RHSA-2017:2192
Vulnerability from csaf_opensuse - Published: 2017-08-01 00:00 - Updated: 2026-09-20 10:59Summary
security update for mariadb
Severity
Moderate
Notes
Title of the patch: security update for mariadb
Description of the patch: This security update provides a functional equivalent of RHSA-2017:2192.
The original Red Hat(R) advisory is available from the Red Hat web site at
https://access.redhat.com/errata/RHSA-2017:2192.
Patchnames: RHSA-2017:2192
Terms of use: CSAF 2.0 data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).
6.4 (Medium)
Affected products
Recommended
12 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: SUSE Liberty Linux 7:mariadb-1:5.5.56-2.el7.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Liberty Linux 7:mariadb-bench-1:5.5.56-2.el7.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Liberty Linux 7:mariadb-devel-1:5.5.56-2.el7.i686 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Liberty Linux 7:mariadb-devel-1:5.5.56-2.el7.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Liberty Linux 7:mariadb-embedded-1:5.5.56-2.el7.i686 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Liberty Linux 7:mariadb-embedded-1:5.5.56-2.el7.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Liberty Linux 7:mariadb-embedded-devel-1:5.5.56-2.el7.i686 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Liberty Linux 7:mariadb-embedded-devel-1:5.5.56-2.el7.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Liberty Linux 7:mariadb-libs-1:5.5.56-2.el7.i686 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Liberty Linux 7:mariadb-libs-1:5.5.56-2.el7.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Liberty Linux 7:mariadb-server-1:5.5.56-2.el7.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Liberty Linux 7:mariadb-test-1:5.5.56-2.el7.x86_64 | — |
Vendor Fix
|
Threats
Impact
moderate
Affected products
Recommended
12 products, the same list as for
CVE-2016-5483
Threats
Impact
moderate
7.8 (High)
Affected products
Recommended
12 products, the same list as for
CVE-2016-5483
Threats
Impact
important
6.5 (Medium)
Affected products
Recommended
12 products, the same list as for
CVE-2016-5483
Threats
Impact
moderate
4.4 (Medium)
Affected products
Recommended
12 products, the same list as for
CVE-2016-5483
Threats
Impact
moderate
6.5 (Medium)
Affected products
Recommended
12 products, the same list as for
CVE-2016-5483
Threats
Impact
moderate
6.5 (Medium)
Affected products
Recommended
12 products, the same list as for
CVE-2016-5483
Threats
Impact
moderate
5.6 (Medium)
Affected products
Recommended
12 products, the same list as for
CVE-2016-5483
Threats
Impact
moderate
6.3 (Medium)
Affected products
Recommended
12 products, the same list as for
CVE-2016-5483
Threats
Impact
moderate
7.5 (High)
Affected products
Recommended
12 products, the same list as for
CVE-2016-5483
Threats
Impact
moderate
7.7 (High)
Affected products
Recommended
12 products, the same list as for
CVE-2016-5483
Threats
Impact
low
7.7 (High)
Affected products
Recommended
12 products, the same list as for
CVE-2016-5483
Threats
Impact
low
6.7 (Medium)
Affected products
Recommended
12 products, the same list as for
CVE-2016-5483
Threats
Impact
moderate
4.7 (Medium)
Affected products
Recommended
12 products, the same list as for
CVE-2016-5483
Threats
Impact
low
4 (Medium)
Affected products
Recommended
12 products, the same list as for
CVE-2016-5483
Threats
Impact
low
4 (Medium)
Affected products
Recommended
12 products, the same list as for
CVE-2016-5483
Threats
Impact
moderate
6.5 (Medium)
Affected products
Recommended
12 products, the same list as for
CVE-2016-5483
Threats
Impact
low
4.9 (Medium)
Affected products
Recommended
12 products, the same list as for
CVE-2016-5483
Threats
Impact
low
4.3 (Medium)
Affected products
Recommended
12 products, the same list as for
CVE-2016-5483
Threats
Impact
low
6.6 (Medium)
Affected products
Recommended
12 products, the same list as for
CVE-2016-5483
Threats
Impact
low
4.3 (Medium)
Affected products
Recommended
12 products, the same list as for
CVE-2016-5483
Threats
Impact
moderate
References
148 references
{
"document": {
"aggregate_severity": {
"namespace": "https://www.suse.com/support/security/rating/",
"text": "Moderate"
},
"category": "csaf_security_advisory",
"csaf_version": "2.0",
"distribution": {
"text": "Copyright 2024 SUSE LLC. All rights reserved.",
"tlp": {
"label": "WHITE",
"url": "https://www.first.org/tlp/"
}
},
"lang": "en",
"notes": [
{
"category": "summary",
"text": "security update for mariadb",
"title": "Title of the patch"
},
{
"category": "description",
"text": "This security update provides a functional equivalent of RHSA-2017:2192.\nThe original Red Hat(R) advisory is available from the Red Hat web site at\nhttps://access.redhat.com/errata/RHSA-2017:2192.\n",
"title": "Description of the patch"
},
{
"category": "details",
"text": "RHSA-2017:2192",
"title": "Patchnames"
},
{
"category": "legal_disclaimer",
"text": "CSAF 2.0 data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).",
"title": "Terms of use"
}
],
"publisher": {
"category": "vendor",
"contact_details": "https://www.suse.com/support/security/contact/",
"name": "SUSE Product Security Team",
"namespace": "https://www.suse.com/"
},
"references": [
{
"category": "external",
"summary": "SUSE ratings",
"url": "https://www.suse.com/support/security/rating/"
},
{
"category": "self",
"summary": "URL of this CSAF notice",
"url": "https://ftp.suse.com/pub/projects/security/csaf/rhsa-2017_2192.json"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2016-5483 page",
"url": "https://www.suse.com/security/cve/CVE-2016-5483/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2016-5617 page",
"url": "https://www.suse.com/security/cve/CVE-2016-5617/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2016-6664 page",
"url": "https://www.suse.com/security/cve/CVE-2016-6664/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2017-3238 page",
"url": "https://www.suse.com/security/cve/CVE-2017-3238/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2017-3243 page",
"url": "https://www.suse.com/security/cve/CVE-2017-3243/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2017-3244 page",
"url": "https://www.suse.com/security/cve/CVE-2017-3244/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2017-3258 page",
"url": "https://www.suse.com/security/cve/CVE-2017-3258/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2017-3265 page",
"url": "https://www.suse.com/security/cve/CVE-2017-3265/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2017-3291 page",
"url": "https://www.suse.com/security/cve/CVE-2017-3291/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2017-3302 page",
"url": "https://www.suse.com/security/cve/CVE-2017-3302/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2017-3308 page",
"url": "https://www.suse.com/security/cve/CVE-2017-3308/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2017-3309 page",
"url": "https://www.suse.com/security/cve/CVE-2017-3309/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2017-3312 page",
"url": "https://www.suse.com/security/cve/CVE-2017-3312/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2017-3313 page",
"url": "https://www.suse.com/security/cve/CVE-2017-3313/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2017-3317 page",
"url": "https://www.suse.com/security/cve/CVE-2017-3317/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2017-3318 page",
"url": "https://www.suse.com/security/cve/CVE-2017-3318/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2017-3453 page",
"url": "https://www.suse.com/security/cve/CVE-2017-3453/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2017-3456 page",
"url": "https://www.suse.com/security/cve/CVE-2017-3456/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2017-3464 page",
"url": "https://www.suse.com/security/cve/CVE-2017-3464/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2017-3600 page",
"url": "https://www.suse.com/security/cve/CVE-2017-3600/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2017-3651 page",
"url": "https://www.suse.com/security/cve/CVE-2017-3651/"
}
],
"title": "security update for mariadb",
"tracking": {
"current_release_date": "2026-09-20T10:59:19Z",
"generator": {
"date": "2017-08-01T00:00:00Z",
"engine": {
"name": "cve-database.git:bin/generate-csaf.pl",
"version": "1"
}
},
"id": "RHSA-2017:2192",
"initial_release_date": "2017-08-01T00:00:00Z",
"revision_history": [
{
"date": "2017-08-01T00:00:00Z",
"number": "1",
"summary": "Current version"
},
{
"date": "2026-09-20T10:59:19Z",
"number": "2",
"summary": "unknown changes"
}
],
"status": "final",
"version": "2"
}
},
"product_tree": {
"branches": [
{
"branches": [
{
"branches": [
{
"category": "product_version",
"name": "mariadb-devel-1:5.5.56-2.el7.i686",
"product": {
"name": "mariadb-devel-1:5.5.56-2.el7.i686",
"product_id": "mariadb-devel-1:5.5.56-2.el7.i686",
"product_identification_helper": {
"purl": "pkg:rpm/suse/mariadb-devel@5.5.56-2.el7?arch=i686\u0026epoch=1"
}
}
},
{
"category": "product_version",
"name": "mariadb-embedded-1:5.5.56-2.el7.i686",
"product": {
"name": "mariadb-embedded-1:5.5.56-2.el7.i686",
"product_id": "mariadb-embedded-1:5.5.56-2.el7.i686",
"product_identification_helper": {
"purl": "pkg:rpm/suse/mariadb-embedded@5.5.56-2.el7?arch=i686\u0026epoch=1"
}
}
},
{
"category": "product_version",
"name": "mariadb-embedded-devel-1:5.5.56-2.el7.i686",
"product": {
"name": "mariadb-embedded-devel-1:5.5.56-2.el7.i686",
"product_id": "mariadb-embedded-devel-1:5.5.56-2.el7.i686",
"product_identification_helper": {
"purl": "pkg:rpm/suse/mariadb-embedded-devel@5.5.56-2.el7?arch=i686\u0026epoch=1"
}
}
},
{
"category": "product_version",
"name": "mariadb-libs-1:5.5.56-2.el7.i686",
"product": {
"name": "mariadb-libs-1:5.5.56-2.el7.i686",
"product_id": "mariadb-libs-1:5.5.56-2.el7.i686",
"product_identification_helper": {
"purl": "pkg:rpm/suse/mariadb-libs@5.5.56-2.el7?arch=i686\u0026epoch=1"
}
}
}
],
"category": "architecture",
"name": "i686"
},
{
"branches": [
{
"category": "product_version",
"name": "mariadb-1:5.5.56-2.el7.x86_64",
"product": {
"name": "mariadb-1:5.5.56-2.el7.x86_64",
"product_id": "mariadb-1:5.5.56-2.el7.x86_64",
"product_identification_helper": {
"cpe": "cpe:2.3:a:mariadb:mariadb:5.5.56:*:*:*:*:*:*:*",
"purl": "pkg:rpm/suse/mariadb@5.5.56-2.el7?arch=x86_64\u0026epoch=1\u0026upstream=mariadb-1:5.5.56-2.el7.src.rpm"
}
}
},
{
"category": "product_version",
"name": "mariadb-bench-1:5.5.56-2.el7.x86_64",
"product": {
"name": "mariadb-bench-1:5.5.56-2.el7.x86_64",
"product_id": "mariadb-bench-1:5.5.56-2.el7.x86_64",
"product_identification_helper": {
"cpe": "cpe:2.3:a:mariadb:mariadb:5.5.56:*:*:*:*:*:*:*",
"purl": "pkg:rpm/suse/mariadb-bench@5.5.56-2.el7?arch=x86_64\u0026epoch=1\u0026upstream=mariadb-1:5.5.56-2.el7.src.rpm"
}
}
},
{
"category": "product_version",
"name": "mariadb-devel-1:5.5.56-2.el7.x86_64",
"product": {
"name": "mariadb-devel-1:5.5.56-2.el7.x86_64",
"product_id": "mariadb-devel-1:5.5.56-2.el7.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/suse/mariadb-devel@5.5.56-2.el7?arch=x86_64\u0026epoch=1"
}
}
},
{
"category": "product_version",
"name": "mariadb-embedded-1:5.5.56-2.el7.x86_64",
"product": {
"name": "mariadb-embedded-1:5.5.56-2.el7.x86_64",
"product_id": "mariadb-embedded-1:5.5.56-2.el7.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/suse/mariadb-embedded@5.5.56-2.el7?arch=x86_64\u0026epoch=1"
}
}
},
{
"category": "product_version",
"name": "mariadb-embedded-devel-1:5.5.56-2.el7.x86_64",
"product": {
"name": "mariadb-embedded-devel-1:5.5.56-2.el7.x86_64",
"product_id": "mariadb-embedded-devel-1:5.5.56-2.el7.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/suse/mariadb-embedded-devel@5.5.56-2.el7?arch=x86_64\u0026epoch=1"
}
}
},
{
"category": "product_version",
"name": "mariadb-libs-1:5.5.56-2.el7.x86_64",
"product": {
"name": "mariadb-libs-1:5.5.56-2.el7.x86_64",
"product_id": "mariadb-libs-1:5.5.56-2.el7.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/suse/mariadb-libs@5.5.56-2.el7?arch=x86_64\u0026epoch=1"
}
}
},
{
"category": "product_version",
