PT-2017-11159 · Oracle+3 · Mysql Server+2

Publicado

2017-10-17

·

Atualizado

2019-10-03

·

CVE-2017-10167

CVSS v3.1

6.5

Média

VetorAV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
Name of the Vulnerable Software and Affected Versions Oracle MySQL versions 5.7.19 and earlier
Description The issue allows a low privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks can result in the unauthorized ability to cause a hang or frequently repeatable crash of MySQL Server.
Recommendations For versions 5.7.19 and earlier, update to a version later than 5.7.19 to resolve the issue. As a temporary workaround, consider restricting network access to the MySQL Server to minimize the risk of exploitation.

Correção

Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾

Identificadores relacionados

ALT-PU-2018-1647
CVE-2017-10167
RHSA-2017:3442
USN-3459-1

Produtos afetados

Alt Linux
Mysql Server
Ubuntu