Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
ubuntucveUbuntu.comUB:CVE-2017-10279
HistoryOct 19, 2017 - 12:00 a.m.

CVE-2017-10279

2017-10-1900:00:00
ubuntu.com
ubuntu.com
13

4.9 Medium

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

HIGH

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H

4 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

SINGLE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:L/Au:S/C:N/I:N/A:P

0.001 Low

EPSS

Percentile

44.2%

JSON

Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent:
Server: Optimizer). Supported versions that are affected are 5.6.36 and
earlier and 5.7.18 and earlier. Easily exploitable vulnerability allows
high privileged attacker with network access via multiple protocols to
compromise MySQL Server. Successful attacks of this vulnerability can
result in unauthorized ability to cause a hang or frequently repeatable
crash (complete DOS) of MySQL Server. CVSS 3.0 Base Score 4.9 (Availability
impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H).

Notes

Author Note
mdeslaur 5.6 and 5.7 only

Related

prion 1
osv 1
cve 1
veracode 1
openvas 8
redhatcve 1
f5 1
fedora 3
redhat 2
nessus 10
amazon 1
suse 1
ibm 1
freebsd 1
oracle 1
prion
prion
Code injection
2017-10-19 17:29:00
osv
osv
CVE-2017-10279
2017-10-19 17:29:02
cve
cve
CVE-2017-10279
2017-10-19 17:29:00
veracode
veracode
Denial Of Service (DoS)
2019-05-02 06:37:50
openvas
openvas
Oracle Mysql Security Updates (oct2017-3236626) 07 - Windows
2017-10-18 00:00:00
Oracle Mysql Security Updates (oct2017-3236626) 07 - Linux
2017-10-18 00:00:00
Fedora Update for community-mysql FEDORA-2017-95327e44ec
2017-11-07 00:00:00
redhatcve
redhatcve
CVE-2017-10279
2020-04-08 19:38:36
f5
f5
K60156735 : MySQL vulnerabilities CVE-2017-10276, CVE-2017-10279, CVE-2017-10283, CVE-2017-10284, and CVE-2017-10286
2017-10-27 00:00:00
fedora
fedora
[SECURITY] Fedora 26 Update: community-mysql-5.7.20-1.fc26
2017-11-06 23:35:05
[SECURITY] Fedora 27 Update: community-mysql-5.7.20-1.fc27
2017-11-11 13:51:45
[SECURITY] Fedora 25 Update: community-mysql-5.7.20-1.fc25
2017-11-06 23:33:59
redhat
redhat
(RHSA-2017:3265) Important: rh-mysql56-mysql security update
2017-11-27 18:24:50
(RHSA-2017:3442) Important: rh-mysql57-mysql security update
2017-12-12 12:52:23
nessus
nessus
Amazon Linux AMI : mysql56 / mysql57 (ALAS-2017-926)
2017-12-07 00:00:00
Fedora 25 : community-mysql (2017-95327e44ec)
2017-11-07 00:00:00
Fedora 27 : community-mysql (2017-9e28c78e07)
2018-01-15 00:00:00
amazon
amazon
Important: mysql56, mysql57
2017-12-05 21:50:00
suse
suse
Security update for mysql-community-server (important)
2017-10-27 18:28:48
ibm
ibm
Security Bulletin: IBM Security Guardium is affected by Open Source Oracle MySQL Server Vulnerabilities
2018-06-16 22:05:02
freebsd
freebsd
MySQL -- multiple vulnerabilities
2017-10-18 00:00:00
oracle
oracle
Oracle Critical Patch Update - October 2017
2017-10-17 00:00:00

4.9 Medium

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

HIGH

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H

4 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

SINGLE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:L/Au:S/C:N/I:N/A:P

0.001 Low

EPSS

Percentile

44.2%

JSON
Related for UB:CVE-2017-10279
prion1osv1cve1veracode1openvas8redhatcve1f51fedora3redhat2nessus10amazon1suse1ibm1freebsd1oracle1