Описание
Crash in libmysqlclient.so in Oracle MySQL before 5.6.21 and 5.7.x before 5.7.5 and MariaDB through 5.5.54, 10.0.x through 10.0.29, 10.1.x through 10.1.21, and 10.2.x through 10.2.3.
A flaw was found in the way MySQL client library (libmysqlclient) handled prepared statements when server connection was lost. A malicious server or a man-in-the-middle attacker could possibly use this flaw to crash an application using libmysqlclient.
Затронутые пакеты
Платформа | Пакет | Состояние | Рекомендация | Релиз |
---|---|---|---|---|
Red Hat Enterprise Linux 5 | mysql55-mysql | Will not fix | ||
Red Hat Enterprise Linux 6 | mysql | Will not fix | ||
Red Hat Enterprise Linux OpenStack Platform 5 (Icehouse) | mariadb-galera | Not affected | ||
Red Hat Enterprise Linux OpenStack Platform 6 (Juno) | mariadb-galera | Not affected | ||
Red Hat Enterprise Linux OpenStack Platform 7 (Kilo) | mariadb-galera | Not affected | ||
Red Hat OpenStack Platform 10 (Newton) | mariadb-galera | Not affected | ||
Red Hat OpenStack Platform 11 (Ocata) | mariadb-galera | Not affected | ||
Red Hat OpenStack Platform 12 (Pike) | mariadb-galera | Not affected | ||
Red Hat OpenStack Platform 8 (Liberty) | mariadb-galera | Not affected | ||
Red Hat OpenStack Platform 9 (Mitaka) | mariadb-galera | Not affected |
Показывать по
Дополнительная информация
Статус:
7.5 High
CVSS3
Связанные уязвимости
Crash in libmysqlclient.so in Oracle MySQL before 5.6.21 and 5.7.x before 5.7.5 and MariaDB through 5.5.54, 10.0.x through 10.0.29, 10.1.x through 10.1.21, and 10.2.x through 10.2.3.
Crash in libmysqlclient.so in Oracle MySQL before 5.6.21 and 5.7.x before 5.7.5 and MariaDB through 5.5.54, 10.0.x through 10.0.29, 10.1.x through 10.1.21, and 10.2.x through 10.2.3.
Crash in libmysqlclient.so in Oracle MySQL before 5.6.21 and 5.7.x bef ...
Crash in libmysqlclient.so in Oracle MySQL before 5.6.21 and 5.7.x before 5.7.5 and MariaDB through 5.5.54, 10.0.x through 10.0.29, 10.1.x through 10.1.21, and 10.2.x through 10.2.3.
7.5 High
CVSS3