CVE-2017-10379 Details
Description
Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Client programs). Supported versions that are affected are 5.5.57 and earlier, 5.6.37 and earlier and 5.7.19 and earlier. Easily exploitable vulnerability allows low privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all MySQL Server accessible data. CVSS 3.0 Base Score 6.5 (Confidentiality impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N).
Metrics
CVSS 4.0 Severity and Vector Strings:
No CVSS 4.0 data is available for this CVE.
CVSS 3.x Severity and Vector Strings:
No data available for CVSS Version 2.0 on this CVE.
CISA-ADP
Assessed Oct 4, 2024References to Advisories, Solutions, and Tools
By selecting these links, you will be leaving this site. These are references gathered from the official CVE record and are not endorsed by Volerion.
Weakness Enumeration
| CWE-ID | CWE Name | Source |
|---|---|---|
| CWE-863 | Incorrect Authorization | [email protected] |
Affected Products
| Product | Versions |
|---|---|
| oracle mysql | >= 5.5.0, <= 5.5.57 >= 5.6.0, <= 5.6.37 >= 5.7.0, <= 5.7.19 |
CPE
Remediation
| |
| mariadb mariadb | >= 5.5.0, < 5.5.57 >= 10.0.0, < 10.0.32 >= 10.1.0, < 10.1.26 >= 10.2.0, < 10.2.8 |
CPE
Remediation
| |
| debian debian linux | 8.0 |
CPE
Remediation
| |
| redhat openstack | 12 |
CPE
Remediation
| |
| redhat enterprise linux desktop | 7.0 |
CPE
Remediation
| |
| redhat enterprise linux eus | 7.5 7.6 7.7 |
CPE
Remediation
| |
| redhat enterprise linux server | 7.0 |
CPE
Remediation
| |
| redhat enterprise linux server aus | 7.6 7.7 |
CPE
Remediation
| |
| redhat enterprise linux server tus | 7.6 7.7 |
CPE
Remediation
| |
| redhat enterprise linux workstation | 7.0 |
CPE
Remediation
| |
| netapp active iq unified manager | >= 7.3 >= 9.5 |
CPE
Remediation
| |
| netapp oncommand balance | All versions |
CPE
Remediation
| |
| netapp oncommand insight | All versions |
CPE
Remediation
| |
| netapp oncommand performance manager | All versions |
CPE
Remediation
| |
| netapp oncommand unified manager | <= 7.1 |
CPE
Remediation
| |
| netapp oncommand workflow automation | All versions |
CPE
Remediation
| |
| netapp snapcenter | All versions |
CPE
Remediation
| |
Change History
16 change records found show changes
| Date | Action | Recorded By |
|---|---|---|
| Jun 17, 2026 | CVE Modified | [email protected] |
| Jun 17, 2026 | CVE Modified | CISA-ADP |
| May 13, 2026 | CVE Status Change | [email protected] |
| Nov 21, 2024 | CVE Modified | CVE |
| May 14, 2024 | CVE Modified | [email protected] |
| Jul 19, 2022 | Modified Analysis | [email protected] |
| Sep 21, 2018 | CVE Modified | [email protected] |
| Aug 17, 2018 | CVE Modified | [email protected] |
| Mar 23, 2018 | CVE Modified | [email protected] |
| Feb 8, 2018 | CVE Modified | [email protected] |
| Dec 14, 2017 | CVE Modified | [email protected] |
| Dec 2, 2017 | CVE Modified | [email protected] |
| Nov 10, 2017 | CVE Modified | [email protected] |
| Nov 4, 2017 | CVE Modified | [email protected] |
| Oct 24, 2017 | Initial Analysis | [email protected] |
| Oct 23, 2017 | CVE Modified | [email protected] |