CVE-2017-3331 (MEDIUM)

Vendor	Product	Version range	Fixed in
oracle	mysql	—	—
oracle	mysql	—	—
oracle	mysql	—	—
oracle	mysql	—	—
oracle	mysql	—	—
oracle	mysql	—	—
oracle	mysql	—	—
oracle_corporation	mysql_server	—	—

Ubuntu

MySQL vulnerabilities

vendor_ubuntu·2017-04-27

CVE-2017-3302 MySQL vulnerabilities Title: MySQL vulnerabilities Summary: Several security issues were fixed in MySQL. Multiple security issues were discovered in MySQL and this update includes new upstream MySQL versions to fix these issues. MySQL has been updated to 5.5.55 in Ubuntu 14.04 LTS. Ubuntu 16.04 LTS, Ubuntu 16.10 and Ubuntu 17.04 have been updated to MySQL 5.7.18. In addition to security fixes, the updated packages contain bug fixes, new features, and possibly incompatible changes. Please see the following for more information: http://dev.mysql.com/doc/relnotes/mysql/5.5/en/news-5-5-55.html http://dev.mysql.com/doc/relnotes/mysql/5.7/en/news-5-7-18.html http://www.oracle.com/technetwork/security-advisory/cpuapr2017-3236618.html Instructions: In general, a standard system update will make all the necessary

Red Hat

mysql: Server: DML unspecified vulnerability (CPU Apr 2017)

vendor_redhat·2017-04-19·CVSS 6.5

CVE-2017-3331 [MEDIUM] mysql: Server: DML unspecified vulnerability (CPU Apr 2017) mysql: Server: DML unspecified vulnerability (CPU Apr 2017) Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: DML). The supported version that is affected is 5.7.11 to 5.7.17. Easily "exploitable" vulnerability allows low privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.0 Base Score 6.5 (Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H). Package: mysql55-mysql (Red Hat Enterprise Linux 5) - Not affected Package: mysql (Red Hat Enterprise Linux 6) - Not affected Package: mariadb (Red Hat Enterprise Linux 7) - Not affected

GHSA

GHSA-j63x-6vm9-9fh8: Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: DML)

ghsa_unreviewed·2022-05-13

CVE-2017-3331 [MEDIUM] GHSA-j63x-6vm9-9fh8: Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: DML) Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: DML). The supported version that is affected is 5.7.11 to 5.7.17. Easily "exploitable" vulnerability allows low privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.0 Base Score 6.5 (Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H).

OSV

CVE-2017-3331: Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: DML)

osv·2017-04-24·CVSS 6.5

CVE-2017-3331 [MEDIUM] CVE-2017-3331: Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: DML) Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: DML). The supported version that is affected is 5.7.11 to 5.7.17. Easily "exploitable" vulnerability allows low privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.0 Base Score 6.5 (Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H).

CVE-2017-3331: Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: DML). The supported version that is affected is 5.7.11 to 5.7.17. Easily…

Affected

CVSS provenance