Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Client…
Key facts
- Attack vector
- Network
- Privileges required
- Low
- User interaction
- None
- Attack complexity
- Low
- Impact type
- —
- Confidentiality · integrity · availability
- None · Low · None
- Fix status
- Partial Red Hat: 17 fixed, 10 without a fix
Attack profile from CVSS 3.1 · NVD. Fix status from CNA and Red Hat.
Summary
Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Client mysqldump). Supported versions that are affected are 5.5.56 and earlier, 5.6.36 and earlier and 5.7.18 and earlier. Easily exploitable vulnerability allows low privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of MySQL Server accessible data. CVSS 3.0 Base Score 4.3 (Integrity impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N).
Why it matters now
SSVC decision points
CISA ADP · SSVC 2.0.3
- Exploitation
- None
- Automatable
- No
- Technical impact
- Partial
The decision (Track, Attend, Act) also depends on your mission and well-being impact; see CISA's SSVC guide.
Affected products
| Vendor | Product | Affected versions | Fixed in | Status | Source |
|---|---|---|---|---|---|
| Oracle | MySQL Server | up to 5.5.56; up to 5.6.36; up to 5.7.18 | — | No fix listed | CNA |
- MySQL Server VendorOracle Affected up to 5.5.56; up to 5.6.36; up to 5.7.18 Fixed in — No fix listed CNA
CPE configurations NVD · 16
| CPE | Versions | Role | Vendor |
|---|---|---|---|
| cpe:2.3:a:oracle:mysql:*:*:*:*:*:*:*:* | 5.5.0 – 5.5.56; 5.6.0 – 5.6.36; 5.7.0 – 5.7.18 | Vulnerable | Oracle |
| cpe:2.3:a:mariadb:mariadb:*:*:*:*:*:*:*:* | 5.5.0 to before 5.5.53; 10.0.0 to before 10.0.28; 10.1.0 to before 10.1.19 | Vulnerable | MariaDB |
| cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:* | 8.0 | Vulnerable | Debian |
| cpe:2.3:a:redhat:openstack:12:*:*:*:*:*:*:* | 12 | Vulnerable | Red Hat |
| cpe:2.3:o:redhat:enterprise_linux_desktop:7.0:*:*:*:*:*:*:* | 7.0 | Vulnerable | Red Hat |
| cpe:2.3:o:redhat:enterprise_linux_eus:7.4:*:*:*:*:*:*:* | 7.4 | Vulnerable | Red Hat |
| cpe:2.3:o:redhat:enterprise_linux_eus:7.5:*:*:*:*:*:*:* | 7.5 | Vulnerable | Red Hat |
| cpe:2.3:o:redhat:enterprise_linux_eus:7.6:*:*:*:*:*:*:* | 7.6 | Vulnerable | Red Hat |
| cpe:2.3:o:redhat:enterprise_linux_eus:7.7:*:*:*:*:*:*:* | 7.7 | Vulnerable | Red Hat |
| cpe:2.3:o:redhat:enterprise_linux_server:7.0:*:*:*:*:*:*:* | 7.0 | Vulnerable | Red Hat |
- cpe:2.3:a:oracle:mysql:*:*:*:*:*:*:*:* Versions 5.5.0 – 5.5.56; 5.6.0 – 5.6.36; 5.7.0 – 5.7.18 Vulnerable ·Oracle
- cpe:2.3:a:mariadb:mariadb:*:*:*:*:*:*:*:* Versions 5.5.0 to before 5.5.53; 10.0.0 to before 10.0.28; 10.1.0 to before 10.1.19 Vulnerable ·MariaDB
- cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:* Versions 8.0 Vulnerable ·Debian
- cpe:2.3:a:redhat:openstack:12:*:*:*:*:*:*:* Versions 12 Vulnerable ·Red Hat
