csaf_redhat - rhsa-2017:2787

rhsa-2017:2787

Vulnerability from csaf_redhat

Published

2017-09-21 07:42

Modified

2025-11-08 04:15

Summary

Red Hat Security Advisory: rh-mysql56-mysql security and bug fix update

Notes

Topic

An update for rh-mysql56-mysql is now available for Red Hat Software Collections. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.

Details

MySQL is a multi-user, multi-threaded SQL database server. It consists of the MySQL server daemon, mysqld, and many client programs. The following packages have been upgraded to a later upstream version: rh-mysql56-mysql (5.6.37). Security Fix(es): * An integer overflow flaw leading to a buffer overflow was found in the way MySQL parsed connection handshake packets. An unauthenticated remote attacker with access to the MySQL port could use this flaw to crash the mysqld daemon. (CVE-2017-3599) * It was discovered that the mysql and mysqldump tools did not correctly handle database and table names containing newline characters. A database user with privileges to create databases or tables could cause the mysql command to execute arbitrary shell or SQL commands while restoring database backup created using the mysqldump tool. (CVE-2016-5483, CVE-2017-3600) * Multiple flaws were found in the way the MySQL init script handled initialization of the database data directory and permission setting on the error log file. The mysql operating system user could use these flaws to escalate their privileges to root. (CVE-2017-3265) * It was discovered that the mysqld_safe script honored the ledir option value set in a MySQL configuration file. A user able to modify one of the MySQL configuration files could use this flaw to escalate their privileges to root. (CVE-2017-3291) * It was discovered that the MySQL client command line tools only checked after authentication whether server supported SSL. A man-in-the-middle attacker could use this flaw to hijack client's authentication to the server even if the client was configured to require SSL connection. (CVE-2017-3305) * Multiple flaws were found in the way the mysqld_safe script handled creation of error log file. The mysql operating system user could use these flaws to escalate their privileges to root. (CVE-2017-3312) * A flaw was found in the way MySQL client library (libmysqlclient) handled prepared statements when server connection was lost. A malicious server or a man-in-the-middle attacker could possibly use this flaw to crash an application using libmysqlclient. (CVE-2017-3302) * This update fixes several vulnerabilities in the MySQL database server. Information about these flaws can be found on the Oracle Critical Patch Update Advisory pages listed in the References section. (CVE-2016-8327, CVE-2017-3238, CVE-2017-3244, CVE-2017-3257, CVE-2017-3258, CVE-2017-3273, CVE-2017-3308, CVE-2017-3309, CVE-2017-3313, CVE-2017-3317, CVE-2017-3318, CVE-2017-3450, CVE-2017-3452, CVE-2017-3453, CVE-2017-3456, CVE-2017-3461, CVE-2017-3462, CVE-2017-3463, CVE-2017-3464, CVE-2017-3633, CVE-2017-3634, CVE-2017-3636, CVE-2017-3641, CVE-2017-3647, CVE-2017-3648, CVE-2017-3649, CVE-2017-3651, CVE-2017-3652, CVE-2017-3653) Red Hat would like to thank Pali Rohár for reporting CVE-2017-3305. Bug Fix(es): * Previously, the md5() function was blocked by MySQL in FIPS mode because the MD5 hash algorithm is considered insecure. Consequently, the mysqld daemon failed with error messages when FIPS mode was enabled. With this update, md5() is allowed in FIPS mode for non-security operations. Note that users are able to use md5() for security purposes but such usage is not supported by Red Hat. (BZ#1452469)

This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.

