Lucene search
Veracode Vulnerability DatabaseVERACODE:4201HistoryMay 05, 2017 - 6:47 a.m.
Database Overwrite
2017-05-0506:47:21
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
7
0.001 Low
EPSS
Percentile
20.2%
mysql-connector-java is vulnerable to database overwrite. The library does not clear the cache of preparedstatements after there has been a catalog change, allowing a malicious user to use cached prepared SQL statements against a new catalog.
| CPE | Name | Operator | Version |
|---|---|---|---|
| mysql-connector-java | le | 5.1.41 |
References
www.debian.org/security/2017/dsa-3857
www.oracle.com/technetwork/security-advisory/cpuapr2017-3236618.html
www.securityfocus.com/bid/97836
www.securitytracker.com/id/1038287
bugs.mysql.com/bug.php?id=66430
bugzilla.novell.com/show_bug.cgi?id=1035210
github.com/mysql/mysql-connector-j/blob/5.1.42/CHANGES
github.com/mysql/mysql-connector-j/commit/44631dd316e3da818fb593f02dbbe30308a937e0
Related
debiancve
debiancve
CVE-2017-3589
2017-04-24 19:59:00
redhatcve
redhatcve
CVE-2017-3589
2017-04-21 10:18:13
cvelist
cvelist
CVE-2017-3589
2017-04-24 19:00:00
osv
osv
Exposure of Sensitive Information to an Unauthorized Actor in Oracle MySQL Connectors Java
2022-05-13 01:45:42
mysql-connector-java - security update
2017-05-18 00:00:00
mysql-connector-java - security update
2017-05-16 00:00:00
cve
cve
CVE-2017-3589
2017-04-24 19:59:05
ubuntucve
ubuntucve
CVE-2017-3589
2017-04-24 00:00:00
prion
prion
Code injection
2017-04-24 19:59:00
nvd
nvd
CVE-2017-3589
2017-04-24 19:59:05
github
github
openvas
openvas
Debian: Security Advisory (DSA-3857-1)
2017-05-17 00:00:00
Debian Security Advisory DSA 3857-1 (mysql-connector-java - security update)
2017-05-18 00:00:00
Debian: Security Advisory (DLA-945-1)
2018-01-24 00:00:00
debian
debian
[SECURITY] [DSA 3857-1] mysql-connector-java security update
2017-05-18 20:35:41
[SECURITY] [DLA 945-1] mysql-connector-java security update
2017-05-16 22:52:19
nessus
nessus
Debian DSA-3857-1 : mysql-connector-java - security update
2017-05-19 00:00:00
Debian DLA-945-1 : mysql-connector-java security update
2017-05-17 00:00:00
openSUSE Security Update : mysql-connector-java (openSUSE-2018-248)
2018-03-13 00:00:00
mageia
mageia
Updated mysql-connector-java packages fix security vulnerabilities
2017-10-24 08:50:58
ibm
ibm
Security Bulletin: Multiple Vulnerabilities identified in IBM StoredIQ
2020-02-20 12:42:12
oracle
oracle
Oracle Critical Patch Update Advisory - April 2017
2017-04-18 00:00:00