Test Kennung:	1.3.6.1.4.1.25623.1.0.810603
Kategorie:	Databases
Titel:	Oracle MySQL Denial Of Service Vulnerability (Feb 2017) - Windows
Zusammenfassung:	Oracle MySQL is prone to a denial of service (DoS) vulnerability.
Beschreibung:	Summary: Oracle MySQL is prone to a denial of service (DoS) vulnerability. Vulnerability Insight: Multiple errors exist as, - In sql-common/client.c script 'mysql_prune_stmt_list' function, the for loop adds elements to pruned_list without removing it from the existing list. - If application gets disconnected just before it tries to prepare a new statement, 'mysql_prune_stmt_list' tries to detach all previously prepared statements. Vulnerability Impact: Successful exploitation of this vulnerability will allow attackers to cause crash of applications using that MySQL client. Affected Software/OS: Oracle MySQL version before 5.6.21 and 5.7.x before 5.7.5 on Windows Solution: Upgrade to Oracle MySQL version 5.6.21 or 5.7.5 or later. CVSS Score: 5.0 CVSS Vector: AV:N/AC:L/Au:N/C:N/I:N/A:P
Querverweis:	Common Vulnerability Exposure (CVE) ID: CVE-2017-3302 BugTraq ID: 96162 http://www.securityfocus.com/bid/96162 Debian Security Information: DSA-3809 (Google Search) http://www.debian.org/security/2017/dsa-3809 Debian Security Information: DSA-3834 (Google Search) http://www.debian.org/security/2017/dsa-3834 http://www.openwall.com/lists/oss-security/2017/02/11/11 RedHat Security Advisories: RHSA-2017:2192 https://access.redhat.com/errata/RHSA-2017:2192 RedHat Security Advisories: RHSA-2017:2787 https://access.redhat.com/errata/RHSA-2017:2787 RedHat Security Advisories: RHSA-2018:0279 https://access.redhat.com/errata/RHSA-2018:0279 RedHat Security Advisories: RHSA-2018:0574 https://access.redhat.com/errata/RHSA-2018:0574 http://www.securitytracker.com/id/1038287
Copyright	Copyright (C) 2017 Greenbone AG

Dies ist nur einer von 145615 Anfälligkeitstests in unserem Testpaket. Finden Sie mehr über unsere vollständigen Sicherheitsüberprüfungen heraus. Um einen gratis Test für diese Anfälligkeit auf Ihrem System durchlaufen zu lassen, registrieren Sie sich bitte unten.