The version of MySQL running on the remote host is 5.7.x prior to 5.7.19. It is, therefore, affected by multiple vulnerabilities :

  - An unspecified flaw exists in the UDF component that     allows an authenticated, remote attacker to cause a     denial of service condition. (CVE-2017-3529)

  - An unspecified flaw exists in the Memcached component     that allows an unauthenticated, remote attacker to     impact integrity and availability. (CVE-2017-3633)

  - Multiple unspecified flaws exist in the DML component     that allow an authenticated, remote attacker to cause a     denial of service condition. (CVE-2017-3634,     CVE-2017-3639, CVE-2017-3640, CVE-2017-3641,     CVE-2017-3643, CVE-2017-3644, CVE-2017-10296)

  - An unspecified flaw exists in the Connector/C and C API     components that allow an authenticated, remote attacker     to cause a denial of service condition. (CVE-2017-3635)

  - An unspecified flaw exists in the X Plugin component     that allows an authenticated, remote attacker to cause a     denial of service condition. (CVE-2017-3637)

  - Multiple unspecified flaws exist in the Optimizer     component that allow an authenticated, remote attacker     to cause a denial of service condition. (CVE-2017-3638,     CVE-2017-3642, CVE-2017-3645, CVE-2017-10279)

  - Multiple unspecified flaws exist in the Replication     component that allow an authenticated, remote attacker     to cause a denial of service condition. (CVE-2017-3647,     CVE-2017-3649)

  - An unspecified flaw exists in the Charsets component     that allows an authenticated, remote attacker to cause a     denial of service condition. (CVE-2017-3648)

  - An unspecified flaw exists in the C API component that     allows an unauthenticated, remote attacker to disclose     sensitive information. (CVE-2017-3650)

  - An unspecified flaw exists in the Client mysqldump     component that allows an authenticated, remote attacker     to impact integrity. (CVE-2017-3651)

  - Multiple unspecified flaws exist in the DDL component     that allow an authenticated, remote attacker to impact     confidentiality and integrity. (CVE-2017-3652,     CVE-2017-3653)

  - An unspecified flaw exists in the OpenSSL Encryption     component that allows an unauthenticated, remote     attacker to cause a denial of service condition.
    (CVE-2017-3731)

  - An unspecified flaw exists in the Stored Procedure     component that allows an authenticated, remote attacker     to cause a denial of service condition. (CVE-2017-10284)

  - An unspecified flaw exists in the InnoDB component that     allows an authenticated, remote attacker to cause a     denial of service condition or to modify the contents of     the MySQL database. (CVE-2017-10365)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

Oracle reports :

Please reference CVE/URL list for details

ID	Name	Product	Family	Published	Updated	Severity
101979	MySQL 5.7.x < 5.7.19 Multiple Vulnerabilities (RPM Check) (July 2017 CPU) (October 2017 CPU)	Nessus	Databases	7/26/2017	6/3/2020	medium
103954	FreeBSD : MySQL -- multiple vulnerabilities (c41bedfd-b3f9-11e7-ac58-b499baebfeaf)	Nessus	FreeBSD Local Security Checks	10/19/2017	1/4/2021	high
101821	MySQL 5.7.x < 5.7.19 Multiple Vulnerabilities (Jul 2017 CPU) (Oct 2017 CPU) (Jul 2019 CPU)	Nessus	Databases	7/19/2017	7/18/2019	medium

Detections

Analytics

Plugins Search

medium

high

medium