Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Optimizer). Supported versions that are affected are 5.6.35 and earlier. Easily "exploitable" vulnerability allows low privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.0 Base Score 6.5 (Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H).
CVSS Details
- CVSS 3.0 Base Score: 6.5
- CVSS 3.0 Vector: (CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Freebsd | — | Upgrade mariadb100-serverUpgrade mysql57-serverUpgrade mysql56-serverUpgrade mysql55-serverUpgrade mariadb55-serverUpgrade mariadb101-server | Apr 19, 2017 | Apr 19, 2017 |
| Gentoo Linux | — | Upgrade dev-db/mysql. | Feb 20, 2018 | Apr 24, 2017 |
| Oracle Mysql | — | Upgrade to the latest version of MySQL | May 5, 2017 | Apr 24, 2017 |
| Suse | — | Upgrade libmysql56client18Upgrade libmysql56client18-debuginfoUpgrade libmysql56client_r18Upgrade mysql-community-server-debugsourceUpgrade mysql-community-server-bench-debuginfoUpgrade libmysql56client_r18-32bitUpgrade mysql-community-server-test-debuginfoUpgrade mysql-community-server-benchUpgrade libmysql56client18-32bitUpgrade mysql-community-server-tools-debuginfoUpgrade mysql-community-server-clientUpgrade mysql-community-serverUpgrade mysql-community-server-testUpgrade mysql-community-server-toolsUpgrade libmysql56client18-debuginfo-32bitUpgrade mysql-community-server-debuginfoUpgrade mysql-community-server-errormessagesUpgrade mysql-community-server-client-debuginfo | May 8, 2017 | Apr 19, 2017 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub