CVE catalog

CVE-2017-10268

Security update for mariadb

[CVE catalog]

Severity
Medium · CVSS 4.1CVSS:3.0/AV:L/AC:H/PR:H/UI:N/S:U/C:H/I:N/A:N
Published
Updated
Source
[NVD] · [CVE record]
EPSS
0.70% · Oct 25, 2026

Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Replication). Supported versions that are affected are 5.5.57 and earlier, 5.6.37 and earlier and 5.7.19 and earlier. Difficult to exploit vulnerability allows high privileged attacker with logon to the infrastructure where MySQL Server executes to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all MySQL Server accessible data. CVSS 3.0 Base Score 4.1 (Confidentiality impacts). CVSS Vector: (CVSS:3.0/AV:L/AC:H/PR:H/UI:N/S:U/C:H/I:N/A:N).

Vulnerable and fixed packages

Distribution-reported package versions and fixes. These do not depend on matching against the OpenFactory package catalog.

DistributionPackageReleaseVersionStatus
Alpinemariadb3.410.1.32-r0fixed
Alpinemariadb3.510.1.32-r0fixed
Alpinemariadb3.610.1.32-r0fixed
Alpinemariadb3.710.1.32-r0fixed
Ubuntumysql-5.514.045.5.32-0ubuntu7vulnerable
Ubuntumysql-5.514.045.5.34-0ubuntu1vulnerable
Ubuntumysql-5.514.045.5.34-0ubuntu2vulnerable
Ubuntumysql-5.514.045.5.35-0ubuntu1vulnerable
Ubuntumysql-5.514.045.5.35+dfsg-1ubuntu1vulnerable
Ubuntumysql-5.514.045.5.37-0ubuntu0.14.04.1vulnerable
Ubuntumysql-5.514.045.5.38-0ubuntu0.14.04.1vulnerable
Ubuntumysql-5.514.045.5.40-0ubuntu0.14.04.1vulnerable
Ubuntumysql-5.514.045.5.41-0ubuntu0.14.04.1vulnerable
Ubuntumysql-5.514.045.5.43-0ubuntu0.14.04.1vulnerable
Ubuntumysql-5.514.045.5.44-0ubuntu0.14.04.1vulnerable
Ubuntumysql-5.514.045.5.46-0ubuntu0.14.04.2vulnerable
Ubuntumysql-5.514.045.5.47-0ubuntu0.14.04.1vulnerable
Ubuntumysql-5.514.045.5.49-0ubuntu0.14.04.1vulnerable
Ubuntumysql-5.514.045.5.50-0ubuntu0.14.04.1vulnerable
Ubuntumysql-5.514.045.5.52-0ubuntu0.14.04.1vulnerable
Ubuntumysql-5.514.045.5.53-0ubuntu0.14.04.1vulnerable
Ubuntumysql-5.514.045.5.54-0ubuntu0.14.04.1vulnerable
Ubuntumysql-5.514.045.5.55-0ubuntu0.14.04.1vulnerable
Ubuntumysql-5.514.045.5.57-0ubuntu0.14.04.1vulnerable
Ubuntumysql-5.514.045.5.58-0ubuntu0.14.04.1fixed
Ubuntumysql-5.716.045.7.11-0ubuntu4vulnerable
Ubuntumysql-5.716.045.7.11-0ubuntu5vulnerable
Ubuntumysql-5.716.045.7.11-0ubuntu6vulnerable
Ubuntumysql-5.716.045.7.12-0ubuntu1vulnerable
