VDB
CVE-2017-3302
CVE-2017-3302
PUBLISHED
CVSS 7.5 HIGH
Crash in libmysqlclient.so in Oracle MySQL before 5.6.21 and 5.7.x before 5.7.5 and MariaDB through 5.5.54, 10.0.x through 10.0.29, 10.1.x through 10.1.21, and 10.2.x through 10.2.3.
EPSS 4.90% · 91.8th percentile
Risk Scores
CVSS 3.0
7.5
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
EPSS Score
4.90%
91.8th percentile
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Ubuntu:16.04:LTS | percona-xtradb-cluster-5.6 | 5.6.37-26.21-0ubuntu0.16.04.1, *, 5.6.37-26.21-0ubuntu0.16.04.2 |
| Ubuntu:14.04:LTS | mariadb-5.5 | 5.5.52-1ubuntu0.14.04.1, 5.5.54-1ubuntu0.14.04.1, 5.5.44-1ubuntu0.14.04.1 |
| Ubuntu:16.04:LTS | percona-server-5.6 | 0, *, 5.6.22-rel71.0-0ubuntu4.1 |
| Ubuntu:14.04:LTS | mysql-5.5 | 0, 5.5.32-0ubuntu7, 5.5.34-0ubuntu1 |
Timeline
- Feb 11, 2017 CVE Published
- Oct 2, 2020 PoC Published
- Nov 6, 2020 PoC Published
- Apr 14, 2021 EPSS Score
- Jun 23, 2021 EPSS Score
- Aug 25, 2021 EPSS Score
- Sep 6, 2021 PoC Published
- Dec 29, 2021 EPSS Score
- Feb 4, 2022 EPSS Score
- Mar 2, 2022 EPSS Score
- May 4, 2022 EPSS Score
- Sep 7, 2022 EPSS Score
References
- https://ubuntu.com/security/CVE-2017-3302 third-party-advisory
- http://www.openwall.com/lists/oss-security/2017/01/28/1 third-party-advisory
- http://www.openwall.com/lists/oss-security/2017/02/11/11 third-party-advisory
- http://www.oracle.com/technetwork/security-advisory/cpuapr2017-3236618.html third-party-advisory
- https://ubuntu.com/security/notices/USN-3269-1 vendor-advisory
- https://ubuntu.com/security/notices/USN-3357-2 vendor-advisory
- https://www.cve.org/CVERecord?id=CVE-2017-3302 third-party-advisory