"name": "mariadb-server-1:5.5.56-2.el7.x86_64",
"product": {
"name": "mariadb-server-1:5.5.56-2.el7.x86_64",
"product_id": "mariadb-server-1:5.5.56-2.el7.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/suse/mariadb-server@5.5.56-2.el7?arch=x86_64\u0026epoch=1"
}
}
},
{
"category": "product_version",
"name": "mariadb-test-1:5.5.56-2.el7.x86_64",
"product": {
"name": "mariadb-test-1:5.5.56-2.el7.x86_64",
"product_id": "mariadb-test-1:5.5.56-2.el7.x86_64",
"product_identification_helper": {
"cpe": "cpe:2.3:a:mariadb:mariadb:5.5.56:*:*:*:*:*:*:*",
"purl": "pkg:rpm/suse/mariadb-test@5.5.56-2.el7?arch=x86_64\u0026epoch=1\u0026upstream=mariadb-1:5.5.56-2.el7.src.rpm"
}
}
}
],
"category": "architecture",
"name": "x86_64"
},
{
"branches": [
{
"category": "product_name",
"name": "SUSE Liberty Linux 7",
"product": {
"name": "SUSE Liberty Linux 7",
"product_id": "SUSE Liberty Linux 7",
"product_identification_helper": {
"cpe": "cpe:/o:suse:sll:7"
}
}
}
],
"category": "product_family",
"name": "SUSE Linux Enterprise"
}
],
"category": "vendor",
"name": "SUSE"
}
],
"relationships": [
{
"category": "default_component_of",
"full_product_name": {
"name": "mariadb-1:5.5.56-2.el7.x86_64 as component of SUSE Liberty Linux 7",
"product_id": "SUSE Liberty Linux 7:mariadb-1:5.5.56-2.el7.x86_64"
},
"product_reference": "mariadb-1:5.5.56-2.el7.x86_64",
"relates_to_product_reference": "SUSE Liberty Linux 7"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "mariadb-bench-1:5.5.56-2.el7.x86_64 as component of SUSE Liberty Linux 7",
"product_id": "SUSE Liberty Linux 7:mariadb-bench-1:5.5.56-2.el7.x86_64"
},
"product_reference": "mariadb-bench-1:5.5.56-2.el7.x86_64",
"relates_to_product_reference": "SUSE Liberty Linux 7"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "mariadb-devel-1:5.5.56-2.el7.i686 as component of SUSE Liberty Linux 7",
"product_id": "SUSE Liberty Linux 7:mariadb-devel-1:5.5.56-2.el7.i686"
},
"product_reference": "mariadb-devel-1:5.5.56-2.el7.i686",
"relates_to_product_reference": "SUSE Liberty Linux 7"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "mariadb-devel-1:5.5.56-2.el7.x86_64 as component of SUSE Liberty Linux 7",
"product_id": "SUSE Liberty Linux 7:mariadb-devel-1:5.5.56-2.el7.x86_64"
},
"product_reference": "mariadb-devel-1:5.5.56-2.el7.x86_64",
"relates_to_product_reference": "SUSE Liberty Linux 7"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "mariadb-embedded-1:5.5.56-2.el7.i686 as component of SUSE Liberty Linux 7",
"product_id": "SUSE Liberty Linux 7:mariadb-embedded-1:5.5.56-2.el7.i686"
},
"product_reference": "mariadb-embedded-1:5.5.56-2.el7.i686",
"relates_to_product_reference": "SUSE Liberty Linux 7"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "mariadb-embedded-1:5.5.56-2.el7.x86_64 as component of SUSE Liberty Linux 7",
"product_id": "SUSE Liberty Linux 7:mariadb-embedded-1:5.5.56-2.el7.x86_64"
},
"product_reference": "mariadb-embedded-1:5.5.56-2.el7.x86_64",
"relates_to_product_reference": "SUSE Liberty Linux 7"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "mariadb-embedded-devel-1:5.5.56-2.el7.i686 as component of SUSE Liberty Linux 7",
"product_id": "SUSE Liberty Linux 7:mariadb-embedded-devel-1:5.5.56-2.el7.i686"
},
"product_reference": "mariadb-embedded-devel-1:5.5.56-2.el7.i686",
"relates_to_product_reference": "SUSE Liberty Linux 7"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "mariadb-embedded-devel-1:5.5.56-2.el7.x86_64 as component of SUSE Liberty Linux 7",
"product_id": "SUSE Liberty Linux 7:mariadb-embedded-devel-1:5.5.56-2.el7.x86_64"
},
"product_reference": "mariadb-embedded-devel-1:5.5.56-2.el7.x86_64",
"relates_to_product_reference": "SUSE Liberty Linux 7"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "mariadb-libs-1:5.5.56-2.el7.i686 as component of SUSE Liberty Linux 7",
"product_id": "SUSE Liberty Linux 7:mariadb-libs-1:5.5.56-2.el7.i686"
},
"product_reference": "mariadb-libs-1:5.5.56-2.el7.i686",
"relates_to_product_reference": "SUSE Liberty Linux 7"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "mariadb-libs-1:5.5.56-2.el7.x86_64 as component of SUSE Liberty Linux 7",
"product_id": "SUSE Liberty Linux 7:mariadb-libs-1:5.5.56-2.el7.x86_64"
},
"product_reference": "mariadb-libs-1:5.5.56-2.el7.x86_64",
"relates_to_product_reference": "SUSE Liberty Linux 7"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "mariadb-server-1:5.5.56-2.el7.x86_64 as component of SUSE Liberty Linux 7",
"product_id": "SUSE Liberty Linux 7:mariadb-server-1:5.5.56-2.el7.x86_64"
},
"product_reference": "mariadb-server-1:5.5.56-2.el7.x86_64",
"relates_to_product_reference": "SUSE Liberty Linux 7"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "mariadb-test-1:5.5.56-2.el7.x86_64 as component of SUSE Liberty Linux 7",
"product_id": "SUSE Liberty Linux 7:mariadb-test-1:5.5.56-2.el7.x86_64"
},
"product_reference": "mariadb-test-1:5.5.56-2.el7.x86_64",
"relates_to_product_reference": "SUSE Liberty Linux 7"
}
]
},
"vulnerabilities": [
{
"cve": "CVE-2016-5483",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2016-5483"
}
],
"notes": [
{
"category": "general",
"text": "DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2017-3600. Reason: This candidate is a reservation duplicate of CVE-2017-3600. Notes: All CVE users should reference CVE-2017-3600 instead of this candidate. All references and descriptions in this candidate have been removed to prevent accidental usage",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Liberty Linux 7:mariadb-1:5.5.56-2.el7.x86_64",
"SUSE Liberty Linux 7:mariadb-bench-1:5.5.56-2.el7.x86_64",
"SUSE Liberty Linux 7:mariadb-devel-1:5.5.56-2.el7.i686",
"SUSE Liberty Linux 7:mariadb-devel-1:5.5.56-2.el7.x86_64",
"SUSE Liberty Linux 7:mariadb-embedded-1:5.5.56-2.el7.i686",
"SUSE Liberty Linux 7:mariadb-embedded-1:5.5.56-2.el7.x86_64",
"SUSE Liberty Linux 7:mariadb-embedded-devel-1:5.5.56-2.el7.i686",
"SUSE Liberty Linux 7:mariadb-embedded-devel-1:5.5.56-2.el7.x86_64",
"SUSE Liberty Linux 7:mariadb-libs-1:5.5.56-2.el7.i686",
"SUSE Liberty Linux 7:mariadb-libs-1:5.5.56-2.el7.x86_64",
"SUSE Liberty Linux 7:mariadb-server-1:5.5.56-2.el7.x86_64",
"SUSE Liberty Linux 7:mariadb-test-1:5.5.56-2.el7.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2016-5483",
"url": "https://www.suse.com/security/cve/CVE-2016-5483"
},
{
"category": "external",
"summary": "SUSE Bug 1001367 for CVE-2016-5483",
"url": "https://bugzilla.suse.com/1001367"
},
{
"category": "external",
"summary": "SUSE Bug 1005555 for CVE-2016-5483",
"url": "https://bugzilla.suse.com/1005555"
},
{
"category": "external",
"summary": "SUSE Bug 1005557 for CVE-2016-5483",
"url": "https://bugzilla.suse.com/1005557"
},
{
"category": "external",
"summary": "SUSE Bug 1005561 for CVE-2016-5483",
"url": "https://bugzilla.suse.com/1005561"
},
{
"category": "external",
"summary": "SUSE Bug 1005562 for CVE-2016-5483",
"url": "https://bugzilla.suse.com/1005562"
},
{
"category": "external",
"summary": "SUSE Bug 1005563 for CVE-2016-5483",
"url": "https://bugzilla.suse.com/1005563"
},
{
"category": "external",
"summary": "SUSE Bug 1005564 for CVE-2016-5483",
"url": "https://bugzilla.suse.com/1005564"
},
{
"category": "external",
"summary": "SUSE Bug 1005566 for CVE-2016-5483",
"url": "https://bugzilla.suse.com/1005566"
},
{
"category": "external",
"summary": "SUSE Bug 1005569 for CVE-2016-5483",
"url": "https://bugzilla.suse.com/1005569"
},
{
"category": "external",
"summary": "SUSE Bug 1005570 for CVE-2016-5483",
"url": "https://bugzilla.suse.com/1005570"
},
{
"category": "external",
"summary": "SUSE Bug 1005582 for CVE-2016-5483",
"url": "https://bugzilla.suse.com/1005582"
},
{
"category": "external",
"summary": "SUSE Bug 1020875 for CVE-2016-5483",
"url": "https://bugzilla.suse.com/1020875"
},
{
"category": "external",
"summary": "SUSE Bug 1020876 for CVE-2016-5483",
"url": "https://bugzilla.suse.com/1020876"
},
{
"category": "external",
"summary": "SUSE Bug 1020877 for CVE-2016-5483",
"url": "https://bugzilla.suse.com/1020877"
},
{
"category": "external",
"summary": "SUSE Bug 1020878 for CVE-2016-5483",
"url": "https://bugzilla.suse.com/1020878"
},
{
"category": "external",
"summary": "SUSE Bug 1020882 for CVE-2016-5483",
"url": "https://bugzilla.suse.com/1020882"
},
{
"category": "external",
"summary": "SUSE Bug 1020883 for CVE-2016-5483",
"url": "https://bugzilla.suse.com/1020883"
},
{
"category": "external",
"summary": "SUSE Bug 1020884 for CVE-2016-5483",
"url": "https://bugzilla.suse.com/1020884"
},
{
"category": "external",
"summary": "SUSE Bug 1020885 for CVE-2016-5483",
"url": "https://bugzilla.suse.com/1020885"
},
{
"category": "external",
"summary": "SUSE Bug 1020888 for CVE-2016-5483",
"url": "https://bugzilla.suse.com/1020888"
},
{
"category": "external",
"summary": "SUSE Bug 1020890 for CVE-2016-5483",
"url": "https://bugzilla.suse.com/1020890"
},
{
"category": "external",
"summary": "SUSE Bug 1020891 for CVE-2016-5483",
"url": "https://bugzilla.suse.com/1020891"
},
{
"category": "external",
"summary": "SUSE Bug 1020893 for CVE-2016-5483",
"url": "https://bugzilla.suse.com/1020893"
},
{
"category": "external",
"summary": "SUSE Bug 1020894 for CVE-2016-5483",
"url": "https://bugzilla.suse.com/1020894"
},
{
"category": "external",
"summary": "SUSE Bug 1020896 for CVE-2016-5483",
"url": "https://bugzilla.suse.com/1020896"
},
{
"category": "external",
"summary": "SUSE Bug 1020898 for CVE-2016-5483",
"url": "https://bugzilla.suse.com/1020898"
},
{
"category": "external",
"summary": "SUSE Bug 1020901 for CVE-2016-5483",
"url": "https://bugzilla.suse.com/1020901"
},
{
"category": "external",
"summary": "SUSE Bug 1022428 for CVE-2016-5483",
"url": "https://bugzilla.suse.com/1022428"
},
{
"category": "external",
"summary": "SUSE Bug 1029014 for CVE-2016-5483",
"url": "https://bugzilla.suse.com/1029014"
},
{
"category": "external",
"summary": "SUSE Bug 1029396 for CVE-2016-5483",
"url": "https://bugzilla.suse.com/1029396"
},
{
"category": "external",
"summary": "SUSE Bug 1034850 for CVE-2016-5483",
"url": "https://bugzilla.suse.com/1034850"
},
{
"category": "external",
"summary": "SUSE Bug 1049393 for CVE-2016-5483",
"url": "https://bugzilla.suse.com/1049393"
},
{
"category": "external",
"summary": "SUSE Bug 1049394 for CVE-2016-5483",
"url": "https://bugzilla.suse.com/1049394"
},
{
"category": "external",
"summary": "SUSE Bug 1049396 for CVE-2016-5483",
"url": "https://bugzilla.suse.com/1049396"
},
{
"category": "external",
"summary": "SUSE Bug 1049399 for CVE-2016-5483",
"url": "https://bugzilla.suse.com/1049399"
},
{
"category": "external",
"summary": "SUSE Bug 1049400 for CVE-2016-5483",
"url": "https://bugzilla.suse.com/1049400"
},
{
"category": "external",
"summary": "SUSE Bug 1049401 for CVE-2016-5483",
"url": "https://bugzilla.suse.com/1049401"
},
{
"category": "external",
"summary": "SUSE Bug 1049402 for CVE-2016-5483",
"url": "https://bugzilla.suse.com/1049402"
},
{
"category": "external",
"summary": "SUSE Bug 1049403 for CVE-2016-5483",
"url": "https://bugzilla.suse.com/1049403"
},
{
"category": "external",
"summary": "SUSE Bug 1049404 for CVE-2016-5483",
"url": "https://bugzilla.suse.com/1049404"
},
{
"category": "external",
"summary": "SUSE Bug 1049405 for CVE-2016-5483",
"url": "https://bugzilla.suse.com/1049405"
},
{
"category": "external",
"summary": "SUSE Bug 1049406 for CVE-2016-5483",
"url": "https://bugzilla.suse.com/1049406"
},
{
"category": "external",
"summary": "SUSE Bug 1049407 for CVE-2016-5483",
"url": "https://bugzilla.suse.com/1049407"
},
{
"category": "external",
"summary": "SUSE Bug 1049408 for CVE-2016-5483",
"url": "https://bugzilla.suse.com/1049408"
},
{
"category": "external",
"summary": "SUSE Bug 1049409 for CVE-2016-5483",
"url": "https://bugzilla.suse.com/1049409"
},
{
"category": "external",
"summary": "SUSE Bug 1049410 for CVE-2016-5483",
"url": "https://bugzilla.suse.com/1049410"
},
{
"category": "external",
"summary": "SUSE Bug 1049411 for CVE-2016-5483",
"url": "https://bugzilla.suse.com/1049411"
},
{
"category": "external",
"summary": "SUSE Bug 1049412 for CVE-2016-5483",
"url": "https://bugzilla.suse.com/1049412"
},
{
"category": "external",
