PT-2016-3057 · Mysql Server+6 · Mysql Server+6

Publicado

2016-12-24

·

Atualizado

2024-06-15

·

CVE-2017-3243

CVSS v3.1

4.4

Média

VetorAV:N/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:H
Name of the Vulnerable Software and Affected Versions MySQL Server versions 5.5.53 and earlier
Description The issue is related to a lack of protection for service data in the MySQL database management system. It can be exploited by a remote attacker to cause the system to hang or crash. The attack can be performed via network packets and may result in a denial of service (DOS). A high-privileged attacker with network access can compromise the MySQL Server.
Recommendations For versions 5.5.53 and earlier, update to a version that contains a fix for this issue to prevent exploitation. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

RCE

Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
dbugs@ptsecurity.com

Enumeração de Fraquezas

CWE-20

Identificadores relacionados

ALT-PU-2017-1061
ALT-PU-2017-1407
BDU:2017-00240
CESA-2017_2192
CVE-2017-3243
DLA-797-1
DSA-3767-1
DSA-3770-1
MGASA-2017-0054
OPENSUSE-SU-2017_0486-1
OPENSUSE-SU-2024:11038-1
RHSA-2017:2192
RHSA-2017_2192
RHSA-2018:0279
RHSA-2018:0574
SUSE-RU-2023:3956-1
SUSE-RU-2023:4991-1
SUSE-SU-2017:0408-1
SUSE-SU-2017:0411-1
SUSE-SU-2017:0412-1
USN-3174-1

Produtos afetados

Alt Linux
Centos
Mariadb Server
Mysql Server
Red Hat
Suse
Ubuntu