4.7

CVE-2017-3313

Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: MyISAM). Supported versions that are affected are 5.5.53 and earlier, 5.6.34 and earlier and 5.7.16 and earlier. Difficult to exploit vulnerability allows low privileged attacker with logon to the infrastructure where MySQL Server executes to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all MySQL Server accessible data. CVSS v3.0 Base Score 4.7 (Confidentiality impacts).
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Oracle ≫ Mysql Version >= 5.5.0 <= 5.5.53
Oracle ≫ Mysql Version >= 5.6.0 <= 5.6.34
Oracle ≫ Mysql Version >= 5.7.0 <= 5.7.16
Debian ≫ Debian Linux Version 8.0
Canonical ≫ Ubuntu Linux Version 10.04 SwEdition -
Canonical ≫ Ubuntu Linux Version 12.04 SwEdition -
Canonical ≫ Ubuntu Linux Version 12.10
Canonical ≫ Ubuntu Linux Version 13.10
Redhat ≫ Enterprise Linux Eus Version 6.5
Mariadb ≫ Mariadb Version >= 5.5.0 < 5.5.55
Mariadb ≫ Mariadb Version >= 10.0.0 < 10.0.30
Mariadb ≫ Mariadb Version >= 10.1.0 < 10.1.22
Mariadb ≫ Mariadb Version >= 10.2.0 < 10.2.5
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 0.42% 0.341
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
NIST 4.7 1 3.6
CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N
NIST 1.5 2.7 2.9
AV:L/AC:M/Au:S/C:P/I:N/A:N
Es wurden noch keine Informationen zu CWE veröffentlicht.
http://www.securitytracker.com/id/1037640
Third Party Advisory
VDB Entry
https://access.redhat.com/errata/RHSA-2017:2192
Third Party Advisory
https://access.redhat.com/errata/RHSA-2018:0279
Third Party Advisory
https://access.redhat.com/errata/RHSA-2018:0574
Third Party Advisory
http://www.oracle.com/technetwork/security-advisory/cpujan2017-2881727.html
Patch
Vendor Advisory
https://security.gentoo.org/glsa/201702-17
Third Party Advisory
https://access.redhat.com/errata/RHSA-2017:2787
Third Party Advisory
https://access.redhat.com/errata/RHSA-2017:2886
Third Party Advisory
http://www.debian.org/security/2017/dsa-3767
Third Party Advisory
http://www.debian.org/security/2017/dsa-3809
Third Party Advisory
http://www.securityfocus.com/bid/95527
Third Party Advisory
VDB Entry