CVE-2017-3322 — Oracle Mysql Cluster vulnerability

3 documents3 sources
Severity
3.7LOWNVD
EPSS
0.9%
top 24.15%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
1
Oracle Mysql Cluster
Timeline
PublishedJan 27
Latest updateMay 17

Description

Vulnerability in the MySQL Cluster component of Oracle MySQL (subcomponent: Cluster: NDBAPI). Supported versions that are affected are 7.2.25 and earlier, 7.3.14 and earlier, 7.4.12 and earlier and . Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise MySQL Cluster. Successful attacks of this vulnerability can result in unauthorized ability to cause a partial denial of service (partial DOS) of MySQL Cluster. CVSS v3.0 Base S…

CVSS vector

CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:LExploitability: 2.2 | Impact: 1.4

Affected Packages2 packages

▶NVDoracle/mysql_cluster7.2.25+2
▶CVEListV5oracle/mysql_cluster7.2.25 and earlier, 7.3.14 and earlier, 7.4.12 and earlier+2

Patches

Patch: www.oracle.com ↗Patch: www.oracle.com ↗

🔴Vulnerability Details

2
GHSA
GHSA-w8vv-65j9-vhgh: Vulnerability in the MySQL Cluster component of Oracle MySQL (subcomponent: Cluster: NDBAPI)↗2022-05-17
▶
CVEList
CVE-2017-3322: Vulnerability in the MySQL Cluster component of Oracle MySQL (subcomponent: Cluster: NDBAPI)↗2017-01-27
▶
CVE-2017-3322 — Oracle Mysql Cluster vulnerability | cvebase