CVE-2017-3468 (LOW)

Vendor	Product	Version range	Fixed in
oracle	mysql	<= 5.7.17	—
oracle_corporation	mysql_server	—	—

Ubuntu

MySQL vulnerabilities

vendor_ubuntu·2017-04-27

CVE-2017-3302 MySQL vulnerabilities Title: MySQL vulnerabilities Summary: Several security issues were fixed in MySQL. Multiple security issues were discovered in MySQL and this update includes new upstream MySQL versions to fix these issues. MySQL has been updated to 5.5.55 in Ubuntu 14.04 LTS. Ubuntu 16.04 LTS, Ubuntu 16.10 and Ubuntu 17.04 have been updated to MySQL 5.7.18. In addition to security fixes, the updated packages contain bug fixes, new features, and possibly incompatible changes. Please see the following for more information: http://dev.mysql.com/doc/relnotes/mysql/5.5/en/news-5-5-55.html http://dev.mysql.com/doc/relnotes/mysql/5.7/en/news-5-7-18.html http://www.oracle.com/technetwork/security-advisory/cpuapr2017-3236618.html Instructions: In general, a standard system update will make all the necessary

Red Hat

mysql: Server: Security: Encryption unspecified vulnerability (CPU Apr 2017)

vendor_redhat·2017-04-19·CVSS 3.1

CVE-2017-3468 [LOW] mysql: Server: Security: Encryption unspecified vulnerability (CPU Apr 2017) mysql: Server: Security: Encryption unspecified vulnerability (CPU Apr 2017) Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Security: Encryption). Supported versions that are affected are 5.7.17 and earlier. Difficult to exploit vulnerability allows low privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of MySQL Server accessible data. CVSS 3.0 Base Score 3.1 (Integrity impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:H/PR:L/UI:N/S:U/C:N/I:L/A:N). Package: mysql55-mysql (Red Hat Enterprise Linux 5) - Not affected Package: mysql (Red Hat Enterprise Linux 6) - Not affected Package: mariadb (Red Hat Enterprise Linux

GHSA

GHSA-h887-m6g5-688c: Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Security: Encryption)

ghsa_unreviewed·2022-05-13

CVE-2017-3468 [LOW] GHSA-h887-m6g5-688c: Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Security: Encryption) Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Security: Encryption). Supported versions that are affected are 5.7.17 and earlier. Difficult to exploit vulnerability allows low privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of MySQL Server accessible data. CVSS 3.0 Base Score 3.1 (Integrity impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:H/PR:L/UI:N/S:U/C:N/I:L/A:N).

OSV

linux-hwe vulnerabilities

osv·2017-10-31·CVSS 5.5

CVE-2017-1000252 linux-hwe vulnerabilities linux-hwe vulnerabilities USN-3468-1 fixed vulnerabilities in the Linux kernel for Ubuntu 17.04. This update provides the corresponding updates for the Linux Hardware Enablement (HWE) kernel from Ubuntu 17.04 for Ubuntu 16.04 LTS. It was discovered that the KVM subsystem in the Linux kernel did not properly bound guest IRQs. A local attacker in a guest VM could use this to cause a denial of service (host system crash). (CVE-2017-1000252) It was discovered that the Flash-Friendly File System (f2fs) implementation in the Linux kernel did not properly validate superblock metadata. A local attacker could use this to cause a denial of service (system crash) or possibly execute arbitrary code. (CVE-2017-10663) Anthony Perard discovered that the Xen virtual block driver did not properly initi

OSV

CVE-2017-3468: Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Security: Encryption)

osv·2017-04-24·CVSS 3.1

CVE-2017-3468 [LOW] CVE-2017-3468: Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Security: Encryption) Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Security: Encryption). Supported versions that are affected are 5.7.17 and earlier. Difficult to exploit vulnerability allows low privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of MySQL Server accessible data. CVSS 3.0 Base Score 3.1 (Integrity impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:H/PR:L/UI:N/S:U/C:N/I:L/A:N).

CVE-2017-3468: Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Security: Encryption). Supported versions that are affected are 5.7.17 and…

Affected

CVSS provenance