4.1

CVE-2017-10268

Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Replication). Supported versions that are affected are 5.5.57 and earlier, 5.6.37 and earlier and 5.7.19 and earlier. Difficult to exploit vulnerability allows high privileged attacker with logon to the infrastructure where MySQL Server executes to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all MySQL Server accessible data. CVSS 3.0 Base Score 4.1 (Confidentiality impacts). CVSS Vector: (CVSS:3.0/AV:L/AC:H/PR:H/UI:N/S:U/C:H/I:N/A:N).
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Oracle ≫ Mysql Version >= 5.5.0 <= 5.5.57
Oracle ≫ Mysql Version >= 5.6.0 <= 5.6.37
Oracle ≫ Mysql Version >= 5.7.0 <= 5.7.19
Debian ≫ Debian Linux Version8.0
Debian ≫ Debian Linux Version9.0
Redhat ≫ Openstack Version12
Redhat ≫ Enterprise Linux Eus Version7.5
Redhat ≫ Enterprise Linux Eus Version7.6
Redhat ≫ Enterprise Linux Eus Version7.7
Mariadb ≫ Mariadb Version >= 5.5.0 < 5.5.58
Mariadb ≫ Mariadb Version >= 10.0.0 < 10.0.33
Mariadb ≫ Mariadb Version >= 10.1.0 < 10.1.29
Mariadb ≫ Mariadb Version >= 10.2.0 < 10.2.10
Netapp ≫ Active Iq Unified Manager SwPlatformwindows Version >= 7.3
Netapp ≫ Active Iq Unified Manager SwPlatformvmware_vsphere Version >= 9.5
Netapp ≫ Oncommand Balance Version-
Netapp ≫ Oncommand Insight Version-
Netapp ≫ Oncommand Performance Manager Version- SwPlatformvmware_vsphere
Netapp ≫ Oncommand Unified Manager SwPlatformvsphere Version <= 7.1
Netapp ≫ Oncommand Unified Manager SwPlatformwindows Version <= 7.1
Netapp ≫ Snapcenter Version-
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 0.7% 0.486
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
nvd@nist.gov 4.1 0.5 3.6
CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:H/I:N/A:N
nvd@nist.gov 1.5 2.7 2.9
AV:L/AC:M/Au:S/C:P/I:N/A:N
Es wurden noch keine Informationen zu CWE veröffentlicht.
http://www.oracle.com/technetwork/security-advisory/cpuoct2017-3236626.html
Patch
Vendor Advisory
https://access.redhat.com/errata/RHSA-2018:0279
Third Party Advisory
https://access.redhat.com/errata/RHSA-2018:0574
Third Party Advisory
https://security.netapp.com/advisory/ntap-20171019-0002/
Third Party Advisory
https://access.redhat.com/errata/RHSA-2018:2439
Third Party Advisory
https://access.redhat.com/errata/RHSA-2018:2729
Third Party Advisory
http://www.securitytracker.com/id/1039597
Third Party Advisory
Broken Link
VDB Entry
https://access.redhat.com/errata/RHSA-2017:3265
Third Party Advisory
https://access.redhat.com/errata/RHSA-2017:3442
Third Party Advisory
http://www.debian.org/security/2017/dsa-4002
Third Party Advisory
http://www.securityfocus.com/bid/101390
Third Party Advisory
VDB Entry
https://access.redhat.com/errata/RHSA-2019:1258
Third Party Advisory
https://lists.debian.org/debian-lts-announce/2018/06/msg00015.html
Third Party Advisory
Mailing List
https://www.debian.org/security/2018/dsa-4341
Third Party Advisory