- cpe:2.3:o:redhat:enterprise_linux_desktop:7.0:*:*:*:*:*:*:* Versions 7.0 Vulnerable ·Red Hat
- cpe:2.3:o:redhat:enterprise_linux_eus:7.4:*:*:*:*:*:*:* Versions 7.4 Vulnerable ·Red Hat
- cpe:2.3:o:redhat:enterprise_linux_eus:7.5:*:*:*:*:*:*:* Versions 7.5 Vulnerable ·Red Hat
- cpe:2.3:o:redhat:enterprise_linux_eus:7.6:*:*:*:*:*:*:* Versions 7.6 Vulnerable ·Red Hat
- cpe:2.3:o:redhat:enterprise_linux_eus:7.7:*:*:*:*:*:*:* Versions 7.7 Vulnerable ·Red Hat
- cpe:2.3:o:redhat:enterprise_linux_server:7.0:*:*:*:*:*:*:* Versions 7.0 Vulnerable ·Red Hat
Show 6 more CPE
| CPE | Versions | Role | Vendor |
|---|---|---|---|
| cpe:2.3:o:redhat:enterprise_linux_server_aus:7.4:*:*:*:*:*:*:* | 7.4 | Vulnerable | Red Hat |
| cpe:2.3:o:redhat:enterprise_linux_server_aus:7.6:*:*:*:*:*:*:* | 7.6 | Vulnerable | Red Hat |
| cpe:2.3:o:redhat:enterprise_linux_server_aus:7.7:*:*:*:*:*:*:* | 7.7 | Vulnerable | Red Hat |
| cpe:2.3:o:redhat:enterprise_linux_server_tus:7.6:*:*:*:*:*:*:* | 7.6 | Vulnerable | Red Hat |
| cpe:2.3:o:redhat:enterprise_linux_server_tus:7.7:*:*:*:*:*:*:* | 7.7 | Vulnerable | Red Hat |
| cpe:2.3:o:redhat:enterprise_linux_workstation:7.0:*:*:*:*:*:*:* | 7.0 | Vulnerable | Red Hat |
- cpe:2.3:o:redhat:enterprise_linux_server_aus:7.4:*:*:*:*:*:*:* Versions 7.4 Vulnerable ·Red Hat
- cpe:2.3:o:redhat:enterprise_linux_server_aus:7.6:*:*:*:*:*:*:* Versions 7.6 Vulnerable ·Red Hat
- cpe:2.3:o:redhat:enterprise_linux_server_aus:7.7:*:*:*:*:*:*:* Versions 7.7 Vulnerable ·Red Hat
- cpe:2.3:o:redhat:enterprise_linux_server_tus:7.6:*:*:*:*:*:*:* Versions 7.6 Vulnerable ·Red Hat
- cpe:2.3:o:redhat:enterprise_linux_server_tus:7.7:*:*:*:*:*:*:* Versions 7.7 Vulnerable ·Red Hat
- cpe:2.3:o:redhat:enterprise_linux_workstation:7.0:*:*:*:*:*:*:* Versions 7.0 Vulnerable ·Red Hat
Remediation
Red Hat 6 advisories
- RHSA-2018:2439 Released 2018-08-16 · Red Hat rating Moderatemariadb security and bug fix update
- Red Hat Enterprise Linux Client (v. 7) mariadb-1:5.5.60-1.el7_5, mariadb-libs-1:5.5.60-1.el7_5, mariadb-server-1:5.5.60-1.el7_5
- Red Hat Enterprise Linux Client Optional (v. 7) mariadb-bench-1:5.5.60-1.el7_5, mariadb-devel-1:5.5.60-1.el7_5, mariadb-embedded-1:5.5.60-1.el7_5 +2
- Red Hat Enterprise Linux ComputeNode (v. 7) mariadb-1:5.5.60-1.el7_5, mariadb-libs-1:5.5.60-1.el7_5
- Red Hat Enterprise Linux ComputeNode Optional (v. 7) mariadb-bench-1:5.5.60-1.el7_5, mariadb-devel-1:5.5.60-1.el7_5, mariadb-embedded-1:5.5.60-1.el7_5 +3
- Red Hat Enterprise Linux Server (v. 7) mariadb-1:5.5.60-1.el7_5, mariadb-bench-1:5.5.60-1.el7_5, mariadb-devel-1:5.5.60-1.el7_5 +5
- Red Hat Enterprise Linux Server Optional (v. 7) mariadb-embedded-1:5.5.60-1.el7_5, mariadb-embedded-1:5.5.60-1.el7_5.ppc, mariadb-embedded-devel-1:5.5.60-1.el7_5 +1
- Red Hat Enterprise Linux Workstation (v. 7) mariadb-1:5.5.60-1.el7_5, mariadb-bench-1:5.5.60-1.el7_5, mariadb-devel-1:5.5.60-1.el7_5 +3