JSON

To clipboard

{
  "document": {
    "aggregate_severity": {
      "namespace": "https://access.redhat.com/security/updates/classification/",
      "text": "Important"
    },
    "category": "csaf_security_advisory",
    "csaf_version": "2.0",
    "distribution": {
      "text": "Copyright \u00a9 Red Hat, Inc. All rights reserved.",
      "tlp": {
        "label": "WHITE",
        "url": "https://www.first.org/tlp/"
      }
    },
    "lang": "en",
    "notes": [
      {
        "category": "summary",
        "text": "An update for rh-mysql56-mysql is now available for Red Hat Software Collections.\n\nRed Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.",
        "title": "Topic"
      },
      {
        "category": "general",
        "text": "MySQL is a multi-user, multi-threaded SQL database server. It consists of the MySQL server daemon, mysqld, and many client programs.\n\nThe following packages have been upgraded to a later upstream version: rh-mysql56-mysql (5.6.37).\n\nSecurity Fix(es):\n\n* An integer overflow flaw leading to a buffer overflow was found in the way MySQL parsed connection handshake packets. An unauthenticated remote attacker with access to the MySQL port could use this flaw to crash the mysqld daemon. (CVE-2017-3599)\n\n* It was discovered that the mysql and mysqldump tools did not correctly handle database and table names containing newline characters. A database user with privileges to create databases or tables could cause the mysql command to execute arbitrary shell or SQL commands while restoring database backup created using the mysqldump tool. (CVE-2016-5483, CVE-2017-3600)\n\n* Multiple flaws were found in the way the MySQL init script handled initialization of the database data directory and permission setting on the error log file. The mysql operating system user could use these flaws to escalate their privileges to root. (CVE-2017-3265)\n\n* It was discovered that the mysqld_safe script honored the ledir option value set in a MySQL configuration file. A user able to modify one of the MySQL configuration files could use this flaw to escalate their privileges to root. (CVE-2017-3291)\n\n* It was discovered that the MySQL client command line tools only checked after authentication whether server supported SSL. A man-in-the-middle attacker could use this flaw to hijack client\u0027s authentication to the server even if the client was configured to require SSL connection. (CVE-2017-3305)\n\n* Multiple flaws were found in the way the mysqld_safe script handled creation of error log file. The mysql operating system user could use these flaws to escalate their privileges to root. (CVE-2017-3312)\n\n* A flaw was found in the way MySQL client library (libmysqlclient) handled prepared statements when server connection was lost. A malicious server or a man-in-the-middle attacker could possibly use this flaw to crash an application using libmysqlclient. (CVE-2017-3302)\n\n* This update fixes several vulnerabilities in the MySQL database server. Information about these flaws can be found on the Oracle Critical Patch Update Advisory pages listed in the References section. (CVE-2016-8327, CVE-2017-3238, CVE-2017-3244, CVE-2017-3257, CVE-2017-3258, CVE-2017-3273, CVE-2017-3308, CVE-2017-3309, CVE-2017-3313, CVE-2017-3317, CVE-2017-3318, CVE-2017-3450, CVE-2017-3452, CVE-2017-3453, CVE-2017-3456, CVE-2017-3461, CVE-2017-3462, CVE-2017-3463, CVE-2017-3464, CVE-2017-3633, CVE-2017-3634, CVE-2017-3636, CVE-2017-3641, CVE-2017-3647, CVE-2017-3648, CVE-2017-3649, CVE-2017-3651, CVE-2017-3652, CVE-2017-3653)\n\nRed Hat would like to thank Pali Roh\u00e1r for reporting CVE-2017-3305.\n\nBug Fix(es):\n\n* Previously, the md5() function was blocked by MySQL in FIPS mode because the MD5 hash algorithm is considered insecure. Consequently, the mysqld daemon failed with error messages when FIPS mode was enabled. With this update, md5() is allowed in FIPS mode for non-security operations. Note that users are able to use md5() for security purposes but such usage is not supported by Red Hat. (BZ#1452469)",
        "title": "Details"
      },
      {
        "category": "legal_disclaimer",
        "text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.",
        "title": "Terms of Use"
      }
    ],
    "publisher": {
      "category": "vendor",
      "contact_details": "https://access.redhat.com/security/team/contact/",
      "issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.",
      "name": "Red Hat Product Security",
      "namespace": "https://www.redhat.com"
    },
    "references": [
      {
        "category": "self",
        "summary": "https://access.redhat.com/errata/RHSA-2017:2787",
        "url": "https://access.redhat.com/errata/RHSA-2017:2787"
      },
      {
        "category": "external",
        "summary": "https://access.redhat.com/security/updates/classification/#important",
        "url": "https://access.redhat.com/security/updates/classification/#important"
      },
      {
        "category": "external",
        "summary": "http://www.oracle.com/technetwork/security-advisory/cpujan2017-2881727.html#AppendixMSQL",
        "url": "http://www.oracle.com/technetwork/security-advisory/cpujan2017-2881727.html#AppendixMSQL"
      },
      {
        "category": "external",
        "summary": "http://www.oracle.com/technetwork/security-advisory/cpuapr2017-3236618.html#AppendixMSQL",
        "url": "http://www.oracle.com/technetwork/security-advisory/cpuapr2017-3236618.html#AppendixMSQL"
      },
      {
        "category": "external",
        "summary": "http://www.oracle.com/technetwork/security-advisory/cpujul2017-3236622.html#AppendixMSQL",
        "url": "http://www.oracle.com/technetwork/security-advisory/cpujul2017-3236622.html#AppendixMSQL"
      },
      {
        "category": "external",
        "summary": "https://dev.mysql.com/doc/relnotes/mysql/5.6/en/news-5-6-35.html",
        "url": "https://dev.mysql.com/doc/relnotes/mysql/5.6/en/news-5-6-35.html"
      },
      {
        "category": "external",
        "summary": "https://dev.mysql.com/doc/relnotes/mysql/5.6/en/news-5-6-36.html",
        "url": "https://dev.mysql.com/doc/relnotes/mysql/5.6/en/news-5-6-36.html"
      },
      {
        "category": "external",
        "summary": "https://dev.mysql.com/doc/relnotes/mysql/5.6/en/news-5-6-37.html",
        "url": "https://dev.mysql.com/doc/relnotes/mysql/5.6/en/news-5-6-37.html"
      },
      {
        "category": "external",
        "summary": "1414133",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1414133"
      },
      {
        "category": "external",
        "summary": "1414337",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1414337"
      },
      {
        "category": "external",
        "summary": "1414338",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1414338"
      },
      {
        "category": "external",
        "summary": "1414342",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1414342"
      },
      {
        "category": "external",
        "summary": "1414350",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1414350"
      },
      {
        "category": "external",
        "summary": "1414351",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1414351"
      },
      {
        "category": "external",
        "summary": "1414352",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1414352"
      },
      {
        "category": "external",
        "summary": "1414353",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1414353"
      },
      {
        "category": "external",
        "summary": "1414355",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1414355"
      },
      {
        "category": "external",
        "summary": "1414357",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1414357"
      },
      {
        "category": "external",
        "summary": "1414423",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1414423"
      },
      {
        "category": "external",
        "summary": "1414429",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1414429"
      },
      {
        "category": "external",
        "summary": "1422119",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1422119"
      },
      {
        "category": "external",
        "summary": "1431690",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1431690"
      },
      {
        "category": "external",
        "summary": "1433010",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1433010"
      },
      {
        "category": "external",
        "summary": "1443358",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1443358"
      },
      {
        "category": "external",
        "summary": "1443359",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1443359"
      },
      {
        "category": "external",
        "summary": "1443363",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1443363"
      },
      {
        "category": "external",
        "summary": "1443364",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1443364"
      },
      {
        "category": "external",
        "summary": "1443365",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1443365"
      },
      {
        "category": "external",
        "summary": "1443369",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1443369"
      },
      {
        "category": "external",
        "summary": "1443376",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1443376"
      },
      {
        "category": "external",
        "summary": "1443377",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1443377"
      },
      {
        "category": "external",
        "summary": "1443378",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1443378"
      },
      {
        "category": "external",
        "summary": "1443379",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1443379"
      },
      {
        "category": "external",
        "summary": "1443386",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1443386"
      },
      {
        "category": "external",
        "summary": "1472683",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1472683"
      },
      {
        "category": "external",
        "summary": "1472684",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1472684"
      },
      {
        "category": "external",
        "summary": "1472686",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1472686"
      },
      {
        "category": "external",
        "summary": "1472693",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1472693"
      },
      {
        "category": "external",
        "summary": "1472703",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1472703"
      },
      {
        "category": "external",
        "summary": "1472704",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1472704"
      },
      {
        "category": "external",
        "summary": "1472705",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1472705"
      },
      {
        "category": "external",
        "summary": "1472708",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1472708"
      },
      {
        "category": "external",
        "summary": "1472710",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1472710"
      },
      {
        "category": "external",
        "summary": "1472711",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1472711"
      },
      {
        "category": "external",
        "summary": "1477575",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1477575"
      },
      {
        "category": "external",
        "summary": "1482122",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1482122"
      },
      {
        "category": "self",
        "summary": "Canonical URL",
        "url": "https://security.access.redhat.com/data/csaf/v2/advisories/2017/rhsa-2017_2787.json"
      }
    ],
    "title": "Red Hat Security Advisory: rh-mysql56-mysql security and bug fix update",
    "tracking": {
      "current_release_date": "2025-11-08T04:15:33+00:00",
      "generator": {
        "date": "2025-11-08T04:15:33+00:00",
        "engine": {
          "name": "Red Hat SDEngine",
          "version": "4.6.12"
        }
      },
      "id": "RHSA-2017:2787",
      "initial_release_date": "2017-09-21T07:42:12+00:00",
      "revision_history": [
        {
          "date": "2017-09-21T07:42:12+00:00",
          "number": "1",
          "summary": "Initial version"
        },
        {
          "date": "2017-09-21T07:42:12+00:00",
          "number": "2",
          "summary": "Last updated version"
        },
        {
          "date": "2025-11-08T04:15:33+00:00",
          "number": "3",
          "summary": "Last generated version"
        }
      ],
      "status": "final",
      "version": "3"
    }
  },
  "product_tree": {
    "branches": [
      {
        "branches": [
          {
            "branches": [
              {
                "category": "product_name",
                "name": "Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 6)",
                "product": {
                  "name": "Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 6)",
                  "product_id": "6Server-RHSCL-2.4",
                  "product_identification_helper": {
                    "cpe": "cpe:/a:redhat:rhel_software_collections:2::el6"
                  }
                }
              },
              {
                "category": "product_name",
                "name": "Red Hat Software Collections for Red Hat Enterprise Linux Workstation (v. 6)",
                "product": {
                  "name": "Red Hat Software Collections for Red Hat Enterprise Linux Workstation (v. 6)",
                  "product_id": "6Workstation-RHSCL-2.4",
                  "product_identification_helper": {
                    "cpe": "cpe:/a:redhat:rhel_software_collections:2::el6"
                  }
                }
              },
              {
                "category": "product_name",
                "name": "Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 6.7)",
                "product": {
                  "name": "Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 6.7)",
                  "product_id": "6Server-RHSCL-2.4-6.7.Z",
                  "product_identification_helper": {
                    "cpe": "cpe:/a:redhat:rhel_software_collections:2::el6"
                  }
                }
              },
              {
                "category": "product_name",
                "name": "Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 7)",
                "product": {
                  "name": "Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 7)",
                  "product_id": "7Server-RHSCL-2.4",
                  "product_identification_helper": {
                    "cpe": "cpe:/a:redhat:rhel_software_collections:2::el7"
                  }
                }
              },
              {
                "category": "product_name",
                "name": "Red Hat Software Collections for Red Hat Enterprise Linux Workstation (v. 7)",
                "product": {
                  "name": "Red Hat Software Collections for Red Hat Enterprise Linux Workstation (v. 7)",
                  "product_id": "7Workstation-RHSCL-2.4",
                  "product_identification_helper": {
                    "cpe": "cpe:/a:redhat:rhel_software_collections:2::el7"
                  }
                }
              },
              {
                "category": "product_name",
                "name": "Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.3)",
                "product": {
                  "name": "Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.3)",
                  "product_id": "7Server-RHSCL-2.4-7.3.Z",
                  "product_identification_helper": {
                    "cpe": "cpe:/a:redhat:rhel_software_collections:2::el7"
                  }
                }
              }
            ],
            "category": "product_family",
            "name": "Red Hat Software Collections"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "rh-mysql56-mysql-debuginfo-0:5.6.37-5.el6.x86_64",
                "product": {
                  "name": "rh-mysql56-mysql-debuginfo-0:5.6.37-5.el6.x86_64",
                  "product_id": "rh-mysql56-mysql-debuginfo-0:5.6.37-5.el6.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/rh-mysql56-mysql-debuginfo@5.6.37-5.el6?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "rh-mysql56-mysql-test-0:5.6.37-5.el6.x86_64",
                "product": {
                  "name": "rh-mysql56-mysql-test-0:5.6.37-5.el6.x86_64",
                  "product_id": "rh-mysql56-mysql-test-0:5.6.37-5.el6.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/rh-mysql56-mysql-test@5.6.37-5.el6?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "rh-mysql56-mysql-config-0:5.6.37-5.el6.x86_64",
                "product": {
                  "name": "rh-mysql56-mysql-config-0:5.6.37-5.el6.x86_64",
                  "product_id": "rh-mysql56-mysql-config-0:5.6.37-5.el6.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/rh-mysql56-mysql-config@5.6.37-5.el6?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "rh-mysql56-mysql-devel-0:5.6.37-5.el6.x86_64",
                "product": {
                  "name": "rh-mysql56-mysql-devel-0:5.6.37-5.el6.x86_64",
                  "product_id": "rh-mysql56-mysql-devel-0:5.6.37-5.el6.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/rh-mysql56-mysql-devel@5.6.37-5.el6?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "rh-mysql56-mysql-common-0:5.6.37-5.el6.x86_64",
                "product": {
                  "name": "rh-mysql56-mysql-common-0:5.6.37-5.el6.x86_64",
                  "product_id": "rh-mysql56-mysql-common-0:5.6.37-5.el6.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/rh-mysql56-mysql-common@5.6.37-5.el6?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "rh-mysql56-mysql-bench-0:5.6.37-5.el6.x86_64",
                "product": {
                  "name": "rh-mysql56-mysql-bench-0:5.6.37-5.el6.x86_64",
                  "product_id": "rh-mysql56-mysql-bench-0:5.6.37-5.el6.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/rh-mysql56-mysql-bench@5.6.37-5.el6?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "rh-mysql56-mysql-0:5.6.37-5.el6.x86_64",
                "product": {
                  "name": "rh-mysql56-mysql-0:5.6.37-5.el6.x86_64",
                  "product_id": "rh-mysql56-mysql-0:5.6.37-5.el6.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/rh-mysql56-mysql@5.6.37-5.el6?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "rh-mysql56-mysql-server-0:5.6.37-5.el6.x86_64",
                "product": {
                  "name": "rh-mysql56-mysql-server-0:5.6.37-5.el6.x86_64",
                  "product_id": "rh-mysql56-mysql-server-0:5.6.37-5.el6.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/rh-mysql56-mysql-server@5.6.37-5.el6?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "rh-mysql56-mysql-errmsg-0:5.6.37-5.el6.x86_64",
                "product": {
                  "name": "rh-mysql56-mysql-errmsg-0:5.6.37-5.el6.x86_64",
                  "product_id": "rh-mysql56-mysql-errmsg-0:5.6.37-5.el6.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/rh-mysql56-mysql-errmsg@5.6.37-5.el6?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "rh-mysql56-mysql-debuginfo-0:5.6.37-5.el7.x86_64",
                "product": {
                  "name": "rh-mysql56-mysql-debuginfo-0:5.6.37-5.el7.x86_64",
                  "product_id": "rh-mysql56-mysql-debuginfo-0:5.6.37-5.el7.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/rh-mysql56-mysql-debuginfo@5.6.37-5.el7?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "rh-mysql56-mysql-test-0:5.6.37-5.el7.x86_64",
                "product": {
                  "name": "rh-mysql56-mysql-test-0:5.6.37-5.el7.x86_64",
                  "product_id": "rh-mysql56-mysql-test-0:5.6.37-5.el7.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/rh-mysql56-mysql-test@5.6.37-5.el7?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "rh-mysql56-mysql-config-0:5.6.37-5.el7.x86_64",
                "product": {
                  "name": "rh-mysql56-mysql-config-0:5.6.37-5.el7.x86_64",
                  "product_id": "rh-mysql56-mysql-config-0:5.6.37-5.el7.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/rh-mysql56-mysql-config@5.6.37-5.el7?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "rh-mysql56-mysql-common-0:5.6.37-5.el7.x86_64",
                "product": {
                  "name": "rh-mysql56-mysql-common-0:5.6.37-5.el7.x86_64",
                  "product_id": "rh-mysql56-mysql-common-0:5.6.37-5.el7.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/rh-mysql56-mysql-common@5.6.37-5.el7?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "rh-mysql56-mysql-devel-0:5.6.37-5.el7.x86_64",
                "product": {
                  "name": "rh-mysql56-mysql-devel-0:5.6.37-5.el7.x86_64",
                  "product_id": "rh-mysql56-mysql-devel-0:5.6.37-5.el7.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/rh-mysql56-mysql-devel@5.6.37-5.el7?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "rh-mysql56-mysql-0:5.6.37-5.el7.x86_64",
                "product": {
                  "name": "rh-mysql56-mysql-0:5.6.37-5.el7.x86_64",
                  "product_id": "rh-mysql56-mysql-0:5.6.37-5.el7.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/rh-mysql56-mysql@5.6.37-5.el7?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "rh-mysql56-mysql-bench-0:5.6.37-5.el7.x86_64",
                "product": {
                  "name": "rh-mysql56-mysql-bench-0:5.6.37-5.el7.x86_64",
                  "product_id": "rh-mysql56-mysql-bench-0:5.6.37-5.el7.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/rh-mysql56-mysql-bench@5.6.37-5.el7?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "rh-mysql56-mysql-server-0:5.6.37-5.el7.x86_64",
                "product": {
                  "name": "rh-mysql56-mysql-server-0:5.6.37-5.el7.x86_64",
                  "product_id": "rh-mysql56-mysql-server-0:5.6.37-5.el7.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/rh-mysql56-mysql-server@5.6.37-5.el7?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "rh-mysql56-mysql-errmsg-0:5.6.37-5.el7.x86_64",
                "product": {
                  "name": "rh-mysql56-mysql-errmsg-0:5.6.37-5.el7.x86_64",
                  "product_id": "rh-mysql56-mysql-errmsg-0:5.6.37-5.el7.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/rh-mysql56-mysql-errmsg@5.6.37-5.el7?arch=x86_64"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "x86_64"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "rh-mysql56-mysql-0:5.6.37-5.el6.src",
                "product": {
                  "name": "rh-mysql56-mysql-0:5.6.37-5.el6.src",
                  "product_id": "rh-mysql56-mysql-0:5.6.37-5.el6.src",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/rh-mysql56-mysql@5.6.37-5.el6?arch=src"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "rh-mysql56-mysql-0:5.6.37-5.el7.src",
                "product": {
                  "name": "rh-mysql56-mysql-0:5.6.37-5.el7.src",
                  "product_id": "rh-mysql56-mysql-0:5.6.37-5.el7.src",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/rh-mysql56-mysql@5.6.37-5.el7?arch=src"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "src"
          }
        ],
        "category": "vendor",
        "name": "Red Hat"
      }
    ],
    "relationships": [
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-mysql56-mysql-0:5.6.37-5.el6.src as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 6.7)",
          "product_id": "6Server-RHSCL-2.4-6.7.Z:rh-mysql56-mysql-0:5.6.37-5.el6.src"
        },
        "product_reference": "rh-mysql56-mysql-0:5.6.37-5.el6.src",
        "relates_to_product_reference": "6Server-RHSCL-2.4-6.7.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-mysql56-mysql-0:5.6.37-5.el6.x86_64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 6.7)",
          "product_id": "6Server-RHSCL-2.4-6.7.Z:rh-mysql56-mysql-0:5.6.37-5.el6.x86_64"
        },
        "product_reference": "rh-mysql56-mysql-0:5.6.37-5.el6.x86_64",
        "relates_to_product_reference": "6Server-RHSCL-2.4-6.7.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-mysql56-mysql-bench-0:5.6.37-5.el6.x86_64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 6.7)",
          "product_id": "6Server-RHSCL-2.4-6.7.Z:rh-mysql56-mysql-bench-0:5.6.37-5.el6.x86_64"
        },
        "product_reference": "rh-mysql56-mysql-bench-0:5.6.37-5.el6.x86_64",
        "relates_to_product_reference": "6Server-RHSCL-2.4-6.7.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-mysql56-mysql-common-0:5.6.37-5.el6.x86_64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 6.7)",
          "product_id": "6Server-RHSCL-2.4-6.7.Z:rh-mysql56-mysql-common-0:5.6.37-5.el6.x86_64"
        },
        "product_reference": "rh-mysql56-mysql-common-0:5.6.37-5.el6.x86_64",
        "relates_to_product_reference": "6Server-RHSCL-2.4-6.7.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-mysql56-mysql-config-0:5.6.37-5.el6.x86_64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 6.7)",
          "product_id": "6Server-RHSCL-2.4-6.7.Z:rh-mysql56-mysql-config-0:5.6.37-5.el6.x86_64"
        },
        "product_reference": "rh-mysql56-mysql-config-0:5.6.37-5.el6.x86_64",
        "relates_to_product_reference": "6Server-RHSCL-2.4-6.7.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-mysql56-mysql-debuginfo-0:5.6.37-5.el6.x86_64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 6.7)",
          "product_id": "6Server-RHSCL-2.4-6.7.Z:rh-mysql56-mysql-debuginfo-0:5.6.37-5.el6.x86_64"
        },
        "product_reference": "rh-mysql56-mysql-debuginfo-0:5.6.37-5.el6.x86_64",
        "relates_to_product_reference": "6Server-RHSCL-2.4-6.7.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-mysql56-mysql-devel-0:5.6.37-5.el6.x86_64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 6.7)",
          "product_id": "6Server-RHSCL-2.4-6.7.Z:rh-mysql56-mysql-devel-0:5.6.37-5.el6.x86_64"
        },
        "product_reference": "rh-mysql56-mysql-devel-0:5.6.37-5.el6.x86_64",
        "relates_to_product_reference": "6Server-RHSCL-2.4-6.7.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-mysql56-mysql-errmsg-0:5.6.37-5.el6.x86_64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 6.7)",
          "product_id": "6Server-RHSCL-2.4-6.7.Z:rh-mysql56-mysql-errmsg-0:5.6.37-5.el6.x86_64"
        },
        "product_reference": "rh-mysql56-mysql-errmsg-0:5.6.37-5.el6.x86_64",
        "relates_to_product_reference": "6Server-RHSCL-2.4-6.7.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-mysql56-mysql-server-0:5.6.37-5.el6.x86_64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 6.7)",
          "product_id": "6Server-RHSCL-2.4-6.7.Z:rh-mysql56-mysql-server-0:5.6.37-5.el6.x86_64"
        },
        "product_reference": "rh-mysql56-mysql-server-0:5.6.37-5.el6.x86_64",
        "relates_to_product_reference": "6Server-RHSCL-2.4-6.7.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-mysql56-mysql-test-0:5.6.37-5.el6.x86_64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 6.7)",
          "product_id": "6Server-RHSCL-2.4-6.7.Z:rh-mysql56-mysql-test-0:5.6.37-5.el6.x86_64"
        },
        "product_reference": "rh-mysql56-mysql-test-0:5.6.37-5.el6.x86_64",
        "relates_to_product_reference": "6Server-RHSCL-2.4-6.7.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-mysql56-mysql-0:5.6.37-5.el6.src as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 6)",
          "product_id": "6Server-RHSCL-2.4:rh-mysql56-mysql-0:5.6.37-5.el6.src"
        },
        "product_reference": "rh-mysql56-mysql-0:5.6.37-5.el6.src",
        "relates_to_product_reference": "6Server-RHSCL-2.4"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-mysql56-mysql-0:5.6.37-5.el6.x86_64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 6)",
          "product_id": "6Server-RHSCL-2.4:rh-mysql56-mysql-0:5.6.37-5.el6.x86_64"
        },
        "product_reference": "rh-mysql56-mysql-0:5.6.37-5.el6.x86_64",
        "relates_to_product_reference": "6Server-RHSCL-2.4"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-mysql56-mysql-bench-0:5.6.37-5.el6.x86_64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 6)",
          "product_id": "6Server-RHSCL-2.4:rh-mysql56-mysql-bench-0:5.6.37-5.el6.x86_64"
        },
        "product_reference": "rh-mysql56-mysql-bench-0:5.6.37-5.el6.x86_64",
        "relates_to_product_reference": "6Server-RHSCL-2.4"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-mysql56-mysql-common-0:5.6.37-5.el6.x86_64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 6)",
          "product_id": "6Server-RHSCL-2.4:rh-mysql56-mysql-common-0:5.6.37-5.el6.x86_64"
        },
        "product_reference": "rh-mysql56-mysql-common-0:5.6.37-5.el6.x86_64",
        "relates_to_product_reference": "6Server-RHSCL-2.4"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-mysql56-mysql-config-0:5.6.37-5.el6.x86_64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 6)",
          "product_id": "6Server-RHSCL-2.4:rh-mysql56-mysql-config-0:5.6.37-5.el6.x86_64"
        },
        "product_reference": "rh-mysql56-mysql-config-0:5.6.37-5.el6.x86_64",
        "relates_to_product_reference": "6Server-RHSCL-2.4"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-mysql56-mysql-debuginfo-0:5.6.37-5.el6.x86_64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 6)",
          "product_id": "6Server-RHSCL-2.4:rh-mysql56-mysql-debuginfo-0:5.6.37-5.el6.x86_64"
        },
        "product_reference": "rh-mysql56-mysql-debuginfo-0:5.6.37-5.el6.x86_64",
        "relates_to_product_reference": "6Server-RHSCL-2.4"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-mysql56-mysql-devel-0:5.6.37-5.el6.x86_64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 6)",
          "product_id": "6Server-RHSCL-2.4:rh-mysql56-mysql-devel-0:5.6.37-5.el6.x86_64"
        },
        "product_reference": "rh-mysql56-mysql-devel-0:5.6.37-5.el6.x86_64",
        "relates_to_product_reference": "6Server-RHSCL-2.4"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-mysql56-mysql-errmsg-0:5.6.37-5.el6.x86_64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 6)",
          "product_id": "6Server-RHSCL-2.4:rh-mysql56-mysql-errmsg-0:5.6.37-5.el6.x86_64"
        },
        "product_reference": "rh-mysql56-mysql-errmsg-0:5.6.37-5.el6.x86_64",
        "relates_to_product_reference": "6Server-RHSCL-2.4"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-mysql56-mysql-server-0:5.6.37-5.el6.x86_64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 6)",
          "product_id": "6Server-RHSCL-2.4:rh-mysql56-mysql-server-0:5.6.37-5.el6.x86_64"
        },
        "product_reference": "rh-mysql56-mysql-server-0:5.6.37-5.el6.x86_64",
        "relates_to_product_reference": "6Server-RHSCL-2.4"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-mysql56-mysql-test-0:5.6.37-5.el6.x86_64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 6)",
          "product_id": "6Server-RHSCL-2.4:rh-mysql56-mysql-test-0:5.6.37-5.el6.x86_64"
        },
        "product_reference": "rh-mysql56-mysql-test-0:5.6.37-5.el6.x86_64",
        "relates_to_product_reference": "6Server-RHSCL-2.4"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-mysql56-mysql-0:5.6.37-5.el6.src as a component of Red Hat Software Collections for Red Hat Enterprise Linux Workstation (v. 6)",
          "product_id": "6Workstation-RHSCL-2.4:rh-mysql56-mysql-0:5.6.37-5.el6.src"
        },
        "product_reference": "rh-mysql56-mysql-0:5.6.37-5.el6.src",
        "relates_to_product_reference": "6Workstation-RHSCL-2.4"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-mysql56-mysql-0:5.6.37-5.el6.x86_64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Workstation (v. 6)",
          "product_id": "6Workstation-RHSCL-2.4:rh-mysql56-mysql-0:5.6.37-5.el6.x86_64"
        },
        "product_reference": "rh-mysql56-mysql-0:5.6.37-5.el6.x86_64",
        "relates_to_product_reference": "6Workstation-RHSCL-2.4"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-mysql56-mysql-bench-0:5.6.37-5.el6.x86_64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Workstation (v. 6)",
          "product_id": "6Workstation-RHSCL-2.4:rh-mysql56-mysql-bench-0:5.6.37-5.el6.x86_64"
        },
        "product_reference": "rh-mysql56-mysql-bench-0:5.6.37-5.el6.x86_64",
        "relates_to_product_reference": "6Workstation-RHSCL-2.4"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-mysql56-mysql-common-0:5.6.37-5.el6.x86_64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Workstation (v. 6)",
          "product_id": "6Workstation-RHSCL-2.4:rh-mysql56-mysql-common-0:5.6.37-5.el6.x86_64"
        },
        "product_reference": "rh-mysql56-mysql-common-0:5.6.37-5.el6.x86_64",
        "relates_to_product_reference": "6Workstation-RHSCL-2.4"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-mysql56-mysql-config-0:5.6.37-5.el6.x86_64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Workstation (v. 6)",
          "product_id": "6Workstation-RHSCL-2.4:rh-mysql56-mysql-config-0:5.6.37-5.el6.x86_64"
        },
        "product_reference": "rh-mysql56-mysql-config-0:5.6.37-5.el6.x86_64",
        "relates_to_product_reference": "6Workstation-RHSCL-2.4"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-mysql56-mysql-debuginfo-0:5.6.37-5.el6.x86_64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Workstation (v. 6)",
          "product_id": "6Workstation-RHSCL-2.4:rh-mysql56-mysql-debuginfo-0:5.6.37-5.el6.x86_64"
        },
        "product_reference": "rh-mysql56-mysql-debuginfo-0:5.6.37-5.el6.x86_64",
        "relates_to_product_reference": "6Workstation-RHSCL-2.4"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-mysql56-mysql-devel-0:5.6.37-5.el6.x86_64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Workstation (v. 6)",
          "product_id": "6Workstation-RHSCL-2.4:rh-mysql56-mysql-devel-0:5.6.37-5.el6.x86_64"
        },
        "product_reference": "rh-mysql56-mysql-devel-0:5.6.37-5.el6.x86_64",
        "relates_to_product_reference": "6Workstation-RHSCL-2.4"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-mysql56-mysql-errmsg-0:5.6.37-5.el6.x86_64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Workstation (v. 6)",
          "product_id": "6Workstation-RHSCL-2.4:rh-mysql56-mysql-errmsg-0:5.6.37-5.el6.x86_64"
        },
        "product_reference": "rh-mysql56-mysql-errmsg-0:5.6.37-5.el6.x86_64",
        "relates_to_product_reference": "6Workstation-RHSCL-2.4"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-mysql56-mysql-server-0:5.6.37-5.el6.x86_64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Workstation (v. 6)",
          "product_id": "6Workstation-RHSCL-2.4:rh-mysql56-mysql-server-0:5.6.37-5.el6.x86_64"
        },
        "product_reference": "rh-mysql56-mysql-server-0:5.6.37-5.el6.x86_64",
        "relates_to_product_reference": "6Workstation-RHSCL-2.4"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-mysql56-mysql-test-0:5.6.37-5.el6.x86_64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Workstation (v. 6)",
          "product_id": "6Workstation-RHSCL-2.4:rh-mysql56-mysql-test-0:5.6.37-5.el6.x86_64"
        },
        "product_reference": "rh-mysql56-mysql-test-0:5.6.37-5.el6.x86_64",
        "relates_to_product_reference": "6Workstation-RHSCL-2.4"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-mysql56-mysql-0:5.6.37-5.el7.src as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.3)",
          "product_id": "7Server-RHSCL-2.4-7.3.Z:rh-mysql56-mysql-0:5.6.37-5.el7.src"
        },
        "product_reference": "rh-mysql56-mysql-0:5.6.37-5.el7.src",
        "relates_to_product_reference": "7Server-RHSCL-2.4-7.3.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-mysql56-mysql-0:5.6.37-5.el7.x86_64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.3)",
          "product_id": "7Server-RHSCL-2.4-7.3.Z:rh-mysql56-mysql-0:5.6.37-5.el7.x86_64"
        },
        "product_reference": "rh-mysql56-mysql-0:5.6.37-5.el7.x86_64",
        "relates_to_product_reference": "7Server-RHSCL-2.4-7.3.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-mysql56-mysql-bench-0:5.6.37-5.el7.x86_64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.3)",
          "product_id": "7Server-RHSCL-2.4-7.3.Z:rh-mysql56-mysql-bench-0:5.6.37-5.el7.x86_64"
        },
        "product_reference": "rh-mysql56-mysql-bench-0:5.6.37-5.el7.x86_64",
        "relates_to_product_reference": "7Server-RHSCL-2.4-7.3.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-mysql56-mysql-common-0:5.6.37-5.el7.x86_64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.3)",
          "product_id": "7Server-RHSCL-2.4-7.3.Z:rh-mysql56-mysql-common-0:5.6.37-5.el7.x86_64"
        },
        "product_reference": "rh-mysql56-mysql-common-0:5.6.37-5.el7.x86_64",
        "relates_to_product_reference": "7Server-RHSCL-2.4-7.3.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-mysql56-mysql-config-0:5.6.37-5.el7.x86_64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.3)",
          "product_id": "7Server-RHSCL-2.4-7.3.Z:rh-mysql56-mysql-config-0:5.6.37-5.el7.x86_64"
        },
        "product_reference": "rh-mysql56-mysql-config-0:5.6.37-5.el7.x86_64",
        "relates_to_product_reference": "7Server-RHSCL-2.4-7.3.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-mysql56-mysql-debuginfo-0:5.6.37-5.el7.x86_64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.3)",
          "product_id": "7Server-RHSCL-2.4-7.3.Z:rh-mysql56-mysql-debuginfo-0:5.6.37-5.el7.x86_64"
        },
        "product_reference": "rh-mysql56-mysql-debuginfo-0:5.6.37-5.el7.x86_64",
        "relates_to_product_reference": "7Server-RHSCL-2.4-7.3.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-mysql56-mysql-devel-0:5.6.37-5.el7.x86_64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.3)",
          "product_id": "7Server-RHSCL-2.4-7.3.Z:rh-mysql56-mysql-devel-0:5.6.37-5.el7.x86_64"
        },
        "product_reference": "rh-mysql56-mysql-devel-0:5.6.37-5.el7.x86_64",
        "relates_to_product_reference": "7Server-RHSCL-2.4-7.3.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-mysql56-mysql-errmsg-0:5.6.37-5.el7.x86_64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.3)",
          "product_id": "7Server-RHSCL-2.4-7.3.Z:rh-mysql56-mysql-errmsg-0:5.6.37-5.el7.x86_64"
        },
        "product_reference": "rh-mysql56-mysql-errmsg-0:5.6.37-5.el7.x86_64",
        "relates_to_product_reference": "7Server-RHSCL-2.4-7.3.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-mysql56-mysql-server-0:5.6.37-5.el7.x86_64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.3)",
          "product_id": "7Server-RHSCL-2.4-7.3.Z:rh-mysql56-mysql-server-0:5.6.37-5.el7.x86_64"
        },
        "product_reference": "rh-mysql56-mysql-server-0:5.6.37-5.el7.x86_64",
        "relates_to_product_reference": "7Server-RHSCL-2.4-7.3.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-mysql56-mysql-test-0:5.6.37-5.el7.x86_64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.3)",
          "product_id": "7Server-RHSCL-2.4-7.3.Z:rh-mysql56-mysql-test-0:5.6.37-5.el7.x86_64"
        },
        "product_reference": "rh-mysql56-mysql-test-0:5.6.37-5.el7.x86_64",
        "relates_to_product_reference": "7Server-RHSCL-2.4-7.3.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-mysql56-mysql-0:5.6.37-5.el7.src as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 7)",
          "product_id": "7Server-RHSCL-2.4:rh-mysql56-mysql-0:5.6.37-5.el7.src"
        },
        "product_reference": "rh-mysql56-mysql-0:5.6.37-5.el7.src",
        "relates_to_product_reference": "7Server-RHSCL-2.4"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-mysql56-mysql-0:5.6.37-5.el7.x86_64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 7)",
          "product_id": "7Server-RHSCL-2.4:rh-mysql56-mysql-0:5.6.37-5.el7.x86_64"
        },
        "product_reference": "rh-mysql56-mysql-0:5.6.37-5.el7.x86_64",
        "relates_to_product_reference": "7Server-RHSCL-2.4"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-mysql56-mysql-bench-0:5.6.37-5.el7.x86_64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 7)",
          "product_id": "7Server-RHSCL-2.4:rh-mysql56-mysql-bench-0:5.6.37-5.el7.x86_64"
        },
        "product_reference": "rh-mysql56-mysql-bench-0:5.6.37-5.el7.x86_64",
        "relates_to_product_reference": "7Server-RHSCL-2.4"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-mysql56-mysql-common-0:5.6.37-5.el7.x86_64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 7)",
          "product_id": "7Server-RHSCL-2.4:rh-mysql56-mysql-common-0:5.6.37-5.el7.x86_64"
        },
        "product_reference": "rh-mysql56-mysql-common-0:5.6.37-5.el7.x86_64",
        "relates_to_product_reference": "7Server-RHSCL-2.4"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-mysql56-mysql-config-0:5.6.37-5.el7.x86_64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 7)",
          "product_id": "7Server-RHSCL-2.4:rh-mysql56-mysql-config-0:5.6.37-5.el7.x86_64"
        },
        "product_reference": "rh-mysql56-mysql-config-0:5.6.37-5.el7.x86_64",
        "relates_to_product_reference": "7Server-RHSCL-2.4"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-mysql56-mysql-debuginfo-0:5.6.37-5.el7.x86_64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 7)",
          "product_id": "7Server-RHSCL-2.4:rh-mysql56-mysql-debuginfo-0:5.6.37-5.el7.x86_64"
        },
        "product_reference": "rh-mysql56-mysql-debuginfo-0:5.6.37-5.el7.x86_64",
        "relates_to_product_reference": "7Server-RHSCL-2.4"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-mysql56-mysql-devel-0:5.6.37-5.el7.x86_64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 7)",
          "product_id": "7Server-RHSCL-2.4:rh-mysql56-mysql-devel-0:5.6.37-5.el7.x86_64"
        },
        "product_reference": "rh-mysql56-mysql-devel-0:5.6.37-5.el7.x86_64",
        "relates_to_product_reference": "7Server-RHSCL-2.4"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-mysql56-mysql-errmsg-0:5.6.37-5.el7.x86_64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 7)",
          "product_id": "7Server-RHSCL-2.4:rh-mysql56-mysql-errmsg-0:5.6.37-5.el7.x86_64"
        },
        "product_reference": "rh-mysql56-mysql-errmsg-0:5.6.37-5.el7.x86_64",
        "relates_to_product_reference": "7Server-RHSCL-2.4"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-mysql56-mysql-server-0:5.6.37-5.el7.x86_64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 7)",
          "product_id": "7Server-RHSCL-2.4:rh-mysql56-mysql-server-0:5.6.37-5.el7.x86_64"
        },
        "product_reference": "rh-mysql56-mysql-server-0:5.6.37-5.el7.x86_64",
        "relates_to_product_reference": "7Server-RHSCL-2.4"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-mysql56-mysql-test-0:5.6.37-5.el7.x86_64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 7)",
          "product_id": "7Server-RHSCL-2.4:rh-mysql56-mysql-test-0:5.6.37-5.el7.x86_64"
        },
        "product_reference": "rh-mysql56-mysql-test-0:5.6.37-5.el7.x86_64",
        "relates_to_product_reference": "7Server-RHSCL-2.4"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-mysql56-mysql-0:5.6.37-5.el7.src as a component of Red Hat Software Collections for Red Hat Enterprise Linux Workstation (v. 7)",
          "product_id": "7Workstation-RHSCL-2.4:rh-mysql56-mysql-0:5.6.37-5.el7.src"
        },
        "product_reference": "rh-mysql56-mysql-0:5.6.37-5.el7.src",
        "relates_to_product_reference": "7Workstation-RHSCL-2.4"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-mysql56-mysql-0:5.6.37-5.el7.x86_64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Workstation (v. 7)",
          "product_id": "7Workstation-RHSCL-2.4:rh-mysql56-mysql-0:5.6.37-5.el7.x86_64"
        },
        "product_reference": "rh-mysql56-mysql-0:5.6.37-5.el7.x86_64",
        "relates_to_product_reference": "7Workstation-RHSCL-2.4"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-mysql56-mysql-bench-0:5.6.37-5.el7.x86_64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Workstation (v. 7)",
          "product_id": "7Workstation-RHSCL-2.4:rh-mysql56-mysql-bench-0:5.6.37-5.el7.x86_64"
        },
        "product_reference": "rh-mysql56-mysql-bench-0:5.6.37-5.el7.x86_64",
        "relates_to_product_reference": "7Workstation-RHSCL-2.4"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-mysql56-mysql-common-0:5.6.37-5.el7.x86_64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Workstation (v. 7)",
          "product_id": "7Workstation-RHSCL-2.4:rh-mysql56-mysql-common-0:5.6.37-5.el7.x86_64"
        },
        "product_reference": "rh-mysql56-mysql-common-0:5.6.37-5.el7.x86_64",
        "relates_to_product_reference": "7Workstation-RHSCL-2.4"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-mysql56-mysql-config-0:5.6.37-5.el7.x86_64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Workstation (v. 7)",
          "product_id": "7Workstation-RHSCL-2.4:rh-mysql56-mysql-config-0:5.6.37-5.el7.x86_64"
        },
        "product_reference": "rh-mysql56-mysql-config-0:5.6.37-5.el7.x86_64",
        "relates_to_product_reference": "7Workstation-RHSCL-2.4"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-mysql56-mysql-debuginfo-0:5.6.37-5.el7.x86_64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Workstation (v. 7)",
          "product_id": "7Workstation-RHSCL-2.4:rh-mysql56-mysql-debuginfo-0:5.6.37-5.el7.x86_64"
        },
        "product_reference": "rh-mysql56-mysql-debuginfo-0:5.6.37-5.el7.x86_64",
        "relates_to_product_reference": "7Workstation-RHSCL-2.4"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-mysql56-mysql-devel-0:5.6.37-5.el7.x86_64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Workstation (v. 7)",
          "product_id": "7Workstation-RHSCL-2.4:rh-mysql56-mysql-devel-0:5.6.37-5.el7.x86_64"
        },
        "product_reference": "rh-mysql56-mysql-devel-0:5.6.37-5.el7.x86_64",
        "relates_to_product_reference": "7Workstation-RHSCL-2.4"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-mysql56-mysql-errmsg-0:5.6.37-5.el7.x86_64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Workstation (v. 7)",
          "product_id": "7Workstation-RHSCL-2.4:rh-mysql56-mysql-errmsg-0:5.6.37-5.el7.x86_64"
        },
        "product_reference": "rh-mysql56-mysql-errmsg-0:5.6.37-5.el7.x86_64",
        "relates_to_product_reference": "7Workstation-RHSCL-2.4"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-mysql56-mysql-server-0:5.6.37-5.el7.x86_64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Workstation (v. 7)",
          "product_id": "7Workstation-RHSCL-2.4:rh-mysql56-mysql-server-0:5.6.37-5.el7.x86_64"
        },
        "product_reference": "rh-mysql56-mysql-server-0:5.6.37-5.el7.x86_64",
        "relates_to_product_reference": "7Workstation-RHSCL-2.4"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-mysql56-mysql-test-0:5.6.37-5.el7.x86_64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Workstation (v. 7)",
          "product_id": "7Workstation-RHSCL-2.4:rh-mysql56-mysql-test-0:5.6.37-5.el7.x86_64"
        },
        "product_reference": "rh-mysql56-mysql-test-0:5.6.37-5.el7.x86_64",
        "relates_to_product_reference": "7Workstation-RHSCL-2.4"
      }
    ]
  },
  "vulnerabilities": [
    {
      "cve": "CVE-2016-5483",
      "cwe": {
        "id": "CWE-77",
        "name": "Improper Neutralization of Special Elements used in a Command (\u0027Command Injection\u0027)"
      },
      "discovery_date": "2017-03-11T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "1433010"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "It was discovered that the mysql and mysqldump tools did not correctly handle database and table names containing newline characters. A database user with privileges to create databases or tables could cause the mysql command to execute arbitrary shell or SQL commands while restoring database backup created using the mysqldump tool.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "mysql: Incorrect input validation allowing code execution via mysqldump",
          "title": "Vulnerability summary"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "6Server-RHSCL-2.4-6.7.Z:rh-mysql56-mysql-0:5.6.37-5.el6.src",
          "6Server-RHSCL-2.4-6.7.Z:rh-mysql56-mysql-0:5.6.37-5.el6.x86_64",
          "6Server-RHSCL-2.4-6.7.Z:rh-mysql56-mysql-bench-0:5.6.37-5.el6.x86_64",
          "6Server-RHSCL-2.4-6.7.Z:rh-mysql56-mysql-common-0:5.6.37-5.el6.x86_64",
          "6Server-RHSCL-2.4-6.7.Z:rh-mysql56-mysql-config-0:5.6.37-5.el6.x86_64",
          "6Server-RHSCL-2.4-6.7.Z:rh-mysql56-mysql-debuginfo-0:5.6.37-5.el6.x86_64",
          "6Server-RHSCL-2.4-6.7.Z:rh-mysql56-mysql-devel-0:5.6.37-5.el6.x86_64",
          "6Server-RHSCL-2.4-6.7.Z:rh-mysql56-mysql-errmsg-0:5.6.37-5.el6.x86_64",
          "6Server-RHSCL-2.4-6.7.Z:rh-mysql56-mysql-server-0:5.6.37-5.el6.x86_64",
          "6Server-RHSCL-2.4-6.7.Z:rh-mysql56-mysql-test-0:5.6.37-5.el6.x86_64",
          "6Server-RHSCL-2.4:rh-mysql56-mysql-0:5.6.37-5.el6.src",
          "6Server-RHSCL-2.4:rh-mysql56-mysql-0:5.6.37-5.el6.x86_64",
          "6Server-RHSCL-2.4:rh-mysql56-mysql-bench-0:5.6.37-5.el6.x86_64",
          "6Server-RHSCL-2.4:rh-mysql56-mysql-common-0:5.6.37-5.el6.x86_64",
          "6Server-RHSCL-2.4:rh-mysql56-mysql-config-0:5.6.37-5.el6.x86_64",
          "6Server-RHSCL-2.4:rh-mysql56-mysql-debuginfo-0:5.6.37-5.el6.x86_64",
          "6Server-RHSCL-2.4:rh-mysql56-mysql-devel-0:5.6.37-5.el6.x86_64",
          "6Server-RHSCL-2.4:rh-mysql56-mysql-errmsg-0:5.6.37-5.el6.x86_64",
          "6Server-RHSCL-2.4:rh-mysql56-mysql-server-0:5.6.37-5.el6.x86_64",
          "6Server-RHSCL-2.4:rh-mysql56-mysql-test-0:5.6.37-5.el6.x86_64",
          "6Workstation-RHSCL-2.4:rh-mysql56-mysql-0:5.6.37-5.el6.src",
          "6Workstation-RHSCL-2.4:rh-mysql56-mysql-0:5.6.37-5.el6.x86_64",
          "6Workstation-RHSCL-2.4:rh-mysql56-mysql-bench-0:5.6.37-5.el6.x86_64",
          "6Workstation-RHSCL-2.4:rh-mysql56-mysql-common-0:5.6.37-5.el6.x86_64",
          "6Workstation-RHSCL-2.4:rh-mysql56-mysql-config-0:5.6.37-5.el6.x86_64",
          "6Workstation-RHSCL-2.4:rh-mysql56-mysql-debuginfo-0:5.6.37-5.el6.x86_64",
          "6Workstation-RHSCL-2.4:rh-mysql56-mysql-devel-0:5.6.37-5.el6.x86_64",
          "6Workstation-RHSCL-2.4:rh-mysql56-mysql-errmsg-0:5.6.37-5.el6.x86_64",
          "6Workstation-RHSCL-2.4:rh-mysql56-mysql-server-0:5.6.37-5.el6.x86_64",
          "6Workstation-RHSCL-2.4:rh-mysql56-mysql-test-0:5.6.37-5.el6.x86_64",
          "7Server-RHSCL-2.4-7.3.Z:rh-mysql56-mysql-0:5.6.37-5.el7.src",
          "7Server-RHSCL-2.4-7.3.Z:rh-mysql56-mysql-0:5.6.37-5.el7.x86_64",
          "7Server-RHSCL-2.4-7.3.Z:rh-mysql56-mysql-bench-0:5.6.37-5.el7.x86_64",
          "7Server-RHSCL-2.4-7.3.Z:rh-mysql56-mysql-common-0:5.6.37-5.el7.x86_64",
          "7Server-RHSCL-2.4-7.3.Z:rh-mysql56-mysql-config-0:5.6.37-5.el7.x86_64",
          "7Server-RHSCL-2.4-7.3.Z:rh-mysql56-mysql-debuginfo-0:5.6.37-5.el7.x86_64",
          "7Server-RHSCL-2.4-7.3.Z:rh-mysql56-mysql-devel-0:5.6.37-5.el7.x86_64",
          "7Server-RHSCL-2.4-7.3.Z:rh-mysql56-mysql-errmsg-0:5.6.37-5.el7.x86_64",
          "7Server-RHSCL-2.4-7.3.Z:rh-mysql56-mysql-server-0:5.6.37-5.el7.x86_64",
          "7Server-RHSCL-2.4-7.3.Z:rh-mysql56-mysql-test-0:5.6.37-5.el7.x86_64",
          "7Server-RHSCL-2.4:rh-mysql56-mysql-0:5.6.37-5.el7.src",
          "7Server-RHSCL-2.4:rh-mysql56-mysql-0:5.6.37-5.el7.x86_64",
          "7Server-RHSCL-2.4:rh-mysql56-mysql-bench-0:5.6.37-5.el7.x86_64",
          "7Server-RHSCL-2.4:rh-mysql56-mysql-common-0:5.6.37-5.el7.x86_64",
          "7Server-RHSCL-2.4:rh-mysql56-mysql-config-0:5.6.37-5.el7.x86_64",
          "7Server-RHSCL-2.4:rh-mysql56-mysql-debuginfo-0:5.6.37-5.el7.x86_64",
          "7Server-RHSCL-2.4:rh-mysql56-mysql-devel-0:5.6.37-5.el7.x86_64",
          "7Server-RHSCL-2.4:rh-mysql56-mysql-errmsg-0:5.6.37-5.el7.x86_64",
          "7Server-RHSCL-2.4:rh-mysql56-mysql-server-0:5.6.37-5.el7.x86_64",
          "7Server-RHSCL-2.4:rh-mysql56-mysql-test-0:5.6.37-5.el7.x86_64",
          "7Workstation-RHSCL-2.4:rh-mysql56-mysql-0:5.6.37-5.el7.src",
          "7Workstation-RHSCL-2.4:rh-mysql56-mysql-0:5.6.37-5.el7.x86_64",
          "7Workstation-RHSCL-2.4:rh-mysql56-mysql-bench-0:5.6.37-5.el7.x86_64",
          "7Workstation-RHSCL-2.4:rh-mysql56-mysql-common-0:5.6.37-5.el7.x86_64",
          "7Workstation-RHSCL-2.4:rh-mysql56-mysql-config-0:5.6.37-5.el7.x86_64",
          "7Workstation-RHSCL-2.4:rh-mysql56-mysql-debuginfo-0:5.6.37-5.el7.x86_64",
          "7Workstation-RHSCL-2.4:rh-mysql56-mysql-devel-0:5.6.37-5.el7.x86_64",
          "7Workstation-RHSCL-2.4:rh-mysql56-mysql-errmsg-0:5.6.37-5.el7.x86_64",
          "7Workstation-RHSCL-2.4:rh-mysql56-mysql-server-0:5.6.37-5.el7.x86_64",
          "7Workstation-RHSCL-2.4:rh-mysql56-mysql-test-0:5.6.37-5.el7.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2016-5483"
        },
        {
          "category": "external",
          "summary": "RHBZ#1433010",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1433010"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2016-5483",
          "url": "https://www.cve.org/CVERecord?id=CVE-2016-5483"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2016-5483",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2016-5483"
        },
        {
          "category": "external",
          "summary": "https://blog.tarq.io/cve-2016-5483-backdooring-mysqldump-backups/",
          "url": "https://blog.tarq.io/cve-2016-5483-backdooring-mysqldump-backups/"
        },
        {
          "category": "external",
          "summary": "https://blog.tarq.io/cve-2016-5483-galera-remote-command-execution-via-crafted-database-name/",
          "url": "https://blog.tarq.io/cve-2016-5483-galera-remote-command-execution-via-crafted-database-name/"
        }
      ],
      "release_date": "2017-03-09T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2017-09-21T07:42:12+00:00",
          "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAfter installing this update, the MySQL server daemon (mysqld) will be restarted automatically.",
          "product_ids": [
            "6Server-RHSCL-2.4-6.7.Z:rh-mysql56-mysql-0:5.6.37-5.el6.src",
            "6Server-RHSCL-2.4-6.7.Z:rh-mysql56-mysql-0:5.6.37-5.el6.x86_64",
            "6Server-RHSCL-2.4-6.7.Z:rh-mysql56-mysql-bench-0:5.6.37-5.el6.x86_64",
            "6Server-RHSCL-2.4-6.7.Z:rh-mysql56-mysql-common-0:5.6.37-5.el6.x86_64",
            "6Server-RHSCL-2.4-6.7.Z:rh-mysql56-mysql-config-0:5.6.37-5.el6.x86_64",
            "6Server-RHSCL-2.4-6.7.Z:rh-mysql56-mysql-debuginfo-0:5.6.37-5.el6.x86_64",
            "6Server-RHSCL-2.4-6.7.Z:rh-mysql56-mysql-devel-0:5.6.37-5.el6.x86_64",
            "6Server-RHSCL-2.4-6.7.Z:rh-mysql56-mysql-errmsg-0:5.6.37-5.el6.x86_64",
            "6Server-RHSCL-2.4-6.7.Z:rh-mysql56-mysql-server-0:5.6.37-5.el6.x86_64",
            "6Server-RHSCL-2.4-6.7.Z:rh-mysql56-mysql-test-0:5.6.37-5.el6.x86_64",
            "6Server-RHSCL-2.4:rh-mysql56-mysql-0:5.6.37-5.el6.src",
            "6Server-RHSCL-2.4:rh-mysql56-mysql-0:5.6.37-5.el6.x86_64",
            "6Server-RHSCL-2.4:rh-mysql56-mysql-bench-0:5.6.37-5.el6.x86_64",
            "6Server-RHSCL-2.4:rh-mysql56-mysql-common-0:5.6.37-5.el6.x86_64",
            "6Server-RHSCL-2.4:rh-mysql56-mysql-config-0:5.6.37-5.el6.x86_64",
            "6Server-RHSCL-2.4:rh-mysql56-mysql-debuginfo-0:5.6.37-5.el6.x86_64",
            "6Server-RHSCL-2.4:rh-mysql56-mysql-devel-0:5.6.37-5.el6.x86_64",
            "6Server-RHSCL-2.4:rh-mysql56-mysql-errmsg-0:5.6.37-5.el6.x86_64",
            "6Server-RHSCL-2.4:rh-mysql56-mysql-server-0:5.6.37-5.el6.x86_64",
            "6Server-RHSCL-2.4:rh-mysql56-mysql-test-0:5.6.37-5.el6.x86_64",
            "6Workstation-RHSCL-2.4:rh-mysql56-mysql-0:5.6.37-5.el6.src",
            "6Workstation-RHSCL-2.4:rh-mysql56-mysql-0:5.6.37-5.el6.x86_64",
            "6Workstation-RHSCL-2.4:rh-mysql56-mysql-bench-0:5.6.37-5.el6.x86_64",
            "6Workstation-RHSCL-2.4:rh-mysql56-mysql-common-0:5.6.37-5.el6.x86_64",
            "6Workstation-RHSCL-2.4:rh-mysql56-mysql-config-0:5.6.37-5.el6.x86_64",
            "6Workstation-RHSCL-2.4:rh-mysql56-mysql-debuginfo-0:5.6.37-5.el6.x86_64",
            "6Workstation-RHSCL-2.4:rh-mysql56-mysql-devel-0:5.6.37-5.el6.x86_64",
            "6Workstation-RHSCL-2.4:rh-mysql56-mysql-errmsg-0:5.6.37-5.el6.x86_64",
            "6Workstation-RHSCL-2.4:rh-mysql56-mysql-server-0:5.6.37-5.el6.x86_64",
            "6Workstation-RHSCL-2.4:rh-mysql56-mysql-test-0:5.6.37-5.el6.x86_64",
            "7Server-RHSCL-2.4-7.3.Z:rh-mysql56-mysql-0:5.6.37-5.el7.src",
            "7Server-RHSCL-2.4-7.3.Z:rh-mysql56-mysql-0:5.6.37-5.el7.x86_64",
            "7Server-RHSCL-2.4-7.3.Z:rh-mysql56-mysql-bench-0:5.6.37-5.el7.x86_64",
            "7Server-RHSCL-2.4-7.3.Z:rh-mysql56-mysql-common-0:5.6.37-5.el7.x86_64",
            "7Server-RHSCL-2.4-7.3.Z:rh-mysql56-mysql-config-0:5.6.37-5.el7.x86_64",
            "7Server-RHSCL-2.4-7.3.Z:rh-mysql56-mysql-debuginfo-0:5.6.37-5.el7.x86_64",
            "7Server-RHSCL-2.4-7.3.Z:rh-mysql56-mysql-devel-0:5.6.37-5.el7.x86_64",
            "7Server-RHSCL-2.4-7.3.Z:rh-mysql56-mysql-errmsg-0:5.6.37-5.el7.x86_64",
            "7Server-RHSCL-2.4-7.3.Z:rh-mysql56-mysql-server-0:5.6.37-5.el7.x86_64",
            "7Server-RHSCL-2.4-7.3.Z:rh-mysql56-mysql-test-0:5.6.37-5.el7.x86_64",
            "7Server-RHSCL-2.4:rh-mysql56-mysql-0:5.6.37-5.el7.src",
            "7Server-RHSCL-2.4:rh-mysql56-mysql-0:5.6.37-5.el7.x86_64",
            "7Server-RHSCL-2.4:rh-mysql56-mysql-bench-0:5.6.37-5.el7.x86_64",
            "7Server-RHSCL-2.4:rh-mysql56-mysql-common-0:5.6.37-5.el7.x86_64",
            "7Server-RHSCL-2.4:rh-mysql56-mysql-config-0:5.6.37-5.el7.x86_64",
            "7Server-RHSCL-2.4:rh-mysql56-mysql-debuginfo-0:5.6.37-5.el7.x86_64",
            "7Server-RHSCL-2.4:rh-mysql56-mysql-devel-0:5.6.37-5.el7.x86_64",
            "7Server-RHSCL-2.4:rh-mysql56-mysql-errmsg-0:5.6.37-5.el7.x86_64",
            "7Server-RHSCL-2.4:rh-mysql56-mysql-server-0:5.6.37-5.el7.x86_64",
            "7Server-RHSCL-2.4:rh-mysql56-mysql-test-0:5.6.37-5.el7.x86_64",
            "7Workstation-RHSCL-2.4:rh-mysql56-mysql-0:5.6.37-5.el7.src",
            "7Workstation-RHSCL-2.4:rh-mysql56-mysql-0:5.6.37-5.el7.x86_64",
            "7Workstation-RHSCL-2.4:rh-mysql56-mysql-bench-0:5.6.37-5.el7.x86_64",
            "7Workstation-RHSCL-2.4:rh-mysql56-mysql-common-0:5.6.37-5.el7.x86_64",
            "7Workstation-RHSCL-2.4:rh-mysql56-mysql-config-0:5.6.37-5.el7.x86_64",
            "7Workstation-RHSCL-2.4:rh-mysql56-mysql-debuginfo-0:5.6.37-5.el7.x86_64",
            "7Workstation-RHSCL-2.4:rh-mysql56-mysql-devel-0:5.6.37-5.el7.x86_64",
            "7Workstation-RHSCL-2.4:rh-mysql56-mysql-errmsg-0:5.6.37-5.el7.x86_64",
            "7Workstation-RHSCL-2.4:rh-mysql56-mysql-server-0:5.6.37-5.el7.x86_64",
            "7Workstation-RHSCL-2.4:rh-mysql56-mysql-test-0:5.6.37-5.el7.x86_64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2017:2787"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "HIGH",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 6.4,
            "baseSeverity": "MEDIUM",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "HIGH",
            "privilegesRequired": "HIGH",
            "scope": "UNCHANGED",
            "userInteraction": "REQUIRED",
            "vectorString": "CVSS:3.0/AV:N/AC:H/PR:H/UI:R/S:U/C:H/I:H/A:H",
            "version": "3.0"
          },
          "products": [
            "6Server-RHSCL-2.4-6.7.Z:rh-mysql56-mysql-0:5.6.37-5.el6.src",
            "6Server-RHSCL-2.4-6.7.Z:rh-mysql56-mysql-0:5.6.37-5.el6.x86_64",
            "6Server-RHSCL-2.4-6.7.Z:rh-mysql56-mysql-bench-0:5.6.37-5.el6.x86_64",
            "6Server-RHSCL-2.4-6.7.Z:rh-mysql56-mysql-common-0:5.6.37-5.el6.x86_64",
            "6Server-RHSCL-2.4-6.7.Z:rh-mysql56-mysql-config-0:5.6.37-5.el6.x86_64",
            "6Server-RHSCL-2.4-6.7.Z:rh-mysql56-mysql-debuginfo-0:5.6.37-5.el6.x86_64",
            "6Server-RHSCL-2.4-6.7.Z:rh-mysql56-mysql-devel-0:5.6.37-5.el6.x86_64",
            "6Server-RHSCL-2.4-6.7.Z:rh-mysql56-mysql-errmsg-0:5.6.37-5.el6.x86_64",
            "6Server-RHSCL-2.4-6.7.Z:rh-mysql56-mysql-server-0:5.6.37-5.el6.x86_64",
            "6Server-RHSCL-2.4-6.7.Z:rh-mysql56-mysql-test-0:5.6.37-5.el6.x86_64",
            "6Server-RHSCL-2.4:rh-mysql56-mysql-0:5.6.37-5.el6.src",
            "6Server-RHSCL-2.4:rh-mysql56-mysql-0:5.6.37-5.el6.x86_64",
            "6Server-RHSCL-2.4:rh-mysql56-mysql-bench-0:5.6.37-5.el6.x86_64",
            "6Server-RHSCL-2.4:rh-mysql56-mysql-common-0:5.6.37-5.el6.x86_64",
            "6Server-RHSCL-2.4:rh-mysql56-mysql-config-0:5.6.37-5.el6.x86_64",
            "6Server-RHSCL-2.4:rh-mysql56-mysql-debuginfo-0:5.6.37-5.el6.x86_64",
            "6Server-RHSCL-2.4:rh-mysql56-mysql-devel-0:5.6.37-5.el6.x86_64",
            "6Server-RHSCL-2.4:rh-mysql56-mysql-errmsg-0:5.6.37-5.el6.x86_64",
            "6Server-RHSCL-2.4:rh-mysql56-mysql-server-0:5.6.37-5.el6.x86_64",
            "6Server-RHSCL-2.4:rh-mysql56-mysql-test-0:5.6.37-5.el6.x86_64",
            "6Workstation-RHSCL-2.4:rh-mysql56-mysql-0:5.6.37-5.el6.src",
            "6Workstation-RHSCL-2.4:rh-mysql56-mysql-0:5.6.37-5.el6.x86_64",
            "6Workstation-RHSCL-2.4:rh-mysql56-mysql-bench-0:5.6.37-5.el6.x86_64",
            "6Workstation-RHSCL-2.4:rh-mysql56-mysql-common-0:5.6.37-5.el6.x86_64",
            "6Workstation-RHSCL-2.4:rh-mysql56-mysql-config-0:5.6.37-5.el6.x86_64",
            "6Workstation-RHSCL-2.4:rh-mysql56-mysql-debuginfo-0:5.6.37-5.el6.x86_64",
            "6Workstation-RHSCL-2.4:rh-mysql56-mysql-devel-0:5.6.37-5.el6.x86_64",
            "6Workstation-RHSCL-2.4:rh-mysql56-mysql-errmsg-0:5.6.37-5.el6.x86_64",
            "6Workstation-RHSCL-2.4:rh-mysql56-mysql-server-0:5.6.37-5.el6.x86_64",
            "6Workstation-RHSCL-2.4:rh-mysql56-mysql-test-0:5.6.37-5.el6.x86_64",
            "7Server-RHSCL-2.4-7.3.Z:rh-mysql56-mysql-0:5.6.37-5.el7.src",
            "7Server-RHSCL-2.4-7.3.Z:rh-mysql56-mysql-0:5.6.37-5.el7.x86_64",
            "7Server-RHSCL-2.4-7.3.Z:rh-mysql56-mysql-bench-0:5.6.37-5.el7.x86_64",
            "7Server-RHSCL-2.4-7.3.Z:rh-mysql56-mysql-common-0:5.6.37-5.el7.x86_64",
            "7Server-RHSCL-2.4-7.3.Z:rh-mysql56-mysql-config-0:5.6.37-5.el7.x86_64",
            "7Server-RHSCL-2.4-7.3.Z:rh-mysql56-mysql-debuginfo-0:5.6.37-5.el7.x86_64",
            "7Server-RHSCL-2.4-7.3.Z:rh-mysql56-mysql-devel-0:5.6.37-5.el7.x86_64",
            "7Server-RHSCL-2.4-7.3.Z:rh-mysql56-mysql-errmsg-0:5.6.37-5.el7.x86_64",
            "7Server-RHSCL-2.4-7.3.Z:rh-mysql56-mysql-server-0:5.6.37-5.el7.x86_64",
            "7Server-RHSCL-2.4-7.3.Z:rh-mysql56-mysql-test-0:5.6.37-5.el7.x86_64",
            "7Server-RHSCL-2.4:rh-mysql56-mysql-0:5.6.37-5.el7.src",
            "7Server-RHSCL-2.4:rh-mysql56-mysql-0:5.6.37-5.el7.x86_64",
            "7Server-RHSCL-2.4:rh-mysql56-mysql-bench-0:5.6.37-5.el7.x86_64",
            "7Server-RHSCL-2.4:rh-mysql56-mysql-common-0:5.6.37-5.el7.x86_64",
            "7Server-RHSCL-2.4:rh-mysql56-mysql-config-0:5.6.37-5.el7.x86_64",
            "7Server-RHSCL-2.4:rh-mysql56-mysql-debuginfo-0:5.6.37-5.el7.x86_64",
            "7Server-RHSCL-2.4:rh-mysql56-mysql-devel-0:5.6.37-5.el7.x86_64",
            "7Server-RHSCL-2.4:rh-mysql56-mysql-errmsg-0:5.6.37-5.el7.x86_64",
            "7Server-RHSCL-2.4:rh-mysql56-mysql-server-0:5.6.37-5.el7.x86_64",
            "7Server-RHSCL-2.4:rh-mysql56-mysql-test-0:5.6.37-5.el7.x86_64",
            "7Workstation-RHSCL-2.4:rh-mysql56-mysql-0:5.6.37-5.el7.src",
            "7Workstation-RHSCL-2.4:rh-mysql56-mysql-0:5.6.37-5.el7.x86_64",
            "7Workstation-RHSCL-2.4:rh-mysql56-mysql-bench-0:5.6.37-5.el7.x86_64",
            "7Workstation-RHSCL-2.4:rh-mysql56-mysql-common-0:5.6.37-5.el7.x86_64",
            "7Workstation-RHSCL-2.4:rh-mysql56-mysql-config-0:5.6.37-5.el7.x86_64",
            "7Workstation-RHSCL-2.4:rh-mysql56-mysql-debuginfo-0:5.6.37-5.el7.x86_64",
            "7Workstation-RHSCL-2.4:rh-mysql56-mysql-devel-0:5.6.37-5.el7.x86_64",
            "7Workstation-RHSCL-2.4:rh-mysql56-mysql-errmsg-0:5.6.37-5.el7.x86_64",
            "7Workstation-RHSCL-2.4:rh-mysql56-mysql-server-0:5.6.37-5.el7.x86_64",
            "7Workstation-RHSCL-2.4:rh-mysql56-mysql-test-0:5.6.37-5.el7.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Moderate"
        }
      ],
      "title": "mysql: Incorrect input validation allowing code execution via mysqldump"
    },
    {
      "cve": "CVE-2016-8327",
      "discovery_date": "2017-01-18T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "1414337"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Replication). Supported versions that are affected are 5.6.34 and earlier and 5.7.16 and earlier. Difficult to exploit vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS v3.0 Base Score 4.4 (Availability impacts).",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "mysql: Server: Replication  unspecified vulnerability (CPU Jan 2017)",
          "title": "Vulnerability summary"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "6Server-RHSCL-2.4-6.7.Z:rh-mysql56-mysql-0:5.6.37-5.el6.src",
          "6Server-RHSCL-2.4-6.7.Z:rh-mysql56-mysql-0:5.6.37-5.el6.x86_64",
          "6Server-RHSCL-2.4-6.7.Z:rh-mysql56-mysql-bench-0:5.6.37-5.el6.x86_64",
          "6Server-RHSCL-2.4-6.7.Z:rh-mysql56-mysql-common-0:5.6.37-5.el6.x86_64",
          "6Server-RHSCL-2.4-6.7.Z:rh-mysql56-mysql-config-0:5.6.37-5.el6.x86_64",
          "6Server-RHSCL-2.4-6.7.Z:rh-mysql56-mysql-debuginfo-0:5.6.37-5.el6.x86_64",
          "6Server-RHSCL-2.4-6.7.Z:rh-mysql56-mysql-devel-0:5.6.37-5.el6.x86_64",
          "6Server-RHSCL-2.4-6.7.Z:rh-mysql56-mysql-errmsg-0:5.6.37-5.el6.x86_64",
          "6Server-RHSCL-2.4-6.7.Z:rh-mysql56-mysql-server-0:5.6.37-5.el6.x86_64",
          "6Server-RHSCL-2.4-6.7.Z:rh-mysql56-mysql-test-0:5.6.37-5.el6.x86_64",
          "6Server-RHSCL-2.4:rh-mysql56-mysql-0:5.6.37-5.el6.src",
          "6Server-RHSCL-2.4:rh-mysql56-mysql-0:5.6.37-5.el6.x86_64",
          "6Server-RHSCL-2.4:rh-mysql56-mysql-bench-0:5.6.37-5.el6.x86_64",
          "6Server-RHSCL-2.4:rh-mysql56-mysql-common-0:5.6.37-5.el6.x86_64",
          "6Server-RHSCL-2.4:rh-mysql56-mysql-config-0:5.6.37-5.el6.x86_64",
          "6Server-RHSCL-2.4:rh-mysql56-mysql-debuginfo-0:5.6.37-5.el6.x86_64",
          "6Server-RHSCL-2.4:rh-mysql56-mysql-devel-0:5.6.37-5.el6.x86_64",
          "6Server-RHSCL-2.4:rh-mysql56-mysql-errmsg-0:5.6.37-5.el6.x86_64",
          "6Server-RHSCL-2.4:rh-mysql56-mysql-server-0:5.6.37-5.el6.x86_64",
          "6Server-RHSCL-2.4:rh-mysql56-mysql-test-0:5.6.37-5.el6.x86_64",
          "6Workstation-RHSCL-2.4:rh-mysql56-mysql-0:5.6.37-5.el6.src",
          "6Workstation-RHSCL-2.4:rh-mysql56-mysql-0:5.6.37-5.el6.x86_64",
          "6Workstation-RHSCL-2.4:rh-mysql56-mysql-bench-0:5.6.37-5.el6.x86_64",
          "6Workstation-RHSCL-2.4:rh-mysql56-mysql-common-0:5.6.37-5.el6.x86_64",
          "6Workstation-RHSCL-2.4:rh-mysql56-mysql-config-0:5.6.37-5.el6.x86_64",
          "6Workstation-RHSCL-2.4:rh-mysql56-mysql-debuginfo-0:5.6.37-5.el6.x86_64",
          "6Workstation-RHSCL-2.4:rh-mysql56-mysql-devel-0:5.6.37-5.el6.x86_64",
          "6Workstation-RHSCL-2.4:rh-mysql56-mysql-errmsg-0:5.6.37-5.el6.x86_64",
          "6Workstation-RHSCL-2.4:rh-mysql56-mysql-server-0:5.6.37-5.el6.x86_64",
          "6Workstation-RHSCL-2.4:rh-mysql56-mysql-test-0:5.6.37-5.el6.x86_64",
          "7Server-RHSCL-2.4-7.3.Z:rh-mysql56-mysql-0:5.6.37-5.el7.src",
          "7Server-RHSCL-2.4-7.3.Z:rh-mysql56-mysql-0:5.6.37-5.el7.x86_64",
          "7Server-RHSCL-2.4-7.3.Z:rh-mysql56-mysql-bench-0:5.6.37-5.el7.x86_64",
          "7Server-RHSCL-2.4-7.3.Z:rh-mysql56-mysql-common-0:5.6.37-5.el7.x86_64",
          "7Server-RHSCL-2.4-7.3.Z:rh-mysql56-mysql-config-0:5.6.37-5.el7.x86_64",
          "7Server-RHSCL-2.4-7.3.Z:rh-mysql56-mysql-debuginfo-0:5.6.37-5.el7.x86_64",
          "7Server-RHSCL-2.4-7.3.Z:rh-mysql56-mysql-devel-0:5.6.37-5.el7.x86_64",
          "7Server-RHSCL-2.4-7.3.Z:rh-mysql56-mysql-errmsg-0:5.6.37-5.el7.x86_64",
          "7Server-RHSCL-2.4-7.3.Z:rh-mysql56-mysql-server-0:5.6.37-5.el7.x86_64",
          "7Server-RHSCL-2.4-7.3.Z:rh-mysql56-mysql-test-0:5.6.37-5.el7.x86_64",
          "7Server-RHSCL-2.4:rh-mysql56-mysql-0:5.6.37-5.el7.src",
          "7Server-RHSCL-2.4:rh-mysql56-mysql-0:5.6.37-5.el7.x86_64",
          "7Server-RHSCL-2.4:rh-mysql56-mysql-bench-0:5.6.37-5.el7.x86_64",
          "7Server-RHSCL-2.4:rh-mysql56-mysql-common-0:5.6.37-5.el7.x86_64",
          "7Server-RHSCL-2.4:rh-mysql56-mysql-config-0:5.6.37-5.el7.x86_64",
          "7Server-RHSCL-2.4:rh-mysql56-mysql-debuginfo-0:5.6.37-5.el7.x86_64",
          "7Server-RHSCL-2.4:rh-mysql56-mysql-devel-0:5.6.37-5.el7.x86_64",
          "7Server-RHSCL-2.4:rh-mysql56-mysql-errmsg-0:5.6.37-5.el7.x86_64",
          "7Server-RHSCL-2.4:rh-mysql56-mysql-server-0:5.6.37-5.el7.x86_64",
          "7Server-RHSCL-2.4:rh-mysql56-mysql-test-0:5.6.37-5.el7.x86_64",
          "7Workstation-RHSCL-2.4:rh-mysql56-mysql-0:5.6.37-5.el7.src",
          "7Workstation-RHSCL-2.4:rh-mysql56-mysql-0:5.6.37-5.el7.x86_64",
          "7Workstation-RHSCL-2.4:rh-mysql56-mysql-bench-0:5.6.37-5.el7.x86_64",
          "7Workstation-RHSCL-2.4:rh-mysql56-mysql-common-0:5.6.37-5.el7.x86_64",
          "7Workstation-RHSCL-2.4:rh-mysql56-mysql-config-0:5.6.37-5.el7.x86_64",
          "7Workstation-RHSCL-2.4:rh-mysql56-mysql-debuginfo-0:5.6.37-5.el7.x86_64",
          "7Workstation-RHSCL-2.4:rh-mysql56-mysql-devel-0:5.6.37-5.el7.x86_64",
          "7Workstation-RHSCL-2.4:rh-mysql56-mysql-errmsg-0:5.6.37-5.el7.x86_64",
          "7Workstation-RHSCL-2.4:rh-mysql56-mysql-server-0:5.6.37-5.el7.x86_64",
          "7Workstation-RHSCL-2.4:rh-mysql56-mysql-test-0:5.6.37-5.el7.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2016-8327"
        },
        {
          "category": "external",
          "summary": "RHBZ#1414337",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1414337"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2016-8327",
          "url": "https://www.cve.org/CVERecord?id=CVE-2016-8327"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2016-8327",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2016-8327"
        },
        {
          "category": "external",
          "summary": "http://www.oracle.com/technetwork/security-advisory/cpujan2017-2881727.html#AppendixMSQL",
          "url": "http://www.oracle.com/technetwork/security-advisory/cpujan2017-2881727.html#AppendixMSQL"
        }
      ],
      "release_date": "2017-01-18T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2017-09-21T07:42:12+00:00",
          "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAfter installing this update, the MySQL server daemon (mysqld) will be restarted automatically.",
          "product_ids": [
            "6Server-RHSCL-2.4-6.7.Z:rh-mysql56-mysql-0:5.6.37-5.el6.src",
            "6Server-RHSCL-2.4-6.7.Z:rh-mysql56-mysql-0:5.6.37-5.el6.x86_64",
            "6Server-RHSCL-2.4-6.7.Z:rh-mysql56-mysql-bench-0:5.6.37-5.el6.x86_64",
            "6Server-RHSCL-2.4-6.7.Z:rh-mysql56-mysql-common-0:5.6.37-5.el6.x86_64",
            "6Server-RHSCL-2.4-6.7.Z:rh-mysql56-mysql-config-0:5.6.37-5.el6.x86_64",
            "6Server-RHSCL-2.4-6.7.Z:rh-mysql56-mysql-debuginfo-0:5.6.37-5.el6.x86_64",
            "6Server-RHSCL-2.4-6.7.Z:rh-mysql56-mysql-devel-0:5.6.37-5.el6.x86_64",
            "6Server-RHSCL-2.4-6.7.Z:rh-mysql56-mysql-errmsg-0:5.6.37-5.el6.x86_64",
            "6Server-RHSCL-2.4-6.7.Z:rh-mysql56-mysql-server-0:5.6.37-5.el6.x86_64",
            "6Server-RHSCL-2.4-6.7.Z:rh-mysql56-mysql-test-0:5.6.37-5.el6.x86_64",
            "6Server-RHSCL-2.4:rh-mysql56-mysql-0:5.6.37-5.el6.src",
            "6Server-RHSCL-2.4:rh-mysql56-mysql-0:5.6.37-5.el6.x86_64",
            "6Server-RHSCL-2.4:rh-mysql56-mysql-bench-0:5.6.37-5.el6.x86_64",
            "6Server-RHSCL-2.4:rh-mysql56-mysql-common-0:5.6.37-5.el6.x86_64",
            "6Server-RHSCL-2.4:rh-mysql56-mysql-config-0:5.6.37-5.el6.x86_64",
            "6Server-RHSCL-2.4:rh-mysql56-mysql-debuginfo-0:5.6.37-5.el6.x86_64",
            "6Server-RHSCL-2.4:rh-mysql56-mysql-devel-0:5.6.37-5.el6.x86_64",
            "6Server-RHSCL-2.4:rh-mysql56-mysql-errmsg-0:5.6.37-5.el6.x86_64",
            "6Server-RHSCL-2.4:rh-mysql56-mysql-server-0:5.6.37-5.el6.x86_64",
            "6Server-RHSCL-2.4:rh-mysql56-mysql-test-0:5.6.37-5.el6.x86_64",
            "6Workstation-RHSCL-2.4:rh-mysql56-mysql-0:5.6.37-5.el6.src",
            "6Workstation-RHSCL-2.4:rh-mysql56-mysql-0:5.6.37-5.el6.x86_64",
            "6Workstation-RHSCL-2.4:rh-mysql56-mysql-bench-0:5.6.37-5.el6.x86_64",
            "6Workstation-RHSCL-2.4:rh-mysql56-mysql-common-0:5.6.37-5.el6.x86_64",
            "6Workstation-RHSCL-2.4:rh-mysql56-mysql-config-0:5.6.37-5.el6.x86_64",
            "6Workstation-RHSCL-2.4:rh-mysql56-mysql-debuginfo-0:5.6.37-5.el6.x86_64",
            "6Workstation-RHSCL-2.4:rh-mysql56-mysql-devel-0:5.6.37-5.el6.x86_64",
            "6Workstation-RHSCL-2.4:rh-mysql56-mysql-errmsg-0:5.6.37-5.el6.x86_64",
            "6Workstation-RHSCL-2.4:rh-mysql56-mysql-server-0:5.6.37-5.el6.x86_64",
            "6Workstation-RHSCL-2.4:rh-mysql56-mysql-test-0:5.6.37-5.el6.x86_64",
            "7Server-RHSCL-2.4-7.3.Z:rh-mysql56-mysql-0:5.6.37-5.el7.src",
            "7Server-RHSCL-2.4-7.3.Z:rh-mysql56-mysql-0:5.6.37-5.el7.x86_64",
            "7Server-RHSCL-2.4-7.3.Z:rh-mysql56-mysql-bench-0:5.6.37-5.el7.x86_64",
            "7Server-RHSCL-2.4-7.3.Z:rh-mysql56-mysql-common-0:5.6.37-5.el7.x86_64",
            "7Server-RHSCL-2.4-7.3.Z:rh-mysql56-mysql-config-0:5.6.37-5.el7.x86_64",
            "7Server-RHSCL-2.4-7.3.Z:rh-mysql56-mysql-debuginfo-0:5.6.37-5.el7.x86_64",
            "7Server-RHSCL-2.4-7.3.Z:rh-mysql56-mysql-devel-0:5.6.37-5.el7.x86_64",
            "7Server-RHSCL-2.4-7.3.Z:rh-mysql56-mysql-errmsg-0:5.6.37-5.el7.x86_64",
            "7Server-RHSCL-2.4-7.3.Z:rh-mysql56-mysql-server-0:5.6.37-5.el7.x86_64",
            "7Server-RHSCL-2.4-7.3.Z:rh-mysql56-mysql-test-0:5.6.37-5.el7.x86_64",
            "7Server-RHSCL-2.4:rh-mysql56-mysql-0:5.6.37-5.el7.src",
            "7Server-RHSCL-2.4:rh-mysql56-mysql-0:5.6.37-5.el7.x86_64",
            "7Server-RHSCL-2.4:rh-mysql56-mysql-bench-0:5.6.37-5.el7.x86_64",
            "7Server-RHSCL-2.4:rh-mysql56-mysql-common-0:5.6.37-5.el7.x86_64",
            "7Server-RHSCL-2.4:rh-mysql56-mysql-config-0:5.6.37-5.el7.x86_64",
            "7Server-RHSCL-2.4:rh-mysql56-mysql-debuginfo-0:5.6.37-5.el7.x86_64",
            "7Server-RHSCL-2.4:rh-mysql56-mysql-devel-0:5.6.37-5.el7.x86_64",
            "7Server-RHSCL-2.4:rh-mysql56-mysql-errmsg-0:5.6.37-5.el7.x86_64",
            "7Server-RHSCL-2.4:rh-mysql56-mysql-server-0:5.6.37-5.el7.x86_64",
            "7Server-RHSCL-2.4:rh-mysql56-mysql-test-0:5.6.37-5.el7.x86_64",
            "7Workstation-RHSCL-2.4:rh-mysql56-mysql-0:5.6.37-5.el7.src",
            "7Workstation-RHSCL-2.4:rh-mysql56-mysql-0:5.6.37-5.el7.x86_64",
            "7Workstation-RHSCL-2.4:rh-mysql56-mysql-bench-0:5.6.37-5.el7.x86_64",
            "7Workstation-RHSCL-2.4:rh-mysql56-mysql-common-0:5.6.37-5.el7.x86_64",
            "7Workstation-RHSCL-2.4:rh-mysql56-mysql-config-0:5.6.37-5.el7.x86_64",
            "7Workstation-RHSCL-2.4:rh-mysql56-mysql-debuginfo-0:5.6.37-5.el7.x86_64",
            "7Workstation-RHSCL-2.4:rh-mysql56-mysql-devel-0:5.6.37-5.el7.x86_64",
            "7Workstation-RHSCL-2.4:rh-mysql56-mysql-errmsg-0:5.6.37-5.el7.x86_64",
            "7Workstation-RHSCL-2.4:rh-mysql56-mysql-server-0:5.6.37-5.el7.x86_64",
            "7Workstation-RHSCL-2.4:rh-mysql56-mysql-test-0:5.6.37-5.el7.x86_64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2017:2787"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "HIGH",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 4.4,
            "baseSeverity": "MEDIUM",
            "confidentialityImpact": "NONE",
            "integrityImpact": "NONE",
            "privilegesRequired": "HIGH",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.0/AV:N/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.0"
          },
          "products": [
            "6Server-RHSCL-2.4-6.7.Z:rh-mysql56-mysql-0:5.6.37-5.el6.src",
            "6Server-RHSCL-2.4-6.7.Z:rh-mysql56-mysql-0:5.6.37-5.el6.x86_64",
            "6Server-RHSCL-2.4-6.7.Z:rh-mysql56-mysql-bench-0:5.6.37-5.el6.x86_64",
            "6Server-RHSCL-2.4-6.7.Z:rh-mysql56-mysql-common-0:5.6.37-5.el6.x86_64",
            "6Server-RHSCL-2.4-6.7.Z:rh-mysql56-mysql-config-0:5.6.37-5.el6.x86_64",
            "6Server-RHSCL-2.4-6.7.Z:rh-mysql56-mysql-debuginfo-0:5.6.37-5.el6.x86_64",
            "6Server-RHSCL-2.4-6.7.Z:rh-mysql56-mysql-devel-0:5.6.37-5.el6.x86_64",
            "6Server-RHSCL-2.4-6.7.Z:rh-mysql56-mysql-errmsg-0:5.6.37-5.el6.x86_64",
            "6Server-RHSCL-2.4-6.7.Z:rh-mysql56-mysql-server-0:5.6.37-5.el6.x86_64",
            "6Server-RHSCL-2.4-6.7.Z:rh-mysql56-mysql-test-0:5.6.37-5.el6.x86_64",
            "6Server-RHSCL-2.4:rh-mysql56-mysql-0:5.6.37-5.el6.src",
            "6Server-RHSCL-2.4:rh-mysql56-mysql-0:5.6.37-5.el6.x86_64",
            "6Server-RHSCL-2.4:rh-mysql56-mysql-bench-0:5.6.37-5.el6.x86_64",
            "6Server-RHSCL-2.4:rh-mysql56-mysql-common-0:5.6.37-5.el6.x86_64",
            "6Server-RHSCL-2.4:rh-mysql56-mysql-config-0:5.6.37-5.el6.x86_64",
            "6Server-RHSCL-2.4:rh-mysql56-mysql-debuginfo-0:5.6.37-5.el6.x86_64",
            "6Server-RHSCL-2.4:rh-mysql56-mysql-devel-0:5.6.37-5.el6.x86_64",
            "6Server-RHSCL-2.4:rh-mysql56-mysql-errmsg-0:5.6.37-5.el6.x86_64",
            "6Server-RHSCL-2.4:rh-mysql56-mysql-server-0:5.6.37-5.el6.x86_64",
            "6Server-RHSCL-2.4:rh-mysql56-mysql-test-0:5.6.37-5.el6.x86_64",
            "6Workstation-RHSCL-2.4:rh-mysql56-mysql-0:5.6.37-5.el6.src",
            "6Workstation-RHSCL-2.4:rh-mysql56-mysql-0:5.6.37-5.el6.x86_64",
            "6Workstation-RHSCL-2.4:rh-mysql56-mysql-bench-0:5.6.37-5.el6.x86_64",
            "6Workstation-RHSCL-2.4:rh-mysql56-mysql-common-0:5.6.37-5.el6.x86_64",
            "6Workstation-RHSCL-2.4:rh-mysql56-mysql-config-0:5.6.37-5.el6.x86_64",
            "6Workstation-RHSCL-2.4:rh-mysql56-mysql-debuginfo-0:5.6.37-5.el6.x86_64",
            "6Workstation-RHSCL-2.4:rh-mysql56-mysql-devel-0:5.6.37-5.el6.x86_64",
            "6Workstation-RHSCL-2.4:rh-mysql56-mysql-errmsg-0:5.6.37-5.el6.x86_64",
            "6Workstation-RHSCL-2.4:rh-mysql56-mysql-server-0:5.6.37-5.el6.x86_64",
            "6Workstation-RHSCL-2.4:rh-mysql56-mysql-test-0:5.6.37-5.el6.x86_64",
            "7Server-RHSCL-2.4-7.3.Z:rh-mysql56-mysql-0:5.6.37-5.el7.src",
            "7Server-RHSCL-2.4-7.3.Z:rh-mysql56-mysql-0:5.6.37-5.el7.x86_64",
            "7Server-RHSCL-2.4-7.3.Z:rh-mysql56-mysql-bench-0:5.6.37-5.el7.x86_64",
            "7Server-RHSCL-2.4-7.3.Z:rh-mysql56-mysql-common-0:5.6.37-5.el7.x86_64",
            "7Server-RHSCL-2.4-7.3.Z:rh-mysql56-mysql-config-0:5.6.37-5.el7.x86_64",
            "7Server-RHSCL-2.4-7.3.Z:rh-mysql56-mysql-debuginfo-0:5.6.37-5.el7.x86_64",
            "7Server-RHSCL-2.4-7.3.Z:rh-mysql56-mysql-devel-0:5.6.37-5.el7.x86_64",
            "7Server-RHSCL-2.4-7.3.Z:rh-mysql56-mysql-errmsg-0:5.6.37-5.el7.x86_64",
            "7Server-RHSCL-2.4-7.3.Z:rh-mysql56-mysql-server-0:5.6.37-5.el7.x86_64",
            "7Server-RHSCL-2.4-7.3.Z:rh-mysql56-mysql-test-0:5.6.37-5.el7.x86_64",
            "7Server-RHSCL-2.4:rh-mysql56-mysql-0:5.6.37-5.el7.src",
            "7Server-RHSCL-2.4:rh-mysql56-mysql-0:5.6.37-5.el7.x86_64",
            "7Server-RHSCL-2.4:rh-mysql56-mysql-bench-0:5.6.37-5.el7.x86_64",
            "7Server-RHSCL-2.4:rh-mysql56-mysql-common-0:5.6.37-5.el7.x86_64",
            "7Server-RHSCL-2.4:rh-mysql56-mysql-config-0:5.6.37-5.el7.x86_64",
            "7Server-RHSCL-2.4:rh-mysql56-mysql-debuginfo-0:5.6.37-5.el7.x86_64",
            "7Server-RHSCL-2.4:rh-mysql56-mysql-devel-0:5.6.37-5.el7.x86_64",
            "7Server-RHSCL-2.4:rh-mysql56-mysql-errmsg-0:5.6.37-5.el7.x86_64",
            "7Server-RHSCL-2.4:rh-mysql56-mysql-server-0:5.6.37-5.el7.x86_64",
            "7Server-RHSCL-2.4:rh-mysql56-mysql-test-0:5.6.37-5.el7.x86_64",
            "7Workstation-RHSCL-2.4:rh-mysql56-mysql-0:5.6.37-5.el7.src",
            "7Workstation-RHSCL-2.4:rh-mysql56-mysql-0:5.6.37-5.el7.x86_64",
            "7Workstation-RHSCL-2.4:rh-mysql56-mysql-bench-0:5.6.37-5.el7.x86_64",
            "7Workstation-RHSCL-2.4:rh-mysql56-mysql-common-0:5.6.37-5.el7.x86_64",
            "7Workstation-RHSCL-2.4:rh-mysql56-mysql-config-0:5.6.37-5.el7.x86_64",
            "7Workstation-RHSCL-2.4:rh-mysql56-mysql-debuginfo-0:5.6.37-5.el7.x86_64",
            "7Workstation-RHSCL-2.4:rh-mysql56-mysql-devel-0:5.6.37-5.el7.x86_64",
            "7Workstation-RHSCL-2.4:rh-mysql56-mysql-errmsg-0:5.6.37-5.el7.x86_64",
            "7Workstation-RHSCL-2.4:rh-mysql56-mysql-server-0:5.6.37-5.el7.x86_64",
            "7Workstation-RHSCL-2.4:rh-mysql56-mysql-test-0:5.6.37-5.el7.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Moderate"
        }
      ],
      "title": "mysql: Server: Replication  unspecified vulnerability (CPU Jan 2017)"
    },
    {
      "cve": "CVE-2017-3238",
      "discovery_date": "2017-01-18T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "1414338"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Optimizer). Supported versions that are affected are 5.5.53 and earlier, 5.6.34 and earlier and 5.7.16 and earlier. Easily exploitable vulnerability allows low privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS v3.0 Base Score 6.5 (Availability impacts).",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "mysql: Server: Optimizer unspecified vulnerability (CPU Jan 2017)",
          "title": "Vulnerability summary"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "6Server-RHSCL-2.4-6.7.Z:rh-mysql56-mysql-0:5.6.37-5.el6.src",
          "6Server-RHSCL-2.4-6.7.Z:rh-mysql56-mysql-0:5.6.37-5.el6.x86_64",
          "6Server-RHSCL-2.4-6.7.Z:rh-mysql56-mysql-bench-0:5.6.37-5.el6.x86_64",
          "6Server-RHSCL-2.4-6.7.Z:rh-mysql56-mysql-common-0:5.6.37-5.el6.x86_64",
          "6Server-RHSCL-2.4-6.7.Z:rh-mysql56-mysql-config-0:5.6.37-5.el6.x86_64",
          "6Server-RHSCL-2.4-6.7.Z:rh-mysql56-mysql-debuginfo-0:5.6.37-5.el6.x86_64",
          "6Server-RHSCL-2.4-6.7.Z:rh-mysql56-mysql-devel-0:5.6.37-5.el6.x86_64",
          "6Server-RHSCL-2.4-6.7.Z:rh-mysql56-mysql-errmsg-0:5.6.37-5.el6.x86_64",
          "6Server-RHSCL-2.4-6.7.Z:rh-mysql56-mysql-server-0:5.6.37-5.el6.x86_64",
          "6Server-RHSCL-2.4-6.7.Z:rh-mysql56-mysql-test-0:5.6.37-5.el6.x86_64",
          "6Server-RHSCL-2.4:rh-mysql56-mysql-0:5.6.37-5.el6.src",
          "6Server-RHSCL-2.4:rh-mysql56-mysql-0:5.6.37-5.el6.x86_64",
          "6Server-RHSCL-2.4:rh-mysql56-mysql-bench-0:5.6.37-5.el6.x86_64",
          "6Server-RHSCL-2.4:rh-mysql56-mysql-common-0:5.6.37-5.el6.x86_64",
          "6Server-RHSCL-2.4:rh-mysql56-mysql-config-0:5.6.37-5.el6.x86_64",
          "6Server-RHSCL-2.4:rh-mysql56-mysql-debuginfo-0:5.6.37-5.el6.x86_64",
          "6Server-RHSCL-2.4:rh-mysql56-mysql-devel-0:5.6.37-5.el6.x86_64",
          "6Server-RHSCL-2.4:rh-mysql56-mysql-errmsg-0:5.6.37-5.el6.x86_64",
          "6Server-RHSCL-2.4:rh-mysql56-mysql-server-0:5.6.37-5.el6.x86_64",
          "6Server-RHSCL-2.4:rh-mysql56-mysql-test-0:5.6.37-5.el6.x86_64",
          "6Workstation-RHSCL-2.4:rh-mysql56-mysql-0:5.6.37-5.el6.src",
          "6Workstation-RHSCL-2.4:rh-mysql56-mysql-0:5.6.37-5.el6.x86_64",
          "6Workstation-RHSCL-2.4:rh-mysql56-mysql-bench-0:5.6.37-5.el6.x86_64",
          "6Workstation-RHSCL-2.4:rh-mysql56-mysql-common-0:5.6.37-5.el6.x86_64",
          "6Workstation-RHSCL-2.4:rh-mysql56-mysql-config-0:5.6.37-5.el6.x86_64",
          "6Workstation-RHSCL-2.4:rh-mysql56-mysql-debuginfo-0:5.6.37-5.el6.x86_64",
          "6Workstation-RHSCL-2.4:rh-mysql56-mysql-devel-0:5.6.37-5.el6.x86_64",
          "6Workstation-RHSCL-2.4:rh-mysql56-mysql-errmsg-0:5.6.37-5.el6.x86_64",
          "6Workstation-RHSCL-2.4:rh-mysql56-mysql-server-0:5.6.37-5.el6.x86_64",
          "6Workstation-RHSCL-2.4:rh-mysql56-mysql-test-0:5.6.37-5.el6.x86_64",
          "7Server-RHSCL-2.4-7.3.Z:rh-mysql56-mysql-0:5.6.37-5.el7.src",
          "7Server-RHSCL-2.4-7.3.Z:rh-mysql56-mysql-0:5.6.37-5.el7.x86_64",
          "7Server-RHSCL-2.4-7.3.Z:rh-mysql56-mysql-bench-0:5.6.37-5.el7.x86_64",
          "7Server-RHSCL-2.4-7.3.Z:rh-mysql56-mysql-common-0:5.6.37-5.el7.x86_64",
          "7Server-RHSCL-2.4-7.3.Z:rh-mysql56-mysql-config-0:5.6.37-5.el7.x86_64",
          "7Server-RHSCL-2.4-7.3.Z:rh-mysql56-mysql-debuginfo-0:5.6.37-5.el7.x86_64",
          "7Server-RHSCL-2.4-7.3.Z:rh-mysql56-mysql-devel-0:5.6.37-5.el7.x86_64",
          "7Server-RHSCL-2.4-7.3.Z:rh-mysql56-mysql-errmsg-0:5.6.37-5.el7.x86_64",
          "7Server-RHSCL-2.4-7.3.Z:rh-mysql56-mysql-server-0:5.6.37-5.el7.x86_64",
          "7Server-RHSCL-2.4-7.3.Z:rh-mysql56-mysql-test-0:5.6.37-5.el7.x86_64",
          "7Server-RHSCL-2.4:rh-mysql56-mysql-0:5.6.37-5.el7.src",
          "7Server-RHSCL-2.4:rh-mysql56-mysql-0:5.6.37-5.el7.x86_64",
          "7Server-RHSCL-2.4:rh-mysql56-mysql-bench-0:5.6.37-5.el7.x86_64",
          "7Server-RHSCL-2.4:rh-mysql56-mysql-common-0:5.6.37-5.el7.x86_64",
          "7Server-RHSCL-2.4:rh-mysql56-mysql-config-0:5.6.37-5.el7.x86_64",
          "7Server-RHSCL-2.4:rh-mysql56-mysql-debuginfo-0:5.6.37-5.el7.x86_64",
          "7Server-RHSCL-2.4:rh-mysql56-mysql-devel-0:5.6.37-5.el7.x86_64",
          "7Server-RHSCL-2.4:rh-mysql56-mysql-errmsg-0:5.6.37-5.el7.x86_64",
          "7Server-RHSCL-2.4:rh-mysql56-mysql-server-0:5.6.37-5.el7.x86_64",
          "7Server-RHSCL-2.4:rh-mysql56-mysql-test-0:5.6.37-5.el7.x86_64",
          "7Workstation-RHSCL-2.4:rh-mysql56-mysql-0:5.6.37-5.el7.src",
          "7Workstation-RHSCL-2.4:rh-mysql56-mysql-0:5.6.37-5.el7.x86_64",
          "7Workstation-RHSCL-2.4:rh-mysql56-mysql-bench-0:5.6.37-5.el7.x86_64",
          "7Workstation-RHSCL-2.4:rh-mysql56-mysql-common-0:5.6.37-5.el7.x86_64",
          "7Workstation-RHSCL-2.4:rh-mysql56-mysql-config-0:5.6.37-5.el7.x86_64",
          "7Workstation-RHSCL-2.4:rh-mysql56-mysql-debuginfo-0:5.6.37-5.el7.x86_64",
          "7Workstation-RHSCL-2.4:rh-mysql56-mysql-devel-0:5.6.37-5.el7.x86_64",
          "7Workstation-RHSCL-2.4:rh-mysql56-mysql-errmsg-0:5.6.37-5.el7.x86_64",
          "7Workstation-RHSCL-2.4:rh-mysql56-mysql-server-0:5.6.37-5.el7.x86_64",
          "7Workstation-RHSCL-2.4:rh-mysql56-mysql-test-0:5.6.37-5.el7.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2017-3238"
        },
        {
          "category": "external",
          "summary": "RHBZ#1414338",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1414338"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2017-3238",
          "url": "https://www.cve.org/CVERecord?id=CVE-2017-3238"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2017-3238",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2017-3238"
        },
        {
          "category": "external",
          "summary": "http://www.oracle.com/technetwork/security-advisory/cpujan2017-2881727.html#AppendixMSQL",
          "url": "http://www.oracle.com/technetwork/security-advisory/cpujan2017-2881727.html#AppendixMSQL"
        }
      ],
      "release_date": "2017-01-18T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2017-09-21T07:42:12+00:00",
          "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAfter installing this update, the MySQL server daemon (mysqld) will be restarted automatically.",
          "product_ids": [
            "6Server-RHSCL-2.4-6.7.Z:rh-mysql56-mysql-0:5.6.37-5.el6.src",
            "6Server-RHSCL-2.4-6.7.Z:rh-mysql56-mysql-0:5.6.37-5.el6.x86_64",
            "6Server-RHSCL-2.4-6.7.Z:rh-mysql56-mysql-bench-0:5.6.37-5.el6.x86_64",
            "6Server-RHSCL-2.4-6.7.Z:rh-mysql56-mysql-common-0:5.6.37-5.el6.x86_64",
            "6Server-RHSCL-2.4-6.7.Z:rh-mysql56-mysql-config-0:5.6.37-5.el6.x86_64",
            "6Server-RHSCL-2.4-6.7.Z:rh-mysql56-mysql-debuginfo-0:5.6.37-5.el6.x86_64",
            "6Server-RHSCL-2.4-6.7.Z:rh-mysql56-mysql-devel-0:5.6.37-5.el6.x86_64",
            "6Server-RHSCL-2.4-6.7.Z:rh-mysql56-mysql-errmsg-0:5.6.37-5.el6.x86_64",
            "6Server-RHSCL-2.4-6.7.Z:rh-mysql56-mysql-server-0:5.6.37-5.el6.x86_64",
            "6Server-RHSCL-2.4-6.7.Z:rh-mysql56-mysql-test-0:5.6.37-5.el6.x86_64",
            "6Server-RHSCL-2.4:rh-mysql56-mysql-0:5.6.37-5.el6.src",
            "6Server-RHSCL-2.4:rh-mysql56-mysql-0:5.6.37-5.el6.x86_64",
            "6Server-RHSCL-2.4:rh-mysql56-mysql-bench-0:5.6.37-5.el6.x86_64",
            "6Server-RHSCL-2.4:rh-mysql56-mysql-common-0:5.6.37-5.el6.x86_64",
            "6Server-RHSCL-2.4:rh-mysql56-mysql-config-0:5.6.37-5.el6.x86_64",
            "6Server-RHSCL-2.4:rh-mysql56-mysql-debuginfo-0:5.6.37-5.el6.x86_64",
            "6Server-RHSCL-2.4:rh-mysql56-mysql-devel-0:5.6.37-5.el6.x86_64",
            "6Server-RHSCL-2.4:rh-mysql56-mysql-errmsg-0:5.6.37-5.el6.x86_64",
            "6Server-RHSCL-2.4:rh-mysql56-mysql-server-0:5.6.37-5.el6.x86_64",
            "6Server-RHSCL-2.4:rh-mysql56-mysql-test-0:5.6.37-5.el6.x86_64",
            "6Workstation-RHSCL-2.4:rh-mysql56-mysql-0:5.6.37-5.el6.src",
            "6Workstation-RHSCL-2.4:rh-mysql56-mysql-0:5.6.37-5.el6.x86_64",
            "6Workstation-RHSCL-2.4:rh-mysql56-mysql-bench-0:5.6.37-5.el6.x86_64",
            "6Workstation-RHSCL-2.4:rh-mysql56-mysql-common-0:5.6.37-5.el6.x86_64",
            "6Workstation-RHSCL-2.4:rh-mysql56-mysql-config-0:5.6.37-5.el6.x86_64",
            "6Workstation-RHSCL-2.4:rh-mysql56-mysql-debuginfo-0:5.6.37-5.el6.x86_64",
            "6Workstation-RHSCL-2.4:rh-mysql56-mysql-devel-0:5.6.37-5.el6.x86_64",
            "6Workstation-RHSCL-2.4:rh-mysql56-mysql-errmsg-0:5.6.37-5.el6.x86_64",
            "6Workstation-RHSCL-2.4:rh-mysql56-mysql-server-0:5.6.37-5.el6.x86_64",
            "6Workstation-RHSCL-2.4:rh-mysql56-mysql-test-0:5.6.37-5.el6.x86_64",
            "7Server-RHSCL-2.4-7.3.Z:rh-mysql56-mysql-0:5.6.37-5.el7.src",
            "7Server-RHSCL-2.4-7.3.Z:rh-mysql56-mysql-0:5.6.37-5.el7.x86_64",
            "7Server-RHSCL-2.4-7.3.Z:rh-mysql56-mysql-bench-0:5.6.37-5.el7.x86_64",
            "7Server-RHSCL-2.4-7.3.Z:rh-mysql56-mysql-common-0:5.6.37-5.el7.x86_64",
            "7Server-RHSCL-2.4-7.3.Z:rh-mysql56-mysql-config-0:5.6.37-5.el7.x86_64",
            "7Server-RHSCL-2.4-7.3.Z:rh-mysql56-mysql-debuginfo-0:5.6.37-5.el7.x86_64",
            "7Server-RHSCL-2.4-7.3.Z:rh-mysql56-mysql-devel-0:5.6.37-5.el7.x86_64",
            "7Server-RHSCL-2.4-7.3.Z:rh-mysql56-mysql-errmsg-0:5.6.37-5.el7.x86_64",
            "7Server-RHSCL-2.4-7.3.Z:rh-mysql56-mysql-server-0:5.6.37-5.el7.x86_64",
            "7Server-RHSCL-2.4-7.3.Z:rh-mysql56-mysql-test-0:5.6.37-5.el7.x86_64",
            "7Server-RHSCL-2.4:rh-mysql56-mysql-0:5.6.37-5.el7.src",
            "7Server-RHSCL-2.4:rh-mysql56-mysql-0:5.6.37-5.el7.x86_64",
            "7Server-RHSCL-2.4:rh-mysql56-mysql-bench-0:5.6.37-5.el7.x86_64",
            "7Server-RHSCL-2.4:rh-mysql56-mysql-common-0:5.6.37-5.el7.x86_64",
            "7Server-RHSCL-2.4:rh-mysql56-mysql-config-0:5.6.37-5.el7.x86_64",
            "7Server-RHSCL-2.4:rh-mysql56-mysql-debuginfo-0:5.6.37-5.el7.x86_64",
            "7Server-RHSCL-2.4:rh-mysql56-mysql-devel-0:5.6.37-5.el7.x86_64",
            "7Server-RHSCL-2.4:rh-mysql56-mysql-errmsg-0:5.6.37-5.el7.x86_64",
            "7Server-RHSCL-2.4:rh-mysql56-mysql-server-0:5.6.37-5.el7.x86_64",
            "7Server-RHSCL-2.4:rh-mysql56-mysql-test-0:5.6.37-5.el7.x86_64",
            "7Workstation-RHSCL-2.4:rh-mysql56-mysql-0:5.6.37-5.el7.src",
            "7Workstation-RHSCL-2.4:rh-mysql56-mysql-0:5.6.37-5.el7.x86_64",
            "7Workstation-RHSCL-2.4:rh-mysql56-mysql-bench-0:5.6.37-5.el7.x86_64",
            "7Workstation-RHSCL-2.4:rh-mysql56-mysql-common-0:5.6.37-5.el7.x86_64",
            "7Workstation-RHSCL-2.4:rh-mysql56-mysql-config-0:5.6.37-5.el7.x86_64",
            "7Workstation-RHSCL-2.4:rh-mysql56-mysql-debuginfo-0:5.6.37-5.el7.x86_64",
            "7Workstation-RHSCL-2.4:rh-mysql56-mysql-devel-0:5.6.37-5.el7.x86_64",
            "7Workstation-RHSCL-2.4:rh-mysql56-mysql-errmsg-0:5.6.37-5.el7.x86_64",
            "7Workstation-RHSCL-2.4:rh-mysql56-mysql-server-0:5.6.37-5.el7.x86_64",
            "7Workstation-RHSCL-2.4:rh-mysql56-mysql-test-0:5.6.37-5.el7.x86_64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2017:2787"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 6.5,
            "baseSeverity": "MEDIUM",
            "confidentialityImpact": "NONE",
            "integrityImpact": "NONE",
            "privilegesRequired": "LOW",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.0"
          },
          "products": [
            "6Server-RHSCL-2.4-6.7.Z:rh-mysql56-mysql-0:5.6.37-5.el6.src",
            "6Server-RHSCL-2.4-6.7.Z:rh-mysql56-mysql-0:5.6.37-5.el6.x86_64",
            "6Server-RHSCL-2.4-6.7.Z:rh-mysql56-mysql-bench-0:5.6.37-5.el6.x86_64",
            "6Server-RHSCL-2.4-6.7.Z:rh-mysql56-mysql-common-0:5.6.37-5.el6.x86_64",
            "6Server-RHSCL-2.4-6.7.Z:rh-mysql56-mysql-config-0:5.6.37-5.el6.x86_64",
            "6Server-RHSCL-2.4-6.7.Z:rh-mysql56-mysql-debuginfo-0:5.6.37-5.el6.x86_64",
            "6Server-RHSCL-2.4-6.7.Z:rh-mysql56-mysql-devel-0:5.6.37-5.el6.x86_64",
            "6Server-RHSCL-2.4-6.7.Z:rh-mysql56-mysql-errmsg-0:5.6.37-5.el6.x86_64",
            "6Server-RHSCL-2.4-6.7.Z:rh-mysql56-mysql-server-0:5.6.37-5.el6.x86_64",
            "6Server-RHSCL-2.4-6.7.Z:rh-mysql56-mysql-test-0:5.6.37-5.el6.x86_64",
            "6Server-RHSCL-2.4:rh-mysql56-mysql-0:5.6.37-5.el6.src",
            "6Server-RHSCL-2.4:rh-mysql56-mysql-0:5.6.37-5.el6.x86_64",
            "6Server-RHSCL-2.4:rh-mysql56-mysql-bench-0:5.6.37-5.el6.x86_64",
            "6Server-RHSCL-2.4:rh-mysql56-mysql-common-0:5.6.37-5.el6.x86_64",
            "6Server-RHSCL-2.4:rh-mysql56-mysql-config-0:5.6.37-5.el6.x86_64",
            "6Server-RHSCL-2.4:rh-mysql56-mysql-debuginfo-0:5.6.37-5.el6.x86_64",
            "6Server-RHSCL-2.4:rh-mysql56-mysql-devel-0:5.6.37-5.el6.x86_64",
            "6Server-RHSCL-2.4:rh-mysql56-mysql-errmsg-0:5.6.37-5.el6.x86_64",
            "6Server-RHSCL-2.4:rh-mysql56-mysql-server-0:5.6.37-5.el6.x86_64",
            "6Server-RHSCL-2.4:rh-mysql56-mysql-test-0:5.6.37-5.el6.x86_64",
            "6Workstation-RHSCL-2.4:rh-mysql56-mysql-0:5.6.37-5.el6.src",
            "6Workstation-RHSCL-2.4:rh-mysql56-mysql-0:5.6.37-5.el6.x86_64",
            "6Workstation-RHSCL-2.4:rh-mysql56-mysql-bench-0:5.6.37-5.el6.x86_64",
            "6Workstation-RHSCL-2.4:rh-mysql56-mysql-common-0:5.6.37-5.el6.x86_64",
            "6Workstation-RHSCL-2.4:rh-mysql56-mysql-config-0:5.6.37-5.el6.x86_64",
            "6Workstation-RHSCL-2.4:rh-mysql56-mysql-debuginfo-0:5.6.37-5.el6.x86_64",
            "6Workstation-RHSCL-2.4:rh-mysql56-mysql-devel-0:5.6.37-5.el6.x86_64",
            "6Workstation-RHSCL-2.4:rh-mysql56-mysql-errmsg-0:5.6.37-5.el6.x86_64",
            "6Workstation-RHSCL-2.4:rh-mysql56-mysql-server-0:5.6.37-5.el6.x86_64",
            "6Workstation-RHSCL-2.4:rh-mysql56-mysql-test-0:5.6.37-5.el6.x86_64",
            "7Server-RHSCL-2.4-7.3.Z:rh-mysql56-mysql-0:5.6.37-5.el7.src",
            "7Server-RHSCL-2.4-7.3.Z:rh-mysql56-mysql-0:5.6.37-5.el7.x86_64",
            "7Server-RHSCL-2.4-7.3.Z:rh-mysql56-mysql-bench-0:5.6.37-5.el7.x86_64",
            "7Server-RHSCL-2.4-7.3.Z:rh-mysql56-mysql-common-0:5.6.37-5.el7.x86_64",
            "7Server-RHSCL-2.4-7.3.Z:rh-mysql56-mysql-config-0:5.6.37-5.el7.x86_64",
            "7Server-RHSCL-2.4-7.3.Z:rh-mysql56-mysql-debuginfo-0:5.6.37-5.el7.x86_64",
            "7Server-RHSCL-2.4-7.3.Z:rh-mysql56-mysql-devel-0:5.6.37-5.el7.x86_64",
            "7Server-RHSCL-2.4-7.3.Z:rh-mysql56-mysql-errmsg-0:5.6.37-5.el7.x86_64",
            "7Server-RHSCL-2.4-7.3.Z:rh-mysql56-mysql-server-0:5.6.37-5.el7.x86_64",
            "7Server-RHSCL-2.4-7.3.Z:rh-mysql56-mysql-test-0:5.6.37-5.el7.x86_64",
            "7Server-RHSCL-2.4:rh-mysql56-mysql-0:5.6.37-5.el7.src",
            "7Server-RHSCL-2.4:rh-mysql56-mysql-0:5.6.37-5.el7.x86_64",
            "7Server-RHSCL-2.4:rh-mysql56-mysql-bench-0:5.6.37-5.el7.x86_64",
            "7Server-RHSCL-2.4:rh-mysql56-mysql-common-0:5.6.37-5.el7.x86_64",
            "7Server-RHSCL-2.4:rh-mysql56-mysql-config-0:5.6.37-5.el7.x86_64",
            "7Server-RHSCL-2.4:rh-mysql56-mysql-debuginfo-0:5.6.37-5.el7.x86_64",
            "7Server-RHSCL-2.4:rh-mysql56-mysql-devel-0:5.6.37-5.el7.x86_64",
            "7Server-RHSCL-2.4:rh-mysql56-mysql-errmsg-0:5.6.37-5.el7.x86_64",
            "7Server-RHSCL-2.4:rh-mysql56-mysql-server-0:5.6.37-5.el7.x86_64",
            "7Server-RHSCL-2.4:rh-mysql56-mysql-test-0:5.6.37-5.el7.x86_64",
            "7Workstation-RHSCL-2.4:rh-mysql56-mysql-0:5.6.37-5.el7.src",
            "7Workstation-RHSCL-2.4:rh-mysql56-mysql-0:5.6.37-5.el7.x86_64",
            "7Workstation-RHSCL-2.4:rh-mysql56-mysql-bench-0:5.6.37-5.el7.x86_64",
            "7Workstation-RHSCL-2.4:rh-mysql56-mysql-common-0:5.6.37-5.el7.x86_64",
            "7Workstation-RHSCL-2.4:rh-mysql56-mysql-config-0:5.6.37-5.el7.x86_64",
            "7Workstation-RHSCL-2.4:rh-mysql56-mysql-debuginfo-0:5.6.37-5.el7.x86_64",
            "7Workstation-RHSCL-2.4:rh-mysql56-mysql-devel-0:5.6.37-5.el7.x86_64",
            "7Workstation-RHSCL-2.4:rh-mysql56-mysql-errmsg-0:5.6.37-5.el7.x86_64",
            "7Workstation-RHSCL-2.4:rh-mysql56-mysql-server-0:5.6.37-5.el7.x86_64",
            "7Workstation-RHSCL-2.4:rh-mysql56-mysql-test-0:5.6.37-5.el7.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Moderate"
        }
      ],
      "title": "mysql: Server: Optimizer unspecified vulnerability (CPU Jan 2017)"
    },
    {
      "cve": "CVE-2017-3244",
      "discovery_date": "2017-01-18T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "1414342"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: DML). Supported versions that are affected are 5.5.53 and earlier, 5.6.34 and earlier and 5.7.16 and earlier. Easily exploitable vulnerability allows low privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS v3.0 Base Score 6.5 (Availability impacts).",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "mysql: Server: DML unspecified vulnerability (CPU Jan 2017)",
          "title": "Vulnerability summary"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "6Server-RHSCL-2.4-6.7.Z:rh-mysql56-mysql-0:5.6.37-5.el6.src",
          "6Server-RHSCL-2.4-6.7.Z:rh-mysql56-mysql-0:5.6.37-5.el6.x86_64",
          "6Server-RHSCL-2.4-6.7.Z:rh-mysql56-mysql-bench-0:5.6.37-5.el6.x86_64",
          "6Server-RHSCL-2.4-6.7.Z:rh-mysql56-mysql-common-0:5.6.37-5.el6.x86_64",
          "6Server-RHSCL-2.4-6.7.Z:rh-mysql56-mysql-config-0:5.6.37-5.el6.x86_64",
          "6Server-RHSCL-2.4-6.7.Z:rh-mysql56-mysql-debuginfo-0:5.6.37-5.el6.x86_64",
          "6Server-RHSCL-2.4-6.7.Z:rh-mysql56-mysql-devel-0:5.6.37-5.el6.x86_64",
          "6Server-RHSCL-2.4-6.7.Z:rh-mysql56-mysql-errmsg-0:5.6.37-5.el6.x86_64",
          "6Server-RHSCL-2.4-6.7.Z:rh-mysql56-mysql-server-0:5.6.37-5.el6.x86_64",
          "6Server-RHSCL-2.4-6.7.Z:rh-mysql56-mysql-test-0:5.6.37-5.el6.x86_64",
          "6Server-RHSCL-2.4:rh-mysql56-mysql-0:5.6.37-5.el6.src",
          "6Server-RHSCL-2.4:rh-mysql56-mysql-0:5.6.37-5.el6.x86_64",
          "6Server-RHSCL-2.4:rh-mysql56-mysql-bench-0:5.6.37-5.el6.x86_64",
          "6Server-RHSCL-2.4:rh-mysql56-mysql-common-0:5.6.37-5.el6.x86_64",
          "6Server-RHSCL-2.4:rh-mysql56-mysql-config-0:5.6.37-5.el6.x86_64",
          "6Server-RHSCL-2.4:rh-mysql56-mysql-debuginfo-0:5.6.37-5.el6.x86_64",
          "6Server-RHSCL-2.4:rh-mysql56-mysql-devel-0:5.6.37-5.el6.x86_64",
          "6Server-RHSCL-2.4:rh-mysql56-mysql-errmsg-0:5.6.37-5.el6.x86_64",
          "6Server-RHSCL-2.4:rh-mysql56-mysql-server-0:5.6.37-5.el6.x86_64",
          "6Server-RHSCL-2.4:rh-mysql56-mysql-test-0:5.6.37-5.el6.x86_64",
          "6Workstation-RHSCL-2.4:rh-mysql56-mysql-0:5.6.37-5.el6.src",
          "6Workstation-RHSCL-2.4:rh-mysql56-mysql-0:5.6.37-5.el6.x86_64",
          "6Workstation-RHSCL-2.4:rh-mysql56-mysql-bench-0:5.6.37-5.el6.x86_64",
          "6Workstation-RHSCL-2.4:rh-mysql56-mysql-common-0:5.6.37-5.el6.x86_64",
          "6Workstation-RHSCL-2.4:rh-mysql56-mysql-config-0:5.6.37-5.el6.x86_64",
          "6Workstation-RHSCL-2.4:rh-mysql56-mysql-debuginfo-0:5.6.37-5.el6.x86_64",
          "6Workstation-RHSCL-2.4:rh-mysql56-mysql-devel-0:5.6.37-5.el6.x86_64",
          "6Workstation-RHSCL-2.4:rh-mysql56-mysql-errmsg-0:5.6.37-5.el6.x86_64",
          "6Workstation-RHSCL-2.4:rh-mysql56-mysql-server-0:5.6.37-5.el6.x86_64",
          "6Workstation-RHSCL-2.4:rh-mysql56-mysql-test-0:5.6.37-5.el6.x86_64",
          "7Server-RHSCL-2.4-7.3.Z:rh-mysql56-mysql-0:5.6.37-5.el7.src",
          "7Server-RHSCL-2.4-7.3.Z:rh-mysql56-mysql-0:5.6.37-5.el7.x86_64",
          "7Server-RHSCL-2.4-7.3.Z:rh-mysql56-mysql-bench-0:5.6.37-5.el7.x86_64",
          "7Server-RHSCL-2.4-7.3.Z:rh-mysql56-mysql-common-0:5.6.37-5.el7.x86_64",
          "7Server-RHSCL-2.4-7.3.Z:rh-mysql56-mysql-config-0:5.6.37-5.el7.x86_64",
          "7Server-RHSCL-2.4-7.3.Z:rh-mysql56-mysql-debuginfo-0:5.6.37-5.el7.x86_64",
          "7Server-RHSCL-2.4-7.3.Z:rh-mysql56-mysql-devel-0:5.6.37-5.el7.x86_64",
          "7Server-RHSCL-2.4-7.3.Z:rh-mysql56-mysql-errmsg-0:5.6.37-5.el7.x86_64",
          "7Server-RHSCL-2.4-7.3.Z:rh-mysql56-mysql-server-0:5.6.37-5.el7.x86_64",
          "7Server-RHSCL-2.4-7.3.Z:rh-mysql56-mysql-test-0:5.6.37-5.el7.x86_64",
          "7Server-RHSCL-2.4:rh-mysql56-mysql-0:5.6.37-5.el7.src",
          "7Server-RHSCL-2.4:rh-mysql56-mysql-0:5.6.37-5.el7.x86_64",
          "7Server-RHSCL-2.4:rh-mysql56-mysql-bench-0:5.6.37-5.el7.x86_64",
          "7Server-RHSCL-2.4:rh-mysql56-mysql-common-0:5.6.37-5.el7.x86_64",
          "7Server-RHSCL-2.4:rh-mysql56-mysql-config-0:5.6.37-5.el7.x86_64",
          "7Server-RHSCL-2.4:rh-mysql56-mysql-debuginfo-0:5.6.37-5.el7.x86_64",
          "7Server-RHSCL-2.4:rh-mysql56-mysql-devel-0:5.6.37-5.el7.x86_64",
          "7Server-RHSCL-2.4:rh-mysql56-mysql-errmsg-0:5.6.37-5.el7.x86_64",
          "7Server-RHSCL-2.4:rh-mysql56-mysql-server-0:5.6.37-5.el7.x86_64",
          "7Server-RHSCL-2.4:rh-mysql56-mysql-test-0:5.6.37-5.el7.x86_64",
          "7Workstation-RHSCL-2.4:rh-mysql56-mysql-0:5.6.37-5.el7.src",
          "7Workstation-RHSCL-2.4:rh-mysql56-mysql-0:5.6.37-5.el7.x86_64",
          "7Workstation-RHSCL-2.4:rh-mysql56-mysql-bench-0:5.6.37-5.el7.x86_64",
          "7Workstation-RHSCL-2.4:rh-mysql56-mysql-common-0:5.6.37-5.el7.x86_64",
          "7Workstation-RHSCL-2.4:rh-mysql56-mysql-config-0:5.6.37-5.el7.x86_64",
          "7Workstation-RHSCL-2.4:rh-mysql56-mysql-debuginfo-0:5.6.37-5.el7.x86_64",
          "7Workstation-RHSCL-2.4:rh-mysql56-mysql-devel-0:5.6.37-5.el7.x86_64",
          "7Workstation-RHSCL-2.4:rh-mysql56-mysql-errmsg-0:5.6.37-5.el7.x86_64",
          "7Workstation-RHSCL-2.4:rh-mysql56-mysql-server-0:5.6.37-5.el7.x86_64",
          "7Workstation-RHSCL-2.4:rh-mysql56-mysql-test-0:5.6.37-5.el7.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2017-3244"
        },
        {
          "category": "external",
          "summary": "RHBZ#1414342",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1414342"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2017-3244",
          "url": "https://www.cve.org/CVERecord?id=CVE-2017-3244"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2017-3244",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2017-3244"
        },
        {
          "category": "external",
          "summary": "http://www.oracle.com/technetwork/security-advisory/cpujan2017-2881727.html#AppendixMSQL",
          "url": "http://www.oracle.com/technetwork/security-advisory/cpujan2017-2881727.html#AppendixMSQL"
        }
      ],
      "release_date": "2017-01-18T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2017-09-21T07:42:12+00:00",
          "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAfter installing this update, the MySQL server daemon (mysqld) will be restarted automatically.",
          "product_ids": [
            "6Server-RHSCL-2.4-6.7.Z:rh-mysql56-mysql-0:5.6.37-5.el6.src",
            "6Server-RHSCL-2.4-6.7.Z:rh-mysql56-mysql-0:5.6.37-5.el6.x86_64",
            "6Server-RHSCL-2.4-6.7.Z:rh-mysql56-mysql-bench-0:5.6.37-5.el6.x86_64",
            "6Server-RHSCL-2.4-6.7.Z:rh-mysql56-mysql-common-0:5.6.37-5.el6.x86_64",
            "6Server-RHSCL-2.4-6.7.Z:rh-mysql56-mysql-config-0:5.6.37-5.el6.x86_64",
            "6Server-RHSCL-2.4-6.7.Z:rh-mysql56-mysql-debuginfo-0:5.6.37-5.el6.x86_64",
            "6Server-RHSCL-2.4-6.7.Z:rh-mysql56-mysql-devel-0:5.6.37-5.el6.x86_64",
            "6Server-RHSCL-2.4-6.7.Z:rh-mysql56-mysql-errmsg-0:5.6.37-5.el6.x86_64",
            "6Server-RHSCL-2.4-6.7.Z:rh-mysql56-mysql-server-0:5.6.37-5.el6.x86_64",
            "6Server-RHSCL-2.4-6.7.Z:rh-mysql56-mysql-test-0:5.6.37-5.el6.x86_64",
            "6Server-RHSCL-2.4:rh-mysql56-mysql-0:5.6.37-5.el6.src",
            "6Server-RHSCL-2.4:rh-mysql56-mysql-0:5.6.37-5.el6.x86_64",
            "6Server-RHSCL-2.4:rh-mysql56-mysql-bench-0:5.6.37-5.el6.x86_64",
            "6Server-RHSCL-2.4:rh-mysql56-mysql-common-0:5.6.37-5.el6.x86_64",
            "6Server-RHSCL-2.4:rh-mysql56-mysql-config-0:5.6.37-5.el6.x86_64",
            "6Server-RHSCL-2.4:rh-mysql56-mysql-debuginfo-0:5.6.37-5.el6.x86_64",
            "6Server-RHSCL-2.4:rh-mysql56-mysql-devel-0:5.6.37-5.el6.x86_64",
            "6Server-RHSCL-2.4:rh-mysql56-mysql-errmsg-0:5.6.37-5.el6.x86_64",
            "6Server-RHSCL-2.4:rh-mysql56-mysql-server-0:5.6.37-5.el6.x86_64",
            "6Server-RHSCL-2.4:rh-mysql56-mysql-test-0:5.6.37-5.el6.x86_64",
            "6Workstation-RHSCL-2.4:rh-mysql56-mysql-0:5.6.37-5.el6.src",
            "6Workstation-RHSCL-2.4:rh-mysql56-mysql-0:5.6.37-5.el6.x86_64",
            "6Workstation-RHSCL-2.4:rh-mysql56-mysql-bench-0:5.6.37-5.el6.x86_64",
            "6Workstation-RHSCL-2.4:rh-mysql56-mysql-common-0:5.6.37-5.el6.x86_64",
            "6Workstation-RHSCL-2.4:rh-mysql56-mysql-config-0:5.6.37-5.el6.x86_64",
            "6Workstation-RHSCL-2.4:rh-mysql56-mysql-debuginfo-0:5.6.37-5.el6.x86_64",
            "6Workstation-RHSCL-2.4:rh-mysql56-mysql-devel-0:5.6.37-5.el6.x86_64",
            "6Workstation-RHSCL-2.4:rh-mysql56-mysql-errmsg-0:5.6.37-5.el6.x86_64",
            "6Workstation-RHSCL-2.4:rh-mysql56-mysql-server-0:5.6.37-5.el6.x86_64",
            "6Workstation-RHSCL-2.4:rh-mysql56-mysql-test-0:5.6.37-5.el6.x86_64",
            "7Server-RHSCL-2.4-7.3.Z:rh-mysql56-mysql-0:5.6.37-5.el7.src",
            "7Server-RHSCL-2.4-7.3.Z:rh-mysql56-mysql-0:5.6.37-5.el7.x86_64",
            "7Server-RHSCL-2.4-7.3.Z:rh-mysql56-mysql-bench-0:5.6.37-5.el7.x86_64",
            "7Server-RHSCL-2.4-7.3.Z:rh-mysql56-mysql-common-0:5.6.37-5.el7.x86_64",
            "7Server-RHSCL-2.4-7.3.Z:rh-mysql56-mysql-config-0:5.6.37-5.el7.x86_64",
            "7Server-RHSCL-2.4-7.3.Z:rh-mysql56-mysql-debuginfo-0:5.6.37-5.el7.x86_64",
            "7Server-RHSCL-2.4-7.3.Z:rh-mysql56-mysql-devel-0:5.6.37-5.el7.x86_64",
            "7Server-RHSCL-2.4-7.3.Z:rh-mysql56-mysql-errmsg-0:5.6.37-5.el7.x86_64",
            "7Server-RHSCL-2.4-7.3.Z:rh-mysql56-mysql-server-0:5.6.37-5.el7.x86_64",
            "7Server-RHSCL-2.4-7.3.Z:rh-mysql56-mysql-test-0:5.6.37-5.el7.x86_64",
            "7Server-RHSCL-2.4:rh-mysql56-mysql-0:5.6.37-5.el7.src",
            "7Server-RHSCL-2.4:rh-mysql56-mysql-0:5.6.37-5.el7.x86_64",
            "7Server-RHSCL-2.4:rh-mysql56-mysql-bench-0:5.6.37-5.el7.x86_64",
            "7Server-RHSCL-2.4:rh-mysql56-mysql-common-0:5.6.37-5.el7.x86_64",
            "7Server-RHSCL-2.4:rh-mysql56-mysql-config-0:5.6.37-5.el7.x86_64",
            "7Server-RHSCL-2.4:rh-mysql56-mysql-debuginfo-0:5.6.37-5.el7.x86_64",
            "7Server-RHSCL-2.4:rh-mysql56-mysql-devel-0:5.6.37-5.el7.x86_64",
            "7Server-RHSCL-2.4:rh-mysql56-mysql-errmsg-0:5.6.37-5.el7.x86_64",
            "7Server-RHSCL-2.4:rh-mysql56-mysql-server-0:5.6.37-5.el7.x86_64",
            "7Server-RHSCL-2.4:rh-mysql56-mysql-test-0:5.6.37-5.el7.x86_64",
            "7Workstation-RHSCL-2.4:rh-mysql56-mysql-0:5.6.37-5.el7.src",
            "7Workstation-RHSCL-2.4:rh-mysql56-mysql-0:5.6.37-5.el7.x86_64",
            "7Workstation-RHSCL-2.4:rh-mysql56-mysql-bench-0:5.6.37-5.el7.x86_64",
            "7Workstation-RHSCL-2.4:rh-mysql56-mysql-common-0:5.6.37-5.el7.x86_64",
            "7Workstation-RHSCL-2.4:rh-mysql56-mysql-config-0:5.6.37-5.el7.x86_64",
            "7Workstation-RHSCL-2.4:rh-mysql56-mysql-debuginfo-0:5.6.37-5.el7.x86_64",
            "7Workstation-RHSCL-2.4:rh-mysql56-mysql-devel-0:5.6.37-5.el7.x86_64",
            "7Workstation-RHSCL-2.4:rh-mysql56-mysql-errmsg-0:5.6.37-5.el7.x86_64",
            "7Workstation-RHSCL-2.4:rh-mysql56-mysql-server-0:5.6.37-5.el7.x86_64",
            "7Workstation-RHSCL-2.4:rh-mysql56-mysql-test-0:5.6.37-5.el7.x86_64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2017:2787"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 6.5,
            "baseSeverity": "MEDIUM",
            "confidentialityImpact": "NONE",
            "integrityImpact": "NONE",
            "privilegesRequired": "LOW",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.0"
          },
          "products": [
            "6Server-RHSCL-2.4-6.7.Z:rh-mysql56-mysql-0:5.6.37-5.el6.src",
            "6Server-RHSCL-2.4-6.7.Z:rh-mysql56-mysql-0:5.6.37-5.el6.x86_64",
            "6Server-RHSCL-2.4-6.7.Z:rh-mysql56-mysql-bench-0:5.6.37-5.el6.x86_64",
            "6Server-RHSCL-2.4-6.7.Z:rh-mysql56-mysql-common-0:5.6.37-5.el6.x86_64",
            "6Server-RHSCL-2.4-6.7.Z:rh-mysql56-mysql-config-0:5.6.37-5.el6.x86_64",
            "6Server-RHSCL-2.4-6.7.Z:rh-mysql56-mysql-debuginfo-0:5.6.37-5.el6.x86_64",
            "6Server-RHSCL-2.4-6.7.Z:rh-mysql56-mysql-devel-0:5.6.37-5.el6.x86_64",
            "6Server-RHSCL-2.4-6.7.Z:rh-mysql56-mysql-errmsg-0:5.6.37-5.el6.x86_64",
            "6Server-RHSCL-2.4-6.7.Z:rh-mysql56-mysql-server-0:5.6.37-5.el6.x86_64",
            "6Server-RHSCL-2.4-6.7.Z:rh-mysql56-mysql-test-0:5.6.37-5.el6.x86_64",
            "6Server-RHSCL-2.4:rh-mysql56-mysql-0:5.6.37-5.el6.src",
            "6Server-RHSCL-2.4:rh-mysql56-mysql-0:5.6.37-5.el6.x86_64",
            "6Server-RHSCL-2.4:rh-mysql56-mysql-bench-0:5.6.37-5.el6.x86_64",
            "6Server-RHSCL-2.4:rh-mysql56-mysql-common-0:5.6.37-5.el6.x86_64",
            "6Server-RHSCL-2.4:rh-mysql56-mysql-config-0:5.6.37-5.el6.x86_64",
            "6Server-RHSCL-2.4:rh-mysql56-mysql-debuginfo-0:5.6.37-5.el6.x86_64",
            "6Server-RHSCL-2.4:rh-mysql56-mysql-devel-0:5.6.37-5.el6.x86_64",
            "6Server-RHSCL-2.4:rh-mysql56-mysql-errmsg-0:5.6.37-5.el6.x86_64",
            "6Server-RHSCL-2.4:rh-mysql56-mysql-server-0:5.6.37-5.el6.x86_64",
            "6Server-RHSCL-2.4:rh-mysql56-mysql-test-0:5.6.37-5.el6.x86_64",
            "6Workstation-RHSCL-2.4:rh-mysql56-mysql-0:5.6.37-5.el6.src",
            "6Workstation-RHSCL-2.4:rh-mysql56-mysql-0:5.6.37-5.el6.x86_64",
            "6Workstation-RHSCL-2.4:rh-mysql56-mysql-bench-0:5.6.37-5.el6.x86_64",
            "6Workstation-RHSCL-2.4:rh-mysql56-mysql-common-0:5.6.37-5.el6.x86_64",
            "6Workstation-RHSCL-2.4:rh-mysql56-mysql-config-0:5.6.37-5.el6.x86_64",
            "6Workstation-RHSCL-2.4:rh-mysql56-mysql-debuginfo-0:5.6.37-5.el6.x86_64",
            "6Workstation-RHSCL-2.4:rh-mysql56-mysql-devel-0:5.6.37-5.el6.x86_64",
            "6Workstation-RHSCL-2.4:rh-mysql56-mysql-errmsg-0:5.6.37-5.el6.x86_64",
            "6Workstation-RHSCL-2.4:rh-mysql56-mysql-server-0:5.6.37-5.el6.x86_64",
            "6Workstation-RHSCL-2.4:rh-mysql56-mysql-test-0:5.6.37-5.el6.x86_64",
            "7Server-RHSCL-2.4-7.3.Z:rh-mysql56-mysql-0:5.6.37-5.el7.src",
            "7Server-RHSCL-2.4-7.3.Z:rh-mysql56-mysql-0:5.6.37-5.el7.x86_64",
            "7Server-RHSCL-2.4-7.3.Z:rh-mysql56-mysql-bench-0:5.6.37-5.el7.x86_64",
            "7Server-RHSCL-2.4-7.3.Z:rh-mysql56-mysql-common-0:5.6.37-5.el7.x86_64",
            "7Server-RHSCL-2.4-7.3.Z:rh-mysql56-mysql-config-0:5.6.37-5.el7.x86_64",
            "7Server-RHSCL-2.4-7.3.Z:rh-mysql56-mysql-debuginfo-0:5.6.37-5.el7.x86_64",
            "7Server-RHSCL-2.4-7.3.Z:rh-mysql56-mysql-devel-0:5.6.37-5.el7.x86_64",
            "7Server-RHSCL-2.4-7.3.Z:rh-mysql56-mysql-errmsg-0:5.6.37-5.el7.x86_64",
            "7Server-RHSCL-2.4-7.3.Z:rh-mysql56-mysql-server-0:5.6.37-5.el7.x86_64",
            "7Server-RHSCL-2.4-7.3.Z:rh-mysql56-mysql-test-0:5.6.37-5.el7.x86_64",
            "7Server-RHSCL-2.4:rh-mysql56-mysql-0:5.6.37-5.el7.src",
            "7Server-RHSCL-2.4:rh-mysql56-mysql-0:5.6.37-5.el7.x86_64",
            "7Server-RHSCL-2.4:rh-mysql56-mysql-bench-0:5.6.37-5.el7.x86_64",
            "7Server-RHSCL-2.4:rh-mysql56-mysql-common-0:5.6.37-5.el7.x86_64",
            "7Server-RHSCL-2.4:rh-mysql56-mysql-config-0:5.6.37-5.el7.x86_64",
            "7Server-RHSCL-2.4:rh-mysql56-mysql-debuginfo-0:5.6.37-5.el7.x86_64",
            "7Server-RHSCL-2.4:rh-mysql56-mysql-devel-0:5.6.37-5.el7.x86_64",
            "7Server-RHSCL-2.4:rh-mysql56-mysql-errmsg-0:5.6.37-5.el7.x86_64",
            "7Server-RHSCL-2.4:rh-mysql56-mysql-server-0:5.6.37-5.el7.x86_64",
            "7Server-RHSCL-2.4:rh-mysql56-mysql-test-0:5.6.37-5.el7.x86_64",
            "7Workstation-RHSCL-2.4:rh-mysql56-mysql-0:5.6.37-5.el7.src",
            "7Workstation-RHSCL-2.4:rh-mysql56-mysql-0:5.6.37-5.el7.x86_64",
            "7Workstation-RHSCL-2.4:rh-mysql56-mysql-bench-0:5.6.37-5.el7.x86_64",
            "7Workstation-RHSCL-2.4:rh-mysql56-mysql-common-0:5.6.37-5.el7.x86_64",
            "7Workstation-RHSCL-2.4:rh-mysql56-mysql-config-0:5.6.37-5.el7.x86_64",
            "7Workstation-RHSCL-2.4:rh-mysql56-mysql-debuginfo-0:5.6.37-5.el7.x86_64",
            "7Workstation-RHSCL-2.4:rh-mysql56-mysql-devel-0:5.6.37-5.el7.x86_64",
            "7Workstation-RHSCL-2.4:rh-mysql56-mysql-errmsg-0:5.6.37-5.el7.x86_64",
            "7Workstation-RHSCL-2.4:rh-mysql56-mysql-server-0:5.6.37-5.el7.x86_64",
            "7Workstation-RHSCL-2.4:rh-mysql56-mysql-test-0:5.6.37-5.el7.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Moderate"
        }
      ],
      "title": "mysql: Server: DML unspecified vulnerability (CPU Jan 2017)"
    },
    {
      "cve": "CVE-2017-3257",
      "discovery_date": "2017-01-18T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "1414350"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: InnoDB). Supported versions that are affected are 5.6.34 and earlier5.7.16 and earlier. Easily exploitable vulnerability allows low privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS v3.0 Base Score 6.5 (Availability impacts).",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "mysql: Server: InnoDB unspecified vulnerability (CPU Jan 2017)",
          "title": "Vulnerability summary"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "6Server-RHSCL-2.4-6.7.Z:rh-mysql56-mysql-0:5.6.37-5.el6.src",
          "6Server-RHSCL-2.4-6.7.Z:rh-mysql56-mysql-0:5.6.37-5.el6.x86_64",
          "6Server-RHSCL-2.4-6.7.Z:rh-mysql56-mysql-bench-0:5.6.37-5.el6.x86_64",
          "6Server-RHSCL-2.4-6.7.Z:rh-mysql56-mysql-common-0:5.6.37-5.el6.x86_64",
          "6Server-RHSCL-2.4-6.7.Z:rh-mysql56-mysql-config-0:5.6.37-5.el6.x86_64",
          "6Server-RHSCL-2.4-6.7.Z:rh-mysql56-mysql-debuginfo-0:5.6.37-5.el6.x86_64",
          "6Server-RHSCL-2.4-6.7.Z:rh-mysql56-mysql-devel-0:5.6.37-5.el6.x86_64",
          "6Server-RHSCL-2.4-6.7.Z:rh-mysql56-mysql-errmsg-0:5.6.37-5.el6.x86_64",
          "6Server-RHSCL-2.4-6.7.Z:rh-mysql56-mysql-server-0:5.6.37-5.el6.x86_64",
          "6Server-RHSCL-2.4-6.7.Z:rh-mysql56-mysql-test-0:5.6.37-5.el6.x86_64",
          "6Server-RHSCL-2.4:rh-mysql56-mysql-0:5.6.37-5.el6.src",
          "6Server-RHSCL-2.4:rh-mysql56-mysql-0:5.6.37-5.el6.x86_64",
          "6Server-RHSCL-2.4:rh-mysql56-mysql-bench-0:5.6.37-5.el6.x86_64",
          "6Server-RHSCL-2.4:rh-mysql56-mysql-common-0:5.6.37-5.el6.x86_64",
          "6Server-RHSCL-2.4:rh-mysql56-mysql-config-0:5.6.37-5.el6.x86_64",
          "6Server-RHSCL-2.4:rh-mysql56-mysql-debuginfo-0:5.6.37-5.el6.x86_64",
          "6Server-RHSCL-2.4:rh-mysql56-mysql-devel-0:5.6.37-5.el6.x86_64",
          "6Server-RHSCL-2.4:rh-mysql56-mysql-errmsg-0:5.6.37-5.el6.x86_64",
          "6Server-RHSCL-2.4:rh-mysql56-mysql-server-0:5.6.37-5.el6.x86_64",
          "6Server-RHSCL-2.4:rh-mysql56-mysql-test-0:5.6.37-5.el6.x86_64",
          "6Workstation-RHSCL-2.4:rh-mysql56-mysql-0:5.6.37-5.el6.src",
          "6Workstation-RHSCL-2.4:rh-mysql56-mysql-0:5.6.37-5.el6.x86_64",
          "6Workstation-RHSCL-2.4:rh-mysql56-mysql-bench-0:5.6.37-5.el6.x86_64",
          "6Workstation-RHSCL-2.4:rh-mysql56-mysql-common-0:5.6.37-5.el6.x86_64",
          "6Workstation-RHSCL-2.4:rh-mysql56-mysql-config-0:5.6.37-5.el6.x86_64",
          "6Workstation-RHSCL-2.4:rh-mysql56-mysql-debuginfo-0:5.6.37-5.el6.x86_64",
          "6Workstation-RHSCL-2.4:rh-mysql56-mysql-devel-0:5.6.37-5.el6.x86_64",
          "6Workstation-RHSCL-2.4:rh-mysql56-mysql-errmsg-0:5.6.37-5.el6.x86_64",
          "6Workstation-RHSCL-2.4:rh-mysql56-mysql-server-0:5.6.37-5.el6.x86_64",
          "6Workstation-RHSCL-2.4:rh-mysql56-mysql-test-0:5.6.37-5.el6.x86_64",
          "7Server-RHSCL-2.4-7.3.Z:rh-mysql56-mysql-0:5.6.37-5.el7.src",
          "7Server-RHSCL-2.4-7.3.Z:rh-mysql56-mysql-0:5.6.37-5.el7.x86_64",
          "7Server-RHSCL-2.4-7.3.Z:rh-mysql56-mysql-bench-0:5.6.37-5.el7.x86_64",
          "7Server-RHSCL-2.4-7.3.Z:rh-mysql56-mysql-common-0:5.6.37-5.el7.x86_64",
          "7Server-RHSCL-2.4-7.3.Z:rh-mysql56-mysql-config-0:5.6.37-5.el7.x86_64",
          "7Server-RHSCL-2.4-7.3.Z:rh-mysql56-mysql-debuginfo-0:5.6.37-5.el7.x86_64",
          "7Server-RHSCL-2.4-7.3.Z:rh-mysql56-mysql-devel-0:5.6.37-5.el7.x86_64",
          "7Server-RHSCL-2.4-7.3.Z:rh-mysql56-mysql-errmsg-0:5.6.37-5.el7.x86_64",
          "7Server-RHSCL-2.4-7.3.Z:rh-mysql56-mysql-server-0:5.6.37-5.el7.x86_64",
          "7Server-RHSCL-2.4-7.3.Z:rh-mysql56-mysql-test-0:5.6.37-5.el7.x86_64",
          "7Server-RHSCL-2.4:rh-mysql56-mysql-0:5.6.37-5.el7.src",
          "7Server-RHSCL-2.4:rh-mysql56-mysql-0:5.6.37-5.el7.x86_64",
          "7Server-RHSCL-2.4:rh-mysql56-mysql-bench-0:5.6.37-5.el7.x86_64",
          "7Server-RHSCL-2.4:rh-mysql56-mysql-common-0:5.6.37-5.el7.x86_64",
          "7Server-RHSCL-2.4:rh-mysql56-mysql-config-0:5.6.37-5.el7.x86_64",
          "7Server-RHSCL-2.4:rh-mysql56-mysql-debuginfo-0:5.6.37-5.el7.x86_64",
          "7Server-RHSCL-2.4:rh-mysql56-mysql-devel-0:5.6.37-5.el7.x86_64",
          "7Server-RHSCL-2.4:rh-mysql56-mysql-errmsg-0:5.6.37-5.el7.x86_64",
          "7Server-RHSCL-2.4:rh-mysql56-mysql-server-0:5.6.37-5.el7.x86_64",
          "7Server-RHSCL-2.4:rh-mysql56-mysql-test-0:5.6.37-5.el7.x86_64",
          "7Workstation-RHSCL-2.4:rh-mysql56-mysql-0:5.6.37-5.el7.src",
          "7Workstation-RHSCL-2.4:rh-mysql56-mysql-0:5.6.37-5.el7.x86_64",
          "7Workstation-RHSCL-2.4:rh-mysql56-mysql-bench-0:5.6.37-5.el7.x86_64",
          "7Workstation-RHSCL-2.4:rh-mysql56-mysql-common-0:5.6.37-5.el7.x86_64",
          "7Workstation-RHSCL-2.4:rh-mysql56-mysql-config-0:5.6.37-5.el7.x86_64",
          "7Workstation-RHSCL-2.4:rh-mysql56-mysql-debuginfo-0:5.6.37-5.el7.x86_64",
          "7Workstation-RHSCL-2.4:rh-mysql56-mysql-devel-0:5.6.37-5.el7.x86_64",
          "7Workstation-RHSCL-2.4:rh-mysql56-mysql-errmsg-0:5.6.37-5.el7.x86_64",
          "7Workstation-RHSCL-2.4:rh-mysql56-mysql-server-0:5.6.37-5.el7.x86_64",
          "7Workstation-RHSCL-2.4:rh-mysql56-mysql-test-0:5.6.37-5.el7.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2017-3257"
        },
        {
          "category": "external",
          "summary": "RHBZ#1414350",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1414350"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2017-3257",
          "url": "https://www.cve.org/CVERecord?id=CVE-2017-3257"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2017-3257",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2017-3257"
        },
        {
          "category": "external",
          "summary": "http://www.oracle.com/technetwork/security-advisory/cpujan2017-2881727.html#AppendixMSQL",
          "url": "http://www.oracle.com/technetwork/security-advisory/cpujan2017-2881727.html#AppendixMSQL"
        }
      ],
      "release_date": "2017-01-18T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2017-09-21T07:42:12+00:00",
          "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAfter installing this update, the MySQL server daemon (mysqld) will be restarted automatically.",
          "product_ids": [
            "6Server-RHSCL-2.4-6.7.Z:rh-mysql56-mysql-0:5.6.37-5.el6.src",
            "6Server-RHSCL-2.4-6.7.Z:rh-mysql56-mysql-0:5.6.37-5.el6.x86_64",
            "6Server-RHSCL-2.4-6.7.Z:rh-mysql56-mysql-bench-0:5.6.37-5.el6.x86_64",
            "6Server-RHSCL-2.4-6.7.Z:rh-mysql56-mysql-common-0:5.6.37-5.el6.x86_64",
            "6Server-RHSCL-2.4-6.7.Z:rh-mysql56-mysql-config-0:5.6.37-5.el6.x86_64",
            "6Server-RHSCL-2.4-6.7.Z:rh-mysql56-mysql-debuginfo-0:5.6.37-5.el6.x86_64",
            "6Server-RHSCL-2.4-6.7.Z:rh-mysql56-mysql-devel-0:5.6.37-5.el6.x86_64",
            "6Server-RHSCL-2.4-6.7.Z:rh-mysql56-mysql-errmsg-0:5.6.37-5.el6.x86_64",
            "6Server-RHSCL-2.4-6.7.Z:rh-mysql56-mysql-server-0:5.6.37-5.el6.x86_64",
            "6Server-RHSCL-2.4-6.7.Z:rh-mysql56-mysql-test-0:5.6.37-5.el6.x86_64",
            "6Server-RHSCL-2.4:rh-mysql56-mysql-0:5.6.37-5.el6.src",
            "6Server-RHSCL-2.4:rh-mysql56-mysql-0:5.6.37-5.el6.x86_64",
            "6Server-RHSCL-2.4:rh-mysql56-mysql-bench-0:5.6.37-5.el6.x86_64",
            "6Server-RHSCL-2.4:rh-mysql56-mysql-common-0:5.6.37-5.el6.x86_64",
            "6Server-RHSCL-2.4:rh-mysql56-mysql-config-0:5.6.37-5.el6.x86_64",
            "6Server-RHSCL-2.4:rh-mysql56-mysql-debuginfo-0:5.6.37-5.el6.x86_64",
            "6Server-RHSCL-2.4:rh-mysql56-mysql-devel-0:5.6.37-5.el6.x86_64",
            "6Server-RHSCL-2.4:rh-mysql56-mysql-errmsg-0:5.6.37-5.el6.x86_64",
            "6Server-RHSCL-2.4:rh-mysql56-mysql-server-0:5.6.37-5.el6.x86_64",
            "6Server-RHSCL-2.4:rh-mysql56-mysql-test-0:5.6.37-5.el6.x86_64",
            "6Workstation-RHSCL-2.4:rh-mysql56-mysql-0:5.6.37-5.el6.src",
            "6Workstation-RHSCL-2.4:rh-mysql56-mysql-0:5.6.37-5.el6.x86_64",
            "6Workstation-RHSCL-2.4:rh-mysql56-mysql-bench-0:5.6.37-5.el6.x86_64",
            "6Workstation-RHSCL-2.4:rh-mysql56-mysql-common-0:5.6.37-5.el6.x86_64",
            "6Workstation-RHSCL-2.4:rh-mysql56-mysql-config-0:5.6.37-5.el6.x86_64",
            "6Workstation-RHSCL-2.4:rh-mysql56-mysql-debuginfo-0:5.6.37-5.el6.x86_64",
            "6Workstation-RHSCL-2.4:rh-mysql56-mysql-devel-0:5.6.37-5.el6.x86_64",
            "6Workstation-RHSCL-2.4:rh-mysql56-mysql-errmsg-0:5.6.37-5.el6.x86_64",
            "6Workstation-RHSCL-2.4:rh-mysql56-mysql-server-0:5.6.37-5.el6.x86_64",
            "6Workstation-RHSCL-2.4:rh-mysql56-mysql-test-0:5.6.37-5.el6.x86_64",
            "7Server-RHSCL-2.4-7.3.Z:rh-mysql56-mysql-0:5.6.37-5.el7.src",
            "7Server-RHSCL-2.4-7.3.Z:rh-mysql56-mysql-0:5.6.37-5.el7.x86_64",
            "7Server-RHSCL-2.4-7.3.Z:rh-mysql56-mysql-bench-0:5.6.37-5.el7.x86_64",
            "7Server-RHSCL-2.4-7.3.Z:rh-mysql56-mysql-common-0:5.6.37-5.el7.x86_64",
            "7Server-RHSCL-2.4-7.3.Z:rh-mysql56-mysql-config-0:5.6.37-5.el7.x86_64",
            "7Server-RHSCL-2.4-7.3.Z:rh-mysql56-mysql-debuginfo-0:5.6.37-5.el7.x86_64",
            "7Server-RHSCL-2.4-7.3.Z:rh-mysql56-mysql-devel-0:5.6.37-5.el7.x86_64",
            "7Server-RHSCL-2.4-7.3.Z:rh-mysql56-mysql-errmsg-0:5.6.37-5.el7.x86_64",
            "7Server-RHSCL-2.4-7.3.Z:rh-mysql56-mysql-server-0:5.6.37-5.el7.x86_64",
            "7Server-RHSCL-2.4-7.3.Z:rh-mysql56-mysql-test-0:5.6.37-5.el7.x86_64",
            "7Server-RHSCL-2.4:rh-mysql56-mysql-0:5.6.37-5.el7.src",
            "7Server-RHSCL-2.4:rh-mysql56-mysql-0:5.6.37-5.el7.x86_64",
            "7Server-RHSCL-2.4:rh-mysql56-mysql-bench-0:5.6.37-5.el7.x86_64",
            "7Server-RHSCL-2.4:rh-mysql56-mysql-common-0:5.6.37-5.el7.x86_64",
            "7Server-RHSCL-2.4:rh-mysql56-mysql-config-0:5.6.37-5.el7.x86_64",
            "7Server-RHSCL-2.4:rh-mysql56-mysql-debuginfo-0:5.6.37-5.el7.x86_64",
            "7Server-RHSCL-2.4:rh-mysql56-mysql-devel-0:5.6.37-5.el7.x86_64",
            "7Server-RHSCL-2.4:rh-mysql56-mysql-errmsg-0:5.6.37-5.el7.x86_64",
            "7Server-RHSCL-2.4:rh-mysql56-mysql-server-0:5.6.37-5.el7.x86_64",
            "7Server-RHSCL-2.4:rh-mysql56-mysql-test-0:5.6.37-5.el7.x86_64",
            "7Workstation-RHSCL-2.4:rh-mysql56-mysql-0:5.6.37-5.el7.src",
            "7Workstation-RHSCL-2.4:rh-mysql56-mysql-0:5.6.37-5.el7.x86_64",
            "7Workstation-RHSCL-2.4:rh-mysql56-mysql-bench-0:5.6.37-5.el7.x86_64",
            "7Workstation-RHSCL-2.4:rh-mysql56-mysql-common-0:5.6.37-5.el7.x86_64",
            "7Workstation-RHSCL-2.4:rh-mysql56-mysql-config-0:5.6.37-5.el7.x86_64",
            "7Workstation-RHSCL-2.4:rh-mysql56-mysql-debuginfo-0:5.6.37-5.el7.x86_64",
            "7Workstation-RHSCL-2.4:rh-mysql56-mysql-devel-0:5.6.37-5.el7.x86_64",
            "7Workstation-RHSCL-2.4:rh-mysql56-mysql-errmsg-0:5.6.37-5.el7.x86_64",
            "7Workstation-RHSCL-2.4:rh-mysql56-mysql-server-0:5.6.37-5.el7.x86_64",
            "7Workstation-RHSCL-2.4:rh-mysql56-mysql-test-0:5.6.37-5.el7.x86_64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2017:2787"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 6.5,
            "baseSeverity": "MEDIUM",
            "confidentialityImpact": "NONE",
            "integrityImpact": "NONE",
            "privilegesRequired": "LOW",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.0"
          },
          "products": [
            "6Server-RHSCL-2.4-6.7.Z:rh-mysql56-mysql-0:5.6.37-5.el6.src",
            "6Server-RHSCL-2.4-6.7.Z:rh-mysql56-mysql-0:5.6.37-5.el6.x86_64",
            "6Server-RHSCL-2.4-6.7.Z:rh-mysql56-mysql-bench-0:5.6.37-5.el6.x86_64",
            "6Server-RHSCL-2.4-6.7.Z:rh-mysql56-mysql-common-0:5.6.37-5.el6.x86_64",
            "6Server-RHSCL-2.4-6.7.Z:rh-mysql56-mysql-config-0:5.6.37-5.el6.x86_64",
            "6Server-RHSCL-2.4-6.7.Z:rh-mysql56-mysql-debuginfo-0:5.6.37-5.el6.x86_64",
            "6Server-RHSCL-2.4-6.7.Z:rh-mysql56-mysql-devel-0:5.6.37-5.el6.x86_64",
            "6Server-RHSCL-2.4-6.7.Z:rh-mysql56-mysql-errmsg-0:5.6.37-5.el6.x86_64",
            "6Server-RHSCL-2.4-6.7.Z:rh-mysql56-mysql-server-0:5.6.37-5.el6.x86_64",
            "6Server-RHSCL-2.4-6.7.Z:rh-mysql56-mysql-test-0:5.6.37-5.el6.x86_64",
            "6Server-RHSCL-2.4:rh-mysql56-mysql-0:5.6.37-5.el6.src",
            "6Server-RHSCL-2.4:rh-mysql56-mysql-0:5.6.37-5.el6.x86_64",
            "6Server-RHSCL-2.4:rh-mysql56-mysql-bench-0:5.6.37-5.el6.x86_64",
            "6Server-RHSCL-2.4:rh-mysql56-mysql-common-0:5.6.37-5.el6.x86_64",
            "6Server-RHSCL-2.4:rh-mysql56-mysql-config-0:5.6.37-5.el6.x86_64",
            "6Server-RHSCL-2.4:rh-mysql56-mysql-debuginfo-0:5.6.37-5.el6.x86_64",
            "6Server-RHSCL-2.4:rh-mysql56-mysql-devel-0:5.6.37-5.el6.x86_64",
            "6Server-RHSCL-2.4:rh-mysql56-mysql-errmsg-0:5.6.37-5.el6.x86_64",
            "6Server-RHSCL-2.4:rh-mysql56-mysql-server-0:5.6.37-5.el6.x86_64",
            "6Server-RHSCL-2.4:rh-mysql56-mysql-test-0:5.6.37-5.el6.x86_64",
            "6Workstation-RHSCL-2.4:rh-mysql56-mysql-0:5.6.37-5.el6.src",
            "6Workstation-RHSCL-2.4:rh-mysql56-mysql-0:5.6.37-5.el6.x86_64",
            "6Workstation-RHSCL-2.4:rh-mysql56-mysql-bench-0:5.6.37-5.el6.x86_64",
            "6Workstation-RHSCL-2.4:rh-mysql56-mysql-common-0:5.6.37-5.el6.x86_64",
            "6Workstation-RHSCL-2.4:rh-mysql56-mysql-config-0:5.6.37-5.el6.x86_64",
            "6Workstation-RHSCL-2.4:rh-mysql56-mysql-debuginfo-0:5.6.37-5.el6.x86_64",
            "6Workstation-RHSCL-2.4:rh-mysql56-mysql-devel-0:5.6.37-5.el6.x86_64",
            "6Workstation-RHSCL-2.4:rh-mysql56-mysql-errmsg-0:5.6.37-5.el6.x86_64",
            "6Workstation-RHSCL-2.4:rh-mysql56-mysql-server-0:5.6.37-5.el6.x86_64",
            "6Workstation-RHSCL-2.4:rh-mysql56-mysql-test-0:5.6.37-5.el6.x86_64",
            "7Server-RHSCL-2.4-7.3.Z:rh-mysql56-mysql-0:5.6.37-5.el7.src",
            "7Server-RHSCL-2.4-7.3.Z:rh-mysql56-mysql-0:5.6.37-5.el7.x86_64",
            "7Server-RHSCL-2.4-7.3.Z:rh-mysql56-mysql-bench-0:5.6.37-5.el7.x86_64",
            "7Server-RHSCL-2.4-7.3.Z:rh-mysql56-mysql-common-0:5.6.37-5.el7.x86_64",
            "7Server-RHSCL-2.4-7.3.Z:rh-mysql56-mysql-config-0:5.6.37-5.el7.x86_64",
            "7Server-RHSCL-2.4-7.3.Z:rh-mysql56-mysql-debuginfo-0:5.6.37-5.el7.x86_64",
            "7Server-RHSCL-2.4-7.3.Z:rh-mysql56-mysql-devel-0:5.6.37-5.el7.x86_64",
            "7Server-RHSCL-2.4-7.3.Z:rh-mysql56-mysql-errmsg-0:5.6.37-5.el7.x86_64",
            "7Server-RHSCL-2.4-7.3.Z:rh-mysql56-mysql-server-0:5.6.37-5.el7.x86_64",
            "7Server-RHSCL-2.4-7.3.Z:rh-mysql56-mysql-test-0:5.6.37-5.el7.x86_64",
            "7Server-RHSCL-2.4:rh-mysql56-mysql-0:5.6.37-5.el7.src",
            "7Server-RHSCL-2.4:rh-mysql56-mysql-0:5.6.37-5.el7.x86_64",
            "7Server-RHSCL-2.4:rh-mysql56-mysql-bench-0:5.6.37-5.el7.x86_64",
            "7Server-RHSCL-2.4:rh-mysql56-mysql-common-0:5.6.37-5.el7.x86_64",
            "7Server-RHSCL-2.4:rh-mysql56-mysql-config-0:5.6.37-5.el7.x86_64",
            "7Server-RHSCL-2.4:rh-mysql56-mysql-debuginfo-0:5.6.37-5.el7.x86_64",
            "7Server-RHSCL-2.4:rh-mysql56-mysql-devel-0:5.6.37-5.el7.x86_64",
            "7Server-RHSCL-2.4:rh-mysql56-mysql-errmsg-0:5.6.37-5.el7.x86_64",
            "7Server-RHSCL-2.4:rh-mysql56-mysql-server-0:5.6.37-5.el7.x86_64",
            "7Server-RHSCL-2.4:rh-mysql56-mysql-test-0:5.6.37-5.el7.x86_64",
            "7Workstation-RHSCL-2.4:rh-mysql56-mysql-0:5.6.37-5.el7.src",
            "7Workstation-RHSCL-2.4:rh-mysql56-mysql-0:5.6.37-5.el7.x86_64",
            "7Workstation-RHSCL-2.4:rh-mysql56-mysql-bench-0:5.6.37-5.el7.x86_64",
            "7Workstation-RHSCL-2.4:rh-mysql56-mysql-common-0:5.6.37-5.el7.x86_64",
            "7Workstation-RHSCL-2.4:rh-mysql56-mysql-config-0:5.6.37-5.el7.x86_64",
            "7Workstation-RHSCL-2.4:rh-mysql56-mysql-debuginfo-0:5.6.37-5.el7.x86_64",
            "7Workstation-RHSCL-2.4:rh-mysql56-mysql-devel-0:5.6.37-5.el7.x86_64",
            "7Workstation-RHSCL-2.4:rh-mysql56-mysql-errmsg-0:5.6.37-5.el7.x86_64",
            "7Workstation-RHSCL-2.4:rh-mysql56-mysql-server-0:5.6.37-5.el7.x86_64",
            "7Workstation-RHSCL-2.4:rh-mysql56-mysql-test-0:5.6.37-5.el7.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Moderate"
        }
      ],
      "title": "mysql: Server: InnoDB unspecified vulnerability (CPU Jan 2017)"
    },
    {
      "cve": "CVE-2017-3258",
      "discovery_date": "2017-01-18T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "1414351"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: DDL). Supported versions that are affected are 5.5.53 and earlier, 5.6.34 and earlier and 5.7.16 and earlier. Easily exploitable vulnerability allows low privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS v3.0 Base Score 6.5 (Availability impacts).",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "mysql: Server: DDL unspecified vulnerability (CPU Jan 2017)",
          "title": "Vulnerability summary"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "6Server-RHSCL-2.4-6.7.Z:rh-mysql56-mysql-0:5.6.37-5.el6.src",
          "6Server-RHSCL-2.4-6.7.Z:rh-mysql56-mysql-0:5.6.37-5.el6.x86_64",
          "6Server-RHSCL-2.4-6.7.Z:rh-mysql56-mysql-bench-0:5.6.37-5.el6.x86_64",
          "6Server-RHSCL-2.4-6.7.Z:rh-mysql56-mysql-common-0:5.6.37-5.el6.x86_64",
          "6Server-RHSCL-2.4-6.7.Z:rh-mysql56-mysql-config-0:5.6.37-5.el6.x86_64",
          "6Server-RHSCL-2.4-6.7.Z:rh-mysql56-mysql-debuginfo-0:5.6.37-5.el6.x86_64",
          "6Server-RHSCL-2.4-6.7.Z:rh-mysql56-mysql-devel-0:5.6.37-5.el6.x86_64",
          "6Server-RHSCL-2.4-6.7.Z:rh-mysql56-mysql-errmsg-0:5.6.37-5.el6.x86_64",
          "6Server-RHSCL-2.4-6.7.Z:rh-mysql56-mysql-server-0:5.6.37-5.el6.x86_64",
          "6Server-RHSCL-2.4-6.7.Z:rh-mysql56-mysql-test-0:5.6.37-5.el6.x86_64",
          "6Server-RHSCL-2.4:rh-mysql56-mysql-0:5.6.37-5.el6.src",
          "6Server-RHSCL-2.4:rh-mysql56-mysql-0:5.6.37-5.el6.x86_64",
          "6Server-RHSCL-2.4:rh-mysql56-mysql-bench-0:5.6.37-5.el6.x86_64",
          "6Server-RHSCL-2.4:rh-mysql56-mysql-common-0:5.6.37-5.el6.x86_64",
          "6Server-RHSCL-2.4:rh-mysql56-mysql-config-0:5.6.37-5.el6.x86_64",
          "6Server-RHSCL-2.4:rh-mysql56-mysql-debuginfo-0:5.6.37-5.el6.x86_64",
          "6Server-RHSCL-2.4:rh-mysql56-mysql-devel-0:5.6.37-5.el6.x86_64",
          "6Server-RHSCL-2.4:rh-mysql56-mysql-errmsg-0:5.6.37-5.el6.x86_64",
          "6Server-RHSCL-2.4:rh-mysql56-mysql-server-0:5.6.37-5.el6.x86_64",
