CVE-2017-10313: Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Group Replication GCS).

Security readout for executives and security teams

CVE-2017-10313 can let a highly privileged network attacker crash or hang affected MySQL Server instances. The business impact is service availability, not data theft or tampering based on the supplied CVSS vector. Systems running MySQL Server 5.7.19 or earlier deserve review, especially where database availability supports production services. Exposure is most likely in environments running Oracle MySQL Server 5.7.19 or earlier, especially where Group Replication GCS is present and privileged database access is reachable over the network. Treat this as a targeted availability risk. It is not described as remote unauthenticated compromise, but production databases on affected versions should be patched or vendor-reviewed because successful exploitation can repeatedly crash MySQL Server. Mitigation focus: Check Oracle October 2017 CPU guidance for applicable MySQL fixes.; Check downstream vendor advisories, including Red Hat and NetApp where relevant.; Upgrade affected MySQL 5.7.19 or earlier systems per vendor guidance..

Prepared

Jun 12, 2026, 20:36 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.