csaf_suse - suse-su-2017:0411-1

suse-su-2017:0411-1

Vulnerability from csaf_suse

Published

2017-02-07 12:16

Modified

2017-02-07 12:16

Summary

Security update for mariadb

Notes

Title of the patch

Security update for mariadb

Description of the patch

This mariadb version update to 10.0.29 fixes the following issues: - CVE-2017-3318: unspecified vulnerability affecting Error Handling (bsc#1020896) - CVE-2017-3317: unspecified vulnerability affecting Logging (bsc#1020894) - CVE-2017-3312: insecure error log file handling in mysqld_safe, incomplete CVE-2016-6664 (bsc#1020873) - CVE-2017-3291: unrestricted mysqld_safe's ledir (bsc#1020884) - CVE-2017-3265: unsafe chmod/chown use in init script (bsc#1020885) - CVE-2017-3258: unspecified vulnerability in the DDL component (bsc#1020875) - CVE-2017-3257: unspecified vulnerability affecting InnoDB (bsc#1020878) - CVE-2017-3244: unspecified vulnerability affecing the DML component (bsc#1020877) - CVE-2017-3243: unspecified vulnerability affecting the Charsets component (bsc#1020891) - CVE-2017-3238: unspecified vulnerability affecting the Optimizer component (bsc#1020882) - CVE-2016-6664: Root Privilege Escalation (bsc#1008253) - Applications using the client library for MySQL (libmysqlclient.so) had a use-after-free issue that could cause the applications to crash (bsc#1022428) - notable changes: * XtraDB updated to 5.6.34-79.1 * TokuDB updated to 5.6.34-79.1 * Innodb updated to 5.6.35 * Performance Schema updated to 5.6.35 Release notes and changelog: * https://kb.askmonty.org/en/mariadb-10029-release-notes * https://kb.askmonty.org/en/mariadb-10029-changelog

Patchnames

SUSE-SLE-SAP-12-2017-205,SUSE-SLE-SERVER-12-2017-205

CSAF 2.0 data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).