          "6Server-RHSCL-2.4:rh-mysql56-mysql-test-0:5.6.37-5.el6.x86_64",
          "6Workstation-RHSCL-2.4:rh-mysql56-mysql-0:5.6.37-5.el6.src",
          "6Workstation-RHSCL-2.4:rh-mysql56-mysql-0:5.6.37-5.el6.x86_64",
          "6Workstation-RHSCL-2.4:rh-mysql56-mysql-bench-0:5.6.37-5.el6.x86_64",
          "6Workstation-RHSCL-2.4:rh-mysql56-mysql-common-0:5.6.37-5.el6.x86_64",
          "6Workstation-RHSCL-2.4:rh-mysql56-mysql-config-0:5.6.37-5.el6.x86_64",
          "6Workstation-RHSCL-2.4:rh-mysql56-mysql-debuginfo-0:5.6.37-5.el6.x86_64",
          "6Workstation-RHSCL-2.4:rh-mysql56-mysql-devel-0:5.6.37-5.el6.x86_64",
          "6Workstation-RHSCL-2.4:rh-mysql56-mysql-errmsg-0:5.6.37-5.el6.x86_64",
          "6Workstation-RHSCL-2.4:rh-mysql56-mysql-server-0:5.6.37-5.el6.x86_64",
          "6Workstation-RHSCL-2.4:rh-mysql56-mysql-test-0:5.6.37-5.el6.x86_64",
          "7Server-RHSCL-2.4-7.3.Z:rh-mysql56-mysql-0:5.6.37-5.el7.src",
          "7Server-RHSCL-2.4-7.3.Z:rh-mysql56-mysql-0:5.6.37-5.el7.x86_64",
          "7Server-RHSCL-2.4-7.3.Z:rh-mysql56-mysql-bench-0:5.6.37-5.el7.x86_64",
          "7Server-RHSCL-2.4-7.3.Z:rh-mysql56-mysql-common-0:5.6.37-5.el7.x86_64",
          "7Server-RHSCL-2.4-7.3.Z:rh-mysql56-mysql-config-0:5.6.37-5.el7.x86_64",
          "7Server-RHSCL-2.4-7.3.Z:rh-mysql56-mysql-debuginfo-0:5.6.37-5.el7.x86_64",
          "7Server-RHSCL-2.4-7.3.Z:rh-mysql56-mysql-devel-0:5.6.37-5.el7.x86_64",
          "7Server-RHSCL-2.4-7.3.Z:rh-mysql56-mysql-errmsg-0:5.6.37-5.el7.x86_64",
          "7Server-RHSCL-2.4-7.3.Z:rh-mysql56-mysql-server-0:5.6.37-5.el7.x86_64",
          "7Server-RHSCL-2.4-7.3.Z:rh-mysql56-mysql-test-0:5.6.37-5.el7.x86_64",
          "7Server-RHSCL-2.4:rh-mysql56-mysql-0:5.6.37-5.el7.src",
          "7Server-RHSCL-2.4:rh-mysql56-mysql-0:5.6.37-5.el7.x86_64",
          "7Server-RHSCL-2.4:rh-mysql56-mysql-bench-0:5.6.37-5.el7.x86_64",
          "7Server-RHSCL-2.4:rh-mysql56-mysql-common-0:5.6.37-5.el7.x86_64",
          "7Server-RHSCL-2.4:rh-mysql56-mysql-config-0:5.6.37-5.el7.x86_64",
          "7Server-RHSCL-2.4:rh-mysql56-mysql-debuginfo-0:5.6.37-5.el7.x86_64",
          "7Server-RHSCL-2.4:rh-mysql56-mysql-devel-0:5.6.37-5.el7.x86_64",
          "7Server-RHSCL-2.4:rh-mysql56-mysql-errmsg-0:5.6.37-5.el7.x86_64",
          "7Server-RHSCL-2.4:rh-mysql56-mysql-server-0:5.6.37-5.el7.x86_64",
          "7Server-RHSCL-2.4:rh-mysql56-mysql-test-0:5.6.37-5.el7.x86_64",
          "7Workstation-RHSCL-2.4:rh-mysql56-mysql-0:5.6.37-5.el7.src",
          "7Workstation-RHSCL-2.4:rh-mysql56-mysql-0:5.6.37-5.el7.x86_64",
          "7Workstation-RHSCL-2.4:rh-mysql56-mysql-bench-0:5.6.37-5.el7.x86_64",
          "7Workstation-RHSCL-2.4:rh-mysql56-mysql-common-0:5.6.37-5.el7.x86_64",
          "7Workstation-RHSCL-2.4:rh-mysql56-mysql-config-0:5.6.37-5.el7.x86_64",
          "7Workstation-RHSCL-2.4:rh-mysql56-mysql-debuginfo-0:5.6.37-5.el7.x86_64",
          "7Workstation-RHSCL-2.4:rh-mysql56-mysql-devel-0:5.6.37-5.el7.x86_64",
          "7Workstation-RHSCL-2.4:rh-mysql56-mysql-errmsg-0:5.6.37-5.el7.x86_64",
          "7Workstation-RHSCL-2.4:rh-mysql56-mysql-server-0:5.6.37-5.el7.x86_64",
          "7Workstation-RHSCL-2.4:rh-mysql56-mysql-test-0:5.6.37-5.el7.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2017-3258"
        },
        {
          "category": "external",
          "summary": "RHBZ#1414351",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1414351"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2017-3258",
          "url": "https://www.cve.org/CVERecord?id=CVE-2017-3258"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2017-3258",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2017-3258"
        },
        {
          "category": "external",
          "summary": "http://www.oracle.com/technetwork/security-advisory/cpujan2017-2881727.html#AppendixMSQL",
          "url": "http://www.oracle.com/technetwork/security-advisory/cpujan2017-2881727.html#AppendixMSQL"
        }
      ],
      "release_date": "2017-01-18T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2017-09-21T07:42:12+00:00",
          "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAfter installing this update, the MySQL server daemon (mysqld) will be restarted automatically.",
          "product_ids": [
            "6Server-RHSCL-2.4-6.7.Z:rh-mysql56-mysql-0:5.6.37-5.el6.src",
            "6Server-RHSCL-2.4-6.7.Z:rh-mysql56-mysql-0:5.6.37-5.el6.x86_64",
            "6Server-RHSCL-2.4-6.7.Z:rh-mysql56-mysql-bench-0:5.6.37-5.el6.x86_64",
            "6Server-RHSCL-2.4-6.7.Z:rh-mysql56-mysql-common-0:5.6.37-5.el6.x86_64",
            "6Server-RHSCL-2.4-6.7.Z:rh-mysql56-mysql-config-0:5.6.37-5.el6.x86_64",
            "6Server-RHSCL-2.4-6.7.Z:rh-mysql56-mysql-debuginfo-0:5.6.37-5.el6.x86_64",
            "6Server-RHSCL-2.4-6.7.Z:rh-mysql56-mysql-devel-0:5.6.37-5.el6.x86_64",
            "6Server-RHSCL-2.4-6.7.Z:rh-mysql56-mysql-errmsg-0:5.6.37-5.el6.x86_64",
            "6Server-RHSCL-2.4-6.7.Z:rh-mysql56-mysql-server-0:5.6.37-5.el6.x86_64",
            "6Server-RHSCL-2.4-6.7.Z:rh-mysql56-mysql-test-0:5.6.37-5.el6.x86_64",
            "6Server-RHSCL-2.4:rh-mysql56-mysql-0:5.6.37-5.el6.src",
            "6Server-RHSCL-2.4:rh-mysql56-mysql-0:5.6.37-5.el6.x86_64",
            "6Server-RHSCL-2.4:rh-mysql56-mysql-bench-0:5.6.37-5.el6.x86_64",
            "6Server-RHSCL-2.4:rh-mysql56-mysql-common-0:5.6.37-5.el6.x86_64",
            "6Server-RHSCL-2.4:rh-mysql56-mysql-config-0:5.6.37-5.el6.x86_64",
            "6Server-RHSCL-2.4:rh-mysql56-mysql-debuginfo-0:5.6.37-5.el6.x86_64",
            "6Server-RHSCL-2.4:rh-mysql56-mysql-devel-0:5.6.37-5.el6.x86_64",
            "6Server-RHSCL-2.4:rh-mysql56-mysql-errmsg-0:5.6.37-5.el6.x86_64",
            "6Server-RHSCL-2.4:rh-mysql56-mysql-server-0:5.6.37-5.el6.x86_64",
            "6Server-RHSCL-2.4:rh-mysql56-mysql-test-0:5.6.37-5.el6.x86_64",
            "6Workstation-RHSCL-2.4:rh-mysql56-mysql-0:5.6.37-5.el6.src",
            "6Workstation-RHSCL-2.4:rh-mysql56-mysql-0:5.6.37-5.el6.x86_64",
            "6Workstation-RHSCL-2.4:rh-mysql56-mysql-bench-0:5.6.37-5.el6.x86_64",
            "6Workstation-RHSCL-2.4:rh-mysql56-mysql-common-0:5.6.37-5.el6.x86_64",
            "6Workstation-RHSCL-2.4:rh-mysql56-mysql-config-0:5.6.37-5.el6.x86_64",
            "6Workstation-RHSCL-2.4:rh-mysql56-mysql-debuginfo-0:5.6.37-5.el6.x86_64",
            "6Workstation-RHSCL-2.4:rh-mysql56-mysql-devel-0:5.6.37-5.el6.x86_64",
            "6Workstation-RHSCL-2.4:rh-mysql56-mysql-errmsg-0:5.6.37-5.el6.x86_64",
            "6Workstation-RHSCL-2.4:rh-mysql56-mysql-server-0:5.6.37-5.el6.x86_64",
            "6Workstation-RHSCL-2.4:rh-mysql56-mysql-test-0:5.6.37-5.el6.x86_64",
            "7Server-RHSCL-2.4-7.3.Z:rh-mysql56-mysql-0:5.6.37-5.el7.src",
            "7Server-RHSCL-2.4-7.3.Z:rh-mysql56-mysql-0:5.6.37-5.el7.x86_64",
            "7Server-RHSCL-2.4-7.3.Z:rh-mysql56-mysql-bench-0:5.6.37-5.el7.x86_64",
            "7Server-RHSCL-2.4-7.3.Z:rh-mysql56-mysql-common-0:5.6.37-5.el7.x86_64",
            "7Server-RHSCL-2.4-7.3.Z:rh-mysql56-mysql-config-0:5.6.37-5.el7.x86_64",
            "7Server-RHSCL-2.4-7.3.Z:rh-mysql56-mysql-debuginfo-0:5.6.37-5.el7.x86_64",
            "7Server-RHSCL-2.4-7.3.Z:rh-mysql56-mysql-devel-0:5.6.37-5.el7.x86_64",
            "7Server-RHSCL-2.4-7.3.Z:rh-mysql56-mysql-errmsg-0:5.6.37-5.el7.x86_64",
            "7Server-RHSCL-2.4-7.3.Z:rh-mysql56-mysql-server-0:5.6.37-5.el7.x86_64",
            "7Server-RHSCL-2.4-7.3.Z:rh-mysql56-mysql-test-0:5.6.37-5.el7.x86_64",
            "7Server-RHSCL-2.4:rh-mysql56-mysql-0:5.6.37-5.el7.src",
            "7Server-RHSCL-2.4:rh-mysql56-mysql-0:5.6.37-5.el7.x86_64",
            "7Server-RHSCL-2.4:rh-mysql56-mysql-bench-0:5.6.37-5.el7.x86_64",
            "7Server-RHSCL-2.4:rh-mysql56-mysql-common-0:5.6.37-5.el7.x86_64",
            "7Server-RHSCL-2.4:rh-mysql56-mysql-config-0:5.6.37-5.el7.x86_64",
            "7Server-RHSCL-2.4:rh-mysql56-mysql-debuginfo-0:5.6.37-5.el7.x86_64",
            "7Server-RHSCL-2.4:rh-mysql56-mysql-devel-0:5.6.37-5.el7.x86_64",
            "7Server-RHSCL-2.4:rh-mysql56-mysql-errmsg-0:5.6.37-5.el7.x86_64",
            "7Server-RHSCL-2.4:rh-mysql56-mysql-server-0:5.6.37-5.el7.x86_64",
            "7Server-RHSCL-2.4:rh-mysql56-mysql-test-0:5.6.37-5.el7.x86_64",
            "7Workstation-RHSCL-2.4:rh-mysql56-mysql-0:5.6.37-5.el7.src",
            "7Workstation-RHSCL-2.4:rh-mysql56-mysql-0:5.6.37-5.el7.x86_64",
            "7Workstation-RHSCL-2.4:rh-mysql56-mysql-bench-0:5.6.37-5.el7.x86_64",
            "7Workstation-RHSCL-2.4:rh-mysql56-mysql-common-0:5.6.37-5.el7.x86_64",
            "7Workstation-RHSCL-2.4:rh-mysql56-mysql-config-0:5.6.37-5.el7.x86_64",
            "7Workstation-RHSCL-2.4:rh-mysql56-mysql-debuginfo-0:5.6.37-5.el7.x86_64",
            "7Workstation-RHSCL-2.4:rh-mysql56-mysql-devel-0:5.6.37-5.el7.x86_64",
            "7Workstation-RHSCL-2.4:rh-mysql56-mysql-errmsg-0:5.6.37-5.el7.x86_64",
            "7Workstation-RHSCL-2.4:rh-mysql56-mysql-server-0:5.6.37-5.el7.x86_64",
            "7Workstation-RHSCL-2.4:rh-mysql56-mysql-test-0:5.6.37-5.el7.x86_64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2017:2787"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 6.5,
            "baseSeverity": "MEDIUM",
            "confidentialityImpact": "NONE",
            "integrityImpact": "NONE",
            "privilegesRequired": "LOW",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.0"
          },
          "products": [
            "6Server-RHSCL-2.4-6.7.Z:rh-mysql56-mysql-0:5.6.37-5.el6.src",
            "6Server-RHSCL-2.4-6.7.Z:rh-mysql56-mysql-0:5.6.37-5.el6.x86_64",
            "6Server-RHSCL-2.4-6.7.Z:rh-mysql56-mysql-bench-0:5.6.37-5.el6.x86_64",
            "6Server-RHSCL-2.4-6.7.Z:rh-mysql56-mysql-common-0:5.6.37-5.el6.x86_64",
            "6Server-RHSCL-2.4-6.7.Z:rh-mysql56-mysql-config-0:5.6.37-5.el6.x86_64",
            "6Server-RHSCL-2.4-6.7.Z:rh-mysql56-mysql-debuginfo-0:5.6.37-5.el6.x86_64",
            "6Server-RHSCL-2.4-6.7.Z:rh-mysql56-mysql-devel-0:5.6.37-5.el6.x86_64",
            "6Server-RHSCL-2.4-6.7.Z:rh-mysql56-mysql-errmsg-0:5.6.37-5.el6.x86_64",
            "6Server-RHSCL-2.4-6.7.Z:rh-mysql56-mysql-server-0:5.6.37-5.el6.x86_64",
            "6Server-RHSCL-2.4-6.7.Z:rh-mysql56-mysql-test-0:5.6.37-5.el6.x86_64",
            "6Server-RHSCL-2.4:rh-mysql56-mysql-0:5.6.37-5.el6.src",
            "6Server-RHSCL-2.4:rh-mysql56-mysql-0:5.6.37-5.el6.x86_64",
            "6Server-RHSCL-2.4:rh-mysql56-mysql-bench-0:5.6.37-5.el6.x86_64",
            "6Server-RHSCL-2.4:rh-mysql56-mysql-common-0:5.6.37-5.el6.x86_64",
            "6Server-RHSCL-2.4:rh-mysql56-mysql-config-0:5.6.37-5.el6.x86_64",
            "6Server-RHSCL-2.4:rh-mysql56-mysql-debuginfo-0:5.6.37-5.el6.x86_64",
            "6Server-RHSCL-2.4:rh-mysql56-mysql-devel-0:5.6.37-5.el6.x86_64",
            "6Server-RHSCL-2.4:rh-mysql56-mysql-errmsg-0:5.6.37-5.el6.x86_64",
            "6Server-RHSCL-2.4:rh-mysql56-mysql-server-0:5.6.37-5.el6.x86_64",
            "6Server-RHSCL-2.4:rh-mysql56-mysql-test-0:5.6.37-5.el6.x86_64",
            "6Workstation-RHSCL-2.4:rh-mysql56-mysql-0:5.6.37-5.el6.src",
            "6Workstation-RHSCL-2.4:rh-mysql56-mysql-0:5.6.37-5.el6.x86_64",
            "6Workstation-RHSCL-2.4:rh-mysql56-mysql-bench-0:5.6.37-5.el6.x86_64",
            "6Workstation-RHSCL-2.4:rh-mysql56-mysql-common-0:5.6.37-5.el6.x86_64",
            "6Workstation-RHSCL-2.4:rh-mysql56-mysql-config-0:5.6.37-5.el6.x86_64",
            "6Workstation-RHSCL-2.4:rh-mysql56-mysql-debuginfo-0:5.6.37-5.el6.x86_64",
            "6Workstation-RHSCL-2.4:rh-mysql56-mysql-devel-0:5.6.37-5.el6.x86_64",
            "6Workstation-RHSCL-2.4:rh-mysql56-mysql-errmsg-0:5.6.37-5.el6.x86_64",
            "6Workstation-RHSCL-2.4:rh-mysql56-mysql-server-0:5.6.37-5.el6.x86_64",
            "6Workstation-RHSCL-2.4:rh-mysql56-mysql-test-0:5.6.37-5.el6.x86_64",
            "7Server-RHSCL-2.4-7.3.Z:rh-mysql56-mysql-0:5.6.37-5.el7.src",
            "7Server-RHSCL-2.4-7.3.Z:rh-mysql56-mysql-0:5.6.37-5.el7.x86_64",
            "7Server-RHSCL-2.4-7.3.Z:rh-mysql56-mysql-bench-0:5.6.37-5.el7.x86_64",
            "7Server-RHSCL-2.4-7.3.Z:rh-mysql56-mysql-common-0:5.6.37-5.el7.x86_64",
            "7Server-RHSCL-2.4-7.3.Z:rh-mysql56-mysql-config-0:5.6.37-5.el7.x86_64",
            "7Server-RHSCL-2.4-7.3.Z:rh-mysql56-mysql-debuginfo-0:5.6.37-5.el7.x86_64",
            "7Server-RHSCL-2.4-7.3.Z:rh-mysql56-mysql-devel-0:5.6.37-5.el7.x86_64",
            "7Server-RHSCL-2.4-7.3.Z:rh-mysql56-mysql-errmsg-0:5.6.37-5.el7.x86_64",
            "7Server-RHSCL-2.4-7.3.Z:rh-mysql56-mysql-server-0:5.6.37-5.el7.x86_64",
            "7Server-RHSCL-2.4-7.3.Z:rh-mysql56-mysql-test-0:5.6.37-5.el7.x86_64",
            "7Server-RHSCL-2.4:rh-mysql56-mysql-0:5.6.37-5.el7.src",
            "7Server-RHSCL-2.4:rh-mysql56-mysql-0:5.6.37-5.el7.x86_64",
            "7Server-RHSCL-2.4:rh-mysql56-mysql-bench-0:5.6.37-5.el7.x86_64",
            "7Server-RHSCL-2.4:rh-mysql56-mysql-common-0:5.6.37-5.el7.x86_64",
            "7Server-RHSCL-2.4:rh-mysql56-mysql-config-0:5.6.37-5.el7.x86_64",
            "7Server-RHSCL-2.4:rh-mysql56-mysql-debuginfo-0:5.6.37-5.el7.x86_64",
            "7Server-RHSCL-2.4:rh-mysql56-mysql-devel-0:5.6.37-5.el7.x86_64",
            "7Server-RHSCL-2.4:rh-mysql56-mysql-errmsg-0:5.6.37-5.el7.x86_64",
            "7Server-RHSCL-2.4:rh-mysql56-mysql-server-0:5.6.37-5.el7.x86_64",
            "7Server-RHSCL-2.4:rh-mysql56-mysql-test-0:5.6.37-5.el7.x86_64",
            "7Workstation-RHSCL-2.4:rh-mysql56-mysql-0:5.6.37-5.el7.src",
            "7Workstation-RHSCL-2.4:rh-mysql56-mysql-0:5.6.37-5.el7.x86_64",
            "7Workstation-RHSCL-2.4:rh-mysql56-mysql-bench-0:5.6.37-5.el7.x86_64",
            "7Workstation-RHSCL-2.4:rh-mysql56-mysql-common-0:5.6.37-5.el7.x86_64",
            "7Workstation-RHSCL-2.4:rh-mysql56-mysql-config-0:5.6.37-5.el7.x86_64",
            "7Workstation-RHSCL-2.4:rh-mysql56-mysql-debuginfo-0:5.6.37-5.el7.x86_64",
            "7Workstation-RHSCL-2.4:rh-mysql56-mysql-devel-0:5.6.37-5.el7.x86_64",
            "7Workstation-RHSCL-2.4:rh-mysql56-mysql-errmsg-0:5.6.37-5.el7.x86_64",
            "7Workstation-RHSCL-2.4:rh-mysql56-mysql-server-0:5.6.37-5.el7.x86_64",
            "7Workstation-RHSCL-2.4:rh-mysql56-mysql-test-0:5.6.37-5.el7.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Moderate"
        }
      ],
      "title": "mysql: Server: DDL unspecified vulnerability (CPU Jan 2017)"
    },
    {
      "acknowledgments": [
        {
          "summary": "This issue was discovered by Red Hat."
        }
      ],
      "cve": "CVE-2017-3265",
      "cwe": {
        "id": "CWE-59",
        "name": "Improper Link Resolution Before File Access (\u0027Link Following\u0027)"
      },
      "discovery_date": "2016-11-10T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "1414423"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "Multiple flaws were found in the way the MySQL init script handled initialization of the database data directory and permission setting on the error log file. The mysql operating system user could use these flaws to escalate their privileges to root.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "mysql: unsafe chmod/chown use in init script (CPU Jan 2017)",
          "title": "Vulnerability summary"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "6Server-RHSCL-2.4-6.7.Z:rh-mysql56-mysql-0:5.6.37-5.el6.src",
          "6Server-RHSCL-2.4-6.7.Z:rh-mysql56-mysql-0:5.6.37-5.el6.x86_64",
          "6Server-RHSCL-2.4-6.7.Z:rh-mysql56-mysql-bench-0:5.6.37-5.el6.x86_64",
          "6Server-RHSCL-2.4-6.7.Z:rh-mysql56-mysql-common-0:5.6.37-5.el6.x86_64",
          "6Server-RHSCL-2.4-6.7.Z:rh-mysql56-mysql-config-0:5.6.37-5.el6.x86_64",
          "6Server-RHSCL-2.4-6.7.Z:rh-mysql56-mysql-debuginfo-0:5.6.37-5.el6.x86_64",
          "6Server-RHSCL-2.4-6.7.Z:rh-mysql56-mysql-devel-0:5.6.37-5.el6.x86_64",
          "6Server-RHSCL-2.4-6.7.Z:rh-mysql56-mysql-errmsg-0:5.6.37-5.el6.x86_64",
          "6Server-RHSCL-2.4-6.7.Z:rh-mysql56-mysql-server-0:5.6.37-5.el6.x86_64",
          "6Server-RHSCL-2.4-6.7.Z:rh-mysql56-mysql-test-0:5.6.37-5.el6.x86_64",
          "6Server-RHSCL-2.4:rh-mysql56-mysql-0:5.6.37-5.el6.src",
          "6Server-RHSCL-2.4:rh-mysql56-mysql-0:5.6.37-5.el6.x86_64",
          "6Server-RHSCL-2.4:rh-mysql56-mysql-bench-0:5.6.37-5.el6.x86_64",
          "6Server-RHSCL-2.4:rh-mysql56-mysql-common-0:5.6.37-5.el6.x86_64",
          "6Server-RHSCL-2.4:rh-mysql56-mysql-config-0:5.6.37-5.el6.x86_64",
          "6Server-RHSCL-2.4:rh-mysql56-mysql-debuginfo-0:5.6.37-5.el6.x86_64",
          "6Server-RHSCL-2.4:rh-mysql56-mysql-devel-0:5.6.37-5.el6.x86_64",
          "6Server-RHSCL-2.4:rh-mysql56-mysql-errmsg-0:5.6.37-5.el6.x86_64",
          "6Server-RHSCL-2.4:rh-mysql56-mysql-server-0:5.6.37-5.el6.x86_64",
          "6Server-RHSCL-2.4:rh-mysql56-mysql-test-0:5.6.37-5.el6.x86_64",
          "6Workstation-RHSCL-2.4:rh-mysql56-mysql-0:5.6.37-5.el6.src",
          "6Workstation-RHSCL-2.4:rh-mysql56-mysql-0:5.6.37-5.el6.x86_64",
          "6Workstation-RHSCL-2.4:rh-mysql56-mysql-bench-0:5.6.37-5.el6.x86_64",
          "6Workstation-RHSCL-2.4:rh-mysql56-mysql-common-0:5.6.37-5.el6.x86_64",
          "6Workstation-RHSCL-2.4:rh-mysql56-mysql-config-0:5.6.37-5.el6.x86_64",
          "6Workstation-RHSCL-2.4:rh-mysql56-mysql-debuginfo-0:5.6.37-5.el6.x86_64",
          "6Workstation-RHSCL-2.4:rh-mysql56-mysql-devel-0:5.6.37-5.el6.x86_64",
          "6Workstation-RHSCL-2.4:rh-mysql56-mysql-errmsg-0:5.6.37-5.el6.x86_64",
          "6Workstation-RHSCL-2.4:rh-mysql56-mysql-server-0:5.6.37-5.el6.x86_64",
          "6Workstation-RHSCL-2.4:rh-mysql56-mysql-test-0:5.6.37-5.el6.x86_64",
          "7Server-RHSCL-2.4-7.3.Z:rh-mysql56-mysql-0:5.6.37-5.el7.src",
          "7Server-RHSCL-2.4-7.3.Z:rh-mysql56-mysql-0:5.6.37-5.el7.x86_64",
          "7Server-RHSCL-2.4-7.3.Z:rh-mysql56-mysql-bench-0:5.6.37-5.el7.x86_64",
          "7Server-RHSCL-2.4-7.3.Z:rh-mysql56-mysql-common-0:5.6.37-5.el7.x86_64",
          "7Server-RHSCL-2.4-7.3.Z:rh-mysql56-mysql-config-0:5.6.37-5.el7.x86_64",
          "7Server-RHSCL-2.4-7.3.Z:rh-mysql56-mysql-debuginfo-0:5.6.37-5.el7.x86_64",
          "7Server-RHSCL-2.4-7.3.Z:rh-mysql56-mysql-devel-0:5.6.37-5.el7.x86_64",
          "7Server-RHSCL-2.4-7.3.Z:rh-mysql56-mysql-errmsg-0:5.6.37-5.el7.x86_64",
          "7Server-RHSCL-2.4-7.3.Z:rh-mysql56-mysql-server-0:5.6.37-5.el7.x86_64",
          "7Server-RHSCL-2.4-7.3.Z:rh-mysql56-mysql-test-0:5.6.37-5.el7.x86_64",
          "7Server-RHSCL-2.4:rh-mysql56-mysql-0:5.6.37-5.el7.src",
          "7Server-RHSCL-2.4:rh-mysql56-mysql-0:5.6.37-5.el7.x86_64",
          "7Server-RHSCL-2.4:rh-mysql56-mysql-bench-0:5.6.37-5.el7.x86_64",
          "7Server-RHSCL-2.4:rh-mysql56-mysql-common-0:5.6.37-5.el7.x86_64",
          "7Server-RHSCL-2.4:rh-mysql56-mysql-config-0:5.6.37-5.el7.x86_64",
          "7Server-RHSCL-2.4:rh-mysql56-mysql-debuginfo-0:5.6.37-5.el7.x86_64",
          "7Server-RHSCL-2.4:rh-mysql56-mysql-devel-0:5.6.37-5.el7.x86_64",
          "7Server-RHSCL-2.4:rh-mysql56-mysql-errmsg-0:5.6.37-5.el7.x86_64",
          "7Server-RHSCL-2.4:rh-mysql56-mysql-server-0:5.6.37-5.el7.x86_64",
          "7Server-RHSCL-2.4:rh-mysql56-mysql-test-0:5.6.37-5.el7.x86_64",
          "7Workstation-RHSCL-2.4:rh-mysql56-mysql-0:5.6.37-5.el7.src",
          "7Workstation-RHSCL-2.4:rh-mysql56-mysql-0:5.6.37-5.el7.x86_64",
          "7Workstation-RHSCL-2.4:rh-mysql56-mysql-bench-0:5.6.37-5.el7.x86_64",
          "7Workstation-RHSCL-2.4:rh-mysql56-mysql-common-0:5.6.37-5.el7.x86_64",
          "7Workstation-RHSCL-2.4:rh-mysql56-mysql-config-0:5.6.37-5.el7.x86_64",
          "7Workstation-RHSCL-2.4:rh-mysql56-mysql-debuginfo-0:5.6.37-5.el7.x86_64",
          "7Workstation-RHSCL-2.4:rh-mysql56-mysql-devel-0:5.6.37-5.el7.x86_64",
          "7Workstation-RHSCL-2.4:rh-mysql56-mysql-errmsg-0:5.6.37-5.el7.x86_64",
          "7Workstation-RHSCL-2.4:rh-mysql56-mysql-server-0:5.6.37-5.el7.x86_64",
          "7Workstation-RHSCL-2.4:rh-mysql56-mysql-test-0:5.6.37-5.el7.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2017-3265"
        },
        {
          "category": "external",
          "summary": "RHBZ#1414423",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1414423"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2017-3265",
          "url": "https://www.cve.org/CVERecord?id=CVE-2017-3265"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2017-3265",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2017-3265"
        }
      ],
      "release_date": "2017-01-17T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2017-09-21T07:42:12+00:00",
          "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAfter installing this update, the MySQL server daemon (mysqld) will be restarted automatically.",
          "product_ids": [
            "6Server-RHSCL-2.4-6.7.Z:rh-mysql56-mysql-0:5.6.37-5.el6.src",
            "6Server-RHSCL-2.4-6.7.Z:rh-mysql56-mysql-0:5.6.37-5.el6.x86_64",
            "6Server-RHSCL-2.4-6.7.Z:rh-mysql56-mysql-bench-0:5.6.37-5.el6.x86_64",
            "6Server-RHSCL-2.4-6.7.Z:rh-mysql56-mysql-common-0:5.6.37-5.el6.x86_64",
            "6Server-RHSCL-2.4-6.7.Z:rh-mysql56-mysql-config-0:5.6.37-5.el6.x86_64",
            "6Server-RHSCL-2.4-6.7.Z:rh-mysql56-mysql-debuginfo-0:5.6.37-5.el6.x86_64",
            "6Server-RHSCL-2.4-6.7.Z:rh-mysql56-mysql-devel-0:5.6.37-5.el6.x86_64",
            "6Server-RHSCL-2.4-6.7.Z:rh-mysql56-mysql-errmsg-0:5.6.37-5.el6.x86_64",
            "6Server-RHSCL-2.4-6.7.Z:rh-mysql56-mysql-server-0:5.6.37-5.el6.x86_64",
            "6Server-RHSCL-2.4-6.7.Z:rh-mysql56-mysql-test-0:5.6.37-5.el6.x86_64",
            "6Server-RHSCL-2.4:rh-mysql56-mysql-0:5.6.37-5.el6.src",
            "6Server-RHSCL-2.4:rh-mysql56-mysql-0:5.6.37-5.el6.x86_64",
            "6Server-RHSCL-2.4:rh-mysql56-mysql-bench-0:5.6.37-5.el6.x86_64",
            "6Server-RHSCL-2.4:rh-mysql56-mysql-common-0:5.6.37-5.el6.x86_64",
            "6Server-RHSCL-2.4:rh-mysql56-mysql-config-0:5.6.37-5.el6.x86_64",
            "6Server-RHSCL-2.4:rh-mysql56-mysql-debuginfo-0:5.6.37-5.el6.x86_64",
            "6Server-RHSCL-2.4:rh-mysql56-mysql-devel-0:5.6.37-5.el6.x86_64",
            "6Server-RHSCL-2.4:rh-mysql56-mysql-errmsg-0:5.6.37-5.el6.x86_64",
            "6Server-RHSCL-2.4:rh-mysql56-mysql-server-0:5.6.37-5.el6.x86_64",
            "6Server-RHSCL-2.4:rh-mysql56-mysql-test-0:5.6.37-5.el6.x86_64",
            "6Workstation-RHSCL-2.4:rh-mysql56-mysql-0:5.6.37-5.el6.src",
            "6Workstation-RHSCL-2.4:rh-mysql56-mysql-0:5.6.37-5.el6.x86_64",
            "6Workstation-RHSCL-2.4:rh-mysql56-mysql-bench-0:5.6.37-5.el6.x86_64",
            "6Workstation-RHSCL-2.4:rh-mysql56-mysql-common-0:5.6.37-5.el6.x86_64",
            "6Workstation-RHSCL-2.4:rh-mysql56-mysql-config-0:5.6.37-5.el6.x86_64",
            "6Workstation-RHSCL-2.4:rh-mysql56-mysql-debuginfo-0:5.6.37-5.el6.x86_64",
            "6Workstation-RHSCL-2.4:rh-mysql56-mysql-devel-0:5.6.37-5.el6.x86_64",
            "6Workstation-RHSCL-2.4:rh-mysql56-mysql-errmsg-0:5.6.37-5.el6.x86_64",
            "6Workstation-RHSCL-2.4:rh-mysql56-mysql-server-0:5.6.37-5.el6.x86_64",
            "6Workstation-RHSCL-2.4:rh-mysql56-mysql-test-0:5.6.37-5.el6.x86_64",
            "7Server-RHSCL-2.4-7.3.Z:rh-mysql56-mysql-0:5.6.37-5.el7.src",
            "7Server-RHSCL-2.4-7.3.Z:rh-mysql56-mysql-0:5.6.37-5.el7.x86_64",
            "7Server-RHSCL-2.4-7.3.Z:rh-mysql56-mysql-bench-0:5.6.37-5.el7.x86_64",
            "7Server-RHSCL-2.4-7.3.Z:rh-mysql56-mysql-common-0:5.6.37-5.el7.x86_64",
            "7Server-RHSCL-2.4-7.3.Z:rh-mysql56-mysql-config-0:5.6.37-5.el7.x86_64",
            "7Server-RHSCL-2.4-7.3.Z:rh-mysql56-mysql-debuginfo-0:5.6.37-5.el7.x86_64",
            "7Server-RHSCL-2.4-7.3.Z:rh-mysql56-mysql-devel-0:5.6.37-5.el7.x86_64",
            "7Server-RHSCL-2.4-7.3.Z:rh-mysql56-mysql-errmsg-0:5.6.37-5.el7.x86_64",
            "7Server-RHSCL-2.4-7.3.Z:rh-mysql56-mysql-server-0:5.6.37-5.el7.x86_64",
            "7Server-RHSCL-2.4-7.3.Z:rh-mysql56-mysql-test-0:5.6.37-5.el7.x86_64",
            "7Server-RHSCL-2.4:rh-mysql56-mysql-0:5.6.37-5.el7.src",
            "7Server-RHSCL-2.4:rh-mysql56-mysql-0:5.6.37-5.el7.x86_64",
            "7Server-RHSCL-2.4:rh-mysql56-mysql-bench-0:5.6.37-5.el7.x86_64",
            "7Server-RHSCL-2.4:rh-mysql56-mysql-common-0:5.6.37-5.el7.x86_64",
            "7Server-RHSCL-2.4:rh-mysql56-mysql-config-0:5.6.37-5.el7.x86_64",
            "7Server-RHSCL-2.4:rh-mysql56-mysql-debuginfo-0:5.6.37-5.el7.x86_64",
            "7Server-RHSCL-2.4:rh-mysql56-mysql-devel-0:5.6.37-5.el7.x86_64",
            "7Server-RHSCL-2.4:rh-mysql56-mysql-errmsg-0:5.6.37-5.el7.x86_64",
            "7Server-RHSCL-2.4:rh-mysql56-mysql-server-0:5.6.37-5.el7.x86_64",
            "7Server-RHSCL-2.4:rh-mysql56-mysql-test-0:5.6.37-5.el7.x86_64",
            "7Workstation-RHSCL-2.4:rh-mysql56-mysql-0:5.6.37-5.el7.src",
            "7Workstation-RHSCL-2.4:rh-mysql56-mysql-0:5.6.37-5.el7.x86_64",
            "7Workstation-RHSCL-2.4:rh-mysql56-mysql-bench-0:5.6.37-5.el7.x86_64",
            "7Workstation-RHSCL-2.4:rh-mysql56-mysql-common-0:5.6.37-5.el7.x86_64",
            "7Workstation-RHSCL-2.4:rh-mysql56-mysql-config-0:5.6.37-5.el7.x86_64",
            "7Workstation-RHSCL-2.4:rh-mysql56-mysql-debuginfo-0:5.6.37-5.el7.x86_64",
            "7Workstation-RHSCL-2.4:rh-mysql56-mysql-devel-0:5.6.37-5.el7.x86_64",
            "7Workstation-RHSCL-2.4:rh-mysql56-mysql-errmsg-0:5.6.37-5.el7.x86_64",
            "7Workstation-RHSCL-2.4:rh-mysql56-mysql-server-0:5.6.37-5.el7.x86_64",
            "7Workstation-RHSCL-2.4:rh-mysql56-mysql-test-0:5.6.37-5.el7.x86_64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2017:2787"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "HIGH",
            "attackVector": "LOCAL",
            "availabilityImpact": "HIGH",
            "baseScore": 5.6,
            "baseSeverity": "MEDIUM",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "NONE",
            "privilegesRequired": "HIGH",
            "scope": "UNCHANGED",
            "userInteraction": "REQUIRED",
            "vectorString": "CVSS:3.0/AV:L/AC:H/PR:H/UI:R/S:U/C:H/I:N/A:H",
            "version": "3.0"
          },
          "products": [
            "6Server-RHSCL-2.4-6.7.Z:rh-mysql56-mysql-0:5.6.37-5.el6.src",
            "6Server-RHSCL-2.4-6.7.Z:rh-mysql56-mysql-0:5.6.37-5.el6.x86_64",
            "6Server-RHSCL-2.4-6.7.Z:rh-mysql56-mysql-bench-0:5.6.37-5.el6.x86_64",
            "6Server-RHSCL-2.4-6.7.Z:rh-mysql56-mysql-common-0:5.6.37-5.el6.x86_64",
            "6Server-RHSCL-2.4-6.7.Z:rh-mysql56-mysql-config-0:5.6.37-5.el6.x86_64",
            "6Server-RHSCL-2.4-6.7.Z:rh-mysql56-mysql-debuginfo-0:5.6.37-5.el6.x86_64",
            "6Server-RHSCL-2.4-6.7.Z:rh-mysql56-mysql-devel-0:5.6.37-5.el6.x86_64",
            "6Server-RHSCL-2.4-6.7.Z:rh-mysql56-mysql-errmsg-0:5.6.37-5.el6.x86_64",
            "6Server-RHSCL-2.4-6.7.Z:rh-mysql56-mysql-server-0:5.6.37-5.el6.x86_64",
            "6Server-RHSCL-2.4-6.7.Z:rh-mysql56-mysql-test-0:5.6.37-5.el6.x86_64",
            "6Server-RHSCL-2.4:rh-mysql56-mysql-0:5.6.37-5.el6.src",
            "6Server-RHSCL-2.4:rh-mysql56-mysql-0:5.6.37-5.el6.x86_64",
            "6Server-RHSCL-2.4:rh-mysql56-mysql-bench-0:5.6.37-5.el6.x86_64",
            "6Server-RHSCL-2.4:rh-mysql56-mysql-common-0:5.6.37-5.el6.x86_64",
            "6Server-RHSCL-2.4:rh-mysql56-mysql-config-0:5.6.37-5.el6.x86_64",
            "6Server-RHSCL-2.4:rh-mysql56-mysql-debuginfo-0:5.6.37-5.el6.x86_64",
            "6Server-RHSCL-2.4:rh-mysql56-mysql-devel-0:5.6.37-5.el6.x86_64",
            "6Server-RHSCL-2.4:rh-mysql56-mysql-errmsg-0:5.6.37-5.el6.x86_64",
            "6Server-RHSCL-2.4:rh-mysql56-mysql-server-0:5.6.37-5.el6.x86_64",
            "6Server-RHSCL-2.4:rh-mysql56-mysql-test-0:5.6.37-5.el6.x86_64",
            "6Workstation-RHSCL-2.4:rh-mysql56-mysql-0:5.6.37-5.el6.src",
            "6Workstation-RHSCL-2.4:rh-mysql56-mysql-0:5.6.37-5.el6.x86_64",
            "6Workstation-RHSCL-2.4:rh-mysql56-mysql-bench-0:5.6.37-5.el6.x86_64",
            "6Workstation-RHSCL-2.4:rh-mysql56-mysql-common-0:5.6.37-5.el6.x86_64",
            "6Workstation-RHSCL-2.4:rh-mysql56-mysql-config-0:5.6.37-5.el6.x86_64",
            "6Workstation-RHSCL-2.4:rh-mysql56-mysql-debuginfo-0:5.6.37-5.el6.x86_64",
            "6Workstation-RHSCL-2.4:rh-mysql56-mysql-devel-0:5.6.37-5.el6.x86_64",
            "6Workstation-RHSCL-2.4:rh-mysql56-mysql-errmsg-0:5.6.37-5.el6.x86_64",
            "6Workstation-RHSCL-2.4:rh-mysql56-mysql-server-0:5.6.37-5.el6.x86_64",
            "6Workstation-RHSCL-2.4:rh-mysql56-mysql-test-0:5.6.37-5.el6.x86_64",
            "7Server-RHSCL-2.4-7.3.Z:rh-mysql56-mysql-0:5.6.37-5.el7.src",
            "7Server-RHSCL-2.4-7.3.Z:rh-mysql56-mysql-0:5.6.37-5.el7.x86_64",
            "7Server-RHSCL-2.4-7.3.Z:rh-mysql56-mysql-bench-0:5.6.37-5.el7.x86_64",
            "7Server-RHSCL-2.4-7.3.Z:rh-mysql56-mysql-common-0:5.6.37-5.el7.x86_64",
            "7Server-RHSCL-2.4-7.3.Z:rh-mysql56-mysql-config-0:5.6.37-5.el7.x86_64",
            "7Server-RHSCL-2.4-7.3.Z:rh-mysql56-mysql-debuginfo-0:5.6.37-5.el7.x86_64",
            "7Server-RHSCL-2.4-7.3.Z:rh-mysql56-mysql-devel-0:5.6.37-5.el7.x86_64",
            "7Server-RHSCL-2.4-7.3.Z:rh-mysql56-mysql-errmsg-0:5.6.37-5.el7.x86_64",
            "7Server-RHSCL-2.4-7.3.Z:rh-mysql56-mysql-server-0:5.6.37-5.el7.x86_64",
            "7Server-RHSCL-2.4-7.3.Z:rh-mysql56-mysql-test-0:5.6.37-5.el7.x86_64",
            "7Server-RHSCL-2.4:rh-mysql56-mysql-0:5.6.37-5.el7.src",
            "7Server-RHSCL-2.4:rh-mysql56-mysql-0:5.6.37-5.el7.x86_64",
            "7Server-RHSCL-2.4:rh-mysql56-mysql-bench-0:5.6.37-5.el7.x86_64",
            "7Server-RHSCL-2.4:rh-mysql56-mysql-common-0:5.6.37-5.el7.x86_64",
            "7Server-RHSCL-2.4:rh-mysql56-mysql-config-0:5.6.37-5.el7.x86_64",
            "7Server-RHSCL-2.4:rh-mysql56-mysql-debuginfo-0:5.6.37-5.el7.x86_64",
            "7Server-RHSCL-2.4:rh-mysql56-mysql-devel-0:5.6.37-5.el7.x86_64",
            "7Server-RHSCL-2.4:rh-mysql56-mysql-errmsg-0:5.6.37-5.el7.x86_64",
            "7Server-RHSCL-2.4:rh-mysql56-mysql-server-0:5.6.37-5.el7.x86_64",
            "7Server-RHSCL-2.4:rh-mysql56-mysql-test-0:5.6.37-5.el7.x86_64",
            "7Workstation-RHSCL-2.4:rh-mysql56-mysql-0:5.6.37-5.el7.src",
            "7Workstation-RHSCL-2.4:rh-mysql56-mysql-0:5.6.37-5.el7.x86_64",
            "7Workstation-RHSCL-2.4:rh-mysql56-mysql-bench-0:5.6.37-5.el7.x86_64",
            "7Workstation-RHSCL-2.4:rh-mysql56-mysql-common-0:5.6.37-5.el7.x86_64",
            "7Workstation-RHSCL-2.4:rh-mysql56-mysql-config-0:5.6.37-5.el7.x86_64",
            "7Workstation-RHSCL-2.4:rh-mysql56-mysql-debuginfo-0:5.6.37-5.el7.x86_64",
            "7Workstation-RHSCL-2.4:rh-mysql56-mysql-devel-0:5.6.37-5.el7.x86_64",
            "7Workstation-RHSCL-2.4:rh-mysql56-mysql-errmsg-0:5.6.37-5.el7.x86_64",
            "7Workstation-RHSCL-2.4:rh-mysql56-mysql-server-0:5.6.37-5.el7.x86_64",
            "7Workstation-RHSCL-2.4:rh-mysql56-mysql-test-0:5.6.37-5.el7.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Moderate"
        }
      ],
      "title": "mysql: unsafe chmod/chown use in init script (CPU Jan 2017)"
    },
    {
      "cve": "CVE-2017-3273",
      "discovery_date": "2017-01-18T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "1414352"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: DDL). Supported versions that are affected are 5.6.34 and earlier and 5.7.16 and earlier. Easily exploitable vulnerability allows low privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS v3.0 Base Score 6.5 (Availability impacts).",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "mysql: Server: DDL  unspecified vulnerability (CPU Jan 2017)",
          "title": "Vulnerability summary"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "6Server-RHSCL-2.4-6.7.Z:rh-mysql56-mysql-0:5.6.37-5.el6.src",
          "6Server-RHSCL-2.4-6.7.Z:rh-mysql56-mysql-0:5.6.37-5.el6.x86_64",
          "6Server-RHSCL-2.4-6.7.Z:rh-mysql56-mysql-bench-0:5.6.37-5.el6.x86_64",
          "6Server-RHSCL-2.4-6.7.Z:rh-mysql56-mysql-common-0:5.6.37-5.el6.x86_64",
          "6Server-RHSCL-2.4-6.7.Z:rh-mysql56-mysql-config-0:5.6.37-5.el6.x86_64",
          "6Server-RHSCL-2.4-6.7.Z:rh-mysql56-mysql-debuginfo-0:5.6.37-5.el6.x86_64",
          "6Server-RHSCL-2.4-6.7.Z:rh-mysql56-mysql-devel-0:5.6.37-5.el6.x86_64",
          "6Server-RHSCL-2.4-6.7.Z:rh-mysql56-mysql-errmsg-0:5.6.37-5.el6.x86_64",
          "6Server-RHSCL-2.4-6.7.Z:rh-mysql56-mysql-server-0:5.6.37-5.el6.x86_64",
          "6Server-RHSCL-2.4-6.7.Z:rh-mysql56-mysql-test-0:5.6.37-5.el6.x86_64",
          "6Server-RHSCL-2.4:rh-mysql56-mysql-0:5.6.37-5.el6.src",
          "6Server-RHSCL-2.4:rh-mysql56-mysql-0:5.6.37-5.el6.x86_64",
          "6Server-RHSCL-2.4:rh-mysql56-mysql-bench-0:5.6.37-5.el6.x86_64",
          "6Server-RHSCL-2.4:rh-mysql56-mysql-common-0:5.6.37-5.el6.x86_64",
          "6Server-RHSCL-2.4:rh-mysql56-mysql-config-0:5.6.37-5.el6.x86_64",
          "6Server-RHSCL-2.4:rh-mysql56-mysql-debuginfo-0:5.6.37-5.el6.x86_64",
          "6Server-RHSCL-2.4:rh-mysql56-mysql-devel-0:5.6.37-5.el6.x86_64",
          "6Server-RHSCL-2.4:rh-mysql56-mysql-errmsg-0:5.6.37-5.el6.x86_64",
          "6Server-RHSCL-2.4:rh-mysql56-mysql-server-0:5.6.37-5.el6.x86_64",
          "6Server-RHSCL-2.4:rh-mysql56-mysql-test-0:5.6.37-5.el6.x86_64",
          "6Workstation-RHSCL-2.4:rh-mysql56-mysql-0:5.6.37-5.el6.src",
          "6Workstation-RHSCL-2.4:rh-mysql56-mysql-0:5.6.37-5.el6.x86_64",
          "6Workstation-RHSCL-2.4:rh-mysql56-mysql-bench-0:5.6.37-5.el6.x86_64",
          "6Workstation-RHSCL-2.4:rh-mysql56-mysql-common-0:5.6.37-5.el6.x86_64",
          "6Workstation-RHSCL-2.4:rh-mysql56-mysql-config-0:5.6.37-5.el6.x86_64",
          "6Workstation-RHSCL-2.4:rh-mysql56-mysql-debuginfo-0:5.6.37-5.el6.x86_64",
          "6Workstation-RHSCL-2.4:rh-mysql56-mysql-devel-0:5.6.37-5.el6.x86_64",
          "6Workstation-RHSCL-2.4:rh-mysql56-mysql-errmsg-0:5.6.37-5.el6.x86_64",
          "6Workstation-RHSCL-2.4:rh-mysql56-mysql-server-0:5.6.37-5.el6.x86_64",
          "6Workstation-RHSCL-2.4:rh-mysql56-mysql-test-0:5.6.37-5.el6.x86_64",
          "7Server-RHSCL-2.4-7.3.Z:rh-mysql56-mysql-0:5.6.37-5.el7.src",
          "7Server-RHSCL-2.4-7.3.Z:rh-mysql56-mysql-0:5.6.37-5.el7.x86_64",
          "7Server-RHSCL-2.4-7.3.Z:rh-mysql56-mysql-bench-0:5.6.37-5.el7.x86_64",
          "7Server-RHSCL-2.4-7.3.Z:rh-mysql56-mysql-common-0:5.6.37-5.el7.x86_64",
          "7Server-RHSCL-2.4-7.3.Z:rh-mysql56-mysql-config-0:5.6.37-5.el7.x86_64",
          "7Server-RHSCL-2.4-7.3.Z:rh-mysql56-mysql-debuginfo-0:5.6.37-5.el7.x86_64",
          "7Server-RHSCL-2.4-7.3.Z:rh-mysql56-mysql-devel-0:5.6.37-5.el7.x86_64",
          "7Server-RHSCL-2.4-7.3.Z:rh-mysql56-mysql-errmsg-0:5.6.37-5.el7.x86_64",
          "7Server-RHSCL-2.4-7.3.Z:rh-mysql56-mysql-server-0:5.6.37-5.el7.x86_64",
          "7Server-RHSCL-2.4-7.3.Z:rh-mysql56-mysql-test-0:5.6.37-5.el7.x86_64",
          "7Server-RHSCL-2.4:rh-mysql56-mysql-0:5.6.37-5.el7.src",
          "7Server-RHSCL-2.4:rh-mysql56-mysql-0:5.6.37-5.el7.x86_64",
          "7Server-RHSCL-2.4:rh-mysql56-mysql-bench-0:5.6.37-5.el7.x86_64",
          "7Server-RHSCL-2.4:rh-mysql56-mysql-common-0:5.6.37-5.el7.x86_64",
          "7Server-RHSCL-2.4:rh-mysql56-mysql-config-0:5.6.37-5.el7.x86_64",
          "7Server-RHSCL-2.4:rh-mysql56-mysql-debuginfo-0:5.6.37-5.el7.x86_64",
          "7Server-RHSCL-2.4:rh-mysql56-mysql-devel-0:5.6.37-5.el7.x86_64",
          "7Server-RHSCL-2.4:rh-mysql56-mysql-errmsg-0:5.6.37-5.el7.x86_64",
          "7Server-RHSCL-2.4:rh-mysql56-mysql-server-0:5.6.37-5.el7.x86_64",
          "7Server-RHSCL-2.4:rh-mysql56-mysql-test-0:5.6.37-5.el7.x86_64",
          "7Workstation-RHSCL-2.4:rh-mysql56-mysql-0:5.6.37-5.el7.src",
          "7Workstation-RHSCL-2.4:rh-mysql56-mysql-0:5.6.37-5.el7.x86_64",
          "7Workstation-RHSCL-2.4:rh-mysql56-mysql-bench-0:5.6.37-5.el7.x86_64",
          "7Workstation-RHSCL-2.4:rh-mysql56-mysql-common-0:5.6.37-5.el7.x86_64",
          "7Workstation-RHSCL-2.4:rh-mysql56-mysql-config-0:5.6.37-5.el7.x86_64",
          "7Workstation-RHSCL-2.4:rh-mysql56-mysql-debuginfo-0:5.6.37-5.el7.x86_64",
          "7Workstation-RHSCL-2.4:rh-mysql56-mysql-devel-0:5.6.37-5.el7.x86_64",
          "7Workstation-RHSCL-2.4:rh-mysql56-mysql-errmsg-0:5.6.37-5.el7.x86_64",
          "7Workstation-RHSCL-2.4:rh-mysql56-mysql-server-0:5.6.37-5.el7.x86_64",
          "7Workstation-RHSCL-2.4:rh-mysql56-mysql-test-0:5.6.37-5.el7.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2017-3273"
        },
        {
          "category": "external",
          "summary": "RHBZ#1414352",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1414352"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2017-3273",
          "url": "https://www.cve.org/CVERecord?id=CVE-2017-3273"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2017-3273",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2017-3273"
        },
        {
          "category": "external",
          "summary": "http://www.oracle.com/technetwork/security-advisory/cpujan2017-2881727.html#AppendixMSQL",
          "url": "http://www.oracle.com/technetwork/security-advisory/cpujan2017-2881727.html#AppendixMSQL"
        }
      ],
      "release_date": "2017-01-18T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2017-09-21T07:42:12+00:00",
          "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAfter installing this update, the MySQL server daemon (mysqld) will be restarted automatically.",
          "product_ids": [
            "6Server-RHSCL-2.4-6.7.Z:rh-mysql56-mysql-0:5.6.37-5.el6.src",
            "6Server-RHSCL-2.4-6.7.Z:rh-mysql56-mysql-0:5.6.37-5.el6.x86_64",
            "6Server-RHSCL-2.4-6.7.Z:rh-mysql56-mysql-bench-0:5.6.37-5.el6.x86_64",
            "6Server-RHSCL-2.4-6.7.Z:rh-mysql56-mysql-common-0:5.6.37-5.el6.x86_64",
            "6Server-RHSCL-2.4-6.7.Z:rh-mysql56-mysql-config-0:5.6.37-5.el6.x86_64",
            "6Server-RHSCL-2.4-6.7.Z:rh-mysql56-mysql-debuginfo-0:5.6.37-5.el6.x86_64",
            "6Server-RHSCL-2.4-6.7.Z:rh-mysql56-mysql-devel-0:5.6.37-5.el6.x86_64",
            "6Server-RHSCL-2.4-6.7.Z:rh-mysql56-mysql-errmsg-0:5.6.37-5.el6.x86_64",
            "6Server-RHSCL-2.4-6.7.Z:rh-mysql56-mysql-server-0:5.6.37-5.el6.x86_64",
            "6Server-RHSCL-2.4-6.7.Z:rh-mysql56-mysql-test-0:5.6.37-5.el6.x86_64",
            "6Server-RHSCL-2.4:rh-mysql56-mysql-0:5.6.37-5.el6.src",
            "6Server-RHSCL-2.4:rh-mysql56-mysql-0:5.6.37-5.el6.x86_64",
            "6Server-RHSCL-2.4:rh-mysql56-mysql-bench-0:5.6.37-5.el6.x86_64",
            "6Server-RHSCL-2.4:rh-mysql56-mysql-common-0:5.6.37-5.el6.x86_64",
            "6Server-RHSCL-2.4:rh-mysql56-mysql-config-0:5.6.37-5.el6.x86_64",
            "6Server-RHSCL-2.4:rh-mysql56-mysql-debuginfo-0:5.6.37-5.el6.x86_64",
            "6Server-RHSCL-2.4:rh-mysql56-mysql-devel-0:5.6.37-5.el6.x86_64",
            "6Server-RHSCL-2.4:rh-mysql56-mysql-errmsg-0:5.6.37-5.el6.x86_64",
            "6Server-RHSCL-2.4:rh-mysql56-mysql-server-0:5.6.37-5.el6.x86_64",
            "6Server-RHSCL-2.4:rh-mysql56-mysql-test-0:5.6.37-5.el6.x86_64",
            "6Workstation-RHSCL-2.4:rh-mysql56-mysql-0:5.6.37-5.el6.src",
            "6Workstation-RHSCL-2.4:rh-mysql56-mysql-0:5.6.37-5.el6.x86_64",
            "6Workstation-RHSCL-2.4:rh-mysql56-mysql-bench-0:5.6.37-5.el6.x86_64",
            "6Workstation-RHSCL-2.4:rh-mysql56-mysql-common-0:5.6.37-5.el6.x86_64",
            "6Workstation-RHSCL-2.4:rh-mysql56-mysql-config-0:5.6.37-5.el6.x86_64",
            "6Workstation-RHSCL-2.4:rh-mysql56-mysql-debuginfo-0:5.6.37-5.el6.x86_64",
            "6Workstation-RHSCL-2.4:rh-mysql56-mysql-devel-0:5.6.37-5.el6.x86_64",
            "6Workstation-RHSCL-2.4:rh-mysql56-mysql-errmsg-0:5.6.37-5.el6.x86_64",
            "6Workstation-RHSCL-2.4:rh-mysql56-mysql-server-0:5.6.37-5.el6.x86_64",
            "6Workstation-RHSCL-2.4:rh-mysql56-mysql-test-0:5.6.37-5.el6.x86_64",
            "7Server-RHSCL-2.4-7.3.Z:rh-mysql56-mysql-0:5.6.37-5.el7.src",
            "7Server-RHSCL-2.4-7.3.Z:rh-mysql56-mysql-0:5.6.37-5.el7.x86_64",
            "7Server-RHSCL-2.4-7.3.Z:rh-mysql56-mysql-bench-0:5.6.37-5.el7.x86_64",
            "7Server-RHSCL-2.4-7.3.Z:rh-mysql56-mysql-common-0:5.6.37-5.el7.x86_64",
            "7Server-RHSCL-2.4-7.3.Z:rh-mysql56-mysql-config-0:5.6.37-5.el7.x86_64",
            "7Server-RHSCL-2.4-7.3.Z:rh-mysql56-mysql-debuginfo-0:5.6.37-5.el7.x86_64",
            "7Server-RHSCL-2.4-7.3.Z:rh-mysql56-mysql-devel-0:5.6.37-5.el7.x86_64",
            "7Server-RHSCL-2.4-7.3.Z:rh-mysql56-mysql-errmsg-0:5.6.37-5.el7.x86_64",
            "7Server-RHSCL-2.4-7.3.Z:rh-mysql56-mysql-server-0:5.6.37-5.el7.x86_64",
            "7Server-RHSCL-2.4-7.3.Z:rh-mysql56-mysql-test-0:5.6.37-5.el7.x86_64",
            "7Server-RHSCL-2.4:rh-mysql56-mysql-0:5.6.37-5.el7.src",
            "7Server-RHSCL-2.4:rh-mysql56-mysql-0:5.6.37-5.el7.x86_64",
            "7Server-RHSCL-2.4:rh-mysql56-mysql-bench-0:5.6.37-5.el7.x86_64",
            "7Server-RHSCL-2.4:rh-mysql56-mysql-common-0:5.6.37-5.el7.x86_64",
            "7Server-RHSCL-2.4:rh-mysql56-mysql-config-0:5.6.37-5.el7.x86_64",
            "7Server-RHSCL-2.4:rh-mysql56-mysql-debuginfo-0:5.6.37-5.el7.x86_64",
            "7Server-RHSCL-2.4:rh-mysql56-mysql-devel-0:5.6.37-5.el7.x86_64",
            "7Server-RHSCL-2.4:rh-mysql56-mysql-errmsg-0:5.6.37-5.el7.x86_64",
            "7Server-RHSCL-2.4:rh-mysql56-mysql-server-0:5.6.37-5.el7.x86_64",
            "7Server-RHSCL-2.4:rh-mysql56-mysql-test-0:5.6.37-5.el7.x86_64",
            "7Workstation-RHSCL-2.4:rh-mysql56-mysql-0:5.6.37-5.el7.src",
            "7Workstation-RHSCL-2.4:rh-mysql56-mysql-0:5.6.37-5.el7.x86_64",
            "7Workstation-RHSCL-2.4:rh-mysql56-mysql-bench-0:5.6.37-5.el7.x86_64",
            "7Workstation-RHSCL-2.4:rh-mysql56-mysql-common-0:5.6.37-5.el7.x86_64",
            "7Workstation-RHSCL-2.4:rh-mysql56-mysql-config-0:5.6.37-5.el7.x86_64",
            "7Workstation-RHSCL-2.4:rh-mysql56-mysql-debuginfo-0:5.6.37-5.el7.x86_64",
            "7Workstation-RHSCL-2.4:rh-mysql56-mysql-devel-0:5.6.37-5.el7.x86_64",
            "7Workstation-RHSCL-2.4:rh-mysql56-mysql-errmsg-0:5.6.37-5.el7.x86_64",
            "7Workstation-RHSCL-2.4:rh-mysql56-mysql-server-0:5.6.37-5.el7.x86_64",
            "7Workstation-RHSCL-2.4:rh-mysql56-mysql-test-0:5.6.37-5.el7.x86_64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2017:2787"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 6.5,
            "baseSeverity": "MEDIUM",
            "confidentialityImpact": "NONE",
            "integrityImpact": "NONE",
            "privilegesRequired": "LOW",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.0"
          },
          "products": [
            "6Server-RHSCL-2.4-6.7.Z:rh-mysql56-mysql-0:5.6.37-5.el6.src",
            "6Server-RHSCL-2.4-6.7.Z:rh-mysql56-mysql-0:5.6.37-5.el6.x86_64",
            "6Server-RHSCL-2.4-6.7.Z:rh-mysql56-mysql-bench-0:5.6.37-5.el6.x86_64",
            "6Server-RHSCL-2.4-6.7.Z:rh-mysql56-mysql-common-0:5.6.37-5.el6.x86_64",
            "6Server-RHSCL-2.4-6.7.Z:rh-mysql56-mysql-config-0:5.6.37-5.el6.x86_64",
            "6Server-RHSCL-2.4-6.7.Z:rh-mysql56-mysql-debuginfo-0:5.6.37-5.el6.x86_64",
            "6Server-RHSCL-2.4-6.7.Z:rh-mysql56-mysql-devel-0:5.6.37-5.el6.x86_64",
            "6Server-RHSCL-2.4-6.7.Z:rh-mysql56-mysql-errmsg-0:5.6.37-5.el6.x86_64",
            "6Server-RHSCL-2.4-6.7.Z:rh-mysql56-mysql-server-0:5.6.37-5.el6.x86_64",
            "6Server-RHSCL-2.4-6.7.Z:rh-mysql56-mysql-test-0:5.6.37-5.el6.x86_64",
            "6Server-RHSCL-2.4:rh-mysql56-mysql-0:5.6.37-5.el6.src",
            "6Server-RHSCL-2.4:rh-mysql56-mysql-0:5.6.37-5.el6.x86_64",
            "6Server-RHSCL-2.4:rh-mysql56-mysql-bench-0:5.6.37-5.el6.x86_64",
            "6Server-RHSCL-2.4:rh-mysql56-mysql-common-0:5.6.37-5.el6.x86_64",
            "6Server-RHSCL-2.4:rh-mysql56-mysql-config-0:5.6.37-5.el6.x86_64",
            "6Server-RHSCL-2.4:rh-mysql56-mysql-debuginfo-0:5.6.37-5.el6.x86_64",
            "6Server-RHSCL-2.4:rh-mysql56-mysql-devel-0:5.6.37-5.el6.x86_64",
            "6Server-RHSCL-2.4:rh-mysql56-mysql-errmsg-0:5.6.37-5.el6.x86_64",
            "6Server-RHSCL-2.4:rh-mysql56-mysql-server-0:5.6.37-5.el6.x86_64",
            "6Server-RHSCL-2.4:rh-mysql56-mysql-test-0:5.6.37-5.el6.x86_64",
            "6Workstation-RHSCL-2.4:rh-mysql56-mysql-0:5.6.37-5.el6.src",
            "6Workstation-RHSCL-2.4:rh-mysql56-mysql-0:5.6.37-5.el6.x86_64",
            "6Workstation-RHSCL-2.4:rh-mysql56-mysql-bench-0:5.6.37-5.el6.x86_64",
            "6Workstation-RHSCL-2.4:rh-mysql56-mysql-common-0:5.6.37-5.el6.x86_64",
            "6Workstation-RHSCL-2.4:rh-mysql56-mysql-config-0:5.6.37-5.el6.x86_64",
            "6Workstation-RHSCL-2.4:rh-mysql56-mysql-debuginfo-0:5.6.37-5.el6.x86_64",
            "6Workstation-RHSCL-2.4:rh-mysql56-mysql-devel-0:5.6.37-5.el6.x86_64",
            "6Workstation-RHSCL-2.4:rh-mysql56-mysql-errmsg-0:5.6.37-5.el6.x86_64",
            "6Workstation-RHSCL-2.4:rh-mysql56-mysql-server-0:5.6.37-5.el6.x86_64",
            "6Workstation-RHSCL-2.4:rh-mysql56-mysql-test-0:5.6.37-5.el6.x86_64",
            "7Server-RHSCL-2.4-7.3.Z:rh-mysql56-mysql-0:5.6.37-5.el7.src",
            "7Server-RHSCL-2.4-7.3.Z:rh-mysql56-mysql-0:5.6.37-5.el7.x86_64",
            "7Server-RHSCL-2.4-7.3.Z:rh-mysql56-mysql-bench-0:5.6.37-5.el7.x86_64",
            "7Server-RHSCL-2.4-7.3.Z:rh-mysql56-mysql-common-0:5.6.37-5.el7.x86_64",
            "7Server-RHSCL-2.4-7.3.Z:rh-mysql56-mysql-config-0:5.6.37-5.el7.x86_64",
            "7Server-RHSCL-2.4-7.3.Z:rh-mysql56-mysql-debuginfo-0:5.6.37-5.el7.x86_64",
            "7Server-RHSCL-2.4-7.3.Z:rh-mysql56-mysql-devel-0:5.6.37-5.el7.x86_64",
            "7Server-RHSCL-2.4-7.3.Z:rh-mysql56-mysql-errmsg-0:5.6.37-5.el7.x86_64",
            "7Server-RHSCL-2.4-7.3.Z:rh-mysql56-mysql-server-0:5.6.37-5.el7.x86_64",
            "7Server-RHSCL-2.4-7.3.Z:rh-mysql56-mysql-test-0:5.6.37-5.el7.x86_64",
            "7Server-RHSCL-2.4:rh-mysql56-mysql-0:5.6.37-5.el7.src",
            "7Server-RHSCL-2.4:rh-mysql56-mysql-0:5.6.37-5.el7.x86_64",
            "7Server-RHSCL-2.4:rh-mysql56-mysql-bench-0:5.6.37-5.el7.x86_64",
            "7Server-RHSCL-2.4:rh-mysql56-mysql-common-0:5.6.37-5.el7.x86_64",
            "7Server-RHSCL-2.4:rh-mysql56-mysql-config-0:5.6.37-5.el7.x86_64",
            "7Server-RHSCL-2.4:rh-mysql56-mysql-debuginfo-0:5.6.37-5.el7.x86_64",
            "7Server-RHSCL-2.4:rh-mysql56-mysql-devel-0:5.6.37-5.el7.x86_64",
            "7Server-RHSCL-2.4:rh-mysql56-mysql-errmsg-0:5.6.37-5.el7.x86_64",
            "7Server-RHSCL-2.4:rh-mysql56-mysql-server-0:5.6.37-5.el7.x86_64",
            "7Server-RHSCL-2.4:rh-mysql56-mysql-test-0:5.6.37-5.el7.x86_64",
            "7Workstation-RHSCL-2.4:rh-mysql56-mysql-0:5.6.37-5.el7.src",
            "7Workstation-RHSCL-2.4:rh-mysql56-mysql-0:5.6.37-5.el7.x86_64",
            "7Workstation-RHSCL-2.4:rh-mysql56-mysql-bench-0:5.6.37-5.el7.x86_64",
            "7Workstation-RHSCL-2.4:rh-mysql56-mysql-common-0:5.6.37-5.el7.x86_64",
            "7Workstation-RHSCL-2.4:rh-mysql56-mysql-config-0:5.6.37-5.el7.x86_64",
            "7Workstation-RHSCL-2.4:rh-mysql56-mysql-debuginfo-0:5.6.37-5.el7.x86_64",
            "7Workstation-RHSCL-2.4:rh-mysql56-mysql-devel-0:5.6.37-5.el7.x86_64",
            "7Workstation-RHSCL-2.4:rh-mysql56-mysql-errmsg-0:5.6.37-5.el7.x86_64",
            "7Workstation-RHSCL-2.4:rh-mysql56-mysql-server-0:5.6.37-5.el7.x86_64",
            "7Workstation-RHSCL-2.4:rh-mysql56-mysql-test-0:5.6.37-5.el7.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Moderate"
        }
      ],
      "title": "mysql: Server: DDL  unspecified vulnerability (CPU Jan 2017)"
    },
    {
      "acknowledgments": [
        {
          "summary": "This issue was discovered by Red Hat."
        }
      ],
      "cve": "CVE-2017-3291",
      "cwe": {
        "id": "CWE-426",
        "name": "Untrusted Search Path"
      },
      "discovery_date": "2016-11-10T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "1414429"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "It was discovered that the mysqld_safe script honored the ledir option value set in a MySQL configuration file. A user able to modify one of the MySQL configuration files could use this flaw to escalate their privileges to root.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "mysql: unrestricted mysqld_safe\u0027s ledir (CPU Jan 2017)",
          "title": "Vulnerability summary"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "6Server-RHSCL-2.4-6.7.Z:rh-mysql56-mysql-0:5.6.37-5.el6.src",
          "6Server-RHSCL-2.4-6.7.Z:rh-mysql56-mysql-0:5.6.37-5.el6.x86_64",
          "6Server-RHSCL-2.4-6.7.Z:rh-mysql56-mysql-bench-0:5.6.37-5.el6.x86_64",
          "6Server-RHSCL-2.4-6.7.Z:rh-mysql56-mysql-common-0:5.6.37-5.el6.x86_64",
          "6Server-RHSCL-2.4-6.7.Z:rh-mysql56-mysql-config-0:5.6.37-5.el6.x86_64",
          "6Server-RHSCL-2.4-6.7.Z:rh-mysql56-mysql-debuginfo-0:5.6.37-5.el6.x86_64",
          "6Server-RHSCL-2.4-6.7.Z:rh-mysql56-mysql-devel-0:5.6.37-5.el6.x86_64",
          "6Server-RHSCL-2.4-6.7.Z:rh-mysql56-mysql-errmsg-0:5.6.37-5.el6.x86_64",
          "6Server-RHSCL-2.4-6.7.Z:rh-mysql56-mysql-server-0:5.6.37-5.el6.x86_64",
          "6Server-RHSCL-2.4-6.7.Z:rh-mysql56-mysql-test-0:5.6.37-5.el6.x86_64",
          "6Server-RHSCL-2.4:rh-mysql56-mysql-0:5.6.37-5.el6.src",
          "6Server-RHSCL-2.4:rh-mysql56-mysql-0:5.6.37-5.el6.x86_64",
          "6Server-RHSCL-2.4:rh-mysql56-mysql-bench-0:5.6.37-5.el6.x86_64",
          "6Server-RHSCL-2.4:rh-mysql56-mysql-common-0:5.6.37-5.el6.x86_64",
          "6Server-RHSCL-2.4:rh-mysql56-mysql-config-0:5.6.37-5.el6.x86_64",
          "6Server-RHSCL-2.4:rh-mysql56-mysql-debuginfo-0:5.6.37-5.el6.x86_64",
          "6Server-RHSCL-2.4:rh-mysql56-mysql-devel-0:5.6.37-5.el6.x86_64",
          "6Server-RHSCL-2.4:rh-mysql56-mysql-errmsg-0:5.6.37-5.el6.x86_64",
          "6Server-RHSCL-2.4:rh-mysql56-mysql-server-0:5.6.37-5.el6.x86_64",
          "6Server-RHSCL-2.4:rh-mysql56-mysql-test-0:5.6.37-5.el6.x86_64",
          "6Workstation-RHSCL-2.4:rh-mysql56-mysql-0:5.6.37-5.el6.src",
          "6Workstation-RHSCL-2.4:rh-mysql56-mysql-0:5.6.37-5.el6.x86_64",
          "6Workstation-RHSCL-2.4:rh-mysql56-mysql-bench-0:5.6.37-5.el6.x86_64",
          "6Workstation-RHSCL-2.4:rh-mysql56-mysql-common-0:5.6.37-5.el6.x86_64",
          "6Workstation-RHSCL-2.4:rh-mysql56-mysql-config-0:5.6.37-5.el6.x86_64",
          "6Workstation-RHSCL-2.4:rh-mysql56-mysql-debuginfo-0:5.6.37-5.el6.x86_64",
          "6Workstation-RHSCL-2.4:rh-mysql56-mysql-devel-0:5.6.37-5.el6.x86_64",
          "6Workstation-RHSCL-2.4:rh-mysql56-mysql-errmsg-0:5.6.37-5.el6.x86_64",
          "6Workstation-RHSCL-2.4:rh-mysql56-mysql-server-0:5.6.37-5.el6.x86_64",
          "6Workstation-RHSCL-2.4:rh-mysql56-mysql-test-0:5.6.37-5.el6.x86_64",
          "7Server-RHSCL-2.4-7.3.Z:rh-mysql56-mysql-0:5.6.37-5.el7.src",
          "7Server-RHSCL-2.4-7.3.Z:rh-mysql56-mysql-0:5.6.37-5.el7.x86_64",
          "7Server-RHSCL-2.4-7.3.Z:rh-mysql56-mysql-bench-0:5.6.37-5.el7.x86_64",
          "7Server-RHSCL-2.4-7.3.Z:rh-mysql56-mysql-common-0:5.6.37-5.el7.x86_64",
          "7Server-RHSCL-2.4-7.3.Z:rh-mysql56-mysql-config-0:5.6.37-5.el7.x86_64",
          "7Server-RHSCL-2.4-7.3.Z:rh-mysql56-mysql-debuginfo-0:5.6.37-5.el7.x86_64",
          "7Server-RHSCL-2.4-7.3.Z:rh-mysql56-mysql-devel-0:5.6.37-5.el7.x86_64",
          "7Server-RHSCL-2.4-7.3.Z:rh-mysql56-mysql-errmsg-0:5.6.37-5.el7.x86_64",
          "7Server-RHSCL-2.4-7.3.Z:rh-mysql56-mysql-server-0:5.6.37-5.el7.x86_64",
          "7Server-RHSCL-2.4-7.3.Z:rh-mysql56-mysql-test-0:5.6.37-5.el7.x86_64",
          "7Server-RHSCL-2.4:rh-mysql56-mysql-0:5.6.37-5.el7.src",
          "7Server-RHSCL-2.4:rh-mysql56-mysql-0:5.6.37-5.el7.x86_64",
          "7Server-RHSCL-2.4:rh-mysql56-mysql-bench-0:5.6.37-5.el7.x86_64",
          "7Server-RHSCL-2.4:rh-mysql56-mysql-common-0:5.6.37-5.el7.x86_64",
          "7Server-RHSCL-2.4:rh-mysql56-mysql-config-0:5.6.37-5.el7.x86_64",
          "7Server-RHSCL-2.4:rh-mysql56-mysql-debuginfo-0:5.6.37-5.el7.x86_64",
          "7Server-RHSCL-2.4:rh-mysql56-mysql-devel-0:5.6.37-5.el7.x86_64",
          "7Server-RHSCL-2.4:rh-mysql56-mysql-errmsg-0:5.6.37-5.el7.x86_64",
          "7Server-RHSCL-2.4:rh-mysql56-mysql-server-0:5.6.37-5.el7.x86_64",
          "7Server-RHSCL-2.4:rh-mysql56-mysql-test-0:5.6.37-5.el7.x86_64",
          "7Workstation-RHSCL-2.4:rh-mysql56-mysql-0:5.6.37-5.el7.src",
          "7Workstation-RHSCL-2.4:rh-mysql56-mysql-0:5.6.37-5.el7.x86_64",
          "7Workstation-RHSCL-2.4:rh-mysql56-mysql-bench-0:5.6.37-5.el7.x86_64",
          "7Workstation-RHSCL-2.4:rh-mysql56-mysql-common-0:5.6.37-5.el7.x86_64",
          "7Workstation-RHSCL-2.4:rh-mysql56-mysql-config-0:5.6.37-5.el7.x86_64",
          "7Workstation-RHSCL-2.4:rh-mysql56-mysql-debuginfo-0:5.6.37-5.el7.x86_64",
          "7Workstation-RHSCL-2.4:rh-mysql56-mysql-devel-0:5.6.37-5.el7.x86_64",
          "7Workstation-RHSCL-2.4:rh-mysql56-mysql-errmsg-0:5.6.37-5.el7.x86_64",
          "7Workstation-RHSCL-2.4:rh-mysql56-mysql-server-0:5.6.37-5.el7.x86_64",
          "7Workstation-RHSCL-2.4:rh-mysql56-mysql-test-0:5.6.37-5.el7.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2017-3291"
        },
        {
          "category": "external",
          "summary": "RHBZ#1414429",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1414429"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2017-3291",
          "url": "https://www.cve.org/CVERecord?id=CVE-2017-3291"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2017-3291",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2017-3291"
        }
      ],
      "release_date": "2017-01-17T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2017-09-21T07:42:12+00:00",
          "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAfter installing this update, the MySQL server daemon (mysqld) will be restarted automatically.",
          "product_ids": [
            "6Server-RHSCL-2.4-6.7.Z:rh-mysql56-mysql-0:5.6.37-5.el6.src",
            "6Server-RHSCL-2.4-6.7.Z:rh-mysql56-mysql-0:5.6.37-5.el6.x86_64",
            "6Server-RHSCL-2.4-6.7.Z:rh-mysql56-mysql-bench-0:5.6.37-5.el6.x86_64",
            "6Server-RHSCL-2.4-6.7.Z:rh-mysql56-mysql-common-0:5.6.37-5.el6.x86_64",
            "6Server-RHSCL-2.4-6.7.Z:rh-mysql56-mysql-config-0:5.6.37-5.el6.x86_64",
            "6Server-RHSCL-2.4-6.7.Z:rh-mysql56-mysql-debuginfo-0:5.6.37-5.el6.x86_64",
            "6Server-RHSCL-2.4-6.7.Z:rh-mysql56-mysql-devel-0:5.6.37-5.el6.x86_64",
            "6Server-RHSCL-2.4-6.7.Z:rh-mysql56-mysql-errmsg-0:5.6.37-5.el6.x86_64",
            "6Server-RHSCL-2.4-6.7.Z:rh-mysql56-mysql-server-0:5.6.37-5.el6.x86_64",
            "6Server-RHSCL-2.4-6.7.Z:rh-mysql56-mysql-test-0:5.6.37-5.el6.x86_64",
            "6Server-RHSCL-2.4:rh-mysql56-mysql-0:5.6.37-5.el6.src",
            "6Server-RHSCL-2.4:rh-mysql56-mysql-0:5.6.37-5.el6.x86_64",
            "6Server-RHSCL-2.4:rh-mysql56-mysql-bench-0:5.6.37-5.el6.x86_64",
            "6Server-RHSCL-2.4:rh-mysql56-mysql-common-0:5.6.37-5.el6.x86_64",
            "6Server-RHSCL-2.4:rh-mysql56-mysql-config-0:5.6.37-5.el6.x86_64",
            "6Server-RHSCL-2.4:rh-mysql56-mysql-debuginfo-0:5.6.37-5.el6.x86_64",
            "6Server-RHSCL-2.4:rh-mysql56-mysql-devel-0:5.6.37-5.el6.x86_64",
            "6Server-RHSCL-2.4:rh-mysql56-mysql-errmsg-0:5.6.37-5.el6.x86_64",
            "6Server-RHSCL-2.4:rh-mysql56-mysql-server-0:5.6.37-5.el6.x86_64",
            "6Server-RHSCL-2.4:rh-mysql56-mysql-test-0:5.6.37-5.el6.x86_64",
            "6Workstation-RHSCL-2.4:rh-mysql56-mysql-0:5.6.37-5.el6.src",
            "6Workstation-RHSCL-2.4:rh-mysql56-mysql-0:5.6.37-5.el6.x86_64",
            "6Workstation-RHSCL-2.4:rh-mysql56-mysql-bench-0:5.6.37-5.el6.x86_64",
            "6Workstation-RHSCL-2.4:rh-mysql56-mysql-common-0:5.6.37-5.el6.x86_64",
            "6Workstation-RHSCL-2.4:rh-mysql56-mysql-config-0:5.6.37-5.el6.x86_64",
            "6Workstation-RHSCL-2.4:rh-mysql56-mysql-debuginfo-0:5.6.37-5.el6.x86_64",
            "6Workstation-RHSCL-2.4:rh-mysql56-mysql-devel-0:5.6.37-5.el6.x86_64",
            "6Workstation-RHSCL-2.4:rh-mysql56-mysql-errmsg-0:5.6.37-5.el6.x86_64",
            "6Workstation-RHSCL-2.4:rh-mysql56-mysql-server-0:5.6.37-5.el6.x86_64",
            "6Workstation-RHSCL-2.4:rh-mysql56-mysql-test-0:5.6.37-5.el6.x86_64",
            "7Server-RHSCL-2.4-7.3.Z:rh-mysql56-mysql-0:5.6.37-5.el7.src",
            "7Server-RHSCL-2.4-7.3.Z:rh-mysql56-mysql-0:5.6.37-5.el7.x86_64",
            "7Server-RHSCL-2.4-7.3.Z:rh-mysql56-mysql-bench-0:5.6.37-5.el7.x86_64",
            "7Server-RHSCL-2.4-7.3.Z:rh-mysql56-mysql-common-0:5.6.37-5.el7.x86_64",
            "7Server-RHSCL-2.4-7.3.Z:rh-mysql56-mysql-config-0:5.6.37-5.el7.x86_64",
            "7Server-RHSCL-2.4-7.3.Z:rh-mysql56-mysql-debuginfo-0:5.6.37-5.el7.x86_64",
            "7Server-RHSCL-2.4-7.3.Z:rh-mysql56-mysql-devel-0:5.6.37-5.el7.x86_64",
            "7Server-RHSCL-2.4-7.3.Z:rh-mysql56-mysql-errmsg-0:5.6.37-5.el7.x86_64",
            "7Server-RHSCL-2.4-7.3.Z:rh-mysql56-mysql-server-0:5.6.37-5.el7.x86_64",
            "7Server-RHSCL-2.4-7.3.Z:rh-mysql56-mysql-test-0:5.6.37-5.el7.x86_64",
            "7Server-RHSCL-2.4:rh-mysql56-mysql-0:5.6.37-5.el7.src",
            "7Server-RHSCL-2.4:rh-mysql56-mysql-0:5.6.37-5.el7.x86_64",
            "7Server-RHSCL-2.4:rh-mysql56-mysql-bench-0:5.6.37-5.el7.x86_64",
            "7Server-RHSCL-2.4:rh-mysql56-mysql-common-0:5.6.37-5.el7.x86_64",
            "7Server-RHSCL-2.4:rh-mysql56-mysql-config-0:5.6.37-5.el7.x86_64",
            "7Server-RHSCL-2.4:rh-mysql56-mysql-debuginfo-0:5.6.37-5.el7.x86_64",
            "7Server-RHSCL-2.4:rh-mysql56-mysql-devel-0:5.6.37-5.el7.x86_64",
            "7Server-RHSCL-2.4:rh-mysql56-mysql-errmsg-0:5.6.37-5.el7.x86_64",
            "7Server-RHSCL-2.4:rh-mysql56-mysql-server-0:5.6.37-5.el7.x86_64",
            "7Server-RHSCL-2.4:rh-mysql56-mysql-test-0:5.6.37-5.el7.x86_64",
            "7Workstation-RHSCL-2.4:rh-mysql56-mysql-0:5.6.37-5.el7.src",
            "7Workstation-RHSCL-2.4:rh-mysql56-mysql-0:5.6.37-5.el7.x86_64",
            "7Workstation-RHSCL-2.4:rh-mysql56-mysql-bench-0:5.6.37-5.el7.x86_64",
            "7Workstation-RHSCL-2.4:rh-mysql56-mysql-common-0:5.6.37-5.el7.x86_64",
            "7Workstation-RHSCL-2.4:rh-mysql56-mysql-config-0:5.6.37-5.el7.x86_64",
            "7Workstation-RHSCL-2.4:rh-mysql56-mysql-debuginfo-0:5.6.37-5.el7.x86_64",
            "7Workstation-RHSCL-2.4:rh-mysql56-mysql-devel-0:5.6.37-5.el7.x86_64",
            "7Workstation-RHSCL-2.4:rh-mysql56-mysql-errmsg-0:5.6.37-5.el7.x86_64",
            "7Workstation-RHSCL-2.4:rh-mysql56-mysql-server-0:5.6.37-5.el7.x86_64",
            "7Workstation-RHSCL-2.4:rh-mysql56-mysql-test-0:5.6.37-5.el7.x86_64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2017:2787"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "HIGH",
            "attackVector": "LOCAL",
            "availabilityImpact": "HIGH",
            "baseScore": 6.3,
            "baseSeverity": "MEDIUM",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "HIGH",
            "privilegesRequired": "HIGH",
            "scope": "UNCHANGED",
            "userInteraction": "REQUIRED",
            "vectorString": "CVSS:3.0/AV:L/AC:H/PR:H/UI:R/S:U/C:H/I:H/A:H",
            "version": "3.0"
          },
          "products": [
            "6Server-RHSCL-2.4-6.7.Z:rh-mysql56-mysql-0:5.6.37-5.el6.src",
            "6Server-RHSCL-2.4-6.7.Z:rh-mysql56-mysql-0:5.6.37-5.el6.x86_64",
            "6Server-RHSCL-2.4-6.7.Z:rh-mysql56-mysql-bench-0:5.6.37-5.el6.x86_64",
            "6Server-RHSCL-2.4-6.7.Z:rh-mysql56-mysql-common-0:5.6.37-5.el6.x86_64",
            "6Server-RHSCL-2.4-6.7.Z:rh-mysql56-mysql-config-0:5.6.37-5.el6.x86_64",
            "6Server-RHSCL-2.4-6.7.Z:rh-mysql56-mysql-debuginfo-0:5.6.37-5.el6.x86_64",
            "6Server-RHSCL-2.4-6.7.Z:rh-mysql56-mysql-devel-0:5.6.37-5.el6.x86_64",
            "6Server-RHSCL-2.4-6.7.Z:rh-mysql56-mysql-errmsg-0:5.6.37-5.el6.x86_64",
            "6Server-RHSCL-2.4-6.7.Z:rh-mysql56-mysql-server-0:5.6.37-5.el6.x86_64",
            "6Server-RHSCL-2.4-6.7.Z:rh-mysql56-mysql-test-0:5.6.37-5.el6.x86_64",
            "6Server-RHSCL-2.4:rh-mysql56-mysql-0:5.6.37-5.el6.src",
            "6Server-RHSCL-2.4:rh-mysql56-mysql-0:5.6.37-5.el6.x86_64",
            "6Server-RHSCL-2.4:rh-mysql56-mysql-bench-0:5.6.37-5.el6.x86_64",
            "6Server-RHSCL-2.4:rh-mysql56-mysql-common-0:5.6.37-5.el6.x86_64",
            "6Server-RHSCL-2.4:rh-mysql56-mysql-config-0:5.6.37-5.el6.x86_64",
            "6Server-RHSCL-2.4:rh-mysql56-mysql-debuginfo-0:5.6.37-5.el6.x86_64",
            "6Server-RHSCL-2.4:rh-mysql56-mysql-devel-0:5.6.37-5.el6.x86_64",
            "6Server-RHSCL-2.4:rh-mysql56-mysql-errmsg-0:5.6.37-5.el6.x86_64",
            "6Server-RHSCL-2.4:rh-mysql56-mysql-server-0:5.6.37-5.el6.x86_64",
            "6Server-RHSCL-2.4:rh-mysql56-mysql-test-0:5.6.37-5.el6.x86_64",
            "6Workstation-RHSCL-2.4:rh-mysql56-mysql-0:5.6.37-5.el6.src",
            "6Workstation-RHSCL-2.4:rh-mysql56-mysql-0:5.6.37-5.el6.x86_64",
            "6Workstation-RHSCL-2.4:rh-mysql56-mysql-bench-0:5.6.37-5.el6.x86_64",
            "6Workstation-RHSCL-2.4:rh-mysql56-mysql-common-0:5.6.37-5.el6.x86_64",
            "6Workstation-RHSCL-2.4:rh-mysql56-mysql-config-0:5.6.37-5.el6.x86_64",
            "6Workstation-RHSCL-2.4:rh-mysql56-mysql-debuginfo-0:5.6.37-5.el6.x86_64",
            "6Workstation-RHSCL-2.4:rh-mysql56-mysql-devel-0:5.6.37-5.el6.x86_64",
            "6Workstation-RHSCL-2.4:rh-mysql56-mysql-errmsg-0:5.6.37-5.el6.x86_64",
            "6Workstation-RHSCL-2.4:rh-mysql56-mysql-server-0:5.6.37-5.el6.x86_64",
            "6Workstation-RHSCL-2.4:rh-mysql56-mysql-test-0:5.6.37-5.el6.x86_64",
            "7Server-RHSCL-2.4-7.3.Z:rh-mysql56-mysql-0:5.6.37-5.el7.src",
            "7Server-RHSCL-2.4-7.3.Z:rh-mysql56-mysql-0:5.6.37-5.el7.x86_64",
            "7Server-RHSCL-2.4-7.3.Z:rh-mysql56-mysql-bench-0:5.6.37-5.el7.x86_64",
            "7Server-RHSCL-2.4-7.3.Z:rh-mysql56-mysql-common-0:5.6.37-5.el7.x86_64",
            "7Server-RHSCL-2.4-7.3.Z:rh-mysql56-mysql-config-0:5.6.37-5.el7.x86_64",
            "7Server-RHSCL-2.4-7.3.Z:rh-mysql56-mysql-debuginfo-0:5.6.37-5.el7.x86_64",
            "7Server-RHSCL-2.4-7.3.Z:rh-mysql56-mysql-devel-0:5.6.37-5.el7.x86_64",
            "7Server-RHSCL-2.4-7.3.Z:rh-mysql56-mysql-errmsg-0:5.6.37-5.el7.x86_64",
            "7Server-RHSCL-2.4-7.3.Z:rh-mysql56-mysql-server-0:5.6.37-5.el7.x86_64",
            "7Server-RHSCL-2.4-7.3.Z:rh-mysql56-mysql-test-0:5.6.37-5.el7.x86_64",
            "7Server-RHSCL-2.4:rh-mysql56-mysql-0:5.6.37-5.el7.src",
            "7Server-RHSCL-2.4:rh-mysql56-mysql-0:5.6.37-5.el7.x86_64",
            "7Server-RHSCL-2.4:rh-mysql56-mysql-bench-0:5.6.37-5.el7.x86_64",
            "7Server-RHSCL-2.4:rh-mysql56-mysql-common-0:5.6.37-5.el7.x86_64",
            "7Server-RHSCL-2.4:rh-mysql56-mysql-config-0:5.6.37-5.el7.x86_64",
            "7Server-RHSCL-2.4:rh-mysql56-mysql-debuginfo-0:5.6.37-5.el7.x86_64",
            "7Server-RHSCL-2.4:rh-mysql56-mysql-devel-0:5.6.37-5.el7.x86_64",
            "7Server-RHSCL-2.4:rh-mysql56-mysql-errmsg-0:5.6.37-5.el7.x86_64",
            "7Server-RHSCL-2.4:rh-mysql56-mysql-server-0:5.6.37-5.el7.x86_64",
            "7Server-RHSCL-2.4:rh-mysql56-mysql-test-0:5.6.37-5.el7.x86_64",
            "7Workstation-RHSCL-2.4:rh-mysql56-mysql-0:5.6.37-5.el7.src",
            "7Workstation-RHSCL-2.4:rh-mysql56-mysql-0:5.6.37-5.el7.x86_64",
            "7Workstation-RHSCL-2.4:rh-mysql56-mysql-bench-0:5.6.37-5.el7.x86_64",
            "7Workstation-RHSCL-2.4:rh-mysql56-mysql-common-0:5.6.37-5.el7.x86_64",
            "7Workstation-RHSCL-2.4:rh-mysql56-mysql-config-0:5.6.37-5.el7.x86_64",
            "7Workstation-RHSCL-2.4:rh-mysql56-mysql-debuginfo-0:5.6.37-5.el7.x86_64",
            "7Workstation-RHSCL-2.4:rh-mysql56-mysql-devel-0:5.6.37-5.el7.x86_64",
            "7Workstation-RHSCL-2.4:rh-mysql56-mysql-errmsg-0:5.6.37-5.el7.x86_64",
            "7Workstation-RHSCL-2.4:rh-mysql56-mysql-server-0:5.6.37-5.el7.x86_64",
            "7Workstation-RHSCL-2.4:rh-mysql56-mysql-test-0:5.6.37-5.el7.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Moderate"
        }
      ],
      "title": "mysql: unrestricted mysqld_safe\u0027s ledir (CPU Jan 2017)"
    },
    {
      "cve": "CVE-2017-3302",
      "cwe": {
        "id": "CWE-416",
        "name": "Use After Free"
      },
      "discovery_date": "2017-01-27T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "1422119"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in the way MySQL client library (libmysqlclient) handled prepared statements when server connection was lost. A malicious server or a man-in-the-middle attacker could possibly use this flaw to crash an application using libmysqlclient.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "mysql: prepared statement handle use-after-free after disconnect",
          "title": "Vulnerability summary"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "6Server-RHSCL-2.4-6.7.Z:rh-mysql56-mysql-0:5.6.37-5.el6.src",
          "6Server-RHSCL-2.4-6.7.Z:rh-mysql56-mysql-0:5.6.37-5.el6.x86_64",
          "6Server-RHSCL-2.4-6.7.Z:rh-mysql56-mysql-bench-0:5.6.37-5.el6.x86_64",
          "6Server-RHSCL-2.4-6.7.Z:rh-mysql56-mysql-common-0:5.6.37-5.el6.x86_64",
          "6Server-RHSCL-2.4-6.7.Z:rh-mysql56-mysql-config-0:5.6.37-5.el6.x86_64",
          "6Server-RHSCL-2.4-6.7.Z:rh-mysql56-mysql-debuginfo-0:5.6.37-5.el6.x86_64",
          "6Server-RHSCL-2.4-6.7.Z:rh-mysql56-mysql-devel-0:5.6.37-5.el6.x86_64",
          "6Server-RHSCL-2.4-6.7.Z:rh-mysql56-mysql-errmsg-0:5.6.37-5.el6.x86_64",
          "6Server-RHSCL-2.4-6.7.Z:rh-mysql56-mysql-server-0:5.6.37-5.el6.x86_64",
          "6Server-RHSCL-2.4-6.7.Z:rh-mysql56-mysql-test-0:5.6.37-5.el6.x86_64",
          "6Server-RHSCL-2.4:rh-mysql56-mysql-0:5.6.37-5.el6.src",
          "6Server-RHSCL-2.4:rh-mysql56-mysql-0:5.6.37-5.el6.x86_64",
          "6Server-RHSCL-2.4:rh-mysql56-mysql-bench-0:5.6.37-5.el6.x86_64",
          "6Server-RHSCL-2.4:rh-mysql56-mysql-common-0:5.6.37-5.el6.x86_64",
          "6Server-RHSCL-2.4:rh-mysql56-mysql-config-0:5.6.37-5.el6.x86_64",
          "6Server-RHSCL-2.4:rh-mysql56-mysql-debuginfo-0:5.6.37-5.el6.x86_64",
          "6Server-RHSCL-2.4:rh-mysql56-mysql-devel-0:5.6.37-5.el6.x86_64",
          "6Server-RHSCL-2.4:rh-mysql56-mysql-errmsg-0:5.6.37-5.el6.x86_64",
          "6Server-RHSCL-2.4:rh-mysql56-mysql-server-0:5.6.37-5.el6.x86_64",
          "6Server-RHSCL-2.4:rh-mysql56-mysql-test-0:5.6.37-5.el6.x86_64",
          "6Workstation-RHSCL-2.4:rh-mysql56-mysql-0:5.6.37-5.el6.src",
          "6Workstation-RHSCL-2.4:rh-mysql56-mysql-0:5.6.37-5.el6.x86_64",
          "6Workstation-RHSCL-2.4:rh-mysql56-mysql-bench-0:5.6.37-5.el6.x86_64",
          "6Workstation-RHSCL-2.4:rh-mysql56-mysql-common-0:5.6.37-5.el6.x86_64",
          "6Workstation-RHSCL-2.4:rh-mysql56-mysql-config-0:5.6.37-5.el6.x86_64",
          "6Workstation-RHSCL-2.4:rh-mysql56-mysql-debuginfo-0:5.6.37-5.el6.x86_64",
          "6Workstation-RHSCL-2.4:rh-mysql56-mysql-devel-0:5.6.37-5.el6.x86_64",
          "6Workstation-RHSCL-2.4:rh-mysql56-mysql-errmsg-0:5.6.37-5.el6.x86_64",
          "6Workstation-RHSCL-2.4:rh-mysql56-mysql-server-0:5.6.37-5.el6.x86_64",
          "6Workstation-RHSCL-2.4:rh-mysql56-mysql-test-0:5.6.37-5.el6.x86_64",
          "7Server-RHSCL-2.4-7.3.Z:rh-mysql56-mysql-0:5.6.37-5.el7.src",
          "7Server-RHSCL-2.4-7.3.Z:rh-mysql56-mysql-0:5.6.37-5.el7.x86_64",
          "7Server-RHSCL-2.4-7.3.Z:rh-mysql56-mysql-bench-0:5.6.37-5.el7.x86_64",
          "7Server-RHSCL-2.4-7.3.Z:rh-mysql56-mysql-common-0:5.6.37-5.el7.x86_64",
          "7Server-RHSCL-2.4-7.3.Z:rh-mysql56-mysql-config-0:5.6.37-5.el7.x86_64",
          "7Server-RHSCL-2.4-7.3.Z:rh-mysql56-mysql-debuginfo-0:5.6.37-5.el7.x86_64",
          "7Server-RHSCL-2.4-7.3.Z:rh-mysql56-mysql-devel-0:5.6.37-5.el7.x86_64",
          "7Server-RHSCL-2.4-7.3.Z:rh-mysql56-mysql-errmsg-0:5.6.37-5.el7.x86_64",
          "7Server-RHSCL-2.4-7.3.Z:rh-mysql56-mysql-server-0:5.6.37-5.el7.x86_64",
          "7Server-RHSCL-2.4-7.3.Z:rh-mysql56-mysql-test-0:5.6.37-5.el7.x86_64",
          "7Server-RHSCL-2.4:rh-mysql56-mysql-0:5.6.37-5.el7.src",
          "7Server-RHSCL-2.4:rh-mysql56-mysql-0:5.6.37-5.el7.x86_64",
          "7Server-RHSCL-2.4:rh-mysql56-mysql-bench-0:5.6.37-5.el7.x86_64",
          "7Server-RHSCL-2.4:rh-mysql56-mysql-common-0:5.6.37-5.el7.x86_64",
          "7Server-RHSCL-2.4:rh-mysql56-mysql-config-0:5.6.37-5.el7.x86_64",
          "7Server-RHSCL-2.4:rh-mysql56-mysql-debuginfo-0:5.6.37-5.el7.x86_64",
          "7Server-RHSCL-2.4:rh-mysql56-mysql-devel-0:5.6.37-5.el7.x86_64",
          "7Server-RHSCL-2.4:rh-mysql56-mysql-errmsg-0:5.6.37-5.el7.x86_64",
          "7Server-RHSCL-2.4:rh-mysql56-mysql-server-0:5.6.37-5.el7.x86_64",
          "7Server-RHSCL-2.4:rh-mysql56-mysql-test-0:5.6.37-5.el7.x86_64",
          "7Workstation-RHSCL-2.4:rh-mysql56-mysql-0:5.6.37-5.el7.src",
          "7Workstation-RHSCL-2.4:rh-mysql56-mysql-0:5.6.37-5.el7.x86_64",
          "7Workstation-RHSCL-2.4:rh-mysql56-mysql-bench-0:5.6.37-5.el7.x86_64",
          "7Workstation-RHSCL-2.4:rh-mysql56-mysql-common-0:5.6.37-5.el7.x86_64",
          "7Workstation-RHSCL-2.4:rh-mysql56-mysql-config-0:5.6.37-5.el7.x86_64",
          "7Workstation-RHSCL-2.4:rh-mysql56-mysql-debuginfo-0:5.6.37-5.el7.x86_64",
          "7Workstation-RHSCL-2.4:rh-mysql56-mysql-devel-0:5.6.37-5.el7.x86_64",
          "7Workstation-RHSCL-2.4:rh-mysql56-mysql-errmsg-0:5.6.37-5.el7.x86_64",
          "7Workstation-RHSCL-2.4:rh-mysql56-mysql-server-0:5.6.37-5.el7.x86_64",
          "7Workstation-RHSCL-2.4:rh-mysql56-mysql-test-0:5.6.37-5.el7.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2017-3302"
        },
        {
          "category": "external",
          "summary": "RHBZ#1422119",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1422119"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2017-3302",
          "url": "https://www.cve.org/CVERecord?id=CVE-2017-3302"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2017-3302",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2017-3302"
        }
      ],
      "release_date": "2017-01-27T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2017-09-21T07:42:12+00:00",
          "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAfter installing this update, the MySQL server daemon (mysqld) will be restarted automatically.",
          "product_ids": [
            "6Server-RHSCL-2.4-6.7.Z:rh-mysql56-mysql-0:5.6.37-5.el6.src",
            "6Server-RHSCL-2.4-6.7.Z:rh-mysql56-mysql-0:5.6.37-5.el6.x86_64",
            "6Server-RHSCL-2.4-6.7.Z:rh-mysql56-mysql-bench-0:5.6.37-5.el6.x86_64",
            "6Server-RHSCL-2.4-6.7.Z:rh-mysql56-mysql-common-0:5.6.37-5.el6.x86_64",
            "6Server-RHSCL-2.4-6.7.Z:rh-mysql56-mysql-config-0:5.6.37-5.el6.x86_64",
            "6Server-RHSCL-2.4-6.7.Z:rh-mysql56-mysql-debuginfo-0:5.6.37-5.el6.x86_64",
            "6Server-RHSCL-2.4-6.7.Z:rh-mysql56-mysql-devel-0:5.6.37-5.el6.x86_64",
            "6Server-RHSCL-2.4-6.7.Z:rh-mysql56-mysql-errmsg-0:5.6.37-5.el6.x86_64",
            "6Server-RHSCL-2.4-6.7.Z:rh-mysql56-mysql-server-0:5.6.37-5.el6.x86_64",
            "6Server-RHSCL-2.4-6.7.Z:rh-mysql56-mysql-test-0:5.6.37-5.el6.x86_64",
            "6Server-RHSCL-2.4:rh-mysql56-mysql-0:5.6.37-5.el6.src",
            "6Server-RHSCL-2.4:rh-mysql56-mysql-0:5.6.37-5.el6.x86_64",
            "6Server-RHSCL-2.4:rh-mysql56-mysql-bench-0:5.6.37-5.el6.x86_64",
            "6Server-RHSCL-2.4:rh-mysql56-mysql-common-0:5.6.37-5.el6.x86_64",
            "6Server-RHSCL-2.4:rh-mysql56-mysql-config-0:5.6.37-5.el6.x86_64",
            "6Server-RHSCL-2.4:rh-mysql56-mysql-debuginfo-0:5.6.37-5.el6.x86_64",
            "6Server-RHSCL-2.4:rh-mysql56-mysql-devel-0:5.6.37-5.el6.x86_64",
            "6Server-RHSCL-2.4:rh-mysql56-mysql-errmsg-0:5.6.37-5.el6.x86_64",
            "6Server-RHSCL-2.4:rh-mysql56-mysql-server-0:5.6.37-5.el6.x86_64",
            "6Server-RHSCL-2.4:rh-mysql56-mysql-test-0:5.6.37-5.el6.x86_64",
            "6Workstation-RHSCL-2.4:rh-mysql56-mysql-0:5.6.37-5.el6.src",
            "6Workstation-RHSCL-2.4:rh-mysql56-mysql-0:5.6.37-5.el6.x86_64",
            "6Workstation-RHSCL-2.4:rh-mysql56-mysql-bench-0:5.6.37-5.el6.x86_64",
            "6Workstation-RHSCL-2.4:rh-mysql56-mysql-common-0:5.6.37-5.el6.x86_64",
            "6Workstation-RHSCL-2.4:rh-mysql56-mysql-config-0:5.6.37-5.el6.x86_64",
            "6Workstation-RHSCL-2.4:rh-mysql56-mysql-debuginfo-0:5.6.37-5.el6.x86_64",
            "6Workstation-RHSCL-2.4:rh-mysql56-mysql-devel-0:5.6.37-5.el6.x86_64",
            "6Workstation-RHSCL-2.4:rh-mysql56-mysql-errmsg-0:5.6.37-5.el6.x86_64",
            "6Workstation-RHSCL-2.4:rh-mysql56-mysql-server-0:5.6.37-5.el6.x86_64",
            "6Workstation-RHSCL-2.4:rh-mysql56-mysql-test-0:5.6.37-5.el6.x86_64",
            "7Server-RHSCL-2.4-7.3.Z:rh-mysql56-mysql-0:5.6.37-5.el7.src",
            "7Server-RHSCL-2.4-7.3.Z:rh-mysql56-mysql-0:5.6.37-5.el7.x86_64",
            "7Server-RHSCL-2.4-7.3.Z:rh-mysql56-mysql-bench-0:5.6.37-5.el7.x86_64",
            "7Server-RHSCL-2.4-7.3.Z:rh-mysql56-mysql-common-0:5.6.37-5.el7.x86_64",
            "7Server-RHSCL-2.4-7.3.Z:rh-mysql56-mysql-config-0:5.6.37-5.el7.x86_64",
            "7Server-RHSCL-2.4-7.3.Z:rh-mysql56-mysql-debuginfo-0:5.6.37-5.el7.x86_64",
            "7Server-RHSCL-2.4-7.3.Z:rh-mysql56-mysql-devel-0:5.6.37-5.el7.x86_64",
            "7Server-RHSCL-2.4-7.3.Z:rh-mysql56-mysql-errmsg-0:5.6.37-5.el7.x86_64",
            "7Server-RHSCL-2.4-7.3.Z:rh-mysql56-mysql-server-0:5.6.37-5.el7.x86_64",
            "7Server-RHSCL-2.4-7.3.Z:rh-mysql56-mysql-test-0:5.6.37-5.el7.x86_64",
            "7Server-RHSCL-2.4:rh-mysql56-mysql-0:5.6.37-5.el7.src",
            "7Server-RHSCL-2.4:rh-mysql56-mysql-0:5.6.37-5.el7.x86_64",
            "7Server-RHSCL-2.4:rh-mysql56-mysql-bench-0:5.6.37-5.el7.x86_64",
            "7Server-RHSCL-2.4:rh-mysql56-mysql-common-0:5.6.37-5.el7.x86_64",
            "7Server-RHSCL-2.4:rh-mysql56-mysql-config-0:5.6.37-5.el7.x86_64",
            "7Server-RHSCL-2.4:rh-mysql56-mysql-debuginfo-0:5.6.37-5.el7.x86_64",
            "7Server-RHSCL-2.4:rh-mysql56-mysql-devel-0:5.6.37-5.el7.x86_64",
            "7Server-RHSCL-2.4:rh-mysql56-mysql-errmsg-0:5.6.37-5.el7.x86_64",
            "7Server-RHSCL-2.4:rh-mysql56-mysql-server-0:5.6.37-5.el7.x86_64",
            "7Server-RHSCL-2.4:rh-mysql56-mysql-test-0:5.6.37-5.el7.x86_64",
            "7Workstation-RHSCL-2.4:rh-mysql56-mysql-0:5.6.37-5.el7.src",
            "7Workstation-RHSCL-2.4:rh-mysql56-mysql-0:5.6.37-5.el7.x86_64",
            "7Workstation-RHSCL-2.4:rh-mysql56-mysql-bench-0:5.6.37-5.el7.x86_64",
            "7Workstation-RHSCL-2.4:rh-mysql56-mysql-common-0:5.6.37-5.el7.x86_64",
            "7Workstation-RHSCL-2.4:rh-mysql56-mysql-config-0:5.6.37-5.el7.x86_64",
            "7Workstation-RHSCL-2.4:rh-mysql56-mysql-debuginfo-0:5.6.37-5.el7.x86_64",
            "7Workstation-RHSCL-2.4:rh-mysql56-mysql-devel-0:5.6.37-5.el7.x86_64",
            "7Workstation-RHSCL-2.4:rh-mysql56-mysql-errmsg-0:5.6.37-5.el7.x86_64",
            "7Workstation-RHSCL-2.4:rh-mysql56-mysql-server-0:5.6.37-5.el7.x86_64",
            "7Workstation-RHSCL-2.4:rh-mysql56-mysql-test-0:5.6.37-5.el7.x86_64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2017:2787"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "NONE",
            "integrityImpact": "NONE",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.0"
          },
          "products": [
            "6Server-RHSCL-2.4-6.7.Z:rh-mysql56-mysql-0:5.6.37-5.el6.src",
            "6Server-RHSCL-2.4-6.7.Z:rh-mysql56-mysql-0:5.6.37-5.el6.x86_64",
            "6Server-RHSCL-2.4-6.7.Z:rh-mysql56-mysql-bench-0:5.6.37-5.el6.x86_64",
            "6Server-RHSCL-2.4-6.7.Z:rh-mysql56-mysql-common-0:5.6.37-5.el6.x86_64",
            "6Server-RHSCL-2.4-6.7.Z:rh-mysql56-mysql-config-0:5.6.37-5.el6.x86_64",
            "6Server-RHSCL-2.4-6.7.Z:rh-mysql56-mysql-debuginfo-0:5.6.37-5.el6.x86_64",
            "6Server-RHSCL-2.4-6.7.Z:rh-mysql56-mysql-devel-0:5.6.37-5.el6.x86_64",
            "6Server-RHSCL-2.4-6.7.Z:rh-mysql56-mysql-errmsg-0:5.6.37-5.el6.x86_64",
            "6Server-RHSCL-2.4-6.7.Z:rh-mysql56-mysql-server-0:5.6.37-5.el6.x86_64",
            "6Server-RHSCL-2.4-6.7.Z:rh-mysql56-mysql-test-0:5.6.37-5.el6.x86_64",
            "6Server-RHSCL-2.4:rh-mysql56-mysql-0:5.6.37-5.el6.src",
            "6Server-RHSCL-2.4:rh-mysql56-mysql-0:5.6.37-5.el6.x86_64",
            "6Server-RHSCL-2.4:rh-mysql56-mysql-bench-0:5.6.37-5.el6.x86_64",
            "6Server-RHSCL-2.4:rh-mysql56-mysql-common-0:5.6.37-5.el6.x86_64",
            "6Server-RHSCL-2.4:rh-mysql56-mysql-config-0:5.6.37-5.el6.x86_64",
            "6Server-RHSCL-2.4:rh-mysql56-mysql-debuginfo-0:5.6.37-5.el6.x86_64",
            "6Server-RHSCL-2.4:rh-mysql56-mysql-devel-0:5.6.37-5.el6.x86_64",
            "6Server-RHSCL-2.4:rh-mysql56-mysql-errmsg-0:5.6.37-5.el6.x86_64",
            "6Server-RHSCL-2.4:rh-mysql56-mysql-server-0:5.6.37-5.el6.x86_64",
            "6Server-RHSCL-2.4:rh-mysql56-mysql-test-0:5.6.37-5.el6.x86_64",
            "6Workstation-RHSCL-2.4:rh-mysql56-mysql-0:5.6.37-5.el6.src",
            "6Workstation-RHSCL-2.4:rh-mysql56-mysql-0:5.6.37-5.el6.x86_64",
            "6Workstation-RHSCL-2.4:rh-mysql56-mysql-bench-0:5.6.37-5.el6.x86_64",
            "6Workstation-RHSCL-2.4:rh-mysql56-mysql-common-0:5.6.37-5.el6.x86_64",
            "6Workstation-RHSCL-2.4:rh-mysql56-mysql-config-0:5.6.37-5.el6.x86_64",
            "6Workstation-RHSCL-2.4:rh-mysql56-mysql-debuginfo-0:5.6.37-5.el6.x86_64",
            "6Workstation-RHSCL-2.4:rh-mysql56-mysql-devel-0:5.6.37-5.el6.x86_64",
            "6Workstation-RHSCL-2.4:rh-mysql56-mysql-errmsg-0:5.6.37-5.el6.x86_64",
            "6Workstation-RHSCL-2.4:rh-mysql56-mysql-server-0:5.6.37-5.el6.x86_64",
            "6Workstation-RHSCL-2.4:rh-mysql56-mysql-test-0:5.6.37-5.el6.x86_64",
            "7Server-RHSCL-2.4-7.3.Z:rh-mysql56-mysql-0:5.6.37-5.el7.src",
            "7Server-RHSCL-2.4-7.3.Z:rh-mysql56-mysql-0:5.6.37-5.el7.x86_64",
            "7Server-RHSCL-2.4-7.3.Z:rh-mysql56-mysql-bench-0:5.6.37-5.el7.x86_64",
            "7Server-RHSCL-2.4-7.3.Z:rh-mysql56-mysql-common-0:5.6.37-5.el7.x86_64",
            "7Server-RHSCL-2.4-7.3.Z:rh-mysql56-mysql-config-0:5.6.37-5.el7.x86_64",
            "7Server-RHSCL-2.4-7.3.Z:rh-mysql56-mysql-debuginfo-0:5.6.37-5.el7.x86_64",
            "7Server-RHSCL-2.4-7.3.Z:rh-mysql56-mysql-devel-0:5.6.37-5.el7.x86_64",
            "7Server-RHSCL-2.4-7.3.Z:rh-mysql56-mysql-errmsg-0:5.6.37-5.el7.x86_64",
            "7Server-RHSCL-2.4-7.3.Z:rh-mysql56-mysql-server-0:5.6.37-5.el7.x86_64",
            "7Server-RHSCL-2.4-7.3.Z:rh-mysql56-mysql-test-0:5.6.37-5.el7.x86_64",
            "7Server-RHSCL-2.4:rh-mysql56-mysql-0:5.6.37-5.el7.src",
            "7Server-RHSCL-2.4:rh-mysql56-mysql-0:5.6.37-5.el7.x86_64",
            "7Server-RHSCL-2.4:rh-mysql56-mysql-bench-0:5.6.37-5.el7.x86_64",
            "7Server-RHSCL-2.4:rh-mysql56-mysql-common-0:5.6.37-5.el7.x86_64",
            "7Server-RHSCL-2.4:rh-mysql56-mysql-config-0:5.6.37-5.el7.x86_64",
            "7Server-RHSCL-2.4:rh-mysql56-mysql-debuginfo-0:5.6.37-5.el7.x86_64",
            "7Server-RHSCL-2.4:rh-mysql56-mysql-devel-0:5.6.37-5.el7.x86_64",
            "7Server-RHSCL-2.4:rh-mysql56-mysql-errmsg-0:5.6.37-5.el7.x86_64",
            "7Server-RHSCL-2.4:rh-mysql56-mysql-server-0:5.6.37-5.el7.x86_64",
            "7Server-RHSCL-2.4:rh-mysql56-mysql-test-0:5.6.37-5.el7.x86_64",
            "7Workstation-RHSCL-2.4:rh-mysql56-mysql-0:5.6.37-5.el7.src",
            "7Workstation-RHSCL-2.4:rh-mysql56-mysql-0:5.6.37-5.el7.x86_64",
            "7Workstation-RHSCL-2.4:rh-mysql56-mysql-bench-0:5.6.37-5.el7.x86_64",
            "7Workstation-RHSCL-2.4:rh-mysql56-mysql-common-0:5.6.37-5.el7.x86_64",
            "7Workstation-RHSCL-2.4:rh-mysql56-mysql-config-0:5.6.37-5.el7.x86_64",
            "7Workstation-RHSCL-2.4:rh-mysql56-mysql-debuginfo-0:5.6.37-5.el7.x86_64",
            "7Workstation-RHSCL-2.4:rh-mysql56-mysql-devel-0:5.6.37-5.el7.x86_64",
            "7Workstation-RHSCL-2.4:rh-mysql56-mysql-errmsg-0:5.6.37-5.el7.x86_64",
            "7Workstation-RHSCL-2.4:rh-mysql56-mysql-server-0:5.6.37-5.el7.x86_64",
            "7Workstation-RHSCL-2.4:rh-mysql56-mysql-test-0:5.6.37-5.el7.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Low"
        }
      ],
      "title": "mysql: prepared statement handle use-after-free after disconnect"
    },
    {
      "acknowledgments": [
        {
          "names": [
            "Pali Roh\u00e1r"
          ]
        }
      ],
      "cve": "CVE-2017-3305",
      "cwe": {
        "id": "CWE-319",
        "name": "Cleartext Transmission of Sensitive Information"
      },
      "discovery_date": "2017-03-11T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "1431690"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "It was discovered that the MySQL client command line tools only checked after authentication whether server supported SSL. A man-in-the-middle attacker could use this flaw to hijack client\u0027s authentication to the server even if the client was configured to require SSL connection.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "mysql: incorrect enforcement of ssl-mode=REQUIRED in MySQL 5.5 and 5.6",
          "title": "Vulnerability summary"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "6Server-RHSCL-2.4-6.7.Z:rh-mysql56-mysql-0:5.6.37-5.el6.src",
          "6Server-RHSCL-2.4-6.7.Z:rh-mysql56-mysql-0:5.6.37-5.el6.x86_64",
          "6Server-RHSCL-2.4-6.7.Z:rh-mysql56-mysql-bench-0:5.6.37-5.el6.x86_64",
          "6Server-RHSCL-2.4-6.7.Z:rh-mysql56-mysql-common-0:5.6.37-5.el6.x86_64",
          "6Server-RHSCL-2.4-6.7.Z:rh-mysql56-mysql-config-0:5.6.37-5.el6.x86_64",
          "6Server-RHSCL-2.4-6.7.Z:rh-mysql56-mysql-debuginfo-0:5.6.37-5.el6.x86_64",
          "6Server-RHSCL-2.4-6.7.Z:rh-mysql56-mysql-devel-0:5.6.37-5.el6.x86_64",
          "6Server-RHSCL-2.4-6.7.Z:rh-mysql56-mysql-errmsg-0:5.6.37-5.el6.x86_64",
          "6Server-RHSCL-2.4-6.7.Z:rh-mysql56-mysql-server-0:5.6.37-5.el6.x86_64",
          "6Server-RHSCL-2.4-6.7.Z:rh-mysql56-mysql-test-0:5.6.37-5.el6.x86_64",
          "6Server-RHSCL-2.4:rh-mysql56-mysql-0:5.6.37-5.el6.src",
          "6Server-RHSCL-2.4:rh-mysql56-mysql-0:5.6.37-5.el6.x86_64",
          "6Server-RHSCL-2.4:rh-mysql56-mysql-bench-0:5.6.37-5.el6.x86_64",
          "6Server-RHSCL-2.4:rh-mysql56-mysql-common-0:5.6.37-5.el6.x86_64",
          "6Server-RHSCL-2.4:rh-mysql56-mysql-config-0:5.6.37-5.el6.x86_64",
          "6Server-RHSCL-2.4:rh-mysql56-mysql-debuginfo-0:5.6.37-5.el6.x86_64",
          "6Server-RHSCL-2.4:rh-mysql56-mysql-devel-0:5.6.37-5.el6.x86_64",
          "6Server-RHSCL-2.4:rh-mysql56-mysql-errmsg-0:5.6.37-5.el6.x86_64",
          "6Server-RHSCL-2.4:rh-mysql56-mysql-server-0:5.6.37-5.el6.x86_64",
          "6Server-RHSCL-2.4:rh-mysql56-mysql-test-0:5.6.37-5.el6.x86_64",
          "6Workstation-RHSCL-2.4:rh-mysql56-mysql-0:5.6.37-5.el6.src",
          "6Workstation-RHSCL-2.4:rh-mysql56-mysql-0:5.6.37-5.el6.x86_64",
          "6Workstation-RHSCL-2.4:rh-mysql56-mysql-bench-0:5.6.37-5.el6.x86_64",
          "6Workstation-RHSCL-2.4:rh-mysql56-mysql-common-0:5.6.37-5.el6.x86_64",
          "6Workstation-RHSCL-2.4:rh-mysql56-mysql-config-0:5.6.37-5.el6.x86_64",
          "6Workstation-RHSCL-2.4:rh-mysql56-mysql-debuginfo-0:5.6.37-5.el6.x86_64",
          "6Workstation-RHSCL-2.4:rh-mysql56-mysql-devel-0:5.6.37-5.el6.x86_64",
          "6Workstation-RHSCL-2.4:rh-mysql56-mysql-errmsg-0:5.6.37-5.el6.x86_64",
          "6Workstation-RHSCL-2.4:rh-mysql56-mysql-server-0:5.6.37-5.el6.x86_64",
          "6Workstation-RHSCL-2.4:rh-mysql56-mysql-test-0:5.6.37-5.el6.x86_64",
          "7Server-RHSCL-2.4-7.3.Z:rh-mysql56-mysql-0:5.6.37-5.el7.src",
          "7Server-RHSCL-2.4-7.3.Z:rh-mysql56-mysql-0:5.6.37-5.el7.x86_64",
          "7Server-RHSCL-2.4-7.3.Z:rh-mysql56-mysql-bench-0:5.6.37-5.el7.x86_64",
          "7Server-RHSCL-2.4-7.3.Z:rh-mysql56-mysql-common-0:5.6.37-5.el7.x86_64",
          "7Server-RHSCL-2.4-7.3.Z:rh-mysql56-mysql-config-0:5.6.37-5.el7.x86_64",
          "7Server-RHSCL-2.4-7.3.Z:rh-mysql56-mysql-debuginfo-0:5.6.37-5.el7.x86_64",
          "7Server-RHSCL-2.4-7.3.Z:rh-mysql56-mysql-devel-0:5.6.37-5.el7.x86_64",
          "7Server-RHSCL-2.4-7.3.Z:rh-mysql56-mysql-errmsg-0:5.6.37-5.el7.x86_64",
          "7Server-RHSCL-2.4-7.3.Z:rh-mysql56-mysql-server-0:5.6.37-5.el7.x86_64",
          "7Server-RHSCL-2.4-7.3.Z:rh-mysql56-mysql-test-0:5.6.37-5.el7.x86_64",
          "7Server-RHSCL-2.4:rh-mysql56-mysql-0:5.6.37-5.el7.src",
          "7Server-RHSCL-2.4:rh-mysql56-mysql-0:5.6.37-5.el7.x86_64",
          "7Server-RHSCL-2.4:rh-mysql56-mysql-bench-0:5.6.37-5.el7.x86_64",
          "7Server-RHSCL-2.4:rh-mysql56-mysql-common-0:5.6.37-5.el7.x86_64",
          "7Server-RHSCL-2.4:rh-mysql56-mysql-config-0:5.6.37-5.el7.x86_64",
          "7Server-RHSCL-2.4:rh-mysql56-mysql-debuginfo-0:5.6.37-5.el7.x86_64",
          "7Server-RHSCL-2.4:rh-mysql56-mysql-devel-0:5.6.37-5.el7.x86_64",
          "7Server-RHSCL-2.4:rh-mysql56-mysql-errmsg-0:5.6.37-5.el7.x86_64",
          "7Server-RHSCL-2.4:rh-mysql56-mysql-server-0:5.6.37-5.el7.x86_64",
          "7Server-RHSCL-2.4:rh-mysql56-mysql-test-0:5.6.37-5.el7.x86_64",
          "7Workstation-RHSCL-2.4:rh-mysql56-mysql-0:5.6.37-5.el7.src",
          "7Workstation-RHSCL-2.4:rh-mysql56-mysql-0:5.6.37-5.el7.x86_64",
          "7Workstation-RHSCL-2.4:rh-mysql56-mysql-bench-0:5.6.37-5.el7.x86_64",
          "7Workstation-RHSCL-2.4:rh-mysql56-mysql-common-0:5.6.37-5.el7.x86_64",
          "7Workstation-RHSCL-2.4:rh-mysql56-mysql-config-0:5.6.37-5.el7.x86_64",
          "7Workstation-RHSCL-2.4:rh-mysql56-mysql-debuginfo-0:5.6.37-5.el7.x86_64",
          "7Workstation-RHSCL-2.4:rh-mysql56-mysql-devel-0:5.6.37-5.el7.x86_64",
          "7Workstation-RHSCL-2.4:rh-mysql56-mysql-errmsg-0:5.6.37-5.el7.x86_64",
          "7Workstation-RHSCL-2.4:rh-mysql56-mysql-server-0:5.6.37-5.el7.x86_64",
          "7Workstation-RHSCL-2.4:rh-mysql56-mysql-test-0:5.6.37-5.el7.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2017-3305"
        },
        {
          "category": "external",
          "summary": "RHBZ#1431690",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1431690"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2017-3305",
          "url": "https://www.cve.org/CVERecord?id=CVE-2017-3305"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2017-3305",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2017-3305"
        },
        {
          "category": "external",
          "summary": "http://riddle.link/",
          "url": "http://riddle.link/"
        }
      ],
      "release_date": "2017-03-17T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2017-09-21T07:42:12+00:00",
          "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAfter installing this update, the MySQL server daemon (mysqld) will be restarted automatically.",
          "product_ids": [
            "6Server-RHSCL-2.4-6.7.Z:rh-mysql56-mysql-0:5.6.37-5.el6.src",
            "6Server-RHSCL-2.4-6.7.Z:rh-mysql56-mysql-0:5.6.37-5.el6.x86_64",
            "6Server-RHSCL-2.4-6.7.Z:rh-mysql56-mysql-bench-0:5.6.37-5.el6.x86_64",
            "6Server-RHSCL-2.4-6.7.Z:rh-mysql56-mysql-common-0:5.6.37-5.el6.x86_64",
            "6Server-RHSCL-2.4-6.7.Z:rh-mysql56-mysql-config-0:5.6.37-5.el6.x86_64",
            "6Server-RHSCL-2.4-6.7.Z:rh-mysql56-mysql-debuginfo-0:5.6.37-5.el6.x86_64",
            "6Server-RHSCL-2.4-6.7.Z:rh-mysql56-mysql-devel-0:5.6.37-5.el6.x86_64",
            "6Server-RHSCL-2.4-6.7.Z:rh-mysql56-mysql-errmsg-0:5.6.37-5.el6.x86_64",
            "6Server-RHSCL-2.4-6.7.Z:rh-mysql56-mysql-server-0:5.6.37-5.el6.x86_64",
            "6Server-RHSCL-2.4-6.7.Z:rh-mysql56-mysql-test-0:5.6.37-5.el6.x86_64",
            "6Server-RHSCL-2.4:rh-mysql56-mysql-0:5.6.37-5.el6.src",
            "6Server-RHSCL-2.4:rh-mysql56-mysql-0:5.6.37-5.el6.x86_64",
            "6Server-RHSCL-2.4:rh-mysql56-mysql-bench-0:5.6.37-5.el6.x86_64",
            "6Server-RHSCL-2.4:rh-mysql56-mysql-common-0:5.6.37-5.el6.x86_64",
            "6Server-RHSCL-2.4:rh-mysql56-mysql-config-0:5.6.37-5.el6.x86_64",
            "6Server-RHSCL-2.4:rh-mysql56-mysql-debuginfo-0:5.6.37-5.el6.x86_64",
            "6Server-RHSCL-2.4:rh-mysql56-mysql-devel-0:5.6.37-5.el6.x86_64",
            "6Server-RHSCL-2.4:rh-mysql56-mysql-errmsg-0:5.6.37-5.el6.x86_64",
            "6Server-RHSCL-2.4:rh-mysql56-mysql-server-0:5.6.37-5.el6.x86_64",
            "6Server-RHSCL-2.4:rh-mysql56-mysql-test-0:5.6.37-5.el6.x86_64",
            "6Workstation-RHSCL-2.4:rh-mysql56-mysql-0:5.6.37-5.el6.src",
            "6Workstation-RHSCL-2.4:rh-mysql56-mysql-0:5.6.37-5.el6.x86_64",
            "6Workstation-RHSCL-2.4:rh-mysql56-mysql-bench-0:5.6.37-5.el6.x86_64",
            "6Workstation-RHSCL-2.4:rh-mysql56-mysql-common-0:5.6.37-5.el6.x86_64",
            "6Workstation-RHSCL-2.4:rh-mysql56-mysql-config-0:5.6.37-5.el6.x86_64",
            "6Workstation-RHSCL-2.4:rh-mysql56-mysql-debuginfo-0:5.6.37-5.el6.x86_64",
            "6Workstation-RHSCL-2.4:rh-mysql56-mysql-devel-0:5.6.37-5.el6.x86_64",
            "6Workstation-RHSCL-2.4:rh-mysql56-mysql-errmsg-0:5.6.37-5.el6.x86_64",
            "6Workstation-RHSCL-2.4:rh-mysql56-mysql-server-0:5.6.37-5.el6.x86_64",
            "6Workstation-RHSCL-2.4:rh-mysql56-mysql-test-0:5.6.37-5.el6.x86_64",
            "7Server-RHSCL-2.4-7.3.Z:rh-mysql56-mysql-0:5.6.37-5.el7.src",
            "7Server-RHSCL-2.4-7.3.Z:rh-mysql56-mysql-0:5.6.37-5.el7.x86_64",
            "7Server-RHSCL-2.4-7.3.Z:rh-mysql56-mysql-bench-0:5.6.37-5.el7.x86_64",
            "7Server-RHSCL-2.4-7.3.Z:rh-mysql56-mysql-common-0:5.6.37-5.el7.x86_64",
            "7Server-RHSCL-2.4-7.3.Z:rh-mysql56-mysql-config-0:5.6.37-5.el7.x86_64",
            "7Server-RHSCL-2.4-7.3.Z:rh-mysql56-mysql-debuginfo-0:5.6.37-5.el7.x86_64",
            "7Server-RHSCL-2.4-7.3.Z:rh-mysql56-mysql-devel-0:5.6.37-5.el7.x86_64",
            "7Server-RHSCL-2.4-7.3.Z:rh-mysql56-mysql-errmsg-0:5.6.37-5.el7.x86_64",
            "7Server-RHSCL-2.4-7.3.Z:rh-mysql56-mysql-server-0:5.6.37-5.el7.x86_64",
            "7Server-RHSCL-2.4-7.3.Z:rh-mysql56-mysql-test-0:5.6.37-5.el7.x86_64",
            "7Server-RHSCL-2.4:rh-mysql56-mysql-0:5.6.37-5.el7.src",
            "7Server-RHSCL-2.4:rh-mysql56-mysql-0:5.6.37-5.el7.x86_64",
            "7Server-RHSCL-2.4:rh-mysql56-mysql-bench-0:5.6.37-5.el7.x86_64",
            "7Server-RHSCL-2.4:rh-mysql56-mysql-common-0:5.6.37-5.el7.x86_64",
            "7Server-RHSCL-2.4:rh-mysql56-mysql-config-0:5.6.37-5.el7.x86_64",
            "7Server-RHSCL-2.4:rh-mysql56-mysql-debuginfo-0:5.6.37-5.el7.x86_64",
            "7Server-RHSCL-2.4:rh-mysql56-mysql-devel-0:5.6.37-5.el7.x86_64",
            "7Server-RHSCL-2.4:rh-mysql56-mysql-errmsg-0:5.6.37-5.el7.x86_64",
            "7Server-RHSCL-2.4:rh-mysql56-mysql-server-0:5.6.37-5.el7.x86_64",
            "7Server-RHSCL-2.4:rh-mysql56-mysql-test-0:5.6.37-5.el7.x86_64",
            "7Workstation-RHSCL-2.4:rh-mysql56-mysql-0:5.6.37-5.el7.src",
            "7Workstation-RHSCL-2.4:rh-mysql56-mysql-0:5.6.37-5.el7.x86_64",
            "7Workstation-RHSCL-2.4:rh-mysql56-mysql-bench-0:5.6.37-5.el7.x86_64",
            "7Workstation-RHSCL-2.4:rh-mysql56-mysql-common-0:5.6.37-5.el7.x86_64",
            "7Workstation-RHSCL-2.4:rh-mysql56-mysql-config-0:5.6.37-5.el7.x86_64",
            "7Workstation-RHSCL-2.4:rh-mysql56-mysql-debuginfo-0:5.6.37-5.el7.x86_64",
            "7Workstation-RHSCL-2.4:rh-mysql56-mysql-devel-0:5.6.37-5.el7.x86_64",
            "7Workstation-RHSCL-2.4:rh-mysql56-mysql-errmsg-0:5.6.37-5.el7.x86_64",
            "7Workstation-RHSCL-2.4:rh-mysql56-mysql-server-0:5.6.37-5.el7.x86_64",
            "7Workstation-RHSCL-2.4:rh-mysql56-mysql-test-0:5.6.37-5.el7.x86_64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2017:2787"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "HIGH",
            "attackVector": "NETWORK",
            "availabilityImpact": "NONE",
            "baseScore": 5.3,
            "baseSeverity": "MEDIUM",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "NONE",
            "privilegesRequired": "LOW",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.0/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N",
            "version": "3.0"
          },
          "products": [
            "6Server-RHSCL-2.4-6.7.Z:rh-mysql56-mysql-0:5.6.37-5.el6.src",
            "6Server-RHSCL-2.4-6.7.Z:rh-mysql56-mysql-0:5.6.37-5.el6.x86_64",
            "6Server-RHSCL-2.4-6.7.Z:rh-mysql56-mysql-bench-0:5.6.37-5.el6.x86_64",
            "6Server-RHSCL-2.4-6.7.Z:rh-mysql56-mysql-common-0:5.6.37-5.el6.x86_64",
            "6Server-RHSCL-2.4-6.7.Z:rh-mysql56-mysql-config-0:5.6.37-5.el6.x86_64",
            "6Server-RHSCL-2.4-6.7.Z:rh-mysql56-mysql-debuginfo-0:5.6.37-5.el6.x86_64",
            "6Server-RHSCL-2.4-6.7.Z:rh-mysql56-mysql-devel-0:5.6.37-5.el6.x86_64",
            "6Server-RHSCL-2.4-6.7.Z:rh-mysql56-mysql-errmsg-0:5.6.37-5.el6.x86_64",
            "6Server-RHSCL-2.4-6.7.Z:rh-mysql56-mysql-server-0:5.6.37-5.el6.x86_64",
            "6Server-RHSCL-2.4-6.7.Z:rh-mysql56-mysql-test-0:5.6.37-5.el6.x86_64",
            "6Server-RHSCL-2.4:rh-mysql56-mysql-0:5.6.37-5.el6.src",
            "6Server-RHSCL-2.4:rh-mysql56-mysql-0:5.6.37-5.el6.x86_64",
            "6Server-RHSCL-2.4:rh-mysql56-mysql-bench-0:5.6.37-5.el6.x86_64",
            "6Server-RHSCL-2.4:rh-mysql56-mysql-common-0:5.6.37-5.el6.x86_64",
            "6Server-RHSCL-2.4:rh-mysql56-mysql-config-0:5.6.37-5.el6.x86_64",
            "6Server-RHSCL-2.4:rh-mysql56-mysql-debuginfo-0:5.6.37-5.el6.x86_64",
            "6Server-RHSCL-2.4:rh-mysql56-mysql-devel-0:5.6.37-5.el6.x86_64",
            "6Server-RHSCL-2.4:rh-mysql56-mysql-errmsg-0:5.6.37-5.el6.x86_64",
            "6Server-RHSCL-2.4:rh-mysql56-mysql-server-0:5.6.37-5.el6.x86_64",
            "6Server-RHSCL-2.4:rh-mysql56-mysql-test-0:5.6.37-5.el6.x86_64",
            "6Workstation-RHSCL-2.4:rh-mysql56-mysql-0:5.6.37-5.el6.src",
            "6Workstation-RHSCL-2.4:rh-mysql56-mysql-0:5.6.37-5.el6.x86_64",
            "6Workstation-RHSCL-2.4:rh-mysql56-mysql-bench-0:5.6.37-5.el6.x86_64",
            "6Workstation-RHSCL-2.4:rh-mysql56-mysql-common-0:5.6.37-5.el6.x86_64",
            "6Workstation-RHSCL-2.4:rh-mysql56-mysql-config-0:5.6.37-5.el6.x86_64",
            "6Workstation-RHSCL-2.4:rh-mysql56-mysql-debuginfo-0:5.6.37-5.el6.x86_64",
            "6Workstation-RHSCL-2.4:rh-mysql56-mysql-devel-0:5.6.37-5.el6.x86_64",
            "6Workstation-RHSCL-2.4:rh-mysql56-mysql-errmsg-0:5.6.37-5.el6.x86_64",
            "6Workstation-RHSCL-2.4:rh-mysql56-mysql-server-0:5.6.37-5.el6.x86_64",
            "6Workstation-RHSCL-2.4:rh-mysql56-mysql-test-0:5.6.37-5.el6.x86_64",
            "7Server-RHSCL-2.4-7.3.Z:rh-mysql56-mysql-0:5.6.37-5.el7.src",
            "7Server-RHSCL-2.4-7.3.Z:rh-mysql56-mysql-0:5.6.37-5.el7.x86_64",
            "7Server-RHSCL-2.4-7.3.Z:rh-mysql56-mysql-bench-0:5.6.37-5.el7.x86_64",
            "7Server-RHSCL-2.4-7.3.Z:rh-mysql56-mysql-common-0:5.6.37-5.el7.x86_64",
            "7Server-RHSCL-2.4-7.3.Z:rh-mysql56-mysql-config-0:5.6.37-5.el7.x86_64",
            "7Server-RHSCL-2.4-7.3.Z:rh-mysql56-mysql-debuginfo-0:5.6.37-5.el7.x86_64",
            "7Server-RHSCL-2.4-7.3.Z:rh-mysql56-mysql-devel-0:5.6.37-5.el7.x86_64",
            "7Server-RHSCL-2.4-7.3.Z:rh-mysql56-mysql-errmsg-0:5.6.37-5.el7.x86_64",
            "7Server-RHSCL-2.4-7.3.Z:rh-mysql56-mysql-server-0:5.6.37-5.el7.x86_64",
            "7Server-RHSCL-2.4-7.3.Z:rh-mysql56-mysql-test-0:5.6.37-5.el7.x86_64",
            "7Server-RHSCL-2.4:rh-mysql56-mysql-0:5.6.37-5.el7.src",
            "7Server-RHSCL-2.4:rh-mysql56-mysql-0:5.6.37-5.el7.x86_64",
            "7Server-RHSCL-2.4:rh-mysql56-mysql-bench-0:5.6.37-5.el7.x86_64",
            "7Server-RHSCL-2.4:rh-mysql56-mysql-common-0:5.6.37-5.el7.x86_64",
            "7Server-RHSCL-2.4:rh-mysql56-mysql-config-0:5.6.37-5.el7.x86_64",
            "7Server-RHSCL-2.4:rh-mysql56-mysql-debuginfo-0:5.6.37-5.el7.x86_64",
            "7Server-RHSCL-2.4:rh-mysql56-mysql-devel-0:5.6.37-5.el7.x86_64",
            "7Server-RHSCL-2.4:rh-mysql56-mysql-errmsg-0:5.6.37-5.el7.x86_64",
            "7Server-RHSCL-2.4:rh-mysql56-mysql-server-0:5.6.37-5.el7.x86_64",
            "7Server-RHSCL-2.4:rh-mysql56-mysql-test-0:5.6.37-5.el7.x86_64",
            "7Workstation-RHSCL-2.4:rh-mysql56-mysql-0:5.6.37-5.el7.src",
            "7Workstation-RHSCL-2.4:rh-mysql56-mysql-0:5.6.37-5.el7.x86_64",
            "7Workstation-RHSCL-2.4:rh-mysql56-mysql-bench-0:5.6.37-5.el7.x86_64",
            "7Workstation-RHSCL-2.4:rh-mysql56-mysql-common-0:5.6.37-5.el7.x86_64",
            "7Workstation-RHSCL-2.4:rh-mysql56-mysql-config-0:5.6.37-5.el7.x86_64",
            "7Workstation-RHSCL-2.4:rh-mysql56-mysql-debuginfo-0:5.6.37-5.el7.x86_64",
            "7Workstation-RHSCL-2.4:rh-mysql56-mysql-devel-0:5.6.37-5.el7.x86_64",
            "7Workstation-RHSCL-2.4:rh-mysql56-mysql-errmsg-0:5.6.37-5.el7.x86_64",
            "7Workstation-RHSCL-2.4:rh-mysql56-mysql-server-0:5.6.37-5.el7.x86_64",
            "7Workstation-RHSCL-2.4:rh-mysql56-mysql-test-0:5.6.37-5.el7.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Moderate"
        }
      ],
      "title": "mysql: incorrect enforcement of ssl-mode=REQUIRED in MySQL 5.5 and 5.6"
    },
    {
      "cve": "CVE-2017-3308",
      "discovery_date": "2017-04-19T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "1443358"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: DML). Supported versions that are affected are 5.5.54 and earlier, 5.6.35 and earlier and 5.7.17 and earlier. Easily \"exploitable\" vulnerability allows low privileged attacker with network access via multiple protocols to compromise MySQL Server. While the vulnerability is in MySQL Server, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.0 Base Score 7.7 (Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H).",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "mysql: Server: DML unspecified vulnerability (CPU Apr 2017)",
          "title": "Vulnerability summary"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "6Server-RHSCL-2.4-6.7.Z:rh-mysql56-mysql-0:5.6.37-5.el6.src",
          "6Server-RHSCL-2.4-6.7.Z:rh-mysql56-mysql-0:5.6.37-5.el6.x86_64",
          "6Server-RHSCL-2.4-6.7.Z:rh-mysql56-mysql-bench-0:5.6.37-5.el6.x86_64",
          "6Server-RHSCL-2.4-6.7.Z:rh-mysql56-mysql-common-0:5.6.37-5.el6.x86_64",
          "6Server-RHSCL-2.4-6.7.Z:rh-mysql56-mysql-config-0:5.6.37-5.el6.x86_64",
          "6Server-RHSCL-2.4-6.7.Z:rh-mysql56-mysql-debuginfo-0:5.6.37-5.el6.x86_64",
          "6Server-RHSCL-2.4-6.7.Z:rh-mysql56-mysql-devel-0:5.6.37-5.el6.x86_64",
          "6Server-RHSCL-2.4-6.7.Z:rh-mysql56-mysql-errmsg-0:5.6.37-5.el6.x86_64",
          "6Server-RHSCL-2.4-6.7.Z:rh-mysql56-mysql-server-0:5.6.37-5.el6.x86_64",
          "6Server-RHSCL-2.4-6.7.Z:rh-mysql56-mysql-test-0:5.6.37-5.el6.x86_64",
          "6Server-RHSCL-2.4:rh-mysql56-mysql-0:5.6.37-5.el6.src",
          "6Server-RHSCL-2.4:rh-mysql56-mysql-0:5.6.37-5.el6.x86_64",
          "6Server-RHSCL-2.4:rh-mysql56-mysql-bench-0:5.6.37-5.el6.x86_64",
          "6Server-RHSCL-2.4:rh-mysql56-mysql-common-0:5.6.37-5.el6.x86_64",
          "6Server-RHSCL-2.4:rh-mysql56-mysql-config-0:5.6.37-5.el6.x86_64",
          "6Server-RHSCL-2.4:rh-mysql56-mysql-debuginfo-0:5.6.37-5.el6.x86_64",
          "6Server-RHSCL-2.4:rh-mysql56-mysql-devel-0:5.6.37-5.el6.x86_64",
          "6Server-RHSCL-2.4:rh-mysql56-mysql-errmsg-0:5.6.37-5.el6.x86_64",
          "6Server-RHSCL-2.4:rh-mysql56-mysql-server-0:5.6.37-5.el6.x86_64",
          "6Server-RHSCL-2.4:rh-mysql56-mysql-test-0:5.6.37-5.el6.x86_64",
          "6Workstation-RHSCL-2.4:rh-mysql56-mysql-0:5.6.37-5.el6.src",
          "6Workstation-RHSCL-2.4:rh-mysql56-mysql-0:5.6.37-5.el6.x86_64",
          "6Workstation-RHSCL-2.4:rh-mysql56-mysql-bench-0:5.6.37-5.el6.x86_64",
          "6Workstation-RHSCL-2.4:rh-mysql56-mysql-common-0:5.6.37-5.el6.x86_64",
          "6Workstation-RHSCL-2.4:rh-mysql56-mysql-config-0:5.6.37-5.el6.x86_64",
          "6Workstation-RHSCL-2.4:rh-mysql56-mysql-debuginfo-0:5.6.37-5.el6.x86_64",
          "6Workstation-RHSCL-2.4:rh-mysql56-mysql-devel-0:5.6.37-5.el6.x86_64",
          "6Workstation-RHSCL-2.4:rh-mysql56-mysql-errmsg-0:5.6.37-5.el6.x86_64",
          "6Workstation-RHSCL-2.4:rh-mysql56-mysql-server-0:5.6.37-5.el6.x86_64",
          "6Workstation-RHSCL-2.4:rh-mysql56-mysql-test-0:5.6.37-5.el6.x86_64",
          "7Server-RHSCL-2.4-7.3.Z:rh-mysql56-mysql-0:5.6.37-5.el7.src",
          "7Server-RHSCL-2.4-7.3.Z:rh-mysql56-mysql-0:5.6.37-5.el7.x86_64",
          "7Server-RHSCL-2.4-7.3.Z:rh-mysql56-mysql-bench-0:5.6.37-5.el7.x86_64",
          "7Server-RHSCL-2.4-7.3.Z:rh-mysql56-mysql-common-0:5.6.37-5.el7.x86_64",
          "7Server-RHSCL-2.4-7.3.Z:rh-mysql56-mysql-config-0:5.6.37-5.el7.x86_64",
          "7Server-RHSCL-2.4-7.3.Z:rh-mysql56-mysql-debuginfo-0:5.6.37-5.el7.x86_64",
          "7Server-RHSCL-2.4-7.3.Z:rh-mysql56-mysql-devel-0:5.6.37-5.el7.x86_64",
          "7Server-RHSCL-2.4-7.3.Z:rh-mysql56-mysql-errmsg-0:5.6.37-5.el7.x86_64",
          "7Server-RHSCL-2.4-7.3.Z:rh-mysql56-mysql-server-0:5.6.37-5.el7.x86_64",
          "7Server-RHSCL-2.4-7.3.Z:rh-mysql56-mysql-test-0:5.6.37-5.el7.x86_64",
          "7Server-RHSCL-2.4:rh-mysql56-mysql-0:5.6.37-5.el7.src",
          "7Server-RHSCL-2.4:rh-mysql56-mysql-0:5.6.37-5.el7.x86_64",
          "7Server-RHSCL-2.4:rh-mysql56-mysql-bench-0:5.6.37-5.el7.x86_64",
          "7Server-RHSCL-2.4:rh-mysql56-mysql-common-0:5.6.37-5.el7.x86_64",
          "7Server-RHSCL-2.4:rh-mysql56-mysql-config-0:5.6.37-5.el7.x86_64",
          "7Server-RHSCL-2.4:rh-mysql56-mysql-debuginfo-0:5.6.37-5.el7.x86_64",
          "7Server-RHSCL-2.4:rh-mysql56-mysql-devel-0:5.6.37-5.el7.x86_64",
          "7Server-RHSCL-2.4:rh-mysql56-mysql-errmsg-0:5.6.37-5.el7.x86_64",
          "7Server-RHSCL-2.4:rh-mysql56-mysql-server-0:5.6.37-5.el7.x86_64",
          "7Server-RHSCL-2.4:rh-mysql56-mysql-test-0:5.6.37-5.el7.x86_64",
          "7Workstation-RHSCL-2.4:rh-mysql56-mysql-0:5.6.37-5.el7.src",
          "7Workstation-RHSCL-2.4:rh-mysql56-mysql-0:5.6.37-5.el7.x86_64",
          "7Workstation-RHSCL-2.4:rh-mysql56-mysql-bench-0:5.6.37-5.el7.x86_64",
          "7Workstation-RHSCL-2.4:rh-mysql56-mysql-common-0:5.6.37-5.el7.x86_64",
          "7Workstation-RHSCL-2.4:rh-mysql56-mysql-config-0:5.6.37-5.el7.x86_64",
          "7Workstation-RHSCL-2.4:rh-mysql56-mysql-debuginfo-0:5.6.37-5.el7.x86_64",
          "7Workstation-RHSCL-2.4:rh-mysql56-mysql-devel-0:5.6.37-5.el7.x86_64",
          "7Workstation-RHSCL-2.4:rh-mysql56-mysql-errmsg-0:5.6.37-5.el7.x86_64",
          "7Workstation-RHSCL-2.4:rh-mysql56-mysql-server-0:5.6.37-5.el7.x86_64",
          "7Workstation-RHSCL-2.4:rh-mysql56-mysql-test-0:5.6.37-5.el7.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2017-3308"
        },
        {
          "category": "external",
          "summary": "RHBZ#1443358",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1443358"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2017-3308",
          "url": "https://www.cve.org/CVERecord?id=CVE-2017-3308"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2017-3308",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2017-3308"
        },
        {
          "category": "external",
          "summary": "http://www.oracle.com/technetwork/security-advisory/cpuapr2017-3236618.html#AppendixMSQL",
          "url": "http://www.oracle.com/technetwork/security-advisory/cpuapr2017-3236618.html#AppendixMSQL"
        }
      ],
      "release_date": "2017-04-19T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2017-09-21T07:42:12+00:00",
          "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAfter installing this update, the MySQL server daemon (mysqld) will be restarted automatically.",
          "product_ids": [
            "6Server-RHSCL-2.4-6.7.Z:rh-mysql56-mysql-0:5.6.37-5.el6.src",
            "6Server-RHSCL-2.4-6.7.Z:rh-mysql56-mysql-0:5.6.37-5.el6.x86_64",
            "6Server-RHSCL-2.4-6.7.Z:rh-mysql56-mysql-bench-0:5.6.37-5.el6.x86_64",
            "6Server-RHSCL-2.4-6.7.Z:rh-mysql56-mysql-common-0:5.6.37-5.el6.x86_64",
            "6Server-RHSCL-2.4-6.7.Z:rh-mysql56-mysql-config-0:5.6.37-5.el6.x86_64",
            "6Server-RHSCL-2.4-6.7.Z:rh-mysql56-mysql-debuginfo-0:5.6.37-5.el6.x86_64",
            "6Server-RHSCL-2.4-6.7.Z:rh-mysql56-mysql-devel-0:5.6.37-5.el6.x86_64",
            "6Server-RHSCL-2.4-6.7.Z:rh-mysql56-mysql-errmsg-0:5.6.37-5.el6.x86_64",
            "6Server-RHSCL-2.4-6.7.Z:rh-mysql56-mysql-server-0:5.6.37-5.el6.x86_64",
            "6Server-RHSCL-2.4-6.7.Z:rh-mysql56-mysql-test-0:5.6.37-5.el6.x86_64",
            "6Server-RHSCL-2.4:rh-mysql56-mysql-0:5.6.37-5.el6.src",
            "6Server-RHSCL-2.4:rh-mysql56-mysql-0:5.6.37-5.el6.x86_64",
            "6Server-RHSCL-2.4:rh-mysql56-mysql-bench-0:5.6.37-5.el6.x86_64",
            "6Server-RHSCL-2.4:rh-mysql56-mysql-common-0:5.6.37-5.el6.x86_64",
            "6Server-RHSCL-2.4:rh-mysql56-mysql-config-0:5.6.37-5.el6.x86_64",
            "6Server-RHSCL-2.4:rh-mysql56-mysql-debuginfo-0:5.6.37-5.el6.x86_64",
            "6Server-RHSCL-2.4:rh-mysql56-mysql-devel-0:5.6.37-5.el6.x86_64",
            "6Server-RHSCL-2.4:rh-mysql56-mysql-errmsg-0:5.6.37-5.el6.x86_64",
            "6Server-RHSCL-2.4:rh-mysql56-mysql-server-0:5.6.37-5.el6.x86_64",
            "6Server-RHSCL-2.4:rh-mysql56-mysql-test-0:5.6.37-5.el6.x86_64",
            "6Workstation-RHSCL-2.4:rh-mysql56-mysql-0:5.6.37-5.el6.src",
            "6Workstation-RHSCL-2.4:rh-mysql56-mysql-0:5.6.37-5.el6.x86_64",
            "6Workstation-RHSCL-2.4:rh-mysql56-mysql-bench-0:5.6.37-5.el6.x86_64",
            "6Workstation-RHSCL-2.4:rh-mysql56-mysql-common-0:5.6.37-5.el6.x86_64",
            "6Workstation-RHSCL-2.4:rh-mysql56-mysql-config-0:5.6.37-5.el6.x86_64",
            "6Workstation-RHSCL-2.4:rh-mysql56-mysql-debuginfo-0:5.6.37-5.el6.x86_64",
            "6Workstation-RHSCL-2.4:rh-mysql56-mysql-devel-0:5.6.37-5.el6.x86_64",
            "6Workstation-RHSCL-2.4:rh-mysql56-mysql-errmsg-0:5.6.37-5.el6.x86_64",
            "6Workstation-RHSCL-2.4:rh-mysql56-mysql-server-0:5.6.37-5.el6.x86_64",
            "6Workstation-RHSCL-2.4:rh-mysql56-mysql-test-0:5.6.37-5.el6.x86_64",
            "7Server-RHSCL-2.4-7.3.Z:rh-mysql56-mysql-0:5.6.37-5.el7.src",
            "7Server-RHSCL-2.4-7.3.Z:rh-mysql56-mysql-0:5.6.37-5.el7.x86_64",
            "7Server-RHSCL-2.4-7.3.Z:rh-mysql56-mysql-bench-0:5.6.37-5.el7.x86_64",
            "7Server-RHSCL-2.4-7.3.Z:rh-mysql56-mysql-common-0:5.6.37-5.el7.x86_64",
            "7Server-RHSCL-2.4-7.3.Z:rh-mysql56-mysql-config-0:5.6.37-5.el7.x86_64",
            "7Server-RHSCL-2.4-7.3.Z:rh-mysql56-mysql-debuginfo-0:5.6.37-5.el7.x86_64",
            "7Server-RHSCL-2.4-7.3.Z:rh-mysql56-mysql-devel-0:5.6.37-5.el7.x86_64",
            "7Server-RHSCL-2.4-7.3.Z:rh-mysql56-mysql-errmsg-0:5.6.37-5.el7.x86_64",
            "7Server-RHSCL-2.4-7.3.Z:rh-mysql56-mysql-server-0:5.6.37-5.el7.x86_64",
            "7Server-RHSCL-2.4-7.3.Z:rh-mysql56-mysql-test-0:5.6.37-5.el7.x86_64",
            "7Server-RHSCL-2.4:rh-mysql56-mysql-0:5.6.37-5.el7.src",
            "7Server-RHSCL-2.4:rh-mysql56-mysql-0:5.6.37-5.el7.x86_64",
            "7Server-RHSCL-2.4:rh-mysql56-mysql-bench-0:5.6.37-5.el7.x86_64",
            "7Server-RHSCL-2.4:rh-mysql56-mysql-common-0:5.6.37-5.el7.x86_64",
            "7Server-RHSCL-2.4:rh-mysql56-mysql-config-0:5.6.37-5.el7.x86_64",
            "7Server-RHSCL-2.4:rh-mysql56-mysql-debuginfo-0:5.6.37-5.el7.x86_64",
            "7Server-RHSCL-2.4:rh-mysql56-mysql-devel-0:5.6.37-5.el7.x86_64",
            "7Server-RHSCL-2.4:rh-mysql56-mysql-errmsg-0:5.6.37-5.el7.x86_64",
            "7Server-RHSCL-2.4:rh-mysql56-mysql-server-0:5.6.37-5.el7.x86_64",
            "7Server-RHSCL-2.4:rh-mysql56-mysql-test-0:5.6.37-5.el7.x86_64",
            "7Workstation-RHSCL-2.4:rh-mysql56-mysql-0:5.6.37-5.el7.src",
            "7Workstation-RHSCL-2.4:rh-mysql56-mysql-0:5.6.37-5.el7.x86_64",
            "7Workstation-RHSCL-2.4:rh-mysql56-mysql-bench-0:5.6.37-5.el7.x86_64",
            "7Workstation-RHSCL-2.4:rh-mysql56-mysql-common-0:5.6.37-5.el7.x86_64",
            "7Workstation-RHSCL-2.4:rh-mysql56-mysql-config-0:5.6.37-5.el7.x86_64",
            "7Workstation-RHSCL-2.4:rh-mysql56-mysql-debuginfo-0:5.6.37-5.el7.x86_64",
            "7Workstation-RHSCL-2.4:rh-mysql56-mysql-devel-0:5.6.37-5.el7.x86_64",
            "7Workstation-RHSCL-2.4:rh-mysql56-mysql-errmsg-0:5.6.37-5.el7.x86_64",
            "7Workstation-RHSCL-2.4:rh-mysql56-mysql-server-0:5.6.37-5.el7.x86_64",
            "7Workstation-RHSCL-2.4:rh-mysql56-mysql-test-0:5.6.37-5.el7.x86_64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2017:2787"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 7.7,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "NONE",
            "integrityImpact": "NONE",
            "privilegesRequired": "LOW",
            "scope": "CHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H",
            "version": "3.0"
          },
          "products": [
            "6Server-RHSCL-2.4-6.7.Z:rh-mysql56-mysql-0:5.6.37-5.el6.src",
            "6Server-RHSCL-2.4-6.7.Z:rh-mysql56-mysql-0:5.6.37-5.el6.x86_64",
            "6Server-RHSCL-2.4-6.7.Z:rh-mysql56-mysql-bench-0:5.6.37-5.el6.x86_64",
            "6Server-RHSCL-2.4-6.7.Z:rh-mysql56-mysql-common-0:5.6.37-5.el6.x86_64",
            "6Server-RHSCL-2.4-6.7.Z:rh-mysql56-mysql-config-0:5.6.37-5.el6.x86_64",
            "6Server-RHSCL-2.4-6.7.Z:rh-mysql56-mysql-debuginfo-0:5.6.37-5.el6.x86_64",
            "6Server-RHSCL-2.4-6.7.Z:rh-mysql56-mysql-devel-0:5.6.37-5.el6.x86_64",
            "6Server-RHSCL-2.4-6.7.Z:rh-mysql56-mysql-errmsg-0:5.6.37-5.el6.x86_64",
            "6Server-RHSCL-2.4-6.7.Z:rh-mysql56-mysql-server-0:5.6.37-5.el6.x86_64",
            "6Server-RHSCL-2.4-6.7.Z:rh-mysql56-mysql-test-0:5.6.37-5.el6.x86_64",
            "6Server-RHSCL-2.4:rh-mysql56-mysql-0:5.6.37-5.el6.src",
            "6Server-RHSCL-2.4:rh-mysql56-mysql-0:5.6.37-5.el6.x86_64",
            "6Server-RHSCL-2.4:rh-mysql56-mysql-bench-0:5.6.37-5.el6.x86_64",
            "6Server-RHSCL-2.4:rh-mysql56-mysql-common-0:5.6.37-5.el6.x86_64",
            "6Server-RHSCL-2.4:rh-mysql56-mysql-config-0:5.6.37-5.el6.x86_64",
            "6Server-RHSCL-2.4:rh-mysql56-mysql-debuginfo-0:5.6.37-5.el6.x86_64",
            "6Server-RHSCL-2.4:rh-mysql56-mysql-devel-0:5.6.37-5.el6.x86_64",
            "6Server-RHSCL-2.4:rh-mysql56-mysql-errmsg-0:5.6.37-5.el6.x86_64",
            "6Server-RHSCL-2.4:rh-mysql56-mysql-server-0:5.6.37-5.el6.x86_64",
            "6Server-RHSCL-2.4:rh-mysql56-mysql-test-0:5.6.37-5.el6.x86_64",
            "6Workstation-RHSCL-2.4:rh-mysql56-mysql-0:5.6.37-5.el6.src",
            "6Workstation-RHSCL-2.4:rh-mysql56-mysql-0:5.6.37-5.el6.x86_64",
            "6Workstation-RHSCL-2.4:rh-mysql56-mysql-bench-0:5.6.37-5.el6.x86_64",
            "6Workstation-RHSCL-2.4:rh-mysql56-mysql-common-0:5.6.37-5.el6.x86_64",
            "6Workstation-RHSCL-2.4:rh-mysql56-mysql-config-0:5.6.37-5.el6.x86_64",
            "6Workstation-RHSCL-2.4:rh-mysql56-mysql-debuginfo-0:5.6.37-5.el6.x86_64",
            "6Workstation-RHSCL-2.4:rh-mysql56-mysql-devel-0:5.6.37-5.el6.x86_64",
            "6Workstation-RHSCL-2.4:rh-mysql56-mysql-errmsg-0:5.6.37-5.el6.x86_64",
            "6Workstation-RHSCL-2.4:rh-mysql56-mysql-server-0:5.6.37-5.el6.x86_64",
            "6Workstation-RHSCL-2.4:rh-mysql56-mysql-test-0:5.6.37-5.el6.x86_64",
            "7Server-RHSCL-2.4-7.3.Z:rh-mysql56-mysql-0:5.6.37-5.el7.src",
            "7Server-RHSCL-2.4-7.3.Z:rh-mysql56-mysql-0:5.6.37-5.el7.x86_64",
            "7Server-RHSCL-2.4-7.3.Z:rh-mysql56-mysql-bench-0:5.6.37-5.el7.x86_64",
            "7Server-RHSCL-2.4-7.3.Z:rh-mysql56-mysql-common-0:5.6.37-5.el7.x86_64",
            "7Server-RHSCL-2.4-7.3.Z:rh-mysql56-mysql-config-0:5.6.37-5.el7.x86_64",
            "7Server-RHSCL-2.4-7.3.Z:rh-mysql56-mysql-debuginfo-0:5.6.37-5.el7.x86_64",
            "7Server-RHSCL-2.4-7.3.Z:rh-mysql56-mysql-devel-0:5.6.37-5.el7.x86_64",
            "7Server-RHSCL-2.4-7.3.Z:rh-mysql56-mysql-errmsg-0:5.6.37-5.el7.x86_64",
            "7Server-RHSCL-2.4-7.3.Z:rh-mysql56-mysql-server-0:5.6.37-5.el7.x86_64",
            "7Server-RHSCL-2.4-7.3.Z:rh-mysql56-mysql-test-0:5.6.37-5.el7.x86_64",
            "7Server-RHSCL-2.4:rh-mysql56-mysql-0:5.6.37-5.el7.src",
            "7Server-RHSCL-2.4:rh-mysql56-mysql-0:5.6.37-5.el7.x86_64",
            "7Server-RHSCL-2.4:rh-mysql56-mysql-bench-0:5.6.37-5.el7.x86_64",
            "7Server-RHSCL-2.4:rh-mysql56-mysql-common-0:5.6.37-5.el7.x86_64",
            "7Server-RHSCL-2.4:rh-mysql56-mysql-config-0:5.6.37-5.el7.x86_64",
            "7Server-RHSCL-2.4:rh-mysql56-mysql-debuginfo-0:5.6.37-5.el7.x86_64",
            "7Server-RHSCL-2.4:rh-mysql56-mysql-devel-0:5.6.37-5.el7.x86_64",
            "7Server-RHSCL-2.4:rh-mysql56-mysql-errmsg-0:5.6.37-5.el7.x86_64",
            "7Server-RHSCL-2.4:rh-mysql56-mysql-server-0:5.6.37-5.el7.x86_64",
            "7Server-RHSCL-2.4:rh-mysql56-mysql-test-0:5.6.37-5.el7.x86_64",
            "7Workstation-RHSCL-2.4:rh-mysql56-mysql-0:5.6.37-5.el7.src",
            "7Workstation-RHSCL-2.4:rh-mysql56-mysql-0:5.6.37-5.el7.x86_64",
            "7Workstation-RHSCL-2.4:rh-mysql56-mysql-bench-0:5.6.37-5.el7.x86_64",
            "7Workstation-RHSCL-2.4:rh-mysql56-mysql-common-0:5.6.37-5.el7.x86_64",
            "7Workstation-RHSCL-2.4:rh-mysql56-mysql-config-0:5.6.37-5.el7.x86_64",
            "7Workstation-RHSCL-2.4:rh-mysql56-mysql-debuginfo-0:5.6.37-5.el7.x86_64",
            "7Workstation-RHSCL-2.4:rh-mysql56-mysql-devel-0:5.6.37-5.el7.x86_64",
            "7Workstation-RHSCL-2.4:rh-mysql56-mysql-errmsg-0:5.6.37-5.el7.x86_64",
            "7Workstation-RHSCL-2.4:rh-mysql56-mysql-server-0:5.6.37-5.el7.x86_64",
            "7Workstation-RHSCL-2.4:rh-mysql56-mysql-test-0:5.6.37-5.el7.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Moderate"
        }
      ],
      "title": "mysql: Server: DML unspecified vulnerability (CPU Apr 2017)"
    },
    {
      "cve": "CVE-2017-3309",
      "discovery_date": "2017-04-19T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "1443359"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Optimizer). Supported versions that are affected are 5.5.54 and earlier, 5.6.35 and earlier and 5.7.17 and earlier. Easily \"exploitable\" vulnerability allows low privileged attacker with network access via multiple protocols to compromise MySQL Server. While the vulnerability is in MySQL Server, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.0 Base Score 7.7 (Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H).",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "mysql: Server: Optimizer unspecified vulnerability (CPU Apr 2017)",
          "title": "Vulnerability summary"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "6Server-RHSCL-2.4-6.7.Z:rh-mysql56-mysql-0:5.6.37-5.el6.src",
          "6Server-RHSCL-2.4-6.7.Z:rh-mysql56-mysql-0:5.6.37-5.el6.x86_64",
          "6Server-RHSCL-2.4-6.7.Z:rh-mysql56-mysql-bench-0:5.6.37-5.el6.x86_64",
          "6Server-RHSCL-2.4-6.7.Z:rh-mysql56-mysql-common-0:5.6.37-5.el6.x86_64",
          "6Server-RHSCL-2.4-6.7.Z:rh-mysql56-mysql-config-0:5.6.37-5.el6.x86_64",
          "6Server-RHSCL-2.4-6.7.Z:rh-mysql56-mysql-debuginfo-0:5.6.37-5.el6.x86_64",
          "6Server-RHSCL-2.4-6.7.Z:rh-mysql56-mysql-devel-0:5.6.37-5.el6.x86_64",
          "6Server-RHSCL-2.4-6.7.Z:rh-mysql56-mysql-errmsg-0:5.6.37-5.el6.x86_64",
          "6Server-RHSCL-2.4-6.7.Z:rh-mysql56-mysql-server-0:5.6.37-5.el6.x86_64",
          "6Server-RHSCL-2.4-6.7.Z:rh-mysql56-mysql-test-0:5.6.37-5.el6.x86_64",
          "6Server-RHSCL-2.4:rh-mysql56-mysql-0:5.6.37-5.el6.src",
          "6Server-RHSCL-2.4:rh-mysql56-mysql-0:5.6.37-5.el6.x86_64",
          "6Server-RHSCL-2.4:rh-mysql56-mysql-bench-0:5.6.37-5.el6.x86_64",
          "6Server-RHSCL-2.4:rh-mysql56-mysql-common-0:5.6.37-5.el6.x86_64",
          "6Server-RHSCL-2.4:rh-mysql56-mysql-config-0:5.6.37-5.el6.x86_64",
          "6Server-RHSCL-2.4:rh-mysql56-mysql-debuginfo-0:5.6.37-5.el6.x86_64",
          "6Server-RHSCL-2.4:rh-mysql56-mysql-devel-0:5.6.37-5.el6.x86_64",
          "6Server-RHSCL-2.4:rh-mysql56-mysql-errmsg-0:5.6.37-5.el6.x86_64",
          "6Server-RHSCL-2.4:rh-mysql56-mysql-server-0:5.6.37-5.el6.x86_64",
          "6Server-RHSCL-2.4:rh-mysql56-mysql-test-0:5.6.37-5.el6.x86_64",
          "6Workstation-RHSCL-2.4:rh-mysql56-mysql-0:5.6.37-5.el6.src",
          "6Workstation-RHSCL-2.4:rh-mysql56-mysql-0:5.6.37-5.el6.x86_64",
          "6Workstation-RHSCL-2.4:rh-mysql56-mysql-bench-0:5.6.37-5.el6.x86_64",
          "6Workstation-RHSCL-2.4:rh-mysql56-mysql-common-0:5.6.37-5.el6.x86_64",
          "6Workstation-RHSCL-2.4:rh-mysql56-mysql-config-0:5.6.37-5.el6.x86_64",
          "6Workstation-RHSCL-2.4:rh-mysql56-mysql-debuginfo-0:5.6.37-5.el6.x86_64",
          "6Workstation-RHSCL-2.4:rh-mysql56-mysql-devel-0:5.6.37-5.el6.x86_64",
          "6Workstation-RHSCL-2.4:rh-mysql56-mysql-errmsg-0:5.6.37-5.el6.x86_64",
          "6Workstation-RHSCL-2.4:rh-mysql56-mysql-server-0:5.6.37-5.el6.x86_64",
          "6Workstation-RHSCL-2.4:rh-mysql56-mysql-test-0:5.6.37-5.el6.x86_64",
          "7Server-RHSCL-2.4-7.3.Z:rh-mysql56-mysql-0:5.6.37-5.el7.src",
          "7Server-RHSCL-2.4-7.3.Z:rh-mysql56-mysql-0:5.6.37-5.el7.x86_64",
          "7Server-RHSCL-2.4-7.3.Z:rh-mysql56-mysql-bench-0:5.6.37-5.el7.x86_64",
          "7Server-RHSCL-2.4-7.3.Z:rh-mysql56-mysql-common-0:5.6.37-5.el7.x86_64",
          "7Server-RHSCL-2.4-7.3.Z:rh-mysql56-mysql-config-0:5.6.37-5.el7.x86_64",
          "7Server-RHSCL-2.4-7.3.Z:rh-mysql56-mysql-debuginfo-0:5.6.37-5.el7.x86_64",
          "7Server-RHSCL-2.4-7.3.Z:rh-mysql56-mysql-devel-0:5.6.37-5.el7.x86_64",
          "7Server-RHSCL-2.4-7.3.Z:rh-mysql56-mysql-errmsg-0:5.6.37-5.el7.x86_64",
          "7Server-RHSCL-2.4-7.3.Z:rh-mysql56-mysql-server-0:5.6.37-5.el7.x86_64",
          "7Server-RHSCL-2.4-7.3.Z:rh-mysql56-mysql-test-0:5.6.37-5.el7.x86_64",
          "7Server-RHSCL-2.4:rh-mysql56-mysql-0:5.6.37-5.el7.src",
          "7Server-RHSCL-2.4:rh-mysql56-mysql-0:5.6.37-5.el7.x86_64",
          "7Server-RHSCL-2.4:rh-mysql56-mysql-bench-0:5.6.37-5.el7.x86_64",
          "7Server-RHSCL-2.4:rh-mysql56-mysql-common-0:5.6.37-5.el7.x86_64",
          "7Server-RHSCL-2.4:rh-mysql56-mysql-config-0:5.6.37-5.el7.x86_64",
          "7Server-RHSCL-2.4:rh-mysql56-mysql-debuginfo-0:5.6.37-5.el7.x86_64",
          "7Server-RHSCL-2.4:rh-mysql56-mysql-devel-0:5.6.37-5.el7.x86_64",
          "7Server-RHSCL-2.4:rh-mysql56-mysql-errmsg-0:5.6.37-5.el7.x86_64",
          "7Server-RHSCL-2.4:rh-mysql56-mysql-server-0:5.6.37-5.el7.x86_64",
          "7Server-RHSCL-2.4:rh-mysql56-mysql-test-0:5.6.37-5.el7.x86_64",
          "7Workstation-RHSCL-2.4:rh-mysql56-mysql-0:5.6.37-5.el7.src",
          "7Workstation-RHSCL-2.4:rh-mysql56-mysql-0:5.6.37-5.el7.x86_64",
          "7Workstation-RHSCL-2.4:rh-mysql56-mysql-bench-0:5.6.37-5.el7.x86_64",
          "7Workstation-RHSCL-2.4:rh-mysql56-mysql-common-0:5.6.37-5.el7.x86_64",
          "7Workstation-RHSCL-2.4:rh-mysql56-mysql-config-0:5.6.37-5.el7.x86_64",
          "7Workstation-RHSCL-2.4:rh-mysql56-mysql-debuginfo-0:5.6.37-5.el7.x86_64",
          "7Workstation-RHSCL-2.4:rh-mysql56-mysql-devel-0:5.6.37-5.el7.x86_64",
          "7Workstation-RHSCL-2.4:rh-mysql56-mysql-errmsg-0:5.6.37-5.el7.x86_64",
          "7Workstation-RHSCL-2.4:rh-mysql56-mysql-server-0:5.6.37-5.el7.x86_64",
          "7Workstation-RHSCL-2.4:rh-mysql56-mysql-test-0:5.6.37-5.el7.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2017-3309"
        },
        {
          "category": "external",
          "summary": "RHBZ#1443359",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1443359"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2017-3309",
          "url": "https://www.cve.org/CVERecord?id=CVE-2017-3309"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2017-3309",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2017-3309"
        },
        {
          "category": "external",
          "summary": "http://www.oracle.com/technetwork/security-advisory/cpuapr2017-3236618.html#AppendixMSQL",
          "url": "http://www.oracle.com/technetwork/security-advisory/cpuapr2017-3236618.html#AppendixMSQL"
        }
      ],
      "release_date": "2017-04-19T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2017-09-21T07:42:12+00:00",
          "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAfter installing this update, the MySQL server daemon (mysqld) will be restarted automatically.",
          "product_ids": [
            "6Server-RHSCL-2.4-6.7.Z:rh-mysql56-mysql-0:5.6.37-5.el6.src",
            "6Server-RHSCL-2.4-6.7.Z:rh-mysql56-mysql-0:5.6.37-5.el6.x86_64",
            "6Server-RHSCL-2.4-6.7.Z:rh-mysql56-mysql-bench-0:5.6.37-5.el6.x86_64",
            "6Server-RHSCL-2.4-6.7.Z:rh-mysql56-mysql-common-0:5.6.37-5.el6.x86_64",
            "6Server-RHSCL-2.4-6.7.Z:rh-mysql56-mysql-config-0:5.6.37-5.el6.x86_64",
            "6Server-RHSCL-2.4-6.7.Z:rh-mysql56-mysql-debuginfo-0:5.6.37-5.el6.x86_64",
            "6Server-RHSCL-2.4-6.7.Z:rh-mysql56-mysql-devel-0:5.6.37-5.el6.x86_64",
            "6Server-RHSCL-2.4-6.7.Z:rh-mysql56-mysql-errmsg-0:5.6.37-5.el6.x86_64",
            "6Server-RHSCL-2.4-6.7.Z:rh-mysql56-mysql-server-0:5.6.37-5.el6.x86_64",
            "6Server-RHSCL-2.4-6.7.Z:rh-mysql56-mysql-test-0:5.6.37-5.el6.x86_64",
            "6Server-RHSCL-2.4:rh-mysql56-mysql-0:5.6.37-5.el6.src",
            "6Server-RHSCL-2.4:rh-mysql56-mysql-0:5.6.37-5.el6.x86_64",
            "6Server-RHSCL-2.4:rh-mysql56-mysql-bench-0:5.6.37-5.el6.x86_64",
            "6Server-RHSCL-2.4:rh-mysql56-mysql-common-0:5.6.37-5.el6.x86_64",
            "6Server-RHSCL-2.4:rh-mysql56-mysql-config-0:5.6.37-5.el6.x86_64",
            "6Server-RHSCL-2.4:rh-mysql56-mysql-debuginfo-0:5.6.37-5.el6.x86_64",
            "6Server-RHSCL-2.4:rh-mysql56-mysql-devel-0:5.6.37-5.el6.x86_64",
            "6Server-RHSCL-2.4:rh-mysql56-mysql-errmsg-0:5.6.37-5.el6.x86_64",
            "6Server-RHSCL-2.4:rh-mysql56-mysql-server-0:5.6.37-5.el6.x86_64",
            "6Server-RHSCL-2.4:rh-mysql56-mysql-test-0:5.6.37-5.el6.x86_64",
            "6Workstation-RHSCL-2.4:rh-mysql56-mysql-0:5.6.37-5.el6.src",
            "6Workstation-RHSCL-2.4:rh-mysql56-mysql-0:5.6.37-5.el6.x86_64",
            "6Workstation-RHSCL-2.4:rh-mysql56-mysql-bench-0:5.6.37-5.el6.x86_64",
            "6Workstation-RHSCL-2.4:rh-mysql56-mysql-common-0:5.6.37-5.el6.x86_64",
            "6Workstation-RHSCL-2.4:rh-mysql56-mysql-config-0:5.6.37-5.el6.x86_64",
            "6Workstation-RHSCL-2.4:rh-mysql56-mysql-debuginfo-0:5.6.37-5.el6.x86_64",
            "6Workstation-RHSCL-2.4:rh-mysql56-mysql-devel-0:5.6.37-5.el6.x86_64",
            "6Workstation-RHSCL-2.4:rh-mysql56-mysql-errmsg-0:5.6.37-5.el6.x86_64",
            "6Workstation-RHSCL-2.4:rh-mysql56-mysql-server-0:5.6.37-5.el6.x86_64",
            "6Workstation-RHSCL-2.4:rh-mysql56-mysql-test-0:5.6.37-5.el6.x86_64",
            "7Server-RHSCL-2.4-7.3.Z:rh-mysql56-mysql-0:5.6.37-5.el7.src",
            "7Server-RHSCL-2.4-7.3.Z:rh-mysql56-mysql-0:5.6.37-5.el7.x86_64",
            "7Server-RHSCL-2.4-7.3.Z:rh-mysql56-mysql-bench-0:5.6.37-5.el7.x86_64",
            "7Server-RHSCL-2.4-7.3.Z:rh-mysql56-mysql-common-0:5.6.37-5.el7.x86_64",
            "7Server-RHSCL-2.4-7.3.Z:rh-mysql56-mysql-config-0:5.6.37-5.el7.x86_64",
            "7Server-RHSCL-2.4-7.3.Z:rh-mysql56-mysql-debuginfo-0:5.6.37-5.el7.x86_64",
            "7Server-RHSCL-2.4-7.3.Z:rh-mysql56-mysql-devel-0:5.6.37-5.el7.x86_64",
            "7Server-RHSCL-2.4-7.3.Z:rh-mysql56-mysql-errmsg-0:5.6.37-5.el7.x86_64",
            "7Server-RHSCL-2.4-7.3.Z:rh-mysql56-mysql-server-0:5.6.37-5.el7.x86_64",
            "7Server-RHSCL-2.4-7.3.Z:rh-mysql56-mysql-test-0:5.6.37-5.el7.x86_64",
            "7Server-RHSCL-2.4:rh-mysql56-mysql-0:5.6.37-5.el7.src",
            "7Server-RHSCL-2.4:rh-mysql56-mysql-0:5.6.37-5.el7.x86_64",
            "7Server-RHSCL-2.4:rh-mysql56-mysql-bench-0:5.6.37-5.el7.x86_64",
            "7Server-RHSCL-2.4:rh-mysql56-mysql-common-0:5.6.37-5.el7.x86_64",
            "7Server-RHSCL-2.4:rh-mysql56-mysql-config-0:5.6.37-5.el7.x86_64",
            "7Server-RHSCL-2.4:rh-mysql56-mysql-debuginfo-0:5.6.37-5.el7.x86_64",
            "7Server-RHSCL-2.4:rh-mysql56-mysql-devel-0:5.6.37-5.el7.x86_64",
            "7Server-RHSCL-2.4:rh-mysql56-mysql-errmsg-0:5.6.37-5.el7.x86_64",
            "7Server-RHSCL-2.4:rh-mysql56-mysql-server-0:5.6.37-5.el7.x86_64",
            "7Server-RHSCL-2.4:rh-mysql56-mysql-test-0:5.6.37-5.el7.x86_64",
            "7Workstation-RHSCL-2.4:rh-mysql56-mysql-0:5.6.37-5.el7.src",
            "7Workstation-RHSCL-2.4:rh-mysql56-mysql-0:5.6.37-5.el7.x86_64",
            "7Workstation-RHSCL-2.4:rh-mysql56-mysql-bench-0:5.6.37-5.el7.x86_64",
            "7Workstation-RHSCL-2.4:rh-mysql56-mysql-common-0:5.6.37-5.el7.x86_64",
            "7Workstation-RHSCL-2.4:rh-mysql56-mysql-config-0:5.6.37-5.el7.x86_64",
            "7Workstation-RHSCL-2.4:rh-mysql56-mysql-debuginfo-0:5.6.37-5.el7.x86_64",
            "7Workstation-RHSCL-2.4:rh-mysql56-mysql-devel-0:5.6.37-5.el7.x86_64",
            "7Workstation-RHSCL-2.4:rh-mysql56-mysql-errmsg-0:5.6.37-5.el7.x86_64",
            "7Workstation-RHSCL-2.4:rh-mysql56-mysql-server-0:5.6.37-5.el7.x86_64",
            "7Workstation-RHSCL-2.4:rh-mysql56-mysql-test-0:5.6.37-5.el7.x86_64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2017:2787"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 7.7,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "NONE",
            "integrityImpact": "NONE",
            "privilegesRequired": "LOW",
            "scope": "CHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H",
            "version": "3.0"
          },
          "products": [
            "6Server-RHSCL-2.4-6.7.Z:rh-mysql56-mysql-0:5.6.37-5.el6.src",
            "6Server-RHSCL-2.4-6.7.Z:rh-mysql56-mysql-0:5.6.37-5.el6.x86_64",
            "6Server-RHSCL-2.4-6.7.Z:rh-mysql56-mysql-bench-0:5.6.37-5.el6.x86_64",
            "6Server-RHSCL-2.4-6.7.Z:rh-mysql56-mysql-common-0:5.6.37-5.el6.x86_64",
            "6Server-RHSCL-2.4-6.7.Z:rh-mysql56-mysql-config-0:5.6.37-5.el6.x86_64",
            "6Server-RHSCL-2.4-6.7.Z:rh-mysql56-mysql-debuginfo-0:5.6.37-5.el6.x86_64",
            "6Server-RHSCL-2.4-6.7.Z:rh-mysql56-mysql-devel-0:5.6.37-5.el6.x86_64",
            "6Server-RHSCL-2.4-6.7.Z:rh-mysql56-mysql-errmsg-0:5.6.37-5.el6.x86_64",
            "6Server-RHSCL-2.4-6.7.Z:rh-mysql56-mysql-server-0:5.6.37-5.el6.x86_64",
            "6Server-RHSCL-2.4-6.7.Z:rh-mysql56-mysql-test-0:5.6.37-5.el6.x86_64",
            "6Server-RHSCL-2.4:rh-mysql56-mysql-0:5.6.37-5.el6.src",
            "6Server-RHSCL-2.4:rh-mysql56-mysql-0:5.6.37-5.el6.x86_64",
            "6Server-RHSCL-2.4:rh-mysql56-mysql-bench-0:5.6.37-5.el6.x86_64",
            "6Server-RHSCL-2.4:rh-mysql56-mysql-common-0:5.6.37-5.el6.x86_64",
            "6Server-RHSCL-2.4:rh-mysql56-mysql-config-0:5.6.37-5.el6.x86_64",
            "6Server-RHSCL-2.4:rh-mysql56-mysql-debuginfo-0:5.6.37-5.el6.x86_64",
            "6Server-RHSCL-2.4:rh-mysql56-mysql-devel-0:5.6.37-5.el6.x86_64",
            "6Server-RHSCL-2.4:rh-mysql56-mysql-errmsg-0:5.6.37-5.el6.x86_64",
            "6Server-RHSCL-2.4:rh-mysql56-mysql-server-0:5.6.37-5.el6.x86_64",
            "6Server-RHSCL-2.4:rh-mysql56-mysql-test-0:5.6.37-5.el6.x86_64",
            "6Workstation-RHSCL-2.4:rh-mysql56-mysql-0:5.6.37-5.el6.src",
            "6Workstation-RHSCL-2.4:rh-mysql56-mysql-0:5.6.37-5.el6.x86_64",
            "6Workstation-RHSCL-2.4:rh-mysql56-mysql-bench-0:5.6.37-5.el6.x86_64",
            "6Workstation-RHSCL-2.4:rh-mysql56-mysql-common-0:5.6.37-5.el6.x86_64",
            "6Workstation-RHSCL-2.4:rh-mysql56-mysql-config-0:5.6.37-5.el6.x86_64",
            "6Workstation-RHSCL-2.4:rh-mysql56-mysql-debuginfo-0:5.6.37-5.el6.x86_64",
            "6Workstation-RHSCL-2.4:rh-mysql56-mysql-devel-0:5.6.37-5.el6.x86_64",
            "6Workstation-RHSCL-2.4:rh-mysql56-mysql-errmsg-0:5.6.37-5.el6.x86_64",
            "6Workstation-RHSCL-2.4:rh-mysql56-mysql-server-0:5.6.37-5.el6.x86_64",
            "6Workstation-RHSCL-2.4:rh-mysql56-mysql-test-0:5.6.37-5.el6.x86_64",
            "7Server-RHSCL-2.4-7.3.Z:rh-mysql56-mysql-0:5.6.37-5.el7.src",
            "7Server-RHSCL-2.4-7.3.Z:rh-mysql56-mysql-0:5.6.37-5.el7.x86_64",
            "7Server-RHSCL-2.4-7.3.Z:rh-mysql56-mysql-bench-0:5.6.37-5.el7.x86_64",
            "7Server-RHSCL-2.4-7.3.Z:rh-mysql56-mysql-common-0:5.6.37-5.el7.x86_64",
            "7Server-RHSCL-2.4-7.3.Z:rh-mysql56-mysql-config-0:5.6.37-5.el7.x86_64",
            "7Server-RHSCL-2.4-7.3.Z:rh-mysql56-mysql-debuginfo-0:5.6.37-5.el7.x86_64",
            "7Server-RHSCL-2.4-7.3.Z:rh-mysql56-mysql-devel-0:5.6.37-5.el7.x86_64",
            "7Server-RHSCL-2.4-7.3.Z:rh-mysql56-mysql-errmsg-0:5.6.37-5.el7.x86_64",
            "7Server-RHSCL-2.4-7.3.Z:rh-mysql56-mysql-server-0:5.6.37-5.el7.x86_64",
            "7Server-RHSCL-2.4-7.3.Z:rh-mysql56-mysql-test-0:5.6.37-5.el7.x86_64",
            "7Server-RHSCL-2.4:rh-mysql56-mysql-0:5.6.37-5.el7.src",
            "7Server-RHSCL-2.4:rh-mysql56-mysql-0:5.6.37-5.el7.x86_64",
            "7Server-RHSCL-2.4:rh-mysql56-mysql-bench-0:5.6.37-5.el7.x86_64",
            "7Server-RHSCL-2.4:rh-mysql56-mysql-common-0:5.6.37-5.el7.x86_64",
            "7Server-RHSCL-2.4:rh-mysql56-mysql-config-0:5.6.37-5.el7.x86_64",
            "7Server-RHSCL-2.4:rh-mysql56-mysql-debuginfo-0:5.6.37-5.el7.x86_64",
            "7Server-RHSCL-2.4:rh-mysql56-mysql-devel-0:5.6.37-5.el7.x86_64",
            "7Server-RHSCL-2.4:rh-mysql56-mysql-errmsg-0:5.6.37-5.el7.x86_64",
            "7Server-RHSCL-2.4:rh-mysql56-mysql-server-0:5.6.37-5.el7.x86_64",
            "7Server-RHSCL-2.4:rh-mysql56-mysql-test-0:5.6.37-5.el7.x86_64",
            "7Workstation-RHSCL-2.4:rh-mysql56-mysql-0:5.6.37-5.el7.src",
            "7Workstation-RHSCL-2.4:rh-mysql56-mysql-0:5.6.37-5.el7.x86_64",
            "7Workstation-RHSCL-2.4:rh-mysql56-mysql-bench-0:5.6.37-5.el7.x86_64",
            "7Workstation-RHSCL-2.4:rh-mysql56-mysql-common-0:5.6.37-5.el7.x86_64",
            "7Workstation-RHSCL-2.4:rh-mysql56-mysql-config-0:5.6.37-5.el7.x86_64",
            "7Workstation-RHSCL-2.4:rh-mysql56-mysql-debuginfo-0:5.6.37-5.el7.x86_64",
            "7Workstation-RHSCL-2.4:rh-mysql56-mysql-devel-0:5.6.37-5.el7.x86_64",
            "7Workstation-RHSCL-2.4:rh-mysql56-mysql-errmsg-0:5.6.37-5.el7.x86_64",
            "7Workstation-RHSCL-2.4:rh-mysql56-mysql-server-0:5.6.37-5.el7.x86_64",
            "7Workstation-RHSCL-2.4:rh-mysql56-mysql-test-0:5.6.37-5.el7.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Moderate"
        }
      ],
      "title": "mysql: Server: Optimizer unspecified vulnerability (CPU Apr 2017)"
    },
    {
      "acknowledgments": [
        {
          "summary": "This issue was discovered by Red Hat."
        }
      ],
      "cve": "CVE-2017-3312",
      "discovery_date": "2016-11-10T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "1414133"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "Multiple flaws were found in the way the mysqld_safe script handled creation of error log file. The mysql operating system user could use these flaws to escalate their privileges to root.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "mysql: insecure error log file handling in mysqld_safe, incomplete CVE-2016-6664 fix (CPU Jan 2017)",
          "title": "Vulnerability summary"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "6Server-RHSCL-2.4-6.7.Z:rh-mysql56-mysql-0:5.6.37-5.el6.src",
          "6Server-RHSCL-2.4-6.7.Z:rh-mysql56-mysql-0:5.6.37-5.el6.x86_64",
          "6Server-RHSCL-2.4-6.7.Z:rh-mysql56-mysql-bench-0:5.6.37-5.el6.x86_64",
          "6Server-RHSCL-2.4-6.7.Z:rh-mysql56-mysql-common-0:5.6.37-5.el6.x86_64",
          "6Server-RHSCL-2.4-6.7.Z:rh-mysql56-mysql-config-0:5.6.37-5.el6.x86_64",
          "6Server-RHSCL-2.4-6.7.Z:rh-mysql56-mysql-debuginfo-0:5.6.37-5.el6.x86_64",
          "6Server-RHSCL-2.4-6.7.Z:rh-mysql56-mysql-devel-0:5.6.37-5.el6.x86_64",
          "6Server-RHSCL-2.4-6.7.Z:rh-mysql56-mysql-errmsg-0:5.6.37-5.el6.x86_64",
          "6Server-RHSCL-2.4-6.7.Z:rh-mysql56-mysql-server-0:5.6.37-5.el6.x86_64",
          "6Server-RHSCL-2.4-6.7.Z:rh-mysql56-mysql-test-0:5.6.37-5.el6.x86_64",
          "6Server-RHSCL-2.4:rh-mysql56-mysql-0:5.6.37-5.el6.src",
          "6Server-RHSCL-2.4:rh-mysql56-mysql-0:5.6.37-5.el6.x86_64",
          "6Server-RHSCL-2.4:rh-mysql56-mysql-bench-0:5.6.37-5.el6.x86_64",
          "6Server-RHSCL-2.4:rh-mysql56-mysql-common-0:5.6.37-5.el6.x86_64",
          "6Server-RHSCL-2.4:rh-mysql56-mysql-config-0:5.6.37-5.el6.x86_64",
          "6Server-RHSCL-2.4:rh-mysql56-mysql-debuginfo-0:5.6.37-5.el6.x86_64",
          "6Server-RHSCL-2.4:rh-mysql56-mysql-devel-0:5.6.37-5.el6.x86_64",
          "6Server-RHSCL-2.4:rh-mysql56-mysql-errmsg-0:5.6.37-5.el6.x86_64",