- Red Hat Enterprise Linux Workstation Optional (v. 7) mariadb-embedded-1:5.5.60-1.el7_5, mariadb-embedded-devel-1:5.5.60-1.el7_5
- Red Hat Enterprise Linux for ARM and IBM Power LE (POWER9) Server (v. 7) mariadb-1:5.5.60-1.el7_5, mariadb-bench-1:5.5.60-1.el7_5, mariadb-devel-1:5.5.60-1.el7_5 +3
- Red Hat Enterprise Linux for ARM and IBM Power LE (POWER9) Server Optional (v. 7) mariadb-embedded-1:5.5.60-1.el7_5, mariadb-embedded-devel-1:5.5.60-1.el7_5
- RHSA-2017:2886 Released 2017-10-12 · Red Hat rating Importantrh-mysql57-mysql security and bug fix update
- Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 6) rh-mysql57-mysql-5.7.19-6.el6, rh-mysql57-mysql-common-5.7.19-6.el6, rh-mysql57-mysql-config-5.7.19-6.el6 +4
- Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 7) rh-mysql57-mysql-5.7.19-6.el7, rh-mysql57-mysql-common-5.7.19-6.el7, rh-mysql57-mysql-config-5.7.19-6.el7 +4
- Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 6.7) rh-mysql57-mysql-5.7.19-6.el6, rh-mysql57-mysql-common-5.7.19-6.el6, rh-mysql57-mysql-config-5.7.19-6.el6 +4
- Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.3) rh-mysql57-mysql-5.7.19-6.el7, rh-mysql57-mysql-common-5.7.19-6.el7, rh-mysql57-mysql-config-5.7.19-6.el7 +4
- Red Hat Software Collections for Red Hat Enterprise Linux Workstation (v. 6) rh-mysql57-mysql-5.7.19-6.el6, rh-mysql57-mysql-common-5.7.19-6.el6, rh-mysql57-mysql-config-5.7.19-6.el6 +4
- Red Hat Software Collections for Red Hat Enterprise Linux Workstation (v. 7) rh-mysql57-mysql-5.7.19-6.el7, rh-mysql57-mysql-common-5.7.19-6.el7, rh-mysql57-mysql-config-5.7.19-6.el7 +4
- RHSA-2017:2787 Released 2017-09-21 · Red Hat rating Importantrh-mysql56-mysql security and bug fix update
- Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 6) rh-mysql56-mysql-5.6.37-5.el6, rh-mysql56-mysql-bench-5.6.37-5.el6, rh-mysql56-mysql-common-5.6.37-5.el6 +5
- Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 7) rh-mysql56-mysql-5.6.37-5.el7, rh-mysql56-mysql-bench-5.6.37-5.el7, rh-mysql56-mysql-common-5.6.37-5.el7 +5
- Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 6.7) rh-mysql56-mysql-5.6.37-5.el6, rh-mysql56-mysql-bench-5.6.37-5.el6, rh-mysql56-mysql-common-5.6.37-5.el6 +5
- Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.3) rh-mysql56-mysql-5.6.37-5.el7, rh-mysql56-mysql-bench-5.6.37-5.el7, rh-mysql56-mysql-common-5.6.37-5.el7 +5
- Red Hat Software Collections for Red Hat Enterprise Linux Workstation (v. 6) rh-mysql56-mysql-5.6.37-5.el6, rh-mysql56-mysql-bench-5.6.37-5.el6, rh-mysql56-mysql-common-5.6.37-5.el6 +5
- Red Hat Software Collections for Red Hat Enterprise Linux Workstation (v. 7) rh-mysql56-mysql-5.6.37-5.el7, rh-mysql56-mysql-bench-5.6.37-5.el7, rh-mysql56-mysql-common-5.6.37-5.el7 +5
Show 3 more Red Hat advisories
