Vulnerability-Lookup

usn-3269-1

Vulnerability from osv_ubuntu

Published

2017-04-27 14:06

Modified

2026-04-27 14:11

Summary

mysql-5.5, mysql-5.7 vulnerabilities

Details

Multiple security issues were discovered in MySQL and this update includes new upstream MySQL versions to fix these issues.

MySQL has been updated to 5.5.55 in Ubuntu 14.04 LTS. Ubuntu 16.04 LTS, Ubuntu 16.10 and Ubuntu 17.04 have been updated to MySQL 5.7.18.

In addition to security fixes, the updated packages contain bug fixes, new features, and possibly incompatible changes.

Please see the following for more information: http://dev.mysql.com/doc/relnotes/mysql/5.5/en/news-5-5-55.html http://dev.mysql.com/doc/relnotes/mysql/5.7/en/news-5-7-18.html http://www.oracle.com/technetwork/security-advisory/cpuapr2017-3236618.html

References

URL

Type

	https://ubuntu.com/security/notices/USN-3269-1	ADVISORY
	https://ubuntu.com/security/CVE-2017-3302	REPORT
	https://ubuntu.com/security/CVE-2017-3305	REPORT
	https://ubuntu.com/security/CVE-2017-3308	REPORT
	https://ubuntu.com/security/CVE-2017-3309	REPORT
	https://ubuntu.com/security/CVE-2017-3329	REPORT
	https://ubuntu.com/security/CVE-2017-3331	REPORT
	https://ubuntu.com/security/CVE-2017-3450	REPORT
	https://ubuntu.com/security/CVE-2017-3453	REPORT
	https://ubuntu.com/security/CVE-2017-3454	REPORT
	https://ubuntu.com/security/CVE-2017-3455	REPORT
	https://ubuntu.com/security/CVE-2017-3456	REPORT
	https://ubuntu.com/security/CVE-2017-3457	REPORT
	https://ubuntu.com/security/CVE-2017-3458	REPORT
	https://ubuntu.com/security/CVE-2017-3459	REPORT
	https://ubuntu.com/security/CVE-2017-3460	REPORT
	https://ubuntu.com/security/CVE-2017-3461	REPORT
	https://ubuntu.com/security/CVE-2017-3462	REPORT
	https://ubuntu.com/security/CVE-2017-3463	REPORT
	https://ubuntu.com/security/CVE-2017-3464	REPORT
	https://ubuntu.com/security/CVE-2017-3465	REPORT
	https://ubuntu.com/security/CVE-2017-3467	REPORT
	https://ubuntu.com/security/CVE-2017-3468	REPORT
	https://ubuntu.com/security/CVE-2017-3599	REPORT
	https://ubuntu.com/security/CVE-2017-3600	REPORT

