CVE-2017-10294

See a problem?
Please try reporting it to the source first.
Source
https://cve.org/CVERecord?id=CVE-2017-10294
Import Source
https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2017-10294.json
JSON Data
https://api.test.osv.dev/v1/vulns/CVE-2017-10294
Downstream
Published
2017-10-19T17:29:02.390Z
Modified
2026-04-11T11:49:33.852596Z
Severity
  • 4.9 (Medium) CVSS_V3 - CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H CVSS Calculator
Summary
[none]
Details

Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Optimizer). Supported versions that are affected are 5.6.37 and earlier and 5.7.19 and earlier. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.0 Base Score 4.9 (Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H).

Database specific 
{
    "unresolved_ranges": [
        {
            "extracted_events": [
                {
                    "last_affected": "5.6.0"
                }
            ],
            "cpe": "cpe:2.3:a:oracle:mysql:5.6.0:*:*:*:*:*:*:*",
            "source": "CPE_FIELD"
        },
        {
            "extracted_events": [
                {
                    "last_affected": "5.6.1"
                }
            ],
            "cpe": "cpe:2.3:a:oracle:mysql:5.6.1:*:*:*:*:*:*:*",
            "source": "CPE_FIELD"
        },
        {
            "extracted_events": [
                {
                    "last_affected": "5.7.0"
                }
            ],
            "cpe": "cpe:2.3:a:oracle:mysql:5.7.0:*:*:*:*:*:*:*",
            "source": "CPE_FIELD"
        }
    ]
}
References

