CVE-2017-3291
published 2017-01-27CVE-2017-3291: Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Packaging). Supported versions that are affected are 5.5.53 and earlier…
PriorityP422medium6.3CVSS 3.1
AVLACHPRHUIRSUCHIHAH
EPSS
0.44%
35.6th percentile
Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Packaging). Supported versions that are affected are 5.5.53 and earlier, 5.6.34 and earlier and 5.7.16 and earlier. Difficult to exploit vulnerability allows high privileged attacker with logon to the infrastructure where MySQL Server executes to compromise MySQL Server. Successful attacks require human interaction from a person other than the attacker. Successful attacks of this vulnerability can result in takeover of MySQL Server. CVSS v3.0 Base Score 6.3 (Confidentiality, Integrity and Availability impacts).
Affected
40 ranges· showing 25
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| debian | debian_linux | — | — |
| mariadb | mariadb | >= 0 < 10.1.21-r0 | 10.1.21-r0 |
| mariadb | mariadb | >= 0 < 10.1.21-r0 | 10.1.21-r0 |
| mariadb | mariadb | >= 0 < 10.1.21-r0 | 10.1.21-r0 |
| mariadb | mariadb | >= 0 < 10.1.21-r0 | 10.1.21-r0 |
| mariadb | mariadb | >= 0 < 10.1.21-r0 | 10.1.21-r0 |
| mariadb | mariadb | >= 0 < 10.1.21-r0 | 10.1.21-r0 |
| mariadb | mariadb | >= 0 < 10.1.21-r0 | 10.1.21-r0 |
| mariadb | mariadb | >= 0 < 10.1.21-r0 | 10.1.21-r0 |
| mariadb | mariadb | >= 0 < 10.1.21-r0 | 10.1.21-r0 |
| mariadb | mariadb | >= 0 < 10.1.21-r0 | 10.1.21-r0 |
| mariadb | mariadb | >= 0 < 10.1.21-r0 | 10.1.21-r0 |
| mariadb | mariadb | >= 0 < 10.1.21-r0 | 10.1.21-r0 |
| mariadb | mariadb | >= 0 < 10.1.21-r0 | 10.1.21-r0 |
| mariadb | mariadb | >= 0 < 10.1.21-r0 | 10.1.21-r0 |
| mariadb | mariadb | >= 0 < 10.1.21-r0 | 10.1.21-r0 |
| mariadb | mariadb | >= 0 < 10.1.21-r0 | 10.1.21-r0 |
| mariadb | mariadb | >= 0 < 10.1.21-r0 | 10.1.21-r0 |
| mariadb | mariadb | >= 0 < 10.1.21-r0 | 10.1.21-r0 |
| mariadb | mariadb | >= 0 < 10.1.21-r0 | 10.1.21-r0 |
| mariadb | mariadb | >= 0 < 10.1.21-r0 | 10.1.21-r0 |
| mariadb | mariadb | >= 0 < 10.1.21-r0 | 10.1.21-r0 |
| mariadb | mariadb | >= 10.0.0 < 10.0.29 | 10.0.29 |
| mariadb | mariadb | >= 10.1.0 < 10.1.21 | 10.1.21 |
| mariadb | mariadb | >= 5.5.0 < 5.5.54 | 5.5.54 |
CVSS provenance
nvdv3.16.3MEDIUMCVSS:3.1/AV:L/AC:H/PR:H/UI:R/S:U/C:H/I:H/A:H
nvdv2.03.5LOWAV:L/AC:H/Au:S/C:P/I:P/A:P
osv7.8HIGH
vendor_redhat6.3MEDIUM
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
Ubuntu
MySQL vulnerabilities
vendor_ubuntu·2017-01-19
CVE-2016-8318 MySQL vulnerabilities
Title: MySQL vulnerabilities
Summary: Several security issues were fixed in MySQL.
Multiple security issues were discovered in MySQL and this update includes
new upstream MySQL versions to fix these issues.
MySQL has been updated to 5.5.54 in Ubuntu 12.04 LTS and Ubuntu 14.04 LTS.
Ubuntu 16.04 LTS and Ubuntu 16.10 have been updated to MySQL 5.7.17.
In addition to security fixes, the updated packages contain bug fixes,
new features, and possibly incompatible changes.