Ubuntumysql-5.716.045.7.12-0ubuntu1.1vulnerable
Ubuntumysql-5.716.045.7.13-0ubuntu0.16.04.2vulnerable
Ubuntumysql-5.716.045.7.15-0ubuntu0.16.04.1vulnerable
Ubuntumysql-5.716.045.7.16-0ubuntu0.16.04.1vulnerable
Ubuntumysql-5.716.045.7.17-0ubuntu0.16.04.1vulnerable
Ubuntumysql-5.716.045.7.17-0ubuntu0.16.04.2vulnerable
Ubuntumysql-5.716.045.7.18-0ubuntu0.16.04.1vulnerable
Ubuntumysql-5.716.045.7.19-0ubuntu0.16.04.1vulnerable
Ubuntumysql-5.716.045.7.20-0ubuntu0.16.04.1fixed
Ubuntumysql-5.514.045.5.32-0ubuntu7vulnerable
Ubuntumysql-5.514.045.5.34-0ubuntu1vulnerable
Ubuntumysql-5.514.045.5.34-0ubuntu2vulnerable
Ubuntumysql-5.514.045.5.35-0ubuntu1vulnerable
Ubuntumysql-5.514.045.5.35+dfsg-1ubuntu1vulnerable
Ubuntumysql-5.514.045.5.37-0ubuntu0.14.04.1vulnerable
Ubuntumysql-5.514.045.5.38-0ubuntu0.14.04.1vulnerable
Ubuntumysql-5.514.045.5.40-0ubuntu0.14.04.1vulnerable
Ubuntumysql-5.514.045.5.41-0ubuntu0.14.04.1vulnerable
Ubuntumysql-5.514.045.5.43-0ubuntu0.14.04.1vulnerable
Ubuntumysql-5.514.045.5.44-0ubuntu0.14.04.1vulnerable
Ubuntumysql-5.514.045.5.46-0ubuntu0.14.04.2vulnerable
Ubuntumysql-5.514.045.5.47-0ubuntu0.14.04.1vulnerable
Ubuntumysql-5.514.045.5.49-0ubuntu0.14.04.1vulnerable
Ubuntumysql-5.514.045.5.50-0ubuntu0.14.04.1vulnerable
Ubuntumysql-5.514.045.5.52-0ubuntu0.14.04.1vulnerable
Ubuntumysql-5.514.045.5.53-0ubuntu0.14.04.1vulnerable
Ubuntumysql-5.514.045.5.54-0ubuntu0.14.04.1vulnerable
Ubuntumysql-5.514.045.5.55-0ubuntu0.14.04.1vulnerable
Ubuntumysql-5.514.045.5.57-0ubuntu0.14.04.1vulnerable
Ubuntumysql-5.514.045.5.58-0ubuntu0.14.04.1fixed
Ubuntumysql-5.716.045.7.11-0ubuntu4vulnerable
Ubuntumysql-5.716.045.7.11-0ubuntu5vulnerable
Ubuntumysql-5.716.045.7.11-0ubuntu6vulnerable
Ubuntumysql-5.716.045.7.12-0ubuntu1vulnerable
Ubuntumysql-5.716.045.7.12-0ubuntu1.1vulnerable
Ubuntumysql-5.716.045.7.13-0ubuntu0.16.04.2vulnerable
Ubuntumysql-5.716.045.7.15-0ubuntu0.16.04.1vulnerable
Ubuntumysql-5.716.045.7.16-0ubuntu0.16.04.1vulnerable
Ubuntumysql-5.716.045.7.17-0ubuntu0.16.04.1vulnerable
Ubuntumysql-5.716.045.7.17-0ubuntu0.16.04.2vulnerable
Ubuntumysql-5.716.045.7.18-0ubuntu0.16.04.1vulnerable
Ubuntumysql-5.716.045.7.19-0ubuntu0.16.04.1vulnerable
Ubuntumysql-5.716.045.7.20-0ubuntu0.16.04.1fixed
Ubuntupercona-server-5.616.045.6.22-rel71.0-0ubuntu2vulnerable
