PT-2016-7899 · Oracle+7 · Mysql Server+6

Published

2016-10-17

·

Updated

2022-08-29

·

CVE-2017-3651

CVSS v3.1

4.3

Medium

VectorAV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N
Name of the Vulnerable Software and Affected Versions MySQL Server versions 5.5.56 and earlier MySQL Server versions 5.6.36 and earlier MySQL Server versions 5.7.18 and earlier
Description The issue allows a low privileged attacker with network access via multiple protocols to compromise MySQL Server, resulting in unauthorized update, insert, or delete access to some of MySQL Server's accessible data. Successful attacks can also cause a hang or frequently repeatable crash of MySQL Server.
Recommendations For versions 5.5.56 and earlier, update to a version later than 5.5.56 to resolve the issue. For versions 5.6.36 and earlier, update to a version later than 5.6.36 to resolve the issue. For versions 5.7.18 and earlier, update to a version later than 5.7.18 to resolve the issue.

Fix

Related Identifiers

ALT-PU-2016-2272
ALT-PU-2017-1931
CESA-2017_2192
CESA-2018_2439
CVE-2017-3651
DLA-1043-1
DSA-3922-1
RHSA-2016:2927
RHSA-2016:2928
RHSA-2017:2192
RHSA-2017:2787
RHSA-2017:2886
RHSA-2017_2192
RHSA-2018:2439
RHSA-2018_2439
SUSE-SU-2017:2290-1
USN-3357-1
USN-3357-2

Affected Products

Alt Linux
Centos
Mariadb Server
Mysql Server
Red Hat
Suse
Ubuntu