Affected packages

Git / github.com/mysql/mysql-server

Affected ranges

Type
GIT
Repo
https://github.com/mysql/mysql-server
Events
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
9e77c32b387402bc1ae7b34eaa6f6682d2d82811
Last affected
4e21719024667567ce1f3f3bdeb5b23854935162
Last affected
f2f2b941543768ddf4639d1496abad4c4cac168f
Last affected
7529bf2c25ee8ecf22ee974436c9f2a91901ca95
Last affected
53637eb11f789961e2d61335516fcb3f5be713c4
Last affected
98209d06aa76137978648d136fb752a89e5dcd55
Last affected
1a505dd585173880a0608094288712739ec1d2f2
Last affected
6bd44a8a711554d8e8cbc5cdcc4454c481fcdb5b
Last affected
91773b1f65de78924e0cd2b30009d44f64f9dee9
Last affected
b0e823080cb4be92171fe1ac20c7c281f397274f
Last affected
85f401c86bd8cedce02ef2a95a6a8066afd1ee32
Last affected
db310f068b0686dc8067b86e6bbe5ba5d7d7f443
Last affected
7c0bc485aadc83496412cc2bf9137646a2125eed
Last affected
9185734bd97ae14d357bbd69d800b848db38bac4
Last affected
9e957d561e262ca8805bc94d14c02d7813934928
Last affected
675bc0bff952353cf035670a4cf4078c0757104d
Last affected
2793382d656158e3b72451dc47a4ea022b566f7d
Last affected
f9725ff9c621c1790c3cb9c27356ec14fb82b511
Last affected
bcb0bb464582cad2dcef0154111a97a76fdfe93d
Last affected
9c6193fad44e276fdadc4ea74c87c682daf2e947
Last affected
e27cd6288d4cdc63f141c2a30d1b52c64e1277f8
Last affected
9dba27386d59892dd400767f09a39d0e3e3179a8
Last affected
aed32a928b782859cccb545ad54f66a340356651
Last affected
63f68c53873174e07ef8e6d7d60e9cec05c4b34e
Last affected
6594835303da437105bb3841df976620b716e088
Last affected
c3a8ca1ed0063d4bca761ac9b57718796242ccc1
Last affected
1235719370ff0a1e09e43c6eb825128d8caed647
Last affected
eada4d562bda506163131233700ce5bdc0703a8f
Last affected
d61eb03ba1b8478d6cb09969ca6c38f330a93178
Last affected
3a4e7bc7c416888fda897239c03549c2929bb64c
Last affected
b4e3fb57c1a6fb298d06bc8e11828b593aa66747
Last affected
72742691286309b61b47f14a3cc734507907aba6
Last affected
4076e2e94482b206754c07724010792d566d6850
Last affected
e9852269b2d0fb914472881b2cc17881818a5052
Last affected
a9800d0d17a69fc597085aedc3f533984ff2c41c
Last affected
d6507b812887d5fda4cf23fbfd4a77c5aed8118a
Last affected
7e58ce8e69de5a4e941d913999cbbf905fe8f444
Last affected
09ddec8757b57893ccd2f2c2482b3eec5ca811e5
Last affected
a2757a60a7527407d08115e44e889a25f22c96c6
Last affected
b4104b21520be032400b768cea09a867068be49d
Last affected
d04d7a8f844caf78f03c007243681a1b5471d0a3
Last affected
67d52e7c7a1a23424e39273cbb6f5f9d56fda8d1
Last affected
99077a555bc197b8be46287543cbde36ab4da8dd
Last affected
e0e0ae2ea27c9bb76577664845507ef224d362e4
Last affected
1020e95bb203bd500ece736163e44a2034beba4d
Last affected
71f48ab393bce80a59e5a2e498cd1f46f6b43f9a
Last affected
c28e258157f39f25e044bb72e8bae1ff00989a3d
Last affected
23032807537d8dd8ee4ec1c4d40f0633cd4e12f9
Last affected
4826e159b432c961290cdbe651da0cfe3d7b2539
Last affected
a533e2c786164af9bd276660b972d93649434297
Database specific 
{
    "extracted_events": [
        {
            "introduced": "0"
        },
        {
            "last_affected": "5.6.2"
        },
        {
            "last_affected": "5.6.3"
        },
        {
            "last_affected": "5.6.4"
        },
        {
            "last_affected": "5.6.5"
        },
        {
            "last_affected": "5.6.6"
        },
        {
            "last_affected": "5.6.7"
        },
        {
            "last_affected": "5.6.8"
        },
        {
            "last_affected": "5.6.9"
        },
        {
            "last_affected": "5.6.10"
        },
        {
            "last_affected": "5.6.11"
        },
        {
            "last_affected": "5.6.12"
        },
        {
            "last_affected": "5.6.13"
        },
        {
            "last_affected": "5.6.14"
        },
        {
            "last_affected": "5.6.15"
        },
        {
            "last_affected": "5.6.16"
        },
        {
            "last_affected": "5.6.17"
        },
        {
            "last_affected": "5.6.21"
        },
        {
            "last_affected": "5.6.22"
        },
        {
            "last_affected": "5.6.23"
        },
        {
            "last_affected": "5.6.26"
        },
        {
            "last_affected": "5.6.27"
        },
        {
            "last_affected": "5.6.28"
        },
        {
            "last_affected": "5.6.29"
        },
        {
            "last_affected": "5.6.30"
        },
        {
            "last_affected": "5.6.31"
        },
        {
            "last_affected": "5.6.32"
        },
        {
            "last_affected": "5.6.33"
        },
        {
            "last_affected": "5.6.34"
        },
        {
            "last_affected": "5.6.35"
        },
        {
            "last_affected": "5.6.36"
        },
        {
            "last_affected": "5.6.37"
        },
        {
            "last_affected": "5.7.1"
        },
        {
            "last_affected": "5.7.2"
        },
        {
            "last_affected": "5.7.3"
        },
        {
            "last_affected": "5.7.4"
        },
        {
            "last_affected": "5.7.5"
        },
        {
            "last_affected": "5.7.6"
        },
        {
            "last_affected": "5.7.7"
        },
        {
            "last_affected": "5.7.8"
        },
        {
            "last_affected": "5.7.9"
        },
        {
            "last_affected": "5.7.10"
        },
        {
            "last_affected": "5.7.11"
        },
        {
            "last_affected": "5.7.12"
        },
        {
            "last_affected": "5.7.13"
        },
        {
            "last_affected": "5.7.14"
        },
        {
            "last_affected": "5.7.15"
        },
        {
            "last_affected": "5.7.16"
        },
        {
            "last_affected": "5.7.17"
        },
        {
            "last_affected": "5.7.18"
        },
        {
            "last_affected": "5.7.19"
        }
    ],
    "cpe": [
        "cpe:2.3:a:oracle:mysql:5.6.2:*:*:*:*:*:*:*",
        "cpe:2.3:a:oracle:mysql:5.6.3:*:*:*:*:*:*:*",
        "cpe:2.3:a:oracle:mysql:5.6.4:*:*:*:*:*:*:*",
        "cpe:2.3:a:oracle:mysql:5.6.5:*:*:*:*:*:*:*",
        "cpe:2.3:a:oracle:mysql:5.6.6:*:*:*:*:*:*:*",
        "cpe:2.3:a:oracle:mysql:5.6.7:*:*:*:*:*:*:*",
        "cpe:2.3:a:oracle:mysql:5.6.8:*:*:*:*:*:*:*",
        "cpe:2.3:a:oracle:mysql:5.6.9:*:*:*:*:*:*:*",
        "cpe:2.3:a:oracle:mysql:5.6.10:*:*:*:*:*:*:*",
        "cpe:2.3:a:oracle:mysql:5.6.11:*:*:*:*:*:*:*",
        "cpe:2.3:a:oracle:mysql:5.6.12:*:*:*:*:*:*:*",
        "cpe:2.3:a:oracle:mysql:5.6.13:*:*:*:*:*:*:*",
        "cpe:2.3:a:oracle:mysql:5.6.14:*:*:*:*:*:*:*",
        "cpe:2.3:a:oracle:mysql:5.6.15:*:*:*:*:*:*:*",
        "cpe:2.3:a:oracle:mysql:5.6.16:*:*:*:*:*:*:*",
        "cpe:2.3:a:oracle:mysql:5.6.17:*:*:*:*:*:*:*",
        "cpe:2.3:a:oracle:mysql:5.6.21:*:*:*:*:*:*:*",
        "cpe:2.3:a:oracle:mysql:5.6.22:*:*:*:*:*:*:*",
        "cpe:2.3:a:oracle:mysql:5.6.23:*:*:*:*:*:*:*",
        "cpe:2.3:a:oracle:mysql:5.6.26:*:*:*:*:*:*:*",
        "cpe:2.3:a:oracle:mysql:5.6.27:*:*:*:*:*:*:*",
        "cpe:2.3:a:oracle:mysql:5.6.28:*:*:*:*:*:*:*",
        "cpe:2.3:a:oracle:mysql:5.6.29:*:*:*:*:*:*:*",
        "cpe:2.3:a:oracle:mysql:5.6.30:*:*:*:*:*:*:*",
        "cpe:2.3:a:oracle:mysql:5.6.31:*:*:*:*:*:*:*",
        "cpe:2.3:a:oracle:mysql:5.6.32:*:*:*:*:*:*:*",
        "cpe:2.3:a:oracle:mysql:5.6.33:*:*:*:*:*:*:*",
        "cpe:2.3:a:oracle:mysql:5.6.34:*:*:*:*:*:*:*",
        "cpe:2.3:a:oracle:mysql:5.6.35:*:*:*:*:*:*:*",
        "cpe:2.3:a:oracle:mysql:5.6.36:*:*:*:*:*:*:*",
        "cpe:2.3:a:oracle:mysql:5.6.37:*:*:*:*:*:*:*",
        "cpe:2.3:a:oracle:mysql:5.7.1:*:*:*:*:*:*:*",
        "cpe:2.3:a:oracle:mysql:5.7.2:*:*:*:*:*:*:*",
        "cpe:2.3:a:oracle:mysql:5.7.3:*:*:*:*:*:*:*",
        "cpe:2.3:a:oracle:mysql:5.7.4:*:*:*:*:*:*:*",
        "cpe:2.3:a:oracle:mysql:5.7.5:*:*:*:*:*:*:*",
        "cpe:2.3:a:oracle:mysql:5.7.6:*:*:*:*:*:*:*",
        "cpe:2.3:a:oracle:mysql:5.7.7:*:*:*:*:*:*:*",
        "cpe:2.3:a:oracle:mysql:5.7.8:*:*:*:*:*:*:*",
        "cpe:2.3:a:oracle:mysql:5.7.9:*:*:*:*:*:*:*",
        "cpe:2.3:a:oracle:mysql:5.7.10:*:*:*:*:*:*:*",
        "cpe:2.3:a:oracle:mysql:5.7.11:*:*:*:*:*:*:*",
        "cpe:2.3:a:oracle:mysql:5.7.12:*:*:*:*:*:*:*",
        "cpe:2.3:a:oracle:mysql:5.7.13:*:*:*:*:*:*:*",
        "cpe:2.3:a:oracle:mysql:5.7.14:*:*:*:*:*:*:*",
        "cpe:2.3:a:oracle:mysql:5.7.15:*:*:*:*:*:*:*",
        "cpe:2.3:a:oracle:mysql:5.7.16:*:*:*:*:*:*:*",
        "cpe:2.3:a:oracle:mysql:5.7.17:*:*:*:*:*:*:*",
        "cpe:2.3:a:oracle:mysql:5.7.18:*:*:*:*:*:*:*",
        "cpe:2.3:a:oracle:mysql:5.7.19:*:*:*:*:*:*:*"
    ],
    "source": "CPE_FIELD"
}

