Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: DML). Supported versions that are affected are 5.5.54 and earlier, 5.6.35 and earlier and 5.7.17 and earlier. Easily "exploitable" vulnerability allows low privileged attacker with network access via multiple protocols to compromise MySQL Server. While the vulnerability is in MySQL Server, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.0 Base Score 7.7 (Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H).
CVSS Details
- CVSS 3.1 Base Score: 7.7
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | — | Upgrade mariadb | Sep 20, 2017 | Apr 24, 2017 |
| Amazon_linux | — | Upgrade mysql56Upgrade mysql55 | May 19, 2017 | Apr 19, 2017 |
| Centos_linux | — | Upgrade mariadb-embedded-develUpgrade mariadb-benchUpgrade mariadb-debuginfoUpgrade mariadb-embeddedUpgrade mariadb-serverUpgrade mariadb-develUpgrade mariadb-testUpgrade mariadb-libsUpgrade mariadb | Aug 28, 2019 | Apr 24, 2017 |
| Debian | — | Upgrade mariadb-10.1Upgrade mysql-5.5 | Apr 25, 2017 | Apr 19, 2017 |
| Freebsd | — | Upgrade mariadb100-serverUpgrade mariadb101-serverUpgrade mariadb55-serverUpgrade mysql55-serverUpgrade mysql56-serverUpgrade mysql57-server | Apr 19, 2017 | Apr 19, 2017 |
| Gentoo Linux | — | Upgrade dev-db/mysql. | Feb 20, 2018 | Apr 24, 2017 |
| Huawei Euleros 2_0_sp1 | — | Upgrade mariadb-libsUpgrade mariadb-testUpgrade mariadb-develUpgrade mariadb-serverUpgrade mariadb-benchUpgrade mariadb-embeddedUpgrade mariadb | Jan 18, 2018 | Apr 24, 2017 |
| Huawei Euleros 2_0_sp2 | — | Upgrade mariadb-testUpgrade mariadb-benchUpgrade mariadb-serverUpgrade mariadb-libsUpgrade mariadbUpgrade mariadb-devel | Jan 18, 2018 | Apr 24, 2017 |
| Mariadb Mariadb | — | Upgrade MariaDB to the latest version | Mar 4, 2025 | Apr 24, 2017 |
| Oracle Mysql | — | Upgrade to the latest version of MySQL | May 5, 2017 | Apr 24, 2017 |
| Oracle Solaris | — | Upgrade database/mysql-55 to version 5.5.56-0.175.3.21.0.4.0 on Solaris 11.3Upgrade database/mysql-55/client to version 5.5.56-0.175.3.21.0.4.0 on Solaris 11.3Upgrade database/mysql-57/library to version 5.7.23-0.175.3.35.0.5.0 on Solaris 11.3Upgrade database/mysql-56 to version 5.6.36-0.175.3.21.0.4.0 on Solaris 11.3Upgrade database/mysql-56/tests to version 5.6.36-0.175.3.21.0.4.0 on Solaris 11.3Upgrade database/mysql-55/tests to version 5.5.56-0.175.3.21.0.4.0 on Solaris 11.3Upgrade database/mysql-56/client to version 5.6.36-0.175.3.21.0.4.0 on Solaris 11.3Upgrade database/mysql-56/library to version 5.6.36-0.175.3.21.0.4.0 on Solaris 11.3Upgrade database/mysql-57/embedded to version 5.7.23-0.175.3.35.0.5.0 on Solaris 11.3Upgrade database/mysql-55/library to version 5.5.56-0.175.3.21.0.4.0 on Solaris 11.3Upgrade database/mysql-57/client to version 5.7.23-0.175.3.35.0.5.0 on Solaris 11.3Upgrade database/mysql-57/tests to version 5.7.23-0.175.3.35.0.5.0 on Solaris 11.3Upgrade database/mysql-57 to version 5.7.23-0.175.3.35.0.5.0 on Solaris 11.3 | Jun 20, 2017 | Apr 24, 2017 |
| Oracle_linux | — | Upgrade mariadb-embeddedUpgrade mariadbUpgrade mariadb-serverUpgrade mariadb-benchUpgrade mariadb-embedded-develUpgrade mariadb-develUpgrade mariadb-libsUpgrade mariadb-test | Aug 8, 2017 | Apr 19, 2017 |
| Redhat_linux | — | Upgrade mariadbUpgrade mariadb-debuginfoUpgrade mariadb-embeddedUpgrade mariadb-testUpgrade mariadb-serverUpgrade mariadb-embedded-develUpgrade mariadb-benchUpgrade mariadb-libsUpgrade mariadb-develNo solution exists | Aug 4, 2017 | Apr 19, 2017 |
| Suse | — | Upgrade libmysqld18Upgrade mysql-toolsUpgrade libmysql55client_r18-x86Upgrade mysqlUpgrade libmysqlclient_r18-32bitUpgrade libmysqld-develUpgrade libmysql55client18-32bitUpgrade libmysql55client18Upgrade libmysql55client_r18Upgrade libmysqlclient_r18Upgrade mysql-clientUpgrade mariadb-100-errormessagesUpgrade libmysqlclient18Upgrade libmysqld19Upgrade libmysql55client18-x86Upgrade libmariadbd19Upgrade mariadb-errormessagesUpgrade libmysqlclient-develUpgrade mariadb-clientUpgrade libmysqlclient18-32bitUpgrade libmysql55client_r18-32bitUpgrade mariadbUpgrade libmariadbd-develUpgrade mariadb-tools | May 2, 2017 | Apr 19, 2017 |
| Ubuntu | — | Upgrade mysql-server-5.5Upgrade mysql-server-5.7 | May 2, 2017 | Apr 19, 2017 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub