Vulnerability
CVE-2017-3302
CVE-2017-3302 is a high-severity vulnerability (CVSS v3.0 7.5). As of 2026-11-08, 3 482 hosts in our data show software it affects on an open service in at least 15 countries.
Crash in libmysqlclient.so in Oracle MySQL before 5.6.21 and 5.7.x before 5.7.5 and MariaDB through 5.5.54, 10.0.x through 10.0.29, 10.1.x through 10.1.21, and 10.2.x through 10.2.3.
- Published
- 2017-02-12
- Last modified
- 2026-06-17
- CVSS score
- 7.5 CVSS v3.0
- CVSS vector (v3.0)
- CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
- Exploit likelihood (EPSS)
- 4.9% in the next 30 days (top 8% of CVEs)
Exposure in our data
3 482 hosts
Hosts whose banner shows an affected software version on a service open at their latest check.
Not counted: 29 hosts with this CVE only from an older observation.
Not counted: 102 more on distribution builds that may be patched (the distribution may have backported the fix without changing the version).
5 587 more hosts had it earlier (the software version has since changed or the service is gone).
Counted 2026-11-08 04:20 UTC
By country
| China CN | 2 035 |
| United States US | 382 |
| South Korea KR | 289 |
| India IN | 106 |
| Hong Kong HK | 96 |
| Canada CA | 74 |
| Indonesia ID | 48 |
| Japan JP | 46 |
| Russia RU | 44 |
| Australia AU | 36 |
| Singapore SG | 32 |
| Türkiye TR | 32 |
| Taiwan TW | 32 |
| Thailand TH | 30 |
| Brazil BR | 24 |
Affected software seen
| mysql 5.6.16 | 1 619 |
| mariadb 10.1.21 | 197 |
| mysql 5.6.17 | 177 |
| mysql 5.6.14 | 118 |
| mariadb 10.1.19 | 95 |
| mysql 5.6.20 | 94 |
| mysql 5.6.10 | 92 |
| mysql 5.6.15 | 79 |
| mariadb 10.1.14 | 77 |
| mariadb 5.5.52 | 67 |
| mariadb 5.5.32 | 62 |
| mariadb 5.5.44 | 47 |