PT-2017-11270 · Oracle+3 · Mysql Server+2

Publicado

2017-10-17

·

Atualizado

2017-12-14

·

CVE-2017-10283

CVSS v3.1

5.3

Média

VetorAV:N/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H
Name of the Vulnerable Software and Affected Versions Oracle MySQL versions 5.6.37 and earlier Oracle MySQL versions 5.7.19 and earlier
Description The issue allows a low-privileged attacker with network access via multiple protocols to compromise the MySQL Server, resulting in the unauthorized ability to cause a hang or frequently repeatable crash of the server. This can lead to a complete denial of service.
Recommendations For versions 5.6.37 and earlier, update to a version later than 5.6.37 to resolve the issue. For versions 5.7.19 and earlier, update to a version later than 5.7.19 to resolve the issue.

Correção

Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
dbugs@ptsecurity.com

Identificadores relacionados

CVE-2017-10283
OPENSUSE-SU-2017_2868-1
RHSA-2017:3265
RHSA-2017:3442
USN-3459-1

Produtos afetados

Mysql Server
Suse
Ubuntu