FreeBSDD9E01C35-2531-11E7-B291-B499BAEBFEAFMySQL -- multiple vulnerabilities
7.8 High
CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
COMPLETE
AV:N/AC:L/Au:N/C:N/I:N/A:C
7.7 High
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
NONE
Scope
CHANGED
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H
0.957 High
EPSS
Percentile
99.5%
Oracle reports:
This Critical Patch Update contains 39 new security fixes for
Oracle MySQL. 11 of these vulnerabilities may be remotely
exploitable without authentication, i.e., may be exploited over a
network without requiring user credentials.
| OS | Version | Architecture | Package | Version | Filename |
|---|---|---|---|---|---|
| FreeBSD | any | noarch | mariadb55-server | < 5.5.55 | UNKNOWN |
| FreeBSD | any | noarch | mariadb100-server | < 10.0.31 | UNKNOWN |
| FreeBSD | any | noarch | mariadb101-server | < 10.1.23 | UNKNOWN |
| FreeBSD | any | noarch | mysql55-server | < 5.5.55 | UNKNOWN |
| FreeBSD | any | noarch | mysql56-server | < 5.6.36 | UNKNOWN |
| FreeBSD | any | noarch | mysql57-server | < 5.7.18 | UNKNOWN |
Related
7.8 High
CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
COMPLETE
AV:N/AC:L/Au:N/C:N/I:N/A:C
7.7 High
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
NONE
Scope
CHANGED
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H
0.957 High
EPSS
Percentile
99.5%