Red Hat Security Advisory

RHSA-2017:3442

rh-mysql57-mysql security update

Released 2017-12-12 · Red Hat rating Important · View on Red Hat →

Fixed in

Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 6) rh-mysql57-mysql-5.7.20-1.el6, rh-mysql57-mysql-common-5.7.20-1.el6, rh-mysql57-mysql-config-5.7.20-1.el6 +4
Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 7) rh-mysql57-mysql-5.7.20-1.el7, rh-mysql57-mysql-common-5.7.20-1.el7, rh-mysql57-mysql-config-5.7.20-1.el7 +4
Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 6.7) rh-mysql57-mysql-5.7.20-1.el6, rh-mysql57-mysql-common-5.7.20-1.el6, rh-mysql57-mysql-config-5.7.20-1.el6 +4
Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.3) rh-mysql57-mysql-5.7.20-1.el7, rh-mysql57-mysql-common-5.7.20-1.el7, rh-mysql57-mysql-config-5.7.20-1.el7 +4
Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.4) rh-mysql57-mysql-5.7.20-1.el7, rh-mysql57-mysql-common-5.7.20-1.el7, rh-mysql57-mysql-config-5.7.20-1.el7 +4
Red Hat Software Collections for Red Hat Enterprise Linux Workstation (v. 6) rh-mysql57-mysql-5.7.20-1.el6, rh-mysql57-mysql-common-5.7.20-1.el6, rh-mysql57-mysql-config-5.7.20-1.el6 +4
Red Hat Software Collections for Red Hat Enterprise Linux Workstation (v. 7) rh-mysql57-mysql-5.7.20-1.el7, rh-mysql57-mysql-common-5.7.20-1.el7, rh-mysql57-mysql-config-5.7.20-1.el7 +4

Fixes 22 records

TI-2017-07506 CVE-2017-10155 · GHSA-gr49-fc47-qwxm

Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server…

MEDIUM 46

Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Pluggable Auth).

CVSS 3.0HIGH 7.5 Network No auth No interaction EPSS 0.04291 Published 2017-10-19 Fixed

TI-2018-01881 CVE-2018-2562 · GHSA-q32c-6q72-859m

Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server…

LOW 37

Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server : Partition).

CVSS 3.1HIGH 7.1 Network Low privileges No interaction EPSS 0.03417 Published 2018-01-18 Partial fix

TI-2017-07717 CVE-2017-10378 · GHSA-wp4q-xxr9-wwm7

Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server…

LOW 35

Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Optimizer).

CVSS 3.1MEDIUM 6.5 Network Low privileges No interaction EPSS 0.03264 Published 2017-10-19 Partial fix

TI-2017-07627 CVE-2017-10276 · GHSA-vh2j-pvw8-vw2q

Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: FTS).

LOW 35

Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: FTS).

CVSS 3.0MEDIUM 6.5 Network Low privileges No interaction EPSS 0.0372 Published 2017-10-19 Fixed

TI-2017-07723 CVE-2017-10384 · GHSA-w2fh-3rw7-vr98

Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: DDL).

LOW 34

Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: DDL).

CVSS 3.1MEDIUM 6.5 Network Low privileges No interaction EPSS 0.03103 Published 2017-10-19 Partial fix

TI-2017-07518 CVE-2017-10167 · GHSA-c2c2-f3wr-67r2

Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server…

LOW 34

Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Optimizer).

CVSS 3.0MEDIUM 6.5 Network Low privileges No interaction EPSS 0.02536 Published 2017-10-19 Fixed

TI-2017-07718 CVE-2017-10379 · GHSA-hr5m-vvhf-96cx

Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Client…

LOW 33

Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Client programs).

CVSS 3.1MEDIUM 6.5 Network Low privileges No interaction EPSS 0.02298 Published 2017-10-19 Partial fix CWE-863

TI-2017-07634 CVE-2017-10283 · GHSA-c3f4-7jg4-rrh2

Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server…

LOW 29

Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Performance Schema).

