CVE-2017-3244

See a problem?
Please try reporting it to the source first.
Source
https://cve.org/CVERecord?id=CVE-2017-3244
Import Source
https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2017-3244.json
JSON Data
https://api.test.osv.dev/v1/vulns/CVE-2017-3244
Downstream
Related
Published
2017-01-27T22:59:02.460Z
Modified
2026-02-01T10:04:57.612930Z
Severity
  • 6.5 (Medium) CVSS_V3 - CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H CVSS Calculator
Summary
[none]
Details

Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: DML). Supported versions that are affected are 5.5.53 and earlier, 5.6.34 and earlier and 5.7.16 and earlier. Easily exploitable vulnerability allows low privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS v3.0 Base Score 6.5 (Availability impacts).

References

Affected packages

Git / github.com/mariadb/server

Affected ranges

Type
GIT
Repo
https://github.com/mariadb/server
Events
Introduced
f954e4bfae9a9723d33e05e4035e3c5a5e8d43d9
Fixed
ec6d8dadc01269451332e5b24b12a5350a2a4896

Database specific

vanir_signatures

[
    {
        "signature_type": "Line",
        "id": "CVE-2017-3244-0baf8993",
        "target": {
            "file": "sql/sql_parse.cc"
        },
        "signature_version": "v1",
        "digest": {
            "threshold": 0.9,
            "line_hashes": [
                "110476974363545998578908701767776289249",
                "273829603880621959453121196915995003208",
                "272651897101448574504321173220526278056",
                "101067086018716534944710799067966718979",
                "156157766317088195883941185698541658215",
                "252456698466909650226976198023719340148",
                "145614537797552145300398816624862030281",
                "77208543113951532544387081806008385078",
                "288396136368601660375584450919171545234",
                "183434757643369183402139629237367263838",
                "233157255990452243775235344983471018546",
                "188751487140915611334454463849252489410",
                "252462684064816368296321058806034439684",
                "307098061759343067405645946303872718836",
                "214376391898797245055281648625328889739",
                "245021762340980165202144694676878157613",
                "263402790790463611858093480743074015920",
                "203233127377842720116288925258250585074",
                "155399327407118826417293143762587199135",
                "243409645841800168870356497163238873197"
            ]
        },
        "deprecated": false,
        "source": "https://github.com/mariadb/server/commit/ec6d8dadc01269451332e5b24b12a5350a2a4896"
    },
    {
        "signature_type": "Function",
        "id": "CVE-2017-3244-11370427",
        "target": {
            "file": "sql/sql_table.cc",
            "function": "mysql_prepare_create_table"
        },
        "signature_version": "v1",
        "digest": {
            "function_hash": "143537602743541475551221605603161948409",
            "length": 20792.0
        },
        "deprecated": false,
        "source": "https://github.com/mariadb/server/commit/ec6d8dadc01269451332e5b24b12a5350a2a4896"
    },
    {
        "signature_type": "Line",
        "id": "CVE-2017-3244-23a2be41",
        "target": {
            "file": "sql/sql_parse.h"
        },
        "signature_version": "v1",
        "digest": {
            "threshold": 0.9,
            "line_hashes": [
                "191365949426779725766789603426499993246",
                "278019233043855333150431390455102723751",
                "295308575304819897491637281605582339132",
                "316141643622374384017115069859567416238"
            ]
        },
        "deprecated": false,
        "source": "https://github.com/mariadb/server/commit/ec6d8dadc01269451332e5b24b12a5350a2a4896"
    },
    {
        "signature_type": "Line",
        "id": "CVE-2017-3244-3896541e",
        "target": {
            "file": "sql/sql_table.cc"
        },
        "signature_version": "v1",
        "digest": {
            "threshold": 0.9,
            "line_hashes": [
                "265325526143814603973792993310300959077",
                "134271306182046391197704199376718527742",
                "234053894392742200605772680322683230100",
                "331651524179688659328434200080440792991",
                "206372030164076775229126100793501833854",
                "146666323041243955687203765021208690627",
                "5119821929170601859101199426480974918",
                "38432167527863191290005553977007074711",
                "293867664051682534000806495790057554206"
            ]
        },
        "deprecated": false,
        "source": "https://github.com/mariadb/server/commit/ec6d8dadc01269451332e5b24b12a5350a2a4896"
    },
    {
        "signature_type": "Function",
        "id": "CVE-2017-3244-64f09d1a",
        "target": {
            "file": "sql/sp_head.cc",
            "function": "check_routine_name"
        },
        "signature_version": "v1",
        "digest": {
            "function_hash": "86787608855330484794596027923177671555",