JSON

To clipboard

{
  "document": {
    "aggregate_severity": {
      "namespace": "https://www.suse.com/support/security/rating/",
      "text": "important"
    },
    "category": "csaf_security_advisory",
    "csaf_version": "2.0",
    "distribution": {
      "text": "Copyright 2024 SUSE LLC. All rights reserved.",
      "tlp": {
        "label": "WHITE",
        "url": "https://www.first.org/tlp/"
      }
    },
    "lang": "en",
    "notes": [
      {
        "category": "summary",
        "text": "Security update for mariadb",
        "title": "Title of the patch"
      },
      {
        "category": "description",
        "text": "\nThis mariadb version update to 10.0.29 fixes the following issues:\n\n- CVE-2017-3318: unspecified vulnerability affecting Error Handling (bsc#1020896)\n- CVE-2017-3317: unspecified vulnerability affecting Logging (bsc#1020894)\n- CVE-2017-3312: insecure error log file handling in mysqld_safe, incomplete CVE-2016-6664 (bsc#1020873)\n- CVE-2017-3291: unrestricted mysqld_safe\u0027s ledir (bsc#1020884)\n- CVE-2017-3265: unsafe chmod/chown use in init script (bsc#1020885)\n- CVE-2017-3258: unspecified vulnerability in the DDL component (bsc#1020875)\n- CVE-2017-3257: unspecified vulnerability affecting InnoDB (bsc#1020878)\n- CVE-2017-3244: unspecified vulnerability affecing the DML component (bsc#1020877)\n- CVE-2017-3243: unspecified vulnerability affecting the Charsets component (bsc#1020891)\n- CVE-2017-3238: unspecified vulnerability affecting the Optimizer component (bsc#1020882)\n- CVE-2016-6664: Root Privilege Escalation (bsc#1008253)\n- Applications using the client library for MySQL (libmysqlclient.so) had a use-after-free issue that could cause the applications to crash (bsc#1022428)\n\n- notable changes:\n  * XtraDB updated to 5.6.34-79.1\n  * TokuDB updated to 5.6.34-79.1\n  * Innodb updated to 5.6.35\n  * Performance Schema updated to 5.6.35\n\nRelease notes and changelog:\n  * https://kb.askmonty.org/en/mariadb-10029-release-notes\n  * https://kb.askmonty.org/en/mariadb-10029-changelog\n",
        "title": "Description of the patch"
      },
      {
        "category": "details",
        "text": "SUSE-SLE-SAP-12-2017-205,SUSE-SLE-SERVER-12-2017-205",
        "title": "Patchnames"
      },
      {
        "category": "legal_disclaimer",
        "text": "CSAF 2.0 data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).",
        "title": "Terms of use"
      }
    ],
    "publisher": {
      "category": "vendor",
      "contact_details": "https://www.suse.com/support/security/contact/",
      "name": "SUSE Product Security Team",
      "namespace": "https://www.suse.com/"
    },
    "references": [
      {
        "category": "external",
        "summary": "SUSE ratings",
        "url": "https://www.suse.com/support/security/rating/"
      },
      {
        "category": "self",
        "summary": "URL of this CSAF notice",
        "url": "https://ftp.suse.com/pub/projects/security/csaf/suse-su-2017_0411-1.json"
      },
      {
        "category": "self",
        "summary": "URL for SUSE-SU-2017:0411-1",
        "url": "https://www.suse.com/support/update/announcement/2017/suse-su-20170411-1/"
      },
      {
        "category": "self",
        "summary": "E-Mail link for SUSE-SU-2017:0411-1",
        "url": "https://lists.suse.com/pipermail/sle-security-updates/2017-February/002628.html"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1008253",
        "url": "https://bugzilla.suse.com/1008253"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1020868",
        "url": "https://bugzilla.suse.com/1020868"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1020873",
        "url": "https://bugzilla.suse.com/1020873"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1020875",
        "url": "https://bugzilla.suse.com/1020875"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1020877",
        "url": "https://bugzilla.suse.com/1020877"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1020878",
        "url": "https://bugzilla.suse.com/1020878"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1020882",
        "url": "https://bugzilla.suse.com/1020882"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1020884",
        "url": "https://bugzilla.suse.com/1020884"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1020885",
        "url": "https://bugzilla.suse.com/1020885"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1020891",
        "url": "https://bugzilla.suse.com/1020891"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1020894",
        "url": "https://bugzilla.suse.com/1020894"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1020896",
        "url": "https://bugzilla.suse.com/1020896"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1022428",
        "url": "https://bugzilla.suse.com/1022428"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2016-6664 page",
        "url": "https://www.suse.com/security/cve/CVE-2016-6664/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2017-3238 page",
        "url": "https://www.suse.com/security/cve/CVE-2017-3238/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2017-3243 page",
        "url": "https://www.suse.com/security/cve/CVE-2017-3243/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2017-3244 page",
        "url": "https://www.suse.com/security/cve/CVE-2017-3244/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2017-3257 page",
        "url": "https://www.suse.com/security/cve/CVE-2017-3257/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2017-3258 page",
        "url": "https://www.suse.com/security/cve/CVE-2017-3258/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2017-3265 page",
        "url": "https://www.suse.com/security/cve/CVE-2017-3265/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2017-3291 page",
        "url": "https://www.suse.com/security/cve/CVE-2017-3291/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2017-3312 page",
        "url": "https://www.suse.com/security/cve/CVE-2017-3312/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2017-3317 page",
        "url": "https://www.suse.com/security/cve/CVE-2017-3317/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2017-3318 page",
        "url": "https://www.suse.com/security/cve/CVE-2017-3318/"
      }
    ],
    "title": "Security update for mariadb",
    "tracking": {
      "current_release_date": "2017-02-07T12:16:05Z",
      "generator": {
        "date": "2017-02-07T12:16:05Z",
        "engine": {
          "name": "cve-database.git:bin/generate-csaf.pl",
          "version": "1"
        }
      },
      "id": "SUSE-SU-2017:0411-1",
      "initial_release_date": "2017-02-07T12:16:05Z",
      "revision_history": [
        {
          "date": "2017-02-07T12:16:05Z",
          "number": "1",
          "summary": "Current version"
        }
      ],
      "status": "final",
      "version": "1"
    }
  },
  "product_tree": {
    "branches": [
      {
        "branches": [
          {
            "branches": [
              {
                "category": "product_version",
                "name": "libmysqlclient-devel-10.0.29-20.23.1.ppc64le",
                "product": {
                  "name": "libmysqlclient-devel-10.0.29-20.23.1.ppc64le",
                  "product_id": "libmysqlclient-devel-10.0.29-20.23.1.ppc64le"
                }
              },
              {
                "category": "product_version",
                "name": "libmysqlclient18-10.0.29-20.23.1.ppc64le",
                "product": {
                  "name": "libmysqlclient18-10.0.29-20.23.1.ppc64le",
                  "product_id": "libmysqlclient18-10.0.29-20.23.1.ppc64le"
                }
              },
              {
                "category": "product_version",
                "name": "libmysqlclient_r18-10.0.29-20.23.1.ppc64le",
                "product": {
                  "name": "libmysqlclient_r18-10.0.29-20.23.1.ppc64le",
                  "product_id": "libmysqlclient_r18-10.0.29-20.23.1.ppc64le"
                }
              },
              {
                "category": "product_version",
                "name": "libmysqld-devel-10.0.29-20.23.1.ppc64le",
                "product": {
                  "name": "libmysqld-devel-10.0.29-20.23.1.ppc64le",
                  "product_id": "libmysqld-devel-10.0.29-20.23.1.ppc64le"
                }
              },
              {
                "category": "product_version",
                "name": "libmysqld18-10.0.29-20.23.1.ppc64le",
                "product": {
                  "name": "libmysqld18-10.0.29-20.23.1.ppc64le",
                  "product_id": "libmysqld18-10.0.29-20.23.1.ppc64le"
                }
              },
              {
                "category": "product_version",
                "name": "mariadb-10.0.29-20.23.1.ppc64le",
                "product": {
                  "name": "mariadb-10.0.29-20.23.1.ppc64le",
                  "product_id": "mariadb-10.0.29-20.23.1.ppc64le"
                }
              },
              {
                "category": "product_version",
                "name": "mariadb-client-10.0.29-20.23.1.ppc64le",
                "product": {
                  "name": "mariadb-client-10.0.29-20.23.1.ppc64le",
                  "product_id": "mariadb-client-10.0.29-20.23.1.ppc64le"
                }
              },
              {
                "category": "product_version",
                "name": "mariadb-errormessages-10.0.29-20.23.1.ppc64le",
                "product": {
                  "name": "mariadb-errormessages-10.0.29-20.23.1.ppc64le",
                  "product_id": "mariadb-errormessages-10.0.29-20.23.1.ppc64le"
                }
              },
              {
                "category": "product_version",
                "name": "mariadb-tools-10.0.29-20.23.1.ppc64le",
                "product": {
                  "name": "mariadb-tools-10.0.29-20.23.1.ppc64le",
                  "product_id": "mariadb-tools-10.0.29-20.23.1.ppc64le"
                }
              }
            ],
            "category": "architecture",
            "name": "ppc64le"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "libmysqlclient-devel-10.0.29-20.23.1.s390x",
                "product": {
                  "name": "libmysqlclient-devel-10.0.29-20.23.1.s390x",
                  "product_id": "libmysqlclient-devel-10.0.29-20.23.1.s390x"
                }
              },
              {
                "category": "product_version",
                "name": "libmysqlclient18-10.0.29-20.23.1.s390x",
                "product": {
                  "name": "libmysqlclient18-10.0.29-20.23.1.s390x",
                  "product_id": "libmysqlclient18-10.0.29-20.23.1.s390x"
                }
              },
              {
                "category": "product_version",
                "name": "libmysqlclient18-32bit-10.0.29-20.23.1.s390x",
                "product": {
                  "name": "libmysqlclient18-32bit-10.0.29-20.23.1.s390x",
                  "product_id": "libmysqlclient18-32bit-10.0.29-20.23.1.s390x"
                }
              },
              {
                "category": "product_version",
                "name": "libmysqlclient_r18-10.0.29-20.23.1.s390x",
                "product": {
                  "name": "libmysqlclient_r18-10.0.29-20.23.1.s390x",
                  "product_id": "libmysqlclient_r18-10.0.29-20.23.1.s390x"
                }
              },
              {
                "category": "product_version",
                "name": "libmysqld-devel-10.0.29-20.23.1.s390x",
                "product": {
                  "name": "libmysqld-devel-10.0.29-20.23.1.s390x",
                  "product_id": "libmysqld-devel-10.0.29-20.23.1.s390x"
                }
              },
              {
                "category": "product_version",
                "name": "libmysqld18-10.0.29-20.23.1.s390x",
                "product": {
                  "name": "libmysqld18-10.0.29-20.23.1.s390x",
                  "product_id": "libmysqld18-10.0.29-20.23.1.s390x"
                }
              },
              {
                "category": "product_version",
                "name": "mariadb-10.0.29-20.23.1.s390x",
                "product": {
                  "name": "mariadb-10.0.29-20.23.1.s390x",
                  "product_id": "mariadb-10.0.29-20.23.1.s390x"
                }
              },
              {
                "category": "product_version",
                "name": "mariadb-client-10.0.29-20.23.1.s390x",
                "product": {
                  "name": "mariadb-client-10.0.29-20.23.1.s390x",
                  "product_id": "mariadb-client-10.0.29-20.23.1.s390x"
                }
              },
              {
                "category": "product_version",
                "name": "mariadb-errormessages-10.0.29-20.23.1.s390x",
                "product": {
                  "name": "mariadb-errormessages-10.0.29-20.23.1.s390x",
                  "product_id": "mariadb-errormessages-10.0.29-20.23.1.s390x"
                }
              },
              {
                "category": "product_version",
                "name": "mariadb-tools-10.0.29-20.23.1.s390x",
                "product": {
                  "name": "mariadb-tools-10.0.29-20.23.1.s390x",
                  "product_id": "mariadb-tools-10.0.29-20.23.1.s390x"
                }
              }
            ],
            "category": "architecture",
            "name": "s390x"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "libmysqlclient-devel-10.0.29-20.23.1.x86_64",
                "product": {
                  "name": "libmysqlclient-devel-10.0.29-20.23.1.x86_64",
                  "product_id": "libmysqlclient-devel-10.0.29-20.23.1.x86_64"
                }
              },
              {
                "category": "product_version",
                "name": "libmysqlclient18-10.0.29-20.23.1.x86_64",
                "product": {
                  "name": "libmysqlclient18-10.0.29-20.23.1.x86_64",
                  "product_id": "libmysqlclient18-10.0.29-20.23.1.x86_64"
                }
              },
              {
                "category": "product_version",
                "name": "libmysqlclient18-32bit-10.0.29-20.23.1.x86_64",
                "product": {
                  "name": "libmysqlclient18-32bit-10.0.29-20.23.1.x86_64",
                  "product_id": "libmysqlclient18-32bit-10.0.29-20.23.1.x86_64"
                }
              },
              {
                "category": "product_version",
                "name": "libmysqlclient_r18-10.0.29-20.23.1.x86_64",
                "product": {
                  "name": "libmysqlclient_r18-10.0.29-20.23.1.x86_64",
                  "product_id": "libmysqlclient_r18-10.0.29-20.23.1.x86_64"
                }
              },
              {
                "category": "product_version",
                "name": "libmysqld-devel-10.0.29-20.23.1.x86_64",
                "product": {
                  "name": "libmysqld-devel-10.0.29-20.23.1.x86_64",
                  "product_id": "libmysqld-devel-10.0.29-20.23.1.x86_64"
                }
              },
              {
                "category": "product_version",
                "name": "libmysqld18-10.0.29-20.23.1.x86_64",
                "product": {
                  "name": "libmysqld18-10.0.29-20.23.1.x86_64",
                  "product_id": "libmysqld18-10.0.29-20.23.1.x86_64"
                }
              },
              {
                "category": "product_version",
                "name": "mariadb-10.0.29-20.23.1.x86_64",
                "product": {
                  "name": "mariadb-10.0.29-20.23.1.x86_64",
                  "product_id": "mariadb-10.0.29-20.23.1.x86_64"
                }
              },
              {
                "category": "product_version",
                "name": "mariadb-client-10.0.29-20.23.1.x86_64",
                "product": {
                  "name": "mariadb-client-10.0.29-20.23.1.x86_64",
                  "product_id": "mariadb-client-10.0.29-20.23.1.x86_64"
                }
              },
              {
                "category": "product_version",
                "name": "mariadb-errormessages-10.0.29-20.23.1.x86_64",
                "product": {
                  "name": "mariadb-errormessages-10.0.29-20.23.1.x86_64",
                  "product_id": "mariadb-errormessages-10.0.29-20.23.1.x86_64"
                }
              },
              {
                "category": "product_version",
                "name": "mariadb-tools-10.0.29-20.23.1.x86_64",
                "product": {
                  "name": "mariadb-tools-10.0.29-20.23.1.x86_64",
                  "product_id": "mariadb-tools-10.0.29-20.23.1.x86_64"
                }
              }
            ],
            "category": "architecture",
            "name": "x86_64"
          },
          {
            "branches": [
              {
                "category": "product_name",
                "name": "SUSE Linux Enterprise Server for SAP Applications 12",
                "product": {
                  "name": "SUSE Linux Enterprise Server for SAP Applications 12",
                  "product_id": "SUSE Linux Enterprise Server for SAP Applications 12",
                  "product_identification_helper": {
                    "cpe": "cpe:/o:suse:sles_sap:12"
                  }
                }
              },
              {
                "category": "product_name",
                "name": "SUSE Linux Enterprise Server 12-LTSS",
                "product": {
                  "name": "SUSE Linux Enterprise Server 12-LTSS",
                  "product_id": "SUSE Linux Enterprise Server 12-LTSS",
                  "product_identification_helper": {
                    "cpe": "cpe:/o:suse:sles-ltss:12"
                  }
                }
              }
            ],
            "category": "product_family",
            "name": "SUSE Linux Enterprise"
          }
        ],
        "category": "vendor",
        "name": "SUSE"
      }
    ],
    "relationships": [
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libmysqlclient-devel-10.0.29-20.23.1.x86_64 as component of SUSE Linux Enterprise Server for SAP Applications 12",
          "product_id": "SUSE Linux Enterprise Server for SAP Applications 12:libmysqlclient-devel-10.0.29-20.23.1.x86_64"
        },
        "product_reference": "libmysqlclient-devel-10.0.29-20.23.1.x86_64",
        "relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 12"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libmysqlclient18-10.0.29-20.23.1.x86_64 as component of SUSE Linux Enterprise Server for SAP Applications 12",
          "product_id": "SUSE Linux Enterprise Server for SAP Applications 12:libmysqlclient18-10.0.29-20.23.1.x86_64"
        },
        "product_reference": "libmysqlclient18-10.0.29-20.23.1.x86_64",
        "relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 12"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libmysqlclient18-32bit-10.0.29-20.23.1.x86_64 as component of SUSE Linux Enterprise Server for SAP Applications 12",
          "product_id": "SUSE Linux Enterprise Server for SAP Applications 12:libmysqlclient18-32bit-10.0.29-20.23.1.x86_64"
        },
        "product_reference": "libmysqlclient18-32bit-10.0.29-20.23.1.x86_64",
        "relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 12"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libmysqlclient_r18-10.0.29-20.23.1.x86_64 as component of SUSE Linux Enterprise Server for SAP Applications 12",
          "product_id": "SUSE Linux Enterprise Server for SAP Applications 12:libmysqlclient_r18-10.0.29-20.23.1.x86_64"
        },
        "product_reference": "libmysqlclient_r18-10.0.29-20.23.1.x86_64",
        "relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 12"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libmysqld-devel-10.0.29-20.23.1.x86_64 as component of SUSE Linux Enterprise Server for SAP Applications 12",
          "product_id": "SUSE Linux Enterprise Server for SAP Applications 12:libmysqld-devel-10.0.29-20.23.1.x86_64"
        },
        "product_reference": "libmysqld-devel-10.0.29-20.23.1.x86_64",
        "relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 12"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libmysqld18-10.0.29-20.23.1.x86_64 as component of SUSE Linux Enterprise Server for SAP Applications 12",
          "product_id": "SUSE Linux Enterprise Server for SAP Applications 12:libmysqld18-10.0.29-20.23.1.x86_64"
        },
        "product_reference": "libmysqld18-10.0.29-20.23.1.x86_64",
        "relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 12"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "mariadb-10.0.29-20.23.1.x86_64 as component of SUSE Linux Enterprise Server for SAP Applications 12",
          "product_id": "SUSE Linux Enterprise Server for SAP Applications 12:mariadb-10.0.29-20.23.1.x86_64"
        },
        "product_reference": "mariadb-10.0.29-20.23.1.x86_64",
        "relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 12"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "mariadb-client-10.0.29-20.23.1.x86_64 as component of SUSE Linux Enterprise Server for SAP Applications 12",
          "product_id": "SUSE Linux Enterprise Server for SAP Applications 12:mariadb-client-10.0.29-20.23.1.x86_64"
        },
        "product_reference": "mariadb-client-10.0.29-20.23.1.x86_64",
        "relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 12"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "mariadb-errormessages-10.0.29-20.23.1.x86_64 as component of SUSE Linux Enterprise Server for SAP Applications 12",
          "product_id": "SUSE Linux Enterprise Server for SAP Applications 12:mariadb-errormessages-10.0.29-20.23.1.x86_64"
        },
        "product_reference": "mariadb-errormessages-10.0.29-20.23.1.x86_64",
        "relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 12"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "mariadb-tools-10.0.29-20.23.1.x86_64 as component of SUSE Linux Enterprise Server for SAP Applications 12",
          "product_id": "SUSE Linux Enterprise Server for SAP Applications 12:mariadb-tools-10.0.29-20.23.1.x86_64"
        },
        "product_reference": "mariadb-tools-10.0.29-20.23.1.x86_64",
        "relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 12"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libmysqlclient-devel-10.0.29-20.23.1.ppc64le as component of SUSE Linux Enterprise Server 12-LTSS",
          "product_id": "SUSE Linux Enterprise Server 12-LTSS:libmysqlclient-devel-10.0.29-20.23.1.ppc64le"
        },
        "product_reference": "libmysqlclient-devel-10.0.29-20.23.1.ppc64le",
        "relates_to_product_reference": "SUSE Linux Enterprise Server 12-LTSS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libmysqlclient-devel-10.0.29-20.23.1.s390x as component of SUSE Linux Enterprise Server 12-LTSS",
          "product_id": "SUSE Linux Enterprise Server 12-LTSS:libmysqlclient-devel-10.0.29-20.23.1.s390x"
        },
        "product_reference": "libmysqlclient-devel-10.0.29-20.23.1.s390x",
        "relates_to_product_reference": "SUSE Linux Enterprise Server 12-LTSS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libmysqlclient-devel-10.0.29-20.23.1.x86_64 as component of SUSE Linux Enterprise Server 12-LTSS",
          "product_id": "SUSE Linux Enterprise Server 12-LTSS:libmysqlclient-devel-10.0.29-20.23.1.x86_64"
        },
        "product_reference": "libmysqlclient-devel-10.0.29-20.23.1.x86_64",
        "relates_to_product_reference": "SUSE Linux Enterprise Server 12-LTSS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libmysqlclient18-10.0.29-20.23.1.ppc64le as component of SUSE Linux Enterprise Server 12-LTSS",
          "product_id": "SUSE Linux Enterprise Server 12-LTSS:libmysqlclient18-10.0.29-20.23.1.ppc64le"
        },
        "product_reference": "libmysqlclient18-10.0.29-20.23.1.ppc64le",
        "relates_to_product_reference": "SUSE Linux Enterprise Server 12-LTSS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libmysqlclient18-10.0.29-20.23.1.s390x as component of SUSE Linux Enterprise Server 12-LTSS",
          "product_id": "SUSE Linux Enterprise Server 12-LTSS:libmysqlclient18-10.0.29-20.23.1.s390x"
        },
        "product_reference": "libmysqlclient18-10.0.29-20.23.1.s390x",
        "relates_to_product_reference": "SUSE Linux Enterprise Server 12-LTSS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libmysqlclient18-10.0.29-20.23.1.x86_64 as component of SUSE Linux Enterprise Server 12-LTSS",
          "product_id": "SUSE Linux Enterprise Server 12-LTSS:libmysqlclient18-10.0.29-20.23.1.x86_64"
        },
        "product_reference": "libmysqlclient18-10.0.29-20.23.1.x86_64",
        "relates_to_product_reference": "SUSE Linux Enterprise Server 12-LTSS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libmysqlclient18-32bit-10.0.29-20.23.1.s390x as component of SUSE Linux Enterprise Server 12-LTSS",
          "product_id": "SUSE Linux Enterprise Server 12-LTSS:libmysqlclient18-32bit-10.0.29-20.23.1.s390x"
        },
        "product_reference": "libmysqlclient18-32bit-10.0.29-20.23.1.s390x",
        "relates_to_product_reference": "SUSE Linux Enterprise Server 12-LTSS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libmysqlclient18-32bit-10.0.29-20.23.1.x86_64 as component of SUSE Linux Enterprise Server 12-LTSS",
          "product_id": "SUSE Linux Enterprise Server 12-LTSS:libmysqlclient18-32bit-10.0.29-20.23.1.x86_64"
        },
        "product_reference": "libmysqlclient18-32bit-10.0.29-20.23.1.x86_64",
        "relates_to_product_reference": "SUSE Linux Enterprise Server 12-LTSS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libmysqlclient_r18-10.0.29-20.23.1.ppc64le as component of SUSE Linux Enterprise Server 12-LTSS",
          "product_id": "SUSE Linux Enterprise Server 12-LTSS:libmysqlclient_r18-10.0.29-20.23.1.ppc64le"
        },
        "product_reference": "libmysqlclient_r18-10.0.29-20.23.1.ppc64le",
        "relates_to_product_reference": "SUSE Linux Enterprise Server 12-LTSS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libmysqlclient_r18-10.0.29-20.23.1.s390x as component of SUSE Linux Enterprise Server 12-LTSS",
          "product_id": "SUSE Linux Enterprise Server 12-LTSS:libmysqlclient_r18-10.0.29-20.23.1.s390x"
        },
        "product_reference": "libmysqlclient_r18-10.0.29-20.23.1.s390x",
        "relates_to_product_reference": "SUSE Linux Enterprise Server 12-LTSS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libmysqlclient_r18-10.0.29-20.23.1.x86_64 as component of SUSE Linux Enterprise Server 12-LTSS",
          "product_id": "SUSE Linux Enterprise Server 12-LTSS:libmysqlclient_r18-10.0.29-20.23.1.x86_64"
        },
        "product_reference": "libmysqlclient_r18-10.0.29-20.23.1.x86_64",
        "relates_to_product_reference": "SUSE Linux Enterprise Server 12-LTSS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libmysqld-devel-10.0.29-20.23.1.ppc64le as component of SUSE Linux Enterprise Server 12-LTSS",
          "product_id": "SUSE Linux Enterprise Server 12-LTSS:libmysqld-devel-10.0.29-20.23.1.ppc64le"
        },
        "product_reference": "libmysqld-devel-10.0.29-20.23.1.ppc64le",
        "relates_to_product_reference": "SUSE Linux Enterprise Server 12-LTSS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libmysqld-devel-10.0.29-20.23.1.s390x as component of SUSE Linux Enterprise Server 12-LTSS",
          "product_id": "SUSE Linux Enterprise Server 12-LTSS:libmysqld-devel-10.0.29-20.23.1.s390x"
        },
        "product_reference": "libmysqld-devel-10.0.29-20.23.1.s390x",
        "relates_to_product_reference": "SUSE Linux Enterprise Server 12-LTSS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libmysqld-devel-10.0.29-20.23.1.x86_64 as component of SUSE Linux Enterprise Server 12-LTSS",
          "product_id": "SUSE Linux Enterprise Server 12-LTSS:libmysqld-devel-10.0.29-20.23.1.x86_64"
        },
        "product_reference": "libmysqld-devel-10.0.29-20.23.1.x86_64",
        "relates_to_product_reference": "SUSE Linux Enterprise Server 12-LTSS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libmysqld18-10.0.29-20.23.1.ppc64le as component of SUSE Linux Enterprise Server 12-LTSS",
          "product_id": "SUSE Linux Enterprise Server 12-LTSS:libmysqld18-10.0.29-20.23.1.ppc64le"
        },
        "product_reference": "libmysqld18-10.0.29-20.23.1.ppc64le",
        "relates_to_product_reference": "SUSE Linux Enterprise Server 12-LTSS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libmysqld18-10.0.29-20.23.1.s390x as component of SUSE Linux Enterprise Server 12-LTSS",
          "product_id": "SUSE Linux Enterprise Server 12-LTSS:libmysqld18-10.0.29-20.23.1.s390x"
        },
        "product_reference": "libmysqld18-10.0.29-20.23.1.s390x",
        "relates_to_product_reference": "SUSE Linux Enterprise Server 12-LTSS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libmysqld18-10.0.29-20.23.1.x86_64 as component of SUSE Linux Enterprise Server 12-LTSS",
          "product_id": "SUSE Linux Enterprise Server 12-LTSS:libmysqld18-10.0.29-20.23.1.x86_64"
        },
        "product_reference": "libmysqld18-10.0.29-20.23.1.x86_64",
        "relates_to_product_reference": "SUSE Linux Enterprise Server 12-LTSS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "mariadb-10.0.29-20.23.1.ppc64le as component of SUSE Linux Enterprise Server 12-LTSS",
          "product_id": "SUSE Linux Enterprise Server 12-LTSS:mariadb-10.0.29-20.23.1.ppc64le"
        },
        "product_reference": "mariadb-10.0.29-20.23.1.ppc64le",
        "relates_to_product_reference": "SUSE Linux Enterprise Server 12-LTSS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "mariadb-10.0.29-20.23.1.s390x as component of SUSE Linux Enterprise Server 12-LTSS",
          "product_id": "SUSE Linux Enterprise Server 12-LTSS:mariadb-10.0.29-20.23.1.s390x"
        },
        "product_reference": "mariadb-10.0.29-20.23.1.s390x",
        "relates_to_product_reference": "SUSE Linux Enterprise Server 12-LTSS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "mariadb-10.0.29-20.23.1.x86_64 as component of SUSE Linux Enterprise Server 12-LTSS",
          "product_id": "SUSE Linux Enterprise Server 12-LTSS:mariadb-10.0.29-20.23.1.x86_64"
        },
        "product_reference": "mariadb-10.0.29-20.23.1.x86_64",
        "relates_to_product_reference": "SUSE Linux Enterprise Server 12-LTSS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "mariadb-client-10.0.29-20.23.1.ppc64le as component of SUSE Linux Enterprise Server 12-LTSS",
          "product_id": "SUSE Linux Enterprise Server 12-LTSS:mariadb-client-10.0.29-20.23.1.ppc64le"
        },
        "product_reference": "mariadb-client-10.0.29-20.23.1.ppc64le",
        "relates_to_product_reference": "SUSE Linux Enterprise Server 12-LTSS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "mariadb-client-10.0.29-20.23.1.s390x as component of SUSE Linux Enterprise Server 12-LTSS",
          "product_id": "SUSE Linux Enterprise Server 12-LTSS:mariadb-client-10.0.29-20.23.1.s390x"
        },
        "product_reference": "mariadb-client-10.0.29-20.23.1.s390x",
        "relates_to_product_reference": "SUSE Linux Enterprise Server 12-LTSS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "mariadb-client-10.0.29-20.23.1.x86_64 as component of SUSE Linux Enterprise Server 12-LTSS",
          "product_id": "SUSE Linux Enterprise Server 12-LTSS:mariadb-client-10.0.29-20.23.1.x86_64"
        },
        "product_reference": "mariadb-client-10.0.29-20.23.1.x86_64",
        "relates_to_product_reference": "SUSE Linux Enterprise Server 12-LTSS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "mariadb-errormessages-10.0.29-20.23.1.ppc64le as component of SUSE Linux Enterprise Server 12-LTSS",
          "product_id": "SUSE Linux Enterprise Server 12-LTSS:mariadb-errormessages-10.0.29-20.23.1.ppc64le"
        },
        "product_reference": "mariadb-errormessages-10.0.29-20.23.1.ppc64le",
        "relates_to_product_reference": "SUSE Linux Enterprise Server 12-LTSS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "mariadb-errormessages-10.0.29-20.23.1.s390x as component of SUSE Linux Enterprise Server 12-LTSS",
          "product_id": "SUSE Linux Enterprise Server 12-LTSS:mariadb-errormessages-10.0.29-20.23.1.s390x"
        },
        "product_reference": "mariadb-errormessages-10.0.29-20.23.1.s390x",
        "relates_to_product_reference": "SUSE Linux Enterprise Server 12-LTSS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "mariadb-errormessages-10.0.29-20.23.1.x86_64 as component of SUSE Linux Enterprise Server 12-LTSS",
          "product_id": "SUSE Linux Enterprise Server 12-LTSS:mariadb-errormessages-10.0.29-20.23.1.x86_64"
        },
        "product_reference": "mariadb-errormessages-10.0.29-20.23.1.x86_64",
        "relates_to_product_reference": "SUSE Linux Enterprise Server 12-LTSS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "mariadb-tools-10.0.29-20.23.1.ppc64le as component of SUSE Linux Enterprise Server 12-LTSS",
          "product_id": "SUSE Linux Enterprise Server 12-LTSS:mariadb-tools-10.0.29-20.23.1.ppc64le"
        },
        "product_reference": "mariadb-tools-10.0.29-20.23.1.ppc64le",
        "relates_to_product_reference": "SUSE Linux Enterprise Server 12-LTSS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "mariadb-tools-10.0.29-20.23.1.s390x as component of SUSE Linux Enterprise Server 12-LTSS",
          "product_id": "SUSE Linux Enterprise Server 12-LTSS:mariadb-tools-10.0.29-20.23.1.s390x"
        },
        "product_reference": "mariadb-tools-10.0.29-20.23.1.s390x",
        "relates_to_product_reference": "SUSE Linux Enterprise Server 12-LTSS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "mariadb-tools-10.0.29-20.23.1.x86_64 as component of SUSE Linux Enterprise Server 12-LTSS",
          "product_id": "SUSE Linux Enterprise Server 12-LTSS:mariadb-tools-10.0.29-20.23.1.x86_64"
        },
        "product_reference": "mariadb-tools-10.0.29-20.23.1.x86_64",
        "relates_to_product_reference": "SUSE Linux Enterprise Server 12-LTSS"
      }
    ]
  },
  "vulnerabilities": [
    {
      "cve": "CVE-2016-6664",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2016-6664"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "mysqld_safe in Oracle MySQL through 5.5.51, 5.6.x through 5.6.32, and 5.7.x through 5.7.14; MariaDB; Percona Server before 5.5.51-38.2, 5.6.x before 5.6.32-78-1, and 5.7.x before 5.7.14-8; and Percona XtraDB Cluster before 5.5.41-37.0, 5.6.x before 5.6.32-25.17, and 5.7.x before 5.7.14-26.17, when using file-based logging, allows local users with access to the mysql account to gain root privileges via a symlink attack on error logs and possibly other files.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Linux Enterprise Server 12-LTSS:libmysqlclient-devel-10.0.29-20.23.1.ppc64le",
          "SUSE Linux Enterprise Server 12-LTSS:libmysqlclient-devel-10.0.29-20.23.1.s390x",
          "SUSE Linux Enterprise Server 12-LTSS:libmysqlclient-devel-10.0.29-20.23.1.x86_64",
          "SUSE Linux Enterprise Server 12-LTSS:libmysqlclient18-10.0.29-20.23.1.ppc64le",
          "SUSE Linux Enterprise Server 12-LTSS:libmysqlclient18-10.0.29-20.23.1.s390x",
          "SUSE Linux Enterprise Server 12-LTSS:libmysqlclient18-10.0.29-20.23.1.x86_64",
          "SUSE Linux Enterprise Server 12-LTSS:libmysqlclient18-32bit-10.0.29-20.23.1.s390x",
          "SUSE Linux Enterprise Server 12-LTSS:libmysqlclient18-32bit-10.0.29-20.23.1.x86_64",
          "SUSE Linux Enterprise Server 12-LTSS:libmysqlclient_r18-10.0.29-20.23.1.ppc64le",
          "SUSE Linux Enterprise Server 12-LTSS:libmysqlclient_r18-10.0.29-20.23.1.s390x",
          "SUSE Linux Enterprise Server 12-LTSS:libmysqlclient_r18-10.0.29-20.23.1.x86_64",
          "SUSE Linux Enterprise Server 12-LTSS:libmysqld-devel-10.0.29-20.23.1.ppc64le",
          "SUSE Linux Enterprise Server 12-LTSS:libmysqld-devel-10.0.29-20.23.1.s390x",
          "SUSE Linux Enterprise Server 12-LTSS:libmysqld-devel-10.0.29-20.23.1.x86_64",
          "SUSE Linux Enterprise Server 12-LTSS:libmysqld18-10.0.29-20.23.1.ppc64le",
          "SUSE Linux Enterprise Server 12-LTSS:libmysqld18-10.0.29-20.23.1.s390x",
          "SUSE Linux Enterprise Server 12-LTSS:libmysqld18-10.0.29-20.23.1.x86_64",
          "SUSE Linux Enterprise Server 12-LTSS:mariadb-10.0.29-20.23.1.ppc64le",
          "SUSE Linux Enterprise Server 12-LTSS:mariadb-10.0.29-20.23.1.s390x",
          "SUSE Linux Enterprise Server 12-LTSS:mariadb-10.0.29-20.23.1.x86_64",
          "SUSE Linux Enterprise Server 12-LTSS:mariadb-client-10.0.29-20.23.1.ppc64le",
          "SUSE Linux Enterprise Server 12-LTSS:mariadb-client-10.0.29-20.23.1.s390x",
          "SUSE Linux Enterprise Server 12-LTSS:mariadb-client-10.0.29-20.23.1.x86_64",
          "SUSE Linux Enterprise Server 12-LTSS:mariadb-errormessages-10.0.29-20.23.1.ppc64le",
          "SUSE Linux Enterprise Server 12-LTSS:mariadb-errormessages-10.0.29-20.23.1.s390x",
          "SUSE Linux Enterprise Server 12-LTSS:mariadb-errormessages-10.0.29-20.23.1.x86_64",
          "SUSE Linux Enterprise Server 12-LTSS:mariadb-tools-10.0.29-20.23.1.ppc64le",
          "SUSE Linux Enterprise Server 12-LTSS:mariadb-tools-10.0.29-20.23.1.s390x",
          "SUSE Linux Enterprise Server 12-LTSS:mariadb-tools-10.0.29-20.23.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 12:libmysqlclient-devel-10.0.29-20.23.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 12:libmysqlclient18-10.0.29-20.23.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 12:libmysqlclient18-32bit-10.0.29-20.23.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 12:libmysqlclient_r18-10.0.29-20.23.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 12:libmysqld-devel-10.0.29-20.23.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 12:libmysqld18-10.0.29-20.23.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 12:mariadb-10.0.29-20.23.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 12:mariadb-client-10.0.29-20.23.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 12:mariadb-errormessages-10.0.29-20.23.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 12:mariadb-tools-10.0.29-20.23.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2016-6664",
          "url": "https://www.suse.com/security/cve/CVE-2016-6664"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1008253 for CVE-2016-6664",
          "url": "https://bugzilla.suse.com/1008253"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1020868 for CVE-2016-6664",
          "url": "https://bugzilla.suse.com/1020868"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1020873 for CVE-2016-6664",
          "url": "https://bugzilla.suse.com/1020873"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 998309 for CVE-2016-6664",
          "url": "https://bugzilla.suse.com/998309"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Linux Enterprise Server 12-LTSS:libmysqlclient-devel-10.0.29-20.23.1.ppc64le",
            "SUSE Linux Enterprise Server 12-LTSS:libmysqlclient-devel-10.0.29-20.23.1.s390x",
            "SUSE Linux Enterprise Server 12-LTSS:libmysqlclient-devel-10.0.29-20.23.1.x86_64",
            "SUSE Linux Enterprise Server 12-LTSS:libmysqlclient18-10.0.29-20.23.1.ppc64le",
            "SUSE Linux Enterprise Server 12-LTSS:libmysqlclient18-10.0.29-20.23.1.s390x",
            "SUSE Linux Enterprise Server 12-LTSS:libmysqlclient18-10.0.29-20.23.1.x86_64",
            "SUSE Linux Enterprise Server 12-LTSS:libmysqlclient18-32bit-10.0.29-20.23.1.s390x",
            "SUSE Linux Enterprise Server 12-LTSS:libmysqlclient18-32bit-10.0.29-20.23.1.x86_64",
            "SUSE Linux Enterprise Server 12-LTSS:libmysqlclient_r18-10.0.29-20.23.1.ppc64le",
            "SUSE Linux Enterprise Server 12-LTSS:libmysqlclient_r18-10.0.29-20.23.1.s390x",
            "SUSE Linux Enterprise Server 12-LTSS:libmysqlclient_r18-10.0.29-20.23.1.x86_64",
            "SUSE Linux Enterprise Server 12-LTSS:libmysqld-devel-10.0.29-20.23.1.ppc64le",
            "SUSE Linux Enterprise Server 12-LTSS:libmysqld-devel-10.0.29-20.23.1.s390x",
            "SUSE Linux Enterprise Server 12-LTSS:libmysqld-devel-10.0.29-20.23.1.x86_64",
            "SUSE Linux Enterprise Server 12-LTSS:libmysqld18-10.0.29-20.23.1.ppc64le",
            "SUSE Linux Enterprise Server 12-LTSS:libmysqld18-10.0.29-20.23.1.s390x",
            "SUSE Linux Enterprise Server 12-LTSS:libmysqld18-10.0.29-20.23.1.x86_64",
            "SUSE Linux Enterprise Server 12-LTSS:mariadb-10.0.29-20.23.1.ppc64le",
            "SUSE Linux Enterprise Server 12-LTSS:mariadb-10.0.29-20.23.1.s390x",
            "SUSE Linux Enterprise Server 12-LTSS:mariadb-10.0.29-20.23.1.x86_64",
