CVE-2017-3331 : Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Serve

Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: DML). The supported version that is affected is 5.7.11 to 5.7.17. Easily "exploitable" vulnerability allows low privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.0 Base Score 6.5 (Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H).

Published 2017-04-24 19:59:01

Updated 2019-10-03 00:03:26

Source Oracle

View at NVD, CVE.org

Vulnerability category: Denial of service

Products affected by CVE-2017-3331

Oracle » Mysql » Version: 5.7.16
cpe:2.3:a:oracle:mysql:5.7.16:*:*:*:*:*:*:*
Matching versions
Oracle » Mysql » Version: 5.7.17
cpe:2.3:a:oracle:mysql:5.7.17:*:*:*:*:*:*:*
Matching versions
Oracle » Mysql » Version: 5.7.12
cpe:2.3:a:oracle:mysql:5.7.12:*:*:*:*:*:*:*
Matching versions
Oracle » Mysql » Version: 5.7.14
cpe:2.3:a:oracle:mysql:5.7.14:*:*:*:*:*:*:*
Matching versions
Oracle » Mysql » Version: 5.7.15
cpe:2.3:a:oracle:mysql:5.7.15:*:*:*:*:*:*:*
Matching versions
Oracle » Mysql » Version: 5.7.11
cpe:2.3:a:oracle:mysql:5.7.11:*:*:*:*:*:*:*
Matching versions
Oracle » Mysql » Version: 5.7.13
cpe:2.3:a:oracle:mysql:5.7.13:*:*:*:*:*:*:*
Matching versions

Exploit prediction scoring system (EPSS) score for CVE-2017-3331

EPSS FAQ

0.12%

Probability of exploitation activity in the next 30 days EPSS Score History

~ 45 %

Percentile, the proportion of vulnerabilities that are scored at or less

CVSS scores for CVE-2017-3331

Base Score	Base Severity	CVSS Vector	Exploitability Score	Impact Score	Score Source
4.0	MEDIUM	AV:N/AC:L/Au:S/C:N/I:N/A:P	8.0	2.9	NIST
Access Vector: Network Access Complexity: Low Authentication: Single Confidentiality Impact: None Integrity Impact: None Availability Impact: Partial
6.5	MEDIUM	CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H	2.8	3.6	NIST
Attack Vector: Network Attack Complexity: Low Privileges Required: Low User Interaction: None Scope: Unchanged Confidentiality: None Integrity: None Availability: High

References for CVE-2017-3331

https://access.redhat.com/errata/RHSA-2017:2886

RHSA-2017:2886 - Security Advisory - Red Hat Customer Portal

CVEs referencing this url
http://www.securitytracker.com/id/1038287

MySQL Multiple Flaws Let Remote Authenticated and Local Users Modify Data, Remote and Local Users Deny Service, and Remote Authenticated Users Gain Elevated Privileges - SecurityTracker

CVEs referencing this url
http://www.securityfocus.com/bid/97772

Oracle MySQL Server CVE-2017-3331 Remote Security Vulnerability
Third Party Advisory;VDB Entry
http://www.oracle.com/technetwork/security-advisory/cpuapr2017-3236618.html

Oracle Critical Patch Update - April 2017
Patch;Vendor Advisory

CVEs referencing this url

Jump to

Vulnerability Details : CVE-2017-3331

Products affected by CVE-2017-3331

Exploit prediction scoring system (EPSS) score for CVE-2017-3331

CVSS scores for CVE-2017-3331

References for CVE-2017-3331