          "6Server-RHSCL-2.4:rh-mysql56-mysql-server-0:5.6.37-5.el6.x86_64",
          "6Server-RHSCL-2.4:rh-mysql56-mysql-test-0:5.6.37-5.el6.x86_64",
          "6Workstation-RHSCL-2.4:rh-mysql56-mysql-0:5.6.37-5.el6.src",
          "6Workstation-RHSCL-2.4:rh-mysql56-mysql-0:5.6.37-5.el6.x86_64",
          "6Workstation-RHSCL-2.4:rh-mysql56-mysql-bench-0:5.6.37-5.el6.x86_64",
          "6Workstation-RHSCL-2.4:rh-mysql56-mysql-common-0:5.6.37-5.el6.x86_64",
          "6Workstation-RHSCL-2.4:rh-mysql56-mysql-config-0:5.6.37-5.el6.x86_64",
          "6Workstation-RHSCL-2.4:rh-mysql56-mysql-debuginfo-0:5.6.37-5.el6.x86_64",
          "6Workstation-RHSCL-2.4:rh-mysql56-mysql-devel-0:5.6.37-5.el6.x86_64",
          "6Workstation-RHSCL-2.4:rh-mysql56-mysql-errmsg-0:5.6.37-5.el6.x86_64",
          "6Workstation-RHSCL-2.4:rh-mysql56-mysql-server-0:5.6.37-5.el6.x86_64",
          "6Workstation-RHSCL-2.4:rh-mysql56-mysql-test-0:5.6.37-5.el6.x86_64",
          "7Server-RHSCL-2.4-7.3.Z:rh-mysql56-mysql-0:5.6.37-5.el7.src",
          "7Server-RHSCL-2.4-7.3.Z:rh-mysql56-mysql-0:5.6.37-5.el7.x86_64",
          "7Server-RHSCL-2.4-7.3.Z:rh-mysql56-mysql-bench-0:5.6.37-5.el7.x86_64",
          "7Server-RHSCL-2.4-7.3.Z:rh-mysql56-mysql-common-0:5.6.37-5.el7.x86_64",
          "7Server-RHSCL-2.4-7.3.Z:rh-mysql56-mysql-config-0:5.6.37-5.el7.x86_64",
          "7Server-RHSCL-2.4-7.3.Z:rh-mysql56-mysql-debuginfo-0:5.6.37-5.el7.x86_64",
          "7Server-RHSCL-2.4-7.3.Z:rh-mysql56-mysql-devel-0:5.6.37-5.el7.x86_64",
          "7Server-RHSCL-2.4-7.3.Z:rh-mysql56-mysql-errmsg-0:5.6.37-5.el7.x86_64",
          "7Server-RHSCL-2.4-7.3.Z:rh-mysql56-mysql-server-0:5.6.37-5.el7.x86_64",
          "7Server-RHSCL-2.4-7.3.Z:rh-mysql56-mysql-test-0:5.6.37-5.el7.x86_64",
          "7Server-RHSCL-2.4:rh-mysql56-mysql-0:5.6.37-5.el7.src",
          "7Server-RHSCL-2.4:rh-mysql56-mysql-0:5.6.37-5.el7.x86_64",
          "7Server-RHSCL-2.4:rh-mysql56-mysql-bench-0:5.6.37-5.el7.x86_64",
          "7Server-RHSCL-2.4:rh-mysql56-mysql-common-0:5.6.37-5.el7.x86_64",
          "7Server-RHSCL-2.4:rh-mysql56-mysql-config-0:5.6.37-5.el7.x86_64",
          "7Server-RHSCL-2.4:rh-mysql56-mysql-debuginfo-0:5.6.37-5.el7.x86_64",
          "7Server-RHSCL-2.4:rh-mysql56-mysql-devel-0:5.6.37-5.el7.x86_64",
          "7Server-RHSCL-2.4:rh-mysql56-mysql-errmsg-0:5.6.37-5.el7.x86_64",
          "7Server-RHSCL-2.4:rh-mysql56-mysql-server-0:5.6.37-5.el7.x86_64",
          "7Server-RHSCL-2.4:rh-mysql56-mysql-test-0:5.6.37-5.el7.x86_64",
          "7Workstation-RHSCL-2.4:rh-mysql56-mysql-0:5.6.37-5.el7.src",
          "7Workstation-RHSCL-2.4:rh-mysql56-mysql-0:5.6.37-5.el7.x86_64",
          "7Workstation-RHSCL-2.4:rh-mysql56-mysql-bench-0:5.6.37-5.el7.x86_64",
          "7Workstation-RHSCL-2.4:rh-mysql56-mysql-common-0:5.6.37-5.el7.x86_64",
          "7Workstation-RHSCL-2.4:rh-mysql56-mysql-config-0:5.6.37-5.el7.x86_64",
          "7Workstation-RHSCL-2.4:rh-mysql56-mysql-debuginfo-0:5.6.37-5.el7.x86_64",
          "7Workstation-RHSCL-2.4:rh-mysql56-mysql-devel-0:5.6.37-5.el7.x86_64",
          "7Workstation-RHSCL-2.4:rh-mysql56-mysql-errmsg-0:5.6.37-5.el7.x86_64",
          "7Workstation-RHSCL-2.4:rh-mysql56-mysql-server-0:5.6.37-5.el7.x86_64",
          "7Workstation-RHSCL-2.4:rh-mysql56-mysql-test-0:5.6.37-5.el7.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2017-3312"
        },
        {
          "category": "external",
          "summary": "RHBZ#1414133",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1414133"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2017-3312",
          "url": "https://www.cve.org/CVERecord?id=CVE-2017-3312"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2017-3312",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2017-3312"
        }
      ],
      "release_date": "2017-01-17T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2017-09-21T07:42:12+00:00",
          "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAfter installing this update, the MySQL server daemon (mysqld) will be restarted automatically.",
          "product_ids": [
            "6Server-RHSCL-2.4-6.7.Z:rh-mysql56-mysql-0:5.6.37-5.el6.src",
            "6Server-RHSCL-2.4-6.7.Z:rh-mysql56-mysql-0:5.6.37-5.el6.x86_64",
            "6Server-RHSCL-2.4-6.7.Z:rh-mysql56-mysql-bench-0:5.6.37-5.el6.x86_64",
            "6Server-RHSCL-2.4-6.7.Z:rh-mysql56-mysql-common-0:5.6.37-5.el6.x86_64",
            "6Server-RHSCL-2.4-6.7.Z:rh-mysql56-mysql-config-0:5.6.37-5.el6.x86_64",
            "6Server-RHSCL-2.4-6.7.Z:rh-mysql56-mysql-debuginfo-0:5.6.37-5.el6.x86_64",
            "6Server-RHSCL-2.4-6.7.Z:rh-mysql56-mysql-devel-0:5.6.37-5.el6.x86_64",
            "6Server-RHSCL-2.4-6.7.Z:rh-mysql56-mysql-errmsg-0:5.6.37-5.el6.x86_64",
            "6Server-RHSCL-2.4-6.7.Z:rh-mysql56-mysql-server-0:5.6.37-5.el6.x86_64",
            "6Server-RHSCL-2.4-6.7.Z:rh-mysql56-mysql-test-0:5.6.37-5.el6.x86_64",
            "6Server-RHSCL-2.4:rh-mysql56-mysql-0:5.6.37-5.el6.src",
            "6Server-RHSCL-2.4:rh-mysql56-mysql-0:5.6.37-5.el6.x86_64",
            "6Server-RHSCL-2.4:rh-mysql56-mysql-bench-0:5.6.37-5.el6.x86_64",
            "6Server-RHSCL-2.4:rh-mysql56-mysql-common-0:5.6.37-5.el6.x86_64",
            "6Server-RHSCL-2.4:rh-mysql56-mysql-config-0:5.6.37-5.el6.x86_64",
            "6Server-RHSCL-2.4:rh-mysql56-mysql-debuginfo-0:5.6.37-5.el6.x86_64",
            "6Server-RHSCL-2.4:rh-mysql56-mysql-devel-0:5.6.37-5.el6.x86_64",
            "6Server-RHSCL-2.4:rh-mysql56-mysql-errmsg-0:5.6.37-5.el6.x86_64",
            "6Server-RHSCL-2.4:rh-mysql56-mysql-server-0:5.6.37-5.el6.x86_64",
            "6Server-RHSCL-2.4:rh-mysql56-mysql-test-0:5.6.37-5.el6.x86_64",
            "6Workstation-RHSCL-2.4:rh-mysql56-mysql-0:5.6.37-5.el6.src",
            "6Workstation-RHSCL-2.4:rh-mysql56-mysql-0:5.6.37-5.el6.x86_64",
            "6Workstation-RHSCL-2.4:rh-mysql56-mysql-bench-0:5.6.37-5.el6.x86_64",
            "6Workstation-RHSCL-2.4:rh-mysql56-mysql-common-0:5.6.37-5.el6.x86_64",
            "6Workstation-RHSCL-2.4:rh-mysql56-mysql-config-0:5.6.37-5.el6.x86_64",
            "6Workstation-RHSCL-2.4:rh-mysql56-mysql-debuginfo-0:5.6.37-5.el6.x86_64",
            "6Workstation-RHSCL-2.4:rh-mysql56-mysql-devel-0:5.6.37-5.el6.x86_64",
            "6Workstation-RHSCL-2.4:rh-mysql56-mysql-errmsg-0:5.6.37-5.el6.x86_64",
            "6Workstation-RHSCL-2.4:rh-mysql56-mysql-server-0:5.6.37-5.el6.x86_64",
            "6Workstation-RHSCL-2.4:rh-mysql56-mysql-test-0:5.6.37-5.el6.x86_64",
            "7Server-RHSCL-2.4-7.3.Z:rh-mysql56-mysql-0:5.6.37-5.el7.src",
            "7Server-RHSCL-2.4-7.3.Z:rh-mysql56-mysql-0:5.6.37-5.el7.x86_64",
            "7Server-RHSCL-2.4-7.3.Z:rh-mysql56-mysql-bench-0:5.6.37-5.el7.x86_64",
            "7Server-RHSCL-2.4-7.3.Z:rh-mysql56-mysql-common-0:5.6.37-5.el7.x86_64",
            "7Server-RHSCL-2.4-7.3.Z:rh-mysql56-mysql-config-0:5.6.37-5.el7.x86_64",
            "7Server-RHSCL-2.4-7.3.Z:rh-mysql56-mysql-debuginfo-0:5.6.37-5.el7.x86_64",
            "7Server-RHSCL-2.4-7.3.Z:rh-mysql56-mysql-devel-0:5.6.37-5.el7.x86_64",
            "7Server-RHSCL-2.4-7.3.Z:rh-mysql56-mysql-errmsg-0:5.6.37-5.el7.x86_64",
            "7Server-RHSCL-2.4-7.3.Z:rh-mysql56-mysql-server-0:5.6.37-5.el7.x86_64",
            "7Server-RHSCL-2.4-7.3.Z:rh-mysql56-mysql-test-0:5.6.37-5.el7.x86_64",
            "7Server-RHSCL-2.4:rh-mysql56-mysql-0:5.6.37-5.el7.src",
            "7Server-RHSCL-2.4:rh-mysql56-mysql-0:5.6.37-5.el7.x86_64",
            "7Server-RHSCL-2.4:rh-mysql56-mysql-bench-0:5.6.37-5.el7.x86_64",
            "7Server-RHSCL-2.4:rh-mysql56-mysql-common-0:5.6.37-5.el7.x86_64",
            "7Server-RHSCL-2.4:rh-mysql56-mysql-config-0:5.6.37-5.el7.x86_64",
            "7Server-RHSCL-2.4:rh-mysql56-mysql-debuginfo-0:5.6.37-5.el7.x86_64",
            "7Server-RHSCL-2.4:rh-mysql56-mysql-devel-0:5.6.37-5.el7.x86_64",
            "7Server-RHSCL-2.4:rh-mysql56-mysql-errmsg-0:5.6.37-5.el7.x86_64",
            "7Server-RHSCL-2.4:rh-mysql56-mysql-server-0:5.6.37-5.el7.x86_64",
            "7Server-RHSCL-2.4:rh-mysql56-mysql-test-0:5.6.37-5.el7.x86_64",
            "7Workstation-RHSCL-2.4:rh-mysql56-mysql-0:5.6.37-5.el7.src",
            "7Workstation-RHSCL-2.4:rh-mysql56-mysql-0:5.6.37-5.el7.x86_64",
            "7Workstation-RHSCL-2.4:rh-mysql56-mysql-bench-0:5.6.37-5.el7.x86_64",
            "7Workstation-RHSCL-2.4:rh-mysql56-mysql-common-0:5.6.37-5.el7.x86_64",
            "7Workstation-RHSCL-2.4:rh-mysql56-mysql-config-0:5.6.37-5.el7.x86_64",
            "7Workstation-RHSCL-2.4:rh-mysql56-mysql-debuginfo-0:5.6.37-5.el7.x86_64",
            "7Workstation-RHSCL-2.4:rh-mysql56-mysql-devel-0:5.6.37-5.el7.x86_64",
            "7Workstation-RHSCL-2.4:rh-mysql56-mysql-errmsg-0:5.6.37-5.el7.x86_64",
            "7Workstation-RHSCL-2.4:rh-mysql56-mysql-server-0:5.6.37-5.el7.x86_64",
            "7Workstation-RHSCL-2.4:rh-mysql56-mysql-test-0:5.6.37-5.el7.x86_64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2017:2787"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "HIGH",
            "attackVector": "LOCAL",
            "availabilityImpact": "HIGH",
            "baseScore": 6.7,
            "baseSeverity": "MEDIUM",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "HIGH",
            "privilegesRequired": "LOW",
            "scope": "UNCHANGED",
            "userInteraction": "REQUIRED",
            "vectorString": "CVSS:3.0/AV:L/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:H",
            "version": "3.0"
          },
          "products": [
            "6Server-RHSCL-2.4-6.7.Z:rh-mysql56-mysql-0:5.6.37-5.el6.src",
            "6Server-RHSCL-2.4-6.7.Z:rh-mysql56-mysql-0:5.6.37-5.el6.x86_64",
            "6Server-RHSCL-2.4-6.7.Z:rh-mysql56-mysql-bench-0:5.6.37-5.el6.x86_64",
            "6Server-RHSCL-2.4-6.7.Z:rh-mysql56-mysql-common-0:5.6.37-5.el6.x86_64",
            "6Server-RHSCL-2.4-6.7.Z:rh-mysql56-mysql-config-0:5.6.37-5.el6.x86_64",
            "6Server-RHSCL-2.4-6.7.Z:rh-mysql56-mysql-debuginfo-0:5.6.37-5.el6.x86_64",
            "6Server-RHSCL-2.4-6.7.Z:rh-mysql56-mysql-devel-0:5.6.37-5.el6.x86_64",
            "6Server-RHSCL-2.4-6.7.Z:rh-mysql56-mysql-errmsg-0:5.6.37-5.el6.x86_64",
            "6Server-RHSCL-2.4-6.7.Z:rh-mysql56-mysql-server-0:5.6.37-5.el6.x86_64",
            "6Server-RHSCL-2.4-6.7.Z:rh-mysql56-mysql-test-0:5.6.37-5.el6.x86_64",
            "6Server-RHSCL-2.4:rh-mysql56-mysql-0:5.6.37-5.el6.src",
            "6Server-RHSCL-2.4:rh-mysql56-mysql-0:5.6.37-5.el6.x86_64",
            "6Server-RHSCL-2.4:rh-mysql56-mysql-bench-0:5.6.37-5.el6.x86_64",
            "6Server-RHSCL-2.4:rh-mysql56-mysql-common-0:5.6.37-5.el6.x86_64",
            "6Server-RHSCL-2.4:rh-mysql56-mysql-config-0:5.6.37-5.el6.x86_64",
            "6Server-RHSCL-2.4:rh-mysql56-mysql-debuginfo-0:5.6.37-5.el6.x86_64",
            "6Server-RHSCL-2.4:rh-mysql56-mysql-devel-0:5.6.37-5.el6.x86_64",
            "6Server-RHSCL-2.4:rh-mysql56-mysql-errmsg-0:5.6.37-5.el6.x86_64",
            "6Server-RHSCL-2.4:rh-mysql56-mysql-server-0:5.6.37-5.el6.x86_64",
            "6Server-RHSCL-2.4:rh-mysql56-mysql-test-0:5.6.37-5.el6.x86_64",
            "6Workstation-RHSCL-2.4:rh-mysql56-mysql-0:5.6.37-5.el6.src",
            "6Workstation-RHSCL-2.4:rh-mysql56-mysql-0:5.6.37-5.el6.x86_64",
            "6Workstation-RHSCL-2.4:rh-mysql56-mysql-bench-0:5.6.37-5.el6.x86_64",
            "6Workstation-RHSCL-2.4:rh-mysql56-mysql-common-0:5.6.37-5.el6.x86_64",
            "6Workstation-RHSCL-2.4:rh-mysql56-mysql-config-0:5.6.37-5.el6.x86_64",
            "6Workstation-RHSCL-2.4:rh-mysql56-mysql-debuginfo-0:5.6.37-5.el6.x86_64",
            "6Workstation-RHSCL-2.4:rh-mysql56-mysql-devel-0:5.6.37-5.el6.x86_64",
            "6Workstation-RHSCL-2.4:rh-mysql56-mysql-errmsg-0:5.6.37-5.el6.x86_64",
            "6Workstation-RHSCL-2.4:rh-mysql56-mysql-server-0:5.6.37-5.el6.x86_64",
            "6Workstation-RHSCL-2.4:rh-mysql56-mysql-test-0:5.6.37-5.el6.x86_64",
            "7Server-RHSCL-2.4-7.3.Z:rh-mysql56-mysql-0:5.6.37-5.el7.src",
            "7Server-RHSCL-2.4-7.3.Z:rh-mysql56-mysql-0:5.6.37-5.el7.x86_64",
            "7Server-RHSCL-2.4-7.3.Z:rh-mysql56-mysql-bench-0:5.6.37-5.el7.x86_64",
            "7Server-RHSCL-2.4-7.3.Z:rh-mysql56-mysql-common-0:5.6.37-5.el7.x86_64",
            "7Server-RHSCL-2.4-7.3.Z:rh-mysql56-mysql-config-0:5.6.37-5.el7.x86_64",
            "7Server-RHSCL-2.4-7.3.Z:rh-mysql56-mysql-debuginfo-0:5.6.37-5.el7.x86_64",
            "7Server-RHSCL-2.4-7.3.Z:rh-mysql56-mysql-devel-0:5.6.37-5.el7.x86_64",
            "7Server-RHSCL-2.4-7.3.Z:rh-mysql56-mysql-errmsg-0:5.6.37-5.el7.x86_64",
            "7Server-RHSCL-2.4-7.3.Z:rh-mysql56-mysql-server-0:5.6.37-5.el7.x86_64",
            "7Server-RHSCL-2.4-7.3.Z:rh-mysql56-mysql-test-0:5.6.37-5.el7.x86_64",
            "7Server-RHSCL-2.4:rh-mysql56-mysql-0:5.6.37-5.el7.src",
            "7Server-RHSCL-2.4:rh-mysql56-mysql-0:5.6.37-5.el7.x86_64",
            "7Server-RHSCL-2.4:rh-mysql56-mysql-bench-0:5.6.37-5.el7.x86_64",
            "7Server-RHSCL-2.4:rh-mysql56-mysql-common-0:5.6.37-5.el7.x86_64",
            "7Server-RHSCL-2.4:rh-mysql56-mysql-config-0:5.6.37-5.el7.x86_64",
            "7Server-RHSCL-2.4:rh-mysql56-mysql-debuginfo-0:5.6.37-5.el7.x86_64",
            "7Server-RHSCL-2.4:rh-mysql56-mysql-devel-0:5.6.37-5.el7.x86_64",
            "7Server-RHSCL-2.4:rh-mysql56-mysql-errmsg-0:5.6.37-5.el7.x86_64",
            "7Server-RHSCL-2.4:rh-mysql56-mysql-server-0:5.6.37-5.el7.x86_64",
            "7Server-RHSCL-2.4:rh-mysql56-mysql-test-0:5.6.37-5.el7.x86_64",
            "7Workstation-RHSCL-2.4:rh-mysql56-mysql-0:5.6.37-5.el7.src",
            "7Workstation-RHSCL-2.4:rh-mysql56-mysql-0:5.6.37-5.el7.x86_64",
            "7Workstation-RHSCL-2.4:rh-mysql56-mysql-bench-0:5.6.37-5.el7.x86_64",
            "7Workstation-RHSCL-2.4:rh-mysql56-mysql-common-0:5.6.37-5.el7.x86_64",
            "7Workstation-RHSCL-2.4:rh-mysql56-mysql-config-0:5.6.37-5.el7.x86_64",
            "7Workstation-RHSCL-2.4:rh-mysql56-mysql-debuginfo-0:5.6.37-5.el7.x86_64",
            "7Workstation-RHSCL-2.4:rh-mysql56-mysql-devel-0:5.6.37-5.el7.x86_64",
            "7Workstation-RHSCL-2.4:rh-mysql56-mysql-errmsg-0:5.6.37-5.el7.x86_64",
            "7Workstation-RHSCL-2.4:rh-mysql56-mysql-server-0:5.6.37-5.el7.x86_64",
            "7Workstation-RHSCL-2.4:rh-mysql56-mysql-test-0:5.6.37-5.el7.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Moderate"
        }
      ],
      "title": "mysql: insecure error log file handling in mysqld_safe, incomplete CVE-2016-6664 fix (CPU Jan 2017)"
    },
    {
      "cve": "CVE-2017-3313",
      "discovery_date": "2017-01-18T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "1414353"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: MyISAM). Supported versions that are affected are 5.5.53 and earlier, 5.6.34 and earlier and 5.7.16 and earlier. Difficult to exploit vulnerability allows low privileged attacker with logon to the infrastructure where MySQL Server executes to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all MySQL Server accessible data. CVSS v3.0 Base Score 4.7 (Confidentiality impacts).",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "mysql: Server: MyISAM unspecified vulnerability (CPU Jan 2017)",
          "title": "Vulnerability summary"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "6Server-RHSCL-2.4-6.7.Z:rh-mysql56-mysql-0:5.6.37-5.el6.src",
          "6Server-RHSCL-2.4-6.7.Z:rh-mysql56-mysql-0:5.6.37-5.el6.x86_64",
          "6Server-RHSCL-2.4-6.7.Z:rh-mysql56-mysql-bench-0:5.6.37-5.el6.x86_64",
          "6Server-RHSCL-2.4-6.7.Z:rh-mysql56-mysql-common-0:5.6.37-5.el6.x86_64",
          "6Server-RHSCL-2.4-6.7.Z:rh-mysql56-mysql-config-0:5.6.37-5.el6.x86_64",
          "6Server-RHSCL-2.4-6.7.Z:rh-mysql56-mysql-debuginfo-0:5.6.37-5.el6.x86_64",
          "6Server-RHSCL-2.4-6.7.Z:rh-mysql56-mysql-devel-0:5.6.37-5.el6.x86_64",
          "6Server-RHSCL-2.4-6.7.Z:rh-mysql56-mysql-errmsg-0:5.6.37-5.el6.x86_64",
          "6Server-RHSCL-2.4-6.7.Z:rh-mysql56-mysql-server-0:5.6.37-5.el6.x86_64",
          "6Server-RHSCL-2.4-6.7.Z:rh-mysql56-mysql-test-0:5.6.37-5.el6.x86_64",
          "6Server-RHSCL-2.4:rh-mysql56-mysql-0:5.6.37-5.el6.src",
          "6Server-RHSCL-2.4:rh-mysql56-mysql-0:5.6.37-5.el6.x86_64",
          "6Server-RHSCL-2.4:rh-mysql56-mysql-bench-0:5.6.37-5.el6.x86_64",
          "6Server-RHSCL-2.4:rh-mysql56-mysql-common-0:5.6.37-5.el6.x86_64",
          "6Server-RHSCL-2.4:rh-mysql56-mysql-config-0:5.6.37-5.el6.x86_64",
          "6Server-RHSCL-2.4:rh-mysql56-mysql-debuginfo-0:5.6.37-5.el6.x86_64",
          "6Server-RHSCL-2.4:rh-mysql56-mysql-devel-0:5.6.37-5.el6.x86_64",
          "6Server-RHSCL-2.4:rh-mysql56-mysql-errmsg-0:5.6.37-5.el6.x86_64",
          "6Server-RHSCL-2.4:rh-mysql56-mysql-server-0:5.6.37-5.el6.x86_64",
          "6Server-RHSCL-2.4:rh-mysql56-mysql-test-0:5.6.37-5.el6.x86_64",
          "6Workstation-RHSCL-2.4:rh-mysql56-mysql-0:5.6.37-5.el6.src",
          "6Workstation-RHSCL-2.4:rh-mysql56-mysql-0:5.6.37-5.el6.x86_64",
          "6Workstation-RHSCL-2.4:rh-mysql56-mysql-bench-0:5.6.37-5.el6.x86_64",
          "6Workstation-RHSCL-2.4:rh-mysql56-mysql-common-0:5.6.37-5.el6.x86_64",
          "6Workstation-RHSCL-2.4:rh-mysql56-mysql-config-0:5.6.37-5.el6.x86_64",
          "6Workstation-RHSCL-2.4:rh-mysql56-mysql-debuginfo-0:5.6.37-5.el6.x86_64",
          "6Workstation-RHSCL-2.4:rh-mysql56-mysql-devel-0:5.6.37-5.el6.x86_64",
          "6Workstation-RHSCL-2.4:rh-mysql56-mysql-errmsg-0:5.6.37-5.el6.x86_64",
          "6Workstation-RHSCL-2.4:rh-mysql56-mysql-server-0:5.6.37-5.el6.x86_64",
          "6Workstation-RHSCL-2.4:rh-mysql56-mysql-test-0:5.6.37-5.el6.x86_64",
          "7Server-RHSCL-2.4-7.3.Z:rh-mysql56-mysql-0:5.6.37-5.el7.src",
          "7Server-RHSCL-2.4-7.3.Z:rh-mysql56-mysql-0:5.6.37-5.el7.x86_64",
          "7Server-RHSCL-2.4-7.3.Z:rh-mysql56-mysql-bench-0:5.6.37-5.el7.x86_64",
          "7Server-RHSCL-2.4-7.3.Z:rh-mysql56-mysql-common-0:5.6.37-5.el7.x86_64",
          "7Server-RHSCL-2.4-7.3.Z:rh-mysql56-mysql-config-0:5.6.37-5.el7.x86_64",
          "7Server-RHSCL-2.4-7.3.Z:rh-mysql56-mysql-debuginfo-0:5.6.37-5.el7.x86_64",
          "7Server-RHSCL-2.4-7.3.Z:rh-mysql56-mysql-devel-0:5.6.37-5.el7.x86_64",
          "7Server-RHSCL-2.4-7.3.Z:rh-mysql56-mysql-errmsg-0:5.6.37-5.el7.x86_64",
          "7Server-RHSCL-2.4-7.3.Z:rh-mysql56-mysql-server-0:5.6.37-5.el7.x86_64",
          "7Server-RHSCL-2.4-7.3.Z:rh-mysql56-mysql-test-0:5.6.37-5.el7.x86_64",
          "7Server-RHSCL-2.4:rh-mysql56-mysql-0:5.6.37-5.el7.src",
          "7Server-RHSCL-2.4:rh-mysql56-mysql-0:5.6.37-5.el7.x86_64",
          "7Server-RHSCL-2.4:rh-mysql56-mysql-bench-0:5.6.37-5.el7.x86_64",
          "7Server-RHSCL-2.4:rh-mysql56-mysql-common-0:5.6.37-5.el7.x86_64",
          "7Server-RHSCL-2.4:rh-mysql56-mysql-config-0:5.6.37-5.el7.x86_64",
          "7Server-RHSCL-2.4:rh-mysql56-mysql-debuginfo-0:5.6.37-5.el7.x86_64",
          "7Server-RHSCL-2.4:rh-mysql56-mysql-devel-0:5.6.37-5.el7.x86_64",
          "7Server-RHSCL-2.4:rh-mysql56-mysql-errmsg-0:5.6.37-5.el7.x86_64",
          "7Server-RHSCL-2.4:rh-mysql56-mysql-server-0:5.6.37-5.el7.x86_64",
          "7Server-RHSCL-2.4:rh-mysql56-mysql-test-0:5.6.37-5.el7.x86_64",
          "7Workstation-RHSCL-2.4:rh-mysql56-mysql-0:5.6.37-5.el7.src",
          "7Workstation-RHSCL-2.4:rh-mysql56-mysql-0:5.6.37-5.el7.x86_64",
          "7Workstation-RHSCL-2.4:rh-mysql56-mysql-bench-0:5.6.37-5.el7.x86_64",
          "7Workstation-RHSCL-2.4:rh-mysql56-mysql-common-0:5.6.37-5.el7.x86_64",
          "7Workstation-RHSCL-2.4:rh-mysql56-mysql-config-0:5.6.37-5.el7.x86_64",
          "7Workstation-RHSCL-2.4:rh-mysql56-mysql-debuginfo-0:5.6.37-5.el7.x86_64",
          "7Workstation-RHSCL-2.4:rh-mysql56-mysql-devel-0:5.6.37-5.el7.x86_64",
          "7Workstation-RHSCL-2.4:rh-mysql56-mysql-errmsg-0:5.6.37-5.el7.x86_64",
          "7Workstation-RHSCL-2.4:rh-mysql56-mysql-server-0:5.6.37-5.el7.x86_64",
          "7Workstation-RHSCL-2.4:rh-mysql56-mysql-test-0:5.6.37-5.el7.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2017-3313"
        },
        {
          "category": "external",
          "summary": "RHBZ#1414353",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1414353"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2017-3313",
          "url": "https://www.cve.org/CVERecord?id=CVE-2017-3313"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2017-3313",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2017-3313"
        },
        {
          "category": "external",
          "summary": "http://www.oracle.com/technetwork/security-advisory/cpujan2017-2881727.html#AppendixMSQL",
          "url": "http://www.oracle.com/technetwork/security-advisory/cpujan2017-2881727.html#AppendixMSQL"
        }
      ],
      "release_date": "2017-01-18T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2017-09-21T07:42:12+00:00",
          "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAfter installing this update, the MySQL server daemon (mysqld) will be restarted automatically.",
          "product_ids": [
            "6Server-RHSCL-2.4-6.7.Z:rh-mysql56-mysql-0:5.6.37-5.el6.src",
            "6Server-RHSCL-2.4-6.7.Z:rh-mysql56-mysql-0:5.6.37-5.el6.x86_64",
            "6Server-RHSCL-2.4-6.7.Z:rh-mysql56-mysql-bench-0:5.6.37-5.el6.x86_64",
            "6Server-RHSCL-2.4-6.7.Z:rh-mysql56-mysql-common-0:5.6.37-5.el6.x86_64",
            "6Server-RHSCL-2.4-6.7.Z:rh-mysql56-mysql-config-0:5.6.37-5.el6.x86_64",
            "6Server-RHSCL-2.4-6.7.Z:rh-mysql56-mysql-debuginfo-0:5.6.37-5.el6.x86_64",
            "6Server-RHSCL-2.4-6.7.Z:rh-mysql56-mysql-devel-0:5.6.37-5.el6.x86_64",
            "6Server-RHSCL-2.4-6.7.Z:rh-mysql56-mysql-errmsg-0:5.6.37-5.el6.x86_64",
            "6Server-RHSCL-2.4-6.7.Z:rh-mysql56-mysql-server-0:5.6.37-5.el6.x86_64",
            "6Server-RHSCL-2.4-6.7.Z:rh-mysql56-mysql-test-0:5.6.37-5.el6.x86_64",
            "6Server-RHSCL-2.4:rh-mysql56-mysql-0:5.6.37-5.el6.src",
            "6Server-RHSCL-2.4:rh-mysql56-mysql-0:5.6.37-5.el6.x86_64",
            "6Server-RHSCL-2.4:rh-mysql56-mysql-bench-0:5.6.37-5.el6.x86_64",
            "6Server-RHSCL-2.4:rh-mysql56-mysql-common-0:5.6.37-5.el6.x86_64",
            "6Server-RHSCL-2.4:rh-mysql56-mysql-config-0:5.6.37-5.el6.x86_64",
            "6Server-RHSCL-2.4:rh-mysql56-mysql-debuginfo-0:5.6.37-5.el6.x86_64",
            "6Server-RHSCL-2.4:rh-mysql56-mysql-devel-0:5.6.37-5.el6.x86_64",
            "6Server-RHSCL-2.4:rh-mysql56-mysql-errmsg-0:5.6.37-5.el6.x86_64",
            "6Server-RHSCL-2.4:rh-mysql56-mysql-server-0:5.6.37-5.el6.x86_64",
            "6Server-RHSCL-2.4:rh-mysql56-mysql-test-0:5.6.37-5.el6.x86_64",
            "6Workstation-RHSCL-2.4:rh-mysql56-mysql-0:5.6.37-5.el6.src",
            "6Workstation-RHSCL-2.4:rh-mysql56-mysql-0:5.6.37-5.el6.x86_64",
            "6Workstation-RHSCL-2.4:rh-mysql56-mysql-bench-0:5.6.37-5.el6.x86_64",
            "6Workstation-RHSCL-2.4:rh-mysql56-mysql-common-0:5.6.37-5.el6.x86_64",
            "6Workstation-RHSCL-2.4:rh-mysql56-mysql-config-0:5.6.37-5.el6.x86_64",
            "6Workstation-RHSCL-2.4:rh-mysql56-mysql-debuginfo-0:5.6.37-5.el6.x86_64",
            "6Workstation-RHSCL-2.4:rh-mysql56-mysql-devel-0:5.6.37-5.el6.x86_64",
            "6Workstation-RHSCL-2.4:rh-mysql56-mysql-errmsg-0:5.6.37-5.el6.x86_64",
            "6Workstation-RHSCL-2.4:rh-mysql56-mysql-server-0:5.6.37-5.el6.x86_64",
            "6Workstation-RHSCL-2.4:rh-mysql56-mysql-test-0:5.6.37-5.el6.x86_64",
            "7Server-RHSCL-2.4-7.3.Z:rh-mysql56-mysql-0:5.6.37-5.el7.src",
            "7Server-RHSCL-2.4-7.3.Z:rh-mysql56-mysql-0:5.6.37-5.el7.x86_64",
            "7Server-RHSCL-2.4-7.3.Z:rh-mysql56-mysql-bench-0:5.6.37-5.el7.x86_64",
            "7Server-RHSCL-2.4-7.3.Z:rh-mysql56-mysql-common-0:5.6.37-5.el7.x86_64",
            "7Server-RHSCL-2.4-7.3.Z:rh-mysql56-mysql-config-0:5.6.37-5.el7.x86_64",
            "7Server-RHSCL-2.4-7.3.Z:rh-mysql56-mysql-debuginfo-0:5.6.37-5.el7.x86_64",
            "7Server-RHSCL-2.4-7.3.Z:rh-mysql56-mysql-devel-0:5.6.37-5.el7.x86_64",
            "7Server-RHSCL-2.4-7.3.Z:rh-mysql56-mysql-errmsg-0:5.6.37-5.el7.x86_64",
            "7Server-RHSCL-2.4-7.3.Z:rh-mysql56-mysql-server-0:5.6.37-5.el7.x86_64",
            "7Server-RHSCL-2.4-7.3.Z:rh-mysql56-mysql-test-0:5.6.37-5.el7.x86_64",
            "7Server-RHSCL-2.4:rh-mysql56-mysql-0:5.6.37-5.el7.src",
            "7Server-RHSCL-2.4:rh-mysql56-mysql-0:5.6.37-5.el7.x86_64",
            "7Server-RHSCL-2.4:rh-mysql56-mysql-bench-0:5.6.37-5.el7.x86_64",
            "7Server-RHSCL-2.4:rh-mysql56-mysql-common-0:5.6.37-5.el7.x86_64",
            "7Server-RHSCL-2.4:rh-mysql56-mysql-config-0:5.6.37-5.el7.x86_64",
            "7Server-RHSCL-2.4:rh-mysql56-mysql-debuginfo-0:5.6.37-5.el7.x86_64",
            "7Server-RHSCL-2.4:rh-mysql56-mysql-devel-0:5.6.37-5.el7.x86_64",
            "7Server-RHSCL-2.4:rh-mysql56-mysql-errmsg-0:5.6.37-5.el7.x86_64",
            "7Server-RHSCL-2.4:rh-mysql56-mysql-server-0:5.6.37-5.el7.x86_64",
            "7Server-RHSCL-2.4:rh-mysql56-mysql-test-0:5.6.37-5.el7.x86_64",
            "7Workstation-RHSCL-2.4:rh-mysql56-mysql-0:5.6.37-5.el7.src",
            "7Workstation-RHSCL-2.4:rh-mysql56-mysql-0:5.6.37-5.el7.x86_64",
            "7Workstation-RHSCL-2.4:rh-mysql56-mysql-bench-0:5.6.37-5.el7.x86_64",
            "7Workstation-RHSCL-2.4:rh-mysql56-mysql-common-0:5.6.37-5.el7.x86_64",
            "7Workstation-RHSCL-2.4:rh-mysql56-mysql-config-0:5.6.37-5.el7.x86_64",
            "7Workstation-RHSCL-2.4:rh-mysql56-mysql-debuginfo-0:5.6.37-5.el7.x86_64",
            "7Workstation-RHSCL-2.4:rh-mysql56-mysql-devel-0:5.6.37-5.el7.x86_64",
            "7Workstation-RHSCL-2.4:rh-mysql56-mysql-errmsg-0:5.6.37-5.el7.x86_64",
            "7Workstation-RHSCL-2.4:rh-mysql56-mysql-server-0:5.6.37-5.el7.x86_64",
            "7Workstation-RHSCL-2.4:rh-mysql56-mysql-test-0:5.6.37-5.el7.x86_64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2017:2787"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "HIGH",
            "attackVector": "LOCAL",
            "availabilityImpact": "NONE",
            "baseScore": 4.7,
            "baseSeverity": "MEDIUM",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "NONE",
            "privilegesRequired": "LOW",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N",
            "version": "3.0"
          },
          "products": [
            "6Server-RHSCL-2.4-6.7.Z:rh-mysql56-mysql-0:5.6.37-5.el6.src",
            "6Server-RHSCL-2.4-6.7.Z:rh-mysql56-mysql-0:5.6.37-5.el6.x86_64",
            "6Server-RHSCL-2.4-6.7.Z:rh-mysql56-mysql-bench-0:5.6.37-5.el6.x86_64",
            "6Server-RHSCL-2.4-6.7.Z:rh-mysql56-mysql-common-0:5.6.37-5.el6.x86_64",
            "6Server-RHSCL-2.4-6.7.Z:rh-mysql56-mysql-config-0:5.6.37-5.el6.x86_64",
            "6Server-RHSCL-2.4-6.7.Z:rh-mysql56-mysql-debuginfo-0:5.6.37-5.el6.x86_64",
            "6Server-RHSCL-2.4-6.7.Z:rh-mysql56-mysql-devel-0:5.6.37-5.el6.x86_64",
            "6Server-RHSCL-2.4-6.7.Z:rh-mysql56-mysql-errmsg-0:5.6.37-5.el6.x86_64",
            "6Server-RHSCL-2.4-6.7.Z:rh-mysql56-mysql-server-0:5.6.37-5.el6.x86_64",
            "6Server-RHSCL-2.4-6.7.Z:rh-mysql56-mysql-test-0:5.6.37-5.el6.x86_64",
            "6Server-RHSCL-2.4:rh-mysql56-mysql-0:5.6.37-5.el6.src",
            "6Server-RHSCL-2.4:rh-mysql56-mysql-0:5.6.37-5.el6.x86_64",
            "6Server-RHSCL-2.4:rh-mysql56-mysql-bench-0:5.6.37-5.el6.x86_64",
            "6Server-RHSCL-2.4:rh-mysql56-mysql-common-0:5.6.37-5.el6.x86_64",
            "6Server-RHSCL-2.4:rh-mysql56-mysql-config-0:5.6.37-5.el6.x86_64",
            "6Server-RHSCL-2.4:rh-mysql56-mysql-debuginfo-0:5.6.37-5.el6.x86_64",
            "6Server-RHSCL-2.4:rh-mysql56-mysql-devel-0:5.6.37-5.el6.x86_64",
            "6Server-RHSCL-2.4:rh-mysql56-mysql-errmsg-0:5.6.37-5.el6.x86_64",
            "6Server-RHSCL-2.4:rh-mysql56-mysql-server-0:5.6.37-5.el6.x86_64",
            "6Server-RHSCL-2.4:rh-mysql56-mysql-test-0:5.6.37-5.el6.x86_64",
            "6Workstation-RHSCL-2.4:rh-mysql56-mysql-0:5.6.37-5.el6.src",
            "6Workstation-RHSCL-2.4:rh-mysql56-mysql-0:5.6.37-5.el6.x86_64",
            "6Workstation-RHSCL-2.4:rh-mysql56-mysql-bench-0:5.6.37-5.el6.x86_64",
            "6Workstation-RHSCL-2.4:rh-mysql56-mysql-common-0:5.6.37-5.el6.x86_64",
            "6Workstation-RHSCL-2.4:rh-mysql56-mysql-config-0:5.6.37-5.el6.x86_64",
            "6Workstation-RHSCL-2.4:rh-mysql56-mysql-debuginfo-0:5.6.37-5.el6.x86_64",
            "6Workstation-RHSCL-2.4:rh-mysql56-mysql-devel-0:5.6.37-5.el6.x86_64",
            "6Workstation-RHSCL-2.4:rh-mysql56-mysql-errmsg-0:5.6.37-5.el6.x86_64",
            "6Workstation-RHSCL-2.4:rh-mysql56-mysql-server-0:5.6.37-5.el6.x86_64",
            "6Workstation-RHSCL-2.4:rh-mysql56-mysql-test-0:5.6.37-5.el6.x86_64",
            "7Server-RHSCL-2.4-7.3.Z:rh-mysql56-mysql-0:5.6.37-5.el7.src",
            "7Server-RHSCL-2.4-7.3.Z:rh-mysql56-mysql-0:5.6.37-5.el7.x86_64",
            "7Server-RHSCL-2.4-7.3.Z:rh-mysql56-mysql-bench-0:5.6.37-5.el7.x86_64",
            "7Server-RHSCL-2.4-7.3.Z:rh-mysql56-mysql-common-0:5.6.37-5.el7.x86_64",
            "7Server-RHSCL-2.4-7.3.Z:rh-mysql56-mysql-config-0:5.6.37-5.el7.x86_64",
            "7Server-RHSCL-2.4-7.3.Z:rh-mysql56-mysql-debuginfo-0:5.6.37-5.el7.x86_64",
            "7Server-RHSCL-2.4-7.3.Z:rh-mysql56-mysql-devel-0:5.6.37-5.el7.x86_64",
            "7Server-RHSCL-2.4-7.3.Z:rh-mysql56-mysql-errmsg-0:5.6.37-5.el7.x86_64",
            "7Server-RHSCL-2.4-7.3.Z:rh-mysql56-mysql-server-0:5.6.37-5.el7.x86_64",
            "7Server-RHSCL-2.4-7.3.Z:rh-mysql56-mysql-test-0:5.6.37-5.el7.x86_64",
            "7Server-RHSCL-2.4:rh-mysql56-mysql-0:5.6.37-5.el7.src",
            "7Server-RHSCL-2.4:rh-mysql56-mysql-0:5.6.37-5.el7.x86_64",
            "7Server-RHSCL-2.4:rh-mysql56-mysql-bench-0:5.6.37-5.el7.x86_64",
            "7Server-RHSCL-2.4:rh-mysql56-mysql-common-0:5.6.37-5.el7.x86_64",
            "7Server-RHSCL-2.4:rh-mysql56-mysql-config-0:5.6.37-5.el7.x86_64",
            "7Server-RHSCL-2.4:rh-mysql56-mysql-debuginfo-0:5.6.37-5.el7.x86_64",
            "7Server-RHSCL-2.4:rh-mysql56-mysql-devel-0:5.6.37-5.el7.x86_64",
            "7Server-RHSCL-2.4:rh-mysql56-mysql-errmsg-0:5.6.37-5.el7.x86_64",
            "7Server-RHSCL-2.4:rh-mysql56-mysql-server-0:5.6.37-5.el7.x86_64",
            "7Server-RHSCL-2.4:rh-mysql56-mysql-test-0:5.6.37-5.el7.x86_64",
            "7Workstation-RHSCL-2.4:rh-mysql56-mysql-0:5.6.37-5.el7.src",
            "7Workstation-RHSCL-2.4:rh-mysql56-mysql-0:5.6.37-5.el7.x86_64",
            "7Workstation-RHSCL-2.4:rh-mysql56-mysql-bench-0:5.6.37-5.el7.x86_64",
            "7Workstation-RHSCL-2.4:rh-mysql56-mysql-common-0:5.6.37-5.el7.x86_64",
            "7Workstation-RHSCL-2.4:rh-mysql56-mysql-config-0:5.6.37-5.el7.x86_64",
            "7Workstation-RHSCL-2.4:rh-mysql56-mysql-debuginfo-0:5.6.37-5.el7.x86_64",
            "7Workstation-RHSCL-2.4:rh-mysql56-mysql-devel-0:5.6.37-5.el7.x86_64",
            "7Workstation-RHSCL-2.4:rh-mysql56-mysql-errmsg-0:5.6.37-5.el7.x86_64",
            "7Workstation-RHSCL-2.4:rh-mysql56-mysql-server-0:5.6.37-5.el7.x86_64",
            "7Workstation-RHSCL-2.4:rh-mysql56-mysql-test-0:5.6.37-5.el7.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Moderate"
        }
      ],
      "title": "mysql: Server: MyISAM unspecified vulnerability (CPU Jan 2017)"
    },
    {
      "cve": "CVE-2017-3317",
      "discovery_date": "2017-01-18T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "1414355"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Logging). Supported versions that are affected are 5.5.53 and earlier, 5.6.34 and earlier and 5.7.16 and earlier. Difficult to exploit vulnerability allows high privileged attacker with logon to the infrastructure where MySQL Server executes to compromise MySQL Server. Successful attacks require human interaction from a person other than the attacker. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS v3.0 Base Score 4.0 (Availability impacts).",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "mysql: Logging unspecified vulnerability (CPU Jan 2017)",
          "title": "Vulnerability summary"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "6Server-RHSCL-2.4-6.7.Z:rh-mysql56-mysql-0:5.6.37-5.el6.src",
          "6Server-RHSCL-2.4-6.7.Z:rh-mysql56-mysql-0:5.6.37-5.el6.x86_64",
          "6Server-RHSCL-2.4-6.7.Z:rh-mysql56-mysql-bench-0:5.6.37-5.el6.x86_64",
          "6Server-RHSCL-2.4-6.7.Z:rh-mysql56-mysql-common-0:5.6.37-5.el6.x86_64",
          "6Server-RHSCL-2.4-6.7.Z:rh-mysql56-mysql-config-0:5.6.37-5.el6.x86_64",
          "6Server-RHSCL-2.4-6.7.Z:rh-mysql56-mysql-debuginfo-0:5.6.37-5.el6.x86_64",
          "6Server-RHSCL-2.4-6.7.Z:rh-mysql56-mysql-devel-0:5.6.37-5.el6.x86_64",
          "6Server-RHSCL-2.4-6.7.Z:rh-mysql56-mysql-errmsg-0:5.6.37-5.el6.x86_64",
          "6Server-RHSCL-2.4-6.7.Z:rh-mysql56-mysql-server-0:5.6.37-5.el6.x86_64",
          "6Server-RHSCL-2.4-6.7.Z:rh-mysql56-mysql-test-0:5.6.37-5.el6.x86_64",
          "6Server-RHSCL-2.4:rh-mysql56-mysql-0:5.6.37-5.el6.src",
          "6Server-RHSCL-2.4:rh-mysql56-mysql-0:5.6.37-5.el6.x86_64",
          "6Server-RHSCL-2.4:rh-mysql56-mysql-bench-0:5.6.37-5.el6.x86_64",
          "6Server-RHSCL-2.4:rh-mysql56-mysql-common-0:5.6.37-5.el6.x86_64",
          "6Server-RHSCL-2.4:rh-mysql56-mysql-config-0:5.6.37-5.el6.x86_64",
          "6Server-RHSCL-2.4:rh-mysql56-mysql-debuginfo-0:5.6.37-5.el6.x86_64",
          "6Server-RHSCL-2.4:rh-mysql56-mysql-devel-0:5.6.37-5.el6.x86_64",
          "6Server-RHSCL-2.4:rh-mysql56-mysql-errmsg-0:5.6.37-5.el6.x86_64",
          "6Server-RHSCL-2.4:rh-mysql56-mysql-server-0:5.6.37-5.el6.x86_64",
          "6Server-RHSCL-2.4:rh-mysql56-mysql-test-0:5.6.37-5.el6.x86_64",
          "6Workstation-RHSCL-2.4:rh-mysql56-mysql-0:5.6.37-5.el6.src",
          "6Workstation-RHSCL-2.4:rh-mysql56-mysql-0:5.6.37-5.el6.x86_64",
          "6Workstation-RHSCL-2.4:rh-mysql56-mysql-bench-0:5.6.37-5.el6.x86_64",
          "6Workstation-RHSCL-2.4:rh-mysql56-mysql-common-0:5.6.37-5.el6.x86_64",
          "6Workstation-RHSCL-2.4:rh-mysql56-mysql-config-0:5.6.37-5.el6.x86_64",
          "6Workstation-RHSCL-2.4:rh-mysql56-mysql-debuginfo-0:5.6.37-5.el6.x86_64",
          "6Workstation-RHSCL-2.4:rh-mysql56-mysql-devel-0:5.6.37-5.el6.x86_64",
          "6Workstation-RHSCL-2.4:rh-mysql56-mysql-errmsg-0:5.6.37-5.el6.x86_64",
          "6Workstation-RHSCL-2.4:rh-mysql56-mysql-server-0:5.6.37-5.el6.x86_64",
          "6Workstation-RHSCL-2.4:rh-mysql56-mysql-test-0:5.6.37-5.el6.x86_64",
          "7Server-RHSCL-2.4-7.3.Z:rh-mysql56-mysql-0:5.6.37-5.el7.src",
          "7Server-RHSCL-2.4-7.3.Z:rh-mysql56-mysql-0:5.6.37-5.el7.x86_64",
          "7Server-RHSCL-2.4-7.3.Z:rh-mysql56-mysql-bench-0:5.6.37-5.el7.x86_64",
          "7Server-RHSCL-2.4-7.3.Z:rh-mysql56-mysql-common-0:5.6.37-5.el7.x86_64",
          "7Server-RHSCL-2.4-7.3.Z:rh-mysql56-mysql-config-0:5.6.37-5.el7.x86_64",
          "7Server-RHSCL-2.4-7.3.Z:rh-mysql56-mysql-debuginfo-0:5.6.37-5.el7.x86_64",
          "7Server-RHSCL-2.4-7.3.Z:rh-mysql56-mysql-devel-0:5.6.37-5.el7.x86_64",
          "7Server-RHSCL-2.4-7.3.Z:rh-mysql56-mysql-errmsg-0:5.6.37-5.el7.x86_64",
          "7Server-RHSCL-2.4-7.3.Z:rh-mysql56-mysql-server-0:5.6.37-5.el7.x86_64",
          "7Server-RHSCL-2.4-7.3.Z:rh-mysql56-mysql-test-0:5.6.37-5.el7.x86_64",
          "7Server-RHSCL-2.4:rh-mysql56-mysql-0:5.6.37-5.el7.src",
          "7Server-RHSCL-2.4:rh-mysql56-mysql-0:5.6.37-5.el7.x86_64",
          "7Server-RHSCL-2.4:rh-mysql56-mysql-bench-0:5.6.37-5.el7.x86_64",
          "7Server-RHSCL-2.4:rh-mysql56-mysql-common-0:5.6.37-5.el7.x86_64",
          "7Server-RHSCL-2.4:rh-mysql56-mysql-config-0:5.6.37-5.el7.x86_64",
          "7Server-RHSCL-2.4:rh-mysql56-mysql-debuginfo-0:5.6.37-5.el7.x86_64",
          "7Server-RHSCL-2.4:rh-mysql56-mysql-devel-0:5.6.37-5.el7.x86_64",
          "7Server-RHSCL-2.4:rh-mysql56-mysql-errmsg-0:5.6.37-5.el7.x86_64",
          "7Server-RHSCL-2.4:rh-mysql56-mysql-server-0:5.6.37-5.el7.x86_64",
          "7Server-RHSCL-2.4:rh-mysql56-mysql-test-0:5.6.37-5.el7.x86_64",
          "7Workstation-RHSCL-2.4:rh-mysql56-mysql-0:5.6.37-5.el7.src",
          "7Workstation-RHSCL-2.4:rh-mysql56-mysql-0:5.6.37-5.el7.x86_64",
          "7Workstation-RHSCL-2.4:rh-mysql56-mysql-bench-0:5.6.37-5.el7.x86_64",
          "7Workstation-RHSCL-2.4:rh-mysql56-mysql-common-0:5.6.37-5.el7.x86_64",
          "7Workstation-RHSCL-2.4:rh-mysql56-mysql-config-0:5.6.37-5.el7.x86_64",
          "7Workstation-RHSCL-2.4:rh-mysql56-mysql-debuginfo-0:5.6.37-5.el7.x86_64",
          "7Workstation-RHSCL-2.4:rh-mysql56-mysql-devel-0:5.6.37-5.el7.x86_64",
          "7Workstation-RHSCL-2.4:rh-mysql56-mysql-errmsg-0:5.6.37-5.el7.x86_64",
          "7Workstation-RHSCL-2.4:rh-mysql56-mysql-server-0:5.6.37-5.el7.x86_64",
          "7Workstation-RHSCL-2.4:rh-mysql56-mysql-test-0:5.6.37-5.el7.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2017-3317"
        },
        {
          "category": "external",
          "summary": "RHBZ#1414355",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1414355"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2017-3317",
          "url": "https://www.cve.org/CVERecord?id=CVE-2017-3317"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2017-3317",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2017-3317"
        },
        {
          "category": "external",
          "summary": "http://www.oracle.com/technetwork/security-advisory/cpujan2017-2881727.html#AppendixMSQL",
          "url": "http://www.oracle.com/technetwork/security-advisory/cpujan2017-2881727.html#AppendixMSQL"
        }
      ],
      "release_date": "2017-01-18T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2017-09-21T07:42:12+00:00",
          "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAfter installing this update, the MySQL server daemon (mysqld) will be restarted automatically.",
          "product_ids": [
            "6Server-RHSCL-2.4-6.7.Z:rh-mysql56-mysql-0:5.6.37-5.el6.src",
            "6Server-RHSCL-2.4-6.7.Z:rh-mysql56-mysql-0:5.6.37-5.el6.x86_64",
            "6Server-RHSCL-2.4-6.7.Z:rh-mysql56-mysql-bench-0:5.6.37-5.el6.x86_64",
            "6Server-RHSCL-2.4-6.7.Z:rh-mysql56-mysql-common-0:5.6.37-5.el6.x86_64",
            "6Server-RHSCL-2.4-6.7.Z:rh-mysql56-mysql-config-0:5.6.37-5.el6.x86_64",
            "6Server-RHSCL-2.4-6.7.Z:rh-mysql56-mysql-debuginfo-0:5.6.37-5.el6.x86_64",
            "6Server-RHSCL-2.4-6.7.Z:rh-mysql56-mysql-devel-0:5.6.37-5.el6.x86_64",
            "6Server-RHSCL-2.4-6.7.Z:rh-mysql56-mysql-errmsg-0:5.6.37-5.el6.x86_64",
            "6Server-RHSCL-2.4-6.7.Z:rh-mysql56-mysql-server-0:5.6.37-5.el6.x86_64",
            "6Server-RHSCL-2.4-6.7.Z:rh-mysql56-mysql-test-0:5.6.37-5.el6.x86_64",
            "6Server-RHSCL-2.4:rh-mysql56-mysql-0:5.6.37-5.el6.src",
            "6Server-RHSCL-2.4:rh-mysql56-mysql-0:5.6.37-5.el6.x86_64",
            "6Server-RHSCL-2.4:rh-mysql56-mysql-bench-0:5.6.37-5.el6.x86_64",
            "6Server-RHSCL-2.4:rh-mysql56-mysql-common-0:5.6.37-5.el6.x86_64",
            "6Server-RHSCL-2.4:rh-mysql56-mysql-config-0:5.6.37-5.el6.x86_64",
            "6Server-RHSCL-2.4:rh-mysql56-mysql-debuginfo-0:5.6.37-5.el6.x86_64",
            "6Server-RHSCL-2.4:rh-mysql56-mysql-devel-0:5.6.37-5.el6.x86_64",
            "6Server-RHSCL-2.4:rh-mysql56-mysql-errmsg-0:5.6.37-5.el6.x86_64",
            "6Server-RHSCL-2.4:rh-mysql56-mysql-server-0:5.6.37-5.el6.x86_64",
            "6Server-RHSCL-2.4:rh-mysql56-mysql-test-0:5.6.37-5.el6.x86_64",
            "6Workstation-RHSCL-2.4:rh-mysql56-mysql-0:5.6.37-5.el6.src",
            "6Workstation-RHSCL-2.4:rh-mysql56-mysql-0:5.6.37-5.el6.x86_64",
            "6Workstation-RHSCL-2.4:rh-mysql56-mysql-bench-0:5.6.37-5.el6.x86_64",
            "6Workstation-RHSCL-2.4:rh-mysql56-mysql-common-0:5.6.37-5.el6.x86_64",
            "6Workstation-RHSCL-2.4:rh-mysql56-mysql-config-0:5.6.37-5.el6.x86_64",
            "6Workstation-RHSCL-2.4:rh-mysql56-mysql-debuginfo-0:5.6.37-5.el6.x86_64",
            "6Workstation-RHSCL-2.4:rh-mysql56-mysql-devel-0:5.6.37-5.el6.x86_64",
            "6Workstation-RHSCL-2.4:rh-mysql56-mysql-errmsg-0:5.6.37-5.el6.x86_64",
            "6Workstation-RHSCL-2.4:rh-mysql56-mysql-server-0:5.6.37-5.el6.x86_64",
            "6Workstation-RHSCL-2.4:rh-mysql56-mysql-test-0:5.6.37-5.el6.x86_64",
            "7Server-RHSCL-2.4-7.3.Z:rh-mysql56-mysql-0:5.6.37-5.el7.src",
            "7Server-RHSCL-2.4-7.3.Z:rh-mysql56-mysql-0:5.6.37-5.el7.x86_64",
            "7Server-RHSCL-2.4-7.3.Z:rh-mysql56-mysql-bench-0:5.6.37-5.el7.x86_64",
            "7Server-RHSCL-2.4-7.3.Z:rh-mysql56-mysql-common-0:5.6.37-5.el7.x86_64",
            "7Server-RHSCL-2.4-7.3.Z:rh-mysql56-mysql-config-0:5.6.37-5.el7.x86_64",
            "7Server-RHSCL-2.4-7.3.Z:rh-mysql56-mysql-debuginfo-0:5.6.37-5.el7.x86_64",
            "7Server-RHSCL-2.4-7.3.Z:rh-mysql56-mysql-devel-0:5.6.37-5.el7.x86_64",
            "7Server-RHSCL-2.4-7.3.Z:rh-mysql56-mysql-errmsg-0:5.6.37-5.el7.x86_64",
            "7Server-RHSCL-2.4-7.3.Z:rh-mysql56-mysql-server-0:5.6.37-5.el7.x86_64",
            "7Server-RHSCL-2.4-7.3.Z:rh-mysql56-mysql-test-0:5.6.37-5.el7.x86_64",
            "7Server-RHSCL-2.4:rh-mysql56-mysql-0:5.6.37-5.el7.src",
            "7Server-RHSCL-2.4:rh-mysql56-mysql-0:5.6.37-5.el7.x86_64",
            "7Server-RHSCL-2.4:rh-mysql56-mysql-bench-0:5.6.37-5.el7.x86_64",
            "7Server-RHSCL-2.4:rh-mysql56-mysql-common-0:5.6.37-5.el7.x86_64",
            "7Server-RHSCL-2.4:rh-mysql56-mysql-config-0:5.6.37-5.el7.x86_64",
            "7Server-RHSCL-2.4:rh-mysql56-mysql-debuginfo-0:5.6.37-5.el7.x86_64",
            "7Server-RHSCL-2.4:rh-mysql56-mysql-devel-0:5.6.37-5.el7.x86_64",
            "7Server-RHSCL-2.4:rh-mysql56-mysql-errmsg-0:5.6.37-5.el7.x86_64",
            "7Server-RHSCL-2.4:rh-mysql56-mysql-server-0:5.6.37-5.el7.x86_64",
            "7Server-RHSCL-2.4:rh-mysql56-mysql-test-0:5.6.37-5.el7.x86_64",
            "7Workstation-RHSCL-2.4:rh-mysql56-mysql-0:5.6.37-5.el7.src",
            "7Workstation-RHSCL-2.4:rh-mysql56-mysql-0:5.6.37-5.el7.x86_64",
            "7Workstation-RHSCL-2.4:rh-mysql56-mysql-bench-0:5.6.37-5.el7.x86_64",
            "7Workstation-RHSCL-2.4:rh-mysql56-mysql-common-0:5.6.37-5.el7.x86_64",
            "7Workstation-RHSCL-2.4:rh-mysql56-mysql-config-0:5.6.37-5.el7.x86_64",
            "7Workstation-RHSCL-2.4:rh-mysql56-mysql-debuginfo-0:5.6.37-5.el7.x86_64",
            "7Workstation-RHSCL-2.4:rh-mysql56-mysql-devel-0:5.6.37-5.el7.x86_64",
            "7Workstation-RHSCL-2.4:rh-mysql56-mysql-errmsg-0:5.6.37-5.el7.x86_64",
            "7Workstation-RHSCL-2.4:rh-mysql56-mysql-server-0:5.6.37-5.el7.x86_64",
            "7Workstation-RHSCL-2.4:rh-mysql56-mysql-test-0:5.6.37-5.el7.x86_64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2017:2787"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "HIGH",
            "attackVector": "LOCAL",
            "availabilityImpact": "HIGH",
            "baseScore": 4.0,
            "baseSeverity": "MEDIUM",
            "confidentialityImpact": "NONE",
            "integrityImpact": "NONE",
            "privilegesRequired": "HIGH",
            "scope": "UNCHANGED",
            "userInteraction": "REQUIRED",
            "vectorString": "CVSS:3.0/AV:L/AC:H/PR:H/UI:R/S:U/C:N/I:N/A:H",
            "version": "3.0"
          },
          "products": [
            "6Server-RHSCL-2.4-6.7.Z:rh-mysql56-mysql-0:5.6.37-5.el6.src",
            "6Server-RHSCL-2.4-6.7.Z:rh-mysql56-mysql-0:5.6.37-5.el6.x86_64",
            "6Server-RHSCL-2.4-6.7.Z:rh-mysql56-mysql-bench-0:5.6.37-5.el6.x86_64",
            "6Server-RHSCL-2.4-6.7.Z:rh-mysql56-mysql-common-0:5.6.37-5.el6.x86_64",
            "6Server-RHSCL-2.4-6.7.Z:rh-mysql56-mysql-config-0:5.6.37-5.el6.x86_64",
            "6Server-RHSCL-2.4-6.7.Z:rh-mysql56-mysql-debuginfo-0:5.6.37-5.el6.x86_64",
            "6Server-RHSCL-2.4-6.7.Z:rh-mysql56-mysql-devel-0:5.6.37-5.el6.x86_64",
            "6Server-RHSCL-2.4-6.7.Z:rh-mysql56-mysql-errmsg-0:5.6.37-5.el6.x86_64",
            "6Server-RHSCL-2.4-6.7.Z:rh-mysql56-mysql-server-0:5.6.37-5.el6.x86_64",
            "6Server-RHSCL-2.4-6.7.Z:rh-mysql56-mysql-test-0:5.6.37-5.el6.x86_64",
            "6Server-RHSCL-2.4:rh-mysql56-mysql-0:5.6.37-5.el6.src",
            "6Server-RHSCL-2.4:rh-mysql56-mysql-0:5.6.37-5.el6.x86_64",
            "6Server-RHSCL-2.4:rh-mysql56-mysql-bench-0:5.6.37-5.el6.x86_64",
            "6Server-RHSCL-2.4:rh-mysql56-mysql-common-0:5.6.37-5.el6.x86_64",
            "6Server-RHSCL-2.4:rh-mysql56-mysql-config-0:5.6.37-5.el6.x86_64",
            "6Server-RHSCL-2.4:rh-mysql56-mysql-debuginfo-0:5.6.37-5.el6.x86_64",
            "6Server-RHSCL-2.4:rh-mysql56-mysql-devel-0:5.6.37-5.el6.x86_64",
            "6Server-RHSCL-2.4:rh-mysql56-mysql-errmsg-0:5.6.37-5.el6.x86_64",
            "6Server-RHSCL-2.4:rh-mysql56-mysql-server-0:5.6.37-5.el6.x86_64",
            "6Server-RHSCL-2.4:rh-mysql56-mysql-test-0:5.6.37-5.el6.x86_64",
            "6Workstation-RHSCL-2.4:rh-mysql56-mysql-0:5.6.37-5.el6.src",
            "6Workstation-RHSCL-2.4:rh-mysql56-mysql-0:5.6.37-5.el6.x86_64",
            "6Workstation-RHSCL-2.4:rh-mysql56-mysql-bench-0:5.6.37-5.el6.x86_64",
            "6Workstation-RHSCL-2.4:rh-mysql56-mysql-common-0:5.6.37-5.el6.x86_64",
            "6Workstation-RHSCL-2.4:rh-mysql56-mysql-config-0:5.6.37-5.el6.x86_64",
            "6Workstation-RHSCL-2.4:rh-mysql56-mysql-debuginfo-0:5.6.37-5.el6.x86_64",
            "6Workstation-RHSCL-2.4:rh-mysql56-mysql-devel-0:5.6.37-5.el6.x86_64",
            "6Workstation-RHSCL-2.4:rh-mysql56-mysql-errmsg-0:5.6.37-5.el6.x86_64",
            "6Workstation-RHSCL-2.4:rh-mysql56-mysql-server-0:5.6.37-5.el6.x86_64",
            "6Workstation-RHSCL-2.4:rh-mysql56-mysql-test-0:5.6.37-5.el6.x86_64",
            "7Server-RHSCL-2.4-7.3.Z:rh-mysql56-mysql-0:5.6.37-5.el7.src",
            "7Server-RHSCL-2.4-7.3.Z:rh-mysql56-mysql-0:5.6.37-5.el7.x86_64",
            "7Server-RHSCL-2.4-7.3.Z:rh-mysql56-mysql-bench-0:5.6.37-5.el7.x86_64",
            "7Server-RHSCL-2.4-7.3.Z:rh-mysql56-mysql-common-0:5.6.37-5.el7.x86_64",
            "7Server-RHSCL-2.4-7.3.Z:rh-mysql56-mysql-config-0:5.6.37-5.el7.x86_64",
            "7Server-RHSCL-2.4-7.3.Z:rh-mysql56-mysql-debuginfo-0:5.6.37-5.el7.x86_64",
            "7Server-RHSCL-2.4-7.3.Z:rh-mysql56-mysql-devel-0:5.6.37-5.el7.x86_64",
            "7Server-RHSCL-2.4-7.3.Z:rh-mysql56-mysql-errmsg-0:5.6.37-5.el7.x86_64",
            "7Server-RHSCL-2.4-7.3.Z:rh-mysql56-mysql-server-0:5.6.37-5.el7.x86_64",
            "7Server-RHSCL-2.4-7.3.Z:rh-mysql56-mysql-test-0:5.6.37-5.el7.x86_64",
            "7Server-RHSCL-2.4:rh-mysql56-mysql-0:5.6.37-5.el7.src",
            "7Server-RHSCL-2.4:rh-mysql56-mysql-0:5.6.37-5.el7.x86_64",
            "7Server-RHSCL-2.4:rh-mysql56-mysql-bench-0:5.6.37-5.el7.x86_64",
            "7Server-RHSCL-2.4:rh-mysql56-mysql-common-0:5.6.37-5.el7.x86_64",
            "7Server-RHSCL-2.4:rh-mysql56-mysql-config-0:5.6.37-5.el7.x86_64",
            "7Server-RHSCL-2.4:rh-mysql56-mysql-debuginfo-0:5.6.37-5.el7.x86_64",
            "7Server-RHSCL-2.4:rh-mysql56-mysql-devel-0:5.6.37-5.el7.x86_64",
            "7Server-RHSCL-2.4:rh-mysql56-mysql-errmsg-0:5.6.37-5.el7.x86_64",
            "7Server-RHSCL-2.4:rh-mysql56-mysql-server-0:5.6.37-5.el7.x86_64",
            "7Server-RHSCL-2.4:rh-mysql56-mysql-test-0:5.6.37-5.el7.x86_64",
            "7Workstation-RHSCL-2.4:rh-mysql56-mysql-0:5.6.37-5.el7.src",
            "7Workstation-RHSCL-2.4:rh-mysql56-mysql-0:5.6.37-5.el7.x86_64",
            "7Workstation-RHSCL-2.4:rh-mysql56-mysql-bench-0:5.6.37-5.el7.x86_64",
            "7Workstation-RHSCL-2.4:rh-mysql56-mysql-common-0:5.6.37-5.el7.x86_64",
            "7Workstation-RHSCL-2.4:rh-mysql56-mysql-config-0:5.6.37-5.el7.x86_64",
            "7Workstation-RHSCL-2.4:rh-mysql56-mysql-debuginfo-0:5.6.37-5.el7.x86_64",
            "7Workstation-RHSCL-2.4:rh-mysql56-mysql-devel-0:5.6.37-5.el7.x86_64",
            "7Workstation-RHSCL-2.4:rh-mysql56-mysql-errmsg-0:5.6.37-5.el7.x86_64",
            "7Workstation-RHSCL-2.4:rh-mysql56-mysql-server-0:5.6.37-5.el7.x86_64",
            "7Workstation-RHSCL-2.4:rh-mysql56-mysql-test-0:5.6.37-5.el7.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Moderate"
        }
      ],
      "title": "mysql: Logging unspecified vulnerability (CPU Jan 2017)"
    },
    {
      "cve": "CVE-2017-3318",
      "discovery_date": "2017-01-18T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "1414357"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Error Handling). Supported versions that are affected are 5.5.53 and earlier, 5.6.34 and earlier and 5.7.16 and earlier. Difficult to exploit vulnerability allows high privileged attacker with logon to the infrastructure where MySQL Server executes to compromise MySQL Server. Successful attacks require human interaction from a person other than the attacker. Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all MySQL Server accessible data. CVSS v3.0 Base Score 4.0 (Confidentiality impacts).",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "mysql: Server: Error Handling unspecified vulnerability (CPU Jan 2017)",
          "title": "Vulnerability summary"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "6Server-RHSCL-2.4-6.7.Z:rh-mysql56-mysql-0:5.6.37-5.el6.src",
          "6Server-RHSCL-2.4-6.7.Z:rh-mysql56-mysql-0:5.6.37-5.el6.x86_64",
          "6Server-RHSCL-2.4-6.7.Z:rh-mysql56-mysql-bench-0:5.6.37-5.el6.x86_64",
          "6Server-RHSCL-2.4-6.7.Z:rh-mysql56-mysql-common-0:5.6.37-5.el6.x86_64",
          "6Server-RHSCL-2.4-6.7.Z:rh-mysql56-mysql-config-0:5.6.37-5.el6.x86_64",
          "6Server-RHSCL-2.4-6.7.Z:rh-mysql56-mysql-debuginfo-0:5.6.37-5.el6.x86_64",
          "6Server-RHSCL-2.4-6.7.Z:rh-mysql56-mysql-devel-0:5.6.37-5.el6.x86_64",
          "6Server-RHSCL-2.4-6.7.Z:rh-mysql56-mysql-errmsg-0:5.6.37-5.el6.x86_64",
          "6Server-RHSCL-2.4-6.7.Z:rh-mysql56-mysql-server-0:5.6.37-5.el6.x86_64",
          "6Server-RHSCL-2.4-6.7.Z:rh-mysql56-mysql-test-0:5.6.37-5.el6.x86_64",
          "6Server-RHSCL-2.4:rh-mysql56-mysql-0:5.6.37-5.el6.src",
          "6Server-RHSCL-2.4:rh-mysql56-mysql-0:5.6.37-5.el6.x86_64",
          "6Server-RHSCL-2.4:rh-mysql56-mysql-bench-0:5.6.37-5.el6.x86_64",
          "6Server-RHSCL-2.4:rh-mysql56-mysql-common-0:5.6.37-5.el6.x86_64",
          "6Server-RHSCL-2.4:rh-mysql56-mysql-config-0:5.6.37-5.el6.x86_64",
          "6Server-RHSCL-2.4:rh-mysql56-mysql-debuginfo-0:5.6.37-5.el6.x86_64",
          "6Server-RHSCL-2.4:rh-mysql56-mysql-devel-0:5.6.37-5.el6.x86_64",
          "6Server-RHSCL-2.4:rh-mysql56-mysql-errmsg-0:5.6.37-5.el6.x86_64",
          "6Server-RHSCL-2.4:rh-mysql56-mysql-server-0:5.6.37-5.el6.x86_64",
          "6Server-RHSCL-2.4:rh-mysql56-mysql-test-0:5.6.37-5.el6.x86_64",
          "6Workstation-RHSCL-2.4:rh-mysql56-mysql-0:5.6.37-5.el6.src",
          "6Workstation-RHSCL-2.4:rh-mysql56-mysql-0:5.6.37-5.el6.x86_64",
          "6Workstation-RHSCL-2.4:rh-mysql56-mysql-bench-0:5.6.37-5.el6.x86_64",
          "6Workstation-RHSCL-2.4:rh-mysql56-mysql-common-0:5.6.37-5.el6.x86_64",
          "6Workstation-RHSCL-2.4:rh-mysql56-mysql-config-0:5.6.37-5.el6.x86_64",
          "6Workstation-RHSCL-2.4:rh-mysql56-mysql-debuginfo-0:5.6.37-5.el6.x86_64",
          "6Workstation-RHSCL-2.4:rh-mysql56-mysql-devel-0:5.6.37-5.el6.x86_64",
          "6Workstation-RHSCL-2.4:rh-mysql56-mysql-errmsg-0:5.6.37-5.el6.x86_64",
          "6Workstation-RHSCL-2.4:rh-mysql56-mysql-server-0:5.6.37-5.el6.x86_64",
          "6Workstation-RHSCL-2.4:rh-mysql56-mysql-test-0:5.6.37-5.el6.x86_64",
          "7Server-RHSCL-2.4-7.3.Z:rh-mysql56-mysql-0:5.6.37-5.el7.src",
          "7Server-RHSCL-2.4-7.3.Z:rh-mysql56-mysql-0:5.6.37-5.el7.x86_64",
          "7Server-RHSCL-2.4-7.3.Z:rh-mysql56-mysql-bench-0:5.6.37-5.el7.x86_64",
          "7Server-RHSCL-2.4-7.3.Z:rh-mysql56-mysql-common-0:5.6.37-5.el7.x86_64",
          "7Server-RHSCL-2.4-7.3.Z:rh-mysql56-mysql-config-0:5.6.37-5.el7.x86_64",
          "7Server-RHSCL-2.4-7.3.Z:rh-mysql56-mysql-debuginfo-0:5.6.37-5.el7.x86_64",
          "7Server-RHSCL-2.4-7.3.Z:rh-mysql56-mysql-devel-0:5.6.37-5.el7.x86_64",
          "7Server-RHSCL-2.4-7.3.Z:rh-mysql56-mysql-errmsg-0:5.6.37-5.el7.x86_64",
          "7Server-RHSCL-2.4-7.3.Z:rh-mysql56-mysql-server-0:5.6.37-5.el7.x86_64",
          "7Server-RHSCL-2.4-7.3.Z:rh-mysql56-mysql-test-0:5.6.37-5.el7.x86_64",
          "7Server-RHSCL-2.4:rh-mysql56-mysql-0:5.6.37-5.el7.src",
          "7Server-RHSCL-2.4:rh-mysql56-mysql-0:5.6.37-5.el7.x86_64",
          "7Server-RHSCL-2.4:rh-mysql56-mysql-bench-0:5.6.37-5.el7.x86_64",
          "7Server-RHSCL-2.4:rh-mysql56-mysql-common-0:5.6.37-5.el7.x86_64",
          "7Server-RHSCL-2.4:rh-mysql56-mysql-config-0:5.6.37-5.el7.x86_64",
          "7Server-RHSCL-2.4:rh-mysql56-mysql-debuginfo-0:5.6.37-5.el7.x86_64",
          "7Server-RHSCL-2.4:rh-mysql56-mysql-devel-0:5.6.37-5.el7.x86_64",
          "7Server-RHSCL-2.4:rh-mysql56-mysql-errmsg-0:5.6.37-5.el7.x86_64",
          "7Server-RHSCL-2.4:rh-mysql56-mysql-server-0:5.6.37-5.el7.x86_64",
          "7Server-RHSCL-2.4:rh-mysql56-mysql-test-0:5.6.37-5.el7.x86_64",
          "7Workstation-RHSCL-2.4:rh-mysql56-mysql-0:5.6.37-5.el7.src",
          "7Workstation-RHSCL-2.4:rh-mysql56-mysql-0:5.6.37-5.el7.x86_64",
          "7Workstation-RHSCL-2.4:rh-mysql56-mysql-bench-0:5.6.37-5.el7.x86_64",
          "7Workstation-RHSCL-2.4:rh-mysql56-mysql-common-0:5.6.37-5.el7.x86_64",
          "7Workstation-RHSCL-2.4:rh-mysql56-mysql-config-0:5.6.37-5.el7.x86_64",
          "7Workstation-RHSCL-2.4:rh-mysql56-mysql-debuginfo-0:5.6.37-5.el7.x86_64",
          "7Workstation-RHSCL-2.4:rh-mysql56-mysql-devel-0:5.6.37-5.el7.x86_64",
          "7Workstation-RHSCL-2.4:rh-mysql56-mysql-errmsg-0:5.6.37-5.el7.x86_64",
          "7Workstation-RHSCL-2.4:rh-mysql56-mysql-server-0:5.6.37-5.el7.x86_64",
          "7Workstation-RHSCL-2.4:rh-mysql56-mysql-test-0:5.6.37-5.el7.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2017-3318"
        },
        {
          "category": "external",
          "summary": "RHBZ#1414357",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1414357"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2017-3318",
          "url": "https://www.cve.org/CVERecord?id=CVE-2017-3318"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2017-3318",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2017-3318"
        },
        {
          "category": "external",
          "summary": "http://www.oracle.com/technetwork/security-advisory/cpujan2017-2881727.html#AppendixMSQL",
          "url": "http://www.oracle.com/technetwork/security-advisory/cpujan2017-2881727.html#AppendixMSQL"
        }
      ],
      "release_date": "2017-01-18T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2017-09-21T07:42:12+00:00",
          "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAfter installing this update, the MySQL server daemon (mysqld) will be restarted automatically.",
          "product_ids": [
            "6Server-RHSCL-2.4-6.7.Z:rh-mysql56-mysql-0:5.6.37-5.el6.src",
            "6Server-RHSCL-2.4-6.7.Z:rh-mysql56-mysql-0:5.6.37-5.el6.x86_64",
            "6Server-RHSCL-2.4-6.7.Z:rh-mysql56-mysql-bench-0:5.6.37-5.el6.x86_64",
            "6Server-RHSCL-2.4-6.7.Z:rh-mysql56-mysql-common-0:5.6.37-5.el6.x86_64",
            "6Server-RHSCL-2.4-6.7.Z:rh-mysql56-mysql-config-0:5.6.37-5.el6.x86_64",
            "6Server-RHSCL-2.4-6.7.Z:rh-mysql56-mysql-debuginfo-0:5.6.37-5.el6.x86_64",
            "6Server-RHSCL-2.4-6.7.Z:rh-mysql56-mysql-devel-0:5.6.37-5.el6.x86_64",
            "6Server-RHSCL-2.4-6.7.Z:rh-mysql56-mysql-errmsg-0:5.6.37-5.el6.x86_64",
            "6Server-RHSCL-2.4-6.7.Z:rh-mysql56-mysql-server-0:5.6.37-5.el6.x86_64",
            "6Server-RHSCL-2.4-6.7.Z:rh-mysql56-mysql-test-0:5.6.37-5.el6.x86_64",
            "6Server-RHSCL-2.4:rh-mysql56-mysql-0:5.6.37-5.el6.src",
            "6Server-RHSCL-2.4:rh-mysql56-mysql-0:5.6.37-5.el6.x86_64",
            "6Server-RHSCL-2.4:rh-mysql56-mysql-bench-0:5.6.37-5.el6.x86_64",
            "6Server-RHSCL-2.4:rh-mysql56-mysql-common-0:5.6.37-5.el6.x86_64",
            "6Server-RHSCL-2.4:rh-mysql56-mysql-config-0:5.6.37-5.el6.x86_64",
            "6Server-RHSCL-2.4:rh-mysql56-mysql-debuginfo-0:5.6.37-5.el6.x86_64",
            "6Server-RHSCL-2.4:rh-mysql56-mysql-devel-0:5.6.37-5.el6.x86_64",
            "6Server-RHSCL-2.4:rh-mysql56-mysql-errmsg-0:5.6.37-5.el6.x86_64",
            "6Server-RHSCL-2.4:rh-mysql56-mysql-server-0:5.6.37-5.el6.x86_64",
            "6Server-RHSCL-2.4:rh-mysql56-mysql-test-0:5.6.37-5.el6.x86_64",
            "6Workstation-RHSCL-2.4:rh-mysql56-mysql-0:5.6.37-5.el6.src",
            "6Workstation-RHSCL-2.4:rh-mysql56-mysql-0:5.6.37-5.el6.x86_64",
            "6Workstation-RHSCL-2.4:rh-mysql56-mysql-bench-0:5.6.37-5.el6.x86_64",
            "6Workstation-RHSCL-2.4:rh-mysql56-mysql-common-0:5.6.37-5.el6.x86_64",
            "6Workstation-RHSCL-2.4:rh-mysql56-mysql-config-0:5.6.37-5.el6.x86_64",
            "6Workstation-RHSCL-2.4:rh-mysql56-mysql-debuginfo-0:5.6.37-5.el6.x86_64",
            "6Workstation-RHSCL-2.4:rh-mysql56-mysql-devel-0:5.6.37-5.el6.x86_64",
            "6Workstation-RHSCL-2.4:rh-mysql56-mysql-errmsg-0:5.6.37-5.el6.x86_64",
            "6Workstation-RHSCL-2.4:rh-mysql56-mysql-server-0:5.6.37-5.el6.x86_64",
            "6Workstation-RHSCL-2.4:rh-mysql56-mysql-test-0:5.6.37-5.el6.x86_64",
            "7Server-RHSCL-2.4-7.3.Z:rh-mysql56-mysql-0:5.6.37-5.el7.src",
            "7Server-RHSCL-2.4-7.3.Z:rh-mysql56-mysql-0:5.6.37-5.el7.x86_64",
            "7Server-RHSCL-2.4-7.3.Z:rh-mysql56-mysql-bench-0:5.6.37-5.el7.x86_64",
            "7Server-RHSCL-2.4-7.3.Z:rh-mysql56-mysql-common-0:5.6.37-5.el7.x86_64",
            "7Server-RHSCL-2.4-7.3.Z:rh-mysql56-mysql-config-0:5.6.37-5.el7.x86_64",
            "7Server-RHSCL-2.4-7.3.Z:rh-mysql56-mysql-debuginfo-0:5.6.37-5.el7.x86_64",
            "7Server-RHSCL-2.4-7.3.Z:rh-mysql56-mysql-devel-0:5.6.37-5.el7.x86_64",
            "7Server-RHSCL-2.4-7.3.Z:rh-mysql56-mysql-errmsg-0:5.6.37-5.el7.x86_64",
            "7Server-RHSCL-2.4-7.3.Z:rh-mysql56-mysql-server-0:5.6.37-5.el7.x86_64",
            "7Server-RHSCL-2.4-7.3.Z:rh-mysql56-mysql-test-0:5.6.37-5.el7.x86_64",
            "7Server-RHSCL-2.4:rh-mysql56-mysql-0:5.6.37-5.el7.src",
            "7Server-RHSCL-2.4:rh-mysql56-mysql-0:5.6.37-5.el7.x86_64",
            "7Server-RHSCL-2.4:rh-mysql56-mysql-bench-0:5.6.37-5.el7.x86_64",
            "7Server-RHSCL-2.4:rh-mysql56-mysql-common-0:5.6.37-5.el7.x86_64",
            "7Server-RHSCL-2.4:rh-mysql56-mysql-config-0:5.6.37-5.el7.x86_64",
            "7Server-RHSCL-2.4:rh-mysql56-mysql-debuginfo-0:5.6.37-5.el7.x86_64",
            "7Server-RHSCL-2.4:rh-mysql56-mysql-devel-0:5.6.37-5.el7.x86_64",
            "7Server-RHSCL-2.4:rh-mysql56-mysql-errmsg-0:5.6.37-5.el7.x86_64",
            "7Server-RHSCL-2.4:rh-mysql56-mysql-server-0:5.6.37-5.el7.x86_64",
            "7Server-RHSCL-2.4:rh-mysql56-mysql-test-0:5.6.37-5.el7.x86_64",
            "7Workstation-RHSCL-2.4:rh-mysql56-mysql-0:5.6.37-5.el7.src",
            "7Workstation-RHSCL-2.4:rh-mysql56-mysql-0:5.6.37-5.el7.x86_64",
            "7Workstation-RHSCL-2.4:rh-mysql56-mysql-bench-0:5.6.37-5.el7.x86_64",
            "7Workstation-RHSCL-2.4:rh-mysql56-mysql-common-0:5.6.37-5.el7.x86_64",
            "7Workstation-RHSCL-2.4:rh-mysql56-mysql-config-0:5.6.37-5.el7.x86_64",
            "7Workstation-RHSCL-2.4:rh-mysql56-mysql-debuginfo-0:5.6.37-5.el7.x86_64",
            "7Workstation-RHSCL-2.4:rh-mysql56-mysql-devel-0:5.6.37-5.el7.x86_64",
            "7Workstation-RHSCL-2.4:rh-mysql56-mysql-errmsg-0:5.6.37-5.el7.x86_64",
            "7Workstation-RHSCL-2.4:rh-mysql56-mysql-server-0:5.6.37-5.el7.x86_64",
            "7Workstation-RHSCL-2.4:rh-mysql56-mysql-test-0:5.6.37-5.el7.x86_64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2017:2787"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "HIGH",
            "attackVector": "LOCAL",
            "availabilityImpact": "NONE",
            "baseScore": 4.0,
            "baseSeverity": "MEDIUM",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "NONE",
            "privilegesRequired": "HIGH",
            "scope": "UNCHANGED",
            "userInteraction": "REQUIRED",
            "vectorString": "CVSS:3.0/AV:L/AC:H/PR:H/UI:R/S:U/C:H/I:N/A:N",
            "version": "3.0"
          },
          "products": [
            "6Server-RHSCL-2.4-6.7.Z:rh-mysql56-mysql-0:5.6.37-5.el6.src",
            "6Server-RHSCL-2.4-6.7.Z:rh-mysql56-mysql-0:5.6.37-5.el6.x86_64",
            "6Server-RHSCL-2.4-6.7.Z:rh-mysql56-mysql-bench-0:5.6.37-5.el6.x86_64",
            "6Server-RHSCL-2.4-6.7.Z:rh-mysql56-mysql-common-0:5.6.37-5.el6.x86_64",
            "6Server-RHSCL-2.4-6.7.Z:rh-mysql56-mysql-config-0:5.6.37-5.el6.x86_64",
            "6Server-RHSCL-2.4-6.7.Z:rh-mysql56-mysql-debuginfo-0:5.6.37-5.el6.x86_64",
            "6Server-RHSCL-2.4-6.7.Z:rh-mysql56-mysql-devel-0:5.6.37-5.el6.x86_64",
            "6Server-RHSCL-2.4-6.7.Z:rh-mysql56-mysql-errmsg-0:5.6.37-5.el6.x86_64",
            "6Server-RHSCL-2.4-6.7.Z:rh-mysql56-mysql-server-0:5.6.37-5.el6.x86_64",
            "6Server-RHSCL-2.4-6.7.Z:rh-mysql56-mysql-test-0:5.6.37-5.el6.x86_64",
            "6Server-RHSCL-2.4:rh-mysql56-mysql-0:5.6.37-5.el6.src",
            "6Server-RHSCL-2.4:rh-mysql56-mysql-0:5.6.37-5.el6.x86_64",
            "6Server-RHSCL-2.4:rh-mysql56-mysql-bench-0:5.6.37-5.el6.x86_64",
            "6Server-RHSCL-2.4:rh-mysql56-mysql-common-0:5.6.37-5.el6.x86_64",
            "6Server-RHSCL-2.4:rh-mysql56-mysql-config-0:5.6.37-5.el6.x86_64",
            "6Server-RHSCL-2.4:rh-mysql56-mysql-debuginfo-0:5.6.37-5.el6.x86_64",
            "6Server-RHSCL-2.4:rh-mysql56-mysql-devel-0:5.6.37-5.el6.x86_64",
            "6Server-RHSCL-2.4:rh-mysql56-mysql-errmsg-0:5.6.37-5.el6.x86_64",
            "6Server-RHSCL-2.4:rh-mysql56-mysql-server-0:5.6.37-5.el6.x86_64",
            "6Server-RHSCL-2.4:rh-mysql56-mysql-test-0:5.6.37-5.el6.x86_64",
            "6Workstation-RHSCL-2.4:rh-mysql56-mysql-0:5.6.37-5.el6.src",
            "6Workstation-RHSCL-2.4:rh-mysql56-mysql-0:5.6.37-5.el6.x86_64",
            "6Workstation-RHSCL-2.4:rh-mysql56-mysql-bench-0:5.6.37-5.el6.x86_64",
            "6Workstation-RHSCL-2.4:rh-mysql56-mysql-common-0:5.6.37-5.el6.x86_64",
            "6Workstation-RHSCL-2.4:rh-mysql56-mysql-config-0:5.6.37-5.el6.x86_64",
            "6Workstation-RHSCL-2.4:rh-mysql56-mysql-debuginfo-0:5.6.37-5.el6.x86_64",
            "6Workstation-RHSCL-2.4:rh-mysql56-mysql-devel-0:5.6.37-5.el6.x86_64",
            "6Workstation-RHSCL-2.4:rh-mysql56-mysql-errmsg-0:5.6.37-5.el6.x86_64",
            "6Workstation-RHSCL-2.4:rh-mysql56-mysql-server-0:5.6.37-5.el6.x86_64",
            "6Workstation-RHSCL-2.4:rh-mysql56-mysql-test-0:5.6.37-5.el6.x86_64",
            "7Server-RHSCL-2.4-7.3.Z:rh-mysql56-mysql-0:5.6.37-5.el7.src",
            "7Server-RHSCL-2.4-7.3.Z:rh-mysql56-mysql-0:5.6.37-5.el7.x86_64",
            "7Server-RHSCL-2.4-7.3.Z:rh-mysql56-mysql-bench-0:5.6.37-5.el7.x86_64",
            "7Server-RHSCL-2.4-7.3.Z:rh-mysql56-mysql-common-0:5.6.37-5.el7.x86_64",
            "7Server-RHSCL-2.4-7.3.Z:rh-mysql56-mysql-config-0:5.6.37-5.el7.x86_64",
            "7Server-RHSCL-2.4-7.3.Z:rh-mysql56-mysql-debuginfo-0:5.6.37-5.el7.x86_64",
            "7Server-RHSCL-2.4-7.3.Z:rh-mysql56-mysql-devel-0:5.6.37-5.el7.x86_64",
            "7Server-RHSCL-2.4-7.3.Z:rh-mysql56-mysql-errmsg-0:5.6.37-5.el7.x86_64",
            "7Server-RHSCL-2.4-7.3.Z:rh-mysql56-mysql-server-0:5.6.37-5.el7.x86_64",
            "7Server-RHSCL-2.4-7.3.Z:rh-mysql56-mysql-test-0:5.6.37-5.el7.x86_64",
            "7Server-RHSCL-2.4:rh-mysql56-mysql-0:5.6.37-5.el7.src",
            "7Server-RHSCL-2.4:rh-mysql56-mysql-0:5.6.37-5.el7.x86_64",
            "7Server-RHSCL-2.4:rh-mysql56-mysql-bench-0:5.6.37-5.el7.x86_64",
            "7Server-RHSCL-2.4:rh-mysql56-mysql-common-0:5.6.37-5.el7.x86_64",
            "7Server-RHSCL-2.4:rh-mysql56-mysql-config-0:5.6.37-5.el7.x86_64",
            "7Server-RHSCL-2.4:rh-mysql56-mysql-debuginfo-0:5.6.37-5.el7.x86_64",
            "7Server-RHSCL-2.4:rh-mysql56-mysql-devel-0:5.6.37-5.el7.x86_64",
            "7Server-RHSCL-2.4:rh-mysql56-mysql-errmsg-0:5.6.37-5.el7.x86_64",
            "7Server-RHSCL-2.4:rh-mysql56-mysql-server-0:5.6.37-5.el7.x86_64",
            "7Server-RHSCL-2.4:rh-mysql56-mysql-test-0:5.6.37-5.el7.x86_64",
            "7Workstation-RHSCL-2.4:rh-mysql56-mysql-0:5.6.37-5.el7.src",
            "7Workstation-RHSCL-2.4:rh-mysql56-mysql-0:5.6.37-5.el7.x86_64",
            "7Workstation-RHSCL-2.4:rh-mysql56-mysql-bench-0:5.6.37-5.el7.x86_64",
            "7Workstation-RHSCL-2.4:rh-mysql56-mysql-common-0:5.6.37-5.el7.x86_64",
            "7Workstation-RHSCL-2.4:rh-mysql56-mysql-config-0:5.6.37-5.el7.x86_64",
            "7Workstation-RHSCL-2.4:rh-mysql56-mysql-debuginfo-0:5.6.37-5.el7.x86_64",
            "7Workstation-RHSCL-2.4:rh-mysql56-mysql-devel-0:5.6.37-5.el7.x86_64",
            "7Workstation-RHSCL-2.4:rh-mysql56-mysql-errmsg-0:5.6.37-5.el7.x86_64",
            "7Workstation-RHSCL-2.4:rh-mysql56-mysql-server-0:5.6.37-5.el7.x86_64",
            "7Workstation-RHSCL-2.4:rh-mysql56-mysql-test-0:5.6.37-5.el7.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Moderate"
        }
      ],
      "title": "mysql: Server: Error Handling unspecified vulnerability (CPU Jan 2017)"
    },
    {
      "cve": "CVE-2017-3450",
      "discovery_date": "2017-04-19T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "1443363"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Memcached). Supported versions that are affected are 5.6.35 and earlier and 5.7.17 and earlier. Easily \"exploitable\" vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.0 Base Score 7.5 (Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H).",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "mysql: Server: Memcached unspecified vulnerability (CPU Apr 2017)",
          "title": "Vulnerability summary"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "6Server-RHSCL-2.4-6.7.Z:rh-mysql56-mysql-0:5.6.37-5.el6.src",
          "6Server-RHSCL-2.4-6.7.Z:rh-mysql56-mysql-0:5.6.37-5.el6.x86_64",
          "6Server-RHSCL-2.4-6.7.Z:rh-mysql56-mysql-bench-0:5.6.37-5.el6.x86_64",
          "6Server-RHSCL-2.4-6.7.Z:rh-mysql56-mysql-common-0:5.6.37-5.el6.x86_64",
          "6Server-RHSCL-2.4-6.7.Z:rh-mysql56-mysql-config-0:5.6.37-5.el6.x86_64",
          "6Server-RHSCL-2.4-6.7.Z:rh-mysql56-mysql-debuginfo-0:5.6.37-5.el6.x86_64",
          "6Server-RHSCL-2.4-6.7.Z:rh-mysql56-mysql-devel-0:5.6.37-5.el6.x86_64",
          "6Server-RHSCL-2.4-6.7.Z:rh-mysql56-mysql-errmsg-0:5.6.37-5.el6.x86_64",
          "6Server-RHSCL-2.4-6.7.Z:rh-mysql56-mysql-server-0:5.6.37-5.el6.x86_64",
          "6Server-RHSCL-2.4-6.7.Z:rh-mysql56-mysql-test-0:5.6.37-5.el6.x86_64",
          "6Server-RHSCL-2.4:rh-mysql56-mysql-0:5.6.37-5.el6.src",
          "6Server-RHSCL-2.4:rh-mysql56-mysql-0:5.6.37-5.el6.x86_64",
          "6Server-RHSCL-2.4:rh-mysql56-mysql-bench-0:5.6.37-5.el6.x86_64",
          "6Server-RHSCL-2.4:rh-mysql56-mysql-common-0:5.6.37-5.el6.x86_64",
          "6Server-RHSCL-2.4:rh-mysql56-mysql-config-0:5.6.37-5.el6.x86_64",
          "6Server-RHSCL-2.4:rh-mysql56-mysql-debuginfo-0:5.6.37-5.el6.x86_64",
          "6Server-RHSCL-2.4:rh-mysql56-mysql-devel-0:5.6.37-5.el6.x86_64",
          "6Server-RHSCL-2.4:rh-mysql56-mysql-errmsg-0:5.6.37-5.el6.x86_64",
          "6Server-RHSCL-2.4:rh-mysql56-mysql-server-0:5.6.37-5.el6.x86_64",
          "6Server-RHSCL-2.4:rh-mysql56-mysql-test-0:5.6.37-5.el6.x86_64",
          "6Workstation-RHSCL-2.4:rh-mysql56-mysql-0:5.6.37-5.el6.src",
          "6Workstation-RHSCL-2.4:rh-mysql56-mysql-0:5.6.37-5.el6.x86_64",
          "6Workstation-RHSCL-2.4:rh-mysql56-mysql-bench-0:5.6.37-5.el6.x86_64",
          "6Workstation-RHSCL-2.4:rh-mysql56-mysql-common-0:5.6.37-5.el6.x86_64",
          "6Workstation-RHSCL-2.4:rh-mysql56-mysql-config-0:5.6.37-5.el6.x86_64",
          "6Workstation-RHSCL-2.4:rh-mysql56-mysql-debuginfo-0:5.6.37-5.el6.x86_64",
          "6Workstation-RHSCL-2.4:rh-mysql56-mysql-devel-0:5.6.37-5.el6.x86_64",
          "6Workstation-RHSCL-2.4:rh-mysql56-mysql-errmsg-0:5.6.37-5.el6.x86_64",
          "6Workstation-RHSCL-2.4:rh-mysql56-mysql-server-0:5.6.37-5.el6.x86_64",
          "6Workstation-RHSCL-2.4:rh-mysql56-mysql-test-0:5.6.37-5.el6.x86_64",
          "7Server-RHSCL-2.4-7.3.Z:rh-mysql56-mysql-0:5.6.37-5.el7.src",
          "7Server-RHSCL-2.4-7.3.Z:rh-mysql56-mysql-0:5.6.37-5.el7.x86_64",
          "7Server-RHSCL-2.4-7.3.Z:rh-mysql56-mysql-bench-0:5.6.37-5.el7.x86_64",
          "7Server-RHSCL-2.4-7.3.Z:rh-mysql56-mysql-common-0:5.6.37-5.el7.x86_64",
          "7Server-RHSCL-2.4-7.3.Z:rh-mysql56-mysql-config-0:5.6.37-5.el7.x86_64",
          "7Server-RHSCL-2.4-7.3.Z:rh-mysql56-mysql-debuginfo-0:5.6.37-5.el7.x86_64",
          "7Server-RHSCL-2.4-7.3.Z:rh-mysql56-mysql-devel-0:5.6.37-5.el7.x86_64",
          "7Server-RHSCL-2.4-7.3.Z:rh-mysql56-mysql-errmsg-0:5.6.37-5.el7.x86_64",
          "7Server-RHSCL-2.4-7.3.Z:rh-mysql56-mysql-server-0:5.6.37-5.el7.x86_64",
          "7Server-RHSCL-2.4-7.3.Z:rh-mysql56-mysql-test-0:5.6.37-5.el7.x86_64",
          "7Server-RHSCL-2.4:rh-mysql56-mysql-0:5.6.37-5.el7.src",
          "7Server-RHSCL-2.4:rh-mysql56-mysql-0:5.6.37-5.el7.x86_64",
          "7Server-RHSCL-2.4:rh-mysql56-mysql-bench-0:5.6.37-5.el7.x86_64",
          "7Server-RHSCL-2.4:rh-mysql56-mysql-common-0:5.6.37-5.el7.x86_64",
          "7Server-RHSCL-2.4:rh-mysql56-mysql-config-0:5.6.37-5.el7.x86_64",
          "7Server-RHSCL-2.4:rh-mysql56-mysql-debuginfo-0:5.6.37-5.el7.x86_64",
          "7Server-RHSCL-2.4:rh-mysql56-mysql-devel-0:5.6.37-5.el7.x86_64",
          "7Server-RHSCL-2.4:rh-mysql56-mysql-errmsg-0:5.6.37-5.el7.x86_64",
          "7Server-RHSCL-2.4:rh-mysql56-mysql-server-0:5.6.37-5.el7.x86_64",
          "7Server-RHSCL-2.4:rh-mysql56-mysql-test-0:5.6.37-5.el7.x86_64",
          "7Workstation-RHSCL-2.4:rh-mysql56-mysql-0:5.6.37-5.el7.src",
          "7Workstation-RHSCL-2.4:rh-mysql56-mysql-0:5.6.37-5.el7.x86_64",
          "7Workstation-RHSCL-2.4:rh-mysql56-mysql-bench-0:5.6.37-5.el7.x86_64",
          "7Workstation-RHSCL-2.4:rh-mysql56-mysql-common-0:5.6.37-5.el7.x86_64",
          "7Workstation-RHSCL-2.4:rh-mysql56-mysql-config-0:5.6.37-5.el7.x86_64",
          "7Workstation-RHSCL-2.4:rh-mysql56-mysql-debuginfo-0:5.6.37-5.el7.x86_64",
          "7Workstation-RHSCL-2.4:rh-mysql56-mysql-devel-0:5.6.37-5.el7.x86_64",
          "7Workstation-RHSCL-2.4:rh-mysql56-mysql-errmsg-0:5.6.37-5.el7.x86_64",
          "7Workstation-RHSCL-2.4:rh-mysql56-mysql-server-0:5.6.37-5.el7.x86_64",
          "7Workstation-RHSCL-2.4:rh-mysql56-mysql-test-0:5.6.37-5.el7.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2017-3450"
        },
        {
          "category": "external",
          "summary": "RHBZ#1443363",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1443363"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2017-3450",
          "url": "https://www.cve.org/CVERecord?id=CVE-2017-3450"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2017-3450",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2017-3450"
        },
        {
          "category": "external",
          "summary": "http://www.oracle.com/technetwork/security-advisory/cpuapr2017-3236618.html#AppendixMSQL",
          "url": "http://www.oracle.com/technetwork/security-advisory/cpuapr2017-3236618.html#AppendixMSQL"
        }
      ],
      "release_date": "2017-04-19T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2017-09-21T07:42:12+00:00",
          "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAfter installing this update, the MySQL server daemon (mysqld) will be restarted automatically.",
          "product_ids": [
            "6Server-RHSCL-2.4-6.7.Z:rh-mysql56-mysql-0:5.6.37-5.el6.src",
            "6Server-RHSCL-2.4-6.7.Z:rh-mysql56-mysql-0:5.6.37-5.el6.x86_64",
            "6Server-RHSCL-2.4-6.7.Z:rh-mysql56-mysql-bench-0:5.6.37-5.el6.x86_64",
            "6Server-RHSCL-2.4-6.7.Z:rh-mysql56-mysql-common-0:5.6.37-5.el6.x86_64",
            "6Server-RHSCL-2.4-6.7.Z:rh-mysql56-mysql-config-0:5.6.37-5.el6.x86_64",
            "6Server-RHSCL-2.4-6.7.Z:rh-mysql56-mysql-debuginfo-0:5.6.37-5.el6.x86_64",
            "6Server-RHSCL-2.4-6.7.Z:rh-mysql56-mysql-devel-0:5.6.37-5.el6.x86_64",
            "6Server-RHSCL-2.4-6.7.Z:rh-mysql56-mysql-errmsg-0:5.6.37-5.el6.x86_64",
            "6Server-RHSCL-2.4-6.7.Z:rh-mysql56-mysql-server-0:5.6.37-5.el6.x86_64",
            "6Server-RHSCL-2.4-6.7.Z:rh-mysql56-mysql-test-0:5.6.37-5.el6.x86_64",
            "6Server-RHSCL-2.4:rh-mysql56-mysql-0:5.6.37-5.el6.src",
            "6Server-RHSCL-2.4:rh-mysql56-mysql-0:5.6.37-5.el6.x86_64",
            "6Server-RHSCL-2.4:rh-mysql56-mysql-bench-0:5.6.37-5.el6.x86_64",
            "6Server-RHSCL-2.4:rh-mysql56-mysql-common-0:5.6.37-5.el6.x86_64",
            "6Server-RHSCL-2.4:rh-mysql56-mysql-config-0:5.6.37-5.el6.x86_64",
            "6Server-RHSCL-2.4:rh-mysql56-mysql-debuginfo-0:5.6.37-5.el6.x86_64",
            "6Server-RHSCL-2.4:rh-mysql56-mysql-devel-0:5.6.37-5.el6.x86_64",
            "6Server-RHSCL-2.4:rh-mysql56-mysql-errmsg-0:5.6.37-5.el6.x86_64",
            "6Server-RHSCL-2.4:rh-mysql56-mysql-server-0:5.6.37-5.el6.x86_64",
            "6Server-RHSCL-2.4:rh-mysql56-mysql-test-0:5.6.37-5.el6.x86_64",
            "6Workstation-RHSCL-2.4:rh-mysql56-mysql-0:5.6.37-5.el6.src",
            "6Workstation-RHSCL-2.4:rh-mysql56-mysql-0:5.6.37-5.el6.x86_64",
            "6Workstation-RHSCL-2.4:rh-mysql56-mysql-bench-0:5.6.37-5.el6.x86_64",
            "6Workstation-RHSCL-2.4:rh-mysql56-mysql-common-0:5.6.37-5.el6.x86_64",
            "6Workstation-RHSCL-2.4:rh-mysql56-mysql-config-0:5.6.37-5.el6.x86_64",
            "6Workstation-RHSCL-2.4:rh-mysql56-mysql-debuginfo-0:5.6.37-5.el6.x86_64",
            "6Workstation-RHSCL-2.4:rh-mysql56-mysql-devel-0:5.6.37-5.el6.x86_64",
            "6Workstation-RHSCL-2.4:rh-mysql56-mysql-errmsg-0:5.6.37-5.el6.x86_64",
            "6Workstation-RHSCL-2.4:rh-mysql56-mysql-server-0:5.6.37-5.el6.x86_64",
            "6Workstation-RHSCL-2.4:rh-mysql56-mysql-test-0:5.6.37-5.el6.x86_64",
            "7Server-RHSCL-2.4-7.3.Z:rh-mysql56-mysql-0:5.6.37-5.el7.src",
            "7Server-RHSCL-2.4-7.3.Z:rh-mysql56-mysql-0:5.6.37-5.el7.x86_64",
            "7Server-RHSCL-2.4-7.3.Z:rh-mysql56-mysql-bench-0:5.6.37-5.el7.x86_64",
            "7Server-RHSCL-2.4-7.3.Z:rh-mysql56-mysql-common-0:5.6.37-5.el7.x86_64",
            "7Server-RHSCL-2.4-7.3.Z:rh-mysql56-mysql-config-0:5.6.37-5.el7.x86_64",
            "7Server-RHSCL-2.4-7.3.Z:rh-mysql56-mysql-debuginfo-0:5.6.37-5.el7.x86_64",
            "7Server-RHSCL-2.4-7.3.Z:rh-mysql56-mysql-devel-0:5.6.37-5.el7.x86_64",
            "7Server-RHSCL-2.4-7.3.Z:rh-mysql56-mysql-errmsg-0:5.6.37-5.el7.x86_64",
            "7Server-RHSCL-2.4-7.3.Z:rh-mysql56-mysql-server-0:5.6.37-5.el7.x86_64",
            "7Server-RHSCL-2.4-7.3.Z:rh-mysql56-mysql-test-0:5.6.37-5.el7.x86_64",
            "7Server-RHSCL-2.4:rh-mysql56-mysql-0:5.6.37-5.el7.src",
            "7Server-RHSCL-2.4:rh-mysql56-mysql-0:5.6.37-5.el7.x86_64",
            "7Server-RHSCL-2.4:rh-mysql56-mysql-bench-0:5.6.37-5.el7.x86_64",
            "7Server-RHSCL-2.4:rh-mysql56-mysql-common-0:5.6.37-5.el7.x86_64",
            "7Server-RHSCL-2.4:rh-mysql56-mysql-config-0:5.6.37-5.el7.x86_64",
            "7Server-RHSCL-2.4:rh-mysql56-mysql-debuginfo-0:5.6.37-5.el7.x86_64",
            "7Server-RHSCL-2.4:rh-mysql56-mysql-devel-0:5.6.37-5.el7.x86_64",
            "7Server-RHSCL-2.4:rh-mysql56-mysql-errmsg-0:5.6.37-5.el7.x86_64",
            "7Server-RHSCL-2.4:rh-mysql56-mysql-server-0:5.6.37-5.el7.x86_64",
            "7Server-RHSCL-2.4:rh-mysql56-mysql-test-0:5.6.37-5.el7.x86_64",
            "7Workstation-RHSCL-2.4:rh-mysql56-mysql-0:5.6.37-5.el7.src",
            "7Workstation-RHSCL-2.4:rh-mysql56-mysql-0:5.6.37-5.el7.x86_64",
            "7Workstation-RHSCL-2.4:rh-mysql56-mysql-bench-0:5.6.37-5.el7.x86_64",
            "7Workstation-RHSCL-2.4:rh-mysql56-mysql-common-0:5.6.37-5.el7.x86_64",
            "7Workstation-RHSCL-2.4:rh-mysql56-mysql-config-0:5.6.37-5.el7.x86_64",
            "7Workstation-RHSCL-2.4:rh-mysql56-mysql-debuginfo-0:5.6.37-5.el7.x86_64",
            "7Workstation-RHSCL-2.4:rh-mysql56-mysql-devel-0:5.6.37-5.el7.x86_64",
            "7Workstation-RHSCL-2.4:rh-mysql56-mysql-errmsg-0:5.6.37-5.el7.x86_64",
            "7Workstation-RHSCL-2.4:rh-mysql56-mysql-server-0:5.6.37-5.el7.x86_64",
            "7Workstation-RHSCL-2.4:rh-mysql56-mysql-test-0:5.6.37-5.el7.x86_64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2017:2787"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "NONE",
            "integrityImpact": "NONE",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.0"
          },
          "products": [
            "6Server-RHSCL-2.4-6.7.Z:rh-mysql56-mysql-0:5.6.37-5.el6.src",
            "6Server-RHSCL-2.4-6.7.Z:rh-mysql56-mysql-0:5.6.37-5.el6.x86_64",
            "6Server-RHSCL-2.4-6.7.Z:rh-mysql56-mysql-bench-0:5.6.37-5.el6.x86_64",
            "6Server-RHSCL-2.4-6.7.Z:rh-mysql56-mysql-common-0:5.6.37-5.el6.x86_64",
            "6Server-RHSCL-2.4-6.7.Z:rh-mysql56-mysql-config-0:5.6.37-5.el6.x86_64",
            "6Server-RHSCL-2.4-6.7.Z:rh-mysql56-mysql-debuginfo-0:5.6.37-5.el6.x86_64",
            "6Server-RHSCL-2.4-6.7.Z:rh-mysql56-mysql-devel-0:5.6.37-5.el6.x86_64",
            "6Server-RHSCL-2.4-6.7.Z:rh-mysql56-mysql-errmsg-0:5.6.37-5.el6.x86_64",
            "6Server-RHSCL-2.4-6.7.Z:rh-mysql56-mysql-server-0:5.6.37-5.el6.x86_64",
            "6Server-RHSCL-2.4-6.7.Z:rh-mysql56-mysql-test-0:5.6.37-5.el6.x86_64",
            "6Server-RHSCL-2.4:rh-mysql56-mysql-0:5.6.37-5.el6.src",
            "6Server-RHSCL-2.4:rh-mysql56-mysql-0:5.6.37-5.el6.x86_64",
            "6Server-RHSCL-2.4:rh-mysql56-mysql-bench-0:5.6.37-5.el6.x86_64",
            "6Server-RHSCL-2.4:rh-mysql56-mysql-common-0:5.6.37-5.el6.x86_64",
            "6Server-RHSCL-2.4:rh-mysql56-mysql-config-0:5.6.37-5.el6.x86_64",
            "6Server-RHSCL-2.4:rh-mysql56-mysql-debuginfo-0:5.6.37-5.el6.x86_64",
            "6Server-RHSCL-2.4:rh-mysql56-mysql-devel-0:5.6.37-5.el6.x86_64",
            "6Server-RHSCL-2.4:rh-mysql56-mysql-errmsg-0:5.6.37-5.el6.x86_64",
            "6Server-RHSCL-2.4:rh-mysql56-mysql-server-0:5.6.37-5.el6.x86_64",
            "6Server-RHSCL-2.4:rh-mysql56-mysql-test-0:5.6.37-5.el6.x86_64",
            "6Workstation-RHSCL-2.4:rh-mysql56-mysql-0:5.6.37-5.el6.src",
            "6Workstation-RHSCL-2.4:rh-mysql56-mysql-0:5.6.37-5.el6.x86_64",
            "6Workstation-RHSCL-2.4:rh-mysql56-mysql-bench-0:5.6.37-5.el6.x86_64",
            "6Workstation-RHSCL-2.4:rh-mysql56-mysql-common-0:5.6.37-5.el6.x86_64",
            "6Workstation-RHSCL-2.4:rh-mysql56-mysql-config-0:5.6.37-5.el6.x86_64",
            "6Workstation-RHSCL-2.4:rh-mysql56-mysql-debuginfo-0:5.6.37-5.el6.x86_64",
            "6Workstation-RHSCL-2.4:rh-mysql56-mysql-devel-0:5.6.37-5.el6.x86_64",
            "6Workstation-RHSCL-2.4:rh-mysql56-mysql-errmsg-0:5.6.37-5.el6.x86_64",
            "6Workstation-RHSCL-2.4:rh-mysql56-mysql-server-0:5.6.37-5.el6.x86_64",
            "6Workstation-RHSCL-2.4:rh-mysql56-mysql-test-0:5.6.37-5.el6.x86_64",
            "7Server-RHSCL-2.4-7.3.Z:rh-mysql56-mysql-0:5.6.37-5.el7.src",
            "7Server-RHSCL-2.4-7.3.Z:rh-mysql56-mysql-0:5.6.37-5.el7.x86_64",
            "7Server-RHSCL-2.4-7.3.Z:rh-mysql56-mysql-bench-0:5.6.37-5.el7.x86_64",
            "7Server-RHSCL-2.4-7.3.Z:rh-mysql56-mysql-common-0:5.6.37-5.el7.x86_64",
            "7Server-RHSCL-2.4-7.3.Z:rh-mysql56-mysql-config-0:5.6.37-5.el7.x86_64",
            "7Server-RHSCL-2.4-7.3.Z:rh-mysql56-mysql-debuginfo-0:5.6.37-5.el7.x86_64",
            "7Server-RHSCL-2.4-7.3.Z:rh-mysql56-mysql-devel-0:5.6.37-5.el7.x86_64",
            "7Server-RHSCL-2.4-7.3.Z:rh-mysql56-mysql-errmsg-0:5.6.37-5.el7.x86_64",
            "7Server-RHSCL-2.4-7.3.Z:rh-mysql56-mysql-server-0:5.6.37-5.el7.x86_64",
            "7Server-RHSCL-2.4-7.3.Z:rh-mysql56-mysql-test-0:5.6.37-5.el7.x86_64",
            "7Server-RHSCL-2.4:rh-mysql56-mysql-0:5.6.37-5.el7.src",
            "7Server-RHSCL-2.4:rh-mysql56-mysql-0:5.6.37-5.el7.x86_64",
            "7Server-RHSCL-2.4:rh-mysql56-mysql-bench-0:5.6.37-5.el7.x86_64",
            "7Server-RHSCL-2.4:rh-mysql56-mysql-common-0:5.6.37-5.el7.x86_64",
            "7Server-RHSCL-2.4:rh-mysql56-mysql-config-0:5.6.37-5.el7.x86_64",
            "7Server-RHSCL-2.4:rh-mysql56-mysql-debuginfo-0:5.6.37-5.el7.x86_64",
            "7Server-RHSCL-2.4:rh-mysql56-mysql-devel-0:5.6.37-5.el7.x86_64",
            "7Server-RHSCL-2.4:rh-mysql56-mysql-errmsg-0:5.6.37-5.el7.x86_64",
            "7Server-RHSCL-2.4:rh-mysql56-mysql-server-0:5.6.37-5.el7.x86_64",
            "7Server-RHSCL-2.4:rh-mysql56-mysql-test-0:5.6.37-5.el7.x86_64",
            "7Workstation-RHSCL-2.4:rh-mysql56-mysql-0:5.6.37-5.el7.src",
            "7Workstation-RHSCL-2.4:rh-mysql56-mysql-0:5.6.37-5.el7.x86_64",
            "7Workstation-RHSCL-2.4:rh-mysql56-mysql-bench-0:5.6.37-5.el7.x86_64",
            "7Workstation-RHSCL-2.4:rh-mysql56-mysql-common-0:5.6.37-5.el7.x86_64",
            "7Workstation-RHSCL-2.4:rh-mysql56-mysql-config-0:5.6.37-5.el7.x86_64",
            "7Workstation-RHSCL-2.4:rh-mysql56-mysql-debuginfo-0:5.6.37-5.el7.x86_64",
            "7Workstation-RHSCL-2.4:rh-mysql56-mysql-devel-0:5.6.37-5.el7.x86_64",
            "7Workstation-RHSCL-2.4:rh-mysql56-mysql-errmsg-0:5.6.37-5.el7.x86_64",
            "7Workstation-RHSCL-2.4:rh-mysql56-mysql-server-0:5.6.37-5.el7.x86_64",
            "7Workstation-RHSCL-2.4:rh-mysql56-mysql-test-0:5.6.37-5.el7.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Moderate"
        }
      ],
      "title": "mysql: Server: Memcached unspecified vulnerability (CPU Apr 2017)"
    },
    {
      "cve": "CVE-2017-3452",
      "discovery_date": "2017-04-19T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "1443364"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Optimizer). Supported versions that are affected are 5.6.35 and earlier. Easily \"exploitable\" vulnerability allows low privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.0 Base Score 6.5 (Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H).",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "mysql: Server: Optimizer unspecified vulnerability (CPU Apr 2017)",
          "title": "Vulnerability summary"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "6Server-RHSCL-2.4-6.7.Z:rh-mysql56-mysql-0:5.6.37-5.el6.src",
          "6Server-RHSCL-2.4-6.7.Z:rh-mysql56-mysql-0:5.6.37-5.el6.x86_64",
          "6Server-RHSCL-2.4-6.7.Z:rh-mysql56-mysql-bench-0:5.6.37-5.el6.x86_64",
          "6Server-RHSCL-2.4-6.7.Z:rh-mysql56-mysql-common-0:5.6.37-5.el6.x86_64",
          "6Server-RHSCL-2.4-6.7.Z:rh-mysql56-mysql-config-0:5.6.37-5.el6.x86_64",
          "6Server-RHSCL-2.4-6.7.Z:rh-mysql56-mysql-debuginfo-0:5.6.37-5.el6.x86_64",
          "6Server-RHSCL-2.4-6.7.Z:rh-mysql56-mysql-devel-0:5.6.37-5.el6.x86_64",
          "6Server-RHSCL-2.4-6.7.Z:rh-mysql56-mysql-errmsg-0:5.6.37-5.el6.x86_64",
          "6Server-RHSCL-2.4-6.7.Z:rh-mysql56-mysql-server-0:5.6.37-5.el6.x86_64",
          "6Server-RHSCL-2.4-6.7.Z:rh-mysql56-mysql-test-0:5.6.37-5.el6.x86_64",
          "6Server-RHSCL-2.4:rh-mysql56-mysql-0:5.6.37-5.el6.src",
          "6Server-RHSCL-2.4:rh-mysql56-mysql-0:5.6.37-5.el6.x86_64",
          "6Server-RHSCL-2.4:rh-mysql56-mysql-bench-0:5.6.37-5.el6.x86_64",
          "6Server-RHSCL-2.4:rh-mysql56-mysql-common-0:5.6.37-5.el6.x86_64",
          "6Server-RHSCL-2.4:rh-mysql56-mysql-config-0:5.6.37-5.el6.x86_64",
          "6Server-RHSCL-2.4:rh-mysql56-mysql-debuginfo-0:5.6.37-5.el6.x86_64",
          "6Server-RHSCL-2.4:rh-mysql56-mysql-devel-0:5.6.37-5.el6.x86_64",
          "6Server-RHSCL-2.4:rh-mysql56-mysql-errmsg-0:5.6.37-5.el6.x86_64",
          "6Server-RHSCL-2.4:rh-mysql56-mysql-server-0:5.6.37-5.el6.x86_64",
          "6Server-RHSCL-2.4:rh-mysql56-mysql-test-0:5.6.37-5.el6.x86_64",
          "6Workstation-RHSCL-2.4:rh-mysql56-mysql-0:5.6.37-5.el6.src",
          "6Workstation-RHSCL-2.4:rh-mysql56-mysql-0:5.6.37-5.el6.x86_64",
          "6Workstation-RHSCL-2.4:rh-mysql56-mysql-bench-0:5.6.37-5.el6.x86_64",
          "6Workstation-RHSCL-2.4:rh-mysql56-mysql-common-0:5.6.37-5.el6.x86_64",
          "6Workstation-RHSCL-2.4:rh-mysql56-mysql-config-0:5.6.37-5.el6.x86_64",
          "6Workstation-RHSCL-2.4:rh-mysql56-mysql-debuginfo-0:5.6.37-5.el6.x86_64",
          "6Workstation-RHSCL-2.4:rh-mysql56-mysql-devel-0:5.6.37-5.el6.x86_64",
          "6Workstation-RHSCL-2.4:rh-mysql56-mysql-errmsg-0:5.6.37-5.el6.x86_64",
          "6Workstation-RHSCL-2.4:rh-mysql56-mysql-server-0:5.6.37-5.el6.x86_64",
          "6Workstation-RHSCL-2.4:rh-mysql56-mysql-test-0:5.6.37-5.el6.x86_64",
          "7Server-RHSCL-2.4-7.3.Z:rh-mysql56-mysql-0:5.6.37-5.el7.src",
          "7Server-RHSCL-2.4-7.3.Z:rh-mysql56-mysql-0:5.6.37-5.el7.x86_64",
          "7Server-RHSCL-2.4-7.3.Z:rh-mysql56-mysql-bench-0:5.6.37-5.el7.x86_64",
          "7Server-RHSCL-2.4-7.3.Z:rh-mysql56-mysql-common-0:5.6.37-5.el7.x86_64",
          "7Server-RHSCL-2.4-7.3.Z:rh-mysql56-mysql-config-0:5.6.37-5.el7.x86_64",
          "7Server-RHSCL-2.4-7.3.Z:rh-mysql56-mysql-debuginfo-0:5.6.37-5.el7.x86_64",
          "7Server-RHSCL-2.4-7.3.Z:rh-mysql56-mysql-devel-0:5.6.37-5.el7.x86_64",
          "7Server-RHSCL-2.4-7.3.Z:rh-mysql56-mysql-errmsg-0:5.6.37-5.el7.x86_64",
          "7Server-RHSCL-2.4-7.3.Z:rh-mysql56-mysql-server-0:5.6.37-5.el7.x86_64",
          "7Server-RHSCL-2.4-7.3.Z:rh-mysql56-mysql-test-0:5.6.37-5.el7.x86_64",
          "7Server-RHSCL-2.4:rh-mysql56-mysql-0:5.6.37-5.el7.src",
          "7Server-RHSCL-2.4:rh-mysql56-mysql-0:5.6.37-5.el7.x86_64",
          "7Server-RHSCL-2.4:rh-mysql56-mysql-bench-0:5.6.37-5.el7.x86_64",
          "7Server-RHSCL-2.4:rh-mysql56-mysql-common-0:5.6.37-5.el7.x86_64",
          "7Server-RHSCL-2.4:rh-mysql56-mysql-config-0:5.6.37-5.el7.x86_64",
          "7Server-RHSCL-2.4:rh-mysql56-mysql-debuginfo-0:5.6.37-5.el7.x86_64",
          "7Server-RHSCL-2.4:rh-mysql56-mysql-devel-0:5.6.37-5.el7.x86_64",
          "7Server-RHSCL-2.4:rh-mysql56-mysql-errmsg-0:5.6.37-5.el7.x86_64",
          "7Server-RHSCL-2.4:rh-mysql56-mysql-server-0:5.6.37-5.el7.x86_64",
          "7Server-RHSCL-2.4:rh-mysql56-mysql-test-0:5.6.37-5.el7.x86_64",
          "7Workstation-RHSCL-2.4:rh-mysql56-mysql-0:5.6.37-5.el7.src",
          "7Workstation-RHSCL-2.4:rh-mysql56-mysql-0:5.6.37-5.el7.x86_64",
          "7Workstation-RHSCL-2.4:rh-mysql56-mysql-bench-0:5.6.37-5.el7.x86_64",
          "7Workstation-RHSCL-2.4:rh-mysql56-mysql-common-0:5.6.37-5.el7.x86_64",
          "7Workstation-RHSCL-2.4:rh-mysql56-mysql-config-0:5.6.37-5.el7.x86_64",
          "7Workstation-RHSCL-2.4:rh-mysql56-mysql-debuginfo-0:5.6.37-5.el7.x86_64",
          "7Workstation-RHSCL-2.4:rh-mysql56-mysql-devel-0:5.6.37-5.el7.x86_64",
          "7Workstation-RHSCL-2.4:rh-mysql56-mysql-errmsg-0:5.6.37-5.el7.x86_64",
          "7Workstation-RHSCL-2.4:rh-mysql56-mysql-server-0:5.6.37-5.el7.x86_64",
          "7Workstation-RHSCL-2.4:rh-mysql56-mysql-test-0:5.6.37-5.el7.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2017-3452"
        },
        {
          "category": "external",
          "summary": "RHBZ#1443364",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1443364"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2017-3452",
          "url": "https://www.cve.org/CVERecord?id=CVE-2017-3452"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2017-3452",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2017-3452"
        },
        {
          "category": "external",
          "summary": "http://www.oracle.com/technetwork/security-advisory/cpuapr2017-3236618.html#AppendixMSQL",
          "url": "http://www.oracle.com/technetwork/security-advisory/cpuapr2017-3236618.html#AppendixMSQL"
        }
      ],
      "release_date": "2017-04-19T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2017-09-21T07:42:12+00:00",
          "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAfter installing this update, the MySQL server daemon (mysqld) will be restarted automatically.",
          "product_ids": [
            "6Server-RHSCL-2.4-6.7.Z:rh-mysql56-mysql-0:5.6.37-5.el6.src",
            "6Server-RHSCL-2.4-6.7.Z:rh-mysql56-mysql-0:5.6.37-5.el6.x86_64",
            "6Server-RHSCL-2.4-6.7.Z:rh-mysql56-mysql-bench-0:5.6.37-5.el6.x86_64",
            "6Server-RHSCL-2.4-6.7.Z:rh-mysql56-mysql-common-0:5.6.37-5.el6.x86_64",
            "6Server-RHSCL-2.4-6.7.Z:rh-mysql56-mysql-config-0:5.6.37-5.el6.x86_64",
            "6Server-RHSCL-2.4-6.7.Z:rh-mysql56-mysql-debuginfo-0:5.6.37-5.el6.x86_64",
            "6Server-RHSCL-2.4-6.7.Z:rh-mysql56-mysql-devel-0:5.6.37-5.el6.x86_64",
            "6Server-RHSCL-2.4-6.7.Z:rh-mysql56-mysql-errmsg-0:5.6.37-5.el6.x86_64",
            "6Server-RHSCL-2.4-6.7.Z:rh-mysql56-mysql-server-0:5.6.37-5.el6.x86_64",
            "6Server-RHSCL-2.4-6.7.Z:rh-mysql56-mysql-test-0:5.6.37-5.el6.x86_64",
            "6Server-RHSCL-2.4:rh-mysql56-mysql-0:5.6.37-5.el6.src",
            "6Server-RHSCL-2.4:rh-mysql56-mysql-0:5.6.37-5.el6.x86_64",
            "6Server-RHSCL-2.4:rh-mysql56-mysql-bench-0:5.6.37-5.el6.x86_64",
            "6Server-RHSCL-2.4:rh-mysql56-mysql-common-0:5.6.37-5.el6.x86_64",
            "6Server-RHSCL-2.4:rh-mysql56-mysql-config-0:5.6.37-5.el6.x86_64",
            "6Server-RHSCL-2.4:rh-mysql56-mysql-debuginfo-0:5.6.37-5.el6.x86_64",
            "6Server-RHSCL-2.4:rh-mysql56-mysql-devel-0:5.6.37-5.el6.x86_64",
            "6Server-RHSCL-2.4:rh-mysql56-mysql-errmsg-0:5.6.37-5.el6.x86_64",
            "6Server-RHSCL-2.4:rh-mysql56-mysql-server-0:5.6.37-5.el6.x86_64",
            "6Server-RHSCL-2.4:rh-mysql56-mysql-test-0:5.6.37-5.el6.x86_64",
            "6Workstation-RHSCL-2.4:rh-mysql56-mysql-0:5.6.37-5.el6.src",
            "6Workstation-RHSCL-2.4:rh-mysql56-mysql-0:5.6.37-5.el6.x86_64",
            "6Workstation-RHSCL-2.4:rh-mysql56-mysql-bench-0:5.6.37-5.el6.x86_64",
            "6Workstation-RHSCL-2.4:rh-mysql56-mysql-common-0:5.6.37-5.el6.x86_64",
            "6Workstation-RHSCL-2.4:rh-mysql56-mysql-config-0:5.6.37-5.el6.x86_64",
            "6Workstation-RHSCL-2.4:rh-mysql56-mysql-debuginfo-0:5.6.37-5.el6.x86_64",
            "6Workstation-RHSCL-2.4:rh-mysql56-mysql-devel-0:5.6.37-5.el6.x86_64",
            "6Workstation-RHSCL-2.4:rh-mysql56-mysql-errmsg-0:5.6.37-5.el6.x86_64",
            "6Workstation-RHSCL-2.4:rh-mysql56-mysql-server-0:5.6.37-5.el6.x86_64",
            "6Workstation-RHSCL-2.4:rh-mysql56-mysql-test-0:5.6.37-5.el6.x86_64",
            "7Server-RHSCL-2.4-7.3.Z:rh-mysql56-mysql-0:5.6.37-5.el7.src",
            "7Server-RHSCL-2.4-7.3.Z:rh-mysql56-mysql-0:5.6.37-5.el7.x86_64",
            "7Server-RHSCL-2.4-7.3.Z:rh-mysql56-mysql-bench-0:5.6.37-5.el7.x86_64",
            "7Server-RHSCL-2.4-7.3.Z:rh-mysql56-mysql-common-0:5.6.37-5.el7.x86_64",
            "7Server-RHSCL-2.4-7.3.Z:rh-mysql56-mysql-config-0:5.6.37-5.el7.x86_64",
            "7Server-RHSCL-2.4-7.3.Z:rh-mysql56-mysql-debuginfo-0:5.6.37-5.el7.x86_64",
            "7Server-RHSCL-2.4-7.3.Z:rh-mysql56-mysql-devel-0:5.6.37-5.el7.x86_64",
            "7Server-RHSCL-2.4-7.3.Z:rh-mysql56-mysql-errmsg-0:5.6.37-5.el7.x86_64",
            "7Server-RHSCL-2.4-7.3.Z:rh-mysql56-mysql-server-0:5.6.37-5.el7.x86_64",
            "7Server-RHSCL-2.4-7.3.Z:rh-mysql56-mysql-test-0:5.6.37-5.el7.x86_64",
            "7Server-RHSCL-2.4:rh-mysql56-mysql-0:5.6.37-5.el7.src",
            "7Server-RHSCL-2.4:rh-mysql56-mysql-0:5.6.37-5.el7.x86_64",
            "7Server-RHSCL-2.4:rh-mysql56-mysql-bench-0:5.6.37-5.el7.x86_64",
            "7Server-RHSCL-2.4:rh-mysql56-mysql-common-0:5.6.37-5.el7.x86_64",
            "7Server-RHSCL-2.4:rh-mysql56-mysql-config-0:5.6.37-5.el7.x86_64",
            "7Server-RHSCL-2.4:rh-mysql56-mysql-debuginfo-0:5.6.37-5.el7.x86_64",
            "7Server-RHSCL-2.4:rh-mysql56-mysql-devel-0:5.6.37-5.el7.x86_64",
            "7Server-RHSCL-2.4:rh-mysql56-mysql-errmsg-0:5.6.37-5.el7.x86_64",
            "7Server-RHSCL-2.4:rh-mysql56-mysql-server-0:5.6.37-5.el7.x86_64",
            "7Server-RHSCL-2.4:rh-mysql56-mysql-test-0:5.6.37-5.el7.x86_64",
            "7Workstation-RHSCL-2.4:rh-mysql56-mysql-0:5.6.37-5.el7.src",
            "7Workstation-RHSCL-2.4:rh-mysql56-mysql-0:5.6.37-5.el7.x86_64",
            "7Workstation-RHSCL-2.4:rh-mysql56-mysql-bench-0:5.6.37-5.el7.x86_64",
            "7Workstation-RHSCL-2.4:rh-mysql56-mysql-common-0:5.6.37-5.el7.x86_64",
            "7Workstation-RHSCL-2.4:rh-mysql56-mysql-config-0:5.6.37-5.el7.x86_64",
            "7Workstation-RHSCL-2.4:rh-mysql56-mysql-debuginfo-0:5.6.37-5.el7.x86_64",
            "7Workstation-RHSCL-2.4:rh-mysql56-mysql-devel-0:5.6.37-5.el7.x86_64",
            "7Workstation-RHSCL-2.4:rh-mysql56-mysql-errmsg-0:5.6.37-5.el7.x86_64",
            "7Workstation-RHSCL-2.4:rh-mysql56-mysql-server-0:5.6.37-5.el7.x86_64",
            "7Workstation-RHSCL-2.4:rh-mysql56-mysql-test-0:5.6.37-5.el7.x86_64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2017:2787"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 6.5,
            "baseSeverity": "MEDIUM",
            "confidentialityImpact": "NONE",
            "integrityImpact": "NONE",
            "privilegesRequired": "LOW",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.0"
          },
          "products": [
            "6Server-RHSCL-2.4-6.7.Z:rh-mysql56-mysql-0:5.6.37-5.el6.src",
            "6Server-RHSCL-2.4-6.7.Z:rh-mysql56-mysql-0:5.6.37-5.el6.x86_64",
            "6Server-RHSCL-2.4-6.7.Z:rh-mysql56-mysql-bench-0:5.6.37-5.el6.x86_64",
            "6Server-RHSCL-2.4-6.7.Z:rh-mysql56-mysql-common-0:5.6.37-5.el6.x86_64",
            "6Server-RHSCL-2.4-6.7.Z:rh-mysql56-mysql-config-0:5.6.37-5.el6.x86_64",
            "6Server-RHSCL-2.4-6.7.Z:rh-mysql56-mysql-debuginfo-0:5.6.37-5.el6.x86_64",
            "6Server-RHSCL-2.4-6.7.Z:rh-mysql56-mysql-devel-0:5.6.37-5.el6.x86_64",
            "6Server-RHSCL-2.4-6.7.Z:rh-mysql56-mysql-errmsg-0:5.6.37-5.el6.x86_64",
            "6Server-RHSCL-2.4-6.7.Z:rh-mysql56-mysql-server-0:5.6.37-5.el6.x86_64",
            "6Server-RHSCL-2.4-6.7.Z:rh-mysql56-mysql-test-0:5.6.37-5.el6.x86_64",
            "6Server-RHSCL-2.4:rh-mysql56-mysql-0:5.6.37-5.el6.src",
            "6Server-RHSCL-2.4:rh-mysql56-mysql-0:5.6.37-5.el6.x86_64",
            "6Server-RHSCL-2.4:rh-mysql56-mysql-bench-0:5.6.37-5.el6.x86_64",
            "6Server-RHSCL-2.4:rh-mysql56-mysql-common-0:5.6.37-5.el6.x86_64",
            "6Server-RHSCL-2.4:rh-mysql56-mysql-config-0:5.6.37-5.el6.x86_64",
            "6Server-RHSCL-2.4:rh-mysql56-mysql-debuginfo-0:5.6.37-5.el6.x86_64",
            "6Server-RHSCL-2.4:rh-mysql56-mysql-devel-0:5.6.37-5.el6.x86_64",
            "6Server-RHSCL-2.4:rh-mysql56-mysql-errmsg-0:5.6.37-5.el6.x86_64",
            "6Server-RHSCL-2.4:rh-mysql56-mysql-server-0:5.6.37-5.el6.x86_64",
            "6Server-RHSCL-2.4:rh-mysql56-mysql-test-0:5.6.37-5.el6.x86_64",
            "6Workstation-RHSCL-2.4:rh-mysql56-mysql-0:5.6.37-5.el6.src",
            "6Workstation-RHSCL-2.4:rh-mysql56-mysql-0:5.6.37-5.el6.x86_64",
            "6Workstation-RHSCL-2.4:rh-mysql56-mysql-bench-0:5.6.37-5.el6.x86_64",
            "6Workstation-RHSCL-2.4:rh-mysql56-mysql-common-0:5.6.37-5.el6.x86_64",
            "6Workstation-RHSCL-2.4:rh-mysql56-mysql-config-0:5.6.37-5.el6.x86_64",
            "6Workstation-RHSCL-2.4:rh-mysql56-mysql-debuginfo-0:5.6.37-5.el6.x86_64",
            "6Workstation-RHSCL-2.4:rh-mysql56-mysql-devel-0:5.6.37-5.el6.x86_64",
            "6Workstation-RHSCL-2.4:rh-mysql56-mysql-errmsg-0:5.6.37-5.el6.x86_64",
            "6Workstation-RHSCL-2.4:rh-mysql56-mysql-server-0:5.6.37-5.el6.x86_64",
            "6Workstation-RHSCL-2.4:rh-mysql56-mysql-test-0:5.6.37-5.el6.x86_64",
            "7Server-RHSCL-2.4-7.3.Z:rh-mysql56-mysql-0:5.6.37-5.el7.src",
            "7Server-RHSCL-2.4-7.3.Z:rh-mysql56-mysql-0:5.6.37-5.el7.x86_64",
            "7Server-RHSCL-2.4-7.3.Z:rh-mysql56-mysql-bench-0:5.6.37-5.el7.x86_64",
            "7Server-RHSCL-2.4-7.3.Z:rh-mysql56-mysql-common-0:5.6.37-5.el7.x86_64",
            "7Server-RHSCL-2.4-7.3.Z:rh-mysql56-mysql-config-0:5.6.37-5.el7.x86_64",
            "7Server-RHSCL-2.4-7.3.Z:rh-mysql56-mysql-debuginfo-0:5.6.37-5.el7.x86_64",
            "7Server-RHSCL-2.4-7.3.Z:rh-mysql56-mysql-devel-0:5.6.37-5.el7.x86_64",
            "7Server-RHSCL-2.4-7.3.Z:rh-mysql56-mysql-errmsg-0:5.6.37-5.el7.x86_64",
            "7Server-RHSCL-2.4-7.3.Z:rh-mysql56-mysql-server-0:5.6.37-5.el7.x86_64",
            "7Server-RHSCL-2.4-7.3.Z:rh-mysql56-mysql-test-0:5.6.37-5.el7.x86_64",
            "7Server-RHSCL-2.4:rh-mysql56-mysql-0:5.6.37-5.el7.src",
            "7Server-RHSCL-2.4:rh-mysql56-mysql-0:5.6.37-5.el7.x86_64",
            "7Server-RHSCL-2.4:rh-mysql56-mysql-bench-0:5.6.37-5.el7.x86_64",
            "7Server-RHSCL-2.4:rh-mysql56-mysql-common-0:5.6.37-5.el7.x86_64",
            "7Server-RHSCL-2.4:rh-mysql56-mysql-config-0:5.6.37-5.el7.x86_64",
            "7Server-RHSCL-2.4:rh-mysql56-mysql-debuginfo-0:5.6.37-5.el7.x86_64",
            "7Server-RHSCL-2.4:rh-mysql56-mysql-devel-0:5.6.37-5.el7.x86_64",
            "7Server-RHSCL-2.4:rh-mysql56-mysql-errmsg-0:5.6.37-5.el7.x86_64",
            "7Server-RHSCL-2.4:rh-mysql56-mysql-server-0:5.6.37-5.el7.x86_64",
            "7Server-RHSCL-2.4:rh-mysql56-mysql-test-0:5.6.37-5.el7.x86_64",
            "7Workstation-RHSCL-2.4:rh-mysql56-mysql-0:5.6.37-5.el7.src",
            "7Workstation-RHSCL-2.4:rh-mysql56-mysql-0:5.6.37-5.el7.x86_64",
            "7Workstation-RHSCL-2.4:rh-mysql56-mysql-bench-0:5.6.37-5.el7.x86_64",
            "7Workstation-RHSCL-2.4:rh-mysql56-mysql-common-0:5.6.37-5.el7.x86_64",
            "7Workstation-RHSCL-2.4:rh-mysql56-mysql-config-0:5.6.37-5.el7.x86_64",
            "7Workstation-RHSCL-2.4:rh-mysql56-mysql-debuginfo-0:5.6.37-5.el7.x86_64",
            "7Workstation-RHSCL-2.4:rh-mysql56-mysql-devel-0:5.6.37-5.el7.x86_64",
            "7Workstation-RHSCL-2.4:rh-mysql56-mysql-errmsg-0:5.6.37-5.el7.x86_64",
            "7Workstation-RHSCL-2.4:rh-mysql56-mysql-server-0:5.6.37-5.el7.x86_64",
            "7Workstation-RHSCL-2.4:rh-mysql56-mysql-test-0:5.6.37-5.el7.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Moderate"
        }
      ],
      "title": "mysql: Server: Optimizer unspecified vulnerability (CPU Apr 2017)"
    },
    {
      "cve": "CVE-2017-3453",
      "discovery_date": "2017-04-19T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "1443365"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Optimizer). Supported versions that are affected are 5.5.54 and earlier, 5.6.35 and earlier and 5.7.17 and earlier. Easily \"exploitable\" vulnerability allows low privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.0 Base Score 6.5 (Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H).",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "mysql: Server: Optimizer unspecified vulnerability (CPU Apr 2017)",
          "title": "Vulnerability summary"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "6Server-RHSCL-2.4-6.7.Z:rh-mysql56-mysql-0:5.6.37-5.el6.src",
          "6Server-RHSCL-2.4-6.7.Z:rh-mysql56-mysql-0:5.6.37-5.el6.x86_64",
          "6Server-RHSCL-2.4-6.7.Z:rh-mysql56-mysql-bench-0:5.6.37-5.el6.x86_64",
          "6Server-RHSCL-2.4-6.7.Z:rh-mysql56-mysql-common-0:5.6.37-5.el6.x86_64",
          "6Server-RHSCL-2.4-6.7.Z:rh-mysql56-mysql-config-0:5.6.37-5.el6.x86_64",
          "6Server-RHSCL-2.4-6.7.Z:rh-mysql56-mysql-debuginfo-0:5.6.37-5.el6.x86_64",
          "6Server-RHSCL-2.4-6.7.Z:rh-mysql56-mysql-devel-0:5.6.37-5.el6.x86_64",
          "6Server-RHSCL-2.4-6.7.Z:rh-mysql56-mysql-errmsg-0:5.6.37-5.el6.x86_64",
          "6Server-RHSCL-2.4-6.7.Z:rh-mysql56-mysql-server-0:5.6.37-5.el6.x86_64",
          "6Server-RHSCL-2.4-6.7.Z:rh-mysql56-mysql-test-0:5.6.37-5.el6.x86_64",
          "6Server-RHSCL-2.4:rh-mysql56-mysql-0:5.6.37-5.el6.src",
          "6Server-RHSCL-2.4:rh-mysql56-mysql-0:5.6.37-5.el6.x86_64",
          "6Server-RHSCL-2.4:rh-mysql56-mysql-bench-0:5.6.37-5.el6.x86_64",
          "6Server-RHSCL-2.4:rh-mysql56-mysql-common-0:5.6.37-5.el6.x86_64",
          "6Server-RHSCL-2.4:rh-mysql56-mysql-config-0:5.6.37-5.el6.x86_64",
          "6Server-RHSCL-2.4:rh-mysql56-mysql-debuginfo-0:5.6.37-5.el6.x86_64",
          "6Server-RHSCL-2.4:rh-mysql56-mysql-devel-0:5.6.37-5.el6.x86_64",
          "6Server-RHSCL-2.4:rh-mysql56-mysql-errmsg-0:5.6.37-5.el6.x86_64",
          "6Server-RHSCL-2.4:rh-mysql56-mysql-server-0:5.6.37-5.el6.x86_64",
          "6Server-RHSCL-2.4:rh-mysql56-mysql-test-0:5.6.37-5.el6.x86_64",
          "6Workstation-RHSCL-2.4:rh-mysql56-mysql-0:5.6.37-5.el6.src",
          "6Workstation-RHSCL-2.4:rh-mysql56-mysql-0:5.6.37-5.el6.x86_64",
          "6Workstation-RHSCL-2.4:rh-mysql56-mysql-bench-0:5.6.37-5.el6.x86_64",
          "6Workstation-RHSCL-2.4:rh-mysql56-mysql-common-0:5.6.37-5.el6.x86_64",
          "6Workstation-RHSCL-2.4:rh-mysql56-mysql-config-0:5.6.37-5.el6.x86_64",
          "6Workstation-RHSCL-2.4:rh-mysql56-mysql-debuginfo-0:5.6.37-5.el6.x86_64",
          "6Workstation-RHSCL-2.4:rh-mysql56-mysql-devel-0:5.6.37-5.el6.x86_64",
          "6Workstation-RHSCL-2.4:rh-mysql56-mysql-errmsg-0:5.6.37-5.el6.x86_64",
          "6Workstation-RHSCL-2.4:rh-mysql56-mysql-server-0:5.6.37-5.el6.x86_64",
          "6Workstation-RHSCL-2.4:rh-mysql56-mysql-test-0:5.6.37-5.el6.x86_64",
          "7Server-RHSCL-2.4-7.3.Z:rh-mysql56-mysql-0:5.6.37-5.el7.src",
          "7Server-RHSCL-2.4-7.3.Z:rh-mysql56-mysql-0:5.6.37-5.el7.x86_64",
          "7Server-RHSCL-2.4-7.3.Z:rh-mysql56-mysql-bench-0:5.6.37-5.el7.x86_64",
          "7Server-RHSCL-2.4-7.3.Z:rh-mysql56-mysql-common-0:5.6.37-5.el7.x86_64",
          "7Server-RHSCL-2.4-7.3.Z:rh-mysql56-mysql-config-0:5.6.37-5.el7.x86_64",
          "7Server-RHSCL-2.4-7.3.Z:rh-mysql56-mysql-debuginfo-0:5.6.37-5.el7.x86_64",
          "7Server-RHSCL-2.4-7.3.Z:rh-mysql56-mysql-devel-0:5.6.37-5.el7.x86_64",
          "7Server-RHSCL-2.4-7.3.Z:rh-mysql56-mysql-errmsg-0:5.6.37-5.el7.x86_64",
          "7Server-RHSCL-2.4-7.3.Z:rh-mysql56-mysql-server-0:5.6.37-5.el7.x86_64",
          "7Server-RHSCL-2.4-7.3.Z:rh-mysql56-mysql-test-0:5.6.37-5.el7.x86_64",
          "7Server-RHSCL-2.4:rh-mysql56-mysql-0:5.6.37-5.el7.src",
          "7Server-RHSCL-2.4:rh-mysql56-mysql-0:5.6.37-5.el7.x86_64",
          "7Server-RHSCL-2.4:rh-mysql56-mysql-bench-0:5.6.37-5.el7.x86_64",
          "7Server-RHSCL-2.4:rh-mysql56-mysql-common-0:5.6.37-5.el7.x86_64",
          "7Server-RHSCL-2.4:rh-mysql56-mysql-config-0:5.6.37-5.el7.x86_64",
          "7Server-RHSCL-2.4:rh-mysql56-mysql-debuginfo-0:5.6.37-5.el7.x86_64",
          "7Server-RHSCL-2.4:rh-mysql56-mysql-devel-0:5.6.37-5.el7.x86_64",
          "7Server-RHSCL-2.4:rh-mysql56-mysql-errmsg-0:5.6.37-5.el7.x86_64",
          "7Server-RHSCL-2.4:rh-mysql56-mysql-server-0:5.6.37-5.el7.x86_64",
          "7Server-RHSCL-2.4:rh-mysql56-mysql-test-0:5.6.37-5.el7.x86_64",
          "7Workstation-RHSCL-2.4:rh-mysql56-mysql-0:5.6.37-5.el7.src",
          "7Workstation-RHSCL-2.4:rh-mysql56-mysql-0:5.6.37-5.el7.x86_64",
          "7Workstation-RHSCL-2.4:rh-mysql56-mysql-bench-0:5.6.37-5.el7.x86_64",
          "7Workstation-RHSCL-2.4:rh-mysql56-mysql-common-0:5.6.37-5.el7.x86_64",
          "7Workstation-RHSCL-2.4:rh-mysql56-mysql-config-0:5.6.37-5.el7.x86_64",
          "7Workstation-RHSCL-2.4:rh-mysql56-mysql-debuginfo-0:5.6.37-5.el7.x86_64",
          "7Workstation-RHSCL-2.4:rh-mysql56-mysql-devel-0:5.6.37-5.el7.x86_64",
          "7Workstation-RHSCL-2.4:rh-mysql56-mysql-errmsg-0:5.6.37-5.el7.x86_64",
          "7Workstation-RHSCL-2.4:rh-mysql56-mysql-server-0:5.6.37-5.el7.x86_64",
          "7Workstation-RHSCL-2.4:rh-mysql56-mysql-test-0:5.6.37-5.el7.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2017-3453"
        },
        {
          "category": "external",
          "summary": "RHBZ#1443365",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1443365"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2017-3453",
          "url": "https://www.cve.org/CVERecord?id=CVE-2017-3453"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2017-3453",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2017-3453"
        },
        {
          "category": "external",
          "summary": "http://www.oracle.com/technetwork/security-advisory/cpuapr2017-3236618.html#AppendixMSQL",
          "url": "http://www.oracle.com/technetwork/security-advisory/cpuapr2017-3236618.html#AppendixMSQL"
        }
      ],
      "release_date": "2017-04-19T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2017-09-21T07:42:12+00:00",
          "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAfter installing this update, the MySQL server daemon (mysqld) will be restarted automatically.",
          "product_ids": [
            "6Server-RHSCL-2.4-6.7.Z:rh-mysql56-mysql-0:5.6.37-5.el6.src",
            "6Server-RHSCL-2.4-6.7.Z:rh-mysql56-mysql-0:5.6.37-5.el6.x86_64",
            "6Server-RHSCL-2.4-6.7.Z:rh-mysql56-mysql-bench-0:5.6.37-5.el6.x86_64",
            "6Server-RHSCL-2.4-6.7.Z:rh-mysql56-mysql-common-0:5.6.37-5.el6.x86_64",
            "6Server-RHSCL-2.4-6.7.Z:rh-mysql56-mysql-config-0:5.6.37-5.el6.x86_64",
            "6Server-RHSCL-2.4-6.7.Z:rh-mysql56-mysql-debuginfo-0:5.6.37-5.el6.x86_64",
            "6Server-RHSCL-2.4-6.7.Z:rh-mysql56-mysql-devel-0:5.6.37-5.el6.x86_64",
            "6Server-RHSCL-2.4-6.7.Z:rh-mysql56-mysql-errmsg-0:5.6.37-5.el6.x86_64",
            "6Server-RHSCL-2.4-6.7.Z:rh-mysql56-mysql-server-0:5.6.37-5.el6.x86_64",
            "6Server-RHSCL-2.4-6.7.Z:rh-mysql56-mysql-test-0:5.6.37-5.el6.x86_64",
            "6Server-RHSCL-2.4:rh-mysql56-mysql-0:5.6.37-5.el6.src",
            "6Server-RHSCL-2.4:rh-mysql56-mysql-0:5.6.37-5.el6.x86_64",
            "6Server-RHSCL-2.4:rh-mysql56-mysql-bench-0:5.6.37-5.el6.x86_64",
            "6Server-RHSCL-2.4:rh-mysql56-mysql-common-0:5.6.37-5.el6.x86_64",
            "6Server-RHSCL-2.4:rh-mysql56-mysql-config-0:5.6.37-5.el6.x86_64",
            "6Server-RHSCL-2.4:rh-mysql56-mysql-debuginfo-0:5.6.37-5.el6.x86_64",
            "6Server-RHSCL-2.4:rh-mysql56-mysql-devel-0:5.6.37-5.el6.x86_64",
            "6Server-RHSCL-2.4:rh-mysql56-mysql-errmsg-0:5.6.37-5.el6.x86_64",
            "6Server-RHSCL-2.4:rh-mysql56-mysql-server-0:5.6.37-5.el6.x86_64",
            "6Server-RHSCL-2.4:rh-mysql56-mysql-test-0:5.6.37-5.el6.x86_64",
            "6Workstation-RHSCL-2.4:rh-mysql56-mysql-0:5.6.37-5.el6.src",
            "6Workstation-RHSCL-2.4:rh-mysql56-mysql-0:5.6.37-5.el6.x86_64",
            "6Workstation-RHSCL-2.4:rh-mysql56-mysql-bench-0:5.6.37-5.el6.x86_64",
            "6Workstation-RHSCL-2.4:rh-mysql56-mysql-common-0:5.6.37-5.el6.x86_64",
            "6Workstation-RHSCL-2.4:rh-mysql56-mysql-config-0:5.6.37-5.el6.x86_64",
            "6Workstation-RHSCL-2.4:rh-mysql56-mysql-debuginfo-0:5.6.37-5.el6.x86_64",
            "6Workstation-RHSCL-2.4:rh-mysql56-mysql-devel-0:5.6.37-5.el6.x86_64",
            "6Workstation-RHSCL-2.4:rh-mysql56-mysql-errmsg-0:5.6.37-5.el6.x86_64",
            "6Workstation-RHSCL-2.4:rh-mysql56-mysql-server-0:5.6.37-5.el6.x86_64",
            "6Workstation-RHSCL-2.4:rh-mysql56-mysql-test-0:5.6.37-5.el6.x86_64",
            "7Server-RHSCL-2.4-7.3.Z:rh-mysql56-mysql-0:5.6.37-5.el7.src",
            "7Server-RHSCL-2.4-7.3.Z:rh-mysql56-mysql-0:5.6.37-5.el7.x86_64",
            "7Server-RHSCL-2.4-7.3.Z:rh-mysql56-mysql-bench-0:5.6.37-5.el7.x86_64",
            "7Server-RHSCL-2.4-7.3.Z:rh-mysql56-mysql-common-0:5.6.37-5.el7.x86_64",
            "7Server-RHSCL-2.4-7.3.Z:rh-mysql56-mysql-config-0:5.6.37-5.el7.x86_64",
            "7Server-RHSCL-2.4-7.3.Z:rh-mysql56-mysql-debuginfo-0:5.6.37-5.el7.x86_64",
            "7Server-RHSCL-2.4-7.3.Z:rh-mysql56-mysql-devel-0:5.6.37-5.el7.x86_64",
            "7Server-RHSCL-2.4-7.3.Z:rh-mysql56-mysql-errmsg-0:5.6.37-5.el7.x86_64",
            "7Server-RHSCL-2.4-7.3.Z:rh-mysql56-mysql-server-0:5.6.37-5.el7.x86_64",
            "7Server-RHSCL-2.4-7.3.Z:rh-mysql56-mysql-test-0:5.6.37-5.el7.x86_64",
            "7Server-RHSCL-2.4:rh-mysql56-mysql-0:5.6.37-5.el7.src",
            "7Server-RHSCL-2.4:rh-mysql56-mysql-0:5.6.37-5.el7.x86_64",
            "7Server-RHSCL-2.4:rh-mysql56-mysql-bench-0:5.6.37-5.el7.x86_64",
            "7Server-RHSCL-2.4:rh-mysql56-mysql-common-0:5.6.37-5.el7.x86_64",
            "7Server-RHSCL-2.4:rh-mysql56-mysql-config-0:5.6.37-5.el7.x86_64",
            "7Server-RHSCL-2.4:rh-mysql56-mysql-debuginfo-0:5.6.37-5.el7.x86_64",
            "7Server-RHSCL-2.4:rh-mysql56-mysql-devel-0:5.6.37-5.el7.x86_64",
            "7Server-RHSCL-2.4:rh-mysql56-mysql-errmsg-0:5.6.37-5.el7.x86_64",
            "7Server-RHSCL-2.4:rh-mysql56-mysql-server-0:5.6.37-5.el7.x86_64",
            "7Server-RHSCL-2.4:rh-mysql56-mysql-test-0:5.6.37-5.el7.x86_64",
            "7Workstation-RHSCL-2.4:rh-mysql56-mysql-0:5.6.37-5.el7.src",
            "7Workstation-RHSCL-2.4:rh-mysql56-mysql-0:5.6.37-5.el7.x86_64",
            "7Workstation-RHSCL-2.4:rh-mysql56-mysql-bench-0:5.6.37-5.el7.x86_64",
            "7Workstation-RHSCL-2.4:rh-mysql56-mysql-common-0:5.6.37-5.el7.x86_64",
            "7Workstation-RHSCL-2.4:rh-mysql56-mysql-config-0:5.6.37-5.el7.x86_64",
            "7Workstation-RHSCL-2.4:rh-mysql56-mysql-debuginfo-0:5.6.37-5.el7.x86_64",
            "7Workstation-RHSCL-2.4:rh-mysql56-mysql-devel-0:5.6.37-5.el7.x86_64",
            "7Workstation-RHSCL-2.4:rh-mysql56-mysql-errmsg-0:5.6.37-5.el7.x86_64",
            "7Workstation-RHSCL-2.4:rh-mysql56-mysql-server-0:5.6.37-5.el7.x86_64",
            "7Workstation-RHSCL-2.4:rh-mysql56-mysql-test-0:5.6.37-5.el7.x86_64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2017:2787"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 6.5,
            "baseSeverity": "MEDIUM",
            "confidentialityImpact": "NONE",
            "integrityImpact": "NONE",
            "privilegesRequired": "LOW",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.0"
          },
          "products": [
            "6Server-RHSCL-2.4-6.7.Z:rh-mysql56-mysql-0:5.6.37-5.el6.src",
            "6Server-RHSCL-2.4-6.7.Z:rh-mysql56-mysql-0:5.6.37-5.el6.x86_64",
            "6Server-RHSCL-2.4-6.7.Z:rh-mysql56-mysql-bench-0:5.6.37-5.el6.x86_64",
            "6Server-RHSCL-2.4-6.7.Z:rh-mysql56-mysql-common-0:5.6.37-5.el6.x86_64",
            "6Server-RHSCL-2.4-6.7.Z:rh-mysql56-mysql-config-0:5.6.37-5.el6.x86_64",
            "6Server-RHSCL-2.4-6.7.Z:rh-mysql56-mysql-debuginfo-0:5.6.37-5.el6.x86_64",
            "6Server-RHSCL-2.4-6.7.Z:rh-mysql56-mysql-devel-0:5.6.37-5.el6.x86_64",
            "6Server-RHSCL-2.4-6.7.Z:rh-mysql56-mysql-errmsg-0:5.6.37-5.el6.x86_64",
            "6Server-RHSCL-2.4-6.7.Z:rh-mysql56-mysql-server-0:5.6.37-5.el6.x86_64",
            "6Server-RHSCL-2.4-6.7.Z:rh-mysql56-mysql-test-0:5.6.37-5.el6.x86_64",
            "6Server-RHSCL-2.4:rh-mysql56-mysql-0:5.6.37-5.el6.src",
            "6Server-RHSCL-2.4:rh-mysql56-mysql-0:5.6.37-5.el6.x86_64",
            "6Server-RHSCL-2.4:rh-mysql56-mysql-bench-0:5.6.37-5.el6.x86_64",
            "6Server-RHSCL-2.4:rh-mysql56-mysql-common-0:5.6.37-5.el6.x86_64",
            "6Server-RHSCL-2.4:rh-mysql56-mysql-config-0:5.6.37-5.el6.x86_64",
            "6Server-RHSCL-2.4:rh-mysql56-mysql-debuginfo-0:5.6.37-5.el6.x86_64",
            "6Server-RHSCL-2.4:rh-mysql56-mysql-devel-0:5.6.37-5.el6.x86_64",
            "6Server-RHSCL-2.4:rh-mysql56-mysql-errmsg-0:5.6.37-5.el6.x86_64",
            "6Server-RHSCL-2.4:rh-mysql56-mysql-server-0:5.6.37-5.el6.x86_64",
            "6Server-RHSCL-2.4:rh-mysql56-mysql-test-0:5.6.37-5.el6.x86_64",
            "6Workstation-RHSCL-2.4:rh-mysql56-mysql-0:5.6.37-5.el6.src",
            "6Workstation-RHSCL-2.4:rh-mysql56-mysql-0:5.6.37-5.el6.x86_64",
            "6Workstation-RHSCL-2.4:rh-mysql56-mysql-bench-0:5.6.37-5.el6.x86_64",
            "6Workstation-RHSCL-2.4:rh-mysql56-mysql-common-0:5.6.37-5.el6.x86_64",
            "6Workstation-RHSCL-2.4:rh-mysql56-mysql-config-0:5.6.37-5.el6.x86_64",
            "6Workstation-RHSCL-2.4:rh-mysql56-mysql-debuginfo-0:5.6.37-5.el6.x86_64",
            "6Workstation-RHSCL-2.4:rh-mysql56-mysql-devel-0:5.6.37-5.el6.x86_64",
            "6Workstation-RHSCL-2.4:rh-mysql56-mysql-errmsg-0:5.6.37-5.el6.x86_64",
            "6Workstation-RHSCL-2.4:rh-mysql56-mysql-server-0:5.6.37-5.el6.x86_64",
            "6Workstation-RHSCL-2.4:rh-mysql56-mysql-test-0:5.6.37-5.el6.x86_64",
            "7Server-RHSCL-2.4-7.3.Z:rh-mysql56-mysql-0:5.6.37-5.el7.src",
            "7Server-RHSCL-2.4-7.3.Z:rh-mysql56-mysql-0:5.6.37-5.el7.x86_64",
            "7Server-RHSCL-2.4-7.3.Z:rh-mysql56-mysql-bench-0:5.6.37-5.el7.x86_64",
            "7Server-RHSCL-2.4-7.3.Z:rh-mysql56-mysql-common-0:5.6.37-5.el7.x86_64",
            "7Server-RHSCL-2.4-7.3.Z:rh-mysql56-mysql-config-0:5.6.37-5.el7.x86_64",
            "7Server-RHSCL-2.4-7.3.Z:rh-mysql56-mysql-debuginfo-0:5.6.37-5.el7.x86_64",
            "7Server-RHSCL-2.4-7.3.Z:rh-mysql56-mysql-devel-0:5.6.37-5.el7.x86_64",
            "7Server-RHSCL-2.4-7.3.Z:rh-mysql56-mysql-errmsg-0:5.6.37-5.el7.x86_64",
            "7Server-RHSCL-2.4-7.3.Z:rh-mysql56-mysql-server-0:5.6.37-5.el7.x86_64",
            "7Server-RHSCL-2.4-7.3.Z:rh-mysql56-mysql-test-0:5.6.37-5.el7.x86_64",
            "7Server-RHSCL-2.4:rh-mysql56-mysql-0:5.6.37-5.el7.src",
            "7Server-RHSCL-2.4:rh-mysql56-mysql-0:5.6.37-5.el7.x86_64",
            "7Server-RHSCL-2.4:rh-mysql56-mysql-bench-0:5.6.37-5.el7.x86_64",
            "7Server-RHSCL-2.4:rh-mysql56-mysql-common-0:5.6.37-5.el7.x86_64",
            "7Server-RHSCL-2.4:rh-mysql56-mysql-config-0:5.6.37-5.el7.x86_64",
            "7Server-RHSCL-2.4:rh-mysql56-mysql-debuginfo-0:5.6.37-5.el7.x86_64",
            "7Server-RHSCL-2.4:rh-mysql56-mysql-devel-0:5.6.37-5.el7.x86_64",
            "7Server-RHSCL-2.4:rh-mysql56-mysql-errmsg-0:5.6.37-5.el7.x86_64",
            "7Server-RHSCL-2.4:rh-mysql56-mysql-server-0:5.6.37-5.el7.x86_64",
            "7Server-RHSCL-2.4:rh-mysql56-mysql-test-0:5.6.37-5.el7.x86_64",
            "7Workstation-RHSCL-2.4:rh-mysql56-mysql-0:5.6.37-5.el7.src",
            "7Workstation-RHSCL-2.4:rh-mysql56-mysql-0:5.6.37-5.el7.x86_64",
            "7Workstation-RHSCL-2.4:rh-mysql56-mysql-bench-0:5.6.37-5.el7.x86_64",
            "7Workstation-RHSCL-2.4:rh-mysql56-mysql-common-0:5.6.37-5.el7.x86_64",
            "7Workstation-RHSCL-2.4:rh-mysql56-mysql-config-0:5.6.37-5.el7.x86_64",
            "7Workstation-RHSCL-2.4:rh-mysql56-mysql-debuginfo-0:5.6.37-5.el7.x86_64",
            "7Workstation-RHSCL-2.4:rh-mysql56-mysql-devel-0:5.6.37-5.el7.x86_64",
            "7Workstation-RHSCL-2.4:rh-mysql56-mysql-errmsg-0:5.6.37-5.el7.x86_64",
            "7Workstation-RHSCL-2.4:rh-mysql56-mysql-server-0:5.6.37-5.el7.x86_64",
            "7Workstation-RHSCL-2.4:rh-mysql56-mysql-test-0:5.6.37-5.el7.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Moderate"
        }
      ],
      "title": "mysql: Server: Optimizer unspecified vulnerability (CPU Apr 2017)"
    },
    {
      "cve": "CVE-2017-3456",
      "discovery_date": "2017-04-19T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "1443369"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: DML). Supported versions that are affected are 5.5.54 and earlier, 5.6.35 and earlier and 5.7.17 and earlier. Easily \"exploitable\" vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.0 Base Score 4.9 (Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H).",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "mysql: Server: DML unspecified vulnerability (CPU Apr 2017)",
          "title": "Vulnerability summary"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "6Server-RHSCL-2.4-6.7.Z:rh-mysql56-mysql-0:5.6.37-5.el6.src",
          "6Server-RHSCL-2.4-6.7.Z:rh-mysql56-mysql-0:5.6.37-5.el6.x86_64",
          "6Server-RHSCL-2.4-6.7.Z:rh-mysql56-mysql-bench-0:5.6.37-5.el6.x86_64",
          "6Server-RHSCL-2.4-6.7.Z:rh-mysql56-mysql-common-0:5.6.37-5.el6.x86_64",
          "6Server-RHSCL-2.4-6.7.Z:rh-mysql56-mysql-config-0:5.6.37-5.el6.x86_64",
          "6Server-RHSCL-2.4-6.7.Z:rh-mysql56-mysql-debuginfo-0:5.6.37-5.el6.x86_64",
          "6Server-RHSCL-2.4-6.7.Z:rh-mysql56-mysql-devel-0:5.6.37-5.el6.x86_64",
          "6Server-RHSCL-2.4-6.7.Z:rh-mysql56-mysql-errmsg-0:5.6.37-5.el6.x86_64",
          "6Server-RHSCL-2.4-6.7.Z:rh-mysql56-mysql-server-0:5.6.37-5.el6.x86_64",
          "6Server-RHSCL-2.4-6.7.Z:rh-mysql56-mysql-test-0:5.6.37-5.el6.x86_64",
          "6Server-RHSCL-2.4:rh-mysql56-mysql-0:5.6.37-5.el6.src",
          "6Server-RHSCL-2.4:rh-mysql56-mysql-0:5.6.37-5.el6.x86_64",
          "6Server-RHSCL-2.4:rh-mysql56-mysql-bench-0:5.6.37-5.el6.x86_64",
          "6Server-RHSCL-2.4:rh-mysql56-mysql-common-0:5.6.37-5.el6.x86_64",
          "6Server-RHSCL-2.4:rh-mysql56-mysql-config-0:5.6.37-5.el6.x86_64",
          "6Server-RHSCL-2.4:rh-mysql56-mysql-debuginfo-0:5.6.37-5.el6.x86_64",
          "6Server-RHSCL-2.4:rh-mysql56-mysql-devel-0:5.6.37-5.el6.x86_64",
          "6Server-RHSCL-2.4:rh-mysql56-mysql-errmsg-0:5.6.37-5.el6.x86_64",
          "6Server-RHSCL-2.4:rh-mysql56-mysql-server-0:5.6.37-5.el6.x86_64",
          "6Server-RHSCL-2.4:rh-mysql56-mysql-test-0:5.6.37-5.el6.x86_64",
          "6Workstation-RHSCL-2.4:rh-mysql56-mysql-0:5.6.37-5.el6.src",
          "6Workstation-RHSCL-2.4:rh-mysql56-mysql-0:5.6.37-5.el6.x86_64",
          "6Workstation-RHSCL-2.4:rh-mysql56-mysql-bench-0:5.6.37-5.el6.x86_64",
          "6Workstation-RHSCL-2.4:rh-mysql56-mysql-common-0:5.6.37-5.el6.x86_64",
          "6Workstation-RHSCL-2.4:rh-mysql56-mysql-config-0:5.6.37-5.el6.x86_64",
          "6Workstation-RHSCL-2.4:rh-mysql56-mysql-debuginfo-0:5.6.37-5.el6.x86_64",
          "6Workstation-RHSCL-2.4:rh-mysql56-mysql-devel-0:5.6.37-5.el6.x86_64",
          "6Workstation-RHSCL-2.4:rh-mysql56-mysql-errmsg-0:5.6.37-5.el6.x86_64",
          "6Workstation-RHSCL-2.4:rh-mysql56-mysql-server-0:5.6.37-5.el6.x86_64",
          "6Workstation-RHSCL-2.4:rh-mysql56-mysql-test-0:5.6.37-5.el6.x86_64",
          "7Server-RHSCL-2.4-7.3.Z:rh-mysql56-mysql-0:5.6.37-5.el7.src",
          "7Server-RHSCL-2.4-7.3.Z:rh-mysql56-mysql-0:5.6.37-5.el7.x86_64",
          "7Server-RHSCL-2.4-7.3.Z:rh-mysql56-mysql-bench-0:5.6.37-5.el7.x86_64",
          "7Server-RHSCL-2.4-7.3.Z:rh-mysql56-mysql-common-0:5.6.37-5.el7.x86_64",
          "7Server-RHSCL-2.4-7.3.Z:rh-mysql56-mysql-config-0:5.6.37-5.el7.x86_64",
          "7Server-RHSCL-2.4-7.3.Z:rh-mysql56-mysql-debuginfo-0:5.6.37-5.el7.x86_64",
          "7Server-RHSCL-2.4-7.3.Z:rh-mysql56-mysql-devel-0:5.6.37-5.el7.x86_64",
          "7Server-RHSCL-2.4-7.3.Z:rh-mysql56-mysql-errmsg-0:5.6.37-5.el7.x86_64",
          "7Server-RHSCL-2.4-7.3.Z:rh-mysql56-mysql-server-0:5.6.37-5.el7.x86_64",
          "7Server-RHSCL-2.4-7.3.Z:rh-mysql56-mysql-test-0:5.6.37-5.el7.x86_64",
          "7Server-RHSCL-2.4:rh-mysql56-mysql-0:5.6.37-5.el7.src",
          "7Server-RHSCL-2.4:rh-mysql56-mysql-0:5.6.37-5.el7.x86_64",
          "7Server-RHSCL-2.4:rh-mysql56-mysql-bench-0:5.6.37-5.el7.x86_64",
          "7Server-RHSCL-2.4:rh-mysql56-mysql-common-0:5.6.37-5.el7.x86_64",
          "7Server-RHSCL-2.4:rh-mysql56-mysql-config-0:5.6.37-5.el7.x86_64",
          "7Server-RHSCL-2.4:rh-mysql56-mysql-debuginfo-0:5.6.37-5.el7.x86_64",
          "7Server-RHSCL-2.4:rh-mysql56-mysql-devel-0:5.6.37-5.el7.x86_64",
          "7Server-RHSCL-2.4:rh-mysql56-mysql-errmsg-0:5.6.37-5.el7.x86_64",
          "7Server-RHSCL-2.4:rh-mysql56-mysql-server-0:5.6.37-5.el7.x86_64",
          "7Server-RHSCL-2.4:rh-mysql56-mysql-test-0:5.6.37-5.el7.x86_64",
          "7Workstation-RHSCL-2.4:rh-mysql56-mysql-0:5.6.37-5.el7.src",
          "7Workstation-RHSCL-2.4:rh-mysql56-mysql-0:5.6.37-5.el7.x86_64",
          "7Workstation-RHSCL-2.4:rh-mysql56-mysql-bench-0:5.6.37-5.el7.x86_64",
          "7Workstation-RHSCL-2.4:rh-mysql56-mysql-common-0:5.6.37-5.el7.x86_64",
          "7Workstation-RHSCL-2.4:rh-mysql56-mysql-config-0:5.6.37-5.el7.x86_64",
          "7Workstation-RHSCL-2.4:rh-mysql56-mysql-debuginfo-0:5.6.37-5.el7.x86_64",
          "7Workstation-RHSCL-2.4:rh-mysql56-mysql-devel-0:5.6.37-5.el7.x86_64",
          "7Workstation-RHSCL-2.4:rh-mysql56-mysql-errmsg-0:5.6.37-5.el7.x86_64",
          "7Workstation-RHSCL-2.4:rh-mysql56-mysql-server-0:5.6.37-5.el7.x86_64",
          "7Workstation-RHSCL-2.4:rh-mysql56-mysql-test-0:5.6.37-5.el7.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2017-3456"
        },
        {
          "category": "external",
          "summary": "RHBZ#1443369",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1443369"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2017-3456",
          "url": "https://www.cve.org/CVERecord?id=CVE-2017-3456"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2017-3456",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2017-3456"
        },
        {
          "category": "external",
          "summary": "http://www.oracle.com/technetwork/security-advisory/cpuapr2017-3236618.html#AppendixMSQL",
          "url": "http://www.oracle.com/technetwork/security-advisory/cpuapr2017-3236618.html#AppendixMSQL"
        }
      ],
      "release_date": "2017-04-19T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2017-09-21T07:42:12+00:00",
          "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAfter installing this update, the MySQL server daemon (mysqld) will be restarted automatically.",
          "product_ids": [
            "6Server-RHSCL-2.4-6.7.Z:rh-mysql56-mysql-0:5.6.37-5.el6.src",
            "6Server-RHSCL-2.4-6.7.Z:rh-mysql56-mysql-0:5.6.37-5.el6.x86_64",
            "6Server-RHSCL-2.4-6.7.Z:rh-mysql56-mysql-bench-0:5.6.37-5.el6.x86_64",
            "6Server-RHSCL-2.4-6.7.Z:rh-mysql56-mysql-common-0:5.6.37-5.el6.x86_64",
            "6Server-RHSCL-2.4-6.7.Z:rh-mysql56-mysql-config-0:5.6.37-5.el6.x86_64",
            "6Server-RHSCL-2.4-6.7.Z:rh-mysql56-mysql-debuginfo-0:5.6.37-5.el6.x86_64",
            "6Server-RHSCL-2.4-6.7.Z:rh-mysql56-mysql-devel-0:5.6.37-5.el6.x86_64",
            "6Server-RHSCL-2.4-6.7.Z:rh-mysql56-mysql-errmsg-0:5.6.37-5.el6.x86_64",
            "6Server-RHSCL-2.4-6.7.Z:rh-mysql56-mysql-server-0:5.6.37-5.el6.x86_64",
            "6Server-RHSCL-2.4-6.7.Z:rh-mysql56-mysql-test-0:5.6.37-5.el6.x86_64",
            "6Server-RHSCL-2.4:rh-mysql56-mysql-0:5.6.37-5.el6.src",
            "6Server-RHSCL-2.4:rh-mysql56-mysql-0:5.6.37-5.el6.x86_64",
            "6Server-RHSCL-2.4:rh-mysql56-mysql-bench-0:5.6.37-5.el6.x86_64",
            "6Server-RHSCL-2.4:rh-mysql56-mysql-common-0:5.6.37-5.el6.x86_64",
            "6Server-RHSCL-2.4:rh-mysql56-mysql-config-0:5.6.37-5.el6.x86_64",
            "6Server-RHSCL-2.4:rh-mysql56-mysql-debuginfo-0:5.6.37-5.el6.x86_64",
            "6Server-RHSCL-2.4:rh-mysql56-mysql-devel-0:5.6.37-5.el6.x86_64",
            "6Server-RHSCL-2.4:rh-mysql56-mysql-errmsg-0:5.6.37-5.el6.x86_64",
            "6Server-RHSCL-2.4:rh-mysql56-mysql-server-0:5.6.37-5.el6.x86_64",
            "6Server-RHSCL-2.4:rh-mysql56-mysql-test-0:5.6.37-5.el6.x86_64",
            "6Workstation-RHSCL-2.4:rh-mysql56-mysql-0:5.6.37-5.el6.src",
            "6Workstation-RHSCL-2.4:rh-mysql56-mysql-0:5.6.37-5.el6.x86_64",
            "6Workstation-RHSCL-2.4:rh-mysql56-mysql-bench-0:5.6.37-5.el6.x86_64",
            "6Workstation-RHSCL-2.4:rh-mysql56-mysql-common-0:5.6.37-5.el6.x86_64",
            "6Workstation-RHSCL-2.4:rh-mysql56-mysql-config-0:5.6.37-5.el6.x86_64",
            "6Workstation-RHSCL-2.4:rh-mysql56-mysql-debuginfo-0:5.6.37-5.el6.x86_64",
            "6Workstation-RHSCL-2.4:rh-mysql56-mysql-devel-0:5.6.37-5.el6.x86_64",
            "6Workstation-RHSCL-2.4:rh-mysql56-mysql-errmsg-0:5.6.37-5.el6.x86_64",
            "6Workstation-RHSCL-2.4:rh-mysql56-mysql-server-0:5.6.37-5.el6.x86_64",
            "6Workstation-RHSCL-2.4:rh-mysql56-mysql-test-0:5.6.37-5.el6.x86_64",
            "7Server-RHSCL-2.4-7.3.Z:rh-mysql56-mysql-0:5.6.37-5.el7.src",
            "7Server-RHSCL-2.4-7.3.Z:rh-mysql56-mysql-0:5.6.37-5.el7.x86_64",
            "7Server-RHSCL-2.4-7.3.Z:rh-mysql56-mysql-bench-0:5.6.37-5.el7.x86_64",
            "7Server-RHSCL-2.4-7.3.Z:rh-mysql56-mysql-common-0:5.6.37-5.el7.x86_64",
            "7Server-RHSCL-2.4-7.3.Z:rh-mysql56-mysql-config-0:5.6.37-5.el7.x86_64",
            "7Server-RHSCL-2.4-7.3.Z:rh-mysql56-mysql-debuginfo-0:5.6.37-5.el7.x86_64",
            "7Server-RHSCL-2.4-7.3.Z:rh-mysql56-mysql-devel-0:5.6.37-5.el7.x86_64",
            "7Server-RHSCL-2.4-7.3.Z:rh-mysql56-mysql-errmsg-0:5.6.37-5.el7.x86_64",
            "7Server-RHSCL-2.4-7.3.Z:rh-mysql56-mysql-server-0:5.6.37-5.el7.x86_64",
            "7Server-RHSCL-2.4-7.3.Z:rh-mysql56-mysql-test-0:5.6.37-5.el7.x86_64",
            "7Server-RHSCL-2.4:rh-mysql56-mysql-0:5.6.37-5.el7.src",
            "7Server-RHSCL-2.4:rh-mysql56-mysql-0:5.6.37-5.el7.x86_64",
            "7Server-RHSCL-2.4:rh-mysql56-mysql-bench-0:5.6.37-5.el7.x86_64",
            "7Server-RHSCL-2.4:rh-mysql56-mysql-common-0:5.6.37-5.el7.x86_64",
            "7Server-RHSCL-2.4:rh-mysql56-mysql-config-0:5.6.37-5.el7.x86_64",
            "7Server-RHSCL-2.4:rh-mysql56-mysql-debuginfo-0:5.6.37-5.el7.x86_64",
            "7Server-RHSCL-2.4:rh-mysql56-mysql-devel-0:5.6.37-5.el7.x86_64",
            "7Server-RHSCL-2.4:rh-mysql56-mysql-errmsg-0:5.6.37-5.el7.x86_64",
            "7Server-RHSCL-2.4:rh-mysql56-mysql-server-0:5.6.37-5.el7.x86_64",
            "7Server-RHSCL-2.4:rh-mysql56-mysql-test-0:5.6.37-5.el7.x86_64",
            "7Workstation-RHSCL-2.4:rh-mysql56-mysql-0:5.6.37-5.el7.src",
            "7Workstation-RHSCL-2.4:rh-mysql56-mysql-0:5.6.37-5.el7.x86_64",
            "7Workstation-RHSCL-2.4:rh-mysql56-mysql-bench-0:5.6.37-5.el7.x86_64",
            "7Workstation-RHSCL-2.4:rh-mysql56-mysql-common-0:5.6.37-5.el7.x86_64",
            "7Workstation-RHSCL-2.4:rh-mysql56-mysql-config-0:5.6.37-5.el7.x86_64",
            "7Workstation-RHSCL-2.4:rh-mysql56-mysql-debuginfo-0:5.6.37-5.el7.x86_64",
            "7Workstation-RHSCL-2.4:rh-mysql56-mysql-devel-0:5.6.37-5.el7.x86_64",
            "7Workstation-RHSCL-2.4:rh-mysql56-mysql-errmsg-0:5.6.37-5.el7.x86_64",
            "7Workstation-RHSCL-2.4:rh-mysql56-mysql-server-0:5.6.37-5.el7.x86_64",
            "7Workstation-RHSCL-2.4:rh-mysql56-mysql-test-0:5.6.37-5.el7.x86_64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2017:2787"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 4.9,
            "baseSeverity": "MEDIUM",
            "confidentialityImpact": "NONE",
            "integrityImpact": "NONE",
            "privilegesRequired": "HIGH",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.0"
          },
          "products": [
            "6Server-RHSCL-2.4-6.7.Z:rh-mysql56-mysql-0:5.6.37-5.el6.src",
            "6Server-RHSCL-2.4-6.7.Z:rh-mysql56-mysql-0:5.6.37-5.el6.x86_64",
            "6Server-RHSCL-2.4-6.7.Z:rh-mysql56-mysql-bench-0:5.6.37-5.el6.x86_64",
            "6Server-RHSCL-2.4-6.7.Z:rh-mysql56-mysql-common-0:5.6.37-5.el6.x86_64",
            "6Server-RHSCL-2.4-6.7.Z:rh-mysql56-mysql-config-0:5.6.37-5.el6.x86_64",
            "6Server-RHSCL-2.4-6.7.Z:rh-mysql56-mysql-debuginfo-0:5.6.37-5.el6.x86_64",
            "6Server-RHSCL-2.4-6.7.Z:rh-mysql56-mysql-devel-0:5.6.37-5.el6.x86_64",
            "6Server-RHSCL-2.4-6.7.Z:rh-mysql56-mysql-errmsg-0:5.6.37-5.el6.x86_64",
            "6Server-RHSCL-2.4-6.7.Z:rh-mysql56-mysql-server-0:5.6.37-5.el6.x86_64",
            "6Server-RHSCL-2.4-6.7.Z:rh-mysql56-mysql-test-0:5.6.37-5.el6.x86_64",
            "6Server-RHSCL-2.4:rh-mysql56-mysql-0:5.6.37-5.el6.src",
            "6Server-RHSCL-2.4:rh-mysql56-mysql-0:5.6.37-5.el6.x86_64",
            "6Server-RHSCL-2.4:rh-mysql56-mysql-bench-0:5.6.37-5.el6.x86_64",
            "6Server-RHSCL-2.4:rh-mysql56-mysql-common-0:5.6.37-5.el6.x86_64",
            "6Server-RHSCL-2.4:rh-mysql56-mysql-config-0:5.6.37-5.el6.x86_64",
            "6Server-RHSCL-2.4:rh-mysql56-mysql-debuginfo-0:5.6.37-5.el6.x86_64",
            "6Server-RHSCL-2.4:rh-mysql56-mysql-devel-0:5.6.37-5.el6.x86_64",
            "6Server-RHSCL-2.4:rh-mysql56-mysql-errmsg-0:5.6.37-5.el6.x86_64",
            "6Server-RHSCL-2.4:rh-mysql56-mysql-server-0:5.6.37-5.el6.x86_64",
            "6Server-RHSCL-2.4:rh-mysql56-mysql-test-0:5.6.37-5.el6.x86_64",
            "6Workstation-RHSCL-2.4:rh-mysql56-mysql-0:5.6.37-5.el6.src",
            "6Workstation-RHSCL-2.4:rh-mysql56-mysql-0:5.6.37-5.el6.x86_64",
            "6Workstation-RHSCL-2.4:rh-mysql56-mysql-bench-0:5.6.37-5.el6.x86_64",
            "6Workstation-RHSCL-2.4:rh-mysql56-mysql-common-0:5.6.37-5.el6.x86_64",
            "6Workstation-RHSCL-2.4:rh-mysql56-mysql-config-0:5.6.37-5.el6.x86_64",
            "6Workstation-RHSCL-2.4:rh-mysql56-mysql-debuginfo-0:5.6.37-5.el6.x86_64",
            "6Workstation-RHSCL-2.4:rh-mysql56-mysql-devel-0:5.6.37-5.el6.x86_64",
            "6Workstation-RHSCL-2.4:rh-mysql56-mysql-errmsg-0:5.6.37-5.el6.x86_64",
            "6Workstation-RHSCL-2.4:rh-mysql56-mysql-server-0:5.6.37-5.el6.x86_64",
            "6Workstation-RHSCL-2.4:rh-mysql56-mysql-test-0:5.6.37-5.el6.x86_64",
            "7Server-RHSCL-2.4-7.3.Z:rh-mysql56-mysql-0:5.6.37-5.el7.src",
            "7Server-RHSCL-2.4-7.3.Z:rh-mysql56-mysql-0:5.6.37-5.el7.x86_64",
            "7Server-RHSCL-2.4-7.3.Z:rh-mysql56-mysql-bench-0:5.6.37-5.el7.x86_64",
            "7Server-RHSCL-2.4-7.3.Z:rh-mysql56-mysql-common-0:5.6.37-5.el7.x86_64",
            "7Server-RHSCL-2.4-7.3.Z:rh-mysql56-mysql-config-0:5.6.37-5.el7.x86_64",
            "7Server-RHSCL-2.4-7.3.Z:rh-mysql56-mysql-debuginfo-0:5.6.37-5.el7.x86_64",
            "7Server-RHSCL-2.4-7.3.Z:rh-mysql56-mysql-devel-0:5.6.37-5.el7.x86_64",
            "7Server-RHSCL-2.4-7.3.Z:rh-mysql56-mysql-errmsg-0:5.6.37-5.el7.x86_64",
            "7Server-RHSCL-2.4-7.3.Z:rh-mysql56-mysql-server-0:5.6.37-5.el7.x86_64",
            "7Server-RHSCL-2.4-7.3.Z:rh-mysql56-mysql-test-0:5.6.37-5.el7.x86_64",
            "7Server-RHSCL-2.4:rh-mysql56-mysql-0:5.6.37-5.el7.src",
            "7Server-RHSCL-2.4:rh-mysql56-mysql-0:5.6.37-5.el7.x86_64",
            "7Server-RHSCL-2.4:rh-mysql56-mysql-bench-0:5.6.37-5.el7.x86_64",
            "7Server-RHSCL-2.4:rh-mysql56-mysql-common-0:5.6.37-5.el7.x86_64",
            "7Server-RHSCL-2.4:rh-mysql56-mysql-config-0:5.6.37-5.el7.x86_64",
            "7Server-RHSCL-2.4:rh-mysql56-mysql-debuginfo-0:5.6.37-5.el7.x86_64",
            "7Server-RHSCL-2.4:rh-mysql56-mysql-devel-0:5.6.37-5.el7.x86_64",
            "7Server-RHSCL-2.4:rh-mysql56-mysql-errmsg-0:5.6.37-5.el7.x86_64",
            "7Server-RHSCL-2.4:rh-mysql56-mysql-server-0:5.6.37-5.el7.x86_64",
            "7Server-RHSCL-2.4:rh-mysql56-mysql-test-0:5.6.37-5.el7.x86_64",
            "7Workstation-RHSCL-2.4:rh-mysql56-mysql-0:5.6.37-5.el7.src",
            "7Workstation-RHSCL-2.4:rh-mysql56-mysql-0:5.6.37-5.el7.x86_64",
            "7Workstation-RHSCL-2.4:rh-mysql56-mysql-bench-0:5.6.37-5.el7.x86_64",
            "7Workstation-RHSCL-2.4:rh-mysql56-mysql-common-0:5.6.37-5.el7.x86_64",
            "7Workstation-RHSCL-2.4:rh-mysql56-mysql-config-0:5.6.37-5.el7.x86_64",
            "7Workstation-RHSCL-2.4:rh-mysql56-mysql-debuginfo-0:5.6.37-5.el7.x86_64",
            "7Workstation-RHSCL-2.4:rh-mysql56-mysql-devel-0:5.6.37-5.el7.x86_64",
            "7Workstation-RHSCL-2.4:rh-mysql56-mysql-errmsg-0:5.6.37-5.el7.x86_64",
            "7Workstation-RHSCL-2.4:rh-mysql56-mysql-server-0:5.6.37-5.el7.x86_64",
            "7Workstation-RHSCL-2.4:rh-mysql56-mysql-test-0:5.6.37-5.el7.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Moderate"
        }
      ],
      "title": "mysql: Server: DML unspecified vulnerability (CPU Apr 2017)"
    },
    {
      "cve": "CVE-2017-3461",
      "discovery_date": "2017-04-19T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "1443376"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Security: Privileges). Supported versions that are affected are 5.5.54 and earlier, 5.6.35 and earlier and 5.7.17 and earlier. Easily \"exploitable\" vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.0 Base Score 4.9 (Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H).",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "mysql: Server: Security: Privileges unspecified vulnerability (CPU Apr 2017)",
          "title": "Vulnerability summary"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "6Server-RHSCL-2.4-6.7.Z:rh-mysql56-mysql-0:5.6.37-5.el6.src",
          "6Server-RHSCL-2.4-6.7.Z:rh-mysql56-mysql-0:5.6.37-5.el6.x86_64",
          "6Server-RHSCL-2.4-6.7.Z:rh-mysql56-mysql-bench-0:5.6.37-5.el6.x86_64",
          "6Server-RHSCL-2.4-6.7.Z:rh-mysql56-mysql-common-0:5.6.37-5.el6.x86_64",
          "6Server-RHSCL-2.4-6.7.Z:rh-mysql56-mysql-config-0:5.6.37-5.el6.x86_64",
          "6Server-RHSCL-2.4-6.7.Z:rh-mysql56-mysql-debuginfo-0:5.6.37-5.el6.x86_64",
          "6Server-RHSCL-2.4-6.7.Z:rh-mysql56-mysql-devel-0:5.6.37-5.el6.x86_64",
          "6Server-RHSCL-2.4-6.7.Z:rh-mysql56-mysql-errmsg-0:5.6.37-5.el6.x86_64",
          "6Server-RHSCL-2.4-6.7.Z:rh-mysql56-mysql-server-0:5.6.37-5.el6.x86_64",
          "6Server-RHSCL-2.4-6.7.Z:rh-mysql56-mysql-test-0:5.6.37-5.el6.x86_64",
          "6Server-RHSCL-2.4:rh-mysql56-mysql-0:5.6.37-5.el6.src",
          "6Server-RHSCL-2.4:rh-mysql56-mysql-0:5.6.37-5.el6.x86_64",
          "6Server-RHSCL-2.4:rh-mysql56-mysql-bench-0:5.6.37-5.el6.x86_64",
