Red Hat Security AdvisoryRHSA-2017:2886
rh-mysql57-mysql security and bug fix update
Released 2017-10-12 · Red Hat rating Important · View on Red Hat →
Fixes 57 records
Priority HIGH 82
Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Pluggable Auth).
CVSS 3.0HIGH 7.5· Network · No auth · No interaction · EPSS 0.9003 · Published 2017-04-24 · Fixed CWE-190
Priority MEDIUM 46
Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Memcached).
CVSS 3.0HIGH 7.5· Network · No auth · No interaction · EPSS 0.04279 · Published 2017-04-24 · Fixed
Priority LOW 39
Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Optimizer).
CVSS 3.1HIGH 7.7· Network · Low privileges · No interaction · EPSS 0.03103 · Published 2017-04-24 · Partial fix
Priority LOW 39
Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: DML).
CVSS 3.1HIGH 7.7· Network · Low privileges · No interaction · EPSS 0.03103 · Published 2017-04-24 · Partial fix
Priority LOW 37
Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Optimizer).
CVSS 3.1MEDIUM 6.5· Network · Low privileges · No interaction · EPSS 0.04792 · Published 2017-01-27 · Partial fix
Priority LOW 36
Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Client mysqldump).
CVSS 3.1MEDIUM 6.6· Network · High privileges · No interaction · EPSS 0.02662 · Published 2017-04-24 · Partial fix
Priority LOW 35
Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: DML).
CVSS 3.0MEDIUM 6.5· Network · Low privileges · No interaction · EPSS 0.03797 · Published 2017-04-24 · Fixed
Priority LOW 35
Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: DML).
CVSS 3.1MEDIUM 6.5· Network · Low privileges · No interaction · EPSS 0.03707 · Published 2017-01-27 · Partial fix
Priority LOW 34
Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: DML).
CVSS 3.0MEDIUM 6.5· Network · Low privileges · No interaction · EPSS 0.02989 · Published 2017-08-08 · Fixed
Priority LOW 34
Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Memcached).
CVSS 3.0MEDIUM 6.5· Network · No auth · No interaction · EPSS 0.02952 · Published 2017-08-08 · Fixed
Priority LOW 34
Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Optimizer).
CVSS 3.1MEDIUM 6.5· Network · Low privileges · No interaction · EPSS 0.03103 · Published 2017-04-24 · Partial fix
Priority LOW 34
Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: DDL).
CVSS 3.0MEDIUM 6.5· Network · Low privileges · No interaction · EPSS 0.03086 · Published 2017-01-27 · Fixed CWE-20
Priority LOW 34
Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: DDL).
CVSS 3.1MEDIUM 6.5· Network · Low privileges · No interaction · EPSS 0.03103 · Published 2017-01-27 · Partial fix CWE-20
Priority LOW 34
Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: InnoDB).
CVSS 3.1MEDIUM 6.5· Network · Low privileges · No interaction · EPSS 0.0257 · Published 2017-01-27 · Fixed CWE-269
Priority LOW 33
Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Replication).
CVSS 3.0MEDIUM 6.5· Network · Low privileges · No interaction · EPSS 0.02355 · Published 2017-01-27 · Fixed CWE-20
Priority LOW 32
Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Packaging).
CVSS 3.1MEDIUM 6.7· Local · Low privileges · User interaction · EPSS 0.00446 · Published 2017-01-27 · Partial fix
Priority LOW 30
Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Packaging).
CVSS 3.1MEDIUM 6.3· Local · High privileges · User interaction · EPSS 0.00438 · Published 2017-01-27 · Partial fix
Priority LOW 29
Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: InnoDB).
CVSS 3.0MEDIUM 5.5· Network · High privileges · No interaction · EPSS 0.01876 · Published 2017-04-24 · Fixed
Priority LOW 28
Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: X Plugin).
CVSS 3.0MEDIUM 4.9· Network · High privileges · No interaction · EPSS 0.02761 · Published 2017-08-08 · Fixed
Priority LOW 28
Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Optimizer).
CVSS 3.0MEDIUM 4.9· Network · High privileges · No interaction · EPSS 0.02761 · Published 2017-08-08 · Fixed
Priority LOW 28
Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: DML).
CVSS 3.1MEDIUM 4.9· Network · High privileges · No interaction · EPSS 0.03225 · Published 2017-08-08 · Partial fix
Priority LOW 28
Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Optimizer).
CVSS 3.0MEDIUM 4.9· Network · High privileges · No interaction · EPSS 0.02761 · Published 2017-08-08 · Fixed
Priority LOW 28
Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: X Plugin).
CVSS 3.0MEDIUM 5.3· Network · Low privileges · No interaction · EPSS 0.01996 · Published 2017-08-08 · Fixed
Priority LOW 28
Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: UDF).
CVSS 3.0MEDIUM 5.3· Network · Low privileges · No interaction · EPSS 0.02013 · Published 2017-08-08 · Fixed
Priority LOW 28
Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Security: Privileges).
CVSS 3.0MEDIUM 4.9· Network · High privileges · No interaction · EPSS 0.02829 · Published 2017-04-24 · Partial fix
Priority LOW 28
Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Security: Privileges).
CVSS 3.0MEDIUM 4.9· Network · High privileges · No interaction · EPSS 0.02853 · Published 2017-04-24 · Partial fix
Priority LOW 28
Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Security: Privileges).
CVSS 3.0MEDIUM 4.9· Network · High privileges · No interaction · EPSS 0.02829 · Published 2017-04-24 · Partial fix
Priority LOW 28
Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: DML).
