VDB

GCVE-110-MAGEIA-2017-382

GCVE-110-MAGEIA-2017-382
Advisory Published
Vulnetix · Advisory published October 24, 2017
Thijs Alkemade discovered that unexpected automatic deserialisation of Java objects in the MySQL Connector/J JDBC driver may result in the execution of arbitary code (CVE-2017-3523). Two vulnerabilities have been found in the MySQL Connector/J JDBC driver (CVE-2017-3586, CVE-2017-3589).
Download JSON Open in Console

Affected Products

VendorProductVersionsPlatforms
Mageiamysql-connector-java5.1.42-1.mga5 (unaffected), 0 (affected)—
Mageiamysql-connector-java0 (affected), 5.1.42-1.mga6 (unaffected)—

Aliases

CVE-2017-3523CVE-2017-3586CVE-2017-3589

References

Updated mysql-connector-java packages fix security vulnerabilities
advisory
Updated mysql-connector-java packages fix security vulnerabilities
advisory
Updated mysql-connector-java packages fix security vulnerabilities
advisory
Updated mysql-connector-java packages fix security vulnerabilities
issue
Updated mysql-connector-java packages fix security vulnerabilities
issue
Updated mysql-connector-java packages fix security vulnerabilities
issue

Browse GCVE Records

73,040 records in the GCVE database · Updated July 15, 2026

No matching records found.

Explore Further

Investigate this vulnerability in the interactive console or download the raw GCVE record.

Open in Console Download JSON
$ Console Community · 100/wk Open console ›