CVE-2017-3653: Low severity mysql vulnerability
Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: DDL). Supported versions that are affected are 5.5.56 and earlier, 5.6.36 and earlier and 5.7.18 and earlier. Difficult to exploit vulnerability allows low privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of MySQL Server accessible data.
External References:
http://www.oracle.com/technetwork/security-advisory/cpujul2017-3236622.html#AppendixMSQL
Other sources
Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: DDL). Supported versions that are affected are 5.5.56 and earlier, 5.6.36 and earlier and 5.7.18 and earlier. Difficult to exploit vulnerability allows low privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of MySQL Server accessible data. CVSS 3.0 Base Score 3.1 (Integrity impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:H/PR:L/UI:N/S:U/C:N/I:L/A:N).
Affected Software
Remediation
Patch Available
Patch Available
Patch Available
Patch Available
Patch Available
Event History
Frequently Asked Questions
What is the severity of CVE-2017-3653?
CVE-2017-3653 is classified as a difficult to exploit vulnerability allowing low privileged attackers with network access.
How do I fix CVE-2017-3653?
To remediate CVE-2017-3653, upgrade to MySQL version 5.5.57, 5.6.37, or 5.7.19 or later.
Which MySQL versions are affected by CVE-2017-3653?
Affected MySQL versions include 5.5.56 and earlier, 5.6.36 and earlier, and 5.7.18 and earlier.
What types of systems are vulnerable to CVE-2017-3653?
CVE-2017-3653 affects MySQL Server components across various platforms, including Debian and Red Hat distributions.
Can I use MariaDB as an alternative to avoid CVE-2017-3653?
While using MariaDB may provide some functionality, ensure you are using versions patched against CVE-2017-3653 to maintain security.