Please see the following for more information:
http://dev.mysql.com/doc/relnotes/mysql/5.5/en/news-5-5-54.html
http://dev.mysql.com/doc/relnotes/mysql/5.7/en/news-5-7-17.html
http://www.oracle.com/technetwork/security-advisory/cpujan2017-2881727.html
Instructions: In general, a standard system update will make all the nec
Red Hat
mysql: unrestricted mysqld_safe's ledir (CPU Jan 2017)
vendor_redhat·2017-01-17·CVSS 6.3
CVE-2017-3291 [MEDIUM] CWE-426 mysql: unrestricted mysqld_safe's ledir (CPU Jan 2017)
mysql: unrestricted mysqld_safe's ledir (CPU Jan 2017)
Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Packaging). Supported versions that are affected are 5.5.53 and earlier, 5.6.34 and earlier and 5.7.16 and earlier. Difficult to exploit vulnerability allows high privileged attacker with logon to the infrastructure where MySQL Server executes to compromise MySQL Server. Successful attacks require human interaction from a person other than the attacker. Successful attacks of this vulnerability can result in takeover of MySQL Server. CVSS v3.0 Base Score 6.3 (Confidentiality, Integrity and Availability impacts).
It was discovered that the mysqld_safe script honored the ledir option value set in a MySQL configuration file. A user able to modify one of th
GHSA
GHSA-q85r-m5q6-9v4f: Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Packaging)
ghsa_unreviewed·2022-05-14
CVE-2017-3291 [MEDIUM] GHSA-q85r-m5q6-9v4f: Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Packaging)
Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Packaging). Supported versions that are affected are 5.5.53 and earlier, 5.6.34 and earlier and 5.7.16 and earlier. Difficult to exploit vulnerability allows high privileged attacker with logon to the infrastructure where MySQL Server executes to compromise MySQL Server. Successful attacks require human interaction from a person other than the attacker. Successful attacks of this vulnerability can result in takeover of MySQL Server. CVSS v3.0 Base Score 6.3 (Confidentiality, Integrity and Availability impacts).
OSV
linux-lts-xenial vulnerabilities
osv·2017-05-17·CVSS 7.8
linux-lts-xenial vulnerabilities
linux-lts-xenial vulnerabilities
USN-3291-1 fixed vulnerabilities in the Linux kernel for Ubuntu 16.04
LTS. This update provides the corresponding updates for the Linux
Hardware Enablement (HWE) kernel from Ubuntu 16.04 LTS for Ubuntu
14.04 LTS.
Dmitry Vyukov discovered that the generic SCSI (sg) subsystem in the Linux
kernel contained a stack-based buffer overflow. A local attacker with
access to an sg device could use this to cause a denial of service (system
crash) or possibly execute arbitrary code. (CVE-2017-7187)
It was discovered that a NULL pointer dereference existed in the Direct
Rendering Manager (DRM) driver for VMWare devices in the Linux kernel. A
local attacker could use this to cause a denial of service (system crash).
(CVE-2017-7261)
Li Qiang discovered that an integer
OSV
linux-aws, linux-gke, linux-raspi2, linux-snapdragon vulnerabilities
osv·2017-05-17·CVSS 7.8
linux-aws, linux-gke, linux-raspi2, linux-snapdragon vulnerabilities
linux-aws, linux-gke, linux-raspi2, linux-snapdragon vulnerabilities
USN-3291-1 fixed vulnerabilities in the generic Linux kernel.
This update provides the corresponding updates for the Linux kernel
built for specific processors and cloud environments.
Dmitry Vyukov discovered that the generic SCSI (sg) subsystem in the Linux
kernel contained a stack-based buffer overflow. A local attacker with
access to an sg device could use this to cause a denial of service (system
crash) or possibly execute arbitrary code. (CVE-2017-7187)
It was discovered that a NULL pointer dereference existed in the Direct
Rendering Manager (DRM) driver for VMWare devices in the Linux kernel. A
local attacker could use this to cause a denial of service (system crash).
(CVE-2017-7261)
Li Qiang discovered that an
OSV
CVE-2017-3291: Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Packaging)
osv·2017-01-27·CVSS 6.3
CVE-2017-3291 [MEDIUM] CVE-2017-3291: Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Packaging)
Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Packaging). Supported versions that are affected are 5.5.53 and earlier, 5.6.34 and earlier and 5.7.16 and earlier. Difficult to exploit vulnerability allows high privileged attacker with logon to the infrastructure where MySQL Server executes to compromise MySQL Server. Successful attacks require human interaction from a person other than the attacker. Successful attacks of this vulnerability can result in takeover of MySQL Server. CVSS v3.0 Base Score 6.3 (Confidentiality, Integrity and Availability impacts).
No detection rules found.
No public exploits indexed.
