata/RHSA-2016-2928.html"
        },
        {
          "name": "RHSA-2017:2192",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2017:2192"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "secalert_us@oracle.com",
          "ID": "CVE-2017-3600",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "MySQL Server",
                      "version": {
                        "version_data": [
                          {
                            "version_affected": "=",
                            "version_value": "5.5.54 and earlier"
                          },
                          {
                            "version_affected": "=",
                            "version_value": "5.6.35 and earlier"
                          },
                          {
                            "version_affected": "=",
                            "version_value": "5.7.17 and earlier"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "Oracle Corporation"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Client mysqldump). Supported versions that are affected are 5.5.54 and earlier, 5.6.35 and earlier and 5.7.17 and earlier. Difficult to exploit vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in takeover of MySQL Server. Note: CVE-2017-3600 is equivalent to CVE-2016-5483. CVSS 3.0 Base Score 6.6 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H)."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "Difficult to exploit vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server.  Successful attacks of this vulnerability can result in takeover of MySQL Server."
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "RHSA-2017:2787",
              "refsource": "REDHAT",
              "url": "https://access.redhat.com/errata/RHSA-2017:2787"
            },
            {
              "name": "1038287",
              "refsource": "SECTRACK",
              "url": "http://www.securitytracker.com/id/1038287"
            },
            {
              "name": "http://www.oracle.com/technetwork/security-advisory/cpuapr2017-3236618.html",
              "refsource": "CONFIRM",
              "url": "http://www.oracle.com/technetwork/security-advisory/cpuapr2017-3236618.html"
            },
            {
              "name": "RHSA-2016:2927",
              "refsource": "REDHAT",
              "url": "http://rhn.redhat.com/errata/RHSA-2016-2927.html"
            },
            {
              "name": "DSA-3834",
              "refsource": "DEBIAN",
              "url": "http://www.debian.org/security/2017/dsa-3834"
            },
            {
              "name": "RHSA-2017:2886",
              "refsource": "REDHAT",
              "url": "https://access.redhat.com/errata/RHSA-2017:2886"
            },
            {
              "name": "97765",
              "refsource": "BID",
              "url": "http://www.securityfocus.com/bid/97765"
            },
            {
              "name": "RHSA-2016:2928",
              "refsource": "REDHAT",
              "url": "http://rhn.redhat.com/errata/RHSA-2016-2928.html"
            },
            {
              "name": "RHSA-2017:2192",
              "refsource": "REDHAT",
              "url": "https://access.redhat.com/errata/RHSA-2017:2192"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "43595867-4340-4103-b7a2-9a5208d29a85",
    "assignerShortName": "oracle",
    "cveId": "CVE-2017-3600",
    "datePublished": "2017-04-24T19:00:00",
    "dateReserved": "2016-12-06T00:00:00",
    "dateUpdated": "2024-10-04T19:18:40.595Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

CVE-2017-3647 (GCVE-0-2017-3647)

Vulnerability from cvelistv5

Published

2017-08-08 15:00

Modified

2024-10-04 17:01

Severity ?

CWE

Difficult to exploit vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server.

Summary

Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Replication). Supported versions that are affected are 5.6.36 and earlier and 5.7.18 and earlier. Difficult to exploit vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.0 Base Score 4.4 (Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:H).

References

URL

Tags

	https://access.redhat.com/errata/RHSA-2017:2787	vendor-advisory, x_refsource_REDHAT
	http://www.securitytracker.com/id/1038928	vdb-entry, x_refsource_SECTRACK
	https://access.redhat.com/errata/RHSA-2017:2886	vendor-advisory, x_refsource_REDHAT
	http://www.oracle.com/technetwork/security-advisory/cpujul2017-3236622.html	x_refsource_CONFIRM
	http://www.securityfocus.com/bid/99796	vdb-entry, x_refsource_BID

Impacted products

	Vendor	Product	Version
	Oracle Corporation	MySQL Server	Version: 5.6.36 and earlier Version: 5.7.18 and earlier

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-05T14:30:58.964Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "name": "RHSA-2017:2787",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2017:2787"
          },
          {
            "name": "1038928",
            "tags": [
              "vdb-entry",
              "x_refsource_SECTRACK",
              "x_transferred"
            ],
            "url": "http://www.securitytracker.com/id/1038928"
          },
          {
            "name": "RHSA-2017:2886",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2017:2886"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://www.oracle.com/technetwork/security-advisory/cpujul2017-3236622.html"
          },
          {
            "name": "99796",
            "tags": [
              "vdb-entry",
              "x_refsource_BID",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/bid/99796"
          }
        ],
        "title": "CVE Program Container"
      },
      {
        "metrics": [
          {
            "other": {
              "content": {
                "id": "CVE-2017-3647",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "partial"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2024-10-04T15:47:56.062629Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2024-10-04T17:01:44.930Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "MySQL Server",
          "vendor": "Oracle Corporation",
          "versions": [
            {
              "status": "affected",
              "version": "5.6.36 and earlier"
            },
            {
              "status": "affected",
              "version": "5.7.18 and earlier"
            }
          ]
        }
      ],
      "datePublic": "2017-07-18T00:00:00",
      "descriptions": [
        {
          "lang": "en",
          "value": "Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Replication). Supported versions that are affected are 5.6.36 and earlier and 5.7.18 and earlier. Difficult to exploit vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.0 Base Score 4.4 (Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:H)."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "Difficult to exploit vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server.  Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server.",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2017-12-08T10:57:01",
        "orgId": "43595867-4340-4103-b7a2-9a5208d29a85",
        "shortName": "oracle"
      },
      "references": [
        {
          "name": "RHSA-2017:2787",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2017:2787"
        },
        {
          "name": "1038928",
          "tags": [
            "vdb-entry",
            "x_refsource_SECTRACK"
          ],
          "url": "http://www.securitytracker.com/id/1038928"
        },
        {
          "name": "RHSA-2017:2886",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2017:2886"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://www.oracle.com/technetwork/security-advisory/cpujul2017-3236622.html"
        },
        {
          "name": "99796",
          "tags": [
            "vdb-entry",
            "x_refsource_BID"
          ],
          "url": "http://www.securityfocus.com/bid/99796"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "secalert_us@oracle.com",
          "ID": "CVE-2017-3647",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "MySQL Server",
                      "version": {
                        "version_data": [
                          {
                            "version_affected": "=",
                            "version_value": "5.6.36 and earlier"
                          },
                          {
                            "version_affected": "=",
                            "version_value": "5.7.18 and earlier"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "Oracle Corporation"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Replication). Supported versions that are affected are 5.6.36 and earlier and 5.7.18 and earlier. Difficult to exploit vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.0 Base Score 4.4 (Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:H)."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "Difficult to exploit vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server.  Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server."
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "RHSA-2017:2787",
              "refsource": "REDHAT",
              "url": "https://access.redhat.com/errata/RHSA-2017:2787"
            },
            {
              "name": "1038928",
              "refsource": "SECTRACK",
              "url": "http://www.securitytracker.com/id/1038928"
            },
            {
              "name": "RHSA-2017:2886",
              "refsource": "REDHAT",
              "url": "https://access.redhat.com/errata/RHSA-2017:2886"
            },
            {
              "name": "http://www.oracle.com/technetwork/security-advisory/cpujul2017-3236622.html",
              "refsource": "CONFIRM",
              "url": "http://www.oracle.com/technetwork/security-advisory/cpujul2017-3236622.html"
            },
            {
              "name": "99796",
              "refsource": "BID",
              "url": "http://www.securityfocus.com/bid/99796"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "43595867-4340-4103-b7a2-9a5208d29a85",
    "assignerShortName": "oracle",
    "cveId": "CVE-2017-3647",
    "datePublished": "2017-08-08T15:00:00",
    "dateReserved": "2016-12-06T00:00:00",
    "dateUpdated": "2024-10-04T17:01:44.930Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

CVE-2017-3291 (GCVE-0-2017-3291)

Vulnerability from cvelistv5

Published

2017-01-27 22:01

Modified

2024-10-08 20:36

Severity ?

CWE

CVSS:3.0/AV:L/AC:H/PR:H/UI:R/S:U/C:H/I:H/A:H

Summary

Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Packaging). Supported versions that are affected are 5.5.53 and earlier, 5.6.34 and earlier and 5.7.16 and earlier. Difficult to exploit vulnerability allows high privileged attacker with logon to the infrastructure where MySQL Server executes to compromise MySQL Server. Successful attacks require human interaction from a person other than the attacker. Successful attacks of this vulnerability can result in takeover of MySQL Server. CVSS v3.0 Base Score 6.3 (Confidentiality, Integrity and Availability impacts).

References

URL

Tags

	https://access.redhat.com/errata/RHSA-2017:2787	vendor-advisory, x_refsource_REDHAT
	http://www.securityfocus.com/bid/95501	vdb-entry, x_refsource_BID
	https://security.gentoo.org/glsa/201702-17	vendor-advisory, x_refsource_GENTOO
	https://access.redhat.com/errata/RHSA-2018:0574	vendor-advisory, x_refsource_REDHAT
	https://security.gentoo.org/glsa/201702-18	vendor-advisory, x_refsource_GENTOO
	http://www.securitytracker.com/id/1037640	vdb-entry, x_refsource_SECTRACK
	https://access.redhat.com/errata/RHSA-2018:0279	vendor-advisory, x_refsource_REDHAT
	http://www.debian.org/security/2017/dsa-3767	vendor-advisory, x_refsource_DEBIAN
	https://access.redhat.com/errata/RHSA-2017:2886	vendor-advisory, x_refsource_REDHAT
	http://www.oracle.com/technetwork/security-advisory/cpujan2017-2881727.html	x_refsource_CONFIRM
	http://www.debian.org/security/2017/dsa-3770	vendor-advisory, x_refsource_DEBIAN
	https://access.redhat.com/errata/RHSA-2017:2192	vendor-advisory, x_refsource_REDHAT

Impacted products

	Vendor	Product	Version
	n/a	MySQL Server 5.5.53andearlier;5.6.34andearlier;5.7.16andearlier	Version: MySQL Server 5.5.53andearlier;5.6.34andearlier;5.7.16andearlier

