PT-2017-14302

Name of the Vulnerable Software and Affected Versions Gentoo dev-db/mysql versions prior to 2017-09-29 Gentoo dev-db/mariadb versions prior to 2017-09-29 Gentoo dev-db/percona-server versions prior to 2017-09-29 Gentoo dev-db/mysql-cluster versions prior to 2017-09-29 Gentoo dev-db/mariadb-galera...

CVE-2017-15945: Incorrect Permission Assignment for Critical Resource

The installation scripts in the Gentoo dev-db/mysql, dev-db/mariadb, dev-db/percona-server, dev-db/mysql-cluster, and dev-db/mariadb-galera packages before 2017-09-29 have chown calls for user-writable directory trees, which allows local users to gain privileges by leveraging access to the mysql...

MySQL Cluster 7.3.x < 7.3.6 CLSTCONF RCE (July 2017 CPU)

The version of MySQL Cluster running on the remote host is 7.3.x prior to 7.3.6. It is, therefore, affected by an overflow condition in the CLSTCONF component, specifically in the Python sockrecvfrominto function within file Modules/socketmodule.c, due to improper validation of user-supplied inpu...

Unspecified Vulnerability in Oracle MySQL Cluster (CNVD-2017-15710)

Oracle MySQL is an open source relational database management system from Oracle Corporation. The database system is characterized by high performance, low cost, good reliability, etc. Oracle MySQL Cluster is one of the high utility, high redundancy version for distributed computing environments....

Oracle MySQL Cluster Denial of Service Vulnerability

Oracle MySQL is an open source relational database management system from Oracle, of which Oracle MySQL Cluster is a highly practical and redundant version for distributed computing environments. A denial of service vulnerability exists in the Cluster:DD subcomponent of the MySQL Cluster componen...

CVE-2017-3304

Vulnerability in the MySQL Cluster component of Oracle MySQL subcomponent: Cluster: DD. Supported versions that are affected are 7.2.27 and earlier, 7.3.16 and earlier, 7.4.14 and earlier and 7.5.5 and earlier. Easily "exploitable" vulnerability allows low privileged attacker with network access...

CVE-2017-3304

Vulnerability in the MySQL Cluster component of Oracle MySQL subcomponent: Cluster: DD. Supported versions that are affected are 7.2.27 and earlier, 7.3.16 and earlier, 7.4.14 and earlier and 7.5.5 and earlier. Easily "exploitable" vulnerability allows low privileged attacker with network access...

PT-2017-15767

Name of the Vulnerable Software and Affected Versions Oracle MySQL versions 7.2.27 and earlier Oracle MySQL versions 7.3.16 and earlier Oracle MySQL versions 7.4.14 and earlier Oracle MySQL versions 7.5.5 and earlier Description The issue allows a low-privileged attacker with network access via...

CVE-2017-3304: Undefined Security Weakness

Vulnerability in the MySQL Cluster component of Oracle MySQL subcomponent: Cluster: DD. Supported versions that are affected are 7.2.27 and earlier, 7.3.16 and earlier, 7.4.14 and earlier and 7.5.5 and earlier. Easily "exploitable" vulnerability allows low privileged attacker with network access...

MySQL Cluster 7.2.x < 7.2.28 DD Subcomponent Arbitrary Data Manipulation (April 2017 CPU)

The version of MySQL Cluster running on the remote host is 7.2.x prior to 7.2.28. It is, therefore, affected by an arbitrary data manipulation vulnerability in the DD subcomponent due to an unspecified flaw. An authenticated, remote attacker can exploit this to update, insert, or delete arbitrary...

CVE-2017-3321

Vulnerability in the MySQL Cluster component of Oracle MySQL subcomponent: Cluster: General. Supported versions that are affected are 7.2.19 and earlier, 7.3.8 and earlier and 7.4.5 and earlier. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple...

CVE-2017-3322

Vulnerability in the MySQL Cluster component of Oracle MySQL subcomponent: Cluster: NDBAPI. Supported versions that are affected are 7.2.25 and earlier, 7.3.14 and earlier, 7.4.12 and earlier and . Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple...

CVE-2017-3323

Vulnerability in the MySQL Cluster component of Oracle MySQL subcomponent: Cluster: General. Supported versions that are affected are 7.2.25 and earlier, 7.3.14 and earlier and 7.4.12 and earlier. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple...

CVE-2016-5541

Vulnerability in the MySQL Cluster component of Oracle MySQL subcomponent: Cluster: NDBAPI. Supported versions that are affected are 7.2.26 and earlier, 7.3.14 and earlier and 7.4.12 and earlier. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple...

Design/Logic Flaw

Vulnerability in the MySQL Cluster component of Oracle MySQL subcomponent: Cluster: General. Supported versions that are affected are 7.2.19 and earlier, 7.3.8 and earlier and 7.4.5 and earlier. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple...

CVE-2016-5541

Vulnerability in the MySQL Cluster component of Oracle MySQL subcomponent: Cluster: NDBAPI. Supported versions that are affected are 7.2.26 and earlier, 7.3.14 and earlier and 7.4.12 and earlier. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple...

CVE-2017-3322

Vulnerability in the MySQL Cluster component of Oracle MySQL subcomponent: Cluster: NDBAPI. Supported versions that are affected are 7.2.25 and earlier, 7.3.14 and earlier, 7.4.12 and earlier and . Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple...

CVE-2017-3323

Vulnerability in the MySQL Cluster component of Oracle MySQL subcomponent: Cluster: General. Supported versions that are affected are 7.2.25 and earlier, 7.3.14 and earlier and 7.4.12 and earlier. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple...

CVE-2017-3322

Vulnerability in the MySQL Cluster component of Oracle MySQL subcomponent: Cluster: NDBAPI. Supported versions that are affected are 7.2.25 and earlier, 7.3.14 and earlier, 7.4.12 and earlier and . Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple...

CVE-2017-3322

The CVE-2017-3322 entry applies to Oracle MySQL Cluster (Cluster: NDBAPI). Affected: MySQL Cluster component versions 7.2.25 and earlier, 7.3.14 and earlier, 7.4.12 and earlier. Issue: a vulnerability allows an unauthenticated attacker with network access via multiple protocols to compromise MySQ...