CVE-2017-3641

Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: DML). Supported versions that are affected are 5.5.56 and earlier, 5.6.36 and earlier and 5.7.18 and earlier. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.0 Base Score 4.9 (Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H).

References

Affected packages

Git / github.com/mariadb/server

Affected ranges

Type

GIT

Repo

https://github.com/mariadb/server

Events

Introduced

776555af021e917ce0d6235386b43ae59fdd5161

Fixed

0a479f786020d3c1431a25523661759748404770

Introduced

c235de12ae3723b96944337bd89ad9cc87f21d8f

Fixed

535910ae5f20e36405631030e9c0eb22fe40a7c4

Introduced

9664240c948a92c22ccda0e1f5a420eb776ddcb1

Fixed

c548fb0667ffe71d9387eaec342b1716fc4c9526

Database specific

{
    "versions": [
        {
            "introduced": "10.0.0"
        },
        {
            "fixed": "10.0.32"
        },
        {
            "introduced": "10.1.0"
        },
        {
            "fixed": "10.1.26"
        },
        {
            "introduced": "10.2.0"
        },
        {
            "fixed": "10.2.8"
        }
    ]
}

Type

GIT

Repo

https://github.com/mysql/mysql-server

Events

Introduced

54df0057e18d8c82c23fbd4e0bf5b5dc2e762955

Last affected

ad88f2a7b5c5827cb1ba78eee3497fb851b37a9f

Introduced

Last affected

270fd3411e3d671a73ed9725940a30080f59ce6d

Introduced

Last affected

527c12ed611f3fe072c3043734319edb2c733099

Introduced

Last affected

ae41ce7c4ecff5e1e336ab768867370b8c94e02d

Introduced

54df0057e18d8c82c23fbd4e0bf5b5dc2e762955

Fixed

34cd74e52185de2ea3156e8295de3c638cde8c88

Database specific

{
    "versions": [
        {
            "introduced": "5.5.0"
        },
        {
            "last_affected": "5.5.56"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "8.0"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "9.0"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "7.5"
        },
        {
            "introduced": "5.5.0"
        },
        {
            "fixed": "5.5.57"
        }
    ]
}