JSON

To clipboard

{
  "affected": [
    {
      "database_specific": {
        "cves_map": {
          "cves": [
            {
              "id": "CVE-2017-3302",
              "severity": [
                {
                  "score": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
                  "type": "CVSS_V3"
                },
                {
                  "score": "low",
                  "type": "Ubuntu"
                }
              ]
            },
            {
              "id": "CVE-2017-3305",
              "severity": [
                {
                  "score": "CVSS:3.0/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N",
                  "type": "CVSS_V3"
                },
                {
                  "score": "medium",
                  "type": "Ubuntu"
                }
              ]
            },
            {
              "id": "CVE-2017-3308",
              "severity": [
                {
                  "score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H",
                  "type": "CVSS_V3"
                },
                {
                  "score": "medium",
                  "type": "Ubuntu"
                }
              ]
            },
            {
              "id": "CVE-2017-3309",
              "severity": [
                {
                  "score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H",
                  "type": "CVSS_V3"
                },
                {
                  "score": "medium",
                  "type": "Ubuntu"
                }
              ]
            },
            {
              "id": "CVE-2017-3329",
              "severity": [
                {
                  "score": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
                  "type": "CVSS_V3"
                },
                {
                  "score": "medium",
                  "type": "Ubuntu"
                }
              ]
            },
            {
              "id": "CVE-2017-3453",
              "severity": [
                {
                  "score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
                  "type": "CVSS_V3"
                },
                {
                  "score": "medium",
                  "type": "Ubuntu"
                }
              ]
            },
            {
              "id": "CVE-2017-3456",
              "severity": [
                {
                  "score": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H",
                  "type": "CVSS_V3"
                },
                {
                  "score": "medium",
                  "type": "Ubuntu"
                }
              ]
            },
            {
              "id": "CVE-2017-3461",
              "severity": [
                {
                  "score": "CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H",
                  "type": "CVSS_V3"
                },
                {
                  "score": "medium",
                  "type": "Ubuntu"
                }
              ]
            },
            {
              "id": "CVE-2017-3462",
              "severity": [
                {
                  "score": "CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H",
                  "type": "CVSS_V3"
                },
                {
                  "score": "medium",
                  "type": "Ubuntu"
                }
              ]
            },
            {
              "id": "CVE-2017-3463",
              "severity": [
                {
                  "score": "CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H",
                  "type": "CVSS_V3"
                },
                {
                  "score": "medium",
                  "type": "Ubuntu"
                }
              ]
            },
            {
              "id": "CVE-2017-3464",
              "severity": [
                {
                  "score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N",
                  "type": "CVSS_V3"
                },
                {
                  "score": "medium",
                  "type": "Ubuntu"
                }
              ]
            },
            {
              "id": "CVE-2017-3600",
              "severity": [
                {
                  "score": "CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H",
                  "type": "CVSS_V3"
                },
                {
                  "score": "medium",
                  "type": "Ubuntu"
                }
              ]
            }
          ],
          "ecosystem": "Ubuntu:14.04:LTS"
        }
      },
      "ecosystem_specific": {
        "availability": "No subscription required",
        "binaries": [
          {
            "binary_name": "libmysqlclient18",
            "binary_version": "5.5.55-0ubuntu0.14.04.1"
          },
          {
            "binary_name": "libmysqld-pic",
            "binary_version": "5.5.55-0ubuntu0.14.04.1"
          },
          {
            "binary_name": "mysql-client",
            "binary_version": "5.5.55-0ubuntu0.14.04.1"
          },
          {
            "binary_name": "mysql-client-5.5",
            "binary_version": "5.5.55-0ubuntu0.14.04.1"
          },
          {
            "binary_name": "mysql-client-core-5.5",
            "binary_version": "5.5.55-0ubuntu0.14.04.1"
          },
          {
            "binary_name": "mysql-common",
            "binary_version": "5.5.55-0ubuntu0.14.04.1"
          },
          {
            "binary_name": "mysql-server",
            "binary_version": "5.5.55-0ubuntu0.14.04.1"
          },
          {
            "binary_name": "mysql-server-5.5",
            "binary_version": "5.5.55-0ubuntu0.14.04.1"
          },
          {
            "binary_name": "mysql-server-core-5.5",
            "binary_version": "5.5.55-0ubuntu0.14.04.1"
          },
          {
            "binary_name": "mysql-source-5.5",
            "binary_version": "5.5.55-0ubuntu0.14.04.1"
          },
          {
            "binary_name": "mysql-testsuite",
            "binary_version": "5.5.55-0ubuntu0.14.04.1"
          },
          {
            "binary_name": "mysql-testsuite-5.5",
            "binary_version": "5.5.55-0ubuntu0.14.04.1"
          }
        ]
      },
      "package": {
        "ecosystem": "Ubuntu:14.04:LTS",
        "name": "mysql-5.5",
        "purl": "pkg:deb/ubuntu/mysql-5.5@5.5.55-0ubuntu0.14.04.1?arch=source\u0026distro=trusty"
      },
      "ranges": [
        {
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "5.5.55-0ubuntu0.14.04.1"
            }
          ],
          "type": "ECOSYSTEM"
        }
      ],
      "versions": [
        "5.5.32-0ubuntu7",
        "5.5.34-0ubuntu1",
        "5.5.34-0ubuntu2",
        "5.5.35-0ubuntu1",
        "5.5.35+dfsg-1ubuntu1",
        "5.5.37-0ubuntu0.14.04.1",
        "5.5.38-0ubuntu0.14.04.1",
        "5.5.40-0ubuntu0.14.04.1",
        "5.5.41-0ubuntu0.14.04.1",
        "5.5.43-0ubuntu0.14.04.1",
        "5.5.44-0ubuntu0.14.04.1",
        "5.5.46-0ubuntu0.14.04.2",
        "5.5.47-0ubuntu0.14.04.1",
        "5.5.49-0ubuntu0.14.04.1",
        "5.5.50-0ubuntu0.14.04.1",
        "5.5.52-0ubuntu0.14.04.1",
        "5.5.53-0ubuntu0.14.04.1",
        "5.5.54-0ubuntu0.14.04.1"
      ]
    },
    {
      "database_specific": {
        "cves_map": {
          "cves": [
            {
              "id": "CVE-2017-3308",
              "severity": [
                {
                  "score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H",
                  "type": "CVSS_V3"
                },
                {
                  "score": "medium",
                  "type": "Ubuntu"
                }
              ]
            },
            {
              "id": "CVE-2017-3309",
              "severity": [
                {
                  "score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H",
                  "type": "CVSS_V3"
                },
                {
                  "score": "medium",
                  "type": "Ubuntu"
                }
              ]
            },
            {
              "id": "CVE-2017-3329",
              "severity": [
                {
                  "score": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
                  "type": "CVSS_V3"
                },
                {
                  "score": "medium",
                  "type": "Ubuntu"
                }
              ]
            },
            {
              "id": "CVE-2017-3331",
              "severity": [
                {
                  "score": "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
                  "type": "CVSS_V3"
                },
                {
                  "score": "medium",
                  "type": "Ubuntu"
                }
              ]
            },
            {
              "id": "CVE-2017-3450",
              "severity": [
                {
                  "score": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
                  "type": "CVSS_V3"
                },
                {
                  "score": "medium",
                  "type": "Ubuntu"
                }
              ]
            },
            {
              "id": "CVE-2017-3453",
              "severity": [
                {
                  "score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
                  "type": "CVSS_V3"
                },
                {
                  "score": "medium",
                  "type": "Ubuntu"
                }
              ]
            },
            {
              "id": "CVE-2017-3454",
              "severity": [
                {
                  "score": "CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:L/A:H",
                  "type": "CVSS_V3"
                },
                {
                  "score": "medium",
                  "type": "Ubuntu"
                }
              ]
            },
            {
              "id": "CVE-2017-3455",
              "severity": [
                {
                  "score": "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N",
                  "type": "CVSS_V3"
                },
                {
                  "score": "medium",
                  "type": "Ubuntu"
                }
              ]
            },
            {
              "id": "CVE-2017-3456",
              "severity": [
                {
                  "score": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H",
                  "type": "CVSS_V3"
                },
                {
                  "score": "medium",
                  "type": "Ubuntu"
                }
              ]
            },
            {
              "id": "CVE-2017-3457",
              "severity": [
                {
                  "score": "CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H",
