CVE-2017-3639 (MEDIUM)

Vendor	Product	Version range	Fixed in
linux	linux_kernel	>= 0 < 3.13.0-149.199	3.13.0-149.199
linux	linux_kernel	>= 0 < 4.4.0-127.153	4.4.0-127.153
oracle	mysql	<= 5.7.18	—
oracle_corporation	mysql_server	—	—

Ubuntu

MySQL vulnerabilities

vendor_ubuntu·2017-07-20

CVE-2017-3529 MySQL vulnerabilities Title: MySQL vulnerabilities Summary: Several security issues were fixed in MySQL. Multiple security issues were discovered in MySQL and this update includes new upstream MySQL versions to fix these issues. MySQL has been updated to 5.5.57 in Ubuntu 14.04 LTS. Ubuntu 16.04 LTS and Ubuntu 17.04 have been updated to MySQL 5.7.19. In addition to security fixes, the updated packages contain bug fixes, new features, and possibly incompatible changes. Please see the following for more information: http://dev.mysql.com/doc/relnotes/mysql/5.5/en/news-5-5-56.html http://dev.mysql.com/doc/relnotes/mysql/5.5/en/news-5-5-57.html http://dev.mysql.com/doc/relnotes/mysql/5.7/en/news-5-7-19.html http://www.oracle.com/technetwork/security-advisory/cpujul2017-3236622.html Instructions: In general, a s

Red Hat

mysql: Server: DML unspecified vulnerability (CPU Jul 2017)

vendor_redhat·2017-07-19·CVSS 4.9

CVE-2017-3639 [MEDIUM] mysql: Server: DML unspecified vulnerability (CPU Jul 2017) mysql: Server: DML unspecified vulnerability (CPU Jul 2017) Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: DML). Supported versions that are affected are 5.7.18 and earlier. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.0 Base Score 4.9 (Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H). Package: mysql55-mysql (Red Hat Enterprise Linux 5) - Not affected Package: mysql (Red Hat Enterprise Linux 6) - Not affected Package: mariadb (Red Hat Enterprise Linux 7) - Not affected

GHSA

GHSA-p8rc-jj67-v225: Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: DML)

ghsa_unreviewed·2022-05-13

CVE-2017-3639 [MEDIUM] GHSA-p8rc-jj67-v225: Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: DML) Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: DML). Supported versions that are affected are 5.7.18 and earlier. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.0 Base Score 4.9 (Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H).

OSV

linux vulnerabilities

osv·2018-05-22·CVSS 8.8

CVE-2018-3639 linux vulnerabilities linux vulnerabilities Jann Horn and Ken Johnson discovered that microprocessors utilizing speculative execution of a memory read may allow unauthorized memory reads via a sidechannel attack. This flaw is known as Spectre Variant 4. A local attacker could use this to expose sensitive information, including kernel memory. (CVE-2018-3639) Jan H. Schönherr discovered that the Xen subsystem did not properly handle block IO merges correctly in some situations. An attacker in a guest vm could use this to cause a denial of service (host crash) or possibly gain administrative privileges in the host. (CVE-2017-12134) It was discovered that the Bluetooth HIP Protocol implementation in the Linux kernel did not properly validate HID connection setup information. An attacker could use this to cause a

OSV

linux, linux-aws, linux-kvm, vulnerabilities

osv·2018-05-22·CVSS 5.5

CVE-2018-3639 linux, linux-aws, linux-kvm, vulnerabilities linux, linux-aws, linux-kvm, vulnerabilities Jann Horn and Ken Johnson discovered that microprocessors utilizing speculative execution of a memory read may allow unauthorized memory reads via a sidechannel attack. This flaw is known as Spectre Variant 4. A local attacker could use this to expose sensitive information, including kernel memory. (CVE-2018-3639) Tuba Yavuz discovered that a double-free error existed in the USBTV007 driver of the Linux kernel. A local attacker could use this to cause a denial of service (system crash) or possibly execute arbitrary code. (CVE-2017-17975) It was discovered that a race condition existed in the F2FS implementation in the Linux kernel. A local attacker could use this to cause a denial of service (system crash). (CVE-2017-18193) It was discovered

OSV

CVE-2017-3639: Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: DML)

osv·2017-07-19·CVSS 4.9

CVE-2017-3639 [MEDIUM] CVE-2017-3639: Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: DML) Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: DML). Supported versions that are affected are 5.7.18 and earlier. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.0 Base Score 4.9 (Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H).

CVE-2017-3639: Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: DML). Supported versions that are affected are 5.7.18 and earlier. Easily…

Affected

CVSS provenance