MySQL Cluster 7.3.x < 7.3.6 CLSTCONF RCE (July 2017 CPU)
High Nessus Plugin ID 101811
SynopsisThe remote database server is affected by a remote code execution vulnerability.
DescriptionThe version of MySQL Cluster running on the remote host is 7.3.x prior to 7.3.6. It is, therefore, affected by an overflow condition in the CLSTCONF component, specifically in the Python sock_recvfrom_into() function within file Modules/socketmodule.c, due to improper validation of user-supplied input when checking boundaries. An unauthenticated, remote attacker can exploit this, via a specially crafted string, to cause a denial of service condition or the execution of arbitrary code.
SolutionUpgrade to MySQL Cluster version 7.3.6 or later as referenced in the July 2017 Oracle Critical Patch Update advisory.