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-05T14:23:33.774Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "name": "RHSA-2017:2787",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2017:2787"
          },
          {
            "name": "95501",
            "tags": [
              "vdb-entry",
              "x_refsource_BID",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/bid/95501"
          },
          {
            "name": "GLSA-201702-17",
            "tags": [
              "vendor-advisory",
              "x_refsource_GENTOO",
              "x_transferred"
            ],
            "url": "https://security.gentoo.org/glsa/201702-17"
          },
          {
            "name": "RHSA-2018:0574",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2018:0574"
          },
          {
            "name": "GLSA-201702-18",
            "tags": [
              "vendor-advisory",
              "x_refsource_GENTOO",
              "x_transferred"
            ],
            "url": "https://security.gentoo.org/glsa/201702-18"
          },
          {
            "name": "1037640",
            "tags": [
              "vdb-entry",
              "x_refsource_SECTRACK",
              "x_transferred"
            ],
            "url": "http://www.securitytracker.com/id/1037640"
          },
          {
            "name": "RHSA-2018:0279",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2018:0279"
          },
          {
            "name": "DSA-3767",
            "tags": [
              "vendor-advisory",
              "x_refsource_DEBIAN",
              "x_transferred"
            ],
            "url": "http://www.debian.org/security/2017/dsa-3767"
          },
          {
            "name": "RHSA-2017:2886",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2017:2886"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://www.oracle.com/technetwork/security-advisory/cpujan2017-2881727.html"
          },
          {
            "name": "DSA-3770",
            "tags": [
              "vendor-advisory",
              "x_refsource_DEBIAN",
              "x_transferred"
            ],
            "url": "http://www.debian.org/security/2017/dsa-3770"
          },
          {
            "name": "RHSA-2017:2192",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2017:2192"
          }
        ],
        "title": "CVE Program Container"
      },
      {
        "metrics": [
          {
            "other": {
              "content": {
                "id": "CVE-2017-3291",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "total"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2024-10-08T20:06:04.184886Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2024-10-08T20:36:49.306Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "MySQL Server 5.5.53andearlier;5.6.34andearlier;5.7.16andearlier",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "MySQL Server 5.5.53andearlier;5.6.34andearlier;5.7.16andearlier"
            }
          ]
        }
      ],
      "datePublic": "2017-01-17T00:00:00",
      "descriptions": [
        {
          "lang": "en",
          "value": "Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Packaging). Supported versions that are affected are 5.5.53 and earlier, 5.6.34 and earlier and 5.7.16 and earlier. Difficult to exploit vulnerability allows high privileged attacker with logon to the infrastructure where MySQL Server executes to compromise MySQL Server. Successful attacks require human interaction from a person other than the attacker. Successful attacks of this vulnerability can result in takeover of MySQL Server. CVSS v3.0 Base Score 6.3 (Confidentiality, Integrity and Availability impacts)."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "CVSS:3.0/AV:L/AC:H/PR:H/UI:R/S:U/C:H/I:H/A:H",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2018-03-22T09:57:01",
        "orgId": "43595867-4340-4103-b7a2-9a5208d29a85",
        "shortName": "oracle"
      },
      "references": [
        {
          "name": "RHSA-2017:2787",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2017:2787"
        },
        {
          "name": "95501",
          "tags": [
            "vdb-entry",
            "x_refsource_BID"
          ],
          "url": "http://www.securityfocus.com/bid/95501"
        },
        {
          "name": "GLSA-201702-17",
          "tags": [
            "vendor-advisory",
            "x_refsource_GENTOO"
          ],
          "url": "https://security.gentoo.org/glsa/201702-17"
        },
        {
          "name": "RHSA-2018:0574",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2018:0574"
        },
        {
          "name": "GLSA-201702-18",
          "tags": [
            "vendor-advisory",
            "x_refsource_GENTOO"
          ],
          "url": "https://security.gentoo.org/glsa/201702-18"
        },
        {
          "name": "1037640",
          "tags": [
            "vdb-entry",
            "x_refsource_SECTRACK"
          ],
          "url": "http://www.securitytracker.com/id/1037640"
        },
        {
          "name": "RHSA-2018:0279",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2018:0279"
        },
        {
          "name": "DSA-3767",
          "tags": [
            "vendor-advisory",
            "x_refsource_DEBIAN"
          ],
          "url": "http://www.debian.org/security/2017/dsa-3767"
        },
        {
          "name": "RHSA-2017:2886",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2017:2886"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://www.oracle.com/technetwork/security-advisory/cpujan2017-2881727.html"
        },
        {
          "name": "DSA-3770",
          "tags": [
            "vendor-advisory",
            "x_refsource_DEBIAN"
          ],
          "url": "http://www.debian.org/security/2017/dsa-3770"
        },
        {
          "name": "RHSA-2017:2192",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2017:2192"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "secalert_us@oracle.com",
          "ID": "CVE-2017-3291",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "MySQL Server 5.5.53andearlier;5.6.34andearlier;5.7.16andearlier",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "MySQL Server 5.5.53andearlier;5.6.34andearlier;5.7.16andearlier"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "n/a"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Packaging). Supported versions that are affected are 5.5.53 and earlier, 5.6.34 and earlier and 5.7.16 and earlier. Difficult to exploit vulnerability allows high privileged attacker with logon to the infrastructure where MySQL Server executes to compromise MySQL Server. Successful attacks require human interaction from a person other than the attacker. Successful attacks of this vulnerability can result in takeover of MySQL Server. CVSS v3.0 Base Score 6.3 (Confidentiality, Integrity and Availability impacts)."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "CVSS:3.0/AV:L/AC:H/PR:H/UI:R/S:U/C:H/I:H/A:H"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "RHSA-2017:2787",
              "refsource": "REDHAT",
              "url": "https://access.redhat.com/errata/RHSA-2017:2787"
            },
            {
              "name": "95501",
              "refsource": "BID",
              "url": "http://www.securityfocus.com/bid/95501"
            },
            {
              "name": "GLSA-201702-17",
              "refsource": "GENTOO",
              "url": "https://security.gentoo.org/glsa/201702-17"
            },
            {
              "name": "RHSA-2018:0574",
              "refsource": "REDHAT",
              "url": "https://access.redhat.com/errata/RHSA-2018:0574"
            },
            {
              "name": "GLSA-201702-18",
              "refsource": "GENTOO",
              "url": "https://security.gentoo.org/glsa/201702-18"
            },
            {
              "name": "1037640",
              "refsource": "SECTRACK",
              "url": "http://www.securitytracker.com/id/1037640"
            },
            {
              "name": "RHSA-2018:0279",
              "refsource": "REDHAT",
              "url": "https://access.redhat.com/errata/RHSA-2018:0279"
            },
            {
              "name": "DSA-3767",
              "refsource": "DEBIAN",
              "url": "http://www.debian.org/security/2017/dsa-3767"
            },
            {
              "name": "RHSA-2017:2886",
              "refsource": "REDHAT",
              "url": "https://access.redhat.com/errata/RHSA-2017:2886"
            },
            {
              "name": "http://www.oracle.com/technetwork/security-advisory/cpujan2017-2881727.html",
              "refsource": "CONFIRM",
              "url": "http://www.oracle.com/technetwork/security-advisory/cpujan2017-2881727.html"
            },
            {
              "name": "DSA-3770",
              "refsource": "DEBIAN",
              "url": "http://www.debian.org/security/2017/dsa-3770"
            },
            {
              "name": "RHSA-2017:2192",
              "refsource": "REDHAT",
              "url": "https://access.redhat.com/errata/RHSA-2017:2192"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "43595867-4340-4103-b7a2-9a5208d29a85",
    "assignerShortName": "oracle",
    "cveId": "CVE-2017-3291",
    "datePublished": "2017-01-27T22:01:00",
    "dateReserved": "2016-12-06T00:00:00",
    "dateUpdated": "2024-10-08T20:36:49.306Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

CVE-2017-3459 (GCVE-0-2017-3459)

Vulnerability from cvelistv5

Published

2017-04-24 19:00

Modified

2024-10-07 16:19

Severity ?

CWE

Easily "exploitable" vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server.

Summary

Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Optimizer). Supported versions that are affected are 5.7.17 and earlier. Easily "exploitable" vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.0 Base Score 4.9 (Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H).

References

URL

Tags

	http://www.securitytracker.com/id/1038287	vdb-entry, x_refsource_SECTRACK
	http://www.oracle.com/technetwork/security-advisory/cpuapr2017-3236618.html	x_refsource_CONFIRM
	http://www.securityfocus.com/bid/97847	vdb-entry, x_refsource_BID
	https://access.redhat.com/errata/RHSA-2017:2886	vendor-advisory, x_refsource_REDHAT

Impacted products

	Vendor	Product	Version
	Oracle Corporation	MySQL Server	Version: 5.7.17 and earlier

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-05T14:30:56.939Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "name": "1038287",
            "tags": [
              "vdb-entry",
              "x_refsource_SECTRACK",
              "x_transferred"
            ],
            "url": "http://www.securitytracker.com/id/1038287"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://www.oracle.com/technetwork/security-advisory/cpuapr2017-3236618.html"
          },
          {
            "name": "97847",
            "tags": [
              "vdb-entry",
              "x_refsource_BID",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/bid/97847"
          },
          {
            "name": "RHSA-2017:2886",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2017:2886"
          }
        ],
        "title": "CVE Program Container"
      },
      {
        "metrics": [
          {
            "other": {
              "content": {
                "id": "CVE-2017-3459",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "partial"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2024-10-07T15:46:01.014780Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2024-10-07T16:19:37.408Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "MySQL Server",
          "vendor": "Oracle Corporation",
          "versions": [
            {
              "status": "affected",
              "version": "5.7.17 and earlier"
            }
          ]
        }
      ],
      "datePublic": "2017-04-18T00:00:00",
      "descriptions": [
        {
          "lang": "en",
          "value": "Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Optimizer). Supported versions that are affected are 5.7.17 and earlier. Easily \"exploitable\" vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.0 Base Score 4.9 (Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H)."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "Easily \"exploitable\" vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server.  Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server.",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2017-12-07T10:57:01",
        "orgId": "43595867-4340-4103-b7a2-9a5208d29a85",
        "shortName": "oracle"
      },
      "references": [
        {
          "name": "1038287",
          "tags": [
            "vdb-entry",
            "x_refsource_SECTRACK"
          ],
          "url": "http://www.securitytracker.com/id/1038287"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://www.oracle.com/technetwork/security-advisory/cpuapr2017-3236618.html"
        },
        {
          "name": "97847",
          "tags": [
            "vdb-entry",
            "x_refsource_BID"
          ],
          "url": "http://www.securityfocus.com/bid/97847"
        },
        {
          "name": "RHSA-2017:2886",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2017:2886"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "secalert_us@oracle.com",
          "ID": "CVE-2017-3459",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "MySQL Server",
                      "version": {
                        "version_data": [
                          {
                            "version_affected": "=",
                            "version_value": "5.7.17 and earlier"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "Oracle Corporation"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Optimizer). Supported versions that are affected are 5.7.17 and earlier. Easily \"exploitable\" vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.0 Base Score 4.9 (Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H)."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "Easily \"exploitable\" vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server.  Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server."
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "1038287",
              "refsource": "SECTRACK",
              "url": "http://www.securitytracker.com/id/1038287"
            },
            {
              "name": "http://www.oracle.com/technetwork/security-advisory/cpuapr2017-3236618.html",
              "refsource": "CONFIRM",
              "url": "http://www.oracle.com/technetwork/security-advisory/cpuapr2017-3236618.html"
            },
            {
              "name": "97847",
              "refsource": "BID",
              "url": "http://www.securityfocus.com/bid/97847"
            },
            {
              "name": "RHSA-2017:2886",
              "refsource": "REDHAT",
              "url": "https://access.redhat.com/errata/RHSA-2017:2886"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "43595867-4340-4103-b7a2-9a5208d29a85",
    "assignerShortName": "oracle",
    "cveId": "CVE-2017-3459",
    "datePublished": "2017-04-24T19:00:00",
    "dateReserved": "2016-12-06T00:00:00",
    "dateUpdated": "2024-10-07T16:19:37.408Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

CVE-2017-3457 (GCVE-0-2017-3457)

Vulnerability from cvelistv5

Published

2017-04-24 19:00

Modified

2024-10-07 16:19

Severity ?

CWE

Easily "exploitable" vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server.

