CVE-2017-3322
Last modified
CVE-2017-3322 is a vulnerability of currently unknown severity. Vulnerability in the MySQL Cluster component of Oracle MySQL (subcomponent: Cluster: NDBAPI). Supported versions that are affected are 7.2.25 and earlier, 7.3.14 and earlier, 7.4.12 and earlier and . EPSS estimates a 1.56% chance of exploitation in the next 30 days.
Description
Vulnerability in the MySQL Cluster component of Oracle MySQL (subcomponent: Cluster: NDBAPI). Supported versions that are affected are 7.2.25 and earlier, 7.3.14 and earlier, 7.4.12 and earlier and . Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise MySQL Cluster. Successful attacks of this vulnerability can result in unauthorized ability to cause a partial denial of service (partial DOS) of MySQL Cluster. CVSS v3.0 Base Score 3.7 (Availability impacts).
Metrics
Affected Software
| Vendor | Product | Versions |
|---|---|---|
| Oracle | Mysql Cluster | <= 7.2.25 |
| Oracle | Mysql Cluster | <= 7.3.14 |
| Oracle | Mysql Cluster | <= 7.4.12 |
References
- http://www.oracle.com/technetwork/security-advisory/cpujan2017-2881727.htmlPatch, Vendor Advisory
- http://www.oracle.com/technetwork/security-advisory/cpujan2017-2881727.htmlPatch, Vendor Advisory
Timeline
- Published
- Last Modified
- Status
- Modified
Frequently Asked Questions
What is CVE-2017-3322?
How severe is CVE-2017-3322?
How do I fix CVE-2017-3322?
How Strix Helps
- How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
- Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
- PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
- AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.
Related CVEs from 2017
- CVE-2017-3316Vulnerability in the Oracle VM VirtualBox component of Oracl…
- CVE-2017-3317Vulnerability in the MySQL Server component of Oracle MySQL …4
- CVE-2017-3318Vulnerability in the MySQL Server component of Oracle MySQL …4
- CVE-2017-3319Vulnerability in the MySQL Server component of Oracle MySQL …
- CVE-2017-3320Vulnerability in the MySQL Server component of Oracle MySQL …
- CVE-2017-3321Vulnerability in the MySQL Cluster component of Oracle MySQL…
- CVE-2017-3323Vulnerability in the MySQL Cluster component of Oracle MySQL…
- CVE-2017-3324Vulnerability in the Primavera P6 Enterprise Project Portfol…
- CVE-2017-3325Vulnerability in the Siebel UI Framework component of Oracle…
- CVE-2017-3326Vulnerability in the Oracle Common Applications component of…
- CVE-2017-3327Vulnerability in the Oracle Common Applications component of…
- CVE-2017-3328Vulnerability in the Oracle Common Applications component of…
Are you affected by CVE-2017-3322?
Run a free Strix scan to check your systems for this vulnerability.
Scan your code nowSource: NVD / NIST
