Django REST framework

Vulnerability Instance

Lookup for vulnerabilities affecting packages.

Vulnerability_idVCID-j7uc-c14d-nqac
Summary
Multiple vulnerabilities were found in MySQL, the worst of which
    may allow remote execution of arbitrary code.
Aliases
0
alias CVE-2017-3599
Fixed_packages
0
url pkg:ebuild/dev-db/mysql@5.6.39
purl pkg:ebuild/dev-db/mysql@5.6.39
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:ebuild/dev-db/mysql@5.6.39
Affected_packages
0
url pkg:rpm/redhat/rh-mysql56-mysql@5.6.37-5?arch=el7
purl pkg:rpm/redhat/rh-mysql56-mysql@5.6.37-5?arch=el7
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-1gmc-pj6y-rkfx
1
vulnerability VCID-2gyq-q761-h3br
2
vulnerability VCID-2rf6-qaey-1ubn
3
vulnerability VCID-2za2-cnwx-hbbw
4
vulnerability VCID-4cnj-7fur-3qe3
5
vulnerability VCID-4yz4-vxnh-b3dp
6
vulnerability VCID-52w9-bgxr-nkba
7
vulnerability VCID-5sjj-599v-vybg
8
vulnerability VCID-6g4n-3xfu-hfee
9
vulnerability VCID-6nfa-zy2p-zkdj
10
vulnerability VCID-8p2f-ab4e-yyd1
11
vulnerability VCID-9f48-53dz-13an
12
vulnerability VCID-9w98-nfg2-muh2
13
vulnerability VCID-9y4c-n9n1-r3ff
14
vulnerability VCID-bhxk-8byp-eyap
15
vulnerability VCID-f8p4-hpsh-2fcw
16
vulnerability VCID-j7uc-c14d-nqac
17
vulnerability VCID-jgff-4jyp-9fgr
18
vulnerability VCID-mde2-1ynu-auh2
19
vulnerability VCID-mz71-vku8-ckbm
20
vulnerability VCID-n2gx-t138-9bgc
21
vulnerability VCID-nj41-1zpw-gkh9
22
vulnerability VCID-nxh7-fuvk-pqc8
23
vulnerability VCID-p623-gxyv-g7fs
24
vulnerability VCID-pv92-6p9x-v7bs
25
vulnerability VCID-r2cz-9kjz-zbgu
26
vulnerability VCID-rssq-mfc2-ckaf
27
vulnerability VCID-tf68-atyj-b7cj
28
vulnerability VCID-tyes-eb5w-jqfa
29
vulnerability VCID-u2c7-p86x-5bgf
30
vulnerability VCID-un5y-y9sq-1ufb
31
vulnerability VCID-v165-afmm-w3er
32
vulnerability VCID-v4gv-g9n5-ukgc
33
vulnerability VCID-vfhu-cx61-77f1
34
vulnerability VCID-wrna-cc9g-sqbe
35
vulnerability VCID-x241-zyjq-ebah
36
vulnerability VCID-xyuf-au4f-57fr
resource_url http://public2.vulnerablecode.io/packages/pkg:rpm/redhat/rh-mysql56-mysql@5.6.37-5%3Farch=el7
1
url pkg:rpm/redhat/rh-mysql56-mysql@5.6.37-5?arch=el6
purl pkg:rpm/redhat/rh-mysql56-mysql@5.6.37-5?arch=el6
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-1gmc-pj6y-rkfx
1
vulnerability VCID-2gyq-q761-h3br
2
vulnerability VCID-2rf6-qaey-1ubn
3
vulnerability VCID-2za2-cnwx-hbbw
4
vulnerability VCID-4cnj-7fur-3qe3
5
vulnerability VCID-4yz4-vxnh-b3dp
6
vulnerability VCID-52w9-bgxr-nkba
7
vulnerability VCID-5sjj-599v-vybg
8
vulnerability VCID-6g4n-3xfu-hfee
9
vulnerability VCID-6nfa-zy2p-zkdj
10
vulnerability VCID-8p2f-ab4e-yyd1
11
vulnerability VCID-9f48-53dz-13an
12
vulnerability VCID-9w98-nfg2-muh2
13
vulnerability VCID-9y4c-n9n1-r3ff
14
vulnerability VCID-bhxk-8byp-eyap
15
vulnerability VCID-f8p4-hpsh-2fcw
16
vulnerability VCID-j7uc-c14d-nqac
17
