CVE-2017-3323

LOW

Oracle MySQL Cluster <= 7.2.25, <= 7.3.14, <= 7.4.12 - Unauthenticated Partial Denial of Service via Multiple Protocols

Title source: llm

Description

Vulnerability in the MySQL Cluster component of Oracle MySQL (subcomponent: Cluster: General). Supported versions that are affected are 7.2.25 and earlier, 7.3.14 and earlier and 7.4.12 and earlier. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise MySQL Cluster. Successful attacks of this vulnerability can result in unauthorized ability to cause a partial denial of service (partial DOS) of MySQL Cluster. CVSS v3.0 Base Score 3.7 (Availability impacts).

References (3)

Core 3

Core References

Third Party Advisory, VDB Entry vdb-entry x_refsource_bid

http://www.securityfocus.com/bid/95575

Third Party Advisory, VDB Entry vdb-entry x_refsource_sectrack

http://www.securitytracker.com/id/1037640

Patch, Vendor Advisory x_refsource_confirm

http://www.oracle.com/technetwork/security-advisory/cpujan2017-2881727.html

Scores

CVSS v3 3.7

EPSS 0.0156

EPSS Percentile 72.3%

Attack Vector NETWORK

CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L

CISA SSVC

Vulnrichment

Exploitation none

Automatable no

Technical Impact partial

Details

CWE

CWE-20

Status published

Products (4)

Oracle/MySQL Cluster 7.2.25 and earlier

Oracle/MySQL Cluster 7.3.14 and earlier

Oracle/MySQL Cluster 7.4.12 and earlier

oracle/mysql_cluster < 7.2.25

Published Jan 27, 2017

Tracked Since Feb 18, 2026