cve/2017/CVE-2017-3302.md

### [CVE-2017-3302](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-3302)
![](https://img.shields.io/static/v1?label=Product&message=MySQL%20Server&color=blue)
![](https://img.shields.io/static/v1?label=Version&message=%3D%205.5.54%20and%20earlier%20&color=brighgreen)
![](https://img.shields.io/static/v1?label=Vulnerability&message=Difficult%20to%20exploit%20vulnerability%20allows%20unauthenticated%20attacker%20with%20logon%20to%20the%20infrastructure%20where%20MySQL%20Server%20executes%20to%20compromise%20MySQL%20Server.%20%20Successful%20attacks%20of%20this%20vulnerability%20can%20result%20in%20unauthorized%20ability%20to%20cause%20a%20hang%20or%20frequently%20repeatable%20crash%20(complete%20DOS)%20of%20MySQL%20Server.&color=brighgreen)

### Description

Crash in libmysqlclient.so in Oracle MySQL before 5.6.21 and 5.7.x before 5.7.5 and MariaDB through 5.5.54, 10.0.x through 10.0.29, 10.1.x through 10.1.21, and 10.2.x through 10.2.3.

### POC

#### Reference
- http://www.oracle.com/technetwork/security-advisory/cpuapr2017-3236618.html

#### Github
- https://github.com/ARPSyndicate/cvemon