CVE-2017-3467: Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: C API).

Security readout for executives and security teams

This is a low-severity MySQL Server confidentiality issue affecting Oracle MySQL 5.7.17 and earlier. A remote unauthenticated attacker could, under difficult conditions, read a limited subset of accessible MySQL data. Integrity and availability impacts are not described in the provided sources. Exposure is most likely on systems still running MySQL Server 5.7.17 or earlier, especially where MySQL is reachable over network protocols. The provided sources do not identify other affected products or branches. Handle through normal vulnerability management, with acceleration for exposed databases or systems holding sensitive data. The business concern is limited unauthorized data disclosure, not service disruption, and the evidence does not support an active exploitation claim. Mitigation focus: Identify MySQL Server instances running 5.7.17 or earlier.; Apply the relevant Oracle CPU or Red Hat advisory updates.; Restrict MySQL network access to trusted hosts only..

Prepared

Jun 13, 2026, 05:18 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.