          "6Server-RHSCL-2.4:rh-mysql56-mysql-common-0:5.6.37-5.el6.x86_64",
          "6Server-RHSCL-2.4:rh-mysql56-mysql-config-0:5.6.37-5.el6.x86_64",
          "6Server-RHSCL-2.4:rh-mysql56-mysql-debuginfo-0:5.6.37-5.el6.x86_64",
          "6Server-RHSCL-2.4:rh-mysql56-mysql-devel-0:5.6.37-5.el6.x86_64",
          "6Server-RHSCL-2.4:rh-mysql56-mysql-errmsg-0:5.6.37-5.el6.x86_64",
          "6Server-RHSCL-2.4:rh-mysql56-mysql-server-0:5.6.37-5.el6.x86_64",
          "6Server-RHSCL-2.4:rh-mysql56-mysql-test-0:5.6.37-5.el6.x86_64",
          "6Workstation-RHSCL-2.4:rh-mysql56-mysql-0:5.6.37-5.el6.src",
          "6Workstation-RHSCL-2.4:rh-mysql56-mysql-0:5.6.37-5.el6.x86_64",
          "6Workstation-RHSCL-2.4:rh-mysql56-mysql-bench-0:5.6.37-5.el6.x86_64",
          "6Workstation-RHSCL-2.4:rh-mysql56-mysql-common-0:5.6.37-5.el6.x86_64",
          "6Workstation-RHSCL-2.4:rh-mysql56-mysql-config-0:5.6.37-5.el6.x86_64",
          "6Workstation-RHSCL-2.4:rh-mysql56-mysql-debuginfo-0:5.6.37-5.el6.x86_64",
          "6Workstation-RHSCL-2.4:rh-mysql56-mysql-devel-0:5.6.37-5.el6.x86_64",
          "6Workstation-RHSCL-2.4:rh-mysql56-mysql-errmsg-0:5.6.37-5.el6.x86_64",
          "6Workstation-RHSCL-2.4:rh-mysql56-mysql-server-0:5.6.37-5.el6.x86_64",
          "6Workstation-RHSCL-2.4:rh-mysql56-mysql-test-0:5.6.37-5.el6.x86_64",
          "7Server-RHSCL-2.4-7.3.Z:rh-mysql56-mysql-0:5.6.37-5.el7.src",
          "7Server-RHSCL-2.4-7.3.Z:rh-mysql56-mysql-0:5.6.37-5.el7.x86_64",
          "7Server-RHSCL-2.4-7.3.Z:rh-mysql56-mysql-bench-0:5.6.37-5.el7.x86_64",
          "7Server-RHSCL-2.4-7.3.Z:rh-mysql56-mysql-common-0:5.6.37-5.el7.x86_64",
          "7Server-RHSCL-2.4-7.3.Z:rh-mysql56-mysql-config-0:5.6.37-5.el7.x86_64",
          "7Server-RHSCL-2.4-7.3.Z:rh-mysql56-mysql-debuginfo-0:5.6.37-5.el7.x86_64",
          "7Server-RHSCL-2.4-7.3.Z:rh-mysql56-mysql-devel-0:5.6.37-5.el7.x86_64",
          "7Server-RHSCL-2.4-7.3.Z:rh-mysql56-mysql-errmsg-0:5.6.37-5.el7.x86_64",
          "7Server-RHSCL-2.4-7.3.Z:rh-mysql56-mysql-server-0:5.6.37-5.el7.x86_64",
          "7Server-RHSCL-2.4-7.3.Z:rh-mysql56-mysql-test-0:5.6.37-5.el7.x86_64",
          "7Server-RHSCL-2.4:rh-mysql56-mysql-0:5.6.37-5.el7.src",
          "7Server-RHSCL-2.4:rh-mysql56-mysql-0:5.6.37-5.el7.x86_64",
          "7Server-RHSCL-2.4:rh-mysql56-mysql-bench-0:5.6.37-5.el7.x86_64",
          "7Server-RHSCL-2.4:rh-mysql56-mysql-common-0:5.6.37-5.el7.x86_64",
          "7Server-RHSCL-2.4:rh-mysql56-mysql-config-0:5.6.37-5.el7.x86_64",
          "7Server-RHSCL-2.4:rh-mysql56-mysql-debuginfo-0:5.6.37-5.el7.x86_64",
          "7Server-RHSCL-2.4:rh-mysql56-mysql-devel-0:5.6.37-5.el7.x86_64",
          "7Server-RHSCL-2.4:rh-mysql56-mysql-errmsg-0:5.6.37-5.el7.x86_64",
          "7Server-RHSCL-2.4:rh-mysql56-mysql-server-0:5.6.37-5.el7.x86_64",
          "7Server-RHSCL-2.4:rh-mysql56-mysql-test-0:5.6.37-5.el7.x86_64",
          "7Workstation-RHSCL-2.4:rh-mysql56-mysql-0:5.6.37-5.el7.src",
          "7Workstation-RHSCL-2.4:rh-mysql56-mysql-0:5.6.37-5.el7.x86_64",
          "7Workstation-RHSCL-2.4:rh-mysql56-mysql-bench-0:5.6.37-5.el7.x86_64",
          "7Workstation-RHSCL-2.4:rh-mysql56-mysql-common-0:5.6.37-5.el7.x86_64",
          "7Workstation-RHSCL-2.4:rh-mysql56-mysql-config-0:5.6.37-5.el7.x86_64",
          "7Workstation-RHSCL-2.4:rh-mysql56-mysql-debuginfo-0:5.6.37-5.el7.x86_64",
          "7Workstation-RHSCL-2.4:rh-mysql56-mysql-devel-0:5.6.37-5.el7.x86_64",
          "7Workstation-RHSCL-2.4:rh-mysql56-mysql-errmsg-0:5.6.37-5.el7.x86_64",
          "7Workstation-RHSCL-2.4:rh-mysql56-mysql-server-0:5.6.37-5.el7.x86_64",
          "7Workstation-RHSCL-2.4:rh-mysql56-mysql-test-0:5.6.37-5.el7.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2017-3461"
        },
        {
          "category": "external",
          "summary": "RHBZ#1443376",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1443376"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2017-3461",
          "url": "https://www.cve.org/CVERecord?id=CVE-2017-3461"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2017-3461",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2017-3461"
        },
        {
          "category": "external",
          "summary": "http://www.oracle.com/technetwork/security-advisory/cpuapr2017-3236618.html#AppendixMSQL",
          "url": "http://www.oracle.com/technetwork/security-advisory/cpuapr2017-3236618.html#AppendixMSQL"
        }
      ],
      "release_date": "2017-04-19T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2017-09-21T07:42:12+00:00",
          "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAfter installing this update, the MySQL server daemon (mysqld) will be restarted automatically.",
          "product_ids": [
            "6Server-RHSCL-2.4-6.7.Z:rh-mysql56-mysql-0:5.6.37-5.el6.src",
            "6Server-RHSCL-2.4-6.7.Z:rh-mysql56-mysql-0:5.6.37-5.el6.x86_64",
            "6Server-RHSCL-2.4-6.7.Z:rh-mysql56-mysql-bench-0:5.6.37-5.el6.x86_64",
            "6Server-RHSCL-2.4-6.7.Z:rh-mysql56-mysql-common-0:5.6.37-5.el6.x86_64",
            "6Server-RHSCL-2.4-6.7.Z:rh-mysql56-mysql-config-0:5.6.37-5.el6.x86_64",
            "6Server-RHSCL-2.4-6.7.Z:rh-mysql56-mysql-debuginfo-0:5.6.37-5.el6.x86_64",
            "6Server-RHSCL-2.4-6.7.Z:rh-mysql56-mysql-devel-0:5.6.37-5.el6.x86_64",
            "6Server-RHSCL-2.4-6.7.Z:rh-mysql56-mysql-errmsg-0:5.6.37-5.el6.x86_64",
            "6Server-RHSCL-2.4-6.7.Z:rh-mysql56-mysql-server-0:5.6.37-5.el6.x86_64",
            "6Server-RHSCL-2.4-6.7.Z:rh-mysql56-mysql-test-0:5.6.37-5.el6.x86_64",
            "6Server-RHSCL-2.4:rh-mysql56-mysql-0:5.6.37-5.el6.src",
            "6Server-RHSCL-2.4:rh-mysql56-mysql-0:5.6.37-5.el6.x86_64",
            "6Server-RHSCL-2.4:rh-mysql56-mysql-bench-0:5.6.37-5.el6.x86_64",
            "6Server-RHSCL-2.4:rh-mysql56-mysql-common-0:5.6.37-5.el6.x86_64",
            "6Server-RHSCL-2.4:rh-mysql56-mysql-config-0:5.6.37-5.el6.x86_64",
            "6Server-RHSCL-2.4:rh-mysql56-mysql-debuginfo-0:5.6.37-5.el6.x86_64",
            "6Server-RHSCL-2.4:rh-mysql56-mysql-devel-0:5.6.37-5.el6.x86_64",
            "6Server-RHSCL-2.4:rh-mysql56-mysql-errmsg-0:5.6.37-5.el6.x86_64",
            "6Server-RHSCL-2.4:rh-mysql56-mysql-server-0:5.6.37-5.el6.x86_64",
            "6Server-RHSCL-2.4:rh-mysql56-mysql-test-0:5.6.37-5.el6.x86_64",
            "6Workstation-RHSCL-2.4:rh-mysql56-mysql-0:5.6.37-5.el6.src",
            "6Workstation-RHSCL-2.4:rh-mysql56-mysql-0:5.6.37-5.el6.x86_64",
            "6Workstation-RHSCL-2.4:rh-mysql56-mysql-bench-0:5.6.37-5.el6.x86_64",
            "6Workstation-RHSCL-2.4:rh-mysql56-mysql-common-0:5.6.37-5.el6.x86_64",
            "6Workstation-RHSCL-2.4:rh-mysql56-mysql-config-0:5.6.37-5.el6.x86_64",
            "6Workstation-RHSCL-2.4:rh-mysql56-mysql-debuginfo-0:5.6.37-5.el6.x86_64",
            "6Workstation-RHSCL-2.4:rh-mysql56-mysql-devel-0:5.6.37-5.el6.x86_64",
            "6Workstation-RHSCL-2.4:rh-mysql56-mysql-errmsg-0:5.6.37-5.el6.x86_64",
            "6Workstation-RHSCL-2.4:rh-mysql56-mysql-server-0:5.6.37-5.el6.x86_64",
            "6Workstation-RHSCL-2.4:rh-mysql56-mysql-test-0:5.6.37-5.el6.x86_64",
            "7Server-RHSCL-2.4-7.3.Z:rh-mysql56-mysql-0:5.6.37-5.el7.src",
            "7Server-RHSCL-2.4-7.3.Z:rh-mysql56-mysql-0:5.6.37-5.el7.x86_64",
            "7Server-RHSCL-2.4-7.3.Z:rh-mysql56-mysql-bench-0:5.6.37-5.el7.x86_64",
            "7Server-RHSCL-2.4-7.3.Z:rh-mysql56-mysql-common-0:5.6.37-5.el7.x86_64",
            "7Server-RHSCL-2.4-7.3.Z:rh-mysql56-mysql-config-0:5.6.37-5.el7.x86_64",
            "7Server-RHSCL-2.4-7.3.Z:rh-mysql56-mysql-debuginfo-0:5.6.37-5.el7.x86_64",
            "7Server-RHSCL-2.4-7.3.Z:rh-mysql56-mysql-devel-0:5.6.37-5.el7.x86_64",
            "7Server-RHSCL-2.4-7.3.Z:rh-mysql56-mysql-errmsg-0:5.6.37-5.el7.x86_64",
            "7Server-RHSCL-2.4-7.3.Z:rh-mysql56-mysql-server-0:5.6.37-5.el7.x86_64",
            "7Server-RHSCL-2.4-7.3.Z:rh-mysql56-mysql-test-0:5.6.37-5.el7.x86_64",
            "7Server-RHSCL-2.4:rh-mysql56-mysql-0:5.6.37-5.el7.src",
            "7Server-RHSCL-2.4:rh-mysql56-mysql-0:5.6.37-5.el7.x86_64",
            "7Server-RHSCL-2.4:rh-mysql56-mysql-bench-0:5.6.37-5.el7.x86_64",
            "7Server-RHSCL-2.4:rh-mysql56-mysql-common-0:5.6.37-5.el7.x86_64",
            "7Server-RHSCL-2.4:rh-mysql56-mysql-config-0:5.6.37-5.el7.x86_64",
            "7Server-RHSCL-2.4:rh-mysql56-mysql-debuginfo-0:5.6.37-5.el7.x86_64",
            "7Server-RHSCL-2.4:rh-mysql56-mysql-devel-0:5.6.37-5.el7.x86_64",
            "7Server-RHSCL-2.4:rh-mysql56-mysql-errmsg-0:5.6.37-5.el7.x86_64",
            "7Server-RHSCL-2.4:rh-mysql56-mysql-server-0:5.6.37-5.el7.x86_64",
            "7Server-RHSCL-2.4:rh-mysql56-mysql-test-0:5.6.37-5.el7.x86_64",
            "7Workstation-RHSCL-2.4:rh-mysql56-mysql-0:5.6.37-5.el7.src",
            "7Workstation-RHSCL-2.4:rh-mysql56-mysql-0:5.6.37-5.el7.x86_64",
            "7Workstation-RHSCL-2.4:rh-mysql56-mysql-bench-0:5.6.37-5.el7.x86_64",
            "7Workstation-RHSCL-2.4:rh-mysql56-mysql-common-0:5.6.37-5.el7.x86_64",
            "7Workstation-RHSCL-2.4:rh-mysql56-mysql-config-0:5.6.37-5.el7.x86_64",
            "7Workstation-RHSCL-2.4:rh-mysql56-mysql-debuginfo-0:5.6.37-5.el7.x86_64",
            "7Workstation-RHSCL-2.4:rh-mysql56-mysql-devel-0:5.6.37-5.el7.x86_64",
            "7Workstation-RHSCL-2.4:rh-mysql56-mysql-errmsg-0:5.6.37-5.el7.x86_64",
            "7Workstation-RHSCL-2.4:rh-mysql56-mysql-server-0:5.6.37-5.el7.x86_64",
            "7Workstation-RHSCL-2.4:rh-mysql56-mysql-test-0:5.6.37-5.el7.x86_64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2017:2787"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 4.9,
            "baseSeverity": "MEDIUM",
            "confidentialityImpact": "NONE",
            "integrityImpact": "NONE",
            "privilegesRequired": "HIGH",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.0"
          },
          "products": [
            "6Server-RHSCL-2.4-6.7.Z:rh-mysql56-mysql-0:5.6.37-5.el6.src",
            "6Server-RHSCL-2.4-6.7.Z:rh-mysql56-mysql-0:5.6.37-5.el6.x86_64",
            "6Server-RHSCL-2.4-6.7.Z:rh-mysql56-mysql-bench-0:5.6.37-5.el6.x86_64",
            "6Server-RHSCL-2.4-6.7.Z:rh-mysql56-mysql-common-0:5.6.37-5.el6.x86_64",
            "6Server-RHSCL-2.4-6.7.Z:rh-mysql56-mysql-config-0:5.6.37-5.el6.x86_64",
            "6Server-RHSCL-2.4-6.7.Z:rh-mysql56-mysql-debuginfo-0:5.6.37-5.el6.x86_64",
            "6Server-RHSCL-2.4-6.7.Z:rh-mysql56-mysql-devel-0:5.6.37-5.el6.x86_64",
            "6Server-RHSCL-2.4-6.7.Z:rh-mysql56-mysql-errmsg-0:5.6.37-5.el6.x86_64",
            "6Server-RHSCL-2.4-6.7.Z:rh-mysql56-mysql-server-0:5.6.37-5.el6.x86_64",
            "6Server-RHSCL-2.4-6.7.Z:rh-mysql56-mysql-test-0:5.6.37-5.el6.x86_64",
            "6Server-RHSCL-2.4:rh-mysql56-mysql-0:5.6.37-5.el6.src",
            "6Server-RHSCL-2.4:rh-mysql56-mysql-0:5.6.37-5.el6.x86_64",
            "6Server-RHSCL-2.4:rh-mysql56-mysql-bench-0:5.6.37-5.el6.x86_64",
            "6Server-RHSCL-2.4:rh-mysql56-mysql-common-0:5.6.37-5.el6.x86_64",
            "6Server-RHSCL-2.4:rh-mysql56-mysql-config-0:5.6.37-5.el6.x86_64",
            "6Server-RHSCL-2.4:rh-mysql56-mysql-debuginfo-0:5.6.37-5.el6.x86_64",
            "6Server-RHSCL-2.4:rh-mysql56-mysql-devel-0:5.6.37-5.el6.x86_64",
            "6Server-RHSCL-2.4:rh-mysql56-mysql-errmsg-0:5.6.37-5.el6.x86_64",
            "6Server-RHSCL-2.4:rh-mysql56-mysql-server-0:5.6.37-5.el6.x86_64",
            "6Server-RHSCL-2.4:rh-mysql56-mysql-test-0:5.6.37-5.el6.x86_64",
            "6Workstation-RHSCL-2.4:rh-mysql56-mysql-0:5.6.37-5.el6.src",
            "6Workstation-RHSCL-2.4:rh-mysql56-mysql-0:5.6.37-5.el6.x86_64",
            "6Workstation-RHSCL-2.4:rh-mysql56-mysql-bench-0:5.6.37-5.el6.x86_64",
            "6Workstation-RHSCL-2.4:rh-mysql56-mysql-common-0:5.6.37-5.el6.x86_64",
            "6Workstation-RHSCL-2.4:rh-mysql56-mysql-config-0:5.6.37-5.el6.x86_64",
            "6Workstation-RHSCL-2.4:rh-mysql56-mysql-debuginfo-0:5.6.37-5.el6.x86_64",
            "6Workstation-RHSCL-2.4:rh-mysql56-mysql-devel-0:5.6.37-5.el6.x86_64",
            "6Workstation-RHSCL-2.4:rh-mysql56-mysql-errmsg-0:5.6.37-5.el6.x86_64",
            "6Workstation-RHSCL-2.4:rh-mysql56-mysql-server-0:5.6.37-5.el6.x86_64",
            "6Workstation-RHSCL-2.4:rh-mysql56-mysql-test-0:5.6.37-5.el6.x86_64",
            "7Server-RHSCL-2.4-7.3.Z:rh-mysql56-mysql-0:5.6.37-5.el7.src",
            "7Server-RHSCL-2.4-7.3.Z:rh-mysql56-mysql-0:5.6.37-5.el7.x86_64",
            "7Server-RHSCL-2.4-7.3.Z:rh-mysql56-mysql-bench-0:5.6.37-5.el7.x86_64",
            "7Server-RHSCL-2.4-7.3.Z:rh-mysql56-mysql-common-0:5.6.37-5.el7.x86_64",
            "7Server-RHSCL-2.4-7.3.Z:rh-mysql56-mysql-config-0:5.6.37-5.el7.x86_64",
            "7Server-RHSCL-2.4-7.3.Z:rh-mysql56-mysql-debuginfo-0:5.6.37-5.el7.x86_64",
            "7Server-RHSCL-2.4-7.3.Z:rh-mysql56-mysql-devel-0:5.6.37-5.el7.x86_64",
            "7Server-RHSCL-2.4-7.3.Z:rh-mysql56-mysql-errmsg-0:5.6.37-5.el7.x86_64",
            "7Server-RHSCL-2.4-7.3.Z:rh-mysql56-mysql-server-0:5.6.37-5.el7.x86_64",
            "7Server-RHSCL-2.4-7.3.Z:rh-mysql56-mysql-test-0:5.6.37-5.el7.x86_64",
            "7Server-RHSCL-2.4:rh-mysql56-mysql-0:5.6.37-5.el7.src",
            "7Server-RHSCL-2.4:rh-mysql56-mysql-0:5.6.37-5.el7.x86_64",
            "7Server-RHSCL-2.4:rh-mysql56-mysql-bench-0:5.6.37-5.el7.x86_64",
            "7Server-RHSCL-2.4:rh-mysql56-mysql-common-0:5.6.37-5.el7.x86_64",
            "7Server-RHSCL-2.4:rh-mysql56-mysql-config-0:5.6.37-5.el7.x86_64",
            "7Server-RHSCL-2.4:rh-mysql56-mysql-debuginfo-0:5.6.37-5.el7.x86_64",
            "7Server-RHSCL-2.4:rh-mysql56-mysql-devel-0:5.6.37-5.el7.x86_64",
            "7Server-RHSCL-2.4:rh-mysql56-mysql-errmsg-0:5.6.37-5.el7.x86_64",
            "7Server-RHSCL-2.4:rh-mysql56-mysql-server-0:5.6.37-5.el7.x86_64",
            "7Server-RHSCL-2.4:rh-mysql56-mysql-test-0:5.6.37-5.el7.x86_64",
            "7Workstation-RHSCL-2.4:rh-mysql56-mysql-0:5.6.37-5.el7.src",
            "7Workstation-RHSCL-2.4:rh-mysql56-mysql-0:5.6.37-5.el7.x86_64",
            "7Workstation-RHSCL-2.4:rh-mysql56-mysql-bench-0:5.6.37-5.el7.x86_64",
            "7Workstation-RHSCL-2.4:rh-mysql56-mysql-common-0:5.6.37-5.el7.x86_64",
            "7Workstation-RHSCL-2.4:rh-mysql56-mysql-config-0:5.6.37-5.el7.x86_64",
            "7Workstation-RHSCL-2.4:rh-mysql56-mysql-debuginfo-0:5.6.37-5.el7.x86_64",
            "7Workstation-RHSCL-2.4:rh-mysql56-mysql-devel-0:5.6.37-5.el7.x86_64",
            "7Workstation-RHSCL-2.4:rh-mysql56-mysql-errmsg-0:5.6.37-5.el7.x86_64",
            "7Workstation-RHSCL-2.4:rh-mysql56-mysql-server-0:5.6.37-5.el7.x86_64",
            "7Workstation-RHSCL-2.4:rh-mysql56-mysql-test-0:5.6.37-5.el7.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Moderate"
        }
      ],
      "title": "mysql: Server: Security: Privileges unspecified vulnerability (CPU Apr 2017)"
    },
    {
      "cve": "CVE-2017-3462",
      "discovery_date": "2017-04-19T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "1443377"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Security: Privileges). Supported versions that are affected are 5.5.54 and earlier, 5.6.35 and earlier and 5.7.17 and earlier. Easily \"exploitable\" vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.0 Base Score 4.9 (Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H).",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "mysql: Server: Security: Privileges unspecified vulnerability (CPU Apr 2017)",
          "title": "Vulnerability summary"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "6Server-RHSCL-2.4-6.7.Z:rh-mysql56-mysql-0:5.6.37-5.el6.src",
          "6Server-RHSCL-2.4-6.7.Z:rh-mysql56-mysql-0:5.6.37-5.el6.x86_64",
          "6Server-RHSCL-2.4-6.7.Z:rh-mysql56-mysql-bench-0:5.6.37-5.el6.x86_64",
          "6Server-RHSCL-2.4-6.7.Z:rh-mysql56-mysql-common-0:5.6.37-5.el6.x86_64",
          "6Server-RHSCL-2.4-6.7.Z:rh-mysql56-mysql-config-0:5.6.37-5.el6.x86_64",
          "6Server-RHSCL-2.4-6.7.Z:rh-mysql56-mysql-debuginfo-0:5.6.37-5.el6.x86_64",
          "6Server-RHSCL-2.4-6.7.Z:rh-mysql56-mysql-devel-0:5.6.37-5.el6.x86_64",
          "6Server-RHSCL-2.4-6.7.Z:rh-mysql56-mysql-errmsg-0:5.6.37-5.el6.x86_64",
          "6Server-RHSCL-2.4-6.7.Z:rh-mysql56-mysql-server-0:5.6.37-5.el6.x86_64",
          "6Server-RHSCL-2.4-6.7.Z:rh-mysql56-mysql-test-0:5.6.37-5.el6.x86_64",
          "6Server-RHSCL-2.4:rh-mysql56-mysql-0:5.6.37-5.el6.src",
          "6Server-RHSCL-2.4:rh-mysql56-mysql-0:5.6.37-5.el6.x86_64",
          "6Server-RHSCL-2.4:rh-mysql56-mysql-bench-0:5.6.37-5.el6.x86_64",
          "6Server-RHSCL-2.4:rh-mysql56-mysql-common-0:5.6.37-5.el6.x86_64",
          "6Server-RHSCL-2.4:rh-mysql56-mysql-config-0:5.6.37-5.el6.x86_64",
          "6Server-RHSCL-2.4:rh-mysql56-mysql-debuginfo-0:5.6.37-5.el6.x86_64",
          "6Server-RHSCL-2.4:rh-mysql56-mysql-devel-0:5.6.37-5.el6.x86_64",
          "6Server-RHSCL-2.4:rh-mysql56-mysql-errmsg-0:5.6.37-5.el6.x86_64",
          "6Server-RHSCL-2.4:rh-mysql56-mysql-server-0:5.6.37-5.el6.x86_64",
          "6Server-RHSCL-2.4:rh-mysql56-mysql-test-0:5.6.37-5.el6.x86_64",
          "6Workstation-RHSCL-2.4:rh-mysql56-mysql-0:5.6.37-5.el6.src",
          "6Workstation-RHSCL-2.4:rh-mysql56-mysql-0:5.6.37-5.el6.x86_64",
          "6Workstation-RHSCL-2.4:rh-mysql56-mysql-bench-0:5.6.37-5.el6.x86_64",
          "6Workstation-RHSCL-2.4:rh-mysql56-mysql-common-0:5.6.37-5.el6.x86_64",
          "6Workstation-RHSCL-2.4:rh-mysql56-mysql-config-0:5.6.37-5.el6.x86_64",
          "6Workstation-RHSCL-2.4:rh-mysql56-mysql-debuginfo-0:5.6.37-5.el6.x86_64",
          "6Workstation-RHSCL-2.4:rh-mysql56-mysql-devel-0:5.6.37-5.el6.x86_64",
          "6Workstation-RHSCL-2.4:rh-mysql56-mysql-errmsg-0:5.6.37-5.el6.x86_64",
          "6Workstation-RHSCL-2.4:rh-mysql56-mysql-server-0:5.6.37-5.el6.x86_64",
          "6Workstation-RHSCL-2.4:rh-mysql56-mysql-test-0:5.6.37-5.el6.x86_64",
          "7Server-RHSCL-2.4-7.3.Z:rh-mysql56-mysql-0:5.6.37-5.el7.src",
          "7Server-RHSCL-2.4-7.3.Z:rh-mysql56-mysql-0:5.6.37-5.el7.x86_64",
          "7Server-RHSCL-2.4-7.3.Z:rh-mysql56-mysql-bench-0:5.6.37-5.el7.x86_64",
          "7Server-RHSCL-2.4-7.3.Z:rh-mysql56-mysql-common-0:5.6.37-5.el7.x86_64",
          "7Server-RHSCL-2.4-7.3.Z:rh-mysql56-mysql-config-0:5.6.37-5.el7.x86_64",
          "7Server-RHSCL-2.4-7.3.Z:rh-mysql56-mysql-debuginfo-0:5.6.37-5.el7.x86_64",
          "7Server-RHSCL-2.4-7.3.Z:rh-mysql56-mysql-devel-0:5.6.37-5.el7.x86_64",
          "7Server-RHSCL-2.4-7.3.Z:rh-mysql56-mysql-errmsg-0:5.6.37-5.el7.x86_64",
          "7Server-RHSCL-2.4-7.3.Z:rh-mysql56-mysql-server-0:5.6.37-5.el7.x86_64",
          "7Server-RHSCL-2.4-7.3.Z:rh-mysql56-mysql-test-0:5.6.37-5.el7.x86_64",
          "7Server-RHSCL-2.4:rh-mysql56-mysql-0:5.6.37-5.el7.src",
          "7Server-RHSCL-2.4:rh-mysql56-mysql-0:5.6.37-5.el7.x86_64",
          "7Server-RHSCL-2.4:rh-mysql56-mysql-bench-0:5.6.37-5.el7.x86_64",
          "7Server-RHSCL-2.4:rh-mysql56-mysql-common-0:5.6.37-5.el7.x86_64",
          "7Server-RHSCL-2.4:rh-mysql56-mysql-config-0:5.6.37-5.el7.x86_64",
          "7Server-RHSCL-2.4:rh-mysql56-mysql-debuginfo-0:5.6.37-5.el7.x86_64",
          "7Server-RHSCL-2.4:rh-mysql56-mysql-devel-0:5.6.37-5.el7.x86_64",
          "7Server-RHSCL-2.4:rh-mysql56-mysql-errmsg-0:5.6.37-5.el7.x86_64",
          "7Server-RHSCL-2.4:rh-mysql56-mysql-server-0:5.6.37-5.el7.x86_64",
          "7Server-RHSCL-2.4:rh-mysql56-mysql-test-0:5.6.37-5.el7.x86_64",
          "7Workstation-RHSCL-2.4:rh-mysql56-mysql-0:5.6.37-5.el7.src",
          "7Workstation-RHSCL-2.4:rh-mysql56-mysql-0:5.6.37-5.el7.x86_64",
          "7Workstation-RHSCL-2.4:rh-mysql56-mysql-bench-0:5.6.37-5.el7.x86_64",
          "7Workstation-RHSCL-2.4:rh-mysql56-mysql-common-0:5.6.37-5.el7.x86_64",
          "7Workstation-RHSCL-2.4:rh-mysql56-mysql-config-0:5.6.37-5.el7.x86_64",
          "7Workstation-RHSCL-2.4:rh-mysql56-mysql-debuginfo-0:5.6.37-5.el7.x86_64",
          "7Workstation-RHSCL-2.4:rh-mysql56-mysql-devel-0:5.6.37-5.el7.x86_64",
          "7Workstation-RHSCL-2.4:rh-mysql56-mysql-errmsg-0:5.6.37-5.el7.x86_64",
          "7Workstation-RHSCL-2.4:rh-mysql56-mysql-server-0:5.6.37-5.el7.x86_64",
          "7Workstation-RHSCL-2.4:rh-mysql56-mysql-test-0:5.6.37-5.el7.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2017-3462"
        },
        {
          "category": "external",
          "summary": "RHBZ#1443377",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1443377"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2017-3462",
          "url": "https://www.cve.org/CVERecord?id=CVE-2017-3462"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2017-3462",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2017-3462"
        },
        {
          "category": "external",
          "summary": "http://www.oracle.com/technetwork/security-advisory/cpuapr2017-3236618.html#AppendixMSQL",
          "url": "http://www.oracle.com/technetwork/security-advisory/cpuapr2017-3236618.html#AppendixMSQL"
        }
      ],
      "release_date": "2017-04-19T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2017-09-21T07:42:12+00:00",
          "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAfter installing this update, the MySQL server daemon (mysqld) will be restarted automatically.",
          "product_ids": [
            "6Server-RHSCL-2.4-6.7.Z:rh-mysql56-mysql-0:5.6.37-5.el6.src",
            "6Server-RHSCL-2.4-6.7.Z:rh-mysql56-mysql-0:5.6.37-5.el6.x86_64",
            "6Server-RHSCL-2.4-6.7.Z:rh-mysql56-mysql-bench-0:5.6.37-5.el6.x86_64",
            "6Server-RHSCL-2.4-6.7.Z:rh-mysql56-mysql-common-0:5.6.37-5.el6.x86_64",
            "6Server-RHSCL-2.4-6.7.Z:rh-mysql56-mysql-config-0:5.6.37-5.el6.x86_64",
            "6Server-RHSCL-2.4-6.7.Z:rh-mysql56-mysql-debuginfo-0:5.6.37-5.el6.x86_64",
            "6Server-RHSCL-2.4-6.7.Z:rh-mysql56-mysql-devel-0:5.6.37-5.el6.x86_64",
            "6Server-RHSCL-2.4-6.7.Z:rh-mysql56-mysql-errmsg-0:5.6.37-5.el6.x86_64",
            "6Server-RHSCL-2.4-6.7.Z:rh-mysql56-mysql-server-0:5.6.37-5.el6.x86_64",
            "6Server-RHSCL-2.4-6.7.Z:rh-mysql56-mysql-test-0:5.6.37-5.el6.x86_64",
            "6Server-RHSCL-2.4:rh-mysql56-mysql-0:5.6.37-5.el6.src",
            "6Server-RHSCL-2.4:rh-mysql56-mysql-0:5.6.37-5.el6.x86_64",
            "6Server-RHSCL-2.4:rh-mysql56-mysql-bench-0:5.6.37-5.el6.x86_64",
            "6Server-RHSCL-2.4:rh-mysql56-mysql-common-0:5.6.37-5.el6.x86_64",
            "6Server-RHSCL-2.4:rh-mysql56-mysql-config-0:5.6.37-5.el6.x86_64",
            "6Server-RHSCL-2.4:rh-mysql56-mysql-debuginfo-0:5.6.37-5.el6.x86_64",
            "6Server-RHSCL-2.4:rh-mysql56-mysql-devel-0:5.6.37-5.el6.x86_64",
            "6Server-RHSCL-2.4:rh-mysql56-mysql-errmsg-0:5.6.37-5.el6.x86_64",
            "6Server-RHSCL-2.4:rh-mysql56-mysql-server-0:5.6.37-5.el6.x86_64",
            "6Server-RHSCL-2.4:rh-mysql56-mysql-test-0:5.6.37-5.el6.x86_64",
            "6Workstation-RHSCL-2.4:rh-mysql56-mysql-0:5.6.37-5.el6.src",
            "6Workstation-RHSCL-2.4:rh-mysql56-mysql-0:5.6.37-5.el6.x86_64",
            "6Workstation-RHSCL-2.4:rh-mysql56-mysql-bench-0:5.6.37-5.el6.x86_64",
            "6Workstation-RHSCL-2.4:rh-mysql56-mysql-common-0:5.6.37-5.el6.x86_64",
            "6Workstation-RHSCL-2.4:rh-mysql56-mysql-config-0:5.6.37-5.el6.x86_64",
            "6Workstation-RHSCL-2.4:rh-mysql56-mysql-debuginfo-0:5.6.37-5.el6.x86_64",
            "6Workstation-RHSCL-2.4:rh-mysql56-mysql-devel-0:5.6.37-5.el6.x86_64",
            "6Workstation-RHSCL-2.4:rh-mysql56-mysql-errmsg-0:5.6.37-5.el6.x86_64",
            "6Workstation-RHSCL-2.4:rh-mysql56-mysql-server-0:5.6.37-5.el6.x86_64",
            "6Workstation-RHSCL-2.4:rh-mysql56-mysql-test-0:5.6.37-5.el6.x86_64",
            "7Server-RHSCL-2.4-7.3.Z:rh-mysql56-mysql-0:5.6.37-5.el7.src",
            "7Server-RHSCL-2.4-7.3.Z:rh-mysql56-mysql-0:5.6.37-5.el7.x86_64",
            "7Server-RHSCL-2.4-7.3.Z:rh-mysql56-mysql-bench-0:5.6.37-5.el7.x86_64",
            "7Server-RHSCL-2.4-7.3.Z:rh-mysql56-mysql-common-0:5.6.37-5.el7.x86_64",
            "7Server-RHSCL-2.4-7.3.Z:rh-mysql56-mysql-config-0:5.6.37-5.el7.x86_64",
            "7Server-RHSCL-2.4-7.3.Z:rh-mysql56-mysql-debuginfo-0:5.6.37-5.el7.x86_64",
            "7Server-RHSCL-2.4-7.3.Z:rh-mysql56-mysql-devel-0:5.6.37-5.el7.x86_64",
            "7Server-RHSCL-2.4-7.3.Z:rh-mysql56-mysql-errmsg-0:5.6.37-5.el7.x86_64",
            "7Server-RHSCL-2.4-7.3.Z:rh-mysql56-mysql-server-0:5.6.37-5.el7.x86_64",
            "7Server-RHSCL-2.4-7.3.Z:rh-mysql56-mysql-test-0:5.6.37-5.el7.x86_64",
            "7Server-RHSCL-2.4:rh-mysql56-mysql-0:5.6.37-5.el7.src",
            "7Server-RHSCL-2.4:rh-mysql56-mysql-0:5.6.37-5.el7.x86_64",
            "7Server-RHSCL-2.4:rh-mysql56-mysql-bench-0:5.6.37-5.el7.x86_64",
            "7Server-RHSCL-2.4:rh-mysql56-mysql-common-0:5.6.37-5.el7.x86_64",
            "7Server-RHSCL-2.4:rh-mysql56-mysql-config-0:5.6.37-5.el7.x86_64",
            "7Server-RHSCL-2.4:rh-mysql56-mysql-debuginfo-0:5.6.37-5.el7.x86_64",
            "7Server-RHSCL-2.4:rh-mysql56-mysql-devel-0:5.6.37-5.el7.x86_64",
            "7Server-RHSCL-2.4:rh-mysql56-mysql-errmsg-0:5.6.37-5.el7.x86_64",
            "7Server-RHSCL-2.4:rh-mysql56-mysql-server-0:5.6.37-5.el7.x86_64",
            "7Server-RHSCL-2.4:rh-mysql56-mysql-test-0:5.6.37-5.el7.x86_64",
            "7Workstation-RHSCL-2.4:rh-mysql56-mysql-0:5.6.37-5.el7.src",
            "7Workstation-RHSCL-2.4:rh-mysql56-mysql-0:5.6.37-5.el7.x86_64",
            "7Workstation-RHSCL-2.4:rh-mysql56-mysql-bench-0:5.6.37-5.el7.x86_64",
            "7Workstation-RHSCL-2.4:rh-mysql56-mysql-common-0:5.6.37-5.el7.x86_64",
            "7Workstation-RHSCL-2.4:rh-mysql56-mysql-config-0:5.6.37-5.el7.x86_64",
            "7Workstation-RHSCL-2.4:rh-mysql56-mysql-debuginfo-0:5.6.37-5.el7.x86_64",
            "7Workstation-RHSCL-2.4:rh-mysql56-mysql-devel-0:5.6.37-5.el7.x86_64",
            "7Workstation-RHSCL-2.4:rh-mysql56-mysql-errmsg-0:5.6.37-5.el7.x86_64",
            "7Workstation-RHSCL-2.4:rh-mysql56-mysql-server-0:5.6.37-5.el7.x86_64",
            "7Workstation-RHSCL-2.4:rh-mysql56-mysql-test-0:5.6.37-5.el7.x86_64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2017:2787"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 4.9,
            "baseSeverity": "MEDIUM",
            "confidentialityImpact": "NONE",
            "integrityImpact": "NONE",
            "privilegesRequired": "HIGH",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.0"
          },
          "products": [
            "6Server-RHSCL-2.4-6.7.Z:rh-mysql56-mysql-0:5.6.37-5.el6.src",
            "6Server-RHSCL-2.4-6.7.Z:rh-mysql56-mysql-0:5.6.37-5.el6.x86_64",
            "6Server-RHSCL-2.4-6.7.Z:rh-mysql56-mysql-bench-0:5.6.37-5.el6.x86_64",
            "6Server-RHSCL-2.4-6.7.Z:rh-mysql56-mysql-common-0:5.6.37-5.el6.x86_64",
            "6Server-RHSCL-2.4-6.7.Z:rh-mysql56-mysql-config-0:5.6.37-5.el6.x86_64",
            "6Server-RHSCL-2.4-6.7.Z:rh-mysql56-mysql-debuginfo-0:5.6.37-5.el6.x86_64",
            "6Server-RHSCL-2.4-6.7.Z:rh-mysql56-mysql-devel-0:5.6.37-5.el6.x86_64",
            "6Server-RHSCL-2.4-6.7.Z:rh-mysql56-mysql-errmsg-0:5.6.37-5.el6.x86_64",
            "6Server-RHSCL-2.4-6.7.Z:rh-mysql56-mysql-server-0:5.6.37-5.el6.x86_64",
            "6Server-RHSCL-2.4-6.7.Z:rh-mysql56-mysql-test-0:5.6.37-5.el6.x86_64",
            "6Server-RHSCL-2.4:rh-mysql56-mysql-0:5.6.37-5.el6.src",
            "6Server-RHSCL-2.4:rh-mysql56-mysql-0:5.6.37-5.el6.x86_64",
            "6Server-RHSCL-2.4:rh-mysql56-mysql-bench-0:5.6.37-5.el6.x86_64",
            "6Server-RHSCL-2.4:rh-mysql56-mysql-common-0:5.6.37-5.el6.x86_64",
            "6Server-RHSCL-2.4:rh-mysql56-mysql-config-0:5.6.37-5.el6.x86_64",
            "6Server-RHSCL-2.4:rh-mysql56-mysql-debuginfo-0:5.6.37-5.el6.x86_64",
            "6Server-RHSCL-2.4:rh-mysql56-mysql-devel-0:5.6.37-5.el6.x86_64",
            "6Server-RHSCL-2.4:rh-mysql56-mysql-errmsg-0:5.6.37-5.el6.x86_64",
            "6Server-RHSCL-2.4:rh-mysql56-mysql-server-0:5.6.37-5.el6.x86_64",
            "6Server-RHSCL-2.4:rh-mysql56-mysql-test-0:5.6.37-5.el6.x86_64",
            "6Workstation-RHSCL-2.4:rh-mysql56-mysql-0:5.6.37-5.el6.src",
            "6Workstation-RHSCL-2.4:rh-mysql56-mysql-0:5.6.37-5.el6.x86_64",
            "6Workstation-RHSCL-2.4:rh-mysql56-mysql-bench-0:5.6.37-5.el6.x86_64",
            "6Workstation-RHSCL-2.4:rh-mysql56-mysql-common-0:5.6.37-5.el6.x86_64",
            "6Workstation-RHSCL-2.4:rh-mysql56-mysql-config-0:5.6.37-5.el6.x86_64",
            "6Workstation-RHSCL-2.4:rh-mysql56-mysql-debuginfo-0:5.6.37-5.el6.x86_64",
            "6Workstation-RHSCL-2.4:rh-mysql56-mysql-devel-0:5.6.37-5.el6.x86_64",
            "6Workstation-RHSCL-2.4:rh-mysql56-mysql-errmsg-0:5.6.37-5.el6.x86_64",
            "6Workstation-RHSCL-2.4:rh-mysql56-mysql-server-0:5.6.37-5.el6.x86_64",
            "6Workstation-RHSCL-2.4:rh-mysql56-mysql-test-0:5.6.37-5.el6.x86_64",
            "7Server-RHSCL-2.4-7.3.Z:rh-mysql56-mysql-0:5.6.37-5.el7.src",
            "7Server-RHSCL-2.4-7.3.Z:rh-mysql56-mysql-0:5.6.37-5.el7.x86_64",
            "7Server-RHSCL-2.4-7.3.Z:rh-mysql56-mysql-bench-0:5.6.37-5.el7.x86_64",
            "7Server-RHSCL-2.4-7.3.Z:rh-mysql56-mysql-common-0:5.6.37-5.el7.x86_64",
            "7Server-RHSCL-2.4-7.3.Z:rh-mysql56-mysql-config-0:5.6.37-5.el7.x86_64",
            "7Server-RHSCL-2.4-7.3.Z:rh-mysql56-mysql-debuginfo-0:5.6.37-5.el7.x86_64",
            "7Server-RHSCL-2.4-7.3.Z:rh-mysql56-mysql-devel-0:5.6.37-5.el7.x86_64",
            "7Server-RHSCL-2.4-7.3.Z:rh-mysql56-mysql-errmsg-0:5.6.37-5.el7.x86_64",
            "7Server-RHSCL-2.4-7.3.Z:rh-mysql56-mysql-server-0:5.6.37-5.el7.x86_64",
            "7Server-RHSCL-2.4-7.3.Z:rh-mysql56-mysql-test-0:5.6.37-5.el7.x86_64",
            "7Server-RHSCL-2.4:rh-mysql56-mysql-0:5.6.37-5.el7.src",
            "7Server-RHSCL-2.4:rh-mysql56-mysql-0:5.6.37-5.el7.x86_64",
            "7Server-RHSCL-2.4:rh-mysql56-mysql-bench-0:5.6.37-5.el7.x86_64",
            "7Server-RHSCL-2.4:rh-mysql56-mysql-common-0:5.6.37-5.el7.x86_64",
            "7Server-RHSCL-2.4:rh-mysql56-mysql-config-0:5.6.37-5.el7.x86_64",
            "7Server-RHSCL-2.4:rh-mysql56-mysql-debuginfo-0:5.6.37-5.el7.x86_64",
            "7Server-RHSCL-2.4:rh-mysql56-mysql-devel-0:5.6.37-5.el7.x86_64",
            "7Server-RHSCL-2.4:rh-mysql56-mysql-errmsg-0:5.6.37-5.el7.x86_64",
            "7Server-RHSCL-2.4:rh-mysql56-mysql-server-0:5.6.37-5.el7.x86_64",
            "7Server-RHSCL-2.4:rh-mysql56-mysql-test-0:5.6.37-5.el7.x86_64",
            "7Workstation-RHSCL-2.4:rh-mysql56-mysql-0:5.6.37-5.el7.src",
            "7Workstation-RHSCL-2.4:rh-mysql56-mysql-0:5.6.37-5.el7.x86_64",
            "7Workstation-RHSCL-2.4:rh-mysql56-mysql-bench-0:5.6.37-5.el7.x86_64",
            "7Workstation-RHSCL-2.4:rh-mysql56-mysql-common-0:5.6.37-5.el7.x86_64",
            "7Workstation-RHSCL-2.4:rh-mysql56-mysql-config-0:5.6.37-5.el7.x86_64",
            "7Workstation-RHSCL-2.4:rh-mysql56-mysql-debuginfo-0:5.6.37-5.el7.x86_64",
            "7Workstation-RHSCL-2.4:rh-mysql56-mysql-devel-0:5.6.37-5.el7.x86_64",
            "7Workstation-RHSCL-2.4:rh-mysql56-mysql-errmsg-0:5.6.37-5.el7.x86_64",
            "7Workstation-RHSCL-2.4:rh-mysql56-mysql-server-0:5.6.37-5.el7.x86_64",
            "7Workstation-RHSCL-2.4:rh-mysql56-mysql-test-0:5.6.37-5.el7.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Moderate"
        }
      ],
      "title": "mysql: Server: Security: Privileges unspecified vulnerability (CPU Apr 2017)"
    },
    {
      "cve": "CVE-2017-3463",
      "discovery_date": "2017-04-19T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "1443378"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Security: Privileges). Supported versions that are affected are 5.5.54 and earlier, 5.6.35 and earlier and 5.7.17 and earlier. Easily \"exploitable\" vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.0 Base Score 4.9 (Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H).",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "mysql: Server: Security: Privileges unspecified vulnerability (CPU Apr 2017)",
          "title": "Vulnerability summary"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "6Server-RHSCL-2.4-6.7.Z:rh-mysql56-mysql-0:5.6.37-5.el6.src",
          "6Server-RHSCL-2.4-6.7.Z:rh-mysql56-mysql-0:5.6.37-5.el6.x86_64",
          "6Server-RHSCL-2.4-6.7.Z:rh-mysql56-mysql-bench-0:5.6.37-5.el6.x86_64",
          "6Server-RHSCL-2.4-6.7.Z:rh-mysql56-mysql-common-0:5.6.37-5.el6.x86_64",
          "6Server-RHSCL-2.4-6.7.Z:rh-mysql56-mysql-config-0:5.6.37-5.el6.x86_64",
          "6Server-RHSCL-2.4-6.7.Z:rh-mysql56-mysql-debuginfo-0:5.6.37-5.el6.x86_64",
          "6Server-RHSCL-2.4-6.7.Z:rh-mysql56-mysql-devel-0:5.6.37-5.el6.x86_64",
          "6Server-RHSCL-2.4-6.7.Z:rh-mysql56-mysql-errmsg-0:5.6.37-5.el6.x86_64",
          "6Server-RHSCL-2.4-6.7.Z:rh-mysql56-mysql-server-0:5.6.37-5.el6.x86_64",
          "6Server-RHSCL-2.4-6.7.Z:rh-mysql56-mysql-test-0:5.6.37-5.el6.x86_64",
          "6Server-RHSCL-2.4:rh-mysql56-mysql-0:5.6.37-5.el6.src",
          "6Server-RHSCL-2.4:rh-mysql56-mysql-0:5.6.37-5.el6.x86_64",
          "6Server-RHSCL-2.4:rh-mysql56-mysql-bench-0:5.6.37-5.el6.x86_64",
          "6Server-RHSCL-2.4:rh-mysql56-mysql-common-0:5.6.37-5.el6.x86_64",
          "6Server-RHSCL-2.4:rh-mysql56-mysql-config-0:5.6.37-5.el6.x86_64",
          "6Server-RHSCL-2.4:rh-mysql56-mysql-debuginfo-0:5.6.37-5.el6.x86_64",
          "6Server-RHSCL-2.4:rh-mysql56-mysql-devel-0:5.6.37-5.el6.x86_64",
          "6Server-RHSCL-2.4:rh-mysql56-mysql-errmsg-0:5.6.37-5.el6.x86_64",
          "6Server-RHSCL-2.4:rh-mysql56-mysql-server-0:5.6.37-5.el6.x86_64",
          "6Server-RHSCL-2.4:rh-mysql56-mysql-test-0:5.6.37-5.el6.x86_64",
          "6Workstation-RHSCL-2.4:rh-mysql56-mysql-0:5.6.37-5.el6.src",
          "6Workstation-RHSCL-2.4:rh-mysql56-mysql-0:5.6.37-5.el6.x86_64",
          "6Workstation-RHSCL-2.4:rh-mysql56-mysql-bench-0:5.6.37-5.el6.x86_64",
          "6Workstation-RHSCL-2.4:rh-mysql56-mysql-common-0:5.6.37-5.el6.x86_64",
          "6Workstation-RHSCL-2.4:rh-mysql56-mysql-config-0:5.6.37-5.el6.x86_64",
          "6Workstation-RHSCL-2.4:rh-mysql56-mysql-debuginfo-0:5.6.37-5.el6.x86_64",
          "6Workstation-RHSCL-2.4:rh-mysql56-mysql-devel-0:5.6.37-5.el6.x86_64",
          "6Workstation-RHSCL-2.4:rh-mysql56-mysql-errmsg-0:5.6.37-5.el6.x86_64",
          "6Workstation-RHSCL-2.4:rh-mysql56-mysql-server-0:5.6.37-5.el6.x86_64",
          "6Workstation-RHSCL-2.4:rh-mysql56-mysql-test-0:5.6.37-5.el6.x86_64",
          "7Server-RHSCL-2.4-7.3.Z:rh-mysql56-mysql-0:5.6.37-5.el7.src",
          "7Server-RHSCL-2.4-7.3.Z:rh-mysql56-mysql-0:5.6.37-5.el7.x86_64",
          "7Server-RHSCL-2.4-7.3.Z:rh-mysql56-mysql-bench-0:5.6.37-5.el7.x86_64",
          "7Server-RHSCL-2.4-7.3.Z:rh-mysql56-mysql-common-0:5.6.37-5.el7.x86_64",
          "7Server-RHSCL-2.4-7.3.Z:rh-mysql56-mysql-config-0:5.6.37-5.el7.x86_64",
          "7Server-RHSCL-2.4-7.3.Z:rh-mysql56-mysql-debuginfo-0:5.6.37-5.el7.x86_64",
          "7Server-RHSCL-2.4-7.3.Z:rh-mysql56-mysql-devel-0:5.6.37-5.el7.x86_64",
          "7Server-RHSCL-2.4-7.3.Z:rh-mysql56-mysql-errmsg-0:5.6.37-5.el7.x86_64",
          "7Server-RHSCL-2.4-7.3.Z:rh-mysql56-mysql-server-0:5.6.37-5.el7.x86_64",
          "7Server-RHSCL-2.4-7.3.Z:rh-mysql56-mysql-test-0:5.6.37-5.el7.x86_64",
          "7Server-RHSCL-2.4:rh-mysql56-mysql-0:5.6.37-5.el7.src",
          "7Server-RHSCL-2.4:rh-mysql56-mysql-0:5.6.37-5.el7.x86_64",
          "7Server-RHSCL-2.4:rh-mysql56-mysql-bench-0:5.6.37-5.el7.x86_64",
          "7Server-RHSCL-2.4:rh-mysql56-mysql-common-0:5.6.37-5.el7.x86_64",
          "7Server-RHSCL-2.4:rh-mysql56-mysql-config-0:5.6.37-5.el7.x86_64",
          "7Server-RHSCL-2.4:rh-mysql56-mysql-debuginfo-0:5.6.37-5.el7.x86_64",
          "7Server-RHSCL-2.4:rh-mysql56-mysql-devel-0:5.6.37-5.el7.x86_64",
          "7Server-RHSCL-2.4:rh-mysql56-mysql-errmsg-0:5.6.37-5.el7.x86_64",
          "7Server-RHSCL-2.4:rh-mysql56-mysql-server-0:5.6.37-5.el7.x86_64",
          "7Server-RHSCL-2.4:rh-mysql56-mysql-test-0:5.6.37-5.el7.x86_64",
          "7Workstation-RHSCL-2.4:rh-mysql56-mysql-0:5.6.37-5.el7.src",
          "7Workstation-RHSCL-2.4:rh-mysql56-mysql-0:5.6.37-5.el7.x86_64",
          "7Workstation-RHSCL-2.4:rh-mysql56-mysql-bench-0:5.6.37-5.el7.x86_64",
          "7Workstation-RHSCL-2.4:rh-mysql56-mysql-common-0:5.6.37-5.el7.x86_64",
          "7Workstation-RHSCL-2.4:rh-mysql56-mysql-config-0:5.6.37-5.el7.x86_64",
          "7Workstation-RHSCL-2.4:rh-mysql56-mysql-debuginfo-0:5.6.37-5.el7.x86_64",
          "7Workstation-RHSCL-2.4:rh-mysql56-mysql-devel-0:5.6.37-5.el7.x86_64",
          "7Workstation-RHSCL-2.4:rh-mysql56-mysql-errmsg-0:5.6.37-5.el7.x86_64",
          "7Workstation-RHSCL-2.4:rh-mysql56-mysql-server-0:5.6.37-5.el7.x86_64",
          "7Workstation-RHSCL-2.4:rh-mysql56-mysql-test-0:5.6.37-5.el7.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2017-3463"
        },
        {
          "category": "external",
          "summary": "RHBZ#1443378",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1443378"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2017-3463",
          "url": "https://www.cve.org/CVERecord?id=CVE-2017-3463"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2017-3463",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2017-3463"
        },
        {
          "category": "external",
          "summary": "http://www.oracle.com/technetwork/security-advisory/cpuapr2017-3236618.html#AppendixMSQL",
          "url": "http://www.oracle.com/technetwork/security-advisory/cpuapr2017-3236618.html#AppendixMSQL"
        }
      ],
      "release_date": "2017-04-19T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2017-09-21T07:42:12+00:00",
          "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAfter installing this update, the MySQL server daemon (mysqld) will be restarted automatically.",
          "product_ids": [
            "6Server-RHSCL-2.4-6.7.Z:rh-mysql56-mysql-0:5.6.37-5.el6.src",
            "6Server-RHSCL-2.4-6.7.Z:rh-mysql56-mysql-0:5.6.37-5.el6.x86_64",
            "6Server-RHSCL-2.4-6.7.Z:rh-mysql56-mysql-bench-0:5.6.37-5.el6.x86_64",
            "6Server-RHSCL-2.4-6.7.Z:rh-mysql56-mysql-common-0:5.6.37-5.el6.x86_64",
            "6Server-RHSCL-2.4-6.7.Z:rh-mysql56-mysql-config-0:5.6.37-5.el6.x86_64",
            "6Server-RHSCL-2.4-6.7.Z:rh-mysql56-mysql-debuginfo-0:5.6.37-5.el6.x86_64",
            "6Server-RHSCL-2.4-6.7.Z:rh-mysql56-mysql-devel-0:5.6.37-5.el6.x86_64",
            "6Server-RHSCL-2.4-6.7.Z:rh-mysql56-mysql-errmsg-0:5.6.37-5.el6.x86_64",
            "6Server-RHSCL-2.4-6.7.Z:rh-mysql56-mysql-server-0:5.6.37-5.el6.x86_64",
            "6Server-RHSCL-2.4-6.7.Z:rh-mysql56-mysql-test-0:5.6.37-5.el6.x86_64",
            "6Server-RHSCL-2.4:rh-mysql56-mysql-0:5.6.37-5.el6.src",
            "6Server-RHSCL-2.4:rh-mysql56-mysql-0:5.6.37-5.el6.x86_64",
            "6Server-RHSCL-2.4:rh-mysql56-mysql-bench-0:5.6.37-5.el6.x86_64",
            "6Server-RHSCL-2.4:rh-mysql56-mysql-common-0:5.6.37-5.el6.x86_64",
            "6Server-RHSCL-2.4:rh-mysql56-mysql-config-0:5.6.37-5.el6.x86_64",
            "6Server-RHSCL-2.4:rh-mysql56-mysql-debuginfo-0:5.6.37-5.el6.x86_64",
            "6Server-RHSCL-2.4:rh-mysql56-mysql-devel-0:5.6.37-5.el6.x86_64",
            "6Server-RHSCL-2.4:rh-mysql56-mysql-errmsg-0:5.6.37-5.el6.x86_64",
            "6Server-RHSCL-2.4:rh-mysql56-mysql-server-0:5.6.37-5.el6.x86_64",
            "6Server-RHSCL-2.4:rh-mysql56-mysql-test-0:5.6.37-5.el6.x86_64",
            "6Workstation-RHSCL-2.4:rh-mysql56-mysql-0:5.6.37-5.el6.src",
            "6Workstation-RHSCL-2.4:rh-mysql56-mysql-0:5.6.37-5.el6.x86_64",
            "6Workstation-RHSCL-2.4:rh-mysql56-mysql-bench-0:5.6.37-5.el6.x86_64",
            "6Workstation-RHSCL-2.4:rh-mysql56-mysql-common-0:5.6.37-5.el6.x86_64",
            "6Workstation-RHSCL-2.4:rh-mysql56-mysql-config-0:5.6.37-5.el6.x86_64",
            "6Workstation-RHSCL-2.4:rh-mysql56-mysql-debuginfo-0:5.6.37-5.el6.x86_64",
            "6Workstation-RHSCL-2.4:rh-mysql56-mysql-devel-0:5.6.37-5.el6.x86_64",
            "6Workstation-RHSCL-2.4:rh-mysql56-mysql-errmsg-0:5.6.37-5.el6.x86_64",
            "6Workstation-RHSCL-2.4:rh-mysql56-mysql-server-0:5.6.37-5.el6.x86_64",
            "6Workstation-RHSCL-2.4:rh-mysql56-mysql-test-0:5.6.37-5.el6.x86_64",
            "7Server-RHSCL-2.4-7.3.Z:rh-mysql56-mysql-0:5.6.37-5.el7.src",
            "7Server-RHSCL-2.4-7.3.Z:rh-mysql56-mysql-0:5.6.37-5.el7.x86_64",
            "7Server-RHSCL-2.4-7.3.Z:rh-mysql56-mysql-bench-0:5.6.37-5.el7.x86_64",
            "7Server-RHSCL-2.4-7.3.Z:rh-mysql56-mysql-common-0:5.6.37-5.el7.x86_64",
            "7Server-RHSCL-2.4-7.3.Z:rh-mysql56-mysql-config-0:5.6.37-5.el7.x86_64",
            "7Server-RHSCL-2.4-7.3.Z:rh-mysql56-mysql-debuginfo-0:5.6.37-5.el7.x86_64",
            "7Server-RHSCL-2.4-7.3.Z:rh-mysql56-mysql-devel-0:5.6.37-5.el7.x86_64",
            "7Server-RHSCL-2.4-7.3.Z:rh-mysql56-mysql-errmsg-0:5.6.37-5.el7.x86_64",
            "7Server-RHSCL-2.4-7.3.Z:rh-mysql56-mysql-server-0:5.6.37-5.el7.x86_64",
            "7Server-RHSCL-2.4-7.3.Z:rh-mysql56-mysql-test-0:5.6.37-5.el7.x86_64",
            "7Server-RHSCL-2.4:rh-mysql56-mysql-0:5.6.37-5.el7.src",
            "7Server-RHSCL-2.4:rh-mysql56-mysql-0:5.6.37-5.el7.x86_64",
            "7Server-RHSCL-2.4:rh-mysql56-mysql-bench-0:5.6.37-5.el7.x86_64",
            "7Server-RHSCL-2.4:rh-mysql56-mysql-common-0:5.6.37-5.el7.x86_64",
            "7Server-RHSCL-2.4:rh-mysql56-mysql-config-0:5.6.37-5.el7.x86_64",
            "7Server-RHSCL-2.4:rh-mysql56-mysql-debuginfo-0:5.6.37-5.el7.x86_64",
            "7Server-RHSCL-2.4:rh-mysql56-mysql-devel-0:5.6.37-5.el7.x86_64",
            "7Server-RHSCL-2.4:rh-mysql56-mysql-errmsg-0:5.6.37-5.el7.x86_64",
            "7Server-RHSCL-2.4:rh-mysql56-mysql-server-0:5.6.37-5.el7.x86_64",
            "7Server-RHSCL-2.4:rh-mysql56-mysql-test-0:5.6.37-5.el7.x86_64",
            "7Workstation-RHSCL-2.4:rh-mysql56-mysql-0:5.6.37-5.el7.src",
            "7Workstation-RHSCL-2.4:rh-mysql56-mysql-0:5.6.37-5.el7.x86_64",
            "7Workstation-RHSCL-2.4:rh-mysql56-mysql-bench-0:5.6.37-5.el7.x86_64",
            "7Workstation-RHSCL-2.4:rh-mysql56-mysql-common-0:5.6.37-5.el7.x86_64",
            "7Workstation-RHSCL-2.4:rh-mysql56-mysql-config-0:5.6.37-5.el7.x86_64",
            "7Workstation-RHSCL-2.4:rh-mysql56-mysql-debuginfo-0:5.6.37-5.el7.x86_64",
            "7Workstation-RHSCL-2.4:rh-mysql56-mysql-devel-0:5.6.37-5.el7.x86_64",
            "7Workstation-RHSCL-2.4:rh-mysql56-mysql-errmsg-0:5.6.37-5.el7.x86_64",
            "7Workstation-RHSCL-2.4:rh-mysql56-mysql-server-0:5.6.37-5.el7.x86_64",
            "7Workstation-RHSCL-2.4:rh-mysql56-mysql-test-0:5.6.37-5.el7.x86_64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2017:2787"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 4.9,
            "baseSeverity": "MEDIUM",
            "confidentialityImpact": "NONE",
            "integrityImpact": "NONE",
            "privilegesRequired": "HIGH",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.0"
          },
          "products": [
            "6Server-RHSCL-2.4-6.7.Z:rh-mysql56-mysql-0:5.6.37-5.el6.src",
            "6Server-RHSCL-2.4-6.7.Z:rh-mysql56-mysql-0:5.6.37-5.el6.x86_64",
            "6Server-RHSCL-2.4-6.7.Z:rh-mysql56-mysql-bench-0:5.6.37-5.el6.x86_64",
            "6Server-RHSCL-2.4-6.7.Z:rh-mysql56-mysql-common-0:5.6.37-5.el6.x86_64",
            "6Server-RHSCL-2.4-6.7.Z:rh-mysql56-mysql-config-0:5.6.37-5.el6.x86_64",
            "6Server-RHSCL-2.4-6.7.Z:rh-mysql56-mysql-debuginfo-0:5.6.37-5.el6.x86_64",
            "6Server-RHSCL-2.4-6.7.Z:rh-mysql56-mysql-devel-0:5.6.37-5.el6.x86_64",
            "6Server-RHSCL-2.4-6.7.Z:rh-mysql56-mysql-errmsg-0:5.6.37-5.el6.x86_64",
            "6Server-RHSCL-2.4-6.7.Z:rh-mysql56-mysql-server-0:5.6.37-5.el6.x86_64",
            "6Server-RHSCL-2.4-6.7.Z:rh-mysql56-mysql-test-0:5.6.37-5.el6.x86_64",
            "6Server-RHSCL-2.4:rh-mysql56-mysql-0:5.6.37-5.el6.src",
            "6Server-RHSCL-2.4:rh-mysql56-mysql-0:5.6.37-5.el6.x86_64",
            "6Server-RHSCL-2.4:rh-mysql56-mysql-bench-0:5.6.37-5.el6.x86_64",
            "6Server-RHSCL-2.4:rh-mysql56-mysql-common-0:5.6.37-5.el6.x86_64",
            "6Server-RHSCL-2.4:rh-mysql56-mysql-config-0:5.6.37-5.el6.x86_64",
            "6Server-RHSCL-2.4:rh-mysql56-mysql-debuginfo-0:5.6.37-5.el6.x86_64",
            "6Server-RHSCL-2.4:rh-mysql56-mysql-devel-0:5.6.37-5.el6.x86_64",
            "6Server-RHSCL-2.4:rh-mysql56-mysql-errmsg-0:5.6.37-5.el6.x86_64",
            "6Server-RHSCL-2.4:rh-mysql56-mysql-server-0:5.6.37-5.el6.x86_64",
            "6Server-RHSCL-2.4:rh-mysql56-mysql-test-0:5.6.37-5.el6.x86_64",
            "6Workstation-RHSCL-2.4:rh-mysql56-mysql-0:5.6.37-5.el6.src",
            "6Workstation-RHSCL-2.4:rh-mysql56-mysql-0:5.6.37-5.el6.x86_64",
            "6Workstation-RHSCL-2.4:rh-mysql56-mysql-bench-0:5.6.37-5.el6.x86_64",
            "6Workstation-RHSCL-2.4:rh-mysql56-mysql-common-0:5.6.37-5.el6.x86_64",
            "6Workstation-RHSCL-2.4:rh-mysql56-mysql-config-0:5.6.37-5.el6.x86_64",
            "6Workstation-RHSCL-2.4:rh-mysql56-mysql-debuginfo-0:5.6.37-5.el6.x86_64",
            "6Workstation-RHSCL-2.4:rh-mysql56-mysql-devel-0:5.6.37-5.el6.x86_64",
            "6Workstation-RHSCL-2.4:rh-mysql56-mysql-errmsg-0:5.6.37-5.el6.x86_64",
            "6Workstation-RHSCL-2.4:rh-mysql56-mysql-server-0:5.6.37-5.el6.x86_64",
            "6Workstation-RHSCL-2.4:rh-mysql56-mysql-test-0:5.6.37-5.el6.x86_64",
            "7Server-RHSCL-2.4-7.3.Z:rh-mysql56-mysql-0:5.6.37-5.el7.src",
            "7Server-RHSCL-2.4-7.3.Z:rh-mysql56-mysql-0:5.6.37-5.el7.x86_64",
            "7Server-RHSCL-2.4-7.3.Z:rh-mysql56-mysql-bench-0:5.6.37-5.el7.x86_64",
            "7Server-RHSCL-2.4-7.3.Z:rh-mysql56-mysql-common-0:5.6.37-5.el7.x86_64",
            "7Server-RHSCL-2.4-7.3.Z:rh-mysql56-mysql-config-0:5.6.37-5.el7.x86_64",
            "7Server-RHSCL-2.4-7.3.Z:rh-mysql56-mysql-debuginfo-0:5.6.37-5.el7.x86_64",
            "7Server-RHSCL-2.4-7.3.Z:rh-mysql56-mysql-devel-0:5.6.37-5.el7.x86_64",
            "7Server-RHSCL-2.4-7.3.Z:rh-mysql56-mysql-errmsg-0:5.6.37-5.el7.x86_64",
            "7Server-RHSCL-2.4-7.3.Z:rh-mysql56-mysql-server-0:5.6.37-5.el7.x86_64",
            "7Server-RHSCL-2.4-7.3.Z:rh-mysql56-mysql-test-0:5.6.37-5.el7.x86_64",
            "7Server-RHSCL-2.4:rh-mysql56-mysql-0:5.6.37-5.el7.src",
            "7Server-RHSCL-2.4:rh-mysql56-mysql-0:5.6.37-5.el7.x86_64",
            "7Server-RHSCL-2.4:rh-mysql56-mysql-bench-0:5.6.37-5.el7.x86_64",
            "7Server-RHSCL-2.4:rh-mysql56-mysql-common-0:5.6.37-5.el7.x86_64",
            "7Server-RHSCL-2.4:rh-mysql56-mysql-config-0:5.6.37-5.el7.x86_64",
            "7Server-RHSCL-2.4:rh-mysql56-mysql-debuginfo-0:5.6.37-5.el7.x86_64",
            "7Server-RHSCL-2.4:rh-mysql56-mysql-devel-0:5.6.37-5.el7.x86_64",
            "7Server-RHSCL-2.4:rh-mysql56-mysql-errmsg-0:5.6.37-5.el7.x86_64",
            "7Server-RHSCL-2.4:rh-mysql56-mysql-server-0:5.6.37-5.el7.x86_64",
            "7Server-RHSCL-2.4:rh-mysql56-mysql-test-0:5.6.37-5.el7.x86_64",
            "7Workstation-RHSCL-2.4:rh-mysql56-mysql-0:5.6.37-5.el7.src",
            "7Workstation-RHSCL-2.4:rh-mysql56-mysql-0:5.6.37-5.el7.x86_64",
            "7Workstation-RHSCL-2.4:rh-mysql56-mysql-bench-0:5.6.37-5.el7.x86_64",
            "7Workstation-RHSCL-2.4:rh-mysql56-mysql-common-0:5.6.37-5.el7.x86_64",
            "7Workstation-RHSCL-2.4:rh-mysql56-mysql-config-0:5.6.37-5.el7.x86_64",
            "7Workstation-RHSCL-2.4:rh-mysql56-mysql-debuginfo-0:5.6.37-5.el7.x86_64",
            "7Workstation-RHSCL-2.4:rh-mysql56-mysql-devel-0:5.6.37-5.el7.x86_64",
            "7Workstation-RHSCL-2.4:rh-mysql56-mysql-errmsg-0:5.6.37-5.el7.x86_64",
            "7Workstation-RHSCL-2.4:rh-mysql56-mysql-server-0:5.6.37-5.el7.x86_64",
            "7Workstation-RHSCL-2.4:rh-mysql56-mysql-test-0:5.6.37-5.el7.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Moderate"
        }
      ],
      "title": "mysql: Server: Security: Privileges unspecified vulnerability (CPU Apr 2017)"
    },
    {
      "cve": "CVE-2017-3464",
      "discovery_date": "2017-04-19T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "1443379"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: DDL). Supported versions that are affected are 5.5.54 and earlier, 5.6.35 and earlier and 5.7.17 and earlier. Easily \"exploitable\" vulnerability allows low privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of MySQL Server accessible data. CVSS 3.0 Base Score 4.3 (Integrity impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N).",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "mysql: Server: DDL unspecified vulnerability (CPU Apr 2017)",
          "title": "Vulnerability summary"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "6Server-RHSCL-2.4-6.7.Z:rh-mysql56-mysql-0:5.6.37-5.el6.src",
          "6Server-RHSCL-2.4-6.7.Z:rh-mysql56-mysql-0:5.6.37-5.el6.x86_64",
          "6Server-RHSCL-2.4-6.7.Z:rh-mysql56-mysql-bench-0:5.6.37-5.el6.x86_64",
          "6Server-RHSCL-2.4-6.7.Z:rh-mysql56-mysql-common-0:5.6.37-5.el6.x86_64",
          "6Server-RHSCL-2.4-6.7.Z:rh-mysql56-mysql-config-0:5.6.37-5.el6.x86_64",
          "6Server-RHSCL-2.4-6.7.Z:rh-mysql56-mysql-debuginfo-0:5.6.37-5.el6.x86_64",
          "6Server-RHSCL-2.4-6.7.Z:rh-mysql56-mysql-devel-0:5.6.37-5.el6.x86_64",
          "6Server-RHSCL-2.4-6.7.Z:rh-mysql56-mysql-errmsg-0:5.6.37-5.el6.x86_64",
          "6Server-RHSCL-2.4-6.7.Z:rh-mysql56-mysql-server-0:5.6.37-5.el6.x86_64",
          "6Server-RHSCL-2.4-6.7.Z:rh-mysql56-mysql-test-0:5.6.37-5.el6.x86_64",
          "6Server-RHSCL-2.4:rh-mysql56-mysql-0:5.6.37-5.el6.src",
          "6Server-RHSCL-2.4:rh-mysql56-mysql-0:5.6.37-5.el6.x86_64",
          "6Server-RHSCL-2.4:rh-mysql56-mysql-bench-0:5.6.37-5.el6.x86_64",
          "6Server-RHSCL-2.4:rh-mysql56-mysql-common-0:5.6.37-5.el6.x86_64",
          "6Server-RHSCL-2.4:rh-mysql56-mysql-config-0:5.6.37-5.el6.x86_64",
          "6Server-RHSCL-2.4:rh-mysql56-mysql-debuginfo-0:5.6.37-5.el6.x86_64",
          "6Server-RHSCL-2.4:rh-mysql56-mysql-devel-0:5.6.37-5.el6.x86_64",
          "6Server-RHSCL-2.4:rh-mysql56-mysql-errmsg-0:5.6.37-5.el6.x86_64",
          "6Server-RHSCL-2.4:rh-mysql56-mysql-server-0:5.6.37-5.el6.x86_64",
          "6Server-RHSCL-2.4:rh-mysql56-mysql-test-0:5.6.37-5.el6.x86_64",
          "6Workstation-RHSCL-2.4:rh-mysql56-mysql-0:5.6.37-5.el6.src",
          "6Workstation-RHSCL-2.4:rh-mysql56-mysql-0:5.6.37-5.el6.x86_64",
          "6Workstation-RHSCL-2.4:rh-mysql56-mysql-bench-0:5.6.37-5.el6.x86_64",
          "6Workstation-RHSCL-2.4:rh-mysql56-mysql-common-0:5.6.37-5.el6.x86_64",
          "6Workstation-RHSCL-2.4:rh-mysql56-mysql-config-0:5.6.37-5.el6.x86_64",
          "6Workstation-RHSCL-2.4:rh-mysql56-mysql-debuginfo-0:5.6.37-5.el6.x86_64",
          "6Workstation-RHSCL-2.4:rh-mysql56-mysql-devel-0:5.6.37-5.el6.x86_64",
          "6Workstation-RHSCL-2.4:rh-mysql56-mysql-errmsg-0:5.6.37-5.el6.x86_64",
          "6Workstation-RHSCL-2.4:rh-mysql56-mysql-server-0:5.6.37-5.el6.x86_64",
          "6Workstation-RHSCL-2.4:rh-mysql56-mysql-test-0:5.6.37-5.el6.x86_64",
          "7Server-RHSCL-2.4-7.3.Z:rh-mysql56-mysql-0:5.6.37-5.el7.src",
          "7Server-RHSCL-2.4-7.3.Z:rh-mysql56-mysql-0:5.6.37-5.el7.x86_64",
          "7Server-RHSCL-2.4-7.3.Z:rh-mysql56-mysql-bench-0:5.6.37-5.el7.x86_64",
          "7Server-RHSCL-2.4-7.3.Z:rh-mysql56-mysql-common-0:5.6.37-5.el7.x86_64",
          "7Server-RHSCL-2.4-7.3.Z:rh-mysql56-mysql-config-0:5.6.37-5.el7.x86_64",
          "7Server-RHSCL-2.4-7.3.Z:rh-mysql56-mysql-debuginfo-0:5.6.37-5.el7.x86_64",
          "7Server-RHSCL-2.4-7.3.Z:rh-mysql56-mysql-devel-0:5.6.37-5.el7.x86_64",
          "7Server-RHSCL-2.4-7.3.Z:rh-mysql56-mysql-errmsg-0:5.6.37-5.el7.x86_64",
          "7Server-RHSCL-2.4-7.3.Z:rh-mysql56-mysql-server-0:5.6.37-5.el7.x86_64",
          "7Server-RHSCL-2.4-7.3.Z:rh-mysql56-mysql-test-0:5.6.37-5.el7.x86_64",
          "7Server-RHSCL-2.4:rh-mysql56-mysql-0:5.6.37-5.el7.src",
          "7Server-RHSCL-2.4:rh-mysql56-mysql-0:5.6.37-5.el7.x86_64",
          "7Server-RHSCL-2.4:rh-mysql56-mysql-bench-0:5.6.37-5.el7.x86_64",
          "7Server-RHSCL-2.4:rh-mysql56-mysql-common-0:5.6.37-5.el7.x86_64",
          "7Server-RHSCL-2.4:rh-mysql56-mysql-config-0:5.6.37-5.el7.x86_64",
          "7Server-RHSCL-2.4:rh-mysql56-mysql-debuginfo-0:5.6.37-5.el7.x86_64",
          "7Server-RHSCL-2.4:rh-mysql56-mysql-devel-0:5.6.37-5.el7.x86_64",
          "7Server-RHSCL-2.4:rh-mysql56-mysql-errmsg-0:5.6.37-5.el7.x86_64",
          "7Server-RHSCL-2.4:rh-mysql56-mysql-server-0:5.6.37-5.el7.x86_64",
          "7Server-RHSCL-2.4:rh-mysql56-mysql-test-0:5.6.37-5.el7.x86_64",
          "7Workstation-RHSCL-2.4:rh-mysql56-mysql-0:5.6.37-5.el7.src",
          "7Workstation-RHSCL-2.4:rh-mysql56-mysql-0:5.6.37-5.el7.x86_64",
          "7Workstation-RHSCL-2.4:rh-mysql56-mysql-bench-0:5.6.37-5.el7.x86_64",
          "7Workstation-RHSCL-2.4:rh-mysql56-mysql-common-0:5.6.37-5.el7.x86_64",
          "7Workstation-RHSCL-2.4:rh-mysql56-mysql-config-0:5.6.37-5.el7.x86_64",
          "7Workstation-RHSCL-2.4:rh-mysql56-mysql-debuginfo-0:5.6.37-5.el7.x86_64",
          "7Workstation-RHSCL-2.4:rh-mysql56-mysql-devel-0:5.6.37-5.el7.x86_64",
          "7Workstation-RHSCL-2.4:rh-mysql56-mysql-errmsg-0:5.6.37-5.el7.x86_64",
          "7Workstation-RHSCL-2.4:rh-mysql56-mysql-server-0:5.6.37-5.el7.x86_64",
          "7Workstation-RHSCL-2.4:rh-mysql56-mysql-test-0:5.6.37-5.el7.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2017-3464"
        },
        {
          "category": "external",
          "summary": "RHBZ#1443379",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1443379"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2017-3464",
          "url": "https://www.cve.org/CVERecord?id=CVE-2017-3464"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2017-3464",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2017-3464"
        },
        {
          "category": "external",
          "summary": "http://www.oracle.com/technetwork/security-advisory/cpuapr2017-3236618.html#AppendixMSQL",
          "url": "http://www.oracle.com/technetwork/security-advisory/cpuapr2017-3236618.html#AppendixMSQL"
        }
      ],
      "release_date": "2017-04-19T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2017-09-21T07:42:12+00:00",
          "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAfter installing this update, the MySQL server daemon (mysqld) will be restarted automatically.",
          "product_ids": [
            "6Server-RHSCL-2.4-6.7.Z:rh-mysql56-mysql-0:5.6.37-5.el6.src",
            "6Server-RHSCL-2.4-6.7.Z:rh-mysql56-mysql-0:5.6.37-5.el6.x86_64",
            "6Server-RHSCL-2.4-6.7.Z:rh-mysql56-mysql-bench-0:5.6.37-5.el6.x86_64",
            "6Server-RHSCL-2.4-6.7.Z:rh-mysql56-mysql-common-0:5.6.37-5.el6.x86_64",
            "6Server-RHSCL-2.4-6.7.Z:rh-mysql56-mysql-config-0:5.6.37-5.el6.x86_64",
            "6Server-RHSCL-2.4-6.7.Z:rh-mysql56-mysql-debuginfo-0:5.6.37-5.el6.x86_64",
            "6Server-RHSCL-2.4-6.7.Z:rh-mysql56-mysql-devel-0:5.6.37-5.el6.x86_64",
            "6Server-RHSCL-2.4-6.7.Z:rh-mysql56-mysql-errmsg-0:5.6.37-5.el6.x86_64",
            "6Server-RHSCL-2.4-6.7.Z:rh-mysql56-mysql-server-0:5.6.37-5.el6.x86_64",
            "6Server-RHSCL-2.4-6.7.Z:rh-mysql56-mysql-test-0:5.6.37-5.el6.x86_64",
            "6Server-RHSCL-2.4:rh-mysql56-mysql-0:5.6.37-5.el6.src",
            "6Server-RHSCL-2.4:rh-mysql56-mysql-0:5.6.37-5.el6.x86_64",
            "6Server-RHSCL-2.4:rh-mysql56-mysql-bench-0:5.6.37-5.el6.x86_64",
            "6Server-RHSCL-2.4:rh-mysql56-mysql-common-0:5.6.37-5.el6.x86_64",
            "6Server-RHSCL-2.4:rh-mysql56-mysql-config-0:5.6.37-5.el6.x86_64",
            "6Server-RHSCL-2.4:rh-mysql56-mysql-debuginfo-0:5.6.37-5.el6.x86_64",
            "6Server-RHSCL-2.4:rh-mysql56-mysql-devel-0:5.6.37-5.el6.x86_64",
            "6Server-RHSCL-2.4:rh-mysql56-mysql-errmsg-0:5.6.37-5.el6.x86_64",
            "6Server-RHSCL-2.4:rh-mysql56-mysql-server-0:5.6.37-5.el6.x86_64",
            "6Server-RHSCL-2.4:rh-mysql56-mysql-test-0:5.6.37-5.el6.x86_64",
            "6Workstation-RHSCL-2.4:rh-mysql56-mysql-0:5.6.37-5.el6.src",
            "6Workstation-RHSCL-2.4:rh-mysql56-mysql-0:5.6.37-5.el6.x86_64",
            "6Workstation-RHSCL-2.4:rh-mysql56-mysql-bench-0:5.6.37-5.el6.x86_64",
            "6Workstation-RHSCL-2.4:rh-mysql56-mysql-common-0:5.6.37-5.el6.x86_64",
            "6Workstation-RHSCL-2.4:rh-mysql56-mysql-config-0:5.6.37-5.el6.x86_64",
            "6Workstation-RHSCL-2.4:rh-mysql56-mysql-debuginfo-0:5.6.37-5.el6.x86_64",
            "6Workstation-RHSCL-2.4:rh-mysql56-mysql-devel-0:5.6.37-5.el6.x86_64",
            "6Workstation-RHSCL-2.4:rh-mysql56-mysql-errmsg-0:5.6.37-5.el6.x86_64",
            "6Workstation-RHSCL-2.4:rh-mysql56-mysql-server-0:5.6.37-5.el6.x86_64",
            "6Workstation-RHSCL-2.4:rh-mysql56-mysql-test-0:5.6.37-5.el6.x86_64",
            "7Server-RHSCL-2.4-7.3.Z:rh-mysql56-mysql-0:5.6.37-5.el7.src",
            "7Server-RHSCL-2.4-7.3.Z:rh-mysql56-mysql-0:5.6.37-5.el7.x86_64",
            "7Server-RHSCL-2.4-7.3.Z:rh-mysql56-mysql-bench-0:5.6.37-5.el7.x86_64",
            "7Server-RHSCL-2.4-7.3.Z:rh-mysql56-mysql-common-0:5.6.37-5.el7.x86_64",
            "7Server-RHSCL-2.4-7.3.Z:rh-mysql56-mysql-config-0:5.6.37-5.el7.x86_64",
            "7Server-RHSCL-2.4-7.3.Z:rh-mysql56-mysql-debuginfo-0:5.6.37-5.el7.x86_64",
            "7Server-RHSCL-2.4-7.3.Z:rh-mysql56-mysql-devel-0:5.6.37-5.el7.x86_64",
            "7Server-RHSCL-2.4-7.3.Z:rh-mysql56-mysql-errmsg-0:5.6.37-5.el7.x86_64",
            "7Server-RHSCL-2.4-7.3.Z:rh-mysql56-mysql-server-0:5.6.37-5.el7.x86_64",
            "7Server-RHSCL-2.4-7.3.Z:rh-mysql56-mysql-test-0:5.6.37-5.el7.x86_64",
            "7Server-RHSCL-2.4:rh-mysql56-mysql-0:5.6.37-5.el7.src",
            "7Server-RHSCL-2.4:rh-mysql56-mysql-0:5.6.37-5.el7.x86_64",
            "7Server-RHSCL-2.4:rh-mysql56-mysql-bench-0:5.6.37-5.el7.x86_64",
            "7Server-RHSCL-2.4:rh-mysql56-mysql-common-0:5.6.37-5.el7.x86_64",
            "7Server-RHSCL-2.4:rh-mysql56-mysql-config-0:5.6.37-5.el7.x86_64",
            "7Server-RHSCL-2.4:rh-mysql56-mysql-debuginfo-0:5.6.37-5.el7.x86_64",
            "7Server-RHSCL-2.4:rh-mysql56-mysql-devel-0:5.6.37-5.el7.x86_64",
            "7Server-RHSCL-2.4:rh-mysql56-mysql-errmsg-0:5.6.37-5.el7.x86_64",
            "7Server-RHSCL-2.4:rh-mysql56-mysql-server-0:5.6.37-5.el7.x86_64",
            "7Server-RHSCL-2.4:rh-mysql56-mysql-test-0:5.6.37-5.el7.x86_64",
            "7Workstation-RHSCL-2.4:rh-mysql56-mysql-0:5.6.37-5.el7.src",
            "7Workstation-RHSCL-2.4:rh-mysql56-mysql-0:5.6.37-5.el7.x86_64",
            "7Workstation-RHSCL-2.4:rh-mysql56-mysql-bench-0:5.6.37-5.el7.x86_64",
            "7Workstation-RHSCL-2.4:rh-mysql56-mysql-common-0:5.6.37-5.el7.x86_64",
            "7Workstation-RHSCL-2.4:rh-mysql56-mysql-config-0:5.6.37-5.el7.x86_64",
            "7Workstation-RHSCL-2.4:rh-mysql56-mysql-debuginfo-0:5.6.37-5.el7.x86_64",
            "7Workstation-RHSCL-2.4:rh-mysql56-mysql-devel-0:5.6.37-5.el7.x86_64",
            "7Workstation-RHSCL-2.4:rh-mysql56-mysql-errmsg-0:5.6.37-5.el7.x86_64",
            "7Workstation-RHSCL-2.4:rh-mysql56-mysql-server-0:5.6.37-5.el7.x86_64",
            "7Workstation-RHSCL-2.4:rh-mysql56-mysql-test-0:5.6.37-5.el7.x86_64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2017:2787"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "NONE",
            "baseScore": 4.3,
            "baseSeverity": "MEDIUM",
            "confidentialityImpact": "NONE",
            "integrityImpact": "LOW",
            "privilegesRequired": "LOW",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N",
            "version": "3.0"
          },
          "products": [
            "6Server-RHSCL-2.4-6.7.Z:rh-mysql56-mysql-0:5.6.37-5.el6.src",
            "6Server-RHSCL-2.4-6.7.Z:rh-mysql56-mysql-0:5.6.37-5.el6.x86_64",
            "6Server-RHSCL-2.4-6.7.Z:rh-mysql56-mysql-bench-0:5.6.37-5.el6.x86_64",
            "6Server-RHSCL-2.4-6.7.Z:rh-mysql56-mysql-common-0:5.6.37-5.el6.x86_64",
            "6Server-RHSCL-2.4-6.7.Z:rh-mysql56-mysql-config-0:5.6.37-5.el6.x86_64",
            "6Server-RHSCL-2.4-6.7.Z:rh-mysql56-mysql-debuginfo-0:5.6.37-5.el6.x86_64",
            "6Server-RHSCL-2.4-6.7.Z:rh-mysql56-mysql-devel-0:5.6.37-5.el6.x86_64",
            "6Server-RHSCL-2.4-6.7.Z:rh-mysql56-mysql-errmsg-0:5.6.37-5.el6.x86_64",
            "6Server-RHSCL-2.4-6.7.Z:rh-mysql56-mysql-server-0:5.6.37-5.el6.x86_64",
            "6Server-RHSCL-2.4-6.7.Z:rh-mysql56-mysql-test-0:5.6.37-5.el6.x86_64",
            "6Server-RHSCL-2.4:rh-mysql56-mysql-0:5.6.37-5.el6.src",
            "6Server-RHSCL-2.4:rh-mysql56-mysql-0:5.6.37-5.el6.x86_64",
            "6Server-RHSCL-2.4:rh-mysql56-mysql-bench-0:5.6.37-5.el6.x86_64",
            "6Server-RHSCL-2.4:rh-mysql56-mysql-common-0:5.6.37-5.el6.x86_64",
            "6Server-RHSCL-2.4:rh-mysql56-mysql-config-0:5.6.37-5.el6.x86_64",
            "6Server-RHSCL-2.4:rh-mysql56-mysql-debuginfo-0:5.6.37-5.el6.x86_64",
            "6Server-RHSCL-2.4:rh-mysql56-mysql-devel-0:5.6.37-5.el6.x86_64",
            "6Server-RHSCL-2.4:rh-mysql56-mysql-errmsg-0:5.6.37-5.el6.x86_64",
            "6Server-RHSCL-2.4:rh-mysql56-mysql-server-0:5.6.37-5.el6.x86_64",
            "6Server-RHSCL-2.4:rh-mysql56-mysql-test-0:5.6.37-5.el6.x86_64",
            "6Workstation-RHSCL-2.4:rh-mysql56-mysql-0:5.6.37-5.el6.src",
            "6Workstation-RHSCL-2.4:rh-mysql56-mysql-0:5.6.37-5.el6.x86_64",
            "6Workstation-RHSCL-2.4:rh-mysql56-mysql-bench-0:5.6.37-5.el6.x86_64",
            "6Workstation-RHSCL-2.4:rh-mysql56-mysql-common-0:5.6.37-5.el6.x86_64",
            "6Workstation-RHSCL-2.4:rh-mysql56-mysql-config-0:5.6.37-5.el6.x86_64",
            "6Workstation-RHSCL-2.4:rh-mysql56-mysql-debuginfo-0:5.6.37-5.el6.x86_64",
            "6Workstation-RHSCL-2.4:rh-mysql56-mysql-devel-0:5.6.37-5.el6.x86_64",
            "6Workstation-RHSCL-2.4:rh-mysql56-mysql-errmsg-0:5.6.37-5.el6.x86_64",
            "6Workstation-RHSCL-2.4:rh-mysql56-mysql-server-0:5.6.37-5.el6.x86_64",
            "6Workstation-RHSCL-2.4:rh-mysql56-mysql-test-0:5.6.37-5.el6.x86_64",
            "7Server-RHSCL-2.4-7.3.Z:rh-mysql56-mysql-0:5.6.37-5.el7.src",
            "7Server-RHSCL-2.4-7.3.Z:rh-mysql56-mysql-0:5.6.37-5.el7.x86_64",
            "7Server-RHSCL-2.4-7.3.Z:rh-mysql56-mysql-bench-0:5.6.37-5.el7.x86_64",
            "7Server-RHSCL-2.4-7.3.Z:rh-mysql56-mysql-common-0:5.6.37-5.el7.x86_64",
            "7Server-RHSCL-2.4-7.3.Z:rh-mysql56-mysql-config-0:5.6.37-5.el7.x86_64",
            "7Server-RHSCL-2.4-7.3.Z:rh-mysql56-mysql-debuginfo-0:5.6.37-5.el7.x86_64",
            "7Server-RHSCL-2.4-7.3.Z:rh-mysql56-mysql-devel-0:5.6.37-5.el7.x86_64",
            "7Server-RHSCL-2.4-7.3.Z:rh-mysql56-mysql-errmsg-0:5.6.37-5.el7.x86_64",
            "7Server-RHSCL-2.4-7.3.Z:rh-mysql56-mysql-server-0:5.6.37-5.el7.x86_64",
            "7Server-RHSCL-2.4-7.3.Z:rh-mysql56-mysql-test-0:5.6.37-5.el7.x86_64",
            "7Server-RHSCL-2.4:rh-mysql56-mysql-0:5.6.37-5.el7.src",
            "7Server-RHSCL-2.4:rh-mysql56-mysql-0:5.6.37-5.el7.x86_64",
            "7Server-RHSCL-2.4:rh-mysql56-mysql-bench-0:5.6.37-5.el7.x86_64",
            "7Server-RHSCL-2.4:rh-mysql56-mysql-common-0:5.6.37-5.el7.x86_64",
            "7Server-RHSCL-2.4:rh-mysql56-mysql-config-0:5.6.37-5.el7.x86_64",
            "7Server-RHSCL-2.4:rh-mysql56-mysql-debuginfo-0:5.6.37-5.el7.x86_64",
            "7Server-RHSCL-2.4:rh-mysql56-mysql-devel-0:5.6.37-5.el7.x86_64",
            "7Server-RHSCL-2.4:rh-mysql56-mysql-errmsg-0:5.6.37-5.el7.x86_64",
            "7Server-RHSCL-2.4:rh-mysql56-mysql-server-0:5.6.37-5.el7.x86_64",
            "7Server-RHSCL-2.4:rh-mysql56-mysql-test-0:5.6.37-5.el7.x86_64",
            "7Workstation-RHSCL-2.4:rh-mysql56-mysql-0:5.6.37-5.el7.src",
            "7Workstation-RHSCL-2.4:rh-mysql56-mysql-0:5.6.37-5.el7.x86_64",
            "7Workstation-RHSCL-2.4:rh-mysql56-mysql-bench-0:5.6.37-5.el7.x86_64",
            "7Workstation-RHSCL-2.4:rh-mysql56-mysql-common-0:5.6.37-5.el7.x86_64",
            "7Workstation-RHSCL-2.4:rh-mysql56-mysql-config-0:5.6.37-5.el7.x86_64",
            "7Workstation-RHSCL-2.4:rh-mysql56-mysql-debuginfo-0:5.6.37-5.el7.x86_64",
            "7Workstation-RHSCL-2.4:rh-mysql56-mysql-devel-0:5.6.37-5.el7.x86_64",
            "7Workstation-RHSCL-2.4:rh-mysql56-mysql-errmsg-0:5.6.37-5.el7.x86_64",
            "7Workstation-RHSCL-2.4:rh-mysql56-mysql-server-0:5.6.37-5.el7.x86_64",
            "7Workstation-RHSCL-2.4:rh-mysql56-mysql-test-0:5.6.37-5.el7.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Moderate"
        }
      ],
      "title": "mysql: Server: DDL unspecified vulnerability (CPU Apr 2017)"
    },
    {
      "cve": "CVE-2017-3599",
      "cwe": {
        "id": "CWE-190",
        "name": "Integer Overflow or Wraparound"
      },
      "discovery_date": "2017-04-19T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "1443386"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "An integer overflow flaw leading to a buffer overflow was found in the way MySQL parsed connection handshake packets. An unauthenticated remote attacker with access to the MySQL port could use this flaw to crash the mysqld daemon.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "mysql: integer underflow in get_56_lenc_string() leading to DoS (CPU Apr 2017)",
          "title": "Vulnerability summary"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "6Server-RHSCL-2.4-6.7.Z:rh-mysql56-mysql-0:5.6.37-5.el6.src",
          "6Server-RHSCL-2.4-6.7.Z:rh-mysql56-mysql-0:5.6.37-5.el6.x86_64",
          "6Server-RHSCL-2.4-6.7.Z:rh-mysql56-mysql-bench-0:5.6.37-5.el6.x86_64",
          "6Server-RHSCL-2.4-6.7.Z:rh-mysql56-mysql-common-0:5.6.37-5.el6.x86_64",
          "6Server-RHSCL-2.4-6.7.Z:rh-mysql56-mysql-config-0:5.6.37-5.el6.x86_64",
          "6Server-RHSCL-2.4-6.7.Z:rh-mysql56-mysql-debuginfo-0:5.6.37-5.el6.x86_64",
          "6Server-RHSCL-2.4-6.7.Z:rh-mysql56-mysql-devel-0:5.6.37-5.el6.x86_64",
          "6Server-RHSCL-2.4-6.7.Z:rh-mysql56-mysql-errmsg-0:5.6.37-5.el6.x86_64",
          "6Server-RHSCL-2.4-6.7.Z:rh-mysql56-mysql-server-0:5.6.37-5.el6.x86_64",
          "6Server-RHSCL-2.4-6.7.Z:rh-mysql56-mysql-test-0:5.6.37-5.el6.x86_64",
          "6Server-RHSCL-2.4:rh-mysql56-mysql-0:5.6.37-5.el6.src",
          "6Server-RHSCL-2.4:rh-mysql56-mysql-0:5.6.37-5.el6.x86_64",
          "6Server-RHSCL-2.4:rh-mysql56-mysql-bench-0:5.6.37-5.el6.x86_64",
          "6Server-RHSCL-2.4:rh-mysql56-mysql-common-0:5.6.37-5.el6.x86_64",
          "6Server-RHSCL-2.4:rh-mysql56-mysql-config-0:5.6.37-5.el6.x86_64",
          "6Server-RHSCL-2.4:rh-mysql56-mysql-debuginfo-0:5.6.37-5.el6.x86_64",
          "6Server-RHSCL-2.4:rh-mysql56-mysql-devel-0:5.6.37-5.el6.x86_64",
          "6Server-RHSCL-2.4:rh-mysql56-mysql-errmsg-0:5.6.37-5.el6.x86_64",
          "6Server-RHSCL-2.4:rh-mysql56-mysql-server-0:5.6.37-5.el6.x86_64",
          "6Server-RHSCL-2.4:rh-mysql56-mysql-test-0:5.6.37-5.el6.x86_64",
          "6Workstation-RHSCL-2.4:rh-mysql56-mysql-0:5.6.37-5.el6.src",
          "6Workstation-RHSCL-2.4:rh-mysql56-mysql-0:5.6.37-5.el6.x86_64",
          "6Workstation-RHSCL-2.4:rh-mysql56-mysql-bench-0:5.6.37-5.el6.x86_64",
          "6Workstation-RHSCL-2.4:rh-mysql56-mysql-common-0:5.6.37-5.el6.x86_64",
          "6Workstation-RHSCL-2.4:rh-mysql56-mysql-config-0:5.6.37-5.el6.x86_64",
          "6Workstation-RHSCL-2.4:rh-mysql56-mysql-debuginfo-0:5.6.37-5.el6.x86_64",
          "6Workstation-RHSCL-2.4:rh-mysql56-mysql-devel-0:5.6.37-5.el6.x86_64",
          "6Workstation-RHSCL-2.4:rh-mysql56-mysql-errmsg-0:5.6.37-5.el6.x86_64",
          "6Workstation-RHSCL-2.4:rh-mysql56-mysql-server-0:5.6.37-5.el6.x86_64",
          "6Workstation-RHSCL-2.4:rh-mysql56-mysql-test-0:5.6.37-5.el6.x86_64",
          "7Server-RHSCL-2.4-7.3.Z:rh-mysql56-mysql-0:5.6.37-5.el7.src",
          "7Server-RHSCL-2.4-7.3.Z:rh-mysql56-mysql-0:5.6.37-5.el7.x86_64",
          "7Server-RHSCL-2.4-7.3.Z:rh-mysql56-mysql-bench-0:5.6.37-5.el7.x86_64",
          "7Server-RHSCL-2.4-7.3.Z:rh-mysql56-mysql-common-0:5.6.37-5.el7.x86_64",
          "7Server-RHSCL-2.4-7.3.Z:rh-mysql56-mysql-config-0:5.6.37-5.el7.x86_64",
          "7Server-RHSCL-2.4-7.3.Z:rh-mysql56-mysql-debuginfo-0:5.6.37-5.el7.x86_64",
          "7Server-RHSCL-2.4-7.3.Z:rh-mysql56-mysql-devel-0:5.6.37-5.el7.x86_64",
          "7Server-RHSCL-2.4-7.3.Z:rh-mysql56-mysql-errmsg-0:5.6.37-5.el7.x86_64",
          "7Server-RHSCL-2.4-7.3.Z:rh-mysql56-mysql-server-0:5.6.37-5.el7.x86_64",
          "7Server-RHSCL-2.4-7.3.Z:rh-mysql56-mysql-test-0:5.6.37-5.el7.x86_64",
          "7Server-RHSCL-2.4:rh-mysql56-mysql-0:5.6.37-5.el7.src",
          "7Server-RHSCL-2.4:rh-mysql56-mysql-0:5.6.37-5.el7.x86_64",
          "7Server-RHSCL-2.4:rh-mysql56-mysql-bench-0:5.6.37-5.el7.x86_64",
          "7Server-RHSCL-2.4:rh-mysql56-mysql-common-0:5.6.37-5.el7.x86_64",
          "7Server-RHSCL-2.4:rh-mysql56-mysql-config-0:5.6.37-5.el7.x86_64",
          "7Server-RHSCL-2.4:rh-mysql56-mysql-debuginfo-0:5.6.37-5.el7.x86_64",
          "7Server-RHSCL-2.4:rh-mysql56-mysql-devel-0:5.6.37-5.el7.x86_64",
          "7Server-RHSCL-2.4:rh-mysql56-mysql-errmsg-0:5.6.37-5.el7.x86_64",
          "7Server-RHSCL-2.4:rh-mysql56-mysql-server-0:5.6.37-5.el7.x86_64",
          "7Server-RHSCL-2.4:rh-mysql56-mysql-test-0:5.6.37-5.el7.x86_64",
          "7Workstation-RHSCL-2.4:rh-mysql56-mysql-0:5.6.37-5.el7.src",
          "7Workstation-RHSCL-2.4:rh-mysql56-mysql-0:5.6.37-5.el7.x86_64",
          "7Workstation-RHSCL-2.4:rh-mysql56-mysql-bench-0:5.6.37-5.el7.x86_64",
          "7Workstation-RHSCL-2.4:rh-mysql56-mysql-common-0:5.6.37-5.el7.x86_64",
          "7Workstation-RHSCL-2.4:rh-mysql56-mysql-config-0:5.6.37-5.el7.x86_64",
          "7Workstation-RHSCL-2.4:rh-mysql56-mysql-debuginfo-0:5.6.37-5.el7.x86_64",
          "7Workstation-RHSCL-2.4:rh-mysql56-mysql-devel-0:5.6.37-5.el7.x86_64",
          "7Workstation-RHSCL-2.4:rh-mysql56-mysql-errmsg-0:5.6.37-5.el7.x86_64",
          "7Workstation-RHSCL-2.4:rh-mysql56-mysql-server-0:5.6.37-5.el7.x86_64",
          "7Workstation-RHSCL-2.4:rh-mysql56-mysql-test-0:5.6.37-5.el7.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2017-3599"
        },
        {
          "category": "external",
          "summary": "RHBZ#1443386",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1443386"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2017-3599",
          "url": "https://www.cve.org/CVERecord?id=CVE-2017-3599"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2017-3599",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2017-3599"
        },
        {
          "category": "external",
          "summary": "http://www.oracle.com/technetwork/security-advisory/cpuapr2017-3236618.html#AppendixMSQL",
          "url": "http://www.oracle.com/technetwork/security-advisory/cpuapr2017-3236618.html#AppendixMSQL"
        },
        {
          "category": "external",
          "summary": "https://www.secforce.com/blog/2017/04/cve-2017-3599-pre-auth-mysql-remote-dos/",
          "url": "https://www.secforce.com/blog/2017/04/cve-2017-3599-pre-auth-mysql-remote-dos/"
        }
      ],
      "release_date": "2017-04-19T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2017-09-21T07:42:12+00:00",
          "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAfter installing this update, the MySQL server daemon (mysqld) will be restarted automatically.",
          "product_ids": [
            "6Server-RHSCL-2.4-6.7.Z:rh-mysql56-mysql-0:5.6.37-5.el6.src",
            "6Server-RHSCL-2.4-6.7.Z:rh-mysql56-mysql-0:5.6.37-5.el6.x86_64",
            "6Server-RHSCL-2.4-6.7.Z:rh-mysql56-mysql-bench-0:5.6.37-5.el6.x86_64",
            "6Server-RHSCL-2.4-6.7.Z:rh-mysql56-mysql-common-0:5.6.37-5.el6.x86_64",
            "6Server-RHSCL-2.4-6.7.Z:rh-mysql56-mysql-config-0:5.6.37-5.el6.x86_64",
            "6Server-RHSCL-2.4-6.7.Z:rh-mysql56-mysql-debuginfo-0:5.6.37-5.el6.x86_64",
            "6Server-RHSCL-2.4-6.7.Z:rh-mysql56-mysql-devel-0:5.6.37-5.el6.x86_64",
            "6Server-RHSCL-2.4-6.7.Z:rh-mysql56-mysql-errmsg-0:5.6.37-5.el6.x86_64",
            "6Server-RHSCL-2.4-6.7.Z:rh-mysql56-mysql-server-0:5.6.37-5.el6.x86_64",
            "6Server-RHSCL-2.4-6.7.Z:rh-mysql56-mysql-test-0:5.6.37-5.el6.x86_64",
            "6Server-RHSCL-2.4:rh-mysql56-mysql-0:5.6.37-5.el6.src",
            "6Server-RHSCL-2.4:rh-mysql56-mysql-0:5.6.37-5.el6.x86_64",
            "6Server-RHSCL-2.4:rh-mysql56-mysql-bench-0:5.6.37-5.el6.x86_64",
            "6Server-RHSCL-2.4:rh-mysql56-mysql-common-0:5.6.37-5.el6.x86_64",
            "6Server-RHSCL-2.4:rh-mysql56-mysql-config-0:5.6.37-5.el6.x86_64",
            "6Server-RHSCL-2.4:rh-mysql56-mysql-debuginfo-0:5.6.37-5.el6.x86_64",
            "6Server-RHSCL-2.4:rh-mysql56-mysql-devel-0:5.6.37-5.el6.x86_64",
            "6Server-RHSCL-2.4:rh-mysql56-mysql-errmsg-0:5.6.37-5.el6.x86_64",
            "6Server-RHSCL-2.4:rh-mysql56-mysql-server-0:5.6.37-5.el6.x86_64",
            "6Server-RHSCL-2.4:rh-mysql56-mysql-test-0:5.6.37-5.el6.x86_64",
            "6Workstation-RHSCL-2.4:rh-mysql56-mysql-0:5.6.37-5.el6.src",
            "6Workstation-RHSCL-2.4:rh-mysql56-mysql-0:5.6.37-5.el6.x86_64",
            "6Workstation-RHSCL-2.4:rh-mysql56-mysql-bench-0:5.6.37-5.el6.x86_64",
            "6Workstation-RHSCL-2.4:rh-mysql56-mysql-common-0:5.6.37-5.el6.x86_64",
            "6Workstation-RHSCL-2.4:rh-mysql56-mysql-config-0:5.6.37-5.el6.x86_64",
            "6Workstation-RHSCL-2.4:rh-mysql56-mysql-debuginfo-0:5.6.37-5.el6.x86_64",
            "6Workstation-RHSCL-2.4:rh-mysql56-mysql-devel-0:5.6.37-5.el6.x86_64",
            "6Workstation-RHSCL-2.4:rh-mysql56-mysql-errmsg-0:5.6.37-5.el6.x86_64",
            "6Workstation-RHSCL-2.4:rh-mysql56-mysql-server-0:5.6.37-5.el6.x86_64",
            "6Workstation-RHSCL-2.4:rh-mysql56-mysql-test-0:5.6.37-5.el6.x86_64",
            "7Server-RHSCL-2.4-7.3.Z:rh-mysql56-mysql-0:5.6.37-5.el7.src",
            "7Server-RHSCL-2.4-7.3.Z:rh-mysql56-mysql-0:5.6.37-5.el7.x86_64",
            "7Server-RHSCL-2.4-7.3.Z:rh-mysql56-mysql-bench-0:5.6.37-5.el7.x86_64",
            "7Server-RHSCL-2.4-7.3.Z:rh-mysql56-mysql-common-0:5.6.37-5.el7.x86_64",
            "7Server-RHSCL-2.4-7.3.Z:rh-mysql56-mysql-config-0:5.6.37-5.el7.x86_64",
            "7Server-RHSCL-2.4-7.3.Z:rh-mysql56-mysql-debuginfo-0:5.6.37-5.el7.x86_64",
            "7Server-RHSCL-2.4-7.3.Z:rh-mysql56-mysql-devel-0:5.6.37-5.el7.x86_64",
            "7Server-RHSCL-2.4-7.3.Z:rh-mysql56-mysql-errmsg-0:5.6.37-5.el7.x86_64",
            "7Server-RHSCL-2.4-7.3.Z:rh-mysql56-mysql-server-0:5.6.37-5.el7.x86_64",
            "7Server-RHSCL-2.4-7.3.Z:rh-mysql56-mysql-test-0:5.6.37-5.el7.x86_64",
            "7Server-RHSCL-2.4:rh-mysql56-mysql-0:5.6.37-5.el7.src",
            "7Server-RHSCL-2.4:rh-mysql56-mysql-0:5.6.37-5.el7.x86_64",
            "7Server-RHSCL-2.4:rh-mysql56-mysql-bench-0:5.6.37-5.el7.x86_64",
            "7Server-RHSCL-2.4:rh-mysql56-mysql-common-0:5.6.37-5.el7.x86_64",
            "7Server-RHSCL-2.4:rh-mysql56-mysql-config-0:5.6.37-5.el7.x86_64",
            "7Server-RHSCL-2.4:rh-mysql56-mysql-debuginfo-0:5.6.37-5.el7.x86_64",
            "7Server-RHSCL-2.4:rh-mysql56-mysql-devel-0:5.6.37-5.el7.x86_64",
            "7Server-RHSCL-2.4:rh-mysql56-mysql-errmsg-0:5.6.37-5.el7.x86_64",
            "7Server-RHSCL-2.4:rh-mysql56-mysql-server-0:5.6.37-5.el7.x86_64",
            "7Server-RHSCL-2.4:rh-mysql56-mysql-test-0:5.6.37-5.el7.x86_64",
            "7Workstation-RHSCL-2.4:rh-mysql56-mysql-0:5.6.37-5.el7.src",
            "7Workstation-RHSCL-2.4:rh-mysql56-mysql-0:5.6.37-5.el7.x86_64",
            "7Workstation-RHSCL-2.4:rh-mysql56-mysql-bench-0:5.6.37-5.el7.x86_64",
            "7Workstation-RHSCL-2.4:rh-mysql56-mysql-common-0:5.6.37-5.el7.x86_64",
            "7Workstation-RHSCL-2.4:rh-mysql56-mysql-config-0:5.6.37-5.el7.x86_64",
            "7Workstation-RHSCL-2.4:rh-mysql56-mysql-debuginfo-0:5.6.37-5.el7.x86_64",
            "7Workstation-RHSCL-2.4:rh-mysql56-mysql-devel-0:5.6.37-5.el7.x86_64",
            "7Workstation-RHSCL-2.4:rh-mysql56-mysql-errmsg-0:5.6.37-5.el7.x86_64",
            "7Workstation-RHSCL-2.4:rh-mysql56-mysql-server-0:5.6.37-5.el7.x86_64",
            "7Workstation-RHSCL-2.4:rh-mysql56-mysql-test-0:5.6.37-5.el7.x86_64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2017:2787"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "NONE",
            "integrityImpact": "NONE",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.0"
          },
          "products": [
            "6Server-RHSCL-2.4-6.7.Z:rh-mysql56-mysql-0:5.6.37-5.el6.src",
            "6Server-RHSCL-2.4-6.7.Z:rh-mysql56-mysql-0:5.6.37-5.el6.x86_64",
            "6Server-RHSCL-2.4-6.7.Z:rh-mysql56-mysql-bench-0:5.6.37-5.el6.x86_64",
            "6Server-RHSCL-2.4-6.7.Z:rh-mysql56-mysql-common-0:5.6.37-5.el6.x86_64",
            "6Server-RHSCL-2.4-6.7.Z:rh-mysql56-mysql-config-0:5.6.37-5.el6.x86_64",
            "6Server-RHSCL-2.4-6.7.Z:rh-mysql56-mysql-debuginfo-0:5.6.37-5.el6.x86_64",
            "6Server-RHSCL-2.4-6.7.Z:rh-mysql56-mysql-devel-0:5.6.37-5.el6.x86_64",
            "6Server-RHSCL-2.4-6.7.Z:rh-mysql56-mysql-errmsg-0:5.6.37-5.el6.x86_64",
            "6Server-RHSCL-2.4-6.7.Z:rh-mysql56-mysql-server-0:5.6.37-5.el6.x86_64",
            "6Server-RHSCL-2.4-6.7.Z:rh-mysql56-mysql-test-0:5.6.37-5.el6.x86_64",
            "6Server-RHSCL-2.4:rh-mysql56-mysql-0:5.6.37-5.el6.src",
            "6Server-RHSCL-2.4:rh-mysql56-mysql-0:5.6.37-5.el6.x86_64",
            "6Server-RHSCL-2.4:rh-mysql56-mysql-bench-0:5.6.37-5.el6.x86_64",
            "6Server-RHSCL-2.4:rh-mysql56-mysql-common-0:5.6.37-5.el6.x86_64",
            "6Server-RHSCL-2.4:rh-mysql56-mysql-config-0:5.6.37-5.el6.x86_64",
            "6Server-RHSCL-2.4:rh-mysql56-mysql-debuginfo-0:5.6.37-5.el6.x86_64",
            "6Server-RHSCL-2.4:rh-mysql56-mysql-devel-0:5.6.37-5.el6.x86_64",
            "6Server-RHSCL-2.4:rh-mysql56-mysql-errmsg-0:5.6.37-5.el6.x86_64",
            "6Server-RHSCL-2.4:rh-mysql56-mysql-server-0:5.6.37-5.el6.x86_64",
            "6Server-RHSCL-2.4:rh-mysql56-mysql-test-0:5.6.37-5.el6.x86_64",
            "6Workstation-RHSCL-2.4:rh-mysql56-mysql-0:5.6.37-5.el6.src",
            "6Workstation-RHSCL-2.4:rh-mysql56-mysql-0:5.6.37-5.el6.x86_64",
            "6Workstation-RHSCL-2.4:rh-mysql56-mysql-bench-0:5.6.37-5.el6.x86_64",
            "6Workstation-RHSCL-2.4:rh-mysql56-mysql-common-0:5.6.37-5.el6.x86_64",
            "6Workstation-RHSCL-2.4:rh-mysql56-mysql-config-0:5.6.37-5.el6.x86_64",
            "6Workstation-RHSCL-2.4:rh-mysql56-mysql-debuginfo-0:5.6.37-5.el6.x86_64",
            "6Workstation-RHSCL-2.4:rh-mysql56-mysql-devel-0:5.6.37-5.el6.x86_64",
            "6Workstation-RHSCL-2.4:rh-mysql56-mysql-errmsg-0:5.6.37-5.el6.x86_64",
            "6Workstation-RHSCL-2.4:rh-mysql56-mysql-server-0:5.6.37-5.el6.x86_64",
            "6Workstation-RHSCL-2.4:rh-mysql56-mysql-test-0:5.6.37-5.el6.x86_64",
            "7Server-RHSCL-2.4-7.3.Z:rh-mysql56-mysql-0:5.6.37-5.el7.src",
            "7Server-RHSCL-2.4-7.3.Z:rh-mysql56-mysql-0:5.6.37-5.el7.x86_64",
            "7Server-RHSCL-2.4-7.3.Z:rh-mysql56-mysql-bench-0:5.6.37-5.el7.x86_64",
            "7Server-RHSCL-2.4-7.3.Z:rh-mysql56-mysql-common-0:5.6.37-5.el7.x86_64",
            "7Server-RHSCL-2.4-7.3.Z:rh-mysql56-mysql-config-0:5.6.37-5.el7.x86_64",
            "7Server-RHSCL-2.4-7.3.Z:rh-mysql56-mysql-debuginfo-0:5.6.37-5.el7.x86_64",
            "7Server-RHSCL-2.4-7.3.Z:rh-mysql56-mysql-devel-0:5.6.37-5.el7.x86_64",
            "7Server-RHSCL-2.4-7.3.Z:rh-mysql56-mysql-errmsg-0:5.6.37-5.el7.x86_64",
            "7Server-RHSCL-2.4-7.3.Z:rh-mysql56-mysql-server-0:5.6.37-5.el7.x86_64",
            "7Server-RHSCL-2.4-7.3.Z:rh-mysql56-mysql-test-0:5.6.37-5.el7.x86_64",
            "7Server-RHSCL-2.4:rh-mysql56-mysql-0:5.6.37-5.el7.src",
            "7Server-RHSCL-2.4:rh-mysql56-mysql-0:5.6.37-5.el7.x86_64",
            "7Server-RHSCL-2.4:rh-mysql56-mysql-bench-0:5.6.37-5.el7.x86_64",
            "7Server-RHSCL-2.4:rh-mysql56-mysql-common-0:5.6.37-5.el7.x86_64",
            "7Server-RHSCL-2.4:rh-mysql56-mysql-config-0:5.6.37-5.el7.x86_64",
            "7Server-RHSCL-2.4:rh-mysql56-mysql-debuginfo-0:5.6.37-5.el7.x86_64",
            "7Server-RHSCL-2.4:rh-mysql56-mysql-devel-0:5.6.37-5.el7.x86_64",
            "7Server-RHSCL-2.4:rh-mysql56-mysql-errmsg-0:5.6.37-5.el7.x86_64",
            "7Server-RHSCL-2.4:rh-mysql56-mysql-server-0:5.6.37-5.el7.x86_64",
            "7Server-RHSCL-2.4:rh-mysql56-mysql-test-0:5.6.37-5.el7.x86_64",
            "7Workstation-RHSCL-2.4:rh-mysql56-mysql-0:5.6.37-5.el7.src",
            "7Workstation-RHSCL-2.4:rh-mysql56-mysql-0:5.6.37-5.el7.x86_64",
            "7Workstation-RHSCL-2.4:rh-mysql56-mysql-bench-0:5.6.37-5.el7.x86_64",
            "7Workstation-RHSCL-2.4:rh-mysql56-mysql-common-0:5.6.37-5.el7.x86_64",
            "7Workstation-RHSCL-2.4:rh-mysql56-mysql-config-0:5.6.37-5.el7.x86_64",
            "7Workstation-RHSCL-2.4:rh-mysql56-mysql-debuginfo-0:5.6.37-5.el7.x86_64",
            "7Workstation-RHSCL-2.4:rh-mysql56-mysql-devel-0:5.6.37-5.el7.x86_64",
            "7Workstation-RHSCL-2.4:rh-mysql56-mysql-errmsg-0:5.6.37-5.el7.x86_64",
            "7Workstation-RHSCL-2.4:rh-mysql56-mysql-server-0:5.6.37-5.el7.x86_64",
            "7Workstation-RHSCL-2.4:rh-mysql56-mysql-test-0:5.6.37-5.el7.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "mysql: integer underflow in get_56_lenc_string() leading to DoS (CPU Apr 2017)"
    },
    {
      "cve": "CVE-2017-3600",
      "cwe": {
        "id": "CWE-77",
        "name": "Improper Neutralization of Special Elements used in a Command (\u0027Command Injection\u0027)"
      },
      "discovery_date": "2017-03-11T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "1433010"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "It was discovered that the mysql and mysqldump tools did not correctly handle database and table names containing newline characters. A database user with privileges to create databases or tables could cause the mysql command to execute arbitrary shell or SQL commands while restoring database backup created using the mysqldump tool.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "mysql: Incorrect input validation allowing code execution via mysqldump",
          "title": "Vulnerability summary"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "6Server-RHSCL-2.4-6.7.Z:rh-mysql56-mysql-0:5.6.37-5.el6.src",
          "6Server-RHSCL-2.4-6.7.Z:rh-mysql56-mysql-0:5.6.37-5.el6.x86_64",
          "6Server-RHSCL-2.4-6.7.Z:rh-mysql56-mysql-bench-0:5.6.37-5.el6.x86_64",
          "6Server-RHSCL-2.4-6.7.Z:rh-mysql56-mysql-common-0:5.6.37-5.el6.x86_64",
          "6Server-RHSCL-2.4-6.7.Z:rh-mysql56-mysql-config-0:5.6.37-5.el6.x86_64",
          "6Server-RHSCL-2.4-6.7.Z:rh-mysql56-mysql-debuginfo-0:5.6.37-5.el6.x86_64",
          "6Server-RHSCL-2.4-6.7.Z:rh-mysql56-mysql-devel-0:5.6.37-5.el6.x86_64",
          "6Server-RHSCL-2.4-6.7.Z:rh-mysql56-mysql-errmsg-0:5.6.37-5.el6.x86_64",
          "6Server-RHSCL-2.4-6.7.Z:rh-mysql56-mysql-server-0:5.6.37-5.el6.x86_64",
          "6Server-RHSCL-2.4-6.7.Z:rh-mysql56-mysql-test-0:5.6.37-5.el6.x86_64",
          "6Server-RHSCL-2.4:rh-mysql56-mysql-0:5.6.37-5.el6.src",
          "6Server-RHSCL-2.4:rh-mysql56-mysql-0:5.6.37-5.el6.x86_64",
          "6Server-RHSCL-2.4:rh-mysql56-mysql-bench-0:5.6.37-5.el6.x86_64",
          "6Server-RHSCL-2.4:rh-mysql56-mysql-common-0:5.6.37-5.el6.x86_64",
          "6Server-RHSCL-2.4:rh-mysql56-mysql-config-0:5.6.37-5.el6.x86_64",
          "6Server-RHSCL-2.4:rh-mysql56-mysql-debuginfo-0:5.6.37-5.el6.x86_64",
          "6Server-RHSCL-2.4:rh-mysql56-mysql-devel-0:5.6.37-5.el6.x86_64",
          "6Server-RHSCL-2.4:rh-mysql56-mysql-errmsg-0:5.6.37-5.el6.x86_64",
          "6Server-RHSCL-2.4:rh-mysql56-mysql-server-0:5.6.37-5.el6.x86_64",
          "6Server-RHSCL-2.4:rh-mysql56-mysql-test-0:5.6.37-5.el6.x86_64",
          "6Workstation-RHSCL-2.4:rh-mysql56-mysql-0:5.6.37-5.el6.src",
          "6Workstation-RHSCL-2.4:rh-mysql56-mysql-0:5.6.37-5.el6.x86_64",
          "6Workstation-RHSCL-2.4:rh-mysql56-mysql-bench-0:5.6.37-5.el6.x86_64",
          "6Workstation-RHSCL-2.4:rh-mysql56-mysql-common-0:5.6.37-5.el6.x86_64",
          "6Workstation-RHSCL-2.4:rh-mysql56-mysql-config-0:5.6.37-5.el6.x86_64",
          "6Workstation-RHSCL-2.4:rh-mysql56-mysql-debuginfo-0:5.6.37-5.el6.x86_64",
          "6Workstation-RHSCL-2.4:rh-mysql56-mysql-devel-0:5.6.37-5.el6.x86_64",
          "6Workstation-RHSCL-2.4:rh-mysql56-mysql-errmsg-0:5.6.37-5.el6.x86_64",
          "6Workstation-RHSCL-2.4:rh-mysql56-mysql-server-0:5.6.37-5.el6.x86_64",
          "6Workstation-RHSCL-2.4:rh-mysql56-mysql-test-0:5.6.37-5.el6.x86_64",
          "7Server-RHSCL-2.4-7.3.Z:rh-mysql56-mysql-0:5.6.37-5.el7.src",
          "7Server-RHSCL-2.4-7.3.Z:rh-mysql56-mysql-0:5.6.37-5.el7.x86_64",
          "7Server-RHSCL-2.4-7.3.Z:rh-mysql56-mysql-bench-0:5.6.37-5.el7.x86_64",
          "7Server-RHSCL-2.4-7.3.Z:rh-mysql56-mysql-common-0:5.6.37-5.el7.x86_64",
          "7Server-RHSCL-2.4-7.3.Z:rh-mysql56-mysql-config-0:5.6.37-5.el7.x86_64",
          "7Server-RHSCL-2.4-7.3.Z:rh-mysql56-mysql-debuginfo-0:5.6.37-5.el7.x86_64",
          "7Server-RHSCL-2.4-7.3.Z:rh-mysql56-mysql-devel-0:5.6.37-5.el7.x86_64",
          "7Server-RHSCL-2.4-7.3.Z:rh-mysql56-mysql-errmsg-0:5.6.37-5.el7.x86_64",
          "7Server-RHSCL-2.4-7.3.Z:rh-mysql56-mysql-server-0:5.6.37-5.el7.x86_64",
          "7Server-RHSCL-2.4-7.3.Z:rh-mysql56-mysql-test-0:5.6.37-5.el7.x86_64",
          "7Server-RHSCL-2.4:rh-mysql56-mysql-0:5.6.37-5.el7.src",
          "7Server-RHSCL-2.4:rh-mysql56-mysql-0:5.6.37-5.el7.x86_64",
          "7Server-RHSCL-2.4:rh-mysql56-mysql-bench-0:5.6.37-5.el7.x86_64",
          "7Server-RHSCL-2.4:rh-mysql56-mysql-common-0:5.6.37-5.el7.x86_64",
          "7Server-RHSCL-2.4:rh-mysql56-mysql-config-0:5.6.37-5.el7.x86_64",
          "7Server-RHSCL-2.4:rh-mysql56-mysql-debuginfo-0:5.6.37-5.el7.x86_64",
          "7Server-RHSCL-2.4:rh-mysql56-mysql-devel-0:5.6.37-5.el7.x86_64",
          "7Server-RHSCL-2.4:rh-mysql56-mysql-errmsg-0:5.6.37-5.el7.x86_64",
          "7Server-RHSCL-2.4:rh-mysql56-mysql-server-0:5.6.37-5.el7.x86_64",
          "7Server-RHSCL-2.4:rh-mysql56-mysql-test-0:5.6.37-5.el7.x86_64",
          "7Workstation-RHSCL-2.4:rh-mysql56-mysql-0:5.6.37-5.el7.src",
          "7Workstation-RHSCL-2.4:rh-mysql56-mysql-0:5.6.37-5.el7.x86_64",
          "7Workstation-RHSCL-2.4:rh-mysql56-mysql-bench-0:5.6.37-5.el7.x86_64",
          "7Workstation-RHSCL-2.4:rh-mysql56-mysql-common-0:5.6.37-5.el7.x86_64",
          "7Workstation-RHSCL-2.4:rh-mysql56-mysql-config-0:5.6.37-5.el7.x86_64",
          "7Workstation-RHSCL-2.4:rh-mysql56-mysql-debuginfo-0:5.6.37-5.el7.x86_64",
          "7Workstation-RHSCL-2.4:rh-mysql56-mysql-devel-0:5.6.37-5.el7.x86_64",
          "7Workstation-RHSCL-2.4:rh-mysql56-mysql-errmsg-0:5.6.37-5.el7.x86_64",
          "7Workstation-RHSCL-2.4:rh-mysql56-mysql-server-0:5.6.37-5.el7.x86_64",
          "7Workstation-RHSCL-2.4:rh-mysql56-mysql-test-0:5.6.37-5.el7.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2017-3600"
        },
        {
          "category": "external",
          "summary": "RHBZ#1433010",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1433010"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2017-3600",
          "url": "https://www.cve.org/CVERecord?id=CVE-2017-3600"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2017-3600",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2017-3600"
        },
        {
          "category": "external",
          "summary": "https://blog.tarq.io/cve-2016-5483-backdooring-mysqldump-backups/",
          "url": "https://blog.tarq.io/cve-2016-5483-backdooring-mysqldump-backups/"
        },
        {
          "category": "external",
          "summary": "https://blog.tarq.io/cve-2016-5483-galera-remote-command-execution-via-crafted-database-name/",
          "url": "https://blog.tarq.io/cve-2016-5483-galera-remote-command-execution-via-crafted-database-name/"
        }
      ],
      "release_date": "2017-03-09T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2017-09-21T07:42:12+00:00",
          "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAfter installing this update, the MySQL server daemon (mysqld) will be restarted automatically.",
          "product_ids": [
            "6Server-RHSCL-2.4-6.7.Z:rh-mysql56-mysql-0:5.6.37-5.el6.src",
            "6Server-RHSCL-2.4-6.7.Z:rh-mysql56-mysql-0:5.6.37-5.el6.x86_64",
            "6Server-RHSCL-2.4-6.7.Z:rh-mysql56-mysql-bench-0:5.6.37-5.el6.x86_64",
            "6Server-RHSCL-2.4-6.7.Z:rh-mysql56-mysql-common-0:5.6.37-5.el6.x86_64",
            "6Server-RHSCL-2.4-6.7.Z:rh-mysql56-mysql-config-0:5.6.37-5.el6.x86_64",
            "6Server-RHSCL-2.4-6.7.Z:rh-mysql56-mysql-debuginfo-0:5.6.37-5.el6.x86_64",
            "6Server-RHSCL-2.4-6.7.Z:rh-mysql56-mysql-devel-0:5.6.37-5.el6.x86_64",
            "6Server-RHSCL-2.4-6.7.Z:rh-mysql56-mysql-errmsg-0:5.6.37-5.el6.x86_64",
            "6Server-RHSCL-2.4-6.7.Z:rh-mysql56-mysql-server-0:5.6.37-5.el6.x86_64",
            "6Server-RHSCL-2.4-6.7.Z:rh-mysql56-mysql-test-0:5.6.37-5.el6.x86_64",
            "6Server-RHSCL-2.4:rh-mysql56-mysql-0:5.6.37-5.el6.src",
            "6Server-RHSCL-2.4:rh-mysql56-mysql-0:5.6.37-5.el6.x86_64",
            "6Server-RHSCL-2.4:rh-mysql56-mysql-bench-0:5.6.37-5.el6.x86_64",
            "6Server-RHSCL-2.4:rh-mysql56-mysql-common-0:5.6.37-5.el6.x86_64",
            "6Server-RHSCL-2.4:rh-mysql56-mysql-config-0:5.6.37-5.el6.x86_64",
            "6Server-RHSCL-2.4:rh-mysql56-mysql-debuginfo-0:5.6.37-5.el6.x86_64",
            "6Server-RHSCL-2.4:rh-mysql56-mysql-devel-0:5.6.37-5.el6.x86_64",
            "6Server-RHSCL-2.4:rh-mysql56-mysql-errmsg-0:5.6.37-5.el6.x86_64",
            "6Server-RHSCL-2.4:rh-mysql56-mysql-server-0:5.6.37-5.el6.x86_64",
            "6Server-RHSCL-2.4:rh-mysql56-mysql-test-0:5.6.37-5.el6.x86_64",
            "6Workstation-RHSCL-2.4:rh-mysql56-mysql-0:5.6.37-5.el6.src",
            "6Workstation-RHSCL-2.4:rh-mysql56-mysql-0:5.6.37-5.el6.x86_64",
            "6Workstation-RHSCL-2.4:rh-mysql56-mysql-bench-0:5.6.37-5.el6.x86_64",
            "6Workstation-RHSCL-2.4:rh-mysql56-mysql-common-0:5.6.37-5.el6.x86_64",
            "6Workstation-RHSCL-2.4:rh-mysql56-mysql-config-0:5.6.37-5.el6.x86_64",
            "6Workstation-RHSCL-2.4:rh-mysql56-mysql-debuginfo-0:5.6.37-5.el6.x86_64",
            "6Workstation-RHSCL-2.4:rh-mysql56-mysql-devel-0:5.6.37-5.el6.x86_64",
            "6Workstation-RHSCL-2.4:rh-mysql56-mysql-errmsg-0:5.6.37-5.el6.x86_64",
            "6Workstation-RHSCL-2.4:rh-mysql56-mysql-server-0:5.6.37-5.el6.x86_64",
            "6Workstation-RHSCL-2.4:rh-mysql56-mysql-test-0:5.6.37-5.el6.x86_64",
            "7Server-RHSCL-2.4-7.3.Z:rh-mysql56-mysql-0:5.6.37-5.el7.src",
            "7Server-RHSCL-2.4-7.3.Z:rh-mysql56-mysql-0:5.6.37-5.el7.x86_64",
            "7Server-RHSCL-2.4-7.3.Z:rh-mysql56-mysql-bench-0:5.6.37-5.el7.x86_64",
            "7Server-RHSCL-2.4-7.3.Z:rh-mysql56-mysql-common-0:5.6.37-5.el7.x86_64",
            "7Server-RHSCL-2.4-7.3.Z:rh-mysql56-mysql-config-0:5.6.37-5.el7.x86_64",
            "7Server-RHSCL-2.4-7.3.Z:rh-mysql56-mysql-debuginfo-0:5.6.37-5.el7.x86_64",
            "7Server-RHSCL-2.4-7.3.Z:rh-mysql56-mysql-devel-0:5.6.37-5.el7.x86_64",
            "7Server-RHSCL-2.4-7.3.Z:rh-mysql56-mysql-errmsg-0:5.6.37-5.el7.x86_64",
            "7Server-RHSCL-2.4-7.3.Z:rh-mysql56-mysql-server-0:5.6.37-5.el7.x86_64",
            "7Server-RHSCL-2.4-7.3.Z:rh-mysql56-mysql-test-0:5.6.37-5.el7.x86_64",
            "7Server-RHSCL-2.4:rh-mysql56-mysql-0:5.6.37-5.el7.src",
            "7Server-RHSCL-2.4:rh-mysql56-mysql-0:5.6.37-5.el7.x86_64",
            "7Server-RHSCL-2.4:rh-mysql56-mysql-bench-0:5.6.37-5.el7.x86_64",
            "7Server-RHSCL-2.4:rh-mysql56-mysql-common-0:5.6.37-5.el7.x86_64",
            "7Server-RHSCL-2.4:rh-mysql56-mysql-config-0:5.6.37-5.el7.x86_64",
            "7Server-RHSCL-2.4:rh-mysql56-mysql-debuginfo-0:5.6.37-5.el7.x86_64",
            "7Server-RHSCL-2.4:rh-mysql56-mysql-devel-0:5.6.37-5.el7.x86_64",
            "7Server-RHSCL-2.4:rh-mysql56-mysql-errmsg-0:5.6.37-5.el7.x86_64",
            "7Server-RHSCL-2.4:rh-mysql56-mysql-server-0:5.6.37-5.el7.x86_64",
            "7Server-RHSCL-2.4:rh-mysql56-mysql-test-0:5.6.37-5.el7.x86_64",
            "7Workstation-RHSCL-2.4:rh-mysql56-mysql-0:5.6.37-5.el7.src",
            "7Workstation-RHSCL-2.4:rh-mysql56-mysql-0:5.6.37-5.el7.x86_64",
            "7Workstation-RHSCL-2.4:rh-mysql56-mysql-bench-0:5.6.37-5.el7.x86_64",
            "7Workstation-RHSCL-2.4:rh-mysql56-mysql-common-0:5.6.37-5.el7.x86_64",
            "7Workstation-RHSCL-2.4:rh-mysql56-mysql-config-0:5.6.37-5.el7.x86_64",
            "7Workstation-RHSCL-2.4:rh-mysql56-mysql-debuginfo-0:5.6.37-5.el7.x86_64",
            "7Workstation-RHSCL-2.4:rh-mysql56-mysql-devel-0:5.6.37-5.el7.x86_64",
            "7Workstation-RHSCL-2.4:rh-mysql56-mysql-errmsg-0:5.6.37-5.el7.x86_64",
            "7Workstation-RHSCL-2.4:rh-mysql56-mysql-server-0:5.6.37-5.el7.x86_64",
            "7Workstation-RHSCL-2.4:rh-mysql56-mysql-test-0:5.6.37-5.el7.x86_64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2017:2787"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "HIGH",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 6.4,
            "baseSeverity": "MEDIUM",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "HIGH",
            "privilegesRequired": "HIGH",
            "scope": "UNCHANGED",
            "userInteraction": "REQUIRED",
            "vectorString": "CVSS:3.0/AV:N/AC:H/PR:H/UI:R/S:U/C:H/I:H/A:H",
            "version": "3.0"
          },
          "products": [
            "6Server-RHSCL-2.4-6.7.Z:rh-mysql56-mysql-0:5.6.37-5.el6.src",
            "6Server-RHSCL-2.4-6.7.Z:rh-mysql56-mysql-0:5.6.37-5.el6.x86_64",
            "6Server-RHSCL-2.4-6.7.Z:rh-mysql56-mysql-bench-0:5.6.37-5.el6.x86_64",
            "6Server-RHSCL-2.4-6.7.Z:rh-mysql56-mysql-common-0:5.6.37-5.el6.x86_64",
            "6Server-RHSCL-2.4-6.7.Z:rh-mysql56-mysql-config-0:5.6.37-5.el6.x86_64",
            "6Server-RHSCL-2.4-6.7.Z:rh-mysql56-mysql-debuginfo-0:5.6.37-5.el6.x86_64",
            "6Server-RHSCL-2.4-6.7.Z:rh-mysql56-mysql-devel-0:5.6.37-5.el6.x86_64",
            "6Server-RHSCL-2.4-6.7.Z:rh-mysql56-mysql-errmsg-0:5.6.37-5.el6.x86_64",
            "6Server-RHSCL-2.4-6.7.Z:rh-mysql56-mysql-server-0:5.6.37-5.el6.x86_64",
            "6Server-RHSCL-2.4-6.7.Z:rh-mysql56-mysql-test-0:5.6.37-5.el6.x86_64",
            "6Server-RHSCL-2.4:rh-mysql56-mysql-0:5.6.37-5.el6.src",
            "6Server-RHSCL-2.4:rh-mysql56-mysql-0:5.6.37-5.el6.x86_64",
            "6Server-RHSCL-2.4:rh-mysql56-mysql-bench-0:5.6.37-5.el6.x86_64",
            "6Server-RHSCL-2.4:rh-mysql56-mysql-common-0:5.6.37-5.el6.x86_64",
            "6Server-RHSCL-2.4:rh-mysql56-mysql-config-0:5.6.37-5.el6.x86_64",
            "6Server-RHSCL-2.4:rh-mysql56-mysql-debuginfo-0:5.6.37-5.el6.x86_64",
            "6Server-RHSCL-2.4:rh-mysql56-mysql-devel-0:5.6.37-5.el6.x86_64",
            "6Server-RHSCL-2.4:rh-mysql56-mysql-errmsg-0:5.6.37-5.el6.x86_64",
            "6Server-RHSCL-2.4:rh-mysql56-mysql-server-0:5.6.37-5.el6.x86_64",
            "6Server-RHSCL-2.4:rh-mysql56-mysql-test-0:5.6.37-5.el6.x86_64",
            "6Workstation-RHSCL-2.4:rh-mysql56-mysql-0:5.6.37-5.el6.src",
            "6Workstation-RHSCL-2.4:rh-mysql56-mysql-0:5.6.37-5.el6.x86_64",
            "6Workstation-RHSCL-2.4:rh-mysql56-mysql-bench-0:5.6.37-5.el6.x86_64",
            "6Workstation-RHSCL-2.4:rh-mysql56-mysql-common-0:5.6.37-5.el6.x86_64",
            "6Workstation-RHSCL-2.4:rh-mysql56-mysql-config-0:5.6.37-5.el6.x86_64",
            "6Workstation-RHSCL-2.4:rh-mysql56-mysql-debuginfo-0:5.6.37-5.el6.x86_64",
            "6Workstation-RHSCL-2.4:rh-mysql56-mysql-devel-0:5.6.37-5.el6.x86_64",
            "6Workstation-RHSCL-2.4:rh-mysql56-mysql-errmsg-0:5.6.37-5.el6.x86_64",
            "6Workstation-RHSCL-2.4:rh-mysql56-mysql-server-0:5.6.37-5.el6.x86_64",
            "6Workstation-RHSCL-2.4:rh-mysql56-mysql-test-0:5.6.37-5.el6.x86_64",
            "7Server-RHSCL-2.4-7.3.Z:rh-mysql56-mysql-0:5.6.37-5.el7.src",
            "7Server-RHSCL-2.4-7.3.Z:rh-mysql56-mysql-0:5.6.37-5.el7.x86_64",
            "7Server-RHSCL-2.4-7.3.Z:rh-mysql56-mysql-bench-0:5.6.37-5.el7.x86_64",
            "7Server-RHSCL-2.4-7.3.Z:rh-mysql56-mysql-common-0:5.6.37-5.el7.x86_64",
            "7Server-RHSCL-2.4-7.3.Z:rh-mysql56-mysql-config-0:5.6.37-5.el7.x86_64",
            "7Server-RHSCL-2.4-7.3.Z:rh-mysql56-mysql-debuginfo-0:5.6.37-5.el7.x86_64",
            "7Server-RHSCL-2.4-7.3.Z:rh-mysql56-mysql-devel-0:5.6.37-5.el7.x86_64",
            "7Server-RHSCL-2.4-7.3.Z:rh-mysql56-mysql-errmsg-0:5.6.37-5.el7.x86_64",
            "7Server-RHSCL-2.4-7.3.Z:rh-mysql56-mysql-server-0:5.6.37-5.el7.x86_64",
            "7Server-RHSCL-2.4-7.3.Z:rh-mysql56-mysql-test-0:5.6.37-5.el7.x86_64",
            "7Server-RHSCL-2.4:rh-mysql56-mysql-0:5.6.37-5.el7.src",
            "7Server-RHSCL-2.4:rh-mysql56-mysql-0:5.6.37-5.el7.x86_64",
            "7Server-RHSCL-2.4:rh-mysql56-mysql-bench-0:5.6.37-5.el7.x86_64",
            "7Server-RHSCL-2.4:rh-mysql56-mysql-common-0:5.6.37-5.el7.x86_64",
            "7Server-RHSCL-2.4:rh-mysql56-mysql-config-0:5.6.37-5.el7.x86_64",
            "7Server-RHSCL-2.4:rh-mysql56-mysql-debuginfo-0:5.6.37-5.el7.x86_64",
            "7Server-RHSCL-2.4:rh-mysql56-mysql-devel-0:5.6.37-5.el7.x86_64",
            "7Server-RHSCL-2.4:rh-mysql56-mysql-errmsg-0:5.6.37-5.el7.x86_64",
            "7Server-RHSCL-2.4:rh-mysql56-mysql-server-0:5.6.37-5.el7.x86_64",
            "7Server-RHSCL-2.4:rh-mysql56-mysql-test-0:5.6.37-5.el7.x86_64",
            "7Workstation-RHSCL-2.4:rh-mysql56-mysql-0:5.6.37-5.el7.src",
            "7Workstation-RHSCL-2.4:rh-mysql56-mysql-0:5.6.37-5.el7.x86_64",
            "7Workstation-RHSCL-2.4:rh-mysql56-mysql-bench-0:5.6.37-5.el7.x86_64",
            "7Workstation-RHSCL-2.4:rh-mysql56-mysql-common-0:5.6.37-5.el7.x86_64",
            "7Workstation-RHSCL-2.4:rh-mysql56-mysql-config-0:5.6.37-5.el7.x86_64",
            "7Workstation-RHSCL-2.4:rh-mysql56-mysql-debuginfo-0:5.6.37-5.el7.x86_64",
            "7Workstation-RHSCL-2.4:rh-mysql56-mysql-devel-0:5.6.37-5.el7.x86_64",
            "7Workstation-RHSCL-2.4:rh-mysql56-mysql-errmsg-0:5.6.37-5.el7.x86_64",
            "7Workstation-RHSCL-2.4:rh-mysql56-mysql-server-0:5.6.37-5.el7.x86_64",
            "7Workstation-RHSCL-2.4:rh-mysql56-mysql-test-0:5.6.37-5.el7.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Moderate"
        }
      ],
      "title": "mysql: Incorrect input validation allowing code execution via mysqldump"
    },
    {
      "cve": "CVE-2017-3633",
      "discovery_date": "2017-07-19T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "1472683"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Memcached). Supported versions that are affected are 5.6.36 and earlier and 5.7.18 and earlier. Difficult to exploit vulnerability allows unauthenticated attacker with network access via Memcached to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server as well as unauthorized update, insert or delete access to some of MySQL Server accessible data. CVSS 3.0 Base Score 6.5 (Integrity and Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:H).",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "mysql: Server: Memcached unspecified vulnerability (CPU Jul 2017)",
          "title": "Vulnerability summary"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "6Server-RHSCL-2.4-6.7.Z:rh-mysql56-mysql-0:5.6.37-5.el6.src",
          "6Server-RHSCL-2.4-6.7.Z:rh-mysql56-mysql-0:5.6.37-5.el6.x86_64",
          "6Server-RHSCL-2.4-6.7.Z:rh-mysql56-mysql-bench-0:5.6.37-5.el6.x86_64",
          "6Server-RHSCL-2.4-6.7.Z:rh-mysql56-mysql-common-0:5.6.37-5.el6.x86_64",
          "6Server-RHSCL-2.4-6.7.Z:rh-mysql56-mysql-config-0:5.6.37-5.el6.x86_64",
          "6Server-RHSCL-2.4-6.7.Z:rh-mysql56-mysql-debuginfo-0:5.6.37-5.el6.x86_64",
          "6Server-RHSCL-2.4-6.7.Z:rh-mysql56-mysql-devel-0:5.6.37-5.el6.x86_64",
          "6Server-RHSCL-2.4-6.7.Z:rh-mysql56-mysql-errmsg-0:5.6.37-5.el6.x86_64",
          "6Server-RHSCL-2.4-6.7.Z:rh-mysql56-mysql-server-0:5.6.37-5.el6.x86_64",
          "6Server-RHSCL-2.4-6.7.Z:rh-mysql56-mysql-test-0:5.6.37-5.el6.x86_64",
          "6Server-RHSCL-2.4:rh-mysql56-mysql-0:5.6.37-5.el6.src",
          "6Server-RHSCL-2.4:rh-mysql56-mysql-0:5.6.37-5.el6.x86_64",
          "6Server-RHSCL-2.4:rh-mysql56-mysql-bench-0:5.6.37-5.el6.x86_64",
          "6Server-RHSCL-2.4:rh-mysql56-mysql-common-0:5.6.37-5.el6.x86_64",
          "6Server-RHSCL-2.4:rh-mysql56-mysql-config-0:5.6.37-5.el6.x86_64",
          "6Server-RHSCL-2.4:rh-mysql56-mysql-debuginfo-0:5.6.37-5.el6.x86_64",
          "6Server-RHSCL-2.4:rh-mysql56-mysql-devel-0:5.6.37-5.el6.x86_64",
          "6Server-RHSCL-2.4:rh-mysql56-mysql-errmsg-0:5.6.37-5.el6.x86_64",
          "6Server-RHSCL-2.4:rh-mysql56-mysql-server-0:5.6.37-5.el6.x86_64",
          "6Server-RHSCL-2.4:rh-mysql56-mysql-test-0:5.6.37-5.el6.x86_64",
          "6Workstation-RHSCL-2.4:rh-mysql56-mysql-0:5.6.37-5.el6.src",
          "6Workstation-RHSCL-2.4:rh-mysql56-mysql-0:5.6.37-5.el6.x86_64",
          "6Workstation-RHSCL-2.4:rh-mysql56-mysql-bench-0:5.6.37-5.el6.x86_64",
          "6Workstation-RHSCL-2.4:rh-mysql56-mysql-common-0:5.6.37-5.el6.x86_64",
          "6Workstation-RHSCL-2.4:rh-mysql56-mysql-config-0:5.6.37-5.el6.x86_64",
          "6Workstation-RHSCL-2.4:rh-mysql56-mysql-debuginfo-0:5.6.37-5.el6.x86_64",
          "6Workstation-RHSCL-2.4:rh-mysql56-mysql-devel-0:5.6.37-5.el6.x86_64",
          "6Workstation-RHSCL-2.4:rh-mysql56-mysql-errmsg-0:5.6.37-5.el6.x86_64",
          "6Workstation-RHSCL-2.4:rh-mysql56-mysql-server-0:5.6.37-5.el6.x86_64",
          "6Workstation-RHSCL-2.4:rh-mysql56-mysql-test-0:5.6.37-5.el6.x86_64",
          "7Server-RHSCL-2.4-7.3.Z:rh-mysql56-mysql-0:5.6.37-5.el7.src",
          "7Server-RHSCL-2.4-7.3.Z:rh-mysql56-mysql-0:5.6.37-5.el7.x86_64",
          "7Server-RHSCL-2.4-7.3.Z:rh-mysql56-mysql-bench-0:5.6.37-5.el7.x86_64",
          "7Server-RHSCL-2.4-7.3.Z:rh-mysql56-mysql-common-0:5.6.37-5.el7.x86_64",
          "7Server-RHSCL-2.4-7.3.Z:rh-mysql56-mysql-config-0:5.6.37-5.el7.x86_64",
          "7Server-RHSCL-2.4-7.3.Z:rh-mysql56-mysql-debuginfo-0:5.6.37-5.el7.x86_64",
          "7Server-RHSCL-2.4-7.3.Z:rh-mysql56-mysql-devel-0:5.6.37-5.el7.x86_64",
          "7Server-RHSCL-2.4-7.3.Z:rh-mysql56-mysql-errmsg-0:5.6.37-5.el7.x86_64",
          "7Server-RHSCL-2.4-7.3.Z:rh-mysql56-mysql-server-0:5.6.37-5.el7.x86_64",
          "7Server-RHSCL-2.4-7.3.Z:rh-mysql56-mysql-test-0:5.6.37-5.el7.x86_64",
          "7Server-RHSCL-2.4:rh-mysql56-mysql-0:5.6.37-5.el7.src",
          "7Server-RHSCL-2.4:rh-mysql56-mysql-0:5.6.37-5.el7.x86_64",
          "7Server-RHSCL-2.4:rh-mysql56-mysql-bench-0:5.6.37-5.el7.x86_64",
          "7Server-RHSCL-2.4:rh-mysql56-mysql-common-0:5.6.37-5.el7.x86_64",
          "7Server-RHSCL-2.4:rh-mysql56-mysql-config-0:5.6.37-5.el7.x86_64",
          "7Server-RHSCL-2.4:rh-mysql56-mysql-debuginfo-0:5.6.37-5.el7.x86_64",
          "7Server-RHSCL-2.4:rh-mysql56-mysql-devel-0:5.6.37-5.el7.x86_64",
          "7Server-RHSCL-2.4:rh-mysql56-mysql-errmsg-0:5.6.37-5.el7.x86_64",
          "7Server-RHSCL-2.4:rh-mysql56-mysql-server-0:5.6.37-5.el7.x86_64",
          "7Server-RHSCL-2.4:rh-mysql56-mysql-test-0:5.6.37-5.el7.x86_64",
          "7Workstation-RHSCL-2.4:rh-mysql56-mysql-0:5.6.37-5.el7.src",
          "7Workstation-RHSCL-2.4:rh-mysql56-mysql-0:5.6.37-5.el7.x86_64",
          "7Workstation-RHSCL-2.4:rh-mysql56-mysql-bench-0:5.6.37-5.el7.x86_64",
          "7Workstation-RHSCL-2.4:rh-mysql56-mysql-common-0:5.6.37-5.el7.x86_64",
          "7Workstation-RHSCL-2.4:rh-mysql56-mysql-config-0:5.6.37-5.el7.x86_64",
          "7Workstation-RHSCL-2.4:rh-mysql56-mysql-debuginfo-0:5.6.37-5.el7.x86_64",
          "7Workstation-RHSCL-2.4:rh-mysql56-mysql-devel-0:5.6.37-5.el7.x86_64",
          "7Workstation-RHSCL-2.4:rh-mysql56-mysql-errmsg-0:5.6.37-5.el7.x86_64",
          "7Workstation-RHSCL-2.4:rh-mysql56-mysql-server-0:5.6.37-5.el7.x86_64",
          "7Workstation-RHSCL-2.4:rh-mysql56-mysql-test-0:5.6.37-5.el7.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2017-3633"
        },
        {
          "category": "external",
          "summary": "RHBZ#1472683",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1472683"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2017-3633",
          "url": "https://www.cve.org/CVERecord?id=CVE-2017-3633"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2017-3633",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2017-3633"
        },
        {
          "category": "external",
          "summary": "http://www.oracle.com/technetwork/security-advisory/cpujul2017-3236622.html#AppendixMSQL",
          "url": "http://www.oracle.com/technetwork/security-advisory/cpujul2017-3236622.html#AppendixMSQL"
        }
      ],
      "release_date": "2017-07-19T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2017-09-21T07:42:12+00:00",
          "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAfter installing this update, the MySQL server daemon (mysqld) will be restarted automatically.",
          "product_ids": [
            "6Server-RHSCL-2.4-6.7.Z:rh-mysql56-mysql-0:5.6.37-5.el6.src",
            "6Server-RHSCL-2.4-6.7.Z:rh-mysql56-mysql-0:5.6.37-5.el6.x86_64",
            "6Server-RHSCL-2.4-6.7.Z:rh-mysql56-mysql-bench-0:5.6.37-5.el6.x86_64",
            "6Server-RHSCL-2.4-6.7.Z:rh-mysql56-mysql-common-0:5.6.37-5.el6.x86_64",
            "6Server-RHSCL-2.4-6.7.Z:rh-mysql56-mysql-config-0:5.6.37-5.el6.x86_64",
            "6Server-RHSCL-2.4-6.7.Z:rh-mysql56-mysql-debuginfo-0:5.6.37-5.el6.x86_64",
            "6Server-RHSCL-2.4-6.7.Z:rh-mysql56-mysql-devel-0:5.6.37-5.el6.x86_64",
            "6Server-RHSCL-2.4-6.7.Z:rh-mysql56-mysql-errmsg-0:5.6.37-5.el6.x86_64",
            "6Server-RHSCL-2.4-6.7.Z:rh-mysql56-mysql-server-0:5.6.37-5.el6.x86_64",
            "6Server-RHSCL-2.4-6.7.Z:rh-mysql56-mysql-test-0:5.6.37-5.el6.x86_64",
            "6Server-RHSCL-2.4:rh-mysql56-mysql-0:5.6.37-5.el6.src",
            "6Server-RHSCL-2.4:rh-mysql56-mysql-0:5.6.37-5.el6.x86_64",
            "6Server-RHSCL-2.4:rh-mysql56-mysql-bench-0:5.6.37-5.el6.x86_64",
            "6Server-RHSCL-2.4:rh-mysql56-mysql-common-0:5.6.37-5.el6.x86_64",
            "6Server-RHSCL-2.4:rh-mysql56-mysql-config-0:5.6.37-5.el6.x86_64",
            "6Server-RHSCL-2.4:rh-mysql56-mysql-debuginfo-0:5.6.37-5.el6.x86_64",
            "6Server-RHSCL-2.4:rh-mysql56-mysql-devel-0:5.6.37-5.el6.x86_64",
            "6Server-RHSCL-2.4:rh-mysql56-mysql-errmsg-0:5.6.37-5.el6.x86_64",
            "6Server-RHSCL-2.4:rh-mysql56-mysql-server-0:5.6.37-5.el6.x86_64",
            "6Server-RHSCL-2.4:rh-mysql56-mysql-test-0:5.6.37-5.el6.x86_64",
            "6Workstation-RHSCL-2.4:rh-mysql56-mysql-0:5.6.37-5.el6.src",
            "6Workstation-RHSCL-2.4:rh-mysql56-mysql-0:5.6.37-5.el6.x86_64",
            "6Workstation-RHSCL-2.4:rh-mysql56-mysql-bench-0:5.6.37-5.el6.x86_64",
            "6Workstation-RHSCL-2.4:rh-mysql56-mysql-common-0:5.6.37-5.el6.x86_64",
            "6Workstation-RHSCL-2.4:rh-mysql56-mysql-config-0:5.6.37-5.el6.x86_64",
            "6Workstation-RHSCL-2.4:rh-mysql56-mysql-debuginfo-0:5.6.37-5.el6.x86_64",
            "6Workstation-RHSCL-2.4:rh-mysql56-mysql-devel-0:5.6.37-5.el6.x86_64",
            "6Workstation-RHSCL-2.4:rh-mysql56-mysql-errmsg-0:5.6.37-5.el6.x86_64",
            "6Workstation-RHSCL-2.4:rh-mysql56-mysql-server-0:5.6.37-5.el6.x86_64",
            "6Workstation-RHSCL-2.4:rh-mysql56-mysql-test-0:5.6.37-5.el6.x86_64",
            "7Server-RHSCL-2.4-7.3.Z:rh-mysql56-mysql-0:5.6.37-5.el7.src",
            "7Server-RHSCL-2.4-7.3.Z:rh-mysql56-mysql-0:5.6.37-5.el7.x86_64",
            "7Server-RHSCL-2.4-7.3.Z:rh-mysql56-mysql-bench-0:5.6.37-5.el7.x86_64",
            "7Server-RHSCL-2.4-7.3.Z:rh-mysql56-mysql-common-0:5.6.37-5.el7.x86_64",
            "7Server-RHSCL-2.4-7.3.Z:rh-mysql56-mysql-config-0:5.6.37-5.el7.x86_64",
            "7Server-RHSCL-2.4-7.3.Z:rh-mysql56-mysql-debuginfo-0:5.6.37-5.el7.x86_64",
            "7Server-RHSCL-2.4-7.3.Z:rh-mysql56-mysql-devel-0:5.6.37-5.el7.x86_64",
            "7Server-RHSCL-2.4-7.3.Z:rh-mysql56-mysql-errmsg-0:5.6.37-5.el7.x86_64",
            "7Server-RHSCL-2.4-7.3.Z:rh-mysql56-mysql-server-0:5.6.37-5.el7.x86_64",
            "7Server-RHSCL-2.4-7.3.Z:rh-mysql56-mysql-test-0:5.6.37-5.el7.x86_64",
            "7Server-RHSCL-2.4:rh-mysql56-mysql-0:5.6.37-5.el7.src",
            "7Server-RHSCL-2.4:rh-mysql56-mysql-0:5.6.37-5.el7.x86_64",
            "7Server-RHSCL-2.4:rh-mysql56-mysql-bench-0:5.6.37-5.el7.x86_64",
            "7Server-RHSCL-2.4:rh-mysql56-mysql-common-0:5.6.37-5.el7.x86_64",
            "7Server-RHSCL-2.4:rh-mysql56-mysql-config-0:5.6.37-5.el7.x86_64",
            "7Server-RHSCL-2.4:rh-mysql56-mysql-debuginfo-0:5.6.37-5.el7.x86_64",
            "7Server-RHSCL-2.4:rh-mysql56-mysql-devel-0:5.6.37-5.el7.x86_64",
            "7Server-RHSCL-2.4:rh-mysql56-mysql-errmsg-0:5.6.37-5.el7.x86_64",
            "7Server-RHSCL-2.4:rh-mysql56-mysql-server-0:5.6.37-5.el7.x86_64",
            "7Server-RHSCL-2.4:rh-mysql56-mysql-test-0:5.6.37-5.el7.x86_64",
            "7Workstation-RHSCL-2.4:rh-mysql56-mysql-0:5.6.37-5.el7.src",
            "7Workstation-RHSCL-2.4:rh-mysql56-mysql-0:5.6.37-5.el7.x86_64",
            "7Workstation-RHSCL-2.4:rh-mysql56-mysql-bench-0:5.6.37-5.el7.x86_64",
            "7Workstation-RHSCL-2.4:rh-mysql56-mysql-common-0:5.6.37-5.el7.x86_64",
            "7Workstation-RHSCL-2.4:rh-mysql56-mysql-config-0:5.6.37-5.el7.x86_64",
            "7Workstation-RHSCL-2.4:rh-mysql56-mysql-debuginfo-0:5.6.37-5.el7.x86_64",
            "7Workstation-RHSCL-2.4:rh-mysql56-mysql-devel-0:5.6.37-5.el7.x86_64",
            "7Workstation-RHSCL-2.4:rh-mysql56-mysql-errmsg-0:5.6.37-5.el7.x86_64",
            "7Workstation-RHSCL-2.4:rh-mysql56-mysql-server-0:5.6.37-5.el7.x86_64",
            "7Workstation-RHSCL-2.4:rh-mysql56-mysql-test-0:5.6.37-5.el7.x86_64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2017:2787"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "HIGH",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 6.5,
            "baseSeverity": "MEDIUM",
            "confidentialityImpact": "NONE",
            "integrityImpact": "LOW",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:H",
            "version": "3.0"
          },
          "products": [
            "6Server-RHSCL-2.4-6.7.Z:rh-mysql56-mysql-0:5.6.37-5.el6.src",
            "6Server-RHSCL-2.4-6.7.Z:rh-mysql56-mysql-0:5.6.37-5.el6.x86_64",
            "6Server-RHSCL-2.4-6.7.Z:rh-mysql56-mysql-bench-0:5.6.37-5.el6.x86_64",
            "6Server-RHSCL-2.4-6.7.Z:rh-mysql56-mysql-common-0:5.6.37-5.el6.x86_64",
            "6Server-RHSCL-2.4-6.7.Z:rh-mysql56-mysql-config-0:5.6.37-5.el6.x86_64",
            "6Server-RHSCL-2.4-6.7.Z:rh-mysql56-mysql-debuginfo-0:5.6.37-5.el6.x86_64",
            "6Server-RHSCL-2.4-6.7.Z:rh-mysql56-mysql-devel-0:5.6.37-5.el6.x86_64",
            "6Server-RHSCL-2.4-6.7.Z:rh-mysql56-mysql-errmsg-0:5.6.37-5.el6.x86_64",
            "6Server-RHSCL-2.4-6.7.Z:rh-mysql56-mysql-server-0:5.6.37-5.el6.x86_64",
            "6Server-RHSCL-2.4-6.7.Z:rh-mysql56-mysql-test-0:5.6.37-5.el6.x86_64",
            "6Server-RHSCL-2.4:rh-mysql56-mysql-0:5.6.37-5.el6.src",
            "6Server-RHSCL-2.4:rh-mysql56-mysql-0:5.6.37-5.el6.x86_64",
            "6Server-RHSCL-2.4:rh-mysql56-mysql-bench-0:5.6.37-5.el6.x86_64",
            "6Server-RHSCL-2.4:rh-mysql56-mysql-common-0:5.6.37-5.el6.x86_64",
            "6Server-RHSCL-2.4:rh-mysql56-mysql-config-0:5.6.37-5.el6.x86_64",
            "6Server-RHSCL-2.4:rh-mysql56-mysql-debuginfo-0:5.6.37-5.el6.x86_64",
            "6Server-RHSCL-2.4:rh-mysql56-mysql-devel-0:5.6.37-5.el6.x86_64",
            "6Server-RHSCL-2.4:rh-mysql56-mysql-errmsg-0:5.6.37-5.el6.x86_64",
            "6Server-RHSCL-2.4:rh-mysql56-mysql-server-0:5.6.37-5.el6.x86_64",
            "6Server-RHSCL-2.4:rh-mysql56-mysql-test-0:5.6.37-5.el6.x86_64",
            "6Workstation-RHSCL-2.4:rh-mysql56-mysql-0:5.6.37-5.el6.src",
            "6Workstation-RHSCL-2.4:rh-mysql56-mysql-0:5.6.37-5.el6.x86_64",
            "6Workstation-RHSCL-2.4:rh-mysql56-mysql-bench-0:5.6.37-5.el6.x86_64",
            "6Workstation-RHSCL-2.4:rh-mysql56-mysql-common-0:5.6.37-5.el6.x86_64",
            "6Workstation-RHSCL-2.4:rh-mysql56-mysql-config-0:5.6.37-5.el6.x86_64",
            "6Workstation-RHSCL-2.4:rh-mysql56-mysql-debuginfo-0:5.6.37-5.el6.x86_64",
            "6Workstation-RHSCL-2.4:rh-mysql56-mysql-devel-0:5.6.37-5.el6.x86_64",
            "6Workstation-RHSCL-2.4:rh-mysql56-mysql-errmsg-0:5.6.37-5.el6.x86_64",
            "6Workstation-RHSCL-2.4:rh-mysql56-mysql-server-0:5.6.37-5.el6.x86_64",
            "6Workstation-RHSCL-2.4:rh-mysql56-mysql-test-0:5.6.37-5.el6.x86_64",
            "7Server-RHSCL-2.4-7.3.Z:rh-mysql56-mysql-0:5.6.37-5.el7.src",
            "7Server-RHSCL-2.4-7.3.Z:rh-mysql56-mysql-0:5.6.37-5.el7.x86_64",
            "7Server-RHSCL-2.4-7.3.Z:rh-mysql56-mysql-bench-0:5.6.37-5.el7.x86_64",
            "7Server-RHSCL-2.4-7.3.Z:rh-mysql56-mysql-common-0:5.6.37-5.el7.x86_64",
            "7Server-RHSCL-2.4-7.3.Z:rh-mysql56-mysql-config-0:5.6.37-5.el7.x86_64",
            "7Server-RHSCL-2.4-7.3.Z:rh-mysql56-mysql-debuginfo-0:5.6.37-5.el7.x86_64",
            "7Server-RHSCL-2.4-7.3.Z:rh-mysql56-mysql-devel-0:5.6.37-5.el7.x86_64",
            "7Server-RHSCL-2.4-7.3.Z:rh-mysql56-mysql-errmsg-0:5.6.37-5.el7.x86_64",
            "7Server-RHSCL-2.4-7.3.Z:rh-mysql56-mysql-server-0:5.6.37-5.el7.x86_64",
            "7Server-RHSCL-2.4-7.3.Z:rh-mysql56-mysql-test-0:5.6.37-5.el7.x86_64",
            "7Server-RHSCL-2.4:rh-mysql56-mysql-0:5.6.37-5.el7.src",
            "7Server-RHSCL-2.4:rh-mysql56-mysql-0:5.6.37-5.el7.x86_64",
            "7Server-RHSCL-2.4:rh-mysql56-mysql-bench-0:5.6.37-5.el7.x86_64",
            "7Server-RHSCL-2.4:rh-mysql56-mysql-common-0:5.6.37-5.el7.x86_64",
            "7Server-RHSCL-2.4:rh-mysql56-mysql-config-0:5.6.37-5.el7.x86_64",
            "7Server-RHSCL-2.4:rh-mysql56-mysql-debuginfo-0:5.6.37-5.el7.x86_64",
            "7Server-RHSCL-2.4:rh-mysql56-mysql-devel-0:5.6.37-5.el7.x86_64",
            "7Server-RHSCL-2.4:rh-mysql56-mysql-errmsg-0:5.6.37-5.el7.x86_64",
            "7Server-RHSCL-2.4:rh-mysql56-mysql-server-0:5.6.37-5.el7.x86_64",
            "7Server-RHSCL-2.4:rh-mysql56-mysql-test-0:5.6.37-5.el7.x86_64",
            "7Workstation-RHSCL-2.4:rh-mysql56-mysql-0:5.6.37-5.el7.src",
            "7Workstation-RHSCL-2.4:rh-mysql56-mysql-0:5.6.37-5.el7.x86_64",
            "7Workstation-RHSCL-2.4:rh-mysql56-mysql-bench-0:5.6.37-5.el7.x86_64",
            "7Workstation-RHSCL-2.4:rh-mysql56-mysql-common-0:5.6.37-5.el7.x86_64",
            "7Workstation-RHSCL-2.4:rh-mysql56-mysql-config-0:5.6.37-5.el7.x86_64",
            "7Workstation-RHSCL-2.4:rh-mysql56-mysql-debuginfo-0:5.6.37-5.el7.x86_64",
            "7Workstation-RHSCL-2.4:rh-mysql56-mysql-devel-0:5.6.37-5.el7.x86_64",
            "7Workstation-RHSCL-2.4:rh-mysql56-mysql-errmsg-0:5.6.37-5.el7.x86_64",
            "7Workstation-RHSCL-2.4:rh-mysql56-mysql-server-0:5.6.37-5.el7.x86_64",
            "7Workstation-RHSCL-2.4:rh-mysql56-mysql-test-0:5.6.37-5.el7.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Moderate"
        }
      ],
      "title": "mysql: Server: Memcached unspecified vulnerability (CPU Jul 2017)"
    },
    {
      "cve": "CVE-2017-3634",
      "discovery_date": "2017-07-19T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "1472684"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: DML). Supported versions that are affected are 5.6.36 and earlier and 5.7.18 and earlier. Easily exploitable vulnerability allows low privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.0 Base Score 6.5 (Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H).",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "mysql: Server: DML unspecified vulnerability (CPU Jul 2017)",
          "title": "Vulnerability summary"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "6Server-RHSCL-2.4-6.7.Z:rh-mysql56-mysql-0:5.6.37-5.el6.src",
          "6Server-RHSCL-2.4-6.7.Z:rh-mysql56-mysql-0:5.6.37-5.el6.x86_64",
          "6Server-RHSCL-2.4-6.7.Z:rh-mysql56-mysql-bench-0:5.6.37-5.el6.x86_64",
          "6Server-RHSCL-2.4-6.7.Z:rh-mysql56-mysql-common-0:5.6.37-5.el6.x86_64",
          "6Server-RHSCL-2.4-6.7.Z:rh-mysql56-mysql-config-0:5.6.37-5.el6.x86_64",
          "6Server-RHSCL-2.4-6.7.Z:rh-mysql56-mysql-debuginfo-0:5.6.37-5.el6.x86_64",
          "6Server-RHSCL-2.4-6.7.Z:rh-mysql56-mysql-devel-0:5.6.37-5.el6.x86_64",
          "6Server-RHSCL-2.4-6.7.Z:rh-mysql56-mysql-errmsg-0:5.6.37-5.el6.x86_64",
          "6Server-RHSCL-2.4-6.7.Z:rh-mysql56-mysql-server-0:5.6.37-5.el6.x86_64",
          "6Server-RHSCL-2.4-6.7.Z:rh-mysql56-mysql-test-0:5.6.37-5.el6.x86_64",
          "6Server-RHSCL-2.4:rh-mysql56-mysql-0:5.6.37-5.el6.src",
          "6Server-RHSCL-2.4:rh-mysql56-mysql-0:5.6.37-5.el6.x86_64",
          "6Server-RHSCL-2.4:rh-mysql56-mysql-bench-0:5.6.37-5.el6.x86_64",
          "6Server-RHSCL-2.4:rh-mysql56-mysql-common-0:5.6.37-5.el6.x86_64",
          "6Server-RHSCL-2.4:rh-mysql56-mysql-config-0:5.6.37-5.el6.x86_64",
          "6Server-RHSCL-2.4:rh-mysql56-mysql-debuginfo-0:5.6.37-5.el6.x86_64",
          "6Server-RHSCL-2.4:rh-mysql56-mysql-devel-0:5.6.37-5.el6.x86_64",
          "6Server-RHSCL-2.4:rh-mysql56-mysql-errmsg-0:5.6.37-5.el6.x86_64",
          "6Server-RHSCL-2.4:rh-mysql56-mysql-server-0:5.6.37-5.el6.x86_64",
          "6Server-RHSCL-2.4:rh-mysql56-mysql-test-0:5.6.37-5.el6.x86_64",
          "6Workstation-RHSCL-2.4:rh-mysql56-mysql-0:5.6.37-5.el6.src",
          "6Workstation-RHSCL-2.4:rh-mysql56-mysql-0:5.6.37-5.el6.x86_64",
          "6Workstation-RHSCL-2.4:rh-mysql56-mysql-bench-0:5.6.37-5.el6.x86_64",
          "6Workstation-RHSCL-2.4:rh-mysql56-mysql-common-0:5.6.37-5.el6.x86_64",
          "6Workstation-RHSCL-2.4:rh-mysql56-mysql-config-0:5.6.37-5.el6.x86_64",
          "6Workstation-RHSCL-2.4:rh-mysql56-mysql-debuginfo-0:5.6.37-5.el6.x86_64",
          "6Workstation-RHSCL-2.4:rh-mysql56-mysql-devel-0:5.6.37-5.el6.x86_64",
          "6Workstation-RHSCL-2.4:rh-mysql56-mysql-errmsg-0:5.6.37-5.el6.x86_64",
          "6Workstation-RHSCL-2.4:rh-mysql56-mysql-server-0:5.6.37-5.el6.x86_64",
          "6Workstation-RHSCL-2.4:rh-mysql56-mysql-test-0:5.6.37-5.el6.x86_64",
          "7Server-RHSCL-2.4-7.3.Z:rh-mysql56-mysql-0:5.6.37-5.el7.src",
          "7Server-RHSCL-2.4-7.3.Z:rh-mysql56-mysql-0:5.6.37-5.el7.x86_64",
          "7Server-RHSCL-2.4-7.3.Z:rh-mysql56-mysql-bench-0:5.6.37-5.el7.x86_64",
          "7Server-RHSCL-2.4-7.3.Z:rh-mysql56-mysql-common-0:5.6.37-5.el7.x86_64",
          "7Server-RHSCL-2.4-7.3.Z:rh-mysql56-mysql-config-0:5.6.37-5.el7.x86_64",
          "7Server-RHSCL-2.4-7.3.Z:rh-mysql56-mysql-debuginfo-0:5.6.37-5.el7.x86_64",
          "7Server-RHSCL-2.4-7.3.Z:rh-mysql56-mysql-devel-0:5.6.37-5.el7.x86_64",
          "7Server-RHSCL-2.4-7.3.Z:rh-mysql56-mysql-errmsg-0:5.6.37-5.el7.x86_64",
          "7Server-RHSCL-2.4-7.3.Z:rh-mysql56-mysql-server-0:5.6.37-5.el7.x86_64",
          "7Server-RHSCL-2.4-7.3.Z:rh-mysql56-mysql-test-0:5.6.37-5.el7.x86_64",
          "7Server-RHSCL-2.4:rh-mysql56-mysql-0:5.6.37-5.el7.src",
          "7Server-RHSCL-2.4:rh-mysql56-mysql-0:5.6.37-5.el7.x86_64",
          "7Server-RHSCL-2.4:rh-mysql56-mysql-bench-0:5.6.37-5.el7.x86_64",
          "7Server-RHSCL-2.4:rh-mysql56-mysql-common-0:5.6.37-5.el7.x86_64",
          "7Server-RHSCL-2.4:rh-mysql56-mysql-config-0:5.6.37-5.el7.x86_64",
          "7Server-RHSCL-2.4:rh-mysql56-mysql-debuginfo-0:5.6.37-5.el7.x86_64",
          "7Server-RHSCL-2.4:rh-mysql56-mysql-devel-0:5.6.37-5.el7.x86_64",
          "7Server-RHSCL-2.4:rh-mysql56-mysql-errmsg-0:5.6.37-5.el7.x86_64",
          "7Server-RHSCL-2.4:rh-mysql56-mysql-server-0:5.6.37-5.el7.x86_64",
          "7Server-RHSCL-2.4:rh-mysql56-mysql-test-0:5.6.37-5.el7.x86_64",
          "7Workstation-RHSCL-2.4:rh-mysql56-mysql-0:5.6.37-5.el7.src",
          "7Workstation-RHSCL-2.4:rh-mysql56-mysql-0:5.6.37-5.el7.x86_64",
          "7Workstation-RHSCL-2.4:rh-mysql56-mysql-bench-0:5.6.37-5.el7.x86_64",
          "7Workstation-RHSCL-2.4:rh-mysql56-mysql-common-0:5.6.37-5.el7.x86_64",
          "7Workstation-RHSCL-2.4:rh-mysql56-mysql-config-0:5.6.37-5.el7.x86_64",
          "7Workstation-RHSCL-2.4:rh-mysql56-mysql-debuginfo-0:5.6.37-5.el7.x86_64",
          "7Workstation-RHSCL-2.4:rh-mysql56-mysql-devel-0:5.6.37-5.el7.x86_64",
          "7Workstation-RHSCL-2.4:rh-mysql56-mysql-errmsg-0:5.6.37-5.el7.x86_64",
          "7Workstation-RHSCL-2.4:rh-mysql56-mysql-server-0:5.6.37-5.el7.x86_64",
          "7Workstation-RHSCL-2.4:rh-mysql56-mysql-test-0:5.6.37-5.el7.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2017-3634"
        },
        {
          "category": "external",
          "summary": "RHBZ#1472684",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1472684"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2017-3634",
          "url": "https://www.cve.org/CVERecord?id=CVE-2017-3634"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2017-3634",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2017-3634"
        },
        {
          "category": "external",
          "summary": "http://www.oracle.com/technetwork/security-advisory/cpujul2017-3236622.html#AppendixMSQL",
          "url": "http://www.oracle.com/technetwork/security-advisory/cpujul2017-3236622.html#AppendixMSQL"
        }
      ],
      "release_date": "2017-07-19T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2017-09-21T07:42:12+00:00",
          "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAfter installing this update, the MySQL server daemon (mysqld) will be restarted automatically.",
          "product_ids": [
            "6Server-RHSCL-2.4-6.7.Z:rh-mysql56-mysql-0:5.6.37-5.el6.src",
            "6Server-RHSCL-2.4-6.7.Z:rh-mysql56-mysql-0:5.6.37-5.el6.x86_64",
            "6Server-RHSCL-2.4-6.7.Z:rh-mysql56-mysql-bench-0:5.6.37-5.el6.x86_64",
            "6Server-RHSCL-2.4-6.7.Z:rh-mysql56-mysql-common-0:5.6.37-5.el6.x86_64",
            "6Server-RHSCL-2.4-6.7.Z:rh-mysql56-mysql-config-0:5.6.37-5.el6.x86_64",
            "6Server-RHSCL-2.4-6.7.Z:rh-mysql56-mysql-debuginfo-0:5.6.37-5.el6.x86_64",
            "6Server-RHSCL-2.4-6.7.Z:rh-mysql56-mysql-devel-0:5.6.37-5.el6.x86_64",
            "6Server-RHSCL-2.4-6.7.Z:rh-mysql56-mysql-errmsg-0:5.6.37-5.el6.x86_64",
            "6Server-RHSCL-2.4-6.7.Z:rh-mysql56-mysql-server-0:5.6.37-5.el6.x86_64",
            "6Server-RHSCL-2.4-6.7.Z:rh-mysql56-mysql-test-0:5.6.37-5.el6.x86_64",
            "6Server-RHSCL-2.4:rh-mysql56-mysql-0:5.6.37-5.el6.src",
            "6Server-RHSCL-2.4:rh-mysql56-mysql-0:5.6.37-5.el6.x86_64",
            "6Server-RHSCL-2.4:rh-mysql56-mysql-bench-0:5.6.37-5.el6.x86_64",
            "6Server-RHSCL-2.4:rh-mysql56-mysql-common-0:5.6.37-5.el6.x86_64",
            "6Server-RHSCL-2.4:rh-mysql56-mysql-config-0:5.6.37-5.el6.x86_64",
            "6Server-RHSCL-2.4:rh-mysql56-mysql-debuginfo-0:5.6.37-5.el6.x86_64",
            "6Server-RHSCL-2.4:rh-mysql56-mysql-devel-0:5.6.37-5.el6.x86_64",
            "6Server-RHSCL-2.4:rh-mysql56-mysql-errmsg-0:5.6.37-5.el6.x86_64",
            "6Server-RHSCL-2.4:rh-mysql56-mysql-server-0:5.6.37-5.el6.x86_64",
            "6Server-RHSCL-2.4:rh-mysql56-mysql-test-0:5.6.37-5.el6.x86_64",
            "6Workstation-RHSCL-2.4:rh-mysql56-mysql-0:5.6.37-5.el6.src",
            "6Workstation-RHSCL-2.4:rh-mysql56-mysql-0:5.6.37-5.el6.x86_64",
            "6Workstation-RHSCL-2.4:rh-mysql56-mysql-bench-0:5.6.37-5.el6.x86_64",
            "6Workstation-RHSCL-2.4:rh-mysql56-mysql-common-0:5.6.37-5.el6.x86_64",
            "6Workstation-RHSCL-2.4:rh-mysql56-mysql-config-0:5.6.37-5.el6.x86_64",
            "6Workstation-RHSCL-2.4:rh-mysql56-mysql-debuginfo-0:5.6.37-5.el6.x86_64",
            "6Workstation-RHSCL-2.4:rh-mysql56-mysql-devel-0:5.6.37-5.el6.x86_64",
            "6Workstation-RHSCL-2.4:rh-mysql56-mysql-errmsg-0:5.6.37-5.el6.x86_64",
            "6Workstation-RHSCL-2.4:rh-mysql56-mysql-server-0:5.6.37-5.el6.x86_64",
            "6Workstation-RHSCL-2.4:rh-mysql56-mysql-test-0:5.6.37-5.el6.x86_64",
            "7Server-RHSCL-2.4-7.3.Z:rh-mysql56-mysql-0:5.6.37-5.el7.src",
            "7Server-RHSCL-2.4-7.3.Z:rh-mysql56-mysql-0:5.6.37-5.el7.x86_64",
            "7Server-RHSCL-2.4-7.3.Z:rh-mysql56-mysql-bench-0:5.6.37-5.el7.x86_64",
            "7Server-RHSCL-2.4-7.3.Z:rh-mysql56-mysql-common-0:5.6.37-5.el7.x86_64",
            "7Server-RHSCL-2.4-7.3.Z:rh-mysql56-mysql-config-0:5.6.37-5.el7.x86_64",
            "7Server-RHSCL-2.4-7.3.Z:rh-mysql56-mysql-debuginfo-0:5.6.37-5.el7.x86_64",
            "7Server-RHSCL-2.4-7.3.Z:rh-mysql56-mysql-devel-0:5.6.37-5.el7.x86_64",
            "7Server-RHSCL-2.4-7.3.Z:rh-mysql56-mysql-errmsg-0:5.6.37-5.el7.x86_64",
            "7Server-RHSCL-2.4-7.3.Z:rh-mysql56-mysql-server-0:5.6.37-5.el7.x86_64",
            "7Server-RHSCL-2.4-7.3.Z:rh-mysql56-mysql-test-0:5.6.37-5.el7.x86_64",
            "7Server-RHSCL-2.4:rh-mysql56-mysql-0:5.6.37-5.el7.src",
            "7Server-RHSCL-2.4:rh-mysql56-mysql-0:5.6.37-5.el7.x86_64",
            "7Server-RHSCL-2.4:rh-mysql56-mysql-bench-0:5.6.37-5.el7.x86_64",
            "7Server-RHSCL-2.4:rh-mysql56-mysql-common-0:5.6.37-5.el7.x86_64",
            "7Server-RHSCL-2.4:rh-mysql56-mysql-config-0:5.6.37-5.el7.x86_64",
            "7Server-RHSCL-2.4:rh-mysql56-mysql-debuginfo-0:5.6.37-5.el7.x86_64",
            "7Server-RHSCL-2.4:rh-mysql56-mysql-devel-0:5.6.37-5.el7.x86_64",
            "7Server-RHSCL-2.4:rh-mysql56-mysql-errmsg-0:5.6.37-5.el7.x86_64",
            "7Server-RHSCL-2.4:rh-mysql56-mysql-server-0:5.6.37-5.el7.x86_64",
            "7Server-RHSCL-2.4:rh-mysql56-mysql-test-0:5.6.37-5.el7.x86_64",
            "7Workstation-RHSCL-2.4:rh-mysql56-mysql-0:5.6.37-5.el7.src",
            "7Workstation-RHSCL-2.4:rh-mysql56-mysql-0:5.6.37-5.el7.x86_64",
            "7Workstation-RHSCL-2.4:rh-mysql56-mysql-bench-0:5.6.37-5.el7.x86_64",
            "7Workstation-RHSCL-2.4:rh-mysql56-mysql-common-0:5.6.37-5.el7.x86_64",
            "7Workstation-RHSCL-2.4:rh-mysql56-mysql-config-0:5.6.37-5.el7.x86_64",
            "7Workstation-RHSCL-2.4:rh-mysql56-mysql-debuginfo-0:5.6.37-5.el7.x86_64",
            "7Workstation-RHSCL-2.4:rh-mysql56-mysql-devel-0:5.6.37-5.el7.x86_64",
            "7Workstation-RHSCL-2.4:rh-mysql56-mysql-errmsg-0:5.6.37-5.el7.x86_64",
            "7Workstation-RHSCL-2.4:rh-mysql56-mysql-server-0:5.6.37-5.el7.x86_64",
            "7Workstation-RHSCL-2.4:rh-mysql56-mysql-test-0:5.6.37-5.el7.x86_64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2017:2787"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 6.5,
            "baseSeverity": "MEDIUM",
            "confidentialityImpact": "NONE",
            "integrityImpact": "NONE",
            "privilegesRequired": "LOW",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.0"
          },
          "products": [
            "6Server-RHSCL-2.4-6.7.Z:rh-mysql56-mysql-0:5.6.37-5.el6.src",
            "6Server-RHSCL-2.4-6.7.Z:rh-mysql56-mysql-0:5.6.37-5.el6.x86_64",
            "6Server-RHSCL-2.4-6.7.Z:rh-mysql56-mysql-bench-0:5.6.37-5.el6.x86_64",
            "6Server-RHSCL-2.4-6.7.Z:rh-mysql56-mysql-common-0:5.6.37-5.el6.x86_64",
            "6Server-RHSCL-2.4-6.7.Z:rh-mysql56-mysql-config-0:5.6.37-5.el6.x86_64",
            "6Server-RHSCL-2.4-6.7.Z:rh-mysql56-mysql-debuginfo-0:5.6.37-5.el6.x86_64",
            "6Server-RHSCL-2.4-6.7.Z:rh-mysql56-mysql-devel-0:5.6.37-5.el6.x86_64",
            "6Server-RHSCL-2.4-6.7.Z:rh-mysql56-mysql-errmsg-0:5.6.37-5.el6.x86_64",
            "6Server-RHSCL-2.4-6.7.Z:rh-mysql56-mysql-server-0:5.6.37-5.el6.x86_64",
            "6Server-RHSCL-2.4-6.7.Z:rh-mysql56-mysql-test-0:5.6.37-5.el6.x86_64",
            "6Server-RHSCL-2.4:rh-mysql56-mysql-0:5.6.37-5.el6.src",
            "6Server-RHSCL-2.4:rh-mysql56-mysql-0:5.6.37-5.el6.x86_64",
            "6Server-RHSCL-2.4:rh-mysql56-mysql-bench-0:5.6.37-5.el6.x86_64",
            "6Server-RHSCL-2.4:rh-mysql56-mysql-common-0:5.6.37-5.el6.x86_64",
            "6Server-RHSCL-2.4:rh-mysql56-mysql-config-0:5.6.37-5.el6.x86_64",
            "6Server-RHSCL-2.4:rh-mysql56-mysql-debuginfo-0:5.6.37-5.el6.x86_64",
            "6Server-RHSCL-2.4:rh-mysql56-mysql-devel-0:5.6.37-5.el6.x86_64",
            "6Server-RHSCL-2.4:rh-mysql56-mysql-errmsg-0:5.6.37-5.el6.x86_64",
            "6Server-RHSCL-2.4:rh-mysql56-mysql-server-0:5.6.37-5.el6.x86_64",
            "6Server-RHSCL-2.4:rh-mysql56-mysql-test-0:5.6.37-5.el6.x86_64",
            "6Workstation-RHSCL-2.4:rh-mysql56-mysql-0:5.6.37-5.el6.src",
            "6Workstation-RHSCL-2.4:rh-mysql56-mysql-0:5.6.37-5.el6.x86_64",
            "6Workstation-RHSCL-2.4:rh-mysql56-mysql-bench-0:5.6.37-5.el6.x86_64",
            "6Workstation-RHSCL-2.4:rh-mysql56-mysql-common-0:5.6.37-5.el6.x86_64",
            "6Workstation-RHSCL-2.4:rh-mysql56-mysql-config-0:5.6.37-5.el6.x86_64",
            "6Workstation-RHSCL-2.4:rh-mysql56-mysql-debuginfo-0:5.6.37-5.el6.x86_64",
            "6Workstation-RHSCL-2.4:rh-mysql56-mysql-devel-0:5.6.37-5.el6.x86_64",
            "6Workstation-RHSCL-2.4:rh-mysql56-mysql-errmsg-0:5.6.37-5.el6.x86_64",
            "6Workstation-RHSCL-2.4:rh-mysql56-mysql-server-0:5.6.37-5.el6.x86_64",
            "6Workstation-RHSCL-2.4:rh-mysql56-mysql-test-0:5.6.37-5.el6.x86_64",
            "7Server-RHSCL-2.4-7.3.Z:rh-mysql56-mysql-0:5.6.37-5.el7.src",
            "7Server-RHSCL-2.4-7.3.Z:rh-mysql56-mysql-0:5.6.37-5.el7.x86_64",
            "7Server-RHSCL-2.4-7.3.Z:rh-mysql56-mysql-bench-0:5.6.37-5.el7.x86_64",
            "7Server-RHSCL-2.4-7.3.Z:rh-mysql56-mysql-common-0:5.6.37-5.el7.x86_64",
            "7Server-RHSCL-2.4-7.3.Z:rh-mysql56-mysql-config-0:5.6.37-5.el7.x86_64",
            "7Server-RHSCL-2.4-7.3.Z:rh-mysql56-mysql-debuginfo-0:5.6.37-5.el7.x86_64",
            "7Server-RHSCL-2.4-7.3.Z:rh-mysql56-mysql-devel-0:5.6.37-5.el7.x86_64",
            "7Server-RHSCL-2.4-7.3.Z:rh-mysql56-mysql-errmsg-0:5.6.37-5.el7.x86_64",
            "7Server-RHSCL-2.4-7.3.Z:rh-mysql56-mysql-server-0:5.6.37-5.el7.x86_64",
            "7Server-RHSCL-2.4-7.3.Z:rh-mysql56-mysql-test-0:5.6.37-5.el7.x86_64",
            "7Server-RHSCL-2.4:rh-mysql56-mysql-0:5.6.37-5.el7.src",
            "7Server-RHSCL-2.4:rh-mysql56-mysql-0:5.6.37-5.el7.x86_64",
            "7Server-RHSCL-2.4:rh-mysql56-mysql-bench-0:5.6.37-5.el7.x86_64",
            "7Server-RHSCL-2.4:rh-mysql56-mysql-common-0:5.6.37-5.el7.x86_64",
            "7Server-RHSCL-2.4:rh-mysql56-mysql-config-0:5.6.37-5.el7.x86_64",
            "7Server-RHSCL-2.4:rh-mysql56-mysql-debuginfo-0:5.6.37-5.el7.x86_64",
            "7Server-RHSCL-2.4:rh-mysql56-mysql-devel-0:5.6.37-5.el7.x86_64",
            "7Server-RHSCL-2.4:rh-mysql56-mysql-errmsg-0:5.6.37-5.el7.x86_64",
            "7Server-RHSCL-2.4:rh-mysql56-mysql-server-0:5.6.37-5.el7.x86_64",
            "7Server-RHSCL-2.4:rh-mysql56-mysql-test-0:5.6.37-5.el7.x86_64",
            "7Workstation-RHSCL-2.4:rh-mysql56-mysql-0:5.6.37-5.el7.src",
            "7Workstation-RHSCL-2.4:rh-mysql56-mysql-0:5.6.37-5.el7.x86_64",
            "7Workstation-RHSCL-2.4:rh-mysql56-mysql-bench-0:5.6.37-5.el7.x86_64",
            "7Workstation-RHSCL-2.4:rh-mysql56-mysql-common-0:5.6.37-5.el7.x86_64",
            "7Workstation-RHSCL-2.4:rh-mysql56-mysql-config-0:5.6.37-5.el7.x86_64",
            "7Workstation-RHSCL-2.4:rh-mysql56-mysql-debuginfo-0:5.6.37-5.el7.x86_64",
            "7Workstation-RHSCL-2.4:rh-mysql56-mysql-devel-0:5.6.37-5.el7.x86_64",
            "7Workstation-RHSCL-2.4:rh-mysql56-mysql-errmsg-0:5.6.37-5.el7.x86_64",
            "7Workstation-RHSCL-2.4:rh-mysql56-mysql-server-0:5.6.37-5.el7.x86_64",
            "7Workstation-RHSCL-2.4:rh-mysql56-mysql-test-0:5.6.37-5.el7.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Moderate"
        }
      ],
      "title": "mysql: Server: DML unspecified vulnerability (CPU Jul 2017)"
    },
    {
      "cve": "CVE-2017-3636",
      "discovery_date": "2017-07-19T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "1472686"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Client programs). Supported versions that are affected are 5.5.56 and earlier and 5.6.36 and earlier. Easily exploitable vulnerability allows low privileged attacker with logon to the infrastructure where MySQL Server executes to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of MySQL Server accessible data as well as unauthorized read access to a subset of MySQL Server accessible data and unauthorized ability to cause a partial denial of service (partial DOS) of MySQL Server. CVSS 3.0 Base Score 5.3 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L).",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "mysql: Client programs unspecified vulnerability (CPU Jul 2017)",