            "length": 413.0
        },
        "deprecated": false,
        "source": "https://github.com/mariadb/server/commit/ec6d8dadc01269451332e5b24b12a5350a2a4896"
    },
    {
        "signature_type": "Function",
        "id": "CVE-2017-3244-b1e5246e",
        "target": {
            "file": "sql/event_db_repository.cc",
            "function": "Event_db_repository::create_event"
        },
        "signature_version": "v1",
        "digest": {
            "function_hash": "319605949545786425931899991223020281209",
            "length": 2231.0
        },
        "deprecated": false,
        "source": "https://github.com/mariadb/server/commit/ec6d8dadc01269451332e5b24b12a5350a2a4896"
    },
    {
        "signature_type": "Line",
        "id": "CVE-2017-3244-b492d286",
        "target": {
            "file": "sql/event_db_repository.cc"
        },
        "signature_version": "v1",
        "digest": {
            "threshold": 0.9,
            "line_hashes": [
                "26525096429559620866166556133688827897",
                "129500045865988016829211755681721458305",
                "247957907955429552848479655247159269668",
                "248691127989690324911143650852968838442",
                "249300590893379082946680066731077073626",
                "100859979469401964751148185679756391842",
                "155165660543301505295153545096856197609",
                "207006434850460208329635997276720901369",
                "4803520273459365740944417050049399744",
                "158561013993746021030031899712532734081",
                "136191223334164894535914729232458150659",
                "1074636894305862858336170024599283008",
                "173789926310060903198036442521100101621",
                "83624861320576465906670100335703390668",
                "250650050566756094956523563893860459947",
                "39864383845067350777116726340555535098",
                "280759529333537899701916166374408421496",
                "9660230519094929247504475558031211455"
            ]
        },
        "deprecated": false,
        "source": "https://github.com/mariadb/server/commit/ec6d8dadc01269451332e5b24b12a5350a2a4896"
    },
    {
        "signature_type": "Line",
        "id": "CVE-2017-3244-b5186f58",
        "target": {
            "file": "sql/sp_head.cc"
        },
        "signature_version": "v1",
        "digest": {
            "threshold": 0.9,
            "line_hashes": [
                "106367794982321222823661970928717070140",
                "287918171444798188919272691410834246374",
                "32263278779709520677274153452751045440",
                "85849136071385494937256123826039305613",
                "109655129547388763572068534304025775703",
                "327539203967464237571321394143350615260",
                "337748003959843701096340016276144492632",
                "119258988697698457769296765622298402469",
                "335773210269915846850055826690417498712"
            ]
        },
        "deprecated": false,
        "source": "https://github.com/mariadb/server/commit/ec6d8dadc01269451332e5b24b12a5350a2a4896"
    },
    {
        "signature_type": "Line",
        "id": "CVE-2017-3244-bb4c0188",
        "target": {
            "file": "sql/sql_udf.cc"
        },
        "signature_version": "v1",
        "digest": {
            "threshold": 0.9,
            "line_hashes": [
                "42074478750849569526598712771434739087",
                "301582172835096388796895491772193473281",
                "86887952283032989431239451409891269947",
                "119870690091251235158218428258861323094",
                "177447429887106170945355852386248803933",
                "86075442175389991038865413467493574311",
                "274646913374922228618584592203619750529",
                "67515203747798400604251782754291553286",
                "244893465238956798710697810024913192313"
            ]
        },
        "deprecated": false,
        "source": "https://github.com/mariadb/server/commit/ec6d8dadc01269451332e5b24b12a5350a2a4896"
    },
    {
        "signature_type": "Function",
        "id": "CVE-2017-3244-c77b31e2",
        "target": {
            "file": "sql/sql_udf.cc",
            "function": "mysql_create_function"
        },
        "signature_version": "v1",
        "digest": {
            "function_hash": "144133544052487356972448319223608512920",
            "length": 3701.0
        },
        "deprecated": false,
        "source": "https://github.com/mariadb/server/commit/ec6d8dadc01269451332e5b24b12a5350a2a4896"
    },
    {
        "signature_type": "Function",
        "id": "CVE-2017-3244-f24d0f46",
        "target": {
            "file": "sql/sql_parse.cc",
            "function": "prepare_schema_table"
        },
        "signature_version": "v1",
        "digest": {
            "function_hash": "311513021183552121159028578734787996705",
            "length": 104833.0
        },
        "deprecated": false,
        "source": "https://github.com/mariadb/server/commit/ec6d8dadc01269451332e5b24b12a5350a2a4896"
    }
]

