Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
amazonAmazonALAS-2017-790
HistoryJan 26, 2017 - 6:00 p.m.

Medium: mysql56

2017-01-2618:00:00
alas.aws.amazon.com
14

6.8 Medium

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

REQUIRED

Scope

CHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:C/C:N/I:N/A:H

4 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

SINGLE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:L/Au:S/C:N/I:N/A:P

0.004 Low

EPSS

Percentile

73.3%

JSON

Issue Overview:

The following security-related issues were fixed:

CVE-2016-8318 Server: Security: Encryption unspecified vulnerability
CVE-2016-8327 Server: Replication unspecified vulnerability
CVE-2017-3238 Server: Optimizer unspecified vulnerability
CVE-2017-3244 Server: DML unspecified vulnerability
CVE-2017-3257 Server: InnoDB unspecified vulnerability
CVE-2017-3258 Server: DDL unspecified vulnerability
CVE-2017-3273 Server: DDL unspecified vulnerability
CVE-2017-3313 Server: MyISAM unspecified vulnerability
CVE-2017-3317 Logging unspecified vulnerability
CVE-2017-3318 Server: Error Handling unspecified vulnerability

Affected Packages:

mysql56

Issue Correction:
Run yum update mysql56 to update your system.

New Packages:

i686:  
    mysql56-libs-5.6.35-1.23.amzn1.i686  
    mysql56-bench-5.6.35-1.23.amzn1.i686  
    mysql56-devel-5.6.35-1.23.amzn1.i686  
    mysql56-server-5.6.35-1.23.amzn1.i686  
    mysql56-debuginfo-5.6.35-1.23.amzn1.i686  
    mysql56-errmsg-5.6.35-1.23.amzn1.i686  
    mysql56-test-5.6.35-1.23.amzn1.i686  
    mysql56-common-5.6.35-1.23.amzn1.i686  
    mysql56-5.6.35-1.23.amzn1.i686  
    mysql56-embedded-5.6.35-1.23.amzn1.i686  
    mysql56-embedded-devel-5.6.35-1.23.amzn1.i686  
  
src:  
    mysql56-5.6.35-1.23.amzn1.src  
  
x86_64:  
    mysql56-embedded-devel-5.6.35-1.23.amzn1.x86_64  
    mysql56-5.6.35-1.23.amzn1.x86_64  
    mysql56-devel-5.6.35-1.23.amzn1.x86_64  
    mysql56-server-5.6.35-1.23.amzn1.x86_64  
    mysql56-libs-5.6.35-1.23.amzn1.x86_64  
    mysql56-errmsg-5.6.35-1.23.amzn1.x86_64  
    mysql56-debuginfo-5.6.35-1.23.amzn1.x86_64  
    mysql56-embedded-5.6.35-1.23.amzn1.x86_64  
    mysql56-test-5.6.35-1.23.amzn1.x86_64  
    mysql56-common-5.6.35-1.23.amzn1.x86_64  
    mysql56-bench-5.6.35-1.23.amzn1.x86_64

Additional References

Red Hat: CVE-2016-8318, CVE-2016-8327, CVE-2017-3238, CVE-2017-3244, CVE-2017-3257, CVE-2017-3258, CVE-2017-3273, CVE-2017-3313, CVE-2017-3317, CVE-2017-3318

Mitre: CVE-2016-8318, CVE-2016-8327, CVE-2017-3238, CVE-2017-3244, CVE-2017-3257, CVE-2017-3258, CVE-2017-3273, CVE-2017-3313, CVE-2017-3317, CVE-2017-3318

