4.7

CVE-2017-3313

Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: MyISAM). Supported versions that are affected are 5.5.53 and earlier, 5.6.34 and earlier and 5.7.16 and earlier. Difficult to exploit vulnerability allows low privileged attacker with logon to the infrastructure where MySQL Server executes to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all MySQL Server accessible data. CVSS v3.0 Base Score 4.7 (Confidentiality impacts).
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
OracleMysql Version >= 5.5.0 <= 5.5.53
OracleMysql Version >= 5.6.0 <= 5.6.34
OracleMysql Version >= 5.7.0 <= 5.7.16
DebianDebian Linux Version8.0
CanonicalUbuntu Linux Version10.04 SwEdition-
CanonicalUbuntu Linux Version12.04 SwEdition-
CanonicalUbuntu Linux Version12.10
CanonicalUbuntu Linux Version13.10
RedhatEnterprise Linux Eus Version6.5
MariadbMariadb Version >= 5.5.0 < 5.5.55
MariadbMariadb Version >= 10.0.0 < 10.0.30
MariadbMariadb Version >= 10.1.0 < 10.1.22
MariadbMariadb Version >= 10.2.0 < 10.2.5
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 0.42% 0.341
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
nvd@nist.gov 4.7 1 3.6
CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N
nvd@nist.gov 1.5 2.7 2.9
AV:L/AC:M/Au:S/C:P/I:N/A:N
Es wurden noch keine Informationen zu CWE veröffentlicht.
http://www.securitytracker.com/id/1037640
Third Party Advisory
VDB Entry
https://access.redhat.com/errata/RHSA-2017:2192
Third Party Advisory
https://access.redhat.com/errata/RHSA-2018:0279
Third Party Advisory
https://access.redhat.com/errata/RHSA-2018:0574
Third Party Advisory
http://www.oracle.com/technetwork/security-advisory/cpujan2017-2881727.html
Patch
Vendor Advisory
https://security.gentoo.org/glsa/201702-17
Third Party Advisory
https://access.redhat.com/errata/RHSA-2017:2787
Third Party Advisory
https://access.redhat.com/errata/RHSA-2017:2886
Third Party Advisory
http://www.debian.org/security/2017/dsa-3767
Third Party Advisory
http://www.debian.org/security/2017/dsa-3809
Third Party Advisory
http://www.securityfocus.com/bid/95527
Third Party Advisory
VDB Entry