Summary

References

URL

Tags

	http://www.securitytracker.com/id/1038287	vdb-entry, x_refsource_SECTRACK
	http://www.oracle.com/technetwork/security-advisory/cpuapr2017-3236618.html	x_refsource_CONFIRM
	http://www.securityfocus.com/bid/97845	vdb-entry, x_refsource_BID
	https://access.redhat.com/errata/RHSA-2017:2886	vendor-advisory, x_refsource_REDHAT

Impacted products

	Vendor	Product	Version
	Oracle Corporation	MySQL Server	Version: 5.7.17 and earlier

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-05T14:30:56.914Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "name": "1038287",
            "tags": [
              "vdb-entry",
              "x_refsource_SECTRACK",
              "x_transferred"
            ],
            "url": "http://www.securitytracker.com/id/1038287"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://www.oracle.com/technetwork/security-advisory/cpuapr2017-3236618.html"
          },
          {
            "name": "97845",
            "tags": [
              "vdb-entry",
              "x_refsource_BID",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/bid/97845"
          },
          {
            "name": "RHSA-2017:2886",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2017:2886"
          }
        ],
        "title": "CVE Program Container"
      },
      {
        "metrics": [
          {
            "other": {
              "content": {
                "id": "CVE-2017-3457",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "partial"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2024-10-07T15:46:03.433481Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2024-10-07T16:19:53.863Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "MySQL Server",
          "vendor": "Oracle Corporation",
          "versions": [
            {
              "status": "affected",
              "version": "5.7.17 and earlier"
            }
          ]
        }
      ],
      "datePublic": "2017-04-18T00:00:00",
      "descriptions": [
        {
          "lang": "en",
          "value": "Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: DML). Supported versions that are affected are 5.7.17 and earlier. Easily \"exploitable\" vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.0 Base Score 4.9 (Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H)."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "Easily \"exploitable\" vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server.  Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server.",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2017-12-07T10:57:01",
        "orgId": "43595867-4340-4103-b7a2-9a5208d29a85",
        "shortName": "oracle"
      },
      "references": [
        {
          "name": "1038287",
          "tags": [
            "vdb-entry",
            "x_refsource_SECTRACK"
          ],
          "url": "http://www.securitytracker.com/id/1038287"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://www.oracle.com/technetwork/security-advisory/cpuapr2017-3236618.html"
        },
        {
          "name": "97845",
          "tags": [
            "vdb-entry",
            "x_refsource_BID"
          ],
          "url": "http://www.securityfocus.com/bid/97845"
        },
        {
          "name": "RHSA-2017:2886",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2017:2886"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "secalert_us@oracle.com",
          "ID": "CVE-2017-3457",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "MySQL Server",
                      "version": {
                        "version_data": [
                          {
                            "version_affected": "=",
                            "version_value": "5.7.17 and earlier"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "Oracle Corporation"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: DML). Supported versions that are affected are 5.7.17 and earlier. Easily \"exploitable\" vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.0 Base Score 4.9 (Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H)."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "Easily \"exploitable\" vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server.  Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server."
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "1038287",
              "refsource": "SECTRACK",
              "url": "http://www.securitytracker.com/id/1038287"
            },
            {
              "name": "http://www.oracle.com/technetwork/security-advisory/cpuapr2017-3236618.html",
              "refsource": "CONFIRM",
              "url": "http://www.oracle.com/technetwork/security-advisory/cpuapr2017-3236618.html"
            },
            {
              "name": "97845",
              "refsource": "BID",
              "url": "http://www.securityfocus.com/bid/97845"
            },
            {
              "name": "RHSA-2017:2886",
              "refsource": "REDHAT",
              "url": "https://access.redhat.com/errata/RHSA-2017:2886"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "43595867-4340-4103-b7a2-9a5208d29a85",
    "assignerShortName": "oracle",
    "cveId": "CVE-2017-3457",
    "datePublished": "2017-04-24T19:00:00",
    "dateReserved": "2016-12-06T00:00:00",
    "dateUpdated": "2024-10-07T16:19:53.863Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

CVE-2017-3320 (GCVE-0-2017-3320)

Vulnerability from cvelistv5

Published

2017-01-27 22:01

Modified

2024-10-08 20:29

Severity ?

CWE

CVSS:3.0/AV:N/AC:L/PR:H/UI:R/S:U/C:L/I:N/A:N

Summary

Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Security: Encryption). Supported versions that are affected are 5.7.16 and earlier. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks require human interaction from a person other than the attacker. Successful attacks of this vulnerability can result in unauthorized read access to a subset of MySQL Server accessible data. CVSS v3.0 Base Score 2.4 (Confidentiality impacts).

References

URL

Tags

	http://www.securityfocus.com/bid/95470	vdb-entry, x_refsource_BID
	https://security.gentoo.org/glsa/201702-17	vendor-advisory, x_refsource_GENTOO
	http://www.securitytracker.com/id/1037640	vdb-entry, x_refsource_SECTRACK
	https://access.redhat.com/errata/RHSA-2017:2886	vendor-advisory, x_refsource_REDHAT
	http://www.oracle.com/technetwork/security-advisory/cpujan2017-2881727.html	x_refsource_CONFIRM

Impacted products

	Vendor	Product	Version
	Oracle	MySQL Server	Version: 5.7.16 and earlier

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-05T14:23:33.639Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "name": "95470",
            "tags": [
              "vdb-entry",
              "x_refsource_BID",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/bid/95470"
          },
          {
            "name": "GLSA-201702-17",
            "tags": [
              "vendor-advisory",
              "x_refsource_GENTOO",
              "x_transferred"
            ],
            "url": "https://security.gentoo.org/glsa/201702-17"
          },
          {
            "name": "1037640",
            "tags": [
              "vdb-entry",
              "x_refsource_SECTRACK",
              "x_transferred"
            ],
            "url": "http://www.securitytracker.com/id/1037640"
          },
          {
            "name": "RHSA-2017:2886",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2017:2886"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://www.oracle.com/technetwork/security-advisory/cpujan2017-2881727.html"
          }
        ],
        "title": "CVE Program Container"
      },
      {
        "metrics": [
          {
            "other": {
              "content": {
                "id": "CVE-2017-3320",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "partial"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2024-10-08T20:09:28.646295Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2024-10-08T20:29:11.036Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "MySQL Server",
          "vendor": "Oracle",
          "versions": [
            {
              "status": "affected",
              "version": "5.7.16 and earlier"
            }
          ]
        }
      ],
      "datePublic": "2017-01-17T00:00:00",
      "descriptions": [
        {
          "lang": "en",
          "value": "Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Security: Encryption). Supported versions that are affected are 5.7.16 and earlier. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks require human interaction from a person other than the attacker. Successful attacks of this vulnerability can result in unauthorized read access to a subset of MySQL Server accessible data. CVSS v3.0 Base Score 2.4 (Confidentiality impacts)."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "CVSS:3.0/AV:N/AC:L/PR:H/UI:R/S:U/C:L/I:N/A:N",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2017-12-07T10:57:01",
        "orgId": "43595867-4340-4103-b7a2-9a5208d29a85",
        "shortName": "oracle"
      },
      "references": [
        {
          "name": "95470",
          "tags": [
            "vdb-entry",
            "x_refsource_BID"
          ],
          "url": "http://www.securityfocus.com/bid/95470"
        },
        {
          "name": "GLSA-201702-17",
          "tags": [
            "vendor-advisory",
            "x_refsource_GENTOO"
          ],
          "url": "https://security.gentoo.org/glsa/201702-17"
        },
        {
          "name": "1037640",
          "tags": [
            "vdb-entry",
            "x_refsource_SECTRACK"
          ],
          "url": "http://www.securitytracker.com/id/1037640"
        },
        {
          "name": "RHSA-2017:2886",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2017:2886"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://www.oracle.com/technetwork/security-advisory/cpujan2017-2881727.html"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "secalert_us@oracle.com",
          "ID": "CVE-2017-3320",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "MySQL Server",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "5.7.16 and earlier"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "Oracle"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Security: Encryption). Supported versions that are affected are 5.7.16 and earlier. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks require human interaction from a person other than the attacker. Successful attacks of this vulnerability can result in unauthorized read access to a subset of MySQL Server accessible data. CVSS v3.0 Base Score 2.4 (Confidentiality impacts)."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "CVSS:3.0/AV:N/AC:L/PR:H/UI:R/S:U/C:L/I:N/A:N"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "95470",
              "refsource": "BID",
              "url": "http://www.securityfocus.com/bid/95470"
            },
            {
              "name": "GLSA-201702-17",
              "refsource": "GENTOO",
              "url": "https://security.gentoo.org/glsa/201702-17"
            },
            {
              "name": "1037640",
              "refsource": "SECTRACK",
              "url": "http://www.securitytracker.com/id/1037640"
            },
            {
              "name": "RHSA-2017:2886",
              "refsource": "REDHAT",
              "url": "https://access.redhat.com/errata/RHSA-2017:2886"
            },
            {
              "name": "http://www.oracle.com/technetwork/security-advisory/cpujan2017-2881727.html",
              "refsource": "CONFIRM",
              "url": "http://www.oracle.com/technetwork/security-advisory/cpujan2017-2881727.html"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "43595867-4340-4103-b7a2-9a5208d29a85",
    "assignerShortName": "oracle",
    "cveId": "CVE-2017-3320",
    "datePublished": "2017-01-27T22:01:00",
    "dateReserved": "2016-12-06T00:00:00",
    "dateUpdated": "2024-10-08T20:29:11.036Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

CVE-2017-3465 (GCVE-0-2017-3465)

Vulnerability from cvelistv5

Published

2017-04-24 19:00

Modified

2024-10-07 16:18

Severity ?

CWE

Easily "exploitable" vulnerability allows low privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of MySQL Server accessible data.

Summary

Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Security: Privileges). Supported versions that are affected are 5.7.17 and earlier. Easily "exploitable" vulnerability allows low privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of MySQL Server accessible data. CVSS 3.0 Base Score 4.3 (Integrity impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N).

