CVE catalog

CVE-2017-3238

Security update for mysql

[CVE catalog]

Severity
Medium · CVSS 6.5CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
Published
Updated
Source
[NVD] · [CVE record]
EPSS
4.79% · Oct 27, 2026

Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Optimizer). Supported versions that are affected are 5.5.53 and earlier, 5.6.34 and earlier and 5.7.16 and earlier. Easily exploitable vulnerability allows low privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS v3.0 Base Score 6.5 (Availability impacts).

Vulnerable and fixed packages

Distribution-reported package versions and fixes. These do not depend on matching against the OpenFactory package catalog.

DistributionPackageReleaseVersionStatus
Alpinemariadb3.1010.1.21-r0fixed
Alpinemariadb3.1110.1.21-r0fixed
Alpinemariadb3.1210.1.21-r0fixed
Alpinemariadb3.1310.1.21-r0fixed
Alpinemariadb3.1410.1.21-r0fixed
Alpinemariadb3.1510.1.21-r0fixed
Alpinemariadb3.1610.1.21-r0fixed
Alpinemariadb3.1710.1.21-r0fixed
Alpinemariadb3.1810.1.21-r0fixed
Alpinemariadb3.1910.1.21-r0fixed
Alpinemariadb3.25.5.54-r0fixed
Alpinemariadb3.2010.1.21-r0fixed
Alpinemariadb3.2110.1.21-r0fixed
Alpinemariadb3.2210.1.21-r0fixed
Alpinemariadb3.2310.1.21-r0fixed
Alpinemariadb3.2410.1.21-r0fixed
Alpinemariadb3.310.1.21-r0fixed
Alpinemariadb3.410.1.21-r0fixed
Alpinemariadb3.510.1.21-r0fixed
Alpinemariadb3.610.1.21-r0fixed
Alpinemariadb3.710.1.21-r0fixed
Alpinemariadb3.810.1.21-r0fixed
Alpinemariadb3.910.1.21-r0fixed
Ubuntumysql-5.514.045.5.32-0ubuntu7vulnerable
Ubuntumysql-5.514.045.5.34-0ubuntu1vulnerable
Ubuntumysql-5.514.045.5.34-0ubuntu2vulnerable
Ubuntumysql-5.514.045.5.35-0ubuntu1vulnerable
Ubuntumysql-5.514.045.5.35+dfsg-1ubuntu1vulnerable
Ubuntumysql-5.514.045.5.37-0ubuntu0.14.04.1vulnerable
Ubuntumysql-5.514.045.5.38-0ubuntu0.14.04.1vulnerable
Ubuntumysql-5.514.045.5.40-0ubuntu0.14.04.1vulnerable
Ubuntumysql-5.514.045.5.41-0ubuntu0.14.04.1vulnerable
Ubuntumysql-5.514.045.5.43-0ubuntu0.14.04.1vulnerable
Ubuntumysql-5.514.045.5.44-0ubuntu0.14.04.1vulnerable
Ubuntumysql-5.514.045.5.46-0ubuntu0.14.04.2vulnerable
Ubuntumysql-5.514.045.5.47-0ubuntu0.14.04.1vulnerable
Ubuntumysql-5.514.045.5.49-0ubuntu0.14.04.1vulnerable
Ubuntumysql-5.514.045.5.50-0ubuntu0.14.04.1vulnerable
Ubuntumysql-5.514.045.5.52-0ubuntu0.14.04.1vulnerable
Ubuntumysql-5.514.045.5.53-0ubuntu0.14.04.1vulnerable
Ubuntumysql-5.514.045.5.54-0ubuntu0.14.04.1fixed
Ubuntumysql-5.716.045.7.11-0ubuntu4vulnerable
Ubuntumysql-5.716.045.7.11-0ubuntu5vulnerable
Ubuntumysql-5.716.045.7.11-0ubuntu6vulnerable
Ubuntumysql-5.716.045.7.12-0ubuntu1vulnerable
Ubuntumysql-5.716.045.7.12-0ubuntu1.1vulnerable
Ubuntumysql-5.716.045.7.13-0ubuntu0.16.04.2vulnerable
Ubuntumysql-5.716.045.7.15-0ubuntu0.16.04.1vulnerable