Affected versions

mysql-3.*
mysql-3.23.22-beta
mysql-3.23.28-gamma
mysql-3.23.30-gamma
mysql-3.23.31
mysql-3.23.32
mysql-3.23.33
mysql-3.23.36
mysql-4.*
mysql-4.0.2
mysql-4.0.4
mysql-5.*
mysql-5.1.4
mysql-5.6.10
mysql-5.6.11
mysql-5.6.12
mysql-5.6.13
mysql-5.6.14
mysql-5.6.15
mysql-5.6.16
mysql-5.6.17
mysql-5.6.2
mysql-5.6.21
mysql-5.6.22
mysql-5.6.23
mysql-5.6.26
mysql-5.6.27
mysql-5.6.28
mysql-5.6.29
mysql-5.6.3
mysql-5.6.30
mysql-5.6.31
mysql-5.6.32
mysql-5.6.33
mysql-5.6.34
mysql-5.6.35
mysql-5.6.36
mysql-5.6.37
mysql-5.6.4
mysql-5.6.5
mysql-5.6.6
mysql-5.6.7
mysql-5.6.8
mysql-5.6.9
mysql-5.7.1
mysql-5.7.10
mysql-5.7.11
mysql-5.7.12
mysql-5.7.13
mysql-5.7.14
mysql-5.7.15
mysql-5.7.16
mysql-5.7.17
mysql-5.7.18
mysql-5.7.19
mysql-5.7.2
mysql-5.7.3
mysql-5.7.4
mysql-5.7.5
mysql-5.7.6
mysql-5.7.7
mysql-5.7.8
mysql-5.7.9

Database specific

source 
"https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2017-10294.json"