Ubuntupercona-server-5.616.045.6.22-rel71.0-0ubuntu4vulnerable
Ubuntupercona-server-5.616.045.6.22-rel71.0-0ubuntu4.1vulnerable
Ubuntupercona-xtradb-cluster-5.616.045.6.21-25.8-0ubuntu2vulnerable
Ubuntupercona-xtradb-cluster-5.616.045.6.21-25.8-0ubuntu3vulnerable
Ubuntupercona-xtradb-cluster-5.616.045.6.21-25.8-0ubuntu3.1vulnerable
Ubuntupercona-xtradb-cluster-5.616.045.6.21-25.8-0ubuntu3.2vulnerable
Ubuntupercona-xtradb-cluster-5.616.045.6.34-26.19-0ubuntu0.16.04.1vulnerable
Ubuntupercona-xtradb-cluster-5.616.045.6.34-26.19-0ubuntu0.16.04.2vulnerable
Ubuntupercona-xtradb-cluster-5.616.045.6.37-26.21-0ubuntu0.16.04.1vulnerable
Ubuntupercona-xtradb-cluster-5.616.045.6.37-26.21-0ubuntu0.16.04.2vulnerable
Ubuntumysql-5.718.045.7.19-0ubuntu1vulnerable
Ubuntumysql-5.718.045.7.20-0ubuntu0.17.10.1fixed
Debianmariadb-10.1910.1.23-9+deb9u1vulnerable
Debianmariadb-10.1910.1.24-1vulnerable
Debianmariadb-10.1910.1.24-2vulnerable
Debianmariadb-10.1910.1.24-3vulnerable
Debianmariadb-10.1910.1.24-4vulnerable
Debianmariadb-10.1910.1.24-5vulnerable
Debianmariadb-10.1910.1.24-6vulnerable
Debianmariadb-10.1910.1.25-1vulnerable
Debianmariadb-10.1910.1.26-0+deb9u1vulnerable
Debianmariadb-10.1910.1.26-1vulnerable
Debianmariadb-10.1910.1.28-1vulnerable
Debianmariadb-10.1910.1.28-2vulnerable
Debianmariadb-10.1910.1.29-1vulnerable
Debianmariadb-10.1910.1.37-0+deb9u1fixed
Debianmysql-5.585.5.42-1vulnerable
Debianmysql-5.585.5.43-0+deb8u1vulnerable
Debianmysql-5.585.5.44-0+deb8u1vulnerable
Debianmysql-5.585.5.46-0+deb8u1vulnerable
Debianmysql-5.585.5.47-0+deb8u1vulnerable
Debianmysql-5.585.5.49-0+deb8u1vulnerable
Debianmysql-5.585.5.50-0+deb8u1vulnerable
Debianmysql-5.585.5.52-0+deb8u1vulnerable
Debianmysql-5.585.5.53-0+deb8u1vulnerable
Debianmysql-5.585.5.54-0+deb8u1vulnerable
Debianmysql-5.585.5.55-0+deb8u1vulnerable
Debianmysql-5.585.5.57-0+deb8u1vulnerable
Debianmysql-5.585.5.58-0+deb8u1fixed
Debianmysql-5.575.5.30+dfsg-1.1vulnerable
Debianmysql-5.575.5.31+dfsg-0+wheezy1vulnerable
Debianmysql-5.575.5.31+dfsg-1vulnerable
Debianmysql-5.575.5.33+dfsg-0+wheezy1vulnerable
Debianmysql-5.575.5.33+dfsg-1vulnerable
Debianmysql-5.575.5.35+dfsg-0+wheezy1vulnerable
Debianmysql-5.575.5.35+dfsg-1vulnerable
Debianmysql-5.575.5.35+dfsg-2vulnerable
Debianmysql-5.575.5.37-0+wheezy1vulnerable
Debianmysql-5.575.5.37-1vulnerable
