GHSA-fhc7-95hq-9w87
Record from GitHub Advisory Database · Published May 13, 2022
Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: DDL). Supported versions that are affected are 5.5.56 and earlier, 5.6.36 and earlier and 5.7.18 and earlier. Difficult to exploit vulnerability allows low privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of MySQL Server accessible data. CVSS 3.0 Base Score 3.1 (Integrity impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:H/PR:L/UI:N/S:U/C:N/I:L/A:N).
Risk scores
Timeline
- May 13, 2022 CVE Published
- Apr 9, 2026 Distribution Patch (9 in total, the first dated here)
- Apr 9, 2026 Security Advisory
Query this with the API
The same record, from the CLI:
vulnetix vdb vuln GHSA-fhc7-95hq-9w87
vulnetix vdb fixes GHSA-fhc7-95hq-9w87
Or with curl, using the org id and key from your account page:
curl -s -H "Authorization: ApiKey ${VULNETIX_ORG_ID}:${VULNETIX_API_KEY}" \
"https://api.vdb.vulnetix.com/v2/vuln/GHSA-fhc7-95hq-9w87/fixes/registry"
The Community plan is free and allows 50 queries a day. Get a free API key · API quickstart
References
- https://access.redhat.com/errata/RHSA-2018:0279 url
- https://access.redhat.com/errata/RHSA-2018:0574 url
- https://access.redhat.com/errata/RHSA-2018:2439 url
- http://www.securityfocus.com/bid/99810 url
- http://www.securitytracker.com/id/1038928 url
- https://nvd.nist.gov/vuln/detail/CVE-2017-3653 advisory
- https://access.redhat.com/errata/RHSA-2017:2787 url
- https://access.redhat.com/errata/RHSA-2017:2886 url
- https://www.debian.org/security/2017/dsa-3955 url
- http://www.debian.org/security/2017/dsa-3922 url
- http://www.debian.org/security/2017/dsa-3944 url
- http://www.oracle.com/technetwork/security-advisory/cpujul2017-3236622.html url
- https://access.redhat.com/errata/RHSA-2018:2729 url