Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

redhat логотип

CVE-2017-3318

Опубликовано: 18 янв. 2017
Источник: redhat
CVSS3: 4
EPSS Низкий

Описание

Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Error Handling). Supported versions that are affected are 5.5.53 and earlier, 5.6.34 and earlier and 5.7.16 and earlier. Difficult to exploit vulnerability allows high privileged attacker with logon to the infrastructure where MySQL Server executes to compromise MySQL Server. Successful attacks require human interaction from a person other than the attacker. Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all MySQL Server accessible data. CVSS v3.0 Base Score 4.0 (Confidentiality impacts).

Затронутые пакеты

ПлатформаПакетСостояниеРекомендацияРелиз
Red Hat Enterprise Linux 5mysql55-mysqlWill not fix
Red Hat Enterprise Linux 6mysqlUnder investigation
Red Hat Enterprise Linux OpenStack Platform 5 (Icehouse)mariadb-galeraWill not fix
Red Hat Enterprise Linux OpenStack Platform 6 (Juno)mariadb-galeraWill not fix
Red Hat Enterprise Linux OpenStack Platform 7 (Kilo)mariadb-galeraWill not fix
Red Hat OpenStack Platform 10 (Newton)mariadb-galeraWill not fix
Red Hat OpenStack Platform 11 (Ocata)mariadb-galeraWill not fix
Red Hat OpenStack Platform 12 (Pike)mariadb-galeraWill not fix
Red Hat OpenStack Platform 8 (Liberty)mariadb-galeraWill not fix
Red Hat OpenStack Platform 9 (Mitaka)mariadb-galeraWill not fix

Показывать по

Дополнительная информация

Статус:

Moderate
https://bugzilla.redhat.com/show_bug.cgi?id=1414357mysql: Server: Error Handling unspecified vulnerability (CPU Jan 2017)

EPSS

Процентиль: 9%
0.00036
Низкий

4 Medium

CVSS3

Связанные уязвимости

CVSS3: 4
ubuntu
больше 8 лет назад

Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Error Handling). Supported versions that are affected are 5.5.53 and earlier, 5.6.34 and earlier and 5.7.16 and earlier. Difficult to exploit vulnerability allows high privileged attacker with logon to the infrastructure where MySQL Server executes to compromise MySQL Server. Successful attacks require human interaction from a person other than the attacker. Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all MySQL Server accessible data. CVSS v3.0 Base Score 4.0 (Confidentiality impacts).

CVSS3: 4
nvd
больше 8 лет назад

Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Error Handling). Supported versions that are affected are 5.5.53 and earlier, 5.6.34 and earlier and 5.7.16 and earlier. Difficult to exploit vulnerability allows high privileged attacker with logon to the infrastructure where MySQL Server executes to compromise MySQL Server. Successful attacks require human interaction from a person other than the attacker. Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all MySQL Server accessible data. CVSS v3.0 Base Score 4.0 (Confidentiality impacts).

CVSS3: 4
debian
больше 8 лет назад

Vulnerability in the MySQL Server component of Oracle MySQL (subcompon ...

CVSS3: 4
github
около 3 лет назад

Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Error Handling). Supported versions that are affected are 5.5.53 and earlier, 5.6.34 and earlier and 5.7.16 and earlier. Difficult to exploit vulnerability allows high privileged attacker with logon to the infrastructure where MySQL Server executes to compromise MySQL Server. Successful attacks require human interaction from a person other than the attacker. Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all MySQL Server accessible data. CVSS v3.0 Base Score 4.0 (Confidentiality impacts).

suse-cvrf
больше 8 лет назад

Security update for mysql

EPSS

Процентиль: 9%
0.00036
Низкий

4 Medium

CVSS3