          "title": "Vulnerability summary"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "6Server-RHSCL-2.4-6.7.Z:rh-mysql56-mysql-0:5.6.37-5.el6.src",
          "6Server-RHSCL-2.4-6.7.Z:rh-mysql56-mysql-0:5.6.37-5.el6.x86_64",
          "6Server-RHSCL-2.4-6.7.Z:rh-mysql56-mysql-bench-0:5.6.37-5.el6.x86_64",
          "6Server-RHSCL-2.4-6.7.Z:rh-mysql56-mysql-common-0:5.6.37-5.el6.x86_64",
          "6Server-RHSCL-2.4-6.7.Z:rh-mysql56-mysql-config-0:5.6.37-5.el6.x86_64",
          "6Server-RHSCL-2.4-6.7.Z:rh-mysql56-mysql-debuginfo-0:5.6.37-5.el6.x86_64",
          "6Server-RHSCL-2.4-6.7.Z:rh-mysql56-mysql-devel-0:5.6.37-5.el6.x86_64",
          "6Server-RHSCL-2.4-6.7.Z:rh-mysql56-mysql-errmsg-0:5.6.37-5.el6.x86_64",
          "6Server-RHSCL-2.4-6.7.Z:rh-mysql56-mysql-server-0:5.6.37-5.el6.x86_64",
          "6Server-RHSCL-2.4-6.7.Z:rh-mysql56-mysql-test-0:5.6.37-5.el6.x86_64",
          "6Server-RHSCL-2.4:rh-mysql56-mysql-0:5.6.37-5.el6.src",
          "6Server-RHSCL-2.4:rh-mysql56-mysql-0:5.6.37-5.el6.x86_64",
          "6Server-RHSCL-2.4:rh-mysql56-mysql-bench-0:5.6.37-5.el6.x86_64",
          "6Server-RHSCL-2.4:rh-mysql56-mysql-common-0:5.6.37-5.el6.x86_64",
          "6Server-RHSCL-2.4:rh-mysql56-mysql-config-0:5.6.37-5.el6.x86_64",
          "6Server-RHSCL-2.4:rh-mysql56-mysql-debuginfo-0:5.6.37-5.el6.x86_64",
          "6Server-RHSCL-2.4:rh-mysql56-mysql-devel-0:5.6.37-5.el6.x86_64",
          "6Server-RHSCL-2.4:rh-mysql56-mysql-errmsg-0:5.6.37-5.el6.x86_64",
          "6Server-RHSCL-2.4:rh-mysql56-mysql-server-0:5.6.37-5.el6.x86_64",
          "6Server-RHSCL-2.4:rh-mysql56-mysql-test-0:5.6.37-5.el6.x86_64",
          "6Workstation-RHSCL-2.4:rh-mysql56-mysql-0:5.6.37-5.el6.src",
          "6Workstation-RHSCL-2.4:rh-mysql56-mysql-0:5.6.37-5.el6.x86_64",
          "6Workstation-RHSCL-2.4:rh-mysql56-mysql-bench-0:5.6.37-5.el6.x86_64",
          "6Workstation-RHSCL-2.4:rh-mysql56-mysql-common-0:5.6.37-5.el6.x86_64",
          "6Workstation-RHSCL-2.4:rh-mysql56-mysql-config-0:5.6.37-5.el6.x86_64",
          "6Workstation-RHSCL-2.4:rh-mysql56-mysql-debuginfo-0:5.6.37-5.el6.x86_64",
          "6Workstation-RHSCL-2.4:rh-mysql56-mysql-devel-0:5.6.37-5.el6.x86_64",
          "6Workstation-RHSCL-2.4:rh-mysql56-mysql-errmsg-0:5.6.37-5.el6.x86_64",
          "6Workstation-RHSCL-2.4:rh-mysql56-mysql-server-0:5.6.37-5.el6.x86_64",
          "6Workstation-RHSCL-2.4:rh-mysql56-mysql-test-0:5.6.37-5.el6.x86_64",
          "7Server-RHSCL-2.4-7.3.Z:rh-mysql56-mysql-0:5.6.37-5.el7.src",
          "7Server-RHSCL-2.4-7.3.Z:rh-mysql56-mysql-0:5.6.37-5.el7.x86_64",
          "7Server-RHSCL-2.4-7.3.Z:rh-mysql56-mysql-bench-0:5.6.37-5.el7.x86_64",
          "7Server-RHSCL-2.4-7.3.Z:rh-mysql56-mysql-common-0:5.6.37-5.el7.x86_64",
          "7Server-RHSCL-2.4-7.3.Z:rh-mysql56-mysql-config-0:5.6.37-5.el7.x86_64",
          "7Server-RHSCL-2.4-7.3.Z:rh-mysql56-mysql-debuginfo-0:5.6.37-5.el7.x86_64",
          "7Server-RHSCL-2.4-7.3.Z:rh-mysql56-mysql-devel-0:5.6.37-5.el7.x86_64",
          "7Server-RHSCL-2.4-7.3.Z:rh-mysql56-mysql-errmsg-0:5.6.37-5.el7.x86_64",
          "7Server-RHSCL-2.4-7.3.Z:rh-mysql56-mysql-server-0:5.6.37-5.el7.x86_64",
          "7Server-RHSCL-2.4-7.3.Z:rh-mysql56-mysql-test-0:5.6.37-5.el7.x86_64",
          "7Server-RHSCL-2.4:rh-mysql56-mysql-0:5.6.37-5.el7.src",
          "7Server-RHSCL-2.4:rh-mysql56-mysql-0:5.6.37-5.el7.x86_64",
          "7Server-RHSCL-2.4:rh-mysql56-mysql-bench-0:5.6.37-5.el7.x86_64",
          "7Server-RHSCL-2.4:rh-mysql56-mysql-common-0:5.6.37-5.el7.x86_64",
          "7Server-RHSCL-2.4:rh-mysql56-mysql-config-0:5.6.37-5.el7.x86_64",
          "7Server-RHSCL-2.4:rh-mysql56-mysql-debuginfo-0:5.6.37-5.el7.x86_64",
          "7Server-RHSCL-2.4:rh-mysql56-mysql-devel-0:5.6.37-5.el7.x86_64",
          "7Server-RHSCL-2.4:rh-mysql56-mysql-errmsg-0:5.6.37-5.el7.x86_64",
          "7Server-RHSCL-2.4:rh-mysql56-mysql-server-0:5.6.37-5.el7.x86_64",
          "7Server-RHSCL-2.4:rh-mysql56-mysql-test-0:5.6.37-5.el7.x86_64",
          "7Workstation-RHSCL-2.4:rh-mysql56-mysql-0:5.6.37-5.el7.src",
          "7Workstation-RHSCL-2.4:rh-mysql56-mysql-0:5.6.37-5.el7.x86_64",
          "7Workstation-RHSCL-2.4:rh-mysql56-mysql-bench-0:5.6.37-5.el7.x86_64",
          "7Workstation-RHSCL-2.4:rh-mysql56-mysql-common-0:5.6.37-5.el7.x86_64",
          "7Workstation-RHSCL-2.4:rh-mysql56-mysql-config-0:5.6.37-5.el7.x86_64",
          "7Workstation-RHSCL-2.4:rh-mysql56-mysql-debuginfo-0:5.6.37-5.el7.x86_64",
          "7Workstation-RHSCL-2.4:rh-mysql56-mysql-devel-0:5.6.37-5.el7.x86_64",
          "7Workstation-RHSCL-2.4:rh-mysql56-mysql-errmsg-0:5.6.37-5.el7.x86_64",
          "7Workstation-RHSCL-2.4:rh-mysql56-mysql-server-0:5.6.37-5.el7.x86_64",
          "7Workstation-RHSCL-2.4:rh-mysql56-mysql-test-0:5.6.37-5.el7.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2017-3636"
        },
        {
          "category": "external",
          "summary": "RHBZ#1472686",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1472686"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2017-3636",
          "url": "https://www.cve.org/CVERecord?id=CVE-2017-3636"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2017-3636",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2017-3636"
        },
        {
          "category": "external",
          "summary": "http://www.oracle.com/technetwork/security-advisory/cpujul2017-3236622.html#AppendixMSQL",
          "url": "http://www.oracle.com/technetwork/security-advisory/cpujul2017-3236622.html#AppendixMSQL"
        }
      ],
      "release_date": "2017-07-19T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2017-09-21T07:42:12+00:00",
          "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAfter installing this update, the MySQL server daemon (mysqld) will be restarted automatically.",
          "product_ids": [
            "6Server-RHSCL-2.4-6.7.Z:rh-mysql56-mysql-0:5.6.37-5.el6.src",
            "6Server-RHSCL-2.4-6.7.Z:rh-mysql56-mysql-0:5.6.37-5.el6.x86_64",
            "6Server-RHSCL-2.4-6.7.Z:rh-mysql56-mysql-bench-0:5.6.37-5.el6.x86_64",
            "6Server-RHSCL-2.4-6.7.Z:rh-mysql56-mysql-common-0:5.6.37-5.el6.x86_64",
            "6Server-RHSCL-2.4-6.7.Z:rh-mysql56-mysql-config-0:5.6.37-5.el6.x86_64",
            "6Server-RHSCL-2.4-6.7.Z:rh-mysql56-mysql-debuginfo-0:5.6.37-5.el6.x86_64",
            "6Server-RHSCL-2.4-6.7.Z:rh-mysql56-mysql-devel-0:5.6.37-5.el6.x86_64",
            "6Server-RHSCL-2.4-6.7.Z:rh-mysql56-mysql-errmsg-0:5.6.37-5.el6.x86_64",
            "6Server-RHSCL-2.4-6.7.Z:rh-mysql56-mysql-server-0:5.6.37-5.el6.x86_64",
            "6Server-RHSCL-2.4-6.7.Z:rh-mysql56-mysql-test-0:5.6.37-5.el6.x86_64",
            "6Server-RHSCL-2.4:rh-mysql56-mysql-0:5.6.37-5.el6.src",
            "6Server-RHSCL-2.4:rh-mysql56-mysql-0:5.6.37-5.el6.x86_64",
            "6Server-RHSCL-2.4:rh-mysql56-mysql-bench-0:5.6.37-5.el6.x86_64",
            "6Server-RHSCL-2.4:rh-mysql56-mysql-common-0:5.6.37-5.el6.x86_64",
            "6Server-RHSCL-2.4:rh-mysql56-mysql-config-0:5.6.37-5.el6.x86_64",
            "6Server-RHSCL-2.4:rh-mysql56-mysql-debuginfo-0:5.6.37-5.el6.x86_64",
            "6Server-RHSCL-2.4:rh-mysql56-mysql-devel-0:5.6.37-5.el6.x86_64",
            "6Server-RHSCL-2.4:rh-mysql56-mysql-errmsg-0:5.6.37-5.el6.x86_64",
            "6Server-RHSCL-2.4:rh-mysql56-mysql-server-0:5.6.37-5.el6.x86_64",
            "6Server-RHSCL-2.4:rh-mysql56-mysql-test-0:5.6.37-5.el6.x86_64",
            "6Workstation-RHSCL-2.4:rh-mysql56-mysql-0:5.6.37-5.el6.src",
            "6Workstation-RHSCL-2.4:rh-mysql56-mysql-0:5.6.37-5.el6.x86_64",
            "6Workstation-RHSCL-2.4:rh-mysql56-mysql-bench-0:5.6.37-5.el6.x86_64",
            "6Workstation-RHSCL-2.4:rh-mysql56-mysql-common-0:5.6.37-5.el6.x86_64",
            "6Workstation-RHSCL-2.4:rh-mysql56-mysql-config-0:5.6.37-5.el6.x86_64",
            "6Workstation-RHSCL-2.4:rh-mysql56-mysql-debuginfo-0:5.6.37-5.el6.x86_64",
            "6Workstation-RHSCL-2.4:rh-mysql56-mysql-devel-0:5.6.37-5.el6.x86_64",
            "6Workstation-RHSCL-2.4:rh-mysql56-mysql-errmsg-0:5.6.37-5.el6.x86_64",
            "6Workstation-RHSCL-2.4:rh-mysql56-mysql-server-0:5.6.37-5.el6.x86_64",
            "6Workstation-RHSCL-2.4:rh-mysql56-mysql-test-0:5.6.37-5.el6.x86_64",
            "7Server-RHSCL-2.4-7.3.Z:rh-mysql56-mysql-0:5.6.37-5.el7.src",
            "7Server-RHSCL-2.4-7.3.Z:rh-mysql56-mysql-0:5.6.37-5.el7.x86_64",
            "7Server-RHSCL-2.4-7.3.Z:rh-mysql56-mysql-bench-0:5.6.37-5.el7.x86_64",
            "7Server-RHSCL-2.4-7.3.Z:rh-mysql56-mysql-common-0:5.6.37-5.el7.x86_64",
            "7Server-RHSCL-2.4-7.3.Z:rh-mysql56-mysql-config-0:5.6.37-5.el7.x86_64",
            "7Server-RHSCL-2.4-7.3.Z:rh-mysql56-mysql-debuginfo-0:5.6.37-5.el7.x86_64",
            "7Server-RHSCL-2.4-7.3.Z:rh-mysql56-mysql-devel-0:5.6.37-5.el7.x86_64",
            "7Server-RHSCL-2.4-7.3.Z:rh-mysql56-mysql-errmsg-0:5.6.37-5.el7.x86_64",
            "7Server-RHSCL-2.4-7.3.Z:rh-mysql56-mysql-server-0:5.6.37-5.el7.x86_64",
            "7Server-RHSCL-2.4-7.3.Z:rh-mysql56-mysql-test-0:5.6.37-5.el7.x86_64",
            "7Server-RHSCL-2.4:rh-mysql56-mysql-0:5.6.37-5.el7.src",
            "7Server-RHSCL-2.4:rh-mysql56-mysql-0:5.6.37-5.el7.x86_64",
            "7Server-RHSCL-2.4:rh-mysql56-mysql-bench-0:5.6.37-5.el7.x86_64",
            "7Server-RHSCL-2.4:rh-mysql56-mysql-common-0:5.6.37-5.el7.x86_64",
            "7Server-RHSCL-2.4:rh-mysql56-mysql-config-0:5.6.37-5.el7.x86_64",
            "7Server-RHSCL-2.4:rh-mysql56-mysql-debuginfo-0:5.6.37-5.el7.x86_64",
            "7Server-RHSCL-2.4:rh-mysql56-mysql-devel-0:5.6.37-5.el7.x86_64",
            "7Server-RHSCL-2.4:rh-mysql56-mysql-errmsg-0:5.6.37-5.el7.x86_64",
            "7Server-RHSCL-2.4:rh-mysql56-mysql-server-0:5.6.37-5.el7.x86_64",
            "7Server-RHSCL-2.4:rh-mysql56-mysql-test-0:5.6.37-5.el7.x86_64",
            "7Workstation-RHSCL-2.4:rh-mysql56-mysql-0:5.6.37-5.el7.src",
            "7Workstation-RHSCL-2.4:rh-mysql56-mysql-0:5.6.37-5.el7.x86_64",
            "7Workstation-RHSCL-2.4:rh-mysql56-mysql-bench-0:5.6.37-5.el7.x86_64",
            "7Workstation-RHSCL-2.4:rh-mysql56-mysql-common-0:5.6.37-5.el7.x86_64",
            "7Workstation-RHSCL-2.4:rh-mysql56-mysql-config-0:5.6.37-5.el7.x86_64",
            "7Workstation-RHSCL-2.4:rh-mysql56-mysql-debuginfo-0:5.6.37-5.el7.x86_64",
            "7Workstation-RHSCL-2.4:rh-mysql56-mysql-devel-0:5.6.37-5.el7.x86_64",
            "7Workstation-RHSCL-2.4:rh-mysql56-mysql-errmsg-0:5.6.37-5.el7.x86_64",
            "7Workstation-RHSCL-2.4:rh-mysql56-mysql-server-0:5.6.37-5.el7.x86_64",
            "7Workstation-RHSCL-2.4:rh-mysql56-mysql-test-0:5.6.37-5.el7.x86_64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2017:2787"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "LOCAL",
            "availabilityImpact": "LOW",
            "baseScore": 5.3,
            "baseSeverity": "MEDIUM",
            "confidentialityImpact": "LOW",
            "integrityImpact": "LOW",
            "privilegesRequired": "LOW",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L",
            "version": "3.0"
          },
          "products": [
            "6Server-RHSCL-2.4-6.7.Z:rh-mysql56-mysql-0:5.6.37-5.el6.src",
            "6Server-RHSCL-2.4-6.7.Z:rh-mysql56-mysql-0:5.6.37-5.el6.x86_64",
            "6Server-RHSCL-2.4-6.7.Z:rh-mysql56-mysql-bench-0:5.6.37-5.el6.x86_64",
            "6Server-RHSCL-2.4-6.7.Z:rh-mysql56-mysql-common-0:5.6.37-5.el6.x86_64",
            "6Server-RHSCL-2.4-6.7.Z:rh-mysql56-mysql-config-0:5.6.37-5.el6.x86_64",
            "6Server-RHSCL-2.4-6.7.Z:rh-mysql56-mysql-debuginfo-0:5.6.37-5.el6.x86_64",
            "6Server-RHSCL-2.4-6.7.Z:rh-mysql56-mysql-devel-0:5.6.37-5.el6.x86_64",
            "6Server-RHSCL-2.4-6.7.Z:rh-mysql56-mysql-errmsg-0:5.6.37-5.el6.x86_64",
            "6Server-RHSCL-2.4-6.7.Z:rh-mysql56-mysql-server-0:5.6.37-5.el6.x86_64",
            "6Server-RHSCL-2.4-6.7.Z:rh-mysql56-mysql-test-0:5.6.37-5.el6.x86_64",
            "6Server-RHSCL-2.4:rh-mysql56-mysql-0:5.6.37-5.el6.src",
            "6Server-RHSCL-2.4:rh-mysql56-mysql-0:5.6.37-5.el6.x86_64",
            "6Server-RHSCL-2.4:rh-mysql56-mysql-bench-0:5.6.37-5.el6.x86_64",
            "6Server-RHSCL-2.4:rh-mysql56-mysql-common-0:5.6.37-5.el6.x86_64",
            "6Server-RHSCL-2.4:rh-mysql56-mysql-config-0:5.6.37-5.el6.x86_64",
            "6Server-RHSCL-2.4:rh-mysql56-mysql-debuginfo-0:5.6.37-5.el6.x86_64",
            "6Server-RHSCL-2.4:rh-mysql56-mysql-devel-0:5.6.37-5.el6.x86_64",
            "6Server-RHSCL-2.4:rh-mysql56-mysql-errmsg-0:5.6.37-5.el6.x86_64",
            "6Server-RHSCL-2.4:rh-mysql56-mysql-server-0:5.6.37-5.el6.x86_64",
            "6Server-RHSCL-2.4:rh-mysql56-mysql-test-0:5.6.37-5.el6.x86_64",
            "6Workstation-RHSCL-2.4:rh-mysql56-mysql-0:5.6.37-5.el6.src",
            "6Workstation-RHSCL-2.4:rh-mysql56-mysql-0:5.6.37-5.el6.x86_64",
            "6Workstation-RHSCL-2.4:rh-mysql56-mysql-bench-0:5.6.37-5.el6.x86_64",
            "6Workstation-RHSCL-2.4:rh-mysql56-mysql-common-0:5.6.37-5.el6.x86_64",
            "6Workstation-RHSCL-2.4:rh-mysql56-mysql-config-0:5.6.37-5.el6.x86_64",
            "6Workstation-RHSCL-2.4:rh-mysql56-mysql-debuginfo-0:5.6.37-5.el6.x86_64",
            "6Workstation-RHSCL-2.4:rh-mysql56-mysql-devel-0:5.6.37-5.el6.x86_64",
            "6Workstation-RHSCL-2.4:rh-mysql56-mysql-errmsg-0:5.6.37-5.el6.x86_64",
            "6Workstation-RHSCL-2.4:rh-mysql56-mysql-server-0:5.6.37-5.el6.x86_64",
            "6Workstation-RHSCL-2.4:rh-mysql56-mysql-test-0:5.6.37-5.el6.x86_64",
            "7Server-RHSCL-2.4-7.3.Z:rh-mysql56-mysql-0:5.6.37-5.el7.src",
            "7Server-RHSCL-2.4-7.3.Z:rh-mysql56-mysql-0:5.6.37-5.el7.x86_64",
            "7Server-RHSCL-2.4-7.3.Z:rh-mysql56-mysql-bench-0:5.6.37-5.el7.x86_64",
            "7Server-RHSCL-2.4-7.3.Z:rh-mysql56-mysql-common-0:5.6.37-5.el7.x86_64",
            "7Server-RHSCL-2.4-7.3.Z:rh-mysql56-mysql-config-0:5.6.37-5.el7.x86_64",
            "7Server-RHSCL-2.4-7.3.Z:rh-mysql56-mysql-debuginfo-0:5.6.37-5.el7.x86_64",
            "7Server-RHSCL-2.4-7.3.Z:rh-mysql56-mysql-devel-0:5.6.37-5.el7.x86_64",
            "7Server-RHSCL-2.4-7.3.Z:rh-mysql56-mysql-errmsg-0:5.6.37-5.el7.x86_64",
            "7Server-RHSCL-2.4-7.3.Z:rh-mysql56-mysql-server-0:5.6.37-5.el7.x86_64",
            "7Server-RHSCL-2.4-7.3.Z:rh-mysql56-mysql-test-0:5.6.37-5.el7.x86_64",
            "7Server-RHSCL-2.4:rh-mysql56-mysql-0:5.6.37-5.el7.src",
            "7Server-RHSCL-2.4:rh-mysql56-mysql-0:5.6.37-5.el7.x86_64",
            "7Server-RHSCL-2.4:rh-mysql56-mysql-bench-0:5.6.37-5.el7.x86_64",
            "7Server-RHSCL-2.4:rh-mysql56-mysql-common-0:5.6.37-5.el7.x86_64",
            "7Server-RHSCL-2.4:rh-mysql56-mysql-config-0:5.6.37-5.el7.x86_64",
            "7Server-RHSCL-2.4:rh-mysql56-mysql-debuginfo-0:5.6.37-5.el7.x86_64",
            "7Server-RHSCL-2.4:rh-mysql56-mysql-devel-0:5.6.37-5.el7.x86_64",
            "7Server-RHSCL-2.4:rh-mysql56-mysql-errmsg-0:5.6.37-5.el7.x86_64",
            "7Server-RHSCL-2.4:rh-mysql56-mysql-server-0:5.6.37-5.el7.x86_64",
            "7Server-RHSCL-2.4:rh-mysql56-mysql-test-0:5.6.37-5.el7.x86_64",
            "7Workstation-RHSCL-2.4:rh-mysql56-mysql-0:5.6.37-5.el7.src",
            "7Workstation-RHSCL-2.4:rh-mysql56-mysql-0:5.6.37-5.el7.x86_64",
            "7Workstation-RHSCL-2.4:rh-mysql56-mysql-bench-0:5.6.37-5.el7.x86_64",
            "7Workstation-RHSCL-2.4:rh-mysql56-mysql-common-0:5.6.37-5.el7.x86_64",
            "7Workstation-RHSCL-2.4:rh-mysql56-mysql-config-0:5.6.37-5.el7.x86_64",
            "7Workstation-RHSCL-2.4:rh-mysql56-mysql-debuginfo-0:5.6.37-5.el7.x86_64",
            "7Workstation-RHSCL-2.4:rh-mysql56-mysql-devel-0:5.6.37-5.el7.x86_64",
            "7Workstation-RHSCL-2.4:rh-mysql56-mysql-errmsg-0:5.6.37-5.el7.x86_64",
            "7Workstation-RHSCL-2.4:rh-mysql56-mysql-server-0:5.6.37-5.el7.x86_64",
            "7Workstation-RHSCL-2.4:rh-mysql56-mysql-test-0:5.6.37-5.el7.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Moderate"
        }
      ],
      "title": "mysql: Client programs unspecified vulnerability (CPU Jul 2017)"
    },
    {
      "cve": "CVE-2017-3641",
      "discovery_date": "2017-07-19T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "1472693"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: DML). Supported versions that are affected are 5.5.56 and earlier, 5.6.36 and earlier and 5.7.18 and earlier. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.0 Base Score 4.9 (Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H).",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "mysql: Server: DML unspecified vulnerability (CPU Jul 2017)",
          "title": "Vulnerability summary"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "6Server-RHSCL-2.4-6.7.Z:rh-mysql56-mysql-0:5.6.37-5.el6.src",
          "6Server-RHSCL-2.4-6.7.Z:rh-mysql56-mysql-0:5.6.37-5.el6.x86_64",
          "6Server-RHSCL-2.4-6.7.Z:rh-mysql56-mysql-bench-0:5.6.37-5.el6.x86_64",
          "6Server-RHSCL-2.4-6.7.Z:rh-mysql56-mysql-common-0:5.6.37-5.el6.x86_64",
          "6Server-RHSCL-2.4-6.7.Z:rh-mysql56-mysql-config-0:5.6.37-5.el6.x86_64",
          "6Server-RHSCL-2.4-6.7.Z:rh-mysql56-mysql-debuginfo-0:5.6.37-5.el6.x86_64",
          "6Server-RHSCL-2.4-6.7.Z:rh-mysql56-mysql-devel-0:5.6.37-5.el6.x86_64",
          "6Server-RHSCL-2.4-6.7.Z:rh-mysql56-mysql-errmsg-0:5.6.37-5.el6.x86_64",
          "6Server-RHSCL-2.4-6.7.Z:rh-mysql56-mysql-server-0:5.6.37-5.el6.x86_64",
          "6Server-RHSCL-2.4-6.7.Z:rh-mysql56-mysql-test-0:5.6.37-5.el6.x86_64",
          "6Server-RHSCL-2.4:rh-mysql56-mysql-0:5.6.37-5.el6.src",
          "6Server-RHSCL-2.4:rh-mysql56-mysql-0:5.6.37-5.el6.x86_64",
          "6Server-RHSCL-2.4:rh-mysql56-mysql-bench-0:5.6.37-5.el6.x86_64",
          "6Server-RHSCL-2.4:rh-mysql56-mysql-common-0:5.6.37-5.el6.x86_64",
          "6Server-RHSCL-2.4:rh-mysql56-mysql-config-0:5.6.37-5.el6.x86_64",
          "6Server-RHSCL-2.4:rh-mysql56-mysql-debuginfo-0:5.6.37-5.el6.x86_64",
          "6Server-RHSCL-2.4:rh-mysql56-mysql-devel-0:5.6.37-5.el6.x86_64",
          "6Server-RHSCL-2.4:rh-mysql56-mysql-errmsg-0:5.6.37-5.el6.x86_64",
          "6Server-RHSCL-2.4:rh-mysql56-mysql-server-0:5.6.37-5.el6.x86_64",
          "6Server-RHSCL-2.4:rh-mysql56-mysql-test-0:5.6.37-5.el6.x86_64",
          "6Workstation-RHSCL-2.4:rh-mysql56-mysql-0:5.6.37-5.el6.src",
          "6Workstation-RHSCL-2.4:rh-mysql56-mysql-0:5.6.37-5.el6.x86_64",
          "6Workstation-RHSCL-2.4:rh-mysql56-mysql-bench-0:5.6.37-5.el6.x86_64",
          "6Workstation-RHSCL-2.4:rh-mysql56-mysql-common-0:5.6.37-5.el6.x86_64",
          "6Workstation-RHSCL-2.4:rh-mysql56-mysql-config-0:5.6.37-5.el6.x86_64",
          "6Workstation-RHSCL-2.4:rh-mysql56-mysql-debuginfo-0:5.6.37-5.el6.x86_64",
          "6Workstation-RHSCL-2.4:rh-mysql56-mysql-devel-0:5.6.37-5.el6.x86_64",
          "6Workstation-RHSCL-2.4:rh-mysql56-mysql-errmsg-0:5.6.37-5.el6.x86_64",
          "6Workstation-RHSCL-2.4:rh-mysql56-mysql-server-0:5.6.37-5.el6.x86_64",
          "6Workstation-RHSCL-2.4:rh-mysql56-mysql-test-0:5.6.37-5.el6.x86_64",
          "7Server-RHSCL-2.4-7.3.Z:rh-mysql56-mysql-0:5.6.37-5.el7.src",
          "7Server-RHSCL-2.4-7.3.Z:rh-mysql56-mysql-0:5.6.37-5.el7.x86_64",
          "7Server-RHSCL-2.4-7.3.Z:rh-mysql56-mysql-bench-0:5.6.37-5.el7.x86_64",
          "7Server-RHSCL-2.4-7.3.Z:rh-mysql56-mysql-common-0:5.6.37-5.el7.x86_64",
          "7Server-RHSCL-2.4-7.3.Z:rh-mysql56-mysql-config-0:5.6.37-5.el7.x86_64",
          "7Server-RHSCL-2.4-7.3.Z:rh-mysql56-mysql-debuginfo-0:5.6.37-5.el7.x86_64",
          "7Server-RHSCL-2.4-7.3.Z:rh-mysql56-mysql-devel-0:5.6.37-5.el7.x86_64",
          "7Server-RHSCL-2.4-7.3.Z:rh-mysql56-mysql-errmsg-0:5.6.37-5.el7.x86_64",
          "7Server-RHSCL-2.4-7.3.Z:rh-mysql56-mysql-server-0:5.6.37-5.el7.x86_64",
          "7Server-RHSCL-2.4-7.3.Z:rh-mysql56-mysql-test-0:5.6.37-5.el7.x86_64",
          "7Server-RHSCL-2.4:rh-mysql56-mysql-0:5.6.37-5.el7.src",
          "7Server-RHSCL-2.4:rh-mysql56-mysql-0:5.6.37-5.el7.x86_64",
          "7Server-RHSCL-2.4:rh-mysql56-mysql-bench-0:5.6.37-5.el7.x86_64",
          "7Server-RHSCL-2.4:rh-mysql56-mysql-common-0:5.6.37-5.el7.x86_64",
          "7Server-RHSCL-2.4:rh-mysql56-mysql-config-0:5.6.37-5.el7.x86_64",
          "7Server-RHSCL-2.4:rh-mysql56-mysql-debuginfo-0:5.6.37-5.el7.x86_64",
          "7Server-RHSCL-2.4:rh-mysql56-mysql-devel-0:5.6.37-5.el7.x86_64",
          "7Server-RHSCL-2.4:rh-mysql56-mysql-errmsg-0:5.6.37-5.el7.x86_64",
          "7Server-RHSCL-2.4:rh-mysql56-mysql-server-0:5.6.37-5.el7.x86_64",
          "7Server-RHSCL-2.4:rh-mysql56-mysql-test-0:5.6.37-5.el7.x86_64",
          "7Workstation-RHSCL-2.4:rh-mysql56-mysql-0:5.6.37-5.el7.src",
          "7Workstation-RHSCL-2.4:rh-mysql56-mysql-0:5.6.37-5.el7.x86_64",
          "7Workstation-RHSCL-2.4:rh-mysql56-mysql-bench-0:5.6.37-5.el7.x86_64",
          "7Workstation-RHSCL-2.4:rh-mysql56-mysql-common-0:5.6.37-5.el7.x86_64",
          "7Workstation-RHSCL-2.4:rh-mysql56-mysql-config-0:5.6.37-5.el7.x86_64",
          "7Workstation-RHSCL-2.4:rh-mysql56-mysql-debuginfo-0:5.6.37-5.el7.x86_64",
          "7Workstation-RHSCL-2.4:rh-mysql56-mysql-devel-0:5.6.37-5.el7.x86_64",
          "7Workstation-RHSCL-2.4:rh-mysql56-mysql-errmsg-0:5.6.37-5.el7.x86_64",
          "7Workstation-RHSCL-2.4:rh-mysql56-mysql-server-0:5.6.37-5.el7.x86_64",
          "7Workstation-RHSCL-2.4:rh-mysql56-mysql-test-0:5.6.37-5.el7.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2017-3641"
        },
        {
          "category": "external",
          "summary": "RHBZ#1472693",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1472693"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2017-3641",
          "url": "https://www.cve.org/CVERecord?id=CVE-2017-3641"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2017-3641",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2017-3641"
        },
        {
          "category": "external",
          "summary": "http://www.oracle.com/technetwork/security-advisory/cpujul2017-3236622.html#AppendixMSQL",
          "url": "http://www.oracle.com/technetwork/security-advisory/cpujul2017-3236622.html#AppendixMSQL"
        }
      ],
      "release_date": "2017-07-19T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2017-09-21T07:42:12+00:00",
          "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAfter installing this update, the MySQL server daemon (mysqld) will be restarted automatically.",
          "product_ids": [
            "6Server-RHSCL-2.4-6.7.Z:rh-mysql56-mysql-0:5.6.37-5.el6.src",
            "6Server-RHSCL-2.4-6.7.Z:rh-mysql56-mysql-0:5.6.37-5.el6.x86_64",
            "6Server-RHSCL-2.4-6.7.Z:rh-mysql56-mysql-bench-0:5.6.37-5.el6.x86_64",
            "6Server-RHSCL-2.4-6.7.Z:rh-mysql56-mysql-common-0:5.6.37-5.el6.x86_64",
            "6Server-RHSCL-2.4-6.7.Z:rh-mysql56-mysql-config-0:5.6.37-5.el6.x86_64",
            "6Server-RHSCL-2.4-6.7.Z:rh-mysql56-mysql-debuginfo-0:5.6.37-5.el6.x86_64",
            "6Server-RHSCL-2.4-6.7.Z:rh-mysql56-mysql-devel-0:5.6.37-5.el6.x86_64",
            "6Server-RHSCL-2.4-6.7.Z:rh-mysql56-mysql-errmsg-0:5.6.37-5.el6.x86_64",
            "6Server-RHSCL-2.4-6.7.Z:rh-mysql56-mysql-server-0:5.6.37-5.el6.x86_64",
            "6Server-RHSCL-2.4-6.7.Z:rh-mysql56-mysql-test-0:5.6.37-5.el6.x86_64",
            "6Server-RHSCL-2.4:rh-mysql56-mysql-0:5.6.37-5.el6.src",
            "6Server-RHSCL-2.4:rh-mysql56-mysql-0:5.6.37-5.el6.x86_64",
            "6Server-RHSCL-2.4:rh-mysql56-mysql-bench-0:5.6.37-5.el6.x86_64",
            "6Server-RHSCL-2.4:rh-mysql56-mysql-common-0:5.6.37-5.el6.x86_64",
            "6Server-RHSCL-2.4:rh-mysql56-mysql-config-0:5.6.37-5.el6.x86_64",
            "6Server-RHSCL-2.4:rh-mysql56-mysql-debuginfo-0:5.6.37-5.el6.x86_64",
            "6Server-RHSCL-2.4:rh-mysql56-mysql-devel-0:5.6.37-5.el6.x86_64",
            "6Server-RHSCL-2.4:rh-mysql56-mysql-errmsg-0:5.6.37-5.el6.x86_64",
            "6Server-RHSCL-2.4:rh-mysql56-mysql-server-0:5.6.37-5.el6.x86_64",
            "6Server-RHSCL-2.4:rh-mysql56-mysql-test-0:5.6.37-5.el6.x86_64",
            "6Workstation-RHSCL-2.4:rh-mysql56-mysql-0:5.6.37-5.el6.src",
            "6Workstation-RHSCL-2.4:rh-mysql56-mysql-0:5.6.37-5.el6.x86_64",
            "6Workstation-RHSCL-2.4:rh-mysql56-mysql-bench-0:5.6.37-5.el6.x86_64",
            "6Workstation-RHSCL-2.4:rh-mysql56-mysql-common-0:5.6.37-5.el6.x86_64",
            "6Workstation-RHSCL-2.4:rh-mysql56-mysql-config-0:5.6.37-5.el6.x86_64",
            "6Workstation-RHSCL-2.4:rh-mysql56-mysql-debuginfo-0:5.6.37-5.el6.x86_64",
            "6Workstation-RHSCL-2.4:rh-mysql56-mysql-devel-0:5.6.37-5.el6.x86_64",
            "6Workstation-RHSCL-2.4:rh-mysql56-mysql-errmsg-0:5.6.37-5.el6.x86_64",
            "6Workstation-RHSCL-2.4:rh-mysql56-mysql-server-0:5.6.37-5.el6.x86_64",
            "6Workstation-RHSCL-2.4:rh-mysql56-mysql-test-0:5.6.37-5.el6.x86_64",
            "7Server-RHSCL-2.4-7.3.Z:rh-mysql56-mysql-0:5.6.37-5.el7.src",
            "7Server-RHSCL-2.4-7.3.Z:rh-mysql56-mysql-0:5.6.37-5.el7.x86_64",
            "7Server-RHSCL-2.4-7.3.Z:rh-mysql56-mysql-bench-0:5.6.37-5.el7.x86_64",
            "7Server-RHSCL-2.4-7.3.Z:rh-mysql56-mysql-common-0:5.6.37-5.el7.x86_64",
            "7Server-RHSCL-2.4-7.3.Z:rh-mysql56-mysql-config-0:5.6.37-5.el7.x86_64",
            "7Server-RHSCL-2.4-7.3.Z:rh-mysql56-mysql-debuginfo-0:5.6.37-5.el7.x86_64",
            "7Server-RHSCL-2.4-7.3.Z:rh-mysql56-mysql-devel-0:5.6.37-5.el7.x86_64",
            "7Server-RHSCL-2.4-7.3.Z:rh-mysql56-mysql-errmsg-0:5.6.37-5.el7.x86_64",
            "7Server-RHSCL-2.4-7.3.Z:rh-mysql56-mysql-server-0:5.6.37-5.el7.x86_64",
            "7Server-RHSCL-2.4-7.3.Z:rh-mysql56-mysql-test-0:5.6.37-5.el7.x86_64",
            "7Server-RHSCL-2.4:rh-mysql56-mysql-0:5.6.37-5.el7.src",
            "7Server-RHSCL-2.4:rh-mysql56-mysql-0:5.6.37-5.el7.x86_64",
            "7Server-RHSCL-2.4:rh-mysql56-mysql-bench-0:5.6.37-5.el7.x86_64",
            "7Server-RHSCL-2.4:rh-mysql56-mysql-common-0:5.6.37-5.el7.x86_64",
            "7Server-RHSCL-2.4:rh-mysql56-mysql-config-0:5.6.37-5.el7.x86_64",
            "7Server-RHSCL-2.4:rh-mysql56-mysql-debuginfo-0:5.6.37-5.el7.x86_64",
            "7Server-RHSCL-2.4:rh-mysql56-mysql-devel-0:5.6.37-5.el7.x86_64",
            "7Server-RHSCL-2.4:rh-mysql56-mysql-errmsg-0:5.6.37-5.el7.x86_64",
            "7Server-RHSCL-2.4:rh-mysql56-mysql-server-0:5.6.37-5.el7.x86_64",
            "7Server-RHSCL-2.4:rh-mysql56-mysql-test-0:5.6.37-5.el7.x86_64",
            "7Workstation-RHSCL-2.4:rh-mysql56-mysql-0:5.6.37-5.el7.src",
            "7Workstation-RHSCL-2.4:rh-mysql56-mysql-0:5.6.37-5.el7.x86_64",
            "7Workstation-RHSCL-2.4:rh-mysql56-mysql-bench-0:5.6.37-5.el7.x86_64",
            "7Workstation-RHSCL-2.4:rh-mysql56-mysql-common-0:5.6.37-5.el7.x86_64",
            "7Workstation-RHSCL-2.4:rh-mysql56-mysql-config-0:5.6.37-5.el7.x86_64",
            "7Workstation-RHSCL-2.4:rh-mysql56-mysql-debuginfo-0:5.6.37-5.el7.x86_64",
            "7Workstation-RHSCL-2.4:rh-mysql56-mysql-devel-0:5.6.37-5.el7.x86_64",
            "7Workstation-RHSCL-2.4:rh-mysql56-mysql-errmsg-0:5.6.37-5.el7.x86_64",
            "7Workstation-RHSCL-2.4:rh-mysql56-mysql-server-0:5.6.37-5.el7.x86_64",
            "7Workstation-RHSCL-2.4:rh-mysql56-mysql-test-0:5.6.37-5.el7.x86_64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2017:2787"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 4.9,
            "baseSeverity": "MEDIUM",
            "confidentialityImpact": "NONE",
            "integrityImpact": "NONE",
            "privilegesRequired": "HIGH",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.0"
          },
          "products": [
            "6Server-RHSCL-2.4-6.7.Z:rh-mysql56-mysql-0:5.6.37-5.el6.src",
            "6Server-RHSCL-2.4-6.7.Z:rh-mysql56-mysql-0:5.6.37-5.el6.x86_64",
            "6Server-RHSCL-2.4-6.7.Z:rh-mysql56-mysql-bench-0:5.6.37-5.el6.x86_64",
            "6Server-RHSCL-2.4-6.7.Z:rh-mysql56-mysql-common-0:5.6.37-5.el6.x86_64",
            "6Server-RHSCL-2.4-6.7.Z:rh-mysql56-mysql-config-0:5.6.37-5.el6.x86_64",
            "6Server-RHSCL-2.4-6.7.Z:rh-mysql56-mysql-debuginfo-0:5.6.37-5.el6.x86_64",
            "6Server-RHSCL-2.4-6.7.Z:rh-mysql56-mysql-devel-0:5.6.37-5.el6.x86_64",
            "6Server-RHSCL-2.4-6.7.Z:rh-mysql56-mysql-errmsg-0:5.6.37-5.el6.x86_64",
            "6Server-RHSCL-2.4-6.7.Z:rh-mysql56-mysql-server-0:5.6.37-5.el6.x86_64",
            "6Server-RHSCL-2.4-6.7.Z:rh-mysql56-mysql-test-0:5.6.37-5.el6.x86_64",
            "6Server-RHSCL-2.4:rh-mysql56-mysql-0:5.6.37-5.el6.src",
            "6Server-RHSCL-2.4:rh-mysql56-mysql-0:5.6.37-5.el6.x86_64",
            "6Server-RHSCL-2.4:rh-mysql56-mysql-bench-0:5.6.37-5.el6.x86_64",
            "6Server-RHSCL-2.4:rh-mysql56-mysql-common-0:5.6.37-5.el6.x86_64",
            "6Server-RHSCL-2.4:rh-mysql56-mysql-config-0:5.6.37-5.el6.x86_64",
            "6Server-RHSCL-2.4:rh-mysql56-mysql-debuginfo-0:5.6.37-5.el6.x86_64",
            "6Server-RHSCL-2.4:rh-mysql56-mysql-devel-0:5.6.37-5.el6.x86_64",
            "6Server-RHSCL-2.4:rh-mysql56-mysql-errmsg-0:5.6.37-5.el6.x86_64",
            "6Server-RHSCL-2.4:rh-mysql56-mysql-server-0:5.6.37-5.el6.x86_64",
            "6Server-RHSCL-2.4:rh-mysql56-mysql-test-0:5.6.37-5.el6.x86_64",
            "6Workstation-RHSCL-2.4:rh-mysql56-mysql-0:5.6.37-5.el6.src",
            "6Workstation-RHSCL-2.4:rh-mysql56-mysql-0:5.6.37-5.el6.x86_64",
            "6Workstation-RHSCL-2.4:rh-mysql56-mysql-bench-0:5.6.37-5.el6.x86_64",
            "6Workstation-RHSCL-2.4:rh-mysql56-mysql-common-0:5.6.37-5.el6.x86_64",
            "6Workstation-RHSCL-2.4:rh-mysql56-mysql-config-0:5.6.37-5.el6.x86_64",
            "6Workstation-RHSCL-2.4:rh-mysql56-mysql-debuginfo-0:5.6.37-5.el6.x86_64",
            "6Workstation-RHSCL-2.4:rh-mysql56-mysql-devel-0:5.6.37-5.el6.x86_64",
            "6Workstation-RHSCL-2.4:rh-mysql56-mysql-errmsg-0:5.6.37-5.el6.x86_64",
            "6Workstation-RHSCL-2.4:rh-mysql56-mysql-server-0:5.6.37-5.el6.x86_64",
            "6Workstation-RHSCL-2.4:rh-mysql56-mysql-test-0:5.6.37-5.el6.x86_64",
            "7Server-RHSCL-2.4-7.3.Z:rh-mysql56-mysql-0:5.6.37-5.el7.src",
            "7Server-RHSCL-2.4-7.3.Z:rh-mysql56-mysql-0:5.6.37-5.el7.x86_64",
            "7Server-RHSCL-2.4-7.3.Z:rh-mysql56-mysql-bench-0:5.6.37-5.el7.x86_64",
            "7Server-RHSCL-2.4-7.3.Z:rh-mysql56-mysql-common-0:5.6.37-5.el7.x86_64",
            "7Server-RHSCL-2.4-7.3.Z:rh-mysql56-mysql-config-0:5.6.37-5.el7.x86_64",
            "7Server-RHSCL-2.4-7.3.Z:rh-mysql56-mysql-debuginfo-0:5.6.37-5.el7.x86_64",
            "7Server-RHSCL-2.4-7.3.Z:rh-mysql56-mysql-devel-0:5.6.37-5.el7.x86_64",
            "7Server-RHSCL-2.4-7.3.Z:rh-mysql56-mysql-errmsg-0:5.6.37-5.el7.x86_64",
            "7Server-RHSCL-2.4-7.3.Z:rh-mysql56-mysql-server-0:5.6.37-5.el7.x86_64",
            "7Server-RHSCL-2.4-7.3.Z:rh-mysql56-mysql-test-0:5.6.37-5.el7.x86_64",
            "7Server-RHSCL-2.4:rh-mysql56-mysql-0:5.6.37-5.el7.src",
            "7Server-RHSCL-2.4:rh-mysql56-mysql-0:5.6.37-5.el7.x86_64",
            "7Server-RHSCL-2.4:rh-mysql56-mysql-bench-0:5.6.37-5.el7.x86_64",
            "7Server-RHSCL-2.4:rh-mysql56-mysql-common-0:5.6.37-5.el7.x86_64",
            "7Server-RHSCL-2.4:rh-mysql56-mysql-config-0:5.6.37-5.el7.x86_64",
            "7Server-RHSCL-2.4:rh-mysql56-mysql-debuginfo-0:5.6.37-5.el7.x86_64",
            "7Server-RHSCL-2.4:rh-mysql56-mysql-devel-0:5.6.37-5.el7.x86_64",
            "7Server-RHSCL-2.4:rh-mysql56-mysql-errmsg-0:5.6.37-5.el7.x86_64",
            "7Server-RHSCL-2.4:rh-mysql56-mysql-server-0:5.6.37-5.el7.x86_64",
            "7Server-RHSCL-2.4:rh-mysql56-mysql-test-0:5.6.37-5.el7.x86_64",
            "7Workstation-RHSCL-2.4:rh-mysql56-mysql-0:5.6.37-5.el7.src",
            "7Workstation-RHSCL-2.4:rh-mysql56-mysql-0:5.6.37-5.el7.x86_64",
            "7Workstation-RHSCL-2.4:rh-mysql56-mysql-bench-0:5.6.37-5.el7.x86_64",
            "7Workstation-RHSCL-2.4:rh-mysql56-mysql-common-0:5.6.37-5.el7.x86_64",
            "7Workstation-RHSCL-2.4:rh-mysql56-mysql-config-0:5.6.37-5.el7.x86_64",
            "7Workstation-RHSCL-2.4:rh-mysql56-mysql-debuginfo-0:5.6.37-5.el7.x86_64",
            "7Workstation-RHSCL-2.4:rh-mysql56-mysql-devel-0:5.6.37-5.el7.x86_64",
            "7Workstation-RHSCL-2.4:rh-mysql56-mysql-errmsg-0:5.6.37-5.el7.x86_64",
            "7Workstation-RHSCL-2.4:rh-mysql56-mysql-server-0:5.6.37-5.el7.x86_64",
            "7Workstation-RHSCL-2.4:rh-mysql56-mysql-test-0:5.6.37-5.el7.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Moderate"
        }
      ],
      "title": "mysql: Server: DML unspecified vulnerability (CPU Jul 2017)"
    },
    {
      "cve": "CVE-2017-3647",
      "discovery_date": "2017-07-19T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "1472703"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Replication). Supported versions that are affected are 5.6.36 and earlier and 5.7.18 and earlier. Difficult to exploit vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.0 Base Score 4.4 (Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:H).",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "mysql: Server: Replication unspecified vulnerability (CPU Jul 2017)",
          "title": "Vulnerability summary"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "6Server-RHSCL-2.4-6.7.Z:rh-mysql56-mysql-0:5.6.37-5.el6.src",
          "6Server-RHSCL-2.4-6.7.Z:rh-mysql56-mysql-0:5.6.37-5.el6.x86_64",
          "6Server-RHSCL-2.4-6.7.Z:rh-mysql56-mysql-bench-0:5.6.37-5.el6.x86_64",
          "6Server-RHSCL-2.4-6.7.Z:rh-mysql56-mysql-common-0:5.6.37-5.el6.x86_64",
          "6Server-RHSCL-2.4-6.7.Z:rh-mysql56-mysql-config-0:5.6.37-5.el6.x86_64",
          "6Server-RHSCL-2.4-6.7.Z:rh-mysql56-mysql-debuginfo-0:5.6.37-5.el6.x86_64",
          "6Server-RHSCL-2.4-6.7.Z:rh-mysql56-mysql-devel-0:5.6.37-5.el6.x86_64",
          "6Server-RHSCL-2.4-6.7.Z:rh-mysql56-mysql-errmsg-0:5.6.37-5.el6.x86_64",
          "6Server-RHSCL-2.4-6.7.Z:rh-mysql56-mysql-server-0:5.6.37-5.el6.x86_64",
          "6Server-RHSCL-2.4-6.7.Z:rh-mysql56-mysql-test-0:5.6.37-5.el6.x86_64",
          "6Server-RHSCL-2.4:rh-mysql56-mysql-0:5.6.37-5.el6.src",
          "6Server-RHSCL-2.4:rh-mysql56-mysql-0:5.6.37-5.el6.x86_64",
          "6Server-RHSCL-2.4:rh-mysql56-mysql-bench-0:5.6.37-5.el6.x86_64",
          "6Server-RHSCL-2.4:rh-mysql56-mysql-common-0:5.6.37-5.el6.x86_64",
          "6Server-RHSCL-2.4:rh-mysql56-mysql-config-0:5.6.37-5.el6.x86_64",
          "6Server-RHSCL-2.4:rh-mysql56-mysql-debuginfo-0:5.6.37-5.el6.x86_64",
          "6Server-RHSCL-2.4:rh-mysql56-mysql-devel-0:5.6.37-5.el6.x86_64",
          "6Server-RHSCL-2.4:rh-mysql56-mysql-errmsg-0:5.6.37-5.el6.x86_64",
          "6Server-RHSCL-2.4:rh-mysql56-mysql-server-0:5.6.37-5.el6.x86_64",
          "6Server-RHSCL-2.4:rh-mysql56-mysql-test-0:5.6.37-5.el6.x86_64",
          "6Workstation-RHSCL-2.4:rh-mysql56-mysql-0:5.6.37-5.el6.src",
          "6Workstation-RHSCL-2.4:rh-mysql56-mysql-0:5.6.37-5.el6.x86_64",
          "6Workstation-RHSCL-2.4:rh-mysql56-mysql-bench-0:5.6.37-5.el6.x86_64",
          "6Workstation-RHSCL-2.4:rh-mysql56-mysql-common-0:5.6.37-5.el6.x86_64",
          "6Workstation-RHSCL-2.4:rh-mysql56-mysql-config-0:5.6.37-5.el6.x86_64",
          "6Workstation-RHSCL-2.4:rh-mysql56-mysql-debuginfo-0:5.6.37-5.el6.x86_64",
          "6Workstation-RHSCL-2.4:rh-mysql56-mysql-devel-0:5.6.37-5.el6.x86_64",
          "6Workstation-RHSCL-2.4:rh-mysql56-mysql-errmsg-0:5.6.37-5.el6.x86_64",
          "6Workstation-RHSCL-2.4:rh-mysql56-mysql-server-0:5.6.37-5.el6.x86_64",
          "6Workstation-RHSCL-2.4:rh-mysql56-mysql-test-0:5.6.37-5.el6.x86_64",
          "7Server-RHSCL-2.4-7.3.Z:rh-mysql56-mysql-0:5.6.37-5.el7.src",
          "7Server-RHSCL-2.4-7.3.Z:rh-mysql56-mysql-0:5.6.37-5.el7.x86_64",
          "7Server-RHSCL-2.4-7.3.Z:rh-mysql56-mysql-bench-0:5.6.37-5.el7.x86_64",
          "7Server-RHSCL-2.4-7.3.Z:rh-mysql56-mysql-common-0:5.6.37-5.el7.x86_64",
          "7Server-RHSCL-2.4-7.3.Z:rh-mysql56-mysql-config-0:5.6.37-5.el7.x86_64",
          "7Server-RHSCL-2.4-7.3.Z:rh-mysql56-mysql-debuginfo-0:5.6.37-5.el7.x86_64",
          "7Server-RHSCL-2.4-7.3.Z:rh-mysql56-mysql-devel-0:5.6.37-5.el7.x86_64",
          "7Server-RHSCL-2.4-7.3.Z:rh-mysql56-mysql-errmsg-0:5.6.37-5.el7.x86_64",
          "7Server-RHSCL-2.4-7.3.Z:rh-mysql56-mysql-server-0:5.6.37-5.el7.x86_64",
          "7Server-RHSCL-2.4-7.3.Z:rh-mysql56-mysql-test-0:5.6.37-5.el7.x86_64",
          "7Server-RHSCL-2.4:rh-mysql56-mysql-0:5.6.37-5.el7.src",
          "7Server-RHSCL-2.4:rh-mysql56-mysql-0:5.6.37-5.el7.x86_64",
          "7Server-RHSCL-2.4:rh-mysql56-mysql-bench-0:5.6.37-5.el7.x86_64",
          "7Server-RHSCL-2.4:rh-mysql56-mysql-common-0:5.6.37-5.el7.x86_64",
          "7Server-RHSCL-2.4:rh-mysql56-mysql-config-0:5.6.37-5.el7.x86_64",
          "7Server-RHSCL-2.4:rh-mysql56-mysql-debuginfo-0:5.6.37-5.el7.x86_64",
          "7Server-RHSCL-2.4:rh-mysql56-mysql-devel-0:5.6.37-5.el7.x86_64",
          "7Server-RHSCL-2.4:rh-mysql56-mysql-errmsg-0:5.6.37-5.el7.x86_64",
          "7Server-RHSCL-2.4:rh-mysql56-mysql-server-0:5.6.37-5.el7.x86_64",
          "7Server-RHSCL-2.4:rh-mysql56-mysql-test-0:5.6.37-5.el7.x86_64",
          "7Workstation-RHSCL-2.4:rh-mysql56-mysql-0:5.6.37-5.el7.src",
          "7Workstation-RHSCL-2.4:rh-mysql56-mysql-0:5.6.37-5.el7.x86_64",
          "7Workstation-RHSCL-2.4:rh-mysql56-mysql-bench-0:5.6.37-5.el7.x86_64",
          "7Workstation-RHSCL-2.4:rh-mysql56-mysql-common-0:5.6.37-5.el7.x86_64",
          "7Workstation-RHSCL-2.4:rh-mysql56-mysql-config-0:5.6.37-5.el7.x86_64",
          "7Workstation-RHSCL-2.4:rh-mysql56-mysql-debuginfo-0:5.6.37-5.el7.x86_64",
          "7Workstation-RHSCL-2.4:rh-mysql56-mysql-devel-0:5.6.37-5.el7.x86_64",
          "7Workstation-RHSCL-2.4:rh-mysql56-mysql-errmsg-0:5.6.37-5.el7.x86_64",
          "7Workstation-RHSCL-2.4:rh-mysql56-mysql-server-0:5.6.37-5.el7.x86_64",
          "7Workstation-RHSCL-2.4:rh-mysql56-mysql-test-0:5.6.37-5.el7.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2017-3647"
        },
        {
          "category": "external",
          "summary": "RHBZ#1472703",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1472703"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2017-3647",
          "url": "https://www.cve.org/CVERecord?id=CVE-2017-3647"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2017-3647",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2017-3647"
        },
        {
          "category": "external",
          "summary": "http://www.oracle.com/technetwork/security-advisory/cpujul2017-3236622.html#AppendixMSQL",
          "url": "http://www.oracle.com/technetwork/security-advisory/cpujul2017-3236622.html#AppendixMSQL"
        }
      ],
      "release_date": "2017-07-19T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2017-09-21T07:42:12+00:00",
          "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAfter installing this update, the MySQL server daemon (mysqld) will be restarted automatically.",
          "product_ids": [
            "6Server-RHSCL-2.4-6.7.Z:rh-mysql56-mysql-0:5.6.37-5.el6.src",
            "6Server-RHSCL-2.4-6.7.Z:rh-mysql56-mysql-0:5.6.37-5.el6.x86_64",
            "6Server-RHSCL-2.4-6.7.Z:rh-mysql56-mysql-bench-0:5.6.37-5.el6.x86_64",
            "6Server-RHSCL-2.4-6.7.Z:rh-mysql56-mysql-common-0:5.6.37-5.el6.x86_64",
            "6Server-RHSCL-2.4-6.7.Z:rh-mysql56-mysql-config-0:5.6.37-5.el6.x86_64",
            "6Server-RHSCL-2.4-6.7.Z:rh-mysql56-mysql-debuginfo-0:5.6.37-5.el6.x86_64",
            "6Server-RHSCL-2.4-6.7.Z:rh-mysql56-mysql-devel-0:5.6.37-5.el6.x86_64",
            "6Server-RHSCL-2.4-6.7.Z:rh-mysql56-mysql-errmsg-0:5.6.37-5.el6.x86_64",
            "6Server-RHSCL-2.4-6.7.Z:rh-mysql56-mysql-server-0:5.6.37-5.el6.x86_64",
            "6Server-RHSCL-2.4-6.7.Z:rh-mysql56-mysql-test-0:5.6.37-5.el6.x86_64",
            "6Server-RHSCL-2.4:rh-mysql56-mysql-0:5.6.37-5.el6.src",
            "6Server-RHSCL-2.4:rh-mysql56-mysql-0:5.6.37-5.el6.x86_64",
            "6Server-RHSCL-2.4:rh-mysql56-mysql-bench-0:5.6.37-5.el6.x86_64",
            "6Server-RHSCL-2.4:rh-mysql56-mysql-common-0:5.6.37-5.el6.x86_64",
            "6Server-RHSCL-2.4:rh-mysql56-mysql-config-0:5.6.37-5.el6.x86_64",
            "6Server-RHSCL-2.4:rh-mysql56-mysql-debuginfo-0:5.6.37-5.el6.x86_64",
            "6Server-RHSCL-2.4:rh-mysql56-mysql-devel-0:5.6.37-5.el6.x86_64",
            "6Server-RHSCL-2.4:rh-mysql56-mysql-errmsg-0:5.6.37-5.el6.x86_64",
            "6Server-RHSCL-2.4:rh-mysql56-mysql-server-0:5.6.37-5.el6.x86_64",
            "6Server-RHSCL-2.4:rh-mysql56-mysql-test-0:5.6.37-5.el6.x86_64",
            "6Workstation-RHSCL-2.4:rh-mysql56-mysql-0:5.6.37-5.el6.src",
            "6Workstation-RHSCL-2.4:rh-mysql56-mysql-0:5.6.37-5.el6.x86_64",
            "6Workstation-RHSCL-2.4:rh-mysql56-mysql-bench-0:5.6.37-5.el6.x86_64",
            "6Workstation-RHSCL-2.4:rh-mysql56-mysql-common-0:5.6.37-5.el6.x86_64",
            "6Workstation-RHSCL-2.4:rh-mysql56-mysql-config-0:5.6.37-5.el6.x86_64",
            "6Workstation-RHSCL-2.4:rh-mysql56-mysql-debuginfo-0:5.6.37-5.el6.x86_64",
            "6Workstation-RHSCL-2.4:rh-mysql56-mysql-devel-0:5.6.37-5.el6.x86_64",
            "6Workstation-RHSCL-2.4:rh-mysql56-mysql-errmsg-0:5.6.37-5.el6.x86_64",
            "6Workstation-RHSCL-2.4:rh-mysql56-mysql-server-0:5.6.37-5.el6.x86_64",
            "6Workstation-RHSCL-2.4:rh-mysql56-mysql-test-0:5.6.37-5.el6.x86_64",
            "7Server-RHSCL-2.4-7.3.Z:rh-mysql56-mysql-0:5.6.37-5.el7.src",
            "7Server-RHSCL-2.4-7.3.Z:rh-mysql56-mysql-0:5.6.37-5.el7.x86_64",
            "7Server-RHSCL-2.4-7.3.Z:rh-mysql56-mysql-bench-0:5.6.37-5.el7.x86_64",
            "7Server-RHSCL-2.4-7.3.Z:rh-mysql56-mysql-common-0:5.6.37-5.el7.x86_64",
            "7Server-RHSCL-2.4-7.3.Z:rh-mysql56-mysql-config-0:5.6.37-5.el7.x86_64",
            "7Server-RHSCL-2.4-7.3.Z:rh-mysql56-mysql-debuginfo-0:5.6.37-5.el7.x86_64",
            "7Server-RHSCL-2.4-7.3.Z:rh-mysql56-mysql-devel-0:5.6.37-5.el7.x86_64",
            "7Server-RHSCL-2.4-7.3.Z:rh-mysql56-mysql-errmsg-0:5.6.37-5.el7.x86_64",
            "7Server-RHSCL-2.4-7.3.Z:rh-mysql56-mysql-server-0:5.6.37-5.el7.x86_64",
            "7Server-RHSCL-2.4-7.3.Z:rh-mysql56-mysql-test-0:5.6.37-5.el7.x86_64",
            "7Server-RHSCL-2.4:rh-mysql56-mysql-0:5.6.37-5.el7.src",
            "7Server-RHSCL-2.4:rh-mysql56-mysql-0:5.6.37-5.el7.x86_64",
            "7Server-RHSCL-2.4:rh-mysql56-mysql-bench-0:5.6.37-5.el7.x86_64",
            "7Server-RHSCL-2.4:rh-mysql56-mysql-common-0:5.6.37-5.el7.x86_64",
            "7Server-RHSCL-2.4:rh-mysql56-mysql-config-0:5.6.37-5.el7.x86_64",
            "7Server-RHSCL-2.4:rh-mysql56-mysql-debuginfo-0:5.6.37-5.el7.x86_64",
            "7Server-RHSCL-2.4:rh-mysql56-mysql-devel-0:5.6.37-5.el7.x86_64",
            "7Server-RHSCL-2.4:rh-mysql56-mysql-errmsg-0:5.6.37-5.el7.x86_64",
            "7Server-RHSCL-2.4:rh-mysql56-mysql-server-0:5.6.37-5.el7.x86_64",
            "7Server-RHSCL-2.4:rh-mysql56-mysql-test-0:5.6.37-5.el7.x86_64",
            "7Workstation-RHSCL-2.4:rh-mysql56-mysql-0:5.6.37-5.el7.src",
            "7Workstation-RHSCL-2.4:rh-mysql56-mysql-0:5.6.37-5.el7.x86_64",
            "7Workstation-RHSCL-2.4:rh-mysql56-mysql-bench-0:5.6.37-5.el7.x86_64",
            "7Workstation-RHSCL-2.4:rh-mysql56-mysql-common-0:5.6.37-5.el7.x86_64",
            "7Workstation-RHSCL-2.4:rh-mysql56-mysql-config-0:5.6.37-5.el7.x86_64",
            "7Workstation-RHSCL-2.4:rh-mysql56-mysql-debuginfo-0:5.6.37-5.el7.x86_64",
            "7Workstation-RHSCL-2.4:rh-mysql56-mysql-devel-0:5.6.37-5.el7.x86_64",
            "7Workstation-RHSCL-2.4:rh-mysql56-mysql-errmsg-0:5.6.37-5.el7.x86_64",
            "7Workstation-RHSCL-2.4:rh-mysql56-mysql-server-0:5.6.37-5.el7.x86_64",
            "7Workstation-RHSCL-2.4:rh-mysql56-mysql-test-0:5.6.37-5.el7.x86_64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2017:2787"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "HIGH",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 4.4,
            "baseSeverity": "MEDIUM",
            "confidentialityImpact": "NONE",
            "integrityImpact": "NONE",
            "privilegesRequired": "HIGH",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.0/AV:N/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.0"
          },
          "products": [
            "6Server-RHSCL-2.4-6.7.Z:rh-mysql56-mysql-0:5.6.37-5.el6.src",
            "6Server-RHSCL-2.4-6.7.Z:rh-mysql56-mysql-0:5.6.37-5.el6.x86_64",
            "6Server-RHSCL-2.4-6.7.Z:rh-mysql56-mysql-bench-0:5.6.37-5.el6.x86_64",
            "6Server-RHSCL-2.4-6.7.Z:rh-mysql56-mysql-common-0:5.6.37-5.el6.x86_64",
            "6Server-RHSCL-2.4-6.7.Z:rh-mysql56-mysql-config-0:5.6.37-5.el6.x86_64",
            "6Server-RHSCL-2.4-6.7.Z:rh-mysql56-mysql-debuginfo-0:5.6.37-5.el6.x86_64",
            "6Server-RHSCL-2.4-6.7.Z:rh-mysql56-mysql-devel-0:5.6.37-5.el6.x86_64",
            "6Server-RHSCL-2.4-6.7.Z:rh-mysql56-mysql-errmsg-0:5.6.37-5.el6.x86_64",
            "6Server-RHSCL-2.4-6.7.Z:rh-mysql56-mysql-server-0:5.6.37-5.el6.x86_64",
            "6Server-RHSCL-2.4-6.7.Z:rh-mysql56-mysql-test-0:5.6.37-5.el6.x86_64",
            "6Server-RHSCL-2.4:rh-mysql56-mysql-0:5.6.37-5.el6.src",
            "6Server-RHSCL-2.4:rh-mysql56-mysql-0:5.6.37-5.el6.x86_64",
            "6Server-RHSCL-2.4:rh-mysql56-mysql-bench-0:5.6.37-5.el6.x86_64",
            "6Server-RHSCL-2.4:rh-mysql56-mysql-common-0:5.6.37-5.el6.x86_64",
            "6Server-RHSCL-2.4:rh-mysql56-mysql-config-0:5.6.37-5.el6.x86_64",
            "6Server-RHSCL-2.4:rh-mysql56-mysql-debuginfo-0:5.6.37-5.el6.x86_64",
            "6Server-RHSCL-2.4:rh-mysql56-mysql-devel-0:5.6.37-5.el6.x86_64",
            "6Server-RHSCL-2.4:rh-mysql56-mysql-errmsg-0:5.6.37-5.el6.x86_64",
            "6Server-RHSCL-2.4:rh-mysql56-mysql-server-0:5.6.37-5.el6.x86_64",
            "6Server-RHSCL-2.4:rh-mysql56-mysql-test-0:5.6.37-5.el6.x86_64",
            "6Workstation-RHSCL-2.4:rh-mysql56-mysql-0:5.6.37-5.el6.src",
            "6Workstation-RHSCL-2.4:rh-mysql56-mysql-0:5.6.37-5.el6.x86_64",
            "6Workstation-RHSCL-2.4:rh-mysql56-mysql-bench-0:5.6.37-5.el6.x86_64",
            "6Workstation-RHSCL-2.4:rh-mysql56-mysql-common-0:5.6.37-5.el6.x86_64",
            "6Workstation-RHSCL-2.4:rh-mysql56-mysql-config-0:5.6.37-5.el6.x86_64",
            "6Workstation-RHSCL-2.4:rh-mysql56-mysql-debuginfo-0:5.6.37-5.el6.x86_64",
            "6Workstation-RHSCL-2.4:rh-mysql56-mysql-devel-0:5.6.37-5.el6.x86_64",
            "6Workstation-RHSCL-2.4:rh-mysql56-mysql-errmsg-0:5.6.37-5.el6.x86_64",
            "6Workstation-RHSCL-2.4:rh-mysql56-mysql-server-0:5.6.37-5.el6.x86_64",
            "6Workstation-RHSCL-2.4:rh-mysql56-mysql-test-0:5.6.37-5.el6.x86_64",
            "7Server-RHSCL-2.4-7.3.Z:rh-mysql56-mysql-0:5.6.37-5.el7.src",
            "7Server-RHSCL-2.4-7.3.Z:rh-mysql56-mysql-0:5.6.37-5.el7.x86_64",
            "7Server-RHSCL-2.4-7.3.Z:rh-mysql56-mysql-bench-0:5.6.37-5.el7.x86_64",
            "7Server-RHSCL-2.4-7.3.Z:rh-mysql56-mysql-common-0:5.6.37-5.el7.x86_64",
            "7Server-RHSCL-2.4-7.3.Z:rh-mysql56-mysql-config-0:5.6.37-5.el7.x86_64",
            "7Server-RHSCL-2.4-7.3.Z:rh-mysql56-mysql-debuginfo-0:5.6.37-5.el7.x86_64",
            "7Server-RHSCL-2.4-7.3.Z:rh-mysql56-mysql-devel-0:5.6.37-5.el7.x86_64",
            "7Server-RHSCL-2.4-7.3.Z:rh-mysql56-mysql-errmsg-0:5.6.37-5.el7.x86_64",
            "7Server-RHSCL-2.4-7.3.Z:rh-mysql56-mysql-server-0:5.6.37-5.el7.x86_64",
            "7Server-RHSCL-2.4-7.3.Z:rh-mysql56-mysql-test-0:5.6.37-5.el7.x86_64",
            "7Server-RHSCL-2.4:rh-mysql56-mysql-0:5.6.37-5.el7.src",
            "7Server-RHSCL-2.4:rh-mysql56-mysql-0:5.6.37-5.el7.x86_64",
            "7Server-RHSCL-2.4:rh-mysql56-mysql-bench-0:5.6.37-5.el7.x86_64",
            "7Server-RHSCL-2.4:rh-mysql56-mysql-common-0:5.6.37-5.el7.x86_64",
            "7Server-RHSCL-2.4:rh-mysql56-mysql-config-0:5.6.37-5.el7.x86_64",
            "7Server-RHSCL-2.4:rh-mysql56-mysql-debuginfo-0:5.6.37-5.el7.x86_64",
            "7Server-RHSCL-2.4:rh-mysql56-mysql-devel-0:5.6.37-5.el7.x86_64",
            "7Server-RHSCL-2.4:rh-mysql56-mysql-errmsg-0:5.6.37-5.el7.x86_64",
            "7Server-RHSCL-2.4:rh-mysql56-mysql-server-0:5.6.37-5.el7.x86_64",
            "7Server-RHSCL-2.4:rh-mysql56-mysql-test-0:5.6.37-5.el7.x86_64",
            "7Workstation-RHSCL-2.4:rh-mysql56-mysql-0:5.6.37-5.el7.src",
            "7Workstation-RHSCL-2.4:rh-mysql56-mysql-0:5.6.37-5.el7.x86_64",
            "7Workstation-RHSCL-2.4:rh-mysql56-mysql-bench-0:5.6.37-5.el7.x86_64",
            "7Workstation-RHSCL-2.4:rh-mysql56-mysql-common-0:5.6.37-5.el7.x86_64",
            "7Workstation-RHSCL-2.4:rh-mysql56-mysql-config-0:5.6.37-5.el7.x86_64",
            "7Workstation-RHSCL-2.4:rh-mysql56-mysql-debuginfo-0:5.6.37-5.el7.x86_64",
            "7Workstation-RHSCL-2.4:rh-mysql56-mysql-devel-0:5.6.37-5.el7.x86_64",
            "7Workstation-RHSCL-2.4:rh-mysql56-mysql-errmsg-0:5.6.37-5.el7.x86_64",
            "7Workstation-RHSCL-2.4:rh-mysql56-mysql-server-0:5.6.37-5.el7.x86_64",
            "7Workstation-RHSCL-2.4:rh-mysql56-mysql-test-0:5.6.37-5.el7.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Moderate"
        }
      ],
      "title": "mysql: Server: Replication unspecified vulnerability (CPU Jul 2017)"
    },
    {
      "cve": "CVE-2017-3648",
      "discovery_date": "2017-07-19T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "1472704"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Charsets). Supported versions that are affected are 5.5.56 and earlier, 5.6.36 and earlier and 5.7.18 and earlier. Difficult to exploit vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.0 Base Score 4.4 (Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:H).",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "mysql: Server: Charsets unspecified vulnerability (CPU Jul 2017)",
          "title": "Vulnerability summary"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "6Server-RHSCL-2.4-6.7.Z:rh-mysql56-mysql-0:5.6.37-5.el6.src",
          "6Server-RHSCL-2.4-6.7.Z:rh-mysql56-mysql-0:5.6.37-5.el6.x86_64",
          "6Server-RHSCL-2.4-6.7.Z:rh-mysql56-mysql-bench-0:5.6.37-5.el6.x86_64",
          "6Server-RHSCL-2.4-6.7.Z:rh-mysql56-mysql-common-0:5.6.37-5.el6.x86_64",
          "6Server-RHSCL-2.4-6.7.Z:rh-mysql56-mysql-config-0:5.6.37-5.el6.x86_64",
          "6Server-RHSCL-2.4-6.7.Z:rh-mysql56-mysql-debuginfo-0:5.6.37-5.el6.x86_64",
          "6Server-RHSCL-2.4-6.7.Z:rh-mysql56-mysql-devel-0:5.6.37-5.el6.x86_64",
          "6Server-RHSCL-2.4-6.7.Z:rh-mysql56-mysql-errmsg-0:5.6.37-5.el6.x86_64",
          "6Server-RHSCL-2.4-6.7.Z:rh-mysql56-mysql-server-0:5.6.37-5.el6.x86_64",
          "6Server-RHSCL-2.4-6.7.Z:rh-mysql56-mysql-test-0:5.6.37-5.el6.x86_64",
          "6Server-RHSCL-2.4:rh-mysql56-mysql-0:5.6.37-5.el6.src",
          "6Server-RHSCL-2.4:rh-mysql56-mysql-0:5.6.37-5.el6.x86_64",
          "6Server-RHSCL-2.4:rh-mysql56-mysql-bench-0:5.6.37-5.el6.x86_64",
          "6Server-RHSCL-2.4:rh-mysql56-mysql-common-0:5.6.37-5.el6.x86_64",
          "6Server-RHSCL-2.4:rh-mysql56-mysql-config-0:5.6.37-5.el6.x86_64",
          "6Server-RHSCL-2.4:rh-mysql56-mysql-debuginfo-0:5.6.37-5.el6.x86_64",
          "6Server-RHSCL-2.4:rh-mysql56-mysql-devel-0:5.6.37-5.el6.x86_64",
          "6Server-RHSCL-2.4:rh-mysql56-mysql-errmsg-0:5.6.37-5.el6.x86_64",
          "6Server-RHSCL-2.4:rh-mysql56-mysql-server-0:5.6.37-5.el6.x86_64",
          "6Server-RHSCL-2.4:rh-mysql56-mysql-test-0:5.6.37-5.el6.x86_64",
          "6Workstation-RHSCL-2.4:rh-mysql56-mysql-0:5.6.37-5.el6.src",
          "6Workstation-RHSCL-2.4:rh-mysql56-mysql-0:5.6.37-5.el6.x86_64",
          "6Workstation-RHSCL-2.4:rh-mysql56-mysql-bench-0:5.6.37-5.el6.x86_64",
          "6Workstation-RHSCL-2.4:rh-mysql56-mysql-common-0:5.6.37-5.el6.x86_64",
          "6Workstation-RHSCL-2.4:rh-mysql56-mysql-config-0:5.6.37-5.el6.x86_64",
          "6Workstation-RHSCL-2.4:rh-mysql56-mysql-debuginfo-0:5.6.37-5.el6.x86_64",
          "6Workstation-RHSCL-2.4:rh-mysql56-mysql-devel-0:5.6.37-5.el6.x86_64",
          "6Workstation-RHSCL-2.4:rh-mysql56-mysql-errmsg-0:5.6.37-5.el6.x86_64",
          "6Workstation-RHSCL-2.4:rh-mysql56-mysql-server-0:5.6.37-5.el6.x86_64",
          "6Workstation-RHSCL-2.4:rh-mysql56-mysql-test-0:5.6.37-5.el6.x86_64",
          "7Server-RHSCL-2.4-7.3.Z:rh-mysql56-mysql-0:5.6.37-5.el7.src",
          "7Server-RHSCL-2.4-7.3.Z:rh-mysql56-mysql-0:5.6.37-5.el7.x86_64",
          "7Server-RHSCL-2.4-7.3.Z:rh-mysql56-mysql-bench-0:5.6.37-5.el7.x86_64",
          "7Server-RHSCL-2.4-7.3.Z:rh-mysql56-mysql-common-0:5.6.37-5.el7.x86_64",
          "7Server-RHSCL-2.4-7.3.Z:rh-mysql56-mysql-config-0:5.6.37-5.el7.x86_64",
          "7Server-RHSCL-2.4-7.3.Z:rh-mysql56-mysql-debuginfo-0:5.6.37-5.el7.x86_64",
          "7Server-RHSCL-2.4-7.3.Z:rh-mysql56-mysql-devel-0:5.6.37-5.el7.x86_64",
          "7Server-RHSCL-2.4-7.3.Z:rh-mysql56-mysql-errmsg-0:5.6.37-5.el7.x86_64",
          "7Server-RHSCL-2.4-7.3.Z:rh-mysql56-mysql-server-0:5.6.37-5.el7.x86_64",
          "7Server-RHSCL-2.4-7.3.Z:rh-mysql56-mysql-test-0:5.6.37-5.el7.x86_64",
          "7Server-RHSCL-2.4:rh-mysql56-mysql-0:5.6.37-5.el7.src",
          "7Server-RHSCL-2.4:rh-mysql56-mysql-0:5.6.37-5.el7.x86_64",
          "7Server-RHSCL-2.4:rh-mysql56-mysql-bench-0:5.6.37-5.el7.x86_64",
          "7Server-RHSCL-2.4:rh-mysql56-mysql-common-0:5.6.37-5.el7.x86_64",
          "7Server-RHSCL-2.4:rh-mysql56-mysql-config-0:5.6.37-5.el7.x86_64",
          "7Server-RHSCL-2.4:rh-mysql56-mysql-debuginfo-0:5.6.37-5.el7.x86_64",
          "7Server-RHSCL-2.4:rh-mysql56-mysql-devel-0:5.6.37-5.el7.x86_64",
          "7Server-RHSCL-2.4:rh-mysql56-mysql-errmsg-0:5.6.37-5.el7.x86_64",
          "7Server-RHSCL-2.4:rh-mysql56-mysql-server-0:5.6.37-5.el7.x86_64",
          "7Server-RHSCL-2.4:rh-mysql56-mysql-test-0:5.6.37-5.el7.x86_64",
          "7Workstation-RHSCL-2.4:rh-mysql56-mysql-0:5.6.37-5.el7.src",
          "7Workstation-RHSCL-2.4:rh-mysql56-mysql-0:5.6.37-5.el7.x86_64",
          "7Workstation-RHSCL-2.4:rh-mysql56-mysql-bench-0:5.6.37-5.el7.x86_64",
          "7Workstation-RHSCL-2.4:rh-mysql56-mysql-common-0:5.6.37-5.el7.x86_64",
          "7Workstation-RHSCL-2.4:rh-mysql56-mysql-config-0:5.6.37-5.el7.x86_64",
          "7Workstation-RHSCL-2.4:rh-mysql56-mysql-debuginfo-0:5.6.37-5.el7.x86_64",
          "7Workstation-RHSCL-2.4:rh-mysql56-mysql-devel-0:5.6.37-5.el7.x86_64",
          "7Workstation-RHSCL-2.4:rh-mysql56-mysql-errmsg-0:5.6.37-5.el7.x86_64",
          "7Workstation-RHSCL-2.4:rh-mysql56-mysql-server-0:5.6.37-5.el7.x86_64",
          "7Workstation-RHSCL-2.4:rh-mysql56-mysql-test-0:5.6.37-5.el7.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2017-3648"
        },
        {
          "category": "external",
          "summary": "RHBZ#1472704",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1472704"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2017-3648",
          "url": "https://www.cve.org/CVERecord?id=CVE-2017-3648"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2017-3648",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2017-3648"
        },
        {
          "category": "external",
          "summary": "http://www.oracle.com/technetwork/security-advisory/cpujul2017-3236622.html#AppendixMSQL",
          "url": "http://www.oracle.com/technetwork/security-advisory/cpujul2017-3236622.html#AppendixMSQL"
        }
      ],
      "release_date": "2017-07-19T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2017-09-21T07:42:12+00:00",
          "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAfter installing this update, the MySQL server daemon (mysqld) will be restarted automatically.",
          "product_ids": [
            "6Server-RHSCL-2.4-6.7.Z:rh-mysql56-mysql-0:5.6.37-5.el6.src",
            "6Server-RHSCL-2.4-6.7.Z:rh-mysql56-mysql-0:5.6.37-5.el6.x86_64",
            "6Server-RHSCL-2.4-6.7.Z:rh-mysql56-mysql-bench-0:5.6.37-5.el6.x86_64",
            "6Server-RHSCL-2.4-6.7.Z:rh-mysql56-mysql-common-0:5.6.37-5.el6.x86_64",
            "6Server-RHSCL-2.4-6.7.Z:rh-mysql56-mysql-config-0:5.6.37-5.el6.x86_64",
            "6Server-RHSCL-2.4-6.7.Z:rh-mysql56-mysql-debuginfo-0:5.6.37-5.el6.x86_64",
            "6Server-RHSCL-2.4-6.7.Z:rh-mysql56-mysql-devel-0:5.6.37-5.el6.x86_64",
            "6Server-RHSCL-2.4-6.7.Z:rh-mysql56-mysql-errmsg-0:5.6.37-5.el6.x86_64",
            "6Server-RHSCL-2.4-6.7.Z:rh-mysql56-mysql-server-0:5.6.37-5.el6.x86_64",
            "6Server-RHSCL-2.4-6.7.Z:rh-mysql56-mysql-test-0:5.6.37-5.el6.x86_64",
            "6Server-RHSCL-2.4:rh-mysql56-mysql-0:5.6.37-5.el6.src",
            "6Server-RHSCL-2.4:rh-mysql56-mysql-0:5.6.37-5.el6.x86_64",
            "6Server-RHSCL-2.4:rh-mysql56-mysql-bench-0:5.6.37-5.el6.x86_64",
            "6Server-RHSCL-2.4:rh-mysql56-mysql-common-0:5.6.37-5.el6.x86_64",
            "6Server-RHSCL-2.4:rh-mysql56-mysql-config-0:5.6.37-5.el6.x86_64",
            "6Server-RHSCL-2.4:rh-mysql56-mysql-debuginfo-0:5.6.37-5.el6.x86_64",
            "6Server-RHSCL-2.4:rh-mysql56-mysql-devel-0:5.6.37-5.el6.x86_64",
            "6Server-RHSCL-2.4:rh-mysql56-mysql-errmsg-0:5.6.37-5.el6.x86_64",
            "6Server-RHSCL-2.4:rh-mysql56-mysql-server-0:5.6.37-5.el6.x86_64",
            "6Server-RHSCL-2.4:rh-mysql56-mysql-test-0:5.6.37-5.el6.x86_64",
            "6Workstation-RHSCL-2.4:rh-mysql56-mysql-0:5.6.37-5.el6.src",
            "6Workstation-RHSCL-2.4:rh-mysql56-mysql-0:5.6.37-5.el6.x86_64",
            "6Workstation-RHSCL-2.4:rh-mysql56-mysql-bench-0:5.6.37-5.el6.x86_64",
            "6Workstation-RHSCL-2.4:rh-mysql56-mysql-common-0:5.6.37-5.el6.x86_64",
            "6Workstation-RHSCL-2.4:rh-mysql56-mysql-config-0:5.6.37-5.el6.x86_64",
            "6Workstation-RHSCL-2.4:rh-mysql56-mysql-debuginfo-0:5.6.37-5.el6.x86_64",
            "6Workstation-RHSCL-2.4:rh-mysql56-mysql-devel-0:5.6.37-5.el6.x86_64",
            "6Workstation-RHSCL-2.4:rh-mysql56-mysql-errmsg-0:5.6.37-5.el6.x86_64",
            "6Workstation-RHSCL-2.4:rh-mysql56-mysql-server-0:5.6.37-5.el6.x86_64",
            "6Workstation-RHSCL-2.4:rh-mysql56-mysql-test-0:5.6.37-5.el6.x86_64",
            "7Server-RHSCL-2.4-7.3.Z:rh-mysql56-mysql-0:5.6.37-5.el7.src",
            "7Server-RHSCL-2.4-7.3.Z:rh-mysql56-mysql-0:5.6.37-5.el7.x86_64",
            "7Server-RHSCL-2.4-7.3.Z:rh-mysql56-mysql-bench-0:5.6.37-5.el7.x86_64",
            "7Server-RHSCL-2.4-7.3.Z:rh-mysql56-mysql-common-0:5.6.37-5.el7.x86_64",
            "7Server-RHSCL-2.4-7.3.Z:rh-mysql56-mysql-config-0:5.6.37-5.el7.x86_64",
            "7Server-RHSCL-2.4-7.3.Z:rh-mysql56-mysql-debuginfo-0:5.6.37-5.el7.x86_64",
            "7Server-RHSCL-2.4-7.3.Z:rh-mysql56-mysql-devel-0:5.6.37-5.el7.x86_64",
            "7Server-RHSCL-2.4-7.3.Z:rh-mysql56-mysql-errmsg-0:5.6.37-5.el7.x86_64",
            "7Server-RHSCL-2.4-7.3.Z:rh-mysql56-mysql-server-0:5.6.37-5.el7.x86_64",
            "7Server-RHSCL-2.4-7.3.Z:rh-mysql56-mysql-test-0:5.6.37-5.el7.x86_64",
            "7Server-RHSCL-2.4:rh-mysql56-mysql-0:5.6.37-5.el7.src",
            "7Server-RHSCL-2.4:rh-mysql56-mysql-0:5.6.37-5.el7.x86_64",
            "7Server-RHSCL-2.4:rh-mysql56-mysql-bench-0:5.6.37-5.el7.x86_64",
            "7Server-RHSCL-2.4:rh-mysql56-mysql-common-0:5.6.37-5.el7.x86_64",
            "7Server-RHSCL-2.4:rh-mysql56-mysql-config-0:5.6.37-5.el7.x86_64",
            "7Server-RHSCL-2.4:rh-mysql56-mysql-debuginfo-0:5.6.37-5.el7.x86_64",
            "7Server-RHSCL-2.4:rh-mysql56-mysql-devel-0:5.6.37-5.el7.x86_64",
            "7Server-RHSCL-2.4:rh-mysql56-mysql-errmsg-0:5.6.37-5.el7.x86_64",
            "7Server-RHSCL-2.4:rh-mysql56-mysql-server-0:5.6.37-5.el7.x86_64",
            "7Server-RHSCL-2.4:rh-mysql56-mysql-test-0:5.6.37-5.el7.x86_64",
            "7Workstation-RHSCL-2.4:rh-mysql56-mysql-0:5.6.37-5.el7.src",
            "7Workstation-RHSCL-2.4:rh-mysql56-mysql-0:5.6.37-5.el7.x86_64",
            "7Workstation-RHSCL-2.4:rh-mysql56-mysql-bench-0:5.6.37-5.el7.x86_64",
            "7Workstation-RHSCL-2.4:rh-mysql56-mysql-common-0:5.6.37-5.el7.x86_64",
            "7Workstation-RHSCL-2.4:rh-mysql56-mysql-config-0:5.6.37-5.el7.x86_64",
            "7Workstation-RHSCL-2.4:rh-mysql56-mysql-debuginfo-0:5.6.37-5.el7.x86_64",
            "7Workstation-RHSCL-2.4:rh-mysql56-mysql-devel-0:5.6.37-5.el7.x86_64",
            "7Workstation-RHSCL-2.4:rh-mysql56-mysql-errmsg-0:5.6.37-5.el7.x86_64",
            "7Workstation-RHSCL-2.4:rh-mysql56-mysql-server-0:5.6.37-5.el7.x86_64",
            "7Workstation-RHSCL-2.4:rh-mysql56-mysql-test-0:5.6.37-5.el7.x86_64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2017:2787"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "HIGH",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 4.4,
            "baseSeverity": "MEDIUM",
            "confidentialityImpact": "NONE",
            "integrityImpact": "NONE",
            "privilegesRequired": "HIGH",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.0/AV:N/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.0"
          },
          "products": [
            "6Server-RHSCL-2.4-6.7.Z:rh-mysql56-mysql-0:5.6.37-5.el6.src",
            "6Server-RHSCL-2.4-6.7.Z:rh-mysql56-mysql-0:5.6.37-5.el6.x86_64",
            "6Server-RHSCL-2.4-6.7.Z:rh-mysql56-mysql-bench-0:5.6.37-5.el6.x86_64",
            "6Server-RHSCL-2.4-6.7.Z:rh-mysql56-mysql-common-0:5.6.37-5.el6.x86_64",
            "6Server-RHSCL-2.4-6.7.Z:rh-mysql56-mysql-config-0:5.6.37-5.el6.x86_64",
            "6Server-RHSCL-2.4-6.7.Z:rh-mysql56-mysql-debuginfo-0:5.6.37-5.el6.x86_64",
            "6Server-RHSCL-2.4-6.7.Z:rh-mysql56-mysql-devel-0:5.6.37-5.el6.x86_64",
            "6Server-RHSCL-2.4-6.7.Z:rh-mysql56-mysql-errmsg-0:5.6.37-5.el6.x86_64",
            "6Server-RHSCL-2.4-6.7.Z:rh-mysql56-mysql-server-0:5.6.37-5.el6.x86_64",
            "6Server-RHSCL-2.4-6.7.Z:rh-mysql56-mysql-test-0:5.6.37-5.el6.x86_64",
            "6Server-RHSCL-2.4:rh-mysql56-mysql-0:5.6.37-5.el6.src",
            "6Server-RHSCL-2.4:rh-mysql56-mysql-0:5.6.37-5.el6.x86_64",
            "6Server-RHSCL-2.4:rh-mysql56-mysql-bench-0:5.6.37-5.el6.x86_64",
            "6Server-RHSCL-2.4:rh-mysql56-mysql-common-0:5.6.37-5.el6.x86_64",
            "6Server-RHSCL-2.4:rh-mysql56-mysql-config-0:5.6.37-5.el6.x86_64",
            "6Server-RHSCL-2.4:rh-mysql56-mysql-debuginfo-0:5.6.37-5.el6.x86_64",
            "6Server-RHSCL-2.4:rh-mysql56-mysql-devel-0:5.6.37-5.el6.x86_64",
            "6Server-RHSCL-2.4:rh-mysql56-mysql-errmsg-0:5.6.37-5.el6.x86_64",
            "6Server-RHSCL-2.4:rh-mysql56-mysql-server-0:5.6.37-5.el6.x86_64",
            "6Server-RHSCL-2.4:rh-mysql56-mysql-test-0:5.6.37-5.el6.x86_64",
            "6Workstation-RHSCL-2.4:rh-mysql56-mysql-0:5.6.37-5.el6.src",
            "6Workstation-RHSCL-2.4:rh-mysql56-mysql-0:5.6.37-5.el6.x86_64",
            "6Workstation-RHSCL-2.4:rh-mysql56-mysql-bench-0:5.6.37-5.el6.x86_64",
            "6Workstation-RHSCL-2.4:rh-mysql56-mysql-common-0:5.6.37-5.el6.x86_64",
            "6Workstation-RHSCL-2.4:rh-mysql56-mysql-config-0:5.6.37-5.el6.x86_64",
            "6Workstation-RHSCL-2.4:rh-mysql56-mysql-debuginfo-0:5.6.37-5.el6.x86_64",
            "6Workstation-RHSCL-2.4:rh-mysql56-mysql-devel-0:5.6.37-5.el6.x86_64",
            "6Workstation-RHSCL-2.4:rh-mysql56-mysql-errmsg-0:5.6.37-5.el6.x86_64",
            "6Workstation-RHSCL-2.4:rh-mysql56-mysql-server-0:5.6.37-5.el6.x86_64",
            "6Workstation-RHSCL-2.4:rh-mysql56-mysql-test-0:5.6.37-5.el6.x86_64",
            "7Server-RHSCL-2.4-7.3.Z:rh-mysql56-mysql-0:5.6.37-5.el7.src",
            "7Server-RHSCL-2.4-7.3.Z:rh-mysql56-mysql-0:5.6.37-5.el7.x86_64",
            "7Server-RHSCL-2.4-7.3.Z:rh-mysql56-mysql-bench-0:5.6.37-5.el7.x86_64",
            "7Server-RHSCL-2.4-7.3.Z:rh-mysql56-mysql-common-0:5.6.37-5.el7.x86_64",
            "7Server-RHSCL-2.4-7.3.Z:rh-mysql56-mysql-config-0:5.6.37-5.el7.x86_64",
            "7Server-RHSCL-2.4-7.3.Z:rh-mysql56-mysql-debuginfo-0:5.6.37-5.el7.x86_64",
            "7Server-RHSCL-2.4-7.3.Z:rh-mysql56-mysql-devel-0:5.6.37-5.el7.x86_64",
            "7Server-RHSCL-2.4-7.3.Z:rh-mysql56-mysql-errmsg-0:5.6.37-5.el7.x86_64",
            "7Server-RHSCL-2.4-7.3.Z:rh-mysql56-mysql-server-0:5.6.37-5.el7.x86_64",
            "7Server-RHSCL-2.4-7.3.Z:rh-mysql56-mysql-test-0:5.6.37-5.el7.x86_64",
            "7Server-RHSCL-2.4:rh-mysql56-mysql-0:5.6.37-5.el7.src",
            "7Server-RHSCL-2.4:rh-mysql56-mysql-0:5.6.37-5.el7.x86_64",
            "7Server-RHSCL-2.4:rh-mysql56-mysql-bench-0:5.6.37-5.el7.x86_64",
            "7Server-RHSCL-2.4:rh-mysql56-mysql-common-0:5.6.37-5.el7.x86_64",
            "7Server-RHSCL-2.4:rh-mysql56-mysql-config-0:5.6.37-5.el7.x86_64",
            "7Server-RHSCL-2.4:rh-mysql56-mysql-debuginfo-0:5.6.37-5.el7.x86_64",
            "7Server-RHSCL-2.4:rh-mysql56-mysql-devel-0:5.6.37-5.el7.x86_64",
            "7Server-RHSCL-2.4:rh-mysql56-mysql-errmsg-0:5.6.37-5.el7.x86_64",
            "7Server-RHSCL-2.4:rh-mysql56-mysql-server-0:5.6.37-5.el7.x86_64",
            "7Server-RHSCL-2.4:rh-mysql56-mysql-test-0:5.6.37-5.el7.x86_64",
            "7Workstation-RHSCL-2.4:rh-mysql56-mysql-0:5.6.37-5.el7.src",
            "7Workstation-RHSCL-2.4:rh-mysql56-mysql-0:5.6.37-5.el7.x86_64",
            "7Workstation-RHSCL-2.4:rh-mysql56-mysql-bench-0:5.6.37-5.el7.x86_64",
            "7Workstation-RHSCL-2.4:rh-mysql56-mysql-common-0:5.6.37-5.el7.x86_64",
            "7Workstation-RHSCL-2.4:rh-mysql56-mysql-config-0:5.6.37-5.el7.x86_64",
            "7Workstation-RHSCL-2.4:rh-mysql56-mysql-debuginfo-0:5.6.37-5.el7.x86_64",
            "7Workstation-RHSCL-2.4:rh-mysql56-mysql-devel-0:5.6.37-5.el7.x86_64",
            "7Workstation-RHSCL-2.4:rh-mysql56-mysql-errmsg-0:5.6.37-5.el7.x86_64",
            "7Workstation-RHSCL-2.4:rh-mysql56-mysql-server-0:5.6.37-5.el7.x86_64",
            "7Workstation-RHSCL-2.4:rh-mysql56-mysql-test-0:5.6.37-5.el7.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Moderate"
        }
      ],
      "title": "mysql: Server: Charsets unspecified vulnerability (CPU Jul 2017)"
    },
    {
      "cve": "CVE-2017-3649",
      "discovery_date": "2017-07-19T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "1472705"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Replication). Supported versions that are affected are 5.6.36 and earlier and 5.7.18 and earlier. Difficult to exploit vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.0 Base Score 4.4 (Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:H).",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "mysql: Server: Replication unspecified vulnerability (CPU Jul 2017)",
          "title": "Vulnerability summary"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "6Server-RHSCL-2.4-6.7.Z:rh-mysql56-mysql-0:5.6.37-5.el6.src",
          "6Server-RHSCL-2.4-6.7.Z:rh-mysql56-mysql-0:5.6.37-5.el6.x86_64",
          "6Server-RHSCL-2.4-6.7.Z:rh-mysql56-mysql-bench-0:5.6.37-5.el6.x86_64",
          "6Server-RHSCL-2.4-6.7.Z:rh-mysql56-mysql-common-0:5.6.37-5.el6.x86_64",
          "6Server-RHSCL-2.4-6.7.Z:rh-mysql56-mysql-config-0:5.6.37-5.el6.x86_64",
          "6Server-RHSCL-2.4-6.7.Z:rh-mysql56-mysql-debuginfo-0:5.6.37-5.el6.x86_64",
          "6Server-RHSCL-2.4-6.7.Z:rh-mysql56-mysql-devel-0:5.6.37-5.el6.x86_64",
          "6Server-RHSCL-2.4-6.7.Z:rh-mysql56-mysql-errmsg-0:5.6.37-5.el6.x86_64",
          "6Server-RHSCL-2.4-6.7.Z:rh-mysql56-mysql-server-0:5.6.37-5.el6.x86_64",
          "6Server-RHSCL-2.4-6.7.Z:rh-mysql56-mysql-test-0:5.6.37-5.el6.x86_64",
          "6Server-RHSCL-2.4:rh-mysql56-mysql-0:5.6.37-5.el6.src",
          "6Server-RHSCL-2.4:rh-mysql56-mysql-0:5.6.37-5.el6.x86_64",
          "6Server-RHSCL-2.4:rh-mysql56-mysql-bench-0:5.6.37-5.el6.x86_64",
          "6Server-RHSCL-2.4:rh-mysql56-mysql-common-0:5.6.37-5.el6.x86_64",
          "6Server-RHSCL-2.4:rh-mysql56-mysql-config-0:5.6.37-5.el6.x86_64",
          "6Server-RHSCL-2.4:rh-mysql56-mysql-debuginfo-0:5.6.37-5.el6.x86_64",
          "6Server-RHSCL-2.4:rh-mysql56-mysql-devel-0:5.6.37-5.el6.x86_64",
          "6Server-RHSCL-2.4:rh-mysql56-mysql-errmsg-0:5.6.37-5.el6.x86_64",
          "6Server-RHSCL-2.4:rh-mysql56-mysql-server-0:5.6.37-5.el6.x86_64",
          "6Server-RHSCL-2.4:rh-mysql56-mysql-test-0:5.6.37-5.el6.x86_64",
          "6Workstation-RHSCL-2.4:rh-mysql56-mysql-0:5.6.37-5.el6.src",
          "6Workstation-RHSCL-2.4:rh-mysql56-mysql-0:5.6.37-5.el6.x86_64",
          "6Workstation-RHSCL-2.4:rh-mysql56-mysql-bench-0:5.6.37-5.el6.x86_64",
          "6Workstation-RHSCL-2.4:rh-mysql56-mysql-common-0:5.6.37-5.el6.x86_64",
          "6Workstation-RHSCL-2.4:rh-mysql56-mysql-config-0:5.6.37-5.el6.x86_64",
          "6Workstation-RHSCL-2.4:rh-mysql56-mysql-debuginfo-0:5.6.37-5.el6.x86_64",
          "6Workstation-RHSCL-2.4:rh-mysql56-mysql-devel-0:5.6.37-5.el6.x86_64",
          "6Workstation-RHSCL-2.4:rh-mysql56-mysql-errmsg-0:5.6.37-5.el6.x86_64",
          "6Workstation-RHSCL-2.4:rh-mysql56-mysql-server-0:5.6.37-5.el6.x86_64",
          "6Workstation-RHSCL-2.4:rh-mysql56-mysql-test-0:5.6.37-5.el6.x86_64",
          "7Server-RHSCL-2.4-7.3.Z:rh-mysql56-mysql-0:5.6.37-5.el7.src",
          "7Server-RHSCL-2.4-7.3.Z:rh-mysql56-mysql-0:5.6.37-5.el7.x86_64",
          "7Server-RHSCL-2.4-7.3.Z:rh-mysql56-mysql-bench-0:5.6.37-5.el7.x86_64",
          "7Server-RHSCL-2.4-7.3.Z:rh-mysql56-mysql-common-0:5.6.37-5.el7.x86_64",
          "7Server-RHSCL-2.4-7.3.Z:rh-mysql56-mysql-config-0:5.6.37-5.el7.x86_64",
          "7Server-RHSCL-2.4-7.3.Z:rh-mysql56-mysql-debuginfo-0:5.6.37-5.el7.x86_64",
          "7Server-RHSCL-2.4-7.3.Z:rh-mysql56-mysql-devel-0:5.6.37-5.el7.x86_64",
          "7Server-RHSCL-2.4-7.3.Z:rh-mysql56-mysql-errmsg-0:5.6.37-5.el7.x86_64",
          "7Server-RHSCL-2.4-7.3.Z:rh-mysql56-mysql-server-0:5.6.37-5.el7.x86_64",
          "7Server-RHSCL-2.4-7.3.Z:rh-mysql56-mysql-test-0:5.6.37-5.el7.x86_64",
          "7Server-RHSCL-2.4:rh-mysql56-mysql-0:5.6.37-5.el7.src",
          "7Server-RHSCL-2.4:rh-mysql56-mysql-0:5.6.37-5.el7.x86_64",
          "7Server-RHSCL-2.4:rh-mysql56-mysql-bench-0:5.6.37-5.el7.x86_64",
          "7Server-RHSCL-2.4:rh-mysql56-mysql-common-0:5.6.37-5.el7.x86_64",
          "7Server-RHSCL-2.4:rh-mysql56-mysql-config-0:5.6.37-5.el7.x86_64",
          "7Server-RHSCL-2.4:rh-mysql56-mysql-debuginfo-0:5.6.37-5.el7.x86_64",
          "7Server-RHSCL-2.4:rh-mysql56-mysql-devel-0:5.6.37-5.el7.x86_64",
          "7Server-RHSCL-2.4:rh-mysql56-mysql-errmsg-0:5.6.37-5.el7.x86_64",
          "7Server-RHSCL-2.4:rh-mysql56-mysql-server-0:5.6.37-5.el7.x86_64",
          "7Server-RHSCL-2.4:rh-mysql56-mysql-test-0:5.6.37-5.el7.x86_64",
          "7Workstation-RHSCL-2.4:rh-mysql56-mysql-0:5.6.37-5.el7.src",
          "7Workstation-RHSCL-2.4:rh-mysql56-mysql-0:5.6.37-5.el7.x86_64",
          "7Workstation-RHSCL-2.4:rh-mysql56-mysql-bench-0:5.6.37-5.el7.x86_64",
          "7Workstation-RHSCL-2.4:rh-mysql56-mysql-common-0:5.6.37-5.el7.x86_64",
          "7Workstation-RHSCL-2.4:rh-mysql56-mysql-config-0:5.6.37-5.el7.x86_64",
          "7Workstation-RHSCL-2.4:rh-mysql56-mysql-debuginfo-0:5.6.37-5.el7.x86_64",
          "7Workstation-RHSCL-2.4:rh-mysql56-mysql-devel-0:5.6.37-5.el7.x86_64",
          "7Workstation-RHSCL-2.4:rh-mysql56-mysql-errmsg-0:5.6.37-5.el7.x86_64",
          "7Workstation-RHSCL-2.4:rh-mysql56-mysql-server-0:5.6.37-5.el7.x86_64",
          "7Workstation-RHSCL-2.4:rh-mysql56-mysql-test-0:5.6.37-5.el7.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2017-3649"
        },
        {
          "category": "external",
          "summary": "RHBZ#1472705",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1472705"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2017-3649",
          "url": "https://www.cve.org/CVERecord?id=CVE-2017-3649"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2017-3649",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2017-3649"
        },
        {
          "category": "external",
          "summary": "http://www.oracle.com/technetwork/security-advisory/cpujul2017-3236622.html#AppendixMSQL",
          "url": "http://www.oracle.com/technetwork/security-advisory/cpujul2017-3236622.html#AppendixMSQL"
        }
      ],
      "release_date": "2017-07-19T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2017-09-21T07:42:12+00:00",
          "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAfter installing this update, the MySQL server daemon (mysqld) will be restarted automatically.",
          "product_ids": [
            "6Server-RHSCL-2.4-6.7.Z:rh-mysql56-mysql-0:5.6.37-5.el6.src",
            "6Server-RHSCL-2.4-6.7.Z:rh-mysql56-mysql-0:5.6.37-5.el6.x86_64",
            "6Server-RHSCL-2.4-6.7.Z:rh-mysql56-mysql-bench-0:5.6.37-5.el6.x86_64",
            "6Server-RHSCL-2.4-6.7.Z:rh-mysql56-mysql-common-0:5.6.37-5.el6.x86_64",
            "6Server-RHSCL-2.4-6.7.Z:rh-mysql56-mysql-config-0:5.6.37-5.el6.x86_64",
            "6Server-RHSCL-2.4-6.7.Z:rh-mysql56-mysql-debuginfo-0:5.6.37-5.el6.x86_64",
            "6Server-RHSCL-2.4-6.7.Z:rh-mysql56-mysql-devel-0:5.6.37-5.el6.x86_64",
            "6Server-RHSCL-2.4-6.7.Z:rh-mysql56-mysql-errmsg-0:5.6.37-5.el6.x86_64",
            "6Server-RHSCL-2.4-6.7.Z:rh-mysql56-mysql-server-0:5.6.37-5.el6.x86_64",
            "6Server-RHSCL-2.4-6.7.Z:rh-mysql56-mysql-test-0:5.6.37-5.el6.x86_64",
            "6Server-RHSCL-2.4:rh-mysql56-mysql-0:5.6.37-5.el6.src",
            "6Server-RHSCL-2.4:rh-mysql56-mysql-0:5.6.37-5.el6.x86_64",
            "6Server-RHSCL-2.4:rh-mysql56-mysql-bench-0:5.6.37-5.el6.x86_64",
            "6Server-RHSCL-2.4:rh-mysql56-mysql-common-0:5.6.37-5.el6.x86_64",
            "6Server-RHSCL-2.4:rh-mysql56-mysql-config-0:5.6.37-5.el6.x86_64",
            "6Server-RHSCL-2.4:rh-mysql56-mysql-debuginfo-0:5.6.37-5.el6.x86_64",
            "6Server-RHSCL-2.4:rh-mysql56-mysql-devel-0:5.6.37-5.el6.x86_64",
            "6Server-RHSCL-2.4:rh-mysql56-mysql-errmsg-0:5.6.37-5.el6.x86_64",
            "6Server-RHSCL-2.4:rh-mysql56-mysql-server-0:5.6.37-5.el6.x86_64",
            "6Server-RHSCL-2.4:rh-mysql56-mysql-test-0:5.6.37-5.el6.x86_64",
            "6Workstation-RHSCL-2.4:rh-mysql56-mysql-0:5.6.37-5.el6.src",
            "6Workstation-RHSCL-2.4:rh-mysql56-mysql-0:5.6.37-5.el6.x86_64",
            "6Workstation-RHSCL-2.4:rh-mysql56-mysql-bench-0:5.6.37-5.el6.x86_64",
            "6Workstation-RHSCL-2.4:rh-mysql56-mysql-common-0:5.6.37-5.el6.x86_64",
            "6Workstation-RHSCL-2.4:rh-mysql56-mysql-config-0:5.6.37-5.el6.x86_64",
            "6Workstation-RHSCL-2.4:rh-mysql56-mysql-debuginfo-0:5.6.37-5.el6.x86_64",
            "6Workstation-RHSCL-2.4:rh-mysql56-mysql-devel-0:5.6.37-5.el6.x86_64",
            "6Workstation-RHSCL-2.4:rh-mysql56-mysql-errmsg-0:5.6.37-5.el6.x86_64",
            "6Workstation-RHSCL-2.4:rh-mysql56-mysql-server-0:5.6.37-5.el6.x86_64",
            "6Workstation-RHSCL-2.4:rh-mysql56-mysql-test-0:5.6.37-5.el6.x86_64",
            "7Server-RHSCL-2.4-7.3.Z:rh-mysql56-mysql-0:5.6.37-5.el7.src",
            "7Server-RHSCL-2.4-7.3.Z:rh-mysql56-mysql-0:5.6.37-5.el7.x86_64",
            "7Server-RHSCL-2.4-7.3.Z:rh-mysql56-mysql-bench-0:5.6.37-5.el7.x86_64",
            "7Server-RHSCL-2.4-7.3.Z:rh-mysql56-mysql-common-0:5.6.37-5.el7.x86_64",
            "7Server-RHSCL-2.4-7.3.Z:rh-mysql56-mysql-config-0:5.6.37-5.el7.x86_64",
            "7Server-RHSCL-2.4-7.3.Z:rh-mysql56-mysql-debuginfo-0:5.6.37-5.el7.x86_64",
            "7Server-RHSCL-2.4-7.3.Z:rh-mysql56-mysql-devel-0:5.6.37-5.el7.x86_64",
            "7Server-RHSCL-2.4-7.3.Z:rh-mysql56-mysql-errmsg-0:5.6.37-5.el7.x86_64",
            "7Server-RHSCL-2.4-7.3.Z:rh-mysql56-mysql-server-0:5.6.37-5.el7.x86_64",
            "7Server-RHSCL-2.4-7.3.Z:rh-mysql56-mysql-test-0:5.6.37-5.el7.x86_64",
            "7Server-RHSCL-2.4:rh-mysql56-mysql-0:5.6.37-5.el7.src",
            "7Server-RHSCL-2.4:rh-mysql56-mysql-0:5.6.37-5.el7.x86_64",
            "7Server-RHSCL-2.4:rh-mysql56-mysql-bench-0:5.6.37-5.el7.x86_64",
            "7Server-RHSCL-2.4:rh-mysql56-mysql-common-0:5.6.37-5.el7.x86_64",
            "7Server-RHSCL-2.4:rh-mysql56-mysql-config-0:5.6.37-5.el7.x86_64",
            "7Server-RHSCL-2.4:rh-mysql56-mysql-debuginfo-0:5.6.37-5.el7.x86_64",
            "7Server-RHSCL-2.4:rh-mysql56-mysql-devel-0:5.6.37-5.el7.x86_64",
            "7Server-RHSCL-2.4:rh-mysql56-mysql-errmsg-0:5.6.37-5.el7.x86_64",
            "7Server-RHSCL-2.4:rh-mysql56-mysql-server-0:5.6.37-5.el7.x86_64",
            "7Server-RHSCL-2.4:rh-mysql56-mysql-test-0:5.6.37-5.el7.x86_64",
            "7Workstation-RHSCL-2.4:rh-mysql56-mysql-0:5.6.37-5.el7.src",
            "7Workstation-RHSCL-2.4:rh-mysql56-mysql-0:5.6.37-5.el7.x86_64",
            "7Workstation-RHSCL-2.4:rh-mysql56-mysql-bench-0:5.6.37-5.el7.x86_64",
            "7Workstation-RHSCL-2.4:rh-mysql56-mysql-common-0:5.6.37-5.el7.x86_64",
            "7Workstation-RHSCL-2.4:rh-mysql56-mysql-config-0:5.6.37-5.el7.x86_64",
            "7Workstation-RHSCL-2.4:rh-mysql56-mysql-debuginfo-0:5.6.37-5.el7.x86_64",
            "7Workstation-RHSCL-2.4:rh-mysql56-mysql-devel-0:5.6.37-5.el7.x86_64",
            "7Workstation-RHSCL-2.4:rh-mysql56-mysql-errmsg-0:5.6.37-5.el7.x86_64",
            "7Workstation-RHSCL-2.4:rh-mysql56-mysql-server-0:5.6.37-5.el7.x86_64",
            "7Workstation-RHSCL-2.4:rh-mysql56-mysql-test-0:5.6.37-5.el7.x86_64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2017:2787"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "HIGH",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 4.4,
            "baseSeverity": "MEDIUM",
            "confidentialityImpact": "NONE",
            "integrityImpact": "NONE",
            "privilegesRequired": "HIGH",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.0/AV:N/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.0"
          },
          "products": [
            "6Server-RHSCL-2.4-6.7.Z:rh-mysql56-mysql-0:5.6.37-5.el6.src",
            "6Server-RHSCL-2.4-6.7.Z:rh-mysql56-mysql-0:5.6.37-5.el6.x86_64",
            "6Server-RHSCL-2.4-6.7.Z:rh-mysql56-mysql-bench-0:5.6.37-5.el6.x86_64",
            "6Server-RHSCL-2.4-6.7.Z:rh-mysql56-mysql-common-0:5.6.37-5.el6.x86_64",
            "6Server-RHSCL-2.4-6.7.Z:rh-mysql56-mysql-config-0:5.6.37-5.el6.x86_64",
            "6Server-RHSCL-2.4-6.7.Z:rh-mysql56-mysql-debuginfo-0:5.6.37-5.el6.x86_64",
            "6Server-RHSCL-2.4-6.7.Z:rh-mysql56-mysql-devel-0:5.6.37-5.el6.x86_64",
            "6Server-RHSCL-2.4-6.7.Z:rh-mysql56-mysql-errmsg-0:5.6.37-5.el6.x86_64",
            "6Server-RHSCL-2.4-6.7.Z:rh-mysql56-mysql-server-0:5.6.37-5.el6.x86_64",
            "6Server-RHSCL-2.4-6.7.Z:rh-mysql56-mysql-test-0:5.6.37-5.el6.x86_64",
            "6Server-RHSCL-2.4:rh-mysql56-mysql-0:5.6.37-5.el6.src",
            "6Server-RHSCL-2.4:rh-mysql56-mysql-0:5.6.37-5.el6.x86_64",
            "6Server-RHSCL-2.4:rh-mysql56-mysql-bench-0:5.6.37-5.el6.x86_64",
            "6Server-RHSCL-2.4:rh-mysql56-mysql-common-0:5.6.37-5.el6.x86_64",
            "6Server-RHSCL-2.4:rh-mysql56-mysql-config-0:5.6.37-5.el6.x86_64",
            "6Server-RHSCL-2.4:rh-mysql56-mysql-debuginfo-0:5.6.37-5.el6.x86_64",
            "6Server-RHSCL-2.4:rh-mysql56-mysql-devel-0:5.6.37-5.el6.x86_64",
            "6Server-RHSCL-2.4:rh-mysql56-mysql-errmsg-0:5.6.37-5.el6.x86_64",
            "6Server-RHSCL-2.4:rh-mysql56-mysql-server-0:5.6.37-5.el6.x86_64",
            "6Server-RHSCL-2.4:rh-mysql56-mysql-test-0:5.6.37-5.el6.x86_64",
            "6Workstation-RHSCL-2.4:rh-mysql56-mysql-0:5.6.37-5.el6.src",
            "6Workstation-RHSCL-2.4:rh-mysql56-mysql-0:5.6.37-5.el6.x86_64",
            "6Workstation-RHSCL-2.4:rh-mysql56-mysql-bench-0:5.6.37-5.el6.x86_64",
            "6Workstation-RHSCL-2.4:rh-mysql56-mysql-common-0:5.6.37-5.el6.x86_64",
            "6Workstation-RHSCL-2.4:rh-mysql56-mysql-config-0:5.6.37-5.el6.x86_64",
            "6Workstation-RHSCL-2.4:rh-mysql56-mysql-debuginfo-0:5.6.37-5.el6.x86_64",
            "6Workstation-RHSCL-2.4:rh-mysql56-mysql-devel-0:5.6.37-5.el6.x86_64",
            "6Workstation-RHSCL-2.4:rh-mysql56-mysql-errmsg-0:5.6.37-5.el6.x86_64",
            "6Workstation-RHSCL-2.4:rh-mysql56-mysql-server-0:5.6.37-5.el6.x86_64",
            "6Workstation-RHSCL-2.4:rh-mysql56-mysql-test-0:5.6.37-5.el6.x86_64",
            "7Server-RHSCL-2.4-7.3.Z:rh-mysql56-mysql-0:5.6.37-5.el7.src",
            "7Server-RHSCL-2.4-7.3.Z:rh-mysql56-mysql-0:5.6.37-5.el7.x86_64",
            "7Server-RHSCL-2.4-7.3.Z:rh-mysql56-mysql-bench-0:5.6.37-5.el7.x86_64",
            "7Server-RHSCL-2.4-7.3.Z:rh-mysql56-mysql-common-0:5.6.37-5.el7.x86_64",
            "7Server-RHSCL-2.4-7.3.Z:rh-mysql56-mysql-config-0:5.6.37-5.el7.x86_64",
            "7Server-RHSCL-2.4-7.3.Z:rh-mysql56-mysql-debuginfo-0:5.6.37-5.el7.x86_64",
            "7Server-RHSCL-2.4-7.3.Z:rh-mysql56-mysql-devel-0:5.6.37-5.el7.x86_64",
            "7Server-RHSCL-2.4-7.3.Z:rh-mysql56-mysql-errmsg-0:5.6.37-5.el7.x86_64",
            "7Server-RHSCL-2.4-7.3.Z:rh-mysql56-mysql-server-0:5.6.37-5.el7.x86_64",
            "7Server-RHSCL-2.4-7.3.Z:rh-mysql56-mysql-test-0:5.6.37-5.el7.x86_64",
            "7Server-RHSCL-2.4:rh-mysql56-mysql-0:5.6.37-5.el7.src",
            "7Server-RHSCL-2.4:rh-mysql56-mysql-0:5.6.37-5.el7.x86_64",
            "7Server-RHSCL-2.4:rh-mysql56-mysql-bench-0:5.6.37-5.el7.x86_64",
            "7Server-RHSCL-2.4:rh-mysql56-mysql-common-0:5.6.37-5.el7.x86_64",
            "7Server-RHSCL-2.4:rh-mysql56-mysql-config-0:5.6.37-5.el7.x86_64",
            "7Server-RHSCL-2.4:rh-mysql56-mysql-debuginfo-0:5.6.37-5.el7.x86_64",
            "7Server-RHSCL-2.4:rh-mysql56-mysql-devel-0:5.6.37-5.el7.x86_64",
            "7Server-RHSCL-2.4:rh-mysql56-mysql-errmsg-0:5.6.37-5.el7.x86_64",
            "7Server-RHSCL-2.4:rh-mysql56-mysql-server-0:5.6.37-5.el7.x86_64",
            "7Server-RHSCL-2.4:rh-mysql56-mysql-test-0:5.6.37-5.el7.x86_64",
            "7Workstation-RHSCL-2.4:rh-mysql56-mysql-0:5.6.37-5.el7.src",
            "7Workstation-RHSCL-2.4:rh-mysql56-mysql-0:5.6.37-5.el7.x86_64",
            "7Workstation-RHSCL-2.4:rh-mysql56-mysql-bench-0:5.6.37-5.el7.x86_64",
            "7Workstation-RHSCL-2.4:rh-mysql56-mysql-common-0:5.6.37-5.el7.x86_64",
            "7Workstation-RHSCL-2.4:rh-mysql56-mysql-config-0:5.6.37-5.el7.x86_64",
            "7Workstation-RHSCL-2.4:rh-mysql56-mysql-debuginfo-0:5.6.37-5.el7.x86_64",
            "7Workstation-RHSCL-2.4:rh-mysql56-mysql-devel-0:5.6.37-5.el7.x86_64",
            "7Workstation-RHSCL-2.4:rh-mysql56-mysql-errmsg-0:5.6.37-5.el7.x86_64",
            "7Workstation-RHSCL-2.4:rh-mysql56-mysql-server-0:5.6.37-5.el7.x86_64",
            "7Workstation-RHSCL-2.4:rh-mysql56-mysql-test-0:5.6.37-5.el7.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Moderate"
        }
      ],
      "title": "mysql: Server: Replication unspecified vulnerability (CPU Jul 2017)"
    },
    {
      "cve": "CVE-2017-3651",
      "discovery_date": "2017-07-19T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "1472708"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Client mysqldump). Supported versions that are affected are 5.5.56 and earlier, 5.6.36 and earlier and 5.7.18 and earlier. Easily exploitable vulnerability allows low privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of MySQL Server accessible data. CVSS 3.0 Base Score 4.3 (Integrity impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N).",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "mysql: Client mysqldump unspecified vulnerability (CPU Jul 2017)",
          "title": "Vulnerability summary"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "6Server-RHSCL-2.4-6.7.Z:rh-mysql56-mysql-0:5.6.37-5.el6.src",
          "6Server-RHSCL-2.4-6.7.Z:rh-mysql56-mysql-0:5.6.37-5.el6.x86_64",
          "6Server-RHSCL-2.4-6.7.Z:rh-mysql56-mysql-bench-0:5.6.37-5.el6.x86_64",
          "6Server-RHSCL-2.4-6.7.Z:rh-mysql56-mysql-common-0:5.6.37-5.el6.x86_64",
          "6Server-RHSCL-2.4-6.7.Z:rh-mysql56-mysql-config-0:5.6.37-5.el6.x86_64",
          "6Server-RHSCL-2.4-6.7.Z:rh-mysql56-mysql-debuginfo-0:5.6.37-5.el6.x86_64",
          "6Server-RHSCL-2.4-6.7.Z:rh-mysql56-mysql-devel-0:5.6.37-5.el6.x86_64",
          "6Server-RHSCL-2.4-6.7.Z:rh-mysql56-mysql-errmsg-0:5.6.37-5.el6.x86_64",
          "6Server-RHSCL-2.4-6.7.Z:rh-mysql56-mysql-server-0:5.6.37-5.el6.x86_64",
          "6Server-RHSCL-2.4-6.7.Z:rh-mysql56-mysql-test-0:5.6.37-5.el6.x86_64",
          "6Server-RHSCL-2.4:rh-mysql56-mysql-0:5.6.37-5.el6.src",
          "6Server-RHSCL-2.4:rh-mysql56-mysql-0:5.6.37-5.el6.x86_64",
          "6Server-RHSCL-2.4:rh-mysql56-mysql-bench-0:5.6.37-5.el6.x86_64",
          "6Server-RHSCL-2.4:rh-mysql56-mysql-common-0:5.6.37-5.el6.x86_64",
          "6Server-RHSCL-2.4:rh-mysql56-mysql-config-0:5.6.37-5.el6.x86_64",
          "6Server-RHSCL-2.4:rh-mysql56-mysql-debuginfo-0:5.6.37-5.el6.x86_64",
          "6Server-RHSCL-2.4:rh-mysql56-mysql-devel-0:5.6.37-5.el6.x86_64",
          "6Server-RHSCL-2.4:rh-mysql56-mysql-errmsg-0:5.6.37-5.el6.x86_64",
          "6Server-RHSCL-2.4:rh-mysql56-mysql-server-0:5.6.37-5.el6.x86_64",
          "6Server-RHSCL-2.4:rh-mysql56-mysql-test-0:5.6.37-5.el6.x86_64",
          "6Workstation-RHSCL-2.4:rh-mysql56-mysql-0:5.6.37-5.el6.src",
          "6Workstation-RHSCL-2.4:rh-mysql56-mysql-0:5.6.37-5.el6.x86_64",
          "6Workstation-RHSCL-2.4:rh-mysql56-mysql-bench-0:5.6.37-5.el6.x86_64",
          "6Workstation-RHSCL-2.4:rh-mysql56-mysql-common-0:5.6.37-5.el6.x86_64",
          "6Workstation-RHSCL-2.4:rh-mysql56-mysql-config-0:5.6.37-5.el6.x86_64",
          "6Workstation-RHSCL-2.4:rh-mysql56-mysql-debuginfo-0:5.6.37-5.el6.x86_64",
          "6Workstation-RHSCL-2.4:rh-mysql56-mysql-devel-0:5.6.37-5.el6.x86_64",
          "6Workstation-RHSCL-2.4:rh-mysql56-mysql-errmsg-0:5.6.37-5.el6.x86_64",
          "6Workstation-RHSCL-2.4:rh-mysql56-mysql-server-0:5.6.37-5.el6.x86_64",
          "6Workstation-RHSCL-2.4:rh-mysql56-mysql-test-0:5.6.37-5.el6.x86_64",
          "7Server-RHSCL-2.4-7.3.Z:rh-mysql56-mysql-0:5.6.37-5.el7.src",
          "7Server-RHSCL-2.4-7.3.Z:rh-mysql56-mysql-0:5.6.37-5.el7.x86_64",
          "7Server-RHSCL-2.4-7.3.Z:rh-mysql56-mysql-bench-0:5.6.37-5.el7.x86_64",
          "7Server-RHSCL-2.4-7.3.Z:rh-mysql56-mysql-common-0:5.6.37-5.el7.x86_64",
          "7Server-RHSCL-2.4-7.3.Z:rh-mysql56-mysql-config-0:5.6.37-5.el7.x86_64",
          "7Server-RHSCL-2.4-7.3.Z:rh-mysql56-mysql-debuginfo-0:5.6.37-5.el7.x86_64",
          "7Server-RHSCL-2.4-7.3.Z:rh-mysql56-mysql-devel-0:5.6.37-5.el7.x86_64",
          "7Server-RHSCL-2.4-7.3.Z:rh-mysql56-mysql-errmsg-0:5.6.37-5.el7.x86_64",
          "7Server-RHSCL-2.4-7.3.Z:rh-mysql56-mysql-server-0:5.6.37-5.el7.x86_64",
          "7Server-RHSCL-2.4-7.3.Z:rh-mysql56-mysql-test-0:5.6.37-5.el7.x86_64",
          "7Server-RHSCL-2.4:rh-mysql56-mysql-0:5.6.37-5.el7.src",
          "7Server-RHSCL-2.4:rh-mysql56-mysql-0:5.6.37-5.el7.x86_64",
          "7Server-RHSCL-2.4:rh-mysql56-mysql-bench-0:5.6.37-5.el7.x86_64",
          "7Server-RHSCL-2.4:rh-mysql56-mysql-common-0:5.6.37-5.el7.x86_64",
          "7Server-RHSCL-2.4:rh-mysql56-mysql-config-0:5.6.37-5.el7.x86_64",
          "7Server-RHSCL-2.4:rh-mysql56-mysql-debuginfo-0:5.6.37-5.el7.x86_64",
          "7Server-RHSCL-2.4:rh-mysql56-mysql-devel-0:5.6.37-5.el7.x86_64",
          "7Server-RHSCL-2.4:rh-mysql56-mysql-errmsg-0:5.6.37-5.el7.x86_64",
          "7Server-RHSCL-2.4:rh-mysql56-mysql-server-0:5.6.37-5.el7.x86_64",
          "7Server-RHSCL-2.4:rh-mysql56-mysql-test-0:5.6.37-5.el7.x86_64",
          "7Workstation-RHSCL-2.4:rh-mysql56-mysql-0:5.6.37-5.el7.src",
          "7Workstation-RHSCL-2.4:rh-mysql56-mysql-0:5.6.37-5.el7.x86_64",
          "7Workstation-RHSCL-2.4:rh-mysql56-mysql-bench-0:5.6.37-5.el7.x86_64",
          "7Workstation-RHSCL-2.4:rh-mysql56-mysql-common-0:5.6.37-5.el7.x86_64",
          "7Workstation-RHSCL-2.4:rh-mysql56-mysql-config-0:5.6.37-5.el7.x86_64",
          "7Workstation-RHSCL-2.4:rh-mysql56-mysql-debuginfo-0:5.6.37-5.el7.x86_64",
          "7Workstation-RHSCL-2.4:rh-mysql56-mysql-devel-0:5.6.37-5.el7.x86_64",
          "7Workstation-RHSCL-2.4:rh-mysql56-mysql-errmsg-0:5.6.37-5.el7.x86_64",
          "7Workstation-RHSCL-2.4:rh-mysql56-mysql-server-0:5.6.37-5.el7.x86_64",
          "7Workstation-RHSCL-2.4:rh-mysql56-mysql-test-0:5.6.37-5.el7.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2017-3651"
        },
        {
          "category": "external",
          "summary": "RHBZ#1472708",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1472708"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2017-3651",
          "url": "https://www.cve.org/CVERecord?id=CVE-2017-3651"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2017-3651",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2017-3651"
        },
        {
          "category": "external",
          "summary": "http://www.oracle.com/technetwork/security-advisory/cpujul2017-3236622.html#AppendixMSQL",
          "url": "http://www.oracle.com/technetwork/security-advisory/cpujul2017-3236622.html#AppendixMSQL"
        }
      ],
      "release_date": "2017-07-19T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2017-09-21T07:42:12+00:00",
          "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAfter installing this update, the MySQL server daemon (mysqld) will be restarted automatically.",
          "product_ids": [
            "6Server-RHSCL-2.4-6.7.Z:rh-mysql56-mysql-0:5.6.37-5.el6.src",
            "6Server-RHSCL-2.4-6.7.Z:rh-mysql56-mysql-0:5.6.37-5.el6.x86_64",
            "6Server-RHSCL-2.4-6.7.Z:rh-mysql56-mysql-bench-0:5.6.37-5.el6.x86_64",
            "6Server-RHSCL-2.4-6.7.Z:rh-mysql56-mysql-common-0:5.6.37-5.el6.x86_64",
            "6Server-RHSCL-2.4-6.7.Z:rh-mysql56-mysql-config-0:5.6.37-5.el6.x86_64",
            "6Server-RHSCL-2.4-6.7.Z:rh-mysql56-mysql-debuginfo-0:5.6.37-5.el6.x86_64",
            "6Server-RHSCL-2.4-6.7.Z:rh-mysql56-mysql-devel-0:5.6.37-5.el6.x86_64",
            "6Server-RHSCL-2.4-6.7.Z:rh-mysql56-mysql-errmsg-0:5.6.37-5.el6.x86_64",
            "6Server-RHSCL-2.4-6.7.Z:rh-mysql56-mysql-server-0:5.6.37-5.el6.x86_64",
            "6Server-RHSCL-2.4-6.7.Z:rh-mysql56-mysql-test-0:5.6.37-5.el6.x86_64",
            "6Server-RHSCL-2.4:rh-mysql56-mysql-0:5.6.37-5.el6.src",
            "6Server-RHSCL-2.4:rh-mysql56-mysql-0:5.6.37-5.el6.x86_64",
            "6Server-RHSCL-2.4:rh-mysql56-mysql-bench-0:5.6.37-5.el6.x86_64",
            "6Server-RHSCL-2.4:rh-mysql56-mysql-common-0:5.6.37-5.el6.x86_64",
            "6Server-RHSCL-2.4:rh-mysql56-mysql-config-0:5.6.37-5.el6.x86_64",
            "6Server-RHSCL-2.4:rh-mysql56-mysql-debuginfo-0:5.6.37-5.el6.x86_64",
            "6Server-RHSCL-2.4:rh-mysql56-mysql-devel-0:5.6.37-5.el6.x86_64",
            "6Server-RHSCL-2.4:rh-mysql56-mysql-errmsg-0:5.6.37-5.el6.x86_64",
            "6Server-RHSCL-2.4:rh-mysql56-mysql-server-0:5.6.37-5.el6.x86_64",
            "6Server-RHSCL-2.4:rh-mysql56-mysql-test-0:5.6.37-5.el6.x86_64",
            "6Workstation-RHSCL-2.4:rh-mysql56-mysql-0:5.6.37-5.el6.src",
            "6Workstation-RHSCL-2.4:rh-mysql56-mysql-0:5.6.37-5.el6.x86_64",
            "6Workstation-RHSCL-2.4:rh-mysql56-mysql-bench-0:5.6.37-5.el6.x86_64",
            "6Workstation-RHSCL-2.4:rh-mysql56-mysql-common-0:5.6.37-5.el6.x86_64",
            "6Workstation-RHSCL-2.4:rh-mysql56-mysql-config-0:5.6.37-5.el6.x86_64",
            "6Workstation-RHSCL-2.4:rh-mysql56-mysql-debuginfo-0:5.6.37-5.el6.x86_64",
            "6Workstation-RHSCL-2.4:rh-mysql56-mysql-devel-0:5.6.37-5.el6.x86_64",
            "6Workstation-RHSCL-2.4:rh-mysql56-mysql-errmsg-0:5.6.37-5.el6.x86_64",
            "6Workstation-RHSCL-2.4:rh-mysql56-mysql-server-0:5.6.37-5.el6.x86_64",
            "6Workstation-RHSCL-2.4:rh-mysql56-mysql-test-0:5.6.37-5.el6.x86_64",
            "7Server-RHSCL-2.4-7.3.Z:rh-mysql56-mysql-0:5.6.37-5.el7.src",
            "7Server-RHSCL-2.4-7.3.Z:rh-mysql56-mysql-0:5.6.37-5.el7.x86_64",
            "7Server-RHSCL-2.4-7.3.Z:rh-mysql56-mysql-bench-0:5.6.37-5.el7.x86_64",
            "7Server-RHSCL-2.4-7.3.Z:rh-mysql56-mysql-common-0:5.6.37-5.el7.x86_64",
            "7Server-RHSCL-2.4-7.3.Z:rh-mysql56-mysql-config-0:5.6.37-5.el7.x86_64",
            "7Server-RHSCL-2.4-7.3.Z:rh-mysql56-mysql-debuginfo-0:5.6.37-5.el7.x86_64",
            "7Server-RHSCL-2.4-7.3.Z:rh-mysql56-mysql-devel-0:5.6.37-5.el7.x86_64",
            "7Server-RHSCL-2.4-7.3.Z:rh-mysql56-mysql-errmsg-0:5.6.37-5.el7.x86_64",
            "7Server-RHSCL-2.4-7.3.Z:rh-mysql56-mysql-server-0:5.6.37-5.el7.x86_64",
            "7Server-RHSCL-2.4-7.3.Z:rh-mysql56-mysql-test-0:5.6.37-5.el7.x86_64",
            "7Server-RHSCL-2.4:rh-mysql56-mysql-0:5.6.37-5.el7.src",
            "7Server-RHSCL-2.4:rh-mysql56-mysql-0:5.6.37-5.el7.x86_64",
            "7Server-RHSCL-2.4:rh-mysql56-mysql-bench-0:5.6.37-5.el7.x86_64",
            "7Server-RHSCL-2.4:rh-mysql56-mysql-common-0:5.6.37-5.el7.x86_64",
            "7Server-RHSCL-2.4:rh-mysql56-mysql-config-0:5.6.37-5.el7.x86_64",
            "7Server-RHSCL-2.4:rh-mysql56-mysql-debuginfo-0:5.6.37-5.el7.x86_64",
            "7Server-RHSCL-2.4:rh-mysql56-mysql-devel-0:5.6.37-5.el7.x86_64",
            "7Server-RHSCL-2.4:rh-mysql56-mysql-errmsg-0:5.6.37-5.el7.x86_64",
            "7Server-RHSCL-2.4:rh-mysql56-mysql-server-0:5.6.37-5.el7.x86_64",
            "7Server-RHSCL-2.4:rh-mysql56-mysql-test-0:5.6.37-5.el7.x86_64",
            "7Workstation-RHSCL-2.4:rh-mysql56-mysql-0:5.6.37-5.el7.src",
            "7Workstation-RHSCL-2.4:rh-mysql56-mysql-0:5.6.37-5.el7.x86_64",
            "7Workstation-RHSCL-2.4:rh-mysql56-mysql-bench-0:5.6.37-5.el7.x86_64",
            "7Workstation-RHSCL-2.4:rh-mysql56-mysql-common-0:5.6.37-5.el7.x86_64",
            "7Workstation-RHSCL-2.4:rh-mysql56-mysql-config-0:5.6.37-5.el7.x86_64",
            "7Workstation-RHSCL-2.4:rh-mysql56-mysql-debuginfo-0:5.6.37-5.el7.x86_64",
            "7Workstation-RHSCL-2.4:rh-mysql56-mysql-devel-0:5.6.37-5.el7.x86_64",
            "7Workstation-RHSCL-2.4:rh-mysql56-mysql-errmsg-0:5.6.37-5.el7.x86_64",
            "7Workstation-RHSCL-2.4:rh-mysql56-mysql-server-0:5.6.37-5.el7.x86_64",
            "7Workstation-RHSCL-2.4:rh-mysql56-mysql-test-0:5.6.37-5.el7.x86_64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2017:2787"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "NONE",
            "baseScore": 4.3,
            "baseSeverity": "MEDIUM",
            "confidentialityImpact": "NONE",
            "integrityImpact": "LOW",
            "privilegesRequired": "LOW",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N",
            "version": "3.0"
          },
          "products": [
            "6Server-RHSCL-2.4-6.7.Z:rh-mysql56-mysql-0:5.6.37-5.el6.src",
            "6Server-RHSCL-2.4-6.7.Z:rh-mysql56-mysql-0:5.6.37-5.el6.x86_64",
            "6Server-RHSCL-2.4-6.7.Z:rh-mysql56-mysql-bench-0:5.6.37-5.el6.x86_64",
            "6Server-RHSCL-2.4-6.7.Z:rh-mysql56-mysql-common-0:5.6.37-5.el6.x86_64",
            "6Server-RHSCL-2.4-6.7.Z:rh-mysql56-mysql-config-0:5.6.37-5.el6.x86_64",
            "6Server-RHSCL-2.4-6.7.Z:rh-mysql56-mysql-debuginfo-0:5.6.37-5.el6.x86_64",
            "6Server-RHSCL-2.4-6.7.Z:rh-mysql56-mysql-devel-0:5.6.37-5.el6.x86_64",
            "6Server-RHSCL-2.4-6.7.Z:rh-mysql56-mysql-errmsg-0:5.6.37-5.el6.x86_64",
            "6Server-RHSCL-2.4-6.7.Z:rh-mysql56-mysql-server-0:5.6.37-5.el6.x86_64",
            "6Server-RHSCL-2.4-6.7.Z:rh-mysql56-mysql-test-0:5.6.37-5.el6.x86_64",
            "6Server-RHSCL-2.4:rh-mysql56-mysql-0:5.6.37-5.el6.src",
            "6Server-RHSCL-2.4:rh-mysql56-mysql-0:5.6.37-5.el6.x86_64",
            "6Server-RHSCL-2.4:rh-mysql56-mysql-bench-0:5.6.37-5.el6.x86_64",
            "6Server-RHSCL-2.4:rh-mysql56-mysql-common-0:5.6.37-5.el6.x86_64",
            "6Server-RHSCL-2.4:rh-mysql56-mysql-config-0:5.6.37-5.el6.x86_64",
            "6Server-RHSCL-2.4:rh-mysql56-mysql-debuginfo-0:5.6.37-5.el6.x86_64",
            "6Server-RHSCL-2.4:rh-mysql56-mysql-devel-0:5.6.37-5.el6.x86_64",
            "6Server-RHSCL-2.4:rh-mysql56-mysql-errmsg-0:5.6.37-5.el6.x86_64",
            "6Server-RHSCL-2.4:rh-mysql56-mysql-server-0:5.6.37-5.el6.x86_64",
            "6Server-RHSCL-2.4:rh-mysql56-mysql-test-0:5.6.37-5.el6.x86_64",
            "6Workstation-RHSCL-2.4:rh-mysql56-mysql-0:5.6.37-5.el6.src",
            "6Workstation-RHSCL-2.4:rh-mysql56-mysql-0:5.6.37-5.el6.x86_64",
            "6Workstation-RHSCL-2.4:rh-mysql56-mysql-bench-0:5.6.37-5.el6.x86_64",
            "6Workstation-RHSCL-2.4:rh-mysql56-mysql-common-0:5.6.37-5.el6.x86_64",
            "6Workstation-RHSCL-2.4:rh-mysql56-mysql-config-0:5.6.37-5.el6.x86_64",
            "6Workstation-RHSCL-2.4:rh-mysql56-mysql-debuginfo-0:5.6.37-5.el6.x86_64",
            "6Workstation-RHSCL-2.4:rh-mysql56-mysql-devel-0:5.6.37-5.el6.x86_64",
            "6Workstation-RHSCL-2.4:rh-mysql56-mysql-errmsg-0:5.6.37-5.el6.x86_64",
            "6Workstation-RHSCL-2.4:rh-mysql56-mysql-server-0:5.6.37-5.el6.x86_64",
            "6Workstation-RHSCL-2.4:rh-mysql56-mysql-test-0:5.6.37-5.el6.x86_64",
            "7Server-RHSCL-2.4-7.3.Z:rh-mysql56-mysql-0:5.6.37-5.el7.src",
            "7Server-RHSCL-2.4-7.3.Z:rh-mysql56-mysql-0:5.6.37-5.el7.x86_64",
            "7Server-RHSCL-2.4-7.3.Z:rh-mysql56-mysql-bench-0:5.6.37-5.el7.x86_64",
            "7Server-RHSCL-2.4-7.3.Z:rh-mysql56-mysql-common-0:5.6.37-5.el7.x86_64",
            "7Server-RHSCL-2.4-7.3.Z:rh-mysql56-mysql-config-0:5.6.37-5.el7.x86_64",
            "7Server-RHSCL-2.4-7.3.Z:rh-mysql56-mysql-debuginfo-0:5.6.37-5.el7.x86_64",
            "7Server-RHSCL-2.4-7.3.Z:rh-mysql56-mysql-devel-0:5.6.37-5.el7.x86_64",
            "7Server-RHSCL-2.4-7.3.Z:rh-mysql56-mysql-errmsg-0:5.6.37-5.el7.x86_64",
            "7Server-RHSCL-2.4-7.3.Z:rh-mysql56-mysql-server-0:5.6.37-5.el7.x86_64",
            "7Server-RHSCL-2.4-7.3.Z:rh-mysql56-mysql-test-0:5.6.37-5.el7.x86_64",
            "7Server-RHSCL-2.4:rh-mysql56-mysql-0:5.6.37-5.el7.src",
            "7Server-RHSCL-2.4:rh-mysql56-mysql-0:5.6.37-5.el7.x86_64",
            "7Server-RHSCL-2.4:rh-mysql56-mysql-bench-0:5.6.37-5.el7.x86_64",
            "7Server-RHSCL-2.4:rh-mysql56-mysql-common-0:5.6.37-5.el7.x86_64",
            "7Server-RHSCL-2.4:rh-mysql56-mysql-config-0:5.6.37-5.el7.x86_64",
            "7Server-RHSCL-2.4:rh-mysql56-mysql-debuginfo-0:5.6.37-5.el7.x86_64",
            "7Server-RHSCL-2.4:rh-mysql56-mysql-devel-0:5.6.37-5.el7.x86_64",
            "7Server-RHSCL-2.4:rh-mysql56-mysql-errmsg-0:5.6.37-5.el7.x86_64",
            "7Server-RHSCL-2.4:rh-mysql56-mysql-server-0:5.6.37-5.el7.x86_64",
            "7Server-RHSCL-2.4:rh-mysql56-mysql-test-0:5.6.37-5.el7.x86_64",
            "7Workstation-RHSCL-2.4:rh-mysql56-mysql-0:5.6.37-5.el7.src",
            "7Workstation-RHSCL-2.4:rh-mysql56-mysql-0:5.6.37-5.el7.x86_64",
            "7Workstation-RHSCL-2.4:rh-mysql56-mysql-bench-0:5.6.37-5.el7.x86_64",
            "7Workstation-RHSCL-2.4:rh-mysql56-mysql-common-0:5.6.37-5.el7.x86_64",
            "7Workstation-RHSCL-2.4:rh-mysql56-mysql-config-0:5.6.37-5.el7.x86_64",
            "7Workstation-RHSCL-2.4:rh-mysql56-mysql-debuginfo-0:5.6.37-5.el7.x86_64",
            "7Workstation-RHSCL-2.4:rh-mysql56-mysql-devel-0:5.6.37-5.el7.x86_64",
            "7Workstation-RHSCL-2.4:rh-mysql56-mysql-errmsg-0:5.6.37-5.el7.x86_64",
            "7Workstation-RHSCL-2.4:rh-mysql56-mysql-server-0:5.6.37-5.el7.x86_64",
            "7Workstation-RHSCL-2.4:rh-mysql56-mysql-test-0:5.6.37-5.el7.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Moderate"
        }
      ],
      "title": "mysql: Client mysqldump unspecified vulnerability (CPU Jul 2017)"
    },
    {
      "cve": "CVE-2017-3652",
      "discovery_date": "2017-07-19T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "1472710"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: DDL). Supported versions that are affected are 5.5.56 and earlier, 5.6.36 and earlier and 5.7.18 and earlier. Difficult to exploit vulnerability allows low privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of MySQL Server accessible data as well as unauthorized read access to a subset of MySQL Server accessible data. CVSS 3.0 Base Score 4.2 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:H/PR:L/UI:N/S:U/C:L/I:L/A:N).",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "mysql: Server: DDL unspecified vulnerability (CPU Jul 2017)",
          "title": "Vulnerability summary"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "6Server-RHSCL-2.4-6.7.Z:rh-mysql56-mysql-0:5.6.37-5.el6.src",
          "6Server-RHSCL-2.4-6.7.Z:rh-mysql56-mysql-0:5.6.37-5.el6.x86_64",
          "6Server-RHSCL-2.4-6.7.Z:rh-mysql56-mysql-bench-0:5.6.37-5.el6.x86_64",
          "6Server-RHSCL-2.4-6.7.Z:rh-mysql56-mysql-common-0:5.6.37-5.el6.x86_64",
          "6Server-RHSCL-2.4-6.7.Z:rh-mysql56-mysql-config-0:5.6.37-5.el6.x86_64",
          "6Server-RHSCL-2.4-6.7.Z:rh-mysql56-mysql-debuginfo-0:5.6.37-5.el6.x86_64",
          "6Server-RHSCL-2.4-6.7.Z:rh-mysql56-mysql-devel-0:5.6.37-5.el6.x86_64",
          "6Server-RHSCL-2.4-6.7.Z:rh-mysql56-mysql-errmsg-0:5.6.37-5.el6.x86_64",
          "6Server-RHSCL-2.4-6.7.Z:rh-mysql56-mysql-server-0:5.6.37-5.el6.x86_64",
          "6Server-RHSCL-2.4-6.7.Z:rh-mysql56-mysql-test-0:5.6.37-5.el6.x86_64",
          "6Server-RHSCL-2.4:rh-mysql56-mysql-0:5.6.37-5.el6.src",
          "6Server-RHSCL-2.4:rh-mysql56-mysql-0:5.6.37-5.el6.x86_64",
          "6Server-RHSCL-2.4:rh-mysql56-mysql-bench-0:5.6.37-5.el6.x86_64",
          "6Server-RHSCL-2.4:rh-mysql56-mysql-common-0:5.6.37-5.el6.x86_64",
          "6Server-RHSCL-2.4:rh-mysql56-mysql-config-0:5.6.37-5.el6.x86_64",
          "6Server-RHSCL-2.4:rh-mysql56-mysql-debuginfo-0:5.6.37-5.el6.x86_64",
          "6Server-RHSCL-2.4:rh-mysql56-mysql-devel-0:5.6.37-5.el6.x86_64",
          "6Server-RHSCL-2.4:rh-mysql56-mysql-errmsg-0:5.6.37-5.el6.x86_64",
          "6Server-RHSCL-2.4:rh-mysql56-mysql-server-0:5.6.37-5.el6.x86_64",
          "6Server-RHSCL-2.4:rh-mysql56-mysql-test-0:5.6.37-5.el6.x86_64",
          "6Workstation-RHSCL-2.4:rh-mysql56-mysql-0:5.6.37-5.el6.src",
          "6Workstation-RHSCL-2.4:rh-mysql56-mysql-0:5.6.37-5.el6.x86_64",
          "6Workstation-RHSCL-2.4:rh-mysql56-mysql-bench-0:5.6.37-5.el6.x86_64",
          "6Workstation-RHSCL-2.4:rh-mysql56-mysql-common-0:5.6.37-5.el6.x86_64",
          "6Workstation-RHSCL-2.4:rh-mysql56-mysql-config-0:5.6.37-5.el6.x86_64",
          "6Workstation-RHSCL-2.4:rh-mysql56-mysql-debuginfo-0:5.6.37-5.el6.x86_64",
          "6Workstation-RHSCL-2.4:rh-mysql56-mysql-devel-0:5.6.37-5.el6.x86_64",
          "6Workstation-RHSCL-2.4:rh-mysql56-mysql-errmsg-0:5.6.37-5.el6.x86_64",
          "6Workstation-RHSCL-2.4:rh-mysql56-mysql-server-0:5.6.37-5.el6.x86_64",
          "6Workstation-RHSCL-2.4:rh-mysql56-mysql-test-0:5.6.37-5.el6.x86_64",
          "7Server-RHSCL-2.4-7.3.Z:rh-mysql56-mysql-0:5.6.37-5.el7.src",
          "7Server-RHSCL-2.4-7.3.Z:rh-mysql56-mysql-0:5.6.37-5.el7.x86_64",
          "7Server-RHSCL-2.4-7.3.Z:rh-mysql56-mysql-bench-0:5.6.37-5.el7.x86_64",
          "7Server-RHSCL-2.4-7.3.Z:rh-mysql56-mysql-common-0:5.6.37-5.el7.x86_64",
          "7Server-RHSCL-2.4-7.3.Z:rh-mysql56-mysql-config-0:5.6.37-5.el7.x86_64",
          "7Server-RHSCL-2.4-7.3.Z:rh-mysql56-mysql-debuginfo-0:5.6.37-5.el7.x86_64",
          "7Server-RHSCL-2.4-7.3.Z:rh-mysql56-mysql-devel-0:5.6.37-5.el7.x86_64",
          "7Server-RHSCL-2.4-7.3.Z:rh-mysql56-mysql-errmsg-0:5.6.37-5.el7.x86_64",
          "7Server-RHSCL-2.4-7.3.Z:rh-mysql56-mysql-server-0:5.6.37-5.el7.x86_64",
          "7Server-RHSCL-2.4-7.3.Z:rh-mysql56-mysql-test-0:5.6.37-5.el7.x86_64",
          "7Server-RHSCL-2.4:rh-mysql56-mysql-0:5.6.37-5.el7.src",
          "7Server-RHSCL-2.4:rh-mysql56-mysql-0:5.6.37-5.el7.x86_64",
          "7Server-RHSCL-2.4:rh-mysql56-mysql-bench-0:5.6.37-5.el7.x86_64",
          "7Server-RHSCL-2.4:rh-mysql56-mysql-common-0:5.6.37-5.el7.x86_64",
          "7Server-RHSCL-2.4:rh-mysql56-mysql-config-0:5.6.37-5.el7.x86_64",
          "7Server-RHSCL-2.4:rh-mysql56-mysql-debuginfo-0:5.6.37-5.el7.x86_64",
          "7Server-RHSCL-2.4:rh-mysql56-mysql-devel-0:5.6.37-5.el7.x86_64",
          "7Server-RHSCL-2.4:rh-mysql56-mysql-errmsg-0:5.6.37-5.el7.x86_64",
          "7Server-RHSCL-2.4:rh-mysql56-mysql-server-0:5.6.37-5.el7.x86_64",
          "7Server-RHSCL-2.4:rh-mysql56-mysql-test-0:5.6.37-5.el7.x86_64",
          "7Workstation-RHSCL-2.4:rh-mysql56-mysql-0:5.6.37-5.el7.src",
          "7Workstation-RHSCL-2.4:rh-mysql56-mysql-0:5.6.37-5.el7.x86_64",
          "7Workstation-RHSCL-2.4:rh-mysql56-mysql-bench-0:5.6.37-5.el7.x86_64",
          "7Workstation-RHSCL-2.4:rh-mysql56-mysql-common-0:5.6.37-5.el7.x86_64",
          "7Workstation-RHSCL-2.4:rh-mysql56-mysql-config-0:5.6.37-5.el7.x86_64",
          "7Workstation-RHSCL-2.4:rh-mysql56-mysql-debuginfo-0:5.6.37-5.el7.x86_64",
          "7Workstation-RHSCL-2.4:rh-mysql56-mysql-devel-0:5.6.37-5.el7.x86_64",
          "7Workstation-RHSCL-2.4:rh-mysql56-mysql-errmsg-0:5.6.37-5.el7.x86_64",
          "7Workstation-RHSCL-2.4:rh-mysql56-mysql-server-0:5.6.37-5.el7.x86_64",
          "7Workstation-RHSCL-2.4:rh-mysql56-mysql-test-0:5.6.37-5.el7.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2017-3652"
        },
        {
          "category": "external",
          "summary": "RHBZ#1472710",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1472710"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2017-3652",
          "url": "https://www.cve.org/CVERecord?id=CVE-2017-3652"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2017-3652",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2017-3652"
        },
        {
          "category": "external",
          "summary": "http://www.oracle.com/technetwork/security-advisory/cpujul2017-3236622.html#AppendixMSQL",
          "url": "http://www.oracle.com/technetwork/security-advisory/cpujul2017-3236622.html#AppendixMSQL"
        }
      ],
      "release_date": "2017-07-19T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2017-09-21T07:42:12+00:00",
          "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAfter installing this update, the MySQL server daemon (mysqld) will be restarted automatically.",
          "product_ids": [
            "6Server-RHSCL-2.4-6.7.Z:rh-mysql56-mysql-0:5.6.37-5.el6.src",
            "6Server-RHSCL-2.4-6.7.Z:rh-mysql56-mysql-0:5.6.37-5.el6.x86_64",
            "6Server-RHSCL-2.4-6.7.Z:rh-mysql56-mysql-bench-0:5.6.37-5.el6.x86_64",
            "6Server-RHSCL-2.4-6.7.Z:rh-mysql56-mysql-common-0:5.6.37-5.el6.x86_64",
            "6Server-RHSCL-2.4-6.7.Z:rh-mysql56-mysql-config-0:5.6.37-5.el6.x86_64",
            "6Server-RHSCL-2.4-6.7.Z:rh-mysql56-mysql-debuginfo-0:5.6.37-5.el6.x86_64",
            "6Server-RHSCL-2.4-6.7.Z:rh-mysql56-mysql-devel-0:5.6.37-5.el6.x86_64",
            "6Server-RHSCL-2.4-6.7.Z:rh-mysql56-mysql-errmsg-0:5.6.37-5.el6.x86_64",
            "6Server-RHSCL-2.4-6.7.Z:rh-mysql56-mysql-server-0:5.6.37-5.el6.x86_64",
            "6Server-RHSCL-2.4-6.7.Z:rh-mysql56-mysql-test-0:5.6.37-5.el6.x86_64",
            "6Server-RHSCL-2.4:rh-mysql56-mysql-0:5.6.37-5.el6.src",
            "6Server-RHSCL-2.4:rh-mysql56-mysql-0:5.6.37-5.el6.x86_64",
            "6Server-RHSCL-2.4:rh-mysql56-mysql-bench-0:5.6.37-5.el6.x86_64",
            "6Server-RHSCL-2.4:rh-mysql56-mysql-common-0:5.6.37-5.el6.x86_64",
            "6Server-RHSCL-2.4:rh-mysql56-mysql-config-0:5.6.37-5.el6.x86_64",
            "6Server-RHSCL-2.4:rh-mysql56-mysql-debuginfo-0:5.6.37-5.el6.x86_64",
            "6Server-RHSCL-2.4:rh-mysql56-mysql-devel-0:5.6.37-5.el6.x86_64",
            "6Server-RHSCL-2.4:rh-mysql56-mysql-errmsg-0:5.6.37-5.el6.x86_64",
            "6Server-RHSCL-2.4:rh-mysql56-mysql-server-0:5.6.37-5.el6.x86_64",
            "6Server-RHSCL-2.4:rh-mysql56-mysql-test-0:5.6.37-5.el6.x86_64",
            "6Workstation-RHSCL-2.4:rh-mysql56-mysql-0:5.6.37-5.el6.src",
            "6Workstation-RHSCL-2.4:rh-mysql56-mysql-0:5.6.37-5.el6.x86_64",
            "6Workstation-RHSCL-2.4:rh-mysql56-mysql-bench-0:5.6.37-5.el6.x86_64",
            "6Workstation-RHSCL-2.4:rh-mysql56-mysql-common-0:5.6.37-5.el6.x86_64",
            "6Workstation-RHSCL-2.4:rh-mysql56-mysql-config-0:5.6.37-5.el6.x86_64",
            "6Workstation-RHSCL-2.4:rh-mysql56-mysql-debuginfo-0:5.6.37-5.el6.x86_64",
            "6Workstation-RHSCL-2.4:rh-mysql56-mysql-devel-0:5.6.37-5.el6.x86_64",
            "6Workstation-RHSCL-2.4:rh-mysql56-mysql-errmsg-0:5.6.37-5.el6.x86_64",
            "6Workstation-RHSCL-2.4:rh-mysql56-mysql-server-0:5.6.37-5.el6.x86_64",
            "6Workstation-RHSCL-2.4:rh-mysql56-mysql-test-0:5.6.37-5.el6.x86_64",
            "7Server-RHSCL-2.4-7.3.Z:rh-mysql56-mysql-0:5.6.37-5.el7.src",
            "7Server-RHSCL-2.4-7.3.Z:rh-mysql56-mysql-0:5.6.37-5.el7.x86_64",
            "7Server-RHSCL-2.4-7.3.Z:rh-mysql56-mysql-bench-0:5.6.37-5.el7.x86_64",
            "7Server-RHSCL-2.4-7.3.Z:rh-mysql56-mysql-common-0:5.6.37-5.el7.x86_64",
            "7Server-RHSCL-2.4-7.3.Z:rh-mysql56-mysql-config-0:5.6.37-5.el7.x86_64",
            "7Server-RHSCL-2.4-7.3.Z:rh-mysql56-mysql-debuginfo-0:5.6.37-5.el7.x86_64",
            "7Server-RHSCL-2.4-7.3.Z:rh-mysql56-mysql-devel-0:5.6.37-5.el7.x86_64",
            "7Server-RHSCL-2.4-7.3.Z:rh-mysql56-mysql-errmsg-0:5.6.37-5.el7.x86_64",
            "7Server-RHSCL-2.4-7.3.Z:rh-mysql56-mysql-server-0:5.6.37-5.el7.x86_64",
            "7Server-RHSCL-2.4-7.3.Z:rh-mysql56-mysql-test-0:5.6.37-5.el7.x86_64",
            "7Server-RHSCL-2.4:rh-mysql56-mysql-0:5.6.37-5.el7.src",
            "7Server-RHSCL-2.4:rh-mysql56-mysql-0:5.6.37-5.el7.x86_64",
            "7Server-RHSCL-2.4:rh-mysql56-mysql-bench-0:5.6.37-5.el7.x86_64",
            "7Server-RHSCL-2.4:rh-mysql56-mysql-common-0:5.6.37-5.el7.x86_64",
            "7Server-RHSCL-2.4:rh-mysql56-mysql-config-0:5.6.37-5.el7.x86_64",
            "7Server-RHSCL-2.4:rh-mysql56-mysql-debuginfo-0:5.6.37-5.el7.x86_64",
            "7Server-RHSCL-2.4:rh-mysql56-mysql-devel-0:5.6.37-5.el7.x86_64",
            "7Server-RHSCL-2.4:rh-mysql56-mysql-errmsg-0:5.6.37-5.el7.x86_64",
            "7Server-RHSCL-2.4:rh-mysql56-mysql-server-0:5.6.37-5.el7.x86_64",
            "7Server-RHSCL-2.4:rh-mysql56-mysql-test-0:5.6.37-5.el7.x86_64",
            "7Workstation-RHSCL-2.4:rh-mysql56-mysql-0:5.6.37-5.el7.src",
            "7Workstation-RHSCL-2.4:rh-mysql56-mysql-0:5.6.37-5.el7.x86_64",
            "7Workstation-RHSCL-2.4:rh-mysql56-mysql-bench-0:5.6.37-5.el7.x86_64",
            "7Workstation-RHSCL-2.4:rh-mysql56-mysql-common-0:5.6.37-5.el7.x86_64",
            "7Workstation-RHSCL-2.4:rh-mysql56-mysql-config-0:5.6.37-5.el7.x86_64",
            "7Workstation-RHSCL-2.4:rh-mysql56-mysql-debuginfo-0:5.6.37-5.el7.x86_64",
            "7Workstation-RHSCL-2.4:rh-mysql56-mysql-devel-0:5.6.37-5.el7.x86_64",
            "7Workstation-RHSCL-2.4:rh-mysql56-mysql-errmsg-0:5.6.37-5.el7.x86_64",
            "7Workstation-RHSCL-2.4:rh-mysql56-mysql-server-0:5.6.37-5.el7.x86_64",
            "7Workstation-RHSCL-2.4:rh-mysql56-mysql-test-0:5.6.37-5.el7.x86_64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2017:2787"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "HIGH",
            "attackVector": "NETWORK",
            "availabilityImpact": "NONE",
            "baseScore": 4.2,
            "baseSeverity": "MEDIUM",
            "confidentialityImpact": "LOW",
            "integrityImpact": "LOW",
            "privilegesRequired": "LOW",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.0/AV:N/AC:H/PR:L/UI:N/S:U/C:L/I:L/A:N",
            "version": "3.0"
          },
          "products": [
            "6Server-RHSCL-2.4-6.7.Z:rh-mysql56-mysql-0:5.6.37-5.el6.src",
            "6Server-RHSCL-2.4-6.7.Z:rh-mysql56-mysql-0:5.6.37-5.el6.x86_64",
            "6Server-RHSCL-2.4-6.7.Z:rh-mysql56-mysql-bench-0:5.6.37-5.el6.x86_64",
            "6Server-RHSCL-2.4-6.7.Z:rh-mysql56-mysql-common-0:5.6.37-5.el6.x86_64",
            "6Server-RHSCL-2.4-6.7.Z:rh-mysql56-mysql-config-0:5.6.37-5.el6.x86_64",
            "6Server-RHSCL-2.4-6.7.Z:rh-mysql56-mysql-debuginfo-0:5.6.37-5.el6.x86_64",
            "6Server-RHSCL-2.4-6.7.Z:rh-mysql56-mysql-devel-0:5.6.37-5.el6.x86_64",
            "6Server-RHSCL-2.4-6.7.Z:rh-mysql56-mysql-errmsg-0:5.6.37-5.el6.x86_64",
            "6Server-RHSCL-2.4-6.7.Z:rh-mysql56-mysql-server-0:5.6.37-5.el6.x86_64",
            "6Server-RHSCL-2.4-6.7.Z:rh-mysql56-mysql-test-0:5.6.37-5.el6.x86_64",
            "6Server-RHSCL-2.4:rh-mysql56-mysql-0:5.6.37-5.el6.src",
            "6Server-RHSCL-2.4:rh-mysql56-mysql-0:5.6.37-5.el6.x86_64",
            "6Server-RHSCL-2.4:rh-mysql56-mysql-bench-0:5.6.37-5.el6.x86_64",
            "6Server-RHSCL-2.4:rh-mysql56-mysql-common-0:5.6.37-5.el6.x86_64",
            "6Server-RHSCL-2.4:rh-mysql56-mysql-config-0:5.6.37-5.el6.x86_64",
            "6Server-RHSCL-2.4:rh-mysql56-mysql-debuginfo-0:5.6.37-5.el6.x86_64",
            "6Server-RHSCL-2.4:rh-mysql56-mysql-devel-0:5.6.37-5.el6.x86_64",
            "6Server-RHSCL-2.4:rh-mysql56-mysql-errmsg-0:5.6.37-5.el6.x86_64",
            "6Server-RHSCL-2.4:rh-mysql56-mysql-server-0:5.6.37-5.el6.x86_64",
            "6Server-RHSCL-2.4:rh-mysql56-mysql-test-0:5.6.37-5.el6.x86_64",
            "6Workstation-RHSCL-2.4:rh-mysql56-mysql-0:5.6.37-5.el6.src",
            "6Workstation-RHSCL-2.4:rh-mysql56-mysql-0:5.6.37-5.el6.x86_64",
            "6Workstation-RHSCL-2.4:rh-mysql56-mysql-bench-0:5.6.37-5.el6.x86_64",
            "6Workstation-RHSCL-2.4:rh-mysql56-mysql-common-0:5.6.37-5.el6.x86_64",
            "6Workstation-RHSCL-2.4:rh-mysql56-mysql-config-0:5.6.37-5.el6.x86_64",
            "6Workstation-RHSCL-2.4:rh-mysql56-mysql-debuginfo-0:5.6.37-5.el6.x86_64",
            "6Workstation-RHSCL-2.4:rh-mysql56-mysql-devel-0:5.6.37-5.el6.x86_64",
            "6Workstation-RHSCL-2.4:rh-mysql56-mysql-errmsg-0:5.6.37-5.el6.x86_64",
            "6Workstation-RHSCL-2.4:rh-mysql56-mysql-server-0:5.6.37-5.el6.x86_64",
            "6Workstation-RHSCL-2.4:rh-mysql56-mysql-test-0:5.6.37-5.el6.x86_64",
            "7Server-RHSCL-2.4-7.3.Z:rh-mysql56-mysql-0:5.6.37-5.el7.src",
            "7Server-RHSCL-2.4-7.3.Z:rh-mysql56-mysql-0:5.6.37-5.el7.x86_64",
            "7Server-RHSCL-2.4-7.3.Z:rh-mysql56-mysql-bench-0:5.6.37-5.el7.x86_64",
            "7Server-RHSCL-2.4-7.3.Z:rh-mysql56-mysql-common-0:5.6.37-5.el7.x86_64",
            "7Server-RHSCL-2.4-7.3.Z:rh-mysql56-mysql-config-0:5.6.37-5.el7.x86_64",
            "7Server-RHSCL-2.4-7.3.Z:rh-mysql56-mysql-debuginfo-0:5.6.37-5.el7.x86_64",
            "7Server-RHSCL-2.4-7.3.Z:rh-mysql56-mysql-devel-0:5.6.37-5.el7.x86_64",
            "7Server-RHSCL-2.4-7.3.Z:rh-mysql56-mysql-errmsg-0:5.6.37-5.el7.x86_64",
            "7Server-RHSCL-2.4-7.3.Z:rh-mysql56-mysql-server-0:5.6.37-5.el7.x86_64",
            "7Server-RHSCL-2.4-7.3.Z:rh-mysql56-mysql-test-0:5.6.37-5.el7.x86_64",
            "7Server-RHSCL-2.4:rh-mysql56-mysql-0:5.6.37-5.el7.src",
            "7Server-RHSCL-2.4:rh-mysql56-mysql-0:5.6.37-5.el7.x86_64",
            "7Server-RHSCL-2.4:rh-mysql56-mysql-bench-0:5.6.37-5.el7.x86_64",
            "7Server-RHSCL-2.4:rh-mysql56-mysql-common-0:5.6.37-5.el7.x86_64",
            "7Server-RHSCL-2.4:rh-mysql56-mysql-config-0:5.6.37-5.el7.x86_64",
            "7Server-RHSCL-2.4:rh-mysql56-mysql-debuginfo-0:5.6.37-5.el7.x86_64",
            "7Server-RHSCL-2.4:rh-mysql56-mysql-devel-0:5.6.37-5.el7.x86_64",
            "7Server-RHSCL-2.4:rh-mysql56-mysql-errmsg-0:5.6.37-5.el7.x86_64",
            "7Server-RHSCL-2.4:rh-mysql56-mysql-server-0:5.6.37-5.el7.x86_64",
            "7Server-RHSCL-2.4:rh-mysql56-mysql-test-0:5.6.37-5.el7.x86_64",
            "7Workstation-RHSCL-2.4:rh-mysql56-mysql-0:5.6.37-5.el7.src",
            "7Workstation-RHSCL-2.4:rh-mysql56-mysql-0:5.6.37-5.el7.x86_64",
            "7Workstation-RHSCL-2.4:rh-mysql56-mysql-bench-0:5.6.37-5.el7.x86_64",
            "7Workstation-RHSCL-2.4:rh-mysql56-mysql-common-0:5.6.37-5.el7.x86_64",
            "7Workstation-RHSCL-2.4:rh-mysql56-mysql-config-0:5.6.37-5.el7.x86_64",
            "7Workstation-RHSCL-2.4:rh-mysql56-mysql-debuginfo-0:5.6.37-5.el7.x86_64",
            "7Workstation-RHSCL-2.4:rh-mysql56-mysql-devel-0:5.6.37-5.el7.x86_64",
            "7Workstation-RHSCL-2.4:rh-mysql56-mysql-errmsg-0:5.6.37-5.el7.x86_64",
            "7Workstation-RHSCL-2.4:rh-mysql56-mysql-server-0:5.6.37-5.el7.x86_64",
            "7Workstation-RHSCL-2.4:rh-mysql56-mysql-test-0:5.6.37-5.el7.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Moderate"
        }
      ],
      "title": "mysql: Server: DDL unspecified vulnerability (CPU Jul 2017)"
    },
    {
      "cve": "CVE-2017-3653",
      "discovery_date": "2017-07-19T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "1472711"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: DDL). Supported versions that are affected are 5.5.56 and earlier, 5.6.36 and earlier and 5.7.18 and earlier. Difficult to exploit vulnerability allows low privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of MySQL Server accessible data. CVSS 3.0 Base Score 3.1 (Integrity impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:H/PR:L/UI:N/S:U/C:N/I:L/A:N).",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "mysql: Server: DDL unspecified vulnerability (CPU Jul 2017)",
          "title": "Vulnerability summary"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "6Server-RHSCL-2.4-6.7.Z:rh-mysql56-mysql-0:5.6.37-5.el6.src",
          "6Server-RHSCL-2.4-6.7.Z:rh-mysql56-mysql-0:5.6.37-5.el6.x86_64",
          "6Server-RHSCL-2.4-6.7.Z:rh-mysql56-mysql-bench-0:5.6.37-5.el6.x86_64",
          "6Server-RHSCL-2.4-6.7.Z:rh-mysql56-mysql-common-0:5.6.37-5.el6.x86_64",
          "6Server-RHSCL-2.4-6.7.Z:rh-mysql56-mysql-config-0:5.6.37-5.el6.x86_64",
          "6Server-RHSCL-2.4-6.7.Z:rh-mysql56-mysql-debuginfo-0:5.6.37-5.el6.x86_64",
          "6Server-RHSCL-2.4-6.7.Z:rh-mysql56-mysql-devel-0:5.6.37-5.el6.x86_64",
          "6Server-RHSCL-2.4-6.7.Z:rh-mysql56-mysql-errmsg-0:5.6.37-5.el6.x86_64",
          "6Server-RHSCL-2.4-6.7.Z:rh-mysql56-mysql-server-0:5.6.37-5.el6.x86_64",
          "6Server-RHSCL-2.4-6.7.Z:rh-mysql56-mysql-test-0:5.6.37-5.el6.x86_64",
          "6Server-RHSCL-2.4:rh-mysql56-mysql-0:5.6.37-5.el6.src",
          "6Server-RHSCL-2.4:rh-mysql56-mysql-0:5.6.37-5.el6.x86_64",
          "6Server-RHSCL-2.4:rh-mysql56-mysql-bench-0:5.6.37-5.el6.x86_64",
          "6Server-RHSCL-2.4:rh-mysql56-mysql-common-0:5.6.37-5.el6.x86_64",
          "6Server-RHSCL-2.4:rh-mysql56-mysql-config-0:5.6.37-5.el6.x86_64",
          "6Server-RHSCL-2.4:rh-mysql56-mysql-debuginfo-0:5.6.37-5.el6.x86_64",
          "6Server-RHSCL-2.4:rh-mysql56-mysql-devel-0:5.6.37-5.el6.x86_64",
          "6Server-RHSCL-2.4:rh-mysql56-mysql-errmsg-0:5.6.37-5.el6.x86_64",
          "6Server-RHSCL-2.4:rh-mysql56-mysql-server-0:5.6.37-5.el6.x86_64",
          "6Server-RHSCL-2.4:rh-mysql56-mysql-test-0:5.6.37-5.el6.x86_64",
          "6Workstation-RHSCL-2.4:rh-mysql56-mysql-0:5.6.37-5.el6.src",
          "6Workstation-RHSCL-2.4:rh-mysql56-mysql-0:5.6.37-5.el6.x86_64",
          "6Workstation-RHSCL-2.4:rh-mysql56-mysql-bench-0:5.6.37-5.el6.x86_64",
          "6Workstation-RHSCL-2.4:rh-mysql56-mysql-common-0:5.6.37-5.el6.x86_64",
          "6Workstation-RHSCL-2.4:rh-mysql56-mysql-config-0:5.6.37-5.el6.x86_64",
          "6Workstation-RHSCL-2.4:rh-mysql56-mysql-debuginfo-0:5.6.37-5.el6.x86_64",
          "6Workstation-RHSCL-2.4:rh-mysql56-mysql-devel-0:5.6.37-5.el6.x86_64",
          "6Workstation-RHSCL-2.4:rh-mysql56-mysql-errmsg-0:5.6.37-5.el6.x86_64",
          "6Workstation-RHSCL-2.4:rh-mysql56-mysql-server-0:5.6.37-5.el6.x86_64",
          "6Workstation-RHSCL-2.4:rh-mysql56-mysql-test-0:5.6.37-5.el6.x86_64",
          "7Server-RHSCL-2.4-7.3.Z:rh-mysql56-mysql-0:5.6.37-5.el7.src",
          "7Server-RHSCL-2.4-7.3.Z:rh-mysql56-mysql-0:5.6.37-5.el7.x86_64",
          "7Server-RHSCL-2.4-7.3.Z:rh-mysql56-mysql-bench-0:5.6.37-5.el7.x86_64",
          "7Server-RHSCL-2.4-7.3.Z:rh-mysql56-mysql-common-0:5.6.37-5.el7.x86_64",
          "7Server-RHSCL-2.4-7.3.Z:rh-mysql56-mysql-config-0:5.6.37-5.el7.x86_64",
          "7Server-RHSCL-2.4-7.3.Z:rh-mysql56-mysql-debuginfo-0:5.6.37-5.el7.x86_64",
          "7Server-RHSCL-2.4-7.3.Z:rh-mysql56-mysql-devel-0:5.6.37-5.el7.x86_64",
          "7Server-RHSCL-2.4-7.3.Z:rh-mysql56-mysql-errmsg-0:5.6.37-5.el7.x86_64",
          "7Server-RHSCL-2.4-7.3.Z:rh-mysql56-mysql-server-0:5.6.37-5.el7.x86_64",
          "7Server-RHSCL-2.4-7.3.Z:rh-mysql56-mysql-test-0:5.6.37-5.el7.x86_64",
          "7Server-RHSCL-2.4:rh-mysql56-mysql-0:5.6.37-5.el7.src",
          "7Server-RHSCL-2.4:rh-mysql56-mysql-0:5.6.37-5.el7.x86_64",
          "7Server-RHSCL-2.4:rh-mysql56-mysql-bench-0:5.6.37-5.el7.x86_64",
          "7Server-RHSCL-2.4:rh-mysql56-mysql-common-0:5.6.37-5.el7.x86_64",
          "7Server-RHSCL-2.4:rh-mysql56-mysql-config-0:5.6.37-5.el7.x86_64",
          "7Server-RHSCL-2.4:rh-mysql56-mysql-debuginfo-0:5.6.37-5.el7.x86_64",
          "7Server-RHSCL-2.4:rh-mysql56-mysql-devel-0:5.6.37-5.el7.x86_64",
          "7Server-RHSCL-2.4:rh-mysql56-mysql-errmsg-0:5.6.37-5.el7.x86_64",
          "7Server-RHSCL-2.4:rh-mysql56-mysql-server-0:5.6.37-5.el7.x86_64",
          "7Server-RHSCL-2.4:rh-mysql56-mysql-test-0:5.6.37-5.el7.x86_64",
          "7Workstation-RHSCL-2.4:rh-mysql56-mysql-0:5.6.37-5.el7.src",
          "7Workstation-RHSCL-2.4:rh-mysql56-mysql-0:5.6.37-5.el7.x86_64",
          "7Workstation-RHSCL-2.4:rh-mysql56-mysql-bench-0:5.6.37-5.el7.x86_64",
          "7Workstation-RHSCL-2.4:rh-mysql56-mysql-common-0:5.6.37-5.el7.x86_64",
          "7Workstation-RHSCL-2.4:rh-mysql56-mysql-config-0:5.6.37-5.el7.x86_64",
          "7Workstation-RHSCL-2.4:rh-mysql56-mysql-debuginfo-0:5.6.37-5.el7.x86_64",
          "7Workstation-RHSCL-2.4:rh-mysql56-mysql-devel-0:5.6.37-5.el7.x86_64",
          "7Workstation-RHSCL-2.4:rh-mysql56-mysql-errmsg-0:5.6.37-5.el7.x86_64",
          "7Workstation-RHSCL-2.4:rh-mysql56-mysql-server-0:5.6.37-5.el7.x86_64",
          "7Workstation-RHSCL-2.4:rh-mysql56-mysql-test-0:5.6.37-5.el7.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2017-3653"
        },
        {
          "category": "external",
          "summary": "RHBZ#1472711",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1472711"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2017-3653",
          "url": "https://www.cve.org/CVERecord?id=CVE-2017-3653"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2017-3653",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2017-3653"
        },
        {
          "category": "external",
          "summary": "http://www.oracle.com/technetwork/security-advisory/cpujul2017-3236622.html#AppendixMSQL",
          "url": "http://www.oracle.com/technetwork/security-advisory/cpujul2017-3236622.html#AppendixMSQL"
        }
      ],
      "release_date": "2017-07-19T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2017-09-21T07:42:12+00:00",
          "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAfter installing this update, the MySQL server daemon (mysqld) will be restarted automatically.",
          "product_ids": [
            "6Server-RHSCL-2.4-6.7.Z:rh-mysql56-mysql-0:5.6.37-5.el6.src",
            "6Server-RHSCL-2.4-6.7.Z:rh-mysql56-mysql-0:5.6.37-5.el6.x86_64",
            "6Server-RHSCL-2.4-6.7.Z:rh-mysql56-mysql-bench-0:5.6.37-5.el6.x86_64",
            "6Server-RHSCL-2.4-6.7.Z:rh-mysql56-mysql-common-0:5.6.37-5.el6.x86_64",
            "6Server-RHSCL-2.4-6.7.Z:rh-mysql56-mysql-config-0:5.6.37-5.el6.x86_64",
            "6Server-RHSCL-2.4-6.7.Z:rh-mysql56-mysql-debuginfo-0:5.6.37-5.el6.x86_64",
            "6Server-RHSCL-2.4-6.7.Z:rh-mysql56-mysql-devel-0:5.6.37-5.el6.x86_64",
            "6Server-RHSCL-2.4-6.7.Z:rh-mysql56-mysql-errmsg-0:5.6.37-5.el6.x86_64",
            "6Server-RHSCL-2.4-6.7.Z:rh-mysql56-mysql-server-0:5.6.37-5.el6.x86_64",
            "6Server-RHSCL-2.4-6.7.Z:rh-mysql56-mysql-test-0:5.6.37-5.el6.x86_64",
            "6Server-RHSCL-2.4:rh-mysql56-mysql-0:5.6.37-5.el6.src",
            "6Server-RHSCL-2.4:rh-mysql56-mysql-0:5.6.37-5.el6.x86_64",
            "6Server-RHSCL-2.4:rh-mysql56-mysql-bench-0:5.6.37-5.el6.x86_64",
            "6Server-RHSCL-2.4:rh-mysql56-mysql-common-0:5.6.37-5.el6.x86_64",
            "6Server-RHSCL-2.4:rh-mysql56-mysql-config-0:5.6.37-5.el6.x86_64",
            "6Server-RHSCL-2.4:rh-mysql56-mysql-debuginfo-0:5.6.37-5.el6.x86_64",
            "6Server-RHSCL-2.4:rh-mysql56-mysql-devel-0:5.6.37-5.el6.x86_64",
            "6Server-RHSCL-2.4:rh-mysql56-mysql-errmsg-0:5.6.37-5.el6.x86_64",
            "6Server-RHSCL-2.4:rh-mysql56-mysql-server-0:5.6.37-5.el6.x86_64",
            "6Server-RHSCL-2.4:rh-mysql56-mysql-test-0:5.6.37-5.el6.x86_64",
            "6Workstation-RHSCL-2.4:rh-mysql56-mysql-0:5.6.37-5.el6.src",
            "6Workstation-RHSCL-2.4:rh-mysql56-mysql-0:5.6.37-5.el6.x86_64",
            "6Workstation-RHSCL-2.4:rh-mysql56-mysql-bench-0:5.6.37-5.el6.x86_64",
            "6Workstation-RHSCL-2.4:rh-mysql56-mysql-common-0:5.6.37-5.el6.x86_64",
            "6Workstation-RHSCL-2.4:rh-mysql56-mysql-config-0:5.6.37-5.el6.x86_64",
            "6Workstation-RHSCL-2.4:rh-mysql56-mysql-debuginfo-0:5.6.37-5.el6.x86_64",
            "6Workstation-RHSCL-2.4:rh-mysql56-mysql-devel-0:5.6.37-5.el6.x86_64",
            "6Workstation-RHSCL-2.4:rh-mysql56-mysql-errmsg-0:5.6.37-5.el6.x86_64",
            "6Workstation-RHSCL-2.4:rh-mysql56-mysql-server-0:5.6.37-5.el6.x86_64",
            "6Workstation-RHSCL-2.4:rh-mysql56-mysql-test-0:5.6.37-5.el6.x86_64",
            "7Server-RHSCL-2.4-7.3.Z:rh-mysql56-mysql-0:5.6.37-5.el7.src",
            "7Server-RHSCL-2.4-7.3.Z:rh-mysql56-mysql-0:5.6.37-5.el7.x86_64",
            "7Server-RHSCL-2.4-7.3.Z:rh-mysql56-mysql-bench-0:5.6.37-5.el7.x86_64",
            "7Server-RHSCL-2.4-7.3.Z:rh-mysql56-mysql-common-0:5.6.37-5.el7.x86_64",
            "7Server-RHSCL-2.4-7.3.Z:rh-mysql56-mysql-config-0:5.6.37-5.el7.x86_64",
            "7Server-RHSCL-2.4-7.3.Z:rh-mysql56-mysql-debuginfo-0:5.6.37-5.el7.x86_64",
            "7Server-RHSCL-2.4-7.3.Z:rh-mysql56-mysql-devel-0:5.6.37-5.el7.x86_64",
            "7Server-RHSCL-2.4-7.3.Z:rh-mysql56-mysql-errmsg-0:5.6.37-5.el7.x86_64",
            "7Server-RHSCL-2.4-7.3.Z:rh-mysql56-mysql-server-0:5.6.37-5.el7.x86_64",
            "7Server-RHSCL-2.4-7.3.Z:rh-mysql56-mysql-test-0:5.6.37-5.el7.x86_64",
            "7Server-RHSCL-2.4:rh-mysql56-mysql-0:5.6.37-5.el7.src",
            "7Server-RHSCL-2.4:rh-mysql56-mysql-0:5.6.37-5.el7.x86_64",
            "7Server-RHSCL-2.4:rh-mysql56-mysql-bench-0:5.6.37-5.el7.x86_64",
            "7Server-RHSCL-2.4:rh-mysql56-mysql-common-0:5.6.37-5.el7.x86_64",
            "7Server-RHSCL-2.4:rh-mysql56-mysql-config-0:5.6.37-5.el7.x86_64",
            "7Server-RHSCL-2.4:rh-mysql56-mysql-debuginfo-0:5.6.37-5.el7.x86_64",
            "7Server-RHSCL-2.4:rh-mysql56-mysql-devel-0:5.6.37-5.el7.x86_64",
            "7Server-RHSCL-2.4:rh-mysql56-mysql-errmsg-0:5.6.37-5.el7.x86_64",
            "7Server-RHSCL-2.4:rh-mysql56-mysql-server-0:5.6.37-5.el7.x86_64",
            "7Server-RHSCL-2.4:rh-mysql56-mysql-test-0:5.6.37-5.el7.x86_64",
            "7Workstation-RHSCL-2.4:rh-mysql56-mysql-0:5.6.37-5.el7.src",
            "7Workstation-RHSCL-2.4:rh-mysql56-mysql-0:5.6.37-5.el7.x86_64",
            "7Workstation-RHSCL-2.4:rh-mysql56-mysql-bench-0:5.6.37-5.el7.x86_64",
            "7Workstation-RHSCL-2.4:rh-mysql56-mysql-common-0:5.6.37-5.el7.x86_64",
            "7Workstation-RHSCL-2.4:rh-mysql56-mysql-config-0:5.6.37-5.el7.x86_64",
            "7Workstation-RHSCL-2.4:rh-mysql56-mysql-debuginfo-0:5.6.37-5.el7.x86_64",
            "7Workstation-RHSCL-2.4:rh-mysql56-mysql-devel-0:5.6.37-5.el7.x86_64",
            "7Workstation-RHSCL-2.4:rh-mysql56-mysql-errmsg-0:5.6.37-5.el7.x86_64",
            "7Workstation-RHSCL-2.4:rh-mysql56-mysql-server-0:5.6.37-5.el7.x86_64",
            "7Workstation-RHSCL-2.4:rh-mysql56-mysql-test-0:5.6.37-5.el7.x86_64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2017:2787"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "HIGH",
            "attackVector": "NETWORK",
            "availabilityImpact": "NONE",
            "baseScore": 3.1,
            "baseSeverity": "LOW",
            "confidentialityImpact": "NONE",
            "integrityImpact": "LOW",
            "privilegesRequired": "LOW",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.0/AV:N/AC:H/PR:L/UI:N/S:U/C:N/I:L/A:N",
            "version": "3.0"
          },
          "products": [
            "6Server-RHSCL-2.4-6.7.Z:rh-mysql56-mysql-0:5.6.37-5.el6.src",
            "6Server-RHSCL-2.4-6.7.Z:rh-mysql56-mysql-0:5.6.37-5.el6.x86_64",
            "6Server-RHSCL-2.4-6.7.Z:rh-mysql56-mysql-bench-0:5.6.37-5.el6.x86_64",
            "6Server-RHSCL-2.4-6.7.Z:rh-mysql56-mysql-common-0:5.6.37-5.el6.x86_64",
            "6Server-RHSCL-2.4-6.7.Z:rh-mysql56-mysql-config-0:5.6.37-5.el6.x86_64",
            "6Server-RHSCL-2.4-6.7.Z:rh-mysql56-mysql-debuginfo-0:5.6.37-5.el6.x86_64",
            "6Server-RHSCL-2.4-6.7.Z:rh-mysql56-mysql-devel-0:5.6.37-5.el6.x86_64",
            "6Server-RHSCL-2.4-6.7.Z:rh-mysql56-mysql-errmsg-0:5.6.37-5.el6.x86_64",
            "6Server-RHSCL-2.4-6.7.Z:rh-mysql56-mysql-server-0:5.6.37-5.el6.x86_64",
            "6Server-RHSCL-2.4-6.7.Z:rh-mysql56-mysql-test-0:5.6.37-5.el6.x86_64",
            "6Server-RHSCL-2.4:rh-mysql56-mysql-0:5.6.37-5.el6.src",
            "6Server-RHSCL-2.4:rh-mysql56-mysql-0:5.6.37-5.el6.x86_64",
            "6Server-RHSCL-2.4:rh-mysql56-mysql-bench-0:5.6.37-5.el6.x86_64",
            "6Server-RHSCL-2.4:rh-mysql56-mysql-common-0:5.6.37-5.el6.x86_64",
            "6Server-RHSCL-2.4:rh-mysql56-mysql-config-0:5.6.37-5.el6.x86_64",
            "6Server-RHSCL-2.4:rh-mysql56-mysql-debuginfo-0:5.6.37-5.el6.x86_64",
            "6Server-RHSCL-2.4:rh-mysql56-mysql-devel-0:5.6.37-5.el6.x86_64",
            "6Server-RHSCL-2.4:rh-mysql56-mysql-errmsg-0:5.6.37-5.el6.x86_64",
            "6Server-RHSCL-2.4:rh-mysql56-mysql-server-0:5.6.37-5.el6.x86_64",
            "6Server-RHSCL-2.4:rh-mysql56-mysql-test-0:5.6.37-5.el6.x86_64",
            "6Workstation-RHSCL-2.4:rh-mysql56-mysql-0:5.6.37-5.el6.src",
            "6Workstation-RHSCL-2.4:rh-mysql56-mysql-0:5.6.37-5.el6.x86_64",
            "6Workstation-RHSCL-2.4:rh-mysql56-mysql-bench-0:5.6.37-5.el6.x86_64",
            "6Workstation-RHSCL-2.4:rh-mysql56-mysql-common-0:5.6.37-5.el6.x86_64",
            "6Workstation-RHSCL-2.4:rh-mysql56-mysql-config-0:5.6.37-5.el6.x86_64",
            "6Workstation-RHSCL-2.4:rh-mysql56-mysql-debuginfo-0:5.6.37-5.el6.x86_64",
            "6Workstation-RHSCL-2.4:rh-mysql56-mysql-devel-0:5.6.37-5.el6.x86_64",
            "6Workstation-RHSCL-2.4:rh-mysql56-mysql-errmsg-0:5.6.37-5.el6.x86_64",
            "6Workstation-RHSCL-2.4:rh-mysql56-mysql-server-0:5.6.37-5.el6.x86_64",
            "6Workstation-RHSCL-2.4:rh-mysql56-mysql-test-0:5.6.37-5.el6.x86_64",
            "7Server-RHSCL-2.4-7.3.Z:rh-mysql56-mysql-0:5.6.37-5.el7.src",
            "7Server-RHSCL-2.4-7.3.Z:rh-mysql56-mysql-0:5.6.37-5.el7.x86_64",
            "7Server-RHSCL-2.4-7.3.Z:rh-mysql56-mysql-bench-0:5.6.37-5.el7.x86_64",
            "7Server-RHSCL-2.4-7.3.Z:rh-mysql56-mysql-common-0:5.6.37-5.el7.x86_64",
            "7Server-RHSCL-2.4-7.3.Z:rh-mysql56-mysql-config-0:5.6.37-5.el7.x86_64",
            "7Server-RHSCL-2.4-7.3.Z:rh-mysql56-mysql-debuginfo-0:5.6.37-5.el7.x86_64",
            "7Server-RHSCL-2.4-7.3.Z:rh-mysql56-mysql-devel-0:5.6.37-5.el7.x86_64",
            "7Server-RHSCL-2.4-7.3.Z:rh-mysql56-mysql-errmsg-0:5.6.37-5.el7.x86_64",
            "7Server-RHSCL-2.4-7.3.Z:rh-mysql56-mysql-server-0:5.6.37-5.el7.x86_64",
            "7Server-RHSCL-2.4-7.3.Z:rh-mysql56-mysql-test-0:5.6.37-5.el7.x86_64",
            "7Server-RHSCL-2.4:rh-mysql56-mysql-0:5.6.37-5.el7.src",
            "7Server-RHSCL-2.4:rh-mysql56-mysql-0:5.6.37-5.el7.x86_64",
            "7Server-RHSCL-2.4:rh-mysql56-mysql-bench-0:5.6.37-5.el7.x86_64",
            "7Server-RHSCL-2.4:rh-mysql56-mysql-common-0:5.6.37-5.el7.x86_64",
            "7Server-RHSCL-2.4:rh-mysql56-mysql-config-0:5.6.37-5.el7.x86_64",
            "7Server-RHSCL-2.4:rh-mysql56-mysql-debuginfo-0:5.6.37-5.el7.x86_64",
            "7Server-RHSCL-2.4:rh-mysql56-mysql-devel-0:5.6.37-5.el7.x86_64",
            "7Server-RHSCL-2.4:rh-mysql56-mysql-errmsg-0:5.6.37-5.el7.x86_64",
            "7Server-RHSCL-2.4:rh-mysql56-mysql-server-0:5.6.37-5.el7.x86_64",
            "7Server-RHSCL-2.4:rh-mysql56-mysql-test-0:5.6.37-5.el7.x86_64",
            "7Workstation-RHSCL-2.4:rh-mysql56-mysql-0:5.6.37-5.el7.src",
            "7Workstation-RHSCL-2.4:rh-mysql56-mysql-0:5.6.37-5.el7.x86_64",
            "7Workstation-RHSCL-2.4:rh-mysql56-mysql-bench-0:5.6.37-5.el7.x86_64",
            "7Workstation-RHSCL-2.4:rh-mysql56-mysql-common-0:5.6.37-5.el7.x86_64",
            "7Workstation-RHSCL-2.4:rh-mysql56-mysql-config-0:5.6.37-5.el7.x86_64",
            "7Workstation-RHSCL-2.4:rh-mysql56-mysql-debuginfo-0:5.6.37-5.el7.x86_64",
            "7Workstation-RHSCL-2.4:rh-mysql56-mysql-devel-0:5.6.37-5.el7.x86_64",
            "7Workstation-RHSCL-2.4:rh-mysql56-mysql-errmsg-0:5.6.37-5.el7.x86_64",
            "7Workstation-RHSCL-2.4:rh-mysql56-mysql-server-0:5.6.37-5.el7.x86_64",
            "7Workstation-RHSCL-2.4:rh-mysql56-mysql-test-0:5.6.37-5.el7.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Low"
        }
      ],
      "title": "mysql: Server: DDL unspecified vulnerability (CPU Jul 2017)"
    }
  ]
}

