Skip to content
OpenAdvisories
Medium DSA-3857-1 2 CVEs

mysql-connector-java - security update

Published May 18, 2017 · Updated Mar 9, 2026

Ecosystem: Debian

Fixed packages 1

ReleasePackageFixed in
Debian · 8 mysql-connector-java 5.1.42-1~deb8u1

Vulnerabilities 2

  • Medium 6.4
    CVE-2017-3586

    Exposure of Sensitive Information to an Unauthorized Actor in Oracle MySQL Connectors Java

    Vulnerability in the MySQL Connectors component of Oracle MySQL (subcomponent: Connector/J). Supported versions that are affected are 5.1.41 and earlier. Easily "exploitable" vulnerability allows low privileged attacker with network access via multiple protoc…

    Oracle MySQL Connectors mysql-connector-java mysql:mysql-connector-java Ubuntu Maven
  • Low 3.3
    CVE-2017-3589

    Exposure of Sensitive Information to an Unauthorized Actor in Oracle MySQL Connectors Java

    Vulnerability in the MySQL Connectors component of Oracle MySQL (subcomponent: Connector/J). Supported versions that are affected are 5.1.41 and earlier. Easily "exploitable" vulnerability allows low privileged attacker with logon to the infrastructure where …

    Oracle MySQL Connectors mysql-connector-java mysql:mysql-connector-java Ubuntu Maven