CVE catalog

CVE-2017-3635

Security update for mysql

[CVE catalog]

Severity
Medium · CVSS 5.3CVSS:3.0/AV:N/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H
Published
Updated
Source
[NVD] · [CVE record]
EPSS
2.03% · Oct 25, 2026

Vulnerability in the MySQL Connectors component of Oracle MySQL (subcomponent: Connector/C). Supported versions that are affected are 6.1.10 and earlier. Difficult to exploit vulnerability allows low privileged attacker with network access via multiple protocols to compromise MySQL Connectors. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Connectors. Note: The documentation has also been updated for the correct way to use mysql_stmt_close(). Please see: https://dev.mysql.com/doc/refman/5.7/en/mysql-stmt-execute.html, https://dev.mysql.com/doc/refman/5.7/en/mysql-stmt-fetch.html, https://dev.mysql.com/doc/refman/5.7/en/mysql-stmt-close.html, https://dev.mysql.com/doc/refman/5.7/en/mysql-stmt-error.html, https://dev.mysql.com/doc/refman/5.7/en/mysql-stmt-errno.html, and https://dev.mysql.com/doc/refman/5.7/en/mysql-stmt-sqlstate.html. CVSS 3.0 Base Score 5.3 (Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H).

Vulnerable and fixed packages

Distribution-reported package versions and fixes. These do not depend on matching against the OpenFactory package catalog.