vulnerability VCID-jgff-4jyp-9fgr
18
vulnerability VCID-mde2-1ynu-auh2
19
vulnerability VCID-mz71-vku8-ckbm
20
vulnerability VCID-n2gx-t138-9bgc
21
vulnerability VCID-nj41-1zpw-gkh9
22
vulnerability VCID-nxh7-fuvk-pqc8
23
vulnerability VCID-p623-gxyv-g7fs
24
vulnerability VCID-pv92-6p9x-v7bs
25
vulnerability VCID-r2cz-9kjz-zbgu
26
vulnerability VCID-rssq-mfc2-ckaf
27
vulnerability VCID-tf68-atyj-b7cj
28
vulnerability VCID-tyes-eb5w-jqfa
29
vulnerability VCID-u2c7-p86x-5bgf
30
vulnerability VCID-un5y-y9sq-1ufb
31
vulnerability VCID-v165-afmm-w3er
32
vulnerability VCID-v4gv-g9n5-ukgc
33
vulnerability VCID-vfhu-cx61-77f1
34
vulnerability VCID-wrna-cc9g-sqbe
35
vulnerability VCID-x241-zyjq-ebah
36
vulnerability VCID-xyuf-au4f-57fr
resource_url http://public2.vulnerablecode.io/packages/pkg:rpm/redhat/rh-mysql56-mysql@5.6.37-5%3Farch=el6
2
url pkg:rpm/redhat/rh-mysql57-mysql@5.7.19-6?arch=el7
purl pkg:rpm/redhat/rh-mysql57-mysql@5.7.19-6?arch=el7
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-1wku-281z-pkg2
1
vulnerability VCID-2gyq-q761-h3br
2
vulnerability VCID-2rf6-qaey-1ubn
3
vulnerability VCID-2za2-cnwx-hbbw
4
vulnerability VCID-3mvb-yszd-sqcr
5
vulnerability VCID-4yz4-vxnh-b3dp
6
vulnerability VCID-5sjj-599v-vybg
7
vulnerability VCID-67sx-dk4r-yfb6
8
vulnerability VCID-6g4n-3xfu-hfee
9
vulnerability VCID-6nfa-zy2p-zkdj
10
vulnerability VCID-8p2f-ab4e-yyd1
11
vulnerability VCID-9f48-53dz-13an
12
vulnerability VCID-9w98-nfg2-muh2
13
vulnerability VCID-9y4c-n9n1-r3ff
14
vulnerability VCID-aj47-bgya-33e8
15
vulnerability VCID-apdj-21j8-33gc
16
vulnerability VCID-bhxk-8byp-eyap
17
vulnerability VCID-cpmw-6wnf-5fhu
18
vulnerability VCID-exub-t1nc-n3a6
19
vulnerability VCID-f8p4-hpsh-2fcw
20
vulnerability VCID-fb3q-pxc2-qqdz
21
vulnerability VCID-j7uc-c14d-nqac
22
vulnerability VCID-jdcu-4mpq-1far
23
vulnerability VCID-jgff-4jyp-9fgr
24
vulnerability VCID-jh1g-h62w-3yhd
25
vulnerability VCID-mde2-1ynu-auh2
26
vulnerability VCID-mna9-kjfu-xkcn
27
vulnerability VCID-mz71-vku8-ckbm
28
vulnerability VCID-n2gx-t138-9bgc
29
vulnerability VCID-nfxj-pb12-xfbc
30
vulnerability VCID-nj41-1zpw-gkh9
31
vulnerability VCID-nsam-w1d3-pbdb
32
vulnerability VCID-nxh7-fuvk-pqc8
33
vulnerability VCID-p623-gxyv-g7fs
34
vulnerability VCID-pv92-6p9x-v7bs
35
vulnerability VCID-py18-tg4u-h3d2
36
vulnerability VCID-pyk1-dgtz-h7fw
37
vulnerability VCID-qrk5-6ryp-wkce
38
vulnerability VCID-r1ah-dt43-3kc4
39
vulnerability VCID-rg55-f36d-3ybb
40
vulnerability VCID-rssq-mfc2-ckaf
41
vulnerability VCID-tf68-atyj-b7cj
42
vulnerability VCID-tyes-eb5w-jqfa
43
vulnerability VCID-u2c7-p86x-5bgf
44
vulnerability VCID-uc9j-1fjq-e7et
45
vulnerability VCID-un5y-y9sq-1ufb
46
vulnerability VCID-v165-afmm-w3er
47
vulnerability VCID-v4gv-g9n5-ukgc
48
vulnerability VCID-vfhu-cx61-77f1
49
vulnerability VCID-w1u1-r49p-yycs
50
vulnerability VCID-w8a7-1nnk-kub5
51