                  "type": "CVSS_V3"
                },
                {
                  "score": "medium",
                  "type": "Ubuntu"
                }
              ]
            },
            {
              "id": "CVE-2017-3458",
              "severity": [
                {
                  "score": "CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H",
                  "type": "CVSS_V3"
                },
                {
                  "score": "medium",
                  "type": "Ubuntu"
                }
              ]
            },
            {
              "id": "CVE-2017-3459",
              "severity": [
                {
                  "score": "CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H",
                  "type": "CVSS_V3"
                },
                {
                  "score": "medium",
                  "type": "Ubuntu"
                }
              ]
            },
            {
              "id": "CVE-2017-3460",
              "severity": [
                {
                  "score": "CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H",
                  "type": "CVSS_V3"
                },
                {
                  "score": "medium",
                  "type": "Ubuntu"
                }
              ]
            },
            {
              "id": "CVE-2017-3461",
              "severity": [
                {
                  "score": "CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H",
                  "type": "CVSS_V3"
                },
                {
                  "score": "medium",
                  "type": "Ubuntu"
                }
              ]
            },
            {
              "id": "CVE-2017-3462",
              "severity": [
                {
                  "score": "CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H",
                  "type": "CVSS_V3"
                },
                {
                  "score": "medium",
                  "type": "Ubuntu"
                }
              ]
            },
            {
              "id": "CVE-2017-3463",
              "severity": [
                {
                  "score": "CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H",
                  "type": "CVSS_V3"
                },
                {
                  "score": "medium",
                  "type": "Ubuntu"
                }
              ]
            },
            {
              "id": "CVE-2017-3464",
              "severity": [
                {
                  "score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N",
                  "type": "CVSS_V3"
                },
                {
                  "score": "medium",
                  "type": "Ubuntu"
                }
              ]
            },
            {
              "id": "CVE-2017-3465",
              "severity": [
                {
                  "score": "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N",
                  "type": "CVSS_V3"
                },
                {
                  "score": "medium",
                  "type": "Ubuntu"
                }
              ]
            },
            {
              "id": "CVE-2017-3467",
              "severity": [
                {
                  "score": "CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N",
                  "type": "CVSS_V3"
                },
                {
                  "score": "medium",
                  "type": "Ubuntu"
                }
              ]
            },
            {
              "id": "CVE-2017-3468",
              "severity": [
                {
                  "score": "CVSS:3.0/AV:N/AC:H/PR:L/UI:N/S:U/C:N/I:L/A:N",
                  "type": "CVSS_V3"
                },
                {
                  "score": "low",
                  "type": "Ubuntu"
                }
              ]
            },
            {
              "id": "CVE-2017-3599",
              "severity": [
                {
                  "score": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
                  "type": "CVSS_V3"
                },
                {
                  "score": "medium",
                  "type": "Ubuntu"
                }
              ]
            },
            {
              "id": "CVE-2017-3600",
              "severity": [
                {
                  "score": "CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H",
                  "type": "CVSS_V3"
                },
                {
                  "score": "medium",
                  "type": "Ubuntu"
                }
              ]
            }
          ],
          "ecosystem": "Ubuntu:16.04:LTS"
        }
      },
      "ecosystem_specific": {
        "availability": "No subscription required",
        "binaries": [
          {
            "binary_name": "libmysqlclient20",
            "binary_version": "5.7.18-0ubuntu0.16.04.1"
          },
          {
            "binary_name": "mysql-client",
            "binary_version": "5.7.18-0ubuntu0.16.04.1"
          },
          {
            "binary_name": "mysql-client-5.7",
            "binary_version": "5.7.18-0ubuntu0.16.04.1"
          },
          {
            "binary_name": "mysql-client-core-5.7",
            "binary_version": "5.7.18-0ubuntu0.16.04.1"
          },
          {
            "binary_name": "mysql-common",
            "binary_version": "5.7.18-0ubuntu0.16.04.1"
          },
          {
            "binary_name": "mysql-server",
            "binary_version": "5.7.18-0ubuntu0.16.04.1"
          },
          {
            "binary_name": "mysql-server-5.7",
            "binary_version": "5.7.18-0ubuntu0.16.04.1"
          },
          {
            "binary_name": "mysql-server-core-5.7",
            "binary_version": "5.7.18-0ubuntu0.16.04.1"
          },
          {
            "binary_name": "mysql-source-5.7",
            "binary_version": "5.7.18-0ubuntu0.16.04.1"
          },
          {
            "binary_name": "mysql-testsuite",
            "binary_version": "5.7.18-0ubuntu0.16.04.1"
          },
          {
            "binary_name": "mysql-testsuite-5.7",
            "binary_version": "5.7.18-0ubuntu0.16.04.1"
          }
        ]
      },
      "package": {
        "ecosystem": "Ubuntu:16.04:LTS",
        "name": "mysql-5.7",
        "purl": "pkg:deb/ubuntu/mysql-5.7@5.7.18-0ubuntu0.16.04.1?arch=source\u0026distro=xenial"
      },
      "ranges": [
        {
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "5.7.18-0ubuntu0.16.04.1"
            }
          ],
          "type": "ECOSYSTEM"
        }
      ],
      "versions": [
        "5.7.11-0ubuntu4",
        "5.7.11-0ubuntu5",
        "5.7.11-0ubuntu6",
        "5.7.12-0ubuntu1",
        "5.7.12-0ubuntu1.1",
        "5.7.13-0ubuntu0.16.04.2",
        "5.7.15-0ubuntu0.16.04.1",
        "5.7.16-0ubuntu0.16.04.1",
        "5.7.17-0ubuntu0.16.04.1",
        "5.7.17-0ubuntu0.16.04.2"
      ]
    }
  ],
  "aliases": [],
  "details": "Multiple security issues were discovered in MySQL and this update includes\nnew upstream MySQL versions to fix these issues.\n\nMySQL has been updated to 5.5.55 in Ubuntu 14.04 LTS. Ubuntu 16.04 LTS,\nUbuntu 16.10 and Ubuntu 17.04 have been updated to MySQL 5.7.18.\n\nIn addition to security fixes, the updated packages contain bug fixes,\nnew features, and possibly incompatible changes.\n\nPlease see the following for more information:\nhttp://dev.mysql.com/doc/relnotes/mysql/5.5/en/news-5-5-55.html\nhttp://dev.mysql.com/doc/relnotes/mysql/5.7/en/news-5-7-18.html\nhttp://www.oracle.com/technetwork/security-advisory/cpuapr2017-3236618.html\n",
  "id": "USN-3269-1",
  "modified": "2026-04-27T14:11:22Z",
  "published": "2017-04-27T14:06:50Z",
  "references": [
    {
      "type": "ADVISORY",
      "url": "https://ubuntu.com/security/notices/USN-3269-1"
    },
    {
      "type": "REPORT",
      "url": "https://ubuntu.com/security/CVE-2017-3302"
    },
    {
      "type": "REPORT",
      "url": "https://ubuntu.com/security/CVE-2017-3305"
    },
    {
      "type": "REPORT",
      "url": "https://ubuntu.com/security/CVE-2017-3308"
    },
    {
      "type": "REPORT",
      "url": "https://ubuntu.com/security/CVE-2017-3309"
    },
    {
      "type": "REPORT",
      "url": "https://ubuntu.com/security/CVE-2017-3329"
    },
    {
      "type": "REPORT",
      "url": "https://ubuntu.com/security/CVE-2017-3331"
    },
    {
      "type": "REPORT",
      "url": "https://ubuntu.com/security/CVE-2017-3450"
    },
    {
      "type": "REPORT",
      "url": "https://ubuntu.com/security/CVE-2017-3453"
    },
    {
      "type": "REPORT",
      "url": "https://ubuntu.com/security/CVE-2017-3454"
    },
    {
      "type": "REPORT",
      "url": "https://ubuntu.com/security/CVE-2017-3455"
    },
    {
      "type": "REPORT",
      "url": "https://ubuntu.com/security/CVE-2017-3456"
    },
    {
      "type": "REPORT",
      "url": "https://ubuntu.com/security/CVE-2017-3457"
    },
    {
      "type": "REPORT",
      "url": "https://ubuntu.com/security/CVE-2017-3458"
    },
    {
      "type": "REPORT",
      "url": "https://ubuntu.com/security/CVE-2017-3459"
    },
    {
      "type": "REPORT",
      "url": "https://ubuntu.com/security/CVE-2017-3460"
    },
    {
      "type": "REPORT",
      "url": "https://ubuntu.com/security/CVE-2017-3461"
    },
    {
      "type": "REPORT",
      "url": "https://ubuntu.com/security/CVE-2017-3462"
    },
    {
      "type": "REPORT",
      "url": "https://ubuntu.com/security/CVE-2017-3463"
    },
    {
      "type": "REPORT",
      "url": "https://ubuntu.com/security/CVE-2017-3464"
    },
    {
      "type": "REPORT",
      "url": "https://ubuntu.com/security/CVE-2017-3465"
    },
    {
      "type": "REPORT",
      "url": "https://ubuntu.com/security/CVE-2017-3467"
    },
    {
      "type": "REPORT",
      "url": "https://ubuntu.com/security/CVE-2017-3468"
    },
    {
      "type": "REPORT",
      "url": "https://ubuntu.com/security/CVE-2017-3599"
    },
    {
      "type": "REPORT",
      "url": "https://ubuntu.com/security/CVE-2017-3600"
    }
  ],
  "related": [],
  "schema_version": "1.7.0",
  "summary": "mysql-5.5, mysql-5.7 vulnerabilities",
  "upstream": [
    "UBUNTU-CVE-2017-3302",
    "UBUNTU-CVE-2017-3305",
    "UBUNTU-CVE-2017-3308",
    "UBUNTU-CVE-2017-3309",
    "UBUNTU-CVE-2017-3329",
    "UBUNTU-CVE-2017-3331",
    "UBUNTU-CVE-2017-3450",
    "UBUNTU-CVE-2017-3453",
    "UBUNTU-CVE-2017-3454",
    "UBUNTU-CVE-2017-3455",
    "UBUNTU-CVE-2017-3456",
    "UBUNTU-CVE-2017-3457",
    "UBUNTU-CVE-2017-3458",
    "UBUNTU-CVE-2017-3459",
    "UBUNTU-CVE-2017-3460",
    "UBUNTU-CVE-2017-3461",
    "UBUNTU-CVE-2017-3462",
    "UBUNTU-CVE-2017-3463",
    "UBUNTU-CVE-2017-3464",
    "UBUNTU-CVE-2017-3465",
    "UBUNTU-CVE-2017-3467",
    "UBUNTU-CVE-2017-3468",
    "UBUNTU-CVE-2017-3599",
    "UBUNTU-CVE-2017-3600"
  ]
}