CVE-2017-3648 (GCVE-0-2017-3648)

Vulnerability from cvelistv5

Published

2017-08-08 15:00

Modified

2024-10-04 17:01

Severity ?

CWE

Difficult to exploit vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server.

Summary

Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Charsets). Supported versions that are affected are 5.5.56 and earlier, 5.6.36 and earlier and 5.7.18 and earlier. Difficult to exploit vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.0 Base Score 4.4 (Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:H).

References

URL

Tags

	https://access.redhat.com/errata/RHSA-2017:2787	vendor-advisory, x_refsource_REDHAT
	http://www.securitytracker.com/id/1038928	vdb-entry, x_refsource_SECTRACK
	http://www.debian.org/security/2017/dsa-3922	vendor-advisory, x_refsource_DEBIAN
	https://access.redhat.com/errata/RHSA-2017:2886	vendor-advisory, x_refsource_REDHAT
	http://www.securityfocus.com/bid/99789	vdb-entry, x_refsource_BID
	http://www.oracle.com/technetwork/security-advisory/cpujul2017-3236622.html	x_refsource_CONFIRM

Impacted products

	Vendor	Product	Version
	Oracle Corporation	MySQL Server	Version: 5.5.56 and earlier Version: 5.6.36 and earlier Version: 5.7.18 and earlier

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-05T14:30:58.961Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "name": "RHSA-2017:2787",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2017:2787"
          },
          {
            "name": "1038928",
            "tags": [
              "vdb-entry",
              "x_refsource_SECTRACK",
              "x_transferred"
            ],
            "url": "http://www.securitytracker.com/id/1038928"
          },
          {
            "name": "DSA-3922",
            "tags": [
              "vendor-advisory",
              "x_refsource_DEBIAN",
              "x_transferred"
            ],
            "url": "http://www.debian.org/security/2017/dsa-3922"
          },
          {
            "name": "RHSA-2017:2886",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2017:2886"
          },
          {
            "name": "99789",
            "tags": [
              "vdb-entry",
              "x_refsource_BID",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/bid/99789"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://www.oracle.com/technetwork/security-advisory/cpujul2017-3236622.html"
          }
        ],
        "title": "CVE Program Container"
      },
      {
        "metrics": [
          {
            "other": {
              "content": {
                "id": "CVE-2017-3648",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "partial"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2024-10-04T15:47:53.839660Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2024-10-04T17:01:38.109Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "MySQL Server",
          "vendor": "Oracle Corporation",
          "versions": [
            {
              "status": "affected",
              "version": "5.5.56 and earlier"
            },
            {
              "status": "affected",
              "version": "5.6.36 and earlier"
            },
            {
              "status": "affected",
              "version": "5.7.18 and earlier"
            }
          ]
        }
      ],
      "datePublic": "2017-07-18T00:00:00",
      "descriptions": [
        {
          "lang": "en",
          "value": "Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Charsets). Supported versions that are affected are 5.5.56 and earlier, 5.6.36 and earlier and 5.7.18 and earlier. Difficult to exploit vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.0 Base Score 4.4 (Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:H)."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "Difficult to exploit vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server.  Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server.",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2017-12-08T10:57:01",
        "orgId": "43595867-4340-4103-b7a2-9a5208d29a85",
        "shortName": "oracle"
      },
      "references": [
        {
          "name": "RHSA-2017:2787",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2017:2787"
        },
        {
          "name": "1038928",
          "tags": [
            "vdb-entry",
            "x_refsource_SECTRACK"
          ],
          "url": "http://www.securitytracker.com/id/1038928"
        },
        {
          "name": "DSA-3922",
          "tags": [
            "vendor-advisory",
            "x_refsource_DEBIAN"
          ],
          "url": "http://www.debian.org/security/2017/dsa-3922"
        },
        {
          "name": "RHSA-2017:2886",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2017:2886"
        },
        {
          "name": "99789",
          "tags": [
            "vdb-entry",
            "x_refsource_BID"
          ],
          "url": "http://www.securityfocus.com/bid/99789"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://www.oracle.com/technetwork/security-advisory/cpujul2017-3236622.html"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "secalert_us@oracle.com",
          "ID": "CVE-2017-3648",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "MySQL Server",
                      "version": {
                        "version_data": [
                          {
                            "version_affected": "=",
                            "version_value": "5.5.56 and earlier"
                          },
                          {
                            "version_affected": "=",
                            "version_value": "5.6.36 and earlier"
                          },
                          {
                            "version_affected": "=",
                            "version_value": "5.7.18 and earlier"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "Oracle Corporation"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Charsets). Supported versions that are affected are 5.5.56 and earlier, 5.6.36 and earlier and 5.7.18 and earlier. Difficult to exploit vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.0 Base Score 4.4 (Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:H)."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "Difficult to exploit vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server.  Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server."
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "RHSA-2017:2787",
              "refsource": "REDHAT",
              "url": "https://access.redhat.com/errata/RHSA-2017:2787"
            },
            {
              "name": "1038928",
              "refsource": "SECTRACK",
              "url": "http://www.securitytracker.com/id/1038928"
            },
            {
              "name": "DSA-3922",
              "refsource": "DEBIAN",
              "url": "http://www.debian.org/security/2017/dsa-3922"
            },
            {
              "name": "RHSA-2017:2886",
              "refsource": "REDHAT",
              "url": "https://access.redhat.com/errata/RHSA-2017:2886"
            },
            {
              "name": "99789",
              "refsource": "BID",
              "url": "http://www.securityfocus.com/bid/99789"
            },
            {
              "name": "http://www.oracle.com/technetwork/security-advisory/cpujul2017-3236622.html",
              "refsource": "CONFIRM",
              "url": "http://www.oracle.com/technetwork/security-advisory/cpujul2017-3236622.html"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "43595867-4340-4103-b7a2-9a5208d29a85",
    "assignerShortName": "oracle",
    "cveId": "CVE-2017-3648",
    "datePublished": "2017-08-08T15:00:00",
    "dateReserved": "2016-12-06T00:00:00",
    "dateUpdated": "2024-10-04T17:01:38.109Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

CVE-2017-3452 (GCVE-0-2017-3452)

Vulnerability from cvelistv5

Published

2017-04-24 19:00

Modified

2024-10-07 16:20

Severity ?

CWE

Easily "exploitable" vulnerability allows low privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server.

Summary

Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Optimizer). Supported versions that are affected are 5.6.35 and earlier. Easily "exploitable" vulnerability allows low privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.0 Base Score 6.5 (Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H).

References

URL

Tags

	https://access.redhat.com/errata/RHSA-2017:2787	vendor-advisory, x_refsource_REDHAT
	http://www.securitytracker.com/id/1038287	vdb-entry, x_refsource_SECTRACK
	http://www.oracle.com/technetwork/security-advisory/cpuapr2017-3236618.html	x_refsource_CONFIRM
	http://www.securityfocus.com/bid/97779	vdb-entry, x_refsource_BID

Impacted products

	Vendor	Product	Version
	Oracle Corporation	MySQL Server	Version: 5.6.35 and earlier

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-05T14:30:56.906Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "name": "RHSA-2017:2787",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2017:2787"
          },
          {
            "name": "1038287",
            "tags": [
              "vdb-entry",
              "x_refsource_SECTRACK",
              "x_transferred"
            ],
            "url": "http://www.securitytracker.com/id/1038287"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://www.oracle.com/technetwork/security-advisory/cpuapr2017-3236618.html"
          },
          {
            "name": "97779",
            "tags": [
              "vdb-entry",
              "x_refsource_BID",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/bid/97779"
          }
        ],
        "title": "CVE Program Container"
      },
      {
        "metrics": [
          {
            "other": {
              "content": {
                "id": "CVE-2017-3452",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "partial"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2024-10-07T15:46:09.230952Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2024-10-07T16:20:36.858Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "MySQL Server",
          "vendor": "Oracle Corporation",
          "versions": [
            {
              "status": "affected",
              "version": "5.6.35 and earlier"
            }
          ]
        }
      ],
      "datePublic": "2017-04-18T00:00:00",
      "descriptions": [
        {
          "lang": "en",
          "value": "Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Optimizer). Supported versions that are affected are 5.6.35 and earlier. Easily \"exploitable\" vulnerability allows low privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.0 Base Score 6.5 (Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H)."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "Easily \"exploitable\" vulnerability allows low privileged attacker with network access via multiple protocols to compromise MySQL Server.  Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server.",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2017-12-08T10:57:01",
        "orgId": "43595867-4340-4103-b7a2-9a5208d29a85",
        "shortName": "oracle"
      },
      "references": [
        {
          "name": "RHSA-2017:2787",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2017:2787"
        },
        {
          "name": "1038287",
          "tags": [
            "vdb-entry",
            "x_refsource_SECTRACK"
          ],
          "url": "http://www.securitytracker.com/id/1038287"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://www.oracle.com/technetwork/security-advisory/cpuapr2017-3236618.html"
        },
        {
          "name": "97779",
          "tags": [
            "vdb-entry",
            "x_refsource_BID"
          ],
          "url": "http://www.securityfocus.com/bid/97779"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "secalert_us@oracle.com",
          "ID": "CVE-2017-3452",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "MySQL Server",
                      "version": {
                        "version_data": [
                          {
                            "version_affected": "=",
                            "version_value": "5.6.35 and earlier"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "Oracle Corporation"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Optimizer). Supported versions that are affected are 5.6.35 and earlier. Easily \"exploitable\" vulnerability allows low privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.0 Base Score 6.5 (Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H)."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "Easily \"exploitable\" vulnerability allows low privileged attacker with network access via multiple protocols to compromise MySQL Server.  Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server."
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "RHSA-2017:2787",
              "refsource": "REDHAT",
              "url": "https://access.redhat.com/errata/RHSA-2017:2787"
            },
            {
              "name": "1038287",
              "refsource": "SECTRACK",
              "url": "http://www.securitytracker.com/id/1038287"
            },
            {
              "name": "http://www.oracle.com/technetwork/security-advisory/cpuapr2017-3236618.html",
              "refsource": "CONFIRM",
              "url": "http://www.oracle.com/technetwork/security-advisory/cpuapr2017-3236618.html"
            },
            {
              "name": "97779",
              "refsource": "BID",
              "url": "http://www.securityfocus.com/bid/97779"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "43595867-4340-4103-b7a2-9a5208d29a85",
    "assignerShortName": "oracle",
    "cveId": "CVE-2017-3452",
    "datePublished": "2017-04-24T19:00:00",
    "dateReserved": "2016-12-06T00:00:00",
    "dateUpdated": "2024-10-07T16:20:36.858Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

CVE-2017-3636 (GCVE-0-2017-3636)

Vulnerability from cvelistv5

Published

2017-08-08 15:00

Modified

2024-10-04 17:03

Severity ?

CWE

Easily exploitable vulnerability allows low privileged attacker with logon to the infrastructure where MySQL Server executes to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of MySQL Server accessible data as well as unauthorized read access to a subset of MySQL Server accessible data and unauthorized ability to cause a partial denial of service (partial DOS) of MySQL Server.

Summary

Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Client programs). Supported versions that are affected are 5.5.56 and earlier and 5.6.36 and earlier. Easily exploitable vulnerability allows low privileged attacker with logon to the infrastructure where MySQL Server executes to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of MySQL Server accessible data as well as unauthorized read access to a subset of MySQL Server accessible data and unauthorized ability to cause a partial denial of service (partial DOS) of MySQL Server. CVSS 3.0 Base Score 5.3 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L).

References

URL

Tags

	https://access.redhat.com/errata/RHSA-2017:2787	vendor-advisory, x_refsource_REDHAT
	https://access.redhat.com/errata/RHSA-2018:2729	vendor-advisory, x_refsource_REDHAT
	https://access.redhat.com/errata/RHSA-2018:0574	vendor-advisory, x_refsource_REDHAT
	http://www.debian.org/security/2017/dsa-3944	vendor-advisory, x_refsource_DEBIAN
	http://www.securitytracker.com/id/1038928	vdb-entry, x_refsource_SECTRACK
	https://www.debian.org/security/2017/dsa-3955	vendor-advisory, x_refsource_DEBIAN
	https://access.redhat.com/errata/RHSA-2018:0279	vendor-advisory, x_refsource_REDHAT
	https://access.redhat.com/errata/RHSA-2018:2439	vendor-advisory, x_refsource_REDHAT
	http://www.debian.org/security/2017/dsa-3922	vendor-advisory, x_refsource_DEBIAN
	http://www.oracle.com/technetwork/security-advisory/cpujul2017-3236622.html	x_refsource_CONFIRM
	http://www.securityfocus.com/bid/99736	vdb-entry, x_refsource_BID

Impacted products

	Vendor	Product	Version
	Oracle Corporation	MySQL Server	Version: 5.5.56 and earlier Version: 5.6.36 and earlier

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-05T14:30:58.593Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "name": "RHSA-2017:2787",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2017:2787"
          },
          {
            "name": "RHSA-2018:2729",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2018:2729"
          },
          {
            "name": "RHSA-2018:0574",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2018:0574"
          },
          {
            "name": "DSA-3944",
            "tags": [
              "vendor-advisory",
              "x_refsource_DEBIAN",
              "x_transferred"
            ],
            "url": "http://www.debian.org/security/2017/dsa-3944"
          },
          {
            "name": "1038928",
            "tags": [
              "vdb-entry",
              "x_refsource_SECTRACK",
              "x_transferred"
            ],
            "url": "http://www.securitytracker.com/id/1038928"
          },
          {
            "name": "DSA-3955",
            "tags": [
              "vendor-advisory",
              "x_refsource_DEBIAN",
              "x_transferred"
            ],
            "url": "https://www.debian.org/security/2017/dsa-3955"
          },
          {
            "name": "RHSA-2018:0279",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2018:0279"
          },
          {
            "name": "RHSA-2018:2439",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2018:2439"
          },
          {
            "name": "DSA-3922",
            "tags": [
              "vendor-advisory",
              "x_refsource_DEBIAN",
              "x_transferred"
            ],
            "url": "http://www.debian.org/security/2017/dsa-3922"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://www.oracle.com/technetwork/security-advisory/cpujul2017-3236622.html"
          },
          {
            "name": "99736",
            "tags": [
              "vdb-entry",
              "x_refsource_BID",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/bid/99736"
          }
        ],
        "title": "CVE Program Container"
      },
      {
        "metrics": [
          {
            "other": {
              "content": {
                "id": "CVE-2017-3636",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "partial"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2024-10-04T15:48:23.472000Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2024-10-04T17:03:05.718Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "MySQL Server",
          "vendor": "Oracle Corporation",
          "versions": [
            {
              "status": "affected",
              "version": "5.5.56 and earlier"
            },
            {
              "status": "affected",
              "version": "5.6.36 and earlier"
            }
          ]
        }
      ],
      "datePublic": "2017-07-18T00:00:00",
      "descriptions": [
        {
          "lang": "en",
          "value": "Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Client programs). Supported versions that are affected are 5.5.56 and earlier and 5.6.36 and earlier. Easily exploitable vulnerability allows low privileged attacker with logon to the infrastructure where MySQL Server executes to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of MySQL Server accessible data as well as unauthorized read access to a subset of MySQL Server accessible data and unauthorized ability to cause a partial denial of service (partial DOS) of MySQL Server. CVSS 3.0 Base Score 5.3 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L)."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "Easily exploitable vulnerability allows low privileged attacker with logon to the infrastructure where MySQL Server executes to compromise MySQL Server.  Successful attacks of this vulnerability can result in  unauthorized update, insert or delete access to some of MySQL Server accessible data as well as  unauthorized read access to a subset of MySQL Server accessible data and unauthorized ability to cause a partial denial of service (partial DOS) of MySQL Server.",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2018-09-21T09:57:01",
        "orgId": "43595867-4340-4103-b7a2-9a5208d29a85",
        "shortName": "oracle"
      },
      "references": [
        {
          "name": "RHSA-2017:2787",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2017:2787"
        },
        {
          "name": "RHSA-2018:2729",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2018:2729"
        },
        {
          "name": "RHSA-2018:0574",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2018:0574"
        },
        {
          "name": "DSA-3944",
          "tags": [
            "vendor-advisory",
            "x_refsource_DEBIAN"
          ],
          "url": "http://www.debian.org/security/2017/dsa-3944"
        },
        {
          "name": "1038928",
          "tags": [
            "vdb-entry",
            "x_refsource_SECTRACK"
          ],
          "url": "http://www.securitytracker.com/id/1038928"
        },
        {
          "name": "DSA-3955",
          "tags": [
            "vendor-advisory",
            "x_refsource_DEBIAN"
          ],
          "url": "https://www.debian.org/security/2017/dsa-3955"
        },
        {
          "name": "RHSA-2018:0279",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2018:0279"
        },
        {
          "name": "RHSA-2018:2439",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2018:2439"
        },
        {
          "name": "DSA-3922",
          "tags": [
            "vendor-advisory",
            "x_refsource_DEBIAN"
          ],
          "url": "http://www.debian.org/security/2017/dsa-3922"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://www.oracle.com/technetwork/security-advisory/cpujul2017-3236622.html"
        },
        {
          "name": "99736",
          "tags": [
            "vdb-entry",
            "x_refsource_BID"
          ],
          "url": "http://www.securityfocus.com/bid/99736"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "secalert_us@oracle.com",
          "ID": "CVE-2017-3636",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "MySQL Server",
                      "version": {
                        "version_data": [
                          {
                            "version_affected": "=",
                            "version_value": "5.5.56 and earlier"
                          },
                          {
                            "version_affected": "=",
                            "version_value": "5.6.36 and earlier"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "Oracle Corporation"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Client programs). Supported versions that are affected are 5.5.56 and earlier and 5.6.36 and earlier. Easily exploitable vulnerability allows low privileged attacker with logon to the infrastructure where MySQL Server executes to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of MySQL Server accessible data as well as unauthorized read access to a subset of MySQL Server accessible data and unauthorized ability to cause a partial denial of service (partial DOS) of MySQL Server. CVSS 3.0 Base Score 5.3 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L)."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "Easily exploitable vulnerability allows low privileged attacker with logon to the infrastructure where MySQL Server executes to compromise MySQL Server.  Successful attacks of this vulnerability can result in  unauthorized update, insert or delete access to some of MySQL Server accessible data as well as  unauthorized read access to a subset of MySQL Server accessible data and unauthorized ability to cause a partial denial of service (partial DOS) of MySQL Server."
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "RHSA-2017:2787",
              "refsource": "REDHAT",
              "url": "https://access.redhat.com/errata/RHSA-2017:2787"
            },
            {
              "name": "RHSA-2018:2729",
              "refsource": "REDHAT",
              "url": "https://access.redhat.com/errata/RHSA-2018:2729"
            },
            {
              "name": "RHSA-2018:0574",
              "refsource": "REDHAT",
              "url": "https://access.redhat.com/errata/RHSA-2018:0574"
            },
            {
              "name": "DSA-3944",
              "refsource": "DEBIAN",
              "url": "http://www.debian.org/security/2017/dsa-3944"
            },
            {
              "name": "1038928",
              "refsource": "SECTRACK",
              "url": "http://www.securitytracker.com/id/1038928"
            },
            {
              "name": "DSA-3955",
              "refsource": "DEBIAN",
              "url": "https://www.debian.org/security/2017/dsa-3955"
            },
            {
              "name": "RHSA-2018:0279",
              "refsource": "REDHAT",
              "url": "https://access.redhat.com/errata/RHSA-2018:0279"
            },
            {
              "name": "RHSA-2018:2439",
              "refsource": "REDHAT",
              "url": "https://access.redhat.com/errata/RHSA-2018:2439"
            },
            {
              "name": "DSA-3922",
              "refsource": "DEBIAN",
              "url": "http://www.debian.org/security/2017/dsa-3922"
            },
            {
              "name": "http://www.oracle.com/technetwork/security-advisory/cpujul2017-3236622.html",
              "refsource": "CONFIRM",
              "url": "http://www.oracle.com/technetwork/security-advisory/cpujul2017-3236622.html"
            },
            {
              "name": "99736",
              "refsource": "BID",
              "url": "http://www.securityfocus.com/bid/99736"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "43595867-4340-4103-b7a2-9a5208d29a85",
    "assignerShortName": "oracle",
    "cveId": "CVE-2017-3636",
    "datePublished": "2017-08-08T15:00:00",
    "dateReserved": "2016-12-06T00:00:00",
    "dateUpdated": "2024-10-04T17:03:05.718Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

CVE-2017-3641 (GCVE-0-2017-3641)

Vulnerability from cvelistv5

Published

2017-08-08 15:00

Modified

2024-10-04 17:02

Severity ?

CWE

Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server.

Summary

Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: DML). Supported versions that are affected are 5.5.56 and earlier, 5.6.36 and earlier and 5.7.18 and earlier. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.0 Base Score 4.9 (Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H).

References

URL

Tags

	https://access.redhat.com/errata/RHSA-2017:2787	vendor-advisory, x_refsource_REDHAT
	http://www.securityfocus.com/bid/99767	vdb-entry, x_refsource_BID
	https://access.redhat.com/errata/RHSA-2018:2729	vendor-advisory, x_refsource_REDHAT
	https://access.redhat.com/errata/RHSA-2018:0574	vendor-advisory, x_refsource_REDHAT
	http://www.debian.org/security/2017/dsa-3944	vendor-advisory, x_refsource_DEBIAN
	http://www.securitytracker.com/id/1038928	vdb-entry, x_refsource_SECTRACK
	https://www.debian.org/security/2017/dsa-3955	vendor-advisory, x_refsource_DEBIAN
	https://access.redhat.com/errata/RHSA-2018:0279	vendor-advisory, x_refsource_REDHAT
	https://access.redhat.com/errata/RHSA-2018:2439	vendor-advisory, x_refsource_REDHAT
	http://www.debian.org/security/2017/dsa-3922	vendor-advisory, x_refsource_DEBIAN
	https://access.redhat.com/errata/RHSA-2017:2886	vendor-advisory, x_refsource_REDHAT
	http://www.oracle.com/technetwork/security-advisory/cpujul2017-3236622.html	x_refsource_CONFIRM

Impacted products

	Vendor	Product	Version
	Oracle Corporation	MySQL Server	Version: 5.5.56 and earlier Version: 5.6.36 and earlier Version: 5.7.18 and earlier

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-05T14:30:58.980Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "name": "RHSA-2017:2787",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2017:2787"
          },
          {
            "name": "99767",
            "tags": [
              "vdb-entry",
              "x_refsource_BID",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/bid/99767"
          },
          {
            "name": "RHSA-2018:2729",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2018:2729"
          },
          {
            "name": "RHSA-2018:0574",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2018:0574"
          },
          {
            "name": "DSA-3944",
            "tags": [
              "vendor-advisory",
              "x_refsource_DEBIAN",
              "x_transferred"
            ],
            "url": "http://www.debian.org/security/2017/dsa-3944"
          },
          {
            "name": "1038928",
            "tags": [
              "vdb-entry",
              "x_refsource_SECTRACK",
              "x_transferred"
            ],
            "url": "http://www.securitytracker.com/id/1038928"
          },
          {
            "name": "DSA-3955",
            "tags": [
              "vendor-advisory",
              "x_refsource_DEBIAN",
              "x_transferred"
            ],
            "url": "https://www.debian.org/security/2017/dsa-3955"
          },
          {
            "name": "RHSA-2018:0279",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2018:0279"
          },
          {
            "name": "RHSA-2018:2439",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2018:2439"
          },
          {
            "name": "DSA-3922",
            "tags": [
              "vendor-advisory",
              "x_refsource_DEBIAN",
              "x_transferred"
            ],
            "url": "http://www.debian.org/security/2017/dsa-3922"
          },
          {
            "name": "RHSA-2017:2886",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2017:2886"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://www.oracle.com/technetwork/security-advisory/cpujul2017-3236622.html"
          }
        ],
        "title": "CVE Program Container"
      },
      {
        "metrics": [
          {
            "other": {
              "content": {
                "id": "CVE-2017-3641",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "partial"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2024-10-04T15:48:15.379439Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2024-10-04T17:02:28.358Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "MySQL Server",
          "vendor": "Oracle Corporation",
          "versions": [
            {
              "status": "affected",
              "version": "5.5.56 and earlier"
            },
            {
              "status": "affected",
              "version": "5.6.36 and earlier"
            },
            {
              "status": "affected",
              "version": "5.7.18 and earlier"
            }
          ]
        }
      ],
      "datePublic": "2017-07-18T00:00:00",
      "descriptions": [
        {
          "lang": "en",
          "value": "Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: DML). Supported versions that are affected are 5.5.56 and earlier, 5.6.36 and earlier and 5.7.18 and earlier. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.0 Base Score 4.9 (Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H)."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server.  Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server.",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2018-09-21T09:57:01",
        "orgId": "43595867-4340-4103-b7a2-9a5208d29a85",
        "shortName": "oracle"
      },
      "references": [
        {
          "name": "RHSA-2017:2787",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2017:2787"
        },
        {
          "name": "99767",
          "tags": [
            "vdb-entry",
            "x_refsource_BID"
          ],
          "url": "http://www.securityfocus.com/bid/99767"
        },
        {
          "name": "RHSA-2018:2729",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2018:2729"
        },
        {
          "name": "RHSA-2018:0574",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2018:0574"
        },
        {
          "name": "DSA-3944",
          "tags": [
            "vendor-advisory",
            "x_refsource_DEBIAN"
          ],
          "url": "http://www.debian.org/security/2017/dsa-3944"
        },
        {
          "name": "1038928",
          "tags": [
            "vdb-entry",
            "x_refsource_SECTRACK"
          ],
          "url": "http://www.securitytracker.com/id/1038928"
        },
        {
          "name": "DSA-3955",
          "tags": [
            "vendor-advisory",
            "x_refsource_DEBIAN"
          ],
          "url": "https://www.debian.org/security/2017/dsa-3955"
        },
        {
          "name": "RHSA-2018:0279",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2018:0279"
        },
        {
          "name": "RHSA-2018:2439",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2018:2439"
        },
        {
          "name": "DSA-3922",
          "tags": [
            "vendor-advisory",
            "x_refsource_DEBIAN"
          ],
          "url": "http://www.debian.org/security/2017/dsa-3922"
        },
        {
          "name": "RHSA-2017:2886",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2017:2886"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://www.oracle.com/technetwork/security-advisory/cpujul2017-3236622.html"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "secalert_us@oracle.com",
          "ID": "CVE-2017-3641",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "MySQL Server",
                      "version": {
                        "version_data": [
                          {
                            "version_affected": "=",
                            "version_value": "5.5.56 and earlier"
                          },
                          {
                            "version_affected": "=",
                            "version_value": "5.6.36 and earlier"
                          },
                          {
                            "version_affected": "=",
                            "version_value": "5.7.18 and earlier"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "Oracle Corporation"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: DML). Supported versions that are affected are 5.5.56 and earlier, 5.6.36 and earlier and 5.7.18 and earlier. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.0 Base Score 4.9 (Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H)."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server.  Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server."
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "RHSA-2017:2787",
              "refsource": "REDHAT",
              "url": "https://access.redhat.com/errata/RHSA-2017:2787"
            },
            {
              "name": "99767",
              "refsource": "BID",
              "url": "http://www.securityfocus.com/bid/99767"
            },
            {
              "name": "RHSA-2018:2729",
              "refsource": "REDHAT",
              "url": "https://access.redhat.com/errata/RHSA-2018:2729"
            },
            {
              "name": "RHSA-2018:0574",
              "refsource": "REDHAT",
              "url": "https://access.redhat.com/errata/RHSA-2018:0574"
            },
            {
              "name": "DSA-3944",
              "refsource": "DEBIAN",
              "url": "http://www.debian.org/security/2017/dsa-3944"
            },
            {
              "name": "1038928",
              "refsource": "SECTRACK",
              "url": "http://www.securitytracker.com/id/1038928"
            },
            {
              "name": "DSA-3955",
              "refsource": "DEBIAN",
              "url": "https://www.debian.org/security/2017/dsa-3955"
            },
            {
              "name": "RHSA-2018:0279",
              "refsource": "REDHAT",
              "url": "https://access.redhat.com/errata/RHSA-2018:0279"
            },
            {
              "name": "RHSA-2018:2439",
              "refsource": "REDHAT",
              "url": "https://access.redhat.com/errata/RHSA-2018:2439"
            },
            {
              "name": "DSA-3922",
              "refsource": "DEBIAN",
              "url": "http://www.debian.org/security/2017/dsa-3922"
            },
            {
              "name": "RHSA-2017:2886",
              "refsource": "REDHAT",
              "url": "https://access.redhat.com/errata/RHSA-2017:2886"
            },
            {
              "name": "http://www.oracle.com/technetwork/security-advisory/cpujul2017-3236622.html",
              "refsource": "CONFIRM",
              "url": "http://www.oracle.com/technetwork/security-advisory/cpujul2017-3236622.html"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "43595867-4340-4103-b7a2-9a5208d29a85",
    "assignerShortName": "oracle",
    "cveId": "CVE-2017-3641",
    "datePublished": "2017-08-08T15:00:00",
    "dateReserved": "2016-12-06T00:00:00",
    "dateUpdated": "2024-10-04T17:02:28.358Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

CVE-2017-3258 (GCVE-0-2017-3258)

Vulnerability from cvelistv5

Published

2017-01-27 22:01

Modified

2024-10-09 19:40

Severity ?

CWE

CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Summary

Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: DDL). Supported versions that are affected are 5.5.53 and earlier, 5.6.34 and earlier and 5.7.16 and earlier. Easily exploitable vulnerability allows low privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS v3.0 Base Score 6.5 (Availability impacts).

References

URL

Tags

	https://access.redhat.com/errata/RHSA-2017:2787	vendor-advisory, x_refsource_REDHAT
	http://www.securityfocus.com/bid/95560	vdb-entry, x_refsource_BID
	https://security.gentoo.org/glsa/201702-17	vendor-advisory, x_refsource_GENTOO
	https://access.redhat.com/errata/RHSA-2018:0574	vendor-advisory, x_refsource_REDHAT
	https://security.gentoo.org/glsa/201702-18	vendor-advisory, x_refsource_GENTOO
	http://www.securitytracker.com/id/1037640	vdb-entry, x_refsource_SECTRACK
	https://access.redhat.com/errata/RHSA-2018:0279	vendor-advisory, x_refsource_REDHAT
	http://www.debian.org/security/2017/dsa-3767	vendor-advisory, x_refsource_DEBIAN
	https://access.redhat.com/errata/RHSA-2017:2886	vendor-advisory, x_refsource_REDHAT
	http://www.oracle.com/technetwork/security-advisory/cpujan2017-2881727.html	x_refsource_CONFIRM
	http://www.debian.org/security/2017/dsa-3770	vendor-advisory, x_refsource_DEBIAN
	https://access.redhat.com/errata/RHSA-2017:2192	vendor-advisory, x_refsource_REDHAT

Impacted products

	Vendor	Product	Version
	Oracle	MySQL Server	Version: 5.5.53 and earlier Version: 5.6.34 and earlier Version: 5.7.16 and earlier

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-05T14:23:33.139Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "name": "RHSA-2017:2787",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2017:2787"
          },
          {
            "name": "95560",
            "tags": [
              "vdb-entry",
              "x_refsource_BID",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/bid/95560"
          },
          {
            "name": "GLSA-201702-17",
            "tags": [
              "vendor-advisory",
              "x_refsource_GENTOO",
              "x_transferred"
            ],
            "url": "https://security.gentoo.org/glsa/201702-17"
          },
          {
            "name": "RHSA-2018:0574",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2018:0574"
          },
          {
            "name": "GLSA-201702-18",
            "tags": [
              "vendor-advisory",
              "x_refsource_GENTOO",
              "x_transferred"
            ],
            "url": "https://security.gentoo.org/glsa/201702-18"
          },
          {
            "name": "1037640",
            "tags": [
              "vdb-entry",
              "x_refsource_SECTRACK",
              "x_transferred"
            ],
            "url": "http://www.securitytracker.com/id/1037640"
          },
          {
            "name": "RHSA-2018:0279",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2018:0279"
          },
          {
            "name": "DSA-3767",
            "tags": [
              "vendor-advisory",
              "x_refsource_DEBIAN",
              "x_transferred"
            ],
            "url": "http://www.debian.org/security/2017/dsa-3767"
          },
          {
            "name": "RHSA-2017:2886",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2017:2886"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://www.oracle.com/technetwork/security-advisory/cpujan2017-2881727.html"
          },
          {
            "name": "DSA-3770",
            "tags": [
              "vendor-advisory",
              "x_refsource_DEBIAN",
              "x_transferred"
            ],
            "url": "http://www.debian.org/security/2017/dsa-3770"
          },
          {
            "name": "RHSA-2017:2192",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2017:2192"
          }
        ],
        "title": "CVE Program Container"
      },
      {
        "metrics": [
          {
            "other": {
              "content": {
                "id": "CVE-2017-3258",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "partial"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2024-10-09T19:30:10.918309Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2024-10-09T19:40:31.532Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "MySQL Server",
          "vendor": "Oracle",
          "versions": [
            {
              "status": "affected",
              "version": "5.5.53 and earlier"
            },
            {
              "status": "affected",
              "version": "5.6.34 and earlier"
            },
            {
              "status": "affected",
              "version": "5.7.16 and earlier"
            }
          ]
        }
      ],
      "datePublic": "2017-01-17T00:00:00",
      "descriptions": [
        {
          "lang": "en",
          "value": "Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: DDL). Supported versions that are affected are 5.5.53 and earlier, 5.6.34 and earlier and 5.7.16 and earlier. Easily exploitable vulnerability allows low privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS v3.0 Base Score 6.5 (Availability impacts)."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2018-03-22T09:57:01",
        "orgId": "43595867-4340-4103-b7a2-9a5208d29a85",
        "shortName": "oracle"
      },
      "references": [
        {
          "name": "RHSA-2017:2787",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2017:2787"
        },
        {
          "name": "95560",
          "tags": [
            "vdb-entry",
            "x_refsource_BID"
          ],
          "url": "http://www.securityfocus.com/bid/95560"
        },
        {
          "name": "GLSA-201702-17",
          "tags": [
            "vendor-advisory",
            "x_refsource_GENTOO"
          ],
          "url": "https://security.gentoo.org/glsa/201702-17"
        },
        {
          "name": "RHSA-2018:0574",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2018:0574"
        },
        {
          "name": "GLSA-201702-18",
          "tags": [
            "vendor-advisory",
            "x_refsource_GENTOO"
          ],
          "url": "https://security.gentoo.org/glsa/201702-18"
        },
        {
          "name": "1037640",
          "tags": [
            "vdb-entry",
            "x_refsource_SECTRACK"
          ],
          "url": "http://www.securitytracker.com/id/1037640"
        },
        {
          "name": "RHSA-2018:0279",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2018:0279"
        },
        {
          "name": "DSA-3767",
          "tags": [
            "vendor-advisory",
            "x_refsource_DEBIAN"
          ],
          "url": "http://www.debian.org/security/2017/dsa-3767"
        },
        {
          "name": "RHSA-2017:2886",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2017:2886"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://www.oracle.com/technetwork/security-advisory/cpujan2017-2881727.html"
        },
        {
          "name": "DSA-3770",
          "tags": [
            "vendor-advisory",
            "x_refsource_DEBIAN"
          ],
          "url": "http://www.debian.org/security/2017/dsa-3770"
        },
        {
          "name": "RHSA-2017:2192",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2017:2192"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "secalert_us@oracle.com",
          "ID": "CVE-2017-3258",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "MySQL Server",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "5.5.53 and earlier"
                          },
                          {
                            "version_value": "5.6.34 and earlier"
                          },
                          {
                            "version_value": "5.7.16 and earlier"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "Oracle"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: DDL). Supported versions that are affected are 5.5.53 and earlier, 5.6.34 and earlier and 5.7.16 and earlier. Easily exploitable vulnerability allows low privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS v3.0 Base Score 6.5 (Availability impacts)."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "RHSA-2017:2787",
              "refsource": "REDHAT",
              "url": "https://access.redhat.com/errata/RHSA-2017:2787"
            },
            {
              "name": "95560",
              "refsource": "BID",
              "url": "http://www.securityfocus.com/bid/95560"
            },
            {
              "name": "GLSA-201702-17",
              "refsource": "GENTOO",
              "url": "https://security.gentoo.org/glsa/201702-17"
            },
            {
              "name": "RHSA-2018:0574",
              "refsource": "REDHAT",
              "url": "https://access.redhat.com/errata/RHSA-2018:0574"
            },
            {
              "name": "GLSA-201702-18",
              "refsource": "GENTOO",
              "url": "https://security.gentoo.org/glsa/201702-18"
            },
            {
              "name": "1037640",
              "refsource": "SECTRACK",
              "url": "http://www.securitytracker.com/id/1037640"
            },
            {
              "name": "RHSA-2018:0279",
              "refsource": "REDHAT",
              "url": "https://access.redhat.com/errata/RHSA-2018:0279"
            },
            {
              "name": "DSA-3767",
              "refsource": "DEBIAN",
              "url": "http://www.debian.org/security/2017/dsa-3767"
            },
            {
              "name": "RHSA-2017:2886",
              "refsource": "REDHAT",
              "url": "https://access.redhat.com/errata/RHSA-2017:2886"
            },
            {
              "name": "http://www.oracle.com/technetwork/security-advisory/cpujan2017-2881727.html",
              "refsource": "CONFIRM",
              "url": "http://www.oracle.com/technetwork/security-advisory/cpujan2017-2881727.html"
            },
            {
              "name": "DSA-3770",
              "refsource": "DEBIAN",
              "url": "http://www.debian.org/security/2017/dsa-3770"
            },
            {
              "name": "RHSA-2017:2192",
              "refsource": "REDHAT",
              "url": "https://access.redhat.com/errata/RHSA-2017:2192"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "43595867-4340-4103-b7a2-9a5208d29a85",
    "assignerShortName": "oracle",
    "cveId": "CVE-2017-3258",
    "datePublished": "2017-01-27T22:01:00",
    "dateReserved": "2016-12-06T00:00:00",
    "dateUpdated": "2024-10-09T19:40:31.532Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

CVE-2017-3599 (GCVE-0-2017-3599)

Vulnerability from cvelistv5

Published

2017-04-24 19:00

Modified

2024-10-04 19:18

Severity ?

CWE

Summary

Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Pluggable Auth). Supported versions that are affected are 5.6.35 and earlier and 5.7.17 and earlier. Easily "exploitable" vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.0 Base Score 7.5 (Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H). NOTE: the previous information is from the April 2017 CPU. Oracle has not commented on third-party claims that this issue is an integer overflow in sql/auth/sql_authentication.cc which allows remote attackers to cause a denial of service via a crafted authentication packet.

References

URL

Tags

	https://access.redhat.com/errata/RHSA-2017:2787	vendor-advisory, x_refsource_REDHAT
	http://www.securitytracker.com/id/1038287	vdb-entry, x_refsource_SECTRACK
	http://www.oracle.com/technetwork/security-advisory/cpuapr2017-3236618.html	x_refsource_CONFIRM
	https://www.exploit-db.com/exploits/41954/	exploit, x_refsource_EXPLOIT-DB
	https://www.secforce.com/blog/2017/04/cve-2017-3599-pre-auth-mysql-remote-dos/	x_refsource_MISC
	https://access.redhat.com/errata/RHSA-2017:2886	vendor-advisory, x_refsource_REDHAT
	http://www.securityfocus.com/bid/97754	vdb-entry, x_refsource_BID

Impacted products

	Vendor	Product	Version
	n/a	n/a	Version: n/a

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-05T14:30:58.978Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "name": "RHSA-2017:2787",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2017:2787"
          },
          {
            "name": "1038287",
            "tags": [
              "vdb-entry",
              "x_refsource_SECTRACK",
              "x_transferred"
            ],
            "url": "http://www.securitytracker.com/id/1038287"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://www.oracle.com/technetwork/security-advisory/cpuapr2017-3236618.html"
          },
          {
            "name": "41954",
            "tags": [
              "exploit",
              "x_refsource_EXPLOIT-DB",
              "x_transferred"
            ],
            "url": "https://www.exploit-db.com/exploits/41954/"
          },
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "https://www.secforce.com/blog/2017/04/cve-2017-3599-pre-auth-mysql-remote-dos/"
          },
          {
            "name": "RHSA-2017:2886",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2017:2886"
          },
          {
            "name": "97754",
            "tags": [
              "vdb-entry",
              "x_refsource_BID",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/bid/97754"
          }
        ],
        "title": "CVE Program Container"
      },
      {
        "metrics": [
          {
            "other": {
              "content": {
                "id": "CVE-2017-3599",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "yes"
                  },
                  {
                    "Technical Impact": "partial"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2024-10-04T16:19:42.749760Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2024-10-04T19:18:52.491Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "datePublic": "2017-04-18T00:00:00",
      "descriptions": [
        {
          "lang": "en",
          "value": "Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Pluggable Auth). Supported versions that are affected are 5.6.35 and earlier and 5.7.17 and earlier. Easily \"exploitable\" vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.0 Base Score 7.5 (Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H). NOTE: the previous information is from the April 2017 CPU. Oracle has not commented on third-party claims that this issue is an integer overflow in sql/auth/sql_authentication.cc which allows remote attackers to cause a denial of service via a crafted authentication packet."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "n/a",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2017-12-08T10:57:01",
        "orgId": "43595867-4340-4103-b7a2-9a5208d29a85",
        "shortName": "oracle"
      },
      "references": [
        {
          "name": "RHSA-2017:2787",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2017:2787"
        },
        {
          "name": "1038287",
          "tags": [
            "vdb-entry",
            "x_refsource_SECTRACK"
          ],
          "url": "http://www.securitytracker.com/id/1038287"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://www.oracle.com/technetwork/security-advisory/cpuapr2017-3236618.html"
        },
        {
          "name": "41954",
          "tags": [
            "exploit",
            "x_refsource_EXPLOIT-DB"
          ],
          "url": "https://www.exploit-db.com/exploits/41954/"
        },
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://www.secforce.com/blog/2017/04/cve-2017-3599-pre-auth-mysql-remote-dos/"
        },
        {
          "name": "RHSA-2017:2886",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2017:2886"
        },
        {
          "name": "97754",
          "tags": [
            "vdb-entry",
            "x_refsource_BID"
          ],
          "url": "http://www.securityfocus.com/bid/97754"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "secalert_us@oracle.com",
          "ID": "CVE-2017-3599",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "n/a",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "n/a"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "n/a"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Pluggable Auth). Supported versions that are affected are 5.6.35 and earlier and 5.7.17 and earlier. Easily \"exploitable\" vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.0 Base Score 7.5 (Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H). NOTE: the previous information is from the April 2017 CPU. Oracle has not commented on third-party claims that this issue is an integer overflow in sql/auth/sql_authentication.cc which allows remote attackers to cause a denial of service via a crafted authentication packet."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "n/a"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "RHSA-2017:2787",
              "refsource": "REDHAT",
              "url": "https://access.redhat.com/errata/RHSA-2017:2787"
            },
            {
              "name": "1038287",
              "refsource": "SECTRACK",
              "url": "http://www.securitytracker.com/id/1038287"
            },
            {
              "name": "http://www.oracle.com/technetwork/security-advisory/cpuapr2017-3236618.html",
              "refsource": "CONFIRM",
              "url": "http://www.oracle.com/technetwork/security-advisory/cpuapr2017-3236618.html"
            },
            {
              "name": "41954",
              "refsource": "EXPLOIT-DB",
              "url": "https://www.exploit-db.com/exploits/41954/"
            },
            {
              "name": "https://www.secforce.com/blog/2017/04/cve-2017-3599-pre-auth-mysql-remote-dos/",
              "refsource": "MISC",
              "url": "https://www.secforce.com/blog/2017/04/cve-2017-3599-pre-auth-mysql-remote-dos/"
            },
            {
              "name": "RHSA-2017:2886",
              "refsource": "REDHAT",
              "url": "https://access.redhat.com/errata/RHSA-2017:2886"
            },
            {
              "name": "97754",
              "refsource": "BID",
              "url": "http://www.securityfocus.com/bid/97754"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "43595867-4340-4103-b7a2-9a5208d29a85",
    "assignerShortName": "oracle",
    "cveId": "CVE-2017-3599",
    "datePublished": "2017-04-24T19:00:00",
    "dateReserved": "2016-12-06T00:00:00",
    "dateUpdated": "2024-10-04T19:18:52.491Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

CVE-2017-3456 (GCVE-0-2017-3456)

Vulnerability from cvelistv5

Published

2017-04-24 19:00

Modified

2024-10-07 16:20

Severity ?

CWE

Easily "exploitable" vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server.

Summary

Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: DML). Supported versions that are affected are 5.5.54 and earlier, 5.6.35 and earlier and 5.7.17 and earlier. Easily "exploitable" vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.0 Base Score 4.9 (Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H).

References

URL

Tags

	https://access.redhat.com/errata/RHSA-2017:2787	vendor-advisory, x_refsource_REDHAT
	http://www.securitytracker.com/id/1038287	vdb-entry, x_refsource_SECTRACK
	http://www.oracle.com/technetwork/security-advisory/cpuapr2017-3236618.html	x_refsource_CONFIRM
	https://access.redhat.com/errata/RHSA-2018:0574	vendor-advisory, x_refsource_REDHAT
	http://www.debian.org/security/2017/dsa-3944	vendor-advisory, x_refsource_DEBIAN
	https://access.redhat.com/errata/RHSA-2018:0279	vendor-advisory, x_refsource_REDHAT
	http://www.debian.org/security/2017/dsa-3834	vendor-advisory, x_refsource_DEBIAN
	https://access.redhat.com/errata/RHSA-2017:2886	vendor-advisory, x_refsource_REDHAT
	http://www.securityfocus.com/bid/97831	vdb-entry, x_refsource_BID
	https://access.redhat.com/errata/RHSA-2017:2192	vendor-advisory, x_refsource_REDHAT

Impacted products

	Vendor	Product	Version
	Oracle Corporation	MySQL Server	Version: 5.5.54 and earlier Version: 5.6.35 and earlier Version: 5.7.17 and earlier

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-05T14:30:56.940Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "name": "RHSA-2017:2787",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2017:2787"
          },
          {
            "name": "1038287",
            "tags": [
              "vdb-entry",
              "x_refsource_SECTRACK",
              "x_transferred"
            ],
            "url": "http://www.securitytracker.com/id/1038287"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://www.oracle.com/technetwork/security-advisory/cpuapr2017-3236618.html"
          },
          {
            "name": "RHSA-2018:0574",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2018:0574"
          },
          {
            "name": "DSA-3944",
            "tags": [
              "vendor-advisory",
              "x_refsource_DEBIAN",
              "x_transferred"
            ],
            "url": "http://www.debian.org/security/2017/dsa-3944"
          },
          {
            "name": "RHSA-2018:0279",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2018:0279"
          },
          {
            "name": "DSA-3834",
            "tags": [
              "vendor-advisory",
              "x_refsource_DEBIAN",
              "x_transferred"
            ],
            "url": "http://www.debian.org/security/2017/dsa-3834"
          },
          {
            "name": "RHSA-2017:2886",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2017:2886"
          },
          {
            "name": "97831",
            "tags": [
              "vdb-entry",
              "x_refsource_BID",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/bid/97831"
          },
          {
            "name": "RHSA-2017:2192",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2017:2192"
          }
        ],
        "title": "CVE Program Container"
      },
      {
        "metrics": [
          {
            "other": {
              "content": {
                "id": "CVE-2017-3456",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "partial"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2024-10-07T15:46:04.588617Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2024-10-07T16:20:04.992Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "MySQL Server",
          "vendor": "Oracle Corporation",
          "versions": [
            {
              "status": "affected",
              "version": "5.5.54 and earlier"
            },
            {
              "status": "affected",
              "version": "5.6.35 and earlier"
            },
            {
              "status": "affected",
              "version": "5.7.17 and earlier"
            }
          ]
        }
      ],
      "datePublic": "2017-04-18T00:00:00",
      "descriptions": [
        {
          "lang": "en",
          "value": "Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: DML). Supported versions that are affected are 5.5.54 and earlier, 5.6.35 and earlier and 5.7.17 and earlier. Easily \"exploitable\" vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.0 Base Score 4.9 (Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H)."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "Easily \"exploitable\" vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server.  Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server.",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2018-03-22T09:57:01",
        "orgId": "43595867-4340-4103-b7a2-9a5208d29a85",
        "shortName": "oracle"
      },
      "references": [
        {
          "name": "RHSA-2017:2787",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2017:2787"
        },
        {
          "name": "1038287",
          "tags": [
            "vdb-entry",
            "x_refsource_SECTRACK"
          ],
          "url": "http://www.securitytracker.com/id/1038287"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://www.oracle.com/technetwork/security-advisory/cpuapr2017-3236618.html"
        },
        {
          "name": "RHSA-2018:0574",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2018:0574"
        },
        {
          "name": "DSA-3944",
          "tags": [
            "vendor-advisory",
            "x_refsource_DEBIAN"
          ],
          "url": "http://www.debian.org/security/2017/dsa-3944"
        },
        {
          "name": "RHSA-2018:0279",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2018:0279"
        },
        {
          "name": "DSA-3834",
          "tags": [
            "vendor-advisory",
            "x_refsource_DEBIAN"
          ],
          "url": "http://www.debian.org/security/2017/dsa-3834"
        },
        {
          "name": "RHSA-2017:2886",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2017:2886"
        },
        {
          "name": "97831",
          "tags": [
            "vdb-entry",
            "x_refsource_BID"
          ],
          "url": "http://www.securityfocus.com/bid/97831"
        },
        {
          "name": "RHSA-2017:2192",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2017:2192"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "secalert_us@oracle.com",
          "ID": "CVE-2017-3456",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "MySQL Server",
                      "version": {
                        "version_data": [
                          {
                            "version_affected": "=",
                            "version_value": "5.5.54 and earlier"
                          },
                          {
                            "version_affected": "=",
                            "version_value": "5.6.35 and earlier"
                          },
                          {
                            "version_affected": "=",
                            "version_value": "5.7.17 and earlier"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "Oracle Corporation"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: DML). Supported versions that are affected are 5.5.54 and earlier, 5.6.35 and earlier and 5.7.17 and earlier. Easily \"exploitable\" vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.0 Base Score 4.9 (Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H)."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "Easily \"exploitable\" vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server.  Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server."
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "RHSA-2017:2787",
              "refsource": "REDHAT",
              "url": "https://access.redhat.com/errata/RHSA-2017:2787"
            },
            {
              "name": "1038287",
              "refsource": "SECTRACK",
              "url": "http://www.securitytracker.com/id/1038287"
            },
            {
              "name": "http://www.oracle.com/technetwork/security-advisory/cpuapr2017-3236618.html",
              "refsource": "CONFIRM",
              "url": "http://www.oracle.com/technetwork/security-advisory/cpuapr2017-3236618.html"
            },
            {
              "name": "RHSA-2018:0574",
              "refsource": "REDHAT",
              "url": "https://access.redhat.com/errata/RHSA-2018:0574"
            },
            {
              "name": "DSA-3944",
              "refsource": "DEBIAN",
              "url": "http://www.debian.org/security/2017/dsa-3944"
            },
            {
              "name": "RHSA-2018:0279",
              "refsource": "REDHAT",
              "url": "https://access.redhat.com/errata/RHSA-2018:0279"
            },
            {
              "name": "DSA-3834",
              "refsource": "DEBIAN",
              "url": "http://www.debian.org/security/2017/dsa-3834"
            },
            {
              "name": "RHSA-2017:2886",
              "refsource": "REDHAT",
              "url": "https://access.redhat.com/errata/RHSA-2017:2886"
            },
            {
              "name": "97831",
              "refsource": "BID",
              "url": "http://www.securityfocus.com/bid/97831"
            },
            {
              "name": "RHSA-2017:2192",
              "refsource": "REDHAT",
              "url": "https://access.redhat.com/errata/RHSA-2017:2192"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "43595867-4340-4103-b7a2-9a5208d29a85",
    "assignerShortName": "oracle",
    "cveId": "CVE-2017-3456",
    "datePublished": "2017-04-24T19:00:00",
    "dateReserved": "2016-12-06T00:00:00",
    "dateUpdated": "2024-10-07T16:20:04.992Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

CVE-2017-3317 (GCVE-0-2017-3317)

Vulnerability from cvelistv5

Published

2017-01-27 22:01

Modified

2024-10-08 20:34

Severity ?

CWE

CVSS:3.0/AV:L/AC:H/PR:H/UI:R/S:U/C:N/I:N/A:H

Summary

Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Logging). Supported versions that are affected are 5.5.53 and earlier, 5.6.34 and earlier and 5.7.16 and earlier. Difficult to exploit vulnerability allows high privileged attacker with logon to the infrastructure where MySQL Server executes to compromise MySQL Server. Successful attacks require human interaction from a person other than the attacker. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS v3.0 Base Score 4.0 (Availability impacts).

References

URL

Tags

	https://access.redhat.com/errata/RHSA-2017:2787	vendor-advisory, x_refsource_REDHAT
	https://security.gentoo.org/glsa/201702-17	vendor-advisory, x_refsource_GENTOO
	https://access.redhat.com/errata/RHSA-2018:0574	vendor-advisory, x_refsource_REDHAT
	https://security.gentoo.org/glsa/201702-18	vendor-advisory, x_refsource_GENTOO
	http://www.securitytracker.com/id/1037640	vdb-entry, x_refsource_SECTRACK
	http://www.securityfocus.com/bid/95585	vdb-entry, x_refsource_BID
	https://access.redhat.com/errata/RHSA-2018:0279	vendor-advisory, x_refsource_REDHAT
	http://www.debian.org/security/2017/dsa-3767	vendor-advisory, x_refsource_DEBIAN
	https://access.redhat.com/errata/RHSA-2017:2886	vendor-advisory, x_refsource_REDHAT
	http://www.oracle.com/technetwork/security-advisory/cpujan2017-2881727.html	x_refsource_CONFIRM
	http://www.debian.org/security/2017/dsa-3770	vendor-advisory, x_refsource_DEBIAN
	https://access.redhat.com/errata/RHSA-2017:2192	vendor-advisory, x_refsource_REDHAT

Impacted products

	Vendor	Product	Version
	Oracle	MySQL Server	Version: 5.5.53 and earlier Version: 5.6.34 and earlier Version: 5.7.16 and earlier

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-05T14:23:34.117Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "name": "RHSA-2017:2787",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2017:2787"
          },
          {
            "name": "GLSA-201702-17",
            "tags": [
              "vendor-advisory",
              "x_refsource_GENTOO",
              "x_transferred"
            ],
            "url": "https://security.gentoo.org/glsa/201702-17"
          },
          {
            "name": "RHSA-2018:0574",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2018:0574"
          },
          {
            "name": "GLSA-201702-18",
            "tags": [
              "vendor-advisory",
              "x_refsource_GENTOO",
              "x_transferred"
            ],
            "url": "https://security.gentoo.org/glsa/201702-18"
          },
          {
            "name": "1037640",
            "tags": [
              "vdb-entry",
              "x_refsource_SECTRACK",
              "x_transferred"
            ],
            "url": "http://www.securitytracker.com/id/1037640"
          },
          {
            "name": "95585",
            "tags": [
              "vdb-entry",
              "x_refsource_BID",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/bid/95585"
          },
          {
            "name": "RHSA-2018:0279",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2018:0279"
          },
          {
            "name": "DSA-3767",
            "tags": [
              "vendor-advisory",
              "x_refsource_DEBIAN",
              "x_transferred"
            ],
            "url": "http://www.debian.org/security/2017/dsa-3767"
          },
          {
            "name": "RHSA-2017:2886",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2017:2886"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://www.oracle.com/technetwork/security-advisory/cpujan2017-2881727.html"
          },
          {
            "name": "DSA-3770",
            "tags": [
              "vendor-advisory",
              "x_refsource_DEBIAN",
              "x_transferred"
            ],
            "url": "http://www.debian.org/security/2017/dsa-3770"
          },
          {
            "name": "RHSA-2017:2192",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2017:2192"
          }
        ],
        "title": "CVE Program Container"
      },
      {
        "metrics": [
          {
            "other": {
              "content": {
                "id": "CVE-2017-3317",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "partial"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2024-10-08T20:09:31.756150Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2024-10-08T20:34:17.556Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "MySQL Server",
          "vendor": "Oracle",
          "versions": [
            {
              "status": "affected",
              "version": "5.5.53 and earlier"
            },
            {
              "status": "affected",
              "version": "5.6.34 and earlier"
            },
            {
              "status": "affected",
              "version": "5.7.16 and earlier"
            }
          ]
        }
      ],
      "datePublic": "2017-01-17T00:00:00",
      "descriptions": [
        {
          "lang": "en",
          "value": "Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Logging). Supported versions that are affected are 5.5.53 and earlier, 5.6.34 and earlier and 5.7.16 and earlier. Difficult to exploit vulnerability allows high privileged attacker with logon to the infrastructure where MySQL Server executes to compromise MySQL Server. Successful attacks require human interaction from a person other than the attacker. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS v3.0 Base Score 4.0 (Availability impacts)."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "CVSS:3.0/AV:L/AC:H/PR:H/UI:R/S:U/C:N/I:N/A:H",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2018-03-22T09:57:01",
        "orgId": "43595867-4340-4103-b7a2-9a5208d29a85",
        "shortName": "oracle"
      },
      "references": [
        {
          "name": "RHSA-2017:2787",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2017:2787"
        },
        {
          "name": "GLSA-201702-17",
          "tags": [
            "vendor-advisory",
            "x_refsource_GENTOO"
          ],
          "url": "https://security.gentoo.org/glsa/201702-17"
        },
        {
          "name": "RHSA-2018:0574",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2018:0574"
        },
        {
          "name": "GLSA-201702-18",
          "tags": [
            "vendor-advisory",
            "x_refsource_GENTOO"
          ],
          "url": "https://security.gentoo.org/glsa/201702-18"
        },
        {
          "name": "1037640",
          "tags": [
            "vdb-entry",
            "x_refsource_SECTRACK"
          ],
          "url": "http://www.securitytracker.com/id/1037640"
        },
        {
          "name": "95585",
          "tags": [
            "vdb-entry",
            "x_refsource_BID"
          ],
          "url": "http://www.securityfocus.com/bid/95585"
        },
        {
          "name": "RHSA-2018:0279",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2018:0279"
        },
        {
          "name": "DSA-3767",
          "tags": [
            "vendor-advisory",
            "x_refsource_DEBIAN"
          ],
          "url": "http://www.debian.org/security/2017/dsa-3767"
        },
        {
          "name": "RHSA-2017:2886",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2017:2886"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://www.oracle.com/technetwork/security-advisory/cpujan2017-2881727.html"
        },
        {
          "name": "DSA-3770",
          "tags": [
            "vendor-advisory",
            "x_refsource_DEBIAN"
          ],
          "url": "http://www.debian.org/security/2017/dsa-3770"
        },
        {
          "name": "RHSA-2017:2192",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2017:2192"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "secalert_us@oracle.com",
          "ID": "CVE-2017-3317",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "MySQL Server",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "5.5.53 and earlier"
                          },
                          {
                            "version_value": "5.6.34 and earlier"
                          },
                          {
                            "version_value": "5.7.16 and earlier"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "Oracle"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Logging). Supported versions that are affected are 5.5.53 and earlier, 5.6.34 and earlier and 5.7.16 and earlier. Difficult to exploit vulnerability allows high privileged attacker with logon to the infrastructure where MySQL Server executes to compromise MySQL Server. Successful attacks require human interaction from a person other than the attacker. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS v3.0 Base Score 4.0 (Availability impacts)."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "CVSS:3.0/AV:L/AC:H/PR:H/UI:R/S:U/C:N/I:N/A:H"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "RHSA-2017:2787",
              "refsource": "REDHAT",
              "url": "https://access.redhat.com/errata/RHSA-2017:2787"
            },
            {
              "name": "GLSA-201702-17",
              "refsource": "GENTOO",
              "url": "https://security.gentoo.org/glsa/201702-17"
            },
            {
              "name": "RHSA-2018:0574",
              "refsource": "REDHAT",
              "url": "https://access.redhat.com/errata/RHSA-2018:0574"
            },
            {
              "name": "GLSA-201702-18",
              "refsource": "GENTOO",
              "url": "https://security.gentoo.org/glsa/201702-18"
            },
            {
              "name": "1037640",
              "refsource": "SECTRACK",
              "url": "http://www.securitytracker.com/id/1037640"
            },
            {
              "name": "95585",
              "refsource": "BID",
              "url": "http://www.securityfocus.com/bid/95585"
            },
            {
              "name": "RHSA-2018:0279",
              "refsource": "REDHAT",
              "url": "https://access.redhat.com/errata/RHSA-2018:0279"
            },
            {
              "name": "DSA-3767",
              "refsource": "DEBIAN",
              "url": "http://www.debian.org/security/2017/dsa-3767"
            },
            {
              "name": "RHSA-2017:2886",
              "refsource": "REDHAT",
              "url": "https://access.redhat.com/errata/RHSA-2017:2886"
            },
            {
              "name": "http://www.oracle.com/technetwork/security-advisory/cpujan2017-2881727.html",
              "refsource": "CONFIRM",
              "url": "http://www.oracle.com/technetwork/security-advisory/cpujan2017-2881727.html"
            },
            {
              "name": "DSA-3770",
              "refsource": "DEBIAN",
              "url": "http://www.debian.org/security/2017/dsa-3770"
            },
            {
              "name": "RHSA-2017:2192",
              "refsource": "REDHAT",
              "url": "https://access.redhat.com/errata/RHSA-2017:2192"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "43595867-4340-4103-b7a2-9a5208d29a85",
    "assignerShortName": "oracle",
    "cveId": "CVE-2017-3317",
    "datePublished": "2017-01-27T22:01:00",
    "dateReserved": "2016-12-06T00:00:00",
    "dateUpdated": "2024-10-08T20:34:17.556Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

CVE-2017-3462 (GCVE-0-2017-3462)

Vulnerability from cvelistv5

Published

2017-04-24 19:00

Modified

2024-10-07 16:19

Severity ?

CWE

Easily "exploitable" vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server.

Summary

Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Security: Privileges). Supported versions that are affected are 5.5.54 and earlier, 5.6.35 and earlier and 5.7.17 and earlier. Easily "exploitable" vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.0 Base Score 4.9 (Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H).

References

URL

Tags

	https://access.redhat.com/errata/RHSA-2017:2787	vendor-advisory, x_refsource_REDHAT
	http://www.securitytracker.com/id/1038287	vdb-entry, x_refsource_SECTRACK
	http://www.oracle.com/technetwork/security-advisory/cpuapr2017-3236618.html	x_refsource_CONFIRM
	http://www.securityfocus.com/bid/97851	vdb-entry, x_refsource_BID
	http://www.debian.org/security/2017/dsa-3834	vendor-advisory, x_refsource_DEBIAN
	https://access.redhat.com/errata/RHSA-2017:2886	vendor-advisory, x_refsource_REDHAT

Impacted products

	Vendor	Product	Version
	Oracle Corporation	MySQL Server	Version: 5.5.54 and earlier Version: 5.6.35 and earlier Version: 5.7.17 and earlier

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-05T14:30:56.933Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "name": "RHSA-2017:2787",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2017:2787"
          },
          {
            "name": "1038287",
            "tags": [
              "vdb-entry",
              "x_refsource_SECTRACK",
              "x_transferred"
            ],
            "url": "http://www.securitytracker.com/id/1038287"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://www.oracle.com/technetwork/security-advisory/cpuapr2017-3236618.html"
          },
          {
            "name": "97851",
            "tags": [
              "vdb-entry",
              "x_refsource_BID",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/bid/97851"
          },
          {
            "name": "DSA-3834",
            "tags": [
              "vendor-advisory",
              "x_refsource_DEBIAN",
              "x_transferred"
            ],
            "url": "http://www.debian.org/security/2017/dsa-3834"
          },
          {
            "name": "RHSA-2017:2886",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2017:2886"
          }
        ],
        "title": "CVE Program Container"
      },
      {
        "metrics": [
          {
            "other": {
              "content": {
                "id": "CVE-2017-3462",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "partial"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2024-10-07T15:45:57.832990Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2024-10-07T16:19:12.083Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "MySQL Server",
          "vendor": "Oracle Corporation",
          "versions": [
            {
              "status": "affected",
              "version": "5.5.54 and earlier"
            },
            {
              "status": "affected",
              "version": "5.6.35 and earlier"
            },
            {
              "status": "affected",
              "version": "5.7.17 and earlier"
            }
          ]
        }
      ],
      "datePublic": "2017-04-18T00:00:00",
      "descriptions": [
        {
          "lang": "en",
          "value": "Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Security: Privileges). Supported versions that are affected are 5.5.54 and earlier, 5.6.35 and earlier and 5.7.17 and earlier. Easily \"exploitable\" vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.0 Base Score 4.9 (Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H)."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "Easily \"exploitable\" vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server.  Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server.",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2017-12-08T10:57:01",
        "orgId": "43595867-4340-4103-b7a2-9a5208d29a85",
        "shortName": "oracle"
      },
      "references": [
        {
          "name": "RHSA-2017:2787",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2017:2787"
        },
        {
          "name": "1038287",
          "tags": [
            "vdb-entry",
            "x_refsource_SECTRACK"
          ],
          "url": "http://www.securitytracker.com/id/1038287"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://www.oracle.com/technetwork/security-advisory/cpuapr2017-3236618.html"
        },
        {
          "name": "97851",
          "tags": [
            "vdb-entry",
            "x_refsource_BID"
          ],
          "url": "http://www.securityfocus.com/bid/97851"
        },
        {
          "name": "DSA-3834",
          "tags": [
            "vendor-advisory",
            "x_refsource_DEBIAN"
          ],
          "url": "http://www.debian.org/security/2017/dsa-3834"
        },
        {
          "name": "RHSA-2017:2886",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2017:2886"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "secalert_us@oracle.com",
          "ID": "CVE-2017-3462",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "MySQL Server",
                      "version": {
                        "version_data": [
                          {
                            "version_affected": "=",
                            "version_value": "5.5.54 and earlier"
                          },
                          {
                            "version_affected": "=",
                            "version_value": "5.6.35 and earlier"
                          },
                          {
                            "version_affected": "=",
                            "version_value": "5.7.17 and earlier"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "Oracle Corporation"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Security: Privileges). Supported versions that are affected are 5.5.54 and earlier, 5.6.35 and earlier and 5.7.17 and earlier. Easily \"exploitable\" vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.0 Base Score 4.9 (Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H)."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "Easily \"exploitable\" vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server.  Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server."
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "RHSA-2017:2787",
              "refsource": "REDHAT",
              "url": "https://access.redhat.com/errata/RHSA-2017:2787"
            },
            {
              "name": "1038287",
              "refsource": "SECTRACK",
              "url": "http://www.securitytracker.com/id/1038287"
            },
            {
              "name": "http://www.oracle.com/technetwork/security-advisory/cpuapr2017-3236618.html",
              "refsource": "CONFIRM",
              "url": "http://www.oracle.com/technetwork/security-advisory/cpuapr2017-3236618.html"
            },
            {
              "name": "97851",
              "refsource": "BID",
              "url": "http://www.securityfocus.com/bid/97851"
            },
            {
              "name": "DSA-3834",
              "refsource": "DEBIAN",
              "url": "http://www.debian.org/security/2017/dsa-3834"
            },
            {
              "name": "RHSA-2017:2886",
              "refsource": "REDHAT",
              "url": "https://access.redhat.com/errata/RHSA-2017:2886"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "43595867-4340-4103-b7a2-9a5208d29a85",
    "assignerShortName": "oracle",
    "cveId": "CVE-2017-3462",
    "datePublished": "2017-04-24T19:00:00",
    "dateReserved": "2016-12-06T00:00:00",
    "dateUpdated": "2024-10-07T16:19:12.083Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

CVE-2017-3463 (GCVE-0-2017-3463)

Vulnerability from cvelistv5

Published

2017-04-24 19:00

Modified

2024-10-07 16:19

Severity ?

CWE

Easily "exploitable" vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server.

Summary

References

URL

Tags

	https://access.redhat.com/errata/RHSA-2017:2787	vendor-advisory, x_refsource_REDHAT
	http://www.securitytracker.com/id/1038287	vdb-entry, x_refsource_SECTRACK
	http://www.oracle.com/technetwork/security-advisory/cpuapr2017-3236618.html	x_refsource_CONFIRM
	http://www.securityfocus.com/bid/97849	vdb-entry, x_refsource_BID
	http://www.debian.org/security/2017/dsa-3834	vendor-advisory, x_refsource_DEBIAN
	https://access.redhat.com/errata/RHSA-2017:2886	vendor-advisory, x_refsource_REDHAT

Impacted products

	Vendor	Product	Version
	Oracle Corporation	MySQL Server	Version: 5.5.54 and earlier Version: 5.6.35 and earlier Version: 5.7.17 and earlier

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-05T14:30:56.792Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "name": "RHSA-2017:2787",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2017:2787"
          },
          {
            "name": "1038287",
            "tags": [
              "vdb-entry",
              "x_refsource_SECTRACK",
              "x_transferred"
            ],
            "url": "http://www.securitytracker.com/id/1038287"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://www.oracle.com/technetwork/security-advisory/cpuapr2017-3236618.html"
          },
          {
            "name": "97849",
            "tags": [
              "vdb-entry",
              "x_refsource_BID",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/bid/97849"
          },
          {
            "name": "DSA-3834",
            "tags": [
              "vendor-advisory",
              "x_refsource_DEBIAN",
              "x_transferred"
            ],
            "url": "http://www.debian.org/security/2017/dsa-3834"
          },
          {
            "name": "RHSA-2017:2886",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2017:2886"
          }
        ],
        "title": "CVE Program Container"
      },
      {
        "metrics": [
          {
            "other": {
              "content": {
                "id": "CVE-2017-3463",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "partial"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2024-10-07T15:45:56.658776Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2024-10-07T16:19:03.111Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "MySQL Server",
          "vendor": "Oracle Corporation",
          "versions": [
            {
              "status": "affected",
              "version": "5.5.54 and earlier"
            },
            {
              "status": "affected",
              "version": "5.6.35 and earlier"
            },
            {
              "status": "affected",
              "version": "5.7.17 and earlier"
            }
          ]
        }
      ],
      "datePublic": "2017-04-18T00:00:00",
      "descriptions": [
        {
          "lang": "en",
          "value": "Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Security: Privileges). Supported versions that are affected are 5.5.54 and earlier, 5.6.35 and earlier and 5.7.17 and earlier. Easily \"exploitable\" vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.0 Base Score 4.9 (Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H)."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "Easily \"exploitable\" vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server.  Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server.",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2017-12-08T10:57:01",
        "orgId": "43595867-4340-4103-b7a2-9a5208d29a85",
        "shortName": "oracle"
      },
      "references": [
        {
          "name": "RHSA-2017:2787",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2017:2787"
        },
        {
          "name": "1038287",
          "tags": [
            "vdb-entry",
            "x_refsource_SECTRACK"
          ],
          "url": "http://www.securitytracker.com/id/1038287"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://www.oracle.com/technetwork/security-advisory/cpuapr2017-3236618.html"
        },
        {
          "name": "97849",
          "tags": [
            "vdb-entry",
            "x_refsource_BID"
          ],
          "url": "http://www.securityfocus.com/bid/97849"
        },
        {
          "name": "DSA-3834",
          "tags": [
            "vendor-advisory",
            "x_refsource_DEBIAN"
          ],
          "url": "http://www.debian.org/security/2017/dsa-3834"
        },
        {
          "name": "RHSA-2017:2886",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2017:2886"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "secalert_us@oracle.com",
          "ID": "CVE-2017-3463",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "MySQL Server",
                      "version": {
                        "version_data": [
                          {
                            "version_affected": "=",
                            "version_value": "5.5.54 and earlier"
                          },
                          {
                            "version_affected": "=",
                            "version_value": "5.6.35 and earlier"
                          },
                          {
                            "version_affected": "=",
                            "version_value": "5.7.17 and earlier"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "Oracle Corporation"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Security: Privileges). Supported versions that are affected are 5.5.54 and earlier, 5.6.35 and earlier and 5.7.17 and earlier. Easily \"exploitable\" vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.0 Base Score 4.9 (Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H)."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "Easily \"exploitable\" vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server.  Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server."
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "RHSA-2017:2787",
              "refsource": "REDHAT",
              "url": "https://access.redhat.com/errata/RHSA-2017:2787"
            },
            {
              "name": "1038287",
              "refsource": "SECTRACK",
              "url": "http://www.securitytracker.com/id/1038287"
            },
            {
              "name": "http://www.oracle.com/technetwork/security-advisory/cpuapr2017-3236618.html",
              "refsource": "CONFIRM",
              "url": "http://www.oracle.com/technetwork/security-advisory/cpuapr2017-3236618.html"
            },
            {
              "name": "97849",
              "refsource": "BID",
              "url": "http://www.securityfocus.com/bid/97849"
            },
            {
              "name": "DSA-3834",
              "refsource": "DEBIAN",
              "url": "http://www.debian.org/security/2017/dsa-3834"
            },
            {
              "name": "RHSA-2017:2886",
              "refsource": "REDHAT",
              "url": "https://access.redhat.com/errata/RHSA-2017:2886"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "43595867-4340-4103-b7a2-9a5208d29a85",
    "assignerShortName": "oracle",
    "cveId": "CVE-2017-3463",
    "datePublished": "2017-04-24T19:00:00",
    "dateReserved": "2016-12-06T00:00:00",
    "dateUpdated": "2024-10-07T16:19:03.111Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

CVE-2017-3238 (GCVE-0-2017-3238)

Vulnerability from cvelistv5

Published

2017-01-27 22:01

Modified

2024-10-09 19:51

Severity ?

CWE

CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Summary

Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Optimizer). Supported versions that are affected are 5.5.53 and earlier, 5.6.34 and earlier and 5.7.16 and earlier. Easily exploitable vulnerability allows low privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS v3.0 Base Score 6.5 (Availability impacts).

References

URL

Tags

	https://access.redhat.com/errata/RHSA-2017:2787	vendor-advisory, x_refsource_REDHAT
	https://security.gentoo.org/glsa/201702-17	vendor-advisory, x_refsource_GENTOO
	https://access.redhat.com/errata/RHSA-2018:0574	vendor-advisory, x_refsource_REDHAT
	https://security.gentoo.org/glsa/201702-18	vendor-advisory, x_refsource_GENTOO
	http://www.securitytracker.com/id/1037640	vdb-entry, x_refsource_SECTRACK
	https://access.redhat.com/errata/RHSA-2018:0279	vendor-advisory, x_refsource_REDHAT
	http://www.debian.org/security/2017/dsa-3767	vendor-advisory, x_refsource_DEBIAN
	http://www.securityfocus.com/bid/95571	vdb-entry, x_refsource_BID
	https://access.redhat.com/errata/RHSA-2017:2886	vendor-advisory, x_refsource_REDHAT
	http://www.oracle.com/technetwork/security-advisory/cpujan2017-2881727.html	x_refsource_CONFIRM
	http://www.debian.org/security/2017/dsa-3770	vendor-advisory, x_refsource_DEBIAN
	https://access.redhat.com/errata/RHSA-2017:2192	vendor-advisory, x_refsource_REDHAT

Impacted products

	Vendor	Product	Version
	Oracle	MySQL Server	Version: 5.5.53 and earlier Version: 5.6.34 and earlier Version: 5.7.16 and earlier

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-05T14:16:28.484Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "name": "RHSA-2017:2787",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2017:2787"
          },
          {
            "name": "GLSA-201702-17",
            "tags": [
              "vendor-advisory",
              "x_refsource_GENTOO",
              "x_transferred"
            ],
            "url": "https://security.gentoo.org/glsa/201702-17"
          },
          {
            "name": "RHSA-2018:0574",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2018:0574"
          },
          {
            "name": "GLSA-201702-18",
            "tags": [
              "vendor-advisory",
              "x_refsource_GENTOO",
              "x_transferred"
            ],
            "url": "https://security.gentoo.org/glsa/201702-18"
          },
          {
            "name": "1037640",
            "tags": [
              "vdb-entry",
              "x_refsource_SECTRACK",
              "x_transferred"
            ],
            "url": "http://www.securitytracker.com/id/1037640"
          },
          {
            "name": "RHSA-2018:0279",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2018:0279"
          },
          {
            "name": "DSA-3767",
            "tags": [
              "vendor-advisory",
              "x_refsource_DEBIAN",
              "x_transferred"
            ],
            "url": "http://www.debian.org/security/2017/dsa-3767"
          },
          {
            "name": "95571",
            "tags": [
              "vdb-entry",
              "x_refsource_BID",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/bid/95571"
          },
          {
            "name": "RHSA-2017:2886",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2017:2886"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://www.oracle.com/technetwork/security-advisory/cpujan2017-2881727.html"
          },
          {
            "name": "DSA-3770",
            "tags": [
              "vendor-advisory",
              "x_refsource_DEBIAN",
              "x_transferred"
            ],
            "url": "http://www.debian.org/security/2017/dsa-3770"
          },
          {
            "name": "RHSA-2017:2192",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2017:2192"
          }
        ],
        "title": "CVE Program Container"
      },
      {
        "metrics": [
          {
            "other": {
              "content": {
                "id": "CVE-2017-3238",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "partial"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2024-10-09T19:30:35.266321Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2024-10-09T19:51:59.764Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "MySQL Server",
          "vendor": "Oracle",
          "versions": [
            {
              "status": "affected",
              "version": "5.5.53 and earlier"
            },
            {
              "status": "affected",
              "version": "5.6.34 and earlier"
            },
            {
              "status": "affected",
              "version": "5.7.16 and earlier"
            }
          ]
        }
      ],
      "datePublic": "2017-01-17T00:00:00",
      "descriptions": [
        {
          "lang": "en",
          "value": "Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Optimizer). Supported versions that are affected are 5.5.53 and earlier, 5.6.34 and earlier and 5.7.16 and earlier. Easily exploitable vulnerability allows low privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS v3.0 Base Score 6.5 (Availability impacts)."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2018-03-22T09:57:01",
        "orgId": "43595867-4340-4103-b7a2-9a5208d29a85",
        "shortName": "oracle"
      },
      "references": [
        {
          "name": "RHSA-2017:2787",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2017:2787"
        },
        {
          "name": "GLSA-201702-17",
          "tags": [
            "vendor-advisory",
            "x_refsource_GENTOO"
          ],
          "url": "https://security.gentoo.org/glsa/201702-17"
        },
        {
          "name": "RHSA-2018:0574",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2018:0574"
        },
        {
          "name": "GLSA-201702-18",
          "tags": [
            "vendor-advisory",
            "x_refsource_GENTOO"
          ],
          "url": "https://security.gentoo.org/glsa/201702-18"
        },
        {
          "name": "1037640",
          "tags": [
            "vdb-entry",
            "x_refsource_SECTRACK"
          ],
          "url": "http://www.securitytracker.com/id/1037640"
        },
        {
          "name": "RHSA-2018:0279",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2018:0279"
        },
        {
          "name": "DSA-3767",
          "tags": [
            "vendor-advisory",
            "x_refsource_DEBIAN"
          ],
          "url": "http://www.debian.org/security/2017/dsa-3767"
        },
        {
          "name": "95571",
          "tags": [
            "vdb-entry",
            "x_refsource_BID"
          ],
          "url": "http://www.securityfocus.com/bid/95571"
        },
        {
          "name": "RHSA-2017:2886",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2017:2886"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://www.oracle.com/technetwork/security-advisory/cpujan2017-2881727.html"
        },
        {
          "name": "DSA-3770",
          "tags": [
            "vendor-advisory",
            "x_refsource_DEBIAN"
          ],
          "url": "http://www.debian.org/security/2017/dsa-3770"
        },
        {
          "name": "RHSA-2017:2192",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2017:2192"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "secalert_us@oracle.com",
          "ID": "CVE-2017-3238",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "MySQL Server",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "5.5.53 and earlier"
                          },
                          {
                            "version_value": "5.6.34 and earlier"
                          },
                          {
                            "version_value": "5.7.16 and earlier"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "Oracle"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Optimizer). Supported versions that are affected are 5.5.53 and earlier, 5.6.34 and earlier and 5.7.16 and earlier. Easily exploitable vulnerability allows low privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS v3.0 Base Score 6.5 (Availability impacts)."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "RHSA-2017:2787",
              "refsource": "REDHAT",
              "url": "https://access.redhat.com/errata/RHSA-2017:2787"
            },
            {
              "name": "GLSA-201702-17",
              "refsource": "GENTOO",
              "url": "https://security.gentoo.org/glsa/201702-17"
            },
            {
              "name": "RHSA-2018:0574",
              "refsource": "REDHAT",
              "url": "https://access.redhat.com/errata/RHSA-2018:0574"
            },
            {
              "name": "GLSA-201702-18",
              "refsource": "GENTOO",
              "url": "https://security.gentoo.org/glsa/201702-18"
            },
            {
              "name": "1037640",
              "refsource": "SECTRACK",
              "url": "http://www.securitytracker.com/id/1037640"
            },
            {
              "name": "RHSA-2018:0279",
              "refsource": "REDHAT",
              "url": "https://access.redhat.com/errata/RHSA-2018:0279"
            },
            {
              "name": "DSA-3767",
              "refsource": "DEBIAN",
              "url": "http://www.debian.org/security/2017/dsa-3767"
            },
            {
              "name": "95571",
              "refsource": "BID",
              "url": "http://www.securityfocus.com/bid/95571"
            },
            {
              "name": "RHSA-2017:2886",
              "refsource": "REDHAT",
              "url": "https://access.redhat.com/errata/RHSA-2017:2886"
            },
            {
              "name": "http://www.oracle.com/technetwork/security-advisory/cpujan2017-2881727.html",
              "refsource": "CONFIRM",
              "url": "http://www.oracle.com/technetwork/security-advisory/cpujan2017-2881727.html"
            },
            {
              "name": "DSA-3770",
              "refsource": "DEBIAN",
              "url": "http://www.debian.org/security/2017/dsa-3770"
            },
            {
              "name": "RHSA-2017:2192",
              "refsource": "REDHAT",
              "url": "https://access.redhat.com/errata/RHSA-2017:2192"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "43595867-4340-4103-b7a2-9a5208d29a85",
    "assignerShortName": "oracle",
    "cveId": "CVE-2017-3238",
    "datePublished": "2017-01-27T22:01:00",
    "dateReserved": "2016-12-06T00:00:00",
    "dateUpdated": "2024-10-09T19:51:59.764Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

CVE-2016-8327 (GCVE-0-2016-8327)

Vulnerability from cvelistv5

Published

2017-01-27 22:01

Modified

2024-10-09 19:55

Severity ?

CWE

CVSS:3.0/AV:N/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:H

Summary

Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Replication). Supported versions that are affected are 5.6.34 and earlier and 5.7.16 and earlier. Difficult to exploit vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS v3.0 Base Score 4.4 (Availability impacts).

References

URL

Tags

	https://access.redhat.com/errata/RHSA-2017:2787	vendor-advisory, x_refsource_REDHAT
	https://security.gentoo.org/glsa/201702-17	vendor-advisory, x_refsource_GENTOO
	http://www.securityfocus.com/bid/95557	vdb-entry, x_refsource_BID
	http://www.securitytracker.com/id/1037640	vdb-entry, x_refsource_SECTRACK
	https://access.redhat.com/errata/RHSA-2017:2886	vendor-advisory, x_refsource_REDHAT
	http://www.oracle.com/technetwork/security-advisory/cpujan2017-2881727.html	x_refsource_CONFIRM

Impacted products

	Vendor	Product	Version
	Oracle	MySQL Server	Version: 5.6.34 and earlier Version: 5.7.16 and earlier

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-06T02:20:30.685Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "name": "RHSA-2017:2787",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2017:2787"
          },
          {
            "name": "GLSA-201702-17",
            "tags": [
              "vendor-advisory",
              "x_refsource_GENTOO",
              "x_transferred"
            ],
            "url": "https://security.gentoo.org/glsa/201702-17"
          },
          {
            "name": "95557",
            "tags": [
              "vdb-entry",
              "x_refsource_BID",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/bid/95557"
          },
          {
            "name": "1037640",
            "tags": [
              "vdb-entry",
              "x_refsource_SECTRACK",
              "x_transferred"
            ],
            "url": "http://www.securitytracker.com/id/1037640"
          },
          {
            "name": "RHSA-2017:2886",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2017:2886"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://www.oracle.com/technetwork/security-advisory/cpujan2017-2881727.html"
          }
        ],
        "title": "CVE Program Container"
      },
      {
        "metrics": [
          {
            "other": {
              "content": {
                "id": "CVE-2016-8327",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "partial"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2024-10-09T19:30:49.114773Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2024-10-09T19:55:41.512Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "MySQL Server",
          "vendor": "Oracle",
          "versions": [
            {
              "status": "affected",
              "version": "5.6.34 and earlier"
            },
            {
              "status": "affected",
              "version": "5.7.16 and earlier"
            }
          ]
        }
      ],
      "datePublic": "2017-01-17T00:00:00",
      "descriptions": [
        {
          "lang": "en",
          "value": "Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Replication). Supported versions that are affected are 5.6.34 and earlier and 5.7.16 and earlier. Difficult to exploit vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS v3.0 Base Score 4.4 (Availability impacts)."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "CVSS:3.0/AV:N/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:H",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2017-12-08T10:57:01",
        "orgId": "43595867-4340-4103-b7a2-9a5208d29a85",
        "shortName": "oracle"
      },
      "references": [
        {
          "name": "RHSA-2017:2787",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2017:2787"
        },
        {
          "name": "GLSA-201702-17",
          "tags": [
            "vendor-advisory",
            "x_refsource_GENTOO"
          ],
          "url": "https://security.gentoo.org/glsa/201702-17"
        },
        {
          "name": "95557",
          "tags": [
            "vdb-entry",
            "x_refsource_BID"
          ],
          "url": "http://www.securityfocus.com/bid/95557"
        },
        {
          "name": "1037640",
          "tags": [
            "vdb-entry",
            "x_refsource_SECTRACK"
          ],
          "url": "http://www.securitytracker.com/id/1037640"
        },
        {
          "name": "RHSA-2017:2886",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2017:2886"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://www.oracle.com/technetwork/security-advisory/cpujan2017-2881727.html"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "secalert_us@oracle.com",
          "ID": "CVE-2016-8327",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "MySQL Server",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "5.6.34 and earlier"
                          },
                          {
                            "version_value": "5.7.16 and earlier"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "Oracle"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Replication). Supported versions that are affected are 5.6.34 and earlier and 5.7.16 and earlier. Difficult to exploit vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS v3.0 Base Score 4.4 (Availability impacts)."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "CVSS:3.0/AV:N/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:H"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "RHSA-2017:2787",
              "refsource": "REDHAT",
              "url": "https://access.redhat.com/errata/RHSA-2017:2787"
            },
            {
              "name": "GLSA-201702-17",
              "refsource": "GENTOO",
              "url": "https://security.gentoo.org/glsa/201702-17"
            },
            {
              "name": "95557",
              "refsource": "BID",
              "url": "http://www.securityfocus.com/bid/95557"
            },
            {
              "name": "1037640",
              "refsource": "SECTRACK",
              "url": "http://www.securitytracker.com/id/1037640"
            },
            {
              "name": "RHSA-2017:2886",
              "refsource": "REDHAT",
              "url": "https://access.redhat.com/errata/RHSA-2017:2886"
            },
            {
              "name": "http://www.oracle.com/technetwork/security-advisory/cpujan2017-2881727.html",
              "refsource": "CONFIRM",
              "url": "http://www.oracle.com/technetwork/security-advisory/cpujan2017-2881727.html"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "43595867-4340-4103-b7a2-9a5208d29a85",
    "assignerShortName": "oracle",
    "cveId": "CVE-2016-8327",
    "datePublished": "2017-01-27T22:01:00",
    "dateReserved": "2016-09-26T00:00:00",
    "dateUpdated": "2024-10-09T19:55:41.512Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

CVE-2017-3265 (GCVE-0-2017-3265)

Vulnerability from cvelistv5

Published

2017-01-27 22:01

Modified

2024-10-09 19:38

Severity ?

CWE

CVSS:3.0/AV:L/AC:H/PR:H/UI:R/S:U/C:H/I:N/A:H

Summary

Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Packaging). Supported versions that are affected are 5.5.53 and earlier, 5.6.34 and earlier and 5.7.16 and earlier. Difficult to exploit vulnerability allows high privileged attacker with logon to the infrastructure where MySQL Server executes to compromise MySQL Server. Successful attacks require human interaction from a person other than the attacker. Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all MySQL Server accessible data and unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS v3.0 Base Score 5.6 (Confidentiality and Availability impacts).

References

URL

Tags

	https://access.redhat.com/errata/RHSA-2017:2787	vendor-advisory, x_refsource_REDHAT
	https://security.gentoo.org/glsa/201702-17	vendor-advisory, x_refsource_GENTOO
	https://access.redhat.com/errata/RHSA-2018:0574	vendor-advisory, x_refsource_REDHAT
	https://security.gentoo.org/glsa/201702-18	vendor-advisory, x_refsource_GENTOO
	http://www.securitytracker.com/id/1037640	vdb-entry, x_refsource_SECTRACK
	http://www.securityfocus.com/bid/95520	vdb-entry, x_refsource_BID
	https://access.redhat.com/errata/RHSA-2018:0279	vendor-advisory, x_refsource_REDHAT
	http://www.debian.org/security/2017/dsa-3767	vendor-advisory, x_refsource_DEBIAN
	http://www.oracle.com/technetwork/security-advisory/cpujan2017-2881727.html	x_refsource_CONFIRM
	http://www.debian.org/security/2017/dsa-3770	vendor-advisory, x_refsource_DEBIAN
	https://access.redhat.com/errata/RHSA-2017:2192	vendor-advisory, x_refsource_REDHAT

Impacted products

	Vendor	Product	Version
	Oracle	MySQL Server	Version: 5.5.53 and earlier Version: 5.6.34 and earlier Version: 5.7.16 and earlier

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-05T14:23:34.379Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "name": "RHSA-2017:2787",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2017:2787"
          },
          {
            "name": "GLSA-201702-17",
            "tags": [
              "vendor-advisory",
              "x_refsource_GENTOO",
              "x_transferred"
            ],
            "url": "https://security.gentoo.org/glsa/201702-17"
          },
          {
            "name": "RHSA-2018:0574",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2018:0574"
          },
          {
            "name": "GLSA-201702-18",
            "tags": [
              "vendor-advisory",
              "x_refsource_GENTOO",
              "x_transferred"
            ],
            "url": "https://security.gentoo.org/glsa/201702-18"
          },
          {
            "name": "1037640",
            "tags": [
              "vdb-entry",
              "x_refsource_SECTRACK",
              "x_transferred"
            ],
            "url": "http://www.securitytracker.com/id/1037640"
          },
          {
            "name": "95520",
            "tags": [
              "vdb-entry",
              "x_refsource_BID",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/bid/95520"
          },
          {
            "name": "RHSA-2018:0279",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2018:0279"
          },
          {
            "name": "DSA-3767",
            "tags": [
              "vendor-advisory",
              "x_refsource_DEBIAN",
              "x_transferred"
            ],
            "url": "http://www.debian.org/security/2017/dsa-3767"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://www.oracle.com/technetwork/security-advisory/cpujan2017-2881727.html"
          },
          {
            "name": "DSA-3770",
            "tags": [
              "vendor-advisory",
              "x_refsource_DEBIAN",
              "x_transferred"
            ],
            "url": "http://www.debian.org/security/2017/dsa-3770"
          },
          {
            "name": "RHSA-2017:2192",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2017:2192"
          }
        ],
        "title": "CVE Program Container"
      },
      {
        "metrics": [
          {
            "other": {
              "content": {
                "id": "CVE-2017-3265",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "partial"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2024-10-09T19:30:05.396220Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2024-10-09T19:38:08.370Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "MySQL Server",
          "vendor": "Oracle",
          "versions": [
            {
              "status": "affected",
              "version": "5.5.53 and earlier"
            },
            {
              "status": "affected",
              "version": "5.6.34 and earlier"
            },
            {
              "status": "affected",
              "version": "5.7.16 and earlier"
            }
          ]
        }
      ],
      "datePublic": "2017-01-17T00:00:00",
      "descriptions": [
        {
          "lang": "en",
          "value": "Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Packaging). Supported versions that are affected are 5.5.53 and earlier, 5.6.34 and earlier and 5.7.16 and earlier. Difficult to exploit vulnerability allows high privileged attacker with logon to the infrastructure where MySQL Server executes to compromise MySQL Server. Successful attacks require human interaction from a person other than the attacker. Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all MySQL Server accessible data and unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS v3.0 Base Score 5.6 (Confidentiality and Availability impacts)."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "CVSS:3.0/AV:L/AC:H/PR:H/UI:R/S:U/C:H/I:N/A:H",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2018-03-22T09:57:01",
        "orgId": "43595867-4340-4103-b7a2-9a5208d29a85",
        "shortName": "oracle"
      },
      "references": [
        {
          "name": "RHSA-2017:2787",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2017:2787"
        },
        {
          "name": "GLSA-201702-17",
          "tags": [
            "vendor-advisory",
            "x_refsource_GENTOO"
          ],
          "url": "https://security.gentoo.org/glsa/201702-17"
        },
        {
          "name": "RHSA-2018:0574",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2018:0574"
        },
        {
          "name": "GLSA-201702-18",
          "tags": [
            "vendor-advisory",
            "x_refsource_GENTOO"
          ],
          "url": "https://security.gentoo.org/glsa/201702-18"
        },
        {
          "name": "1037640",
          "tags": [
            "vdb-entry",
            "x_refsource_SECTRACK"
          ],
          "url": "http://www.securitytracker.com/id/1037640"
        },
        {
          "name": "95520",
          "tags": [
            "vdb-entry",
            "x_refsource_BID"
          ],
          "url": "http://www.securityfocus.com/bid/95520"
        },
        {
          "name": "RHSA-2018:0279",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2018:0279"
        },
        {
          "name": "DSA-3767",
          "tags": [
            "vendor-advisory",
            "x_refsource_DEBIAN"
          ],
          "url": "http://www.debian.org/security/2017/dsa-3767"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://www.oracle.com/technetwork/security-advisory/cpujan2017-2881727.html"
        },
        {
          "name": "DSA-3770",
          "tags": [
            "vendor-advisory",
            "x_refsource_DEBIAN"
          ],
          "url": "http://www.debian.org/security/2017/dsa-3770"
        },
        {
          "name": "RHSA-2017:2192",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2017:2192"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "secalert_us@oracle.com",
          "ID": "CVE-2017-3265",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "MySQL Server",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "5.5.53 and earlier"
                          },
                          {
                            "version_value": "5.6.34 and earlier"
                          },
                          {
                            "version_value": "5.7.16 and earlier"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "Oracle"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Packaging). Supported versions that are affected are 5.5.53 and earlier, 5.6.34 and earlier and 5.7.16 and earlier. Difficult to exploit vulnerability allows high privileged attacker with logon to the infrastructure where MySQL Server executes to compromise MySQL Server. Successful attacks require human interaction from a person other than the attacker. Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all MySQL Server accessible data and unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS v3.0 Base Score 5.6 (Confidentiality and Availability impacts)."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "CVSS:3.0/AV:L/AC:H/PR:H/UI:R/S:U/C:H/I:N/A:H"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "RHSA-2017:2787",
              "refsource": "REDHAT",
              "url": "https://access.redhat.com/errata/RHSA-2017:2787"
            },
            {
              "name": "GLSA-201702-17",
              "refsource": "GENTOO",
              "url": "https://security.gentoo.org/glsa/201702-17"
            },
            {
              "name": "RHSA-2018:0574",
              "refsource": "REDHAT",
              "url": "https://access.redhat.com/errata/RHSA-2018:0574"
            },
            {
              "name": "GLSA-201702-18",
              "refsource": "GENTOO",
              "url": "https://security.gentoo.org/glsa/201702-18"
            },
            {
              "name": "1037640",
              "refsource": "SECTRACK",
              "url": "http://www.securitytracker.com/id/1037640"
            },
            {
              "name": "95520",
              "refsource": "BID",
              "url": "http://www.securityfocus.com/bid/95520"
            },
            {
              "name": "RHSA-2018:0279",
              "refsource": "REDHAT",
              "url": "https://access.redhat.com/errata/RHSA-2018:0279"
            },
            {
              "name": "DSA-3767",
              "refsource": "DEBIAN",
              "url": "http://www.debian.org/security/2017/dsa-3767"
            },
            {
              "name": "http://www.oracle.com/technetwork/security-advisory/cpujan2017-2881727.html",
              "refsource": "CONFIRM",
              "url": "http://www.oracle.com/technetwork/security-advisory/cpujan2017-2881727.html"
            },
            {
              "name": "DSA-3770",
              "refsource": "DEBIAN",
              "url": "http://www.debian.org/security/2017/dsa-3770"
            },
            {
              "name": "RHSA-2017:2192",
              "refsource": "REDHAT",
              "url": "https://access.redhat.com/errata/RHSA-2017:2192"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "43595867-4340-4103-b7a2-9a5208d29a85",
    "assignerShortName": "oracle",
    "cveId": "CVE-2017-3265",
    "datePublished": "2017-01-27T22:01:00",
    "dateReserved": "2016-12-06T00:00:00",
    "dateUpdated": "2024-10-09T19:38:08.370Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

CVE-2017-3309 (GCVE-0-2017-3309)

Vulnerability from cvelistv5

Published

2017-04-24 19:00

Modified

2024-10-07 16:21

Severity ?

CWE

Easily "exploitable" vulnerability allows low privileged attacker with network access via multiple protocols to compromise MySQL Server. While the vulnerability is in MySQL Server, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server.

Summary

Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Optimizer). Supported versions that are affected are 5.5.54 and earlier, 5.6.35 and earlier and 5.7.17 and earlier. Easily "exploitable" vulnerability allows low privileged attacker with network access via multiple protocols to compromise MySQL Server. While the vulnerability is in MySQL Server, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.0 Base Score 7.7 (Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H).

References

URL

Tags

	https://access.redhat.com/errata/RHSA-2017:2787	vendor-advisory, x_refsource_REDHAT
	http://www.securitytracker.com/id/1038287	vdb-entry, x_refsource_SECTRACK
	http://www.oracle.com/technetwork/security-advisory/cpuapr2017-3236618.html	x_refsource_CONFIRM
	https://access.redhat.com/errata/RHSA-2018:0574	vendor-advisory, x_refsource_REDHAT
	http://www.debian.org/security/2017/dsa-3944	vendor-advisory, x_refsource_DEBIAN
	http://www.securityfocus.com/bid/97742	vdb-entry, x_refsource_BID
	https://access.redhat.com/errata/RHSA-2018:0279	vendor-advisory, x_refsource_REDHAT
	http://www.debian.org/security/2017/dsa-3834	vendor-advisory, x_refsource_DEBIAN
	https://access.redhat.com/errata/RHSA-2017:2886	vendor-advisory, x_refsource_REDHAT
	https://access.redhat.com/errata/RHSA-2017:2192	vendor-advisory, x_refsource_REDHAT

Impacted products

	Vendor	Product	Version
	Oracle Corporation	MySQL Server	Version: 5.5.54 and earlier Version: 5.6.35 and earlier Version: 5.7.17 and earlier

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-05T14:23:34.182Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "name": "RHSA-2017:2787",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2017:2787"
          },
          {
            "name": "1038287",
            "tags": [
              "vdb-entry",
              "x_refsource_SECTRACK",
              "x_transferred"
            ],
            "url": "http://www.securitytracker.com/id/1038287"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://www.oracle.com/technetwork/security-advisory/cpuapr2017-3236618.html"
          },
          {
            "name": "RHSA-2018:0574",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2018:0574"
          },
          {
            "name": "DSA-3944",
            "tags": [
              "vendor-advisory",
              "x_refsource_DEBIAN",
              "x_transferred"
            ],
            "url": "http://www.debian.org/security/2017/dsa-3944"
          },
          {
            "name": "97742",
            "tags": [
              "vdb-entry",
              "x_refsource_BID",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/bid/97742"
          },
          {
            "name": "RHSA-2018:0279",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2018:0279"
          },
          {
            "name": "DSA-3834",
            "tags": [
              "vendor-advisory",
              "x_refsource_DEBIAN",
              "x_transferred"
            ],
            "url": "http://www.debian.org/security/2017/dsa-3834"
          },
          {
            "name": "RHSA-2017:2886",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2017:2886"
          },
          {
            "name": "RHSA-2017:2192",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2017:2192"
          }
        ],
        "title": "CVE Program Container"
      },
      {
        "metrics": [
          {
            "other": {
              "content": {
                "id": "CVE-2017-3309",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "partial"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2024-10-07T15:46:17.228879Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2024-10-07T16:21:43.974Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "MySQL Server",
          "vendor": "Oracle Corporation",
          "versions": [
            {
              "status": "affected",
              "version": "5.5.54 and earlier"
            },
            {
              "status": "affected",
              "version": "5.6.35 and earlier"
            },
            {
              "status": "affected",
              "version": "5.7.17 and earlier"
            }
          ]
        }
      ],
      "datePublic": "2017-04-18T00:00:00",
      "descriptions": [
        {
          "lang": "en",
          "value": "Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Optimizer). Supported versions that are affected are 5.5.54 and earlier, 5.6.35 and earlier and 5.7.17 and earlier. Easily \"exploitable\" vulnerability allows low privileged attacker with network access via multiple protocols to compromise MySQL Server. While the vulnerability is in MySQL Server, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.0 Base Score 7.7 (Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H)."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "Easily \"exploitable\" vulnerability allows low privileged attacker with network access via multiple protocols to compromise MySQL Server.  While the vulnerability is in MySQL Server, attacks may significantly impact additional products.  Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server.",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2018-03-22T09:57:01",
        "orgId": "43595867-4340-4103-b7a2-9a5208d29a85",
        "shortName": "oracle"
      },
      "references": [
        {
          "name": "RHSA-2017:2787",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2017:2787"
        },
        {
          "name": "1038287",
          "tags": [
            "vdb-entry",
            "x_refsource_SECTRACK"
          ],
          "url": "http://www.securitytracker.com/id/1038287"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://www.oracle.com/technetwork/security-advisory/cpuapr2017-3236618.html"
        },
        {
          "name": "RHSA-2018:0574",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2018:0574"
        },
        {
          "name": "DSA-3944",
          "tags": [
            "vendor-advisory",
            "x_refsource_DEBIAN"
          ],
          "url": "http://www.debian.org/security/2017/dsa-3944"
        },
        {
          "name": "97742",
          "tags": [
            "vdb-entry",
            "x_refsource_BID"
          ],
          "url": "http://www.securityfocus.com/bid/97742"
        },
        {
          "name": "RHSA-2018:0279",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2018:0279"
        },
        {
          "name": "DSA-3834",
          "tags": [
            "vendor-advisory",
            "x_refsource_DEBIAN"
          ],
          "url": "http://www.debian.org/security/2017/dsa-3834"
        },
        {
          "name": "RHSA-2017:2886",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2017:2886"
        },
        {
          "name": "RHSA-2017:2192",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2017:2192"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "secalert_us@oracle.com",
          "ID": "CVE-2017-3309",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "MySQL Server",
                      "version": {
                        "version_data": [
                          {
                            "version_affected": "=",
                            "version_value": "5.5.54 and earlier"
                          },
                          {
                            "version_affected": "=",
                            "version_value": "5.6.35 and earlier"
                          },
                          {
                            "version_affected": "=",
                            "version_value": "5.7.17 and earlier"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "Oracle Corporation"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Optimizer). Supported versions that are affected are 5.5.54 and earlier, 5.6.35 and earlier and 5.7.17 and earlier. Easily \"exploitable\" vulnerability allows low privileged attacker with network access via multiple protocols to compromise MySQL Server. While the vulnerability is in MySQL Server, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.0 Base Score 7.7 (Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H)."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "Easily \"exploitable\" vulnerability allows low privileged attacker with network access via multiple protocols to compromise MySQL Server.  While the vulnerability is in MySQL Server, attacks may significantly impact additional products.  Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server."
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "RHSA-2017:2787",
              "refsource": "REDHAT",
              "url": "https://access.redhat.com/errata/RHSA-2017:2787"
            },
            {
              "name": "1038287",
              "refsource": "SECTRACK",
              "url": "http://www.securitytracker.com/id/1038287"
            },
            {
              "name": "http://www.oracle.com/technetwork/security-advisory/cpuapr2017-3236618.html",
              "refsource": "CONFIRM",
              "url": "http://www.oracle.com/technetwork/security-advisory/cpuapr2017-3236618.html"
            },
            {
              "name": "RHSA-2018:0574",
              "refsource": "REDHAT",
              "url": "https://access.redhat.com/errata/RHSA-2018:0574"
            },
            {
              "name": "DSA-3944",
              "refsource": "DEBIAN",
              "url": "http://www.debian.org/security/2017/dsa-3944"
            },
            {
              "name": "97742",
              "refsource": "BID",
              "url": "http://www.securityfocus.com/bid/97742"
            },
            {
              "name": "RHSA-2018:0279",
              "refsource": "REDHAT",
              "url": "https://access.redhat.com/errata/RHSA-2018:0279"
            },
            {
              "name": "DSA-3834",
              "refsource": "DEBIAN",
              "url": "http://www.debian.org/security/2017/dsa-3834"
            },
            {
              "name": "RHSA-2017:2886",
              "refsource": "REDHAT",
              "url": "https://access.redhat.com/errata/RHSA-2017:2886"
            },
            {
              "name": "RHSA-2017:2192",
              "refsource": "REDHAT",
              "url": "https://access.redhat.com/errata/RHSA-2017:2192"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "43595867-4340-4103-b7a2-9a5208d29a85",
    "assignerShortName": "oracle",
    "cveId": "CVE-2017-3309",
    "datePublished": "2017-04-24T19:00:00",
    "dateReserved": "2016-12-06T00:00:00",
    "dateUpdated": "2024-10-07T16:21:43.974Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

CVE-2017-3652 (GCVE-0-2017-3652)

Vulnerability from cvelistv5

Published

2017-08-08 15:00

Modified

2024-10-04 17:01

Severity ?

CWE

Difficult to exploit vulnerability allows low privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of MySQL Server accessible data as well as unauthorized read access to a subset of MySQL Server accessible data.

Summary

Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: DDL). Supported versions that are affected are 5.5.56 and earlier, 5.6.36 and earlier and 5.7.18 and earlier. Difficult to exploit vulnerability allows low privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of MySQL Server accessible data as well as unauthorized read access to a subset of MySQL Server accessible data. CVSS 3.0 Base Score 4.2 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:H/PR:L/UI:N/S:U/C:L/I:L/A:N).

References

URL

Tags

	https://access.redhat.com/errata/RHSA-2017:2787	vendor-advisory, x_refsource_REDHAT
	http://www.securityfocus.com/bid/99805	vdb-entry, x_refsource_BID
	http://www.securitytracker.com/id/1038928	vdb-entry, x_refsource_SECTRACK
	http://www.debian.org/security/2017/dsa-3922	vendor-advisory, x_refsource_DEBIAN
	https://access.redhat.com/errata/RHSA-2017:2886	vendor-advisory, x_refsource_REDHAT
	http://www.oracle.com/technetwork/security-advisory/cpujul2017-3236622.html	x_refsource_CONFIRM

Impacted products

	Vendor	Product	Version
	Oracle Corporation	MySQL Server	Version: 5.5.56 and earlier Version: 5.6.36 and earlier Version: 5.7.18 and earlier

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-05T14:39:41.146Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "name": "RHSA-2017:2787",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2017:2787"
          },
          {
            "name": "99805",
            "tags": [
              "vdb-entry",
              "x_refsource_BID",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/bid/99805"
          },
          {
            "name": "1038928",
            "tags": [
              "vdb-entry",
              "x_refsource_SECTRACK",
              "x_transferred"
            ],
            "url": "http://www.securitytracker.com/id/1038928"
          },
          {
            "name": "DSA-3922",
            "tags": [
              "vendor-advisory",
              "x_refsource_DEBIAN",
              "x_transferred"
            ],
            "url": "http://www.debian.org/security/2017/dsa-3922"
          },
          {
            "name": "RHSA-2017:2886",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2017:2886"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://www.oracle.com/technetwork/security-advisory/cpujul2017-3236622.html"
          }
        ],
        "title": "CVE Program Container"
      },
      {
        "metrics": [
          {
            "other": {
              "content": {
                "id": "CVE-2017-3652",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "partial"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2024-10-04T15:47:43.403835Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2024-10-04T17:01:11.742Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "MySQL Server",
          "vendor": "Oracle Corporation",
          "versions": [
            {
              "status": "affected",
              "version": "5.5.56 and earlier"
            },
            {
              "status": "affected",
              "version": "5.6.36 and earlier"
            },
            {
              "status": "affected",
              "version": "5.7.18 and earlier"
            }
          ]
        }
      ],
      "datePublic": "2017-07-18T00:00:00",
      "descriptions": [
        {
          "lang": "en",
          "value": "Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: DDL). Supported versions that are affected are 5.5.56 and earlier, 5.6.36 and earlier and 5.7.18 and earlier. Difficult to exploit vulnerability allows low privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of MySQL Server accessible data as well as unauthorized read access to a subset of MySQL Server accessible data. CVSS 3.0 Base Score 4.2 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:H/PR:L/UI:N/S:U/C:L/I:L/A:N)."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "Difficult to exploit vulnerability allows low privileged attacker with network access via multiple protocols to compromise MySQL Server.  Successful attacks of this vulnerability can result in  unauthorized update, insert or delete access to some of MySQL Server accessible data as well as  unauthorized read access to a subset of MySQL Server accessible data.",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2017-12-08T10:57:01",
        "orgId": "43595867-4340-4103-b7a2-9a5208d29a85",
        "shortName": "oracle"
      },
      "references": [
        {
          "name": "RHSA-2017:2787",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2017:2787"
        },
        {
          "name": "99805",
          "tags": [
            "vdb-entry",
            "x_refsource_BID"
          ],
          "url": "http://www.securityfocus.com/bid/99805"
        },
        {
          "name": "1038928",
          "tags": [
            "vdb-entry",
            "x_refsource_SECTRACK"
          ],
          "url": "http://www.securitytracker.com/id/1038928"
        },
        {
          "name": "DSA-3922",
          "tags": [
            "vendor-advisory",
            "x_refsource_DEBIAN"
          ],
          "url": "http://www.debian.org/security/2017/dsa-3922"
        },
        {
          "name": "RHSA-2017:2886",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2017:2886"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://www.oracle.com/technetwork/security-advisory/cpujul2017-3236622.html"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "secalert_us@oracle.com",
          "ID": "CVE-2017-3652",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "MySQL Server",
                      "version": {
                        "version_data": [
                          {
                            "version_affected": "=",
                            "version_value": "5.5.56 and earlier"
                          },
                          {
                            "version_affected": "=",
                            "version_value": "5.6.36 and earlier"
                          },
                          {
                            "version_affected": "=",
                            "version_value": "5.7.18 and earlier"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "Oracle Corporation"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: DDL). Supported versions that are affected are 5.5.56 and earlier, 5.6.36 and earlier and 5.7.18 and earlier. Difficult to exploit vulnerability allows low privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of MySQL Server accessible data as well as unauthorized read access to a subset of MySQL Server accessible data. CVSS 3.0 Base Score 4.2 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:H/PR:L/UI:N/S:U/C:L/I:L/A:N)."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "Difficult to exploit vulnerability allows low privileged attacker with network access via multiple protocols to compromise MySQL Server.  Successful attacks of this vulnerability can result in  unauthorized update, insert or delete access to some of MySQL Server accessible data as well as  unauthorized read access to a subset of MySQL Server accessible data."
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "RHSA-2017:2787",
              "refsource": "REDHAT",
              "url": "https://access.redhat.com/errata/RHSA-2017:2787"
            },
            {
              "name": "99805",
              "refsource": "BID",
              "url": "http://www.securityfocus.com/bid/99805"
            },
            {
              "name": "1038928",
              "refsource": "SECTRACK",
              "url": "http://www.securitytracker.com/id/1038928"
            },
            {
              "name": "DSA-3922",
              "refsource": "DEBIAN",
              "url": "http://www.debian.org/security/2017/dsa-3922"
            },
            {
              "name": "RHSA-2017:2886",
              "refsource": "REDHAT",
              "url": "https://access.redhat.com/errata/RHSA-2017:2886"
            },
            {
              "name": "http://www.oracle.com/technetwork/security-advisory/cpujul2017-3236622.html",
              "refsource": "CONFIRM",
              "url": "http://www.oracle.com/technetwork/security-advisory/cpujul2017-3236622.html"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "43595867-4340-4103-b7a2-9a5208d29a85",
    "assignerShortName": "oracle",
    "cveId": "CVE-2017-3652",
    "datePublished": "2017-08-08T15:00:00",
    "dateReserved": "2016-12-06T00:00:00",
    "dateUpdated": "2024-10-04T17:01:11.742Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

CVE-2017-3318 (GCVE-0-2017-3318)

Vulnerability from cvelistv5

Published

2017-01-27 22:01

Modified

2024-10-08 20:29

Severity ?

CWE

CVSS:3.0/AV:L/AC:H/PR:H/UI:R/S:U/C:H/I:N/A:N

Summary

Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Error Handling). Supported versions that are affected are 5.5.53 and earlier, 5.6.34 and earlier and 5.7.16 and earlier. Difficult to exploit vulnerability allows high privileged attacker with logon to the infrastructure where MySQL Server executes to compromise MySQL Server. Successful attacks require human interaction from a person other than the attacker. Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all MySQL Server accessible data. CVSS v3.0 Base Score 4.0 (Confidentiality impacts).

References

URL

Tags

	https://access.redhat.com/errata/RHSA-2017:2787	vendor-advisory, x_refsource_REDHAT
	https://security.gentoo.org/glsa/201702-17	vendor-advisory, x_refsource_GENTOO
	https://access.redhat.com/errata/RHSA-2018:0574	vendor-advisory, x_refsource_REDHAT
	https://security.gentoo.org/glsa/201702-18	vendor-advisory, x_refsource_GENTOO
	http://www.securitytracker.com/id/1037640	vdb-entry, x_refsource_SECTRACK
	http://www.securityfocus.com/bid/95588	vdb-entry, x_refsource_BID
	https://access.redhat.com/errata/RHSA-2018:0279	vendor-advisory, x_refsource_REDHAT
	http://www.debian.org/security/2017/dsa-3767	vendor-advisory, x_refsource_DEBIAN
	https://access.redhat.com/errata/RHSA-2017:2886	vendor-advisory, x_refsource_REDHAT
	http://www.oracle.com/technetwork/security-advisory/cpujan2017-2881727.html	x_refsource_CONFIRM
	http://www.debian.org/security/2017/dsa-3770	vendor-advisory, x_refsource_DEBIAN
	https://access.redhat.com/errata/RHSA-2017:2192	vendor-advisory, x_refsource_REDHAT

Impacted products

	Vendor	Product	Version
	Oracle	MySQL Server	Version: 5.5.53 and earlier Version: 5.6.34 and earlier Version: 5.7.16 and earlier

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-05T14:23:33.893Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "name": "RHSA-2017:2787",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2017:2787"
          },
          {
            "name": "GLSA-201702-17",
            "tags": [
              "vendor-advisory",
              "x_refsource_GENTOO",
              "x_transferred"
            ],
            "url": "https://security.gentoo.org/glsa/201702-17"
          },
          {
            "name": "RHSA-2018:0574",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2018:0574"
          },
          {
            "name": "GLSA-201702-18",
            "tags": [
              "vendor-advisory",
              "x_refsource_GENTOO",
              "x_transferred"
            ],
            "url": "https://security.gentoo.org/glsa/201702-18"
          },
          {
            "name": "1037640",
            "tags": [
              "vdb-entry",
              "x_refsource_SECTRACK",
              "x_transferred"
            ],
            "url": "http://www.securitytracker.com/id/1037640"
          },
          {
            "name": "95588",
            "tags": [
              "vdb-entry",
              "x_refsource_BID",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/bid/95588"
          },
          {
            "name": "RHSA-2018:0279",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2018:0279"
          },
          {
            "name": "DSA-3767",
            "tags": [
              "vendor-advisory",
              "x_refsource_DEBIAN",
              "x_transferred"
            ],
            "url": "http://www.debian.org/security/2017/dsa-3767"
          },
          {
            "name": "RHSA-2017:2886",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2017:2886"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://www.oracle.com/technetwork/security-advisory/cpujan2017-2881727.html"
          },
          {
            "name": "DSA-3770",
            "tags": [
              "vendor-advisory",
              "x_refsource_DEBIAN",
              "x_transferred"
            ],
            "url": "http://www.debian.org/security/2017/dsa-3770"
          },
          {
            "name": "RHSA-2017:2192",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2017:2192"
          }
        ],
        "title": "CVE Program Container"
      },
      {
        "metrics": [
          {
            "other": {
              "content": {
                "id": "CVE-2017-3318",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "partial"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2024-10-08T20:09:30.630517Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2024-10-08T20:29:35.165Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "MySQL Server",
          "vendor": "Oracle",
          "versions": [
            {
              "status": "affected",
              "version": "5.5.53 and earlier"
            },
            {
              "status": "affected",
              "version": "5.6.34 and earlier"
            },
            {
              "status": "affected",
              "version": "5.7.16 and earlier"
            }
          ]
        }
      ],
      "datePublic": "2017-01-17T00:00:00",
      "descriptions": [
        {
          "lang": "en",
          "value": "Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Error Handling). Supported versions that are affected are 5.5.53 and earlier, 5.6.34 and earlier and 5.7.16 and earlier. Difficult to exploit vulnerability allows high privileged attacker with logon to the infrastructure where MySQL Server executes to compromise MySQL Server. Successful attacks require human interaction from a person other than the attacker. Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all MySQL Server accessible data. CVSS v3.0 Base Score 4.0 (Confidentiality impacts)."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "CVSS:3.0/AV:L/AC:H/PR:H/UI:R/S:U/C:H/I:N/A:N",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2018-03-22T09:57:01",
        "orgId": "43595867-4340-4103-b7a2-9a5208d29a85",
        "shortName": "oracle"
      },
      "references": [
        {
          "name": "RHSA-2017:2787",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2017:2787"
        },
        {
          "name": "GLSA-201702-17",
          "tags": [
            "vendor-advisory",
            "x_refsource_GENTOO"
          ],
          "url": "https://security.gentoo.org/glsa/201702-17"
        },
        {
          "name": "RHSA-2018:0574",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2018:0574"
        },
        {
          "name": "GLSA-201702-18",
          "tags": [
            "vendor-advisory",
            "x_refsource_GENTOO"
          ],
          "url": "https://security.gentoo.org/glsa/201702-18"
        },
        {
          "name": "1037640",
          "tags": [
            "vdb-entry",
            "x_refsource_SECTRACK"
          ],
          "url": "http://www.securitytracker.com/id/1037640"
        },
        {
          "name": "95588",
          "tags": [
            "vdb-entry",
            "x_refsource_BID"
          ],
          "url": "http://www.securityfocus.com/bid/95588"
        },
        {
          "name": "RHSA-2018:0279",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2018:0279"
        },
        {
          "name": "DSA-3767",
          "tags": [
            "vendor-advisory",
            "x_refsource_DEBIAN"
          ],
          "url": "http://www.debian.org/security/2017/dsa-3767"
        },
        {
          "name": "RHSA-2017:2886",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2017:2886"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://www.oracle.com/technetwork/security-advisory/cpujan2017-2881727.html"
        },
        {
          "name": "DSA-3770",
          "tags": [
            "vendor-advisory",
            "x_refsource_DEBIAN"
          ],
          "url": "http://www.debian.org/security/2017/dsa-3770"
        },
        {
          "name": "RHSA-2017:2192",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2017:2192"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "secalert_us@oracle.com",
          "ID": "CVE-2017-3318",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "MySQL Server",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "5.5.53 and earlier"
                          },
                          {
                            "version_value": "5.6.34 and earlier"
                          },
                          {
                            "version_value": "5.7.16 and earlier"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "Oracle"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Error Handling). Supported versions that are affected are 5.5.53 and earlier, 5.6.34 and earlier and 5.7.16 and earlier. Difficult to exploit vulnerability allows high privileged attacker with logon to the infrastructure where MySQL Server executes to compromise MySQL Server. Successful attacks require human interaction from a person other than the attacker. Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all MySQL Server accessible data. CVSS v3.0 Base Score 4.0 (Confidentiality impacts)."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "CVSS:3.0/AV:L/AC:H/PR:H/UI:R/S:U/C:H/I:N/A:N"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "RHSA-2017:2787",
              "refsource": "REDHAT",
              "url": "https://access.redhat.com/errata/RHSA-2017:2787"
            },
            {
              "name": "GLSA-201702-17",
              "refsource": "GENTOO",
              "url": "https://security.gentoo.org/glsa/201702-17"
            },
            {
              "name": "RHSA-2018:0574",
              "refsource": "REDHAT",
              "url": "https://access.redhat.com/errata/RHSA-2018:0574"
            },
            {
              "name": "GLSA-201702-18",
              "refsource": "GENTOO",
              "url": "https://security.gentoo.org/glsa/201702-18"
            },
            {
              "name": "1037640",
              "refsource": "SECTRACK",
              "url": "http://www.securitytracker.com/id/1037640"
            },
            {
              "name": "95588",
              "refsource": "BID",
              "url": "http://www.securityfocus.com/bid/95588"
            },
            {
              "name": "RHSA-2018:0279",
              "refsource": "REDHAT",
              "url": "https://access.redhat.com/errata/RHSA-2018:0279"
            },
            {
              "name": "DSA-3767",
              "refsource": "DEBIAN",
              "url": "http://www.debian.org/security/2017/dsa-3767"
            },
            {
              "name": "RHSA-2017:2886",
              "refsource": "REDHAT",
              "url": "https://access.redhat.com/errata/RHSA-2017:2886"
            },
            {
              "name": "http://www.oracle.com/technetwork/security-advisory/cpujan2017-2881727.html",
              "refsource": "CONFIRM",
              "url": "http://www.oracle.com/technetwork/security-advisory/cpujan2017-2881727.html"
            },
            {
              "name": "DSA-3770",
              "refsource": "DEBIAN",
              "url": "http://www.debian.org/security/2017/dsa-3770"
            },
            {
              "name": "RHSA-2017:2192",
              "refsource": "REDHAT",
              "url": "https://access.redhat.com/errata/RHSA-2017:2192"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "43595867-4340-4103-b7a2-9a5208d29a85",
    "assignerShortName": "oracle",
    "cveId": "CVE-2017-3318",
    "datePublished": "2017-01-27T22:01:00",
    "dateReserved": "2016-12-06T00:00:00",
    "dateUpdated": "2024-10-08T20:29:35.165Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

CVE-2017-3461 (GCVE-0-2017-3461)

Vulnerability from cvelistv5

Published

2017-04-24 19:00

Modified

2024-10-07 16:19

Severity ?

CWE

Easily "exploitable" vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server.