            "SUSE Linux Enterprise Server 12-LTSS:mariadb-client-10.0.29-20.23.1.ppc64le",
            "SUSE Linux Enterprise Server 12-LTSS:mariadb-client-10.0.29-20.23.1.s390x",
            "SUSE Linux Enterprise Server 12-LTSS:mariadb-client-10.0.29-20.23.1.x86_64",
            "SUSE Linux Enterprise Server 12-LTSS:mariadb-errormessages-10.0.29-20.23.1.ppc64le",
            "SUSE Linux Enterprise Server 12-LTSS:mariadb-errormessages-10.0.29-20.23.1.s390x",
            "SUSE Linux Enterprise Server 12-LTSS:mariadb-errormessages-10.0.29-20.23.1.x86_64",
            "SUSE Linux Enterprise Server 12-LTSS:mariadb-tools-10.0.29-20.23.1.ppc64le",
            "SUSE Linux Enterprise Server 12-LTSS:mariadb-tools-10.0.29-20.23.1.s390x",
            "SUSE Linux Enterprise Server 12-LTSS:mariadb-tools-10.0.29-20.23.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12:libmysqlclient-devel-10.0.29-20.23.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12:libmysqlclient18-10.0.29-20.23.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12:libmysqlclient18-32bit-10.0.29-20.23.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12:libmysqlclient_r18-10.0.29-20.23.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12:libmysqld-devel-10.0.29-20.23.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12:libmysqld18-10.0.29-20.23.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12:mariadb-10.0.29-20.23.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12:mariadb-client-10.0.29-20.23.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12:mariadb-errormessages-10.0.29-20.23.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12:mariadb-tools-10.0.29-20.23.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 7.8,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "SUSE Linux Enterprise Server 12-LTSS:libmysqlclient-devel-10.0.29-20.23.1.ppc64le",
            "SUSE Linux Enterprise Server 12-LTSS:libmysqlclient-devel-10.0.29-20.23.1.s390x",
            "SUSE Linux Enterprise Server 12-LTSS:libmysqlclient-devel-10.0.29-20.23.1.x86_64",
            "SUSE Linux Enterprise Server 12-LTSS:libmysqlclient18-10.0.29-20.23.1.ppc64le",
            "SUSE Linux Enterprise Server 12-LTSS:libmysqlclient18-10.0.29-20.23.1.s390x",
            "SUSE Linux Enterprise Server 12-LTSS:libmysqlclient18-10.0.29-20.23.1.x86_64",
            "SUSE Linux Enterprise Server 12-LTSS:libmysqlclient18-32bit-10.0.29-20.23.1.s390x",
            "SUSE Linux Enterprise Server 12-LTSS:libmysqlclient18-32bit-10.0.29-20.23.1.x86_64",
            "SUSE Linux Enterprise Server 12-LTSS:libmysqlclient_r18-10.0.29-20.23.1.ppc64le",
            "SUSE Linux Enterprise Server 12-LTSS:libmysqlclient_r18-10.0.29-20.23.1.s390x",
            "SUSE Linux Enterprise Server 12-LTSS:libmysqlclient_r18-10.0.29-20.23.1.x86_64",
            "SUSE Linux Enterprise Server 12-LTSS:libmysqld-devel-10.0.29-20.23.1.ppc64le",
            "SUSE Linux Enterprise Server 12-LTSS:libmysqld-devel-10.0.29-20.23.1.s390x",
            "SUSE Linux Enterprise Server 12-LTSS:libmysqld-devel-10.0.29-20.23.1.x86_64",
            "SUSE Linux Enterprise Server 12-LTSS:libmysqld18-10.0.29-20.23.1.ppc64le",
            "SUSE Linux Enterprise Server 12-LTSS:libmysqld18-10.0.29-20.23.1.s390x",
            "SUSE Linux Enterprise Server 12-LTSS:libmysqld18-10.0.29-20.23.1.x86_64",
            "SUSE Linux Enterprise Server 12-LTSS:mariadb-10.0.29-20.23.1.ppc64le",
            "SUSE Linux Enterprise Server 12-LTSS:mariadb-10.0.29-20.23.1.s390x",
            "SUSE Linux Enterprise Server 12-LTSS:mariadb-10.0.29-20.23.1.x86_64",
            "SUSE Linux Enterprise Server 12-LTSS:mariadb-client-10.0.29-20.23.1.ppc64le",
            "SUSE Linux Enterprise Server 12-LTSS:mariadb-client-10.0.29-20.23.1.s390x",
            "SUSE Linux Enterprise Server 12-LTSS:mariadb-client-10.0.29-20.23.1.x86_64",
            "SUSE Linux Enterprise Server 12-LTSS:mariadb-errormessages-10.0.29-20.23.1.ppc64le",
            "SUSE Linux Enterprise Server 12-LTSS:mariadb-errormessages-10.0.29-20.23.1.s390x",
            "SUSE Linux Enterprise Server 12-LTSS:mariadb-errormessages-10.0.29-20.23.1.x86_64",
            "SUSE Linux Enterprise Server 12-LTSS:mariadb-tools-10.0.29-20.23.1.ppc64le",
            "SUSE Linux Enterprise Server 12-LTSS:mariadb-tools-10.0.29-20.23.1.s390x",
            "SUSE Linux Enterprise Server 12-LTSS:mariadb-tools-10.0.29-20.23.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12:libmysqlclient-devel-10.0.29-20.23.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12:libmysqlclient18-10.0.29-20.23.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12:libmysqlclient18-32bit-10.0.29-20.23.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12:libmysqlclient_r18-10.0.29-20.23.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12:libmysqld-devel-10.0.29-20.23.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12:libmysqld18-10.0.29-20.23.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12:mariadb-10.0.29-20.23.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12:mariadb-client-10.0.29-20.23.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12:mariadb-errormessages-10.0.29-20.23.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12:mariadb-tools-10.0.29-20.23.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2017-02-07T12:16:05Z",
          "details": "important"
        }
      ],
      "title": "CVE-2016-6664"
    },
    {
      "cve": "CVE-2017-3238",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2017-3238"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Optimizer). Supported versions that are affected are 5.5.53 and earlier, 5.6.34 and earlier and 5.7.16 and earlier. Easily exploitable vulnerability allows low privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS v3.0 Base Score 6.5 (Availability impacts).",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Linux Enterprise Server 12-LTSS:libmysqlclient-devel-10.0.29-20.23.1.ppc64le",
          "SUSE Linux Enterprise Server 12-LTSS:libmysqlclient-devel-10.0.29-20.23.1.s390x",
          "SUSE Linux Enterprise Server 12-LTSS:libmysqlclient-devel-10.0.29-20.23.1.x86_64",
          "SUSE Linux Enterprise Server 12-LTSS:libmysqlclient18-10.0.29-20.23.1.ppc64le",
          "SUSE Linux Enterprise Server 12-LTSS:libmysqlclient18-10.0.29-20.23.1.s390x",
          "SUSE Linux Enterprise Server 12-LTSS:libmysqlclient18-10.0.29-20.23.1.x86_64",
          "SUSE Linux Enterprise Server 12-LTSS:libmysqlclient18-32bit-10.0.29-20.23.1.s390x",
          "SUSE Linux Enterprise Server 12-LTSS:libmysqlclient18-32bit-10.0.29-20.23.1.x86_64",
          "SUSE Linux Enterprise Server 12-LTSS:libmysqlclient_r18-10.0.29-20.23.1.ppc64le",
          "SUSE Linux Enterprise Server 12-LTSS:libmysqlclient_r18-10.0.29-20.23.1.s390x",
          "SUSE Linux Enterprise Server 12-LTSS:libmysqlclient_r18-10.0.29-20.23.1.x86_64",
          "SUSE Linux Enterprise Server 12-LTSS:libmysqld-devel-10.0.29-20.23.1.ppc64le",
          "SUSE Linux Enterprise Server 12-LTSS:libmysqld-devel-10.0.29-20.23.1.s390x",
          "SUSE Linux Enterprise Server 12-LTSS:libmysqld-devel-10.0.29-20.23.1.x86_64",
          "SUSE Linux Enterprise Server 12-LTSS:libmysqld18-10.0.29-20.23.1.ppc64le",
          "SUSE Linux Enterprise Server 12-LTSS:libmysqld18-10.0.29-20.23.1.s390x",
          "SUSE Linux Enterprise Server 12-LTSS:libmysqld18-10.0.29-20.23.1.x86_64",
          "SUSE Linux Enterprise Server 12-LTSS:mariadb-10.0.29-20.23.1.ppc64le",
          "SUSE Linux Enterprise Server 12-LTSS:mariadb-10.0.29-20.23.1.s390x",
          "SUSE Linux Enterprise Server 12-LTSS:mariadb-10.0.29-20.23.1.x86_64",
          "SUSE Linux Enterprise Server 12-LTSS:mariadb-client-10.0.29-20.23.1.ppc64le",
          "SUSE Linux Enterprise Server 12-LTSS:mariadb-client-10.0.29-20.23.1.s390x",
          "SUSE Linux Enterprise Server 12-LTSS:mariadb-client-10.0.29-20.23.1.x86_64",
          "SUSE Linux Enterprise Server 12-LTSS:mariadb-errormessages-10.0.29-20.23.1.ppc64le",
          "SUSE Linux Enterprise Server 12-LTSS:mariadb-errormessages-10.0.29-20.23.1.s390x",
          "SUSE Linux Enterprise Server 12-LTSS:mariadb-errormessages-10.0.29-20.23.1.x86_64",
          "SUSE Linux Enterprise Server 12-LTSS:mariadb-tools-10.0.29-20.23.1.ppc64le",
          "SUSE Linux Enterprise Server 12-LTSS:mariadb-tools-10.0.29-20.23.1.s390x",
          "SUSE Linux Enterprise Server 12-LTSS:mariadb-tools-10.0.29-20.23.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 12:libmysqlclient-devel-10.0.29-20.23.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 12:libmysqlclient18-10.0.29-20.23.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 12:libmysqlclient18-32bit-10.0.29-20.23.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 12:libmysqlclient_r18-10.0.29-20.23.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 12:libmysqld-devel-10.0.29-20.23.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 12:libmysqld18-10.0.29-20.23.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 12:mariadb-10.0.29-20.23.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 12:mariadb-client-10.0.29-20.23.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 12:mariadb-errormessages-10.0.29-20.23.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 12:mariadb-tools-10.0.29-20.23.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2017-3238",
          "url": "https://www.suse.com/security/cve/CVE-2017-3238"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1020868 for CVE-2017-3238",
          "url": "https://bugzilla.suse.com/1020868"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1020882 for CVE-2017-3238",
          "url": "https://bugzilla.suse.com/1020882"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Linux Enterprise Server 12-LTSS:libmysqlclient-devel-10.0.29-20.23.1.ppc64le",
            "SUSE Linux Enterprise Server 12-LTSS:libmysqlclient-devel-10.0.29-20.23.1.s390x",
            "SUSE Linux Enterprise Server 12-LTSS:libmysqlclient-devel-10.0.29-20.23.1.x86_64",
            "SUSE Linux Enterprise Server 12-LTSS:libmysqlclient18-10.0.29-20.23.1.ppc64le",
            "SUSE Linux Enterprise Server 12-LTSS:libmysqlclient18-10.0.29-20.23.1.s390x",
            "SUSE Linux Enterprise Server 12-LTSS:libmysqlclient18-10.0.29-20.23.1.x86_64",
            "SUSE Linux Enterprise Server 12-LTSS:libmysqlclient18-32bit-10.0.29-20.23.1.s390x",
            "SUSE Linux Enterprise Server 12-LTSS:libmysqlclient18-32bit-10.0.29-20.23.1.x86_64",
            "SUSE Linux Enterprise Server 12-LTSS:libmysqlclient_r18-10.0.29-20.23.1.ppc64le",
            "SUSE Linux Enterprise Server 12-LTSS:libmysqlclient_r18-10.0.29-20.23.1.s390x",
            "SUSE Linux Enterprise Server 12-LTSS:libmysqlclient_r18-10.0.29-20.23.1.x86_64",
            "SUSE Linux Enterprise Server 12-LTSS:libmysqld-devel-10.0.29-20.23.1.ppc64le",
            "SUSE Linux Enterprise Server 12-LTSS:libmysqld-devel-10.0.29-20.23.1.s390x",
            "SUSE Linux Enterprise Server 12-LTSS:libmysqld-devel-10.0.29-20.23.1.x86_64",
            "SUSE Linux Enterprise Server 12-LTSS:libmysqld18-10.0.29-20.23.1.ppc64le",
            "SUSE Linux Enterprise Server 12-LTSS:libmysqld18-10.0.29-20.23.1.s390x",
            "SUSE Linux Enterprise Server 12-LTSS:libmysqld18-10.0.29-20.23.1.x86_64",
            "SUSE Linux Enterprise Server 12-LTSS:mariadb-10.0.29-20.23.1.ppc64le",
            "SUSE Linux Enterprise Server 12-LTSS:mariadb-10.0.29-20.23.1.s390x",
            "SUSE Linux Enterprise Server 12-LTSS:mariadb-10.0.29-20.23.1.x86_64",
            "SUSE Linux Enterprise Server 12-LTSS:mariadb-client-10.0.29-20.23.1.ppc64le",
            "SUSE Linux Enterprise Server 12-LTSS:mariadb-client-10.0.29-20.23.1.s390x",
            "SUSE Linux Enterprise Server 12-LTSS:mariadb-client-10.0.29-20.23.1.x86_64",
            "SUSE Linux Enterprise Server 12-LTSS:mariadb-errormessages-10.0.29-20.23.1.ppc64le",
            "SUSE Linux Enterprise Server 12-LTSS:mariadb-errormessages-10.0.29-20.23.1.s390x",
            "SUSE Linux Enterprise Server 12-LTSS:mariadb-errormessages-10.0.29-20.23.1.x86_64",
            "SUSE Linux Enterprise Server 12-LTSS:mariadb-tools-10.0.29-20.23.1.ppc64le",
            "SUSE Linux Enterprise Server 12-LTSS:mariadb-tools-10.0.29-20.23.1.s390x",
            "SUSE Linux Enterprise Server 12-LTSS:mariadb-tools-10.0.29-20.23.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12:libmysqlclient-devel-10.0.29-20.23.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12:libmysqlclient18-10.0.29-20.23.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12:libmysqlclient18-32bit-10.0.29-20.23.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12:libmysqlclient_r18-10.0.29-20.23.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12:libmysqld-devel-10.0.29-20.23.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12:libmysqld18-10.0.29-20.23.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12:mariadb-10.0.29-20.23.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12:mariadb-client-10.0.29-20.23.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12:mariadb-errormessages-10.0.29-20.23.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12:mariadb-tools-10.0.29-20.23.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 6.5,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "SUSE Linux Enterprise Server 12-LTSS:libmysqlclient-devel-10.0.29-20.23.1.ppc64le",
            "SUSE Linux Enterprise Server 12-LTSS:libmysqlclient-devel-10.0.29-20.23.1.s390x",
            "SUSE Linux Enterprise Server 12-LTSS:libmysqlclient-devel-10.0.29-20.23.1.x86_64",
            "SUSE Linux Enterprise Server 12-LTSS:libmysqlclient18-10.0.29-20.23.1.ppc64le",
            "SUSE Linux Enterprise Server 12-LTSS:libmysqlclient18-10.0.29-20.23.1.s390x",
            "SUSE Linux Enterprise Server 12-LTSS:libmysqlclient18-10.0.29-20.23.1.x86_64",
            "SUSE Linux Enterprise Server 12-LTSS:libmysqlclient18-32bit-10.0.29-20.23.1.s390x",
            "SUSE Linux Enterprise Server 12-LTSS:libmysqlclient18-32bit-10.0.29-20.23.1.x86_64",
            "SUSE Linux Enterprise Server 12-LTSS:libmysqlclient_r18-10.0.29-20.23.1.ppc64le",
            "SUSE Linux Enterprise Server 12-LTSS:libmysqlclient_r18-10.0.29-20.23.1.s390x",
            "SUSE Linux Enterprise Server 12-LTSS:libmysqlclient_r18-10.0.29-20.23.1.x86_64",
            "SUSE Linux Enterprise Server 12-LTSS:libmysqld-devel-10.0.29-20.23.1.ppc64le",
            "SUSE Linux Enterprise Server 12-LTSS:libmysqld-devel-10.0.29-20.23.1.s390x",
            "SUSE Linux Enterprise Server 12-LTSS:libmysqld-devel-10.0.29-20.23.1.x86_64",
            "SUSE Linux Enterprise Server 12-LTSS:libmysqld18-10.0.29-20.23.1.ppc64le",
            "SUSE Linux Enterprise Server 12-LTSS:libmysqld18-10.0.29-20.23.1.s390x",
            "SUSE Linux Enterprise Server 12-LTSS:libmysqld18-10.0.29-20.23.1.x86_64",
            "SUSE Linux Enterprise Server 12-LTSS:mariadb-10.0.29-20.23.1.ppc64le",
            "SUSE Linux Enterprise Server 12-LTSS:mariadb-10.0.29-20.23.1.s390x",
            "SUSE Linux Enterprise Server 12-LTSS:mariadb-10.0.29-20.23.1.x86_64",
            "SUSE Linux Enterprise Server 12-LTSS:mariadb-client-10.0.29-20.23.1.ppc64le",
            "SUSE Linux Enterprise Server 12-LTSS:mariadb-client-10.0.29-20.23.1.s390x",
            "SUSE Linux Enterprise Server 12-LTSS:mariadb-client-10.0.29-20.23.1.x86_64",
            "SUSE Linux Enterprise Server 12-LTSS:mariadb-errormessages-10.0.29-20.23.1.ppc64le",
            "SUSE Linux Enterprise Server 12-LTSS:mariadb-errormessages-10.0.29-20.23.1.s390x",
            "SUSE Linux Enterprise Server 12-LTSS:mariadb-errormessages-10.0.29-20.23.1.x86_64",
            "SUSE Linux Enterprise Server 12-LTSS:mariadb-tools-10.0.29-20.23.1.ppc64le",
            "SUSE Linux Enterprise Server 12-LTSS:mariadb-tools-10.0.29-20.23.1.s390x",
            "SUSE Linux Enterprise Server 12-LTSS:mariadb-tools-10.0.29-20.23.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12:libmysqlclient-devel-10.0.29-20.23.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12:libmysqlclient18-10.0.29-20.23.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12:libmysqlclient18-32bit-10.0.29-20.23.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12:libmysqlclient_r18-10.0.29-20.23.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12:libmysqld-devel-10.0.29-20.23.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12:libmysqld18-10.0.29-20.23.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12:mariadb-10.0.29-20.23.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12:mariadb-client-10.0.29-20.23.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12:mariadb-errormessages-10.0.29-20.23.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12:mariadb-tools-10.0.29-20.23.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2017-02-07T12:16:05Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2017-3238"
    },
    {
      "cve": "CVE-2017-3243",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2017-3243"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Charsets). Supported versions that are affected are 5.5.53 and earlier. Difficult to exploit vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS v3.0 Base Score 4.4 (Availability impacts).",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Linux Enterprise Server 12-LTSS:libmysqlclient-devel-10.0.29-20.23.1.ppc64le",
          "SUSE Linux Enterprise Server 12-LTSS:libmysqlclient-devel-10.0.29-20.23.1.s390x",
          "SUSE Linux Enterprise Server 12-LTSS:libmysqlclient-devel-10.0.29-20.23.1.x86_64",
          "SUSE Linux Enterprise Server 12-LTSS:libmysqlclient18-10.0.29-20.23.1.ppc64le",
          "SUSE Linux Enterprise Server 12-LTSS:libmysqlclient18-10.0.29-20.23.1.s390x",
          "SUSE Linux Enterprise Server 12-LTSS:libmysqlclient18-10.0.29-20.23.1.x86_64",
          "SUSE Linux Enterprise Server 12-LTSS:libmysqlclient18-32bit-10.0.29-20.23.1.s390x",
          "SUSE Linux Enterprise Server 12-LTSS:libmysqlclient18-32bit-10.0.29-20.23.1.x86_64",
          "SUSE Linux Enterprise Server 12-LTSS:libmysqlclient_r18-10.0.29-20.23.1.ppc64le",
          "SUSE Linux Enterprise Server 12-LTSS:libmysqlclient_r18-10.0.29-20.23.1.s390x",
          "SUSE Linux Enterprise Server 12-LTSS:libmysqlclient_r18-10.0.29-20.23.1.x86_64",
          "SUSE Linux Enterprise Server 12-LTSS:libmysqld-devel-10.0.29-20.23.1.ppc64le",
          "SUSE Linux Enterprise Server 12-LTSS:libmysqld-devel-10.0.29-20.23.1.s390x",
          "SUSE Linux Enterprise Server 12-LTSS:libmysqld-devel-10.0.29-20.23.1.x86_64",
          "SUSE Linux Enterprise Server 12-LTSS:libmysqld18-10.0.29-20.23.1.ppc64le",
          "SUSE Linux Enterprise Server 12-LTSS:libmysqld18-10.0.29-20.23.1.s390x",
          "SUSE Linux Enterprise Server 12-LTSS:libmysqld18-10.0.29-20.23.1.x86_64",
          "SUSE Linux Enterprise Server 12-LTSS:mariadb-10.0.29-20.23.1.ppc64le",
          "SUSE Linux Enterprise Server 12-LTSS:mariadb-10.0.29-20.23.1.s390x",
          "SUSE Linux Enterprise Server 12-LTSS:mariadb-10.0.29-20.23.1.x86_64",
          "SUSE Linux Enterprise Server 12-LTSS:mariadb-client-10.0.29-20.23.1.ppc64le",
          "SUSE Linux Enterprise Server 12-LTSS:mariadb-client-10.0.29-20.23.1.s390x",
          "SUSE Linux Enterprise Server 12-LTSS:mariadb-client-10.0.29-20.23.1.x86_64",
          "SUSE Linux Enterprise Server 12-LTSS:mariadb-errormessages-10.0.29-20.23.1.ppc64le",
          "SUSE Linux Enterprise Server 12-LTSS:mariadb-errormessages-10.0.29-20.23.1.s390x",
          "SUSE Linux Enterprise Server 12-LTSS:mariadb-errormessages-10.0.29-20.23.1.x86_64",
          "SUSE Linux Enterprise Server 12-LTSS:mariadb-tools-10.0.29-20.23.1.ppc64le",
          "SUSE Linux Enterprise Server 12-LTSS:mariadb-tools-10.0.29-20.23.1.s390x",
          "SUSE Linux Enterprise Server 12-LTSS:mariadb-tools-10.0.29-20.23.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 12:libmysqlclient-devel-10.0.29-20.23.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 12:libmysqlclient18-10.0.29-20.23.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 12:libmysqlclient18-32bit-10.0.29-20.23.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 12:libmysqlclient_r18-10.0.29-20.23.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 12:libmysqld-devel-10.0.29-20.23.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 12:libmysqld18-10.0.29-20.23.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 12:mariadb-10.0.29-20.23.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 12:mariadb-client-10.0.29-20.23.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 12:mariadb-errormessages-10.0.29-20.23.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 12:mariadb-tools-10.0.29-20.23.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2017-3243",
          "url": "https://www.suse.com/security/cve/CVE-2017-3243"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1020868 for CVE-2017-3243",
          "url": "https://bugzilla.suse.com/1020868"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1020891 for CVE-2017-3243",
          "url": "https://bugzilla.suse.com/1020891"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Linux Enterprise Server 12-LTSS:libmysqlclient-devel-10.0.29-20.23.1.ppc64le",
            "SUSE Linux Enterprise Server 12-LTSS:libmysqlclient-devel-10.0.29-20.23.1.s390x",
            "SUSE Linux Enterprise Server 12-LTSS:libmysqlclient-devel-10.0.29-20.23.1.x86_64",
            "SUSE Linux Enterprise Server 12-LTSS:libmysqlclient18-10.0.29-20.23.1.ppc64le",
            "SUSE Linux Enterprise Server 12-LTSS:libmysqlclient18-10.0.29-20.23.1.s390x",
            "SUSE Linux Enterprise Server 12-LTSS:libmysqlclient18-10.0.29-20.23.1.x86_64",
            "SUSE Linux Enterprise Server 12-LTSS:libmysqlclient18-32bit-10.0.29-20.23.1.s390x",
            "SUSE Linux Enterprise Server 12-LTSS:libmysqlclient18-32bit-10.0.29-20.23.1.x86_64",
            "SUSE Linux Enterprise Server 12-LTSS:libmysqlclient_r18-10.0.29-20.23.1.ppc64le",
            "SUSE Linux Enterprise Server 12-LTSS:libmysqlclient_r18-10.0.29-20.23.1.s390x",
            "SUSE Linux Enterprise Server 12-LTSS:libmysqlclient_r18-10.0.29-20.23.1.x86_64",
            "SUSE Linux Enterprise Server 12-LTSS:libmysqld-devel-10.0.29-20.23.1.ppc64le",
            "SUSE Linux Enterprise Server 12-LTSS:libmysqld-devel-10.0.29-20.23.1.s390x",
            "SUSE Linux Enterprise Server 12-LTSS:libmysqld-devel-10.0.29-20.23.1.x86_64",
            "SUSE Linux Enterprise Server 12-LTSS:libmysqld18-10.0.29-20.23.1.ppc64le",
            "SUSE Linux Enterprise Server 12-LTSS:libmysqld18-10.0.29-20.23.1.s390x",
            "SUSE Linux Enterprise Server 12-LTSS:libmysqld18-10.0.29-20.23.1.x86_64",
            "SUSE Linux Enterprise Server 12-LTSS:mariadb-10.0.29-20.23.1.ppc64le",
            "SUSE Linux Enterprise Server 12-LTSS:mariadb-10.0.29-20.23.1.s390x",
            "SUSE Linux Enterprise Server 12-LTSS:mariadb-10.0.29-20.23.1.x86_64",
            "SUSE Linux Enterprise Server 12-LTSS:mariadb-client-10.0.29-20.23.1.ppc64le",
            "SUSE Linux Enterprise Server 12-LTSS:mariadb-client-10.0.29-20.23.1.s390x",
            "SUSE Linux Enterprise Server 12-LTSS:mariadb-client-10.0.29-20.23.1.x86_64",
            "SUSE Linux Enterprise Server 12-LTSS:mariadb-errormessages-10.0.29-20.23.1.ppc64le",
            "SUSE Linux Enterprise Server 12-LTSS:mariadb-errormessages-10.0.29-20.23.1.s390x",
            "SUSE Linux Enterprise Server 12-LTSS:mariadb-errormessages-10.0.29-20.23.1.x86_64",
            "SUSE Linux Enterprise Server 12-LTSS:mariadb-tools-10.0.29-20.23.1.ppc64le",
            "SUSE Linux Enterprise Server 12-LTSS:mariadb-tools-10.0.29-20.23.1.s390x",
            "SUSE Linux Enterprise Server 12-LTSS:mariadb-tools-10.0.29-20.23.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12:libmysqlclient-devel-10.0.29-20.23.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12:libmysqlclient18-10.0.29-20.23.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12:libmysqlclient18-32bit-10.0.29-20.23.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12:libmysqlclient_r18-10.0.29-20.23.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12:libmysqld-devel-10.0.29-20.23.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12:libmysqld18-10.0.29-20.23.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12:mariadb-10.0.29-20.23.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12:mariadb-client-10.0.29-20.23.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12:mariadb-errormessages-10.0.29-20.23.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12:mariadb-tools-10.0.29-20.23.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 4.4,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "SUSE Linux Enterprise Server 12-LTSS:libmysqlclient-devel-10.0.29-20.23.1.ppc64le",
            "SUSE Linux Enterprise Server 12-LTSS:libmysqlclient-devel-10.0.29-20.23.1.s390x",
            "SUSE Linux Enterprise Server 12-LTSS:libmysqlclient-devel-10.0.29-20.23.1.x86_64",
            "SUSE Linux Enterprise Server 12-LTSS:libmysqlclient18-10.0.29-20.23.1.ppc64le",
            "SUSE Linux Enterprise Server 12-LTSS:libmysqlclient18-10.0.29-20.23.1.s390x",
            "SUSE Linux Enterprise Server 12-LTSS:libmysqlclient18-10.0.29-20.23.1.x86_64",
            "SUSE Linux Enterprise Server 12-LTSS:libmysqlclient18-32bit-10.0.29-20.23.1.s390x",
            "SUSE Linux Enterprise Server 12-LTSS:libmysqlclient18-32bit-10.0.29-20.23.1.x86_64",
            "SUSE Linux Enterprise Server 12-LTSS:libmysqlclient_r18-10.0.29-20.23.1.ppc64le",
            "SUSE Linux Enterprise Server 12-LTSS:libmysqlclient_r18-10.0.29-20.23.1.s390x",
            "SUSE Linux Enterprise Server 12-LTSS:libmysqlclient_r18-10.0.29-20.23.1.x86_64",
            "SUSE Linux Enterprise Server 12-LTSS:libmysqld-devel-10.0.29-20.23.1.ppc64le",
            "SUSE Linux Enterprise Server 12-LTSS:libmysqld-devel-10.0.29-20.23.1.s390x",
            "SUSE Linux Enterprise Server 12-LTSS:libmysqld-devel-10.0.29-20.23.1.x86_64",
            "SUSE Linux Enterprise Server 12-LTSS:libmysqld18-10.0.29-20.23.1.ppc64le",
            "SUSE Linux Enterprise Server 12-LTSS:libmysqld18-10.0.29-20.23.1.s390x",
            "SUSE Linux Enterprise Server 12-LTSS:libmysqld18-10.0.29-20.23.1.x86_64",
            "SUSE Linux Enterprise Server 12-LTSS:mariadb-10.0.29-20.23.1.ppc64le",
            "SUSE Linux Enterprise Server 12-LTSS:mariadb-10.0.29-20.23.1.s390x",
            "SUSE Linux Enterprise Server 12-LTSS:mariadb-10.0.29-20.23.1.x86_64",
            "SUSE Linux Enterprise Server 12-LTSS:mariadb-client-10.0.29-20.23.1.ppc64le",
            "SUSE Linux Enterprise Server 12-LTSS:mariadb-client-10.0.29-20.23.1.s390x",
            "SUSE Linux Enterprise Server 12-LTSS:mariadb-client-10.0.29-20.23.1.x86_64",
            "SUSE Linux Enterprise Server 12-LTSS:mariadb-errormessages-10.0.29-20.23.1.ppc64le",
            "SUSE Linux Enterprise Server 12-LTSS:mariadb-errormessages-10.0.29-20.23.1.s390x",
            "SUSE Linux Enterprise Server 12-LTSS:mariadb-errormessages-10.0.29-20.23.1.x86_64",
            "SUSE Linux Enterprise Server 12-LTSS:mariadb-tools-10.0.29-20.23.1.ppc64le",
            "SUSE Linux Enterprise Server 12-LTSS:mariadb-tools-10.0.29-20.23.1.s390x",
            "SUSE Linux Enterprise Server 12-LTSS:mariadb-tools-10.0.29-20.23.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12:libmysqlclient-devel-10.0.29-20.23.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12:libmysqlclient18-10.0.29-20.23.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12:libmysqlclient18-32bit-10.0.29-20.23.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12:libmysqlclient_r18-10.0.29-20.23.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12:libmysqld-devel-10.0.29-20.23.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12:libmysqld18-10.0.29-20.23.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12:mariadb-10.0.29-20.23.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12:mariadb-client-10.0.29-20.23.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12:mariadb-errormessages-10.0.29-20.23.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12:mariadb-tools-10.0.29-20.23.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2017-02-07T12:16:05Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2017-3243"
    },
    {
      "cve": "CVE-2017-3244",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2017-3244"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: DML). Supported versions that are affected are 5.5.53 and earlier, 5.6.34 and earlier and 5.7.16 and earlier. Easily exploitable vulnerability allows low privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS v3.0 Base Score 6.5 (Availability impacts).",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Linux Enterprise Server 12-LTSS:libmysqlclient-devel-10.0.29-20.23.1.ppc64le",
          "SUSE Linux Enterprise Server 12-LTSS:libmysqlclient-devel-10.0.29-20.23.1.s390x",
          "SUSE Linux Enterprise Server 12-LTSS:libmysqlclient-devel-10.0.29-20.23.1.x86_64",
          "SUSE Linux Enterprise Server 12-LTSS:libmysqlclient18-10.0.29-20.23.1.ppc64le",
          "SUSE Linux Enterprise Server 12-LTSS:libmysqlclient18-10.0.29-20.23.1.s390x",
          "SUSE Linux Enterprise Server 12-LTSS:libmysqlclient18-10.0.29-20.23.1.x86_64",
          "SUSE Linux Enterprise Server 12-LTSS:libmysqlclient18-32bit-10.0.29-20.23.1.s390x",
          "SUSE Linux Enterprise Server 12-LTSS:libmysqlclient18-32bit-10.0.29-20.23.1.x86_64",
          "SUSE Linux Enterprise Server 12-LTSS:libmysqlclient_r18-10.0.29-20.23.1.ppc64le",
          "SUSE Linux Enterprise Server 12-LTSS:libmysqlclient_r18-10.0.29-20.23.1.s390x",
          "SUSE Linux Enterprise Server 12-LTSS:libmysqlclient_r18-10.0.29-20.23.1.x86_64",
          "SUSE Linux Enterprise Server 12-LTSS:libmysqld-devel-10.0.29-20.23.1.ppc64le",
          "SUSE Linux Enterprise Server 12-LTSS:libmysqld-devel-10.0.29-20.23.1.s390x",
          "SUSE Linux Enterprise Server 12-LTSS:libmysqld-devel-10.0.29-20.23.1.x86_64",
          "SUSE Linux Enterprise Server 12-LTSS:libmysqld18-10.0.29-20.23.1.ppc64le",
          "SUSE Linux Enterprise Server 12-LTSS:libmysqld18-10.0.29-20.23.1.s390x",
          "SUSE Linux Enterprise Server 12-LTSS:libmysqld18-10.0.29-20.23.1.x86_64",
          "SUSE Linux Enterprise Server 12-LTSS:mariadb-10.0.29-20.23.1.ppc64le",
          "SUSE Linux Enterprise Server 12-LTSS:mariadb-10.0.29-20.23.1.s390x",
          "SUSE Linux Enterprise Server 12-LTSS:mariadb-10.0.29-20.23.1.x86_64",
          "SUSE Linux Enterprise Server 12-LTSS:mariadb-client-10.0.29-20.23.1.ppc64le",
          "SUSE Linux Enterprise Server 12-LTSS:mariadb-client-10.0.29-20.23.1.s390x",
          "SUSE Linux Enterprise Server 12-LTSS:mariadb-client-10.0.29-20.23.1.x86_64",
          "SUSE Linux Enterprise Server 12-LTSS:mariadb-errormessages-10.0.29-20.23.1.ppc64le",
          "SUSE Linux Enterprise Server 12-LTSS:mariadb-errormessages-10.0.29-20.23.1.s390x",
          "SUSE Linux Enterprise Server 12-LTSS:mariadb-errormessages-10.0.29-20.23.1.x86_64",
          "SUSE Linux Enterprise Server 12-LTSS:mariadb-tools-10.0.29-20.23.1.ppc64le",
          "SUSE Linux Enterprise Server 12-LTSS:mariadb-tools-10.0.29-20.23.1.s390x",
          "SUSE Linux Enterprise Server 12-LTSS:mariadb-tools-10.0.29-20.23.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 12:libmysqlclient-devel-10.0.29-20.23.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 12:libmysqlclient18-10.0.29-20.23.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 12:libmysqlclient18-32bit-10.0.29-20.23.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 12:libmysqlclient_r18-10.0.29-20.23.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 12:libmysqld-devel-10.0.29-20.23.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 12:libmysqld18-10.0.29-20.23.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 12:mariadb-10.0.29-20.23.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 12:mariadb-client-10.0.29-20.23.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 12:mariadb-errormessages-10.0.29-20.23.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 12:mariadb-tools-10.0.29-20.23.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2017-3244",
          "url": "https://www.suse.com/security/cve/CVE-2017-3244"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1020868 for CVE-2017-3244",
          "url": "https://bugzilla.suse.com/1020868"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1020877 for CVE-2017-3244",
          "url": "https://bugzilla.suse.com/1020877"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Linux Enterprise Server 12-LTSS:libmysqlclient-devel-10.0.29-20.23.1.ppc64le",
            "SUSE Linux Enterprise Server 12-LTSS:libmysqlclient-devel-10.0.29-20.23.1.s390x",
            "SUSE Linux Enterprise Server 12-LTSS:libmysqlclient-devel-10.0.29-20.23.1.x86_64",
            "SUSE Linux Enterprise Server 12-LTSS:libmysqlclient18-10.0.29-20.23.1.ppc64le",
            "SUSE Linux Enterprise Server 12-LTSS:libmysqlclient18-10.0.29-20.23.1.s390x",
            "SUSE Linux Enterprise Server 12-LTSS:libmysqlclient18-10.0.29-20.23.1.x86_64",
            "SUSE Linux Enterprise Server 12-LTSS:libmysqlclient18-32bit-10.0.29-20.23.1.s390x",
            "SUSE Linux Enterprise Server 12-LTSS:libmysqlclient18-32bit-10.0.29-20.23.1.x86_64",
            "SUSE Linux Enterprise Server 12-LTSS:libmysqlclient_r18-10.0.29-20.23.1.ppc64le",
            "SUSE Linux Enterprise Server 12-LTSS:libmysqlclient_r18-10.0.29-20.23.1.s390x",
            "SUSE Linux Enterprise Server 12-LTSS:libmysqlclient_r18-10.0.29-20.23.1.x86_64",
            "SUSE Linux Enterprise Server 12-LTSS:libmysqld-devel-10.0.29-20.23.1.ppc64le",
            "SUSE Linux Enterprise Server 12-LTSS:libmysqld-devel-10.0.29-20.23.1.s390x",
            "SUSE Linux Enterprise Server 12-LTSS:libmysqld-devel-10.0.29-20.23.1.x86_64",
            "SUSE Linux Enterprise Server 12-LTSS:libmysqld18-10.0.29-20.23.1.ppc64le",
            "SUSE Linux Enterprise Server 12-LTSS:libmysqld18-10.0.29-20.23.1.s390x",
            "SUSE Linux Enterprise Server 12-LTSS:libmysqld18-10.0.29-20.23.1.x86_64",
            "SUSE Linux Enterprise Server 12-LTSS:mariadb-10.0.29-20.23.1.ppc64le",
            "SUSE Linux Enterprise Server 12-LTSS:mariadb-10.0.29-20.23.1.s390x",
            "SUSE Linux Enterprise Server 12-LTSS:mariadb-10.0.29-20.23.1.x86_64",
            "SUSE Linux Enterprise Server 12-LTSS:mariadb-client-10.0.29-20.23.1.ppc64le",
            "SUSE Linux Enterprise Server 12-LTSS:mariadb-client-10.0.29-20.23.1.s390x",
            "SUSE Linux Enterprise Server 12-LTSS:mariadb-client-10.0.29-20.23.1.x86_64",
            "SUSE Linux Enterprise Server 12-LTSS:mariadb-errormessages-10.0.29-20.23.1.ppc64le",
            "SUSE Linux Enterprise Server 12-LTSS:mariadb-errormessages-10.0.29-20.23.1.s390x",
            "SUSE Linux Enterprise Server 12-LTSS:mariadb-errormessages-10.0.29-20.23.1.x86_64",
            "SUSE Linux Enterprise Server 12-LTSS:mariadb-tools-10.0.29-20.23.1.ppc64le",
            "SUSE Linux Enterprise Server 12-LTSS:mariadb-tools-10.0.29-20.23.1.s390x",
            "SUSE Linux Enterprise Server 12-LTSS:mariadb-tools-10.0.29-20.23.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12:libmysqlclient-devel-10.0.29-20.23.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12:libmysqlclient18-10.0.29-20.23.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12:libmysqlclient18-32bit-10.0.29-20.23.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12:libmysqlclient_r18-10.0.29-20.23.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12:libmysqld-devel-10.0.29-20.23.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12:libmysqld18-10.0.29-20.23.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12:mariadb-10.0.29-20.23.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12:mariadb-client-10.0.29-20.23.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12:mariadb-errormessages-10.0.29-20.23.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12:mariadb-tools-10.0.29-20.23.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 6.5,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "SUSE Linux Enterprise Server 12-LTSS:libmysqlclient-devel-10.0.29-20.23.1.ppc64le",
            "SUSE Linux Enterprise Server 12-LTSS:libmysqlclient-devel-10.0.29-20.23.1.s390x",
            "SUSE Linux Enterprise Server 12-LTSS:libmysqlclient-devel-10.0.29-20.23.1.x86_64",
            "SUSE Linux Enterprise Server 12-LTSS:libmysqlclient18-10.0.29-20.23.1.ppc64le",
            "SUSE Linux Enterprise Server 12-LTSS:libmysqlclient18-10.0.29-20.23.1.s390x",
            "SUSE Linux Enterprise Server 12-LTSS:libmysqlclient18-10.0.29-20.23.1.x86_64",
            "SUSE Linux Enterprise Server 12-LTSS:libmysqlclient18-32bit-10.0.29-20.23.1.s390x",
            "SUSE Linux Enterprise Server 12-LTSS:libmysqlclient18-32bit-10.0.29-20.23.1.x86_64",
            "SUSE Linux Enterprise Server 12-LTSS:libmysqlclient_r18-10.0.29-20.23.1.ppc64le",
            "SUSE Linux Enterprise Server 12-LTSS:libmysqlclient_r18-10.0.29-20.23.1.s390x",
            "SUSE Linux Enterprise Server 12-LTSS:libmysqlclient_r18-10.0.29-20.23.1.x86_64",
            "SUSE Linux Enterprise Server 12-LTSS:libmysqld-devel-10.0.29-20.23.1.ppc64le",
            "SUSE Linux Enterprise Server 12-LTSS:libmysqld-devel-10.0.29-20.23.1.s390x",
            "SUSE Linux Enterprise Server 12-LTSS:libmysqld-devel-10.0.29-20.23.1.x86_64",
            "SUSE Linux Enterprise Server 12-LTSS:libmysqld18-10.0.29-20.23.1.ppc64le",
            "SUSE Linux Enterprise Server 12-LTSS:libmysqld18-10.0.29-20.23.1.s390x",
            "SUSE Linux Enterprise Server 12-LTSS:libmysqld18-10.0.29-20.23.1.x86_64",
            "SUSE Linux Enterprise Server 12-LTSS:mariadb-10.0.29-20.23.1.ppc64le",
            "SUSE Linux Enterprise Server 12-LTSS:mariadb-10.0.29-20.23.1.s390x",
            "SUSE Linux Enterprise Server 12-LTSS:mariadb-10.0.29-20.23.1.x86_64",
            "SUSE Linux Enterprise Server 12-LTSS:mariadb-client-10.0.29-20.23.1.ppc64le",
            "SUSE Linux Enterprise Server 12-LTSS:mariadb-client-10.0.29-20.23.1.s390x",
            "SUSE Linux Enterprise Server 12-LTSS:mariadb-client-10.0.29-20.23.1.x86_64",
            "SUSE Linux Enterprise Server 12-LTSS:mariadb-errormessages-10.0.29-20.23.1.ppc64le",
            "SUSE Linux Enterprise Server 12-LTSS:mariadb-errormessages-10.0.29-20.23.1.s390x",
            "SUSE Linux Enterprise Server 12-LTSS:mariadb-errormessages-10.0.29-20.23.1.x86_64",
            "SUSE Linux Enterprise Server 12-LTSS:mariadb-tools-10.0.29-20.23.1.ppc64le",
            "SUSE Linux Enterprise Server 12-LTSS:mariadb-tools-10.0.29-20.23.1.s390x",
            "SUSE Linux Enterprise Server 12-LTSS:mariadb-tools-10.0.29-20.23.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12:libmysqlclient-devel-10.0.29-20.23.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12:libmysqlclient18-10.0.29-20.23.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12:libmysqlclient18-32bit-10.0.29-20.23.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12:libmysqlclient_r18-10.0.29-20.23.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12:libmysqld-devel-10.0.29-20.23.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12:libmysqld18-10.0.29-20.23.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12:mariadb-10.0.29-20.23.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12:mariadb-client-10.0.29-20.23.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12:mariadb-errormessages-10.0.29-20.23.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12:mariadb-tools-10.0.29-20.23.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2017-02-07T12:16:05Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2017-3244"
    },
    {
      "cve": "CVE-2017-3257",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2017-3257"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: InnoDB). Supported versions that are affected are 5.6.34 and earlier5.7.16 and earlier. Easily exploitable vulnerability allows low privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS v3.0 Base Score 6.5 (Availability impacts).",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Linux Enterprise Server 12-LTSS:libmysqlclient-devel-10.0.29-20.23.1.ppc64le",
          "SUSE Linux Enterprise Server 12-LTSS:libmysqlclient-devel-10.0.29-20.23.1.s390x",
          "SUSE Linux Enterprise Server 12-LTSS:libmysqlclient-devel-10.0.29-20.23.1.x86_64",
          "SUSE Linux Enterprise Server 12-LTSS:libmysqlclient18-10.0.29-20.23.1.ppc64le",
          "SUSE Linux Enterprise Server 12-LTSS:libmysqlclient18-10.0.29-20.23.1.s390x",
