PT-2017-1139 · Mysql Server+2 · Mysql Server+2

Publicado

2017-01-17

·

Atualizado

2018-05-03

·

CVE-2017-3256

CVSS v3.1

6.5

Média

VetorAV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
Name of the Vulnerable Software and Affected Versions MySQL Server versions 5.7.16 and earlier
Description The issue is related to insufficient input validation in the Server: Replication component of MySQL. It allows an attacker with network access via multiple protocols to compromise the MySQL Server. Successful attacks can result in the unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of the MySQL Server.
Recommendations For versions 5.7.16 and earlier, update to a version that contains a fix for this issue to prevent exploitation. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

DoS

RCE

Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
dbugs@ptsecurity.com

Enumeração de Fraquezas

CWE-20

Identificadores relacionados

ALT-PU-2018-1647
BDU:2017-00234
CVE-2017-3256
RHSA-2017:2886
USN-3174-1

Produtos afetados

Alt Linux
Mysql Server
Ubuntu