PT-2017-15773 · Oracle+7 · Mysql Server+6

Published 2017-01-17 · Updated 2024-06-15 · CVE-2017-3313

Positive Technologies (AI Summary)

CVSS v3.1

4.7

Medium

Base vector

AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N

Name of the Vulnerable Software and Affected Versions Oracle MySQL versions 5.5.53 and earlier Oracle MySQL versions 5.6.34 and earlier Oracle MySQL versions 5.7.16 and earlier

Description The issue allows an attacker with certain privileges to compromise the MySQL Server, potentially resulting in unauthorized access to critical data or complete access to all MySQL Server accessible data. The vulnerability can be exploited by an attacker with logon to the infrastructure where MySQL Server executes or through network access via multiple protocols.

Recommendations For versions 5.5.53 and earlier, update to a version later than 5.5.53 to resolve the issue. For versions 5.6.34 and earlier, update to a version later than 5.6.34 to resolve the issue. For versions 5.7.16 and earlier, update to a version later than 5.7.16 to resolve the issue.

Fix

Related Identifiers

ALT-PU-2017-1294

ALT-PU-2017-1407

ALT-PU-2017-1586

ALT-PU-2018-2387

ALT-PU-2018-2496

CESA-2017_2192

CVE-2017-3313

DLA-797-1

DSA-3767-1

DSA-3809-1

MGASA-2017-0096

OPENSUSE-SU-2017_0479-1

OPENSUSE-SU-2017_0618-1

OPENSUSE-SU-2017_1475-1

OPENSUSE-SU-2024:11038-1

RHSA-2017:2192

RHSA-2017:2787

RHSA-2017:2886

RHSA-2017_2192

RHSA-2018:0279

RHSA-2018:0574

SUSE-RU-2023:3956-1

SUSE-RU-2023:4991-1

SUSE-SU-2017:0408-1

SUSE-SU-2017:1311-1

SUSE-SU-2017:1315-1

SUSE-SU-2018:1853-1

USN-3174-1

Affected Products

Alt Linux

Centos

Mariadb Server

Mysql Server

Red Hat

Suse

Ubuntu

References · 656

• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-3243 · Security Note
• https://bdu.fstec.ru/vul/2020-04694 · Security Note
• https://ubuntu.com/security/CVE-2017-3258 · Vendor Advisory
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-15365 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2017-3313 · Security Note
• https://ubuntu.com/security/CVE-2017-3244 · Vendor Advisory
• https://ubuntu.com/security/CVE-2017-3273 · Vendor Advisory
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-3312 · Security Note
• https://security.gentoo.org/glsa/201702-17 · Vendor Advisory
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-3319 · Security Note
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-3453 · Security Note
• https://bdu.fstec.ru/vul/2017-00239 · Security Note
• https://bdu.fstec.ru/vul/2019-04693 · Security Note
• https://bdu.fstec.ru/vul/2018-00341 · Security Note
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-3238 · Security Note