          "SUSE Linux Enterprise Server 12-LTSS:libmysqlclient18-10.0.29-20.23.1.x86_64",
          "SUSE Linux Enterprise Server 12-LTSS:libmysqlclient18-32bit-10.0.29-20.23.1.s390x",
          "SUSE Linux Enterprise Server 12-LTSS:libmysqlclient18-32bit-10.0.29-20.23.1.x86_64",
          "SUSE Linux Enterprise Server 12-LTSS:libmysqlclient_r18-10.0.29-20.23.1.ppc64le",
          "SUSE Linux Enterprise Server 12-LTSS:libmysqlclient_r18-10.0.29-20.23.1.s390x",
          "SUSE Linux Enterprise Server 12-LTSS:libmysqlclient_r18-10.0.29-20.23.1.x86_64",
          "SUSE Linux Enterprise Server 12-LTSS:libmysqld-devel-10.0.29-20.23.1.ppc64le",
          "SUSE Linux Enterprise Server 12-LTSS:libmysqld-devel-10.0.29-20.23.1.s390x",
          "SUSE Linux Enterprise Server 12-LTSS:libmysqld-devel-10.0.29-20.23.1.x86_64",
          "SUSE Linux Enterprise Server 12-LTSS:libmysqld18-10.0.29-20.23.1.ppc64le",
          "SUSE Linux Enterprise Server 12-LTSS:libmysqld18-10.0.29-20.23.1.s390x",
          "SUSE Linux Enterprise Server 12-LTSS:libmysqld18-10.0.29-20.23.1.x86_64",
          "SUSE Linux Enterprise Server 12-LTSS:mariadb-10.0.29-20.23.1.ppc64le",
          "SUSE Linux Enterprise Server 12-LTSS:mariadb-10.0.29-20.23.1.s390x",
          "SUSE Linux Enterprise Server 12-LTSS:mariadb-10.0.29-20.23.1.x86_64",
          "SUSE Linux Enterprise Server 12-LTSS:mariadb-client-10.0.29-20.23.1.ppc64le",
          "SUSE Linux Enterprise Server 12-LTSS:mariadb-client-10.0.29-20.23.1.s390x",
          "SUSE Linux Enterprise Server 12-LTSS:mariadb-client-10.0.29-20.23.1.x86_64",
          "SUSE Linux Enterprise Server 12-LTSS:mariadb-errormessages-10.0.29-20.23.1.ppc64le",
          "SUSE Linux Enterprise Server 12-LTSS:mariadb-errormessages-10.0.29-20.23.1.s390x",
          "SUSE Linux Enterprise Server 12-LTSS:mariadb-errormessages-10.0.29-20.23.1.x86_64",
          "SUSE Linux Enterprise Server 12-LTSS:mariadb-tools-10.0.29-20.23.1.ppc64le",
          "SUSE Linux Enterprise Server 12-LTSS:mariadb-tools-10.0.29-20.23.1.s390x",
          "SUSE Linux Enterprise Server 12-LTSS:mariadb-tools-10.0.29-20.23.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 12:libmysqlclient-devel-10.0.29-20.23.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 12:libmysqlclient18-10.0.29-20.23.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 12:libmysqlclient18-32bit-10.0.29-20.23.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 12:libmysqlclient_r18-10.0.29-20.23.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 12:libmysqld-devel-10.0.29-20.23.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 12:libmysqld18-10.0.29-20.23.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 12:mariadb-10.0.29-20.23.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 12:mariadb-client-10.0.29-20.23.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 12:mariadb-errormessages-10.0.29-20.23.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 12:mariadb-tools-10.0.29-20.23.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2017-3257",
          "url": "https://www.suse.com/security/cve/CVE-2017-3257"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1020868 for CVE-2017-3257",
          "url": "https://bugzilla.suse.com/1020868"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1020878 for CVE-2017-3257",
          "url": "https://bugzilla.suse.com/1020878"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Linux Enterprise Server 12-LTSS:libmysqlclient-devel-10.0.29-20.23.1.ppc64le",
            "SUSE Linux Enterprise Server 12-LTSS:libmysqlclient-devel-10.0.29-20.23.1.s390x",
            "SUSE Linux Enterprise Server 12-LTSS:libmysqlclient-devel-10.0.29-20.23.1.x86_64",
            "SUSE Linux Enterprise Server 12-LTSS:libmysqlclient18-10.0.29-20.23.1.ppc64le",
            "SUSE Linux Enterprise Server 12-LTSS:libmysqlclient18-10.0.29-20.23.1.s390x",
            "SUSE Linux Enterprise Server 12-LTSS:libmysqlclient18-10.0.29-20.23.1.x86_64",
            "SUSE Linux Enterprise Server 12-LTSS:libmysqlclient18-32bit-10.0.29-20.23.1.s390x",
            "SUSE Linux Enterprise Server 12-LTSS:libmysqlclient18-32bit-10.0.29-20.23.1.x86_64",
            "SUSE Linux Enterprise Server 12-LTSS:libmysqlclient_r18-10.0.29-20.23.1.ppc64le",
            "SUSE Linux Enterprise Server 12-LTSS:libmysqlclient_r18-10.0.29-20.23.1.s390x",
            "SUSE Linux Enterprise Server 12-LTSS:libmysqlclient_r18-10.0.29-20.23.1.x86_64",
            "SUSE Linux Enterprise Server 12-LTSS:libmysqld-devel-10.0.29-20.23.1.ppc64le",
            "SUSE Linux Enterprise Server 12-LTSS:libmysqld-devel-10.0.29-20.23.1.s390x",
            "SUSE Linux Enterprise Server 12-LTSS:libmysqld-devel-10.0.29-20.23.1.x86_64",
            "SUSE Linux Enterprise Server 12-LTSS:libmysqld18-10.0.29-20.23.1.ppc64le",
            "SUSE Linux Enterprise Server 12-LTSS:libmysqld18-10.0.29-20.23.1.s390x",
            "SUSE Linux Enterprise Server 12-LTSS:libmysqld18-10.0.29-20.23.1.x86_64",
            "SUSE Linux Enterprise Server 12-LTSS:mariadb-10.0.29-20.23.1.ppc64le",
            "SUSE Linux Enterprise Server 12-LTSS:mariadb-10.0.29-20.23.1.s390x",
            "SUSE Linux Enterprise Server 12-LTSS:mariadb-10.0.29-20.23.1.x86_64",
            "SUSE Linux Enterprise Server 12-LTSS:mariadb-client-10.0.29-20.23.1.ppc64le",
            "SUSE Linux Enterprise Server 12-LTSS:mariadb-client-10.0.29-20.23.1.s390x",
            "SUSE Linux Enterprise Server 12-LTSS:mariadb-client-10.0.29-20.23.1.x86_64",
            "SUSE Linux Enterprise Server 12-LTSS:mariadb-errormessages-10.0.29-20.23.1.ppc64le",
            "SUSE Linux Enterprise Server 12-LTSS:mariadb-errormessages-10.0.29-20.23.1.s390x",
            "SUSE Linux Enterprise Server 12-LTSS:mariadb-errormessages-10.0.29-20.23.1.x86_64",
            "SUSE Linux Enterprise Server 12-LTSS:mariadb-tools-10.0.29-20.23.1.ppc64le",
            "SUSE Linux Enterprise Server 12-LTSS:mariadb-tools-10.0.29-20.23.1.s390x",
            "SUSE Linux Enterprise Server 12-LTSS:mariadb-tools-10.0.29-20.23.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12:libmysqlclient-devel-10.0.29-20.23.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12:libmysqlclient18-10.0.29-20.23.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12:libmysqlclient18-32bit-10.0.29-20.23.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12:libmysqlclient_r18-10.0.29-20.23.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12:libmysqld-devel-10.0.29-20.23.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12:libmysqld18-10.0.29-20.23.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12:mariadb-10.0.29-20.23.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12:mariadb-client-10.0.29-20.23.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12:mariadb-errormessages-10.0.29-20.23.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12:mariadb-tools-10.0.29-20.23.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 6.5,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "SUSE Linux Enterprise Server 12-LTSS:libmysqlclient-devel-10.0.29-20.23.1.ppc64le",
            "SUSE Linux Enterprise Server 12-LTSS:libmysqlclient-devel-10.0.29-20.23.1.s390x",
            "SUSE Linux Enterprise Server 12-LTSS:libmysqlclient-devel-10.0.29-20.23.1.x86_64",
            "SUSE Linux Enterprise Server 12-LTSS:libmysqlclient18-10.0.29-20.23.1.ppc64le",
            "SUSE Linux Enterprise Server 12-LTSS:libmysqlclient18-10.0.29-20.23.1.s390x",
            "SUSE Linux Enterprise Server 12-LTSS:libmysqlclient18-10.0.29-20.23.1.x86_64",
            "SUSE Linux Enterprise Server 12-LTSS:libmysqlclient18-32bit-10.0.29-20.23.1.s390x",
            "SUSE Linux Enterprise Server 12-LTSS:libmysqlclient18-32bit-10.0.29-20.23.1.x86_64",
            "SUSE Linux Enterprise Server 12-LTSS:libmysqlclient_r18-10.0.29-20.23.1.ppc64le",
            "SUSE Linux Enterprise Server 12-LTSS:libmysqlclient_r18-10.0.29-20.23.1.s390x",
            "SUSE Linux Enterprise Server 12-LTSS:libmysqlclient_r18-10.0.29-20.23.1.x86_64",
            "SUSE Linux Enterprise Server 12-LTSS:libmysqld-devel-10.0.29-20.23.1.ppc64le",
            "SUSE Linux Enterprise Server 12-LTSS:libmysqld-devel-10.0.29-20.23.1.s390x",
            "SUSE Linux Enterprise Server 12-LTSS:libmysqld-devel-10.0.29-20.23.1.x86_64",
            "SUSE Linux Enterprise Server 12-LTSS:libmysqld18-10.0.29-20.23.1.ppc64le",
            "SUSE Linux Enterprise Server 12-LTSS:libmysqld18-10.0.29-20.23.1.s390x",
            "SUSE Linux Enterprise Server 12-LTSS:libmysqld18-10.0.29-20.23.1.x86_64",
            "SUSE Linux Enterprise Server 12-LTSS:mariadb-10.0.29-20.23.1.ppc64le",
            "SUSE Linux Enterprise Server 12-LTSS:mariadb-10.0.29-20.23.1.s390x",
            "SUSE Linux Enterprise Server 12-LTSS:mariadb-10.0.29-20.23.1.x86_64",
            "SUSE Linux Enterprise Server 12-LTSS:mariadb-client-10.0.29-20.23.1.ppc64le",
            "SUSE Linux Enterprise Server 12-LTSS:mariadb-client-10.0.29-20.23.1.s390x",
            "SUSE Linux Enterprise Server 12-LTSS:mariadb-client-10.0.29-20.23.1.x86_64",
            "SUSE Linux Enterprise Server 12-LTSS:mariadb-errormessages-10.0.29-20.23.1.ppc64le",
            "SUSE Linux Enterprise Server 12-LTSS:mariadb-errormessages-10.0.29-20.23.1.s390x",
            "SUSE Linux Enterprise Server 12-LTSS:mariadb-errormessages-10.0.29-20.23.1.x86_64",
            "SUSE Linux Enterprise Server 12-LTSS:mariadb-tools-10.0.29-20.23.1.ppc64le",
            "SUSE Linux Enterprise Server 12-LTSS:mariadb-tools-10.0.29-20.23.1.s390x",
            "SUSE Linux Enterprise Server 12-LTSS:mariadb-tools-10.0.29-20.23.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12:libmysqlclient-devel-10.0.29-20.23.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12:libmysqlclient18-10.0.29-20.23.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12:libmysqlclient18-32bit-10.0.29-20.23.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12:libmysqlclient_r18-10.0.29-20.23.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12:libmysqld-devel-10.0.29-20.23.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12:libmysqld18-10.0.29-20.23.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12:mariadb-10.0.29-20.23.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12:mariadb-client-10.0.29-20.23.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12:mariadb-errormessages-10.0.29-20.23.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12:mariadb-tools-10.0.29-20.23.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2017-02-07T12:16:05Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2017-3257"
    },
    {
      "cve": "CVE-2017-3258",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2017-3258"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: DDL). Supported versions that are affected are 5.5.53 and earlier, 5.6.34 and earlier and 5.7.16 and earlier. Easily exploitable vulnerability allows low privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS v3.0 Base Score 6.5 (Availability impacts).",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Linux Enterprise Server 12-LTSS:libmysqlclient-devel-10.0.29-20.23.1.ppc64le",
          "SUSE Linux Enterprise Server 12-LTSS:libmysqlclient-devel-10.0.29-20.23.1.s390x",
          "SUSE Linux Enterprise Server 12-LTSS:libmysqlclient-devel-10.0.29-20.23.1.x86_64",
          "SUSE Linux Enterprise Server 12-LTSS:libmysqlclient18-10.0.29-20.23.1.ppc64le",
          "SUSE Linux Enterprise Server 12-LTSS:libmysqlclient18-10.0.29-20.23.1.s390x",
          "SUSE Linux Enterprise Server 12-LTSS:libmysqlclient18-10.0.29-20.23.1.x86_64",
          "SUSE Linux Enterprise Server 12-LTSS:libmysqlclient18-32bit-10.0.29-20.23.1.s390x",
          "SUSE Linux Enterprise Server 12-LTSS:libmysqlclient18-32bit-10.0.29-20.23.1.x86_64",
          "SUSE Linux Enterprise Server 12-LTSS:libmysqlclient_r18-10.0.29-20.23.1.ppc64le",
          "SUSE Linux Enterprise Server 12-LTSS:libmysqlclient_r18-10.0.29-20.23.1.s390x",
          "SUSE Linux Enterprise Server 12-LTSS:libmysqlclient_r18-10.0.29-20.23.1.x86_64",
          "SUSE Linux Enterprise Server 12-LTSS:libmysqld-devel-10.0.29-20.23.1.ppc64le",
          "SUSE Linux Enterprise Server 12-LTSS:libmysqld-devel-10.0.29-20.23.1.s390x",
          "SUSE Linux Enterprise Server 12-LTSS:libmysqld-devel-10.0.29-20.23.1.x86_64",
          "SUSE Linux Enterprise Server 12-LTSS:libmysqld18-10.0.29-20.23.1.ppc64le",
          "SUSE Linux Enterprise Server 12-LTSS:libmysqld18-10.0.29-20.23.1.s390x",
          "SUSE Linux Enterprise Server 12-LTSS:libmysqld18-10.0.29-20.23.1.x86_64",
          "SUSE Linux Enterprise Server 12-LTSS:mariadb-10.0.29-20.23.1.ppc64le",
          "SUSE Linux Enterprise Server 12-LTSS:mariadb-10.0.29-20.23.1.s390x",
          "SUSE Linux Enterprise Server 12-LTSS:mariadb-10.0.29-20.23.1.x86_64",
          "SUSE Linux Enterprise Server 12-LTSS:mariadb-client-10.0.29-20.23.1.ppc64le",
          "SUSE Linux Enterprise Server 12-LTSS:mariadb-client-10.0.29-20.23.1.s390x",
          "SUSE Linux Enterprise Server 12-LTSS:mariadb-client-10.0.29-20.23.1.x86_64",
          "SUSE Linux Enterprise Server 12-LTSS:mariadb-errormessages-10.0.29-20.23.1.ppc64le",
          "SUSE Linux Enterprise Server 12-LTSS:mariadb-errormessages-10.0.29-20.23.1.s390x",
          "SUSE Linux Enterprise Server 12-LTSS:mariadb-errormessages-10.0.29-20.23.1.x86_64",
          "SUSE Linux Enterprise Server 12-LTSS:mariadb-tools-10.0.29-20.23.1.ppc64le",
          "SUSE Linux Enterprise Server 12-LTSS:mariadb-tools-10.0.29-20.23.1.s390x",
          "SUSE Linux Enterprise Server 12-LTSS:mariadb-tools-10.0.29-20.23.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 12:libmysqlclient-devel-10.0.29-20.23.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 12:libmysqlclient18-10.0.29-20.23.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 12:libmysqlclient18-32bit-10.0.29-20.23.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 12:libmysqlclient_r18-10.0.29-20.23.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 12:libmysqld-devel-10.0.29-20.23.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 12:libmysqld18-10.0.29-20.23.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 12:mariadb-10.0.29-20.23.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 12:mariadb-client-10.0.29-20.23.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 12:mariadb-errormessages-10.0.29-20.23.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 12:mariadb-tools-10.0.29-20.23.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2017-3258",
          "url": "https://www.suse.com/security/cve/CVE-2017-3258"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1020868 for CVE-2017-3258",
          "url": "https://bugzilla.suse.com/1020868"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1020875 for CVE-2017-3258",
          "url": "https://bugzilla.suse.com/1020875"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Linux Enterprise Server 12-LTSS:libmysqlclient-devel-10.0.29-20.23.1.ppc64le",
            "SUSE Linux Enterprise Server 12-LTSS:libmysqlclient-devel-10.0.29-20.23.1.s390x",
            "SUSE Linux Enterprise Server 12-LTSS:libmysqlclient-devel-10.0.29-20.23.1.x86_64",
            "SUSE Linux Enterprise Server 12-LTSS:libmysqlclient18-10.0.29-20.23.1.ppc64le",
            "SUSE Linux Enterprise Server 12-LTSS:libmysqlclient18-10.0.29-20.23.1.s390x",
            "SUSE Linux Enterprise Server 12-LTSS:libmysqlclient18-10.0.29-20.23.1.x86_64",
            "SUSE Linux Enterprise Server 12-LTSS:libmysqlclient18-32bit-10.0.29-20.23.1.s390x",
            "SUSE Linux Enterprise Server 12-LTSS:libmysqlclient18-32bit-10.0.29-20.23.1.x86_64",
            "SUSE Linux Enterprise Server 12-LTSS:libmysqlclient_r18-10.0.29-20.23.1.ppc64le",
            "SUSE Linux Enterprise Server 12-LTSS:libmysqlclient_r18-10.0.29-20.23.1.s390x",
            "SUSE Linux Enterprise Server 12-LTSS:libmysqlclient_r18-10.0.29-20.23.1.x86_64",
            "SUSE Linux Enterprise Server 12-LTSS:libmysqld-devel-10.0.29-20.23.1.ppc64le",
            "SUSE Linux Enterprise Server 12-LTSS:libmysqld-devel-10.0.29-20.23.1.s390x",
            "SUSE Linux Enterprise Server 12-LTSS:libmysqld-devel-10.0.29-20.23.1.x86_64",
            "SUSE Linux Enterprise Server 12-LTSS:libmysqld18-10.0.29-20.23.1.ppc64le",
            "SUSE Linux Enterprise Server 12-LTSS:libmysqld18-10.0.29-20.23.1.s390x",
            "SUSE Linux Enterprise Server 12-LTSS:libmysqld18-10.0.29-20.23.1.x86_64",
            "SUSE Linux Enterprise Server 12-LTSS:mariadb-10.0.29-20.23.1.ppc64le",
            "SUSE Linux Enterprise Server 12-LTSS:mariadb-10.0.29-20.23.1.s390x",
            "SUSE Linux Enterprise Server 12-LTSS:mariadb-10.0.29-20.23.1.x86_64",
            "SUSE Linux Enterprise Server 12-LTSS:mariadb-client-10.0.29-20.23.1.ppc64le",
            "SUSE Linux Enterprise Server 12-LTSS:mariadb-client-10.0.29-20.23.1.s390x",
            "SUSE Linux Enterprise Server 12-LTSS:mariadb-client-10.0.29-20.23.1.x86_64",
            "SUSE Linux Enterprise Server 12-LTSS:mariadb-errormessages-10.0.29-20.23.1.ppc64le",
            "SUSE Linux Enterprise Server 12-LTSS:mariadb-errormessages-10.0.29-20.23.1.s390x",
            "SUSE Linux Enterprise Server 12-LTSS:mariadb-errormessages-10.0.29-20.23.1.x86_64",
            "SUSE Linux Enterprise Server 12-LTSS:mariadb-tools-10.0.29-20.23.1.ppc64le",
            "SUSE Linux Enterprise Server 12-LTSS:mariadb-tools-10.0.29-20.23.1.s390x",
            "SUSE Linux Enterprise Server 12-LTSS:mariadb-tools-10.0.29-20.23.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12:libmysqlclient-devel-10.0.29-20.23.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12:libmysqlclient18-10.0.29-20.23.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12:libmysqlclient18-32bit-10.0.29-20.23.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12:libmysqlclient_r18-10.0.29-20.23.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12:libmysqld-devel-10.0.29-20.23.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12:libmysqld18-10.0.29-20.23.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12:mariadb-10.0.29-20.23.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12:mariadb-client-10.0.29-20.23.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12:mariadb-errormessages-10.0.29-20.23.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12:mariadb-tools-10.0.29-20.23.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 6.5,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "SUSE Linux Enterprise Server 12-LTSS:libmysqlclient-devel-10.0.29-20.23.1.ppc64le",
            "SUSE Linux Enterprise Server 12-LTSS:libmysqlclient-devel-10.0.29-20.23.1.s390x",
            "SUSE Linux Enterprise Server 12-LTSS:libmysqlclient-devel-10.0.29-20.23.1.x86_64",
            "SUSE Linux Enterprise Server 12-LTSS:libmysqlclient18-10.0.29-20.23.1.ppc64le",
            "SUSE Linux Enterprise Server 12-LTSS:libmysqlclient18-10.0.29-20.23.1.s390x",
            "SUSE Linux Enterprise Server 12-LTSS:libmysqlclient18-10.0.29-20.23.1.x86_64",
            "SUSE Linux Enterprise Server 12-LTSS:libmysqlclient18-32bit-10.0.29-20.23.1.s390x",
            "SUSE Linux Enterprise Server 12-LTSS:libmysqlclient18-32bit-10.0.29-20.23.1.x86_64",
            "SUSE Linux Enterprise Server 12-LTSS:libmysqlclient_r18-10.0.29-20.23.1.ppc64le",
            "SUSE Linux Enterprise Server 12-LTSS:libmysqlclient_r18-10.0.29-20.23.1.s390x",
            "SUSE Linux Enterprise Server 12-LTSS:libmysqlclient_r18-10.0.29-20.23.1.x86_64",
            "SUSE Linux Enterprise Server 12-LTSS:libmysqld-devel-10.0.29-20.23.1.ppc64le",
            "SUSE Linux Enterprise Server 12-LTSS:libmysqld-devel-10.0.29-20.23.1.s390x",
            "SUSE Linux Enterprise Server 12-LTSS:libmysqld-devel-10.0.29-20.23.1.x86_64",
            "SUSE Linux Enterprise Server 12-LTSS:libmysqld18-10.0.29-20.23.1.ppc64le",
            "SUSE Linux Enterprise Server 12-LTSS:libmysqld18-10.0.29-20.23.1.s390x",
            "SUSE Linux Enterprise Server 12-LTSS:libmysqld18-10.0.29-20.23.1.x86_64",
            "SUSE Linux Enterprise Server 12-LTSS:mariadb-10.0.29-20.23.1.ppc64le",
            "SUSE Linux Enterprise Server 12-LTSS:mariadb-10.0.29-20.23.1.s390x",
            "SUSE Linux Enterprise Server 12-LTSS:mariadb-10.0.29-20.23.1.x86_64",
            "SUSE Linux Enterprise Server 12-LTSS:mariadb-client-10.0.29-20.23.1.ppc64le",
            "SUSE Linux Enterprise Server 12-LTSS:mariadb-client-10.0.29-20.23.1.s390x",
            "SUSE Linux Enterprise Server 12-LTSS:mariadb-client-10.0.29-20.23.1.x86_64",
            "SUSE Linux Enterprise Server 12-LTSS:mariadb-errormessages-10.0.29-20.23.1.ppc64le",
            "SUSE Linux Enterprise Server 12-LTSS:mariadb-errormessages-10.0.29-20.23.1.s390x",
            "SUSE Linux Enterprise Server 12-LTSS:mariadb-errormessages-10.0.29-20.23.1.x86_64",
            "SUSE Linux Enterprise Server 12-LTSS:mariadb-tools-10.0.29-20.23.1.ppc64le",
            "SUSE Linux Enterprise Server 12-LTSS:mariadb-tools-10.0.29-20.23.1.s390x",
            "SUSE Linux Enterprise Server 12-LTSS:mariadb-tools-10.0.29-20.23.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12:libmysqlclient-devel-10.0.29-20.23.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12:libmysqlclient18-10.0.29-20.23.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12:libmysqlclient18-32bit-10.0.29-20.23.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12:libmysqlclient_r18-10.0.29-20.23.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12:libmysqld-devel-10.0.29-20.23.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12:libmysqld18-10.0.29-20.23.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12:mariadb-10.0.29-20.23.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12:mariadb-client-10.0.29-20.23.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12:mariadb-errormessages-10.0.29-20.23.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12:mariadb-tools-10.0.29-20.23.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2017-02-07T12:16:05Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2017-3258"
    },
    {
      "cve": "CVE-2017-3265",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2017-3265"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Packaging). Supported versions that are affected are 5.5.53 and earlier, 5.6.34 and earlier and 5.7.16 and earlier. Difficult to exploit vulnerability allows high privileged attacker with logon to the infrastructure where MySQL Server executes to compromise MySQL Server. Successful attacks require human interaction from a person other than the attacker. Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all MySQL Server accessible data and unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS v3.0 Base Score 5.6 (Confidentiality and Availability impacts).",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Linux Enterprise Server 12-LTSS:libmysqlclient-devel-10.0.29-20.23.1.ppc64le",
          "SUSE Linux Enterprise Server 12-LTSS:libmysqlclient-devel-10.0.29-20.23.1.s390x",
          "SUSE Linux Enterprise Server 12-LTSS:libmysqlclient-devel-10.0.29-20.23.1.x86_64",
          "SUSE Linux Enterprise Server 12-LTSS:libmysqlclient18-10.0.29-20.23.1.ppc64le",
          "SUSE Linux Enterprise Server 12-LTSS:libmysqlclient18-10.0.29-20.23.1.s390x",
          "SUSE Linux Enterprise Server 12-LTSS:libmysqlclient18-10.0.29-20.23.1.x86_64",
          "SUSE Linux Enterprise Server 12-LTSS:libmysqlclient18-32bit-10.0.29-20.23.1.s390x",
          "SUSE Linux Enterprise Server 12-LTSS:libmysqlclient18-32bit-10.0.29-20.23.1.x86_64",
          "SUSE Linux Enterprise Server 12-LTSS:libmysqlclient_r18-10.0.29-20.23.1.ppc64le",
          "SUSE Linux Enterprise Server 12-LTSS:libmysqlclient_r18-10.0.29-20.23.1.s390x",
          "SUSE Linux Enterprise Server 12-LTSS:libmysqlclient_r18-10.0.29-20.23.1.x86_64",
          "SUSE Linux Enterprise Server 12-LTSS:libmysqld-devel-10.0.29-20.23.1.ppc64le",
          "SUSE Linux Enterprise Server 12-LTSS:libmysqld-devel-10.0.29-20.23.1.s390x",
          "SUSE Linux Enterprise Server 12-LTSS:libmysqld-devel-10.0.29-20.23.1.x86_64",
          "SUSE Linux Enterprise Server 12-LTSS:libmysqld18-10.0.29-20.23.1.ppc64le",
          "SUSE Linux Enterprise Server 12-LTSS:libmysqld18-10.0.29-20.23.1.s390x",
          "SUSE Linux Enterprise Server 12-LTSS:libmysqld18-10.0.29-20.23.1.x86_64",
          "SUSE Linux Enterprise Server 12-LTSS:mariadb-10.0.29-20.23.1.ppc64le",
          "SUSE Linux Enterprise Server 12-LTSS:mariadb-10.0.29-20.23.1.s390x",
          "SUSE Linux Enterprise Server 12-LTSS:mariadb-10.0.29-20.23.1.x86_64",
          "SUSE Linux Enterprise Server 12-LTSS:mariadb-client-10.0.29-20.23.1.ppc64le",
          "SUSE Linux Enterprise Server 12-LTSS:mariadb-client-10.0.29-20.23.1.s390x",
          "SUSE Linux Enterprise Server 12-LTSS:mariadb-client-10.0.29-20.23.1.x86_64",
          "SUSE Linux Enterprise Server 12-LTSS:mariadb-errormessages-10.0.29-20.23.1.ppc64le",
          "SUSE Linux Enterprise Server 12-LTSS:mariadb-errormessages-10.0.29-20.23.1.s390x",
          "SUSE Linux Enterprise Server 12-LTSS:mariadb-errormessages-10.0.29-20.23.1.x86_64",
          "SUSE Linux Enterprise Server 12-LTSS:mariadb-tools-10.0.29-20.23.1.ppc64le",
          "SUSE Linux Enterprise Server 12-LTSS:mariadb-tools-10.0.29-20.23.1.s390x",
          "SUSE Linux Enterprise Server 12-LTSS:mariadb-tools-10.0.29-20.23.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 12:libmysqlclient-devel-10.0.29-20.23.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 12:libmysqlclient18-10.0.29-20.23.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 12:libmysqlclient18-32bit-10.0.29-20.23.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 12:libmysqlclient_r18-10.0.29-20.23.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 12:libmysqld-devel-10.0.29-20.23.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 12:libmysqld18-10.0.29-20.23.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 12:mariadb-10.0.29-20.23.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 12:mariadb-client-10.0.29-20.23.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 12:mariadb-errormessages-10.0.29-20.23.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 12:mariadb-tools-10.0.29-20.23.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2017-3265",
          "url": "https://www.suse.com/security/cve/CVE-2017-3265"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1020868 for CVE-2017-3265",
          "url": "https://bugzilla.suse.com/1020868"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1020885 for CVE-2017-3265",
          "url": "https://bugzilla.suse.com/1020885"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Linux Enterprise Server 12-LTSS:libmysqlclient-devel-10.0.29-20.23.1.ppc64le",
            "SUSE Linux Enterprise Server 12-LTSS:libmysqlclient-devel-10.0.29-20.23.1.s390x",
            "SUSE Linux Enterprise Server 12-LTSS:libmysqlclient-devel-10.0.29-20.23.1.x86_64",
            "SUSE Linux Enterprise Server 12-LTSS:libmysqlclient18-10.0.29-20.23.1.ppc64le",
            "SUSE Linux Enterprise Server 12-LTSS:libmysqlclient18-10.0.29-20.23.1.s390x",
            "SUSE Linux Enterprise Server 12-LTSS:libmysqlclient18-10.0.29-20.23.1.x86_64",
            "SUSE Linux Enterprise Server 12-LTSS:libmysqlclient18-32bit-10.0.29-20.23.1.s390x",
            "SUSE Linux Enterprise Server 12-LTSS:libmysqlclient18-32bit-10.0.29-20.23.1.x86_64",
            "SUSE Linux Enterprise Server 12-LTSS:libmysqlclient_r18-10.0.29-20.23.1.ppc64le",
            "SUSE Linux Enterprise Server 12-LTSS:libmysqlclient_r18-10.0.29-20.23.1.s390x",
            "SUSE Linux Enterprise Server 12-LTSS:libmysqlclient_r18-10.0.29-20.23.1.x86_64",
            "SUSE Linux Enterprise Server 12-LTSS:libmysqld-devel-10.0.29-20.23.1.ppc64le",
            "SUSE Linux Enterprise Server 12-LTSS:libmysqld-devel-10.0.29-20.23.1.s390x",
            "SUSE Linux Enterprise Server 12-LTSS:libmysqld-devel-10.0.29-20.23.1.x86_64",
            "SUSE Linux Enterprise Server 12-LTSS:libmysqld18-10.0.29-20.23.1.ppc64le",
            "SUSE Linux Enterprise Server 12-LTSS:libmysqld18-10.0.29-20.23.1.s390x",
            "SUSE Linux Enterprise Server 12-LTSS:libmysqld18-10.0.29-20.23.1.x86_64",
            "SUSE Linux Enterprise Server 12-LTSS:mariadb-10.0.29-20.23.1.ppc64le",
            "SUSE Linux Enterprise Server 12-LTSS:mariadb-10.0.29-20.23.1.s390x",
            "SUSE Linux Enterprise Server 12-LTSS:mariadb-10.0.29-20.23.1.x86_64",
            "SUSE Linux Enterprise Server 12-LTSS:mariadb-client-10.0.29-20.23.1.ppc64le",
            "SUSE Linux Enterprise Server 12-LTSS:mariadb-client-10.0.29-20.23.1.s390x",
            "SUSE Linux Enterprise Server 12-LTSS:mariadb-client-10.0.29-20.23.1.x86_64",
            "SUSE Linux Enterprise Server 12-LTSS:mariadb-errormessages-10.0.29-20.23.1.ppc64le",
            "SUSE Linux Enterprise Server 12-LTSS:mariadb-errormessages-10.0.29-20.23.1.s390x",
            "SUSE Linux Enterprise Server 12-LTSS:mariadb-errormessages-10.0.29-20.23.1.x86_64",
            "SUSE Linux Enterprise Server 12-LTSS:mariadb-tools-10.0.29-20.23.1.ppc64le",
            "SUSE Linux Enterprise Server 12-LTSS:mariadb-tools-10.0.29-20.23.1.s390x",
            "SUSE Linux Enterprise Server 12-LTSS:mariadb-tools-10.0.29-20.23.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12:libmysqlclient-devel-10.0.29-20.23.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12:libmysqlclient18-10.0.29-20.23.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12:libmysqlclient18-32bit-10.0.29-20.23.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12:libmysqlclient_r18-10.0.29-20.23.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12:libmysqld-devel-10.0.29-20.23.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12:libmysqld18-10.0.29-20.23.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12:mariadb-10.0.29-20.23.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12:mariadb-client-10.0.29-20.23.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12:mariadb-errormessages-10.0.29-20.23.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12:mariadb-tools-10.0.29-20.23.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 5.6,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:L/AC:H/PR:H/UI:R/S:U/C:H/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "SUSE Linux Enterprise Server 12-LTSS:libmysqlclient-devel-10.0.29-20.23.1.ppc64le",
            "SUSE Linux Enterprise Server 12-LTSS:libmysqlclient-devel-10.0.29-20.23.1.s390x",
            "SUSE Linux Enterprise Server 12-LTSS:libmysqlclient-devel-10.0.29-20.23.1.x86_64",
            "SUSE Linux Enterprise Server 12-LTSS:libmysqlclient18-10.0.29-20.23.1.ppc64le",
            "SUSE Linux Enterprise Server 12-LTSS:libmysqlclient18-10.0.29-20.23.1.s390x",
            "SUSE Linux Enterprise Server 12-LTSS:libmysqlclient18-10.0.29-20.23.1.x86_64",
            "SUSE Linux Enterprise Server 12-LTSS:libmysqlclient18-32bit-10.0.29-20.23.1.s390x",
            "SUSE Linux Enterprise Server 12-LTSS:libmysqlclient18-32bit-10.0.29-20.23.1.x86_64",
            "SUSE Linux Enterprise Server 12-LTSS:libmysqlclient_r18-10.0.29-20.23.1.ppc64le",
            "SUSE Linux Enterprise Server 12-LTSS:libmysqlclient_r18-10.0.29-20.23.1.s390x",
            "SUSE Linux Enterprise Server 12-LTSS:libmysqlclient_r18-10.0.29-20.23.1.x86_64",
            "SUSE Linux Enterprise Server 12-LTSS:libmysqld-devel-10.0.29-20.23.1.ppc64le",
            "SUSE Linux Enterprise Server 12-LTSS:libmysqld-devel-10.0.29-20.23.1.s390x",
            "SUSE Linux Enterprise Server 12-LTSS:libmysqld-devel-10.0.29-20.23.1.x86_64",
            "SUSE Linux Enterprise Server 12-LTSS:libmysqld18-10.0.29-20.23.1.ppc64le",
            "SUSE Linux Enterprise Server 12-LTSS:libmysqld18-10.0.29-20.23.1.s390x",
            "SUSE Linux Enterprise Server 12-LTSS:libmysqld18-10.0.29-20.23.1.x86_64",
            "SUSE Linux Enterprise Server 12-LTSS:mariadb-10.0.29-20.23.1.ppc64le",
            "SUSE Linux Enterprise Server 12-LTSS:mariadb-10.0.29-20.23.1.s390x",
            "SUSE Linux Enterprise Server 12-LTSS:mariadb-10.0.29-20.23.1.x86_64",
            "SUSE Linux Enterprise Server 12-LTSS:mariadb-client-10.0.29-20.23.1.ppc64le",
            "SUSE Linux Enterprise Server 12-LTSS:mariadb-client-10.0.29-20.23.1.s390x",
            "SUSE Linux Enterprise Server 12-LTSS:mariadb-client-10.0.29-20.23.1.x86_64",
            "SUSE Linux Enterprise Server 12-LTSS:mariadb-errormessages-10.0.29-20.23.1.ppc64le",
            "SUSE Linux Enterprise Server 12-LTSS:mariadb-errormessages-10.0.29-20.23.1.s390x",
            "SUSE Linux Enterprise Server 12-LTSS:mariadb-errormessages-10.0.29-20.23.1.x86_64",
            "SUSE Linux Enterprise Server 12-LTSS:mariadb-tools-10.0.29-20.23.1.ppc64le",
            "SUSE Linux Enterprise Server 12-LTSS:mariadb-tools-10.0.29-20.23.1.s390x",
            "SUSE Linux Enterprise Server 12-LTSS:mariadb-tools-10.0.29-20.23.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12:libmysqlclient-devel-10.0.29-20.23.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12:libmysqlclient18-10.0.29-20.23.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12:libmysqlclient18-32bit-10.0.29-20.23.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12:libmysqlclient_r18-10.0.29-20.23.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12:libmysqld-devel-10.0.29-20.23.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12:libmysqld18-10.0.29-20.23.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12:mariadb-10.0.29-20.23.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12:mariadb-client-10.0.29-20.23.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12:mariadb-errormessages-10.0.29-20.23.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12:mariadb-tools-10.0.29-20.23.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2017-02-07T12:16:05Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2017-3265"
    },
    {
      "cve": "CVE-2017-3291",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2017-3291"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Packaging). Supported versions that are affected are 5.5.53 and earlier, 5.6.34 and earlier and 5.7.16 and earlier. Difficult to exploit vulnerability allows high privileged attacker with logon to the infrastructure where MySQL Server executes to compromise MySQL Server. Successful attacks require human interaction from a person other than the attacker. Successful attacks of this vulnerability can result in takeover of MySQL Server. CVSS v3.0 Base Score 6.3 (Confidentiality, Integrity and Availability impacts).",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Linux Enterprise Server 12-LTSS:libmysqlclient-devel-10.0.29-20.23.1.ppc64le",
          "SUSE Linux Enterprise Server 12-LTSS:libmysqlclient-devel-10.0.29-20.23.1.s390x",
          "SUSE Linux Enterprise Server 12-LTSS:libmysqlclient-devel-10.0.29-20.23.1.x86_64",
          "SUSE Linux Enterprise Server 12-LTSS:libmysqlclient18-10.0.29-20.23.1.ppc64le",
          "SUSE Linux Enterprise Server 12-LTSS:libmysqlclient18-10.0.29-20.23.1.s390x",
          "SUSE Linux Enterprise Server 12-LTSS:libmysqlclient18-10.0.29-20.23.1.x86_64",
          "SUSE Linux Enterprise Server 12-LTSS:libmysqlclient18-32bit-10.0.29-20.23.1.s390x",
          "SUSE Linux Enterprise Server 12-LTSS:libmysqlclient18-32bit-10.0.29-20.23.1.x86_64",
          "SUSE Linux Enterprise Server 12-LTSS:libmysqlclient_r18-10.0.29-20.23.1.ppc64le",
          "SUSE Linux Enterprise Server 12-LTSS:libmysqlclient_r18-10.0.29-20.23.1.s390x",
          "SUSE Linux Enterprise Server 12-LTSS:libmysqlclient_r18-10.0.29-20.23.1.x86_64",
          "SUSE Linux Enterprise Server 12-LTSS:libmysqld-devel-10.0.29-20.23.1.ppc64le",
          "SUSE Linux Enterprise Server 12-LTSS:libmysqld-devel-10.0.29-20.23.1.s390x",
          "SUSE Linux Enterprise Server 12-LTSS:libmysqld-devel-10.0.29-20.23.1.x86_64",
          "SUSE Linux Enterprise Server 12-LTSS:libmysqld18-10.0.29-20.23.1.ppc64le",
          "SUSE Linux Enterprise Server 12-LTSS:libmysqld18-10.0.29-20.23.1.s390x",
          "SUSE Linux Enterprise Server 12-LTSS:libmysqld18-10.0.29-20.23.1.x86_64",
          "SUSE Linux Enterprise Server 12-LTSS:mariadb-10.0.29-20.23.1.ppc64le",
          "SUSE Linux Enterprise Server 12-LTSS:mariadb-10.0.29-20.23.1.s390x",
          "SUSE Linux Enterprise Server 12-LTSS:mariadb-10.0.29-20.23.1.x86_64",
          "SUSE Linux Enterprise Server 12-LTSS:mariadb-client-10.0.29-20.23.1.ppc64le",
          "SUSE Linux Enterprise Server 12-LTSS:mariadb-client-10.0.29-20.23.1.s390x",
          "SUSE Linux Enterprise Server 12-LTSS:mariadb-client-10.0.29-20.23.1.x86_64",
          "SUSE Linux Enterprise Server 12-LTSS:mariadb-errormessages-10.0.29-20.23.1.ppc64le",
          "SUSE Linux Enterprise Server 12-LTSS:mariadb-errormessages-10.0.29-20.23.1.s390x",
          "SUSE Linux Enterprise Server 12-LTSS:mariadb-errormessages-10.0.29-20.23.1.x86_64",
          "SUSE Linux Enterprise Server 12-LTSS:mariadb-tools-10.0.29-20.23.1.ppc64le",
          "SUSE Linux Enterprise Server 12-LTSS:mariadb-tools-10.0.29-20.23.1.s390x",
          "SUSE Linux Enterprise Server 12-LTSS:mariadb-tools-10.0.29-20.23.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 12:libmysqlclient-devel-10.0.29-20.23.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 12:libmysqlclient18-10.0.29-20.23.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 12:libmysqlclient18-32bit-10.0.29-20.23.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 12:libmysqlclient_r18-10.0.29-20.23.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 12:libmysqld-devel-10.0.29-20.23.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 12:libmysqld18-10.0.29-20.23.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 12:mariadb-10.0.29-20.23.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 12:mariadb-client-10.0.29-20.23.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 12:mariadb-errormessages-10.0.29-20.23.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 12:mariadb-tools-10.0.29-20.23.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2017-3291",
          "url": "https://www.suse.com/security/cve/CVE-2017-3291"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1020868 for CVE-2017-3291",
          "url": "https://bugzilla.suse.com/1020868"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1020884 for CVE-2017-3291",
          "url": "https://bugzilla.suse.com/1020884"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 998309 for CVE-2017-3291",
          "url": "https://bugzilla.suse.com/998309"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Linux Enterprise Server 12-LTSS:libmysqlclient-devel-10.0.29-20.23.1.ppc64le",
            "SUSE Linux Enterprise Server 12-LTSS:libmysqlclient-devel-10.0.29-20.23.1.s390x",
            "SUSE Linux Enterprise Server 12-LTSS:libmysqlclient-devel-10.0.29-20.23.1.x86_64",
            "SUSE Linux Enterprise Server 12-LTSS:libmysqlclient18-10.0.29-20.23.1.ppc64le",
            "SUSE Linux Enterprise Server 12-LTSS:libmysqlclient18-10.0.29-20.23.1.s390x",
            "SUSE Linux Enterprise Server 12-LTSS:libmysqlclient18-10.0.29-20.23.1.x86_64",
            "SUSE Linux Enterprise Server 12-LTSS:libmysqlclient18-32bit-10.0.29-20.23.1.s390x",
            "SUSE Linux Enterprise Server 12-LTSS:libmysqlclient18-32bit-10.0.29-20.23.1.x86_64",
            "SUSE Linux Enterprise Server 12-LTSS:libmysqlclient_r18-10.0.29-20.23.1.ppc64le",
            "SUSE Linux Enterprise Server 12-LTSS:libmysqlclient_r18-10.0.29-20.23.1.s390x",
            "SUSE Linux Enterprise Server 12-LTSS:libmysqlclient_r18-10.0.29-20.23.1.x86_64",
            "SUSE Linux Enterprise Server 12-LTSS:libmysqld-devel-10.0.29-20.23.1.ppc64le",
            "SUSE Linux Enterprise Server 12-LTSS:libmysqld-devel-10.0.29-20.23.1.s390x",
            "SUSE Linux Enterprise Server 12-LTSS:libmysqld-devel-10.0.29-20.23.1.x86_64",
            "SUSE Linux Enterprise Server 12-LTSS:libmysqld18-10.0.29-20.23.1.ppc64le",
            "SUSE Linux Enterprise Server 12-LTSS:libmysqld18-10.0.29-20.23.1.s390x",
            "SUSE Linux Enterprise Server 12-LTSS:libmysqld18-10.0.29-20.23.1.x86_64",
            "SUSE Linux Enterprise Server 12-LTSS:mariadb-10.0.29-20.23.1.ppc64le",
            "SUSE Linux Enterprise Server 12-LTSS:mariadb-10.0.29-20.23.1.s390x",
            "SUSE Linux Enterprise Server 12-LTSS:mariadb-10.0.29-20.23.1.x86_64",
            "SUSE Linux Enterprise Server 12-LTSS:mariadb-client-10.0.29-20.23.1.ppc64le",
            "SUSE Linux Enterprise Server 12-LTSS:mariadb-client-10.0.29-20.23.1.s390x",
            "SUSE Linux Enterprise Server 12-LTSS:mariadb-client-10.0.29-20.23.1.x86_64",