References

URL

Tags

	http://www.securityfocus.com/bid/97822	vdb-entry, x_refsource_BID
	http://www.securitytracker.com/id/1038287	vdb-entry, x_refsource_SECTRACK
	http://www.oracle.com/technetwork/security-advisory/cpuapr2017-3236618.html	x_refsource_CONFIRM
	https://access.redhat.com/errata/RHSA-2017:2886	vendor-advisory, x_refsource_REDHAT

Impacted products

	Vendor	Product	Version
	Oracle Corporation	MySQL Server	Version: 5.7.17 and earlier

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-05T14:30:57.504Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "name": "97822",
            "tags": [
              "vdb-entry",
              "x_refsource_BID",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/bid/97822"
          },
          {
            "name": "1038287",
            "tags": [
              "vdb-entry",
              "x_refsource_SECTRACK",
              "x_transferred"
            ],
            "url": "http://www.securitytracker.com/id/1038287"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://www.oracle.com/technetwork/security-advisory/cpuapr2017-3236618.html"
          },
          {
            "name": "RHSA-2017:2886",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2017:2886"
          }
        ],
        "title": "CVE Program Container"
      },
      {
        "metrics": [
          {
            "other": {
              "content": {
                "id": "CVE-2017-3465",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "partial"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2024-10-07T15:45:54.608237Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2024-10-07T16:18:47.877Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "MySQL Server",
          "vendor": "Oracle Corporation",
          "versions": [
            {
              "status": "affected",
              "version": "5.7.17 and earlier"
            }
          ]
        }
      ],
      "datePublic": "2017-04-18T00:00:00",
      "descriptions": [
        {
          "lang": "en",
          "value": "Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Security: Privileges). Supported versions that are affected are 5.7.17 and earlier. Easily \"exploitable\" vulnerability allows low privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of MySQL Server accessible data. CVSS 3.0 Base Score 4.3 (Integrity impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N)."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "Easily \"exploitable\" vulnerability allows low privileged attacker with network access via multiple protocols to compromise MySQL Server.  Successful attacks of this vulnerability can result in  unauthorized update, insert or delete access to some of MySQL Server accessible data.",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2017-12-07T10:57:01",
        "orgId": "43595867-4340-4103-b7a2-9a5208d29a85",
        "shortName": "oracle"
      },
      "references": [
        {
          "name": "97822",
          "tags": [
            "vdb-entry",
            "x_refsource_BID"
          ],
          "url": "http://www.securityfocus.com/bid/97822"
        },
        {
          "name": "1038287",
          "tags": [
            "vdb-entry",
            "x_refsource_SECTRACK"
          ],
          "url": "http://www.securitytracker.com/id/1038287"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://www.oracle.com/technetwork/security-advisory/cpuapr2017-3236618.html"
        },
        {
          "name": "RHSA-2017:2886",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2017:2886"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "secalert_us@oracle.com",
          "ID": "CVE-2017-3465",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "MySQL Server",
                      "version": {
                        "version_data": [
                          {
                            "version_affected": "=",
                            "version_value": "5.7.17 and earlier"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "Oracle Corporation"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Security: Privileges). Supported versions that are affected are 5.7.17 and earlier. Easily \"exploitable\" vulnerability allows low privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of MySQL Server accessible data. CVSS 3.0 Base Score 4.3 (Integrity impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N)."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "Easily \"exploitable\" vulnerability allows low privileged attacker with network access via multiple protocols to compromise MySQL Server.  Successful attacks of this vulnerability can result in  unauthorized update, insert or delete access to some of MySQL Server accessible data."
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "97822",
              "refsource": "BID",
              "url": "http://www.securityfocus.com/bid/97822"
            },
            {
              "name": "1038287",
              "refsource": "SECTRACK",
              "url": "http://www.securitytracker.com/id/1038287"
            },
            {
              "name": "http://www.oracle.com/technetwork/security-advisory/cpuapr2017-3236618.html",
              "refsource": "CONFIRM",
              "url": "http://www.oracle.com/technetwork/security-advisory/cpuapr2017-3236618.html"
            },
            {
              "name": "RHSA-2017:2886",
              "refsource": "REDHAT",
              "url": "https://access.redhat.com/errata/RHSA-2017:2886"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "43595867-4340-4103-b7a2-9a5208d29a85",
    "assignerShortName": "oracle",
    "cveId": "CVE-2017-3465",
    "datePublished": "2017-04-24T19:00:00",
    "dateReserved": "2016-12-06T00:00:00",
    "dateUpdated": "2024-10-07T16:18:47.877Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

CVE-2017-3257 (GCVE-0-2017-3257)

Vulnerability from cvelistv5

Published

2017-01-27 22:01

Modified

2024-10-09 19:40

Severity ?

CWE

CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Summary

Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: InnoDB). Supported versions that are affected are 5.6.34 and earlier5.7.16 and earlier. Easily exploitable vulnerability allows low privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS v3.0 Base Score 6.5 (Availability impacts).

References

URL

Tags

	https://access.redhat.com/errata/RHSA-2017:2787	vendor-advisory, x_refsource_REDHAT
	https://security.gentoo.org/glsa/201702-17	vendor-advisory, x_refsource_GENTOO
	https://access.redhat.com/errata/RHSA-2018:0574	vendor-advisory, x_refsource_REDHAT
	https://security.gentoo.org/glsa/201702-18	vendor-advisory, x_refsource_GENTOO
	http://www.securitytracker.com/id/1037640	vdb-entry, x_refsource_SECTRACK
	https://access.redhat.com/errata/RHSA-2018:0279	vendor-advisory, x_refsource_REDHAT
	http://www.securityfocus.com/bid/95589	vdb-entry, x_refsource_BID
	https://access.redhat.com/errata/RHSA-2017:2886	vendor-advisory, x_refsource_REDHAT
	http://www.oracle.com/technetwork/security-advisory/cpujan2017-2881727.html	x_refsource_CONFIRM
	http://www.debian.org/security/2017/dsa-3770	vendor-advisory, x_refsource_DEBIAN

Impacted products

	Vendor	Product	Version
	Oracle	MySQL Server	Version: 5.6.34 and earlier Version: 5.7.16 and earlier

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-05T14:23:33.185Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "name": "RHSA-2017:2787",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2017:2787"
          },
          {
            "name": "GLSA-201702-17",
            "tags": [
              "vendor-advisory",
              "x_refsource_GENTOO",
              "x_transferred"
            ],
            "url": "https://security.gentoo.org/glsa/201702-17"
          },
          {
            "name": "RHSA-2018:0574",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2018:0574"
          },
          {
            "name": "GLSA-201702-18",
            "tags": [
              "vendor-advisory",
              "x_refsource_GENTOO",
              "x_transferred"
            ],
            "url": "https://security.gentoo.org/glsa/201702-18"
          },
          {
            "name": "1037640",
            "tags": [
              "vdb-entry",
              "x_refsource_SECTRACK",
              "x_transferred"
            ],
            "url": "http://www.securitytracker.com/id/1037640"
          },
          {
            "name": "RHSA-2018:0279",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2018:0279"
          },
          {
            "name": "95589",
            "tags": [
              "vdb-entry",
              "x_refsource_BID",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/bid/95589"
          },
          {
            "name": "RHSA-2017:2886",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2017:2886"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://www.oracle.com/technetwork/security-advisory/cpujan2017-2881727.html"
          },
          {
            "name": "DSA-3770",
            "tags": [
              "vendor-advisory",
              "x_refsource_DEBIAN",
              "x_transferred"
            ],
            "url": "http://www.debian.org/security/2017/dsa-3770"
          }
        ],
        "title": "CVE Program Container"
      },
      {
        "metrics": [
          {
            "other": {
              "content": {
                "id": "CVE-2017-3257",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "partial"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2024-10-09T19:30:12.766294Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2024-10-09T19:40:40.335Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "MySQL Server",
          "vendor": "Oracle",
          "versions": [
            {
              "status": "affected",
              "version": "5.6.34 and earlier"
            },
            {
              "status": "affected",
              "version": "5.7.16 and earlier"
            }
          ]
        }
      ],
      "datePublic": "2017-01-17T00:00:00",
      "descriptions": [
        {
          "lang": "en",
          "value": "Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: InnoDB). Supported versions that are affected are 5.6.34 and earlier5.7.16 and earlier. Easily exploitable vulnerability allows low privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS v3.0 Base Score 6.5 (Availability impacts)."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2018-03-22T09:57:01",
        "orgId": "43595867-4340-4103-b7a2-9a5208d29a85",
        "shortName": "oracle"
      },
      "references": [
        {
          "name": "RHSA-2017:2787",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2017:2787"
        },
        {
          "name": "GLSA-201702-17",
          "tags": [
            "vendor-advisory",
            "x_refsource_GENTOO"
          ],
          "url": "https://security.gentoo.org/glsa/201702-17"
        },
        {
          "name": "RHSA-2018:0574",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2018:0574"
        },
        {
          "name": "GLSA-201702-18",
          "tags": [
            "vendor-advisory",
            "x_refsource_GENTOO"
          ],
          "url": "https://security.gentoo.org/glsa/201702-18"
        },
        {
          "name": "1037640",
          "tags": [
            "vdb-entry",
            "x_refsource_SECTRACK"
          ],
          "url": "http://www.securitytracker.com/id/1037640"
        },
        {
          "name": "RHSA-2018:0279",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2018:0279"
        },
        {
          "name": "95589",
          "tags": [
            "vdb-entry",
            "x_refsource_BID"
          ],
          "url": "http://www.securityfocus.com/bid/95589"
        },
        {
          "name": "RHSA-2017:2886",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2017:2886"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://www.oracle.com/technetwork/security-advisory/cpujan2017-2881727.html"
        },
        {
          "name": "DSA-3770",
          "tags": [
            "vendor-advisory",
            "x_refsource_DEBIAN"
          ],
          "url": "http://www.debian.org/security/2017/dsa-3770"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "secalert_us@oracle.com",
          "ID": "CVE-2017-3257",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "MySQL Server",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "5.6.34 and earlier"
                          },
                          {
                            "version_value": "5.7.16 and earlier"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "Oracle"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: InnoDB). Supported versions that are affected are 5.6.34 and earlier5.7.16 and earlier. Easily exploitable vulnerability allows low privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS v3.0 Base Score 6.5 (Availability impacts)."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "RHSA-2017:2787",
              "refsource": "REDHAT",
              "url": "https://access.redhat.com/errata/RHSA-2017:2787"
            },
            {
              "name": "GLSA-201702-17",
              "refsource": "GENTOO",
              "url": "https://security.gentoo.org/glsa/201702-17"
            },
            {
              "name": "RHSA-2018:0574",
              "refsource": "REDHAT",
              "url": "https://access.redhat.com/errata/RHSA-2018:0574"
            },
            {
              "name": "GLSA-201702-18",
              "refsource": "GENTOO",
              "url": "https://security.gentoo.org/glsa/201702-18"
            },
            {
              "name": "1037640",
              "refsource": "SECTRACK",
              "url": "http://www.securitytracker.com/id/1037640"
            },
            {
              "name": "RHSA-2018:0279",
              "refsource": "REDHAT",
              "url": "https://access.redhat.com/errata/RHSA-2018:0279"
            },
            {
              "name": "95589",
              "refsource": "BID",
              "url": "http://www.securityfocus.com/bid/95589"
            },
            {
              "name": "RHSA-2017:2886",
              "refsource": "REDHAT",
              "url": "https://access.redhat.com/errata/RHSA-2017:2886"
            },
            {
              "name": "http://www.oracle.com/technetwork/security-advisory/cpujan2017-2881727.html",
              "refsource": "CONFIRM",
              "url": "http://www.oracle.com/technetwork/security-advisory/cpujan2017-2881727.html"
            },
            {
              "name": "DSA-3770",
              "refsource": "DEBIAN",
              "url": "http://www.debian.org/security/2017/dsa-3770"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "43595867-4340-4103-b7a2-9a5208d29a85",
    "assignerShortName": "oracle",
    "cveId": "CVE-2017-3257",
    "datePublished": "2017-01-27T22:01:00",
    "dateReserved": "2016-12-06T00:00:00",
    "dateUpdated": "2024-10-09T19:40:40.335Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

CVE-2017-3273 (GCVE-0-2017-3273)

Vulnerability from cvelistv5

Published

2017-01-27 22:01

Modified

2024-10-09 19:36

Severity ?

CWE

CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Summary

Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: DDL). Supported versions that are affected are 5.6.34 and earlier and 5.7.16 and earlier. Easily exploitable vulnerability allows low privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS v3.0 Base Score 6.5 (Availability impacts).