Debianmysql-5.575.5.38-0+wheezy1vulnerable
Debianmysql-5.575.5.39-1vulnerable
Debianmysql-5.575.5.40-0+wheezy1vulnerable
Debianmysql-5.575.5.40-1vulnerable
Debianmysql-5.575.5.41-0+wheezy1vulnerable
Debianmysql-5.575.5.42-1vulnerable
Debianmysql-5.575.5.43-0+deb7u1vulnerable
Debianmysql-5.575.5.44-0+deb7u1vulnerable
Debianmysql-5.575.5.46-0+deb7u1vulnerable
Debianmysql-5.575.5.47-0+deb7u1vulnerable
Debianmysql-5.575.5.49-0+deb7u1vulnerable
Debianmysql-5.575.5.50-0+deb7u1vulnerable
Debianmysql-5.575.5.50-0+deb7u2vulnerable
Debianmysql-5.575.5.52-0+deb7u1vulnerable
Debianmysql-5.575.5.53-0+deb7u1vulnerable
Debianmysql-5.575.5.54-0+deb7u1vulnerable
Debianmysql-5.575.5.54-0+deb7u2vulnerable
Debianmysql-5.575.5.55-0+deb7u1vulnerable
Debianmysql-5.575.5.57-0+deb7u1vulnerable
Debianmysql-5.575.5.58-0+deb7u1fixed
Debianmariadb-10.0810.0.16-1vulnerable
Debianmariadb-10.0810.0.17-1vulnerable
Debianmariadb-10.0810.0.17-1~exp1vulnerable
Debianmariadb-10.0810.0.17-1~exp2vulnerable
Debianmariadb-10.0810.0.18-1~exp1vulnerable
Debianmariadb-10.0810.0.19-1vulnerable
Debianmariadb-10.0810.0.20-0+deb8u1vulnerable
Debianmariadb-10.0810.0.20-1vulnerable
Debianmariadb-10.0810.0.20-2vulnerable
Debianmariadb-10.0810.0.20-3vulnerable
Debianmariadb-10.0810.0.21-1vulnerable
Debianmariadb-10.0810.0.21-2vulnerable
Debianmariadb-10.0810.0.21-3vulnerable
Debianmariadb-10.0810.0.22-0+deb8u1vulnerable
Debianmariadb-10.0810.0.22-1vulnerable
Debianmariadb-10.0810.0.22-2vulnerable
Debianmariadb-10.0810.0.22-2~exp1vulnerable
Debianmariadb-10.0810.0.22-2~exp2vulnerable
Debianmariadb-10.0810.0.22-3vulnerable
Debianmariadb-10.0810.0.22-4vulnerable
Debianmariadb-10.0810.0.22-4~exp1vulnerable
Debianmariadb-10.0810.0.22-5vulnerable
Debianmariadb-10.0810.0.22-6vulnerable
Debianmariadb-10.0810.0.23-0+deb8u1vulnerable
Debianmariadb-10.0810.0.23-1vulnerable
Debianmariadb-10.0810.0.23-2vulnerable
Debianmariadb-10.0810.0.23-3vulnerable
Debianmariadb-10.0810.0.24-1vulnerable
Debianmariadb-10.0810.0.24-2vulnerable
Debianmariadb-10.0810.0.24-3vulnerable
Debianmariadb-10.0810.0.24-4vulnerable
Debianmariadb-10.0810.0.24-4~exp1vulnerable
Debianmariadb-10.0810.0.24-5vulnerable
Debianmariadb-10.0810.0.24-6vulnerable
Debianmariadb-10.0810.0.24-7vulnerable
Debianmariadb-10.0810.0.25-0+deb8u1vulnerable
Debianmariadb-10.0810.0.25-1vulnerable