            "SUSE Linux Enterprise Server 12-LTSS:mariadb-errormessages-10.0.29-20.23.1.ppc64le",
            "SUSE Linux Enterprise Server 12-LTSS:mariadb-errormessages-10.0.29-20.23.1.s390x",
            "SUSE Linux Enterprise Server 12-LTSS:mariadb-errormessages-10.0.29-20.23.1.x86_64",
            "SUSE Linux Enterprise Server 12-LTSS:mariadb-tools-10.0.29-20.23.1.ppc64le",
            "SUSE Linux Enterprise Server 12-LTSS:mariadb-tools-10.0.29-20.23.1.s390x",
            "SUSE Linux Enterprise Server 12-LTSS:mariadb-tools-10.0.29-20.23.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12:libmysqlclient-devel-10.0.29-20.23.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12:libmysqlclient18-10.0.29-20.23.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12:libmysqlclient18-32bit-10.0.29-20.23.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12:libmysqlclient_r18-10.0.29-20.23.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12:libmysqld-devel-10.0.29-20.23.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12:libmysqld18-10.0.29-20.23.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12:mariadb-10.0.29-20.23.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12:mariadb-client-10.0.29-20.23.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12:mariadb-errormessages-10.0.29-20.23.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12:mariadb-tools-10.0.29-20.23.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 6.3,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:L/AC:H/PR:H/UI:R/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "SUSE Linux Enterprise Server 12-LTSS:libmysqlclient-devel-10.0.29-20.23.1.ppc64le",
            "SUSE Linux Enterprise Server 12-LTSS:libmysqlclient-devel-10.0.29-20.23.1.s390x",
            "SUSE Linux Enterprise Server 12-LTSS:libmysqlclient-devel-10.0.29-20.23.1.x86_64",
            "SUSE Linux Enterprise Server 12-LTSS:libmysqlclient18-10.0.29-20.23.1.ppc64le",
            "SUSE Linux Enterprise Server 12-LTSS:libmysqlclient18-10.0.29-20.23.1.s390x",
            "SUSE Linux Enterprise Server 12-LTSS:libmysqlclient18-10.0.29-20.23.1.x86_64",
            "SUSE Linux Enterprise Server 12-LTSS:libmysqlclient18-32bit-10.0.29-20.23.1.s390x",
            "SUSE Linux Enterprise Server 12-LTSS:libmysqlclient18-32bit-10.0.29-20.23.1.x86_64",
            "SUSE Linux Enterprise Server 12-LTSS:libmysqlclient_r18-10.0.29-20.23.1.ppc64le",
            "SUSE Linux Enterprise Server 12-LTSS:libmysqlclient_r18-10.0.29-20.23.1.s390x",
            "SUSE Linux Enterprise Server 12-LTSS:libmysqlclient_r18-10.0.29-20.23.1.x86_64",
            "SUSE Linux Enterprise Server 12-LTSS:libmysqld-devel-10.0.29-20.23.1.ppc64le",
            "SUSE Linux Enterprise Server 12-LTSS:libmysqld-devel-10.0.29-20.23.1.s390x",
            "SUSE Linux Enterprise Server 12-LTSS:libmysqld-devel-10.0.29-20.23.1.x86_64",
            "SUSE Linux Enterprise Server 12-LTSS:libmysqld18-10.0.29-20.23.1.ppc64le",
            "SUSE Linux Enterprise Server 12-LTSS:libmysqld18-10.0.29-20.23.1.s390x",
            "SUSE Linux Enterprise Server 12-LTSS:libmysqld18-10.0.29-20.23.1.x86_64",
            "SUSE Linux Enterprise Server 12-LTSS:mariadb-10.0.29-20.23.1.ppc64le",
            "SUSE Linux Enterprise Server 12-LTSS:mariadb-10.0.29-20.23.1.s390x",
            "SUSE Linux Enterprise Server 12-LTSS:mariadb-10.0.29-20.23.1.x86_64",
            "SUSE Linux Enterprise Server 12-LTSS:mariadb-client-10.0.29-20.23.1.ppc64le",
            "SUSE Linux Enterprise Server 12-LTSS:mariadb-client-10.0.29-20.23.1.s390x",
            "SUSE Linux Enterprise Server 12-LTSS:mariadb-client-10.0.29-20.23.1.x86_64",
            "SUSE Linux Enterprise Server 12-LTSS:mariadb-errormessages-10.0.29-20.23.1.ppc64le",
            "SUSE Linux Enterprise Server 12-LTSS:mariadb-errormessages-10.0.29-20.23.1.s390x",
            "SUSE Linux Enterprise Server 12-LTSS:mariadb-errormessages-10.0.29-20.23.1.x86_64",
            "SUSE Linux Enterprise Server 12-LTSS:mariadb-tools-10.0.29-20.23.1.ppc64le",
            "SUSE Linux Enterprise Server 12-LTSS:mariadb-tools-10.0.29-20.23.1.s390x",
            "SUSE Linux Enterprise Server 12-LTSS:mariadb-tools-10.0.29-20.23.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12:libmysqlclient-devel-10.0.29-20.23.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12:libmysqlclient18-10.0.29-20.23.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12:libmysqlclient18-32bit-10.0.29-20.23.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12:libmysqlclient_r18-10.0.29-20.23.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12:libmysqld-devel-10.0.29-20.23.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12:libmysqld18-10.0.29-20.23.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12:mariadb-10.0.29-20.23.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12:mariadb-client-10.0.29-20.23.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12:mariadb-errormessages-10.0.29-20.23.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12:mariadb-tools-10.0.29-20.23.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2017-02-07T12:16:05Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2017-3291"
    },
    {
      "cve": "CVE-2017-3312",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2017-3312"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Packaging). Supported versions that are affected are 5.5.53 and earlier, 5.6.34 and earlier and 5.7.16 and earlier. Difficult to exploit vulnerability allows low privileged attacker with logon to the infrastructure where MySQL Server executes to compromise MySQL Server. Successful attacks require human interaction from a person other than the attacker. Successful attacks of this vulnerability can result in takeover of MySQL Server. CVSS v3.0 Base Score 6.7 (Confidentiality, Integrity and Availability impacts).",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Linux Enterprise Server 12-LTSS:libmysqlclient-devel-10.0.29-20.23.1.ppc64le",
          "SUSE Linux Enterprise Server 12-LTSS:libmysqlclient-devel-10.0.29-20.23.1.s390x",
          "SUSE Linux Enterprise Server 12-LTSS:libmysqlclient-devel-10.0.29-20.23.1.x86_64",
          "SUSE Linux Enterprise Server 12-LTSS:libmysqlclient18-10.0.29-20.23.1.ppc64le",
          "SUSE Linux Enterprise Server 12-LTSS:libmysqlclient18-10.0.29-20.23.1.s390x",
          "SUSE Linux Enterprise Server 12-LTSS:libmysqlclient18-10.0.29-20.23.1.x86_64",
          "SUSE Linux Enterprise Server 12-LTSS:libmysqlclient18-32bit-10.0.29-20.23.1.s390x",
          "SUSE Linux Enterprise Server 12-LTSS:libmysqlclient18-32bit-10.0.29-20.23.1.x86_64",
          "SUSE Linux Enterprise Server 12-LTSS:libmysqlclient_r18-10.0.29-20.23.1.ppc64le",
          "SUSE Linux Enterprise Server 12-LTSS:libmysqlclient_r18-10.0.29-20.23.1.s390x",
          "SUSE Linux Enterprise Server 12-LTSS:libmysqlclient_r18-10.0.29-20.23.1.x86_64",
          "SUSE Linux Enterprise Server 12-LTSS:libmysqld-devel-10.0.29-20.23.1.ppc64le",
          "SUSE Linux Enterprise Server 12-LTSS:libmysqld-devel-10.0.29-20.23.1.s390x",
          "SUSE Linux Enterprise Server 12-LTSS:libmysqld-devel-10.0.29-20.23.1.x86_64",
          "SUSE Linux Enterprise Server 12-LTSS:libmysqld18-10.0.29-20.23.1.ppc64le",
          "SUSE Linux Enterprise Server 12-LTSS:libmysqld18-10.0.29-20.23.1.s390x",
          "SUSE Linux Enterprise Server 12-LTSS:libmysqld18-10.0.29-20.23.1.x86_64",
          "SUSE Linux Enterprise Server 12-LTSS:mariadb-10.0.29-20.23.1.ppc64le",
          "SUSE Linux Enterprise Server 12-LTSS:mariadb-10.0.29-20.23.1.s390x",
          "SUSE Linux Enterprise Server 12-LTSS:mariadb-10.0.29-20.23.1.x86_64",
          "SUSE Linux Enterprise Server 12-LTSS:mariadb-client-10.0.29-20.23.1.ppc64le",
          "SUSE Linux Enterprise Server 12-LTSS:mariadb-client-10.0.29-20.23.1.s390x",
          "SUSE Linux Enterprise Server 12-LTSS:mariadb-client-10.0.29-20.23.1.x86_64",
          "SUSE Linux Enterprise Server 12-LTSS:mariadb-errormessages-10.0.29-20.23.1.ppc64le",
          "SUSE Linux Enterprise Server 12-LTSS:mariadb-errormessages-10.0.29-20.23.1.s390x",
          "SUSE Linux Enterprise Server 12-LTSS:mariadb-errormessages-10.0.29-20.23.1.x86_64",
          "SUSE Linux Enterprise Server 12-LTSS:mariadb-tools-10.0.29-20.23.1.ppc64le",
          "SUSE Linux Enterprise Server 12-LTSS:mariadb-tools-10.0.29-20.23.1.s390x",
          "SUSE Linux Enterprise Server 12-LTSS:mariadb-tools-10.0.29-20.23.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 12:libmysqlclient-devel-10.0.29-20.23.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 12:libmysqlclient18-10.0.29-20.23.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 12:libmysqlclient18-32bit-10.0.29-20.23.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 12:libmysqlclient_r18-10.0.29-20.23.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 12:libmysqld-devel-10.0.29-20.23.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 12:libmysqld18-10.0.29-20.23.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 12:mariadb-10.0.29-20.23.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 12:mariadb-client-10.0.29-20.23.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 12:mariadb-errormessages-10.0.29-20.23.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 12:mariadb-tools-10.0.29-20.23.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2017-3312",
          "url": "https://www.suse.com/security/cve/CVE-2017-3312"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1020868 for CVE-2017-3312",
          "url": "https://bugzilla.suse.com/1020868"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1020873 for CVE-2017-3312",
          "url": "https://bugzilla.suse.com/1020873"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 998309 for CVE-2017-3312",
          "url": "https://bugzilla.suse.com/998309"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Linux Enterprise Server 12-LTSS:libmysqlclient-devel-10.0.29-20.23.1.ppc64le",
            "SUSE Linux Enterprise Server 12-LTSS:libmysqlclient-devel-10.0.29-20.23.1.s390x",
            "SUSE Linux Enterprise Server 12-LTSS:libmysqlclient-devel-10.0.29-20.23.1.x86_64",
            "SUSE Linux Enterprise Server 12-LTSS:libmysqlclient18-10.0.29-20.23.1.ppc64le",
            "SUSE Linux Enterprise Server 12-LTSS:libmysqlclient18-10.0.29-20.23.1.s390x",
            "SUSE Linux Enterprise Server 12-LTSS:libmysqlclient18-10.0.29-20.23.1.x86_64",
            "SUSE Linux Enterprise Server 12-LTSS:libmysqlclient18-32bit-10.0.29-20.23.1.s390x",
            "SUSE Linux Enterprise Server 12-LTSS:libmysqlclient18-32bit-10.0.29-20.23.1.x86_64",
            "SUSE Linux Enterprise Server 12-LTSS:libmysqlclient_r18-10.0.29-20.23.1.ppc64le",
            "SUSE Linux Enterprise Server 12-LTSS:libmysqlclient_r18-10.0.29-20.23.1.s390x",
            "SUSE Linux Enterprise Server 12-LTSS:libmysqlclient_r18-10.0.29-20.23.1.x86_64",
            "SUSE Linux Enterprise Server 12-LTSS:libmysqld-devel-10.0.29-20.23.1.ppc64le",
            "SUSE Linux Enterprise Server 12-LTSS:libmysqld-devel-10.0.29-20.23.1.s390x",
            "SUSE Linux Enterprise Server 12-LTSS:libmysqld-devel-10.0.29-20.23.1.x86_64",
            "SUSE Linux Enterprise Server 12-LTSS:libmysqld18-10.0.29-20.23.1.ppc64le",
            "SUSE Linux Enterprise Server 12-LTSS:libmysqld18-10.0.29-20.23.1.s390x",
            "SUSE Linux Enterprise Server 12-LTSS:libmysqld18-10.0.29-20.23.1.x86_64",
            "SUSE Linux Enterprise Server 12-LTSS:mariadb-10.0.29-20.23.1.ppc64le",
            "SUSE Linux Enterprise Server 12-LTSS:mariadb-10.0.29-20.23.1.s390x",
            "SUSE Linux Enterprise Server 12-LTSS:mariadb-10.0.29-20.23.1.x86_64",
            "SUSE Linux Enterprise Server 12-LTSS:mariadb-client-10.0.29-20.23.1.ppc64le",
            "SUSE Linux Enterprise Server 12-LTSS:mariadb-client-10.0.29-20.23.1.s390x",
            "SUSE Linux Enterprise Server 12-LTSS:mariadb-client-10.0.29-20.23.1.x86_64",
            "SUSE Linux Enterprise Server 12-LTSS:mariadb-errormessages-10.0.29-20.23.1.ppc64le",
            "SUSE Linux Enterprise Server 12-LTSS:mariadb-errormessages-10.0.29-20.23.1.s390x",
            "SUSE Linux Enterprise Server 12-LTSS:mariadb-errormessages-10.0.29-20.23.1.x86_64",
            "SUSE Linux Enterprise Server 12-LTSS:mariadb-tools-10.0.29-20.23.1.ppc64le",
            "SUSE Linux Enterprise Server 12-LTSS:mariadb-tools-10.0.29-20.23.1.s390x",
            "SUSE Linux Enterprise Server 12-LTSS:mariadb-tools-10.0.29-20.23.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12:libmysqlclient-devel-10.0.29-20.23.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12:libmysqlclient18-10.0.29-20.23.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12:libmysqlclient18-32bit-10.0.29-20.23.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12:libmysqlclient_r18-10.0.29-20.23.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12:libmysqld-devel-10.0.29-20.23.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12:libmysqld18-10.0.29-20.23.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12:mariadb-10.0.29-20.23.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12:mariadb-client-10.0.29-20.23.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12:mariadb-errormessages-10.0.29-20.23.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12:mariadb-tools-10.0.29-20.23.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 6.7,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "SUSE Linux Enterprise Server 12-LTSS:libmysqlclient-devel-10.0.29-20.23.1.ppc64le",
            "SUSE Linux Enterprise Server 12-LTSS:libmysqlclient-devel-10.0.29-20.23.1.s390x",
            "SUSE Linux Enterprise Server 12-LTSS:libmysqlclient-devel-10.0.29-20.23.1.x86_64",
            "SUSE Linux Enterprise Server 12-LTSS:libmysqlclient18-10.0.29-20.23.1.ppc64le",
            "SUSE Linux Enterprise Server 12-LTSS:libmysqlclient18-10.0.29-20.23.1.s390x",
            "SUSE Linux Enterprise Server 12-LTSS:libmysqlclient18-10.0.29-20.23.1.x86_64",
            "SUSE Linux Enterprise Server 12-LTSS:libmysqlclient18-32bit-10.0.29-20.23.1.s390x",
            "SUSE Linux Enterprise Server 12-LTSS:libmysqlclient18-32bit-10.0.29-20.23.1.x86_64",
            "SUSE Linux Enterprise Server 12-LTSS:libmysqlclient_r18-10.0.29-20.23.1.ppc64le",
            "SUSE Linux Enterprise Server 12-LTSS:libmysqlclient_r18-10.0.29-20.23.1.s390x",
            "SUSE Linux Enterprise Server 12-LTSS:libmysqlclient_r18-10.0.29-20.23.1.x86_64",
            "SUSE Linux Enterprise Server 12-LTSS:libmysqld-devel-10.0.29-20.23.1.ppc64le",
            "SUSE Linux Enterprise Server 12-LTSS:libmysqld-devel-10.0.29-20.23.1.s390x",
            "SUSE Linux Enterprise Server 12-LTSS:libmysqld-devel-10.0.29-20.23.1.x86_64",
            "SUSE Linux Enterprise Server 12-LTSS:libmysqld18-10.0.29-20.23.1.ppc64le",
            "SUSE Linux Enterprise Server 12-LTSS:libmysqld18-10.0.29-20.23.1.s390x",
            "SUSE Linux Enterprise Server 12-LTSS:libmysqld18-10.0.29-20.23.1.x86_64",
            "SUSE Linux Enterprise Server 12-LTSS:mariadb-10.0.29-20.23.1.ppc64le",
            "SUSE Linux Enterprise Server 12-LTSS:mariadb-10.0.29-20.23.1.s390x",
            "SUSE Linux Enterprise Server 12-LTSS:mariadb-10.0.29-20.23.1.x86_64",
            "SUSE Linux Enterprise Server 12-LTSS:mariadb-client-10.0.29-20.23.1.ppc64le",
            "SUSE Linux Enterprise Server 12-LTSS:mariadb-client-10.0.29-20.23.1.s390x",
            "SUSE Linux Enterprise Server 12-LTSS:mariadb-client-10.0.29-20.23.1.x86_64",
            "SUSE Linux Enterprise Server 12-LTSS:mariadb-errormessages-10.0.29-20.23.1.ppc64le",
            "SUSE Linux Enterprise Server 12-LTSS:mariadb-errormessages-10.0.29-20.23.1.s390x",
            "SUSE Linux Enterprise Server 12-LTSS:mariadb-errormessages-10.0.29-20.23.1.x86_64",
            "SUSE Linux Enterprise Server 12-LTSS:mariadb-tools-10.0.29-20.23.1.ppc64le",
            "SUSE Linux Enterprise Server 12-LTSS:mariadb-tools-10.0.29-20.23.1.s390x",
            "SUSE Linux Enterprise Server 12-LTSS:mariadb-tools-10.0.29-20.23.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12:libmysqlclient-devel-10.0.29-20.23.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12:libmysqlclient18-10.0.29-20.23.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12:libmysqlclient18-32bit-10.0.29-20.23.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12:libmysqlclient_r18-10.0.29-20.23.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12:libmysqld-devel-10.0.29-20.23.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12:libmysqld18-10.0.29-20.23.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12:mariadb-10.0.29-20.23.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12:mariadb-client-10.0.29-20.23.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12:mariadb-errormessages-10.0.29-20.23.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12:mariadb-tools-10.0.29-20.23.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2017-02-07T12:16:05Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2017-3312"
    },
    {
      "cve": "CVE-2017-3317",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2017-3317"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Logging). Supported versions that are affected are 5.5.53 and earlier, 5.6.34 and earlier and 5.7.16 and earlier. Difficult to exploit vulnerability allows high privileged attacker with logon to the infrastructure where MySQL Server executes to compromise MySQL Server. Successful attacks require human interaction from a person other than the attacker. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS v3.0 Base Score 4.0 (Availability impacts).",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Linux Enterprise Server 12-LTSS:libmysqlclient-devel-10.0.29-20.23.1.ppc64le",
          "SUSE Linux Enterprise Server 12-LTSS:libmysqlclient-devel-10.0.29-20.23.1.s390x",
          "SUSE Linux Enterprise Server 12-LTSS:libmysqlclient-devel-10.0.29-20.23.1.x86_64",
          "SUSE Linux Enterprise Server 12-LTSS:libmysqlclient18-10.0.29-20.23.1.ppc64le",
          "SUSE Linux Enterprise Server 12-LTSS:libmysqlclient18-10.0.29-20.23.1.s390x",
          "SUSE Linux Enterprise Server 12-LTSS:libmysqlclient18-10.0.29-20.23.1.x86_64",
          "SUSE Linux Enterprise Server 12-LTSS:libmysqlclient18-32bit-10.0.29-20.23.1.s390x",
          "SUSE Linux Enterprise Server 12-LTSS:libmysqlclient18-32bit-10.0.29-20.23.1.x86_64",
          "SUSE Linux Enterprise Server 12-LTSS:libmysqlclient_r18-10.0.29-20.23.1.ppc64le",
          "SUSE Linux Enterprise Server 12-LTSS:libmysqlclient_r18-10.0.29-20.23.1.s390x",
          "SUSE Linux Enterprise Server 12-LTSS:libmysqlclient_r18-10.0.29-20.23.1.x86_64",
          "SUSE Linux Enterprise Server 12-LTSS:libmysqld-devel-10.0.29-20.23.1.ppc64le",
          "SUSE Linux Enterprise Server 12-LTSS:libmysqld-devel-10.0.29-20.23.1.s390x",
          "SUSE Linux Enterprise Server 12-LTSS:libmysqld-devel-10.0.29-20.23.1.x86_64",
          "SUSE Linux Enterprise Server 12-LTSS:libmysqld18-10.0.29-20.23.1.ppc64le",
          "SUSE Linux Enterprise Server 12-LTSS:libmysqld18-10.0.29-20.23.1.s390x",
          "SUSE Linux Enterprise Server 12-LTSS:libmysqld18-10.0.29-20.23.1.x86_64",
          "SUSE Linux Enterprise Server 12-LTSS:mariadb-10.0.29-20.23.1.ppc64le",
          "SUSE Linux Enterprise Server 12-LTSS:mariadb-10.0.29-20.23.1.s390x",
          "SUSE Linux Enterprise Server 12-LTSS:mariadb-10.0.29-20.23.1.x86_64",
          "SUSE Linux Enterprise Server 12-LTSS:mariadb-client-10.0.29-20.23.1.ppc64le",
          "SUSE Linux Enterprise Server 12-LTSS:mariadb-client-10.0.29-20.23.1.s390x",
          "SUSE Linux Enterprise Server 12-LTSS:mariadb-client-10.0.29-20.23.1.x86_64",
          "SUSE Linux Enterprise Server 12-LTSS:mariadb-errormessages-10.0.29-20.23.1.ppc64le",
          "SUSE Linux Enterprise Server 12-LTSS:mariadb-errormessages-10.0.29-20.23.1.s390x",
          "SUSE Linux Enterprise Server 12-LTSS:mariadb-errormessages-10.0.29-20.23.1.x86_64",
          "SUSE Linux Enterprise Server 12-LTSS:mariadb-tools-10.0.29-20.23.1.ppc64le",
          "SUSE Linux Enterprise Server 12-LTSS:mariadb-tools-10.0.29-20.23.1.s390x",
          "SUSE Linux Enterprise Server 12-LTSS:mariadb-tools-10.0.29-20.23.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 12:libmysqlclient-devel-10.0.29-20.23.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 12:libmysqlclient18-10.0.29-20.23.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 12:libmysqlclient18-32bit-10.0.29-20.23.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 12:libmysqlclient_r18-10.0.29-20.23.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 12:libmysqld-devel-10.0.29-20.23.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 12:libmysqld18-10.0.29-20.23.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 12:mariadb-10.0.29-20.23.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 12:mariadb-client-10.0.29-20.23.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 12:mariadb-errormessages-10.0.29-20.23.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 12:mariadb-tools-10.0.29-20.23.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2017-3317",
          "url": "https://www.suse.com/security/cve/CVE-2017-3317"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1020868 for CVE-2017-3317",
          "url": "https://bugzilla.suse.com/1020868"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1020894 for CVE-2017-3317",
          "url": "https://bugzilla.suse.com/1020894"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Linux Enterprise Server 12-LTSS:libmysqlclient-devel-10.0.29-20.23.1.ppc64le",
            "SUSE Linux Enterprise Server 12-LTSS:libmysqlclient-devel-10.0.29-20.23.1.s390x",
            "SUSE Linux Enterprise Server 12-LTSS:libmysqlclient-devel-10.0.29-20.23.1.x86_64",
            "SUSE Linux Enterprise Server 12-LTSS:libmysqlclient18-10.0.29-20.23.1.ppc64le",
            "SUSE Linux Enterprise Server 12-LTSS:libmysqlclient18-10.0.29-20.23.1.s390x",
            "SUSE Linux Enterprise Server 12-LTSS:libmysqlclient18-10.0.29-20.23.1.x86_64",
            "SUSE Linux Enterprise Server 12-LTSS:libmysqlclient18-32bit-10.0.29-20.23.1.s390x",
            "SUSE Linux Enterprise Server 12-LTSS:libmysqlclient18-32bit-10.0.29-20.23.1.x86_64",
            "SUSE Linux Enterprise Server 12-LTSS:libmysqlclient_r18-10.0.29-20.23.1.ppc64le",
            "SUSE Linux Enterprise Server 12-LTSS:libmysqlclient_r18-10.0.29-20.23.1.s390x",
            "SUSE Linux Enterprise Server 12-LTSS:libmysqlclient_r18-10.0.29-20.23.1.x86_64",
            "SUSE Linux Enterprise Server 12-LTSS:libmysqld-devel-10.0.29-20.23.1.ppc64le",
            "SUSE Linux Enterprise Server 12-LTSS:libmysqld-devel-10.0.29-20.23.1.s390x",
            "SUSE Linux Enterprise Server 12-LTSS:libmysqld-devel-10.0.29-20.23.1.x86_64",
            "SUSE Linux Enterprise Server 12-LTSS:libmysqld18-10.0.29-20.23.1.ppc64le",
            "SUSE Linux Enterprise Server 12-LTSS:libmysqld18-10.0.29-20.23.1.s390x",
            "SUSE Linux Enterprise Server 12-LTSS:libmysqld18-10.0.29-20.23.1.x86_64",
            "SUSE Linux Enterprise Server 12-LTSS:mariadb-10.0.29-20.23.1.ppc64le",
            "SUSE Linux Enterprise Server 12-LTSS:mariadb-10.0.29-20.23.1.s390x",
            "SUSE Linux Enterprise Server 12-LTSS:mariadb-10.0.29-20.23.1.x86_64",
            "SUSE Linux Enterprise Server 12-LTSS:mariadb-client-10.0.29-20.23.1.ppc64le",
            "SUSE Linux Enterprise Server 12-LTSS:mariadb-client-10.0.29-20.23.1.s390x",
            "SUSE Linux Enterprise Server 12-LTSS:mariadb-client-10.0.29-20.23.1.x86_64",
            "SUSE Linux Enterprise Server 12-LTSS:mariadb-errormessages-10.0.29-20.23.1.ppc64le",
            "SUSE Linux Enterprise Server 12-LTSS:mariadb-errormessages-10.0.29-20.23.1.s390x",
            "SUSE Linux Enterprise Server 12-LTSS:mariadb-errormessages-10.0.29-20.23.1.x86_64",
            "SUSE Linux Enterprise Server 12-LTSS:mariadb-tools-10.0.29-20.23.1.ppc64le",
            "SUSE Linux Enterprise Server 12-LTSS:mariadb-tools-10.0.29-20.23.1.s390x",
            "SUSE Linux Enterprise Server 12-LTSS:mariadb-tools-10.0.29-20.23.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12:libmysqlclient-devel-10.0.29-20.23.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12:libmysqlclient18-10.0.29-20.23.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12:libmysqlclient18-32bit-10.0.29-20.23.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12:libmysqlclient_r18-10.0.29-20.23.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12:libmysqld-devel-10.0.29-20.23.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12:libmysqld18-10.0.29-20.23.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12:mariadb-10.0.29-20.23.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12:mariadb-client-10.0.29-20.23.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12:mariadb-errormessages-10.0.29-20.23.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12:mariadb-tools-10.0.29-20.23.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 4,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:L/AC:H/PR:H/UI:R/S:U/C:N/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "SUSE Linux Enterprise Server 12-LTSS:libmysqlclient-devel-10.0.29-20.23.1.ppc64le",
            "SUSE Linux Enterprise Server 12-LTSS:libmysqlclient-devel-10.0.29-20.23.1.s390x",
            "SUSE Linux Enterprise Server 12-LTSS:libmysqlclient-devel-10.0.29-20.23.1.x86_64",
            "SUSE Linux Enterprise Server 12-LTSS:libmysqlclient18-10.0.29-20.23.1.ppc64le",
            "SUSE Linux Enterprise Server 12-LTSS:libmysqlclient18-10.0.29-20.23.1.s390x",
            "SUSE Linux Enterprise Server 12-LTSS:libmysqlclient18-10.0.29-20.23.1.x86_64",
            "SUSE Linux Enterprise Server 12-LTSS:libmysqlclient18-32bit-10.0.29-20.23.1.s390x",
            "SUSE Linux Enterprise Server 12-LTSS:libmysqlclient18-32bit-10.0.29-20.23.1.x86_64",
            "SUSE Linux Enterprise Server 12-LTSS:libmysqlclient_r18-10.0.29-20.23.1.ppc64le",
            "SUSE Linux Enterprise Server 12-LTSS:libmysqlclient_r18-10.0.29-20.23.1.s390x",
            "SUSE Linux Enterprise Server 12-LTSS:libmysqlclient_r18-10.0.29-20.23.1.x86_64",
            "SUSE Linux Enterprise Server 12-LTSS:libmysqld-devel-10.0.29-20.23.1.ppc64le",
            "SUSE Linux Enterprise Server 12-LTSS:libmysqld-devel-10.0.29-20.23.1.s390x",
            "SUSE Linux Enterprise Server 12-LTSS:libmysqld-devel-10.0.29-20.23.1.x86_64",
            "SUSE Linux Enterprise Server 12-LTSS:libmysqld18-10.0.29-20.23.1.ppc64le",
            "SUSE Linux Enterprise Server 12-LTSS:libmysqld18-10.0.29-20.23.1.s390x",
            "SUSE Linux Enterprise Server 12-LTSS:libmysqld18-10.0.29-20.23.1.x86_64",
            "SUSE Linux Enterprise Server 12-LTSS:mariadb-10.0.29-20.23.1.ppc64le",
            "SUSE Linux Enterprise Server 12-LTSS:mariadb-10.0.29-20.23.1.s390x",
            "SUSE Linux Enterprise Server 12-LTSS:mariadb-10.0.29-20.23.1.x86_64",
            "SUSE Linux Enterprise Server 12-LTSS:mariadb-client-10.0.29-20.23.1.ppc64le",
            "SUSE Linux Enterprise Server 12-LTSS:mariadb-client-10.0.29-20.23.1.s390x",
            "SUSE Linux Enterprise Server 12-LTSS:mariadb-client-10.0.29-20.23.1.x86_64",
            "SUSE Linux Enterprise Server 12-LTSS:mariadb-errormessages-10.0.29-20.23.1.ppc64le",
            "SUSE Linux Enterprise Server 12-LTSS:mariadb-errormessages-10.0.29-20.23.1.s390x",
            "SUSE Linux Enterprise Server 12-LTSS:mariadb-errormessages-10.0.29-20.23.1.x86_64",
            "SUSE Linux Enterprise Server 12-LTSS:mariadb-tools-10.0.29-20.23.1.ppc64le",
            "SUSE Linux Enterprise Server 12-LTSS:mariadb-tools-10.0.29-20.23.1.s390x",
            "SUSE Linux Enterprise Server 12-LTSS:mariadb-tools-10.0.29-20.23.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12:libmysqlclient-devel-10.0.29-20.23.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12:libmysqlclient18-10.0.29-20.23.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12:libmysqlclient18-32bit-10.0.29-20.23.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12:libmysqlclient_r18-10.0.29-20.23.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12:libmysqld-devel-10.0.29-20.23.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12:libmysqld18-10.0.29-20.23.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12:mariadb-10.0.29-20.23.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12:mariadb-client-10.0.29-20.23.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12:mariadb-errormessages-10.0.29-20.23.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12:mariadb-tools-10.0.29-20.23.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2017-02-07T12:16:05Z",
          "details": "low"
        }
      ],
      "title": "CVE-2017-3317"
    },
    {
      "cve": "CVE-2017-3318",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2017-3318"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Error Handling). Supported versions that are affected are 5.5.53 and earlier, 5.6.34 and earlier and 5.7.16 and earlier. Difficult to exploit vulnerability allows high privileged attacker with logon to the infrastructure where MySQL Server executes to compromise MySQL Server. Successful attacks require human interaction from a person other than the attacker. Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all MySQL Server accessible data. CVSS v3.0 Base Score 4.0 (Confidentiality impacts).",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Linux Enterprise Server 12-LTSS:libmysqlclient-devel-10.0.29-20.23.1.ppc64le",
          "SUSE Linux Enterprise Server 12-LTSS:libmysqlclient-devel-10.0.29-20.23.1.s390x",
          "SUSE Linux Enterprise Server 12-LTSS:libmysqlclient-devel-10.0.29-20.23.1.x86_64",
          "SUSE Linux Enterprise Server 12-LTSS:libmysqlclient18-10.0.29-20.23.1.ppc64le",
          "SUSE Linux Enterprise Server 12-LTSS:libmysqlclient18-10.0.29-20.23.1.s390x",
          "SUSE Linux Enterprise Server 12-LTSS:libmysqlclient18-10.0.29-20.23.1.x86_64",
          "SUSE Linux Enterprise Server 12-LTSS:libmysqlclient18-32bit-10.0.29-20.23.1.s390x",
          "SUSE Linux Enterprise Server 12-LTSS:libmysqlclient18-32bit-10.0.29-20.23.1.x86_64",
          "SUSE Linux Enterprise Server 12-LTSS:libmysqlclient_r18-10.0.29-20.23.1.ppc64le",
          "SUSE Linux Enterprise Server 12-LTSS:libmysqlclient_r18-10.0.29-20.23.1.s390x",
          "SUSE Linux Enterprise Server 12-LTSS:libmysqlclient_r18-10.0.29-20.23.1.x86_64",
          "SUSE Linux Enterprise Server 12-LTSS:libmysqld-devel-10.0.29-20.23.1.ppc64le",
          "SUSE Linux Enterprise Server 12-LTSS:libmysqld-devel-10.0.29-20.23.1.s390x",
          "SUSE Linux Enterprise Server 12-LTSS:libmysqld-devel-10.0.29-20.23.1.x86_64",
          "SUSE Linux Enterprise Server 12-LTSS:libmysqld18-10.0.29-20.23.1.ppc64le",
          "SUSE Linux Enterprise Server 12-LTSS:libmysqld18-10.0.29-20.23.1.s390x",
          "SUSE Linux Enterprise Server 12-LTSS:libmysqld18-10.0.29-20.23.1.x86_64",
          "SUSE Linux Enterprise Server 12-LTSS:mariadb-10.0.29-20.23.1.ppc64le",
          "SUSE Linux Enterprise Server 12-LTSS:mariadb-10.0.29-20.23.1.s390x",
          "SUSE Linux Enterprise Server 12-LTSS:mariadb-10.0.29-20.23.1.x86_64",
          "SUSE Linux Enterprise Server 12-LTSS:mariadb-client-10.0.29-20.23.1.ppc64le",
          "SUSE Linux Enterprise Server 12-LTSS:mariadb-client-10.0.29-20.23.1.s390x",
          "SUSE Linux Enterprise Server 12-LTSS:mariadb-client-10.0.29-20.23.1.x86_64",
          "SUSE Linux Enterprise Server 12-LTSS:mariadb-errormessages-10.0.29-20.23.1.ppc64le",
          "SUSE Linux Enterprise Server 12-LTSS:mariadb-errormessages-10.0.29-20.23.1.s390x",
          "SUSE Linux Enterprise Server 12-LTSS:mariadb-errormessages-10.0.29-20.23.1.x86_64",
          "SUSE Linux Enterprise Server 12-LTSS:mariadb-tools-10.0.29-20.23.1.ppc64le",
          "SUSE Linux Enterprise Server 12-LTSS:mariadb-tools-10.0.29-20.23.1.s390x",
          "SUSE Linux Enterprise Server 12-LTSS:mariadb-tools-10.0.29-20.23.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 12:libmysqlclient-devel-10.0.29-20.23.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 12:libmysqlclient18-10.0.29-20.23.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 12:libmysqlclient18-32bit-10.0.29-20.23.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 12:libmysqlclient_r18-10.0.29-20.23.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 12:libmysqld-devel-10.0.29-20.23.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 12:libmysqld18-10.0.29-20.23.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 12:mariadb-10.0.29-20.23.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 12:mariadb-client-10.0.29-20.23.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 12:mariadb-errormessages-10.0.29-20.23.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 12:mariadb-tools-10.0.29-20.23.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2017-3318",
          "url": "https://www.suse.com/security/cve/CVE-2017-3318"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1020868 for CVE-2017-3318",
          "url": "https://bugzilla.suse.com/1020868"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1020896 for CVE-2017-3318",
          "url": "https://bugzilla.suse.com/1020896"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Linux Enterprise Server 12-LTSS:libmysqlclient-devel-10.0.29-20.23.1.ppc64le",
            "SUSE Linux Enterprise Server 12-LTSS:libmysqlclient-devel-10.0.29-20.23.1.s390x",
            "SUSE Linux Enterprise Server 12-LTSS:libmysqlclient-devel-10.0.29-20.23.1.x86_64",
            "SUSE Linux Enterprise Server 12-LTSS:libmysqlclient18-10.0.29-20.23.1.ppc64le",
            "SUSE Linux Enterprise Server 12-LTSS:libmysqlclient18-10.0.29-20.23.1.s390x",
            "SUSE Linux Enterprise Server 12-LTSS:libmysqlclient18-10.0.29-20.23.1.x86_64",
            "SUSE Linux Enterprise Server 12-LTSS:libmysqlclient18-32bit-10.0.29-20.23.1.s390x",
            "SUSE Linux Enterprise Server 12-LTSS:libmysqlclient18-32bit-10.0.29-20.23.1.x86_64",
            "SUSE Linux Enterprise Server 12-LTSS:libmysqlclient_r18-10.0.29-20.23.1.ppc64le",
            "SUSE Linux Enterprise Server 12-LTSS:libmysqlclient_r18-10.0.29-20.23.1.s390x",
            "SUSE Linux Enterprise Server 12-LTSS:libmysqlclient_r18-10.0.29-20.23.1.x86_64",
            "SUSE Linux Enterprise Server 12-LTSS:libmysqld-devel-10.0.29-20.23.1.ppc64le",
            "SUSE Linux Enterprise Server 12-LTSS:libmysqld-devel-10.0.29-20.23.1.s390x",
            "SUSE Linux Enterprise Server 12-LTSS:libmysqld-devel-10.0.29-20.23.1.x86_64",
            "SUSE Linux Enterprise Server 12-LTSS:libmysqld18-10.0.29-20.23.1.ppc64le",
            "SUSE Linux Enterprise Server 12-LTSS:libmysqld18-10.0.29-20.23.1.s390x",
            "SUSE Linux Enterprise Server 12-LTSS:libmysqld18-10.0.29-20.23.1.x86_64",
            "SUSE Linux Enterprise Server 12-LTSS:mariadb-10.0.29-20.23.1.ppc64le",
            "SUSE Linux Enterprise Server 12-LTSS:mariadb-10.0.29-20.23.1.s390x",
            "SUSE Linux Enterprise Server 12-LTSS:mariadb-10.0.29-20.23.1.x86_64",
            "SUSE Linux Enterprise Server 12-LTSS:mariadb-client-10.0.29-20.23.1.ppc64le",
            "SUSE Linux Enterprise Server 12-LTSS:mariadb-client-10.0.29-20.23.1.s390x",
            "SUSE Linux Enterprise Server 12-LTSS:mariadb-client-10.0.29-20.23.1.x86_64",
            "SUSE Linux Enterprise Server 12-LTSS:mariadb-errormessages-10.0.29-20.23.1.ppc64le",
            "SUSE Linux Enterprise Server 12-LTSS:mariadb-errormessages-10.0.29-20.23.1.s390x",
            "SUSE Linux Enterprise Server 12-LTSS:mariadb-errormessages-10.0.29-20.23.1.x86_64",
            "SUSE Linux Enterprise Server 12-LTSS:mariadb-tools-10.0.29-20.23.1.ppc64le",
            "SUSE Linux Enterprise Server 12-LTSS:mariadb-tools-10.0.29-20.23.1.s390x",
            "SUSE Linux Enterprise Server 12-LTSS:mariadb-tools-10.0.29-20.23.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12:libmysqlclient-devel-10.0.29-20.23.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12:libmysqlclient18-10.0.29-20.23.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12:libmysqlclient18-32bit-10.0.29-20.23.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12:libmysqlclient_r18-10.0.29-20.23.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12:libmysqld-devel-10.0.29-20.23.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12:libmysqld18-10.0.29-20.23.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12:mariadb-10.0.29-20.23.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12:mariadb-client-10.0.29-20.23.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12:mariadb-errormessages-10.0.29-20.23.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12:mariadb-tools-10.0.29-20.23.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 4,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:L/AC:H/PR:H/UI:R/S:U/C:H/I:N/A:N",
            "version": "3.1"
          },
          "products": [
            "SUSE Linux Enterprise Server 12-LTSS:libmysqlclient-devel-10.0.29-20.23.1.ppc64le",
            "SUSE Linux Enterprise Server 12-LTSS:libmysqlclient-devel-10.0.29-20.23.1.s390x",
            "SUSE Linux Enterprise Server 12-LTSS:libmysqlclient-devel-10.0.29-20.23.1.x86_64",
            "SUSE Linux Enterprise Server 12-LTSS:libmysqlclient18-10.0.29-20.23.1.ppc64le",
            "SUSE Linux Enterprise Server 12-LTSS:libmysqlclient18-10.0.29-20.23.1.s390x",
            "SUSE Linux Enterprise Server 12-LTSS:libmysqlclient18-10.0.29-20.23.1.x86_64",
            "SUSE Linux Enterprise Server 12-LTSS:libmysqlclient18-32bit-10.0.29-20.23.1.s390x",
            "SUSE Linux Enterprise Server 12-LTSS:libmysqlclient18-32bit-10.0.29-20.23.1.x86_64",
            "SUSE Linux Enterprise Server 12-LTSS:libmysqlclient_r18-10.0.29-20.23.1.ppc64le",
            "SUSE Linux Enterprise Server 12-LTSS:libmysqlclient_r18-10.0.29-20.23.1.s390x",
            "SUSE Linux Enterprise Server 12-LTSS:libmysqlclient_r18-10.0.29-20.23.1.x86_64",
            "SUSE Linux Enterprise Server 12-LTSS:libmysqld-devel-10.0.29-20.23.1.ppc64le",
            "SUSE Linux Enterprise Server 12-LTSS:libmysqld-devel-10.0.29-20.23.1.s390x",
            "SUSE Linux Enterprise Server 12-LTSS:libmysqld-devel-10.0.29-20.23.1.x86_64",
            "SUSE Linux Enterprise Server 12-LTSS:libmysqld18-10.0.29-20.23.1.ppc64le",
            "SUSE Linux Enterprise Server 12-LTSS:libmysqld18-10.0.29-20.23.1.s390x",
            "SUSE Linux Enterprise Server 12-LTSS:libmysqld18-10.0.29-20.23.1.x86_64",
            "SUSE Linux Enterprise Server 12-LTSS:mariadb-10.0.29-20.23.1.ppc64le",
            "SUSE Linux Enterprise Server 12-LTSS:mariadb-10.0.29-20.23.1.s390x",
            "SUSE Linux Enterprise Server 12-LTSS:mariadb-10.0.29-20.23.1.x86_64",
            "SUSE Linux Enterprise Server 12-LTSS:mariadb-client-10.0.29-20.23.1.ppc64le",
            "SUSE Linux Enterprise Server 12-LTSS:mariadb-client-10.0.29-20.23.1.s390x",
            "SUSE Linux Enterprise Server 12-LTSS:mariadb-client-10.0.29-20.23.1.x86_64",
            "SUSE Linux Enterprise Server 12-LTSS:mariadb-errormessages-10.0.29-20.23.1.ppc64le",
            "SUSE Linux Enterprise Server 12-LTSS:mariadb-errormessages-10.0.29-20.23.1.s390x",
            "SUSE Linux Enterprise Server 12-LTSS:mariadb-errormessages-10.0.29-20.23.1.x86_64",
            "SUSE Linux Enterprise Server 12-LTSS:mariadb-tools-10.0.29-20.23.1.ppc64le",
            "SUSE Linux Enterprise Server 12-LTSS:mariadb-tools-10.0.29-20.23.1.s390x",
            "SUSE Linux Enterprise Server 12-LTSS:mariadb-tools-10.0.29-20.23.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12:libmysqlclient-devel-10.0.29-20.23.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12:libmysqlclient18-10.0.29-20.23.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12:libmysqlclient18-32bit-10.0.29-20.23.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12:libmysqlclient_r18-10.0.29-20.23.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12:libmysqld-devel-10.0.29-20.23.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12:libmysqld18-10.0.29-20.23.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12:mariadb-10.0.29-20.23.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12:mariadb-client-10.0.29-20.23.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12:mariadb-errormessages-10.0.29-20.23.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12:mariadb-tools-10.0.29-20.23.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2017-02-07T12:16:05Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2017-3318"
    }
  ]
}