ubuntu-cve-2017-3467

Vulnerability from osv_ubuntu

Published

2017-04-24 00:00

Modified

2026-04-22 07:38

Summary

Details

Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: C API). Supported versions that are affected are 5.7.17 and earlier. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized read access to a subset of MySQL Server accessible data. CVSS 3.0 Base Score 3.7 (Confidentiality impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N).

Severity

3.7 (Low)


                    
                      CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N

N/A (UNKNOWN)


                    
                      medium

References

URL

Type

	https://ubuntu.com/security/CVE-2017-3467	REPORT
	http://www.oracle.com/technetwork/security-adviso…	REPORT
	https://ubuntu.com/security/notices/USN-3269-1	ADVISORY
	https://www.cve.org/CVERecord?id=CVE-2017-3467	REPORT

JSON

To clipboard

{
  "affected": [
    {
      "ecosystem_specific": {
        "availability": "No subscription required",
        "binaries": [
          {
            "binary_name": "libmysqlclient20",
            "binary_version": "5.7.18-0ubuntu0.16.04.1"
          },
          {
            "binary_name": "mysql-client",
            "binary_version": "5.7.18-0ubuntu0.16.04.1"
          },
          {
            "binary_name": "mysql-client-5.7",
            "binary_version": "5.7.18-0ubuntu0.16.04.1"
          },
          {
            "binary_name": "mysql-client-core-5.7",
            "binary_version": "5.7.18-0ubuntu0.16.04.1"
          },
          {
            "binary_name": "mysql-common",
            "binary_version": "5.7.18-0ubuntu0.16.04.1"
          },
          {
            "binary_name": "mysql-server",
            "binary_version": "5.7.18-0ubuntu0.16.04.1"
          },
          {
            "binary_name": "mysql-server-5.7",
            "binary_version": "5.7.18-0ubuntu0.16.04.1"
          },
          {
            "binary_name": "mysql-server-core-5.7",
            "binary_version": "5.7.18-0ubuntu0.16.04.1"
          },
          {
            "binary_name": "mysql-source-5.7",
            "binary_version": "5.7.18-0ubuntu0.16.04.1"
          },
          {
            "binary_name": "mysql-testsuite",
            "binary_version": "5.7.18-0ubuntu0.16.04.1"
          },
          {
            "binary_name": "mysql-testsuite-5.7",
            "binary_version": "5.7.18-0ubuntu0.16.04.1"
          }
        ]
      },
      "package": {
        "ecosystem": "Ubuntu:16.04:LTS",
        "name": "mysql-5.7",
        "purl": "pkg:deb/ubuntu/mysql-5.7@5.7.18-0ubuntu0.16.04.1?arch=source\u0026distro=xenial"
      },
      "ranges": [
        {
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "5.7.18-0ubuntu0.16.04.1"
            }
          ],
          "type": "ECOSYSTEM"
        }
      ],
      "versions": [
        "5.7.11-0ubuntu4",
        "5.7.11-0ubuntu5",
        "5.7.11-0ubuntu6",
        "5.7.12-0ubuntu1",
        "5.7.12-0ubuntu1.1",
        "5.7.13-0ubuntu0.16.04.2",
        "5.7.15-0ubuntu0.16.04.1",
        "5.7.16-0ubuntu0.16.04.1",
        "5.7.17-0ubuntu0.16.04.1",
        "5.7.17-0ubuntu0.16.04.2"
      ]
    },
    {
      "ecosystem_specific": {
        "binaries": [
          {
            "binary_name": "percona-server-server",
            "binary_version": "5.6.22-rel71.0-0ubuntu4.1"
          },
          {
            "binary_name": "percona-server-server-5.6",
            "binary_version": "5.6.22-rel71.0-0ubuntu4.1"
          },
          {
            "binary_name": "percona-server-source-5.6",
            "binary_version": "5.6.22-rel71.0-0ubuntu4.1"
          },
          {
            "binary_name": "percona-server-test",
            "binary_version": "5.6.22-rel71.0-0ubuntu4.1"
          },
          {
            "binary_name": "percona-server-test-5.6",
            "binary_version": "5.6.22-rel71.0-0ubuntu4.1"
          }
        ]
      },
      "package": {
        "ecosystem": "Ubuntu:16.04:LTS",
        "name": "percona-server-5.6",
        "purl": "pkg:deb/ubuntu/percona-server-5.6@5.6.22-rel71.0-0ubuntu4.1?arch=source\u0026distro=xenial"
      },
      "ranges": [
        {
          "events": [
            {
              "introduced": "0"
            }
          ],
          "type": "ECOSYSTEM"
        }
      ],
      "versions": [
        "5.6.22-rel71.0-0ubuntu2",
        "5.6.22-rel71.0-0ubuntu4",
        "5.6.22-rel71.0-0ubuntu4.1"
      ]
    },
    {
      "ecosystem_specific": {
        "binaries": [
          {
            "binary_name": "percona-xtradb-cluster-server",
            "binary_version": "5.6.37-26.21-0ubuntu0.16.04.2"
          },
          {
            "binary_name": "percona-xtradb-cluster-server-5.6",
            "binary_version": "5.6.37-26.21-0ubuntu0.16.04.2"
          },
          {
            "binary_name": "percona-xtradb-cluster-source-5.6",
            "binary_version": "5.6.37-26.21-0ubuntu0.16.04.2"
          }
        ]
      },
      "package": {
        "ecosystem": "Ubuntu:16.04:LTS",
        "name": "percona-xtradb-cluster-5.6",
        "purl": "pkg:deb/ubuntu/percona-xtradb-cluster-5.6@5.6.37-26.21-0ubuntu0.16.04.2?arch=source\u0026distro=xenial"
      },
      "ranges": [
        {
          "events": [
            {
              "introduced": "0"
            }
          ],
          "type": "ECOSYSTEM"
        }
      ],
      "versions": [
        "5.6.21-25.8-0ubuntu2",
        "5.6.21-25.8-0ubuntu3",
        "5.6.21-25.8-0ubuntu3.1",
        "5.6.21-25.8-0ubuntu3.2",
        "5.6.34-26.19-0ubuntu0.16.04.1",
        "5.6.34-26.19-0ubuntu0.16.04.2",
        "5.6.37-26.21-0ubuntu0.16.04.1",
        "5.6.37-26.21-0ubuntu0.16.04.2"
      ]
    }
  ],
  "aliases": [],
  "details": "Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: C API). Supported versions that are affected are 5.7.17 and earlier. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized read access to a subset of MySQL Server accessible data. CVSS 3.0 Base Score 3.7 (Confidentiality impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N).",
  "id": "UBUNTU-CVE-2017-3467",
  "modified": "2026-04-22T07:38:09Z",
  "published": "2017-04-24T00:00:00Z",
  "references": [
    {
      "type": "REPORT",
      "url": "https://ubuntu.com/security/CVE-2017-3467"
    },
    {
      "type": "REPORT",
      "url": "http://www.oracle.com/technetwork/security-advisory/cpuapr2017-3236618.html"
    },
    {
      "type": "ADVISORY",
      "url": "https://ubuntu.com/security/notices/USN-3269-1"
    },
    {
      "type": "REPORT",
      "url": "https://www.cve.org/CVERecord?id=CVE-2017-3467"
    }
  ],
  "related": [
    "USN-3269-1"
  ],
  "schema_version": "1.7.0",
  "severity": [
    {
      "score": "CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N",
      "type": "CVSS_V3"
    },
    {
      "score": "medium",
      "type": "Ubuntu"
    }
  ],
  "upstream": [
    "CVE-2017-3467"
  ]
}

ubuntu-cve-2017-3468

Vulnerability from osv_ubuntu

Published

2017-04-24 00:00

Modified

2026-04-22 07:38

Summary

Details

Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Security: Encryption). Supported versions that are affected are 5.7.17 and earlier. Difficult to exploit vulnerability allows low privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of MySQL Server accessible data. CVSS 3.0 Base Score 3.1 (Integrity impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:H/PR:L/UI:N/S:U/C:N/I:L/A:N).