"summary": "SUSE Bug 1049414 for CVE-2016-5483",
"url": "https://bugzilla.suse.com/1049414"
},
{
"category": "external",
"summary": "SUSE Bug 1049415 for CVE-2016-5483",
"url": "https://bugzilla.suse.com/1049415"
},
{
"category": "external",
"summary": "SUSE Bug 1049416 for CVE-2016-5483",
"url": "https://bugzilla.suse.com/1049416"
},
{
"category": "external",
"summary": "SUSE Bug 1049417 for CVE-2016-5483",
"url": "https://bugzilla.suse.com/1049417"
},
{
"category": "external",
"summary": "SUSE Bug 1064101 for CVE-2016-5483",
"url": "https://bugzilla.suse.com/1064101"
},
{
"category": "external",
"summary": "SUSE Bug 1064107 for CVE-2016-5483",
"url": "https://bugzilla.suse.com/1064107"
},
{
"category": "external",
"summary": "SUSE Bug 1064115 for CVE-2016-5483",
"url": "https://bugzilla.suse.com/1064115"
},
{
"category": "external",
"summary": "SUSE Bug 1064116 for CVE-2016-5483",
"url": "https://bugzilla.suse.com/1064116"
},
{
"category": "external",
"summary": "SUSE Bug 1064117 for CVE-2016-5483",
"url": "https://bugzilla.suse.com/1064117"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Liberty Linux 7:mariadb-1:5.5.56-2.el7.x86_64",
"SUSE Liberty Linux 7:mariadb-bench-1:5.5.56-2.el7.x86_64",
"SUSE Liberty Linux 7:mariadb-devel-1:5.5.56-2.el7.i686",
"SUSE Liberty Linux 7:mariadb-devel-1:5.5.56-2.el7.x86_64",
"SUSE Liberty Linux 7:mariadb-embedded-1:5.5.56-2.el7.i686",
"SUSE Liberty Linux 7:mariadb-embedded-1:5.5.56-2.el7.x86_64",
"SUSE Liberty Linux 7:mariadb-embedded-devel-1:5.5.56-2.el7.i686",
"SUSE Liberty Linux 7:mariadb-embedded-devel-1:5.5.56-2.el7.x86_64",
"SUSE Liberty Linux 7:mariadb-libs-1:5.5.56-2.el7.i686",
"SUSE Liberty Linux 7:mariadb-libs-1:5.5.56-2.el7.x86_64",
"SUSE Liberty Linux 7:mariadb-server-1:5.5.56-2.el7.x86_64",
"SUSE Liberty Linux 7:mariadb-test-1:5.5.56-2.el7.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.4,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:H/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"SUSE Liberty Linux 7:mariadb-1:5.5.56-2.el7.x86_64",
"SUSE Liberty Linux 7:mariadb-bench-1:5.5.56-2.el7.x86_64",
"SUSE Liberty Linux 7:mariadb-devel-1:5.5.56-2.el7.i686",
"SUSE Liberty Linux 7:mariadb-devel-1:5.5.56-2.el7.x86_64",
"SUSE Liberty Linux 7:mariadb-embedded-1:5.5.56-2.el7.i686",
"SUSE Liberty Linux 7:mariadb-embedded-1:5.5.56-2.el7.x86_64",
"SUSE Liberty Linux 7:mariadb-embedded-devel-1:5.5.56-2.el7.i686",
"SUSE Liberty Linux 7:mariadb-embedded-devel-1:5.5.56-2.el7.x86_64",
"SUSE Liberty Linux 7:mariadb-libs-1:5.5.56-2.el7.i686",
"SUSE Liberty Linux 7:mariadb-libs-1:5.5.56-2.el7.x86_64",
"SUSE Liberty Linux 7:mariadb-server-1:5.5.56-2.el7.x86_64",
"SUSE Liberty Linux 7:mariadb-test-1:5.5.56-2.el7.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2017-08-01T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2016-5483"
},
{
"cve": "CVE-2016-5617",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2016-5617"
}
],
"notes": [
{
"category": "general",
"text": "DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2016-6664. Reason: This candidate is a reservation duplicate of CVE-2016-6664. Notes: All CVE users should reference CVE-2016-6664 instead of this candidate. All references and descriptions in this candidate have been removed to prevent accidental usage",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Liberty Linux 7:mariadb-1:5.5.56-2.el7.x86_64",
"SUSE Liberty Linux 7:mariadb-bench-1:5.5.56-2.el7.x86_64",
"SUSE Liberty Linux 7:mariadb-devel-1:5.5.56-2.el7.i686",
"SUSE Liberty Linux 7:mariadb-devel-1:5.5.56-2.el7.x86_64",
"SUSE Liberty Linux 7:mariadb-embedded-1:5.5.56-2.el7.i686",
"SUSE Liberty Linux 7:mariadb-embedded-1:5.5.56-2.el7.x86_64",
"SUSE Liberty Linux 7:mariadb-embedded-devel-1:5.5.56-2.el7.i686",
"SUSE Liberty Linux 7:mariadb-embedded-devel-1:5.5.56-2.el7.x86_64",
"SUSE Liberty Linux 7:mariadb-libs-1:5.5.56-2.el7.i686",
"SUSE Liberty Linux 7:mariadb-libs-1:5.5.56-2.el7.x86_64",
"SUSE Liberty Linux 7:mariadb-server-1:5.5.56-2.el7.x86_64",
"SUSE Liberty Linux 7:mariadb-test-1:5.5.56-2.el7.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2016-5617",
"url": "https://www.suse.com/security/cve/CVE-2016-5617"
},
{
"category": "external",
"summary": "SUSE Bug 1005563 for CVE-2016-5617",
"url": "https://bugzilla.suse.com/1005563"
},
{
"category": "external",
"summary": "SUSE Bug 1008253 for CVE-2016-5617",
"url": "https://bugzilla.suse.com/1008253"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Liberty Linux 7:mariadb-1:5.5.56-2.el7.x86_64",
"SUSE Liberty Linux 7:mariadb-bench-1:5.5.56-2.el7.x86_64",
"SUSE Liberty Linux 7:mariadb-devel-1:5.5.56-2.el7.i686",
"SUSE Liberty Linux 7:mariadb-devel-1:5.5.56-2.el7.x86_64",
"SUSE Liberty Linux 7:mariadb-embedded-1:5.5.56-2.el7.i686",
"SUSE Liberty Linux 7:mariadb-embedded-1:5.5.56-2.el7.x86_64",
"SUSE Liberty Linux 7:mariadb-embedded-devel-1:5.5.56-2.el7.i686",
"SUSE Liberty Linux 7:mariadb-embedded-devel-1:5.5.56-2.el7.x86_64",
"SUSE Liberty Linux 7:mariadb-libs-1:5.5.56-2.el7.i686",
"SUSE Liberty Linux 7:mariadb-libs-1:5.5.56-2.el7.x86_64",
"SUSE Liberty Linux 7:mariadb-server-1:5.5.56-2.el7.x86_64",
"SUSE Liberty Linux 7:mariadb-test-1:5.5.56-2.el7.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2017-08-01T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2016-5617"
},
{
"cve": "CVE-2016-6664",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2016-6664"
}
],
"notes": [
{
"category": "general",
"text": "mysqld_safe in Oracle MySQL through 5.5.51, 5.6.x through 5.6.32, and 5.7.x through 5.7.14; MariaDB; Percona Server before 5.5.51-38.2, 5.6.x before 5.6.32-78-1, and 5.7.x before 5.7.14-8; and Percona XtraDB Cluster before 5.5.41-37.0, 5.6.x before 5.6.32-25.17, and 5.7.x before 5.7.14-26.17, when using file-based logging, allows local users with access to the mysql account to gain root privileges via a symlink attack on error logs and possibly other files.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Liberty Linux 7:mariadb-1:5.5.56-2.el7.x86_64",
"SUSE Liberty Linux 7:mariadb-bench-1:5.5.56-2.el7.x86_64",
"SUSE Liberty Linux 7:mariadb-devel-1:5.5.56-2.el7.i686",
"SUSE Liberty Linux 7:mariadb-devel-1:5.5.56-2.el7.x86_64",
"SUSE Liberty Linux 7:mariadb-embedded-1:5.5.56-2.el7.i686",
"SUSE Liberty Linux 7:mariadb-embedded-1:5.5.56-2.el7.x86_64",
"SUSE Liberty Linux 7:mariadb-embedded-devel-1:5.5.56-2.el7.i686",
"SUSE Liberty Linux 7:mariadb-embedded-devel-1:5.5.56-2.el7.x86_64",
"SUSE Liberty Linux 7:mariadb-libs-1:5.5.56-2.el7.i686",
"SUSE Liberty Linux 7:mariadb-libs-1:5.5.56-2.el7.x86_64",
"SUSE Liberty Linux 7:mariadb-server-1:5.5.56-2.el7.x86_64",
"SUSE Liberty Linux 7:mariadb-test-1:5.5.56-2.el7.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2016-6664",
"url": "https://www.suse.com/security/cve/CVE-2016-6664"
},
{
"category": "external",
"summary": "SUSE Bug 1008253 for CVE-2016-6664",
"url": "https://bugzilla.suse.com/1008253"
},
{
"category": "external",
"summary": "SUSE Bug 1020868 for CVE-2016-6664",
"url": "https://bugzilla.suse.com/1020868"
},
{
"category": "external",
"summary": "SUSE Bug 1020873 for CVE-2016-6664",
"url": "https://bugzilla.suse.com/1020873"
},
{
"category": "external",
"summary": "SUSE Bug 998309 for CVE-2016-6664",
"url": "https://bugzilla.suse.com/998309"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Liberty Linux 7:mariadb-1:5.5.56-2.el7.x86_64",
"SUSE Liberty Linux 7:mariadb-bench-1:5.5.56-2.el7.x86_64",
"SUSE Liberty Linux 7:mariadb-devel-1:5.5.56-2.el7.i686",
"SUSE Liberty Linux 7:mariadb-devel-1:5.5.56-2.el7.x86_64",
"SUSE Liberty Linux 7:mariadb-embedded-1:5.5.56-2.el7.i686",
"SUSE Liberty Linux 7:mariadb-embedded-1:5.5.56-2.el7.x86_64",
"SUSE Liberty Linux 7:mariadb-embedded-devel-1:5.5.56-2.el7.i686",
"SUSE Liberty Linux 7:mariadb-embedded-devel-1:5.5.56-2.el7.x86_64",
"SUSE Liberty Linux 7:mariadb-libs-1:5.5.56-2.el7.i686",
"SUSE Liberty Linux 7:mariadb-libs-1:5.5.56-2.el7.x86_64",
"SUSE Liberty Linux 7:mariadb-server-1:5.5.56-2.el7.x86_64",
"SUSE Liberty Linux 7:mariadb-test-1:5.5.56-2.el7.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"SUSE Liberty Linux 7:mariadb-1:5.5.56-2.el7.x86_64",
"SUSE Liberty Linux 7:mariadb-bench-1:5.5.56-2.el7.x86_64",
"SUSE Liberty Linux 7:mariadb-devel-1:5.5.56-2.el7.i686",
"SUSE Liberty Linux 7:mariadb-devel-1:5.5.56-2.el7.x86_64",
"SUSE Liberty Linux 7:mariadb-embedded-1:5.5.56-2.el7.i686",
"SUSE Liberty Linux 7:mariadb-embedded-1:5.5.56-2.el7.x86_64",
"SUSE Liberty Linux 7:mariadb-embedded-devel-1:5.5.56-2.el7.i686",
"SUSE Liberty Linux 7:mariadb-embedded-devel-1:5.5.56-2.el7.x86_64",
"SUSE Liberty Linux 7:mariadb-libs-1:5.5.56-2.el7.i686",
"SUSE Liberty Linux 7:mariadb-libs-1:5.5.56-2.el7.x86_64",
"SUSE Liberty Linux 7:mariadb-server-1:5.5.56-2.el7.x86_64",
"SUSE Liberty Linux 7:mariadb-test-1:5.5.56-2.el7.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2017-08-01T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2016-6664"
},
{
"cve": "CVE-2017-3238",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2017-3238"
}
],
"notes": [
{
"category": "general",
"text": "Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Optimizer). Supported versions that are affected are 5.5.53 and earlier, 5.6.34 and earlier and 5.7.16 and earlier. Easily exploitable vulnerability allows low privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS v3.0 Base Score 6.5 (Availability impacts).",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Liberty Linux 7:mariadb-1:5.5.56-2.el7.x86_64",
"SUSE Liberty Linux 7:mariadb-bench-1:5.5.56-2.el7.x86_64",
"SUSE Liberty Linux 7:mariadb-devel-1:5.5.56-2.el7.i686",
"SUSE Liberty Linux 7:mariadb-devel-1:5.5.56-2.el7.x86_64",
"SUSE Liberty Linux 7:mariadb-embedded-1:5.5.56-2.el7.i686",
"SUSE Liberty Linux 7:mariadb-embedded-1:5.5.56-2.el7.x86_64",
"SUSE Liberty Linux 7:mariadb-embedded-devel-1:5.5.56-2.el7.i686",
"SUSE Liberty Linux 7:mariadb-embedded-devel-1:5.5.56-2.el7.x86_64",
"SUSE Liberty Linux 7:mariadb-libs-1:5.5.56-2.el7.i686",
"SUSE Liberty Linux 7:mariadb-libs-1:5.5.56-2.el7.x86_64",
"SUSE Liberty Linux 7:mariadb-server-1:5.5.56-2.el7.x86_64",
"SUSE Liberty Linux 7:mariadb-test-1:5.5.56-2.el7.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2017-3238",
"url": "https://www.suse.com/security/cve/CVE-2017-3238"
},
{
"category": "external",
"summary": "SUSE Bug 1020868 for CVE-2017-3238",
"url": "https://bugzilla.suse.com/1020868"
},
{
"category": "external",
"summary": "SUSE Bug 1020882 for CVE-2017-3238",
"url": "https://bugzilla.suse.com/1020882"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Liberty Linux 7:mariadb-1:5.5.56-2.el7.x86_64",
"SUSE Liberty Linux 7:mariadb-bench-1:5.5.56-2.el7.x86_64",
"SUSE Liberty Linux 7:mariadb-devel-1:5.5.56-2.el7.i686",
"SUSE Liberty Linux 7:mariadb-devel-1:5.5.56-2.el7.x86_64",
"SUSE Liberty Linux 7:mariadb-embedded-1:5.5.56-2.el7.i686",
"SUSE Liberty Linux 7:mariadb-embedded-1:5.5.56-2.el7.x86_64",
"SUSE Liberty Linux 7:mariadb-embedded-devel-1:5.5.56-2.el7.i686",
"SUSE Liberty Linux 7:mariadb-embedded-devel-1:5.5.56-2.el7.x86_64",
"SUSE Liberty Linux 7:mariadb-libs-1:5.5.56-2.el7.i686",
"SUSE Liberty Linux 7:mariadb-libs-1:5.5.56-2.el7.x86_64",
"SUSE Liberty Linux 7:mariadb-server-1:5.5.56-2.el7.x86_64",
"SUSE Liberty Linux 7:mariadb-test-1:5.5.56-2.el7.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Liberty Linux 7:mariadb-1:5.5.56-2.el7.x86_64",
"SUSE Liberty Linux 7:mariadb-bench-1:5.5.56-2.el7.x86_64",
"SUSE Liberty Linux 7:mariadb-devel-1:5.5.56-2.el7.i686",
"SUSE Liberty Linux 7:mariadb-devel-1:5.5.56-2.el7.x86_64",
"SUSE Liberty Linux 7:mariadb-embedded-1:5.5.56-2.el7.i686",
"SUSE Liberty Linux 7:mariadb-embedded-1:5.5.56-2.el7.x86_64",
"SUSE Liberty Linux 7:mariadb-embedded-devel-1:5.5.56-2.el7.i686",
"SUSE Liberty Linux 7:mariadb-embedded-devel-1:5.5.56-2.el7.x86_64",
"SUSE Liberty Linux 7:mariadb-libs-1:5.5.56-2.el7.i686",
"SUSE Liberty Linux 7:mariadb-libs-1:5.5.56-2.el7.x86_64",
"SUSE Liberty Linux 7:mariadb-server-1:5.5.56-2.el7.x86_64",
"SUSE Liberty Linux 7:mariadb-test-1:5.5.56-2.el7.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2017-08-01T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2017-3238"
},
{
"cve": "CVE-2017-3243",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2017-3243"
}
],
"notes": [
{
"category": "general",
"text": "Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Charsets). Supported versions that are affected are 5.5.53 and earlier. Difficult to exploit vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS v3.0 Base Score 4.4 (Availability impacts).",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Liberty Linux 7:mariadb-1:5.5.56-2.el7.x86_64",
"SUSE Liberty Linux 7:mariadb-bench-1:5.5.56-2.el7.x86_64",
"SUSE Liberty Linux 7:mariadb-devel-1:5.5.56-2.el7.i686",
"SUSE Liberty Linux 7:mariadb-devel-1:5.5.56-2.el7.x86_64",
"SUSE Liberty Linux 7:mariadb-embedded-1:5.5.56-2.el7.i686",
"SUSE Liberty Linux 7:mariadb-embedded-1:5.5.56-2.el7.x86_64",
"SUSE Liberty Linux 7:mariadb-embedded-devel-1:5.5.56-2.el7.i686",
"SUSE Liberty Linux 7:mariadb-embedded-devel-1:5.5.56-2.el7.x86_64",
"SUSE Liberty Linux 7:mariadb-libs-1:5.5.56-2.el7.i686",
"SUSE Liberty Linux 7:mariadb-libs-1:5.5.56-2.el7.x86_64",
"SUSE Liberty Linux 7:mariadb-server-1:5.5.56-2.el7.x86_64",
"SUSE Liberty Linux 7:mariadb-test-1:5.5.56-2.el7.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2017-3243",
"url": "https://www.suse.com/security/cve/CVE-2017-3243"
},
{
"category": "external",
"summary": "SUSE Bug 1020868 for CVE-2017-3243",
"url": "https://bugzilla.suse.com/1020868"
},
{
"category": "external",
"summary": "SUSE Bug 1020891 for CVE-2017-3243",
"url": "https://bugzilla.suse.com/1020891"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Liberty Linux 7:mariadb-1:5.5.56-2.el7.x86_64",
"SUSE Liberty Linux 7:mariadb-bench-1:5.5.56-2.el7.x86_64",
"SUSE Liberty Linux 7:mariadb-devel-1:5.5.56-2.el7.i686",
"SUSE Liberty Linux 7:mariadb-devel-1:5.5.56-2.el7.x86_64",
"SUSE Liberty Linux 7:mariadb-embedded-1:5.5.56-2.el7.i686",
"SUSE Liberty Linux 7:mariadb-embedded-1:5.5.56-2.el7.x86_64",
"SUSE Liberty Linux 7:mariadb-embedded-devel-1:5.5.56-2.el7.i686",
"SUSE Liberty Linux 7:mariadb-embedded-devel-1:5.5.56-2.el7.x86_64",
"SUSE Liberty Linux 7:mariadb-libs-1:5.5.56-2.el7.i686",
"SUSE Liberty Linux 7:mariadb-libs-1:5.5.56-2.el7.x86_64",
"SUSE Liberty Linux 7:mariadb-server-1:5.5.56-2.el7.x86_64",
"SUSE Liberty Linux 7:mariadb-test-1:5.5.56-2.el7.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 4.4,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Liberty Linux 7:mariadb-1:5.5.56-2.el7.x86_64",
"SUSE Liberty Linux 7:mariadb-bench-1:5.5.56-2.el7.x86_64",
"SUSE Liberty Linux 7:mariadb-devel-1:5.5.56-2.el7.i686",
"SUSE Liberty Linux 7:mariadb-devel-1:5.5.56-2.el7.x86_64",
"SUSE Liberty Linux 7:mariadb-embedded-1:5.5.56-2.el7.i686",
"SUSE Liberty Linux 7:mariadb-embedded-1:5.5.56-2.el7.x86_64",
"SUSE Liberty Linux 7:mariadb-embedded-devel-1:5.5.56-2.el7.i686",
"SUSE Liberty Linux 7:mariadb-embedded-devel-1:5.5.56-2.el7.x86_64",
"SUSE Liberty Linux 7:mariadb-libs-1:5.5.56-2.el7.i686",
"SUSE Liberty Linux 7:mariadb-libs-1:5.5.56-2.el7.x86_64",
"SUSE Liberty Linux 7:mariadb-server-1:5.5.56-2.el7.x86_64",
"SUSE Liberty Linux 7:mariadb-test-1:5.5.56-2.el7.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2017-08-01T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2017-3243"
},
{
"cve": "CVE-2017-3244",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2017-3244"
}
],
"notes": [
{
"category": "general",
"text": "Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: DML). Supported versions that are affected are 5.5.53 and earlier, 5.6.34 and earlier and 5.7.16 and earlier. Easily exploitable vulnerability allows low privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS v3.0 Base Score 6.5 (Availability impacts).",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Liberty Linux 7:mariadb-1:5.5.56-2.el7.x86_64",
"SUSE Liberty Linux 7:mariadb-bench-1:5.5.56-2.el7.x86_64",
"SUSE Liberty Linux 7:mariadb-devel-1:5.5.56-2.el7.i686",
"SUSE Liberty Linux 7:mariadb-devel-1:5.5.56-2.el7.x86_64",
"SUSE Liberty Linux 7:mariadb-embedded-1:5.5.56-2.el7.i686",
"SUSE Liberty Linux 7:mariadb-embedded-1:5.5.56-2.el7.x86_64",
"SUSE Liberty Linux 7:mariadb-embedded-devel-1:5.5.56-2.el7.i686",
"SUSE Liberty Linux 7:mariadb-embedded-devel-1:5.5.56-2.el7.x86_64",
"SUSE Liberty Linux 7:mariadb-libs-1:5.5.56-2.el7.i686",
"SUSE Liberty Linux 7:mariadb-libs-1:5.5.56-2.el7.x86_64",
"SUSE Liberty Linux 7:mariadb-server-1:5.5.56-2.el7.x86_64",
"SUSE Liberty Linux 7:mariadb-test-1:5.5.56-2.el7.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2017-3244",
"url": "https://www.suse.com/security/cve/CVE-2017-3244"
},
{
"category": "external",
"summary": "SUSE Bug 1020868 for CVE-2017-3244",
"url": "https://bugzilla.suse.com/1020868"
},
{
"category": "external",
"summary": "SUSE Bug 1020877 for CVE-2017-3244",
"url": "https://bugzilla.suse.com/1020877"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Liberty Linux 7:mariadb-1:5.5.56-2.el7.x86_64",
"SUSE Liberty Linux 7:mariadb-bench-1:5.5.56-2.el7.x86_64",
"SUSE Liberty Linux 7:mariadb-devel-1:5.5.56-2.el7.i686",
"SUSE Liberty Linux 7:mariadb-devel-1:5.5.56-2.el7.x86_64",
"SUSE Liberty Linux 7:mariadb-embedded-1:5.5.56-2.el7.i686",
"SUSE Liberty Linux 7:mariadb-embedded-1:5.5.56-2.el7.x86_64",
"SUSE Liberty Linux 7:mariadb-embedded-devel-1:5.5.56-2.el7.i686",
"SUSE Liberty Linux 7:mariadb-embedded-devel-1:5.5.56-2.el7.x86_64",
"SUSE Liberty Linux 7:mariadb-libs-1:5.5.56-2.el7.i686",
"SUSE Liberty Linux 7:mariadb-libs-1:5.5.56-2.el7.x86_64",
"SUSE Liberty Linux 7:mariadb-server-1:5.5.56-2.el7.x86_64",
"SUSE Liberty Linux 7:mariadb-test-1:5.5.56-2.el7.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Liberty Linux 7:mariadb-1:5.5.56-2.el7.x86_64",
"SUSE Liberty Linux 7:mariadb-bench-1:5.5.56-2.el7.x86_64",
"SUSE Liberty Linux 7:mariadb-devel-1:5.5.56-2.el7.i686",
"SUSE Liberty Linux 7:mariadb-devel-1:5.5.56-2.el7.x86_64",
"SUSE Liberty Linux 7:mariadb-embedded-1:5.5.56-2.el7.i686",
"SUSE Liberty Linux 7:mariadb-embedded-1:5.5.56-2.el7.x86_64",
"SUSE Liberty Linux 7:mariadb-embedded-devel-1:5.5.56-2.el7.i686",
"SUSE Liberty Linux 7:mariadb-embedded-devel-1:5.5.56-2.el7.x86_64",
"SUSE Liberty Linux 7:mariadb-libs-1:5.5.56-2.el7.i686",
"SUSE Liberty Linux 7:mariadb-libs-1:5.5.56-2.el7.x86_64",
"SUSE Liberty Linux 7:mariadb-server-1:5.5.56-2.el7.x86_64",
"SUSE Liberty Linux 7:mariadb-test-1:5.5.56-2.el7.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2017-08-01T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2017-3244"
},
{
"cve": "CVE-2017-3258",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2017-3258"
}
],
"notes": [
{
"category": "general",
"text": "Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: DDL). Supported versions that are affected are 5.5.53 and earlier, 5.6.34 and earlier and 5.7.16 and earlier. Easily exploitable vulnerability allows low privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS v3.0 Base Score 6.5 (Availability impacts).",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Liberty Linux 7:mariadb-1:5.5.56-2.el7.x86_64",
"SUSE Liberty Linux 7:mariadb-bench-1:5.5.56-2.el7.x86_64",
"SUSE Liberty Linux 7:mariadb-devel-1:5.5.56-2.el7.i686",
"SUSE Liberty Linux 7:mariadb-devel-1:5.5.56-2.el7.x86_64",
"SUSE Liberty Linux 7:mariadb-embedded-1:5.5.56-2.el7.i686",
"SUSE Liberty Linux 7:mariadb-embedded-1:5.5.56-2.el7.x86_64",
"SUSE Liberty Linux 7:mariadb-embedded-devel-1:5.5.56-2.el7.i686",
"SUSE Liberty Linux 7:mariadb-embedded-devel-1:5.5.56-2.el7.x86_64",
"SUSE Liberty Linux 7:mariadb-libs-1:5.5.56-2.el7.i686",
"SUSE Liberty Linux 7:mariadb-libs-1:5.5.56-2.el7.x86_64",
"SUSE Liberty Linux 7:mariadb-server-1:5.5.56-2.el7.x86_64",
"SUSE Liberty Linux 7:mariadb-test-1:5.5.56-2.el7.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2017-3258",
"url": "https://www.suse.com/security/cve/CVE-2017-3258"
},
{
"category": "external",
"summary": "SUSE Bug 1020868 for CVE-2017-3258",
"url": "https://bugzilla.suse.com/1020868"
},
{
"category": "external",
"summary": "SUSE Bug 1020875 for CVE-2017-3258",
"url": "https://bugzilla.suse.com/1020875"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Liberty Linux 7:mariadb-1:5.5.56-2.el7.x86_64",
"SUSE Liberty Linux 7:mariadb-bench-1:5.5.56-2.el7.x86_64",
"SUSE Liberty Linux 7:mariadb-devel-1:5.5.56-2.el7.i686",
"SUSE Liberty Linux 7:mariadb-devel-1:5.5.56-2.el7.x86_64",
"SUSE Liberty Linux 7:mariadb-embedded-1:5.5.56-2.el7.i686",
"SUSE Liberty Linux 7:mariadb-embedded-1:5.5.56-2.el7.x86_64",
"SUSE Liberty Linux 7:mariadb-embedded-devel-1:5.5.56-2.el7.i686",
"SUSE Liberty Linux 7:mariadb-embedded-devel-1:5.5.56-2.el7.x86_64",
"SUSE Liberty Linux 7:mariadb-libs-1:5.5.56-2.el7.i686",
"SUSE Liberty Linux 7:mariadb-libs-1:5.5.56-2.el7.x86_64",
"SUSE Liberty Linux 7:mariadb-server-1:5.5.56-2.el7.x86_64",
"SUSE Liberty Linux 7:mariadb-test-1:5.5.56-2.el7.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Liberty Linux 7:mariadb-1:5.5.56-2.el7.x86_64",
"SUSE Liberty Linux 7:mariadb-bench-1:5.5.56-2.el7.x86_64",
"SUSE Liberty Linux 7:mariadb-devel-1:5.5.56-2.el7.i686",
"SUSE Liberty Linux 7:mariadb-devel-1:5.5.56-2.el7.x86_64",
"SUSE Liberty Linux 7:mariadb-embedded-1:5.5.56-2.el7.i686",
"SUSE Liberty Linux 7:mariadb-embedded-1:5.5.56-2.el7.x86_64",
"SUSE Liberty Linux 7:mariadb-embedded-devel-1:5.5.56-2.el7.i686",
"SUSE Liberty Linux 7:mariadb-embedded-devel-1:5.5.56-2.el7.x86_64",
"SUSE Liberty Linux 7:mariadb-libs-1:5.5.56-2.el7.i686",
"SUSE Liberty Linux 7:mariadb-libs-1:5.5.56-2.el7.x86_64",
"SUSE Liberty Linux 7:mariadb-server-1:5.5.56-2.el7.x86_64",
"SUSE Liberty Linux 7:mariadb-test-1:5.5.56-2.el7.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2017-08-01T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2017-3258"
},
{
"cve": "CVE-2017-3265",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2017-3265"
}
],
"notes": [
{
"category": "general",
"text": "Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Packaging). Supported versions that are affected are 5.5.53 and earlier, 5.6.34 and earlier and 5.7.16 and earlier. Difficult to exploit vulnerability allows high privileged attacker with logon to the infrastructure where MySQL Server executes to compromise MySQL Server. Successful attacks require human interaction from a person other than the attacker. Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all MySQL Server accessible data and unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS v3.0 Base Score 5.6 (Confidentiality and Availability impacts).",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Liberty Linux 7:mariadb-1:5.5.56-2.el7.x86_64",
"SUSE Liberty Linux 7:mariadb-bench-1:5.5.56-2.el7.x86_64",
"SUSE Liberty Linux 7:mariadb-devel-1:5.5.56-2.el7.i686",
"SUSE Liberty Linux 7:mariadb-devel-1:5.5.56-2.el7.x86_64",
"SUSE Liberty Linux 7:mariadb-embedded-1:5.5.56-2.el7.i686",
"SUSE Liberty Linux 7:mariadb-embedded-1:5.5.56-2.el7.x86_64",
"SUSE Liberty Linux 7:mariadb-embedded-devel-1:5.5.56-2.el7.i686",
"SUSE Liberty Linux 7:mariadb-embedded-devel-1:5.5.56-2.el7.x86_64",
"SUSE Liberty Linux 7:mariadb-libs-1:5.5.56-2.el7.i686",
"SUSE Liberty Linux 7:mariadb-libs-1:5.5.56-2.el7.x86_64",
"SUSE Liberty Linux 7:mariadb-server-1:5.5.56-2.el7.x86_64",
"SUSE Liberty Linux 7:mariadb-test-1:5.5.56-2.el7.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2017-3265",
"url": "https://www.suse.com/security/cve/CVE-2017-3265"
},
{
"category": "external",
"summary": "SUSE Bug 1020868 for CVE-2017-3265",
"url": "https://bugzilla.suse.com/1020868"
},
{
"category": "external",
"summary": "SUSE Bug 1020885 for CVE-2017-3265",
"url": "https://bugzilla.suse.com/1020885"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Liberty Linux 7:mariadb-1:5.5.56-2.el7.x86_64",
"SUSE Liberty Linux 7:mariadb-bench-1:5.5.56-2.el7.x86_64",
"SUSE Liberty Linux 7:mariadb-devel-1:5.5.56-2.el7.i686",
"SUSE Liberty Linux 7:mariadb-devel-1:5.5.56-2.el7.x86_64",
"SUSE Liberty Linux 7:mariadb-embedded-1:5.5.56-2.el7.i686",
"SUSE Liberty Linux 7:mariadb-embedded-1:5.5.56-2.el7.x86_64",
"SUSE Liberty Linux 7:mariadb-embedded-devel-1:5.5.56-2.el7.i686",
"SUSE Liberty Linux 7:mariadb-embedded-devel-1:5.5.56-2.el7.x86_64",