CVE-2017-3238 (GCVE-0-2017-3238)

Vulnerability from cvelistv5

Published

2017-01-27 22:01

Modified

2024-10-09 19:51

Severity ?

CWE

CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Summary

Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Optimizer). Supported versions that are affected are 5.5.53 and earlier, 5.6.34 and earlier and 5.7.16 and earlier. Easily exploitable vulnerability allows low privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS v3.0 Base Score 6.5 (Availability impacts).

References

►

URL

Tags

	https://access.redhat.com/errata/RHSA-2017:2787	vendor-advisory, x_refsource_REDHAT
	https://security.gentoo.org/glsa/201702-17	vendor-advisory, x_refsource_GENTOO
	https://access.redhat.com/errata/RHSA-2018:0574	vendor-advisory, x_refsource_REDHAT
	https://security.gentoo.org/glsa/201702-18	vendor-advisory, x_refsource_GENTOO
	http://www.securitytracker.com/id/1037640	vdb-entry, x_refsource_SECTRACK
	https://access.redhat.com/errata/RHSA-2018:0279	vendor-advisory, x_refsource_REDHAT
	http://www.debian.org/security/2017/dsa-3767	vendor-advisory, x_refsource_DEBIAN
	http://www.securityfocus.com/bid/95571	vdb-entry, x_refsource_BID
	https://access.redhat.com/errata/RHSA-2017:2886	vendor-advisory, x_refsource_REDHAT
	http://www.oracle.com/technetwork/security-advisory/cpujan2017-2881727.html	x_refsource_CONFIRM
	http://www.debian.org/security/2017/dsa-3770	vendor-advisory, x_refsource_DEBIAN
	https://access.redhat.com/errata/RHSA-2017:2192	vendor-advisory, x_refsource_REDHAT

Impacted products

	Vendor	Product	Version
	Oracle	MySQL Server	Version: 5.5.53 and earlier Version: 5.6.34 and earlier Version: 5.7.16 and earlier

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-05T14:16:28.484Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "name": "RHSA-2017:2787",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2017:2787"
          },
          {
            "name": "GLSA-201702-17",
            "tags": [
              "vendor-advisory",
              "x_refsource_GENTOO",
              "x_transferred"
            ],
            "url": "https://security.gentoo.org/glsa/201702-17"
          },
          {
            "name": "RHSA-2018:0574",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2018:0574"
          },
          {
            "name": "GLSA-201702-18",
            "tags": [
              "vendor-advisory",
              "x_refsource_GENTOO",
              "x_transferred"
            ],
            "url": "https://security.gentoo.org/glsa/201702-18"
          },
          {
            "name": "1037640",
            "tags": [
              "vdb-entry",
              "x_refsource_SECTRACK",
              "x_transferred"
            ],
            "url": "http://www.securitytracker.com/id/1037640"
          },
          {
            "name": "RHSA-2018:0279",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2018:0279"
          },
          {
            "name": "DSA-3767",
            "tags": [
              "vendor-advisory",
              "x_refsource_DEBIAN",
              "x_transferred"
            ],
            "url": "http://www.debian.org/security/2017/dsa-3767"
          },
          {
            "name": "95571",
            "tags": [
              "vdb-entry",
              "x_refsource_BID",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/bid/95571"
          },
          {
            "name": "RHSA-2017:2886",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2017:2886"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://www.oracle.com/technetwork/security-advisory/cpujan2017-2881727.html"
          },
          {
            "name": "DSA-3770",
            "tags": [
              "vendor-advisory",
              "x_refsource_DEBIAN",
              "x_transferred"
            ],
            "url": "http://www.debian.org/security/2017/dsa-3770"
          },
          {
            "name": "RHSA-2017:2192",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2017:2192"
          }
        ],
        "title": "CVE Program Container"
      },
      {
        "metrics": [
          {
            "other": {
              "content": {
                "id": "CVE-2017-3238",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "partial"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2024-10-09T19:30:35.266321Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2024-10-09T19:51:59.764Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "MySQL Server",
          "vendor": "Oracle",
          "versions": [
            {
              "status": "affected",
              "version": "5.5.53 and earlier"
            },
            {
              "status": "affected",
              "version": "5.6.34 and earlier"
            },
            {
              "status": "affected",
              "version": "5.7.16 and earlier"
            }
          ]
        }
      ],
      "datePublic": "2017-01-17T00:00:00",
      "descriptions": [
        {
          "lang": "en",
          "value": "Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Optimizer). Supported versions that are affected are 5.5.53 and earlier, 5.6.34 and earlier and 5.7.16 and earlier. Easily exploitable vulnerability allows low privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS v3.0 Base Score 6.5 (Availability impacts)."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2018-03-22T09:57:01",
        "orgId": "43595867-4340-4103-b7a2-9a5208d29a85",
        "shortName": "oracle"
      },
      "references": [
        {
          "name": "RHSA-2017:2787",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2017:2787"
        },
        {
          "name": "GLSA-201702-17",
          "tags": [
            "vendor-advisory",
            "x_refsource_GENTOO"
          ],
          "url": "https://security.gentoo.org/glsa/201702-17"
        },
        {
          "name": "RHSA-2018:0574",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2018:0574"
        },
        {
          "name": "GLSA-201702-18",
          "tags": [
            "vendor-advisory",
            "x_refsource_GENTOO"
          ],
          "url": "https://security.gentoo.org/glsa/201702-18"
        },
        {
          "name": "1037640",
          "tags": [
            "vdb-entry",
            "x_refsource_SECTRACK"
          ],
          "url": "http://www.securitytracker.com/id/1037640"
        },
        {
          "name": "RHSA-2018:0279",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2018:0279"
        },
        {
          "name": "DSA-3767",
          "tags": [
            "vendor-advisory",
            "x_refsource_DEBIAN"
          ],
          "url": "http://www.debian.org/security/2017/dsa-3767"
        },
        {
          "name": "95571",
          "tags": [
            "vdb-entry",
            "x_refsource_BID"
          ],
          "url": "http://www.securityfocus.com/bid/95571"
        },
        {
          "name": "RHSA-2017:2886",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2017:2886"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://www.oracle.com/technetwork/security-advisory/cpujan2017-2881727.html"
        },
        {
          "name": "DSA-3770",
          "tags": [
            "vendor-advisory",
            "x_refsource_DEBIAN"
          ],
          "url": "http://www.debian.org/security/2017/dsa-3770"
        },
        {
          "name": "RHSA-2017:2192",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2017:2192"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "secalert_us@oracle.com",
          "ID": "CVE-2017-3238",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "MySQL Server",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "5.5.53 and earlier"
                          },
                          {
                            "version_value": "5.6.34 and earlier"
                          },
                          {
                            "version_value": "5.7.16 and earlier"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "Oracle"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Optimizer). Supported versions that are affected are 5.5.53 and earlier, 5.6.34 and earlier and 5.7.16 and earlier. Easily exploitable vulnerability allows low privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS v3.0 Base Score 6.5 (Availability impacts)."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "RHSA-2017:2787",
              "refsource": "REDHAT",
              "url": "https://access.redhat.com/errata/RHSA-2017:2787"
            },
            {
              "name": "GLSA-201702-17",
              "refsource": "GENTOO",
              "url": "https://security.gentoo.org/glsa/201702-17"
            },
            {
              "name": "RHSA-2018:0574",
              "refsource": "REDHAT",
              "url": "https://access.redhat.com/errata/RHSA-2018:0574"
            },
            {
              "name": "GLSA-201702-18",
              "refsource": "GENTOO",
              "url": "https://security.gentoo.org/glsa/201702-18"
            },
            {
              "name": "1037640",
              "refsource": "SECTRACK",
              "url": "http://www.securitytracker.com/id/1037640"
            },
            {
              "name": "RHSA-2018:0279",
              "refsource": "REDHAT",
              "url": "https://access.redhat.com/errata/RHSA-2018:0279"
            },
            {
              "name": "DSA-3767",
              "refsource": "DEBIAN",
              "url": "http://www.debian.org/security/2017/dsa-3767"
            },
            {
              "name": "95571",
              "refsource": "BID",
              "url": "http://www.securityfocus.com/bid/95571"
            },
            {
              "name": "RHSA-2017:2886",
              "refsource": "REDHAT",
              "url": "https://access.redhat.com/errata/RHSA-2017:2886"
            },
            {
              "name": "http://www.oracle.com/technetwork/security-advisory/cpujan2017-2881727.html",
              "refsource": "CONFIRM",
              "url": "http://www.oracle.com/technetwork/security-advisory/cpujan2017-2881727.html"
            },
            {
              "name": "DSA-3770",
              "refsource": "DEBIAN",
              "url": "http://www.debian.org/security/2017/dsa-3770"
            },
            {
              "name": "RHSA-2017:2192",
              "refsource": "REDHAT",
              "url": "https://access.redhat.com/errata/RHSA-2017:2192"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "43595867-4340-4103-b7a2-9a5208d29a85",
    "assignerShortName": "oracle",
    "cveId": "CVE-2017-3238",
    "datePublished": "2017-01-27T22:01:00",
    "dateReserved": "2016-12-06T00:00:00",
    "dateUpdated": "2024-10-09T19:51:59.764Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

CVE-2017-3312 (GCVE-0-2017-3312)

Vulnerability from cvelistv5

Published

2017-01-27 22:01

Modified

2024-10-08 20:34

Severity ?

CWE

CVSS:3.0/AV:L/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:H

Summary

Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Packaging). Supported versions that are affected are 5.5.53 and earlier, 5.6.34 and earlier and 5.7.16 and earlier. Difficult to exploit vulnerability allows low privileged attacker with logon to the infrastructure where MySQL Server executes to compromise MySQL Server. Successful attacks require human interaction from a person other than the attacker. Successful attacks of this vulnerability can result in takeover of MySQL Server. CVSS v3.0 Base Score 6.7 (Confidentiality, Integrity and Availability impacts).

References

►

URL

Tags

	https://access.redhat.com/errata/RHSA-2017:2787	vendor-advisory, x_refsource_REDHAT
	https://security.gentoo.org/glsa/201702-17	vendor-advisory, x_refsource_GENTOO
	http://www.securityfocus.com/bid/95491	vdb-entry, x_refsource_BID
	https://access.redhat.com/errata/RHSA-2018:0574	vendor-advisory, x_refsource_REDHAT
	https://security.gentoo.org/glsa/201702-18	vendor-advisory, x_refsource_GENTOO
	http://www.securitytracker.com/id/1037640	vdb-entry, x_refsource_SECTRACK
	https://access.redhat.com/errata/RHSA-2018:0279	vendor-advisory, x_refsource_REDHAT
	http://www.debian.org/security/2017/dsa-3767	vendor-advisory, x_refsource_DEBIAN
	https://access.redhat.com/errata/RHSA-2017:2886	vendor-advisory, x_refsource_REDHAT
	http://www.oracle.com/technetwork/security-advisory/cpujan2017-2881727.html	x_refsource_CONFIRM
	http://www.debian.org/security/2017/dsa-3770	vendor-advisory, x_refsource_DEBIAN
	https://access.redhat.com/errata/RHSA-2017:2192	vendor-advisory, x_refsource_REDHAT

Impacted products

	Vendor	Product	Version
	Oracle	MySQL Server	Version: 5.5.53 and earlier Version: 5.6.34 and earlier Version: 5.7.16 and earlier

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-05T14:23:33.717Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "name": "RHSA-2017:2787",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2017:2787"
          },
          {
            "name": "GLSA-201702-17",
            "tags": [
              "vendor-advisory",
              "x_refsource_GENTOO",
              "x_transferred"
            ],
            "url": "https://security.gentoo.org/glsa/201702-17"
          },
          {
            "name": "95491",
            "tags": [
              "vdb-entry",
              "x_refsource_BID",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/bid/95491"
          },
          {
            "name": "RHSA-2018:0574",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2018:0574"
          },
          {
            "name": "GLSA-201702-18",
            "tags": [
              "vendor-advisory",
              "x_refsource_GENTOO",
              "x_transferred"
            ],
            "url": "https://security.gentoo.org/glsa/201702-18"
          },
          {
            "name": "1037640",
            "tags": [
              "vdb-entry",
              "x_refsource_SECTRACK",
              "x_transferred"
            ],
            "url": "http://www.securitytracker.com/id/1037640"
          },
          {
            "name": "RHSA-2018:0279",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2018:0279"
          },
          {
            "name": "DSA-3767",
            "tags": [
              "vendor-advisory",
              "x_refsource_DEBIAN",
              "x_transferred"
            ],
            "url": "http://www.debian.org/security/2017/dsa-3767"
          },
          {
            "name": "RHSA-2017:2886",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2017:2886"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://www.oracle.com/technetwork/security-advisory/cpujan2017-2881727.html"
          },
          {
            "name": "DSA-3770",
            "tags": [
              "vendor-advisory",
              "x_refsource_DEBIAN",
              "x_transferred"
            ],
            "url": "http://www.debian.org/security/2017/dsa-3770"
          },
          {
            "name": "RHSA-2017:2192",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2017:2192"
          }
        ],
        "title": "CVE Program Container"
      },
      {
        "metrics": [
          {
            "other": {
              "content": {
                "id": "CVE-2017-3312",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "total"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2024-10-08T20:06:01.608682Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2024-10-08T20:34:53.133Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "MySQL Server",
          "vendor": "Oracle",
          "versions": [
            {
              "status": "affected",
              "version": "5.5.53 and earlier"
            },
            {
              "status": "affected",
              "version": "5.6.34 and earlier"
            },
            {
              "status": "affected",
              "version": "5.7.16 and earlier"
            }
          ]
        }
      ],
      "datePublic": "2017-01-17T00:00:00",
      "descriptions": [
        {
          "lang": "en",
          "value": "Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Packaging). Supported versions that are affected are 5.5.53 and earlier, 5.6.34 and earlier and 5.7.16 and earlier. Difficult to exploit vulnerability allows low privileged attacker with logon to the infrastructure where MySQL Server executes to compromise MySQL Server. Successful attacks require human interaction from a person other than the attacker. Successful attacks of this vulnerability can result in takeover of MySQL Server. CVSS v3.0 Base Score 6.7 (Confidentiality, Integrity and Availability impacts)."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "CVSS:3.0/AV:L/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:H",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2018-03-22T09:57:01",
        "orgId": "43595867-4340-4103-b7a2-9a5208d29a85",
        "shortName": "oracle"
      },
      "references": [
        {
          "name": "RHSA-2017:2787",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2017:2787"
        },
        {
          "name": "GLSA-201702-17",
          "tags": [
            "vendor-advisory",
            "x_refsource_GENTOO"
          ],
          "url": "https://security.gentoo.org/glsa/201702-17"
        },
        {
          "name": "95491",
          "tags": [
            "vdb-entry",
            "x_refsource_BID"
          ],
          "url": "http://www.securityfocus.com/bid/95491"
        },
        {
          "name": "RHSA-2018:0574",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2018:0574"
        },
        {
          "name": "GLSA-201702-18",
          "tags": [
            "vendor-advisory",
            "x_refsource_GENTOO"
          ],
          "url": "https://security.gentoo.org/glsa/201702-18"
        },
        {
          "name": "1037640",
          "tags": [
            "vdb-entry",
            "x_refsource_SECTRACK"
          ],
          "url": "http://www.securitytracker.com/id/1037640"
        },
        {
          "name": "RHSA-2018:0279",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2018:0279"
        },
        {
          "name": "DSA-3767",
          "tags": [
            "vendor-advisory",
            "x_refsource_DEBIAN"
          ],
          "url": "http://www.debian.org/security/2017/dsa-3767"
        },
        {
          "name": "RHSA-2017:2886",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2017:2886"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://www.oracle.com/technetwork/security-advisory/cpujan2017-2881727.html"
        },
        {
          "name": "DSA-3770",
          "tags": [
            "vendor-advisory",
            "x_refsource_DEBIAN"
          ],
          "url": "http://www.debian.org/security/2017/dsa-3770"
        },
        {
          "name": "RHSA-2017:2192",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2017:2192"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "secalert_us@oracle.com",
          "ID": "CVE-2017-3312",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "MySQL Server",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "5.5.53 and earlier"
                          },
                          {
                            "version_value": "5.6.34 and earlier"
                          },
                          {
                            "version_value": "5.7.16 and earlier"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "Oracle"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Packaging). Supported versions that are affected are 5.5.53 and earlier, 5.6.34 and earlier and 5.7.16 and earlier. Difficult to exploit vulnerability allows low privileged attacker with logon to the infrastructure where MySQL Server executes to compromise MySQL Server. Successful attacks require human interaction from a person other than the attacker. Successful attacks of this vulnerability can result in takeover of MySQL Server. CVSS v3.0 Base Score 6.7 (Confidentiality, Integrity and Availability impacts)."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "CVSS:3.0/AV:L/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:H"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "RHSA-2017:2787",
              "refsource": "REDHAT",
              "url": "https://access.redhat.com/errata/RHSA-2017:2787"
            },
            {
              "name": "GLSA-201702-17",
              "refsource": "GENTOO",
              "url": "https://security.gentoo.org/glsa/201702-17"
            },
            {
              "name": "95491",
              "refsource": "BID",
              "url": "http://www.securityfocus.com/bid/95491"
            },
            {
              "name": "RHSA-2018:0574",
              "refsource": "REDHAT",
              "url": "https://access.redhat.com/errata/RHSA-2018:0574"
            },
            {
              "name": "GLSA-201702-18",
              "refsource": "GENTOO",
              "url": "https://security.gentoo.org/glsa/201702-18"
            },
            {
              "name": "1037640",
              "refsource": "SECTRACK",
              "url": "http://www.securitytracker.com/id/1037640"
            },
            {
              "name": "RHSA-2018:0279",
              "refsource": "REDHAT",
              "url": "https://access.redhat.com/errata/RHSA-2018:0279"
            },
            {
              "name": "DSA-3767",
              "refsource": "DEBIAN",
              "url": "http://www.debian.org/security/2017/dsa-3767"
            },
            {
              "name": "RHSA-2017:2886",
              "refsource": "REDHAT",
              "url": "https://access.redhat.com/errata/RHSA-2017:2886"
            },
            {
              "name": "http://www.oracle.com/technetwork/security-advisory/cpujan2017-2881727.html",
              "refsource": "CONFIRM",
              "url": "http://www.oracle.com/technetwork/security-advisory/cpujan2017-2881727.html"
            },
            {
              "name": "DSA-3770",
              "refsource": "DEBIAN",
              "url": "http://www.debian.org/security/2017/dsa-3770"
            },
            {
              "name": "RHSA-2017:2192",
              "refsource": "REDHAT",
              "url": "https://access.redhat.com/errata/RHSA-2017:2192"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "43595867-4340-4103-b7a2-9a5208d29a85",
    "assignerShortName": "oracle",
    "cveId": "CVE-2017-3312",
    "datePublished": "2017-01-27T22:01:00",
    "dateReserved": "2016-12-06T00:00:00",
    "dateUpdated": "2024-10-08T20:34:53.133Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

CVE-2017-3258 (GCVE-0-2017-3258)

Vulnerability from cvelistv5

Published

2017-01-27 22:01

Modified

2024-10-09 19:40

Severity ?

CWE

CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Summary

Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: DDL). Supported versions that are affected are 5.5.53 and earlier, 5.6.34 and earlier and 5.7.16 and earlier. Easily exploitable vulnerability allows low privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS v3.0 Base Score 6.5 (Availability impacts).

References

►

URL

Tags

	https://access.redhat.com/errata/RHSA-2017:2787	vendor-advisory, x_refsource_REDHAT
	http://www.securityfocus.com/bid/95560	vdb-entry, x_refsource_BID
	https://security.gentoo.org/glsa/201702-17	vendor-advisory, x_refsource_GENTOO
	https://access.redhat.com/errata/RHSA-2018:0574	vendor-advisory, x_refsource_REDHAT
	https://security.gentoo.org/glsa/201702-18	vendor-advisory, x_refsource_GENTOO
	http://www.securitytracker.com/id/1037640	vdb-entry, x_refsource_SECTRACK
	https://access.redhat.com/errata/RHSA-2018:0279	vendor-advisory, x_refsource_REDHAT
	http://www.debian.org/security/2017/dsa-3767	vendor-advisory, x_refsource_DEBIAN
	https://access.redhat.com/errata/RHSA-2017:2886	vendor-advisory, x_refsource_REDHAT
	http://www.oracle.com/technetwork/security-advisory/cpujan2017-2881727.html	x_refsource_CONFIRM
	http://www.debian.org/security/2017/dsa-3770	vendor-advisory, x_refsource_DEBIAN
	https://access.redhat.com/errata/RHSA-2017:2192	vendor-advisory, x_refsource_REDHAT

Impacted products

	Vendor	Product	Version
	Oracle	MySQL Server	Version: 5.5.53 and earlier Version: 5.6.34 and earlier Version: 5.7.16 and earlier

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-05T14:23:33.139Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "name": "RHSA-2017:2787",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2017:2787"
          },
          {
            "name": "95560",
            "tags": [
              "vdb-entry",
              "x_refsource_BID",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/bid/95560"
          },
          {
            "name": "GLSA-201702-17",
            "tags": [
              "vendor-advisory",
              "x_refsource_GENTOO",
              "x_transferred"
            ],
            "url": "https://security.gentoo.org/glsa/201702-17"
          },
          {
            "name": "RHSA-2018:0574",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2018:0574"
          },
          {
            "name": "GLSA-201702-18",
            "tags": [
              "vendor-advisory",
              "x_refsource_GENTOO",
              "x_transferred"
            ],
            "url": "https://security.gentoo.org/glsa/201702-18"
          },
          {
            "name": "1037640",
            "tags": [
              "vdb-entry",
              "x_refsource_SECTRACK",
              "x_transferred"
            ],
            "url": "http://www.securitytracker.com/id/1037640"
          },
          {
            "name": "RHSA-2018:0279",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2018:0279"
          },
          {
            "name": "DSA-3767",
            "tags": [
              "vendor-advisory",
              "x_refsource_DEBIAN",
              "x_transferred"
            ],
            "url": "http://www.debian.org/security/2017/dsa-3767"
          },
          {
            "name": "RHSA-2017:2886",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2017:2886"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://www.oracle.com/technetwork/security-advisory/cpujan2017-2881727.html"
          },
          {
            "name": "DSA-3770",
            "tags": [
              "vendor-advisory",
              "x_refsource_DEBIAN",
              "x_transferred"
            ],
            "url": "http://www.debian.org/security/2017/dsa-3770"
          },
          {
            "name": "RHSA-2017:2192",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2017:2192"
          }
        ],
        "title": "CVE Program Container"
      },
      {
        "metrics": [
          {
            "other": {
              "content": {
                "id": "CVE-2017-3258",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "partial"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2024-10-09T19:30:10.918309Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2024-10-09T19:40:31.532Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "MySQL Server",
          "vendor": "Oracle",
          "versions": [
            {
              "status": "affected",
              "version": "5.5.53 and earlier"
            },
            {
              "status": "affected",
              "version": "5.6.34 and earlier"
            },
            {
              "status": "affected",
              "version": "5.7.16 and earlier"
            }
          ]
        }
      ],
      "datePublic": "2017-01-17T00:00:00",
      "descriptions": [
        {
          "lang": "en",
          "value": "Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: DDL). Supported versions that are affected are 5.5.53 and earlier, 5.6.34 and earlier and 5.7.16 and earlier. Easily exploitable vulnerability allows low privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS v3.0 Base Score 6.5 (Availability impacts)."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2018-03-22T09:57:01",
        "orgId": "43595867-4340-4103-b7a2-9a5208d29a85",
        "shortName": "oracle"
      },
      "references": [
        {
          "name": "RHSA-2017:2787",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2017:2787"
        },
        {
          "name": "95560",
          "tags": [
            "vdb-entry",
            "x_refsource_BID"
          ],
          "url": "http://www.securityfocus.com/bid/95560"
        },
        {
          "name": "GLSA-201702-17",
          "tags": [
            "vendor-advisory",
            "x_refsource_GENTOO"
          ],
          "url": "https://security.gentoo.org/glsa/201702-17"
        },
        {
          "name": "RHSA-2018:0574",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2018:0574"
        },
        {
          "name": "GLSA-201702-18",
          "tags": [
            "vendor-advisory",
            "x_refsource_GENTOO"
          ],
          "url": "https://security.gentoo.org/glsa/201702-18"
        },
        {
          "name": "1037640",
          "tags": [
            "vdb-entry",
            "x_refsource_SECTRACK"
          ],
          "url": "http://www.securitytracker.com/id/1037640"
        },
        {
          "name": "RHSA-2018:0279",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2018:0279"
        },
        {
          "name": "DSA-3767",
          "tags": [
            "vendor-advisory",
            "x_refsource_DEBIAN"
          ],
          "url": "http://www.debian.org/security/2017/dsa-3767"
        },
        {
          "name": "RHSA-2017:2886",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2017:2886"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://www.oracle.com/technetwork/security-advisory/cpujan2017-2881727.html"
        },
        {
          "name": "DSA-3770",
          "tags": [
            "vendor-advisory",
            "x_refsource_DEBIAN"
          ],
          "url": "http://www.debian.org/security/2017/dsa-3770"
        },
        {
          "name": "RHSA-2017:2192",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2017:2192"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "secalert_us@oracle.com",
          "ID": "CVE-2017-3258",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "MySQL Server",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "5.5.53 and earlier"
                          },
                          {
                            "version_value": "5.6.34 and earlier"
                          },
                          {
                            "version_value": "5.7.16 and earlier"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "Oracle"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: DDL). Supported versions that are affected are 5.5.53 and earlier, 5.6.34 and earlier and 5.7.16 and earlier. Easily exploitable vulnerability allows low privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS v3.0 Base Score 6.5 (Availability impacts)."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "RHSA-2017:2787",
              "refsource": "REDHAT",
              "url": "https://access.redhat.com/errata/RHSA-2017:2787"
            },
            {
              "name": "95560",
              "refsource": "BID",
              "url": "http://www.securityfocus.com/bid/95560"
            },
            {
              "name": "GLSA-201702-17",
              "refsource": "GENTOO",
              "url": "https://security.gentoo.org/glsa/201702-17"
            },
            {
              "name": "RHSA-2018:0574",
              "refsource": "REDHAT",
              "url": "https://access.redhat.com/errata/RHSA-2018:0574"
            },
            {
              "name": "GLSA-201702-18",
              "refsource": "GENTOO",
              "url": "https://security.gentoo.org/glsa/201702-18"
            },
            {
              "name": "1037640",
              "refsource": "SECTRACK",
              "url": "http://www.securitytracker.com/id/1037640"
            },
            {
              "name": "RHSA-2018:0279",
              "refsource": "REDHAT",
              "url": "https://access.redhat.com/errata/RHSA-2018:0279"
            },
            {
              "name": "DSA-3767",
              "refsource": "DEBIAN",
              "url": "http://www.debian.org/security/2017/dsa-3767"
            },
            {
              "name": "RHSA-2017:2886",
              "refsource": "REDHAT",
              "url": "https://access.redhat.com/errata/RHSA-2017:2886"
            },
            {
              "name": "http://www.oracle.com/technetwork/security-advisory/cpujan2017-2881727.html",
              "refsource": "CONFIRM",
              "url": "http://www.oracle.com/technetwork/security-advisory/cpujan2017-2881727.html"
            },
            {
              "name": "DSA-3770",
              "refsource": "DEBIAN",
              "url": "http://www.debian.org/security/2017/dsa-3770"
            },
            {
              "name": "RHSA-2017:2192",
              "refsource": "REDHAT",
              "url": "https://access.redhat.com/errata/RHSA-2017:2192"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "43595867-4340-4103-b7a2-9a5208d29a85",
    "assignerShortName": "oracle",
    "cveId": "CVE-2017-3258",
    "datePublished": "2017-01-27T22:01:00",
    "dateReserved": "2016-12-06T00:00:00",
    "dateUpdated": "2024-10-09T19:40:31.532Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

CVE-2017-3265 (GCVE-0-2017-3265)

Vulnerability from cvelistv5

Published

2017-01-27 22:01

Modified

2024-10-09 19:38

Severity ?

CWE

CVSS:3.0/AV:L/AC:H/PR:H/UI:R/S:U/C:H/I:N/A:H

Summary

Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Packaging). Supported versions that are affected are 5.5.53 and earlier, 5.6.34 and earlier and 5.7.16 and earlier. Difficult to exploit vulnerability allows high privileged attacker with logon to the infrastructure where MySQL Server executes to compromise MySQL Server. Successful attacks require human interaction from a person other than the attacker. Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all MySQL Server accessible data and unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS v3.0 Base Score 5.6 (Confidentiality and Availability impacts).

References

►

URL

Tags

	https://access.redhat.com/errata/RHSA-2017:2787	vendor-advisory, x_refsource_REDHAT
	https://security.gentoo.org/glsa/201702-17	vendor-advisory, x_refsource_GENTOO
	https://access.redhat.com/errata/RHSA-2018:0574	vendor-advisory, x_refsource_REDHAT
	https://security.gentoo.org/glsa/201702-18	vendor-advisory, x_refsource_GENTOO
	http://www.securitytracker.com/id/1037640	vdb-entry, x_refsource_SECTRACK
	http://www.securityfocus.com/bid/95520	vdb-entry, x_refsource_BID
	https://access.redhat.com/errata/RHSA-2018:0279	vendor-advisory, x_refsource_REDHAT
	http://www.debian.org/security/2017/dsa-3767	vendor-advisory, x_refsource_DEBIAN
	http://www.oracle.com/technetwork/security-advisory/cpujan2017-2881727.html	x_refsource_CONFIRM
	http://www.debian.org/security/2017/dsa-3770	vendor-advisory, x_refsource_DEBIAN
	https://access.redhat.com/errata/RHSA-2017:2192	vendor-advisory, x_refsource_REDHAT

Impacted products

	Vendor	Product	Version
	Oracle	MySQL Server	Version: 5.5.53 and earlier Version: 5.6.34 and earlier Version: 5.7.16 and earlier

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-05T14:23:34.379Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "name": "RHSA-2017:2787",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2017:2787"
          },
          {
            "name": "GLSA-201702-17",
            "tags": [
              "vendor-advisory",
              "x_refsource_GENTOO",
              "x_transferred"
            ],
            "url": "https://security.gentoo.org/glsa/201702-17"
          },
          {
            "name": "RHSA-2018:0574",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2018:0574"
          },
          {
            "name": "GLSA-201702-18",
            "tags": [
              "vendor-advisory",
              "x_refsource_GENTOO",
              "x_transferred"
            ],
            "url": "https://security.gentoo.org/glsa/201702-18"
          },
          {
            "name": "1037640",
            "tags": [
              "vdb-entry",
              "x_refsource_SECTRACK",
              "x_transferred"
            ],
            "url": "http://www.securitytracker.com/id/1037640"
          },
          {
            "name": "95520",
            "tags": [
              "vdb-entry",
              "x_refsource_BID",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/bid/95520"
          },
          {
            "name": "RHSA-2018:0279",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2018:0279"
          },
          {
            "name": "DSA-3767",
            "tags": [
              "vendor-advisory",
              "x_refsource_DEBIAN",
              "x_transferred"
            ],
            "url": "http://www.debian.org/security/2017/dsa-3767"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://www.oracle.com/technetwork/security-advisory/cpujan2017-2881727.html"
          },
          {
            "name": "DSA-3770",
            "tags": [
              "vendor-advisory",
              "x_refsource_DEBIAN",
              "x_transferred"
            ],
            "url": "http://www.debian.org/security/2017/dsa-3770"
          },
          {
            "name": "RHSA-2017:2192",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2017:2192"
          }
        ],
        "title": "CVE Program Container"
      },
      {
        "metrics": [
          {
            "other": {
              "content": {
                "id": "CVE-2017-3265",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "partial"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2024-10-09T19:30:05.396220Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2024-10-09T19:38:08.370Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "MySQL Server",
          "vendor": "Oracle",
          "versions": [
            {
              "status": "affected",
              "version": "5.5.53 and earlier"
            },
            {
              "status": "affected",
              "version": "5.6.34 and earlier"
            },
            {
              "status": "affected",
              "version": "5.7.16 and earlier"
            }
          ]
        }
      ],
      "datePublic": "2017-01-17T00:00:00",
      "descriptions": [
        {
          "lang": "en",
          "value": "Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Packaging). Supported versions that are affected are 5.5.53 and earlier, 5.6.34 and earlier and 5.7.16 and earlier. Difficult to exploit vulnerability allows high privileged attacker with logon to the infrastructure where MySQL Server executes to compromise MySQL Server. Successful attacks require human interaction from a person other than the attacker. Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all MySQL Server accessible data and unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS v3.0 Base Score 5.6 (Confidentiality and Availability impacts)."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "CVSS:3.0/AV:L/AC:H/PR:H/UI:R/S:U/C:H/I:N/A:H",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2018-03-22T09:57:01",
        "orgId": "43595867-4340-4103-b7a2-9a5208d29a85",
        "shortName": "oracle"
      },
      "references": [
        {
          "name": "RHSA-2017:2787",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2017:2787"
        },
        {
          "name": "GLSA-201702-17",
          "tags": [
            "vendor-advisory",
            "x_refsource_GENTOO"
          ],
          "url": "https://security.gentoo.org/glsa/201702-17"
        },
        {
          "name": "RHSA-2018:0574",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2018:0574"
        },
        {
          "name": "GLSA-201702-18",
          "tags": [
            "vendor-advisory",
            "x_refsource_GENTOO"
          ],
          "url": "https://security.gentoo.org/glsa/201702-18"
        },
        {
          "name": "1037640",
          "tags": [
            "vdb-entry",
            "x_refsource_SECTRACK"
          ],
          "url": "http://www.securitytracker.com/id/1037640"
        },
        {
          "name": "95520",
          "tags": [
            "vdb-entry",
            "x_refsource_BID"
          ],
          "url": "http://www.securityfocus.com/bid/95520"
        },
        {
          "name": "RHSA-2018:0279",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2018:0279"
        },
        {
          "name": "DSA-3767",
          "tags": [
            "vendor-advisory",
            "x_refsource_DEBIAN"
          ],
          "url": "http://www.debian.org/security/2017/dsa-3767"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://www.oracle.com/technetwork/security-advisory/cpujan2017-2881727.html"
        },
        {
          "name": "DSA-3770",
          "tags": [
            "vendor-advisory",
            "x_refsource_DEBIAN"
          ],
          "url": "http://www.debian.org/security/2017/dsa-3770"
        },
        {
          "name": "RHSA-2017:2192",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2017:2192"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "secalert_us@oracle.com",
          "ID": "CVE-2017-3265",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "MySQL Server",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "5.5.53 and earlier"
                          },
                          {
                            "version_value": "5.6.34 and earlier"
                          },
                          {
                            "version_value": "5.7.16 and earlier"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "Oracle"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Packaging). Supported versions that are affected are 5.5.53 and earlier, 5.6.34 and earlier and 5.7.16 and earlier. Difficult to exploit vulnerability allows high privileged attacker with logon to the infrastructure where MySQL Server executes to compromise MySQL Server. Successful attacks require human interaction from a person other than the attacker. Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all MySQL Server accessible data and unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS v3.0 Base Score 5.6 (Confidentiality and Availability impacts)."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "CVSS:3.0/AV:L/AC:H/PR:H/UI:R/S:U/C:H/I:N/A:H"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "RHSA-2017:2787",
              "refsource": "REDHAT",
              "url": "https://access.redhat.com/errata/RHSA-2017:2787"
            },
            {
              "name": "GLSA-201702-17",
              "refsource": "GENTOO",
              "url": "https://security.gentoo.org/glsa/201702-17"
            },
            {
              "name": "RHSA-2018:0574",
              "refsource": "REDHAT",
              "url": "https://access.redhat.com/errata/RHSA-2018:0574"
            },
            {
              "name": "GLSA-201702-18",
              "refsource": "GENTOO",
              "url": "https://security.gentoo.org/glsa/201702-18"
            },
            {
              "name": "1037640",
              "refsource": "SECTRACK",
              "url": "http://www.securitytracker.com/id/1037640"
            },
            {
              "name": "95520",
              "refsource": "BID",
              "url": "http://www.securityfocus.com/bid/95520"
            },
            {
              "name": "RHSA-2018:0279",
              "refsource": "REDHAT",
              "url": "https://access.redhat.com/errata/RHSA-2018:0279"
            },
            {
              "name": "DSA-3767",
              "refsource": "DEBIAN",
              "url": "http://www.debian.org/security/2017/dsa-3767"
            },
            {
              "name": "http://www.oracle.com/technetwork/security-advisory/cpujan2017-2881727.html",
              "refsource": "CONFIRM",
              "url": "http://www.oracle.com/technetwork/security-advisory/cpujan2017-2881727.html"
            },
            {
              "name": "DSA-3770",
              "refsource": "DEBIAN",
              "url": "http://www.debian.org/security/2017/dsa-3770"
            },
            {
              "name": "RHSA-2017:2192",
              "refsource": "REDHAT",
              "url": "https://access.redhat.com/errata/RHSA-2017:2192"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "43595867-4340-4103-b7a2-9a5208d29a85",
    "assignerShortName": "oracle",
    "cveId": "CVE-2017-3265",
    "datePublished": "2017-01-27T22:01:00",
    "dateReserved": "2016-12-06T00:00:00",
    "dateUpdated": "2024-10-09T19:38:08.370Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

CVE-2017-3244 (GCVE-0-2017-3244)

Vulnerability from cvelistv5

Published

2017-01-27 22:01

Modified

2024-10-09 19:50

Severity ?