Severity

3.1 (Low)


                    
                      CVSS:3.0/AV:N/AC:H/PR:L/UI:N/S:U/C:N/I:L/A:N

N/A (UNKNOWN)

low

References

URL

Type

	https://ubuntu.com/security/CVE-2017-3468	REPORT
	http://www.oracle.com/technetwork/security-adviso…	REPORT
	https://ubuntu.com/security/notices/USN-3269-1	ADVISORY
	https://www.cve.org/CVERecord?id=CVE-2017-3468	REPORT

JSON

To clipboard

{
  "affected": [
    {
      "ecosystem_specific": {
        "availability": "No subscription required",
        "binaries": [
          {
            "binary_name": "libmysqlclient20",
            "binary_version": "5.7.18-0ubuntu0.16.04.1"
          },
          {
            "binary_name": "mysql-client",
            "binary_version": "5.7.18-0ubuntu0.16.04.1"
          },
          {
            "binary_name": "mysql-client-5.7",
            "binary_version": "5.7.18-0ubuntu0.16.04.1"
          },
          {
            "binary_name": "mysql-client-core-5.7",
            "binary_version": "5.7.18-0ubuntu0.16.04.1"
          },
          {
            "binary_name": "mysql-common",
            "binary_version": "5.7.18-0ubuntu0.16.04.1"
          },
          {
            "binary_name": "mysql-server",
            "binary_version": "5.7.18-0ubuntu0.16.04.1"
          },
          {
            "binary_name": "mysql-server-5.7",
            "binary_version": "5.7.18-0ubuntu0.16.04.1"
          },
          {
            "binary_name": "mysql-server-core-5.7",
            "binary_version": "5.7.18-0ubuntu0.16.04.1"
          },
          {
            "binary_name": "mysql-source-5.7",
            "binary_version": "5.7.18-0ubuntu0.16.04.1"
          },
          {
            "binary_name": "mysql-testsuite",
            "binary_version": "5.7.18-0ubuntu0.16.04.1"
          },
          {
            "binary_name": "mysql-testsuite-5.7",
            "binary_version": "5.7.18-0ubuntu0.16.04.1"
          }
        ]
      },
      "package": {
        "ecosystem": "Ubuntu:16.04:LTS",
        "name": "mysql-5.7",
        "purl": "pkg:deb/ubuntu/mysql-5.7@5.7.18-0ubuntu0.16.04.1?arch=source\u0026distro=xenial"
      },
      "ranges": [
        {
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "5.7.18-0ubuntu0.16.04.1"
            }
          ],
          "type": "ECOSYSTEM"
        }
      ],
      "versions": [
        "5.7.11-0ubuntu4",
        "5.7.11-0ubuntu5",
        "5.7.11-0ubuntu6",
        "5.7.12-0ubuntu1",
        "5.7.12-0ubuntu1.1",
        "5.7.13-0ubuntu0.16.04.2",
        "5.7.15-0ubuntu0.16.04.1",
        "5.7.16-0ubuntu0.16.04.1",
        "5.7.17-0ubuntu0.16.04.1",
        "5.7.17-0ubuntu0.16.04.2"
      ]
    },
    {
      "ecosystem_specific": {
        "binaries": [
          {
            "binary_name": "percona-server-server",
            "binary_version": "5.6.22-rel71.0-0ubuntu4.1"
          },
          {
            "binary_name": "percona-server-server-5.6",
            "binary_version": "5.6.22-rel71.0-0ubuntu4.1"
          },
          {
            "binary_name": "percona-server-source-5.6",
            "binary_version": "5.6.22-rel71.0-0ubuntu4.1"
          },
          {
            "binary_name": "percona-server-test",
            "binary_version": "5.6.22-rel71.0-0ubuntu4.1"
          },
          {
            "binary_name": "percona-server-test-5.6",
            "binary_version": "5.6.22-rel71.0-0ubuntu4.1"
          }
        ]
      },
      "package": {
        "ecosystem": "Ubuntu:16.04:LTS",
        "name": "percona-server-5.6",
        "purl": "pkg:deb/ubuntu/percona-server-5.6@5.6.22-rel71.0-0ubuntu4.1?arch=source\u0026distro=xenial"
      },
      "ranges": [
        {
          "events": [
            {
              "introduced": "0"
            }
          ],
          "type": "ECOSYSTEM"
        }
      ],
      "versions": [
        "5.6.22-rel71.0-0ubuntu2",
        "5.6.22-rel71.0-0ubuntu4",
        "5.6.22-rel71.0-0ubuntu4.1"
      ]
    },
    {
      "ecosystem_specific": {
        "binaries": [
          {
            "binary_name": "percona-xtradb-cluster-server",
            "binary_version": "5.6.37-26.21-0ubuntu0.16.04.2"
          },
          {
            "binary_name": "percona-xtradb-cluster-server-5.6",
            "binary_version": "5.6.37-26.21-0ubuntu0.16.04.2"
          },
          {
            "binary_name": "percona-xtradb-cluster-source-5.6",
            "binary_version": "5.6.37-26.21-0ubuntu0.16.04.2"
          }
        ]
      },
      "package": {
        "ecosystem": "Ubuntu:16.04:LTS",
        "name": "percona-xtradb-cluster-5.6",
        "purl": "pkg:deb/ubuntu/percona-xtradb-cluster-5.6@5.6.37-26.21-0ubuntu0.16.04.2?arch=source\u0026distro=xenial"
      },
      "ranges": [
        {
          "events": [
            {
              "introduced": "0"
            }
          ],
          "type": "ECOSYSTEM"
        }
      ],
      "versions": [
        "5.6.21-25.8-0ubuntu2",
        "5.6.21-25.8-0ubuntu3",
        "5.6.21-25.8-0ubuntu3.1",
        "5.6.21-25.8-0ubuntu3.2",
        "5.6.34-26.19-0ubuntu0.16.04.1",
        "5.6.34-26.19-0ubuntu0.16.04.2",
        "5.6.37-26.21-0ubuntu0.16.04.1",
        "5.6.37-26.21-0ubuntu0.16.04.2"
      ]
    }
  ],
  "aliases": [],
  "details": "Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Security: Encryption). Supported versions that are affected are 5.7.17 and earlier. Difficult to exploit vulnerability allows low privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of MySQL Server accessible data. CVSS 3.0 Base Score 3.1 (Integrity impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:H/PR:L/UI:N/S:U/C:N/I:L/A:N).",
  "id": "UBUNTU-CVE-2017-3468",
  "modified": "2026-04-22T07:38:09Z",
  "published": "2017-04-24T00:00:00Z",
  "references": [
    {
      "type": "REPORT",
      "url": "https://ubuntu.com/security/CVE-2017-3468"
    },
    {
      "type": "REPORT",
      "url": "http://www.oracle.com/technetwork/security-advisory/cpuapr2017-3236618.html"
    },
    {
      "type": "ADVISORY",
      "url": "https://ubuntu.com/security/notices/USN-3269-1"
    },
    {
      "type": "REPORT",
      "url": "https://www.cve.org/CVERecord?id=CVE-2017-3468"
    }
  ],
  "related": [
    "USN-3269-1"
  ],
  "schema_version": "1.7.0",
  "severity": [
    {
      "score": "CVSS:3.0/AV:N/AC:H/PR:L/UI:N/S:U/C:N/I:L/A:N",
      "type": "CVSS_V3"
    },
    {
      "score": "low",
      "type": "Ubuntu"
    }
  ],
  "upstream": [
    "CVE-2017-3468"
  ]
}

ubuntu-cve-2017-3599

Vulnerability from osv_ubuntu

Published

2017-04-24 00:00

Modified

2026-04-22 07:38

Summary

Details

Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Pluggable Auth). Supported versions that are affected are 5.6.35 and earlier and 5.7.17 and earlier. Easily "exploitable" vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.0 Base Score 7.5 (Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H). NOTE: the previous information is from the April 2017 CPU. Oracle has not commented on third-party claims that this issue is an integer overflow in sql/auth/sql_authentication.cc which allows remote attackers to cause a denial of service via a crafted authentication packet.