References

URL

Tags

	https://access.redhat.com/errata/RHSA-2017:2787	vendor-advisory, x_refsource_REDHAT
	https://security.gentoo.org/glsa/201702-17	vendor-advisory, x_refsource_GENTOO
	http://www.securityfocus.com/bid/95583	vdb-entry, x_refsource_BID
	http://www.securitytracker.com/id/1037640	vdb-entry, x_refsource_SECTRACK
	https://access.redhat.com/errata/RHSA-2017:2886	vendor-advisory, x_refsource_REDHAT
	http://www.oracle.com/technetwork/security-advisory/cpujan2017-2881727.html	x_refsource_CONFIRM

Impacted products

	Vendor	Product	Version
	Oracle	MySQL Server	Version: 5.6.34 and earlier Version: 5.7.16 and earlier

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-05T14:23:34.309Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "name": "RHSA-2017:2787",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2017:2787"
          },
          {
            "name": "GLSA-201702-17",
            "tags": [
              "vendor-advisory",
              "x_refsource_GENTOO",
              "x_transferred"
            ],
            "url": "https://security.gentoo.org/glsa/201702-17"
          },
          {
            "name": "95583",
            "tags": [
              "vdb-entry",
              "x_refsource_BID",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/bid/95583"
          },
          {
            "name": "1037640",
            "tags": [
              "vdb-entry",
              "x_refsource_SECTRACK",
              "x_transferred"
            ],
            "url": "http://www.securitytracker.com/id/1037640"
          },
          {
            "name": "RHSA-2017:2886",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2017:2886"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://www.oracle.com/technetwork/security-advisory/cpujan2017-2881727.html"
          }
        ],
        "title": "CVE Program Container"
      },
      {
        "metrics": [
          {
            "other": {
              "content": {
                "id": "CVE-2017-3273",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "partial"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2024-10-09T19:30:03.966427Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2024-10-09T19:36:25.726Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "MySQL Server",
          "vendor": "Oracle",
          "versions": [
            {
              "status": "affected",
              "version": "5.6.34 and earlier"
            },
            {
              "status": "affected",
              "version": "5.7.16 and earlier"
            }
          ]
        }
      ],
      "datePublic": "2017-01-17T00:00:00",
      "descriptions": [
        {
          "lang": "en",
          "value": "Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: DDL). Supported versions that are affected are 5.6.34 and earlier and 5.7.16 and earlier. Easily exploitable vulnerability allows low privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS v3.0 Base Score 6.5 (Availability impacts)."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2017-12-08T10:57:01",
        "orgId": "43595867-4340-4103-b7a2-9a5208d29a85",
        "shortName": "oracle"
      },
      "references": [
        {
          "name": "RHSA-2017:2787",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2017:2787"
        },
        {
          "name": "GLSA-201702-17",
          "tags": [
            "vendor-advisory",
            "x_refsource_GENTOO"
          ],
          "url": "https://security.gentoo.org/glsa/201702-17"
        },
        {
          "name": "95583",
          "tags": [
            "vdb-entry",
            "x_refsource_BID"
          ],
          "url": "http://www.securityfocus.com/bid/95583"
        },
        {
          "name": "1037640",
          "tags": [
            "vdb-entry",
            "x_refsource_SECTRACK"
          ],
          "url": "http://www.securitytracker.com/id/1037640"
        },
        {
          "name": "RHSA-2017:2886",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2017:2886"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://www.oracle.com/technetwork/security-advisory/cpujan2017-2881727.html"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "secalert_us@oracle.com",
          "ID": "CVE-2017-3273",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "MySQL Server",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "5.6.34 and earlier"
                          },
                          {
                            "version_value": "5.7.16 and earlier"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "Oracle"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: DDL). Supported versions that are affected are 5.6.34 and earlier and 5.7.16 and earlier. Easily exploitable vulnerability allows low privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS v3.0 Base Score 6.5 (Availability impacts)."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "RHSA-2017:2787",
              "refsource": "REDHAT",
              "url": "https://access.redhat.com/errata/RHSA-2017:2787"
            },
            {
              "name": "GLSA-201702-17",
              "refsource": "GENTOO",
              "url": "https://security.gentoo.org/glsa/201702-17"
            },
            {
              "name": "95583",
              "refsource": "BID",
              "url": "http://www.securityfocus.com/bid/95583"
            },
            {
              "name": "1037640",
              "refsource": "SECTRACK",
              "url": "http://www.securitytracker.com/id/1037640"
            },
            {
              "name": "RHSA-2017:2886",
              "refsource": "REDHAT",
              "url": "https://access.redhat.com/errata/RHSA-2017:2886"
            },
            {
              "name": "http://www.oracle.com/technetwork/security-advisory/cpujan2017-2881727.html",
              "refsource": "CONFIRM",
              "url": "http://www.oracle.com/technetwork/security-advisory/cpujan2017-2881727.html"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "43595867-4340-4103-b7a2-9a5208d29a85",
    "assignerShortName": "oracle",
    "cveId": "CVE-2017-3273",
    "datePublished": "2017-01-27T22:01:00",
    "dateReserved": "2016-12-06T00:00:00",
    "dateUpdated": "2024-10-09T19:36:25.726Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

CVE-2017-3637 (GCVE-0-2017-3637)

Vulnerability from cvelistv5

Published

2017-08-08 15:00

Modified

2024-10-04 17:02

Severity ?

CWE

Difficult to exploit vulnerability allows low privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server.

Summary

Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: X Plugin). Supported versions that are affected are 5.7.18 and earlier. Difficult to exploit vulnerability allows low privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.0 Base Score 5.3 (Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H).

References

URL

Tags

	http://www.securitytracker.com/id/1038928	vdb-entry, x_refsource_SECTRACK
	https://access.redhat.com/errata/RHSA-2017:2886	vendor-advisory, x_refsource_REDHAT
	http://www.oracle.com/technetwork/security-advisory/cpujul2017-3236622.html	x_refsource_CONFIRM
	http://www.securityfocus.com/bid/99748	vdb-entry, x_refsource_BID

Impacted products

	Vendor	Product	Version
	Oracle Corporation	MySQL Server	Version: 5.7.18 and earlier

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-05T14:30:58.964Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "name": "1038928",
            "tags": [
              "vdb-entry",
              "x_refsource_SECTRACK",
              "x_transferred"
            ],
            "url": "http://www.securitytracker.com/id/1038928"
          },
          {
            "name": "RHSA-2017:2886",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2017:2886"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://www.oracle.com/technetwork/security-advisory/cpujul2017-3236622.html"
          },
          {
            "name": "99748",
            "tags": [
              "vdb-entry",
              "x_refsource_BID",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/bid/99748"
          }
        ],
        "title": "CVE Program Container"
      },
      {
        "metrics": [
          {
            "other": {
              "content": {
                "id": "CVE-2017-3637",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "partial"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2024-10-04T15:48:20.896087Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2024-10-04T17:02:59.023Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "MySQL Server",
          "vendor": "Oracle Corporation",
          "versions": [
            {
              "status": "affected",
              "version": "5.7.18 and earlier"
            }
          ]
        }
      ],
      "datePublic": "2017-07-18T00:00:00",
      "descriptions": [
        {
          "lang": "en",
          "value": "Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: X Plugin). Supported versions that are affected are 5.7.18 and earlier. Difficult to exploit vulnerability allows low privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.0 Base Score 5.3 (Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H)."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "Difficult to exploit vulnerability allows low privileged attacker with network access via multiple protocols to compromise MySQL Server.  Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server.",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2017-12-07T10:57:01",
        "orgId": "43595867-4340-4103-b7a2-9a5208d29a85",
        "shortName": "oracle"
      },
      "references": [
        {
          "name": "1038928",
          "tags": [
            "vdb-entry",
            "x_refsource_SECTRACK"
          ],
          "url": "http://www.securitytracker.com/id/1038928"
        },
        {
          "name": "RHSA-2017:2886",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2017:2886"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://www.oracle.com/technetwork/security-advisory/cpujul2017-3236622.html"
        },
        {
          "name": "99748",
          "tags": [
            "vdb-entry",
            "x_refsource_BID"
          ],
          "url": "http://www.securityfocus.com/bid/99748"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "secalert_us@oracle.com",
          "ID": "CVE-2017-3637",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "MySQL Server",
                      "version": {
                        "version_data": [
                          {
                            "version_affected": "=",
                            "version_value": "5.7.18 and earlier"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "Oracle Corporation"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: X Plugin). Supported versions that are affected are 5.7.18 and earlier. Difficult to exploit vulnerability allows low privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.0 Base Score 5.3 (Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H)."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "Difficult to exploit vulnerability allows low privileged attacker with network access via multiple protocols to compromise MySQL Server.  Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server."
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "1038928",
              "refsource": "SECTRACK",
              "url": "http://www.securitytracker.com/id/1038928"
            },
            {
              "name": "RHSA-2017:2886",
              "refsource": "REDHAT",
              "url": "https://access.redhat.com/errata/RHSA-2017:2886"
            },
            {
              "name": "http://www.oracle.com/technetwork/security-advisory/cpujul2017-3236622.html",
              "refsource": "CONFIRM",
              "url": "http://www.oracle.com/technetwork/security-advisory/cpujul2017-3236622.html"
            },
            {
              "name": "99748",
              "refsource": "BID",
              "url": "http://www.securityfocus.com/bid/99748"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "43595867-4340-4103-b7a2-9a5208d29a85",
    "assignerShortName": "oracle",
    "cveId": "CVE-2017-3637",
    "datePublished": "2017-08-08T15:00:00",
    "dateReserved": "2016-12-06T00:00:00",
    "dateUpdated": "2024-10-04T17:02:59.023Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

CVE-2017-3331 (GCVE-0-2017-3331)

Vulnerability from cvelistv5

Published

2017-04-24 19:00

Modified

2024-10-07 16:21

Severity ?

CWE

Easily "exploitable" vulnerability allows low privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server.

Summary

Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: DML). The supported version that is affected is 5.7.11 to 5.7.17. Easily "exploitable" vulnerability allows low privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.0 Base Score 6.5 (Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H).

