First published: Fri Jan 27 2017(Updated: )
Vulnerability in the MySQL Cluster component of Oracle MySQL (subcomponent: Cluster: NDBAPI). Supported versions that are affected are 7.2.25 and earlier, 7.3.14 and earlier, 7.4.12 and earlier and . Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise MySQL Cluster. Successful attacks of this vulnerability can result in unauthorized ability to cause a partial denial of service (partial DOS) of MySQL Cluster. CVSS v3.0 Base Score 3.7 (Availability impacts).
Credit: secalert_us@oracle.com
Affected Software | Affected Version | How to fix |
---|---|---|
Oracle MySQL Cluster | <=7.2.25 | |
Oracle MySQL Cluster | <=7.3.14 | |
Oracle MySQL Cluster | <=7.4.12 |
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
CVE-2017-3322 is considered a difficult to exploit vulnerability that could allow an unauthenticated attacker with network access to affect the MySQL Cluster.
To fix CVE-2017-3322, upgrade to MySQL Cluster version 7.2.26 or later, 7.3.15 or later, or 7.4.13 or later.
CVE-2017-3322 affects MySQL Cluster versions 7.2.25 and earlier, 7.3.14 and earlier, and 7.4.12 and earlier.
CVE-2017-3322 affects the MySQL Cluster component within the Oracle MySQL software.
Yes, CVE-2017-3322 can be exploited by an unauthenticated attacker with network access.