Severity

7.5 (High)


                    
                      CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

N/A (UNKNOWN)


                    
                      medium

References

URL

Type

	https://ubuntu.com/security/CVE-2017-3599	REPORT
	http://www.oracle.com/technetwork/security-adviso…	REPORT
	https://ubuntu.com/security/notices/USN-3269-1	ADVISORY
	https://www.cve.org/CVERecord?id=CVE-2017-3599	REPORT

JSON

To clipboard

{
  "affected": [
    {
      "ecosystem_specific": {
        "availability": "No subscription required",
        "binaries": [
          {
            "binary_name": "libmysqlclient20",
            "binary_version": "5.7.18-0ubuntu0.16.04.1"
          },
          {
            "binary_name": "mysql-client",
            "binary_version": "5.7.18-0ubuntu0.16.04.1"
          },
          {
            "binary_name": "mysql-client-5.7",
            "binary_version": "5.7.18-0ubuntu0.16.04.1"
          },
          {
            "binary_name": "mysql-client-core-5.7",
            "binary_version": "5.7.18-0ubuntu0.16.04.1"
          },
          {
            "binary_name": "mysql-common",
            "binary_version": "5.7.18-0ubuntu0.16.04.1"
          },
          {
            "binary_name": "mysql-server",
            "binary_version": "5.7.18-0ubuntu0.16.04.1"
          },
          {
            "binary_name": "mysql-server-5.7",
            "binary_version": "5.7.18-0ubuntu0.16.04.1"
          },
          {
            "binary_name": "mysql-server-core-5.7",
            "binary_version": "5.7.18-0ubuntu0.16.04.1"
          },
          {
            "binary_name": "mysql-source-5.7",
            "binary_version": "5.7.18-0ubuntu0.16.04.1"
          },
          {
            "binary_name": "mysql-testsuite",
            "binary_version": "5.7.18-0ubuntu0.16.04.1"
          },
          {
            "binary_name": "mysql-testsuite-5.7",
            "binary_version": "5.7.18-0ubuntu0.16.04.1"
          }
        ]
      },
      "package": {
        "ecosystem": "Ubuntu:16.04:LTS",
        "name": "mysql-5.7",
        "purl": "pkg:deb/ubuntu/mysql-5.7@5.7.18-0ubuntu0.16.04.1?arch=source\u0026distro=xenial"
      },
      "ranges": [
        {
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "5.7.18-0ubuntu0.16.04.1"
            }
          ],
          "type": "ECOSYSTEM"
        }
      ],
      "versions": [
        "5.7.11-0ubuntu4",
        "5.7.11-0ubuntu5",
        "5.7.11-0ubuntu6",
        "5.7.12-0ubuntu1",
        "5.7.12-0ubuntu1.1",
        "5.7.13-0ubuntu0.16.04.2",
        "5.7.15-0ubuntu0.16.04.1",
        "5.7.16-0ubuntu0.16.04.1",
        "5.7.17-0ubuntu0.16.04.1",
        "5.7.17-0ubuntu0.16.04.2"
      ]
    },
    {
      "ecosystem_specific": {
        "binaries": [
          {
            "binary_name": "percona-server-server",
            "binary_version": "5.6.22-rel71.0-0ubuntu4.1"
          },
          {
            "binary_name": "percona-server-server-5.6",
            "binary_version": "5.6.22-rel71.0-0ubuntu4.1"
          },
          {
            "binary_name": "percona-server-source-5.6",
            "binary_version": "5.6.22-rel71.0-0ubuntu4.1"
          },
          {
            "binary_name": "percona-server-test",
            "binary_version": "5.6.22-rel71.0-0ubuntu4.1"
          },
          {
            "binary_name": "percona-server-test-5.6",
            "binary_version": "5.6.22-rel71.0-0ubuntu4.1"
          }
        ]
      },
      "package": {
        "ecosystem": "Ubuntu:16.04:LTS",
        "name": "percona-server-5.6",
        "purl": "pkg:deb/ubuntu/percona-server-5.6@5.6.22-rel71.0-0ubuntu4.1?arch=source\u0026distro=xenial"
      },
      "ranges": [
        {
          "events": [
            {
              "introduced": "0"
            }
          ],
          "type": "ECOSYSTEM"
        }
      ],
      "versions": [
        "5.6.22-rel71.0-0ubuntu2",
        "5.6.22-rel71.0-0ubuntu4",
        "5.6.22-rel71.0-0ubuntu4.1"
      ]
    },
    {
      "ecosystem_specific": {
        "binaries": [
          {
            "binary_name": "percona-xtradb-cluster-server",
            "binary_version": "5.6.37-26.21-0ubuntu0.16.04.2"
          },
          {
            "binary_name": "percona-xtradb-cluster-server-5.6",
            "binary_version": "5.6.37-26.21-0ubuntu0.16.04.2"
          },
          {
            "binary_name": "percona-xtradb-cluster-source-5.6",
            "binary_version": "5.6.37-26.21-0ubuntu0.16.04.2"
          }
        ]
      },
      "package": {
        "ecosystem": "Ubuntu:16.04:LTS",
        "name": "percona-xtradb-cluster-5.6",
        "purl": "pkg:deb/ubuntu/percona-xtradb-cluster-5.6@5.6.37-26.21-0ubuntu0.16.04.2?arch=source\u0026distro=xenial"
      },
      "ranges": [
        {
          "events": [
            {
              "introduced": "0"
            }
          ],
          "type": "ECOSYSTEM"
        }
      ],
      "versions": [
        "5.6.21-25.8-0ubuntu2",
        "5.6.21-25.8-0ubuntu3",
        "5.6.21-25.8-0ubuntu3.1",
        "5.6.21-25.8-0ubuntu3.2",
        "5.6.34-26.19-0ubuntu0.16.04.1",
        "5.6.34-26.19-0ubuntu0.16.04.2",
        "5.6.37-26.21-0ubuntu0.16.04.1",
        "5.6.37-26.21-0ubuntu0.16.04.2"
      ]
    }
  ],
  "aliases": [],
  "details": "Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Pluggable Auth). Supported versions that are affected are 5.6.35 and earlier and 5.7.17 and earlier. Easily \"exploitable\" vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.0 Base Score 7.5 (Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H). NOTE: the previous information is from the April 2017 CPU. Oracle has not commented on third-party claims that this issue is an integer overflow in sql/auth/sql_authentication.cc which allows remote attackers to cause a denial of service via a crafted authentication packet.",
  "id": "UBUNTU-CVE-2017-3599",
  "modified": "2026-04-22T07:38:09Z",
  "published": "2017-04-24T00:00:00Z",
  "references": [
    {
      "type": "REPORT",
      "url": "https://ubuntu.com/security/CVE-2017-3599"
    },
    {
      "type": "REPORT",
      "url": "http://www.oracle.com/technetwork/security-advisory/cpuapr2017-3236618.html"
    },
    {
      "type": "ADVISORY",
      "url": "https://ubuntu.com/security/notices/USN-3269-1"
    },
    {
      "type": "REPORT",
      "url": "https://www.cve.org/CVERecord?id=CVE-2017-3599"
    }
  ],
  "related": [
    "USN-3269-1"
  ],
  "schema_version": "1.7.0",
  "severity": [
    {
      "score": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
      "type": "CVSS_V3"
    },
    {
      "score": "medium",
      "type": "Ubuntu"
    }
  ],
  "upstream": [
    "CVE-2017-3599"
  ]
}

ubuntu-cve-2017-3600

Vulnerability from osv_ubuntu

Published

2017-04-24 00:00

Modified

2026-04-22 07:38

Summary

Details

Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Client mysqldump). Supported versions that are affected are 5.5.54 and earlier, 5.6.35 and earlier and 5.7.17 and earlier. Difficult to exploit vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in takeover of MySQL Server. Note: CVE-2017-3600 is equivalent to CVE-2016-5483. CVSS 3.0 Base Score 6.6 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H).