DistributionPackageReleaseVersionStatus
Ubuntumysql-5.514.045.5.32-0ubuntu7vulnerable
Ubuntumysql-5.514.045.5.34-0ubuntu1vulnerable
Ubuntumysql-5.514.045.5.34-0ubuntu2vulnerable
Ubuntumysql-5.514.045.5.35-0ubuntu1vulnerable
Ubuntumysql-5.514.045.5.35+dfsg-1ubuntu1vulnerable
Ubuntumysql-5.514.045.5.37-0ubuntu0.14.04.1vulnerable
Ubuntumysql-5.514.045.5.38-0ubuntu0.14.04.1vulnerable
Ubuntumysql-5.514.045.5.40-0ubuntu0.14.04.1vulnerable
Ubuntumysql-5.514.045.5.41-0ubuntu0.14.04.1vulnerable
Ubuntumysql-5.514.045.5.43-0ubuntu0.14.04.1vulnerable
Ubuntumysql-5.514.045.5.44-0ubuntu0.14.04.1vulnerable
Ubuntumysql-5.514.045.5.46-0ubuntu0.14.04.2vulnerable
Ubuntumysql-5.514.045.5.47-0ubuntu0.14.04.1vulnerable
Ubuntumysql-5.514.045.5.49-0ubuntu0.14.04.1vulnerable
Ubuntumysql-5.514.045.5.50-0ubuntu0.14.04.1vulnerable
Ubuntumysql-5.514.045.5.52-0ubuntu0.14.04.1vulnerable
Ubuntumysql-5.514.045.5.53-0ubuntu0.14.04.1vulnerable
Ubuntumysql-5.514.045.5.54-0ubuntu0.14.04.1vulnerable
Ubuntumysql-5.514.045.5.55-0ubuntu0.14.04.1vulnerable
Ubuntumysql-5.514.045.5.57-0ubuntu0.14.04.1fixed
Ubuntumysql-5.716.045.7.11-0ubuntu4vulnerable
Ubuntumysql-5.716.045.7.11-0ubuntu5vulnerable
Ubuntumysql-5.716.045.7.11-0ubuntu6vulnerable
Ubuntumysql-5.716.045.7.12-0ubuntu1vulnerable
Ubuntumysql-5.716.045.7.12-0ubuntu1.1vulnerable
Ubuntumysql-5.716.045.7.13-0ubuntu0.16.04.2vulnerable
Ubuntumysql-5.716.045.7.15-0ubuntu0.16.04.1vulnerable
Ubuntumysql-5.716.045.7.16-0ubuntu0.16.04.1vulnerable
Ubuntumysql-5.716.045.7.17-0ubuntu0.16.04.1vulnerable
Ubuntumysql-5.716.045.7.17-0ubuntu0.16.04.2vulnerable
Ubuntumysql-5.716.045.7.18-0ubuntu0.16.04.1vulnerable
Ubuntumysql-5.716.045.7.19-0ubuntu0.16.04.1fixed
Ubuntupercona-server-5.616.045.6.22-rel71.0-0ubuntu2vulnerable
Ubuntupercona-server-5.616.045.6.22-rel71.0-0ubuntu4vulnerable
Ubuntupercona-server-5.616.045.6.22-rel71.0-0ubuntu4.1vulnerable
Ubuntupercona-xtradb-cluster-5.616.045.6.21-25.8-0ubuntu2vulnerable
Ubuntupercona-xtradb-cluster-5.616.045.6.21-25.8-0ubuntu3vulnerable
Ubuntupercona-xtradb-cluster-5.616.045.6.21-25.8-0ubuntu3.1vulnerable
Ubuntupercona-xtradb-cluster-5.616.045.6.21-25.8-0ubuntu3.2vulnerable
Ubuntupercona-xtradb-cluster-5.616.045.6.34-26.19-0ubuntu0.16.04.1vulnerable
Ubuntupercona-xtradb-cluster-5.616.045.6.34-26.19-0ubuntu0.16.04.2vulnerable
Ubuntupercona-xtradb-cluster-5.616.045.6.37-26.21-0ubuntu0.16.04.1vulnerable
Ubuntupercona-xtradb-cluster-5.616.045.6.37-26.21-0ubuntu0.16.04.2vulnerable
Ubuntumysql-5.718.045.7.19-0ubuntu1fixed
Debianmysql-5.585.5.42-1vulnerable
Debianmysql-5.585.5.43-0+deb8u1vulnerable
Debianmysql-5.585.5.44-0+deb8u1vulnerable
Debianmysql-5.585.5.46-0+deb8u1vulnerable
Debianmysql-5.585.5.47-0+deb8u1vulnerable
Debianmysql-5.585.5.49-0+deb8u1vulnerable
Debianmysql-5.585.5.50-0+deb8u1vulnerable
Debianmysql-5.585.5.52-0+deb8u1vulnerable
Debianmysql-5.585.5.53-0+deb8u1vulnerable
Debianmysql-5.585.5.54-0+deb8u1vulnerable
Debianmysql-5.585.5.55-0+deb8u1vulnerable
Debianmysql-5.585.5.57-0+deb8u1fixed
Debianmysql-5.575.5.30+dfsg-1.1vulnerable
Debianmysql-5.575.5.31+dfsg-0+wheezy1vulnerable
Debianmysql-5.575.5.31+dfsg-1vulnerable
Debianmysql-5.575.5.33+dfsg-0+wheezy1vulnerable
Debianmysql-5.575.5.33+dfsg-1vulnerable
Debianmysql-5.575.5.35+dfsg-0+wheezy1vulnerable
Debianmysql-5.575.5.35+dfsg-1vulnerable
Debianmysql-5.575.5.35+dfsg-2vulnerable
Debianmysql-5.575.5.37-0+wheezy1vulnerable
Debianmysql-5.575.5.37-1vulnerable
Debianmysql-5.575.5.38-0+wheezy1vulnerable
Debianmysql-5.575.5.39-1vulnerable
Debianmysql-5.575.5.40-0+wheezy1vulnerable
Debianmysql-5.575.5.40-1vulnerable
Debianmysql-5.575.5.41-0+wheezy1vulnerable
Debianmysql-5.575.5.42-1vulnerable
Debianmysql-5.575.5.43-0+deb7u1vulnerable
Debianmysql-5.575.5.44-0+deb7u1vulnerable
Debianmysql-5.575.5.46-0+deb7u1vulnerable
Debianmysql-5.575.5.47-0+deb7u1vulnerable
Debianmysql-5.575.5.49-0+deb7u1vulnerable
Debianmysql-5.575.5.50-0+deb7u1vulnerable
Debianmysql-5.575.5.50-0+deb7u2vulnerable
Debianmysql-5.575.5.52-0+deb7u1vulnerable
Debianmysql-5.575.5.53-0+deb7u1vulnerable
Debianmysql-5.575.5.54-0+deb7u1vulnerable
Debianmysql-5.575.5.54-0+deb7u2vulnerable
Debianmysql-5.575.5.55-0+deb7u1vulnerable
Debianmysql-5.575.5.57-0+deb7u1fixed
Susemysqllinux enterprise software development kit 11 sp45.5.57-0.39.3.1fixed
Susemysqllinux enterprise server 11 sp45.5.57-0.39.3.1fixed
Susemysqllinux enterprise server for sap applications 11 sp45.5.57-0.39.3.1fixed

Fixed-version evidence

DistributionPackageTypeReleaseFixed versionUrgencyOriginBugs
Ubuntumysql-5.5deb14.045.5.57-0ubuntu0.14.04.1Not reportedUBUNTU-CVE-2017-3635Not reported
Ubuntumysql-5.7deb16.045.7.19-0ubuntu0.16.04.1Not reportedUBUNTU-CVE-2017-3635Not reported
Ubuntumysql-5.7deb18.045.7.19-0ubuntu1Not reportedUBUNTU-CVE-2017-3635Not reported
Debianmysql-5.5deb85.5.57-0+deb8u1Not reportedDSA-3922-1Not reported
Debianmysql-5.5deb75.5.57-0+deb7u1Not reportedDLA-1043-1Not reported
Susemysqlrpmlinux enterprise software development kit 11 sp45.5.57-0.39.3.1Not reportedSUSE-SU-2017:2290-1Not reported
Susemysqlrpmlinux enterprise server 11 sp45.5.57-0.39.3.1Not reportedSUSE-SU-2017:2290-1Not reported
Susemysqlrpmlinux enterprise server for sap applications 11 sp45.5.57-0.39.3.1Not reportedSUSE-SU-2017:2290-1Not reported

OpenFactory catalog packages

No matching packages in this catalog.

Observed:

References