Affected versions

mariadb-10.*

mariadb-10.0.13

mariadb-10.0.14

mariadb-10.0.15

mariadb-10.0.16

mariadb-10.0.17

mariadb-10.0.18

mariadb-10.0.19

mariadb-10.0.20

mariadb-10.0.21

mariadb-10.0.22

mariadb-10.0.23

mariadb-10.0.24

mariadb-10.0.25

mariadb-10.0.26

mariadb-10.0.27

mariadb-10.0.28

mariadb-10.0.29

mariadb-10.0.30

mariadb-10.0.31

mariadb-10.0.32

mariadb-10.1.0

mariadb-5.*

mariadb-5.5.39

mariadb-5.5.40

mariadb-5.5.41

mariadb-5.5.42

mariadb-5.5.43

mariadb-5.5.44

mariadb-5.5.45

mariadb-5.5.46

mariadb-5.5.47

mariadb-5.5.48

mariadb-5.5.49

mariadb-5.5.50

mariadb-5.5.51

mariadb-5.5.52

mariadb-5.5.53

mariadb-5.5.54

mariadb-5.5.55

mariadb-5.5.56

mariadb-5.5.57

mariadb-galera-10.*

mariadb-galera-10.0.10

mariadb-galera-10.0.11

mariadb-galera-10.0.12

mariadb-galera-10.0.13

mariadb-galera-10.0.14

mariadb-galera-10.0.15

mariadb-galera-10.0.16

mariadb-galera-10.0.17

mariadb-galera-10.0.19

mariadb-galera-10.0.20

mariadb-galera-10.0.21

mariadb-galera-10.0.22

mariadb-galera-10.0.23

mariadb-galera-10.0.24

mariadb-galera-10.0.25

mariadb-galera-10.0.26

mariadb-galera-10.0.27

mariadb-galera-10.0.28

mariadb-galera-10.0.29

mariadb-galera-10.0.30

mariadb-galera-10.0.31

mariadb-galera-10.0.7

mariadb-galera-10.0.7a

mariadb-galera-5.*

mariadb-galera-5.5.25

mariadb-galera-5.5.28a

mariadb-galera-5.5.29

mariadb-galera-5.5.32

mariadb-galera-5.5.32a

mariadb-galera-5.5.34

mariadb-galera-5.5.35

mariadb-galera-5.5.36

mariadb-galera-5.5.36a

mariadb-galera-5.5.37

mariadb-galera-5.5.38

mariadb-galera-5.5.39

mariadb-galera-5.5.40

mariadb-galera-5.5.41

mariadb-galera-5.5.42

mariadb-galera-5.5.43

mariadb-galera-5.5.44

mariadb-galera-5.5.45

mariadb-galera-5.5.46

mariadb-galera-5.5.47

mariadb-galera-5.5.48

mariadb-galera-5.5.49

mariadb-galera-5.5.50

mariadb-galera-5.5.51

mysql-5.*

mysql-5.0.87sp1

mysql-5.0.90

mysql-5.0.91

mysql-5.0.92

mysql-5.0.93

mysql-5.0.94

mysql-5.0.95

mysql-5.0.96

mysql-5.1.40sp1

mysql-5.1.41

mysql-5.1.42

mysql-5.1.43

mysql-5.1.43sp1

mysql-5.1.44

mysql-5.1.45

mysql-5.1.46

mysql-5.1.46sp1

mysql-5.1.47

mysql-5.1.48

mysql-5.1.49

mysql-5.1.49sp1

mysql-5.1.50

mysql-5.1.51

mysql-5.1.52

mysql-5.1.52sp1

mysql-5.1.53

mysql-5.1.54

mysql-5.1.55

mysql-5.1.56

mysql-5.1.57

mysql-5.1.58

mysql-5.1.59

mysql-5.1.60

mysql-5.1.61

mysql-5.1.62

mysql-5.1.63

mysql-5.1.65

mysql-5.1.66

mysql-5.1.67

mysql-5.1.68

mysql-5.1.69

mysql-5.1.69-retag

mysql-5.1.70

mysql-5.1.71

mysql-5.1.72

mysql-5.1.73

mysql-5.1.74

mysql-5.1.75

mysql-5.1.76

mysql-5.1.77

mysql-5.5.0

mysql-5.5.1-m2

mysql-5.5.10

mysql-5.5.11

mysql-5.5.12

mysql-5.5.13

mysql-5.5.14

mysql-5.5.15

mysql-5.5.16

mysql-5.5.17

mysql-5.5.18

mysql-5.5.19

mysql-5.5.2-m2

mysql-5.5.20

mysql-5.5.21

mysql-5.5.22

mysql-5.5.23

mysql-5.5.24

mysql-5.5.25

mysql-5.5.25a

mysql-5.5.27

mysql-5.5.28

mysql-5.5.29

mysql-5.5.3-m3

mysql-5.5.30

mysql-5.5.31

mysql-5.5.32

mysql-5.5.33

mysql-5.5.34

mysql-5.5.35

mysql-5.5.36

mysql-5.5.37

mysql-5.5.38

mysql-5.5.39

mysql-5.5.40

mysql-5.5.41

mysql-5.5.42

mysql-5.5.43

mysql-5.5.44

mysql-5.5.45

mysql-5.5.46

mysql-5.5.47

mysql-5.5.48

mysql-5.5.49

mysql-5.5.5-m3

mysql-5.5.50

mysql-5.5.51

mysql-5.5.52

mysql-5.5.53

mysql-5.5.54

mysql-5.5.55

mysql-5.5.56

mysql-5.5.57

mysql-5.5.6-rc

mysql-5.5.7

mysql-5.5.8

mysql-5.5.9

Database specific

unresolved_ranges

[
    {
        "events": [
            {
                "introduced": "5.6.0"
            },
            {
                "last_affected": "5.6.36"
            }
        ]
    },
    {
        "events": [
            {
                "introduced": "5.7.0"
            },
            {
                "last_affected": "5.7.18"
            }
        ]
    },
    {
        "events": [
            {
                "introduced": "0"
            },
            {
                "last_affected": "12"
            }
        ]
    },
    {
        "events": [
            {
                "introduced": "0"
            },
            {
                "last_affected": "7.0"
            }
        ]
    },
    {
        "events": [
            {
                "introduced": "0"
            },
            {
                "last_affected": "7.0"
            }
        ]
    },
    {
        "events": [
            {
                "introduced": "0"
            },
            {
                "last_affected": "7.6"
            }
        ]
    },
    {
        "events": [
            {
                "introduced": "0"
            },
            {
                "last_affected": "7.6"
            }
        ]
    },
    {
        "events": [
            {
                "introduced": "0"
            },
            {
                "last_affected": "7.6"
            }
        ]
    },
    {
        "events": [
            {
                "introduced": "0"
            },
            {
                "last_affected": "7.0"
            }
        ]
    }
]

vanir_signatures

[
    {
        "target": {
            "function": "mysql_derived_merge_for_insert",
            "file": "sql/sql_derived.cc"
        },
        "id": "CVE-2017-3641-2311d166",
        "digest": {
            "function_hash": "248046718813765606309068251123658866222",
            "length": 1304.0
        },
        "source": "https://github.com/mariadb/server/commit/c548fb0667ffe71d9387eaec342b1716fc4c9526",
        "signature_version": "v1",
        "deprecated": false,
        "signature_type": "Function"
    },
    {
        "target": {
            "file": "sql/sql_derived.cc"
        },
        "id": "CVE-2017-3641-8ba756c4",
        "digest": {
            "line_hashes": [
                "37598745779533050802933831451354240563",
                "148100691799475688462979637583791371574",
                "256714664058405617444146650046350315869",
                "30840251350323357694068166601770960776",
                "122022733530817239314150393063036047891",
                "318300470379782107237051717217085670592",
                "96276598501522749142741981776648661971",
                "74754980952004710391973414329717813170",
                "216173259946383661325751397329790466678"
            ],
            "threshold": 0.9
        },
        "source": "https://github.com/mariadb/server/commit/c548fb0667ffe71d9387eaec342b1716fc4c9526",
        "signature_version": "v1",
        "deprecated": false,
        "signature_type": "Line"
    }
]

source

"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2017-3641.json"