References

URL

Tags

	http://www.securitytracker.com/id/1038287	vdb-entry, x_refsource_SECTRACK
	http://www.oracle.com/technetwork/security-advisory/cpuapr2017-3236618.html	x_refsource_CONFIRM
	http://www.securityfocus.com/bid/97772	vdb-entry, x_refsource_BID
	https://access.redhat.com/errata/RHSA-2017:2886	vendor-advisory, x_refsource_REDHAT

Impacted products

	Vendor	Product	Version
	Oracle Corporation	MySQL Server	Version: 5.7.11 to 5.7.17

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-05T14:23:34.045Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "name": "1038287",
            "tags": [
              "vdb-entry",
              "x_refsource_SECTRACK",
              "x_transferred"
            ],
            "url": "http://www.securitytracker.com/id/1038287"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://www.oracle.com/technetwork/security-advisory/cpuapr2017-3236618.html"
          },
          {
            "name": "97772",
            "tags": [
              "vdb-entry",
              "x_refsource_BID",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/bid/97772"
          },
          {
            "name": "RHSA-2017:2886",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2017:2886"
          }
        ],
        "title": "CVE Program Container"
      },
      {
        "metrics": [
          {
            "other": {
              "content": {
                "id": "CVE-2017-3331",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "partial"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2024-10-07T15:46:15.737215Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2024-10-07T16:21:23.909Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "MySQL Server",
          "vendor": "Oracle Corporation",
          "versions": [
            {
              "status": "affected",
              "version": "5.7.11 to 5.7.17"
            }
          ]
        }
      ],
      "datePublic": "2017-04-18T00:00:00",
      "descriptions": [
        {
          "lang": "en",
          "value": "Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: DML). The supported version that is affected is 5.7.11 to 5.7.17. Easily \"exploitable\" vulnerability allows low privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.0 Base Score 6.5 (Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H)."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "Easily \"exploitable\" vulnerability allows low privileged attacker with network access via multiple protocols to compromise MySQL Server.  Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server.",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2017-12-07T10:57:01",
        "orgId": "43595867-4340-4103-b7a2-9a5208d29a85",
        "shortName": "oracle"
      },
      "references": [
        {
          "name": "1038287",
          "tags": [
            "vdb-entry",
            "x_refsource_SECTRACK"
          ],
          "url": "http://www.securitytracker.com/id/1038287"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://www.oracle.com/technetwork/security-advisory/cpuapr2017-3236618.html"
        },
        {
          "name": "97772",
          "tags": [
            "vdb-entry",
            "x_refsource_BID"
          ],
          "url": "http://www.securityfocus.com/bid/97772"
        },
        {
          "name": "RHSA-2017:2886",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2017:2886"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "secalert_us@oracle.com",
          "ID": "CVE-2017-3331",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "MySQL Server",
                      "version": {
                        "version_data": [
                          {
                            "version_affected": "=",
                            "version_value": "5.7.11 to 5.7.17"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "Oracle Corporation"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: DML). The supported version that is affected is 5.7.11 to 5.7.17. Easily \"exploitable\" vulnerability allows low privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.0 Base Score 6.5 (Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H)."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "Easily \"exploitable\" vulnerability allows low privileged attacker with network access via multiple protocols to compromise MySQL Server.  Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server."
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "1038287",
              "refsource": "SECTRACK",
              "url": "http://www.securitytracker.com/id/1038287"
            },
            {
              "name": "http://www.oracle.com/technetwork/security-advisory/cpuapr2017-3236618.html",
              "refsource": "CONFIRM",
              "url": "http://www.oracle.com/technetwork/security-advisory/cpuapr2017-3236618.html"
            },
            {
              "name": "97772",
              "refsource": "BID",
              "url": "http://www.securityfocus.com/bid/97772"
            },
            {
              "name": "RHSA-2017:2886",
              "refsource": "REDHAT",
              "url": "https://access.redhat.com/errata/RHSA-2017:2886"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "43595867-4340-4103-b7a2-9a5208d29a85",
    "assignerShortName": "oracle",
    "cveId": "CVE-2017-3331",
    "datePublished": "2017-04-24T19:00:00",
    "dateReserved": "2016-12-06T00:00:00",
    "dateUpdated": "2024-10-07T16:21:23.909Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

CVE-2017-3464 (GCVE-0-2017-3464)

Vulnerability from cvelistv5

Published

2017-04-24 19:00

Modified

2024-10-07 16:18

Severity ?

CWE

Easily "exploitable" vulnerability allows low privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of MySQL Server accessible data.

Summary

Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: DDL). Supported versions that are affected are 5.5.54 and earlier, 5.6.35 and earlier and 5.7.17 and earlier. Easily "exploitable" vulnerability allows low privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of MySQL Server accessible data. CVSS 3.0 Base Score 4.3 (Integrity impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N).

References

URL

Tags

	https://access.redhat.com/errata/RHSA-2017:2787	vendor-advisory, x_refsource_REDHAT
	http://www.securitytracker.com/id/1038287	vdb-entry, x_refsource_SECTRACK
	http://www.oracle.com/technetwork/security-advisory/cpuapr2017-3236618.html	x_refsource_CONFIRM
	https://access.redhat.com/errata/RHSA-2018:0574	vendor-advisory, x_refsource_REDHAT
	http://www.securityfocus.com/bid/97818	vdb-entry, x_refsource_BID
	http://www.debian.org/security/2017/dsa-3944	vendor-advisory, x_refsource_DEBIAN
	https://access.redhat.com/errata/RHSA-2018:0279	vendor-advisory, x_refsource_REDHAT
	http://www.debian.org/security/2017/dsa-3834	vendor-advisory, x_refsource_DEBIAN
	https://access.redhat.com/errata/RHSA-2017:2886	vendor-advisory, x_refsource_REDHAT
	https://access.redhat.com/errata/RHSA-2017:2192	vendor-advisory, x_refsource_REDHAT

Impacted products

	Vendor	Product	Version
	Oracle Corporation	MySQL Server	Version: 5.5.54 and earlier Version: 5.6.35 and earlier Version: 5.7.17 and earlier

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-05T14:30:56.811Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "name": "RHSA-2017:2787",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2017:2787"
          },
          {
            "name": "1038287",
            "tags": [
              "vdb-entry",
              "x_refsource_SECTRACK",
              "x_transferred"
            ],
            "url": "http://www.securitytracker.com/id/1038287"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://www.oracle.com/technetwork/security-advisory/cpuapr2017-3236618.html"
          },
          {
            "name": "RHSA-2018:0574",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2018:0574"
          },
          {
            "name": "97818",
            "tags": [
              "vdb-entry",
              "x_refsource_BID",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/bid/97818"
          },
          {
            "name": "DSA-3944",
            "tags": [
              "vendor-advisory",
              "x_refsource_DEBIAN",
              "x_transferred"
            ],
            "url": "http://www.debian.org/security/2017/dsa-3944"
          },
          {
            "name": "RHSA-2018:0279",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2018:0279"
          },
          {
            "name": "DSA-3834",
            "tags": [
              "vendor-advisory",
              "x_refsource_DEBIAN",
              "x_transferred"
            ],
            "url": "http://www.debian.org/security/2017/dsa-3834"
          },
          {
            "name": "RHSA-2017:2886",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2017:2886"
          },
          {
            "name": "RHSA-2017:2192",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2017:2192"
          }
        ],
        "title": "CVE Program Container"
      },
      {
        "metrics": [
          {
            "other": {
              "content": {
                "id": "CVE-2017-3464",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "partial"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2024-10-07T15:45:55.660486Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2024-10-07T16:18:54.996Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "MySQL Server",
          "vendor": "Oracle Corporation",
          "versions": [
            {
              "status": "affected",
              "version": "5.5.54 and earlier"
            },
            {
              "status": "affected",
              "version": "5.6.35 and earlier"
            },
            {
              "status": "affected",
              "version": "5.7.17 and earlier"
            }
          ]
        }
      ],
      "datePublic": "2017-04-18T00:00:00",
      "descriptions": [
        {
          "lang": "en",
          "value": "Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: DDL). Supported versions that are affected are 5.5.54 and earlier, 5.6.35 and earlier and 5.7.17 and earlier. Easily \"exploitable\" vulnerability allows low privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of MySQL Server accessible data. CVSS 3.0 Base Score 4.3 (Integrity impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N)."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "Easily \"exploitable\" vulnerability allows low privileged attacker with network access via multiple protocols to compromise MySQL Server.  Successful attacks of this vulnerability can result in  unauthorized update, insert or delete access to some of MySQL Server accessible data.",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2018-03-22T09:57:01",
        "orgId": "43595867-4340-4103-b7a2-9a5208d29a85",
        "shortName": "oracle"
      },
      "references": [
        {
          "name": "RHSA-2017:2787",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2017:2787"
        },
        {
          "name": "1038287",
          "tags": [
            "vdb-entry",
            "x_refsource_SECTRACK"
          ],
          "url": "http://www.securitytracker.com/id/1038287"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://www.oracle.com/technetwork/security-advisory/cpuapr2017-3236618.html"
        },
        {
          "name": "RHSA-2018:0574",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2018:0574"
        },
        {
          "name": "97818",
          "tags": [
            "vdb-entry",
            "x_refsource_BID"
          ],
          "url": "http://www.securityfocus.com/bid/97818"
        },
        {
          "name": "DSA-3944",
          "tags": [
            "vendor-advisory",
            "x_refsource_DEBIAN"
          ],
          "url": "http://www.debian.org/security/2017/dsa-3944"
        },
        {
          "name": "RHSA-2018:0279",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2018:0279"
        },
        {
          "name": "DSA-3834",
          "tags": [
            "vendor-advisory",
            "x_refsource_DEBIAN"
          ],
          "url": "http://www.debian.org/security/2017/dsa-3834"
        },
        {
          "name": "RHSA-2017:2886",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2017:2886"
        },
        {
          "name": "RHSA-2017:2192",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2017:2192"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "secalert_us@oracle.com",
          "ID": "CVE-2017-3464",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "MySQL Server",
                      "version": {
                        "version_data": [
                          {
                            "version_affected": "=",
                            "version_value": "5.5.54 and earlier"
                          },
                          {
                            "version_affected": "=",
                            "version_value": "5.6.35 and earlier"
                          },
                          {
                            "version_affected": "=",
                            "version_value": "5.7.17 and earlier"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "Oracle Corporation"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: DDL). Supported versions that are affected are 5.5.54 and earlier, 5.6.35 and earlier and 5.7.17 and earlier. Easily \"exploitable\" vulnerability allows low privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of MySQL Server accessible data. CVSS 3.0 Base Score 4.3 (Integrity impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N)."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "Easily \"exploitable\" vulnerability allows low privileged attacker with network access via multiple protocols to compromise MySQL Server.  Successful attacks of this vulnerability can result in  unauthorized update, insert or delete access to some of MySQL Server accessible data."
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "RHSA-2017:2787",
              "refsource": "REDHAT",
              "url": "https://access.redhat.com/errata/RHSA-2017:2787"
            },
            {
              "name": "1038287",
              "refsource": "SECTRACK",
              "url": "http://www.securitytracker.com/id/1038287"
            },
            {
              "name": "http://www.oracle.com/technetwork/security-advisory/cpuapr2017-3236618.html",
              "refsource": "CONFIRM",
              "url": "http://www.oracle.com/technetwork/security-advisory/cpuapr2017-3236618.html"
            },
            {
              "name": "RHSA-2018:0574",
              "refsource": "REDHAT",
              "url": "https://access.redhat.com/errata/RHSA-2018:0574"
            },
            {
              "name": "97818",
              "refsource": "BID",
              "url": "http://www.securityfocus.com/bid/97818"
            },
            {
              "name": "DSA-3944",
              "refsource": "DEBIAN",
              "url": "http://www.debian.org/security/2017/dsa-3944"
            },
            {
              "name": "RHSA-2018:0279",
              "refsource": "REDHAT",
              "url": "https://access.redhat.com/errata/RHSA-2018:0279"
            },
            {
              "name": "DSA-3834",
              "refsource": "DEBIAN",
              "url": "http://www.debian.org/security/2017/dsa-3834"
            },
            {
              "name": "RHSA-2017:2886",
              "refsource": "REDHAT",
              "url": "https://access.redhat.com/errata/RHSA-2017:2886"
            },
            {
              "name": "RHSA-2017:2192",
              "refsource": "REDHAT",
              "url": "https://access.redhat.com/errata/RHSA-2017:2192"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "43595867-4340-4103-b7a2-9a5208d29a85",
    "assignerShortName": "oracle",
    "cveId": "CVE-2017-3464",
    "datePublished": "2017-04-24T19:00:00",
    "dateReserved": "2016-12-06T00:00:00",
    "dateUpdated": "2024-10-07T16:18:54.996Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

CVE-2017-3460 (GCVE-0-2017-3460)

Vulnerability from cvelistv5

Published

2017-04-24 19:00

Modified

2024-10-07 16:19

Severity ?

CWE

Easily "exploitable" vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server.