CVSS 3.1MEDIUM 4.9· Network · High privileges · No interaction · EPSS 0.02989 · Published 2017-04-24 · Partial fix
Priority LOW 28
Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Security: Privileges).
CVSS 3.0MEDIUM 5.4· Network · Low privileges · No interaction · EPSS 0.01546 · Published 2017-04-24 · Fixed
Priority LOW 27
Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Optimizer).
CVSS 3.0MEDIUM 4.9· Network · High privileges · No interaction · EPSS 0.0245 · Published 2017-08-08 · Fixed
Priority LOW 27
Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: DML).
CVSS 3.0MEDIUM 4.9· Network · High privileges · No interaction · EPSS 0.0245 · Published 2017-08-08 · Fixed
Priority LOW 27
Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: DML).
CVSS 3.0MEDIUM 4.9· Network · High privileges · No interaction · EPSS 0.0245 · Published 2017-08-08 · Fixed
Priority LOW 27
Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: DML).
CVSS 3.0MEDIUM 4.9· Network · High privileges · No interaction · EPSS 0.0245 · Published 2017-08-08 · Fixed
Priority LOW 27
Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: DML).
CVSS 3.0MEDIUM 4.9· Network · High privileges · No interaction · EPSS 0.0245 · Published 2017-08-08 · Fixed
Priority LOW 27
Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Audit Plug-in).
CVSS 3.0MEDIUM 4.9· Network · High privileges · No interaction · EPSS 0.02194 · Published 2017-04-24 · Fixed
Priority LOW 27
Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Optimizer).
CVSS 3.0MEDIUM 4.9· Network · High privileges · No interaction · EPSS 0.02194 · Published 2017-04-24 · Fixed
Priority LOW 27
Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: DML).
CVSS 3.0MEDIUM 4.9· Network · High privileges · No interaction · EPSS 0.02473 · Published 2017-04-24 · Fixed
Priority LOW 27
Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: DML).
CVSS 3.0MEDIUM 4.9· Network · High privileges · No interaction · EPSS 0.02194 · Published 2017-04-24 · Fixed
Priority LOW 26
Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Charsets).
CVSS 3.0MEDIUM 4.4· Network · High privileges · No interaction · EPSS 0.02763 · Published 2017-08-08 · Partial fix
Priority LOW 26
Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Replication).
CVSS 3.0MEDIUM 4.4· Network · High privileges · No interaction · EPSS 0.02808 · Published 2017-08-08 · Fixed
Priority LOW 26
Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Optimizer).
CVSS 3.0MEDIUM 4.9· Network · High privileges · No interaction · EPSS 0.01746 · Published 2017-01-27 · Fixed
Priority LOW 25
Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Replication).
CVSS 3.0MEDIUM 4.4· Network · High privileges · No interaction · EPSS 0.02697 · Published 2017-08-08 · Fixed
Priority LOW 25
Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Replication).
CVSS 3.0MEDIUM 4.4· Network · High privileges · No interaction · EPSS 0.02429 · Published 2017-01-27 · Fixed
Priority LOW 24
Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Client mysqldump).
CVSS 3.1MEDIUM 4.3· Network · Low privileges · No interaction · EPSS 0.0215 · Published 2017-08-08 · Partial fix
Priority LOW 24
Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: DDL).
CVSS 3.1MEDIUM 4.3· Network · Low privileges · No interaction · EPSS 0.0215 · Published 2017-04-24 · Partial fix
Priority LOW 23
Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: DDL).
CVSS 3.0MEDIUM 4.2· Network · Low privileges · No interaction · EPSS 0.01543 · Published 2017-08-08 · Partial fix
Priority LOW 23
Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Security: Privileges).
CVSS 3.0MEDIUM 4.3· Network · Low privileges · No interaction · EPSS 0.0154 · Published 2017-04-24 · Fixed
Priority LOW 22
Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: C API).
CVSS 3.0LOW 3.7· Network · No auth · No interaction · EPSS 0.02495 · Published 2017-08-08 · Fixed
Priority LOW 22
Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: C API).
CVSS 3.0LOW 3.7· Network · No auth · No interaction · EPSS 0.0237 · Published 2017-04-24 · Fixed
Priority LOW 22
Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: MyISAM).
CVSS 3.1MEDIUM 4.7· Local · Low privileges · No interaction · EPSS 0.00422 · Published 2017-01-27 · Partial fix
Priority LOW 19
Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: DDL).
CVSS 3.1LOW 3.1· Network · Low privileges · No interaction · EPSS 0.01887 · Published 2017-08-08 · Partial fix
Priority LOW 19
Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Error Handling).
CVSS 3.1MEDIUM 4.0· Local · High privileges · User interaction · EPSS 0.00452 · Published 2017-01-27 · Partial fix
Priority LOW 19
Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Logging).
CVSS 3.1MEDIUM 4.0· Local · High privileges · User interaction · EPSS 0.004 · Published 2017-01-27 · Partial fix
Priority LOW 18
Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: X Plugin).
CVSS 3.0LOW 3.1· Network · Low privileges · No interaction · EPSS 0.01346 · Published 2017-01-27 · Fixed CWE-200
Priority LOW 17
Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Security: Privileges).
CVSS 3.0LOW 2.7· Network · High privileges · No interaction · EPSS 0.0144 · Published 2019-07-23 · Partial fix
Priority LOW 17
Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Security: Encryption).
CVSS 3.0LOW 3.1· Network · Low privileges · No interaction · EPSS 0.01044 · Published 2017-04-24 · Fixed
Priority LOW 14
Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Security: Encryption).
CVSS 3.0LOW 2.4· Network · High privileges · User interaction · EPSS 0.00907 · Published 2017-01-27 · Fixed