"SUSE Liberty Linux 7:mariadb-libs-1:5.5.56-2.el7.i686",
"SUSE Liberty Linux 7:mariadb-libs-1:5.5.56-2.el7.x86_64",
"SUSE Liberty Linux 7:mariadb-server-1:5.5.56-2.el7.x86_64",
"SUSE Liberty Linux 7:mariadb-test-1:5.5.56-2.el7.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.6,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:H/PR:H/UI:R/S:U/C:H/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Liberty Linux 7:mariadb-1:5.5.56-2.el7.x86_64",
"SUSE Liberty Linux 7:mariadb-bench-1:5.5.56-2.el7.x86_64",
"SUSE Liberty Linux 7:mariadb-devel-1:5.5.56-2.el7.i686",
"SUSE Liberty Linux 7:mariadb-devel-1:5.5.56-2.el7.x86_64",
"SUSE Liberty Linux 7:mariadb-embedded-1:5.5.56-2.el7.i686",
"SUSE Liberty Linux 7:mariadb-embedded-1:5.5.56-2.el7.x86_64",
"SUSE Liberty Linux 7:mariadb-embedded-devel-1:5.5.56-2.el7.i686",
"SUSE Liberty Linux 7:mariadb-embedded-devel-1:5.5.56-2.el7.x86_64",
"SUSE Liberty Linux 7:mariadb-libs-1:5.5.56-2.el7.i686",
"SUSE Liberty Linux 7:mariadb-libs-1:5.5.56-2.el7.x86_64",
"SUSE Liberty Linux 7:mariadb-server-1:5.5.56-2.el7.x86_64",
"SUSE Liberty Linux 7:mariadb-test-1:5.5.56-2.el7.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2017-08-01T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2017-3265"
},
{
"cve": "CVE-2017-3291",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2017-3291"
}
],
"notes": [
{
"category": "general",
"text": "Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Packaging). Supported versions that are affected are 5.5.53 and earlier, 5.6.34 and earlier and 5.7.16 and earlier. Difficult to exploit vulnerability allows high privileged attacker with logon to the infrastructure where MySQL Server executes to compromise MySQL Server. Successful attacks require human interaction from a person other than the attacker. Successful attacks of this vulnerability can result in takeover of MySQL Server. CVSS v3.0 Base Score 6.3 (Confidentiality, Integrity and Availability impacts).",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Liberty Linux 7:mariadb-1:5.5.56-2.el7.x86_64",
"SUSE Liberty Linux 7:mariadb-bench-1:5.5.56-2.el7.x86_64",
"SUSE Liberty Linux 7:mariadb-devel-1:5.5.56-2.el7.i686",
"SUSE Liberty Linux 7:mariadb-devel-1:5.5.56-2.el7.x86_64",
"SUSE Liberty Linux 7:mariadb-embedded-1:5.5.56-2.el7.i686",
"SUSE Liberty Linux 7:mariadb-embedded-1:5.5.56-2.el7.x86_64",
"SUSE Liberty Linux 7:mariadb-embedded-devel-1:5.5.56-2.el7.i686",
"SUSE Liberty Linux 7:mariadb-embedded-devel-1:5.5.56-2.el7.x86_64",
"SUSE Liberty Linux 7:mariadb-libs-1:5.5.56-2.el7.i686",
"SUSE Liberty Linux 7:mariadb-libs-1:5.5.56-2.el7.x86_64",
"SUSE Liberty Linux 7:mariadb-server-1:5.5.56-2.el7.x86_64",
"SUSE Liberty Linux 7:mariadb-test-1:5.5.56-2.el7.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2017-3291",
"url": "https://www.suse.com/security/cve/CVE-2017-3291"
},
{
"category": "external",
"summary": "SUSE Bug 1020868 for CVE-2017-3291",
"url": "https://bugzilla.suse.com/1020868"
},
{
"category": "external",
"summary": "SUSE Bug 1020884 for CVE-2017-3291",
"url": "https://bugzilla.suse.com/1020884"
},
{
"category": "external",
"summary": "SUSE Bug 998309 for CVE-2017-3291",
"url": "https://bugzilla.suse.com/998309"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Liberty Linux 7:mariadb-1:5.5.56-2.el7.x86_64",
"SUSE Liberty Linux 7:mariadb-bench-1:5.5.56-2.el7.x86_64",
"SUSE Liberty Linux 7:mariadb-devel-1:5.5.56-2.el7.i686",
"SUSE Liberty Linux 7:mariadb-devel-1:5.5.56-2.el7.x86_64",
"SUSE Liberty Linux 7:mariadb-embedded-1:5.5.56-2.el7.i686",
"SUSE Liberty Linux 7:mariadb-embedded-1:5.5.56-2.el7.x86_64",
"SUSE Liberty Linux 7:mariadb-embedded-devel-1:5.5.56-2.el7.i686",
"SUSE Liberty Linux 7:mariadb-embedded-devel-1:5.5.56-2.el7.x86_64",
"SUSE Liberty Linux 7:mariadb-libs-1:5.5.56-2.el7.i686",
"SUSE Liberty Linux 7:mariadb-libs-1:5.5.56-2.el7.x86_64",
"SUSE Liberty Linux 7:mariadb-server-1:5.5.56-2.el7.x86_64",
"SUSE Liberty Linux 7:mariadb-test-1:5.5.56-2.el7.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.3,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:H/PR:H/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"SUSE Liberty Linux 7:mariadb-1:5.5.56-2.el7.x86_64",
"SUSE Liberty Linux 7:mariadb-bench-1:5.5.56-2.el7.x86_64",
"SUSE Liberty Linux 7:mariadb-devel-1:5.5.56-2.el7.i686",
"SUSE Liberty Linux 7:mariadb-devel-1:5.5.56-2.el7.x86_64",
"SUSE Liberty Linux 7:mariadb-embedded-1:5.5.56-2.el7.i686",
"SUSE Liberty Linux 7:mariadb-embedded-1:5.5.56-2.el7.x86_64",
"SUSE Liberty Linux 7:mariadb-embedded-devel-1:5.5.56-2.el7.i686",
"SUSE Liberty Linux 7:mariadb-embedded-devel-1:5.5.56-2.el7.x86_64",
"SUSE Liberty Linux 7:mariadb-libs-1:5.5.56-2.el7.i686",
"SUSE Liberty Linux 7:mariadb-libs-1:5.5.56-2.el7.x86_64",
"SUSE Liberty Linux 7:mariadb-server-1:5.5.56-2.el7.x86_64",
"SUSE Liberty Linux 7:mariadb-test-1:5.5.56-2.el7.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2017-08-01T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2017-3291"
},
{
"cve": "CVE-2017-3302",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2017-3302"
}
],
"notes": [
{
"category": "general",
"text": "Crash in libmysqlclient.so in Oracle MySQL before 5.6.21 and 5.7.x before 5.7.5 and MariaDB through 5.5.54, 10.0.x through 10.0.29, 10.1.x through 10.1.21, and 10.2.x through 10.2.3.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Liberty Linux 7:mariadb-1:5.5.56-2.el7.x86_64",
"SUSE Liberty Linux 7:mariadb-bench-1:5.5.56-2.el7.x86_64",
"SUSE Liberty Linux 7:mariadb-devel-1:5.5.56-2.el7.i686",
"SUSE Liberty Linux 7:mariadb-devel-1:5.5.56-2.el7.x86_64",
"SUSE Liberty Linux 7:mariadb-embedded-1:5.5.56-2.el7.i686",
"SUSE Liberty Linux 7:mariadb-embedded-1:5.5.56-2.el7.x86_64",
"SUSE Liberty Linux 7:mariadb-embedded-devel-1:5.5.56-2.el7.i686",
"SUSE Liberty Linux 7:mariadb-embedded-devel-1:5.5.56-2.el7.x86_64",
"SUSE Liberty Linux 7:mariadb-libs-1:5.5.56-2.el7.i686",
"SUSE Liberty Linux 7:mariadb-libs-1:5.5.56-2.el7.x86_64",
"SUSE Liberty Linux 7:mariadb-server-1:5.5.56-2.el7.x86_64",
"SUSE Liberty Linux 7:mariadb-test-1:5.5.56-2.el7.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2017-3302",
"url": "https://www.suse.com/security/cve/CVE-2017-3302"
},
{
"category": "external",
"summary": "SUSE Bug 1022428 for CVE-2017-3302",
"url": "https://bugzilla.suse.com/1022428"
},
{
"category": "external",
"summary": "SUSE Bug 1034850 for CVE-2017-3302",
"url": "https://bugzilla.suse.com/1034850"
},
{
"category": "external",
"summary": "SUSE Bug 1034911 for CVE-2017-3302",
"url": "https://bugzilla.suse.com/1034911"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Liberty Linux 7:mariadb-1:5.5.56-2.el7.x86_64",
"SUSE Liberty Linux 7:mariadb-bench-1:5.5.56-2.el7.x86_64",
"SUSE Liberty Linux 7:mariadb-devel-1:5.5.56-2.el7.i686",
"SUSE Liberty Linux 7:mariadb-devel-1:5.5.56-2.el7.x86_64",
"SUSE Liberty Linux 7:mariadb-embedded-1:5.5.56-2.el7.i686",
"SUSE Liberty Linux 7:mariadb-embedded-1:5.5.56-2.el7.x86_64",
"SUSE Liberty Linux 7:mariadb-embedded-devel-1:5.5.56-2.el7.i686",
"SUSE Liberty Linux 7:mariadb-embedded-devel-1:5.5.56-2.el7.x86_64",
"SUSE Liberty Linux 7:mariadb-libs-1:5.5.56-2.el7.i686",
"SUSE Liberty Linux 7:mariadb-libs-1:5.5.56-2.el7.x86_64",
"SUSE Liberty Linux 7:mariadb-server-1:5.5.56-2.el7.x86_64",
"SUSE Liberty Linux 7:mariadb-test-1:5.5.56-2.el7.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.5,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.0"
},
"products": [
"SUSE Liberty Linux 7:mariadb-1:5.5.56-2.el7.x86_64",
"SUSE Liberty Linux 7:mariadb-bench-1:5.5.56-2.el7.x86_64",
"SUSE Liberty Linux 7:mariadb-devel-1:5.5.56-2.el7.i686",
"SUSE Liberty Linux 7:mariadb-devel-1:5.5.56-2.el7.x86_64",
"SUSE Liberty Linux 7:mariadb-embedded-1:5.5.56-2.el7.i686",
"SUSE Liberty Linux 7:mariadb-embedded-1:5.5.56-2.el7.x86_64",
"SUSE Liberty Linux 7:mariadb-embedded-devel-1:5.5.56-2.el7.i686",
"SUSE Liberty Linux 7:mariadb-embedded-devel-1:5.5.56-2.el7.x86_64",
"SUSE Liberty Linux 7:mariadb-libs-1:5.5.56-2.el7.i686",
"SUSE Liberty Linux 7:mariadb-libs-1:5.5.56-2.el7.x86_64",
"SUSE Liberty Linux 7:mariadb-server-1:5.5.56-2.el7.x86_64",
"SUSE Liberty Linux 7:mariadb-test-1:5.5.56-2.el7.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2017-08-01T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2017-3302"
},
{
"cve": "CVE-2017-3308",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2017-3308"
}
],
"notes": [
{
"category": "general",
"text": "Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: DML). Supported versions that are affected are 5.5.54 and earlier, 5.6.35 and earlier and 5.7.17 and earlier. Easily \"exploitable\" vulnerability allows low privileged attacker with network access via multiple protocols to compromise MySQL Server. While the vulnerability is in MySQL Server, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.0 Base Score 7.7 (Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H).",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Liberty Linux 7:mariadb-1:5.5.56-2.el7.x86_64",
"SUSE Liberty Linux 7:mariadb-bench-1:5.5.56-2.el7.x86_64",
"SUSE Liberty Linux 7:mariadb-devel-1:5.5.56-2.el7.i686",
"SUSE Liberty Linux 7:mariadb-devel-1:5.5.56-2.el7.x86_64",
"SUSE Liberty Linux 7:mariadb-embedded-1:5.5.56-2.el7.i686",
"SUSE Liberty Linux 7:mariadb-embedded-1:5.5.56-2.el7.x86_64",
"SUSE Liberty Linux 7:mariadb-embedded-devel-1:5.5.56-2.el7.i686",
"SUSE Liberty Linux 7:mariadb-embedded-devel-1:5.5.56-2.el7.x86_64",
"SUSE Liberty Linux 7:mariadb-libs-1:5.5.56-2.el7.i686",
"SUSE Liberty Linux 7:mariadb-libs-1:5.5.56-2.el7.x86_64",
"SUSE Liberty Linux 7:mariadb-server-1:5.5.56-2.el7.x86_64",
"SUSE Liberty Linux 7:mariadb-test-1:5.5.56-2.el7.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2017-3308",
"url": "https://www.suse.com/security/cve/CVE-2017-3308"
},
{
"category": "external",
"summary": "SUSE Bug 1034850 for CVE-2017-3308",
"url": "https://bugzilla.suse.com/1034850"
},
{
"category": "external",
"summary": "SUSE Bug 1048715 for CVE-2017-3308",
"url": "https://bugzilla.suse.com/1048715"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Liberty Linux 7:mariadb-1:5.5.56-2.el7.x86_64",
"SUSE Liberty Linux 7:mariadb-bench-1:5.5.56-2.el7.x86_64",
"SUSE Liberty Linux 7:mariadb-devel-1:5.5.56-2.el7.i686",
"SUSE Liberty Linux 7:mariadb-devel-1:5.5.56-2.el7.x86_64",
"SUSE Liberty Linux 7:mariadb-embedded-1:5.5.56-2.el7.i686",
"SUSE Liberty Linux 7:mariadb-embedded-1:5.5.56-2.el7.x86_64",
"SUSE Liberty Linux 7:mariadb-embedded-devel-1:5.5.56-2.el7.i686",
"SUSE Liberty Linux 7:mariadb-embedded-devel-1:5.5.56-2.el7.x86_64",
"SUSE Liberty Linux 7:mariadb-libs-1:5.5.56-2.el7.i686",
"SUSE Liberty Linux 7:mariadb-libs-1:5.5.56-2.el7.x86_64",
"SUSE Liberty Linux 7:mariadb-server-1:5.5.56-2.el7.x86_64",
"SUSE Liberty Linux 7:mariadb-test-1:5.5.56-2.el7.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.7,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Liberty Linux 7:mariadb-1:5.5.56-2.el7.x86_64",
"SUSE Liberty Linux 7:mariadb-bench-1:5.5.56-2.el7.x86_64",
"SUSE Liberty Linux 7:mariadb-devel-1:5.5.56-2.el7.i686",
"SUSE Liberty Linux 7:mariadb-devel-1:5.5.56-2.el7.x86_64",
"SUSE Liberty Linux 7:mariadb-embedded-1:5.5.56-2.el7.i686",
"SUSE Liberty Linux 7:mariadb-embedded-1:5.5.56-2.el7.x86_64",
"SUSE Liberty Linux 7:mariadb-embedded-devel-1:5.5.56-2.el7.i686",
"SUSE Liberty Linux 7:mariadb-embedded-devel-1:5.5.56-2.el7.x86_64",
"SUSE Liberty Linux 7:mariadb-libs-1:5.5.56-2.el7.i686",
"SUSE Liberty Linux 7:mariadb-libs-1:5.5.56-2.el7.x86_64",
"SUSE Liberty Linux 7:mariadb-server-1:5.5.56-2.el7.x86_64",
"SUSE Liberty Linux 7:mariadb-test-1:5.5.56-2.el7.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2017-08-01T00:00:00Z",
"details": "low"
}
],
"title": "CVE-2017-3308"
},
{
"cve": "CVE-2017-3309",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2017-3309"
}
],
"notes": [
{
"category": "general",
