Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
amazonAmazonALAS-2017-789
HistoryJan 26, 2017 - 6:00 p.m.

Medium: mysql55

2017-01-2618:00:00
alas.aws.amazon.com
14

6.5 Medium

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

4 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

SINGLE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:L/Au:S/C:N/I:N/A:P

0.003 Low

EPSS

Percentile

64.8%

JSON

Issue Overview:

The following security-related issues were fixed:

CVE-2017-3238 Server: Optimizer unspecified vulnerability
CVE-2017-3243 Server: Charsets unspecified vulnerability
CVE-2017-3244 Server: DML unspecified vulnerability
CVE-2017-3258 Server: DDL unspecified vulnerability
CVE-2017-3313 Server: MyISAM unspecified vulnerability
CVE-2017-3317 Logging unspecified vulnerability
CVE-2017-3318 Server: Error Handling unspecified vulnerability

Affected Packages:

mysql55

Issue Correction:
Run yum update mysql55 to update your system.

New Packages:

i686:  
    mysql-config-5.5.54-1.16.amzn1.i686  
    mysql55-devel-5.5.54-1.16.amzn1.i686  
    mysql55-embedded-devel-5.5.54-1.16.amzn1.i686  
    mysql55-5.5.54-1.16.amzn1.i686  
    mysql55-bench-5.5.54-1.16.amzn1.i686  
    mysql55-server-5.5.54-1.16.amzn1.i686  
    mysql55-embedded-5.5.54-1.16.amzn1.i686  
    mysql55-debuginfo-5.5.54-1.16.amzn1.i686  
    mysql55-test-5.5.54-1.16.amzn1.i686  
    mysql55-libs-5.5.54-1.16.amzn1.i686  
  
src:  
    mysql55-5.5.54-1.16.amzn1.src  
  
x86_64:  
    mysql55-test-5.5.54-1.16.amzn1.x86_64  
    mysql55-server-5.5.54-1.16.amzn1.x86_64  
    mysql55-5.5.54-1.16.amzn1.x86_64  
    mysql55-bench-5.5.54-1.16.amzn1.x86_64  
    mysql55-embedded-devel-5.5.54-1.16.amzn1.x86_64  
    mysql55-embedded-5.5.54-1.16.amzn1.x86_64  
    mysql55-libs-5.5.54-1.16.amzn1.x86_64  
    mysql-config-5.5.54-1.16.amzn1.x86_64  
    mysql55-devel-5.5.54-1.16.amzn1.x86_64  
    mysql55-debuginfo-5.5.54-1.16.amzn1.x86_64

Additional References

Red Hat: CVE-2017-3238, CVE-2017-3243, CVE-2017-3244, CVE-2017-3258, CVE-2017-3313, CVE-2017-3317, CVE-2017-3318

Mitre: CVE-2017-3238, CVE-2017-3243, CVE-2017-3244, CVE-2017-3258, CVE-2017-3313, CVE-2017-3317, CVE-2017-3318

OSVersionArchitecturePackageVersionFilename
Amazon Linux1i686mysql-config< 5.5.54-1.16.amzn1mysql-config-5.5.54-1.16.amzn1.i686.rpm
Amazon Linux1i686mysql55-devel< 5.5.54-1.16.amzn1mysql55-devel-5.5.54-1.16.amzn1.i686.rpm
Amazon Linux1i686mysql55-embedded-devel< 5.5.54-1.16.amzn1mysql55-embedded-devel-5.5.54-1.16.amzn1.i686.rpm
Amazon Linux1i686mysql55< 5.5.54-1.16.amzn1mysql55-5.5.54-1.16.amzn1.i686.rpm
Amazon Linux1i686mysql55-bench< 5.5.54-1.16.amzn1mysql55-bench-5.5.54-1.16.amzn1.i686.rpm
Amazon Linux1i686mysql55-server< 5.5.54-1.16.amzn1mysql55-server-5.5.54-1.16.amzn1.i686.rpm
Amazon Linux1i686mysql55-embedded< 5.5.54-1.16.amzn1mysql55-embedded-5.5.54-1.16.amzn1.i686.rpm
Amazon Linux1i686mysql55-debuginfo< 5.5.54-1.16.amzn1mysql55-debuginfo-5.5.54-1.16.amzn1.i686.rpm
Amazon Linux1i686mysql55-test< 5.5.54-1.16.amzn1mysql55-test-5.5.54-1.16.amzn1.i686.rpm
Amazon Linux1i686mysql55-libs< 5.5.54-1.16.amzn1mysql55-libs-5.5.54-1.16.amzn1.i686.rpm
Rows per page:
1-10 of 201

