# CVE-2017-3317: Oracle MySQL and MariaDB denial of service in Logging component

Source: https://junglewise.ai/threats/cve-2017-3317-oracle-mysql-and-mariadb-denial-of-service-in-logging-component  
Publisher: Junglewise Threat Intelligence, https://junglewise.ai/threats  
Published: 2017-01-27. Updated: 2026-05-13  
License: CC BY 4.0 with a link back

CVE-2017-3317 · Severity: medium · CVSS 4 · Published 2017-01-27

A vulnerability in the logging component of MySQL and MariaDB database servers can allow a high-privileged local user to cause a denial-of-service. An attacker with existing access to the underlying server infrastructure could cause the database to hang or crash repeatedly. This would disrupt business operations by making data unavailable to applications and users.

Technologies: [Oracle MySQL Server](https://junglewise.ai/threats/technologies/mysql-server). Vendors: [Oracle](https://junglewise.ai/threats/vendors/oracle).

## Quick answers

**Is CVE-2017-3317 exploited in the wild?** No. Junglewise Threat Intelligence has no report of CVE-2017-3317 being exploited in the wild.

**How severe is CVE-2017-3317?** Medium severity, with a CVSS score of 4, published 27 January 2017.

**Which products and versions are affected?** Oracle MySQL Server 5.5.53 and earlier, 5.6.34 and earlier, 5.7.16 and earlier.

**Is there a fix for CVE-2017-3317?** A patch was published on 2017-01-19: Debian released fixed mysql-5.5 packages Junglewise finds every place you run it, drafts the upgrade and applies it once you approve.

**How is CVE-2017-3317 attacked?** It is attacked with local access, in a software library.

**Am I affected by CVE-2017-3317?** Check whether you run Oracle MySQL Server at an affected version. Junglewise does that check for you around the clock: connect your code, cloud and domains, and it matches new vulnerabilities like this one against what you actually run and tells you when one reaches you.

## Technical details

This vulnerability exists in the Logging subcomponent of MySQL Server and MariaDB. It is classified as difficult to exploit, requiring a high-privileged attacker with local access to the infrastructure where the database executes. Exploitation requires human interaction from a person other than the attacker. A successful exploit results in a complete denial-of-service (DoS) by causing the server to hang or crash repeatedly. The issue has been addressed in MySQL versions 5.5.54, 5.6.35, and 5.7.17, as well as MariaDB versions 5.5.54, 10.0.29, and 10.1.21.

## Affected products

- Oracle MySQL Server 5.5.53 and earlier, 5.6.34 and earlier, 5.7.16 and earlier
- MariaDB Foundation MariaDB 5.5.0 before 5.5.54, 10.0.0 before 10.0.29, 10.1.0 before 10.1.21

## Timeline

- 2017-01-17: advisory: Oracle Critical Patch Update (CPU) January 2017 released
- 2017-01-19: patched: Debian released fixed mysql-5.5 packages
- 2017-01-22: patched: Debian released fixed mariadb-10.0 packages
- 2017-01-27: disclosed: NVD publication date

## References

- [http://www.debian.org/security/2017/dsa-3767](http://www.debian.org/security/2017/dsa-3767)
- [http://www.debian.org/security/2017/dsa-3770](http://www.debian.org/security/2017/dsa-3770)
- [http://www.oracle.com/technetwork/security-advisory/cpujan2017-2881727.html](http://www.oracle.com/technetwork/security-advisory/cpujan2017-2881727.html)
- [http://www.securityfocus.com/bid/95585](http://www.securityfocus.com/bid/95585)
- [http://www.securitytracker.com/id/1037640](http://www.securitytracker.com/id/1037640)
- [https://access.redhat.com/errata/RHSA-2017:2192](https://access.redhat.com/errata/RHSA-2017:2192)
- [https://access.redhat.com/errata/RHSA-2017:2787](https://access.redhat.com/errata/RHSA-2017:2787)

## Related threats

- [Oracle MySQL Server XML parsing privilege escalation](https://junglewise.ai/threats/cve-2026-101803-vulnerability-in-the-mysql-server-mysql-cluster-product-of)
- [Oracle MySQL Server parser denial of service](https://junglewise.ai/threats/cve-2026-101802-vulnerability-in-the-mysql-server-mysql-cluster-product-of)
- [Oracle MySQL Server Optimizer denial of service](https://junglewise.ai/threats/cve-2026-101801-vulnerability-in-the-mysql-server-mysql-cluster-product-of)
- [Oracle MySQL Server privilege escalation in Security: Privileges](https://junglewise.ai/threats/cve-2026-101800-vulnerability-in-the-mysql-server-mysql-cluster-product-of)
- [Oracle MySQL Server denial of service in Group Replication](https://junglewise.ai/threats/cve-2026-101799-vulnerability-in-the-mysql-server-mysql-cluster-product-of)