Summary

Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Audit Plug-in). Supported versions that are affected are 5.7.17 and earlier. Easily "exploitable" vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.0 Base Score 4.9 (Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H).

References

URL

Tags

	http://www.securitytracker.com/id/1038287	vdb-entry, x_refsource_SECTRACK
	http://www.oracle.com/technetwork/security-advisory/cpuapr2017-3236618.html	x_refsource_CONFIRM
	https://access.redhat.com/errata/RHSA-2017:2886	vendor-advisory, x_refsource_REDHAT
	http://www.securityfocus.com/bid/97826	vdb-entry, x_refsource_BID

Impacted products

	Vendor	Product	Version
	Oracle Corporation	MySQL Server	Version: 5.7.17 and earlier

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-05T14:30:56.896Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "name": "1038287",
            "tags": [
              "vdb-entry",
              "x_refsource_SECTRACK",
              "x_transferred"
            ],
            "url": "http://www.securitytracker.com/id/1038287"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://www.oracle.com/technetwork/security-advisory/cpuapr2017-3236618.html"
          },
          {
            "name": "RHSA-2017:2886",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2017:2886"
          },
          {
            "name": "97826",
            "tags": [
              "vdb-entry",
              "x_refsource_BID",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/bid/97826"
          }
        ],
        "title": "CVE Program Container"
      },
      {
        "metrics": [
          {
            "other": {
              "content": {
                "id": "CVE-2017-3460",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "partial"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2024-10-07T15:45:59.964899Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2024-10-07T16:19:29.954Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "MySQL Server",
          "vendor": "Oracle Corporation",
          "versions": [
            {
              "status": "affected",
              "version": "5.7.17 and earlier"
            }
          ]
        }
      ],
      "datePublic": "2017-04-18T00:00:00",
      "descriptions": [
        {
          "lang": "en",
          "value": "Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Audit Plug-in). Supported versions that are affected are 5.7.17 and earlier. Easily \"exploitable\" vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.0 Base Score 4.9 (Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H)."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "Easily \"exploitable\" vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server.  Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server.",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2017-12-07T10:57:01",
        "orgId": "43595867-4340-4103-b7a2-9a5208d29a85",
        "shortName": "oracle"
      },
      "references": [
        {
          "name": "1038287",
          "tags": [
            "vdb-entry",
            "x_refsource_SECTRACK"
          ],
          "url": "http://www.securitytracker.com/id/1038287"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://www.oracle.com/technetwork/security-advisory/cpuapr2017-3236618.html"
        },
        {
          "name": "RHSA-2017:2886",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2017:2886"
        },
        {
          "name": "97826",
          "tags": [
            "vdb-entry",
            "x_refsource_BID"
          ],
          "url": "http://www.securityfocus.com/bid/97826"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "secalert_us@oracle.com",
          "ID": "CVE-2017-3460",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "MySQL Server",
                      "version": {
                        "version_data": [
                          {
                            "version_affected": "=",
                            "version_value": "5.7.17 and earlier"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "Oracle Corporation"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Audit Plug-in). Supported versions that are affected are 5.7.17 and earlier. Easily \"exploitable\" vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.0 Base Score 4.9 (Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H)."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "Easily \"exploitable\" vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server.  Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server."
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "1038287",
              "refsource": "SECTRACK",
              "url": "http://www.securitytracker.com/id/1038287"
            },
            {
              "name": "http://www.oracle.com/technetwork/security-advisory/cpuapr2017-3236618.html",
              "refsource": "CONFIRM",
              "url": "http://www.oracle.com/technetwork/security-advisory/cpuapr2017-3236618.html"
            },
            {
              "name": "RHSA-2017:2886",
              "refsource": "REDHAT",
              "url": "https://access.redhat.com/errata/RHSA-2017:2886"
            },
            {
              "name": "97826",
              "refsource": "BID",
              "url": "http://www.securityfocus.com/bid/97826"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "43595867-4340-4103-b7a2-9a5208d29a85",
    "assignerShortName": "oracle",
    "cveId": "CVE-2017-3460",
    "datePublished": "2017-04-24T19:00:00",
    "dateReserved": "2016-12-06T00:00:00",
    "dateUpdated": "2024-10-07T16:19:29.954Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

CVE-2017-3653 (GCVE-0-2017-3653)

Vulnerability from cvelistv5

Published

2017-08-08 15:00

Modified

2024-10-04 17:01

Severity ?

CWE

Difficult to exploit vulnerability allows low privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of MySQL Server accessible data.

Summary

Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: DDL). Supported versions that are affected are 5.5.56 and earlier, 5.6.36 and earlier and 5.7.18 and earlier. Difficult to exploit vulnerability allows low privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of MySQL Server accessible data. CVSS 3.0 Base Score 3.1 (Integrity impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:H/PR:L/UI:N/S:U/C:N/I:L/A:N).

References

URL

Tags

	https://access.redhat.com/errata/RHSA-2017:2787	vendor-advisory, x_refsource_REDHAT
	https://access.redhat.com/errata/RHSA-2018:2729	vendor-advisory, x_refsource_REDHAT
	https://access.redhat.com/errata/RHSA-2018:0574	vendor-advisory, x_refsource_REDHAT
	http://www.debian.org/security/2017/dsa-3944	vendor-advisory, x_refsource_DEBIAN
	http://www.securitytracker.com/id/1038928	vdb-entry, x_refsource_SECTRACK
	https://www.debian.org/security/2017/dsa-3955	vendor-advisory, x_refsource_DEBIAN
	https://access.redhat.com/errata/RHSA-2018:0279	vendor-advisory, x_refsource_REDHAT
	https://access.redhat.com/errata/RHSA-2018:2439	vendor-advisory, x_refsource_REDHAT
	http://www.debian.org/security/2017/dsa-3922	vendor-advisory, x_refsource_DEBIAN
	http://www.securityfocus.com/bid/99810	vdb-entry, x_refsource_BID
	https://access.redhat.com/errata/RHSA-2017:2886	vendor-advisory, x_refsource_REDHAT
	http://www.oracle.com/technetwork/security-advisory/cpujul2017-3236622.html	x_refsource_CONFIRM

Impacted products

	Vendor	Product	Version
	Oracle Corporation	MySQL Server	Version: 5.5.56 and earlier Version: 5.6.36 and earlier Version: 5.7.18 and earlier

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-05T14:39:39.638Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "name": "RHSA-2017:2787",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2017:2787"
          },
          {
            "name": "RHSA-2018:2729",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2018:2729"
          },
          {
            "name": "RHSA-2018:0574",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2018:0574"
          },
          {
            "name": "DSA-3944",
            "tags": [
              "vendor-advisory",
              "x_refsource_DEBIAN",
              "x_transferred"
            ],
            "url": "http://www.debian.org/security/2017/dsa-3944"
          },
          {
            "name": "1038928",
            "tags": [
              "vdb-entry",
              "x_refsource_SECTRACK",
              "x_transferred"
            ],
            "url": "http://www.securitytracker.com/id/1038928"
          },
          {
            "name": "DSA-3955",
            "tags": [
              "vendor-advisory",
              "x_refsource_DEBIAN",
              "x_transferred"
            ],
            "url": "https://www.debian.org/security/2017/dsa-3955"
          },
          {
            "name": "RHSA-2018:0279",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2018:0279"
          },
          {
            "name": "RHSA-2018:2439",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2018:2439"
          },
          {
            "name": "DSA-3922",
            "tags": [
              "vendor-advisory",
              "x_refsource_DEBIAN",
              "x_transferred"
            ],
            "url": "http://www.debian.org/security/2017/dsa-3922"
          },
          {
            "name": "99810",
            "tags": [
              "vdb-entry",
              "x_refsource_BID",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/bid/99810"
          },
          {
            "name": "RHSA-2017:2886",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2017:2886"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://www.oracle.com/technetwork/security-advisory/cpujul2017-3236622.html"
          }
        ],
        "title": "CVE Program Container"
      },
      {
        "metrics": [
          {
            "other": {
              "content": {
                "id": "CVE-2017-3653",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "partial"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2024-10-04T15:47:41.128631Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2024-10-04T17:01:05.252Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "MySQL Server",
          "vendor": "Oracle Corporation",
          "versions": [
            {
              "status": "affected",
              "version": "5.5.56 and earlier"
            },
            {
              "status": "affected",
              "version": "5.6.36 and earlier"
            },
            {
              "status": "affected",
              "version": "5.7.18 and earlier"
            }
          ]
        }
      ],
      "datePublic": "2017-07-18T00:00:00",
      "descriptions": [
        {
          "lang": "en",
          "value": "Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: DDL). Supported versions that are affected are 5.5.56 and earlier, 5.6.36 and earlier and 5.7.18 and earlier. Difficult to exploit vulnerability allows low privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of MySQL Server accessible data. CVSS 3.0 Base Score 3.1 (Integrity impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:H/PR:L/UI:N/S:U/C:N/I:L/A:N)."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "Difficult to exploit vulnerability allows low privileged attacker with network access via multiple protocols to compromise MySQL Server.  Successful attacks of this vulnerability can result in  unauthorized update, insert or delete access to some of MySQL Server accessible data.",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2018-09-21T09:57:01",
        "orgId": "43595867-4340-4103-b7a2-9a5208d29a85",
        "shortName": "oracle"
      },
      "references": [
        {
          "name": "RHSA-2017:2787",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2017:2787"
        },
        {
          "name": "RHSA-2018:2729",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2018:2729"
        },
        {
          "name": "RHSA-2018:0574",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2018:0574"
        },
        {
          "name": "DSA-3944",
          "tags": [
            "vendor-advisory",
            "x_refsource_DEBIAN"
          ],
          "url": "http://www.debian.org/security/2017/dsa-3944"
        },
        {
          "name": "1038928",
          "tags": [
            "vdb-entry",
            "x_refsource_SECTRACK"
          ],
          "url": "http://www.securitytracker.com/id/1038928"
        },
        {
          "name": "DSA-3955",
          "tags": [
            "vendor-advisory",
            "x_refsource_DEBIAN"
          ],
          "url": "https://www.debian.org/security/2017/dsa-3955"
        },
        {
          "name": "RHSA-2018:0279",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2018:0279"
        },
        {
          "name": "RHSA-2018:2439",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2018:2439"
        },
        {
          "name": "DSA-3922",
          "tags": [
            "vendor-advisory",
            "x_refsource_DEBIAN"
          ],
          "url": "http://www.debian.org/security/2017/dsa-3922"
        },
        {
          "name": "99810",
          "tags": [
            "vdb-entry",
            "x_refsource_BID"
          ],
          "url": "http://www.securityfocus.com/bid/99810"
        },
        {
          "name": "RHSA-2017:2886",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2017:2886"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://www.oracle.com/technetwork/security-advisory/cpujul2017-3236622.html"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "secalert_us@oracle.com",
          "ID": "CVE-2017-3653",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "MySQL Server",
                      "version": {
                        "version_data": [
                          {
                            "version_affected": "=",
                            "version_value": "5.5.56 and earlier"
                          },
                          {
                            "version_affected": "=",
                            "version_value": "5.6.36 and earlier"
                          },
                          {
                            "version_affected": "=",
                            "version_value": "5.7.18 and earlier"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "Oracle Corporation"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: DDL). Supported versions that are affected are 5.5.56 and earlier, 5.6.36 and earlier and 5.7.18 and earlier. Difficult to exploit vulnerability allows low privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of MySQL Server accessible data. CVSS 3.0 Base Score 3.1 (Integrity impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:H/PR:L/UI:N/S:U/C:N/I:L/A:N)."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "Difficult to exploit vulnerability allows low privileged attacker with network access via multiple protocols to compromise MySQL Server.  Successful attacks of this vulnerability can result in  unauthorized update, insert or delete access to some of MySQL Server accessible data."
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "RHSA-2017:2787",
              "refsource": "REDHAT",
              "url": "https://access.redhat.com/errata/RHSA-2017:2787"
            },
            {
              "name": "RHSA-2018:2729",
              "refsource": "REDHAT",
              "url": "https://access.redhat.com/errata/RHSA-2018:2729"
            },
            {
              "name": "RHSA-2018:0574",
              "refsource": "REDHAT",
              "url": "https://access.redhat.com/errata/RHSA-2018:0574"
            },
            {
              "name": "DSA-3944",
              "refsource": "DEBIAN",
              "url": "http://www.debian.org/security/2017/dsa-3944"
            },
            {
              "name": "1038928",
              "refsource": "SECTRACK",
              "url": "http://www.securitytracker.com/id/1038928"
            },
            {
              "name": "DSA-3955",
              "refsource": "DEBIAN",
              "url": "https://www.debian.org/security/2017/dsa-3955"
            },
            {
              "name": "RHSA-2018:0279",
              "refsource": "REDHAT",
              "url": "https://access.redhat.com/errata/RHSA-2018:0279"
            },
            {
              "name": "RHSA-2018:2439",
              "refsource": "REDHAT",
              "url": "https://access.redhat.com/errata/RHSA-2018:2439"
            },
            {
              "name": "DSA-3922",
              "refsource": "DEBIAN",
              "url": "http://www.debian.org/security/2017/dsa-3922"
            },
            {
              "name": "99810",
              "refsource": "BID",
              "url": "http://www.securityfocus.com/bid/99810"
            },
            {
              "name": "RHSA-2017:2886",
              "refsource": "REDHAT",
              "url": "https://access.redhat.com/errata/RHSA-2017:2886"
            },
            {
              "name": "http://www.oracle.com/technetwork/security-advisory/cpujul2017-3236622.html",
              "refsource": "CONFIRM",
              "url": "http://www.oracle.com/technetwork/security-advisory/cpujul2017-3236622.html"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "43595867-4340-4103-b7a2-9a5208d29a85",
    "assignerShortName": "oracle",
    "cveId": "CVE-2017-3653",
    "datePublished": "2017-08-08T15:00:00",
    "dateReserved": "2016-12-06T00:00:00",
    "dateUpdated": "2024-10-04T17:01:05.252Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

