Vulnerability

CVE-2017-10286

MEDIUM 4.4

CVE-2017-10286 is a medium-severity vulnerability (CVSS v3.1 4.4). As of 2026-11-11, 9 659 hosts in our data show software it affects on an open service in at least 15 countries.

Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: InnoDB). Supported versions that are affected are 5.6.37 and earlier and 5.7.19 and earlier. Difficult to exploit vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.0 Base Score 4.4 (Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:H).

Published
2017-10-19
Last modified
2026-06-17
CVSS score
4.4 CVSS v3.1
CVSS vector (v3.1)
CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:H
Exploit likelihood (EPSS)
2.4% in the next 30 days (top 16% of CVEs)

Exposure in our data

9 659 hosts

Hosts whose banner shows an affected software version on a service open at their latest check.

Not counted: 49 hosts with this CVE only from an older observation.

Not counted: 240 more on distribution builds that may be patched (the distribution may have backported the fix without changing the version).

404 more hosts had it earlier (the software version has since changed or the service is gone).

Counted 2026-11-11 04:20 UTC

By country

China CN5 898
United States US1 182
South Korea KR665
Hong Kong HK265
Japan JP173
India IN149
Brazil BR140
Singapore SG122
Taiwan TW115
Russia RU103
Canada CA100
Serbia RS93
Indonesia ID87
Türkiye TR82
Australia AU63

Affected software seen

mysql 5.6.161 619
mysql 5.7.17733
mysql 5.6.25531
mysql 5.7.12468
mysql 5.7.18431
mysql 5.7.19417
mysql 5.7.16384
mysql 5.6.21323
mysql 5.6.35259
mysql 5.6.37227
mysql 5.6.36218
mysql 5.7.11203