Ubuntumysql-5.716.045.7.16-0ubuntu0.16.04.1vulnerable
Ubuntumysql-5.716.045.7.17-0ubuntu0.16.04.1fixed
Ubuntumariadb-5.514.045.5.32-1ubuntu1vulnerable
Ubuntumariadb-5.514.045.5.35-1ubuntu1vulnerable
Ubuntumariadb-5.514.045.5.36-1vulnerable
Ubuntumariadb-5.514.045.5.37-0ubuntu0.14.04.1vulnerable
Ubuntumariadb-5.514.045.5.39-0ubuntu0.14.04.1vulnerable
Ubuntumariadb-5.514.045.5.40-0ubuntu0.14.04.1vulnerable
Ubuntumariadb-5.514.045.5.41-0ubuntu0.14.04.2vulnerable
Ubuntumariadb-5.514.045.5.41-1ubuntu0.14.04.1vulnerable
Ubuntumariadb-5.514.045.5.43-1ubuntu0.14.04.2vulnerable
Ubuntumariadb-5.514.045.5.44-1ubuntu0.14.04.1vulnerable
Ubuntumariadb-5.514.045.5.46-1ubuntu0.14.04.2vulnerable
Ubuntumariadb-5.514.045.5.47-1ubuntu0.14.04.1vulnerable
Ubuntumariadb-5.514.045.5.49-1ubuntu0.14.04.1vulnerable
Ubuntumariadb-5.514.045.5.52-1ubuntu0.14.04.1vulnerable
Ubuntumariadb-5.514.045.5.53-1ubuntu0.14.04.1vulnerable
Ubuntumariadb-5.514.045.5.54-1ubuntu0.14.04.1fixed
Ubuntumysql-5.514.045.5.32-0ubuntu7vulnerable
Ubuntumysql-5.514.045.5.34-0ubuntu1vulnerable
Ubuntumysql-5.514.045.5.34-0ubuntu2vulnerable
Ubuntumysql-5.514.045.5.35-0ubuntu1vulnerable
Ubuntumysql-5.514.045.5.35+dfsg-1ubuntu1vulnerable
Ubuntumysql-5.514.045.5.37-0ubuntu0.14.04.1vulnerable
Ubuntumysql-5.514.045.5.38-0ubuntu0.14.04.1vulnerable
Ubuntumysql-5.514.045.5.40-0ubuntu0.14.04.1vulnerable
Ubuntumysql-5.514.045.5.41-0ubuntu0.14.04.1vulnerable
Ubuntumysql-5.514.045.5.43-0ubuntu0.14.04.1vulnerable
Ubuntumysql-5.514.045.5.44-0ubuntu0.14.04.1vulnerable
Ubuntumysql-5.514.045.5.46-0ubuntu0.14.04.2vulnerable
Ubuntumysql-5.514.045.5.47-0ubuntu0.14.04.1vulnerable
Ubuntumysql-5.514.045.5.49-0ubuntu0.14.04.1vulnerable
Ubuntumysql-5.514.045.5.50-0ubuntu0.14.04.1vulnerable
Ubuntumysql-5.514.045.5.52-0ubuntu0.14.04.1vulnerable
Ubuntumysql-5.514.045.5.53-0ubuntu0.14.04.1vulnerable
Ubuntumysql-5.514.045.5.54-0ubuntu0.14.04.1fixed
Ubuntumariadb-10.016.0410.0.20-0ubuntu0.15.04.1vulnerable
Ubuntumariadb-10.016.0410.0.22-0ubuntu1vulnerable
Ubuntumariadb-10.016.0410.0.23-1vulnerable
Ubuntumariadb-10.016.0410.0.23-2vulnerable
Ubuntumariadb-10.016.0410.0.24-7vulnerable
Ubuntumariadb-10.016.0410.0.25-0ubuntu0.16.04.1vulnerable
Ubuntumariadb-10.016.0410.0.27-0ubuntu0.16.04.1vulnerable
Ubuntumariadb-10.016.0410.0.28-0ubuntu0.16.04.1vulnerable
Ubuntumariadb-10.016.0410.0.29-0ubuntu0.16.04.1fixed
Ubuntumysql-5.716.045.7.11-0ubuntu4vulnerable
Ubuntumysql-5.716.045.7.11-0ubuntu5vulnerable
Ubuntumysql-5.716.045.7.11-0ubuntu6vulnerable
Ubuntumysql-5.716.045.7.12-0ubuntu1vulnerable
Ubuntumysql-5.716.045.7.12-0ubuntu1.1vulnerable
Ubuntumysql-5.716.045.7.13-0ubuntu0.16.04.2vulnerable
Ubuntumysql-5.716.045.7.15-0ubuntu0.16.04.1vulnerable
Ubuntumysql-5.716.045.7.16-0ubuntu0.16.04.1vulnerable
Ubuntumysql-5.716.045.7.17-0ubuntu0.16.04.1fixed
