First published: Wed Apr 19 2017(Updated: )
Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: DML). The supported version that is affected is 5.7.11 to 5.7.17. Easily "exploitable" vulnerability allows low privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.0 Base Score 6.5 (Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H).
Credit: secalert_us@oracle.com
Affected Software | Affected Version | How to fix |
---|---|---|
redhat/mysql | <5.7.18 | 5.7.18 |
MySQL | =5.7.11 | |
MySQL | =5.7.12 | |
MySQL | =5.7.13 | |
MySQL | =5.7.14 | |
MySQL | =5.7.15 | |
MySQL | =5.7.16 | |
MySQL | =5.7.17 |
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
CVE-2017-3331 has been rated as an easily exploitable vulnerability, allowing low privileged attackers to compromise MySQL Server.
To fix CVE-2017-3331, upgrade MySQL Server to version 5.7.18 or later.
MySQL versions 5.7.11 through 5.7.17 are affected by CVE-2017-3331.
The impact of CVE-2017-3331 includes potential unauthorized access and compromise of the MySQL Server.
Organizations using MySQL versions 5.7.11 to 5.7.17 are at risk for CVE-2017-3331.