Summary

References

URL

Tags

	https://access.redhat.com/errata/RHSA-2017:2787	vendor-advisory, x_refsource_REDHAT
	http://www.securitytracker.com/id/1038287	vdb-entry, x_refsource_SECTRACK
	http://www.oracle.com/technetwork/security-advisory/cpuapr2017-3236618.html	x_refsource_CONFIRM
	http://www.debian.org/security/2017/dsa-3834	vendor-advisory, x_refsource_DEBIAN
	https://access.redhat.com/errata/RHSA-2017:2886	vendor-advisory, x_refsource_REDHAT
	http://www.securityfocus.com/bid/97812	vdb-entry, x_refsource_BID

Impacted products

	Vendor	Product	Version
	Oracle Corporation	MySQL Server	Version: 5.5.54 and earlier Version: 5.6.35 and earlier Version: 5.7.17 and earlier

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-05T14:30:56.882Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "name": "RHSA-2017:2787",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2017:2787"
          },
          {
            "name": "1038287",
            "tags": [
              "vdb-entry",
              "x_refsource_SECTRACK",
              "x_transferred"
            ],
            "url": "http://www.securitytracker.com/id/1038287"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://www.oracle.com/technetwork/security-advisory/cpuapr2017-3236618.html"
          },
          {
            "name": "DSA-3834",
            "tags": [
              "vendor-advisory",
              "x_refsource_DEBIAN",
              "x_transferred"
            ],
            "url": "http://www.debian.org/security/2017/dsa-3834"
          },
          {
            "name": "RHSA-2017:2886",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2017:2886"
          },
          {
            "name": "97812",
            "tags": [
              "vdb-entry",
              "x_refsource_BID",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/bid/97812"
          }
        ],
        "title": "CVE Program Container"
      },
      {
        "metrics": [
          {
            "other": {
              "content": {
                "id": "CVE-2017-3461",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "partial"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2024-10-07T15:45:58.910751Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2024-10-07T16:19:23.117Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "MySQL Server",
          "vendor": "Oracle Corporation",
          "versions": [
            {
              "status": "affected",
              "version": "5.5.54 and earlier"
            },
            {
              "status": "affected",
              "version": "5.6.35 and earlier"
            },
            {
              "status": "affected",
              "version": "5.7.17 and earlier"
            }
          ]
        }
      ],
      "datePublic": "2017-04-18T00:00:00",
      "descriptions": [
        {
          "lang": "en",
          "value": "Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Security: Privileges). Supported versions that are affected are 5.5.54 and earlier, 5.6.35 and earlier and 5.7.17 and earlier. Easily \"exploitable\" vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.0 Base Score 4.9 (Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H)."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "Easily \"exploitable\" vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server.  Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server.",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2017-12-08T10:57:01",
        "orgId": "43595867-4340-4103-b7a2-9a5208d29a85",
        "shortName": "oracle"
      },
      "references": [
        {
          "name": "RHSA-2017:2787",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2017:2787"
        },
        {
          "name": "1038287",
          "tags": [
            "vdb-entry",
            "x_refsource_SECTRACK"
          ],
          "url": "http://www.securitytracker.com/id/1038287"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://www.oracle.com/technetwork/security-advisory/cpuapr2017-3236618.html"
        },
        {
          "name": "DSA-3834",
          "tags": [
            "vendor-advisory",
            "x_refsource_DEBIAN"
          ],
          "url": "http://www.debian.org/security/2017/dsa-3834"
        },
        {
          "name": "RHSA-2017:2886",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2017:2886"
        },
        {
          "name": "97812",
          "tags": [
            "vdb-entry",
            "x_refsource_BID"
          ],
          "url": "http://www.securityfocus.com/bid/97812"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "secalert_us@oracle.com",
          "ID": "CVE-2017-3461",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "MySQL Server",
                      "version": {
                        "version_data": [
                          {
                            "version_affected": "=",
                            "version_value": "5.5.54 and earlier"
                          },
                          {
                            "version_affected": "=",
                            "version_value": "5.6.35 and earlier"
                          },
                          {
                            "version_affected": "=",
                            "version_value": "5.7.17 and earlier"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "Oracle Corporation"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Security: Privileges). Supported versions that are affected are 5.5.54 and earlier, 5.6.35 and earlier and 5.7.17 and earlier. Easily \"exploitable\" vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.0 Base Score 4.9 (Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H)."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "Easily \"exploitable\" vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server.  Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server."
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "RHSA-2017:2787",
              "refsource": "REDHAT",
              "url": "https://access.redhat.com/errata/RHSA-2017:2787"
            },
            {
              "name": "1038287",
              "refsource": "SECTRACK",
              "url": "http://www.securitytracker.com/id/1038287"
            },
            {
              "name": "http://www.oracle.com/technetwork/security-advisory/cpuapr2017-3236618.html",
              "refsource": "CONFIRM",
              "url": "http://www.oracle.com/technetwork/security-advisory/cpuapr2017-3236618.html"
            },
            {
              "name": "DSA-3834",
              "refsource": "DEBIAN",
              "url": "http://www.debian.org/security/2017/dsa-3834"
            },
            {
              "name": "RHSA-2017:2886",
              "refsource": "REDHAT",
              "url": "https://access.redhat.com/errata/RHSA-2017:2886"
            },
            {
              "name": "97812",
              "refsource": "BID",
              "url": "http://www.securityfocus.com/bid/97812"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "43595867-4340-4103-b7a2-9a5208d29a85",
    "assignerShortName": "oracle",
    "cveId": "CVE-2017-3461",
    "datePublished": "2017-04-24T19:00:00",
    "dateReserved": "2016-12-06T00:00:00",
    "dateUpdated": "2024-10-07T16:19:23.117Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

CVE-2017-3244 (GCVE-0-2017-3244)

Vulnerability from cvelistv5

Published

2017-01-27 22:01

Modified

2024-10-09 19:50

Severity ?

CWE

CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Summary

Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: DML). Supported versions that are affected are 5.5.53 and earlier, 5.6.34 and earlier and 5.7.16 and earlier. Easily exploitable vulnerability allows low privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS v3.0 Base Score 6.5 (Availability impacts).

References

URL

Tags

	https://access.redhat.com/errata/RHSA-2017:2787	vendor-advisory, x_refsource_REDHAT
	https://security.gentoo.org/glsa/201702-17	vendor-advisory, x_refsource_GENTOO
	https://access.redhat.com/errata/RHSA-2018:0574	vendor-advisory, x_refsource_REDHAT
	https://security.gentoo.org/glsa/201702-18	vendor-advisory, x_refsource_GENTOO
	http://www.securitytracker.com/id/1037640	vdb-entry, x_refsource_SECTRACK
	http://www.securityfocus.com/bid/95565	vdb-entry, x_refsource_BID
	https://access.redhat.com/errata/RHSA-2018:0279	vendor-advisory, x_refsource_REDHAT
	http://www.debian.org/security/2017/dsa-3767	vendor-advisory, x_refsource_DEBIAN
	https://access.redhat.com/errata/RHSA-2017:2886	vendor-advisory, x_refsource_REDHAT
	http://www.oracle.com/technetwork/security-advisory/cpujan2017-2881727.html	x_refsource_CONFIRM
	http://www.debian.org/security/2017/dsa-3770	vendor-advisory, x_refsource_DEBIAN
	https://access.redhat.com/errata/RHSA-2017:2192	vendor-advisory, x_refsource_REDHAT

Impacted products

	Vendor	Product	Version
	Oracle	MySQL Server	Version: 5.5.53 and earlier Version: 5.6.34 and earlier Version: 5.7.16 and earlier

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-05T14:23:32.874Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "name": "RHSA-2017:2787",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2017:2787"
          },
          {
            "name": "GLSA-201702-17",
            "tags": [
              "vendor-advisory",
              "x_refsource_GENTOO",
              "x_transferred"
            ],
            "url": "https://security.gentoo.org/glsa/201702-17"
          },
          {
            "name": "RHSA-2018:0574",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2018:0574"
          },
          {
            "name": "GLSA-201702-18",
            "tags": [
              "vendor-advisory",
              "x_refsource_GENTOO",
              "x_transferred"
            ],
            "url": "https://security.gentoo.org/glsa/201702-18"
          },
          {
            "name": "1037640",
            "tags": [
              "vdb-entry",
              "x_refsource_SECTRACK",
              "x_transferred"
            ],
            "url": "http://www.securitytracker.com/id/1037640"
          },
          {
            "name": "95565",
            "tags": [
              "vdb-entry",
              "x_refsource_BID",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/bid/95565"
          },
          {
            "name": "RHSA-2018:0279",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2018:0279"
          },
          {
            "name": "DSA-3767",
            "tags": [
              "vendor-advisory",
              "x_refsource_DEBIAN",
              "x_transferred"
            ],
            "url": "http://www.debian.org/security/2017/dsa-3767"
          },
          {
            "name": "RHSA-2017:2886",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2017:2886"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://www.oracle.com/technetwork/security-advisory/cpujan2017-2881727.html"
          },
          {
            "name": "DSA-3770",
            "tags": [
              "vendor-advisory",
              "x_refsource_DEBIAN",
              "x_transferred"
            ],
            "url": "http://www.debian.org/security/2017/dsa-3770"
          },
          {
            "name": "RHSA-2017:2192",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2017:2192"
          }
        ],
        "title": "CVE Program Container"
      },
      {
        "metrics": [
          {
            "other": {
              "content": {
                "id": "CVE-2017-3244",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "partial"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2024-10-09T19:30:25.842291Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2024-10-09T19:50:06.509Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "MySQL Server",
          "vendor": "Oracle",
          "versions": [
            {
              "status": "affected",
              "version": "5.5.53 and earlier"
            },
            {
              "status": "affected",
              "version": "5.6.34 and earlier"
            },
            {
              "status": "affected",
              "version": "5.7.16 and earlier"
            }
          ]
        }
      ],
      "datePublic": "2017-01-17T00:00:00",
      "descriptions": [
        {
          "lang": "en",
          "value": "Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: DML). Supported versions that are affected are 5.5.53 and earlier, 5.6.34 and earlier and 5.7.16 and earlier. Easily exploitable vulnerability allows low privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS v3.0 Base Score 6.5 (Availability impacts)."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2018-03-22T09:57:01",
        "orgId": "43595867-4340-4103-b7a2-9a5208d29a85",
        "shortName": "oracle"
      },
      "references": [
        {
          "name": "RHSA-2017:2787",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2017:2787"
        },
        {
          "name": "GLSA-201702-17",
          "tags": [
            "vendor-advisory",
            "x_refsource_GENTOO"
          ],
          "url": "https://security.gentoo.org/glsa/201702-17"
        },
        {
          "name": "RHSA-2018:0574",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2018:0574"
        },
        {
          "name": "GLSA-201702-18",
          "tags": [
            "vendor-advisory",
            "x_refsource_GENTOO"
          ],
          "url": "https://security.gentoo.org/glsa/201702-18"
        },
        {
          "name": "1037640",
          "tags": [
            "vdb-entry",
            "x_refsource_SECTRACK"
          ],
          "url": "http://www.securitytracker.com/id/1037640"
        },
        {
          "name": "95565",
          "tags": [
            "vdb-entry",
            "x_refsource_BID"
          ],
          "url": "http://www.securityfocus.com/bid/95565"
        },
        {
          "name": "RHSA-2018:0279",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2018:0279"
        },
        {
          "name": "DSA-3767",
          "tags": [
            "vendor-advisory",
            "x_refsource_DEBIAN"
          ],
          "url": "http://www.debian.org/security/2017/dsa-3767"
        },
        {
          "name": "RHSA-2017:2886",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2017:2886"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://www.oracle.com/technetwork/security-advisory/cpujan2017-2881727.html"
        },
        {
          "name": "DSA-3770",
          "tags": [
            "vendor-advisory",
            "x_refsource_DEBIAN"
          ],
          "url": "http://www.debian.org/security/2017/dsa-3770"
        },
        {
          "name": "RHSA-2017:2192",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2017:2192"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "secalert_us@oracle.com",
          "ID": "CVE-2017-3244",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "MySQL Server",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "5.5.53 and earlier"
                          },
                          {
                            "version_value": "5.6.34 and earlier"
                          },
                          {
                            "version_value": "5.7.16 and earlier"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "Oracle"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: DML). Supported versions that are affected are 5.5.53 and earlier, 5.6.34 and earlier and 5.7.16 and earlier. Easily exploitable vulnerability allows low privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS v3.0 Base Score 6.5 (Availability impacts)."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "RHSA-2017:2787",
              "refsource": "REDHAT",
              "url": "https://access.redhat.com/errata/RHSA-2017:2787"
            },
            {
              "name": "GLSA-201702-17",
              "refsource": "GENTOO",
              "url": "https://security.gentoo.org/glsa/201702-17"
            },
            {
              "name": "RHSA-2018:0574",
              "refsource": "REDHAT",
              "url": "https://access.redhat.com/errata/RHSA-2018:0574"
            },
            {
              "name": "GLSA-201702-18",
              "refsource": "GENTOO",
              "url": "https://security.gentoo.org/glsa/201702-18"
            },
            {
              "name": "1037640",
              "refsource": "SECTRACK",
              "url": "http://www.securitytracker.com/id/1037640"
            },
            {
              "name": "95565",
              "refsource": "BID",
              "url": "http://www.securityfocus.com/bid/95565"
            },
            {
              "name": "RHSA-2018:0279",
              "refsource": "REDHAT",
              "url": "https://access.redhat.com/errata/RHSA-2018:0279"
            },
            {
              "name": "DSA-3767",
              "refsource": "DEBIAN",
              "url": "http://www.debian.org/security/2017/dsa-3767"
            },
            {
              "name": "RHSA-2017:2886",
              "refsource": "REDHAT",
              "url": "https://access.redhat.com/errata/RHSA-2017:2886"
            },
            {
              "name": "http://www.oracle.com/technetwork/security-advisory/cpujan2017-2881727.html",
              "refsource": "CONFIRM",
              "url": "http://www.oracle.com/technetwork/security-advisory/cpujan2017-2881727.html"
            },
            {
              "name": "DSA-3770",
              "refsource": "DEBIAN",
              "url": "http://www.debian.org/security/2017/dsa-3770"
            },
            {
              "name": "RHSA-2017:2192",
              "refsource": "REDHAT",
              "url": "https://access.redhat.com/errata/RHSA-2017:2192"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "43595867-4340-4103-b7a2-9a5208d29a85",
    "assignerShortName": "oracle",
    "cveId": "CVE-2017-3244",
    "datePublished": "2017-01-27T22:01:00",
    "dateReserved": "2016-12-06T00:00:00",
    "dateUpdated": "2024-10-09T19:50:06.509Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

CVE-2017-3453 (GCVE-0-2017-3453)

Vulnerability from cvelistv5

Published

2017-04-24 19:00

Modified

2024-10-07 16:20

Severity ?

CWE

Easily "exploitable" vulnerability allows low privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server.

Summary

Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Optimizer). Supported versions that are affected are 5.5.54 and earlier, 5.6.35 and earlier and 5.7.17 and earlier. Easily "exploitable" vulnerability allows low privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.0 Base Score 6.5 (Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H).

References

URL

Tags

	https://access.redhat.com/errata/RHSA-2017:2787	vendor-advisory, x_refsource_REDHAT
	http://www.securityfocus.com/bid/97776	vdb-entry, x_refsource_BID
	http://www.securitytracker.com/id/1038287	vdb-entry, x_refsource_SECTRACK
	http://www.oracle.com/technetwork/security-advisory/cpuapr2017-3236618.html	x_refsource_CONFIRM
	https://access.redhat.com/errata/RHSA-2018:0574	vendor-advisory, x_refsource_REDHAT
	http://www.debian.org/security/2017/dsa-3944	vendor-advisory, x_refsource_DEBIAN
	https://access.redhat.com/errata/RHSA-2018:0279	vendor-advisory, x_refsource_REDHAT
	http://www.debian.org/security/2017/dsa-3834	vendor-advisory, x_refsource_DEBIAN
	https://access.redhat.com/errata/RHSA-2017:2886	vendor-advisory, x_refsource_REDHAT
	https://access.redhat.com/errata/RHSA-2017:2192	vendor-advisory, x_refsource_REDHAT

Impacted products

	Vendor	Product	Version
	Oracle Corporation	MySQL Server	Version: 5.5.54 and earlier Version: 5.6.35 and earlier Version: 5.7.17 and earlier

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-05T14:30:56.871Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "name": "RHSA-2017:2787",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2017:2787"
          },
          {
            "name": "97776",
            "tags": [
              "vdb-entry",
              "x_refsource_BID",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/bid/97776"
          },
          {
            "name": "1038287",
            "tags": [
              "vdb-entry",
              "x_refsource_SECTRACK",
              "x_transferred"
            ],
            "url": "http://www.securitytracker.com/id/1038287"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://www.oracle.com/technetwork/security-advisory/cpuapr2017-3236618.html"
          },
          {
            "name": "RHSA-2018:0574",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2018:0574"
          },
          {
            "name": "DSA-3944",
            "tags": [
              "vendor-advisory",
              "x_refsource_DEBIAN",
              "x_transferred"
            ],
            "url": "http://www.debian.org/security/2017/dsa-3944"
          },
          {
            "name": "RHSA-2018:0279",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2018:0279"
          },
          {
            "name": "DSA-3834",
            "tags": [
              "vendor-advisory",
              "x_refsource_DEBIAN",
              "x_transferred"
            ],
            "url": "http://www.debian.org/security/2017/dsa-3834"
          },
          {
            "name": "RHSA-2017:2886",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2017:2886"
          },
          {
            "name": "RHSA-2017:2192",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2017:2192"
          }
        ],
        "title": "CVE Program Container"
      },
      {
        "metrics": [
          {
            "other": {
              "content": {
                "id": "CVE-2017-3453",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "partial"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2024-10-07T15:46:07.940629Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2024-10-07T16:20:29.780Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "MySQL Server",
          "vendor": "Oracle Corporation",
          "versions": [
            {
              "status": "affected",
              "version": "5.5.54 and earlier"
            },
            {
              "status": "affected",
              "version": "5.6.35 and earlier"
            },
            {
              "status": "affected",
              "version": "5.7.17 and earlier"
            }
          ]
        }
      ],
      "datePublic": "2017-04-18T00:00:00",
      "descriptions": [
        {
          "lang": "en",
          "value": "Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Optimizer). Supported versions that are affected are 5.5.54 and earlier, 5.6.35 and earlier and 5.7.17 and earlier. Easily \"exploitable\" vulnerability allows low privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.0 Base Score 6.5 (Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H)."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "Easily \"exploitable\" vulnerability allows low privileged attacker with network access via multiple protocols to compromise MySQL Server.  Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server.",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2018-03-22T09:57:01",
        "orgId": "43595867-4340-4103-b7a2-9a5208d29a85",
        "shortName": "oracle"
      },
      "references": [
        {
          "name": "RHSA-2017:2787",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2017:2787"
        },
        {
          "name": "97776",
          "tags": [
            "vdb-entry",
            "x_refsource_BID"
          ],
          "url": "http://www.securityfocus.com/bid/97776"
        },
        {
          "name": "1038287",
          "tags": [
            "vdb-entry",
            "x_refsource_SECTRACK"
          ],
          "url": "http://www.securitytracker.com/id/1038287"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://www.oracle.com/technetwork/security-advisory/cpuapr2017-3236618.html"
        },
        {
          "name": "RHSA-2018:0574",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2018:0574"
        },
        {
          "name": "DSA-3944",
          "tags": [
            "vendor-advisory",
            "x_refsource_DEBIAN"
          ],
          "url": "http://www.debian.org/security/2017/dsa-3944"
        },
        {
          "name": "RHSA-2018:0279",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2018:0279"
        },
        {
          "name": "DSA-3834",
          "tags": [
            "vendor-advisory",
            "x_refsource_DEBIAN"
          ],
          "url": "http://www.debian.org/security/2017/dsa-3834"
        },
        {
          "name": "RHSA-2017:2886",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2017:2886"
        },
        {
          "name": "RHSA-2017:2192",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2017:2192"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "secalert_us@oracle.com",
          "ID": "CVE-2017-3453",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "MySQL Server",
                      "version": {
                        "version_data": [
                          {
                            "version_affected": "=",
                            "version_value": "5.5.54 and earlier"
                          },
                          {
                            "version_affected": "=",
                            "version_value": "5.6.35 and earlier"
                          },
                          {
                            "version_affected": "=",
                            "version_value": "5.7.17 and earlier"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "Oracle Corporation"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Optimizer). Supported versions that are affected are 5.5.54 and earlier, 5.6.35 and earlier and 5.7.17 and earlier. Easily \"exploitable\" vulnerability allows low privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.0 Base Score 6.5 (Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H)."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "Easily \"exploitable\" vulnerability allows low privileged attacker with network access via multiple protocols to compromise MySQL Server.  Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server."
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "RHSA-2017:2787",
              "refsource": "REDHAT",
              "url": "https://access.redhat.com/errata/RHSA-2017:2787"
            },
            {
              "name": "97776",
              "refsource": "BID",
              "url": "http://www.securityfocus.com/bid/97776"
            },
            {
              "name": "1038287",
              "refsource": "SECTRACK",
              "url": "http://www.securitytracker.com/id/1038287"
            },
            {
              "name": "http://www.oracle.com/technetwork/security-advisory/cpuapr2017-3236618.html",
              "refsource": "CONFIRM",
              "url": "http://www.oracle.com/technetwork/security-advisory/cpuapr2017-3236618.html"
            },
            {
              "name": "RHSA-2018:0574",
              "refsource": "REDHAT",
              "url": "https://access.redhat.com/errata/RHSA-2018:0574"
            },
            {
              "name": "DSA-3944",
              "refsource": "DEBIAN",
              "url": "http://www.debian.org/security/2017/dsa-3944"
            },
            {
              "name": "RHSA-2018:0279",
              "refsource": "REDHAT",
              "url": "https://access.redhat.com/errata/RHSA-2018:0279"
            },
            {
              "name": "DSA-3834",
              "refsource": "DEBIAN",
              "url": "http://www.debian.org/security/2017/dsa-3834"
            },
            {
              "name": "RHSA-2017:2886",
              "refsource": "REDHAT",
              "url": "https://access.redhat.com/errata/RHSA-2017:2886"
            },
            {
              "name": "RHSA-2017:2192",
              "refsource": "REDHAT",
              "url": "https://access.redhat.com/errata/RHSA-2017:2192"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "43595867-4340-4103-b7a2-9a5208d29a85",
    "assignerShortName": "oracle",
    "cveId": "CVE-2017-3453",
    "datePublished": "2017-04-24T19:00:00",
    "dateReserved": "2016-12-06T00:00:00",
    "dateUpdated": "2024-10-07T16:20:29.780Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

CVE-2017-3450 (GCVE-0-2017-3450)

Vulnerability from cvelistv5

Published

2017-04-24 19:00

Modified

2024-10-07 16:20

Severity ?

CWE

Easily "exploitable" vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server.

Summary

Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Memcached). Supported versions that are affected are 5.6.35 and earlier and 5.7.17 and earlier. Easily "exploitable" vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.0 Base Score 7.5 (Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H).

References

URL

Tags

	https://access.redhat.com/errata/RHSA-2017:2787	vendor-advisory, x_refsource_REDHAT
	http://www.securitytracker.com/id/1038287	vdb-entry, x_refsource_SECTRACK
	http://www.oracle.com/technetwork/security-advisory/cpuapr2017-3236618.html	x_refsource_CONFIRM
	http://www.securityfocus.com/bid/97747	vdb-entry, x_refsource_BID
	https://access.redhat.com/errata/RHSA-2017:2886	vendor-advisory, x_refsource_REDHAT

Impacted products

	Vendor	Product	Version
	Oracle Corporation	MySQL Server	Version: 5.6.35 and earlier Version: 5.7.17 and earlier

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-05T14:30:56.917Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "name": "RHSA-2017:2787",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2017:2787"
          },
          {
            "name": "1038287",
            "tags": [
              "vdb-entry",
              "x_refsource_SECTRACK",
              "x_transferred"
            ],
            "url": "http://www.securitytracker.com/id/1038287"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://www.oracle.com/technetwork/security-advisory/cpuapr2017-3236618.html"
          },
          {
            "name": "97747",
            "tags": [
              "vdb-entry",
              "x_refsource_BID",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/bid/97747"
          },
          {
            "name": "RHSA-2017:2886",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2017:2886"
          }
        ],
        "title": "CVE Program Container"
      },
      {
        "metrics": [
          {
            "other": {
              "content": {
                "id": "CVE-2017-3450",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "yes"
                  },
                  {
                    "Technical Impact": "partial"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2024-10-07T15:40:28.626571Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2024-10-07T16:20:50.873Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "MySQL Server",
          "vendor": "Oracle Corporation",
          "versions": [
            {
              "status": "affected",
              "version": "5.6.35 and earlier"
            },
            {
              "status": "affected",
              "version": "5.7.17 and earlier"
            }
          ]
        }
      ],
      "datePublic": "2017-04-18T00:00:00",
      "descriptions": [
        {
          "lang": "en",
          "value": "Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Memcached). Supported versions that are affected are 5.6.35 and earlier and 5.7.17 and earlier. Easily \"exploitable\" vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.0 Base Score 7.5 (Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H)."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "Easily \"exploitable\" vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise MySQL Server.  Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server.",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2017-12-08T10:57:01",
        "orgId": "43595867-4340-4103-b7a2-9a5208d29a85",
        "shortName": "oracle"
      },
      "references": [
        {
          "name": "RHSA-2017:2787",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2017:2787"
        },
        {
          "name": "1038287",
          "tags": [
            "vdb-entry",
            "x_refsource_SECTRACK"
          ],
          "url": "http://www.securitytracker.com/id/1038287"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://www.oracle.com/technetwork/security-advisory/cpuapr2017-3236618.html"
        },
        {
          "name": "97747",
          "tags": [
            "vdb-entry",
            "x_refsource_BID"
          ],
          "url": "http://www.securityfocus.com/bid/97747"
        },
        {
          "name": "RHSA-2017:2886",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2017:2886"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "secalert_us@oracle.com",
          "ID": "CVE-2017-3450",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "MySQL Server",
                      "version": {
                        "version_data": [
                          {
                            "version_affected": "=",
                            "version_value": "5.6.35 and earlier"
                          },
                          {
                            "version_affected": "=",
                            "version_value": "5.7.17 and earlier"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "Oracle Corporation"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Memcached). Supported versions that are affected are 5.6.35 and earlier and 5.7.17 and earlier. Easily \"exploitable\" vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.0 Base Score 7.5 (Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H)."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "Easily \"exploitable\" vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise MySQL Server.  Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server."
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "RHSA-2017:2787",
              "refsource": "REDHAT",
              "url": "https://access.redhat.com/errata/RHSA-2017:2787"
            },
            {
              "name": "1038287",
              "refsource": "SECTRACK",
              "url": "http://www.securitytracker.com/id/1038287"
            },
            {
              "name": "http://www.oracle.com/technetwork/security-advisory/cpuapr2017-3236618.html",
              "refsource": "CONFIRM",
              "url": "http://www.oracle.com/technetwork/security-advisory/cpuapr2017-3236618.html"
            },
            {
              "name": "97747",
              "refsource": "BID",
              "url": "http://www.securityfocus.com/bid/97747"
            },
            {
              "name": "RHSA-2017:2886",
              "refsource": "REDHAT",
              "url": "https://access.redhat.com/errata/RHSA-2017:2886"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "43595867-4340-4103-b7a2-9a5208d29a85",
    "assignerShortName": "oracle",
    "cveId": "CVE-2017-3450",
    "datePublished": "2017-04-24T19:00:00",
    "dateReserved": "2016-12-06T00:00:00",
    "dateUpdated": "2024-10-07T16:20:50.873Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

CVE-2017-3302 (GCVE-0-2017-3302)

Vulnerability from cvelistv5

Published

2017-02-12 04:43

Modified

2024-10-08 20:13

Severity ?

CWE

Difficult to exploit vulnerability allows unauthenticated attacker with logon to the infrastructure where MySQL Server executes to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server.

Summary

Crash in libmysqlclient.so in Oracle MySQL before 5.6.21 and 5.7.x before 5.7.5 and MariaDB through 5.5.54, 10.0.x through 10.0.29, 10.1.x through 10.1.21, and 10.2.x through 10.2.3.

References

URL

Tags

	http://www.securityfocus.com/bid/96162	vdb-entry, x_refsource_BID
	https://access.redhat.com/errata/RHSA-2017:2787	vendor-advisory, x_refsource_REDHAT
	http://www.securitytracker.com/id/1038287	vdb-entry, x_refsource_SECTRACK
	http://www.oracle.com/technetwork/security-advisory/cpuapr2017-3236618.html	x_refsource_CONFIRM
	https://access.redhat.com/errata/RHSA-2018:0574	vendor-advisory, x_refsource_REDHAT
	https://access.redhat.com/errata/RHSA-2018:0279	vendor-advisory, x_refsource_REDHAT
	http://www.debian.org/security/2017/dsa-3834	vendor-advisory, x_refsource_DEBIAN
	http://www.debian.org/security/2017/dsa-3809	vendor-advisory, x_refsource_DEBIAN
	http://www.openwall.com/lists/oss-security/2017/02/11/11	x_refsource_MISC
	https://access.redhat.com/errata/RHSA-2017:2192	vendor-advisory, x_refsource_REDHAT

Impacted products

	Vendor	Product	Version
	Oracle Corporation	MySQL Server	Version: 5.5.54 and earlier Version: 5.6.20 and earlier

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-05T14:23:33.637Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "name": "96162",
            "tags": [
              "vdb-entry",
              "x_refsource_BID",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/bid/96162"
          },
          {
            "name": "RHSA-2017:2787",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2017:2787"
          },
          {
            "name": "1038287",
            "tags": [
              "vdb-entry",
              "x_refsource_SECTRACK",
              "x_transferred"
            ],
            "url": "http://www.securitytracker.com/id/1038287"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://www.oracle.com/technetwork/security-advisory/cpuapr2017-3236618.html"
          },
          {
            "name": "RHSA-2018:0574",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2018:0574"
          },
          {
            "name": "RHSA-2018:0279",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2018:0279"
          },
          {
            "name": "DSA-3834",
            "tags": [
              "vendor-advisory",
              "x_refsource_DEBIAN",
              "x_transferred"
            ],
            "url": "http://www.debian.org/security/2017/dsa-3834"
          },
          {
            "name": "DSA-3809",
            "tags": [
              "vendor-advisory",
              "x_refsource_DEBIAN",
              "x_transferred"
            ],
            "url": "http://www.debian.org/security/2017/dsa-3809"
          },
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "http://www.openwall.com/lists/oss-security/2017/02/11/11"
          },
          {
            "name": "RHSA-2017:2192",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2017:2192"
          }
        ],
        "title": "CVE Program Container"
      },
      {
        "metrics": [
          {
            "other": {
              "content": {
                "id": "CVE-2017-3302",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "yes"
                  },
                  {
                    "Technical Impact": "partial"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2024-10-08T20:04:48.579501Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2024-10-08T20:13:36.675Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "MySQL Server",
          "vendor": "Oracle Corporation",
          "versions": [
            {
              "status": "affected",
              "version": "5.5.54 and earlier"
            },
            {
              "status": "affected",
              "version": "5.6.20 and earlier"
            }
          ]
        }
      ],
      "datePublic": "2017-02-11T00:00:00",
      "descriptions": [
        {
          "lang": "en",
          "value": "Crash in libmysqlclient.so in Oracle MySQL before 5.6.21 and 5.7.x before 5.7.5 and MariaDB through 5.5.54, 10.0.x through 10.0.29, 10.1.x through 10.1.21, and 10.2.x through 10.2.3."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "Difficult to exploit vulnerability allows unauthenticated attacker with logon to the infrastructure where MySQL Server executes to compromise MySQL Server.  Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server.",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2018-03-22T09:57:01",
        "orgId": "43595867-4340-4103-b7a2-9a5208d29a85",
        "shortName": "oracle"
      },
      "references": [
        {
          "name": "96162",
          "tags": [
            "vdb-entry",
            "x_refsource_BID"
          ],
          "url": "http://www.securityfocus.com/bid/96162"
        },
        {
          "name": "RHSA-2017:2787",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2017:2787"
        },
        {
          "name": "1038287",
          "tags": [
            "vdb-entry",
            "x_refsource_SECTRACK"
          ],
          "url": "http://www.securitytracker.com/id/1038287"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://www.oracle.com/technetwork/security-advisory/cpuapr2017-3236618.html"
        },
        {
          "name": "RHSA-2018:0574",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2018:0574"
        },
        {
          "name": "RHSA-2018:0279",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2018:0279"
        },
        {
          "name": "DSA-3834",
          "tags": [
            "vendor-advisory",
            "x_refsource_DEBIAN"
          ],
          "url": "http://www.debian.org/security/2017/dsa-3834"
        },
        {
          "name": "DSA-3809",
          "tags": [
            "vendor-advisory",
            "x_refsource_DEBIAN"
          ],
          "url": "http://www.debian.org/security/2017/dsa-3809"
        },
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "http://www.openwall.com/lists/oss-security/2017/02/11/11"
        },
        {
          "name": "RHSA-2017:2192",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2017:2192"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "secalert_us@oracle.com",
          "ID": "CVE-2017-3302",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "MySQL Server",
                      "version": {
                        "version_data": [
                          {
                            "version_affected": "=",
                            "version_value": "5.5.54 and earlier"
                          },
                          {
                            "version_affected": "=",
                            "version_value": "5.6.20 and earlier"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "Oracle Corporation"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "Crash in libmysqlclient.so in Oracle MySQL before 5.6.21 and 5.7.x before 5.7.5 and MariaDB through 5.5.54, 10.0.x through 10.0.29, 10.1.x through 10.1.21, and 10.2.x through 10.2.3."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "Difficult to exploit vulnerability allows unauthenticated attacker with logon to the infrastructure where MySQL Server executes to compromise MySQL Server.  Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server."
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "96162",
              "refsource": "BID",
              "url": "http://www.securityfocus.com/bid/96162"
            },
            {
              "name": "RHSA-2017:2787",
              "refsource": "REDHAT",
              "url": "https://access.redhat.com/errata/RHSA-2017:2787"
            },
            {
              "name": "1038287",
              "refsource": "SECTRACK",
              "url": "http://www.securitytracker.com/id/1038287"
            },
            {
              "name": "http://www.oracle.com/technetwork/security-advisory/cpuapr2017-3236618.html",
              "refsource": "CONFIRM",
              "url": "http://www.oracle.com/technetwork/security-advisory/cpuapr2017-3236618.html"
            },
            {
              "name": "RHSA-2018:0574",
              "refsource": "REDHAT",
              "url": "https://access.redhat.com/errata/RHSA-2018:0574"
            },
            {
              "name": "RHSA-2018:0279",
              "refsource": "REDHAT",
              "url": "https://access.redhat.com/errata/RHSA-2018:0279"
            },
            {
              "name": "DSA-3834",
              "refsource": "DEBIAN",
              "url": "http://www.debian.org/security/2017/dsa-3834"
            },
            {
              "name": "DSA-3809",
              "refsource": "DEBIAN",
              "url": "http://www.debian.org/security/2017/dsa-3809"
            },
            {
              "name": "http://www.openwall.com/lists/oss-security/2017/02/11/11",
              "refsource": "MISC",
              "url": "http://www.openwall.com/lists/oss-security/2017/02/11/11"
            },
            {
              "name": "RHSA-2017:2192",
              "refsource": "REDHAT",
              "url": "https://access.redhat.com/errata/RHSA-2017:2192"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "43595867-4340-4103-b7a2-9a5208d29a85",
    "assignerShortName": "oracle",
    "cveId": "CVE-2017-3302",
    "datePublished": "2017-02-12T04:43:00",
    "dateReserved": "2016-12-06T00:00:00",
    "dateUpdated": "2024-10-08T20:13:36.675Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

CVE-2017-3305 (GCVE-0-2017-3305)

Vulnerability from cvelistv5

Published

2017-04-24 19:00

Modified

2024-10-07 16:22

Severity ?

CWE

Difficult to exploit vulnerability allows low privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all MySQL Server accessible data.

Summary

Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: C API). Supported versions that are affected are 5.5.55 and earlier and 5.6.35 and earlier. Difficult to exploit vulnerability allows low privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all MySQL Server accessible data. CVSS 3.0 Base Score 5.3 (Confidentiality impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N). NOTE: the previous information is from the April 2017 CPU. Oracle has not commented on third-party claims that this issue allows man-in-the-middle attackers to hijack the authentication of users by leveraging incorrect ordering of security parameter verification in a client, aka, "The Riddle".

References

URL

Tags

	https://access.redhat.com/errata/RHSA-2017:2787	vendor-advisory, x_refsource_REDHAT
	http://www.openwall.com/lists/oss-security/2017/03/17/3	mailing-list, x_refsource_MLIST
	http://www.securitytracker.com/id/1038287	vdb-entry, x_refsource_SECTRACK
	http://riddle.link/	x_refsource_MISC
	http://www.oracle.com/technetwork/security-advisory/cpuapr2017-3236618.html	x_refsource_CONFIRM
	http://www.debian.org/security/2017/dsa-3834	vendor-advisory, x_refsource_DEBIAN
	http://www.securityfocus.com/bid/97023	vdb-entry, x_refsource_BID

Impacted products

	Vendor	Product	Version
	Oracle Corporation	MySQL Server	Version: 5.5.55 and earlier Version: 5.6.35 and earlier

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-05T14:23:33.773Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "name": "RHSA-2017:2787",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2017:2787"
          },
          {
            "name": "[oss-security] 20170317 CVE-2017-3305 - The Riddle vulnerability in MySQL client (public disclosure)",
            "tags": [
              "mailing-list",
              "x_refsource_MLIST",
              "x_transferred"
            ],
            "url": "http://www.openwall.com/lists/oss-security/2017/03/17/3"
          },
          {
            "name": "1038287",
            "tags": [
              "vdb-entry",
              "x_refsource_SECTRACK",
              "x_transferred"
            ],
            "url": "http://www.securitytracker.com/id/1038287"
          },
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "http://riddle.link/"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://www.oracle.com/technetwork/security-advisory/cpuapr2017-3236618.html"
          },
          {
            "name": "DSA-3834",
            "tags": [
              "vendor-advisory",
              "x_refsource_DEBIAN",
              "x_transferred"
            ],
            "url": "http://www.debian.org/security/2017/dsa-3834"
          },
          {
            "name": "97023",
            "tags": [
              "vdb-entry",
              "x_refsource_BID",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/bid/97023"
          }
        ],
        "title": "CVE Program Container"
      },
      {
        "metrics": [
          {
            "other": {
              "content": {
                "id": "CVE-2017-3305",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "partial"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2024-10-07T15:46:21.541035Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2024-10-07T16:22:26.025Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "MySQL Server",
          "vendor": "Oracle Corporation",
          "versions": [
            {
              "status": "affected",
              "version": "5.5.55 and earlier"
            },
            {
              "status": "affected",
              "version": "5.6.35 and earlier"
            }
          ]
        }
      ],
      "datePublic": "2017-04-18T00:00:00",
      "descriptions": [
        {
          "lang": "en",
          "value": "Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: C API). Supported versions that are affected are 5.5.55 and earlier and 5.6.35 and earlier. Difficult to exploit vulnerability allows low privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all MySQL Server accessible data. CVSS 3.0 Base Score 5.3 (Confidentiality impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N). NOTE: the previous information is from the April 2017 CPU. Oracle has not commented on third-party claims that this issue allows man-in-the-middle attackers to hijack the authentication of users by leveraging incorrect ordering of security parameter verification in a client, aka, \"The Riddle\"."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "Difficult to exploit vulnerability allows low privileged attacker with network access via multiple protocols to compromise MySQL Server.  Successful attacks of this vulnerability can result in  unauthorized access to critical data or complete access to all MySQL Server accessible data.",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2017-12-08T10:57:01",
        "orgId": "43595867-4340-4103-b7a2-9a5208d29a85",
        "shortName": "oracle"
      },
      "references": [
        {
          "name": "RHSA-2017:2787",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2017:2787"
        },
        {
          "name": "[oss-security] 20170317 CVE-2017-3305 - The Riddle vulnerability in MySQL client (public disclosure)",
          "tags": [
            "mailing-list",
            "x_refsource_MLIST"
          ],
          "url": "http://www.openwall.com/lists/oss-security/2017/03/17/3"
        },
        {
          "name": "1038287",
          "tags": [
            "vdb-entry",
            "x_refsource_SECTRACK"
          ],
          "url": "http://www.securitytracker.com/id/1038287"
        },
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "http://riddle.link/"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://www.oracle.com/technetwork/security-advisory/cpuapr2017-3236618.html"
        },
        {
          "name": "DSA-3834",
          "tags": [
            "vendor-advisory",
            "x_refsource_DEBIAN"
          ],
          "url": "http://www.debian.org/security/2017/dsa-3834"
        },
        {
          "name": "97023",
          "tags": [
            "vdb-entry",
            "x_refsource_BID"
          ],
          "url": "http://www.securityfocus.com/bid/97023"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "secalert_us@oracle.com",
          "ID": "CVE-2017-3305",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "MySQL Server",
                      "version": {
                        "version_data": [
                          {
                            "version_affected": "=",
                            "version_value": "5.5.55 and earlier"
                          },
                          {
                            "version_affected": "=",
                            "version_value": "5.6.35 and earlier"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "Oracle Corporation"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: C API). Supported versions that are affected are 5.5.55 and earlier and 5.6.35 and earlier. Difficult to exploit vulnerability allows low privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all MySQL Server accessible data. CVSS 3.0 Base Score 5.3 (Confidentiality impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N). NOTE: the previous information is from the April 2017 CPU. Oracle has not commented on third-party claims that this issue allows man-in-the-middle attackers to hijack the authentication of users by leveraging incorrect ordering of security parameter verification in a client, aka, \"The Riddle\"."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "Difficult to exploit vulnerability allows low privileged attacker with network access via multiple protocols to compromise MySQL Server.  Successful attacks of this vulnerability can result in  unauthorized access to critical data or complete access to all MySQL Server accessible data."
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "RHSA-2017:2787",
              "refsource": "REDHAT",
              "url": "https://access.redhat.com/errata/RHSA-2017:2787"
            },
            {
              "name": "[oss-security] 20170317 CVE-2017-3305 - The Riddle vulnerability in MySQL client (public disclosure)",
              "refsource": "MLIST",
              "url": "http://www.openwall.com/lists/oss-security/2017/03/17/3"
            },
            {
              "name": "1038287",
              "refsource": "SECTRACK",
              "url": "http://www.securitytracker.com/id/1038287"
            },
            {
              "name": "http://riddle.link/",
              "refsource": "MISC",
              "url": "http://riddle.link/"
            },
            {
              "name": "http://www.oracle.com/technetwork/security-advisory/cpuapr2017-3236618.html",
              "refsource": "CONFIRM",
              "url": "http://www.oracle.com/technetwork/security-advisory/cpuapr2017-3236618.html"
            },
            {
              "name": "DSA-3834",
              "refsource": "DEBIAN",
              "url": "http://www.debian.org/security/2017/dsa-3834"
            },
            {
              "name": "97023",
              "refsource": "BID",
              "url": "http://www.securityfocus.com/bid/97023"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "43595867-4340-4103-b7a2-9a5208d29a85",
    "assignerShortName": "oracle",
    "cveId": "CVE-2017-3305",
    "datePublished": "2017-04-24T19:00:00",
    "dateReserved": "2016-12-06T00:00:00",
    "dateUpdated": "2024-10-07T16:22:26.025Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

CVE-2017-3313 (GCVE-0-2017-3313)

Vulnerability from cvelistv5

Published

2017-01-27 22:01

Modified

2024-10-08 20:34

Severity ?

CWE

CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N

Summary

Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: MyISAM). Supported versions that are affected are 5.5.53 and earlier, 5.6.34 and earlier and 5.7.16 and earlier. Difficult to exploit vulnerability allows low privileged attacker with logon to the infrastructure where MySQL Server executes to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all MySQL Server accessible data. CVSS v3.0 Base Score 4.7 (Confidentiality impacts).

References

URL

Tags

	https://access.redhat.com/errata/RHSA-2017:2787	vendor-advisory, x_refsource_REDHAT
	http://www.securityfocus.com/bid/95527	vdb-entry, x_refsource_BID
	https://security.gentoo.org/glsa/201702-17	vendor-advisory, x_refsource_GENTOO
	https://access.redhat.com/errata/RHSA-2018:0574	vendor-advisory, x_refsource_REDHAT
	http://www.securitytracker.com/id/1037640	vdb-entry, x_refsource_SECTRACK
	https://access.redhat.com/errata/RHSA-2018:0279	vendor-advisory, x_refsource_REDHAT
	http://www.debian.org/security/2017/dsa-3767	vendor-advisory, x_refsource_DEBIAN
	https://access.redhat.com/errata/RHSA-2017:2886	vendor-advisory, x_refsource_REDHAT
	http://www.debian.org/security/2017/dsa-3809	vendor-advisory, x_refsource_DEBIAN
	http://www.oracle.com/technetwork/security-advisory/cpujan2017-2881727.html	x_refsource_CONFIRM
	https://access.redhat.com/errata/RHSA-2017:2192	vendor-advisory, x_refsource_REDHAT

Impacted products

	Vendor	Product	Version
	Oracle	MySQL Server	Version: 5.5.53 and earlier Version: 5.6.34 and earlier Version: 5.7.16 and earlier

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-05T14:23:33.213Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "name": "RHSA-2017:2787",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2017:2787"
          },
          {
            "name": "95527",
            "tags": [
              "vdb-entry",
              "x_refsource_BID",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/bid/95527"
          },
          {
            "name": "GLSA-201702-17",
            "tags": [
              "vendor-advisory",
              "x_refsource_GENTOO",
              "x_transferred"
            ],
            "url": "https://security.gentoo.org/glsa/201702-17"
          },
          {
            "name": "RHSA-2018:0574",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2018:0574"
          },
          {
            "name": "1037640",
            "tags": [
              "vdb-entry",
              "x_refsource_SECTRACK",
              "x_transferred"
            ],
            "url": "http://www.securitytracker.com/id/1037640"
          },
          {
            "name": "RHSA-2018:0279",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2018:0279"
          },
          {
            "name": "DSA-3767",
            "tags": [
              "vendor-advisory",
              "x_refsource_DEBIAN",
              "x_transferred"
            ],
            "url": "http://www.debian.org/security/2017/dsa-3767"
          },
          {
            "name": "RHSA-2017:2886",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2017:2886"
          },
          {
            "name": "DSA-3809",
            "tags": [
              "vendor-advisory",
              "x_refsource_DEBIAN",
              "x_transferred"
            ],
            "url": "http://www.debian.org/security/2017/dsa-3809"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://www.oracle.com/technetwork/security-advisory/cpujan2017-2881727.html"
          },
          {
            "name": "RHSA-2017:2192",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2017:2192"
          }
        ],
        "title": "CVE Program Container"
      },
      {
        "metrics": [
          {
            "other": {
              "content": {
                "id": "CVE-2017-3313",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "partial"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2024-10-08T20:09:35.091283Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2024-10-08T20:34:44.994Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "MySQL Server",
          "vendor": "Oracle",
          "versions": [
            {
              "status": "affected",
              "version": "5.5.53 and earlier"
            },
            {
              "status": "affected",
              "version": "5.6.34 and earlier"
            },
            {
              "status": "affected",
              "version": "5.7.16 and earlier"
            }
          ]
        }
      ],
      "datePublic": "2017-01-17T00:00:00",
      "descriptions": [
        {
          "lang": "en",
          "value": "Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: MyISAM). Supported versions that are affected are 5.5.53 and earlier, 5.6.34 and earlier and 5.7.16 and earlier. Difficult to exploit vulnerability allows low privileged attacker with logon to the infrastructure where MySQL Server executes to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all MySQL Server accessible data. CVSS v3.0 Base Score 4.7 (Confidentiality impacts)."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2018-03-22T09:57:01",
        "orgId": "43595867-4340-4103-b7a2-9a5208d29a85",
        "shortName": "oracle"
      },
      "references": [
        {
          "name": "RHSA-2017:2787",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2017:2787"
        },
        {
          "name": "95527",
          "tags": [
            "vdb-entry",
            "x_refsource_BID"
          ],
          "url": "http://www.securityfocus.com/bid/95527"
        },
        {
          "name": "GLSA-201702-17",
          "tags": [
            "vendor-advisory",
            "x_refsource_GENTOO"
          ],
          "url": "https://security.gentoo.org/glsa/201702-17"
        },
        {
          "name": "RHSA-2018:0574",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2018:0574"
        },
        {
          "name": "1037640",
          "tags": [
            "vdb-entry",
            "x_refsource_SECTRACK"
          ],
          "url": "http://www.securitytracker.com/id/1037640"
        },
        {
          "name": "RHSA-2018:0279",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2018:0279"
        },
        {
          "name": "DSA-3767",
          "tags": [
            "vendor-advisory",
            "x_refsource_DEBIAN"
          ],
          "url": "http://www.debian.org/security/2017/dsa-3767"
        },
        {
          "name": "RHSA-2017:2886",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2017:2886"
        },
        {
          "name": "DSA-3809",
          "tags": [
            "vendor-advisory",
            "x_refsource_DEBIAN"
          ],
          "url": "http://www.debian.org/security/2017/dsa-3809"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://www.oracle.com/technetwork/security-advisory/cpujan2017-2881727.html"
        },
        {
          "name": "RHSA-2017:2192",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2017:2192"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "secalert_us@oracle.com",
          "ID": "CVE-2017-3313",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "MySQL Server",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "5.5.53 and earlier"
                          },
                          {
                            "version_value": "5.6.34 and earlier"
                          },
                          {
                            "version_value": "5.7.16 and earlier"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "Oracle"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: MyISAM). Supported versions that are affected are 5.5.53 and earlier, 5.6.34 and earlier and 5.7.16 and earlier. Difficult to exploit vulnerability allows low privileged attacker with logon to the infrastructure where MySQL Server executes to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all MySQL Server accessible data. CVSS v3.0 Base Score 4.7 (Confidentiality impacts)."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "RHSA-2017:2787",
              "refsource": "REDHAT",
              "url": "https://access.redhat.com/errata/RHSA-2017:2787"
            },
            {
              "name": "95527",
              "refsource": "BID",
              "url": "http://www.securityfocus.com/bid/95527"
            },
            {
              "name": "GLSA-201702-17",
              "refsource": "GENTOO",
              "url": "https://security.gentoo.org/glsa/201702-17"
            },
            {
              "name": "RHSA-2018:0574",
              "refsource": "REDHAT",
              "url": "https://access.redhat.com/errata/RHSA-2018:0574"
            },
            {
              "name": "1037640",
              "refsource": "SECTRACK",
              "url": "http://www.securitytracker.com/id/1037640"
            },
            {
              "name": "RHSA-2018:0279",
              "refsource": "REDHAT",
              "url": "https://access.redhat.com/errata/RHSA-2018:0279"
            },
            {
              "name": "DSA-3767",
              "refsource": "DEBIAN",
              "url": "http://www.debian.org/security/2017/dsa-3767"
            },
            {
              "name": "RHSA-2017:2886",
              "refsource": "REDHAT",
              "url": "https://access.redhat.com/errata/RHSA-2017:2886"
            },
            {
              "name": "DSA-3809",
              "refsource": "DEBIAN",
              "url": "http://www.debian.org/security/2017/dsa-3809"
            },
            {
              "name": "http://www.oracle.com/technetwork/security-advisory/cpujan2017-2881727.html",
              "refsource": "CONFIRM",
              "url": "http://www.oracle.com/technetwork/security-advisory/cpujan2017-2881727.html"
            },
            {
              "name": "RHSA-2017:2192",
              "refsource": "REDHAT",
              "url": "https://access.redhat.com/errata/RHSA-2017:2192"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "43595867-4340-4103-b7a2-9a5208d29a85",
    "assignerShortName": "oracle",
    "cveId": "CVE-2017-3313",
    "datePublished": "2017-01-27T22:01:00",
    "dateReserved": "2016-12-06T00:00:00",
    "dateUpdated": "2024-10-08T20:34:44.994Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

CVE-2017-3634 (GCVE-0-2017-3634)

Vulnerability from cvelistv5

Published

2017-08-08 15:00

Modified

2024-10-04 17:03

Severity ?

CWE

Summary

Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: DML). Supported versions that are affected are 5.6.36 and earlier and 5.7.18 and earlier. Easily exploitable vulnerability allows low privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.0 Base Score 6.5 (Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H).

References

URL

Tags

	https://access.redhat.com/errata/RHSA-2017:2787	vendor-advisory, x_refsource_REDHAT
	http://www.securitytracker.com/id/1038928	vdb-entry, x_refsource_SECTRACK
	http://www.securityfocus.com/bid/99729	vdb-entry, x_refsource_BID
	https://access.redhat.com/errata/RHSA-2017:2886	vendor-advisory, x_refsource_REDHAT
	http://www.oracle.com/technetwork/security-advisory/cpujul2017-3236622.html	x_refsource_CONFIRM

Impacted products

	Vendor	Product	Version
	n/a	n/a	Version: n/a

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-05T14:30:58.972Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "name": "RHSA-2017:2787",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2017:2787"
          },
          {
            "name": "1038928",
            "tags": [
              "vdb-entry",
              "x_refsource_SECTRACK",
              "x_transferred"
            ],
            "url": "http://www.securitytracker.com/id/1038928"
          },
          {
            "name": "99729",
            "tags": [
              "vdb-entry",
              "x_refsource_BID",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/bid/99729"
          },
          {
            "name": "RHSA-2017:2886",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2017:2886"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://www.oracle.com/technetwork/security-advisory/cpujul2017-3236622.html"
          }
        ],
        "title": "CVE Program Container"
      },
      {
        "metrics": [
          {
            "other": {
              "content": {
                "id": "CVE-2017-3634",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "partial"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2024-10-04T15:48:27.985093Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2024-10-04T17:03:18.561Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "datePublic": "2017-07-18T00:00:00",
      "descriptions": [
        {
          "lang": "en",
          "value": "Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: DML). Supported versions that are affected are 5.6.36 and earlier and 5.7.18 and earlier. Easily exploitable vulnerability allows low privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.0 Base Score 6.5 (Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H)."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "n/a",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2017-12-08T10:57:01",
        "orgId": "43595867-4340-4103-b7a2-9a5208d29a85",
        "shortName": "oracle"
      },
      "references": [
        {
          "name": "RHSA-2017:2787",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2017:2787"
        },
        {
          "name": "1038928",
          "tags": [
            "vdb-entry",
            "x_refsource_SECTRACK"
          ],
          "url": "http://www.securitytracker.com/id/1038928"
        },
        {
          "name": "99729",
          "tags": [
            "vdb-entry",
            "x_refsource_BID"
          ],
          "url": "http://www.securityfocus.com/bid/99729"
        },
        {
          "name": "RHSA-2017:2886",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2017:2886"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://www.oracle.com/technetwork/security-advisory/cpujul2017-3236622.html"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "secalert_us@oracle.com",
          "ID": "CVE-2017-3634",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "n/a",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "n/a"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "n/a"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: DML). Supported versions that are affected are 5.6.36 and earlier and 5.7.18 and earlier. Easily exploitable vulnerability allows low privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.0 Base Score 6.5 (Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H)."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "n/a"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "RHSA-2017:2787",
              "refsource": "REDHAT",
              "url": "https://access.redhat.com/errata/RHSA-2017:2787"
            },
            {
              "name": "1038928",
              "refsource": "SECTRACK",
              "url": "http://www.securitytracker.com/id/1038928"
            },
            {
              "name": "99729",
              "refsource": "BID",
              "url": "http://www.securityfocus.com/bid/99729"
            },
            {
              "name": "RHSA-2017:2886",
              "refsource": "REDHAT",
              "url": "https://access.redhat.com/errata/RHSA-2017:2886"
            },
            {
              "name": "http://www.oracle.com/technetwork/security-advisory/cpujul2017-3236622.html",
              "refsource": "CONFIRM",
              "url": "http://www.oracle.com/technetwork/security-advisory/cpujul2017-3236622.html"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "43595867-4340-4103-b7a2-9a5208d29a85",
    "assignerShortName": "oracle",
    "cveId": "CVE-2017-3634",
    "datePublished": "2017-08-08T15:00:00",
    "dateReserved": "2016-12-06T00:00:00",
    "dateUpdated": "2024-10-04T17:03:18.561Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

CVE-2017-3312 (GCVE-0-2017-3312)

Vulnerability from cvelistv5

Published

2017-01-27 22:01

Modified

2024-10-08 20:34

Severity ?

CWE

CVSS:3.0/AV:L/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:H

Summary

Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Packaging). Supported versions that are affected are 5.5.53 and earlier, 5.6.34 and earlier and 5.7.16 and earlier. Difficult to exploit vulnerability allows low privileged attacker with logon to the infrastructure where MySQL Server executes to compromise MySQL Server. Successful attacks require human interaction from a person other than the attacker. Successful attacks of this vulnerability can result in takeover of MySQL Server. CVSS v3.0 Base Score 6.7 (Confidentiality, Integrity and Availability impacts).

References

URL

Tags

	https://access.redhat.com/errata/RHSA-2017:2787	vendor-advisory, x_refsource_REDHAT
	https://security.gentoo.org/glsa/201702-17	vendor-advisory, x_refsource_GENTOO
	http://www.securityfocus.com/bid/95491	vdb-entry, x_refsource_BID
	https://access.redhat.com/errata/RHSA-2018:0574	vendor-advisory, x_refsource_REDHAT
	https://security.gentoo.org/glsa/201702-18	vendor-advisory, x_refsource_GENTOO
	http://www.securitytracker.com/id/1037640	vdb-entry, x_refsource_SECTRACK
	https://access.redhat.com/errata/RHSA-2018:0279	vendor-advisory, x_refsource_REDHAT
	http://www.debian.org/security/2017/dsa-3767	vendor-advisory, x_refsource_DEBIAN
	https://access.redhat.com/errata/RHSA-2017:2886	vendor-advisory, x_refsource_REDHAT
	http://www.oracle.com/technetwork/security-advisory/cpujan2017-2881727.html	x_refsource_CONFIRM
	http://www.debian.org/security/2017/dsa-3770	vendor-advisory, x_refsource_DEBIAN
	https://access.redhat.com/errata/RHSA-2017:2192	vendor-advisory, x_refsource_REDHAT

Impacted products

	Vendor	Product	Version
	Oracle	MySQL Server	Version: 5.5.53 and earlier Version: 5.6.34 and earlier Version: 5.7.16 and earlier

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-05T14:23:33.717Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "name": "RHSA-2017:2787",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2017:2787"
          },
          {
            "name": "GLSA-201702-17",
            "tags": [
              "vendor-advisory",
              "x_refsource_GENTOO",
              "x_transferred"
            ],
            "url": "https://security.gentoo.org/glsa/201702-17"
          },
          {
            "name": "95491",
            "tags": [
              "vdb-entry",
              "x_refsource_BID",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/bid/95491"
          },
          {
            "name": "RHSA-2018:0574",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2018:0574"
          },
          {
            "name": "GLSA-201702-18",
            "tags": [
              "vendor-advisory",
              "x_refsource_GENTOO",
              "x_transferred"
            ],
            "url": "https://security.gentoo.org/glsa/201702-18"
          },
          {
            "name": "1037640",
            "tags": [
              "vdb-entry",
              "x_refsource_SECTRACK",
              "x_transferred"
            ],
            "url": "http://www.securitytracker.com/id/1037640"
          },
          {
            "name": "RHSA-2018:0279",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2018:0279"
          },
          {
            "name": "DSA-3767",
            "tags": [
              "vendor-advisory",
              "x_refsource_DEBIAN",
              "x_transferred"
            ],
            "url": "http://www.debian.org/security/2017/dsa-3767"
          },
          {
            "name": "RHSA-2017:2886",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2017:2886"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://www.oracle.com/technetwork/security-advisory/cpujan2017-2881727.html"
          },
          {
            "name": "DSA-3770",
            "tags": [
              "vendor-advisory",
              "x_refsource_DEBIAN",
              "x_transferred"
            ],
            "url": "http://www.debian.org/security/2017/dsa-3770"
          },
          {
            "name": "RHSA-2017:2192",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2017:2192"
          }
        ],
        "title": "CVE Program Container"
      },
      {
        "metrics": [
          {
            "other": {
              "content": {
                "id": "CVE-2017-3312",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "total"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2024-10-08T20:06:01.608682Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2024-10-08T20:34:53.133Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "MySQL Server",
          "vendor": "Oracle",
          "versions": [
            {
              "status": "affected",
              "version": "5.5.53 and earlier"
            },
            {
              "status": "affected",
              "version": "5.6.34 and earlier"
            },
            {
              "status": "affected",
              "version": "5.7.16 and earlier"
            }
          ]
        }
      ],
      "datePublic": "2017-01-17T00:00:00",
      "descriptions": [
        {
          "lang": "en",
          "value": "Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Packaging). Supported versions that are affected are 5.5.53 and earlier, 5.6.34 and earlier and 5.7.16 and earlier. Difficult to exploit vulnerability allows low privileged attacker with logon to the infrastructure where MySQL Server executes to compromise MySQL Server. Successful attacks require human interaction from a person other than the attacker. Successful attacks of this vulnerability can result in takeover of MySQL Server. CVSS v3.0 Base Score 6.7 (Confidentiality, Integrity and Availability impacts)."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "CVSS:3.0/AV:L/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:H",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2018-03-22T09:57:01",
        "orgId": "43595867-4340-4103-b7a2-9a5208d29a85",
        "shortName": "oracle"
      },
      "references": [
        {
          "name": "RHSA-2017:2787",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2017:2787"
        },
        {
          "name": "GLSA-201702-17",
          "tags": [
            "vendor-advisory",
            "x_refsource_GENTOO"
          ],
          "url": "https://security.gentoo.org/glsa/201702-17"
        },
        {
          "name": "95491",
          "tags": [
            "vdb-entry",
            "x_refsource_BID"
          ],
          "url": "http://www.securityfocus.com/bid/95491"
        },
        {
          "name": "RHSA-2018:0574",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2018:0574"
        },
        {
          "name": "GLSA-201702-18",
          "tags": [
            "vendor-advisory",
            "x_refsource_GENTOO"
          ],
          "url": "https://security.gentoo.org/glsa/201702-18"
        },
        {
          "name": "1037640",
          "tags": [
            "vdb-entry",
            "x_refsource_SECTRACK"
          ],
          "url": "http://www.securitytracker.com/id/1037640"
        },
        {
          "name": "RHSA-2018:0279",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2018:0279"
        },
        {
          "name": "DSA-3767",
          "tags": [
            "vendor-advisory",
            "x_refsource_DEBIAN"
          ],
          "url": "http://www.debian.org/security/2017/dsa-3767"
        },
        {
          "name": "RHSA-2017:2886",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2017:2886"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://www.oracle.com/technetwork/security-advisory/cpujan2017-2881727.html"
        },
        {
          "name": "DSA-3770",
          "tags": [
            "vendor-advisory",
            "x_refsource_DEBIAN"
          ],
          "url": "http://www.debian.org/security/2017/dsa-3770"
        },
        {
          "name": "RHSA-2017:2192",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2017:2192"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "secalert_us@oracle.com",
          "ID": "CVE-2017-3312",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "MySQL Server",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "5.5.53 and earlier"
                          },
                          {
                            "version_value": "5.6.34 and earlier"
                          },
                          {
                            "version_value": "5.7.16 and earlier"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "Oracle"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Packaging). Supported versions that are affected are 5.5.53 and earlier, 5.6.34 and earlier and 5.7.16 and earlier. Difficult to exploit vulnerability allows low privileged attacker with logon to the infrastructure where MySQL Server executes to compromise MySQL Server. Successful attacks require human interaction from a person other than the attacker. Successful attacks of this vulnerability can result in takeover of MySQL Server. CVSS v3.0 Base Score 6.7 (Confidentiality, Integrity and Availability impacts)."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "CVSS:3.0/AV:L/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:H"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "RHSA-2017:2787",
              "refsource": "REDHAT",
              "url": "https://access.redhat.com/errata/RHSA-2017:2787"
            },
            {
              "name": "GLSA-201702-17",
              "refsource": "GENTOO",
              "url": "https://security.gentoo.org/glsa/201702-17"
            },
            {
              "name": "95491",
              "refsource": "BID",
              "url": "http://www.securityfocus.com/bid/95491"
            },
            {
              "name": "RHSA-2018:0574",
              "refsource": "REDHAT",
              "url": "https://access.redhat.com/errata/RHSA-2018:0574"
            },
            {
              "name": "GLSA-201702-18",
              "refsource": "GENTOO",
              "url": "https://security.gentoo.org/glsa/201702-18"
            },
            {
              "name": "1037640",
              "refsource": "SECTRACK",
              "url": "http://www.securitytracker.com/id/1037640"
            },
            {
              "name": "RHSA-2018:0279",
              "refsource": "REDHAT",
              "url": "https://access.redhat.com/errata/RHSA-2018:0279"
            },
            {
              "name": "DSA-3767",
              "refsource": "DEBIAN",
              "url": "http://www.debian.org/security/2017/dsa-3767"
            },
            {
              "name": "RHSA-2017:2886",
              "refsource": "REDHAT",
              "url": "https://access.redhat.com/errata/RHSA-2017:2886"
            },
            {
              "name": "http://www.oracle.com/technetwork/security-advisory/cpujan2017-2881727.html",
              "refsource": "CONFIRM",
              "url": "http://www.oracle.com/technetwork/security-advisory/cpujan2017-2881727.html"
            },
            {
              "name": "DSA-3770",
              "refsource": "DEBIAN",
              "url": "http://www.debian.org/security/2017/dsa-3770"
            },
            {
              "name": "RHSA-2017:2192",
              "refsource": "REDHAT",
              "url": "https://access.redhat.com/errata/RHSA-2017:2192"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "43595867-4340-4103-b7a2-9a5208d29a85",
    "assignerShortName": "oracle",
    "cveId": "CVE-2017-3312",
    "datePublished": "2017-01-27T22:01:00",
    "dateReserved": "2016-12-06T00:00:00",
    "dateUpdated": "2024-10-08T20:34:53.133Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

CVE-2016-5483 (GCVE-0-2016-5483)

Vulnerability from cvelistv5

DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2017-3600. Reason: This candidate is a reservation duplicate of CVE-2017-3600. Notes: All CVE users should reference CVE-2017-3600 instead of this candidate. All references and descriptions in this candidate have been removed to prevent accidental usage

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "cna": {
      "providerMetadata": {
        "dateUpdated": "2017-04-25T18:57:01",
        "orgId": "43595867-4340-4103-b7a2-9a5208d29a85",
        "shortName": "oracle"
      },
      "rejectedReasons": [
        {
          "lang": "en",
          "value": "DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: CVE-2017-3600.  Reason: This candidate is a reservation duplicate of CVE-2017-3600.  Notes: All CVE users should reference CVE-2017-3600 instead of this candidate. All references and descriptions in this candidate have been removed to prevent accidental usage"
        }
      ]
    }
  },
  "cveMetadata": {
    "assignerOrgId": "43595867-4340-4103-b7a2-9a5208d29a85",
    "assignerShortName": "oracle",
    "cveId": "CVE-2016-5483",
    "datePublished": "2017-04-25T19:00:00",
    "dateRejected": "2017-04-25T18:57:01",
    "dateReserved": "2016-06-16T00:00:00",
    "dateUpdated": "2017-04-25T18:57:01",
    "state": "REJECTED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.0"
}

CVE-2017-3308 (GCVE-0-2017-3308)

Vulnerability from cvelistv5

Published

2017-04-24 19:00

Modified

2024-10-07 16:21

Severity ?

CWE

Easily "exploitable" vulnerability allows low privileged attacker with network access via multiple protocols to compromise MySQL Server. While the vulnerability is in MySQL Server, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server.

Summary

Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: DML). Supported versions that are affected are 5.5.54 and earlier, 5.6.35 and earlier and 5.7.17 and earlier. Easily "exploitable" vulnerability allows low privileged attacker with network access via multiple protocols to compromise MySQL Server. While the vulnerability is in MySQL Server, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.0 Base Score 7.7 (Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H).

References

URL

Tags

	https://access.redhat.com/errata/RHSA-2017:2787	vendor-advisory, x_refsource_REDHAT
	http://www.securitytracker.com/id/1038287	vdb-entry, x_refsource_SECTRACK
	http://www.oracle.com/technetwork/security-advisory/cpuapr2017-3236618.html	x_refsource_CONFIRM
	https://access.redhat.com/errata/RHSA-2018:0574	vendor-advisory, x_refsource_REDHAT
	http://www.debian.org/security/2017/dsa-3944	vendor-advisory, x_refsource_DEBIAN
	https://access.redhat.com/errata/RHSA-2018:0279	vendor-advisory, x_refsource_REDHAT
	http://www.securityfocus.com/bid/97725	vdb-entry, x_refsource_BID
	http://www.debian.org/security/2017/dsa-3834	vendor-advisory, x_refsource_DEBIAN
	https://access.redhat.com/errata/RHSA-2017:2886	vendor-advisory, x_refsource_REDHAT
	https://access.redhat.com/errata/RHSA-2017:2192	vendor-advisory, x_refsource_REDHAT

Impacted products

	Vendor	Product	Version
	Oracle Corporation	MySQL Server	Version: 5.5.54 and earlier Version: 5.6.35 and earlier Version: 5.7.17 and earlier

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-05T14:23:33.697Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "name": "RHSA-2017:2787",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2017:2787"
          },
          {
            "name": "1038287",
            "tags": [
              "vdb-entry",
              "x_refsource_SECTRACK",
              "x_transferred"
            ],
            "url": "http://www.securitytracker.com/id/1038287"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://www.oracle.com/technetwork/security-advisory/cpuapr2017-3236618.html"
          },
          {
            "name": "RHSA-2018:0574",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2018:0574"
          },
          {
            "name": "DSA-3944",
            "tags": [
              "vendor-advisory",
              "x_refsource_DEBIAN",
              "x_transferred"
            ],
            "url": "http://www.debian.org/security/2017/dsa-3944"
          },
          {
            "name": "RHSA-2018:0279",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2018:0279"
          },
          {
            "name": "97725",
            "tags": [
              "vdb-entry",
              "x_refsource_BID",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/bid/97725"
          },
          {
            "name": "DSA-3834",
            "tags": [
              "vendor-advisory",
              "x_refsource_DEBIAN",
              "x_transferred"
            ],
            "url": "http://www.debian.org/security/2017/dsa-3834"
          },
          {
            "name": "RHSA-2017:2886",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2017:2886"
          },
          {
            "name": "RHSA-2017:2192",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2017:2192"
          }
        ],
        "title": "CVE Program Container"
      },
      {
        "metrics": [
          {
            "other": {
              "content": {
                "id": "CVE-2017-3308",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "partial"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2024-10-07T15:46:18.576498Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2024-10-07T16:21:57.126Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "MySQL Server",
          "vendor": "Oracle Corporation",
          "versions": [
            {
              "status": "affected",
              "version": "5.5.54 and earlier"
            },
            {
              "status": "affected",
              "version": "5.6.35 and earlier"
            },
            {
              "status": "affected",
              "version": "5.7.17 and earlier"
            }
          ]
        }
      ],
      "datePublic": "2017-04-18T00:00:00",
      "descriptions": [
        {
          "lang": "en",
          "value": "Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: DML). Supported versions that are affected are 5.5.54 and earlier, 5.6.35 and earlier and 5.7.17 and earlier. Easily \"exploitable\" vulnerability allows low privileged attacker with network access via multiple protocols to compromise MySQL Server. While the vulnerability is in MySQL Server, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.0 Base Score 7.7 (Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H)."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "Easily \"exploitable\" vulnerability allows low privileged attacker with network access via multiple protocols to compromise MySQL Server.  While the vulnerability is in MySQL Server, attacks may significantly impact additional products.  Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server.",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2018-03-22T09:57:01",
        "orgId": "43595867-4340-4103-b7a2-9a5208d29a85",
        "shortName": "oracle"
      },
      "references": [
        {
          "name": "RHSA-2017:2787",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2017:2787"
        },
        {
          "name": "1038287",
          "tags": [
            "vdb-entry",
            "x_refsource_SECTRACK"
          ],
          "url": "http://www.securitytracker.com/id/1038287"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://www.oracle.com/technetwork/security-advisory/cpuapr2017-3236618.html"
        },
        {
          "name": "RHSA-2018:0574",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2018:0574"
        },
        {
          "name": "DSA-3944",
          "tags": [
            "vendor-advisory",
            "x_refsource_DEBIAN"
          ],
          "url": "http://www.debian.org/security/2017/dsa-3944"
        },
        {
          "name": "RHSA-2018:0279",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2018:0279"
        },
        {
          "name": "97725",
          "tags": [
            "vdb-entry",
            "x_refsource_BID"
          ],
          "url": "http://www.securityfocus.com/bid/97725"
        },
        {
          "name": "DSA-3834",
          "tags": [
            "vendor-advisory",
            "x_refsource_DEBIAN"
          ],
          "url": "http://www.debian.org/security/2017/dsa-3834"
        },
        {
          "name": "RHSA-2017:2886",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2017:2886"
        },
        {
          "name": "RHSA-2017:2192",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2017:2192"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "secalert_us@oracle.com",
          "ID": "CVE-2017-3308",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "MySQL Server",
                      "version": {
                        "version_data": [
                          {
                            "version_affected": "=",
                            "version_value": "5.5.54 and earlier"
                          },
                          {
                            "version_affected": "=",
                            "version_value": "5.6.35 and earlier"
                          },
                          {
                            "version_affected": "=",
                            "version_value": "5.7.17 and earlier"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "Oracle Corporation"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: DML). Supported versions that are affected are 5.5.54 and earlier, 5.6.35 and earlier and 5.7.17 and earlier. Easily \"exploitable\" vulnerability allows low privileged attacker with network access via multiple protocols to compromise MySQL Server. While the vulnerability is in MySQL Server, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.0 Base Score 7.7 (Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H)."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "Easily \"exploitable\" vulnerability allows low privileged attacker with network access via multiple protocols to compromise MySQL Server.  While the vulnerability is in MySQL Server, attacks may significantly impact additional products.  Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server."
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "RHSA-2017:2787",
              "refsource": "REDHAT",
              "url": "https://access.redhat.com/errata/RHSA-2017:2787"
            },
            {
              "name": "1038287",
              "refsource": "SECTRACK",
              "url": "http://www.securitytracker.com/id/1038287"
            },
            {
              "name": "http://www.oracle.com/technetwork/security-advisory/cpuapr2017-3236618.html",
              "refsource": "CONFIRM",
              "url": "http://www.oracle.com/technetwork/security-advisory/cpuapr2017-3236618.html"
            },
            {
              "name": "RHSA-2018:0574",
              "refsource": "REDHAT",
              "url": "https://access.redhat.com/errata/RHSA-2018:0574"
            },
            {
              "name": "DSA-3944",
              "refsource": "DEBIAN",
              "url": "http://www.debian.org/security/2017/dsa-3944"
            },
            {
              "name": "RHSA-2018:0279",
              "refsource": "REDHAT",
              "url": "https://access.redhat.com/errata/RHSA-2018:0279"
            },
            {
              "name": "97725",
              "refsource": "BID",
              "url": "http://www.securityfocus.com/bid/97725"
            },
            {
              "name": "DSA-3834",
              "refsource": "DEBIAN",
              "url": "http://www.debian.org/security/2017/dsa-3834"
            },
            {
              "name": "RHSA-2017:2886",
              "refsource": "REDHAT",
              "url": "https://access.redhat.com/errata/RHSA-2017:2886"
            },
            {
              "name": "RHSA-2017:2192",
              "refsource": "REDHAT",
              "url": "https://access.redhat.com/errata/RHSA-2017:2192"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "43595867-4340-4103-b7a2-9a5208d29a85",
    "assignerShortName": "oracle",
    "cveId": "CVE-2017-3308",
    "datePublished": "2017-04-24T19:00:00",
    "dateReserved": "2016-12-06T00:00:00",
    "dateUpdated": "2024-10-07T16:21:57.126Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

CVE-2017-3633 (GCVE-0-2017-3633)

Vulnerability from cvelistv5

Published

2017-08-08 15:00

Modified

2024-10-04 17:03

Severity ?

CWE

Difficult to exploit vulnerability allows unauthenticated attacker with network access via Memcached to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server as well as unauthorized update, insert or delete access to some of MySQL Server accessible data.

Summary

Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Memcached). Supported versions that are affected are 5.6.36 and earlier and 5.7.18 and earlier. Difficult to exploit vulnerability allows unauthenticated attacker with network access via Memcached to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server as well as unauthorized update, insert or delete access to some of MySQL Server accessible data. CVSS 3.0 Base Score 6.5 (Integrity and Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:H).

References

URL

Tags

	https://access.redhat.com/errata/RHSA-2017:2787	vendor-advisory, x_refsource_REDHAT
	http://www.oracle.com/technetwork/security-advisory/cpujul2018-4258247.html	x_refsource_CONFIRM
	http://www.securitytracker.com/id/1038928	vdb-entry, x_refsource_SECTRACK
	http://www.securityfocus.com/bid/99722	vdb-entry, x_refsource_BID
	https://access.redhat.com/errata/RHSA-2017:2886	vendor-advisory, x_refsource_REDHAT
	http://www.oracle.com/technetwork/security-advisory/cpujul2017-3236622.html	x_refsource_CONFIRM

Impacted products

Vendor

Product

Version

Oracle Corporation

MySQL Server

Version: 5.6.36 and earlier
Version: 5.7.18 and earlier

Oracle Corporation

Communications Policy Management

Version: 12.x

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-05T14:30:58.974Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "name": "RHSA-2017:2787",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2017:2787"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://www.oracle.com/technetwork/security-advisory/cpujul2018-4258247.html"
          },
          {
            "name": "1038928",
            "tags": [
              "vdb-entry",
              "x_refsource_SECTRACK",
              "x_transferred"
            ],
            "url": "http://www.securitytracker.com/id/1038928"
          },
          {
            "name": "99722",
            "tags": [
              "vdb-entry",
              "x_refsource_BID",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/bid/99722"
          },
          {
            "name": "RHSA-2017:2886",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2017:2886"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://www.oracle.com/technetwork/security-advisory/cpujul2017-3236622.html"
          }
        ],
        "title": "CVE Program Container"
      },
      {
        "metrics": [
          {
            "other": {
              "content": {
                "id": "CVE-2017-3633",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "partial"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2024-10-04T15:48:30.455147Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2024-10-04T17:03:24.008Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "MySQL Server",
          "vendor": "Oracle Corporation",
          "versions": [
            {
              "status": "affected",
              "version": "5.6.36 and earlier"
            },
            {
              "status": "affected",
              "version": "5.7.18 and earlier"
            }
          ]
        },
        {
          "product": "Communications Policy Management",
          "vendor": "Oracle Corporation",
          "versions": [
            {
              "status": "affected",
              "version": "12.x"
            }
          ]
        }
      ],
      "datePublic": "2017-07-18T00:00:00",
      "descriptions": [
        {
          "lang": "en",
          "value": "Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Memcached). Supported versions that are affected are 5.6.36 and earlier and 5.7.18 and earlier. Difficult to exploit vulnerability allows unauthenticated attacker with network access via Memcached to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server as well as unauthorized update, insert or delete access to some of MySQL Server accessible data. CVSS 3.0 Base Score 6.5 (Integrity and Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:H)."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "Difficult to exploit vulnerability allows unauthenticated attacker with network access via Memcached to compromise MySQL Server.  Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server as well as  unauthorized update, insert or delete access to some of MySQL Server accessible data.",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2018-07-18T12:57:01",
        "orgId": "43595867-4340-4103-b7a2-9a5208d29a85",
        "shortName": "oracle"
      },
      "references": [
        {
          "name": "RHSA-2017:2787",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2017:2787"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://www.oracle.com/technetwork/security-advisory/cpujul2018-4258247.html"
        },
        {
          "name": "1038928",
          "tags": [
            "vdb-entry",
            "x_refsource_SECTRACK"
          ],
          "url": "http://www.securitytracker.com/id/1038928"
        },
        {
          "name": "99722",
          "tags": [
            "vdb-entry",
            "x_refsource_BID"
          ],
          "url": "http://www.securityfocus.com/bid/99722"
        },
        {
          "name": "RHSA-2017:2886",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2017:2886"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://www.oracle.com/technetwork/security-advisory/cpujul2017-3236622.html"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "secalert_us@oracle.com",
          "ID": "CVE-2017-3633",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "MySQL Server",
                      "version": {
                        "version_data": [
                          {
                            "version_affected": "=",
                            "version_value": "5.6.36 and earlier"
                          },
                          {
                            "version_affected": "=",
                            "version_value": "5.7.18 and earlier"
                          }
                        ]
                      }
                    },
                    {
                      "product_name": "Communications Policy Management",
                      "version": {
                        "version_data": [
                          {
                            "version_affected": "=",
                            "version_value": "12.x"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "Oracle Corporation"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Memcached). Supported versions that are affected are 5.6.36 and earlier and 5.7.18 and earlier. Difficult to exploit vulnerability allows unauthenticated attacker with network access via Memcached to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server as well as unauthorized update, insert or delete access to some of MySQL Server accessible data. CVSS 3.0 Base Score 6.5 (Integrity and Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:H)."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "Difficult to exploit vulnerability allows unauthenticated attacker with network access via Memcached to compromise MySQL Server.  Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server as well as  unauthorized update, insert or delete access to some of MySQL Server accessible data."
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "RHSA-2017:2787",
              "refsource": "REDHAT",
              "url": "https://access.redhat.com/errata/RHSA-2017:2787"
            },
            {
              "name": "http://www.oracle.com/technetwork/security-advisory/cpujul2018-4258247.html",
              "refsource": "CONFIRM",
              "url": "http://www.oracle.com/technetwork/security-advisory/cpujul2018-4258247.html"
            },
            {
              "name": "1038928",
              "refsource": "SECTRACK",
              "url": "http://www.securitytracker.com/id/1038928"
            },
            {
              "name": "99722",
              "refsource": "BID",
              "url": "http://www.securityfocus.com/bid/99722"
            },
            {
              "name": "RHSA-2017:2886",
              "refsource": "REDHAT",
              "url": "https://access.redhat.com/errata/RHSA-2017:2886"
            },
            {
              "name": "http://www.oracle.com/technetwork/security-advisory/cpujul2017-3236622.html",
              "refsource": "CONFIRM",
              "url": "http://www.oracle.com/technetwork/security-advisory/cpujul2017-3236622.html"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "43595867-4340-4103-b7a2-9a5208d29a85",
    "assignerShortName": "oracle",
    "cveId": "CVE-2017-3633",
    "datePublished": "2017-08-08T15:00:00",
    "dateReserved": "2016-12-06T00:00:00",
    "dateUpdated": "2024-10-04T17:03:24.008Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

CVE-2017-3651 (GCVE-0-2017-3651)

Vulnerability from cvelistv5

Published

2017-08-08 15:00

Modified

2024-10-04 17:01

Severity ?

CWE

Easily exploitable vulnerability allows low privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of MySQL Server accessible data.

Summary

Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Client mysqldump). Supported versions that are affected are 5.5.56 and earlier, 5.6.36 and earlier and 5.7.18 and earlier. Easily exploitable vulnerability allows low privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of MySQL Server accessible data. CVSS 3.0 Base Score 4.3 (Integrity impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N).

References

URL

Tags

	https://access.redhat.com/errata/RHSA-2017:2787	vendor-advisory, x_refsource_REDHAT
	https://access.redhat.com/errata/RHSA-2018:2729	vendor-advisory, x_refsource_REDHAT
	http://www.securitytracker.com/id/1038928	vdb-entry, x_refsource_SECTRACK
	http://www.securityfocus.com/bid/99802	vdb-entry, x_refsource_BID
	http://rhn.redhat.com/errata/RHSA-2016-2927.html	vendor-advisory, x_refsource_REDHAT
	https://access.redhat.com/errata/RHSA-2018:2439	vendor-advisory, x_refsource_REDHAT
	http://www.debian.org/security/2017/dsa-3922	vendor-advisory, x_refsource_DEBIAN
	https://access.redhat.com/errata/RHSA-2017:2886	vendor-advisory, x_refsource_REDHAT
	http://www.oracle.com/technetwork/security-advisory/cpujul2017-3236622.html	x_refsource_CONFIRM
	http://rhn.redhat.com/errata/RHSA-2016-2928.html	vendor-advisory, x_refsource_REDHAT
	https://access.redhat.com/errata/RHSA-2017:2192	vendor-advisory, x_refsource_REDHAT

Impacted products

	Vendor	Product	Version
	Oracle Corporation	MySQL Server	Version: 5.5.56 and earlier Version: 5.6.36 and earlier Version: 5.7.18 and earlier

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-05T14:39:40.702Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "name": "RHSA-2017:2787",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2017:2787"
          },
          {
            "name": "RHSA-2018:2729",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2018:2729"
          },
          {
            "name": "1038928",
            "tags": [
              "vdb-entry",
              "x_refsource_SECTRACK",
              "x_transferred"
            ],
            "url": "http://www.securitytracker.com/id/1038928"
          },
          {
            "name": "99802",
            "tags": [
              "vdb-entry",
              "x_refsource_BID",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/bid/99802"
          },
          {
            "name": "RHSA-2016:2927",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://rhn.redhat.com/errata/RHSA-2016-2927.html"
          },
          {
            "name": "RHSA-2018:2439",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2018:2439"
          },
          {
            "name": "DSA-3922",
            "tags": [
              "vendor-advisory",
              "x_refsource_DEBIAN",
              "x_transferred"
            ],
            "url": "http://www.debian.org/security/2017/dsa-3922"
          },
          {
            "name": "RHSA-2017:2886",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2017:2886"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://www.oracle.com/technetwork/security-advisory/cpujul2017-3236622.html"
          },
          {
            "name": "RHSA-2016:2928",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://rhn.redhat.com/errata/RHSA-2016-2928.html"
          },
          {
            "name": "RHSA-2017:2192",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2017:2192"
          }
        ],
        "title": "CVE Program Container"
      },
      {
        "metrics": [
          {
            "other": {
              "content": {
                "id": "CVE-2017-3651",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "partial"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2024-10-04T15:47:44.475749Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2024-10-04T17:01:18.393Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "MySQL Server",
          "vendor": "Oracle Corporation",
          "versions": [
            {
              "status": "affected",
              "version": "5.5.56 and earlier"
            },
            {
              "status": "affected",
              "version": "5.6.36 and earlier"
            },
            {
              "status": "affected",
              "version": "5.7.18 and earlier"
            }
          ]
        }
      ],
      "datePublic": "2017-07-18T00:00:00",
      "descriptions": [
        {
          "lang": "en",
          "value": "Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Client mysqldump). Supported versions that are affected are 5.5.56 and earlier, 5.6.36 and earlier and 5.7.18 and earlier. Easily exploitable vulnerability allows low privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of MySQL Server accessible data. CVSS 3.0 Base Score 4.3 (Integrity impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N)."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "Easily exploitable vulnerability allows low privileged attacker with network access via multiple protocols to compromise MySQL Server.  Successful attacks of this vulnerability can result in  unauthorized update, insert or delete access to some of MySQL Server accessible data.",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2018-09-21T09:57:01",
        "orgId": "43595867-4340-4103-b7a2-9a5208d29a85",
        "shortName": "oracle"
      },
      "references": [
        {
          "name": "RHSA-2017:2787",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2017:2787"
        },
        {
          "name": "RHSA-2018:2729",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2018:2729"
        },
        {
          "name": "1038928",
          "tags": [
            "vdb-entry",
            "x_refsource_SECTRACK"
          ],
          "url": "http://www.securitytracker.com/id/1038928"
        },
        {
          "name": "99802",
          "tags": [
            "vdb-entry",
            "x_refsource_BID"
          ],
          "url": "http://www.securityfocus.com/bid/99802"
        },
        {
          "name": "RHSA-2016:2927",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://rhn.redhat.com/errata/RHSA-2016-2927.html"
        },
        {
          "name": "RHSA-2018:2439",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2018:2439"
        },
        {
          "name": "DSA-3922",
          "tags": [
            "vendor-advisory",
            "x_refsource_DEBIAN"
          ],
          "url": "http://www.debian.org/security/2017/dsa-3922"
        },
        {
          "name": "RHSA-2017:2886",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2017:2886"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://www.oracle.com/technetwork/security-advisory/cpujul2017-3236622.html"
        },
        {
          "name": "RHSA-2016:2928",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://rhn.redhat.com/errata/RHSA-2016-2928.html"
        },
        {
          "name": "RHSA-2017:2192",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2017:2192"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "secalert_us@oracle.com",
          "ID": "CVE-2017-3651",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "MySQL Server",
                      "version": {
                        "version_data": [
                          {
                            "version_affected": "=",
                            "version_value": "5.5.56 and earlier"
                          },
                          {
                            "version_affected": "=",
                            "version_value": "5.6.36 and earlier"
                          },
                          {
                            "version_affected": "=",
                            "version_value": "5.7.18 and earlier"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "Oracle Corporation"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Client mysqldump). Supported versions that are affected are 5.5.56 and earlier, 5.6.36 and earlier and 5.7.18 and earlier. Easily exploitable vulnerability allows low privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of MySQL Server accessible data. CVSS 3.0 Base Score 4.3 (Integrity impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N)."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "Easily exploitable vulnerability allows low privileged attacker with network access via multiple protocols to compromise MySQL Server.  Successful attacks of this vulnerability can result in  unauthorized update, insert or delete access to some of MySQL Server accessible data."
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "RHSA-2017:2787",
              "refsource": "REDHAT",
              "url": "https://access.redhat.com/errata/RHSA-2017:2787"
            },
            {
              "name": "RHSA-2018:2729",
              "refsource": "REDHAT",
              "url": "https://access.redhat.com/errata/RHSA-2018:2729"
            },
            {
              "name": "1038928",
              "refsource": "SECTRACK",
              "url": "http://www.securitytracker.com/id/1038928"
            },
            {
              "name": "99802",
              "refsource": "BID",
              "url": "http://www.securityfocus.com/bid/99802"
            },
            {
              "name": "RHSA-2016:2927",
              "refsource": "REDHAT",
              "url": "http://rhn.redhat.com/errata/RHSA-2016-2927.html"
            },
            {
              "name": "RHSA-2018:2439",
              "refsource": "REDHAT",
              "url": "https://access.redhat.com/errata/RHSA-2018:2439"
            },
            {
              "name": "DSA-3922",
              "refsource": "DEBIAN",
              "url": "http://www.debian.org/security/2017/dsa-3922"
            },
            {
              "name": "RHSA-2017:2886",
              "refsource": "REDHAT",
              "url": "https://access.redhat.com/errata/RHSA-2017:2886"
            },
            {
              "name": "http://www.oracle.com/technetwork/security-advisory/cpujul2017-3236622.html",
              "refsource": "CONFIRM",
              "url": "http://www.oracle.com/technetwork/security-advisory/cpujul2017-3236622.html"
            },
            {
              "name": "RHSA-2016:2928",
              "refsource": "REDHAT",
              "url": "http://rhn.redhat.com/errata/RHSA-2016-2928.html"
            },
            {
              "name": "RHSA-2017:2192",
              "refsource": "REDHAT",
              "url": "https://access.redhat.com/errata/RHSA-2017:2192"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "43595867-4340-4103-b7a2-9a5208d29a85",
    "assignerShortName": "oracle",
    "cveId": "CVE-2017-3651",
    "datePublished": "2017-08-08T15:00:00",
    "dateReserved": "2016-12-06T00:00:00",
    "dateUpdated": "2024-10-04T17:01:18.393Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

CVE-2017-3600 (GCVE-0-2017-3600)

Vulnerability from cvelistv5

Published

2017-04-24 19:00

Modified

2024-10-04 19:18

Severity ?

CWE

Difficult to exploit vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in takeover of MySQL Server.

Summary

Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Client mysqldump). Supported versions that are affected are 5.5.54 and earlier, 5.6.35 and earlier and 5.7.17 and earlier. Difficult to exploit vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in takeover of MySQL Server. Note: CVE-2017-3600 is equivalent to CVE-2016-5483. CVSS 3.0 Base Score 6.6 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H).

References

URL

Tags

	https://access.redhat.com/errata/RHSA-2017:2787	vendor-advisory, x_refsource_REDHAT
	http://www.securitytracker.com/id/1038287	vdb-entry, x_refsource_SECTRACK
	http://www.oracle.com/technetwork/security-advisory/cpuapr2017-3236618.html	x_refsource_CONFIRM
	http://rhn.redhat.com/errata/RHSA-2016-2927.html	vendor-advisory, x_refsource_REDHAT
	http://www.debian.org/security/2017/dsa-3834	vendor-advisory, x_refsource_DEBIAN
	https://access.redhat.com/errata/RHSA-2017:2886	vendor-advisory, x_refsource_REDHAT
	http://www.securityfocus.com/bid/97765	vdb-entry, x_refsource_BID
	http://rhn.redhat.com/errata/RHSA-2016-2928.html	vendor-advisory, x_refsource_REDHAT
	https://access.redhat.com/errata/RHSA-2017:2192	vendor-advisory, x_refsource_REDHAT

Impacted products

	Vendor	Product	Version
	Oracle Corporation	MySQL Server	Version: 5.5.54 and earlier Version: 5.6.35 and earlier Version: 5.7.17 and earlier

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-05T14:30:58.630Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "name": "RHSA-2017:2787",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2017:2787"
          },
          {
            "name": "1038287",
            "tags": [
              "vdb-entry",
              "x_refsource_SECTRACK",
              "x_transferred"
            ],
            "url": "http://www.securitytracker.com/id/1038287"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://www.oracle.com/technetwork/security-advisory/cpuapr2017-3236618.html"
          },
          {
            "name": "RHSA-2016:2927",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://rhn.redhat.com/errata/RHSA-2016-2927.html"
          },
          {
            "name": "DSA-3834",
            "tags": [
              "vendor-advisory",
              "x_refsource_DEBIAN",
              "x_transferred"
            ],
            "url": "http://www.debian.org/security/2017/dsa-3834"
          },
          {
            "name": "RHSA-2017:2886",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2017:2886"
          },
          {
            "name": "97765",
            "tags": [
              "vdb-entry",
              "x_refsource_BID",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/bid/97765"
          },
          {
            "name": "RHSA-2016:2928",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://rhn.redhat.com/errata/RHSA-2016-2928.html"
          },
          {
            "name": "RHSA-2017:2192",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2017:2192"
          }
        ],
        "title": "CVE Program Container"
      },
      {
        "metrics": [
          {
            "other": {
              "content": {
                "id": "CVE-2017-3600",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "total"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2024-10-04T16:21:49.705835Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2024-10-04T19:18:40.595Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "MySQL Server",
          "vendor": "Oracle Corporation",
          "versions": [
            {
              "status": "affected",
              "version": "5.5.54 and earlier"
            },
            {
              "status": "affected",
              "version": "5.6.35 and earlier"
            },
            {
              "status": "affected",
              "version": "5.7.17 and earlier"
            }
          ]
        }
      ],
      "datePublic": "2017-04-18T00:00:00",
      "descriptions": [
        {
          "lang": "en",
          "value": "Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Client mysqldump). Supported versions that are affected are 5.5.54 and earlier, 5.6.35 and earlier and 5.7.17 and earlier. Difficult to exploit vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in takeover of MySQL Server. Note: CVE-2017-3600 is equivalent to CVE-2016-5483. CVSS 3.0 Base Score 6.6 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H)."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "Difficult to exploit vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server.  Successful attacks of this vulnerability can result in takeover of MySQL Server.",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2018-01-04T19:57:01",
        "orgId": "43595867-4340-4103-b7a2-9a5208d29a85",
        "shortName": "oracle"
      },
      "references": [
        {
          "name": "RHSA-2017:2787",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2017:2787"
        },
        {
          "name": "1038287",
          "tags": [
            "vdb-entry",
            "x_refsource_SECTRACK"
          ],
          "url": "http://www.securitytracker.com/id/1038287"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://www.oracle.com/technetwork/security-advisory/cpuapr2017-3236618.html"
        },
        {
          "name": "RHSA-2016:2927",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://rhn.redhat.com/errata/RHSA-2016-2927.html"
        },
        {
          "name": "DSA-3834",
          "tags": [
            "vendor-advisory",
            "x_refsource_DEBIAN"
          ],
          "url": "http://www.debian.org/security/2017/dsa-3834"
        },
        {
          "name": "RHSA-2017:2886",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2017:2886"
        },
        {
          "name": "97765",
          "tags": [
            "vdb-entry",
            "x_refsource_BID"
          ],
          "url": "http://www.securityfocus.com/bid/97765"
        },
        {
          "name": "RHSA-2016:2928",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://rhn.redhat.com/errata/RHSA-2016-2928.html"
        },
        {
          "name": "RHSA-2017:2192",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2017:2192"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "secalert_us@oracle.com",
          "ID": "CVE-2017-3600",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "MySQL Server",
                      "version": {
                        "version_data": [
                          {
                            "version_affected": "=",
                            "version_value": "5.5.54 and earlier"
                          },
                          {
                            "version_affected": "=",
                            "version_value": "5.6.35 and earlier"
                          },
                          {
                            "version_affected": "=",
                            "version_value": "5.7.17 and earlier"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "Oracle Corporation"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Client mysqldump). Supported versions that are affected are 5.5.54 and earlier, 5.6.35 and earlier and 5.7.17 and earlier. Difficult to exploit vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in takeover of MySQL Server. Note: CVE-2017-3600 is equivalent to CVE-2016-5483. CVSS 3.0 Base Score 6.6 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H)."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "Difficult to exploit vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server.  Successful attacks of this vulnerability can result in takeover of MySQL Server."
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "RHSA-2017:2787",
              "refsource": "REDHAT",
              "url": "https://access.redhat.com/errata/RHSA-2017:2787"
            },
            {
              "name": "1038287",
              "refsource": "SECTRACK",
              "url": "http://www.securitytracker.com/id/1038287"
            },
            {
              "name": "http://www.oracle.com/technetwork/security-advisory/cpuapr2017-3236618.html",
              "refsource": "CONFIRM",
              "url": "http://www.oracle.com/technetwork/security-advisory/cpuapr2017-3236618.html"
            },
            {
              "name": "RHSA-2016:2927",
              "refsource": "REDHAT",
              "url": "http://rhn.redhat.com/errata/RHSA-2016-2927.html"
            },
            {
              "name": "DSA-3834",
              "refsource": "DEBIAN",
              "url": "http://www.debian.org/security/2017/dsa-3834"
            },
            {
              "name": "RHSA-2017:2886",
              "refsource": "REDHAT",
              "url": "https://access.redhat.com/errata/RHSA-2017:2886"
            },
            {
              "name": "97765",
              "refsource": "BID",
              "url": "http://www.securityfocus.com/bid/97765"
            },
            {
              "name": "RHSA-2016:2928",
              "refsource": "REDHAT",
              "url": "http://rhn.redhat.com/errata/RHSA-2016-2928.html"
            },
            {
              "name": "RHSA-2017:2192",
              "refsource": "REDHAT",
              "url": "https://access.redhat.com/errata/RHSA-2017:2192"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "43595867-4340-4103-b7a2-9a5208d29a85",
    "assignerShortName": "oracle",
    "cveId": "CVE-2017-3600",
    "datePublished": "2017-04-24T19:00:00",
    "dateReserved": "2016-12-06T00:00:00",
    "dateUpdated": "2024-10-04T19:18:40.595Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

CVE-2017-3647 (GCVE-0-2017-3647)

Vulnerability from cvelistv5

Published

2017-08-08 15:00

Modified

2024-10-04 17:01

Severity ?

CWE

Difficult to exploit vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server.

Summary

Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Replication). Supported versions that are affected are 5.6.36 and earlier and 5.7.18 and earlier. Difficult to exploit vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.0 Base Score 4.4 (Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:H).

References

URL

Tags

	https://access.redhat.com/errata/RHSA-2017:2787	vendor-advisory, x_refsource_REDHAT
	http://www.securitytracker.com/id/1038928	vdb-entry, x_refsource_SECTRACK
	https://access.redhat.com/errata/RHSA-2017:2886	vendor-advisory, x_refsource_REDHAT
	http://www.oracle.com/technetwork/security-advisory/cpujul2017-3236622.html	x_refsource_CONFIRM
	http://www.securityfocus.com/bid/99796	vdb-entry, x_refsource_BID

Impacted products

	Vendor	Product	Version
	Oracle Corporation	MySQL Server	Version: 5.6.36 and earlier Version: 5.7.18 and earlier

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-05T14:30:58.964Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "name": "RHSA-2017:2787",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2017:2787"
          },
          {
            "name": "1038928",
            "tags": [
              "vdb-entry",
              "x_refsource_SECTRACK",
              "x_transferred"
            ],
            "url": "http://www.securitytracker.com/id/1038928"
          },
          {
            "name": "RHSA-2017:2886",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2017:2886"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://www.oracle.com/technetwork/security-advisory/cpujul2017-3236622.html"
          },
          {
            "name": "99796",
            "tags": [
              "vdb-entry",
              "x_refsource_BID",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/bid/99796"
          }
        ],
        "title": "CVE Program Container"
      },
      {
        "metrics": [
          {
            "other": {
              "content": {
                "id": "CVE-2017-3647",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "partial"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2024-10-04T15:47:56.062629Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2024-10-04T17:01:44.930Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "MySQL Server",
          "vendor": "Oracle Corporation",
          "versions": [
            {
              "status": "affected",
              "version": "5.6.36 and earlier"
            },
            {
              "status": "affected",
              "version": "5.7.18 and earlier"
            }
          ]
        }
      ],
      "datePublic": "2017-07-18T00:00:00",
      "descriptions": [
        {
          "lang": "en",
          "value": "Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Replication). Supported versions that are affected are 5.6.36 and earlier and 5.7.18 and earlier. Difficult to exploit vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.0 Base Score 4.4 (Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:H)."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "Difficult to exploit vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server.  Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server.",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2017-12-08T10:57:01",
        "orgId": "43595867-4340-4103-b7a2-9a5208d29a85",
        "shortName": "oracle"
      },
      "references": [
        {
          "name": "RHSA-2017:2787",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2017:2787"
        },
        {
          "name": "1038928",
          "tags": [
            "vdb-entry",
            "x_refsource_SECTRACK"
          ],
          "url": "http://www.securitytracker.com/id/1038928"
        },
        {
          "name": "RHSA-2017:2886",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2017:2886"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://www.oracle.com/technetwork/security-advisory/cpujul2017-3236622.html"
        },
        {
          "name": "99796",
          "tags": [
            "vdb-entry",
            "x_refsource_BID"
          ],
          "url": "http://www.securityfocus.com/bid/99796"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "secalert_us@oracle.com",
          "ID": "CVE-2017-3647",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "MySQL Server",
                      "version": {
                        "version_data": [
                          {
                            "version_affected": "=",
                            "version_value": "5.6.36 and earlier"
                          },
                          {
                            "version_affected": "=",
                            "version_value": "5.7.18 and earlier"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "Oracle Corporation"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Replication). Supported versions that are affected are 5.6.36 and earlier and 5.7.18 and earlier. Difficult to exploit vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.0 Base Score 4.4 (Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:H)."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "Difficult to exploit vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server.  Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server."
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "RHSA-2017:2787",
              "refsource": "REDHAT",
              "url": "https://access.redhat.com/errata/RHSA-2017:2787"
            },
            {
              "name": "1038928",
              "refsource": "SECTRACK",
              "url": "http://www.securitytracker.com/id/1038928"
            },
            {
              "name": "RHSA-2017:2886",
              "refsource": "REDHAT",
              "url": "https://access.redhat.com/errata/RHSA-2017:2886"
            },
            {
              "name": "http://www.oracle.com/technetwork/security-advisory/cpujul2017-3236622.html",
              "refsource": "CONFIRM",
              "url": "http://www.oracle.com/technetwork/security-advisory/cpujul2017-3236622.html"
            },
            {
              "name": "99796",
              "refsource": "BID",
              "url": "http://www.securityfocus.com/bid/99796"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "43595867-4340-4103-b7a2-9a5208d29a85",
    "assignerShortName": "oracle",
    "cveId": "CVE-2017-3647",
    "datePublished": "2017-08-08T15:00:00",
    "dateReserved": "2016-12-06T00:00:00",
    "dateUpdated": "2024-10-04T17:01:44.930Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

CVE-2017-3291 (GCVE-0-2017-3291)

Vulnerability from cvelistv5

Published

2017-01-27 22:01

Modified

2024-10-08 20:36

Severity ?

CWE

CVSS:3.0/AV:L/AC:H/PR:H/UI:R/S:U/C:H/I:H/A:H

Summary

Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Packaging). Supported versions that are affected are 5.5.53 and earlier, 5.6.34 and earlier and 5.7.16 and earlier. Difficult to exploit vulnerability allows high privileged attacker with logon to the infrastructure where MySQL Server executes to compromise MySQL Server. Successful attacks require human interaction from a person other than the attacker. Successful attacks of this vulnerability can result in takeover of MySQL Server. CVSS v3.0 Base Score 6.3 (Confidentiality, Integrity and Availability impacts).

References

URL

Tags

	https://access.redhat.com/errata/RHSA-2017:2787	vendor-advisory, x_refsource_REDHAT
	http://www.securityfocus.com/bid/95501	vdb-entry, x_refsource_BID
	https://security.gentoo.org/glsa/201702-17	vendor-advisory, x_refsource_GENTOO
	https://access.redhat.com/errata/RHSA-2018:0574	vendor-advisory, x_refsource_REDHAT
	https://security.gentoo.org/glsa/201702-18	vendor-advisory, x_refsource_GENTOO
	http://www.securitytracker.com/id/1037640	vdb-entry, x_refsource_SECTRACK
	https://access.redhat.com/errata/RHSA-2018:0279	vendor-advisory, x_refsource_REDHAT
	http://www.debian.org/security/2017/dsa-3767	vendor-advisory, x_refsource_DEBIAN
	https://access.redhat.com/errata/RHSA-2017:2886	vendor-advisory, x_refsource_REDHAT
	http://www.oracle.com/technetwork/security-advisory/cpujan2017-2881727.html	x_refsource_CONFIRM
	http://www.debian.org/security/2017/dsa-3770	vendor-advisory, x_refsource_DEBIAN
	https://access.redhat.com/errata/RHSA-2017:2192	vendor-advisory, x_refsource_REDHAT

Impacted products

	Vendor	Product	Version
	n/a	MySQL Server 5.5.53andearlier;5.6.34andearlier;5.7.16andearlier	Version: MySQL Server 5.5.53andearlier;5.6.34andearlier;5.7.16andearlier

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-05T14:23:33.774Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "name": "RHSA-2017:2787",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2017:2787"
          },
          {
            "name": "95501",
            "tags": [
              "vdb-entry",
              "x_refsource_BID",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/bid/95501"
          },
          {
            "name": "GLSA-201702-17",
            "tags": [
              "vendor-advisory",
              "x_refsource_GENTOO",
              "x_transferred"
            ],
            "url": "https://security.gentoo.org/glsa/201702-17"
          },
          {
            "name": "RHSA-2018:0574",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2018:0574"
          },
          {
            "name": "GLSA-201702-18",
            "tags": [
              "vendor-advisory",
              "x_refsource_GENTOO",
              "x_transferred"
            ],
            "url": "https://security.gentoo.org/glsa/201702-18"
          },
          {
            "name": "1037640",
            "tags": [
              "vdb-entry",
              "x_refsource_SECTRACK",
              "x_transferred"
            ],
            "url": "http://www.securitytracker.com/id/1037640"
          },
          {
            "name": "RHSA-2018:0279",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2018:0279"
          },
          {
            "name": "DSA-3767",
            "tags": [
              "vendor-advisory",
              "x_refsource_DEBIAN",
              "x_transferred"
            ],
            "url": "http://www.debian.org/security/2017/dsa-3767"
          },
          {
            "name": "RHSA-2017:2886",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2017:2886"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://www.oracle.com/technetwork/security-advisory/cpujan2017-2881727.html"
          },
          {
            "name": "DSA-3770",
            "tags": [
              "vendor-advisory",
              "x_refsource_DEBIAN",
              "x_transferred"
            ],
            "url": "http://www.debian.org/security/2017/dsa-3770"
          },
          {
            "name": "RHSA-2017:2192",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2017:2192"
          }
        ],
        "title": "CVE Program Container"
      },
      {
        "metrics": [
          {
            "other": {
              "content": {
                "id": "CVE-2017-3291",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "total"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2024-10-08T20:06:04.184886Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2024-10-08T20:36:49.306Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "MySQL Server 5.5.53andearlier;5.6.34andearlier;5.7.16andearlier",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "MySQL Server 5.5.53andearlier;5.6.34andearlier;5.7.16andearlier"
            }
          ]
        }
      ],
      "datePublic": "2017-01-17T00:00:00",
      "descriptions": [
        {
          "lang": "en",
          "value": "Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Packaging). Supported versions that are affected are 5.5.53 and earlier, 5.6.34 and earlier and 5.7.16 and earlier. Difficult to exploit vulnerability allows high privileged attacker with logon to the infrastructure where MySQL Server executes to compromise MySQL Server. Successful attacks require human interaction from a person other than the attacker. Successful attacks of this vulnerability can result in takeover of MySQL Server. CVSS v3.0 Base Score 6.3 (Confidentiality, Integrity and Availability impacts)."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "CVSS:3.0/AV:L/AC:H/PR:H/UI:R/S:U/C:H/I:H/A:H",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2018-03-22T09:57:01",
        "orgId": "43595867-4340-4103-b7a2-9a5208d29a85",
        "shortName": "oracle"
      },
      "references": [
        {
          "name": "RHSA-2017:2787",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2017:2787"
        },
        {
          "name": "95501",
          "tags": [
            "vdb-entry",
            "x_refsource_BID"
          ],
          "url": "http://www.securityfocus.com/bid/95501"
        },
        {
          "name": "GLSA-201702-17",
          "tags": [
            "vendor-advisory",
            "x_refsource_GENTOO"
          ],
          "url": "https://security.gentoo.org/glsa/201702-17"
        },
        {
          "name": "RHSA-2018:0574",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2018:0574"
        },
        {
          "name": "GLSA-201702-18",
          "tags": [
            "vendor-advisory",
            "x_refsource_GENTOO"
          ],
          "url": "https://security.gentoo.org/glsa/201702-18"
        },
        {
          "name": "1037640",
          "tags": [
            "vdb-entry",
            "x_refsource_SECTRACK"
          ],
          "url": "http://www.securitytracker.com/id/1037640"
        },
        {
          "name": "RHSA-2018:0279",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2018:0279"
        },
        {
          "name": "DSA-3767",
          "tags": [
            "vendor-advisory",
            "x_refsource_DEBIAN"
          ],
          "url": "http://www.debian.org/security/2017/dsa-3767"
        },
        {
          "name": "RHSA-2017:2886",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2017:2886"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://www.oracle.com/technetwork/security-advisory/cpujan2017-2881727.html"
        },
        {
          "name": "DSA-3770",
          "tags": [
            "vendor-advisory",
            "x_refsource_DEBIAN"
          ],
          "url": "http://www.debian.org/security/2017/dsa-3770"
        },
        {
          "name": "RHSA-2017:2192",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2017:2192"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "secalert_us@oracle.com",
          "ID": "CVE-2017-3291",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "MySQL Server 5.5.53andearlier;5.6.34andearlier;5.7.16andearlier",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "MySQL Server 5.5.53andearlier;5.6.34andearlier;5.7.16andearlier"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "n/a"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Packaging). Supported versions that are affected are 5.5.53 and earlier, 5.6.34 and earlier and 5.7.16 and earlier. Difficult to exploit vulnerability allows high privileged attacker with logon to the infrastructure where MySQL Server executes to compromise MySQL Server. Successful attacks require human interaction from a person other than the attacker. Successful attacks of this vulnerability can result in takeover of MySQL Server. CVSS v3.0 Base Score 6.3 (Confidentiality, Integrity and Availability impacts)."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "CVSS:3.0/AV:L/AC:H/PR:H/UI:R/S:U/C:H/I:H/A:H"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "RHSA-2017:2787",
              "refsource": "REDHAT",
              "url": "https://access.redhat.com/errata/RHSA-2017:2787"
            },
            {
              "name": "95501",
              "refsource": "BID",
              "url": "http://www.securityfocus.com/bid/95501"
            },
            {
              "name": "GLSA-201702-17",
              "refsource": "GENTOO",
              "url": "https://security.gentoo.org/glsa/201702-17"
            },
            {
              "name": "RHSA-2018:0574",
              "refsource": "REDHAT",
              "url": "https://access.redhat.com/errata/RHSA-2018:0574"
            },
            {
              "name": "GLSA-201702-18",
              "refsource": "GENTOO",
              "url": "https://security.gentoo.org/glsa/201702-18"
            },
            {
              "name": "1037640",
              "refsource": "SECTRACK",
              "url": "http://www.securitytracker.com/id/1037640"
            },
            {
              "name": "RHSA-2018:0279",
              "refsource": "REDHAT",
              "url": "https://access.redhat.com/errata/RHSA-2018:0279"
            },
            {
              "name": "DSA-3767",
              "refsource": "DEBIAN",
              "url": "http://www.debian.org/security/2017/dsa-3767"
            },
            {
              "name": "RHSA-2017:2886",
              "refsource": "REDHAT",
              "url": "https://access.redhat.com/errata/RHSA-2017:2886"
            },
            {
              "name": "http://www.oracle.com/technetwork/security-advisory/cpujan2017-2881727.html",
              "refsource": "CONFIRM",
              "url": "http://www.oracle.com/technetwork/security-advisory/cpujan2017-2881727.html"
            },
            {
              "name": "DSA-3770",
              "refsource": "DEBIAN",
              "url": "http://www.debian.org/security/2017/dsa-3770"
            },
            {
              "name": "RHSA-2017:2192",
              "refsource": "REDHAT",
              "url": "https://access.redhat.com/errata/RHSA-2017:2192"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "43595867-4340-4103-b7a2-9a5208d29a85",
    "assignerShortName": "oracle",
    "cveId": "CVE-2017-3291",
    "datePublished": "2017-01-27T22:01:00",
    "dateReserved": "2016-12-06T00:00:00",
    "dateUpdated": "2024-10-08T20:36:49.306Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

CVE-2017-3257 (GCVE-0-2017-3257)

Vulnerability from cvelistv5

Published

2017-01-27 22:01

Modified

2024-10-09 19:40

Severity ?

CWE

CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Summary

Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: InnoDB). Supported versions that are affected are 5.6.34 and earlier5.7.16 and earlier. Easily exploitable vulnerability allows low privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS v3.0 Base Score 6.5 (Availability impacts).

References

URL

Tags

	https://access.redhat.com/errata/RHSA-2017:2787	vendor-advisory, x_refsource_REDHAT
	https://security.gentoo.org/glsa/201702-17	vendor-advisory, x_refsource_GENTOO
	https://access.redhat.com/errata/RHSA-2018:0574	vendor-advisory, x_refsource_REDHAT
	https://security.gentoo.org/glsa/201702-18	vendor-advisory, x_refsource_GENTOO
	http://www.securitytracker.com/id/1037640	vdb-entry, x_refsource_SECTRACK
	https://access.redhat.com/errata/RHSA-2018:0279	vendor-advisory, x_refsource_REDHAT
	http://www.securityfocus.com/bid/95589	vdb-entry, x_refsource_BID
	https://access.redhat.com/errata/RHSA-2017:2886	vendor-advisory, x_refsource_REDHAT
	http://www.oracle.com/technetwork/security-advisory/cpujan2017-2881727.html	x_refsource_CONFIRM
	http://www.debian.org/security/2017/dsa-3770	vendor-advisory, x_refsource_DEBIAN

Impacted products

	Vendor	Product	Version
	Oracle	MySQL Server	Version: 5.6.34 and earlier Version: 5.7.16 and earlier

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-05T14:23:33.185Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "name": "RHSA-2017:2787",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2017:2787"
          },
          {
            "name": "GLSA-201702-17",
            "tags": [
              "vendor-advisory",
              "x_refsource_GENTOO",
              "x_transferred"
            ],
            "url": "https://security.gentoo.org/glsa/201702-17"
          },
          {
            "name": "RHSA-2018:0574",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2018:0574"
          },
          {
            "name": "GLSA-201702-18",
            "tags": [
              "vendor-advisory",
              "x_refsource_GENTOO",
              "x_transferred"
            ],
            "url": "https://security.gentoo.org/glsa/201702-18"
          },
          {
            "name": "1037640",
            "tags": [
              "vdb-entry",
              "x_refsource_SECTRACK",
              "x_transferred"
            ],
            "url": "http://www.securitytracker.com/id/1037640"
          },
          {
            "name": "RHSA-2018:0279",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2018:0279"
          },
          {
            "name": "95589",
            "tags": [
              "vdb-entry",
              "x_refsource_BID",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/bid/95589"
          },
          {
            "name": "RHSA-2017:2886",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2017:2886"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://www.oracle.com/technetwork/security-advisory/cpujan2017-2881727.html"
          },
          {
            "name": "DSA-3770",
            "tags": [
              "vendor-advisory",
              "x_refsource_DEBIAN",
              "x_transferred"
            ],
            "url": "http://www.debian.org/security/2017/dsa-3770"
          }
        ],
        "title": "CVE Program Container"
      },
      {
        "metrics": [
          {
            "other": {
              "content": {
                "id": "CVE-2017-3257",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "partial"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2024-10-09T19:30:12.766294Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2024-10-09T19:40:40.335Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "MySQL Server",
          "vendor": "Oracle",
          "versions": [
            {
              "status": "affected",
              "version": "5.6.34 and earlier"
            },
            {
              "status": "affected",
              "version": "5.7.16 and earlier"
            }
          ]
        }
      ],
      "datePublic": "2017-01-17T00:00:00",
      "descriptions": [
        {
          "lang": "en",
          "value": "Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: InnoDB). Supported versions that are affected are 5.6.34 and earlier5.7.16 and earlier. Easily exploitable vulnerability allows low privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS v3.0 Base Score 6.5 (Availability impacts)."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2018-03-22T09:57:01",
        "orgId": "43595867-4340-4103-b7a2-9a5208d29a85",
        "shortName": "oracle"
      },
      "references": [
        {
          "name": "RHSA-2017:2787",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2017:2787"
        },
        {
          "name": "GLSA-201702-17",
          "tags": [
            "vendor-advisory",
            "x_refsource_GENTOO"
          ],
          "url": "https://security.gentoo.org/glsa/201702-17"
        },
        {
          "name": "RHSA-2018:0574",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2018:0574"
        },
        {
          "name": "GLSA-201702-18",
          "tags": [
            "vendor-advisory",
            "x_refsource_GENTOO"
          ],
          "url": "https://security.gentoo.org/glsa/201702-18"
        },
        {
          "name": "1037640",
          "tags": [
            "vdb-entry",
            "x_refsource_SECTRACK"
          ],
          "url": "http://www.securitytracker.com/id/1037640"
        },
        {
          "name": "RHSA-2018:0279",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2018:0279"
        },
        {
          "name": "95589",
          "tags": [
            "vdb-entry",
            "x_refsource_BID"
          ],
          "url": "http://www.securityfocus.com/bid/95589"
        },
        {
          "name": "RHSA-2017:2886",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2017:2886"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://www.oracle.com/technetwork/security-advisory/cpujan2017-2881727.html"
        },
        {
          "name": "DSA-3770",
          "tags": [
            "vendor-advisory",
            "x_refsource_DEBIAN"
          ],
          "url": "http://www.debian.org/security/2017/dsa-3770"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "secalert_us@oracle.com",
          "ID": "CVE-2017-3257",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "MySQL Server",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "5.6.34 and earlier"
                          },
                          {
                            "version_value": "5.7.16 and earlier"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "Oracle"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: InnoDB). Supported versions that are affected are 5.6.34 and earlier5.7.16 and earlier. Easily exploitable vulnerability allows low privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS v3.0 Base Score 6.5 (Availability impacts)."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "RHSA-2017:2787",
              "refsource": "REDHAT",
              "url": "https://access.redhat.com/errata/RHSA-2017:2787"
            },
            {
              "name": "GLSA-201702-17",
              "refsource": "GENTOO",
              "url": "https://security.gentoo.org/glsa/201702-17"
            },
            {
              "name": "RHSA-2018:0574",
              "refsource": "REDHAT",
              "url": "https://access.redhat.com/errata/RHSA-2018:0574"
            },
            {
              "name": "GLSA-201702-18",
              "refsource": "GENTOO",
              "url": "https://security.gentoo.org/glsa/201702-18"
            },
            {
              "name": "1037640",
              "refsource": "SECTRACK",
              "url": "http://www.securitytracker.com/id/1037640"
            },
            {
              "name": "RHSA-2018:0279",
              "refsource": "REDHAT",
              "url": "https://access.redhat.com/errata/RHSA-2018:0279"
            },
            {
              "name": "95589",
              "refsource": "BID",
              "url": "http://www.securityfocus.com/bid/95589"
            },
            {
              "name": "RHSA-2017:2886",
              "refsource": "REDHAT",
              "url": "https://access.redhat.com/errata/RHSA-2017:2886"
            },
            {
              "name": "http://www.oracle.com/technetwork/security-advisory/cpujan2017-2881727.html",
              "refsource": "CONFIRM",
              "url": "http://www.oracle.com/technetwork/security-advisory/cpujan2017-2881727.html"
            },
            {
              "name": "DSA-3770",
              "refsource": "DEBIAN",
              "url": "http://www.debian.org/security/2017/dsa-3770"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "43595867-4340-4103-b7a2-9a5208d29a85",
    "assignerShortName": "oracle",
    "cveId": "CVE-2017-3257",
    "datePublished": "2017-01-27T22:01:00",
    "dateReserved": "2016-12-06T00:00:00",
    "dateUpdated": "2024-10-09T19:40:40.335Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

CVE-2017-3273 (GCVE-0-2017-3273)

Vulnerability from cvelistv5

Published

2017-01-27 22:01

Modified

2024-10-09 19:36

Severity ?

CWE

CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Summary

Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: DDL). Supported versions that are affected are 5.6.34 and earlier and 5.7.16 and earlier. Easily exploitable vulnerability allows low privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS v3.0 Base Score 6.5 (Availability impacts).

References

URL

Tags

	https://access.redhat.com/errata/RHSA-2017:2787	vendor-advisory, x_refsource_REDHAT
	https://security.gentoo.org/glsa/201702-17	vendor-advisory, x_refsource_GENTOO
	http://www.securityfocus.com/bid/95583	vdb-entry, x_refsource_BID
	http://www.securitytracker.com/id/1037640	vdb-entry, x_refsource_SECTRACK
	https://access.redhat.com/errata/RHSA-2017:2886	vendor-advisory, x_refsource_REDHAT
	http://www.oracle.com/technetwork/security-advisory/cpujan2017-2881727.html	x_refsource_CONFIRM

Impacted products

	Vendor	Product	Version
	Oracle	MySQL Server	Version: 5.6.34 and earlier Version: 5.7.16 and earlier

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-05T14:23:34.309Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "name": "RHSA-2017:2787",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2017:2787"
          },
          {
            "name": "GLSA-201702-17",
            "tags": [
              "vendor-advisory",
              "x_refsource_GENTOO",
              "x_transferred"
            ],
            "url": "https://security.gentoo.org/glsa/201702-17"
          },
          {
            "name": "95583",
            "tags": [
              "vdb-entry",
              "x_refsource_BID",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/bid/95583"
          },
          {
            "name": "1037640",
            "tags": [
              "vdb-entry",
              "x_refsource_SECTRACK",
              "x_transferred"
            ],
            "url": "http://www.securitytracker.com/id/1037640"
          },
          {
            "name": "RHSA-2017:2886",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2017:2886"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://www.oracle.com/technetwork/security-advisory/cpujan2017-2881727.html"
          }
        ],
        "title": "CVE Program Container"
      },
      {
        "metrics": [
          {
            "other": {
              "content": {
                "id": "CVE-2017-3273",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "partial"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2024-10-09T19:30:03.966427Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2024-10-09T19:36:25.726Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "MySQL Server",
          "vendor": "Oracle",
          "versions": [
            {
              "status": "affected",
              "version": "5.6.34 and earlier"
            },
            {
              "status": "affected",
              "version": "5.7.16 and earlier"
            }
          ]
        }
      ],
      "datePublic": "2017-01-17T00:00:00",
      "descriptions": [
        {
          "lang": "en",
          "value": "Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: DDL). Supported versions that are affected are 5.6.34 and earlier and 5.7.16 and earlier. Easily exploitable vulnerability allows low privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS v3.0 Base Score 6.5 (Availability impacts)."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2017-12-08T10:57:01",
        "orgId": "43595867-4340-4103-b7a2-9a5208d29a85",
        "shortName": "oracle"
      },
      "references": [
        {
          "name": "RHSA-2017:2787",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2017:2787"
        },
        {
          "name": "GLSA-201702-17",
          "tags": [
            "vendor-advisory",
            "x_refsource_GENTOO"
          ],
          "url": "https://security.gentoo.org/glsa/201702-17"
        },
        {
          "name": "95583",
          "tags": [
            "vdb-entry",
            "x_refsource_BID"
          ],
          "url": "http://www.securityfocus.com/bid/95583"
        },
        {
          "name": "1037640",
          "tags": [
            "vdb-entry",
            "x_refsource_SECTRACK"
          ],
          "url": "http://www.securitytracker.com/id/1037640"
        },
        {
          "name": "RHSA-2017:2886",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2017:2886"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://www.oracle.com/technetwork/security-advisory/cpujan2017-2881727.html"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "secalert_us@oracle.com",
          "ID": "CVE-2017-3273",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "MySQL Server",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "5.6.34 and earlier"
                          },
                          {
                            "version_value": "5.7.16 and earlier"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "Oracle"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: DDL). Supported versions that are affected are 5.6.34 and earlier and 5.7.16 and earlier. Easily exploitable vulnerability allows low privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS v3.0 Base Score 6.5 (Availability impacts)."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "RHSA-2017:2787",
              "refsource": "REDHAT",
              "url": "https://access.redhat.com/errata/RHSA-2017:2787"
            },
            {
              "name": "GLSA-201702-17",
              "refsource": "GENTOO",
              "url": "https://security.gentoo.org/glsa/201702-17"
            },
            {
              "name": "95583",
              "refsource": "BID",
              "url": "http://www.securityfocus.com/bid/95583"
            },
            {
              "name": "1037640",
              "refsource": "SECTRACK",
              "url": "http://www.securitytracker.com/id/1037640"
            },
            {
              "name": "RHSA-2017:2886",
              "refsource": "REDHAT",
              "url": "https://access.redhat.com/errata/RHSA-2017:2886"
            },
            {
              "name": "http://www.oracle.com/technetwork/security-advisory/cpujan2017-2881727.html",
              "refsource": "CONFIRM",
              "url": "http://www.oracle.com/technetwork/security-advisory/cpujan2017-2881727.html"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "43595867-4340-4103-b7a2-9a5208d29a85",
    "assignerShortName": "oracle",
    "cveId": "CVE-2017-3273",
    "datePublished": "2017-01-27T22:01:00",
    "dateReserved": "2016-12-06T00:00:00",
    "dateUpdated": "2024-10-09T19:36:25.726Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

CVE-2017-3464 (GCVE-0-2017-3464)

Vulnerability from cvelistv5

Published

2017-04-24 19:00

Modified

2024-10-07 16:18

Severity ?

CWE

Easily "exploitable" vulnerability allows low privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of MySQL Server accessible data.

Summary

Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: DDL). Supported versions that are affected are 5.5.54 and earlier, 5.6.35 and earlier and 5.7.17 and earlier. Easily "exploitable" vulnerability allows low privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of MySQL Server accessible data. CVSS 3.0 Base Score 4.3 (Integrity impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N).

References

URL

Tags

	https://access.redhat.com/errata/RHSA-2017:2787	vendor-advisory, x_refsource_REDHAT
	http://www.securitytracker.com/id/1038287	vdb-entry, x_refsource_SECTRACK
	http://www.oracle.com/technetwork/security-advisory/cpuapr2017-3236618.html	x_refsource_CONFIRM
	https://access.redhat.com/errata/RHSA-2018:0574	vendor-advisory, x_refsource_REDHAT
	http://www.securityfocus.com/bid/97818	vdb-entry, x_refsource_BID
	http://www.debian.org/security/2017/dsa-3944	vendor-advisory, x_refsource_DEBIAN
	https://access.redhat.com/errata/RHSA-2018:0279	vendor-advisory, x_refsource_REDHAT
	http://www.debian.org/security/2017/dsa-3834	vendor-advisory, x_refsource_DEBIAN
	https://access.redhat.com/errata/RHSA-2017:2886	vendor-advisory, x_refsource_REDHAT
	https://access.redhat.com/errata/RHSA-2017:2192	vendor-advisory, x_refsource_REDHAT

Impacted products

	Vendor	Product	Version
	Oracle Corporation	MySQL Server	Version: 5.5.54 and earlier Version: 5.6.35 and earlier Version: 5.7.17 and earlier

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-05T14:30:56.811Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "name": "RHSA-2017:2787",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2017:2787"
          },
          {
            "name": "1038287",
            "tags": [
              "vdb-entry",
              "x_refsource_SECTRACK",
              "x_transferred"
            ],
            "url": "http://www.securitytracker.com/id/1038287"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://www.oracle.com/technetwork/security-advisory/cpuapr2017-3236618.html"
          },
          {
            "name": "RHSA-2018:0574",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2018:0574"
          },
          {
            "name": "97818",
            "tags": [
              "vdb-entry",
              "x_refsource_BID",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/bid/97818"
          },
          {
            "name": "DSA-3944",
            "tags": [
              "vendor-advisory",
              "x_refsource_DEBIAN",
              "x_transferred"
            ],
            "url": "http://www.debian.org/security/2017/dsa-3944"
          },
          {
            "name": "RHSA-2018:0279",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2018:0279"
          },
          {
            "name": "DSA-3834",
            "tags": [
              "vendor-advisory",
              "x_refsource_DEBIAN",
              "x_transferred"
            ],
            "url": "http://www.debian.org/security/2017/dsa-3834"
          },
          {
            "name": "RHSA-2017:2886",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2017:2886"
          },
          {
            "name": "RHSA-2017:2192",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2017:2192"
          }
        ],
        "title": "CVE Program Container"
      },
      {
        "metrics": [
          {
            "other": {
              "content": {
                "id": "CVE-2017-3464",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "partial"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2024-10-07T15:45:55.660486Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2024-10-07T16:18:54.996Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "MySQL Server",
          "vendor": "Oracle Corporation",
          "versions": [
            {
              "status": "affected",
              "version": "5.5.54 and earlier"
            },
            {
              "status": "affected",
              "version": "5.6.35 and earlier"
            },
            {
              "status": "affected",
              "version": "5.7.17 and earlier"
            }
          ]
        }
      ],
      "datePublic": "2017-04-18T00:00:00",
      "descriptions": [
        {
          "lang": "en",
          "value": "Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: DDL). Supported versions that are affected are 5.5.54 and earlier, 5.6.35 and earlier and 5.7.17 and earlier. Easily \"exploitable\" vulnerability allows low privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of MySQL Server accessible data. CVSS 3.0 Base Score 4.3 (Integrity impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N)."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "Easily \"exploitable\" vulnerability allows low privileged attacker with network access via multiple protocols to compromise MySQL Server.  Successful attacks of this vulnerability can result in  unauthorized update, insert or delete access to some of MySQL Server accessible data.",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2018-03-22T09:57:01",
        "orgId": "43595867-4340-4103-b7a2-9a5208d29a85",
        "shortName": "oracle"
      },
      "references": [
        {
          "name": "RHSA-2017:2787",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2017:2787"
        },
        {
          "name": "1038287",
          "tags": [
            "vdb-entry",
            "x_refsource_SECTRACK"
          ],
          "url": "http://www.securitytracker.com/id/1038287"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://www.oracle.com/technetwork/security-advisory/cpuapr2017-3236618.html"
        },
        {
          "name": "RHSA-2018:0574",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2018:0574"
        },
        {
          "name": "97818",
          "tags": [
            "vdb-entry",
            "x_refsource_BID"
          ],
          "url": "http://www.securityfocus.com/bid/97818"
        },
        {
          "name": "DSA-3944",
          "tags": [
            "vendor-advisory",
            "x_refsource_DEBIAN"
          ],
          "url": "http://www.debian.org/security/2017/dsa-3944"
        },
        {
          "name": "RHSA-2018:0279",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2018:0279"
        },
        {
          "name": "DSA-3834",
          "tags": [
            "vendor-advisory",
            "x_refsource_DEBIAN"
          ],
          "url": "http://www.debian.org/security/2017/dsa-3834"
        },
        {
          "name": "RHSA-2017:2886",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2017:2886"
        },
        {
          "name": "RHSA-2017:2192",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2017:2192"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "secalert_us@oracle.com",
          "ID": "CVE-2017-3464",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "MySQL Server",
                      "version": {
                        "version_data": [
                          {
                            "version_affected": "=",
                            "version_value": "5.5.54 and earlier"
                          },
                          {
                            "version_affected": "=",
                            "version_value": "5.6.35 and earlier"
                          },
                          {
                            "version_affected": "=",
                            "version_value": "5.7.17 and earlier"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "Oracle Corporation"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: DDL). Supported versions that are affected are 5.5.54 and earlier, 5.6.35 and earlier and 5.7.17 and earlier. Easily \"exploitable\" vulnerability allows low privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of MySQL Server accessible data. CVSS 3.0 Base Score 4.3 (Integrity impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N)."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "Easily \"exploitable\" vulnerability allows low privileged attacker with network access via multiple protocols to compromise MySQL Server.  Successful attacks of this vulnerability can result in  unauthorized update, insert or delete access to some of MySQL Server accessible data."
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "RHSA-2017:2787",
              "refsource": "REDHAT",
              "url": "https://access.redhat.com/errata/RHSA-2017:2787"
            },
            {
              "name": "1038287",
              "refsource": "SECTRACK",
              "url": "http://www.securitytracker.com/id/1038287"
            },
            {
              "name": "http://www.oracle.com/technetwork/security-advisory/cpuapr2017-3236618.html",
              "refsource": "CONFIRM",
              "url": "http://www.oracle.com/technetwork/security-advisory/cpuapr2017-3236618.html"
            },
            {
              "name": "RHSA-2018:0574",
              "refsource": "REDHAT",
              "url": "https://access.redhat.com/errata/RHSA-2018:0574"
            },
            {
              "name": "97818",
              "refsource": "BID",
              "url": "http://www.securityfocus.com/bid/97818"
            },
            {
              "name": "DSA-3944",
              "refsource": "DEBIAN",
              "url": "http://www.debian.org/security/2017/dsa-3944"
            },
            {
              "name": "RHSA-2018:0279",
              "refsource": "REDHAT",
              "url": "https://access.redhat.com/errata/RHSA-2018:0279"
            },
            {
              "name": "DSA-3834",
              "refsource": "DEBIAN",
              "url": "http://www.debian.org/security/2017/dsa-3834"
            },
            {
              "name": "RHSA-2017:2886",
              "refsource": "REDHAT",
              "url": "https://access.redhat.com/errata/RHSA-2017:2886"
            },
            {
              "name": "RHSA-2017:2192",
              "refsource": "REDHAT",
              "url": "https://access.redhat.com/errata/RHSA-2017:2192"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "43595867-4340-4103-b7a2-9a5208d29a85",
    "assignerShortName": "oracle",
    "cveId": "CVE-2017-3464",
    "datePublished": "2017-04-24T19:00:00",
    "dateReserved": "2016-12-06T00:00:00",
    "dateUpdated": "2024-10-07T16:18:54.996Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

CVE-2017-3653 (GCVE-0-2017-3653)

Vulnerability from cvelistv5

Published

2017-08-08 15:00

Modified

2024-10-04 17:01

Severity ?

CWE

Difficult to exploit vulnerability allows low privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of MySQL Server accessible data.

Summary

Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: DDL). Supported versions that are affected are 5.5.56 and earlier, 5.6.36 and earlier and 5.7.18 and earlier. Difficult to exploit vulnerability allows low privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of MySQL Server accessible data. CVSS 3.0 Base Score 3.1 (Integrity impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:H/PR:L/UI:N/S:U/C:N/I:L/A:N).

References

URL

Tags

	https://access.redhat.com/errata/RHSA-2017:2787	vendor-advisory, x_refsource_REDHAT
	https://access.redhat.com/errata/RHSA-2018:2729	vendor-advisory, x_refsource_REDHAT
	https://access.redhat.com/errata/RHSA-2018:0574	vendor-advisory, x_refsource_REDHAT
	http://www.debian.org/security/2017/dsa-3944	vendor-advisory, x_refsource_DEBIAN
	http://www.securitytracker.com/id/1038928	vdb-entry, x_refsource_SECTRACK
	https://www.debian.org/security/2017/dsa-3955	vendor-advisory, x_refsource_DEBIAN
	https://access.redhat.com/errata/RHSA-2018:0279	vendor-advisory, x_refsource_REDHAT
	https://access.redhat.com/errata/RHSA-2018:2439	vendor-advisory, x_refsource_REDHAT
	http://www.debian.org/security/2017/dsa-3922	vendor-advisory, x_refsource_DEBIAN
	http://www.securityfocus.com/bid/99810	vdb-entry, x_refsource_BID
	https://access.redhat.com/errata/RHSA-2017:2886	vendor-advisory, x_refsource_REDHAT
	http://www.oracle.com/technetwork/security-advisory/cpujul2017-3236622.html	x_refsource_CONFIRM

Impacted products

	Vendor	Product	Version
	Oracle Corporation	MySQL Server	Version: 5.5.56 and earlier Version: 5.6.36 and earlier Version: 5.7.18 and earlier

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-05T14:39:39.638Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "name": "RHSA-2017:2787",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2017:2787"
          },
          {
            "name": "RHSA-2018:2729",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2018:2729"
          },
          {
            "name": "RHSA-2018:0574",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2018:0574"
          },
          {
            "name": "DSA-3944",
            "tags": [
              "vendor-advisory",
              "x_refsource_DEBIAN",
              "x_transferred"
            ],
            "url": "http://www.debian.org/security/2017/dsa-3944"
          },
          {
            "name": "1038928",
            "tags": [
              "vdb-entry",
              "x_refsource_SECTRACK",
              "x_transferred"
            ],
            "url": "http://www.securitytracker.com/id/1038928"
          },
          {
            "name": "DSA-3955",
            "tags": [
              "vendor-advisory",
              "x_refsource_DEBIAN",
              "x_transferred"
            ],
            "url": "https://www.debian.org/security/2017/dsa-3955"
          },
          {
            "name": "RHSA-2018:0279",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2018:0279"
          },
          {
            "name": "RHSA-2018:2439",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2018:2439"
          },
          {
            "name": "DSA-3922",
            "tags": [
              "vendor-advisory",
              "x_refsource_DEBIAN",
              "x_transferred"
            ],
            "url": "http://www.debian.org/security/2017/dsa-3922"
          },
          {
            "name": "99810",
            "tags": [
              "vdb-entry",
              "x_refsource_BID",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/bid/99810"
          },
          {
            "name": "RHSA-2017:2886",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2017:2886"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://www.oracle.com/technetwork/security-advisory/cpujul2017-3236622.html"
          }
        ],
        "title": "CVE Program Container"
      },
      {
        "metrics": [
          {
            "other": {
              "content": {
                "id": "CVE-2017-3653",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "partial"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2024-10-04T15:47:41.128631Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2024-10-04T17:01:05.252Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "MySQL Server",
          "vendor": "Oracle Corporation",
          "versions": [
            {
              "status": "affected",
              "version": "5.5.56 and earlier"
            },
            {
              "status": "affected",
              "version": "5.6.36 and earlier"
            },
            {
              "status": "affected",
              "version": "5.7.18 and earlier"
            }
          ]
        }
      ],
      "datePublic": "2017-07-18T00:00:00",
      "descriptions": [
        {
          "lang": "en",
          "value": "Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: DDL). Supported versions that are affected are 5.5.56 and earlier, 5.6.36 and earlier and 5.7.18 and earlier. Difficult to exploit vulnerability allows low privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of MySQL Server accessible data. CVSS 3.0 Base Score 3.1 (Integrity impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:H/PR:L/UI:N/S:U/C:N/I:L/A:N)."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "Difficult to exploit vulnerability allows low privileged attacker with network access via multiple protocols to compromise MySQL Server.  Successful attacks of this vulnerability can result in  unauthorized update, insert or delete access to some of MySQL Server accessible data.",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2018-09-21T09:57:01",
        "orgId": "43595867-4340-4103-b7a2-9a5208d29a85",
        "shortName": "oracle"
      },
      "references": [
        {
          "name": "RHSA-2017:2787",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2017:2787"
        },
        {
          "name": "RHSA-2018:2729",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2018:2729"
        },
        {
          "name": "RHSA-2018:0574",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2018:0574"
        },
        {
          "name": "DSA-3944",
          "tags": [
            "vendor-advisory",
            "x_refsource_DEBIAN"
          ],
          "url": "http://www.debian.org/security/2017/dsa-3944"
        },
        {
          "name": "1038928",
          "tags": [
            "vdb-entry",
            "x_refsource_SECTRACK"
          ],
          "url": "http://www.securitytracker.com/id/1038928"
        },
        {
          "name": "DSA-3955",
          "tags": [
            "vendor-advisory",
            "x_refsource_DEBIAN"
          ],
          "url": "https://www.debian.org/security/2017/dsa-3955"
        },
        {
          "name": "RHSA-2018:0279",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2018:0279"
        },
        {
          "name": "RHSA-2018:2439",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2018:2439"
        },
        {
          "name": "DSA-3922",
          "tags": [
            "vendor-advisory",
            "x_refsource_DEBIAN"
          ],
          "url": "http://www.debian.org/security/2017/dsa-3922"
        },
        {
          "name": "99810",
          "tags": [
            "vdb-entry",
            "x_refsource_BID"
          ],
          "url": "http://www.securityfocus.com/bid/99810"
        },
        {
          "name": "RHSA-2017:2886",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2017:2886"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://www.oracle.com/technetwork/security-advisory/cpujul2017-3236622.html"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "secalert_us@oracle.com",
          "ID": "CVE-2017-3653",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "MySQL Server",
                      "version": {
                        "version_data": [
                          {
                            "version_affected": "=",
                            "version_value": "5.5.56 and earlier"
                          },
                          {
                            "version_affected": "=",
                            "version_value": "5.6.36 and earlier"
                          },
                          {
                            "version_affected": "=",
                            "version_value": "5.7.18 and earlier"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "Oracle Corporation"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: DDL). Supported versions that are affected are 5.5.56 and earlier, 5.6.36 and earlier and 5.7.18 and earlier. Difficult to exploit vulnerability allows low privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of MySQL Server accessible data. CVSS 3.0 Base Score 3.1 (Integrity impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:H/PR:L/UI:N/S:U/C:N/I:L/A:N)."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "Difficult to exploit vulnerability allows low privileged attacker with network access via multiple protocols to compromise MySQL Server.  Successful attacks of this vulnerability can result in  unauthorized update, insert or delete access to some of MySQL Server accessible data."
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "RHSA-2017:2787",
              "refsource": "REDHAT",
              "url": "https://access.redhat.com/errata/RHSA-2017:2787"
            },
            {
              "name": "RHSA-2018:2729",
              "refsource": "REDHAT",
              "url": "https://access.redhat.com/errata/RHSA-2018:2729"
            },
            {
              "name": "RHSA-2018:0574",
              "refsource": "REDHAT",
              "url": "https://access.redhat.com/errata/RHSA-2018:0574"
            },
            {
              "name": "DSA-3944",
              "refsource": "DEBIAN",
              "url": "http://www.debian.org/security/2017/dsa-3944"
            },
            {
              "name": "1038928",
              "refsource": "SECTRACK",
              "url": "http://www.securitytracker.com/id/1038928"
            },
            {
              "name": "DSA-3955",
              "refsource": "DEBIAN",
              "url": "https://www.debian.org/security/2017/dsa-3955"
            },
            {
              "name": "RHSA-2018:0279",
              "refsource": "REDHAT",
              "url": "https://access.redhat.com/errata/RHSA-2018:0279"
            },
            {
              "name": "RHSA-2018:2439",
              "refsource": "REDHAT",
              "url": "https://access.redhat.com/errata/RHSA-2018:2439"
            },
            {
              "name": "DSA-3922",
              "refsource": "DEBIAN",
              "url": "http://www.debian.org/security/2017/dsa-3922"
            },
            {
              "name": "99810",
              "refsource": "BID",
              "url": "http://www.securityfocus.com/bid/99810"
            },
            {
              "name": "RHSA-2017:2886",
              "refsource": "REDHAT",
              "url": "https://access.redhat.com/errata/RHSA-2017:2886"
            },
            {
              "name": "http://www.oracle.com/technetwork/security-advisory/cpujul2017-3236622.html",
              "refsource": "CONFIRM",
              "url": "http://www.oracle.com/technetwork/security-advisory/cpujul2017-3236622.html"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "43595867-4340-4103-b7a2-9a5208d29a85",
    "assignerShortName": "oracle",
    "cveId": "CVE-2017-3653",
    "datePublished": "2017-08-08T15:00:00",
    "dateReserved": "2016-12-06T00:00:00",
    "dateUpdated": "2024-10-04T17:01:05.252Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

CVE-2017-3649 (GCVE-0-2017-3649)

Vulnerability from cvelistv5

Published

2017-08-08 15:00

Modified

2024-10-04 17:01

Severity ?

CWE

Summary

References

URL

Tags

	https://access.redhat.com/errata/RHSA-2017:2787	vendor-advisory, x_refsource_REDHAT
	http://www.securitytracker.com/id/1038928	vdb-entry, x_refsource_SECTRACK
	http://www.securityfocus.com/bid/99799	vdb-entry, x_refsource_BID
	https://access.redhat.com/errata/RHSA-2017:2886	vendor-advisory, x_refsource_REDHAT
	http://www.oracle.com/technetwork/security-advisory/cpujul2017-3236622.html	x_refsource_CONFIRM

Impacted products

	Vendor	Product	Version
	n/a	n/a	Version: n/a

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-05T14:30:58.552Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "name": "RHSA-2017:2787",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2017:2787"
          },
          {
            "name": "1038928",
            "tags": [
              "vdb-entry",
              "x_refsource_SECTRACK",
              "x_transferred"
            ],
            "url": "http://www.securitytracker.com/id/1038928"
          },
          {
            "name": "99799",
            "tags": [
              "vdb-entry",
              "x_refsource_BID",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/bid/99799"
          },
          {
            "name": "RHSA-2017:2886",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2017:2886"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://www.oracle.com/technetwork/security-advisory/cpujul2017-3236622.html"
          }
        ],
        "title": "CVE Program Container"
      },
      {
        "metrics": [
          {
            "other": {
              "content": {
                "id": "CVE-2017-3649",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "partial"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2024-10-04T15:47:49.948399Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2024-10-04T17:01:31.768Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "datePublic": "2017-07-18T00:00:00",
      "descriptions": [
        {
          "lang": "en",
          "value": "Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Replication). Supported versions that are affected are 5.6.36 and earlier and 5.7.18 and earlier. Difficult to exploit vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.0 Base Score 4.4 (Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:H)."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "n/a",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2017-12-08T10:57:01",
        "orgId": "43595867-4340-4103-b7a2-9a5208d29a85",
        "shortName": "oracle"
      },
      "references": [
        {
          "name": "RHSA-2017:2787",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2017:2787"
        },
        {
          "name": "1038928",
          "tags": [
            "vdb-entry",
            "x_refsource_SECTRACK"
          ],
          "url": "http://www.securitytracker.com/id/1038928"
        },
        {
          "name": "99799",
          "tags": [
            "vdb-entry",
            "x_refsource_BID"
          ],
          "url": "http://www.securityfocus.com/bid/99799"
        },
        {
          "name": "RHSA-2017:2886",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2017:2886"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://www.oracle.com/technetwork/security-advisory/cpujul2017-3236622.html"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "secalert_us@oracle.com",
          "ID": "CVE-2017-3649",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "n/a",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "n/a"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "n/a"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Replication). Supported versions that are affected are 5.6.36 and earlier and 5.7.18 and earlier. Difficult to exploit vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.0 Base Score 4.4 (Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:H)."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "n/a"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "RHSA-2017:2787",
              "refsource": "REDHAT",
              "url": "https://access.redhat.com/errata/RHSA-2017:2787"
            },
            {
              "name": "1038928",
              "refsource": "SECTRACK",
              "url": "http://www.securitytracker.com/id/1038928"
            },
            {
              "name": "99799",
              "refsource": "BID",
              "url": "http://www.securityfocus.com/bid/99799"
            },
            {
              "name": "RHSA-2017:2886",
              "refsource": "REDHAT",
              "url": "https://access.redhat.com/errata/RHSA-2017:2886"
            },
            {
              "name": "http://www.oracle.com/technetwork/security-advisory/cpujul2017-3236622.html",
              "refsource": "CONFIRM",
              "url": "http://www.oracle.com/technetwork/security-advisory/cpujul2017-3236622.html"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "43595867-4340-4103-b7a2-9a5208d29a85",
    "assignerShortName": "oracle",
    "cveId": "CVE-2017-3649",
    "datePublished": "2017-08-08T15:00:00",
    "dateReserved": "2016-12-06T00:00:00",
    "dateUpdated": "2024-10-04T17:01:31.768Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

Tags

Taxonomy of the tags.

All sightings related to this event Export sightings related to this event

Sightings

Author	Source	Type	Date

Nomenclature

Seen: The vulnerability was mentioned, discussed, or seen somewhere by the user.
Confirmed: The vulnerability is confirmed from an analyst perspective.
Published Proof of Concept: A public proof of concept is available for this vulnerability.
Exploited: This vulnerability was exploited and seen by the user reporting the sighting.
Patched: This vulnerability was successfully patched by the user reporting the sighting.
Not exploited: This vulnerability was not exploited or seen by the user reporting the sighting.
Not confirmed: The user expresses doubt about the veracity of the vulnerability.
Not patched: This vulnerability was not successfully patched by the user reporting the sighting.

Action not permitted

rhsa-2017:2787

Vulnerability from csaf_redhat

CVE-2017-3648 (GCVE-0-2017-3648)

Vulnerability from cvelistv5

CVE-2017-3452 (GCVE-0-2017-3452)

Vulnerability from cvelistv5

CVE-2017-3636 (GCVE-0-2017-3636)

Vulnerability from cvelistv5

CVE-2017-3641 (GCVE-0-2017-3641)

Vulnerability from cvelistv5

CVE-2017-3258 (GCVE-0-2017-3258)

Vulnerability from cvelistv5

CVE-2017-3599 (GCVE-0-2017-3599)

Vulnerability from cvelistv5

CVE-2017-3456 (GCVE-0-2017-3456)

Vulnerability from cvelistv5

CVE-2017-3317 (GCVE-0-2017-3317)

Vulnerability from cvelistv5

CVE-2017-3462 (GCVE-0-2017-3462)

Vulnerability from cvelistv5

CVE-2017-3463 (GCVE-0-2017-3463)

Vulnerability from cvelistv5

CVE-2017-3238 (GCVE-0-2017-3238)

Vulnerability from cvelistv5

CVE-2016-8327 (GCVE-0-2016-8327)

Vulnerability from cvelistv5

CVE-2017-3265 (GCVE-0-2017-3265)

Vulnerability from cvelistv5

CVE-2017-3309 (GCVE-0-2017-3309)

Vulnerability from cvelistv5

CVE-2017-3652 (GCVE-0-2017-3652)

Vulnerability from cvelistv5

CVE-2017-3318 (GCVE-0-2017-3318)

Vulnerability from cvelistv5

CVE-2017-3461 (GCVE-0-2017-3461)

Vulnerability from cvelistv5

CVE-2017-3244 (GCVE-0-2017-3244)

Vulnerability from cvelistv5

CVE-2017-3453 (GCVE-0-2017-3453)

Vulnerability from cvelistv5

CVE-2017-3450 (GCVE-0-2017-3450)

Vulnerability from cvelistv5

CVE-2017-3302 (GCVE-0-2017-3302)

Vulnerability from cvelistv5

CVE-2017-3305 (GCVE-0-2017-3305)

Vulnerability from cvelistv5

CVE-2017-3313 (GCVE-0-2017-3313)

Vulnerability from cvelistv5

CVE-2017-3634 (GCVE-0-2017-3634)

Vulnerability from cvelistv5

CVE-2017-3312 (GCVE-0-2017-3312)

Vulnerability from cvelistv5

CVE-2016-5483 (GCVE-0-2016-5483)

Vulnerability from cvelistv5

CVE-2017-3308 (GCVE-0-2017-3308)

Vulnerability from cvelistv5

CVE-2017-3633 (GCVE-0-2017-3633)

Vulnerability from cvelistv5

CVE-2017-3651 (GCVE-0-2017-3651)

Vulnerability from cvelistv5

CVE-2017-3600 (GCVE-0-2017-3600)

Vulnerability from cvelistv5

CVE-2017-3647 (GCVE-0-2017-3647)

Vulnerability from cvelistv5

CVE-2017-3291 (GCVE-0-2017-3291)

Vulnerability from cvelistv5

CVE-2017-3257 (GCVE-0-2017-3257)

Vulnerability from cvelistv5

CVE-2017-3273 (GCVE-0-2017-3273)

Vulnerability from cvelistv5

CVE-2017-3464 (GCVE-0-2017-3464)

Vulnerability from cvelistv5

CVE-2017-3653 (GCVE-0-2017-3653)

Vulnerability from cvelistv5

CVE-2017-3649 (GCVE-0-2017-3649)

Vulnerability from cvelistv5

Tags

Sightings

Nomenclature