vulnerability VCID-wjfw-kksb-a7aw
52
vulnerability VCID-wnkm-c1tm-53bb
53
vulnerability VCID-wrna-cc9g-sqbe
54
vulnerability VCID-x4j5-9wz1-k3ba
55
vulnerability VCID-xm6s-rath-87av
56
vulnerability VCID-xyuf-au4f-57fr
57
vulnerability VCID-zx7y-1ubr-byhu
resource_url http://public2.vulnerablecode.io/packages/pkg:rpm/redhat/rh-mysql57-mysql@5.7.19-6%3Farch=el7
3
url pkg:rpm/redhat/rh-mysql57-mysql@5.7.19-6?arch=el6
purl pkg:rpm/redhat/rh-mysql57-mysql@5.7.19-6?arch=el6
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-1wku-281z-pkg2
1
vulnerability VCID-2gyq-q761-h3br
2
vulnerability VCID-2rf6-qaey-1ubn
3
vulnerability VCID-2za2-cnwx-hbbw
4
vulnerability VCID-3mvb-yszd-sqcr
5
vulnerability VCID-4yz4-vxnh-b3dp
6
vulnerability VCID-5sjj-599v-vybg
7
vulnerability VCID-67sx-dk4r-yfb6
8
vulnerability VCID-6g4n-3xfu-hfee
9
vulnerability VCID-6nfa-zy2p-zkdj
10
vulnerability VCID-8p2f-ab4e-yyd1
11
vulnerability VCID-9f48-53dz-13an
12
vulnerability VCID-9w98-nfg2-muh2
13
vulnerability VCID-9y4c-n9n1-r3ff
14
vulnerability VCID-aj47-bgya-33e8
15
vulnerability VCID-apdj-21j8-33gc
16
vulnerability VCID-bhxk-8byp-eyap
17
vulnerability VCID-cpmw-6wnf-5fhu
18
vulnerability VCID-exub-t1nc-n3a6
19
vulnerability VCID-f8p4-hpsh-2fcw
20
vulnerability VCID-fb3q-pxc2-qqdz
21
vulnerability VCID-j7uc-c14d-nqac
22
vulnerability VCID-jdcu-4mpq-1far
23
vulnerability VCID-jgff-4jyp-9fgr
24
vulnerability VCID-jh1g-h62w-3yhd
25
vulnerability VCID-mde2-1ynu-auh2
26
vulnerability VCID-mna9-kjfu-xkcn
27
vulnerability VCID-mz71-vku8-ckbm
28
vulnerability VCID-n2gx-t138-9bgc
29
vulnerability VCID-nfxj-pb12-xfbc
30
vulnerability VCID-nj41-1zpw-gkh9
31
vulnerability VCID-nsam-w1d3-pbdb
32
vulnerability VCID-nxh7-fuvk-pqc8
33
vulnerability VCID-p623-gxyv-g7fs
34
vulnerability VCID-pv92-6p9x-v7bs
35
vulnerability VCID-py18-tg4u-h3d2
36
vulnerability VCID-pyk1-dgtz-h7fw
37
vulnerability VCID-qrk5-6ryp-wkce
38
vulnerability VCID-r1ah-dt43-3kc4
39
vulnerability VCID-rg55-f36d-3ybb
40
vulnerability VCID-rssq-mfc2-ckaf
41
vulnerability VCID-tf68-atyj-b7cj
42
vulnerability VCID-tyes-eb5w-jqfa
43
vulnerability VCID-u2c7-p86x-5bgf
44
vulnerability VCID-uc9j-1fjq-e7et
45
vulnerability VCID-un5y-y9sq-1ufb
46
vulnerability VCID-v165-afmm-w3er
47
vulnerability VCID-v4gv-g9n5-ukgc
48
vulnerability VCID-vfhu-cx61-77f1
49
vulnerability VCID-w1u1-r49p-yycs
50
vulnerability VCID-w8a7-1nnk-kub5
51
vulnerability VCID-wjfw-kksb-a7aw
52
vulnerability VCID-wnkm-c1tm-53bb
53
vulnerability VCID-wrna-cc9g-sqbe
54
vulnerability VCID-x4j5-9wz1-k3ba
55
vulnerability VCID-xm6s-rath-87av
56
vulnerability VCID-xyuf-au4f-57fr
57
vulnerability VCID-zx7y-1ubr-byhu
resource_url http://public2.vulnerablecode.io/packages/pkg:rpm/redhat/rh-mysql57-mysql@5.7.19-6%3Farch=el6
References
0
reference_url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-3599.json
reference_id
reference_type