CWE

CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Summary

Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: DML). Supported versions that are affected are 5.5.53 and earlier, 5.6.34 and earlier and 5.7.16 and earlier. Easily exploitable vulnerability allows low privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS v3.0 Base Score 6.5 (Availability impacts).

References

►

URL

Tags

	https://access.redhat.com/errata/RHSA-2017:2787	vendor-advisory, x_refsource_REDHAT
	https://security.gentoo.org/glsa/201702-17	vendor-advisory, x_refsource_GENTOO
	https://access.redhat.com/errata/RHSA-2018:0574	vendor-advisory, x_refsource_REDHAT
	https://security.gentoo.org/glsa/201702-18	vendor-advisory, x_refsource_GENTOO
	http://www.securitytracker.com/id/1037640	vdb-entry, x_refsource_SECTRACK
	http://www.securityfocus.com/bid/95565	vdb-entry, x_refsource_BID
	https://access.redhat.com/errata/RHSA-2018:0279	vendor-advisory, x_refsource_REDHAT
	http://www.debian.org/security/2017/dsa-3767	vendor-advisory, x_refsource_DEBIAN
	https://access.redhat.com/errata/RHSA-2017:2886	vendor-advisory, x_refsource_REDHAT
	http://www.oracle.com/technetwork/security-advisory/cpujan2017-2881727.html	x_refsource_CONFIRM
	http://www.debian.org/security/2017/dsa-3770	vendor-advisory, x_refsource_DEBIAN
	https://access.redhat.com/errata/RHSA-2017:2192	vendor-advisory, x_refsource_REDHAT

Impacted products

	Vendor	Product	Version
	Oracle	MySQL Server	Version: 5.5.53 and earlier Version: 5.6.34 and earlier Version: 5.7.16 and earlier

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-05T14:23:32.874Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "name": "RHSA-2017:2787",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2017:2787"
          },
          {
            "name": "GLSA-201702-17",
            "tags": [
              "vendor-advisory",
              "x_refsource_GENTOO",
              "x_transferred"
            ],
            "url": "https://security.gentoo.org/glsa/201702-17"
          },
          {
            "name": "RHSA-2018:0574",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2018:0574"
          },
          {
            "name": "GLSA-201702-18",
            "tags": [
              "vendor-advisory",
              "x_refsource_GENTOO",
              "x_transferred"
            ],
            "url": "https://security.gentoo.org/glsa/201702-18"
          },
          {
            "name": "1037640",
            "tags": [
              "vdb-entry",
              "x_refsource_SECTRACK",
              "x_transferred"
            ],
            "url": "http://www.securitytracker.com/id/1037640"
          },
          {
            "name": "95565",
            "tags": [
              "vdb-entry",
              "x_refsource_BID",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/bid/95565"
          },
          {
            "name": "RHSA-2018:0279",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2018:0279"
          },
          {
            "name": "DSA-3767",
            "tags": [
              "vendor-advisory",
              "x_refsource_DEBIAN",
              "x_transferred"
            ],
            "url": "http://www.debian.org/security/2017/dsa-3767"
          },
          {
            "name": "RHSA-2017:2886",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2017:2886"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://www.oracle.com/technetwork/security-advisory/cpujan2017-2881727.html"
          },
          {
            "name": "DSA-3770",
            "tags": [
              "vendor-advisory",
              "x_refsource_DEBIAN",
              "x_transferred"
            ],
            "url": "http://www.debian.org/security/2017/dsa-3770"
          },
          {
            "name": "RHSA-2017:2192",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2017:2192"
          }
        ],
        "title": "CVE Program Container"
      },
      {
        "metrics": [
          {
            "other": {
              "content": {
                "id": "CVE-2017-3244",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "partial"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2024-10-09T19:30:25.842291Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2024-10-09T19:50:06.509Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "MySQL Server",
          "vendor": "Oracle",
          "versions": [
            {
              "status": "affected",
              "version": "5.5.53 and earlier"
            },
            {
              "status": "affected",
              "version": "5.6.34 and earlier"
            },
            {
              "status": "affected",
              "version": "5.7.16 and earlier"
            }
          ]
        }
      ],
      "datePublic": "2017-01-17T00:00:00",
      "descriptions": [
        {
          "lang": "en",
          "value": "Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: DML). Supported versions that are affected are 5.5.53 and earlier, 5.6.34 and earlier and 5.7.16 and earlier. Easily exploitable vulnerability allows low privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS v3.0 Base Score 6.5 (Availability impacts)."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2018-03-22T09:57:01",
        "orgId": "43595867-4340-4103-b7a2-9a5208d29a85",
        "shortName": "oracle"
      },
      "references": [
        {
          "name": "RHSA-2017:2787",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2017:2787"
        },
        {
          "name": "GLSA-201702-17",
          "tags": [
            "vendor-advisory",
            "x_refsource_GENTOO"
          ],
          "url": "https://security.gentoo.org/glsa/201702-17"
        },
        {
          "name": "RHSA-2018:0574",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2018:0574"
        },
        {
          "name": "GLSA-201702-18",
          "tags": [
            "vendor-advisory",
            "x_refsource_GENTOO"
          ],
          "url": "https://security.gentoo.org/glsa/201702-18"
        },
        {
          "name": "1037640",
          "tags": [
            "vdb-entry",
            "x_refsource_SECTRACK"
          ],
          "url": "http://www.securitytracker.com/id/1037640"
        },
        {
          "name": "95565",
          "tags": [
            "vdb-entry",
            "x_refsource_BID"
          ],
          "url": "http://www.securityfocus.com/bid/95565"
        },
        {
          "name": "RHSA-2018:0279",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2018:0279"
        },
        {
          "name": "DSA-3767",
          "tags": [
            "vendor-advisory",
            "x_refsource_DEBIAN"
          ],
          "url": "http://www.debian.org/security/2017/dsa-3767"
        },
        {
          "name": "RHSA-2017:2886",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2017:2886"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://www.oracle.com/technetwork/security-advisory/cpujan2017-2881727.html"
        },
        {
          "name": "DSA-3770",
          "tags": [
            "vendor-advisory",
            "x_refsource_DEBIAN"
          ],
          "url": "http://www.debian.org/security/2017/dsa-3770"
        },
        {
          "name": "RHSA-2017:2192",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2017:2192"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "secalert_us@oracle.com",
          "ID": "CVE-2017-3244",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "MySQL Server",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "5.5.53 and earlier"
                          },
                          {
                            "version_value": "5.6.34 and earlier"
                          },
                          {
                            "version_value": "5.7.16 and earlier"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "Oracle"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: DML). Supported versions that are affected are 5.5.53 and earlier, 5.6.34 and earlier and 5.7.16 and earlier. Easily exploitable vulnerability allows low privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS v3.0 Base Score 6.5 (Availability impacts)."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "RHSA-2017:2787",
              "refsource": "REDHAT",
              "url": "https://access.redhat.com/errata/RHSA-2017:2787"
            },
            {
              "name": "GLSA-201702-17",
              "refsource": "GENTOO",
              "url": "https://security.gentoo.org/glsa/201702-17"
            },
            {
              "name": "RHSA-2018:0574",
              "refsource": "REDHAT",
              "url": "https://access.redhat.com/errata/RHSA-2018:0574"
            },
            {
              "name": "GLSA-201702-18",
              "refsource": "GENTOO",
              "url": "https://security.gentoo.org/glsa/201702-18"
            },
            {
              "name": "1037640",
              "refsource": "SECTRACK",
              "url": "http://www.securitytracker.com/id/1037640"
            },
            {
              "name": "95565",
              "refsource": "BID",
              "url": "http://www.securityfocus.com/bid/95565"
            },
            {
              "name": "RHSA-2018:0279",
              "refsource": "REDHAT",
              "url": "https://access.redhat.com/errata/RHSA-2018:0279"
            },
            {
              "name": "DSA-3767",
              "refsource": "DEBIAN",
              "url": "http://www.debian.org/security/2017/dsa-3767"
            },
            {
              "name": "RHSA-2017:2886",
              "refsource": "REDHAT",
              "url": "https://access.redhat.com/errata/RHSA-2017:2886"
            },
            {
              "name": "http://www.oracle.com/technetwork/security-advisory/cpujan2017-2881727.html",
              "refsource": "CONFIRM",
              "url": "http://www.oracle.com/technetwork/security-advisory/cpujan2017-2881727.html"
            },
            {
              "name": "DSA-3770",
              "refsource": "DEBIAN",
              "url": "http://www.debian.org/security/2017/dsa-3770"
            },
            {
              "name": "RHSA-2017:2192",
              "refsource": "REDHAT",
              "url": "https://access.redhat.com/errata/RHSA-2017:2192"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "43595867-4340-4103-b7a2-9a5208d29a85",
    "assignerShortName": "oracle",
    "cveId": "CVE-2017-3244",
    "datePublished": "2017-01-27T22:01:00",
    "dateReserved": "2016-12-06T00:00:00",
    "dateUpdated": "2024-10-09T19:50:06.509Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

CVE-2016-6664 (GCVE-0-2016-6664)

Vulnerability from cvelistv5

Published

2016-12-13 21:00

Modified

2024-08-06 01:36

Severity ?

CWE

Summary

mysqld_safe in Oracle MySQL through 5.5.51, 5.6.x through 5.6.32, and 5.7.x through 5.7.14; MariaDB; Percona Server before 5.5.51-38.2, 5.6.x before 5.6.32-78-1, and 5.7.x before 5.7.14-8; and Percona XtraDB Cluster before 5.5.41-37.0, 5.6.x before 5.6.32-25.17, and 5.7.x before 5.7.14-26.17, when using file-based logging, allows local users with access to the mysql account to gain root privileges via a symlink attack on error logs and possibly other files.

References

►

URL

Tags

	http://rhn.redhat.com/errata/RHSA-2016-2749.html	vendor-advisory, x_refsource_REDHAT
	http://seclists.org/fulldisclosure/2016/Nov/4	mailing-list, x_refsource_FULLDISC
	http://www.securityfocus.com/bid/93612	vdb-entry, x_refsource_BID
	https://www.percona.com/blog/2016/11/02/percona-responds-to-cve-2016-6663-and-cve-2016-6664/	x_refsource_CONFIRM
	https://access.redhat.com/errata/RHSA-2018:0574	vendor-advisory, x_refsource_REDHAT
	https://security.gentoo.org/glsa/201702-18	vendor-advisory, x_refsource_GENTOO
	http://www.oracle.com/technetwork/security-advisory/cpuoct2016-2881722.html	x_refsource_CONFIRM
	http://www.securityfocus.com/archive/1/539695/100/0/threaded	mailing-list, x_refsource_BUGTRAQ
	http://rhn.redhat.com/errata/RHSA-2016-2130.html	vendor-advisory, x_refsource_REDHAT
	http://packetstormsecurity.com/files/139491/MySQL-MariaDB-PerconaDB-Root-Privilege-Escalation.html	x_refsource_MISC
	https://www.exploit-db.com/exploits/40679/	exploit, x_refsource_EXPLOIT-DB
	http://legalhackers.com/advisories/MySQL-Maria-Percona-RootPrivEsc-CVE-2016-6664-5617-Exploit.html	x_refsource_MISC
	https://access.redhat.com/errata/RHSA-2018:0279	vendor-advisory, x_refsource_REDHAT
	http://www.debian.org/security/2017/dsa-3770	vendor-advisory, x_refsource_DEBIAN
	https://access.redhat.com/errata/RHSA-2017:2192	vendor-advisory, x_refsource_REDHAT

Impacted products

	Vendor	Product	Version
	n/a	n/a	Version: n/a

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-06T01:36:29.471Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "name": "RHSA-2016:2749",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://rhn.redhat.com/errata/RHSA-2016-2749.html"
          },
          {
            "name": "20161101 MySQL / MariaDB / PerconaDB - Privilege Escalation / Race Condition Exploit [CVE-2016-6663 / OCVE-2016-5616]",
            "tags": [
              "mailing-list",
              "x_refsource_FULLDISC",
              "x_transferred"
            ],
            "url": "http://seclists.org/fulldisclosure/2016/Nov/4"
          },
          {
            "name": "93612",
            "tags": [
              "vdb-entry",
              "x_refsource_BID",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/bid/93612"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://www.percona.com/blog/2016/11/02/percona-responds-to-cve-2016-6663-and-cve-2016-6664/"
          },
          {
            "name": "RHSA-2018:0574",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2018:0574"
          },
          {
            "name": "GLSA-201702-18",
            "tags": [
              "vendor-advisory",
              "x_refsource_GENTOO",
              "x_transferred"
            ],
            "url": "https://security.gentoo.org/glsa/201702-18"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://www.oracle.com/technetwork/security-advisory/cpuoct2016-2881722.html"
          },
          {
            "name": "20161104 MySQL / MariaDB / PerconaDB - Root Privilege Escalation Exploit ( CVE-2016-6664 / CVE-2016-5617 )",
            "tags": [
              "mailing-list",
              "x_refsource_BUGTRAQ",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/archive/1/539695/100/0/threaded"
          },
          {
            "name": "RHSA-2016:2130",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://rhn.redhat.com/errata/RHSA-2016-2130.html"
          },
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "http://packetstormsecurity.com/files/139491/MySQL-MariaDB-PerconaDB-Root-Privilege-Escalation.html"
          },
          {
            "name": "40679",
            "tags": [
              "exploit",
              "x_refsource_EXPLOIT-DB",
              "x_transferred"
            ],
            "url": "https://www.exploit-db.com/exploits/40679/"
          },
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "http://legalhackers.com/advisories/MySQL-Maria-Percona-RootPrivEsc-CVE-2016-6664-5617-Exploit.html"
          },
          {
            "name": "RHSA-2018:0279",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2018:0279"
          },
          {
            "name": "DSA-3770",
            "tags": [
              "vendor-advisory",
              "x_refsource_DEBIAN",
              "x_transferred"
            ],
            "url": "http://www.debian.org/security/2017/dsa-3770"
          },
          {
            "name": "RHSA-2017:2192",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2017:2192"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "datePublic": "2016-01-11T00:00:00",
      "descriptions": [
        {
          "lang": "en",
          "value": "mysqld_safe in Oracle MySQL through 5.5.51, 5.6.x through 5.6.32, and 5.7.x through 5.7.14; MariaDB; Percona Server before 5.5.51-38.2, 5.6.x before 5.6.32-78-1, and 5.7.x before 5.7.14-8; and Percona XtraDB Cluster before 5.5.41-37.0, 5.6.x before 5.6.32-25.17, and 5.7.x before 5.7.14-26.17, when using file-based logging, allows local users with access to the mysql account to gain root privileges via a symlink attack on error logs and possibly other files."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "n/a",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2018-10-09T18:57:01",
        "orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
        "shortName": "mitre"
      },
      "references": [
        {
          "name": "RHSA-2016:2749",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://rhn.redhat.com/errata/RHSA-2016-2749.html"
        },
        {
          "name": "20161101 MySQL / MariaDB / PerconaDB - Privilege Escalation / Race Condition Exploit [CVE-2016-6663 / OCVE-2016-5616]",
          "tags": [
            "mailing-list",
            "x_refsource_FULLDISC"
          ],
          "url": "http://seclists.org/fulldisclosure/2016/Nov/4"
        },
        {
          "name": "93612",
          "tags": [
            "vdb-entry",
            "x_refsource_BID"
          ],
          "url": "http://www.securityfocus.com/bid/93612"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://www.percona.com/blog/2016/11/02/percona-responds-to-cve-2016-6663-and-cve-2016-6664/"
        },
        {
          "name": "RHSA-2018:0574",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2018:0574"
        },
        {
          "name": "GLSA-201702-18",
          "tags": [
            "vendor-advisory",
            "x_refsource_GENTOO"
          ],
          "url": "https://security.gentoo.org/glsa/201702-18"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://www.oracle.com/technetwork/security-advisory/cpuoct2016-2881722.html"
        },
        {
          "name": "20161104 MySQL / MariaDB / PerconaDB - Root Privilege Escalation Exploit ( CVE-2016-6664 / CVE-2016-5617 )",
          "tags": [
            "mailing-list",
            "x_refsource_BUGTRAQ"
          ],
          "url": "http://www.securityfocus.com/archive/1/539695/100/0/threaded"
        },
        {
          "name": "RHSA-2016:2130",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://rhn.redhat.com/errata/RHSA-2016-2130.html"
        },
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "http://packetstormsecurity.com/files/139491/MySQL-MariaDB-PerconaDB-Root-Privilege-Escalation.html"
        },
        {
          "name": "40679",
          "tags": [
            "exploit",
            "x_refsource_EXPLOIT-DB"
          ],
          "url": "https://www.exploit-db.com/exploits/40679/"
        },
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "http://legalhackers.com/advisories/MySQL-Maria-Percona-RootPrivEsc-CVE-2016-6664-5617-Exploit.html"
        },
        {
          "name": "RHSA-2018:0279",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2018:0279"
        },
        {
          "name": "DSA-3770",
          "tags": [
            "vendor-advisory",
            "x_refsource_DEBIAN"
          ],
          "url": "http://www.debian.org/security/2017/dsa-3770"
        },
        {
          "name": "RHSA-2017:2192",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2017:2192"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "cve@mitre.org",
          "ID": "CVE-2016-6664",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "n/a",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "n/a"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "n/a"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "mysqld_safe in Oracle MySQL through 5.5.51, 5.6.x through 5.6.32, and 5.7.x through 5.7.14; MariaDB; Percona Server before 5.5.51-38.2, 5.6.x before 5.6.32-78-1, and 5.7.x before 5.7.14-8; and Percona XtraDB Cluster before 5.5.41-37.0, 5.6.x before 5.6.32-25.17, and 5.7.x before 5.7.14-26.17, when using file-based logging, allows local users with access to the mysql account to gain root privileges via a symlink attack on error logs and possibly other files."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "n/a"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "RHSA-2016:2749",
              "refsource": "REDHAT",
              "url": "http://rhn.redhat.com/errata/RHSA-2016-2749.html"
            },
            {
              "name": "20161101 MySQL / MariaDB / PerconaDB - Privilege Escalation / Race Condition Exploit [CVE-2016-6663 / OCVE-2016-5616]",
              "refsource": "FULLDISC",
              "url": "http://seclists.org/fulldisclosure/2016/Nov/4"
            },
            {
              "name": "93612",
              "refsource": "BID",
              "url": "http://www.securityfocus.com/bid/93612"
            },
            {
              "name": "https://www.percona.com/blog/2016/11/02/percona-responds-to-cve-2016-6663-and-cve-2016-6664/",
              "refsource": "CONFIRM",
              "url": "https://www.percona.com/blog/2016/11/02/percona-responds-to-cve-2016-6663-and-cve-2016-6664/"
            },
            {
              "name": "RHSA-2018:0574",
              "refsource": "REDHAT",
              "url": "https://access.redhat.com/errata/RHSA-2018:0574"
            },
            {
              "name": "GLSA-201702-18",
              "refsource": "GENTOO",
              "url": "https://security.gentoo.org/glsa/201702-18"
            },
            {
              "name": "http://www.oracle.com/technetwork/security-advisory/cpuoct2016-2881722.html",
              "refsource": "CONFIRM",
              "url": "http://www.oracle.com/technetwork/security-advisory/cpuoct2016-2881722.html"
            },
            {
              "name": "20161104 MySQL / MariaDB / PerconaDB - Root Privilege Escalation Exploit ( CVE-2016-6664 / CVE-2016-5617 )",
              "refsource": "BUGTRAQ",
              "url": "http://www.securityfocus.com/archive/1/539695/100/0/threaded"
            },
            {
              "name": "RHSA-2016:2130",
              "refsource": "REDHAT",
              "url": "http://rhn.redhat.com/errata/RHSA-2016-2130.html"
            },
            {
              "name": "http://packetstormsecurity.com/files/139491/MySQL-MariaDB-PerconaDB-Root-Privilege-Escalation.html",
              "refsource": "MISC",
              "url": "http://packetstormsecurity.com/files/139491/MySQL-MariaDB-PerconaDB-Root-Privilege-Escalation.html"
            },
            {
              "name": "40679",
              "refsource": "EXPLOIT-DB",
              "url": "https://www.exploit-db.com/exploits/40679/"
            },
            {
              "name": "http://legalhackers.com/advisories/MySQL-Maria-Percona-RootPrivEsc-CVE-2016-6664-5617-Exploit.html",
              "refsource": "MISC",
              "url": "http://legalhackers.com/advisories/MySQL-Maria-Percona-RootPrivEsc-CVE-2016-6664-5617-Exploit.html"
            },
            {
              "name": "RHSA-2018:0279",
              "refsource": "REDHAT",
              "url": "https://access.redhat.com/errata/RHSA-2018:0279"
            },
            {
              "name": "DSA-3770",
              "refsource": "DEBIAN",
              "url": "http://www.debian.org/security/2017/dsa-3770"
            },
            {
              "name": "RHSA-2017:2192",
              "refsource": "REDHAT",
              "url": "https://access.redhat.com/errata/RHSA-2017:2192"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
    "assignerShortName": "mitre",
    "cveId": "CVE-2016-6664",
    "datePublished": "2016-12-13T21:00:00",
    "dateReserved": "2016-08-10T00:00:00",
    "dateUpdated": "2024-08-06T01:36:29.471Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

CVE-2017-3257 (GCVE-0-2017-3257)

Vulnerability from cvelistv5

Published

2017-01-27 22:01

Modified

2024-10-09 19:40

Severity ?

CWE

CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Summary

Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: InnoDB). Supported versions that are affected are 5.6.34 and earlier5.7.16 and earlier. Easily exploitable vulnerability allows low privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS v3.0 Base Score 6.5 (Availability impacts).

References

►

URL

Tags

	https://access.redhat.com/errata/RHSA-2017:2787	vendor-advisory, x_refsource_REDHAT
	https://security.gentoo.org/glsa/201702-17	vendor-advisory, x_refsource_GENTOO
	https://access.redhat.com/errata/RHSA-2018:0574	vendor-advisory, x_refsource_REDHAT
	https://security.gentoo.org/glsa/201702-18	vendor-advisory, x_refsource_GENTOO
	http://www.securitytracker.com/id/1037640	vdb-entry, x_refsource_SECTRACK
	https://access.redhat.com/errata/RHSA-2018:0279	vendor-advisory, x_refsource_REDHAT
	http://www.securityfocus.com/bid/95589	vdb-entry, x_refsource_BID
	https://access.redhat.com/errata/RHSA-2017:2886	vendor-advisory, x_refsource_REDHAT
	http://www.oracle.com/technetwork/security-advisory/cpujan2017-2881727.html	x_refsource_CONFIRM
	http://www.debian.org/security/2017/dsa-3770	vendor-advisory, x_refsource_DEBIAN

Impacted products

	Vendor	Product	Version
	Oracle	MySQL Server	Version: 5.6.34 and earlier Version: 5.7.16 and earlier

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-05T14:23:33.185Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "name": "RHSA-2017:2787",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2017:2787"
          },
          {
            "name": "GLSA-201702-17",
            "tags": [
              "vendor-advisory",
              "x_refsource_GENTOO",
              "x_transferred"
            ],
            "url": "https://security.gentoo.org/glsa/201702-17"
          },
          {
            "name": "RHSA-2018:0574",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2018:0574"
          },
          {
            "name": "GLSA-201702-18",
            "tags": [
              "vendor-advisory",
              "x_refsource_GENTOO",
              "x_transferred"
            ],
            "url": "https://security.gentoo.org/glsa/201702-18"
          },
          {
            "name": "1037640",
            "tags": [
              "vdb-entry",
              "x_refsource_SECTRACK",
              "x_transferred"
            ],
            "url": "http://www.securitytracker.com/id/1037640"
          },
          {
            "name": "RHSA-2018:0279",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2018:0279"
          },
          {
            "name": "95589",
            "tags": [
              "vdb-entry",
              "x_refsource_BID",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/bid/95589"
          },
          {
            "name": "RHSA-2017:2886",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2017:2886"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://www.oracle.com/technetwork/security-advisory/cpujan2017-2881727.html"
          },
          {
            "name": "DSA-3770",
            "tags": [
              "vendor-advisory",
              "x_refsource_DEBIAN",
              "x_transferred"
            ],
            "url": "http://www.debian.org/security/2017/dsa-3770"
          }
        ],
        "title": "CVE Program Container"
      },
      {
        "metrics": [
          {
            "other": {
              "content": {
                "id": "CVE-2017-3257",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "partial"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2024-10-09T19:30:12.766294Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2024-10-09T19:40:40.335Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "MySQL Server",
          "vendor": "Oracle",
          "versions": [
            {
              "status": "affected",
              "version": "5.6.34 and earlier"
            },
            {
              "status": "affected",
              "version": "5.7.16 and earlier"
            }
          ]
        }
      ],
      "datePublic": "2017-01-17T00:00:00",
      "descriptions": [
        {
          "lang": "en",
          "value": "Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: InnoDB). Supported versions that are affected are 5.6.34 and earlier5.7.16 and earlier. Easily exploitable vulnerability allows low privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS v3.0 Base Score 6.5 (Availability impacts)."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2018-03-22T09:57:01",
        "orgId": "43595867-4340-4103-b7a2-9a5208d29a85",
        "shortName": "oracle"
      },
      "references": [
        {
          "name": "RHSA-2017:2787",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2017:2787"
        },
        {
          "name": "GLSA-201702-17",
          "tags": [
            "vendor-advisory",
            "x_refsource_GENTOO"
          ],
          "url": "https://security.gentoo.org/glsa/201702-17"
        },
        {
          "name": "RHSA-2018:0574",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2018:0574"
        },
        {
          "name": "GLSA-201702-18",
          "tags": [
            "vendor-advisory",
            "x_refsource_GENTOO"
          ],
          "url": "https://security.gentoo.org/glsa/201702-18"
        },
        {
          "name": "1037640",
          "tags": [
            "vdb-entry",
            "x_refsource_SECTRACK"
          ],
          "url": "http://www.securitytracker.com/id/1037640"
        },
        {
          "name": "RHSA-2018:0279",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2018:0279"
        },
        {
          "name": "95589",
          "tags": [
            "vdb-entry",
            "x_refsource_BID"
          ],
          "url": "http://www.securityfocus.com/bid/95589"
        },
        {
          "name": "RHSA-2017:2886",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2017:2886"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://www.oracle.com/technetwork/security-advisory/cpujan2017-2881727.html"
        },
        {
          "name": "DSA-3770",
          "tags": [
            "vendor-advisory",
            "x_refsource_DEBIAN"
          ],
          "url": "http://www.debian.org/security/2017/dsa-3770"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "secalert_us@oracle.com",
          "ID": "CVE-2017-3257",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "MySQL Server",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "5.6.34 and earlier"
                          },
                          {
                            "version_value": "5.7.16 and earlier"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "Oracle"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: InnoDB). Supported versions that are affected are 5.6.34 and earlier5.7.16 and earlier. Easily exploitable vulnerability allows low privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS v3.0 Base Score 6.5 (Availability impacts)."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "RHSA-2017:2787",
              "refsource": "REDHAT",
              "url": "https://access.redhat.com/errata/RHSA-2017:2787"
            },
            {
              "name": "GLSA-201702-17",
              "refsource": "GENTOO",
              "url": "https://security.gentoo.org/glsa/201702-17"
            },
            {
              "name": "RHSA-2018:0574",
              "refsource": "REDHAT",
              "url": "https://access.redhat.com/errata/RHSA-2018:0574"
            },
            {
              "name": "GLSA-201702-18",
              "refsource": "GENTOO",
              "url": "https://security.gentoo.org/glsa/201702-18"
            },
            {
              "name": "1037640",
              "refsource": "SECTRACK",
              "url": "http://www.securitytracker.com/id/1037640"
            },
            {
              "name": "RHSA-2018:0279",
              "refsource": "REDHAT",
              "url": "https://access.redhat.com/errata/RHSA-2018:0279"
            },
            {
              "name": "95589",
              "refsource": "BID",
              "url": "http://www.securityfocus.com/bid/95589"
            },
            {
              "name": "RHSA-2017:2886",
              "refsource": "REDHAT",
              "url": "https://access.redhat.com/errata/RHSA-2017:2886"
            },
            {
              "name": "http://www.oracle.com/technetwork/security-advisory/cpujan2017-2881727.html",
              "refsource": "CONFIRM",
              "url": "http://www.oracle.com/technetwork/security-advisory/cpujan2017-2881727.html"
            },
            {
              "name": "DSA-3770",
              "refsource": "DEBIAN",
              "url": "http://www.debian.org/security/2017/dsa-3770"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "43595867-4340-4103-b7a2-9a5208d29a85",
    "assignerShortName": "oracle",
    "cveId": "CVE-2017-3257",
    "datePublished": "2017-01-27T22:01:00",
    "dateReserved": "2016-12-06T00:00:00",
    "dateUpdated": "2024-10-09T19:40:40.335Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

CVE-2017-3317 (GCVE-0-2017-3317)

Vulnerability from cvelistv5

Published

2017-01-27 22:01

Modified

2024-10-08 20:34

Severity ?

CWE

CVSS:3.0/AV:L/AC:H/PR:H/UI:R/S:U/C:N/I:N/A:H

Summary

Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Logging). Supported versions that are affected are 5.5.53 and earlier, 5.6.34 and earlier and 5.7.16 and earlier. Difficult to exploit vulnerability allows high privileged attacker with logon to the infrastructure where MySQL Server executes to compromise MySQL Server. Successful attacks require human interaction from a person other than the attacker. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS v3.0 Base Score 4.0 (Availability impacts).