"text": "Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Optimizer). Supported versions that are affected are 5.5.54 and earlier, 5.6.35 and earlier and 5.7.17 and earlier. Easily \"exploitable\" vulnerability allows low privileged attacker with network access via multiple protocols to compromise MySQL Server. While the vulnerability is in MySQL Server, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.0 Base Score 7.7 (Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H).",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Liberty Linux 7:mariadb-1:5.5.56-2.el7.x86_64",
"SUSE Liberty Linux 7:mariadb-bench-1:5.5.56-2.el7.x86_64",
"SUSE Liberty Linux 7:mariadb-devel-1:5.5.56-2.el7.i686",
"SUSE Liberty Linux 7:mariadb-devel-1:5.5.56-2.el7.x86_64",
"SUSE Liberty Linux 7:mariadb-embedded-1:5.5.56-2.el7.i686",
"SUSE Liberty Linux 7:mariadb-embedded-1:5.5.56-2.el7.x86_64",
"SUSE Liberty Linux 7:mariadb-embedded-devel-1:5.5.56-2.el7.i686",
"SUSE Liberty Linux 7:mariadb-embedded-devel-1:5.5.56-2.el7.x86_64",
"SUSE Liberty Linux 7:mariadb-libs-1:5.5.56-2.el7.i686",
"SUSE Liberty Linux 7:mariadb-libs-1:5.5.56-2.el7.x86_64",
"SUSE Liberty Linux 7:mariadb-server-1:5.5.56-2.el7.x86_64",
"SUSE Liberty Linux 7:mariadb-test-1:5.5.56-2.el7.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2017-3309",
"url": "https://www.suse.com/security/cve/CVE-2017-3309"
},
{
"category": "external",
"summary": "SUSE Bug 1034850 for CVE-2017-3309",
"url": "https://bugzilla.suse.com/1034850"
},
{
"category": "external",
"summary": "SUSE Bug 1048715 for CVE-2017-3309",
"url": "https://bugzilla.suse.com/1048715"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Liberty Linux 7:mariadb-1:5.5.56-2.el7.x86_64",
"SUSE Liberty Linux 7:mariadb-bench-1:5.5.56-2.el7.x86_64",
"SUSE Liberty Linux 7:mariadb-devel-1:5.5.56-2.el7.i686",
"SUSE Liberty Linux 7:mariadb-devel-1:5.5.56-2.el7.x86_64",
"SUSE Liberty Linux 7:mariadb-embedded-1:5.5.56-2.el7.i686",
"SUSE Liberty Linux 7:mariadb-embedded-1:5.5.56-2.el7.x86_64",
"SUSE Liberty Linux 7:mariadb-embedded-devel-1:5.5.56-2.el7.i686",
"SUSE Liberty Linux 7:mariadb-embedded-devel-1:5.5.56-2.el7.x86_64",
"SUSE Liberty Linux 7:mariadb-libs-1:5.5.56-2.el7.i686",
"SUSE Liberty Linux 7:mariadb-libs-1:5.5.56-2.el7.x86_64",
"SUSE Liberty Linux 7:mariadb-server-1:5.5.56-2.el7.x86_64",
"SUSE Liberty Linux 7:mariadb-test-1:5.5.56-2.el7.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.7,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Liberty Linux 7:mariadb-1:5.5.56-2.el7.x86_64",
"SUSE Liberty Linux 7:mariadb-bench-1:5.5.56-2.el7.x86_64",
"SUSE Liberty Linux 7:mariadb-devel-1:5.5.56-2.el7.i686",
"SUSE Liberty Linux 7:mariadb-devel-1:5.5.56-2.el7.x86_64",
"SUSE Liberty Linux 7:mariadb-embedded-1:5.5.56-2.el7.i686",
"SUSE Liberty Linux 7:mariadb-embedded-1:5.5.56-2.el7.x86_64",
"SUSE Liberty Linux 7:mariadb-embedded-devel-1:5.5.56-2.el7.i686",
"SUSE Liberty Linux 7:mariadb-embedded-devel-1:5.5.56-2.el7.x86_64",
"SUSE Liberty Linux 7:mariadb-libs-1:5.5.56-2.el7.i686",
"SUSE Liberty Linux 7:mariadb-libs-1:5.5.56-2.el7.x86_64",
"SUSE Liberty Linux 7:mariadb-server-1:5.5.56-2.el7.x86_64",
"SUSE Liberty Linux 7:mariadb-test-1:5.5.56-2.el7.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2017-08-01T00:00:00Z",
"details": "low"
}
],
"title": "CVE-2017-3309"
},
{
"cve": "CVE-2017-3312",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2017-3312"
}
],
"notes": [
{
"category": "general",
"text": "Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Packaging). Supported versions that are affected are 5.5.53 and earlier, 5.6.34 and earlier and 5.7.16 and earlier. Difficult to exploit vulnerability allows low privileged attacker with logon to the infrastructure where MySQL Server executes to compromise MySQL Server. Successful attacks require human interaction from a person other than the attacker. Successful attacks of this vulnerability can result in takeover of MySQL Server. CVSS v3.0 Base Score 6.7 (Confidentiality, Integrity and Availability impacts).",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Liberty Linux 7:mariadb-1:5.5.56-2.el7.x86_64",
"SUSE Liberty Linux 7:mariadb-bench-1:5.5.56-2.el7.x86_64",
"SUSE Liberty Linux 7:mariadb-devel-1:5.5.56-2.el7.i686",
"SUSE Liberty Linux 7:mariadb-devel-1:5.5.56-2.el7.x86_64",
"SUSE Liberty Linux 7:mariadb-embedded-1:5.5.56-2.el7.i686",
"SUSE Liberty Linux 7:mariadb-embedded-1:5.5.56-2.el7.x86_64",
"SUSE Liberty Linux 7:mariadb-embedded-devel-1:5.5.56-2.el7.i686",
"SUSE Liberty Linux 7:mariadb-embedded-devel-1:5.5.56-2.el7.x86_64",
"SUSE Liberty Linux 7:mariadb-libs-1:5.5.56-2.el7.i686",
"SUSE Liberty Linux 7:mariadb-libs-1:5.5.56-2.el7.x86_64",
"SUSE Liberty Linux 7:mariadb-server-1:5.5.56-2.el7.x86_64",
"SUSE Liberty Linux 7:mariadb-test-1:5.5.56-2.el7.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2017-3312",
"url": "https://www.suse.com/security/cve/CVE-2017-3312"
},
{
"category": "external",
"summary": "SUSE Bug 1020868 for CVE-2017-3312",
"url": "https://bugzilla.suse.com/1020868"
},
{
"category": "external",
"summary": "SUSE Bug 1020873 for CVE-2017-3312",
"url": "https://bugzilla.suse.com/1020873"
},
{
"category": "external",
"summary": "SUSE Bug 998309 for CVE-2017-3312",
"url": "https://bugzilla.suse.com/998309"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Liberty Linux 7:mariadb-1:5.5.56-2.el7.x86_64",
"SUSE Liberty Linux 7:mariadb-bench-1:5.5.56-2.el7.x86_64",
"SUSE Liberty Linux 7:mariadb-devel-1:5.5.56-2.el7.i686",
"SUSE Liberty Linux 7:mariadb-devel-1:5.5.56-2.el7.x86_64",
"SUSE Liberty Linux 7:mariadb-embedded-1:5.5.56-2.el7.i686",
"SUSE Liberty Linux 7:mariadb-embedded-1:5.5.56-2.el7.x86_64",
"SUSE Liberty Linux 7:mariadb-embedded-devel-1:5.5.56-2.el7.i686",
"SUSE Liberty Linux 7:mariadb-embedded-devel-1:5.5.56-2.el7.x86_64",
"SUSE Liberty Linux 7:mariadb-libs-1:5.5.56-2.el7.i686",
"SUSE Liberty Linux 7:mariadb-libs-1:5.5.56-2.el7.x86_64",
"SUSE Liberty Linux 7:mariadb-server-1:5.5.56-2.el7.x86_64",
"SUSE Liberty Linux 7:mariadb-test-1:5.5.56-2.el7.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.7,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"SUSE Liberty Linux 7:mariadb-1:5.5.56-2.el7.x86_64",
"SUSE Liberty Linux 7:mariadb-bench-1:5.5.56-2.el7.x86_64",
"SUSE Liberty Linux 7:mariadb-devel-1:5.5.56-2.el7.i686",
"SUSE Liberty Linux 7:mariadb-devel-1:5.5.56-2.el7.x86_64",
"SUSE Liberty Linux 7:mariadb-embedded-1:5.5.56-2.el7.i686",
"SUSE Liberty Linux 7:mariadb-embedded-1:5.5.56-2.el7.x86_64",
"SUSE Liberty Linux 7:mariadb-embedded-devel-1:5.5.56-2.el7.i686",
"SUSE Liberty Linux 7:mariadb-embedded-devel-1:5.5.56-2.el7.x86_64",
"SUSE Liberty Linux 7:mariadb-libs-1:5.5.56-2.el7.i686",
"SUSE Liberty Linux 7:mariadb-libs-1:5.5.56-2.el7.x86_64",
"SUSE Liberty Linux 7:mariadb-server-1:5.5.56-2.el7.x86_64",
"SUSE Liberty Linux 7:mariadb-test-1:5.5.56-2.el7.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2017-08-01T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2017-3312"
},
{
"cve": "CVE-2017-3313",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2017-3313"
}
],
"notes": [
{
"category": "general",
"text": "Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: MyISAM). Supported versions that are affected are 5.5.53 and earlier, 5.6.34 and earlier and 5.7.16 and earlier. Difficult to exploit vulnerability allows low privileged attacker with logon to the infrastructure where MySQL Server executes to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all MySQL Server accessible data. CVSS v3.0 Base Score 4.7 (Confidentiality impacts).",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Liberty Linux 7:mariadb-1:5.5.56-2.el7.x86_64",
"SUSE Liberty Linux 7:mariadb-bench-1:5.5.56-2.el7.x86_64",
"SUSE Liberty Linux 7:mariadb-devel-1:5.5.56-2.el7.i686",
"SUSE Liberty Linux 7:mariadb-devel-1:5.5.56-2.el7.x86_64",
"SUSE Liberty Linux 7:mariadb-embedded-1:5.5.56-2.el7.i686",
"SUSE Liberty Linux 7:mariadb-embedded-1:5.5.56-2.el7.x86_64",
"SUSE Liberty Linux 7:mariadb-embedded-devel-1:5.5.56-2.el7.i686",
"SUSE Liberty Linux 7:mariadb-embedded-devel-1:5.5.56-2.el7.x86_64",
"SUSE Liberty Linux 7:mariadb-libs-1:5.5.56-2.el7.i686",
"SUSE Liberty Linux 7:mariadb-libs-1:5.5.56-2.el7.x86_64",
"SUSE Liberty Linux 7:mariadb-server-1:5.5.56-2.el7.x86_64",
"SUSE Liberty Linux 7:mariadb-test-1:5.5.56-2.el7.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2017-3313",
"url": "https://www.suse.com/security/cve/CVE-2017-3313"
},
{
"category": "external",
"summary": "SUSE Bug 1020868 for CVE-2017-3313",
"url": "https://bugzilla.suse.com/1020868"
},
{
"category": "external",
"summary": "SUSE Bug 1020890 for CVE-2017-3313",
"url": "https://bugzilla.suse.com/1020890"
},
{
"category": "external",
"summary": "SUSE Bug 1034911 for CVE-2017-3313",
"url": "https://bugzilla.suse.com/1034911"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Liberty Linux 7:mariadb-1:5.5.56-2.el7.x86_64",
"SUSE Liberty Linux 7:mariadb-bench-1:5.5.56-2.el7.x86_64",
"SUSE Liberty Linux 7:mariadb-devel-1:5.5.56-2.el7.i686",
"SUSE Liberty Linux 7:mariadb-devel-1:5.5.56-2.el7.x86_64",
"SUSE Liberty Linux 7:mariadb-embedded-1:5.5.56-2.el7.i686",
"SUSE Liberty Linux 7:mariadb-embedded-1:5.5.56-2.el7.x86_64",
"SUSE Liberty Linux 7:mariadb-embedded-devel-1:5.5.56-2.el7.i686",
"SUSE Liberty Linux 7:mariadb-embedded-devel-1:5.5.56-2.el7.x86_64",
"SUSE Liberty Linux 7:mariadb-libs-1:5.5.56-2.el7.i686",
"SUSE Liberty Linux 7:mariadb-libs-1:5.5.56-2.el7.x86_64",
"SUSE Liberty Linux 7:mariadb-server-1:5.5.56-2.el7.x86_64",
"SUSE Liberty Linux 7:mariadb-test-1:5.5.56-2.el7.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 4.7,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N",
"version": "3.1"
},
"products": [
"SUSE Liberty Linux 7:mariadb-1:5.5.56-2.el7.x86_64",
"SUSE Liberty Linux 7:mariadb-bench-1:5.5.56-2.el7.x86_64",
"SUSE Liberty Linux 7:mariadb-devel-1:5.5.56-2.el7.i686",
"SUSE Liberty Linux 7:mariadb-devel-1:5.5.56-2.el7.x86_64",
"SUSE Liberty Linux 7:mariadb-embedded-1:5.5.56-2.el7.i686",
"SUSE Liberty Linux 7:mariadb-embedded-1:5.5.56-2.el7.x86_64",
"SUSE Liberty Linux 7:mariadb-embedded-devel-1:5.5.56-2.el7.i686",
"SUSE Liberty Linux 7:mariadb-embedded-devel-1:5.5.56-2.el7.x86_64",
"SUSE Liberty Linux 7:mariadb-libs-1:5.5.56-2.el7.i686",
"SUSE Liberty Linux 7:mariadb-libs-1:5.5.56-2.el7.x86_64",
"SUSE Liberty Linux 7:mariadb-server-1:5.5.56-2.el7.x86_64",
"SUSE Liberty Linux 7:mariadb-test-1:5.5.56-2.el7.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2017-08-01T00:00:00Z",
"details": "low"
}
],
"title": "CVE-2017-3313"
},
{
"cve": "CVE-2017-3317",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2017-3317"
}
],
"notes": [
{
"category": "general",
"text": "Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Logging). Supported versions that are affected are 5.5.53 and earlier, 5.6.34 and earlier and 5.7.16 and earlier. Difficult to exploit vulnerability allows high privileged attacker with logon to the infrastructure where MySQL Server executes to compromise MySQL Server. Successful attacks require human interaction from a person other than the attacker. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS v3.0 Base Score 4.0 (Availability impacts).",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Liberty Linux 7:mariadb-1:5.5.56-2.el7.x86_64",
"SUSE Liberty Linux 7:mariadb-bench-1:5.5.56-2.el7.x86_64",
"SUSE Liberty Linux 7:mariadb-devel-1:5.5.56-2.el7.i686",
"SUSE Liberty Linux 7:mariadb-devel-1:5.5.56-2.el7.x86_64",
"SUSE Liberty Linux 7:mariadb-embedded-1:5.5.56-2.el7.i686",
"SUSE Liberty Linux 7:mariadb-embedded-1:5.5.56-2.el7.x86_64",
"SUSE Liberty Linux 7:mariadb-embedded-devel-1:5.5.56-2.el7.i686",
"SUSE Liberty Linux 7:mariadb-embedded-devel-1:5.5.56-2.el7.x86_64",
"SUSE Liberty Linux 7:mariadb-libs-1:5.5.56-2.el7.i686",
"SUSE Liberty Linux 7:mariadb-libs-1:5.5.56-2.el7.x86_64",
"SUSE Liberty Linux 7:mariadb-server-1:5.5.56-2.el7.x86_64",
"SUSE Liberty Linux 7:mariadb-test-1:5.5.56-2.el7.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2017-3317",
"url": "https://www.suse.com/security/cve/CVE-2017-3317"
},
{
"category": "external",
"summary": "SUSE Bug 1020868 for CVE-2017-3317",
"url": "https://bugzilla.suse.com/1020868"
},
{
"category": "external",
"summary": "SUSE Bug 1020894 for CVE-2017-3317",
"url": "https://bugzilla.suse.com/1020894"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Liberty Linux 7:mariadb-1:5.5.56-2.el7.x86_64",