scores
0
value 7.5
scoring_system cvssv3
scoring_elements CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-3599.json
1
reference_url https://api.first.org/data/v1/epss?cve=CVE-2017-3599
reference_id
reference_type
scores
0
value 0.87337
scoring_system epss
scoring_elements 0.99457
published_at 2026-04-18T12:55:00Z
1
value 0.87337
scoring_system epss
scoring_elements 0.99448
published_at 2026-04-04T12:55:00Z
2
value 0.87337
scoring_system epss
scoring_elements 0.99447
published_at 2026-04-02T12:55:00Z
3
value 0.87337
scoring_system epss
scoring_elements 0.9945
published_at 2026-04-07T12:55:00Z
4
value 0.87337
scoring_system epss
scoring_elements 0.99451
published_at 2026-04-08T12:55:00Z
5
value 0.87337
scoring_system epss
scoring_elements 0.99452
published_at 2026-04-09T12:55:00Z
6
value 0.87337
scoring_system epss
scoring_elements 0.99453
published_at 2026-04-11T12:55:00Z
7
value 0.87337
scoring_system epss
scoring_elements 0.99454
published_at 2026-04-13T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2017-3599
2
reference_url https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml
reference_id
reference_type
scores
0
value 2.6
scoring_system cvssv2
scoring_elements AV:N/AC:H/Au:N/C:N/I:N/A:P
url https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml
3
reference_url https://www.exploit-db.com/exploits/41954/
reference_id
reference_type
scores
0
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:Y/T:P/P:M/B:A/M:M/D:T/2024-10-04T16:19:42Z/
url https://www.exploit-db.com/exploits/41954/
4
reference_url https://www.secforce.com/blog/2017/04/cve-2017-3599-pre-auth-mysql-remote-dos/
reference_id
reference_type
scores
0
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:Y/T:P/P:M/B:A/M:M/D:T/2024-10-04T16:19:42Z/
url https://www.secforce.com/blog/2017/04/cve-2017-3599-pre-auth-mysql-remote-dos/
5
reference_url http://www.oracle.com/technetwork/security-advisory/cpuapr2017-3236618.html
reference_id
reference_type
scores
0
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:Y/T:P/P:M/B:A/M:M/D:T/2024-10-04T16:19:42Z/
url http://www.oracle.com/technetwork/security-advisory/cpuapr2017-3236618.html
6
reference_url http://www.securityfocus.com/bid/97754
reference_id
reference_type
scores
0
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:Y/T:P/P:M/B:A/M:M/D:T/2024-10-04T16:19:42Z/
url http://www.securityfocus.com/bid/97754
7
reference_url http://www.securitytracker.com/id/1038287
reference_id
reference_type
scores
0
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:Y/T:P/P:M/B:A/M:M/D:T/2024-10-04T16:19:42Z/
url http://www.securitytracker.com/id/1038287
8
reference_url https://bugzilla.redhat.com/show_bug.cgi?id=1443386
reference_id 1443386
reference_type
scores
url https://bugzilla.redhat.com/show_bug.cgi?id=1443386
9
reference_url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:oracle:mysql:*:*:*:*:*:*:*:*