Debianmariadb-10.0810.0.26-0+deb8u1vulnerable
Debianmariadb-10.0810.0.26-1vulnerable
Debianmariadb-10.0810.0.26-2vulnerable
Debianmariadb-10.0810.0.26-2~exp2vulnerable
Debianmariadb-10.0810.0.26-2~exp3vulnerable
Debianmariadb-10.0810.0.26-3vulnerable
Debianmariadb-10.0810.0.27-0+deb8u1vulnerable
Debianmariadb-10.0810.0.27-1vulnerable
Debianmariadb-10.0810.0.27-2vulnerable
Debianmariadb-10.0810.0.28-0+deb8u1vulnerable
Debianmariadb-10.0810.0.28-1vulnerable
Debianmariadb-10.0810.0.28-2vulnerable
Debianmariadb-10.0810.0.28-3vulnerable
Debianmariadb-10.0810.0.29-0+deb8u1vulnerable
Debianmariadb-10.0810.0.30-0+deb8u1vulnerable
Debianmariadb-10.0810.0.30-0+deb8u2vulnerable
Debianmariadb-10.0810.0.32-0+deb8u1vulnerable
Debianmariadb-10.0810.0.35-0+deb8u1fixed
Susemariadblinux enterprise desktop 12 sp210.0.33-29.13.1fixed
Susemariadblinux enterprise desktop 12 sp310.0.33-29.13.1fixed
Susemariadblinux enterprise server for raspberry pi 12 sp210.0.33-29.13.1fixed
Susemariadblinux enterprise software development kit 12 sp210.0.33-29.13.1fixed
Susemariadblinux enterprise software development kit 12 sp310.0.33-29.13.1fixed
Susemariadblinux enterprise server 12 sp210.0.33-29.13.1fixed
Susemariadblinux enterprise server for sap applications 12 sp210.0.33-29.13.1fixed
Susemariadblinux enterprise server 12 sp310.0.33-29.13.1fixed
Susemariadblinux enterprise server for sap applications 12 sp310.0.33-29.13.1fixed
Susemariadblinux enterprise workstation extension 12 sp210.0.33-29.13.1fixed
Susemariadblinux enterprise workstation extension 12 sp310.0.33-29.13.1fixed
Susemysqllinux enterprise software development kit 11 sp45.5.58-0.39.6.1fixed
Susemysqllinux enterprise point of sale 11 sp35.5.58-0.39.6.1fixed
Susemysqllinux enterprise server 11 sp3-ltss5.5.58-0.39.6.1fixed
Susemysqllinux enterprise server 11 sp3-teradata5.5.58-0.39.6.1fixed
Susemysqllinux enterprise server 11 sp45.5.58-0.39.6.1fixed
Susemysqllinux enterprise server for sap applications 11 sp45.5.58-0.39.6.1fixed
Susegalera-3openstack cloud 725.3.23-8.3fixed
Susemariadbopenstack cloud 710.2.15-7.1fixed
Susemariadb-connector-copenstack cloud 73.0.3-1.3.3fixed
Suserubygem-mysql2openstack cloud 70.4.10-7.2fixed
Susextrabackupopenstack cloud 72.4.10-5.3fixed
Susemariadblinux enterprise server 12-ltss10.0.34-20.43.1fixed