Severity

6.6 (Medium)


                    
                      CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H

N/A (UNKNOWN)


                    
                      medium

References

URL

Type

	https://ubuntu.com/security/CVE-2017-3600	REPORT
	http://www.oracle.com/technetwork/security-adviso…	REPORT
	https://ubuntu.com/security/notices/USN-3269-1	ADVISORY
	https://ubuntu.com/security/notices/USN-3357-2	ADVISORY
	https://www.cve.org/CVERecord?id=CVE-2017-3600	REPORT

JSON

To clipboard

{
  "affected": [
    {
      "ecosystem_specific": {
        "availability": "No subscription required",
        "binaries": [
          {
            "binary_name": "libmariadbclient18",
            "binary_version": "5.5.53-1ubuntu0.14.04.1"
          },
          {
            "binary_name": "mariadb-client",
            "binary_version": "5.5.53-1ubuntu0.14.04.1"
          },
          {
            "binary_name": "mariadb-client-5.5",
            "binary_version": "5.5.53-1ubuntu0.14.04.1"
          },
          {
            "binary_name": "mariadb-client-core-5.5",
            "binary_version": "5.5.53-1ubuntu0.14.04.1"
          },
          {
            "binary_name": "mariadb-common",
            "binary_version": "5.5.53-1ubuntu0.14.04.1"
          },
          {
            "binary_name": "mariadb-server",
            "binary_version": "5.5.53-1ubuntu0.14.04.1"
          },
          {
            "binary_name": "mariadb-server-5.5",
            "binary_version": "5.5.53-1ubuntu0.14.04.1"
          },
          {
            "binary_name": "mariadb-server-core-5.5",
            "binary_version": "5.5.53-1ubuntu0.14.04.1"
          },
          {
            "binary_name": "mariadb-test",
            "binary_version": "5.5.53-1ubuntu0.14.04.1"
          },
          {
            "binary_name": "mariadb-test-5.5",
            "binary_version": "5.5.53-1ubuntu0.14.04.1"
          }
        ]
      },
      "package": {
        "ecosystem": "Ubuntu:14.04:LTS",
        "name": "mariadb-5.5",
        "purl": "pkg:deb/ubuntu/mariadb-5.5@5.5.53-1ubuntu0.14.04.1?arch=source\u0026distro=trusty"
      },
      "ranges": [
        {
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "5.5.53-1ubuntu0.14.04.1"
            }
          ],
          "type": "ECOSYSTEM"
        }
      ],
      "versions": [
        "5.5.32-1ubuntu1",
        "5.5.35-1ubuntu1",
        "5.5.36-1",
        "5.5.37-0ubuntu0.14.04.1",
        "5.5.39-0ubuntu0.14.04.1",
        "5.5.40-0ubuntu0.14.04.1",
        "5.5.41-0ubuntu0.14.04.2",
        "5.5.41-1ubuntu0.14.04.1",
        "5.5.43-1ubuntu0.14.04.2",
        "5.5.44-1ubuntu0.14.04.1",
        "5.5.46-1ubuntu0.14.04.2",
        "5.5.47-1ubuntu0.14.04.1",
        "5.5.49-1ubuntu0.14.04.1",
        "5.5.52-1ubuntu0.14.04.1"
      ]
    },
    {
      "ecosystem_specific": {
        "availability": "No subscription required",
        "binaries": [
          {
            "binary_name": "libmysqlclient18",
            "binary_version": "5.5.55-0ubuntu0.14.04.1"
          },
          {
            "binary_name": "libmysqld-pic",
            "binary_version": "5.5.55-0ubuntu0.14.04.1"
          },
          {
            "binary_name": "mysql-client",
            "binary_version": "5.5.55-0ubuntu0.14.04.1"
          },
          {
            "binary_name": "mysql-client-5.5",
            "binary_version": "5.5.55-0ubuntu0.14.04.1"
          },
          {
            "binary_name": "mysql-client-core-5.5",
            "binary_version": "5.5.55-0ubuntu0.14.04.1"
          },
          {
            "binary_name": "mysql-common",
            "binary_version": "5.5.55-0ubuntu0.14.04.1"
          },
          {
            "binary_name": "mysql-server",
            "binary_version": "5.5.55-0ubuntu0.14.04.1"
          },
          {
            "binary_name": "mysql-server-5.5",
            "binary_version": "5.5.55-0ubuntu0.14.04.1"
          },
          {
            "binary_name": "mysql-server-core-5.5",
            "binary_version": "5.5.55-0ubuntu0.14.04.1"
          },
          {
            "binary_name": "mysql-source-5.5",
            "binary_version": "5.5.55-0ubuntu0.14.04.1"
          },
          {
            "binary_name": "mysql-testsuite",
            "binary_version": "5.5.55-0ubuntu0.14.04.1"
          },
          {
            "binary_name": "mysql-testsuite-5.5",
            "binary_version": "5.5.55-0ubuntu0.14.04.1"
          }
        ]
      },
      "package": {
        "ecosystem": "Ubuntu:14.04:LTS",
        "name": "mysql-5.5",
        "purl": "pkg:deb/ubuntu/mysql-5.5@5.5.55-0ubuntu0.14.04.1?arch=source\u0026distro=trusty"
      },
      "ranges": [
        {
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "5.5.55-0ubuntu0.14.04.1"
            }
          ],
          "type": "ECOSYSTEM"
        }
      ],
      "versions": [
        "5.5.32-0ubuntu7",
        "5.5.34-0ubuntu1",
        "5.5.34-0ubuntu2",
        "5.5.35-0ubuntu1",
        "5.5.35+dfsg-1ubuntu1",
        "5.5.37-0ubuntu0.14.04.1",
        "5.5.38-0ubuntu0.14.04.1",
        "5.5.40-0ubuntu0.14.04.1",
        "5.5.41-0ubuntu0.14.04.1",
        "5.5.43-0ubuntu0.14.04.1",
        "5.5.44-0ubuntu0.14.04.1",
        "5.5.46-0ubuntu0.14.04.2",
        "5.5.47-0ubuntu0.14.04.1",
        "5.5.49-0ubuntu0.14.04.1",
        "5.5.50-0ubuntu0.14.04.1",
        "5.5.52-0ubuntu0.14.04.1",
        "5.5.53-0ubuntu0.14.04.1",
        "5.5.54-0ubuntu0.14.04.1"
      ]
    },
    {
      "ecosystem_specific": {
        "availability": "No subscription required",
        "binaries": [
          {
            "binary_name": "libmysqlclient20",
            "binary_version": "5.7.18-0ubuntu0.16.04.1"
          },
          {
            "binary_name": "mysql-client",
            "binary_version": "5.7.18-0ubuntu0.16.04.1"
          },
          {
            "binary_name": "mysql-client-5.7",
            "binary_version": "5.7.18-0ubuntu0.16.04.1"
          },
          {
            "binary_name": "mysql-client-core-5.7",
            "binary_version": "5.7.18-0ubuntu0.16.04.1"
          },
          {
            "binary_name": "mysql-common",
            "binary_version": "5.7.18-0ubuntu0.16.04.1"
          },
          {
            "binary_name": "mysql-server",
