Staging Environment: Content and features may be unstable or change without notice.
Search for vulnerabilities
Vulnerability details: VCID-rssq-mfc2-ckaf
Vulnerability ID VCID-rssq-mfc2-ckaf
Aliases CVE-2017-3258
Summary Multiple vulnerabilities have been found in MariaDB, the worst of which could lead to privilege escalation.
Status Published
Exploitability 0.5
Weighted Severity 5.9
Risk 3.0
Affected and Fixed Packages Package Details
Weaknesses (0)
There are no known CWE.
System Score Found at
ssvc Track https://access.redhat.com/errata/RHSA-2017:2192
ssvc Track https://access.redhat.com/errata/RHSA-2017:2787
ssvc Track https://access.redhat.com/errata/RHSA-2017:2886
ssvc Track https://access.redhat.com/errata/RHSA-2018:0279
ssvc Track https://access.redhat.com/errata/RHSA-2018:0574
cvssv3 6.5 https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-3258.json
epss 0.00312 https://api.first.org/data/v1/epss?cve=CVE-2017-3258
epss 0.00312 https://api.first.org/data/v1/epss?cve=CVE-2017-3258
epss 0.00312 https://api.first.org/data/v1/epss?cve=CVE-2017-3258
epss 0.00312 https://api.first.org/data/v1/epss?cve=CVE-2017-3258
epss 0.00312 https://api.first.org/data/v1/epss?cve=CVE-2017-3258
epss 0.00312 https://api.first.org/data/v1/epss?cve=CVE-2017-3258
epss 0.00312 https://api.first.org/data/v1/epss?cve=CVE-2017-3258
epss 0.00312 https://api.first.org/data/v1/epss?cve=CVE-2017-3258
epss 0.00312 https://api.first.org/data/v1/epss?cve=CVE-2017-3258
cvssv2 6.8 https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml
cvssv3.1 6.5 https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml
ssvc Track https://security.gentoo.org/glsa/201702-17
ssvc Track https://security.gentoo.org/glsa/201702-18
ssvc Track http://www.debian.org/security/2017/dsa-3767
ssvc Track http://www.debian.org/security/2017/dsa-3770
ssvc Track http://www.oracle.com/technetwork/security-advisory/cpujan2017-2881727.html
ssvc Track http://www.securityfocus.com/bid/95560
ssvc Track http://www.securitytracker.com/id/1037640
Reference id Reference type URL
https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-3258.json
https://api.first.org/data/v1/epss?cve=CVE-2017-3258
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-6664
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-3238
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-3243
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-3244
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-3257
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-3258
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-3265
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-3291
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-3312
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-3313
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-3317
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-3318
https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml
1414351 https://bugzilla.redhat.com/show_bug.cgi?id=1414351
95560 http://www.securityfocus.com/bid/95560
cpujan2017-2881727.html http://www.oracle.com/technetwork/security-advisory/cpujan2017-2881727.html
dsa-3767 http://www.debian.org/security/2017/dsa-3767
dsa-3770 http://www.debian.org/security/2017/dsa-3770
GLSA-201702-17 https://security.gentoo.org/glsa/201702-17
GLSA-201702-18 https://security.gentoo.org/glsa/201702-18
RHSA-2017:2192 https://access.redhat.com/errata/RHSA-2017:2192
RHSA-2017:2787 https://access.redhat.com/errata/RHSA-2017:2787
RHSA-2017:2886 https://access.redhat.com/errata/RHSA-2017:2886
RHSA-2018:0279 https://access.redhat.com/errata/RHSA-2018:0279
RHSA-2018:0574 https://access.redhat.com/errata/RHSA-2018:0574
USN-3174-1 https://usn.ubuntu.com/3174-1/
No exploits are available.
Vector: SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2024-10-09T19:30:10Z/ Found at https://access.redhat.com/errata/RHSA-2017:2192
Vector: SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2024-10-09T19:30:10Z/ Found at https://access.redhat.com/errata/RHSA-2017:2787
Vector: SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2024-10-09T19:30:10Z/ Found at https://access.redhat.com/errata/RHSA-2017:2886
Vector: SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2024-10-09T19:30:10Z/ Found at https://access.redhat.com/errata/RHSA-2018:0279
Vector: SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2024-10-09T19:30:10Z/ Found at https://access.redhat.com/errata/RHSA-2018:0574
Vector: CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H Found at https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-3258.json
Attack Vector (AV) Attack Complexity (AC) Privileges Required (PR) User Interaction (UI) Scope (S) Confidentiality Impact (C) Integrity Impact (I) Availability Impact (A)

network

adjacent_network

local

physical

low

high

none

low

high

none

required

unchanged

changed

high

low

none

high

low

none

high

low

none
Vector: AV:N/AC:L/Au:S/C:N/I:N/A:C Found at https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml
Exploitability (E) Access Vector (AV) Access Complexity (AC) Authentication (Au) Confidentiality Impact (C) Integrity Impact (I) Availability Impact (A)

high

functional

unproven

proof_of_concept

not_defined

local

adjacent_network

network

high

medium

low

multiple

single

none

none

partial

complete

none

partial

complete

none

partial

complete
Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H Found at https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml
Attack Vector (AV) Attack Complexity (AC) Privileges Required (PR) User Interaction (UI) Scope (S) Confidentiality Impact (C) Integrity Impact (I) Availability Impact (A)

network

adjacent_network

local

physical

low

high

none

low

high

none

required

unchanged

changed

high

low

none

high

low

none

high

low

none
Vector: SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2024-10-09T19:30:10Z/ Found at https://security.gentoo.org/glsa/201702-17
Vector: SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2024-10-09T19:30:10Z/ Found at https://security.gentoo.org/glsa/201702-18
Vector: SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2024-10-09T19:30:10Z/ Found at http://www.debian.org/security/2017/dsa-3767
Vector: SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2024-10-09T19:30:10Z/ Found at http://www.debian.org/security/2017/dsa-3770
Vector: SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2024-10-09T19:30:10Z/ Found at http://www.oracle.com/technetwork/security-advisory/cpujan2017-2881727.html
Vector: SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2024-10-09T19:30:10Z/ Found at http://www.securityfocus.com/bid/95560
Vector: SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2024-10-09T19:30:10Z/ Found at http://www.securitytracker.com/id/1037640
Exploit Prediction Scoring System (EPSS)
Percentile 0.54327
EPSS Score 0.00312
Published At April 1, 2026, 12:55 p.m.
Date Actor Action Source VulnerableCode Version
2026-04-01T12:58:42.696697+00:00 Gentoo Importer Import https://security.gentoo.org/glsa/201702-18 38.0.0