CVE-2017-3302

high

Description

Crash in libmysqlclient.so in Oracle MySQL before 5.6.21 and 5.7.x before 5.7.5 and MariaDB through 5.5.54, 10.0.x through 10.0.29, 10.1.x through 10.1.21, and 10.2.x through 10.2.3.

References

Advisories
More

https://access.redhat.com/errata/RHSA-2018:0574

https://access.redhat.com/errata/RHSA-2018:0279

https://access.redhat.com/errata/RHSA-2017:2787

https://access.redhat.com/errata/RHSA-2017:2192

http://www.securitytracker.com/id/1038287

http://www.securityfocus.com/bid/96162

http://www.openwall.com/lists/oss-security/2017/02/11/11

http://www.debian.org/security/2017/dsa-3834

http://www.debian.org/security/2017/dsa-3809

http://www.oracle.com/technetwork/security-advisory/cpuapr2017-3236618.html

Details

Source: Mitre, NVD

Published: 2017-02-12

Updated: 2025-04-20

Risk Information

CVSS v2

Base Score: 5

Vector: CVSS2#AV:N/AC:L/Au:N/C:N/I:N/A:P

Severity: Medium

CVSS v3

Base Score: 7.5

Vector: CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Severity: High

EPSS

EPSS: 0.01893

Detections

Analytics