- RHSA-2017:2192 Released 2017-08-01 · Red Hat rating Moderatemariadb security and bug fix update
- Red Hat Enterprise Linux Client (v. 7) mariadb-1:5.5.56-2.el7, mariadb-libs-1:5.5.56-2.el7, mariadb-server-1:5.5.56-2.el7
- Red Hat Enterprise Linux Client Optional (v. 7) mariadb-bench-1:5.5.56-2.el7, mariadb-devel-1:5.5.56-2.el7, mariadb-embedded-1:5.5.56-2.el7 +2
- Red Hat Enterprise Linux ComputeNode (v. 7) mariadb-1:5.5.56-2.el7, mariadb-libs-1:5.5.56-2.el7
- Red Hat Enterprise Linux ComputeNode Optional (v. 7) mariadb-bench-1:5.5.56-2.el7, mariadb-devel-1:5.5.56-2.el7, mariadb-embedded-1:5.5.56-2.el7 +3
- Red Hat Enterprise Linux Server (v. 7) mariadb-1:5.5.56-2.el7, mariadb-bench-1:5.5.56-2.el7, mariadb-devel-1:5.5.56-2.el7 +5
- Red Hat Enterprise Linux Server Optional (v. 7) mariadb-embedded-1:5.5.56-2.el7, mariadb-embedded-1:5.5.56-2.el7.ppc, mariadb-embedded-devel-1:5.5.56-2.el7 +1
- Red Hat Enterprise Linux Workstation (v. 7) mariadb-1:5.5.56-2.el7, mariadb-bench-1:5.5.56-2.el7, mariadb-devel-1:5.5.56-2.el7 +3
- Red Hat Enterprise Linux Workstation Optional (v. 7) mariadb-embedded-1:5.5.56-2.el7, mariadb-embedded-devel-1:5.5.56-2.el7
- RHSA-2016:2927 Released 2016-12-08 · Red Hat rating Importantrh-mariadb100-mariadb security update
- Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 6) rh-mariadb100-mariadb-1:10.0.28-5.el6, rh-mariadb100-mariadb-bench-1:10.0.28-5.el6, rh-mariadb100-mariadb-common-1:10.0.28-5.el6 +6
- Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 7) rh-mariadb100-mariadb-1:10.0.28-5.el7, rh-mariadb100-mariadb-bench-1:10.0.28-5.el7, rh-mariadb100-mariadb-common-1:10.0.28-5.el7 +6
- Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 6.7) rh-mariadb100-mariadb-1:10.0.28-5.el6, rh-mariadb100-mariadb-bench-1:10.0.28-5.el6, rh-mariadb100-mariadb-common-1:10.0.28-5.el6 +6
- Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.2) rh-mariadb100-mariadb-1:10.0.28-5.el7, rh-mariadb100-mariadb-bench-1:10.0.28-5.el7, rh-mariadb100-mariadb-common-1:10.0.28-5.el7 +6
- Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.3) rh-mariadb100-mariadb-1:10.0.28-5.el7, rh-mariadb100-mariadb-bench-1:10.0.28-5.el7, rh-mariadb100-mariadb-common-1:10.0.28-5.el7 +6
- Red Hat Software Collections for Red Hat Enterprise Linux Workstation (v. 6) rh-mariadb100-mariadb-1:10.0.28-5.el6, rh-mariadb100-mariadb-bench-1:10.0.28-5.el6, rh-mariadb100-mariadb-common-1:10.0.28-5.el6 +6
- Red Hat Software Collections for Red Hat Enterprise Linux Workstation (v. 7) rh-mariadb100-mariadb-1:10.0.28-5.el7, rh-mariadb100-mariadb-bench-1:10.0.28-5.el7, rh-mariadb100-mariadb-common-1:10.0.28-5.el7 +6
- RHSA-2016:2928 Released 2016-12-08 · Red Hat rating Importantrh-mariadb101-mariadb security update
- Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 6) rh-mariadb101-mariadb-1:10.1.19-6.el6, rh-mariadb101-mariadb-bench-1:10.1.19-6.el6, rh-mariadb101-mariadb-common-1:10.1.19-6.el6 +7
- Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 7) rh-mariadb101-mariadb-1:10.1.19-6.el7, rh-mariadb101-mariadb-bench-1:10.1.19-6.el7, rh-mariadb101-mariadb-common-1:10.1.19-6.el7 +7
- Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 6.7) rh-mariadb101-mariadb-1:10.1.19-6.el6, rh-mariadb101-mariadb-bench-1:10.1.19-6.el6, rh-mariadb101-mariadb-common-1:10.1.19-6.el6 +7
- Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.2) rh-mariadb101-mariadb-1:10.1.19-6.el7, rh-mariadb101-mariadb-bench-1:10.1.19-6.el7, rh-mariadb101-mariadb-common-1:10.1.19-6.el7 +7
- Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.3) rh-mariadb101-mariadb-1:10.1.19-6.el7, rh-mariadb101-mariadb-bench-1:10.1.19-6.el7, rh-mariadb101-mariadb-common-1:10.1.19-6.el7 +7
- Red Hat Software Collections for Red Hat Enterprise Linux Workstation (v. 6) rh-mariadb101-mariadb-1:10.1.19-6.el6, rh-mariadb101-mariadb-bench-1:10.1.19-6.el6, rh-mariadb101-mariadb-common-1:10.1.19-6.el6 +7
- Red Hat Software Collections for Red Hat Enterprise Linux Workstation (v. 7) rh-mariadb101-mariadb-1:10.1.19-6.el7, rh-mariadb101-mariadb-bench-1:10.1.19-6.el7, rh-mariadb101-mariadb-common-1:10.1.19-6.el7 +7
Fixed in the same release
Records fixed by the same vendor advisory or release, as the CNA lists them.
- Advisory ·
Oracle MySQL Server — DSA-3922
7 records Highest priority Priority LOW 7 LOW
Other records, highest priority first
- TI-2017-02833 Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: DML).Priority LOW 28
- TI-2017-02827 Vulnerability in the MySQL Connectors component of Oracle MySQL (subcomponent…Priority LOW 28
- TI-2017-02840 Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server…Priority LOW 26
Vendor assessments
Red Hat
Red Hat rating: Moderate. Red Hat's page for this CVE →
| Product | Status | Plan or fix |
|---|---|---|
| Red Hat Enterprise Linux 5 | Affected | No fix planned: Will not fix |
| Red Hat Enterprise Linux 6 | Affected | No fix planned: Will not fix |
| Red Hat Enterprise Linux OpenStack Platform 6 (Juno) | Affected | No fix planned: Will not fix |
| Red Hat Enterprise Linux OpenStack Platform 7 (Kilo) | Affected | No fix planned: Will not fix |
| Red Hat OpenStack Platform 10 (Newton) | Affected | No fix planned: Will not fix |
| Red Hat OpenStack Platform 11 (Ocata) | Affected | No fix planned: Will not fix |
| Red Hat OpenStack Platform 12 (Pike) | Affected | No fix planned: Will not fix |
| Red Hat OpenStack Platform 8 (Liberty) | Affected | No fix planned: Will not fix |
| Red Hat OpenStack Platform 9 (Mitaka) | Affected | No fix planned: Will not fix |
| Red Hat Software Collections | Affected | No fix yet |
| Red Hat Enterprise Linux Client (v. 7) | Fixed | RHSA-2017:2192, RHSA-2018:2439 |
| Red Hat Enterprise Linux Client Optional (v. 7) | Fixed | RHSA-2017:2192, RHSA-2018:2439 |