CVSS 3.0MEDIUM 5.3 Network Low privileges No interaction EPSS 0.02351 Published 2017-10-19 Fixed

TI-2018-01910 CVE-2018-2591 · GHSA-g349-c72w-r55p

Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server…

LOW 28

Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server : Partition).

CVSS 3.0MEDIUM 4.9 Network High privileges No interaction EPSS 0.02945 Published 2018-01-18 Fixed

TI-2017-07657 CVE-2017-10314 · GHSA-hfm3-p2h9-37vf

Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server…

LOW 28

Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Memcached).

CVSS 3.0MEDIUM 4.9 Network High privileges No interaction EPSS 0.02805 Published 2017-10-19 Fixed

TI-2017-07630 CVE-2017-10279 · GHSA-xqqh-q9w9-6726

Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server…

LOW 28

Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Optimizer).

CVSS 3.0MEDIUM 4.9 Network High privileges No interaction EPSS 0.02853 Published 2017-10-19 Fixed

TI-2017-07578 CVE-2017-10227 · GHSA-q823-fq7q-v58j

Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server…

LOW 28

Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Optimizer).

CVSS 3.0MEDIUM 4.9 Network High privileges No interaction EPSS 0.02829 Published 2017-10-19 Fixed

TI-2017-07656 CVE-2017-10313 · GHSA-ghqq-qr2q-gvp5

Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Group…

LOW 27

Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Group Replication GCS).

CVSS 3.0MEDIUM 4.9 Network High privileges No interaction EPSS 0.02383 Published 2017-10-19 Fixed

TI-2017-07654 CVE-2017-10311 · GHSA-hrhq-m2x6-7mf3

Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: FTS).

LOW 27

Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: FTS).

CVSS 3.0MEDIUM 4.9 Network High privileges No interaction EPSS 0.02686 Published 2017-10-19 Fixed

TI-2017-07643 CVE-2017-10296 · GHSA-j877-r8h9-4m4m

Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: DML).

LOW 27

Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: DML).

CVSS 3.0MEDIUM 4.9 Network High privileges No interaction EPSS 0.02686 Published 2017-10-19 Fixed

TI-2017-07635 CVE-2017-10284 · GHSA-2fqv-m268-vx6f

Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Stored…

LOW 27

Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Stored Procedure).

CVSS 3.0MEDIUM 4.9 Network High privileges No interaction EPSS 0.02383 Published 2017-10-19 Fixed

TI-2017-07516 CVE-2017-10165 · GHSA-cw9f-2rwx-j28g

Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server…

LOW 27

Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Replication).

CVSS 3.0MEDIUM 4.9 Network High privileges No interaction EPSS 0.02383 Published 2017-10-19 Fixed

TI-2017-07663 CVE-2017-10320 · GHSA-gff5-pcpw-x8w8

Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server…

LOW 26

Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: InnoDB).

CVSS 3.1MEDIUM 4.9 Network High privileges No interaction EPSS 0.01942 Published 2017-10-19 Fixed

TI-2017-07641 CVE-2017-10294 · GHSA-6vf9-w2pm-g56x

Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server…

LOW 26

Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Optimizer).

CVSS 3.0MEDIUM 4.9 Network High privileges No interaction EPSS 0.01563 Published 2017-10-19 Fixed

TI-2017-07637 CVE-2017-10286 · GHSA-96j4-972j-4fr2

Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server…

LOW 25

Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: InnoDB).

CVSS 3.1MEDIUM 4.4 Network High privileges No interaction EPSS 0.02444 Published 2017-10-19 Fixed

TI-2017-07708 CVE-2017-10365 · GHSA-ccjx-qqqf-fmq3

Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server…

LOW 22

Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: InnoDB).

CVSS 3.1LOW 3.8 Network High privileges No interaction EPSS 0.01723 Published 2017-10-19 Fixed

TI-2017-07619 CVE-2017-10268 · GHSA-v298-4xpp-8q7w

Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server…

LOW 20

Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Replication).

CVSS 3.1MEDIUM 4.1 Local High privileges No interaction EPSS 0.00702 Published 2017-10-19 Partial fix