"SUSE Liberty Linux 7:mariadb-bench-1:5.5.56-2.el7.x86_64",
"SUSE Liberty Linux 7:mariadb-devel-1:5.5.56-2.el7.i686",
"SUSE Liberty Linux 7:mariadb-devel-1:5.5.56-2.el7.x86_64",
"SUSE Liberty Linux 7:mariadb-embedded-1:5.5.56-2.el7.i686",
"SUSE Liberty Linux 7:mariadb-embedded-1:5.5.56-2.el7.x86_64",
"SUSE Liberty Linux 7:mariadb-embedded-devel-1:5.5.56-2.el7.i686",
"SUSE Liberty Linux 7:mariadb-embedded-devel-1:5.5.56-2.el7.x86_64",
"SUSE Liberty Linux 7:mariadb-libs-1:5.5.56-2.el7.i686",
"SUSE Liberty Linux 7:mariadb-libs-1:5.5.56-2.el7.x86_64",
"SUSE Liberty Linux 7:mariadb-server-1:5.5.56-2.el7.x86_64",
"SUSE Liberty Linux 7:mariadb-test-1:5.5.56-2.el7.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 4,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:H/PR:H/UI:R/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Liberty Linux 7:mariadb-1:5.5.56-2.el7.x86_64",
"SUSE Liberty Linux 7:mariadb-bench-1:5.5.56-2.el7.x86_64",
"SUSE Liberty Linux 7:mariadb-devel-1:5.5.56-2.el7.i686",
"SUSE Liberty Linux 7:mariadb-devel-1:5.5.56-2.el7.x86_64",
"SUSE Liberty Linux 7:mariadb-embedded-1:5.5.56-2.el7.i686",
"SUSE Liberty Linux 7:mariadb-embedded-1:5.5.56-2.el7.x86_64",
"SUSE Liberty Linux 7:mariadb-embedded-devel-1:5.5.56-2.el7.i686",
"SUSE Liberty Linux 7:mariadb-embedded-devel-1:5.5.56-2.el7.x86_64",
"SUSE Liberty Linux 7:mariadb-libs-1:5.5.56-2.el7.i686",
"SUSE Liberty Linux 7:mariadb-libs-1:5.5.56-2.el7.x86_64",
"SUSE Liberty Linux 7:mariadb-server-1:5.5.56-2.el7.x86_64",
"SUSE Liberty Linux 7:mariadb-test-1:5.5.56-2.el7.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2017-08-01T00:00:00Z",
"details": "low"
}
],
"title": "CVE-2017-3317"
},
{
"cve": "CVE-2017-3318",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2017-3318"
}
],
"notes": [
{
"category": "general",
"text": "Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Error Handling). Supported versions that are affected are 5.5.53 and earlier, 5.6.34 and earlier and 5.7.16 and earlier. Difficult to exploit vulnerability allows high privileged attacker with logon to the infrastructure where MySQL Server executes to compromise MySQL Server. Successful attacks require human interaction from a person other than the attacker. Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all MySQL Server accessible data. CVSS v3.0 Base Score 4.0 (Confidentiality impacts).",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Liberty Linux 7:mariadb-1:5.5.56-2.el7.x86_64",
"SUSE Liberty Linux 7:mariadb-bench-1:5.5.56-2.el7.x86_64",
"SUSE Liberty Linux 7:mariadb-devel-1:5.5.56-2.el7.i686",
"SUSE Liberty Linux 7:mariadb-devel-1:5.5.56-2.el7.x86_64",
"SUSE Liberty Linux 7:mariadb-embedded-1:5.5.56-2.el7.i686",
"SUSE Liberty Linux 7:mariadb-embedded-1:5.5.56-2.el7.x86_64",
"SUSE Liberty Linux 7:mariadb-embedded-devel-1:5.5.56-2.el7.i686",
"SUSE Liberty Linux 7:mariadb-embedded-devel-1:5.5.56-2.el7.x86_64",
"SUSE Liberty Linux 7:mariadb-libs-1:5.5.56-2.el7.i686",
"SUSE Liberty Linux 7:mariadb-libs-1:5.5.56-2.el7.x86_64",
"SUSE Liberty Linux 7:mariadb-server-1:5.5.56-2.el7.x86_64",
"SUSE Liberty Linux 7:mariadb-test-1:5.5.56-2.el7.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2017-3318",
"url": "https://www.suse.com/security/cve/CVE-2017-3318"
},
{
"category": "external",
"summary": "SUSE Bug 1020868 for CVE-2017-3318",
"url": "https://bugzilla.suse.com/1020868"
},
{
"category": "external",
"summary": "SUSE Bug 1020896 for CVE-2017-3318",
"url": "https://bugzilla.suse.com/1020896"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Liberty Linux 7:mariadb-1:5.5.56-2.el7.x86_64",
"SUSE Liberty Linux 7:mariadb-bench-1:5.5.56-2.el7.x86_64",
"SUSE Liberty Linux 7:mariadb-devel-1:5.5.56-2.el7.i686",
"SUSE Liberty Linux 7:mariadb-devel-1:5.5.56-2.el7.x86_64",
"SUSE Liberty Linux 7:mariadb-embedded-1:5.5.56-2.el7.i686",
"SUSE Liberty Linux 7:mariadb-embedded-1:5.5.56-2.el7.x86_64",
"SUSE Liberty Linux 7:mariadb-embedded-devel-1:5.5.56-2.el7.i686",
"SUSE Liberty Linux 7:mariadb-embedded-devel-1:5.5.56-2.el7.x86_64",
"SUSE Liberty Linux 7:mariadb-libs-1:5.5.56-2.el7.i686",
"SUSE Liberty Linux 7:mariadb-libs-1:5.5.56-2.el7.x86_64",
"SUSE Liberty Linux 7:mariadb-server-1:5.5.56-2.el7.x86_64",
"SUSE Liberty Linux 7:mariadb-test-1:5.5.56-2.el7.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 4,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:H/PR:H/UI:R/S:U/C:H/I:N/A:N",
"version": "3.1"
},
"products": [
"SUSE Liberty Linux 7:mariadb-1:5.5.56-2.el7.x86_64",
"SUSE Liberty Linux 7:mariadb-bench-1:5.5.56-2.el7.x86_64",
"SUSE Liberty Linux 7:mariadb-devel-1:5.5.56-2.el7.i686",
"SUSE Liberty Linux 7:mariadb-devel-1:5.5.56-2.el7.x86_64",
"SUSE Liberty Linux 7:mariadb-embedded-1:5.5.56-2.el7.i686",
"SUSE Liberty Linux 7:mariadb-embedded-1:5.5.56-2.el7.x86_64",
"SUSE Liberty Linux 7:mariadb-embedded-devel-1:5.5.56-2.el7.i686",
"SUSE Liberty Linux 7:mariadb-embedded-devel-1:5.5.56-2.el7.x86_64",
"SUSE Liberty Linux 7:mariadb-libs-1:5.5.56-2.el7.i686",
"SUSE Liberty Linux 7:mariadb-libs-1:5.5.56-2.el7.x86_64",
"SUSE Liberty Linux 7:mariadb-server-1:5.5.56-2.el7.x86_64",
"SUSE Liberty Linux 7:mariadb-test-1:5.5.56-2.el7.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2017-08-01T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2017-3318"
},
{
"cve": "CVE-2017-3453",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2017-3453"
}
],
"notes": [
{
"category": "general",
"text": "Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Optimizer). Supported versions that are affected are 5.5.54 and earlier, 5.6.35 and earlier and 5.7.17 and earlier. Easily \"exploitable\" vulnerability allows low privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.0 Base Score 6.5 (Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H).",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Liberty Linux 7:mariadb-1:5.5.56-2.el7.x86_64",
"SUSE Liberty Linux 7:mariadb-bench-1:5.5.56-2.el7.x86_64",
"SUSE Liberty Linux 7:mariadb-devel-1:5.5.56-2.el7.i686",
"SUSE Liberty Linux 7:mariadb-devel-1:5.5.56-2.el7.x86_64",
"SUSE Liberty Linux 7:mariadb-embedded-1:5.5.56-2.el7.i686",
"SUSE Liberty Linux 7:mariadb-embedded-1:5.5.56-2.el7.x86_64",
"SUSE Liberty Linux 7:mariadb-embedded-devel-1:5.5.56-2.el7.i686",
"SUSE Liberty Linux 7:mariadb-embedded-devel-1:5.5.56-2.el7.x86_64",
"SUSE Liberty Linux 7:mariadb-libs-1:5.5.56-2.el7.i686",
"SUSE Liberty Linux 7:mariadb-libs-1:5.5.56-2.el7.x86_64",
"SUSE Liberty Linux 7:mariadb-server-1:5.5.56-2.el7.x86_64",
"SUSE Liberty Linux 7:mariadb-test-1:5.5.56-2.el7.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2017-3453",
"url": "https://www.suse.com/security/cve/CVE-2017-3453"
},
{
"category": "external",
"summary": "SUSE Bug 1034850 for CVE-2017-3453",
"url": "https://bugzilla.suse.com/1034850"
},
{
"category": "external",
"summary": "SUSE Bug 1048715 for CVE-2017-3453",
"url": "https://bugzilla.suse.com/1048715"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Liberty Linux 7:mariadb-1:5.5.56-2.el7.x86_64",
"SUSE Liberty Linux 7:mariadb-bench-1:5.5.56-2.el7.x86_64",
"SUSE Liberty Linux 7:mariadb-devel-1:5.5.56-2.el7.i686",
"SUSE Liberty Linux 7:mariadb-devel-1:5.5.56-2.el7.x86_64",
"SUSE Liberty Linux 7:mariadb-embedded-1:5.5.56-2.el7.i686",
"SUSE Liberty Linux 7:mariadb-embedded-1:5.5.56-2.el7.x86_64",
"SUSE Liberty Linux 7:mariadb-embedded-devel-1:5.5.56-2.el7.i686",
"SUSE Liberty Linux 7:mariadb-embedded-devel-1:5.5.56-2.el7.x86_64",
"SUSE Liberty Linux 7:mariadb-libs-1:5.5.56-2.el7.i686",
"SUSE Liberty Linux 7:mariadb-libs-1:5.5.56-2.el7.x86_64",
"SUSE Liberty Linux 7:mariadb-server-1:5.5.56-2.el7.x86_64",
"SUSE Liberty Linux 7:mariadb-test-1:5.5.56-2.el7.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Liberty Linux 7:mariadb-1:5.5.56-2.el7.x86_64",
"SUSE Liberty Linux 7:mariadb-bench-1:5.5.56-2.el7.x86_64",
"SUSE Liberty Linux 7:mariadb-devel-1:5.5.56-2.el7.i686",
"SUSE Liberty Linux 7:mariadb-devel-1:5.5.56-2.el7.x86_64",
"SUSE Liberty Linux 7:mariadb-embedded-1:5.5.56-2.el7.i686",
"SUSE Liberty Linux 7:mariadb-embedded-1:5.5.56-2.el7.x86_64",
"SUSE Liberty Linux 7:mariadb-embedded-devel-1:5.5.56-2.el7.i686",
"SUSE Liberty Linux 7:mariadb-embedded-devel-1:5.5.56-2.el7.x86_64",
"SUSE Liberty Linux 7:mariadb-libs-1:5.5.56-2.el7.i686",
"SUSE Liberty Linux 7:mariadb-libs-1:5.5.56-2.el7.x86_64",
"SUSE Liberty Linux 7:mariadb-server-1:5.5.56-2.el7.x86_64",
"SUSE Liberty Linux 7:mariadb-test-1:5.5.56-2.el7.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2017-08-01T00:00:00Z",
"details": "low"
}
],
"title": "CVE-2017-3453"
},
{
"cve": "CVE-2017-3456",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2017-3456"
}
],
"notes": [
{
"category": "general",
"text": "Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: DML). Supported versions that are affected are 5.5.54 and earlier, 5.6.35 and earlier and 5.7.17 and earlier. Easily \"exploitable\" vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.0 Base Score 4.9 (Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H).",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Liberty Linux 7:mariadb-1:5.5.56-2.el7.x86_64",
"SUSE Liberty Linux 7:mariadb-bench-1:5.5.56-2.el7.x86_64",
"SUSE Liberty Linux 7:mariadb-devel-1:5.5.56-2.el7.i686",
"SUSE Liberty Linux 7:mariadb-devel-1:5.5.56-2.el7.x86_64",
"SUSE Liberty Linux 7:mariadb-embedded-1:5.5.56-2.el7.i686",
"SUSE Liberty Linux 7:mariadb-embedded-1:5.5.56-2.el7.x86_64",
"SUSE Liberty Linux 7:mariadb-embedded-devel-1:5.5.56-2.el7.i686",
"SUSE Liberty Linux 7:mariadb-embedded-devel-1:5.5.56-2.el7.x86_64",
"SUSE Liberty Linux 7:mariadb-libs-1:5.5.56-2.el7.i686",
"SUSE Liberty Linux 7:mariadb-libs-1:5.5.56-2.el7.x86_64",
"SUSE Liberty Linux 7:mariadb-server-1:5.5.56-2.el7.x86_64",
"SUSE Liberty Linux 7:mariadb-test-1:5.5.56-2.el7.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2017-3456",
"url": "https://www.suse.com/security/cve/CVE-2017-3456"
},
{
"category": "external",
"summary": "SUSE Bug 1034850 for CVE-2017-3456",
"url": "https://bugzilla.suse.com/1034850"
},
{
"category": "external",
"summary": "SUSE Bug 1048715 for CVE-2017-3456",
"url": "https://bugzilla.suse.com/1048715"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Liberty Linux 7:mariadb-1:5.5.56-2.el7.x86_64",
"SUSE Liberty Linux 7:mariadb-bench-1:5.5.56-2.el7.x86_64",
"SUSE Liberty Linux 7:mariadb-devel-1:5.5.56-2.el7.i686",
"SUSE Liberty Linux 7:mariadb-devel-1:5.5.56-2.el7.x86_64",
"SUSE Liberty Linux 7:mariadb-embedded-1:5.5.56-2.el7.i686",
"SUSE Liberty Linux 7:mariadb-embedded-1:5.5.56-2.el7.x86_64",
"SUSE Liberty Linux 7:mariadb-embedded-devel-1:5.5.56-2.el7.i686",
"SUSE Liberty Linux 7:mariadb-embedded-devel-1:5.5.56-2.el7.x86_64",
"SUSE Liberty Linux 7:mariadb-libs-1:5.5.56-2.el7.i686",
"SUSE Liberty Linux 7:mariadb-libs-1:5.5.56-2.el7.x86_64",
"SUSE Liberty Linux 7:mariadb-server-1:5.5.56-2.el7.x86_64",
"SUSE Liberty Linux 7:mariadb-test-1:5.5.56-2.el7.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 4.9,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Liberty Linux 7:mariadb-1:5.5.56-2.el7.x86_64",
"SUSE Liberty Linux 7:mariadb-bench-1:5.5.56-2.el7.x86_64",
"SUSE Liberty Linux 7:mariadb-devel-1:5.5.56-2.el7.i686",
"SUSE Liberty Linux 7:mariadb-devel-1:5.5.56-2.el7.x86_64",
"SUSE Liberty Linux 7:mariadb-embedded-1:5.5.56-2.el7.i686",
"SUSE Liberty Linux 7:mariadb-embedded-1:5.5.56-2.el7.x86_64",
"SUSE Liberty Linux 7:mariadb-embedded-devel-1:5.5.56-2.el7.i686",
"SUSE Liberty Linux 7:mariadb-embedded-devel-1:5.5.56-2.el7.x86_64",
"SUSE Liberty Linux 7:mariadb-libs-1:5.5.56-2.el7.i686",
"SUSE Liberty Linux 7:mariadb-libs-1:5.5.56-2.el7.x86_64",
"SUSE Liberty Linux 7:mariadb-server-1:5.5.56-2.el7.x86_64",
"SUSE Liberty Linux 7:mariadb-test-1:5.5.56-2.el7.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2017-08-01T00:00:00Z",
"details": "low"
}
],
"title": "CVE-2017-3456"
},
{
"cve": "CVE-2017-3464",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2017-3464"
}
],
"notes": [
{
"category": "general",