| Red Hat Enterprise Linux ComputeNode (v. 7) | Fixed | RHSA-2017:2192, RHSA-2018:2439 |
| Red Hat Enterprise Linux ComputeNode Optional (v. 7) | Fixed | RHSA-2017:2192, RHSA-2018:2439 |
| Red Hat Enterprise Linux Server (v. 7) | Fixed | RHSA-2017:2192, RHSA-2018:2439 |
| Red Hat Enterprise Linux Server Optional (v. 7) | Fixed | RHSA-2017:2192, RHSA-2018:2439 |
| Red Hat Enterprise Linux Workstation (v. 7) | Fixed | RHSA-2017:2192, RHSA-2018:2439 |
| Red Hat Enterprise Linux Workstation Optional (v. 7) | Fixed | RHSA-2017:2192, RHSA-2018:2439 |
| Red Hat Enterprise Linux for ARM and IBM Power LE (POWER9) Server (v. 7) | Fixed | RHSA-2018:2439 |
| Red Hat Enterprise Linux for ARM and IBM Power LE (POWER9) Server Optional (v. 7) | Fixed | RHSA-2018:2439 |
| Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 6) | Fixed | RHSA-2016:2927, RHSA-2016:2928, RHSA-2017:2787, RHSA-2017:2886 |
| Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 7) | Fixed | RHSA-2016:2927, RHSA-2016:2928, RHSA-2017:2787, RHSA-2017:2886 |
| Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 6.7) | Fixed | RHSA-2016:2927, RHSA-2016:2928, RHSA-2017:2787, RHSA-2017:2886 |
| Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.2) | Fixed | RHSA-2016:2927, RHSA-2016:2928 |
| Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.3) | Fixed | RHSA-2016:2927, RHSA-2016:2928, RHSA-2017:2787, RHSA-2017:2886 |
| Red Hat Software Collections for Red Hat Enterprise Linux Workstation (v. 6) | Fixed | RHSA-2016:2927, RHSA-2016:2928, RHSA-2017:2787, RHSA-2017:2886 |
| Red Hat Software Collections for Red Hat Enterprise Linux Workstation (v. 7) | Fixed | RHSA-2016:2927, RHSA-2016:2928, RHSA-2017:2787, RHSA-2017:2886 |
Not affected: 1 product
- Red Hat Software Collections
Timeline
- 2026-10-02 Threatist record created from CVE-2017-3651
- 2026-10-03 Alias added: GHSA-h2r9-q8w8-hpcr
References
More Oracle Mysql vulnerabilities
- TI-2017-02794 Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server… CVSS 3.0HIGH 7.5
- TI-2016-05707 Oracle MySQL through 5.5.52, 5.6.x through 5.6.33, and 5.7.x through 5.7.15; MariaDB… CVSS 3.0CRITICAL 9.8
- TI-2003-00723 Buffer overflow in get_salt_from_password from sql_acl.cc for MySQL 4.0.14 and earlier… CVSS 2.0HIGH 9.0
- TI-2020-04444 RFD Attack via "Content-Disposition" Header Sourced from Request Input by Spring MVC or Spring WebFlux Application CVSS 3.1HIGH 7.5
- TI-2008-00208 Multiple buffer overflows in yaSSL 1.7.5 and earlier, as used in MySQL and possibly other… CVSS 2.0HIGH 7.5
- TI-2020-01888 Segmentation fault in SSL_check_chain CVSS 3.1HIGH 7.5
Sources
- CVE-2017-3651 · CVE Program
- CVE-2017-3651 · NVD
- FIRST EPSS
- GHSA-h2r9-q8w8-hpcr · GitHub Advisory Database · CC BY 4.0
- CVE-2017-3651 · Red Hat security data · CC BY 4.0
This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences