Veracode Vulnerability DatabaseVERACODE:17835Privilege Escalation
4.3 Medium
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
NONE
Integrity Impact
LOW
Availability Impact
NONE
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N
4 Medium
CVSS2
Access Vector
NETWORK
Access Complexity
LOW
Authentication
SINGLE
Confidentiality Impact
NONE
Integrity Impact
PARTIAL
Availability Impact
NONE
AV:N/AC:L/Au:S/C:N/I:P/A:N
mysql is vulnerable to privilege escalation. A privileged attacker with network access via multiple protocols could compromise MySQL Server which can result in unauthorized update, insert or delete access to some of MySQL Server accessible data.
References
rhn.redhat.com/errata/RHSA-2016-2927.html
rhn.redhat.com/errata/RHSA-2016-2928.html
www.debian.org/security/2017/dsa-3922
www.oracle.com/technetwork/security-advisory/cpujul2017-3236622.html
www.oracle.com/technetwork/security-advisory/cpuoct2016-2881722.html#AppendixMSQL
www.securityfocus.com/bid/99802
www.securitytracker.com/id/1038928
access.redhat.com/errata/RHSA-2016:2927
access.redhat.com/errata/RHSA-2017:2192
access.redhat.com/errata/RHSA-2017:2787
access.redhat.com/errata/RHSA-2017:2886
access.redhat.com/errata/RHSA-2018:2439
access.redhat.com/errata/RHSA-2018:2729
access.redhat.com/security/cve/CVE-2016-5483
access.redhat.com/security/cve/CVE-2017-3600
access.redhat.com/security/cve/CVE-2017-3651
access.redhat.com/security/updates/classification/#important
mariadb.com/kb/en/mariadb/mariadb-10027-release-notes/
mariadb.com/kb/en/mariadb/mariadb-10028-release-notes/
Related
4.3 Medium
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
NONE
Integrity Impact
LOW
Availability Impact
NONE
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N
4 Medium
CVSS2
Access Vector
NETWORK
Access Complexity
LOW
Authentication
SINGLE
Confidentiality Impact
NONE
Integrity Impact
PARTIAL
Availability Impact
NONE
AV:N/AC:L/Au:S/C:N/I:P/A:N