Related

nessus 45
openvas 33
debian 7
osv 11
suse 9
fedora 6
amazon 1
slackware 2
gentoo 2
mageia 2
ubuntu 1
freebsd 1
f5 4
ibm 1
centos 1
redhat 5
oraclelinux 1
redhatcve 7
veracode 6
alpinelinux 7
debiancve 7
mariadbunix 7
cve 7
ubuntucve 7
prion 7
mskb 1
altlinux 1
oracle 1
nessus
nessus
Amazon Linux AMI : mysql55 (ALAS-2017-789)
2017-01-27 00:00:00
Debian DSA-3767-1 : mysql-5.5 - security update
2017-01-20 00:00:00
MySQL 5.5.x < 5.5.54 Multiple Vulnerabilities (January 2017 CPU)
2016-12-15 00:00:00
openvas
openvas
Debian Security Advisory DSA 3767-1 (mysql-5.5 - security update)
2017-01-19 00:00:00
Debian: Security Advisory (DLA-797-1)
2023-03-08 00:00:00
Debian: Security Advisory (DSA-3767-1)
2017-01-18 00:00:00
debian
debian
[SECURITY] [DSA 3767-1] mysql-5.5 security update
2017-01-19 20:31:53
[SECURITY] [DLA 797-1] mysql-5.5 security update
2017-01-25 01:53:37
[SECURITY] [DSA 3767-1] mysql-5.5 security update
2017-01-19 20:31:53
osv
osv
mysql-5.5 - security update
2017-01-25 00:00:00
mysql-5.5 - security update
2017-01-19 00:00:00
mariadb-10.0 - security update
2017-01-22 00:00:00
suse
suse
Security update for mysql (important)
2017-02-07 00:07:36
Security update for mariadb (important)
2017-02-07 18:11:31
Security update for mariadb (important)
2017-02-07 18:08:59
fedora
fedora
[SECURITY] Fedora 25 Update: mariadb-10.1.21-1.fc25
2017-02-09 04:23:02
[SECURITY] Fedora 24 Update: mariadb-10.1.21-1.fc24
2017-02-09 20:51:26
[SECURITY] Fedora 25 Update: mariadb-10.1.24-3.fc25
2017-06-16 18:53:40
amazon
amazon
Medium: mysql56
2017-01-26 18:00:00
slackware
slackware
[slackware-security] mariadb
2017-01-18 20:40:17
[slackware-security] mariadb
2017-03-28 20:35:48
gentoo
gentoo
MariaDB: Multiple vulnerabilities
2017-02-20 00:00:00
MySQL: Multiple vulnerabilities
2017-02-20 00:00:00
mageia
mageia
Updated mariadb packages fix security vulnerability
2017-02-20 16:00:19
Updated mariadb packages fix security vulnerability
2017-03-31 09:14:39
ubuntu
ubuntu
MySQL vulnerabilities
2017-01-19 00:00:00
freebsd
freebsd
mysql -- multiple vulnerabilities
2017-01-18 00:00:00
f5
f5
K63545041 : Server component of Oracle MySQL vulnerabilities CVE-2017-3317, CVE-2017-3318, and CVE-2017-3319
2017-04-11 00:00:00
K98750200 : Server component of Oracle MySQL vulnerabilities CVE-2017-3243, CVE-2017-3244, CVE-2017-3257, CVE-2017-3265, and CVE-2017-3273
2017-04-11 00:00:00
K34205867 : Server component of Oracle MySQL vulnerabilities CVE-2016-8327, CVE-2017-3238, CVE-2017-3251, CVE-2017-3256, and CVE-2017-3258
2017-04-11 00:00:00
ibm
ibm
Security Bulletin: Vulnerabilities in MariaDB affect PowerKVM
2018-06-18 01:38:06
centos
centos
mariadb security update
2017-08-24 01:39:47
redhat
redhat
(RHSA-2017:2192) Moderate: mariadb security and bug fix update
2017-08-01 05:58:44
(RHSA-2018:0279) Moderate: rh-mariadb100-mariadb security update
2018-02-06 10:37:36
(RHSA-2018:0574) Moderate: rh-mariadb101-mariadb and rh-mariadb101-galera security and bug fix update
2018-03-21 13:36:47
oraclelinux
oraclelinux
mariadb security and bug fix update
2017-08-07 00:00:00
redhatcve
redhatcve
CVE-2017-3317
2017-01-18 10:48:41
CVE-2017-3318
2017-01-18 10:49:22
CVE-2017-3243
2017-01-18 10:49:30
veracode
veracode
Denial Of Service (DoS)
2019-05-02 06:37:03
Improper Access Control
2019-05-02 06:37:04
Denial Of Service (DoS)
2019-05-16 02:28:22
alpinelinux
alpinelinux
CVE-2017-3317
2017-01-27 22:59:00
CVE-2017-3258
2017-01-27 22:59:00
CVE-2017-3244
2017-01-27 22:59:00
debiancve
debiancve
CVE-2017-3318
2017-01-27 22:59:00
CVE-2017-3244
2017-01-27 22:59:00
CVE-2017-3317
2017-01-27 22:59:00
mariadbunix
mariadbunix
CVE-2017-3317
2017-01-27 22:59:00
CVE-2017-3313
2017-01-27 22:59:00
CVE-2017-3318
2017-01-27 22:59:00
cve
cve
CVE-2017-3317
2017-01-27 22:59:00
CVE-2017-3258
2017-01-27 22:59:00
CVE-2017-3243
2017-01-27 22:59:00
ubuntucve
ubuntucve
CVE-2017-3243
2017-01-18 00:00:00
CVE-2017-3318
2017-01-18 00:00:00
CVE-2017-3244
2017-01-18 00:00:00
prion
prion
Code injection
2017-01-27 22:59:00
Code injection
2017-01-27 22:59:00
Design/Logic Flaw
2017-01-27 22:59:00
mskb
mskb
MS16-087: Description of the security update for Windows print spooler components: July 12, 2016
2016-07-12 07:00:00
altlinux
altlinux
Security fix for the ALT Linux 8 package mariadb version 10.1.23-alt1
2017-05-05 00:00:00
oracle
oracle
Oracle Critical Patch Update Advisory - January 2017
2017-01-17 00:00:00

6.5 Medium

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

4 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

SINGLE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:L/Au:S/C:N/I:N/A:P

0.003 Low

EPSS

Percentile

64.8%

JSON
Related for ALAS-2017-789
nessus45openvas33debian7osv11suse9fedora6amazon1slackware2gentoo2mageia2ubuntu1freebsd1f54ibm1centos1redhat5oraclelinux1redhatcve7veracode6alpinelinux7debiancve7mariadbunix7cve7ubuntucve7prion7mskb1altlinux1oracle1