{"id":"CVE-2017-10155","details":"Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Pluggable Auth). Supported versions that are affected are 5.6.37 and earlier and 5.7.19 and earlier. Easily exploitable vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.0 Base Score 7.5 (Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H).","modified":"2026-07-07T08:49:28.350918429Z","published":"2017-10-19T17:29:00.827Z","database_specific":{"unresolved_ranges":[{"cpes":["cpe:2.3:a:oracle:mysql:5.6.0:*:*:*:*:*:*:*","cpe:2.3:a:oracle:mysql:5.6.1:*:*:*:*:*:*:*","cpe:2.3:a:oracle:mysql:5.7.0:*:*:*:*:*:*:*"],"extracted_events":[{"introduced":"5.6.0"},{"last_affected":"5.6.0"},{"introduced":"5.6.1"},{"last_affected":"5.6.1"},{"introduced":"5.7.0"},{"last_affected":"5.7.0"}],"source":"CPE_STRING","vendor_product":"oracle:mysql"}]},"references":[{"type":"ADVISORY","url":"http://www.securityfocus.com/bid/101402"},{"type":"ADVISORY","url":"http://www.securitytracker.com/id/1039597"},{"type":"ADVISORY","url":"https://access.redhat.com/errata/RHSA-2017:3265"},{"type":"ADVISORY","url":"https://access.redhat.com/errata/RHSA-2017:3442"},{"type":"ADVISORY","url":"https://security.netapp.com/advisory/ntap-20171019-0002/"},{"type":"FIX","url":"http://www.oracle.com/technetwork/security-advisory/cpuoct2017-3236626.html"}],"affected":[{"ranges":[{"type":"GIT","repo":"https://github.com/mysql/mysql-server","events":[{"introduced":"9e77c32b387402bc1ae7b34eaa6f6682d2d82811"},{"last_affected":"a533e2c786164af9bd276660b972d93649434297"}],"database_specific":{"extracted_events":[{"introduced":"5.6.2"},{"last_affected":"5.6.2"},{"introduced":"5.6.3"},{"last_affected":"5.6.3"},{"introduced":"5.6.4"},{"last_affected":"5.6.4"},{"introduced":"5.6.5"},{"last_affected":"5.6.5"},{"introduced":"5.6.6"},{"last_affected":"5.6.6"},{"introduced":"5.6.7"},{"last_affected":"5.6.7"},{"introduced":"5.6.8"},{"last_affected":"5.6.8"},{"introduced":"5.6.9"},{"last_affected":"5.6.9"},{"introduced":"5.6.10"},{"last_affected":"5.6.10"},{"introduced":"5.6.11"},{"last_affected":"5.6.11"},{"introduced":"5.6.12"},{"last_affected":"5.6.12"},{"introduced":"5.6.13"},{"last_affected":"5.6.13"},{"introduced":"5.6.14"},{"last_affected":"5.6.14"},{"introduced":"5.6.15"},{"last_affected":"5.6.15"},{"introduced":"5.6.16"},{"last_affected":"5.6.16"},{"introduced":"5.6.17"},{"last_affected":"5.6.17"},{"introduced":"5.6.21"},{"last_affected":"5.6.21"},{"introduced":"5.6.22"},{"last_affected":"5.6.22"},{"introduced":"5.6.23"},{"last_affected":"5.6.23"},{"introduced":"5.6.26"},{"last_affected":"5.6.26"},{"introduced":"5.6.27"},{"last_affected":"5.6.27"},{"introduced":"5.6.28"},{"last_affected":"5.6.28"},{"introduced":"5.6.29"},{"last_affected":"5.6.29"},{"introduced":"5.6.30"},{"last_affected":"5.6.30"},{"introduced":"5.6.31"},{"last_affected":"5.6.31"},{"introduced":"5.6.32"},{"last_affected":"5.6.32"},{"introduced":"5.6.33"},{"last_affected":"5.6.33"},{"introduced":"5.6.34"},{"last_affected":"5.6.34"},{"introduced":"5.6.35"},{"last_affected":"5.6.35"},{"introduced":"5.6.36"},{"last_affected":"5.6.36"},{"introduced":"5.6.37"},{"last_affected":"5.6.37"},{"introduced":"5.7.1"},{"last_affected":"5.7.1"},{"introduced":"5.7.2"},{"last_affected":"5.7.2"},{"introduced":"5.7.3"},{"last_affected":"5.7.3"},{"introduced":"5.7.4"},{"last_affected":"5.7.4"},{"introduced":"5.7.5"},{"last_affected":"5.7.5"},{"introduced":"5.7.6"},{"last_affected":"5.7.6"},{"introduced":"5.7.7"},{"last_affected":"5.7.7"},{"introduced":"5.7.8"},{"last_affected":"5.7.8"},{"introduced":"5.7.9"},{"last_affected":"5.7.9"},{"introduced":"5.7.10"},{"last_affected":"5.7.10"},{"introduced":"5.7.11"},{"last_affected":"5.7.11"},{"introduced":"5.7.12"},{"last_affected":"5.7.12"},{"introduced":"5.7.13"},{"last_affected":"5.7.13"},{"introduced":"5.7.14"},{"last_affected":"5.7.14"},{"introduced":"5.7.15"},{"last_affected":"5.7.15"},{"introduced":"5.7.16"},{"last_affected":"5.7.16"},{"introduced":"5.7.17"},{"last_affected":"5.7.17"},{"introduced":"5.7.18"},{"last_affected":"5.7.18"},{"introduced":"5.7.19"},{"last_affected":"5.7.19"}],"source":"CPE_STRING","cpe":["cpe:2.3:a:oracle:mysql:5.6.2:*:*:*:*:*:*:*","cpe:2.3:a:oracle:mysql:5.6.3:*:*:*:*:*:*:*","cpe:2.3:a:oracle:mysql:5.6.4:*:*:*:*:*:*:*","cpe:2.3:a:oracle:mysql:5.6.5:*:*:*:*:*:*:*","cpe:2.3:a:oracle:mysql:5.6.6:*:*:*:*:*:*:*","cpe:2.3:a:oracle:mysql:5.6.7:*:*:*:*:*:*:*","cpe:2.3:a:oracle:mysql:5.6.8:*:*:*:*:*:*:*","cpe:2.3:a:oracle:mysql:5.6.9:*:*:*:*:*:*:*","cpe:2.3:a:oracle:mysql:5.6.10:*:*:*:*:*:*:*","cpe:2.3:a:oracle:mysql:5.6.11:*:*:*:*:*:*:*","cpe:2.3:a:oracle:mysql:5.6.12:*:*:*:*:*:*:*","cpe:2.3:a:oracle:mysql:5.6.13:*:*:*:*:*:*:*","cpe:2.3:a:oracle:mysql:5.6.14:*:*:*:*:*:*:*","cpe:2.3:a:oracle:mysql:5.6.15:*:*:*:*:*:*:*","cpe:2.3:a:oracle:mysql:5.6.16:*:*:*:*:*:*:*","cpe:2.3:a:oracle:mysql:5.6.17:*:*:*:*:*:*:*","cpe:2.3:a:oracle:mysql:5.6.21:*:*:*:*:*:*:*","cpe:2.3:a:oracle:mysql:5.6.22:*:*:*:*:*:*:*","cpe:2.3:a:oracle:mysql:5.6.23:*:*:*:*:*:*:*","cpe:2.3:a:oracle:mysql:5.6.26:*:*:*:*:*:*:*","cpe:2.3:a:oracle:mysql:5.6.27:*:*:*:*:*:*:*","cpe:2.3:a:oracle:mysql:5.6.28:*:*:*:*:*:*:*","cpe:2.3:a:oracle:mysql:5.6.29:*:*:*:*:*:*:*","cpe:2.3:a:oracle:mysql:5.6.30:*:*:*:*:*:*:*","cpe:2.3:a:oracle:mysql:5.6.31:*:*:*:*:*:*:*","cpe:2.3:a:oracle:mysql:5.6.32:*:*:*:*:*:*:*","cpe:2.3:a:oracle:mysql:5.6.33:*:*:*:*:*:*:*","cpe:2.3:a:oracle:mysql:5.6.34:*:*:*:*:*:*:*","cpe:2.3:a:oracle:mysql:5.6.35:*:*:*:*:*:*:*","cpe:2.3:a:oracle:mysql:5.6.36:*:*:*:*:*:*:*","cpe:2.3:a:oracle:mysql:5.6.37:*:*:*:*:*:*:*","cpe:2.3:a:oracle:mysql:5.7.1:*:*:*:*:*:*:*","cpe:2.3:a:oracle:mysql:5.7.2:*:*:*:*:*:*:*","cpe:2.3:a:oracle:mysql:5.7.3:*:*:*:*:*:*:*","cpe:2.3:a:oracle:mysql:5.7.4:*:*:*:*:*:*:*","cpe:2.3:a:oracle:mysql:5.7.5:*:*:*:*:*:*:*","cpe:2.3:a:oracle:mysql:5.7.6:*:*:*:*:*:*:*","cpe:2.3:a:oracle:mysql:5.7.7:*:*:*:*:*:*:*","cpe:2.3:a:oracle:mysql:5.7.8:*:*:*:*:*:*:*","cpe:2.3:a:oracle:mysql:5.7.9:*:*:*:*:*:*:*","cpe:2.3:a:oracle:mysql:5.7.10:*:*:*:*:*:*:*","cpe:2.3:a:oracle:mysql:5.7.11:*:*:*:*:*:*:*","cpe:2.3:a:oracle:mysql:5.7.12:*:*:*:*:*:*:*","cpe:2.3:a:oracle:mysql:5.7.13:*:*:*:*:*:*:*","cpe:2.3:a:oracle:mysql:5.7.14:*:*:*:*:*:*:*","cpe:2.3:a:oracle:mysql:5.7.15:*:*:*:*:*:*:*","cpe:2.3:a:oracle:mysql:5.7.16:*:*:*:*:*:*:*","cpe:2.3:a:oracle:mysql:5.7.17:*:*:*:*:*:*:*","cpe:2.3:a:oracle:mysql:5.7.18:*:*:*:*:*:*:*","cpe:2.3:a:oracle:mysql:5.7.19:*:*:*:*:*:*:*"]}}],"versions":["5.6.10","5.6.11","5.6.12","5.6.13","5.6.14","5.6.15","5.6.16","5.6.17","5.6.2","5.6.21","5.6.22","5.6.23","5.6.26","5.6.27","5.6.28","5.6.29","5.6.3","5.6.30","5.6.31","5.6.32","5.6.33","5.6.34","5.6.35","5.6.36","5.6.37","5.6.4","5.6.5","5.6.6","5.6.7","5.6.8","5.6.9","5.7.1","5.7.10","5.7.11","5.7.12","5.7.13","5.7.14","5.7.15","5.7.16","5.7.17","5.7.18","5.7.19","5.7.2","5.7.3","5.7.4","5.7.5","5.7.6","5.7.7","5.7.8","5.7.9"],"database_specific":{"source":"https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2017-10155.json"}}],"schema_version":"1.7.5","severity":[{"type":"CVSS_V3","score":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H"}]}