PT-2017-15959 · Mysql Server+1 · Mysql Connectors+1

Published 2017-04-24 · Updated 2024-06-15 · CVE-2017-3523

Positive Technologies (AI Summary)

CVSS v3.1

8.5

High

Base vector

AV:N/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions MySQL Connectors versions 5.1.40 and earlier

Description The issue allows a low-privileged attacker with network access via multiple protocols to compromise MySQL Connectors, potentially leading to a takeover. Although the vulnerability is in MySQL Connectors, attacks may have a significant impact on additional products.

Recommendations For versions 5.1.40 and earlier, update to a version later than 5.1.40 to resolve the issue.

Fix

Improper Access Control

Weakness Enumeration

CWE-284

Related Identifiers

CVE-2017-3523

DLA-945-1

DSA-3840-1

GHSA-2XXH-F8R3-HVVR

MGASA-2017-0382

OPENSUSE-SU-2024:11071-1

SUSE-SU-2017:2591-1

SUSE-SU-2017_2591-1

Affected Products

Mysql Connectors

Suse

References · 27

• https://debian.org/security/2017/dsa-3857 · Vendor Advisory
• https://osv.dev/vulnerability/UBUNTU-CVE-2017-3523 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2017-3523 · Vendor Advisory
• https://osv.dev/vulnerability/openSUSE-SU-2024:11071-1 · Vendor Advisory
• https://osv.dev/vulnerability/SUSE-SU-2017:2591-1 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2017-3523 · Security Note
• https://osv.dev/vulnerability/MGASA-2017-0382 · Vendor Advisory
• http://oracle.com/technetwork/security-advisory/cpuapr2017-3236618.html · Vendor Advisory
• http://debian.org/security/2017/dsa-3840 · Vendor Advisory
• https://cve.org/CVERecord?id=CVE-2017-3523 · Security Note
• https://osv.dev/vulnerability/GHSA-2xxh-f8r3-hvvr · Vendor Advisory
• https://ubuntu.com/security/CVE-2017-3523 · Vendor Advisory
• https://debian.org/security/2017/dsa-3840 · Vendor Advisory
• https://osv.dev/vulnerability/DSA-3840-1 · Vendor Advisory
• https://advisories.mageia.org/MGASA-2017-0382.html · Security Note