CVE catalog

CVE-2017-3523

UBUNTU-CVE-2017-3523

[CVE catalog]

Severity
High · CVSS 8.5CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H
Published
Updated
Source
[NVD] · [CVE record]
EPSS
2.88% · Oct 25, 2026

Vulnerability in the MySQL Connectors component of Oracle MySQL (subcomponent: Connector/J). Supported versions that are affected are 5.1.40 and earlier. Difficult to exploit vulnerability allows low privileged attacker with network access via multiple protocols to compromise MySQL Connectors. While the vulnerability is in MySQL Connectors, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in takeover of MySQL Connectors. CVSS 3.0 Base Score 8.5 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H).

Vulnerable and fixed packages

Distribution-reported package versions and fixes. These do not depend on matching against the OpenFactory package catalog.

DistributionPackageReleaseVersionStatus
Debianmysql-connector-java75.1.16-2vulnerable
Debianmysql-connector-java75.1.25-1vulnerable
Debianmysql-connector-java75.1.26-1vulnerable
Debianmysql-connector-java75.1.27-1vulnerable
Debianmysql-connector-java75.1.28-1vulnerable
Debianmysql-connector-java75.1.29-1vulnerable
Debianmysql-connector-java75.1.30-1vulnerable
Debianmysql-connector-java75.1.31-1vulnerable
Debianmysql-connector-java75.1.32-1vulnerable
Debianmysql-connector-java75.1.37-1vulnerable
Debianmysql-connector-java75.1.38-1vulnerable
Debianmysql-connector-java75.1.39-1vulnerable
Debianmysql-connector-java75.1.39-1~deb7u1vulnerable
Debianmysql-connector-java75.1.39-1~deb8u1vulnerable
Debianmysql-connector-java75.1.40-1vulnerable
Debianmysql-connector-java75.1.41-1vulnerable
Debianmysql-connector-java75.1.41-1~deb8u1vulnerable
Debianmysql-connector-java75.1.42-1~deb7u1fixed
Debianmysql-connector-java85.1.32-1vulnerable
Debianmysql-connector-java85.1.37-1vulnerable
Debianmysql-connector-java85.1.38-1vulnerable
Debianmysql-connector-java85.1.39-1vulnerable
Debianmysql-connector-java85.1.39-1~deb7u1vulnerable
Debianmysql-connector-java85.1.39-1~deb8u1vulnerable
Debianmysql-connector-java85.1.40-1vulnerable
Debianmysql-connector-java85.1.41-1~deb8u1fixed
Opensusemysql-connector-javatumbleweed8.0.25-2.2fixed
Susemysql-connector-javalinux enterprise software development kit 12 sp25.1.42-5.4.1fixed
Susemysql-connector-javalinux enterprise software development kit 12 sp35.1.42-5.4.1fixed
Ubuntumysql-connector-java14.045.1.25-1vulnerable
Ubuntumysql-connector-java14.045.1.26-1vulnerable
Ubuntumysql-connector-java14.045.1.27-1vulnerable
Ubuntumysql-connector-java14.045.1.28-1vulnerable
Ubuntumysql-connector-java16.045.1.32-1vulnerable
Ubuntumysql-connector-java16.045.1.38-1vulnerable

Fixed-version evidence

DistributionPackageTypeReleaseFixed versionUrgencyOriginBugs
Debianmysql-connector-javadeb75.1.42-1~deb7u1Not reportedDLA-945-1Not reported
Debianmysql-connector-javadeb85.1.41-1~deb8u1Not reportedDSA-3840-1Not reported
Opensusemysql-connector-javarpmtumbleweed8.0.25-2.2Not reportedOPENSUSE-SU-2024:11071-1Not reported
Susemysql-connector-javarpmlinux enterprise software development kit 12 sp25.1.42-5.4.1Not reportedSUSE-SU-2017:2591-1Not reported
Susemysql-connector-javarpmlinux enterprise software development kit 12 sp35.1.42-5.4.1Not reportedSUSE-SU-2017:2591-1Not reported

OpenFactory catalog packages

[openSUSE Tumbleweed]

Observed:

References

[FIRST EPSS] · [OSV Package Vulnerability Database] · [Red Hat security advisories and VEX] · [SUSE security advisories and VEX]