Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Optimizer). Supported versions that are affected are 5.6.35 and earlier. Easily "exploitable" vulnerability allows low privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.0 Base Score 6.5 (Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H).
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Freebsd | — | Upgrade mysql56-serverUpgrade mysql57-serverUpgrade mariadb100-serverUpgrade mysql55-serverUpgrade mariadb55-serverUpgrade mariadb101-server | Apr 19, 2017 | Apr 19, 2017 |
| Gentoo Linux | — | Upgrade dev-db/mysql. | Feb 20, 2018 | Apr 24, 2017 |
| Oracle Mysql | — | Upgrade to the latest version of MySQL | May 5, 2017 | Apr 24, 2017 |
| Suse | — | Upgrade mysql-community-server-toolsUpgrade mysql-community-server-testUpgrade mysql-community-server-debuginfoUpgrade libmysql56client18-debuginfo-32bitUpgrade mysql-community-server-client-debuginfoUpgrade mysql-community-server-errormessagesUpgrade libmysql56client18-32bitUpgrade libmysql56client_r18Upgrade mysql-community-server-debugsourceUpgrade mysql-community-serverUpgrade mysql-community-server-clientUpgrade mysql-community-server-benchUpgrade libmysql56client_r18-32bitUpgrade mysql-community-server-test-debuginfoUpgrade mysql-community-server-tools-debuginfoUpgrade mysql-community-server-bench-debuginfoUpgrade libmysql56client18Upgrade libmysql56client18-debuginfo | May 8, 2017 | Apr 19, 2017 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub