Security update for mysql-community-server SUSE Patch security@suse.de SUSE Security Team openSUSE-SU-2017:0479-1 Final 1 1 2017-02-16T20:45:42Z current 2017-02-16T20:45:42Z 2017-02-16T20:45:42Z cve-database/bin/generate-cvrf.pl 2017-02-24T01:00:00Z Security update for mysql-community-server mysql-community-server was updated to version 5.6.35 to fix bugs and security issues: * Changes http://dev.mysql.com/doc/relnotes/mysql/5.6/en/news-5-6-35.html * Fixed CVEs: CVE-2016-8318 [boo#1020872], CVE-2017-3312 [boo#1020873], CVE-2017-3258 [boo#1020875], CVE-2017-3273 [boo#1020876], CVE-2017-3244 [boo#1020877], CVE-2017-3257 [boo#1020878], CVE-2017-3238 [boo#1020882], CVE-2017-3291 [boo#1020884], CVE-2017-3265 [boo#1020885], CVE-2017-3313 [boo#1020890], CVE-2016-8327 [boo#1020893], CVE-2017-3317 [boo#1020894], CVE-2017-3318 [boo#1020896] The CVRF data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0). Copyright SUSE LLC under the Creative Commons License 4.0 with Attribution (CC-BY-4.0) https://lists.opensuse.org/opensuse-security-announce/2017-02/msg00026.html E-Mail link for openSUSE-SU-2017:0479-1 https://www.suse.com/support/security/rating/ SUSE Security Ratings openSUSE Leap 42.1 libmysql56client18-5.6.35-22.1 libmysql56client18-32bit-5.6.35-22.1 libmysql56client_r18-5.6.35-22.1 libmysql56client_r18-32bit-5.6.35-22.1 mysql-community-server-5.6.35-22.1 mysql-community-server-bench-5.6.35-22.1 mysql-community-server-client-5.6.35-22.1 mysql-community-server-errormessages-5.6.35-22.1 mysql-community-server-test-5.6.35-22.1 mysql-community-server-tools-5.6.35-22.1 libmysql56client18-5.6.35-22.1 as a component of openSUSE Leap 42.1 libmysql56client18-32bit-5.6.35-22.1 as a component of openSUSE Leap 42.1 libmysql56client_r18-5.6.35-22.1 as a component of openSUSE Leap 42.1 libmysql56client_r18-32bit-5.6.35-22.1 as a component of openSUSE Leap 42.1 mysql-community-server-5.6.35-22.1 as a component of openSUSE Leap 42.1 mysql-community-server-bench-5.6.35-22.1 as a component of openSUSE Leap 42.1 mysql-community-server-client-5.6.35-22.1 as a component of openSUSE Leap 42.1 mysql-community-server-errormessages-5.6.35-22.1 as a component of openSUSE Leap 42.1 mysql-community-server-test-5.6.35-22.1 as a component of openSUSE Leap 42.1 mysql-community-server-tools-5.6.35-22.1 as a component of openSUSE Leap 42.1 Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Security: Encryption). Supported versions that are affected are 5.6.34 and earlier and 5.7.16 and earlier. Easily exploitable vulnerability allows low privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in MySQL Server, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS v3.0 Base Score 6.8 (Availability impacts). CVE-2016-8318 openSUSE Leap 42.1:libmysql56client18-32bit-5.6.35-22.1 openSUSE Leap 42.1:libmysql56client18-5.6.35-22.1 openSUSE Leap 42.1:libmysql56client_r18-32bit-5.6.35-22.1 openSUSE Leap 42.1:libmysql56client_r18-5.6.35-22.1 openSUSE Leap 42.1:mysql-community-server-5.6.35-22.1 openSUSE Leap 42.1:mysql-community-server-bench-5.6.35-22.1 openSUSE Leap 42.1:mysql-community-server-client-5.6.35-22.1 openSUSE Leap 42.1:mysql-community-server-errormessages-5.6.35-22.1 openSUSE Leap 42.1:mysql-community-server-test-5.6.35-22.1 openSUSE Leap 42.1:mysql-community-server-tools-5.6.35-22.1 important 7.1 AV:N/AC:M/Au:N/C:N/I:N/A:C Please Install the update. https://lists.opensuse.org/opensuse-security-announce/2017-02/msg00026.html https://www.suse.com/security/cve/CVE-2016-8318.html CVE-2016-8318 https://bugzilla.suse.com/1020868 SUSE Bug 1020868 https://bugzilla.suse.com/1020872 SUSE Bug 1020872 Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Replication). Supported versions that are affected are 5.6.34 and earlier and 5.7.16 and earlier. Difficult to exploit vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS v3.0 Base Score 4.4 (Availability impacts). CVE-2016-8327 openSUSE Leap 42.1:libmysql56client18-32bit-5.6.35-22.1 openSUSE Leap 42.1:libmysql56client18-5.6.35-22.1 openSUSE Leap 42.1:libmysql56client_r18-32bit-5.6.35-22.1 openSUSE Leap 42.1:libmysql56client_r18-5.6.35-22.1 openSUSE Leap 42.1:mysql-community-server-5.6.35-22.1 openSUSE Leap 42.1:mysql-community-server-bench-5.6.35-22.1 openSUSE Leap 42.1:mysql-community-server-client-5.6.35-22.1 openSUSE Leap 42.1:mysql-community-server-errormessages-5.6.35-22.1 openSUSE Leap 42.1:mysql-community-server-test-5.6.35-22.1 openSUSE Leap 42.1:mysql-community-server-tools-5.6.35-22.1 important 4.9 AV:N/AC:H/Au:S/C:N/I:N/A:C Please Install the update. https://lists.opensuse.org/opensuse-security-announce/2017-02/msg00026.html https://www.suse.com/security/cve/CVE-2016-8327.html CVE-2016-8327 https://bugzilla.suse.com/1020868 SUSE Bug 1020868 https://bugzilla.suse.com/1020893 SUSE Bug 1020893 https://bugzilla.suse.com/1053919 SUSE Bug 1053919 Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Optimizer). Supported versions that are affected are 5.5.53 and earlier, 5.6.34 and earlier and 5.7.16 and earlier. Easily exploitable vulnerability allows low privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS v3.0 Base Score 6.5 (Availability impacts). CVE-2017-3238 openSUSE Leap 42.1:libmysql56client18-32bit-5.6.35-22.1 openSUSE Leap 42.1:libmysql56client18-5.6.35-22.1 openSUSE Leap 42.1:libmysql56client_r18-32bit-5.6.35-22.1 openSUSE Leap 42.1:libmysql56client_r18-5.6.35-22.1 openSUSE Leap 42.1:mysql-community-server-5.6.35-22.1 openSUSE Leap 42.1:mysql-community-server-bench-5.6.35-22.1 openSUSE Leap 42.1:mysql-community-server-client-5.6.35-22.1 openSUSE Leap 42.1:mysql-community-server-errormessages-5.6.35-22.1 openSUSE Leap 42.1:mysql-community-server-test-5.6.35-22.1 openSUSE Leap 42.1:mysql-community-server-tools-5.6.35-22.1 moderate 6.8 AV:N/AC:L/Au:S/C:N/I:N/A:C Please Install the update. https://lists.opensuse.org/opensuse-security-announce/2017-02/msg00026.html https://www.suse.com/security/cve/CVE-2017-3238.html CVE-2017-3238 https://bugzilla.suse.com/1020868 SUSE Bug 1020868 https://bugzilla.suse.com/1020882 SUSE Bug 1020882 Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: DML). Supported versions that are affected are 5.5.53 and earlier, 5.6.34 and earlier and 5.7.16 and earlier. Easily exploitable vulnerability allows low privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS v3.0 Base Score 6.5 (Availability impacts). CVE-2017-3244 openSUSE Leap 42.1:libmysql56client18-32bit-5.6.35-22.1 openSUSE Leap 42.1:libmysql56client18-5.6.35-22.1 openSUSE Leap 42.1:libmysql56client_r18-32bit-5.6.35-22.1 openSUSE Leap 