reference_id cpe:2.3:a:oracle:mysql:*:*:*:*:*:*:*:*
reference_type
scores
url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:oracle:mysql:*:*:*:*:*:*:*:*
10
reference_url https://github.com/SECFORCE/CVE-2017-3599/blob/575707b35ab6b18fe87577392fc45b036f46e217/cve-2017-3599_poc.py
reference_id CVE-2017-3599
reference_type exploit
scores
url https://github.com/SECFORCE/CVE-2017-3599/blob/575707b35ab6b18fe87577392fc45b036f46e217/cve-2017-3599_poc.py
11
reference_url https://gitlab.com/exploit-database/exploitdb/-/blob/main/exploits/multiple/dos/41954.py
reference_id CVE-2017-3599
reference_type exploit
scores
url https://gitlab.com/exploit-database/exploitdb/-/blob/main/exploits/multiple/dos/41954.py
12
reference_url https://nvd.nist.gov/vuln/detail/CVE-2017-3599
reference_id CVE-2017-3599
reference_type
scores
0
value 7.8
scoring_system cvssv2
scoring_elements AV:N/AC:L/Au:N/C:N/I:N/A:C
1
value 7.5
scoring_system cvssv3
scoring_elements CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
url https://nvd.nist.gov/vuln/detail/CVE-2017-3599
13
reference_url https://security.gentoo.org/glsa/201802-04
reference_id GLSA-201802-04
reference_type
scores
url https://security.gentoo.org/glsa/201802-04
14
reference_url https://access.redhat.com/errata/RHSA-2017:2787
reference_id RHSA-2017:2787
reference_type
scores
0
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:Y/T:P/P:M/B:A/M:M/D:T/2024-10-04T16:19:42Z/
url https://access.redhat.com/errata/RHSA-2017:2787
15
reference_url https://access.redhat.com/errata/RHSA-2017:2886
reference_id RHSA-2017:2886
reference_type
scores
0
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:Y/T:P/P:M/B:A/M:M/D:T/2024-10-04T16:19:42Z/
url https://access.redhat.com/errata/RHSA-2017:2886
16
reference_url https://usn.ubuntu.com/3269-1/
reference_id USN-3269-1
reference_type
scores
url https://usn.ubuntu.com/3269-1/
Weaknesses
0
cwe_id 190
name Integer Overflow or Wraparound
description The product performs a calculation that can produce an integer overflow or wraparound, when the logic assumes that the resulting value will always be larger than the original value. This can introduce other weaknesses when the calculation is used for resource management or execution control.
Exploits
0
date_added 2017-05-01
description MySQL < 5.6.35 / < 5.7.17 - Integer Overflow
required_action null
due_date null
notes null
known_ransomware_campaign_use true
source_date_published 2017-05-01
exploit_type dos
platform multiple
source_date_updated 2017-09-18
data_source Exploit-DB
source_url https://github.com/SECFORCE/CVE-2017-3599/blob/575707b35ab6b18fe87577392fc45b036f46e217/cve-2017-3599_poc.py
Severity_range_score2.6 - 7.8
Exploitability2.0
Weighted_severity7.0
Risk_score10.0
Resource_urlhttp://public2.vulnerablecode.io/vulnerabilities/VCID-j7uc-c14d-nqac