Description
Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: InnoDB). Supported versions that are affected are 5.7.18 and earlier. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of MySQL Server accessible data and unauthorized ability to cause a partial denial of service (partial DOS) of MySQL Server. CVSS 3.0 Base Score 3.8 (Integrity and Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:L/A:L).
Published: 2017-10-19
Score: 3.8 Low
EPSS: < 1% Very Low
KEV: No
Impact: n/a
Action: n/a
AI Analysis

No analysis available yet.

Remediation

No remediation available yet.

Tracking

Sign in to view the affected projects.

Advisories
Source ID Title
EUVD EUVD EUVD-2017-2012 Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: InnoDB). Supported versions that are affected are 5.7.18 and earlier. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of MySQL Server accessible data and unauthorized ability to cause a partial denial of service (partial DOS) of MySQL Server. CVSS 3.0 Base Score 3.8 (Integrity and Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:L/A:L).
History

Mon, 07 Oct 2024 19:15:00 +0000

Type Values Removed Values Added
Metrics ssvc

{'options': {'Automatable': 'no', 'Exploitation': 'none', 'Technical Impact': 'partial'}, 'version': '2.0.3'}


Subscriptions

Mariadb Mariadb
Netapp Active Iq Unified Manager Oncommand Balance Oncommand Insight Oncommand Performance Manager Oncommand Unified Manager Oncommand Workflow Automation Snapcenter
Oracle Mysql
Redhat Rhel Software Collections
cve-icon MITRE

Status: PUBLISHED

Assigner: oracle

Published:

Updated: 2024-10-04T16:47:19.899Z

Reserved: 2017-06-21T00:00:00.000Z

Link: CVE-2017-10365

cve-icon Vulnrichment

Updated: 2024-08-05T17:41:55.204Z

cve-icon NVD

Status : Deferred

Published: 2017-10-19T17:29:04.747

Modified: 2025-04-20T01:37:25.860

Link: CVE-2017-10365

cve-icon Redhat

Severity : Low

Publid Date: 2017-10-18T00:00:00Z

Links: CVE-2017-10365 - Bugzilla

cve-icon OpenCVE Enrichment

No data.

Weaknesses