References

►

URL

Tags

	https://access.redhat.com/errata/RHSA-2017:2787	vendor-advisory, x_refsource_REDHAT
	https://security.gentoo.org/glsa/201702-17	vendor-advisory, x_refsource_GENTOO
	https://access.redhat.com/errata/RHSA-2018:0574	vendor-advisory, x_refsource_REDHAT
	https://security.gentoo.org/glsa/201702-18	vendor-advisory, x_refsource_GENTOO
	http://www.securitytracker.com/id/1037640	vdb-entry, x_refsource_SECTRACK
	http://www.securityfocus.com/bid/95585	vdb-entry, x_refsource_BID
	https://access.redhat.com/errata/RHSA-2018:0279	vendor-advisory, x_refsource_REDHAT
	http://www.debian.org/security/2017/dsa-3767	vendor-advisory, x_refsource_DEBIAN
	https://access.redhat.com/errata/RHSA-2017:2886	vendor-advisory, x_refsource_REDHAT
	http://www.oracle.com/technetwork/security-advisory/cpujan2017-2881727.html	x_refsource_CONFIRM
	http://www.debian.org/security/2017/dsa-3770	vendor-advisory, x_refsource_DEBIAN
	https://access.redhat.com/errata/RHSA-2017:2192	vendor-advisory, x_refsource_REDHAT

Impacted products

	Vendor	Product	Version
	Oracle	MySQL Server	Version: 5.5.53 and earlier Version: 5.6.34 and earlier Version: 5.7.16 and earlier

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-05T14:23:34.117Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "name": "RHSA-2017:2787",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2017:2787"
          },
          {
            "name": "GLSA-201702-17",
            "tags": [
              "vendor-advisory",
              "x_refsource_GENTOO",
              "x_transferred"
            ],
            "url": "https://security.gentoo.org/glsa/201702-17"
          },
          {
            "name": "RHSA-2018:0574",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2018:0574"
          },
          {
            "name": "GLSA-201702-18",
            "tags": [
              "vendor-advisory",
              "x_refsource_GENTOO",
              "x_transferred"
            ],
            "url": "https://security.gentoo.org/glsa/201702-18"
          },
          {
            "name": "1037640",
            "tags": [
              "vdb-entry",
              "x_refsource_SECTRACK",
              "x_transferred"
            ],
            "url": "http://www.securitytracker.com/id/1037640"
          },
          {
            "name": "95585",
            "tags": [
              "vdb-entry",
              "x_refsource_BID",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/bid/95585"
          },
          {
            "name": "RHSA-2018:0279",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2018:0279"
          },
          {
            "name": "DSA-3767",
            "tags": [
              "vendor-advisory",
              "x_refsource_DEBIAN",
              "x_transferred"
            ],
            "url": "http://www.debian.org/security/2017/dsa-3767"
          },
          {
            "name": "RHSA-2017:2886",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2017:2886"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://www.oracle.com/technetwork/security-advisory/cpujan2017-2881727.html"
          },
          {
            "name": "DSA-3770",
            "tags": [
              "vendor-advisory",
              "x_refsource_DEBIAN",
              "x_transferred"
            ],
            "url": "http://www.debian.org/security/2017/dsa-3770"
          },
          {
            "name": "RHSA-2017:2192",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2017:2192"
          }
        ],
        "title": "CVE Program Container"
      },
      {
        "metrics": [
          {
            "other": {
              "content": {
                "id": "CVE-2017-3317",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "partial"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2024-10-08T20:09:31.756150Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2024-10-08T20:34:17.556Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "MySQL Server",
          "vendor": "Oracle",
          "versions": [
            {
              "status": "affected",
              "version": "5.5.53 and earlier"
            },
            {
              "status": "affected",
              "version": "5.6.34 and earlier"
            },
            {
              "status": "affected",
              "version": "5.7.16 and earlier"
            }
          ]
        }
      ],
      "datePublic": "2017-01-17T00:00:00",
      "descriptions": [
        {
          "lang": "en",
          "value": "Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Logging). Supported versions that are affected are 5.5.53 and earlier, 5.6.34 and earlier and 5.7.16 and earlier. Difficult to exploit vulnerability allows high privileged attacker with logon to the infrastructure where MySQL Server executes to compromise MySQL Server. Successful attacks require human interaction from a person other than the attacker. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS v3.0 Base Score 4.0 (Availability impacts)."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "CVSS:3.0/AV:L/AC:H/PR:H/UI:R/S:U/C:N/I:N/A:H",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2018-03-22T09:57:01",
        "orgId": "43595867-4340-4103-b7a2-9a5208d29a85",
        "shortName": "oracle"
      },
      "references": [
        {
          "name": "RHSA-2017:2787",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2017:2787"
        },
        {
          "name": "GLSA-201702-17",
          "tags": [
            "vendor-advisory",
            "x_refsource_GENTOO"
          ],
          "url": "https://security.gentoo.org/glsa/201702-17"
        },
        {
          "name": "RHSA-2018:0574",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2018:0574"
        },
        {
          "name": "GLSA-201702-18",
          "tags": [
            "vendor-advisory",
            "x_refsource_GENTOO"
          ],
          "url": "https://security.gentoo.org/glsa/201702-18"
        },
        {
          "name": "1037640",
          "tags": [
            "vdb-entry",
            "x_refsource_SECTRACK"
          ],
          "url": "http://www.securitytracker.com/id/1037640"
        },
        {
          "name": "95585",
          "tags": [
            "vdb-entry",
            "x_refsource_BID"
          ],
          "url": "http://www.securityfocus.com/bid/95585"
        },
        {
          "name": "RHSA-2018:0279",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2018:0279"
        },
        {
          "name": "DSA-3767",
          "tags": [
            "vendor-advisory",
            "x_refsource_DEBIAN"
          ],
          "url": "http://www.debian.org/security/2017/dsa-3767"
        },
        {
          "name": "RHSA-2017:2886",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2017:2886"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://www.oracle.com/technetwork/security-advisory/cpujan2017-2881727.html"
        },
        {
          "name": "DSA-3770",
          "tags": [
            "vendor-advisory",
            "x_refsource_DEBIAN"
          ],
          "url": "http://www.debian.org/security/2017/dsa-3770"
        },
        {
          "name": "RHSA-2017:2192",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2017:2192"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "secalert_us@oracle.com",
          "ID": "CVE-2017-3317",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "MySQL Server",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "5.5.53 and earlier"
                          },
                          {
                            "version_value": "5.6.34 and earlier"
                          },
                          {
                            "version_value": "5.7.16 and earlier"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "Oracle"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Logging). Supported versions that are affected are 5.5.53 and earlier, 5.6.34 and earlier and 5.7.16 and earlier. Difficult to exploit vulnerability allows high privileged attacker with logon to the infrastructure where MySQL Server executes to compromise MySQL Server. Successful attacks require human interaction from a person other than the attacker. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS v3.0 Base Score 4.0 (Availability impacts)."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "CVSS:3.0/AV:L/AC:H/PR:H/UI:R/S:U/C:N/I:N/A:H"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "RHSA-2017:2787",
              "refsource": "REDHAT",
              "url": "https://access.redhat.com/errata/RHSA-2017:2787"
            },
            {
              "name": "GLSA-201702-17",
              "refsource": "GENTOO",
              "url": "https://security.gentoo.org/glsa/201702-17"
            },
            {
              "name": "RHSA-2018:0574",
              "refsource": "REDHAT",
              "url": "https://access.redhat.com/errata/RHSA-2018:0574"
            },
            {
              "name": "GLSA-201702-18",
              "refsource": "GENTOO",
              "url": "https://security.gentoo.org/glsa/201702-18"
            },
            {
              "name": "1037640",
              "refsource": "SECTRACK",
              "url": "http://www.securitytracker.com/id/1037640"
            },
            {
              "name": "95585",
              "refsource": "BID",
              "url": "http://www.securityfocus.com/bid/95585"
            },
            {
              "name": "RHSA-2018:0279",
              "refsource": "REDHAT",
              "url": "https://access.redhat.com/errata/RHSA-2018:0279"
            },
            {
              "name": "DSA-3767",
              "refsource": "DEBIAN",
              "url": "http://www.debian.org/security/2017/dsa-3767"
            },
            {
              "name": "RHSA-2017:2886",
              "refsource": "REDHAT",
              "url": "https://access.redhat.com/errata/RHSA-2017:2886"
            },
            {
              "name": "http://www.oracle.com/technetwork/security-advisory/cpujan2017-2881727.html",
              "refsource": "CONFIRM",
              "url": "http://www.oracle.com/technetwork/security-advisory/cpujan2017-2881727.html"
            },
            {
              "name": "DSA-3770",
              "refsource": "DEBIAN",
              "url": "http://www.debian.org/security/2017/dsa-3770"
            },
            {
              "name": "RHSA-2017:2192",
              "refsource": "REDHAT",
              "url": "https://access.redhat.com/errata/RHSA-2017:2192"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "43595867-4340-4103-b7a2-9a5208d29a85",
    "assignerShortName": "oracle",
    "cveId": "CVE-2017-3317",
    "datePublished": "2017-01-27T22:01:00",
    "dateReserved": "2016-12-06T00:00:00",
    "dateUpdated": "2024-10-08T20:34:17.556Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

CVE-2017-3318 (GCVE-0-2017-3318)

Vulnerability from cvelistv5

Published

2017-01-27 22:01

Modified

2024-10-08 20:29

Severity ?

CWE

CVSS:3.0/AV:L/AC:H/PR:H/UI:R/S:U/C:H/I:N/A:N

Summary

Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Error Handling). Supported versions that are affected are 5.5.53 and earlier, 5.6.34 and earlier and 5.7.16 and earlier. Difficult to exploit vulnerability allows high privileged attacker with logon to the infrastructure where MySQL Server executes to compromise MySQL Server. Successful attacks require human interaction from a person other than the attacker. Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all MySQL Server accessible data. CVSS v3.0 Base Score 4.0 (Confidentiality impacts).

References

►

URL

Tags

	https://access.redhat.com/errata/RHSA-2017:2787	vendor-advisory, x_refsource_REDHAT
	https://security.gentoo.org/glsa/201702-17	vendor-advisory, x_refsource_GENTOO
	https://access.redhat.com/errata/RHSA-2018:0574	vendor-advisory, x_refsource_REDHAT
	https://security.gentoo.org/glsa/201702-18	vendor-advisory, x_refsource_GENTOO
	http://www.securitytracker.com/id/1037640	vdb-entry, x_refsource_SECTRACK
	http://www.securityfocus.com/bid/95588	vdb-entry, x_refsource_BID
	https://access.redhat.com/errata/RHSA-2018:0279	vendor-advisory, x_refsource_REDHAT
	http://www.debian.org/security/2017/dsa-3767	vendor-advisory, x_refsource_DEBIAN
	https://access.redhat.com/errata/RHSA-2017:2886	vendor-advisory, x_refsource_REDHAT
	http://www.oracle.com/technetwork/security-advisory/cpujan2017-2881727.html	x_refsource_CONFIRM
	http://www.debian.org/security/2017/dsa-3770	vendor-advisory, x_refsource_DEBIAN
	https://access.redhat.com/errata/RHSA-2017:2192	vendor-advisory, x_refsource_REDHAT

Impacted products

	Vendor	Product	Version
	Oracle	MySQL Server	Version: 5.5.53 and earlier Version: 5.6.34 and earlier Version: 5.7.16 and earlier

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-05T14:23:33.893Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "name": "RHSA-2017:2787",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2017:2787"
          },
          {
            "name": "GLSA-201702-17",
            "tags": [
              "vendor-advisory",
              "x_refsource_GENTOO",
              "x_transferred"
            ],
            "url": "https://security.gentoo.org/glsa/201702-17"
          },
          {
            "name": "RHSA-2018:0574",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2018:0574"
          },
          {
            "name": "GLSA-201702-18",
            "tags": [
              "vendor-advisory",
              "x_refsource_GENTOO",
              "x_transferred"
            ],
            "url": "https://security.gentoo.org/glsa/201702-18"
          },
          {
            "name": "1037640",
            "tags": [
              "vdb-entry",
              "x_refsource_SECTRACK",
              "x_transferred"
            ],
            "url": "http://www.securitytracker.com/id/1037640"
          },
          {
            "name": "95588",
            "tags": [
              "vdb-entry",
              "x_refsource_BID",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/bid/95588"
          },
          {
            "name": "RHSA-2018:0279",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2018:0279"
          },
          {
            "name": "DSA-3767",
            "tags": [
              "vendor-advisory",
              "x_refsource_DEBIAN",
              "x_transferred"
            ],
            "url": "http://www.debian.org/security/2017/dsa-3767"
          },
          {
            "name": "RHSA-2017:2886",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2017:2886"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://www.oracle.com/technetwork/security-advisory/cpujan2017-2881727.html"
          },
          {
            "name": "DSA-3770",
            "tags": [
              "vendor-advisory",
              "x_refsource_DEBIAN",
              "x_transferred"
            ],
            "url": "http://www.debian.org/security/2017/dsa-3770"
          },
          {
            "name": "RHSA-2017:2192",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2017:2192"
          }
        ],
        "title": "CVE Program Container"
      },
      {
        "metrics": [
          {
            "other": {
              "content": {
                "id": "CVE-2017-3318",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "partial"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2024-10-08T20:09:30.630517Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2024-10-08T20:29:35.165Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "MySQL Server",
          "vendor": "Oracle",
          "versions": [
            {
              "status": "affected",
              "version": "5.5.53 and earlier"
            },
            {
              "status": "affected",
              "version": "5.6.34 and earlier"
            },
            {
              "status": "affected",
              "version": "5.7.16 and earlier"
            }
          ]
        }
      ],
      "datePublic": "2017-01-17T00:00:00",
      "descriptions": [
        {
          "lang": "en",
          "value": "Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Error Handling). Supported versions that are affected are 5.5.53 and earlier, 5.6.34 and earlier and 5.7.16 and earlier. Difficult to exploit vulnerability allows high privileged attacker with logon to the infrastructure where MySQL Server executes to compromise MySQL Server. Successful attacks require human interaction from a person other than the attacker. Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all MySQL Server accessible data. CVSS v3.0 Base Score 4.0 (Confidentiality impacts)."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "CVSS:3.0/AV:L/AC:H/PR:H/UI:R/S:U/C:H/I:N/A:N",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2018-03-22T09:57:01",
        "orgId": "43595867-4340-4103-b7a2-9a5208d29a85",
        "shortName": "oracle"
      },
      "references": [
        {
          "name": "RHSA-2017:2787",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2017:2787"
        },
        {
          "name": "GLSA-201702-17",
          "tags": [
            "vendor-advisory",
            "x_refsource_GENTOO"
          ],
          "url": "https://security.gentoo.org/glsa/201702-17"
        },
        {
          "name": "RHSA-2018:0574",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2018:0574"
        },
        {
          "name": "GLSA-201702-18",
          "tags": [
            "vendor-advisory",
            "x_refsource_GENTOO"
          ],
          "url": "https://security.gentoo.org/glsa/201702-18"
        },
        {
          "name": "1037640",
          "tags": [
            "vdb-entry",
            "x_refsource_SECTRACK"
          ],
          "url": "http://www.securitytracker.com/id/1037640"
        },
        {
          "name": "95588",
          "tags": [
            "vdb-entry",
            "x_refsource_BID"
          ],
          "url": "http://www.securityfocus.com/bid/95588"
        },
        {
          "name": "RHSA-2018:0279",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2018:0279"
        },
        {
          "name": "DSA-3767",
          "tags": [
            "vendor-advisory",
            "x_refsource_DEBIAN"
          ],
          "url": "http://www.debian.org/security/2017/dsa-3767"
        },
        {
          "name": "RHSA-2017:2886",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2017:2886"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://www.oracle.com/technetwork/security-advisory/cpujan2017-2881727.html"
        },
        {
          "name": "DSA-3770",
          "tags": [
            "vendor-advisory",
            "x_refsource_DEBIAN"
          ],
          "url": "http://www.debian.org/security/2017/dsa-3770"
        },
        {
          "name": "RHSA-2017:2192",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2017:2192"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "secalert_us@oracle.com",
          "ID": "CVE-2017-3318",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "MySQL Server",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "5.5.53 and earlier"
                          },
                          {
                            "version_value": "5.6.34 and earlier"
                          },
                          {
                            "version_value": "5.7.16 and earlier"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "Oracle"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Error Handling). Supported versions that are affected are 5.5.53 and earlier, 5.6.34 and earlier and 5.7.16 and earlier. Difficult to exploit vulnerability allows high privileged attacker with logon to the infrastructure where MySQL Server executes to compromise MySQL Server. Successful attacks require human interaction from a person other than the attacker. Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all MySQL Server accessible data. CVSS v3.0 Base Score 4.0 (Confidentiality impacts)."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "CVSS:3.0/AV:L/AC:H/PR:H/UI:R/S:U/C:H/I:N/A:N"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "RHSA-2017:2787",
              "refsource": "REDHAT",
              "url": "https://access.redhat.com/errata/RHSA-2017:2787"
            },
            {
              "name": "GLSA-201702-17",
              "refsource": "GENTOO",
              "url": "https://security.gentoo.org/glsa/201702-17"
            },
            {
              "name": "RHSA-2018:0574",
              "refsource": "REDHAT",
              "url": "https://access.redhat.com/errata/RHSA-2018:0574"
            },
            {
              "name": "GLSA-201702-18",
              "refsource": "GENTOO",
              "url": "https://security.gentoo.org/glsa/201702-18"
            },
            {
              "name": "1037640",
              "refsource": "SECTRACK",
              "url": "http://www.securitytracker.com/id/1037640"
            },
            {
              "name": "95588",
              "refsource": "BID",
              "url": "http://www.securityfocus.com/bid/95588"
            },
            {
              "name": "RHSA-2018:0279",
              "refsource": "REDHAT",
              "url": "https://access.redhat.com/errata/RHSA-2018:0279"
            },
            {
              "name": "DSA-3767",
              "refsource": "DEBIAN",
              "url": "http://www.debian.org/security/2017/dsa-3767"
            },
            {
              "name": "RHSA-2017:2886",
              "refsource": "REDHAT",
              "url": "https://access.redhat.com/errata/RHSA-2017:2886"
            },
            {
              "name": "http://www.oracle.com/technetwork/security-advisory/cpujan2017-2881727.html",
              "refsource": "CONFIRM",
              "url": "http://www.oracle.com/technetwork/security-advisory/cpujan2017-2881727.html"
            },
            {
              "name": "DSA-3770",
              "refsource": "DEBIAN",
              "url": "http://www.debian.org/security/2017/dsa-3770"
            },
            {
              "name": "RHSA-2017:2192",
              "refsource": "REDHAT",
              "url": "https://access.redhat.com/errata/RHSA-2017:2192"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "43595867-4340-4103-b7a2-9a5208d29a85",
    "assignerShortName": "oracle",
    "cveId": "CVE-2017-3318",
    "datePublished": "2017-01-27T22:01:00",
    "dateReserved": "2016-12-06T00:00:00",
    "dateUpdated": "2024-10-08T20:29:35.165Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

CVE-2017-3243 (GCVE-0-2017-3243)

Vulnerability from cvelistv5

Published

2017-01-27 22:01

Modified

2024-10-09 19:50

Severity ?

CWE

CVSS:3.0/AV:N/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:H

Summary

Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Charsets). Supported versions that are affected are 5.5.53 and earlier. Difficult to exploit vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS v3.0 Base Score 4.4 (Availability impacts).

References

►

URL

Tags

	https://security.gentoo.org/glsa/201702-17	vendor-advisory, x_refsource_GENTOO
	http://www.securityfocus.com/bid/95538	vdb-entry, x_refsource_BID
	https://access.redhat.com/errata/RHSA-2018:0574	vendor-advisory, x_refsource_REDHAT
	https://security.gentoo.org/glsa/201702-18	vendor-advisory, x_refsource_GENTOO
	http://www.securitytracker.com/id/1037640	vdb-entry, x_refsource_SECTRACK
	https://access.redhat.com/errata/RHSA-2018:0279	vendor-advisory, x_refsource_REDHAT
	http://www.debian.org/security/2017/dsa-3767	vendor-advisory, x_refsource_DEBIAN
	http://www.oracle.com/technetwork/security-advisory/cpujan2017-2881727.html	x_refsource_CONFIRM
	http://www.debian.org/security/2017/dsa-3770	vendor-advisory, x_refsource_DEBIAN
	https://access.redhat.com/errata/RHSA-2017:2192	vendor-advisory, x_refsource_REDHAT

Impacted products

	Vendor	Product	Version
	Oracle	MySQL Server	Version: 5.5.53 and earlier

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-05T14:23:32.865Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "name": "GLSA-201702-17",
            "tags": [
              "vendor-advisory",
              "x_refsource_GENTOO",
              "x_transferred"
            ],
            "url": "https://security.gentoo.org/glsa/201702-17"
          },
          {
            "name": "95538",
            "tags": [
              "vdb-entry",
              "x_refsource_BID",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/bid/95538"
          },
          {
            "name": "RHSA-2018:0574",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2018:0574"
          },
          {
            "name": "GLSA-201702-18",
            "tags": [
              "vendor-advisory",
              "x_refsource_GENTOO",
              "x_transferred"
            ],
            "url": "https://security.gentoo.org/glsa/201702-18"
          },
          {
            "name": "1037640",
            "tags": [
              "vdb-entry",
              "x_refsource_SECTRACK",
              "x_transferred"
            ],
            "url": "http://www.securitytracker.com/id/1037640"
          },
          {
            "name": "RHSA-2018:0279",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2018:0279"
          },
          {
            "name": "DSA-3767",
            "tags": [
              "vendor-advisory",
              "x_refsource_DEBIAN",
              "x_transferred"
            ],
            "url": "http://www.debian.org/security/2017/dsa-3767"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://www.oracle.com/technetwork/security-advisory/cpujan2017-2881727.html"
          },
          {
            "name": "DSA-3770",
            "tags": [
              "vendor-advisory",
              "x_refsource_DEBIAN",
              "x_transferred"
            ],
            "url": "http://www.debian.org/security/2017/dsa-3770"
          },
          {
            "name": "RHSA-2017:2192",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2017:2192"
          }
        ],
        "title": "CVE Program Container"
      },
      {
        "metrics": [
          {
            "other": {
              "content": {
                "id": "CVE-2017-3243",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "partial"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2024-10-09T19:30:27.506975Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2024-10-09T19:50:26.152Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "MySQL Server",
          "vendor": "Oracle",
          "versions": [
            {
              "status": "affected",
              "version": "5.5.53 and earlier"
            }
          ]
        }
      ],
      "datePublic": "2017-01-17T00:00:00",
      "descriptions": [
        {
          "lang": "en",
          "value": "Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Charsets). Supported versions that are affected are 5.5.53 and earlier. Difficult to exploit vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS v3.0 Base Score 4.4 (Availability impacts)."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "CVSS:3.0/AV:N/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:H",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2018-03-22T09:57:01",
        "orgId": "43595867-4340-4103-b7a2-9a5208d29a85",
        "shortName": "oracle"
      },
      "references": [
        {
          "name": "GLSA-201702-17",
          "tags": [
            "vendor-advisory",
            "x_refsource_GENTOO"
          ],
          "url": "https://security.gentoo.org/glsa/201702-17"
        },
        {
          "name": "95538",
          "tags": [
            "vdb-entry",
            "x_refsource_BID"
          ],
          "url": "http://www.securityfocus.com/bid/95538"
        },
        {
          "name": "RHSA-2018:0574",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2018:0574"
        },
        {
          "name": "GLSA-201702-18",
          "tags": [
            "vendor-advisory",
            "x_refsource_GENTOO"
          ],
          "url": "https://security.gentoo.org/glsa/201702-18"
        },
        {
          "name": "1037640",
          "tags": [
            "vdb-entry",
            "x_refsource_SECTRACK"
          ],
          "url": "http://www.securitytracker.com/id/1037640"
        },
        {
          "name": "RHSA-2018:0279",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2018:0279"
        },
        {
          "name": "DSA-3767",
          "tags": [
            "vendor-advisory",
            "x_refsource_DEBIAN"
          ],
          "url": "http://www.debian.org/security/2017/dsa-3767"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://www.oracle.com/technetwork/security-advisory/cpujan2017-2881727.html"
        },
        {
          "name": "DSA-3770",
          "tags": [
            "vendor-advisory",
            "x_refsource_DEBIAN"
          ],
          "url": "http://www.debian.org/security/2017/dsa-3770"
        },
        {
          "name": "RHSA-2017:2192",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2017:2192"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "secalert_us@oracle.com",
          "ID": "CVE-2017-3243",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "MySQL Server",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "5.5.53 and earlier"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "Oracle"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Charsets). Supported versions that are affected are 5.5.53 and earlier. Difficult to exploit vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS v3.0 Base Score 4.4 (Availability impacts)."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "CVSS:3.0/AV:N/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:H"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "GLSA-201702-17",
              "refsource": "GENTOO",
              "url": "https://security.gentoo.org/glsa/201702-17"
            },
            {
              "name": "95538",
              "refsource": "BID",
              "url": "http://www.securityfocus.com/bid/95538"
            },
            {
              "name": "RHSA-2018:0574",
              "refsource": "REDHAT",
              "url": "https://access.redhat.com/errata/RHSA-2018:0574"
            },
            {
              "name": "GLSA-201702-18",
              "refsource": "GENTOO",
              "url": "https://security.gentoo.org/glsa/201702-18"
            },
            {
              "name": "1037640",
              "refsource": "SECTRACK",
              "url": "http://www.securitytracker.com/id/1037640"
            },
            {
              "name": "RHSA-2018:0279",
              "refsource": "REDHAT",
              "url": "https://access.redhat.com/errata/RHSA-2018:0279"
            },
            {
              "name": "DSA-3767",
              "refsource": "DEBIAN",
              "url": "http://www.debian.org/security/2017/dsa-3767"
            },
            {
              "name": "http://www.oracle.com/technetwork/security-advisory/cpujan2017-2881727.html",
              "refsource": "CONFIRM",
              "url": "http://www.oracle.com/technetwork/security-advisory/cpujan2017-2881727.html"
            },
            {
              "name": "DSA-3770",
              "refsource": "DEBIAN",
              "url": "http://www.debian.org/security/2017/dsa-3770"
            },
            {
              "name": "RHSA-2017:2192",
              "refsource": "REDHAT",
              "url": "https://access.redhat.com/errata/RHSA-2017:2192"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "43595867-4340-4103-b7a2-9a5208d29a85",
    "assignerShortName": "oracle",
    "cveId": "CVE-2017-3243",
    "datePublished": "2017-01-27T22:01:00",
    "dateReserved": "2016-12-06T00:00:00",
    "dateUpdated": "2024-10-09T19:50:26.152Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

CVE-2017-3291 (GCVE-0-2017-3291)

Vulnerability from cvelistv5

Published

2017-01-27 22:01

Modified

2024-10-08 20:36

Severity ?

CWE

CVSS:3.0/AV:L/AC:H/PR:H/UI:R/S:U/C:H/I:H/A:H

Summary

Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Packaging). Supported versions that are affected are 5.5.53 and earlier, 5.6.34 and earlier and 5.7.16 and earlier. Difficult to exploit vulnerability allows high privileged attacker with logon to the infrastructure where MySQL Server executes to compromise MySQL Server. Successful attacks require human interaction from a person other than the attacker. Successful attacks of this vulnerability can result in takeover of MySQL Server. CVSS v3.0 Base Score 6.3 (Confidentiality, Integrity and Availability impacts).

References

►

URL

Tags

	https://access.redhat.com/errata/RHSA-2017:2787	vendor-advisory, x_refsource_REDHAT
	http://www.securityfocus.com/bid/95501	vdb-entry, x_refsource_BID
	https://security.gentoo.org/glsa/201702-17	vendor-advisory, x_refsource_GENTOO
	https://access.redhat.com/errata/RHSA-2018:0574	vendor-advisory, x_refsource_REDHAT
	https://security.gentoo.org/glsa/201702-18	vendor-advisory, x_refsource_GENTOO
	http://www.securitytracker.com/id/1037640	vdb-entry, x_refsource_SECTRACK
	https://access.redhat.com/errata/RHSA-2018:0279	vendor-advisory, x_refsource_REDHAT
	http://www.debian.org/security/2017/dsa-3767	vendor-advisory, x_refsource_DEBIAN
	https://access.redhat.com/errata/RHSA-2017:2886	vendor-advisory, x_refsource_REDHAT
	http://www.oracle.com/technetwork/security-advisory/cpujan2017-2881727.html	x_refsource_CONFIRM
	http://www.debian.org/security/2017/dsa-3770	vendor-advisory, x_refsource_DEBIAN
	https://access.redhat.com/errata/RHSA-2017:2192	vendor-advisory, x_refsource_REDHAT

Impacted products

	Vendor	Product	Version
	n/a	MySQL Server 5.5.53andearlier;5.6.34andearlier;5.7.16andearlier	Version: MySQL Server 5.5.53andearlier;5.6.34andearlier;5.7.16andearlier

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-05T14:23:33.774Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "name": "RHSA-2017:2787",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2017:2787"
          },
          {
            "name": "95501",
            "tags": [
              "vdb-entry",
              "x_refsource_BID",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/bid/95501"
          },
          {
            "name": "GLSA-201702-17",
            "tags": [
              "vendor-advisory",
              "x_refsource_GENTOO",
              "x_transferred"
            ],
            "url": "https://security.gentoo.org/glsa/201702-17"
          },
          {
            "name": "RHSA-2018:0574",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2018:0574"
          },
          {
            "name": "GLSA-201702-18",
            "tags": [
              "vendor-advisory",
              "x_refsource_GENTOO",
              "x_transferred"
            ],
            "url": "https://security.gentoo.org/glsa/201702-18"
          },
          {
            "name": "1037640",
            "tags": [
              "vdb-entry",
              "x_refsource_SECTRACK",
              "x_transferred"
            ],
            "url": "http://www.securitytracker.com/id/1037640"
          },
          {
            "name": "RHSA-2018:0279",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2018:0279"
          },
          {
            "name": "DSA-3767",
            "tags": [
              "vendor-advisory",
              "x_refsource_DEBIAN",
              "x_transferred"
            ],
            "url": "http://www.debian.org/security/2017/dsa-3767"
          },
          {
            "name": "RHSA-2017:2886",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2017:2886"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://www.oracle.com/technetwork/security-advisory/cpujan2017-2881727.html"
          },
          {
            "name": "DSA-3770",
            "tags": [
              "vendor-advisory",
              "x_refsource_DEBIAN",
              "x_transferred"
            ],
            "url": "http://www.debian.org/security/2017/dsa-3770"
          },
          {
            "name": "RHSA-2017:2192",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2017:2192"
          }
        ],
        "title": "CVE Program Container"
      },
      {
        "metrics": [
          {
            "other": {
              "content": {
                "id": "CVE-2017-3291",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "total"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2024-10-08T20:06:04.184886Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2024-10-08T20:36:49.306Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "MySQL Server 5.5.53andearlier;5.6.34andearlier;5.7.16andearlier",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "MySQL Server 5.5.53andearlier;5.6.34andearlier;5.7.16andearlier"
            }
          ]
        }
      ],
      "datePublic": "2017-01-17T00:00:00",
      "descriptions": [
        {
          "lang": "en",
          "value": "Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Packaging). Supported versions that are affected are 5.5.53 and earlier, 5.6.34 and earlier and 5.7.16 and earlier. Difficult to exploit vulnerability allows high privileged attacker with logon to the infrastructure where MySQL Server executes to compromise MySQL Server. Successful attacks require human interaction from a person other than the attacker. Successful attacks of this vulnerability can result in takeover of MySQL Server. CVSS v3.0 Base Score 6.3 (Confidentiality, Integrity and Availability impacts)."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "CVSS:3.0/AV:L/AC:H/PR:H/UI:R/S:U/C:H/I:H/A:H",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2018-03-22T09:57:01",
        "orgId": "43595867-4340-4103-b7a2-9a5208d29a85",
        "shortName": "oracle"
      },
      "references": [
        {
          "name": "RHSA-2017:2787",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2017:2787"
        },
        {
          "name": "95501",
          "tags": [
            "vdb-entry",
            "x_refsource_BID"
          ],
          "url": "http://www.securityfocus.com/bid/95501"
        },
        {
          "name": "GLSA-201702-17",
          "tags": [
            "vendor-advisory",
            "x_refsource_GENTOO"
          ],
          "url": "https://security.gentoo.org/glsa/201702-17"
        },
        {
          "name": "RHSA-2018:0574",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2018:0574"
        },
        {
          "name": "GLSA-201702-18",
          "tags": [
            "vendor-advisory",
            "x_refsource_GENTOO"
          ],
          "url": "https://security.gentoo.org/glsa/201702-18"
        },
        {
          "name": "1037640",
          "tags": [
            "vdb-entry",
            "x_refsource_SECTRACK"
          ],
          "url": "http://www.securitytracker.com/id/1037640"
        },
        {
          "name": "RHSA-2018:0279",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2018:0279"
        },
        {
          "name": "DSA-3767",
          "tags": [
            "vendor-advisory",
            "x_refsource_DEBIAN"
          ],
          "url": "http://www.debian.org/security/2017/dsa-3767"
        },
        {
          "name": "RHSA-2017:2886",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2017:2886"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://www.oracle.com/technetwork/security-advisory/cpujan2017-2881727.html"
        },
        {
          "name": "DSA-3770",
          "tags": [
            "vendor-advisory",
            "x_refsource_DEBIAN"
          ],
          "url": "http://www.debian.org/security/2017/dsa-3770"
        },
        {
          "name": "RHSA-2017:2192",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2017:2192"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "secalert_us@oracle.com",
          "ID": "CVE-2017-3291",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "MySQL Server 5.5.53andearlier;5.6.34andearlier;5.7.16andearlier",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "MySQL Server 5.5.53andearlier;5.6.34andearlier;5.7.16andearlier"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "n/a"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Packaging). Supported versions that are affected are 5.5.53 and earlier, 5.6.34 and earlier and 5.7.16 and earlier. Difficult to exploit vulnerability allows high privileged attacker with logon to the infrastructure where MySQL Server executes to compromise MySQL Server. Successful attacks require human interaction from a person other than the attacker. Successful attacks of this vulnerability can result in takeover of MySQL Server. CVSS v3.0 Base Score 6.3 (Confidentiality, Integrity and Availability impacts)."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "CVSS:3.0/AV:L/AC:H/PR:H/UI:R/S:U/C:H/I:H/A:H"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "RHSA-2017:2787",
              "refsource": "REDHAT",
              "url": "https://access.redhat.com/errata/RHSA-2017:2787"
            },
            {
              "name": "95501",
              "refsource": "BID",
              "url": "http://www.securityfocus.com/bid/95501"
            },
            {
              "name": "GLSA-201702-17",
              "refsource": "GENTOO",
              "url": "https://security.gentoo.org/glsa/201702-17"
            },
            {
              "name": "RHSA-2018:0574",
              "refsource": "REDHAT",
              "url": "https://access.redhat.com/errata/RHSA-2018:0574"
            },
            {
              "name": "GLSA-201702-18",
              "refsource": "GENTOO",
              "url": "https://security.gentoo.org/glsa/201702-18"
            },
            {
              "name": "1037640",
              "refsource": "SECTRACK",
              "url": "http://www.securitytracker.com/id/1037640"
            },
            {
              "name": "RHSA-2018:0279",
              "refsource": "REDHAT",
              "url": "https://access.redhat.com/errata/RHSA-2018:0279"
            },
            {
              "name": "DSA-3767",
              "refsource": "DEBIAN",
              "url": "http://www.debian.org/security/2017/dsa-3767"
            },
            {
              "name": "RHSA-2017:2886",
              "refsource": "REDHAT",
              "url": "https://access.redhat.com/errata/RHSA-2017:2886"
            },
            {
              "name": "http://www.oracle.com/technetwork/security-advisory/cpujan2017-2881727.html",
              "refsource": "CONFIRM",
              "url": "http://www.oracle.com/technetwork/security-advisory/cpujan2017-2881727.html"
            },
            {
              "name": "DSA-3770",
              "refsource": "DEBIAN",
              "url": "http://www.debian.org/security/2017/dsa-3770"
            },
            {
              "name": "RHSA-2017:2192",
              "refsource": "REDHAT",
              "url": "https://access.redhat.com/errata/RHSA-2017:2192"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "43595867-4340-4103-b7a2-9a5208d29a85",
    "assignerShortName": "oracle",
    "cveId": "CVE-2017-3291",
    "datePublished": "2017-01-27T22:01:00",
    "dateReserved": "2016-12-06T00:00:00",
    "dateUpdated": "2024-10-08T20:36:49.306Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

Tags

Taxonomy of the tags.

All sightings related to this event Export sightings related to this event

Sightings

Author	Source	Type	Date

Nomenclature

Seen: The vulnerability was mentioned, discussed, or seen somewhere by the user.
Confirmed: The vulnerability is confirmed from an analyst perspective.
Exploited: This vulnerability was exploited and seen by the user reporting the sighting.
Patched: This vulnerability was successfully patched by the user reporting the sighting.
Not exploited: This vulnerability was not exploited or seen by the user reporting the sighting.
Not confirmed: The user expresses doubt about the veracity of the vulnerability.
Not patched: This vulnerability was not successfully patched by the user reporting the sighting.

Action not permitted

suse-su-2017:0411-1

Vulnerability from csaf_suse

CVE-2017-3238 (GCVE-0-2017-3238)

Vulnerability from cvelistv5

CVE-2017-3312 (GCVE-0-2017-3312)

Vulnerability from cvelistv5

CVE-2017-3258 (GCVE-0-2017-3258)

Vulnerability from cvelistv5

CVE-2017-3265 (GCVE-0-2017-3265)

Vulnerability from cvelistv5

CVE-2017-3244 (GCVE-0-2017-3244)

Vulnerability from cvelistv5

CVE-2016-6664 (GCVE-0-2016-6664)

Vulnerability from cvelistv5

CVE-2017-3257 (GCVE-0-2017-3257)

Vulnerability from cvelistv5

CVE-2017-3317 (GCVE-0-2017-3317)

Vulnerability from cvelistv5

CVE-2017-3318 (GCVE-0-2017-3318)

Vulnerability from cvelistv5

CVE-2017-3243 (GCVE-0-2017-3243)

Vulnerability from cvelistv5

CVE-2017-3291 (GCVE-0-2017-3291)

Vulnerability from cvelistv5

Tags

Sightings

Nomenclature