VYPR
← All advisories
Medium severity5.3NVD Advisory· Published Aug 8, 2017· Updated May 13, 2026

CVE-2017-3636

CVE-2017-3636

Description

Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Client programs). Supported versions that are affected are 5.5.56 and earlier and 5.6.36 and earlier. Easily exploitable vulnerability allows low privileged attacker with logon to the infrastructure where MySQL Server executes to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of MySQL Server accessible data as well as unauthorized read access to a subset of MySQL Server accessible data and unauthorized ability to cause a partial denial of service (partial DOS) of MySQL Server. CVSS 3.0 Base Score 5.3 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L).

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Low-privileged local attacker can read, modify, or delete MySQL data, or cause partial denial of service via client programs.

Vulnerability

A vulnerability exists in the MySQL Client programs component of Oracle MySQL. Affected versions are MySQL 5.5.56 and earlier, and 5.6.36 and earlier. The vulnerability is easily exploitable and requires low-privileged local access to the system where MySQL Server runs.

Exploitation

An attacker with logon access to the infrastructure where MySQL Server executes can exploit this vulnerability. No authentication is required beyond the initial low-privileged access. The attack can be performed locally without user interaction.

Impact

Successful exploitation allows an attacker to gain unauthorized read access to a subset of MySQL Server data, unauthorized update, insert, or delete access to some MySQL Server data, and the ability to cause a partial denial of service (partial DOS) of MySQL Server. The CVSS v3 base score is 5.3 (Medium) with impacts to confidentiality, integrity, and availability.

Mitigation

Oracle has not released a patch at the time of publication, but Red Hat has provided updates for affected versions in RHSA-2017:2787 [4], RHSA-2018:0279 [3], RHSA-2018:0574 [2], and RHSA-2018:2439 [1]. Users should upgrade to the fixed versions included in these advisories. No workarounds are available if patching is not possible.

References
  1. https://access.redhat.com/errata/RHSA-2018:2439
  2. https://access.redhat.com/errata/RHSA-2018:0574
  3. https://access.redhat.com/errata/RHSA-2018:0279
  4. https://access.redhat.com/errata/RHSA-2017:2787

AI Insight generated on May 22, 2026. Synthesized from this CVE's description and the cited reference URLs; citations are validated against the source bundle.

Affected products

53

Patches

0

No patches discovered yet.

Vulnerability mechanics

AI mechanics synthesis has not run for this CVE yet.

References

11

News mentions

0

No linked articles in our index yet.