Ubuntupercona-server-5.616.045.6.22-rel71.0-0ubuntu2vulnerable
Ubuntupercona-server-5.616.045.6.22-rel71.0-0ubuntu4vulnerable
Ubuntupercona-server-5.616.045.6.22-rel71.0-0ubuntu4.1vulnerable
Ubuntupercona-xtradb-cluster-5.616.045.6.21-25.8-0ubuntu2vulnerable
Ubuntupercona-xtradb-cluster-5.616.045.6.21-25.8-0ubuntu3vulnerable
Ubuntupercona-xtradb-cluster-5.616.045.6.21-25.8-0ubuntu3.1vulnerable
Ubuntupercona-xtradb-cluster-5.616.045.6.21-25.8-0ubuntu3.2vulnerable
Ubuntupercona-xtradb-cluster-5.616.045.6.34-26.19-0ubuntu0.16.04.1vulnerable
Ubuntupercona-xtradb-cluster-5.616.045.6.34-26.19-0ubuntu0.16.04.2vulnerable
Ubuntupercona-xtradb-cluster-5.616.045.6.37-26.21-0ubuntu0.16.04.1vulnerable
Ubuntupercona-xtradb-cluster-5.616.045.6.37-26.21-0ubuntu0.16.04.2vulnerable
Debianmysql-5.575.5.30+dfsg-1.1vulnerable
Debianmysql-5.575.5.31+dfsg-0+wheezy1vulnerable
Debianmysql-5.575.5.31+dfsg-1vulnerable
Debianmysql-5.575.5.33+dfsg-0+wheezy1vulnerable
Debianmysql-5.575.5.33+dfsg-1vulnerable
Debianmysql-5.575.5.35+dfsg-0+wheezy1vulnerable
Debianmysql-5.575.5.35+dfsg-1vulnerable
Debianmysql-5.575.5.35+dfsg-2vulnerable
Debianmysql-5.575.5.37-0+wheezy1vulnerable
Debianmysql-5.575.5.37-1vulnerable
Debianmysql-5.575.5.38-0+wheezy1vulnerable
Debianmysql-5.575.5.39-1vulnerable
Debianmysql-5.575.5.40-0+wheezy1vulnerable
Debianmysql-5.575.5.40-1vulnerable
Debianmysql-5.575.5.41-0+wheezy1vulnerable
Debianmysql-5.575.5.42-1vulnerable
Debianmysql-5.575.5.43-0+deb7u1vulnerable
Debianmysql-5.575.5.44-0+deb7u1vulnerable
Debianmysql-5.575.5.46-0+deb7u1vulnerable
Debianmysql-5.575.5.47-0+deb7u1vulnerable
Debianmysql-5.575.5.49-0+deb7u1vulnerable
Debianmysql-5.575.5.50-0+deb7u1vulnerable
Debianmysql-5.575.5.50-0+deb7u2vulnerable
Debianmysql-5.575.5.52-0+deb7u1vulnerable
Debianmysql-5.575.5.53-0+deb7u1vulnerable
Debianmysql-5.575.5.54-0+deb7u1fixed
Debianmysql-5.585.5.42-1vulnerable
Debianmysql-5.585.5.43-0+deb8u1vulnerable
Debianmysql-5.585.5.44-0+deb8u1vulnerable
Debianmysql-5.585.5.46-0+deb8u1vulnerable
Debianmysql-5.585.5.47-0+deb8u1vulnerable
Debianmysql-5.585.5.49-0+deb8u1vulnerable
Debianmysql-5.585.5.50-0+deb8u1vulnerable
Debianmysql-5.585.5.52-0+deb8u1vulnerable
Debianmysql-5.585.5.53-0+deb8u1vulnerable
Debianmysql-5.585.5.54-0+deb8u1fixed
Susemysqllinux enterprise software development kit 11 sp45.5.54-0.35.1fixed
Susemysqlopenstack cloud 55.5.54-0.35.1fixed
Susemysqlmanager 2.15.5.54-0.35.1fixed
Susemysqlmanager proxy 2.15.5.54-0.35.1fixed
Susemysqllinux enterprise point of sale 11 sp35.5.54-0.35.1fixed
Susemysqllinux enterprise server 11 sp3-ltss5.5.54-0.35.1fixed
Susemysqllinux enterprise server 11 sp3-teradata5.5.54-0.35.1fixed
Susemysqllinux enterprise server 11 sp45.5.54-0.35.1fixed
Susemysqllinux enterprise server for sap applications 11 sp45.5.54-0.35.1fixed

