CVE-2017-10286

Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: InnoDB). Supported versions that are affected are 5.6.37 and earlier and 5.7.19 and earlier. Difficult to exploit vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.0 Base Score 4.4 (Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:H).

References

Affected packages

Git / github.com/mariadb/server

Affected ranges

Type

GIT

Repo

https://github.com/mariadb/server

Events

Introduced

Last affected

60267e61ff237739adbb5f7e0a7138ca2e1509ca

Introduced

Last affected

60267e61ff237739adbb5f7e0a7138ca2e1509ca

Introduced

776555af021e917ce0d6235386b43ae59fdd5161

Fixed

0a479f786020d3c1431a25523661759748404770

Introduced

c235de12ae3723b96944337bd89ad9cc87f21d8f

Fixed

535910ae5f20e36405631030e9c0eb22fe40a7c4

Introduced

9664240c948a92c22ccda0e1f5a420eb776ddcb1

Fixed

c548fb0667ffe71d9387eaec342b1716fc4c9526

Database specific

{
    "versions": [
        {
            "introduced": "0"
        },
        {
            "last_affected": "7.1"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "7.1"
        },
        {
            "introduced": "10.0.0"
        },
        {
            "fixed": "10.0.32"
        },
        {
            "introduced": "10.1.0"
        },
        {
            "fixed": "10.1.26"
        },
        {
            "introduced": "10.2.0"
        },
        {
            "fixed": "10.2.8"
        }
    ]
}

Affected versions

mariadb-10.*

mariadb-10.0.13

mariadb-10.0.14

mariadb-10.0.15

mariadb-10.0.16

mariadb-10.0.17

mariadb-10.0.18

mariadb-10.0.19

mariadb-10.0.20

mariadb-10.0.21

mariadb-10.0.22

mariadb-10.0.23

mariadb-10.0.24

mariadb-10.0.25

mariadb-10.0.26

mariadb-10.0.27

mariadb-10.0.28

mariadb-10.0.29

mariadb-10.0.30

mariadb-10.0.31

mariadb-10.0.32

mariadb-10.1.0

mariadb-5.*

mariadb-5.5.39

mariadb-5.5.40

mariadb-5.5.41

mariadb-5.5.42

mariadb-5.5.43

mariadb-5.5.44

mariadb-5.5.45

mariadb-5.5.46

mariadb-5.5.47

mariadb-5.5.48

mariadb-5.5.49

mariadb-5.5.50

mariadb-5.5.51

mariadb-5.5.52

mariadb-5.5.53

mariadb-5.5.54

mariadb-5.5.55

mariadb-5.5.56

mariadb-5.5.57

mariadb-galera-10.*

mariadb-galera-10.0.10

mariadb-galera-10.0.11

mariadb-galera-10.0.12

mariadb-galera-10.0.13

mariadb-galera-10.0.14

mariadb-galera-10.0.15

mariadb-galera-10.0.16

mariadb-galera-10.0.17

mariadb-galera-10.0.19

mariadb-galera-10.0.20

mariadb-galera-10.0.21

mariadb-galera-10.0.22

mariadb-galera-10.0.23

mariadb-galera-10.0.24

mariadb-galera-10.0.25

mariadb-galera-10.0.26

mariadb-galera-10.0.27

mariadb-galera-10.0.28

mariadb-galera-10.0.29

mariadb-galera-10.0.30

mariadb-galera-10.0.31

mariadb-galera-10.0.7

mariadb-galera-10.0.7a

mariadb-galera-5.*

mariadb-galera-5.5.25

mariadb-galera-5.5.28a

mariadb-galera-5.5.29

mariadb-galera-5.5.32

mariadb-galera-5.5.32a

mariadb-galera-5.5.34

mariadb-galera-5.5.35

mariadb-galera-5.5.36

mariadb-galera-5.5.36a

mariadb-galera-5.5.37

mariadb-galera-5.5.38

mariadb-galera-5.5.39

mariadb-galera-5.5.40

mariadb-galera-5.5.41

mariadb-galera-5.5.42

mariadb-galera-5.5.43

mariadb-galera-5.5.44

mariadb-galera-5.5.45

mariadb-galera-5.5.46

mariadb-galera-5.5.47

mariadb-galera-5.5.48

mariadb-galera-5.5.49

mariadb-galera-5.5.50

mariadb-galera-5.5.51

mysql-5.*

mysql-5.5.39

mysql-5.5.40

mysql-5.5.41

mysql-5.5.42

mysql-5.5.43

mysql-5.5.44

mysql-5.5.45

mysql-5.5.46

mysql-5.5.47

mysql-5.5.48

mysql-5.5.49

mysql-5.5.50

mysql-5.5.51

mysql-5.5.52

mysql-5.5.53

mysql-5.5.54

mysql-5.5.55

mysql-5.5.56

mysql-5.5.57

Database specific

unresolved_ranges

[
    {
        "events": [
            {
                "introduced": "5.6.0"
            },
            {
                "last_affected": "5.6.37"
            }
        ]
    },
    {
        "events": [
            {
                "introduced": "5.7.0"
            },
            {
                "last_affected": "5.7.19"
            }
        ]
    },
    {
        "events": [
            {
                "introduced": "7.3"
            }
        ]
    },
    {
        "events": [
            {
                "introduced": "9.5"
            }
        ]
    }
]

vanir_signatures

[
    {
        "signature_type": "Function",
        "deprecated": false,
        "id": "CVE-2017-10286-2311d166",
        "target": {
            "file": "sql/sql_derived.cc",
            "function": "mysql_derived_merge_for_insert"
        },
        "digest": {
            "length": 1304.0,
            "function_hash": "248046718813765606309068251123658866222"
        },
        "signature_version": "v1",
        "source": "https://github.com/mariadb/server/commit/c548fb0667ffe71d9387eaec342b1716fc4c9526"
    },
    {
        "signature_type": "Line",
        "deprecated": false,
        "id": "CVE-2017-10286-8ba756c4",
        "target": {
            "file": "sql/sql_derived.cc"
        },
        "digest": {
            "threshold": 0.9,
            "line_hashes": [
                "37598745779533050802933831451354240563",
                "148100691799475688462979637583791371574",
                "256714664058405617444146650046350315869",
                "30840251350323357694068166601770960776",
                "122022733530817239314150393063036047891",
                "318300470379782107237051717217085670592",
                "96276598501522749142741981776648661971",
                "74754980952004710391973414329717813170",
                "216173259946383661325751397329790466678"
            ]
        },
        "signature_version": "v1",
        "source": "https://github.com/mariadb/server/commit/c548fb0667ffe71d9387eaec342b1716fc4c9526"
    }
]

source

"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2017-10286.json"