Veracode Vulnerability DatabaseVERACODE:18313Denial Of Service (DoS)
0.019 Low
EPSS
Percentile
88.5%
Oracle MySQL and MariaDB through are vulnerable to denial of service attacks. A local attacker can exploit the flaw in library libmysqlclient.so of component C API to cause denial of service conditions via crashing the application.
References
www.debian.org/security/2017/dsa-3809
www.debian.org/security/2017/dsa-3834
www.openwall.com/lists/oss-security/2017/02/11/11
www.oracle.com/technetwork/security-advisory/cpuapr2017-3236618.html
www.oracle.com/technetwork/security-advisory/cpuapr2017-3236618.html#AppendixMSQL
www.oracle.com/technetwork/security-advisory/cpujan2017-2881727.html#AppendixMSQL
www.oracle.com/technetwork/security-advisory/cpujul2017-3236622.html#AppendixMSQL
www.securityfocus.com/bid/96162
www.securitytracker.com/id/1038287
access.redhat.com/errata/RHSA-2017:2192
access.redhat.com/errata/RHSA-2017:2787
access.redhat.com/errata/RHSA-2018:0279
access.redhat.com/errata/RHSA-2018:0574
access.redhat.com/security/updates/classification/#important
bugzilla.redhat.com/show_bug.cgi?id=1477575
bugzilla.redhat.com/show_bug.cgi?id=1482122
dev.mysql.com/doc/relnotes/mysql/5.6/en/news-5-6-35.html
dev.mysql.com/doc/relnotes/mysql/5.6/en/news-5-6-36.html
dev.mysql.com/doc/relnotes/mysql/5.6/en/news-5-6-37.html
Related