OSVersionArchitecturePackageVersionFilename
Amazon Linux1i686mysql56-libs< 5.6.35-1.23.amzn1mysql56-libs-5.6.35-1.23.amzn1.i686.rpm
Amazon Linux1i686mysql56-bench< 5.6.35-1.23.amzn1mysql56-bench-5.6.35-1.23.amzn1.i686.rpm
Amazon Linux1i686mysql56-devel< 5.6.35-1.23.amzn1mysql56-devel-5.6.35-1.23.amzn1.i686.rpm
Amazon Linux1i686mysql56-server< 5.6.35-1.23.amzn1mysql56-server-5.6.35-1.23.amzn1.i686.rpm
Amazon Linux1i686mysql56-debuginfo< 5.6.35-1.23.amzn1mysql56-debuginfo-5.6.35-1.23.amzn1.i686.rpm
Amazon Linux1i686mysql56-errmsg< 5.6.35-1.23.amzn1mysql56-errmsg-5.6.35-1.23.amzn1.i686.rpm
Amazon Linux1i686mysql56-test< 5.6.35-1.23.amzn1mysql56-test-5.6.35-1.23.amzn1.i686.rpm
Amazon Linux1i686mysql56-common< 5.6.35-1.23.amzn1mysql56-common-5.6.35-1.23.amzn1.i686.rpm
Amazon Linux1i686mysql56< 5.6.35-1.23.amzn1mysql56-5.6.35-1.23.amzn1.i686.rpm
Amazon Linux1i686mysql56-embedded< 5.6.35-1.23.amzn1mysql56-embedded-5.6.35-1.23.amzn1.i686.rpm
Rows per page:
1-10 of 221

Related

nessus 44
suse 9
openvas 32
amazon 1
freebsd 1
gentoo 2
ubuntu 1
debian 7
osv 14
mageia 2
slackware 2
fedora 5
f5 4
redhatcve 10
ubuntucve 10
ibm 1
prion 10
cve 10
centos 1
redhat 4
veracode 7
oraclelinux 1
alpinelinux 7
debiancve 7
mariadbunix 7
nessus
nessus
Amazon Linux AMI : mysql56 (ALAS-2017-790)
2017-01-27 00:00:00
MySQL 5.6.x < 5.6.35 Multiple Vulnerabilities (January 2017 CPU)
2016-12-15 00:00:00
MySQL 5.6.x < 5.6.35 Multiple Vulnerabilities (January 2017 CPU)
2016-12-15 00:00:00
suse
suse
Security update for mysql-community-server (important)
2017-02-17 04:08:43
Security update for mysql-community-server (important)
2017-03-07 03:08:38
Security update for mariadb (important)
2017-02-07 18:11:31
openvas
openvas
openSUSE: Security Advisory for mysql-community-server (openSUSE-SU-2017:0618-1)
2017-03-07 00:00:00
openSUSE: Security Advisory for mysql-community-server (openSUSE-SU-2017:0479-1)
2017-02-17 00:00:00
Oracle Mysql Security Updates (jan2017-2881727) 03 - Windows
2017-01-18 00:00:00
amazon
amazon
Medium: mysql55
2017-01-26 18:00:00
freebsd
freebsd
mysql -- multiple vulnerabilities
2017-01-18 00:00:00
gentoo
gentoo
MySQL: Multiple vulnerabilities
2017-02-20 00:00:00
MariaDB: Multiple vulnerabilities
2017-02-20 00:00:00
ubuntu
ubuntu
MySQL vulnerabilities
2017-01-19 00:00:00
debian
debian
[SECURITY] [DSA 3767-1] mysql-5.5 security update
2017-01-19 20:31:53
[SECURITY] [DLA 797-1] mysql-5.5 security update
2017-01-25 01:53:37
[SECURITY] [DSA 3767-1] mysql-5.5 security update
2017-01-19 20:31:53
osv
osv
mysql-5.5 - security update
2017-01-19 00:00:00
mysql-5.5 - security update
2017-01-25 00:00:00
mariadb-10.0 - security update
2017-01-22 00:00:00
mageia
mageia
Updated mariadb packages fix security vulnerability
2017-02-20 16:00:19
Updated mariadb packages fix security vulnerability
2017-03-31 09:14:39
slackware
slackware
[slackware-security] mariadb
2017-01-18 20:40:17
[slackware-security] mariadb
2017-03-28 20:35:48
fedora
fedora
[SECURITY] Fedora 25 Update: mariadb-10.1.21-1.fc25
2017-02-09 04:23:02
[SECURITY] Fedora 24 Update: mariadb-10.1.21-1.fc24
2017-02-09 20:51:26
[SECURITY] Fedora 24 Update: mariadb-10.1.24-3.fc24
2017-06-16 17:51:10
f5
f5
K34205867 : Server component of Oracle MySQL vulnerabilities CVE-2016-8327, CVE-2017-3238, CVE-2017-3251, CVE-2017-3256, and CVE-2017-3258
2017-04-11 00:00:00
K98750200 : Server component of Oracle MySQL vulnerabilities CVE-2017-3243, CVE-2017-3244, CVE-2017-3257, CVE-2017-3265, and CVE-2017-3273
2017-04-11 00:00:00
K63545041 : Server component of Oracle MySQL vulnerabilities CVE-2017-3317, CVE-2017-3318, and CVE-2017-3319
2017-04-11 00:00:00
redhatcve
redhatcve
CVE-2016-8318
2017-01-18 10:48:15
CVE-2016-8327
2017-01-18 10:48:29
CVE-2017-3317
2017-01-18 10:48:41
ubuntucve
ubuntucve
CVE-2016-8318
2017-01-18 00:00:00
CVE-2016-8327
2017-01-18 00:00:00
CVE-2017-3273
2017-01-18 00:00:00
ibm
ibm
Security Bulletin: Vulnerabilities in MariaDB affect PowerKVM
2018-06-18 01:38:06
prion
prion
Code injection
2017-01-27 22:59:00
Design/Logic Flaw
2017-01-27 22:59:00
Code injection
2017-01-27 22:59:00
cve
cve
CVE-2016-8318
2017-01-27 22:59:00
CVE-2016-8327
2017-01-27 22:59:00
CVE-2017-3258
2017-01-27 22:59:00
centos
centos
mariadb security update
2017-08-24 01:39:47
redhat
redhat
(RHSA-2017:2192) Moderate: mariadb security and bug fix update
2017-08-01 05:58:44
(RHSA-2017:2787) Important: rh-mysql56-mysql security and bug fix update
2017-09-21 07:18:30
(RHSA-2018:0574) Moderate: rh-mariadb101-mariadb and rh-mariadb101-galera security and bug fix update
2018-03-21 13:36:47
veracode
veracode
Denial Of Service (DoS)
2019-05-02 06:37:01
Denial Of Service (DoS)
2019-05-02 06:37:03
Improper Access Control
2019-05-02 06:37:04
oraclelinux
oraclelinux
mariadb security and bug fix update
2017-08-07 00:00:00
alpinelinux
alpinelinux
CVE-2017-3317
2017-01-27 22:59:00
CVE-2017-3257
2017-01-27 22:59:00
CVE-2017-3318
2017-01-27 22:59:00
debiancve
debiancve
CVE-2017-3318
2017-01-27 22:59:00
CVE-2017-3317
2017-01-27 22:59:00
CVE-2017-3244
2017-01-27 22:59:00
mariadbunix
mariadbunix
CVE-2017-3318
2017-01-27 22:59:00
CVE-2017-3313
2017-01-27 22:59:00
CVE-2017-3257
2017-01-27 22:59:00

6.8 Medium

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

REQUIRED

Scope

CHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:C/C:N/I:N/A:H

4 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

SINGLE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:L/Au:S/C:N/I:N/A:P

0.004 Low

EPSS

Percentile

73.3%

JSON
Related for ALAS-2017-790
nessus44suse9openvas32amazon1freebsd1gentoo2ubuntu1debian7osv14mageia2slackware2fedora5f54redhatcve10ubuntucve10ibm1prion10cve10centos1redhat4veracode7oraclelinux1alpinelinux7debiancve7mariadbunix7