CVE-2017-3649 (GCVE-0-2017-3649)

Vulnerability from cvelistv5

Published

2017-08-08 15:00

Modified

2024-10-04 17:01

Severity ?

CWE

Summary

References

URL

Tags

	https://access.redhat.com/errata/RHSA-2017:2787	vendor-advisory, x_refsource_REDHAT
	http://www.securitytracker.com/id/1038928	vdb-entry, x_refsource_SECTRACK
	http://www.securityfocus.com/bid/99799	vdb-entry, x_refsource_BID
	https://access.redhat.com/errata/RHSA-2017:2886	vendor-advisory, x_refsource_REDHAT
	http://www.oracle.com/technetwork/security-advisory/cpujul2017-3236622.html	x_refsource_CONFIRM

Impacted products

	Vendor	Product	Version
	n/a	n/a	Version: n/a

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-05T14:30:58.552Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "name": "RHSA-2017:2787",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2017:2787"
          },
          {
            "name": "1038928",
            "tags": [
              "vdb-entry",
              "x_refsource_SECTRACK",
              "x_transferred"
            ],
            "url": "http://www.securitytracker.com/id/1038928"
          },
          {
            "name": "99799",
            "tags": [
              "vdb-entry",
              "x_refsource_BID",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/bid/99799"
          },
          {
            "name": "RHSA-2017:2886",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2017:2886"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://www.oracle.com/technetwork/security-advisory/cpujul2017-3236622.html"
          }
        ],
        "title": "CVE Program Container"
      },
      {
        "metrics": [
          {
            "other": {
              "content": {
                "id": "CVE-2017-3649",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "partial"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2024-10-04T15:47:49.948399Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2024-10-04T17:01:31.768Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "datePublic": "2017-07-18T00:00:00",
      "descriptions": [
        {
          "lang": "en",
          "value": "Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Replication). Supported versions that are affected are 5.6.36 and earlier and 5.7.18 and earlier. Difficult to exploit vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.0 Base Score 4.4 (Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:H)."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "n/a",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2017-12-08T10:57:01",
        "orgId": "43595867-4340-4103-b7a2-9a5208d29a85",
        "shortName": "oracle"
      },
      "references": [
        {
          "name": "RHSA-2017:2787",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2017:2787"
        },
        {
          "name": "1038928",
          "tags": [
            "vdb-entry",
            "x_refsource_SECTRACK"
          ],
          "url": "http://www.securitytracker.com/id/1038928"
        },
        {
          "name": "99799",
          "tags": [
            "vdb-entry",
            "x_refsource_BID"
          ],
          "url": "http://www.securityfocus.com/bid/99799"
        },
        {
          "name": "RHSA-2017:2886",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2017:2886"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://www.oracle.com/technetwork/security-advisory/cpujul2017-3236622.html"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "secalert_us@oracle.com",
          "ID": "CVE-2017-3649",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "n/a",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "n/a"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "n/a"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Replication). Supported versions that are affected are 5.6.36 and earlier and 5.7.18 and earlier. Difficult to exploit vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.0 Base Score 4.4 (Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:H)."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "n/a"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "RHSA-2017:2787",
              "refsource": "REDHAT",
              "url": "https://access.redhat.com/errata/RHSA-2017:2787"
            },
            {
              "name": "1038928",
              "refsource": "SECTRACK",
              "url": "http://www.securitytracker.com/id/1038928"
            },
            {
              "name": "99799",
              "refsource": "BID",
              "url": "http://www.securityfocus.com/bid/99799"
            },
            {
              "name": "RHSA-2017:2886",
              "refsource": "REDHAT",
              "url": "https://access.redhat.com/errata/RHSA-2017:2886"
            },
            {
              "name": "http://www.oracle.com/technetwork/security-advisory/cpujul2017-3236622.html",
              "refsource": "CONFIRM",
              "url": "http://www.oracle.com/technetwork/security-advisory/cpujul2017-3236622.html"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "43595867-4340-4103-b7a2-9a5208d29a85",
    "assignerShortName": "oracle",
    "cveId": "CVE-2017-3649",
    "datePublished": "2017-08-08T15:00:00",
    "dateReserved": "2016-12-06T00:00:00",
    "dateUpdated": "2024-10-04T17:01:31.768Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

Tags

Taxonomy of the tags.

All sightings related to this event Export sightings related to this event

Sightings

Author	Source	Type	Date

Nomenclature

Seen: The vulnerability was mentioned, discussed, or seen somewhere by the user.
Confirmed: The vulnerability is confirmed from an analyst perspective.
Published Proof of Concept: A public proof of concept is available for this vulnerability.
Exploited: This vulnerability was exploited and seen by the user reporting the sighting.
Patched: This vulnerability was successfully patched by the user reporting the sighting.
Not exploited: This vulnerability was not exploited or seen by the user reporting the sighting.
Not confirmed: The user expresses doubt about the veracity of the vulnerability.
Not patched: This vulnerability was not successfully patched by the user reporting the sighting.

Action not permitted

RHSA-2017:2886

Vulnerability from csaf_redhat

CVE-2017-3640 (GCVE-0-2017-3640)

Vulnerability from cvelistv5

CVE-2017-3648 (GCVE-0-2017-3648)

Vulnerability from cvelistv5

CVE-2017-3256 (GCVE-0-2017-3256)

Vulnerability from cvelistv5

CVE-2017-3468 (GCVE-0-2017-3468)

Vulnerability from cvelistv5

CVE-2017-3641 (GCVE-0-2017-3641)

Vulnerability from cvelistv5

CVE-2017-3251 (GCVE-0-2017-3251)

Vulnerability from cvelistv5

CVE-2017-3258 (GCVE-0-2017-3258)

Vulnerability from cvelistv5

CVE-2017-3599 (GCVE-0-2017-3599)

Vulnerability from cvelistv5

CVE-2017-3646 (GCVE-0-2017-3646)

Vulnerability from cvelistv5

CVE-2017-3454 (GCVE-0-2017-3454)

Vulnerability from cvelistv5

CVE-2017-3529 (GCVE-0-2017-3529)

Vulnerability from cvelistv5

CVE-2017-3639 (GCVE-0-2017-3639)

Vulnerability from cvelistv5

CVE-2017-3645 (GCVE-0-2017-3645)

Vulnerability from cvelistv5

CVE-2017-3456 (GCVE-0-2017-3456)

Vulnerability from cvelistv5

CVE-2017-3317 (GCVE-0-2017-3317)

Vulnerability from cvelistv5

CVE-2017-3455 (GCVE-0-2017-3455)

Vulnerability from cvelistv5

CVE-2017-3650 (GCVE-0-2017-3650)

Vulnerability from cvelistv5

CVE-2017-3462 (GCVE-0-2017-3462)

Vulnerability from cvelistv5

CVE-2017-3463 (GCVE-0-2017-3463)

Vulnerability from cvelistv5

CVE-2017-3238 (GCVE-0-2017-3238)

Vulnerability from cvelistv5

CVE-2019-2730 (GCVE-0-2019-2730)

Vulnerability from cvelistv5

CVE-2016-8327 (GCVE-0-2016-8327)

Vulnerability from cvelistv5

CVE-2017-3309 (GCVE-0-2017-3309)

Vulnerability from cvelistv5

CVE-2017-3643 (GCVE-0-2017-3643)

Vulnerability from cvelistv5

CVE-2017-3642 (GCVE-0-2017-3642)

Vulnerability from cvelistv5

CVE-2017-3318 (GCVE-0-2017-3318)

Vulnerability from cvelistv5

CVE-2017-3652 (GCVE-0-2017-3652)

Vulnerability from cvelistv5

CVE-2017-3461 (GCVE-0-2017-3461)

Vulnerability from cvelistv5

CVE-2017-3244 (GCVE-0-2017-3244)

Vulnerability from cvelistv5

CVE-2017-3453 (GCVE-0-2017-3453)

Vulnerability from cvelistv5

CVE-2017-3458 (GCVE-0-2017-3458)

Vulnerability from cvelistv5

CVE-2017-3644 (GCVE-0-2017-3644)

Vulnerability from cvelistv5

CVE-2017-3450 (GCVE-0-2017-3450)

Vulnerability from cvelistv5

CVE-2017-3634 (GCVE-0-2017-3634)

Vulnerability from cvelistv5

CVE-2017-3313 (GCVE-0-2017-3313)

Vulnerability from cvelistv5

CVE-2017-3638 (GCVE-0-2017-3638)

Vulnerability from cvelistv5

CVE-2017-3319 (GCVE-0-2017-3319)

Vulnerability from cvelistv5

CVE-2017-3312 (GCVE-0-2017-3312)

Vulnerability from cvelistv5

CVE-2016-5483 (GCVE-0-2016-5483)