Vulnerability Description
Crash in libmysqlclient.so in Oracle MySQL before 5.6.21 and 5.7.x before 5.7.5 and MariaDB through 5.5.54, 10.0.x through 10.0.29, 10.1.x through 10.1.21, and 10.2.x through 10.2.3.
CVSS Score
HIGH
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Oracle | Mysql | >= 5.6.0, < 5.6.21 |
| Mariadb | Mariadb | <= 5.5.54 |
| Debian | Debian Linux | 8.0 |
| Redhat | Enterprise Linux Desktop | 7.0 |
| Redhat | Enterprise Linux Server | 7.0 |
| Redhat | Enterprise Linux Server Aus | 7.4 |
| Redhat | Enterprise Linux Server Eus | 7.4 |
| Redhat | Enterprise Linux Workstation | 7.0 |
Related Weaknesses (CWE)
References
- http://www.debian.org/security/2017/dsa-3809Third Party Advisory
- http://www.debian.org/security/2017/dsa-3834Third Party Advisory
- http://www.openwall.com/lists/oss-security/2017/02/11/11Mailing ListThird Party Advisory
- http://www.oracle.com/technetwork/security-advisory/cpuapr2017-3236618.htmlPatchVendor Advisory
- http://www.securityfocus.com/bid/96162Third Party AdvisoryVDB Entry
- http://www.securitytracker.com/id/1038287Third Party AdvisoryVDB Entry
- https://access.redhat.com/errata/RHSA-2017:2192Third Party Advisory
- https://access.redhat.com/errata/RHSA-2017:2787Third Party Advisory
- https://access.redhat.com/errata/RHSA-2018:0279Third Party Advisory
- https://access.redhat.com/errata/RHSA-2018:0574Third Party Advisory
- http://www.debian.org/security/2017/dsa-3809Third Party Advisory
- http://www.debian.org/security/2017/dsa-3834Third Party Advisory
- http://www.openwall.com/lists/oss-security/2017/02/11/11Mailing ListThird Party Advisory
- http://www.oracle.com/technetwork/security-advisory/cpuapr2017-3236618.htmlPatchVendor Advisory
- http://www.securityfocus.com/bid/96162Third Party AdvisoryVDB Entry
FAQ
What is CVE-2017-3302?
CVE-2017-3302 is a vulnerability with a CVSS score of 7.5 (HIGH). Crash in libmysqlclient.so in Oracle MySQL before 5.6.21 and 5.7.x before 5.7.5 and MariaDB through 5.5.54, 10.0.x through 10.0.29, 10.1.x through 10.1.21, and 10.2.x through 10.2.3.
How severe is CVE-2017-3302?
CVE-2017-3302 has been rated HIGH with a CVSS base score of 7.5/10. Review the CVSS metrics above for detailed severity breakdown.
Is there a patch for CVE-2017-3302?
Check the references section above for vendor advisories and patch information. Affected products include: Oracle Mysql, Mariadb Mariadb, Debian Debian Linux, Redhat Enterprise Linux Desktop, Redhat Enterprise Linux Server.