Skip to content
OpenAdvisories
High DLA-945-1 3 CVEs

mysql-connector-java - security update

Published May 16, 2017 · Updated Mar 9, 2026

Ecosystem: Debian

Fixed packages 1

ReleasePackageFixed in
Debian · 7 mysql-connector-java 5.1.42-1~deb7u1

Vulnerabilities 3

  • High 8.5
    CVE-2017-3523

    Improper Access Control in MySQL Connectors Java

    Vulnerability in the MySQL Connectors component of Oracle MySQL (subcomponent: Connector/J). Supported versions that are affected are 5.1.40 and earlier. Difficult to exploit vulnerability allows low privileged attacker with network access via multiple protoc…

    Oracle MySQL Connectors mysql-connector-java mysql:mysql-connector-java Ubuntu Maven
  • Medium 6.4
    CVE-2017-3586

    Exposure of Sensitive Information to an Unauthorized Actor in Oracle MySQL Connectors Java

    Vulnerability in the MySQL Connectors component of Oracle MySQL (subcomponent: Connector/J). Supported versions that are affected are 5.1.41 and earlier. Easily "exploitable" vulnerability allows low privileged attacker with network access via multiple protoc…

    Oracle MySQL Connectors mysql-connector-java mysql:mysql-connector-java Ubuntu Maven
  • Low 3.3
    CVE-2017-3589

    Exposure of Sensitive Information to an Unauthorized Actor in Oracle MySQL Connectors Java

    Vulnerability in the MySQL Connectors component of Oracle MySQL (subcomponent: Connector/J). Supported versions that are affected are 5.1.41 and earlier. Easily "exploitable" vulnerability allows low privileged attacker with logon to the infrastructure where …

    Oracle MySQL Connectors mysql-connector-java mysql:mysql-connector-java Ubuntu Maven