CVE-2017-3636: Medium severity mysql vulnerability
Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Client programs). Supported versions that are affected are 5.5.56 and earlier and 5.6.36 and earlier. Easily exploitable vulnerability allows low privileged attacker with logon to the infrastructure where MySQL Server executes to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of MySQL Server accessible data as well as unauthorized read access to a subset of MySQL Server accessible data and unauthorized ability to cause a partial denial of service (partial DOS) of MySQL Server.
External References:
http://www.oracle.com/technetwork/security-advisory/cpujul2017-3236622.html#AppendixMSQL
Other sources
Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Client programs). Supported versions that are affected are 5.5.56 and earlier and 5.6.36 and earlier. Easily exploitable vulnerability allows low privileged attacker with logon to the infrastructure where MySQL Server executes to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of MySQL Server accessible data as well as unauthorized read access to a subset of MySQL Server accessible data and unauthorized ability to cause a partial denial of service (partial DOS) of MySQL Server. CVSS 3.0 Base Score 5.3 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L).
Affected Software
Remediation
Event History
Frequently Asked Questions
What is the severity of CVE-2017-3636?
CVE-2017-3636 is classified as an easily exploitable vulnerability that affects multiple MySQL versions.
How do I fix CVE-2017-3636?
To remediate CVE-2017-3636, upgrade MySQL to version 5.5.57 or 5.6.37 or later.
Which MySQL versions are affected by CVE-2017-3636?
CVE-2017-3636 affects MySQL versions 5.5.56 and earlier, as well as 5.6.36 and earlier.
Is CVE-2017-3636 exploitable remotely?
CVE-2017-3636 allows exploitation by low privileged attackers who have logged onto the infrastructure where the MySQL Server is running.
What component of MySQL is affected by CVE-2017-3636?
CVE-2017-3636 affects the MySQL Server component, specifically the client programs subcomponent.