Fixed-version evidence

DistributionPackageTypeReleaseFixed versionUrgencyOriginBugs
Alpinemariadbapk3.410.1.32-r0Not reportedALPINE-CVE-2017-10268Not reported
Alpinemariadbapk3.510.1.32-r0Not reportedALPINE-CVE-2017-10268Not reported
Alpinemariadbapk3.610.1.32-r0Not reportedALPINE-CVE-2017-10268Not reported
Alpinemariadbapk3.710.1.32-r0Not reportedALPINE-CVE-2017-10268Not reported
Ubuntumysql-5.5deb14.045.5.58-0ubuntu0.14.04.1Not reportedUSN-3459-1Not reported
Ubuntumysql-5.7deb16.045.7.20-0ubuntu0.16.04.1Not reportedUSN-3459-1Not reported
Ubuntumysql-5.5deb14.045.5.58-0ubuntu0.14.04.1Not reportedUBUNTU-CVE-2017-10268Not reported
Ubuntumysql-5.7deb16.045.7.20-0ubuntu0.16.04.1Not reportedUBUNTU-CVE-2017-10268Not reported
Ubuntumysql-5.7deb18.045.7.20-0ubuntu0.17.10.1Not reportedUBUNTU-CVE-2017-10268Not reported
Debianmariadb-10.1deb910.1.37-0+deb9u1Not reportedDSA-4341-1Not reported
Debianmysql-5.5deb85.5.58-0+deb8u1Not reportedDSA-4002-1Not reported
Debianmysql-5.5deb75.5.58-0+deb7u1Not reportedDLA-1141-1Not reported
Debianmariadb-10.0deb810.0.35-0+deb8u1Not reportedDLA-1407-1Not reported
Susemariadbrpmlinux enterprise desktop 12 sp210.0.33-29.13.1Not reportedSUSE-SU-2018:0384-1Not reported
Susemariadbrpmlinux enterprise desktop 12 sp310.0.33-29.13.1Not reportedSUSE-SU-2018:0384-1Not reported
Susemariadbrpmlinux enterprise server for raspberry pi 12 sp210.0.33-29.13.1Not reportedSUSE-SU-2018:0384-1Not reported
Susemariadbrpmlinux enterprise software development kit 12 sp210.0.33-29.13.1Not reportedSUSE-SU-2018:0384-1Not reported
Susemariadbrpmlinux enterprise software development kit 12 sp310.0.33-29.13.1Not reportedSUSE-SU-2018:0384-1Not reported
Susemariadbrpmlinux enterprise server 12 sp210.0.33-29.13.1Not reportedSUSE-SU-2018:0384-1Not reported
Susemariadbrpmlinux enterprise server for sap applications 12 sp210.0.33-29.13.1Not reportedSUSE-SU-2018:0384-1Not reported
Susemariadbrpmlinux enterprise server 12 sp310.0.33-29.13.1Not reportedSUSE-SU-2018:0384-1Not reported
Susemariadbrpmlinux enterprise server for sap applications 12 sp310.0.33-29.13.1Not reportedSUSE-SU-2018:0384-1Not reported
Susemariadbrpmlinux enterprise workstation extension 12 sp210.0.33-29.13.1Not reportedSUSE-SU-2018:0384-1Not reported
Susemariadbrpmlinux enterprise workstation extension 12 sp310.0.33-29.13.1Not reportedSUSE-SU-2018:0384-1Not reported
Susemysqlrpmlinux enterprise software development kit 11 sp45.5.58-0.39.6.1Not reportedSUSE-SU-2017:2996-1Not reported
Susemysqlrpmlinux enterprise point of sale 11 sp35.5.58-0.39.6.1Not reportedSUSE-SU-2017:2996-1Not reported
Susemysqlrpmlinux enterprise server 11 sp3-ltss5.5.58-0.39.6.1Not reportedSUSE-SU-2017:2996-1Not reported
Susemysqlrpmlinux enterprise server 11 sp3-teradata5.5.58-0.39.6.1Not reportedSUSE-SU-2017:2996-1Not reported
Susemysqlrpmlinux enterprise server 11 sp45.5.58-0.39.6.1Not reportedSUSE-SU-2017:2996-1Not reported
Susemysqlrpmlinux enterprise server for sap applications 11 sp45.5.58-0.39.6.1Not reportedSUSE-SU-2017:2996-1Not reported
Susegalera-3rpmopenstack cloud 725.3.23-8.3Not reportedSUSE-SU-2018:1853-1Not reported
Susemariadbrpmopenstack cloud 710.2.15-7.1Not reportedSUSE-SU-2018:1853-1Not reported
Susemariadb-connector-crpmopenstack cloud 73.0.3-1.3.3Not reportedSUSE-SU-2018:1853-1Not reported
Suserubygem-mysql2rpmopenstack cloud 70.4.10-7.2Not reportedSUSE-SU-2018:1853-1Not reported
Susextrabackuprpmopenstack cloud 72.4.10-5.3Not reportedSUSE-SU-2018:1853-1Not reported
Susemariadbrpmlinux enterprise server 12-ltss10.0.34-20.43.1Not reportedSUSE-SU-2018:0698-1Not reported

OpenFactory catalog packages

No matching packages in this catalog.

Observed:

References