Vulnerability

CVE-2017-3645

MEDIUM 4.9

CVE-2017-3645 is a medium-severity vulnerability (CVSS v3.0 4.9). As of 2026-10-11, 35 490 hosts in our data show software it affects on an open service in at least 15 countries.

Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Optimizer). Supported versions that are affected are 5.7.18 and earlier. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.0 Base Score 4.9 (Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H).

Published
2017-08-08
Last modified
2026-06-17
CVSS score
4.9 CVSS v3.0
CVSS vector (v3.0)
CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H
Exploit likelihood (EPSS)
2.4% in the next 30 days (top 17% of CVEs)

Exposure in our data

35 490 hosts

Hosts whose banner shows an affected software version on a service open at their latest check.

Not counted: 712 hosts with this CVE only from an older observation.

Not counted: 2 hosts where the software version is too vague to tell (only a major release).

Not counted: 923 more on distribution builds that may be patched (the distribution may have backported the fix without changing the version).

825 more hosts had it earlier (the software version has since changed or the service is gone).

Counted 2026-10-11 04:20 UTC

By country

China CN22 617
United States US4 088
Hong Kong HK1 664
South Korea KR1 257
Russia RU794
Japan JP766
Singapore SG530
Türkiye TR528
India IN460
Taiwan TW286
Brazil BR267
Malaysia MY226
Serbia RS226
Indonesia ID221
Canada CA184

Affected software seen

mysql 5.6.505 733
mysql 5.6.514 654
mysql 5.5.623 259
mysql 5.1.732 011
mysql 5.6.161 575
mysql 5.5.18.1770
mysql 5.7.17681
mysql 5.6.25515
mysql 5.6.49497
mysql 5.7.12463
mysql 5.7.18405
mysql 5.6.43376