CVE-2017-3636 Details
Description
Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Client programs). Supported versions that are affected are 5.5.56 and earlier and 5.6.36 and earlier. Easily exploitable vulnerability allows low privileged attacker with logon to the infrastructure where MySQL Server executes to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of MySQL Server accessible data as well as unauthorized read access to a subset of MySQL Server accessible data and unauthorized ability to cause a partial denial of service (partial DOS) of MySQL Server. CVSS 3.0 Base Score 5.3 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L).
Metrics
CVSS 4.0 Severity and Vector Strings:
No CVSS 4.0 data is available for this CVE.
CVSS 3.x Severity and Vector Strings:
No data available for CVSS Version 2.0 on this CVE.
CISA-ADP
Assessed Oct 4, 2024References to Advisories, Solutions, and Tools
By selecting these links, you will be leaving this site. These are references gathered from the official CVE record and are not endorsed by Volerion.
Weakness Enumeration
| CWE-ID | CWE Name | Source |
|---|---|---|
| NVD-CWE-noinfo | Insufficient Information to Classify Weakness | [email protected] |
Affected Products
| Product | Versions |
|---|---|
| oracle mysql | >= 5.5.0, <= 5.5.56 >= 5.6.0, <= 5.6.36 |
CPE
Remediation
| |
| debian debian linux | 8.0 9.0 |
CPE
Remediation
| |
| redhat openstack | 12 |
CPE
Remediation
| |
| redhat enterprise linux desktop | 7.0 |
CPE
Remediation
| |
| redhat enterprise linux server | 7.0 |
CPE
Remediation
| |
| redhat enterprise linux server aus | 7.6 |
CPE
Remediation
| |
| redhat enterprise linux server eus | 7.5 7.6 |
CPE
Remediation
| |
| redhat enterprise linux server tus | 7.6 |
CPE
Remediation
| |
| redhat enterprise linux workstation | 7.0 |
CPE
Remediation
| |
| mariadb mariadb | >= 5.5.0, < 5.5.57 >= 10.0.0, < 10.0.32 >= 10.1.0, < 10.1.26 >= 10.2.0, < 10.2.8 |
CPE
Remediation
| |
Change History
17 change records found show changes
| Date | Action | Recorded By |
|---|---|---|
| Jun 17, 2026 | CVE Modified | [email protected] |
| Jun 17, 2026 | CVE Modified | CISA-ADP |
| May 13, 2026 | CVE Status Change | [email protected] |
| Nov 21, 2024 | CVE Modified | CVE |
| May 14, 2024 | CVE Modified | [email protected] |
| Aug 4, 2022 | Reanalysis | [email protected] |
| Oct 3, 2019 | CWE Remap | [email protected] |
| May 22, 2019 | Modified Analysis | [email protected] |
| Sep 21, 2018 | CVE Modified | [email protected] |
| Aug 17, 2018 | CVE Modified | [email protected] |
| Mar 23, 2018 | CVE Modified | [email protected] |
| Feb 8, 2018 | CVE Modified | [email protected] |
| Dec 9, 2017 | CVE Modified | [email protected] |
| Nov 9, 2017 | CVE Modified | [email protected] |
| Nov 8, 2017 | CVE Modified | [email protected] |
| Aug 22, 2017 | Initial Analysis | [email protected] |
| Aug 10, 2017 | CVE Modified | [email protected] |