Fixed-version evidence

DistributionPackageTypeReleaseFixed versionUrgencyOriginBugs
Alpinemariadbapk3.1010.1.21-r0Not reportedALPINE-CVE-2017-3238Not reported
Alpinemariadbapk3.1110.1.21-r0Not reportedALPINE-CVE-2017-3238Not reported
Alpinemariadbapk3.1210.1.21-r0Not reportedALPINE-CVE-2017-3238Not reported
Alpinemariadbapk3.1310.1.21-r0Not reportedALPINE-CVE-2017-3238Not reported
Alpinemariadbapk3.1410.1.21-r0Not reportedALPINE-CVE-2017-3238Not reported
Alpinemariadbapk3.1510.1.21-r0Not reportedALPINE-CVE-2017-3238Not reported
Alpinemariadbapk3.1610.1.21-r0Not reportedALPINE-CVE-2017-3238Not reported
Alpinemariadbapk3.1710.1.21-r0Not reportedALPINE-CVE-2017-3238Not reported
Alpinemariadbapk3.1810.1.21-r0Not reportedALPINE-CVE-2017-3238Not reported
Alpinemariadbapk3.1910.1.21-r0Not reportedALPINE-CVE-2017-3238Not reported
Alpinemariadbapk3.25.5.54-r0Not reportedALPINE-CVE-2017-3238Not reported
Alpinemariadbapk3.2010.1.21-r0Not reportedALPINE-CVE-2017-3238Not reported
Alpinemariadbapk3.2110.1.21-r0Not reportedALPINE-CVE-2017-3238Not reported
Alpinemariadbapk3.2210.1.21-r0Not reportedALPINE-CVE-2017-3238Not reported
Alpinemariadbapk3.2310.1.21-r0Not reportedALPINE-CVE-2017-3238Not reported
Alpinemariadbapk3.2410.1.21-r0Not reportedALPINE-CVE-2017-3238Not reported
Alpinemariadbapk3.310.1.21-r0Not reportedALPINE-CVE-2017-3238Not reported
Alpinemariadbapk3.410.1.21-r0Not reportedALPINE-CVE-2017-3238Not reported
Alpinemariadbapk3.510.1.21-r0Not reportedALPINE-CVE-2017-3238Not reported
Alpinemariadbapk3.610.1.21-r0Not reportedALPINE-CVE-2017-3238Not reported
Alpinemariadbapk3.710.1.21-r0Not reportedALPINE-CVE-2017-3238Not reported
Alpinemariadbapk3.810.1.21-r0Not reportedALPINE-CVE-2017-3238Not reported
Alpinemariadbapk3.910.1.21-r0Not reportedALPINE-CVE-2017-3238Not reported
Ubuntumysql-5.5deb14.045.5.54-0ubuntu0.14.04.1Not reportedUSN-3174-1Not reported
Ubuntumysql-5.7deb16.045.7.17-0ubuntu0.16.04.1Not reportedUSN-3174-1Not reported
Ubuntumariadb-5.5deb14.045.5.54-1ubuntu0.14.04.1Not reportedUBUNTU-CVE-2017-3238Not reported
Ubuntumysql-5.5deb14.045.5.54-0ubuntu0.14.04.1Not reportedUBUNTU-CVE-2017-3238Not reported
Ubuntumariadb-10.0deb16.0410.0.29-0ubuntu0.16.04.1Not reportedUBUNTU-CVE-2017-3238Not reported
Ubuntumysql-5.7deb16.045.7.17-0ubuntu0.16.04.1Not reportedUBUNTU-CVE-2017-3238Not reported
Debianmysql-5.5deb75.5.54-0+deb7u1Not reportedDLA-797-1Not reported
Debianmysql-5.5deb85.5.54-0+deb8u1Not reportedDSA-3767-1Not reported
Susemysqlrpmlinux enterprise software development kit 11 sp45.5.54-0.35.1Not reportedSUSE-SU-2017:0408-1Not reported
Susemysqlrpmopenstack cloud 55.5.54-0.35.1Not reportedSUSE-SU-2017:0408-1Not reported
Susemysqlrpmmanager 2.15.5.54-0.35.1Not reportedSUSE-SU-2017:0408-1Not reported
Susemysqlrpmmanager proxy 2.15.5.54-0.35.1Not reportedSUSE-SU-2017:0408-1Not reported
Susemysqlrpmlinux enterprise point of sale 11 sp35.5.54-0.35.1Not reportedSUSE-SU-2017:0408-1Not reported
Susemysqlrpmlinux enterprise server 11 sp3-ltss5.5.54-0.35.1Not reportedSUSE-SU-2017:0408-1Not reported
Susemysqlrpmlinux enterprise server 11 sp3-teradata5.5.54-0.35.1Not reportedSUSE-SU-2017:0408-1Not reported
Susemysqlrpmlinux enterprise server 11 sp45.5.54-0.35.1Not reportedSUSE-SU-2017:0408-1Not reported
Susemysqlrpmlinux enterprise server for sap applications 11 sp45.5.54-0.35.1Not reportedSUSE-SU-2017:0408-1Not reported

OpenFactory catalog packages

No matching packages in this catalog.

Observed:

References