Bugzilla
CVE-2017-3291 mysql: unrestricted mysqld_safe's ledir (CPU Jan 2017)
bugzilla·2017-01-18·CVSS 9.8
CVE-2017-3291 [CRITICAL] CVE-2017-3291 mysql: unrestricted mysqld_safe's ledir (CPU Jan 2017)
CVE-2017-3291 mysql: unrestricted mysqld_safe's ledir (CPU Jan 2017)
It was discovered that the mysqld_safe could read ledir value - which specifies the directory where mysqld is stored - from configuration file. This could allow a user with privileges to write to some mysql configuration file - either mysql OS user, or any local OS user able to write to the config via some other way, e.g. by exploiting CVE-2016-6662 - to escalate their privileges to root if mysqld_safe was run with root privileges.
This problem is related to this change applied as part of the CVE-2016-6662 fix:
https://github.com/mysql/mysql-server/commit/684a165f28b3718160a3e4c5ebd18a465d85e97c#diff-144aa2f11374843c969d96b7b84247eaR211
It introduced restriction that mysqld and mysqld_version options can only be speci
Bugzilla
CVE-2017-3265 community-mysql: various flaws [fedora-all]
bugzilla·2017-01-18·CVSS 6.8
CVE-2017-3265 [MEDIUM] CVE-2017-3265 community-mysql: various flaws [fedora-all]
CVE-2017-3265 community-mysql: various flaws [fedora-all]
This is an automatically created tracking bug! It was created to ensure
that one or more security vulnerabilities are fixed in affected versions
of Fedora.
For comments that are specific to the vulnerability please use bugs filed
against the "Security Response" product referenced in the "Blocks" field.
For more information see:
http://fedoraproject.org/wiki/Security/TrackingBugs
When submitting as an update, use the fedpkg template provided in the next
comment(s). This will include the bug IDs of this tracking bug as well as
the relevant top-level CVE bugs.
Please also mention the CVE IDs being fixed in the RPM changelog and the
fedpkg commit message.
NOTE: this issue affects multiple supported versions of Fedora. While only
o
Bugzilla
CVE-2017-3238 CVE-2017-3243 CVE-2017-3244 CVE-2017-3257 CVE-2017-3258 CVE-2017-3265 CVE-2017-3291 CVE-2017-3312 CVE-2017-3313 CVE-2017-3317 CVE-2017-3318 mariadb: various flaws [fedora-all]
bugzilla·2017-01-18·CVSS 6.5
CVE-2017-3238 [MEDIUM] CVE-2017-3238 CVE-2017-3243 CVE-2017-3244 CVE-2017-3257 CVE-2017-3258 CVE-2017-3265 CVE-2017-3291 CVE-2017-3312 CVE-2017-3313 CVE-2017-3317 CVE-2017-3318 mariadb: various flaws [fedora-all]
CVE-2017-3238 CVE-2017-3243 CVE-2017-3244 CVE-2017-3257 CVE-2017-3258 CVE-2017-3265 CVE-2017-3291 CVE-2017-3312 CVE-2017-3313 CVE-2017-3317 CVE-2017-3318 mariadb: various flaws [fedora-all]
This is an automatically created tracking bug! It was created to ensure
that one or more security vulnerabilities are fixed in affected versions
of Fedora.
For comments that are specific to the vulnerability please use bugs filed
against the "Security Response" product referenced in the "Blocks" field.
For more information see:
http://fedoraproject.org/wiki/Security/TrackingBugs
When submitting as an update, use the fedpkg template provided in the next
comment(s). This will include the bug IDs of this tracking bug as well as
the relevant top-level CVE bugs.
Please also mention the CVE IDs being fix
http://www.debian.org/security/2017/dsa-3767http://www.debian.org/security/2017/dsa-3770http://www.oracle.com/technetwork/security-advisory/cpujan2017-2881727.htmlhttp://www.securityfocus.com/bid/95501http://www.securitytracker.com/id/1037640https://access.redhat.com/errata/RHSA-2017:2192https://access.redhat.com/errata/RHSA-2017:2787https://access.redhat.com/errata/RHSA-2017:2886https://access.redhat.com/errata/RHSA-2018:0279https://access.redhat.com/errata/RHSA-2018:0574https://security.gentoo.org/glsa/201702-17https://security.gentoo.org/glsa/201702-18http://www.debian.org/security/2017/dsa-3767http://www.debian.org/security/2017/dsa-3770http://www.oracle.com/technetwork/security-advisory/cpujan2017-2881727.htmlhttp://www.securityfocus.com/bid/95501http://www.securitytracker.com/id/1037640https://access.redhat.com/errata/RHSA-2017:2192https://access.redhat.com/errata/RHSA-2017:2787https://access.redhat.com/errata/RHSA-2017:2886https://access.redhat.com/errata/RHSA-2018:0279https://access.redhat.com/errata/RHSA-2018:0574https://security.gentoo.org/glsa/201702-17https://security.gentoo.org/glsa/201702-18
2017-01-27
Published