| Revision Date: | 2017-03-10 | Version: | 6 |
| Title: | Vulnerability in MySQL Server 5.5.53 and earlier, 5.6.34 and earlier, and 5.7.16 and earlier – CVE-2017-3318 |
| Description: | Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Error Handling). Supported versions that are affected are 5.5.53 and earlier, 5.6.34 and earlier and 5.7.16 and earlier. Difficult to exploit vulnerability allows high privileged attacker with logon to the infrastructure where MySQL Server executes to compromise MySQL Server. Successful attacks require human interaction from a person other than the attacker. Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all MySQL Server accessible data. CVSS v3.0 Base Score 4.0 (Confidentiality impacts). |
| Family: | windows | Class: | vulnerability |
| Status: | ACCEPTED | Reference(s): | CPUJAN2017
CVE-2017-3318
|
| Platform(s): | Microsoft Windows 10
Microsoft Windows 7
Microsoft Windows 8
Microsoft Windows 8.1
Microsoft Windows Server 2008 R2
Microsoft Windows Server 2012
Microsoft Windows Server 2012 R2
Microsoft Windows Server 2016
| Product(s): | MySQL Server
|
| Definition Synopsis |
| Check for installation of MySQL Server 5.5 + vulnerable version MySQL 5.5 is installed
AND Check if MySQL Server 5.5 version is less than 5.5.54
OR Check for installation of MySQL Server 5.6 + vulnerable version
MySQL 5.6 is installed
AND Check if MySQL Server 5.6 version is less than 5.6.35
OR Check for installaion of MySQL Server 5.7 + vulnerable version
MySQL 5.7 is installed
AND Check if MySQL Server 5.7 version is less than 5.7.17
|