SB2017072020 - Ubuntu update for MySQL
Published: July 20, 2017
Breakdown by Severity
- Low
- Medium
- High
- Critical
Description
This security bulletin contains information about 21 secuirty vulnerabilities.
1) Improper Access Control (CVE-ID: CVE-2017-3529)
The vulnerability exists due to an unspecified error in the MySQL Server within UDF component. A remote authenticated attacker can exploit the vulnerability to perform a denial of service attack.
2) Improper Access Control (CVE-ID: CVE-2017-3633)
The vulnerability exists due to an unspecified error in the MySQL Server within Memcached component. A remote unauthenticated attacker can exploit the vulnerability to modify certain data on the system and perform a denial of service (DoS) attack.
3) Improper Access Control (CVE-ID: CVE-2017-3634)
The vulnerability exists due to an unspecified error in the MySQL Server within DML component. A remote authenticated attacker can exploit the vulnerability to perform a denial of service attack.
4) Improper Access Control (CVE-ID: CVE-2017-3635)
The vulnerability exists due to an unspecified error in the MySQL Server within C API component. A remote authenticated attacker can exploit the vulnerability to perform a denial of service attack.
5) Improper Access Control (CVE-ID: CVE-2017-3636)
The vulnerability exists due to an unspecified error in the MySQL Server within Client programs component. A local user can exploit the vulnerability to gain full access to MySQL databases.
6) Improper Access Control (CVE-ID: CVE-2017-3637)
The vulnerability exists due to an unspecified error in the MySQL Server within X Plugin component. A remote authenticated attacker can exploit the vulnerability to perform a denial of service attack.
7) Improper Access Control (CVE-ID: CVE-2017-3638)
The vulnerability exists due to an unspecified error in the MySQL Server within Optimizer component. A remote privileged user can exploit the vulnerability to perform a denial of service attack.
8) Improper Access Control (CVE-ID: CVE-2017-3639)
The vulnerability exists due to an unspecified error in the MySQL Server within DML component. A remote privileged user can exploit the vulnerability to perform a denial of service attack.
9) Improper Access Control (CVE-ID: CVE-2017-3640)
The vulnerability exists due to an unspecified error in the MySQL Server within DML component. A remote privileged user can exploit the vulnerability to perform a denial of service attack.
10) Improper Access Control (CVE-ID: CVE-2017-3641)
The vulnerability exists due to an unspecified error in the MySQL Server within DML component. A remote privileged user can exploit the vulnerability to perform a denial of service attack.
11) Improper Access Control (CVE-ID: CVE-2017-3642)
The vulnerability exists due to an unspecified error in the MySQL Server within Optimizer component. A remote privileged user can exploit the vulnerability to perform a denial of service attack.
12) Improper Access Control (CVE-ID: CVE-2017-3643)
The vulnerability exists due to an unspecified error in the MySQL Server within DML component. A remote privileged user can exploit the vulnerability to perform a denial of service attack.
13) Improper Access Control (CVE-ID: CVE-2017-3644)
The vulnerability exists due to an unspecified error in the MySQL Server within DML component. A remote privileged user can exploit the vulnerability to perform a denial of service attack.
14) Improper Access Control (CVE-ID: CVE-2017-3645)
The vulnerability exists due to an unspecified error in the MySQL Server within Optimizer component. A remote privileged user can exploit the vulnerability to perform a denial of service attack.
15) Improper Access Control (CVE-ID: CVE-2017-3647)
The vulnerability exists due to an unspecified error in the MySQL Server within Replication component. A remote privileged user can exploit the vulnerability to perform a denial of service attack.
16) Improper Access Control (CVE-ID: CVE-2017-3648)
The vulnerability exists due to an unspecified error in the MySQL Server within Charsets component. A remote privileged user can exploit the vulnerability to perform a denial of service attack.
17) Improper Access Control (CVE-ID: CVE-2017-3649)
The vulnerability exists due to an unspecified error in the MySQL Server within Replication component. A remote privileged user can exploit the vulnerability to perform a denial of service attack.
18) Improper Access Control (CVE-ID: CVE-2017-3650)
The vulnerability exists due to an unspecified error in the MySQL Server within C API component. A remote unauthenticated attacker can exploit the vulnerability to gain access to potentially sensitive information.
19) Improper Access Control (CVE-ID: CVE-2017-3651)
The vulnerability exists due to an unspecified error in the MySQL Server within Client mysqldump component. A remote authenticated attacker can exploit the vulnerability to perform unauthorized modification of data.
20) Improper Access Control (CVE-ID: CVE-2017-3652)
The vulnerability exists due to an unspecified error in the MySQL Server within DDL component. A remote authenticated attacker can exploit the vulnerability to gain access unauthorized access and modify data.
21) Improper Access Control (CVE-ID: CVE-2017-3653)
The vulnerability exists due to an unspecified error in the MySQL Server within DDL component. A remote authenticated attacker can exploit the vulnerability to perform unauthorized modification of data.
Remediation
Install update from vendor's website.