CVE-2017-3638: Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Optimizer).

Security readout for executives and security teams

CVE-2017-3638 is a denial-of-service flaw in Oracle MySQL Server. A highly privileged user who can reach MySQL over the network could cause the database to hang or crash repeatedly. The business risk is service interruption, not data theft or integrity compromise, based on the supplied CVSS vector. Exposure is most likely where MySQL Server 5.7.18 or earlier remains deployed and reachable by privileged database users over supported network protocols. Internet exposure matters less than who has high-privilege MySQL access, but network segmentation still reduces opportunity. Handle as a moderate availability risk. Prioritize systems supporting customer-facing or business-critical workflows, especially older MySQL deployments with broad administrative access. This does not appear to be a confidentiality or integrity issue from the supplied evidence. Mitigation focus: Identify and upgrade affected MySQL Server 5.7.18 and earlier deployments using vendor guidance.; Review Oracle July 2017 CPU guidance for the applicable fixed MySQL release.; For Red Hat packages, review RHSA-2017:2886 and apply the relevant update..

Prepared

Jun 12, 2026, 21:41 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.