            "binary_version": "5.7.18-0ubuntu0.16.04.1"
          },
          {
            "binary_name": "mysql-server-5.7",
            "binary_version": "5.7.18-0ubuntu0.16.04.1"
          },
          {
            "binary_name": "mysql-server-core-5.7",
            "binary_version": "5.7.18-0ubuntu0.16.04.1"
          },
          {
            "binary_name": "mysql-source-5.7",
            "binary_version": "5.7.18-0ubuntu0.16.04.1"
          },
          {
            "binary_name": "mysql-testsuite",
            "binary_version": "5.7.18-0ubuntu0.16.04.1"
          },
          {
            "binary_name": "mysql-testsuite-5.7",
            "binary_version": "5.7.18-0ubuntu0.16.04.1"
          }
        ]
      },
      "package": {
        "ecosystem": "Ubuntu:16.04:LTS",
        "name": "mysql-5.7",
        "purl": "pkg:deb/ubuntu/mysql-5.7@5.7.18-0ubuntu0.16.04.1?arch=source\u0026distro=xenial"
      },
      "ranges": [
        {
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "5.7.18-0ubuntu0.16.04.1"
            }
          ],
          "type": "ECOSYSTEM"
        }
      ],
      "versions": [
        "5.7.11-0ubuntu4",
        "5.7.11-0ubuntu5",
        "5.7.11-0ubuntu6",
        "5.7.12-0ubuntu1",
        "5.7.12-0ubuntu1.1",
        "5.7.13-0ubuntu0.16.04.2",
        "5.7.15-0ubuntu0.16.04.1",
        "5.7.16-0ubuntu0.16.04.1",
        "5.7.17-0ubuntu0.16.04.1",
        "5.7.17-0ubuntu0.16.04.2"
      ]
    },
    {
      "ecosystem_specific": {
        "binaries": [
          {
            "binary_name": "percona-server-server",
            "binary_version": "5.6.22-rel71.0-0ubuntu4.1"
          },
          {
            "binary_name": "percona-server-server-5.6",
            "binary_version": "5.6.22-rel71.0-0ubuntu4.1"
          },
          {
            "binary_name": "percona-server-source-5.6",
            "binary_version": "5.6.22-rel71.0-0ubuntu4.1"
          },
          {
            "binary_name": "percona-server-test",
            "binary_version": "5.6.22-rel71.0-0ubuntu4.1"
          },
          {
            "binary_name": "percona-server-test-5.6",
            "binary_version": "5.6.22-rel71.0-0ubuntu4.1"
          }
        ]
      },
      "package": {
        "ecosystem": "Ubuntu:16.04:LTS",
        "name": "percona-server-5.6",
        "purl": "pkg:deb/ubuntu/percona-server-5.6@5.6.22-rel71.0-0ubuntu4.1?arch=source\u0026distro=xenial"
      },
      "ranges": [
        {
          "events": [
            {
              "introduced": "0"
            }
          ],
          "type": "ECOSYSTEM"
        }
      ],
      "versions": [
        "5.6.22-rel71.0-0ubuntu2",
        "5.6.22-rel71.0-0ubuntu4",
        "5.6.22-rel71.0-0ubuntu4.1"
      ]
    },
    {
      "ecosystem_specific": {
        "binaries": [
          {
            "binary_name": "percona-xtradb-cluster-server",
            "binary_version": "5.6.37-26.21-0ubuntu0.16.04.2"
          },
          {
            "binary_name": "percona-xtradb-cluster-server-5.6",
            "binary_version": "5.6.37-26.21-0ubuntu0.16.04.2"
          },
          {
            "binary_name": "percona-xtradb-cluster-source-5.6",
            "binary_version": "5.6.37-26.21-0ubuntu0.16.04.2"
          }
        ]
      },
      "package": {
        "ecosystem": "Ubuntu:16.04:LTS",
        "name": "percona-xtradb-cluster-5.6",
        "purl": "pkg:deb/ubuntu/percona-xtradb-cluster-5.6@5.6.37-26.21-0ubuntu0.16.04.2?arch=source\u0026distro=xenial"
      },
      "ranges": [
        {
          "events": [
            {
              "introduced": "0"
            }
          ],
          "type": "ECOSYSTEM"
        }
      ],
      "versions": [
        "5.6.21-25.8-0ubuntu2",
        "5.6.21-25.8-0ubuntu3",
        "5.6.21-25.8-0ubuntu3.1",
        "5.6.21-25.8-0ubuntu3.2",
        "5.6.34-26.19-0ubuntu0.16.04.1",
        "5.6.34-26.19-0ubuntu0.16.04.2",
        "5.6.37-26.21-0ubuntu0.16.04.1",
        "5.6.37-26.21-0ubuntu0.16.04.2"
      ]
    }
  ],
  "aliases": [],
  "details": "Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Client mysqldump). Supported versions that are affected are 5.5.54 and earlier, 5.6.35 and earlier and 5.7.17 and earlier. Difficult to exploit vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in takeover of MySQL Server. Note: CVE-2017-3600 is equivalent to CVE-2016-5483. CVSS 3.0 Base Score 6.6 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H).",
  "id": "UBUNTU-CVE-2017-3600",
  "modified": "2026-04-22T07:38:09Z",
  "published": "2017-04-24T00:00:00Z",
  "references": [
    {
      "type": "REPORT",
      "url": "https://ubuntu.com/security/CVE-2017-3600"
    },
    {
      "type": "REPORT",
      "url": "http://www.oracle.com/technetwork/security-advisory/cpuapr2017-3236618.html"
    },
    {
      "type": "ADVISORY",
      "url": "https://ubuntu.com/security/notices/USN-3269-1"
    },
    {
      "type": "ADVISORY",
      "url": "https://ubuntu.com/security/notices/USN-3357-2"
    },
    {
      "type": "REPORT",
      "url": "https://www.cve.org/CVERecord?id=CVE-2017-3600"
    }
  ],
  "related": [
    "USN-3269-1",
    "USN-3357-2"
  ],
  "schema_version": "1.7.0",
  "severity": [
    {
      "score": "CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H",
      "type": "CVSS_V3"
    },
    {
      "score": "medium",
      "type": "Ubuntu"
    }
  ],
  "upstream": [
    "CVE-2017-3600"
  ]
}

Sightings

Author	Source	Type	Date	Other

Nomenclature

Seen: The vulnerability was mentioned, discussed, or observed by the user.
Confirmed: The vulnerability has been validated from an analyst's perspective.
Published Proof of Concept: A public proof of concept is available for this vulnerability.
Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
Not confirmed: The user expressed doubt about the validity of the vulnerability.
Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.

Detection rules are retrieved from Rulezet.

Action not permitted

usn-3269-1

Vulnerability from osv_ubuntu

ubuntu-cve-2017-3467

Vulnerability from osv_ubuntu

ubuntu-cve-2017-3468

Vulnerability from osv_ubuntu

ubuntu-cve-2017-3599

Vulnerability from osv_ubuntu

ubuntu-cve-2017-3600

Vulnerability from osv_ubuntu

Tags

Sightings

Nomenclature