42.1:libmysql56client_r18-5.6.35-22.1 openSUSE Leap 42.1:mysql-community-server-5.6.35-22.1 openSUSE Leap 42.1:mysql-community-server-bench-5.6.35-22.1 openSUSE Leap 42.1:mysql-community-server-client-5.6.35-22.1 openSUSE Leap 42.1:mysql-community-server-errormessages-5.6.35-22.1 openSUSE Leap 42.1:mysql-community-server-test-5.6.35-22.1 openSUSE Leap 42.1:mysql-community-server-tools-5.6.35-22.1 moderate 6.8 AV:N/AC:L/Au:S/C:N/I:N/A:C Please Install the update. https://lists.opensuse.org/opensuse-security-announce/2017-02/msg00026.html https://www.suse.com/security/cve/CVE-2017-3244.html CVE-2017-3244 https://bugzilla.suse.com/1020868 SUSE Bug 1020868 https://bugzilla.suse.com/1020877 SUSE Bug 1020877 Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: InnoDB). Supported versions that are affected are 5.6.34 and earlier5.7.16 and earlier. Easily exploitable vulnerability allows low privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS v3.0 Base Score 6.5 (Availability impacts). CVE-2017-3257 openSUSE Leap 42.1:libmysql56client18-32bit-5.6.35-22.1 openSUSE Leap 42.1:libmysql56client18-5.6.35-22.1 openSUSE Leap 42.1:libmysql56client_r18-32bit-5.6.35-22.1 openSUSE Leap 42.1:libmysql56client_r18-5.6.35-22.1 openSUSE Leap 42.1:mysql-community-server-5.6.35-22.1 openSUSE Leap 42.1:mysql-community-server-bench-5.6.35-22.1 openSUSE Leap 42.1:mysql-community-server-client-5.6.35-22.1 openSUSE Leap 42.1:mysql-community-server-errormessages-5.6.35-22.1 openSUSE Leap 42.1:mysql-community-server-test-5.6.35-22.1 openSUSE Leap 42.1:mysql-community-server-tools-5.6.35-22.1 moderate 6.8 AV:N/AC:L/Au:S/C:N/I:N/A:C Please Install the update. https://lists.opensuse.org/opensuse-security-announce/2017-02/msg00026.html https://www.suse.com/security/cve/CVE-2017-3257.html CVE-2017-3257 https://bugzilla.suse.com/1020868 SUSE Bug 1020868 https://bugzilla.suse.com/1020878 SUSE Bug 1020878 Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: DDL). Supported versions that are affected are 5.5.53 and earlier, 5.6.34 and earlier and 5.7.16 and earlier. Easily exploitable vulnerability allows low privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS v3.0 Base Score 6.5 (Availability impacts). CVE-2017-3258 openSUSE Leap 42.1:libmysql56client18-32bit-5.6.35-22.1 openSUSE Leap 42.1:libmysql56client18-5.6.35-22.1 openSUSE Leap 42.1:libmysql56client_r18-32bit-5.6.35-22.1 openSUSE Leap 42.1:libmysql56client_r18-5.6.35-22.1 openSUSE Leap 42.1:mysql-community-server-5.6.35-22.1 openSUSE Leap 42.1:mysql-community-server-bench-5.6.35-22.1 openSUSE Leap 42.1:mysql-community-server-client-5.6.35-22.1 openSUSE Leap 42.1:mysql-community-server-errormessages-5.6.35-22.1 openSUSE Leap 42.1:mysql-community-server-test-5.6.35-22.1 openSUSE Leap 42.1:mysql-community-server-tools-5.6.35-22.1 moderate 6.8 AV:N/AC:L/Au:S/C:N/I:N/A:C Please Install the update. https://lists.opensuse.org/opensuse-security-announce/2017-02/msg00026.html https://www.suse.com/security/cve/CVE-2017-3258.html CVE-2017-3258 https://bugzilla.suse.com/1020868 SUSE Bug 1020868 https://bugzilla.suse.com/1020875 SUSE Bug 1020875 Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Packaging). Supported versions that are affected are 5.5.53 and earlier, 5.6.34 and earlier and 5.7.16 and earlier. Difficult to exploit vulnerability allows high privileged attacker with logon to the infrastructure where MySQL Server executes to compromise MySQL Server. Successful attacks require human interaction from a person other than the attacker. Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all MySQL Server accessible data and unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS v3.0 Base Score 5.6 (Confidentiality and Availability impacts). CVE-2017-3265 openSUSE Leap 42.1:libmysql56client18-32bit-5.6.35-22.1 openSUSE Leap 42.1:libmysql56client18-5.6.35-22.1 openSUSE Leap 42.1:libmysql56client_r18-32bit-5.6.35-22.1 openSUSE Leap 42.1:libmysql56client_r18-5.6.35-22.1 openSUSE Leap 42.1:mysql-community-server-5.6.35-22.1 openSUSE Leap 42.1:mysql-community-server-bench-5.6.35-22.1 openSUSE Leap 42.1:mysql-community-server-client-5.6.35-22.1 openSUSE Leap 42.1:mysql-community-server-errormessages-5.6.35-22.1 openSUSE Leap 42.1:mysql-community-server-test-5.6.35-22.1 openSUSE Leap 42.1:mysql-community-server-tools-5.6.35-22.1 moderate 5.5 AV:L/AC:H/Au:S/C:C/I:N/A:C Please Install the update. https://lists.opensuse.org/opensuse-security-announce/2017-02/msg00026.html https://www.suse.com/security/cve/CVE-2017-3265.html CVE-2017-3265 https://bugzilla.suse.com/1020868 SUSE Bug 1020868 https://bugzilla.suse.com/1020885 SUSE Bug 1020885 Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: DDL). Supported versions that are affected are 5.6.34 and earlier and 5.7.16 and earlier. Easily exploitable vulnerability allows low privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS v3.0 Base Score 6.5 (Availability impacts). CVE-2017-3273 openSUSE Leap 42.1:libmysql56client18-32bit-5.6.35-22.1 openSUSE Leap 42.1:libmysql56client18-5.6.35-22.1 openSUSE Leap 42.1:libmysql56client_r18-32bit-5.6.35-22.1 openSUSE Leap 42.1:libmysql56client_r18-5.6.35-22.1 openSUSE Leap 42.1:mysql-community-server-5.6.35-22.1 openSUSE Leap 42.1:mysql-community-server-bench-5.6.35-22.1 openSUSE Leap 42.1:mysql-community-server-client-5.6.35-22.1 openSUSE Leap 42.1:mysql-community-server-errormessages-5.6.35-22.1 openSUSE Leap 42.1:mysql-community-server-test-5.6.35-22.1 openSUSE Leap 42.1:mysql-community-server-tools-5.6.35-22.1 important 6.8 AV:N/AC:L/Au:S/C:N/I:N/A:C Please Install the update. https://lists.opensuse.org/opensuse-security-announce/2017-02/msg00026.html https://www.suse.com/security/cve/CVE-2017-3273.html CVE-2017-3273 https://bugzilla.suse.com/1020868 SUSE Bug 1020868 https://bugzilla.suse.com/1020876 SUSE Bug 1020876 https://bugzilla.suse.com/1053919 SUSE Bug 1053919 Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Packaging). Supported versions that are affected are 5.5.53 and earlier, 5.6.34 and earlier and 5.7.16 and earlier. Difficult to exploit vulnerability allows high privileged attacker with logon to the infrastructure where MySQL Server executes to compromise MySQL Server. Successful attacks require human interaction from a person other than the attacker. Successful attacks of this vulnerability can result in takeover of MySQL Server. CVSS v3.0 Base Score 6.3 (Confidentiality, Integrity and Availability impacts). CVE-2017-3291 openSUSE Leap 42.1:libmysql56client18-32bit-5.6.35-22.1 openSUSE Leap 42.1:libmysql56client18-5.6.35-22.1 openSUSE