CoreCVE
Back

MEDIUM

mysql: Client programs unspecified vulnerability (CPU Jul 2017)

Published Aug 8, 2017

Description

Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Client programs). Supported versions that are affected are 5.5.56 and earlier and 5.6.36 and earlier. Easily exploitable vulnerability allows low privileged attacker with logon to the infrastructure where MySQL Server executes to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of MySQL Server accessible data as well as unauthorized read access to a subset of MySQL Server accessible data and unauthorized ability to cause a partial denial of service (partial DOS) of MySQL Server. CVSS 3.0 Base Score 5.3 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L).

Affected products

Remediation

No remediation recorded yet.

Metrics

Weaknesses (0)

No CWE recorded.

References (16)

Change history (0)

No recorded changes yet.

Sources
CVE.org / MITRE
Status PUBLISHED
Assigner oracle
Published Aug 8, 2017
Updated Oct 4, 2024
Reserved Dec 6, 2016
Link CVE-2017-3636
CISA Vulnrichment
Updated Oct 4, 2024
NVD
Status Modified
Modified Jun 17, 2026
Link CVE-2017-3636
Red Hat
Severity Moderate
Public date Jul 19, 2017
Links CVE-2017-3636 - Bugzilla