source

"https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2017-3244.json"

Git / github.com/mysql/mysql-server

Affected ranges

Type
GIT
Repo
https://github.com/mysql/mysql-server
Events
Introduced
54df0057e18d8c82c23fbd4e0bf5b5dc2e762955
Fixed
c8f0eeb9c8596be83fefb7fef9f9871e53edb020

Affected versions

mysql-5.*

mysql-5.0.87sp1
mysql-5.0.90
mysql-5.0.91
mysql-5.0.92
mysql-5.0.93
mysql-5.0.94
mysql-5.0.95
mysql-5.0.96
mysql-5.1.40sp1
mysql-5.1.41
mysql-5.1.42
mysql-5.1.43
mysql-5.1.43sp1
mysql-5.1.44
mysql-5.1.45
mysql-5.1.46
mysql-5.1.46sp1
mysql-5.1.47
mysql-5.1.48
mysql-5.1.49
mysql-5.1.49sp1
mysql-5.1.50
mysql-5.1.51
mysql-5.1.52
mysql-5.1.52sp1
mysql-5.1.53
mysql-5.1.54
mysql-5.1.55
mysql-5.1.56
mysql-5.1.57
mysql-5.1.58
mysql-5.1.59
mysql-5.1.60
mysql-5.1.61
mysql-5.1.62
mysql-5.1.63
mysql-5.1.65
mysql-5.1.66
mysql-5.1.67
mysql-5.1.68
mysql-5.1.69
mysql-5.1.69-retag
mysql-5.1.70
mysql-5.1.71
mysql-5.1.72
mysql-5.1.73
mysql-5.1.74
mysql-5.1.75
mysql-5.1.76
mysql-5.1.77
mysql-5.5.0
mysql-5.5.1-m2
mysql-5.5.10
mysql-5.5.11
mysql-5.5.12
mysql-5.5.13
mysql-5.5.14
mysql-5.5.15
mysql-5.5.16
mysql-5.5.17
mysql-5.5.18
mysql-5.5.19
mysql-5.5.2-m2
mysql-5.5.20
mysql-5.5.21
mysql-5.5.22
mysql-5.5.23
mysql-5.5.24
mysql-5.5.25
mysql-5.5.25a
mysql-5.5.27
mysql-5.5.28
mysql-5.5.29
mysql-5.5.3-m3
mysql-5.5.30
mysql-5.5.31
mysql-5.5.32
mysql-5.5.33
mysql-5.5.34
mysql-5.5.35
mysql-5.5.36
mysql-5.5.37
mysql-5.5.38
mysql-5.5.39
mysql-5.5.40
mysql-5.5.41
mysql-5.5.42
mysql-5.5.43
mysql-5.5.44
mysql-5.5.45
mysql-5.5.46
mysql-5.5.47
mysql-5.5.48
mysql-5.5.49
mysql-5.5.5-m3
mysql-5.5.50
mysql-5.5.51
mysql-5.5.52
mysql-5.5.53
mysql-5.5.6-rc
mysql-5.5.7
mysql-5.5.8
mysql-5.5.9

Database specific

source

"https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2017-3244.json"