"text": "Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: DDL). Supported versions that are affected are 5.5.54 and earlier, 5.6.35 and earlier and 5.7.17 and earlier. Easily \"exploitable\" vulnerability allows low privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of MySQL Server accessible data. CVSS 3.0 Base Score 4.3 (Integrity impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N).",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Liberty Linux 7:mariadb-1:5.5.56-2.el7.x86_64",
"SUSE Liberty Linux 7:mariadb-bench-1:5.5.56-2.el7.x86_64",
"SUSE Liberty Linux 7:mariadb-devel-1:5.5.56-2.el7.i686",
"SUSE Liberty Linux 7:mariadb-devel-1:5.5.56-2.el7.x86_64",
"SUSE Liberty Linux 7:mariadb-embedded-1:5.5.56-2.el7.i686",
"SUSE Liberty Linux 7:mariadb-embedded-1:5.5.56-2.el7.x86_64",
"SUSE Liberty Linux 7:mariadb-embedded-devel-1:5.5.56-2.el7.i686",
"SUSE Liberty Linux 7:mariadb-embedded-devel-1:5.5.56-2.el7.x86_64",
"SUSE Liberty Linux 7:mariadb-libs-1:5.5.56-2.el7.i686",
"SUSE Liberty Linux 7:mariadb-libs-1:5.5.56-2.el7.x86_64",
"SUSE Liberty Linux 7:mariadb-server-1:5.5.56-2.el7.x86_64",
"SUSE Liberty Linux 7:mariadb-test-1:5.5.56-2.el7.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2017-3464",
"url": "https://www.suse.com/security/cve/CVE-2017-3464"
},
{
"category": "external",
"summary": "SUSE Bug 1034850 for CVE-2017-3464",
"url": "https://bugzilla.suse.com/1034850"
},
{
"category": "external",
"summary": "SUSE Bug 1048715 for CVE-2017-3464",
"url": "https://bugzilla.suse.com/1048715"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Liberty Linux 7:mariadb-1:5.5.56-2.el7.x86_64",
"SUSE Liberty Linux 7:mariadb-bench-1:5.5.56-2.el7.x86_64",
"SUSE Liberty Linux 7:mariadb-devel-1:5.5.56-2.el7.i686",
"SUSE Liberty Linux 7:mariadb-devel-1:5.5.56-2.el7.x86_64",
"SUSE Liberty Linux 7:mariadb-embedded-1:5.5.56-2.el7.i686",
"SUSE Liberty Linux 7:mariadb-embedded-1:5.5.56-2.el7.x86_64",
"SUSE Liberty Linux 7:mariadb-embedded-devel-1:5.5.56-2.el7.i686",
"SUSE Liberty Linux 7:mariadb-embedded-devel-1:5.5.56-2.el7.x86_64",
"SUSE Liberty Linux 7:mariadb-libs-1:5.5.56-2.el7.i686",
"SUSE Liberty Linux 7:mariadb-libs-1:5.5.56-2.el7.x86_64",
"SUSE Liberty Linux 7:mariadb-server-1:5.5.56-2.el7.x86_64",
"SUSE Liberty Linux 7:mariadb-test-1:5.5.56-2.el7.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 4.3,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N",
"version": "3.1"
},
"products": [
"SUSE Liberty Linux 7:mariadb-1:5.5.56-2.el7.x86_64",
"SUSE Liberty Linux 7:mariadb-bench-1:5.5.56-2.el7.x86_64",
"SUSE Liberty Linux 7:mariadb-devel-1:5.5.56-2.el7.i686",
"SUSE Liberty Linux 7:mariadb-devel-1:5.5.56-2.el7.x86_64",
"SUSE Liberty Linux 7:mariadb-embedded-1:5.5.56-2.el7.i686",
"SUSE Liberty Linux 7:mariadb-embedded-1:5.5.56-2.el7.x86_64",
"SUSE Liberty Linux 7:mariadb-embedded-devel-1:5.5.56-2.el7.i686",
"SUSE Liberty Linux 7:mariadb-embedded-devel-1:5.5.56-2.el7.x86_64",
"SUSE Liberty Linux 7:mariadb-libs-1:5.5.56-2.el7.i686",
"SUSE Liberty Linux 7:mariadb-libs-1:5.5.56-2.el7.x86_64",
"SUSE Liberty Linux 7:mariadb-server-1:5.5.56-2.el7.x86_64",
"SUSE Liberty Linux 7:mariadb-test-1:5.5.56-2.el7.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2017-08-01T00:00:00Z",
"details": "low"
}
],
"title": "CVE-2017-3464"
},
{
"cve": "CVE-2017-3600",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2017-3600"
}
],
"notes": [
{
"category": "general",
"text": "Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Client mysqldump). Supported versions that are affected are 5.5.54 and earlier, 5.6.35 and earlier and 5.7.17 and earlier. Difficult to exploit vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in takeover of MySQL Server. Note: CVE-2017-3600 is equivalent to CVE-2016-5483. CVSS 3.0 Base Score 6.6 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H).",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Liberty Linux 7:mariadb-1:5.5.56-2.el7.x86_64",
"SUSE Liberty Linux 7:mariadb-bench-1:5.5.56-2.el7.x86_64",
"SUSE Liberty Linux 7:mariadb-devel-1:5.5.56-2.el7.i686",
"SUSE Liberty Linux 7:mariadb-devel-1:5.5.56-2.el7.x86_64",
"SUSE Liberty Linux 7:mariadb-embedded-1:5.5.56-2.el7.i686",
"SUSE Liberty Linux 7:mariadb-embedded-1:5.5.56-2.el7.x86_64",
"SUSE Liberty Linux 7:mariadb-embedded-devel-1:5.5.56-2.el7.i686",
"SUSE Liberty Linux 7:mariadb-embedded-devel-1:5.5.56-2.el7.x86_64",
"SUSE Liberty Linux 7:mariadb-libs-1:5.5.56-2.el7.i686",
"SUSE Liberty Linux 7:mariadb-libs-1:5.5.56-2.el7.x86_64",
"SUSE Liberty Linux 7:mariadb-server-1:5.5.56-2.el7.x86_64",
"SUSE Liberty Linux 7:mariadb-test-1:5.5.56-2.el7.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2017-3600",
"url": "https://www.suse.com/security/cve/CVE-2017-3600"
},
{
"category": "external",
"summary": "SUSE Bug 1029014 for CVE-2017-3600",
"url": "https://bugzilla.suse.com/1029014"
},
{
"category": "external",
"summary": "SUSE Bug 1034850 for CVE-2017-3600",
"url": "https://bugzilla.suse.com/1034850"
},
{
"category": "external",
"summary": "SUSE Bug 1048715 for CVE-2017-3600",
"url": "https://bugzilla.suse.com/1048715"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Liberty Linux 7:mariadb-1:5.5.56-2.el7.x86_64",
"SUSE Liberty Linux 7:mariadb-bench-1:5.5.56-2.el7.x86_64",
"SUSE Liberty Linux 7:mariadb-devel-1:5.5.56-2.el7.i686",
"SUSE Liberty Linux 7:mariadb-devel-1:5.5.56-2.el7.x86_64",
"SUSE Liberty Linux 7:mariadb-embedded-1:5.5.56-2.el7.i686",
"SUSE Liberty Linux 7:mariadb-embedded-1:5.5.56-2.el7.x86_64",
"SUSE Liberty Linux 7:mariadb-embedded-devel-1:5.5.56-2.el7.i686",
"SUSE Liberty Linux 7:mariadb-embedded-devel-1:5.5.56-2.el7.x86_64",
"SUSE Liberty Linux 7:mariadb-libs-1:5.5.56-2.el7.i686",
"SUSE Liberty Linux 7:mariadb-libs-1:5.5.56-2.el7.x86_64",
"SUSE Liberty Linux 7:mariadb-server-1:5.5.56-2.el7.x86_64",
"SUSE Liberty Linux 7:mariadb-test-1:5.5.56-2.el7.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.6,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"SUSE Liberty Linux 7:mariadb-1:5.5.56-2.el7.x86_64",
"SUSE Liberty Linux 7:mariadb-bench-1:5.5.56-2.el7.x86_64",
"SUSE Liberty Linux 7:mariadb-devel-1:5.5.56-2.el7.i686",
"SUSE Liberty Linux 7:mariadb-devel-1:5.5.56-2.el7.x86_64",
"SUSE Liberty Linux 7:mariadb-embedded-1:5.5.56-2.el7.i686",
"SUSE Liberty Linux 7:mariadb-embedded-1:5.5.56-2.el7.x86_64",
"SUSE Liberty Linux 7:mariadb-embedded-devel-1:5.5.56-2.el7.i686",
"SUSE Liberty Linux 7:mariadb-embedded-devel-1:5.5.56-2.el7.x86_64",
"SUSE Liberty Linux 7:mariadb-libs-1:5.5.56-2.el7.i686",
"SUSE Liberty Linux 7:mariadb-libs-1:5.5.56-2.el7.x86_64",
"SUSE Liberty Linux 7:mariadb-server-1:5.5.56-2.el7.x86_64",
"SUSE Liberty Linux 7:mariadb-test-1:5.5.56-2.el7.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2017-08-01T00:00:00Z",
"details": "low"
}
],
"title": "CVE-2017-3600"
},
{
"cve": "CVE-2017-3651",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2017-3651"
}
],
"notes": [
{
"category": "general",
"text": "Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Client mysqldump). Supported versions that are affected are 5.5.56 and earlier, 5.6.36 and earlier and 5.7.18 and earlier. Easily exploitable vulnerability allows low privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of MySQL Server accessible data. CVSS 3.0 Base Score 4.3 (Integrity impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N).",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Liberty Linux 7:mariadb-1:5.5.56-2.el7.x86_64",
"SUSE Liberty Linux 7:mariadb-bench-1:5.5.56-2.el7.x86_64",
"SUSE Liberty Linux 7:mariadb-devel-1:5.5.56-2.el7.i686",
"SUSE Liberty Linux 7:mariadb-devel-1:5.5.56-2.el7.x86_64",
"SUSE Liberty Linux 7:mariadb-embedded-1:5.5.56-2.el7.i686",
"SUSE Liberty Linux 7:mariadb-embedded-1:5.5.56-2.el7.x86_64",
"SUSE Liberty Linux 7:mariadb-embedded-devel-1:5.5.56-2.el7.i686",
"SUSE Liberty Linux 7:mariadb-embedded-devel-1:5.5.56-2.el7.x86_64",
"SUSE Liberty Linux 7:mariadb-libs-1:5.5.56-2.el7.i686",
"SUSE Liberty Linux 7:mariadb-libs-1:5.5.56-2.el7.x86_64",
"SUSE Liberty Linux 7:mariadb-server-1:5.5.56-2.el7.x86_64",
"SUSE Liberty Linux 7:mariadb-test-1:5.5.56-2.el7.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2017-3651",
"url": "https://www.suse.com/security/cve/CVE-2017-3651"
},
{
"category": "external",
"summary": "SUSE Bug 1049415 for CVE-2017-3651",
"url": "https://bugzilla.suse.com/1049415"
},
{
"category": "external",
"summary": "SUSE Bug 1049422 for CVE-2017-3651",
"url": "https://bugzilla.suse.com/1049422"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Liberty Linux 7:mariadb-1:5.5.56-2.el7.x86_64",
"SUSE Liberty Linux 7:mariadb-bench-1:5.5.56-2.el7.x86_64",
"SUSE Liberty Linux 7:mariadb-devel-1:5.5.56-2.el7.i686",
"SUSE Liberty Linux 7:mariadb-devel-1:5.5.56-2.el7.x86_64",
"SUSE Liberty Linux 7:mariadb-embedded-1:5.5.56-2.el7.i686",
"SUSE Liberty Linux 7:mariadb-embedded-1:5.5.56-2.el7.x86_64",
"SUSE Liberty Linux 7:mariadb-embedded-devel-1:5.5.56-2.el7.i686",
"SUSE Liberty Linux 7:mariadb-embedded-devel-1:5.5.56-2.el7.x86_64",
"SUSE Liberty Linux 7:mariadb-libs-1:5.5.56-2.el7.i686",
"SUSE Liberty Linux 7:mariadb-libs-1:5.5.56-2.el7.x86_64",
"SUSE Liberty Linux 7:mariadb-server-1:5.5.56-2.el7.x86_64",
"SUSE Liberty Linux 7:mariadb-test-1:5.5.56-2.el7.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 4.3,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N",
"version": "3.0"
},
"products": [
"SUSE Liberty Linux 7:mariadb-1:5.5.56-2.el7.x86_64",
"SUSE Liberty Linux 7:mariadb-bench-1:5.5.56-2.el7.x86_64",
"SUSE Liberty Linux 7:mariadb-devel-1:5.5.56-2.el7.i686",
"SUSE Liberty Linux 7:mariadb-devel-1:5.5.56-2.el7.x86_64",
"SUSE Liberty Linux 7:mariadb-embedded-1:5.5.56-2.el7.i686",
"SUSE Liberty Linux 7:mariadb-embedded-1:5.5.56-2.el7.x86_64",
"SUSE Liberty Linux 7:mariadb-embedded-devel-1:5.5.56-2.el7.i686",
"SUSE Liberty Linux 7:mariadb-embedded-devel-1:5.5.56-2.el7.x86_64",
"SUSE Liberty Linux 7:mariadb-libs-1:5.5.56-2.el7.i686",
"SUSE Liberty Linux 7:mariadb-libs-1:5.5.56-2.el7.x86_64",
"SUSE Liberty Linux 7:mariadb-server-1:5.5.56-2.el7.x86_64",
"SUSE Liberty Linux 7:mariadb-test-1:5.5.56-2.el7.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2017-08-01T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2017-3651"
}
]
}
Loading…
Loading…
Experimental. This forecast is provided for visualization only and may change without notice. Do not use it for operational decisions.
Forecast uses a logistic model when the trend is rising, or an exponential decay model when the trend is falling. Fitted via linearized least squares.
Sightings
| Author | Source | Type | Date | Other |
|---|
Nomenclature
- Seen: The vulnerability was mentioned, discussed, or observed by the user.
- Confirmed: The vulnerability has been validated from an analyst's perspective.
- Published Proof of Concept: A public proof of concept is available for this vulnerability.
- Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
- Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
- Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
- Not confirmed: The user expressed doubt about the validity of the vulnerability.
- Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.
Loading…
Loading…
The MITRE ATT&CK techniques below are AI-generated suggestions, inferred from the description of the
vulnerability by the CIRCL/vulnerability-attack-technique-classification-roberta-base
model, served locally by ML-Gateway.
They have not been verified by an analyst and are provided for guidance only.
The approach is described in our paper Mapping CVEs to MITRE ATT&CK Techniques: A Curated Gold-Set Classifier and the Limits of LLM-Assisted Label Expansion.
Browse all ATT&CK techniques and the vulnerabilities related to each.
The approach is described in our paper Mapping CVEs to MITRE ATT&CK Techniques: A Curated Gold-Set Classifier and the Limits of LLM-Assisted Label Expansion.
Browse all ATT&CK techniques and the vulnerabilities related to each.
Loading…
Related by attack behaviour
Vulnerabilities whose description is nearest to this one in the vector space of the CIRCL/vulnerability-attack-technique-biencoder model. This is a similarity search over the bi-encoder space (plain cosine), not a classification, and it has no measured accuracy.
Loading…