PT-2017-16072 · Mysql Server+6 · Mysql Server+6

Published

2017-07-18

·

Updated

2023-12-29

·

CVE-2017-3653

CVSS v2.0

3.5

Low

VectorAV:N/AC:M/Au:S/C:N/I:P/A:N
Name of the Vulnerable Software and Affected Versions MySQL Server versions 5.5.56 and earlier MySQL Server versions 5.6.36 and earlier MySQL Server versions 5.7.18 and earlier
Description The issue allows a low-privileged attacker with network access via multiple protocols to compromise the MySQL Server, resulting in unauthorized update, insert, or delete access to some of the MySQL Server's accessible data. However, it is difficult to exploit.
Recommendations For versions 5.5.56 and earlier, update to a version later than 5.5.56. For versions 5.6.36 and earlier, update to a version later than 5.6.36. For versions 5.7.18 and earlier, update to a version later than 5.7.18.

Fix

Found an issue in the description? Have something to add? Feel free to write us 👾

Related Identifiers

ALT-PU-2017-1931
ALT-PU-2017-2214
ALT-PU-2018-2387
ALT-PU-2018-2496
CESA-2018_2439
CVE-2017-3653
DLA-1043-1
DSA-3922-1
DSA-3944-1
DSA-3955-1
MGASA-2017-0289
MGASA-2017-0332
RHSA-2017:2787
RHSA-2017:2886
RHSA-2018:0279
RHSA-2018:0574
RHSA-2018:2439
RHSA-2018_2439
SUSE-RU-2023:3956-1
SUSE-RU-2023:4991-1
SUSE-SU-2017:2290-1
SUSE-SU-2017:2921-1
SUSE-SU-2018:0079-1
SUSE-SU-2018:1853-1
USN-3357-1
USN-3357-2

Affected Products

Alt Linux
Centos
Mariadb Server
Mysql Server
Red Hat
Suse
Ubuntu