Leap 42.1:libmysql56client_r18-32bit-5.6.35-22.1 openSUSE Leap 42.1:libmysql56client_r18-5.6.35-22.1 openSUSE Leap 42.1:mysql-community-server-5.6.35-22.1 openSUSE Leap 42.1:mysql-community-server-bench-5.6.35-22.1 openSUSE Leap 42.1:mysql-community-server-client-5.6.35-22.1 openSUSE Leap 42.1:mysql-community-server-errormessages-5.6.35-22.1 openSUSE Leap 42.1:mysql-community-server-test-5.6.35-22.1 openSUSE Leap 42.1:mysql-community-server-tools-5.6.35-22.1 moderate 6 AV:L/AC:H/Au:S/C:C/I:C/A:C Please Install the update. https://lists.opensuse.org/opensuse-security-announce/2017-02/msg00026.html https://www.suse.com/security/cve/CVE-2017-3291.html CVE-2017-3291 https://bugzilla.suse.com/1020868 SUSE Bug 1020868 https://bugzilla.suse.com/1020884 SUSE Bug 1020884 https://bugzilla.suse.com/998309 SUSE Bug 998309 Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Packaging). Supported versions that are affected are 5.5.53 and earlier, 5.6.34 and earlier and 5.7.16 and earlier. Difficult to exploit vulnerability allows low privileged attacker with logon to the infrastructure where MySQL Server executes to compromise MySQL Server. Successful attacks require human interaction from a person other than the attacker. Successful attacks of this vulnerability can result in takeover of MySQL Server. CVSS v3.0 Base Score 6.7 (Confidentiality, Integrity and Availability impacts). CVE-2017-3312 openSUSE Leap 42.1:libmysql56client18-32bit-5.6.35-22.1 openSUSE Leap 42.1:libmysql56client18-5.6.35-22.1 openSUSE Leap 42.1:libmysql56client_r18-32bit-5.6.35-22.1 openSUSE Leap 42.1:libmysql56client_r18-5.6.35-22.1 openSUSE Leap 42.1:mysql-community-server-5.6.35-22.1 openSUSE Leap 42.1:mysql-community-server-bench-5.6.35-22.1 openSUSE Leap 42.1:mysql-community-server-client-5.6.35-22.1 openSUSE Leap 42.1:mysql-community-server-errormessages-5.6.35-22.1 openSUSE Leap 42.1:mysql-community-server-test-5.6.35-22.1 openSUSE Leap 42.1:mysql-community-server-tools-5.6.35-22.1 moderate 6.2 AV:L/AC:H/Au:N/C:C/I:C/A:C Please Install the update. https://lists.opensuse.org/opensuse-security-announce/2017-02/msg00026.html https://www.suse.com/security/cve/CVE-2017-3312.html CVE-2017-3312 https://bugzilla.suse.com/1020868 SUSE Bug 1020868 https://bugzilla.suse.com/1020873 SUSE Bug 1020873 https://bugzilla.suse.com/998309 SUSE Bug 998309 Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: MyISAM). Supported versions that are affected are 5.5.53 and earlier, 5.6.34 and earlier and 5.7.16 and earlier. Difficult to exploit vulnerability allows low privileged attacker with logon to the infrastructure where MySQL Server executes to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all MySQL Server accessible data. CVSS v3.0 Base Score 4.7 (Confidentiality impacts). CVE-2017-3313 openSUSE Leap 42.1:libmysql56client18-32bit-5.6.35-22.1 openSUSE Leap 42.1:libmysql56client18-5.6.35-22.1 openSUSE Leap 42.1:libmysql56client_r18-32bit-5.6.35-22.1 openSUSE Leap 42.1:libmysql56client_r18-5.6.35-22.1 openSUSE Leap 42.1:mysql-community-server-5.6.35-22.1 openSUSE Leap 42.1:mysql-community-server-bench-5.6.35-22.1 openSUSE Leap 42.1:mysql-community-server-client-5.6.35-22.1 openSUSE Leap 42.1:mysql-community-server-errormessages-5.6.35-22.1 openSUSE Leap 42.1:mysql-community-server-test-5.6.35-22.1 openSUSE Leap 42.1:mysql-community-server-tools-5.6.35-22.1 low 3.8 AV:L/AC:H/Au:S/C:C/I:N/A:N Please Install the update. https://lists.opensuse.org/opensuse-security-announce/2017-02/msg00026.html https://www.suse.com/security/cve/CVE-2017-3313.html CVE-2017-3313 https://bugzilla.suse.com/1020868 SUSE Bug 1020868 https://bugzilla.suse.com/1020890 SUSE Bug 1020890 https://bugzilla.suse.com/1034911 SUSE Bug 1034911 Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Logging). Supported versions that are affected are 5.5.53 and earlier, 5.6.34 and earlier and 5.7.16 and earlier. Difficult to exploit vulnerability allows high privileged attacker with logon to the infrastructure where MySQL Server executes to compromise MySQL Server. Successful attacks require human interaction from a person other than the attacker. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS v3.0 Base Score 4.0 (Availability impacts). CVE-2017-3317 openSUSE Leap 42.1:libmysql56client18-32bit-5.6.35-22.1 openSUSE Leap 42.1:libmysql56client18-5.6.35-22.1 openSUSE Leap 42.1:libmysql56client_r18-32bit-5.6.35-22.1 openSUSE Leap 42.1:libmysql56client_r18-5.6.35-22.1 openSUSE Leap 42.1:mysql-community-server-5.6.35-22.1 openSUSE Leap 42.1:mysql-community-server-bench-5.6.35-22.1 openSUSE Leap 42.1:mysql-community-server-client-5.6.35-22.1 openSUSE Leap 42.1:mysql-community-server-errormessages-5.6.35-22.1 openSUSE Leap 42.1:mysql-community-server-test-5.6.35-22.1 openSUSE Leap 42.1:mysql-community-server-tools-5.6.35-22.1 low 3.8 AV:L/AC:H/Au:S/C:N/I:N/A:C Please Install the update. https://lists.opensuse.org/opensuse-security-announce/2017-02/msg00026.html https://www.suse.com/security/cve/CVE-2017-3317.html CVE-2017-3317 https://bugzilla.suse.com/1020868 SUSE Bug 1020868 https://bugzilla.suse.com/1020894 SUSE Bug 1020894 Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Error Handling). Supported versions that are affected are 5.5.53 and earlier, 5.6.34 and earlier and 5.7.16 and earlier. Difficult to exploit vulnerability allows high privileged attacker with logon to the infrastructure where MySQL Server executes to compromise MySQL Server. Successful attacks require human interaction from a person other than the attacker. Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all MySQL Server accessible data. CVSS v3.0 Base Score 4.0 (Confidentiality impacts). CVE-2017-3318 openSUSE Leap 42.1:libmysql56client18-32bit-5.6.35-22.1 openSUSE Leap 42.1:libmysql56client18-5.6.35-22.1 openSUSE Leap 42.1:libmysql56client_r18-32bit-5.6.35-22.1 openSUSE Leap 42.1:libmysql56client_r18-5.6.35-22.1 openSUSE Leap 42.1:mysql-community-server-5.6.35-22.1 openSUSE Leap 42.1:mysql-community-server-bench-5.6.35-22.1 openSUSE Leap 42.1:mysql-community-server-client-5.6.35-22.1 openSUSE Leap 42.1:mysql-community-server-errormessages-5.6.35-22.1 openSUSE Leap 42.1:mysql-community-server-test-5.6.35-22.1 openSUSE Leap 42.1:mysql-community-server-tools-5.6.35-22.1 low 1 AV:L/AC:H/Au:S/C:P/I:N/A:N Please Install the update. https://lists.opensuse.org/opensuse-security-announce/2017-02/msg00026.html https://www.suse.com/security/cve/CVE-2017-3318.html CVE-2017-3318 https://bugzilla.suse.com/1020868 SUSE Bug 1020868 https://bugzilla.suse.com/1020896 SUSE Bug 1020896