CVE Vulnerabilities

CVE-2017-3523

Published: Apr 24, 2017 | Modified: Oct 03, 2019
CVSS 3.x
8.5
HIGH
Source:
NVD
CVSS:3.0/AV:N/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H
CVSS 2.x
6 MEDIUM
AV:N/AC:M/Au:S/C:P/I:P/A:P
RedHat/V2
RedHat/V3
8.5 IMPORTANT
CVSS:3.0/AV:N/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H
Ubuntu
MEDIUM

Vulnerability in the MySQL Connectors component of Oracle MySQL (subcomponent: Connector/J). Supported versions that are affected are 5.1.40 and earlier. Difficult to exploit vulnerability allows low privileged attacker with network access via multiple protocols to compromise MySQL Connectors. While the vulnerability is in MySQL Connectors, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in takeover of MySQL Connectors. CVSS 3.0 Base Score 8.5 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H).

Affected Software

Name Vendor Start Version End Version
Connector/j Oracle * 5.1.40 (including)
Mysql-connector-java Ubuntu artful *
Mysql-connector-java Ubuntu esm-apps/xenial *
Mysql-connector-java Ubuntu esm-infra-legacy/trusty *
Mysql-connector-java Ubuntu precise *
Mysql-connector-java Ubuntu trusty *
Mysql-connector-java Ubuntu trusty/esm *
Mysql-connector-java Ubuntu upstream *
Mysql-connector-java Ubuntu xenial *
Mysql-connector-java Ubuntu yakkety *
Mysql-connector-java Ubuntu zesty *

References