Candidate: CVE-2017-3590
PublicDate: 2017-04-24 19:59:00 UTC
References:
 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-3590
 http://www.oracle.com/technetwork/security-advisory/cpuapr2017-3236618.html
Description:
 Vulnerability in the MySQL Connectors component of Oracle MySQL
 (subcomponent: Connector/Python). Supported versions that are affected are
 2.1.5 and earlier. Easily "exploitable" vulnerability allows low privileged
 attacker with logon to the infrastructure where MySQL Connectors executes
 to compromise MySQL Connectors. Successful attacks of this vulnerability
 can result in unauthorized update, insert or delete access to some of MySQL
 Connectors accessible data. CVSS 3.0 Base Score 3.3 (Integrity impacts).
 CVSS Vector: (CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N).
Ubuntu-Description:
Notes:
Bugs:
Priority: low
Discovered-by:
Assigned-to:
CVSS:
 nvd: CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N [3.3 LOW]

Patches_mysql-connector-python:
upstream_mysql-connector-python: released (2.1.6-1)
precise_mysql-connector-python: ignored (reached end-of-life)
precise/esm_mysql-connector-python: DNE (precise was needs-triage)
trusty_mysql-connector-python: ignored (reached end-of-life)
trusty/esm_mysql-connector-python: DNE (trusty was needed)
vivid/stable-phone-overlay_mysql-connector-python: DNE
vivid/ubuntu-core_mysql-connector-python: DNE
xenial_mysql-connector-python: ignored (end of standard support, was needed)
yakkety_mysql-connector-python: ignored (reached end-of-life)
zesty_mysql-connector-python: ignored (reached end-of-life)
artful_mysql-connector-python: ignored (reached end-of-life)
bionic_mysql-connector-python: not-affected (2.1.6-1)
cosmic_mysql-connector-python: not-affected (2.1.6-1)
disco_mysql-connector-python: not-affected (2.1.6-1)
eoan_mysql-connector-python: not-affected (2.1.6-1)
focal_mysql-connector-python: not-affected (2.1.6-1)
groovy_mysql-connector-python: not-affected (2.1.6-1)
hirsute_mysql-connector-python: not-affected (2.1.6-1)
impish_mysql-connector-python: not-affected (2.1.6-1)
jammy_mysql-connector-python: not-affected (2.1.6-1)
devel_mysql-connector-python: not-affected (2.1.6-1)