Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Optimizer). Supported versions that are affected are 5.5.54 and earlier, 5.6.35 and earlier and 5.7.17 and earlier. Easily "exploitable" vulnerability allows low privileged attacker with network access via multiple protocols to compromise MySQL Server. While the vulnerability is in MySQL Server, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.0 Base Score 7.7 (Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H).
CVSS Details
- CVSS 3.1 Base Score: 7.7
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | — | Upgrade mariadb | Sep 20, 2017 | Apr 24, 2017 |
| Amazon_linux | — | Upgrade mysql55Upgrade mysql56 | May 19, 2017 | Apr 19, 2017 |
| Centos_linux | — | Upgrade mariadbUpgrade mariadb-benchUpgrade mariadb-embedded-develUpgrade mariadb-develUpgrade mariadb-serverUpgrade mariadb-debuginfoUpgrade mariadb-embeddedUpgrade mariadb-testUpgrade mariadb-libs | Aug 28, 2019 | Apr 24, 2017 |
| Debian | — | Upgrade mariadb-10.1Upgrade mysql-5.5 | Apr 25, 2017 | Apr 19, 2017 |
| Freebsd | — | Upgrade mariadb100-serverUpgrade mariadb101-serverUpgrade mysql55-serverUpgrade mysql56-serverUpgrade mariadb55-serverUpgrade mysql57-server | Apr 19, 2017 | Apr 19, 2017 |
| Gentoo Linux | — | Upgrade dev-db/mysql. | Feb 20, 2018 | Apr 24, 2017 |
| Huawei Euleros 2_0_sp1 | — | Upgrade mariadb-testUpgrade mariadb-serverUpgrade mariadbUpgrade mariadb-benchUpgrade mariadb-libsUpgrade mariadb-embeddedUpgrade mariadb-devel | Jan 18, 2018 | Apr 24, 2017 |
| Huawei Euleros 2_0_sp2 | — | Upgrade mariadb-testUpgrade mariadbUpgrade mariadb-benchUpgrade mariadb-libsUpgrade mariadb-serverUpgrade mariadb-devel | Jan 18, 2018 | Apr 24, 2017 |
| Mariadb Mariadb | — | Upgrade MariaDB to the latest version | Mar 4, 2025 | Apr 24, 2017 |
| Oracle Mysql | — | Upgrade to the latest version of MySQL | May 5, 2017 | Apr 24, 2017 |
| Oracle Solaris | — | Upgrade database/mysql-55/tests to version 5.5.56-0.175.3.21.0.4.0 on Solaris 11.3Upgrade database/mysql-57 to version 5.7.23-0.175.3.35.0.5.0 on Solaris 11.3Upgrade database/mysql-57/client to version 5.7.23-0.175.3.35.0.5.0 on Solaris 11.3Upgrade database/mysql-57/embedded to version 5.7.23-0.175.3.35.0.5.0 on Solaris 11.3Upgrade database/mysql-56 to version 5.6.36-0.175.3.21.0.4.0 on Solaris 11.3Upgrade database/mysql-57/tests to version 5.7.23-0.175.3.35.0.5.0 on Solaris 11.3Upgrade database/mysql-55/library to version 5.5.56-0.175.3.21.0.4.0 on Solaris 11.3Upgrade database/mysql-55 to version 5.5.56-0.175.3.21.0.4.0 on Solaris 11.3Upgrade database/mysql-56/tests to version 5.6.36-0.175.3.21.0.4.0 on Solaris 11.3Upgrade database/mysql-56/library to version 5.6.36-0.175.3.21.0.4.0 on Solaris 11.3Upgrade database/mysql-56/client to version 5.6.36-0.175.3.21.0.4.0 on Solaris 11.3Upgrade database/mysql-57/library to version 5.7.23-0.175.3.35.0.5.0 on Solaris 11.3Upgrade database/mysql-55/client to version 5.5.56-0.175.3.21.0.4.0 on Solaris 11.3 | Jun 20, 2017 | Apr 24, 2017 |
| Oracle_linux | — | Upgrade mariadb-embedded-develUpgrade mariadb-benchUpgrade mariadb-embeddedUpgrade mariadb-develUpgrade mariadb-serverUpgrade mariadb-libsUpgrade mariadbUpgrade mariadb-test | Aug 8, 2017 | Apr 19, 2017 |
| Redhat_linux | — | Upgrade mariadb-debuginfoUpgrade mariadb-embeddedUpgrade mariadb-serverUpgrade mariadb-libsUpgrade mariadb-embedded-develUpgrade mariadb-benchUpgrade mariadbUpgrade mariadb-develUpgrade mariadb-testNo solution exists | Aug 4, 2017 | Apr 19, 2017 |
| Suse | — | Upgrade libmysql55client18-x86Upgrade mariadbUpgrade libmariadbd19Upgrade libmysql55client_r18-32bitUpgrade libmysql55client18-32bitUpgrade mariadb-clientUpgrade mariadb-100-errormessagesUpgrade libmysql55client18Upgrade libmysqlclient18Upgrade libmysql55client_r18Upgrade libmysqld19Upgrade libmysqld18Upgrade mariadb-toolsUpgrade libmariadbd-develUpgrade mysqlUpgrade libmysqlclient-develUpgrade libmysql55client_r18-x86Upgrade libmysqlclient_r18Upgrade mysql-clientUpgrade mariadb-errormessagesUpgrade libmysqld-develUpgrade mysql-toolsUpgrade libmysqlclient18-32bitUpgrade libmysqlclient_r18-32bit | May 2, 2017 | Apr 19, 2017 |
| Ubuntu | — | Upgrade mysql-server-5.5Upgrade mysql-server-5.7 | May 2, 2017 | Apr 19, 2017 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub