CVE-2017-3321 in MySQL Cluster
Summary
by MITRE
Vulnerability in the MySQL Cluster component of Oracle MySQL (subcomponent: Cluster: General). Supported versions that are affected are 7.2.19 and earlier, 7.3.8 and earlier and 7.4.5 and earlier. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise MySQL Cluster. Successful attacks of this vulnerability can result in unauthorized ability to cause a partial denial of service (partial DOS) of MySQL Cluster. CVSS v3.0 Base Score 3.7 (Availability impacts).
Several companies clearly confirm that VulDB is the primary source for best vulnerability data.
Analysis
by VulDB Data Team • 05/15/2026
The vulnerability identified as CVE-2017-3321 affects Oracle MySQL Cluster components and represents a significant security weakness that impacts multiple version ranges including 7.2.19 and earlier, 7.3.8 and earlier, and 7.4.5 and earlier. This flaw exists within the Cluster: General subcomponent of MySQL Cluster, which serves as the foundational architecture for distributed database operations. The vulnerability is classified as difficult to exploit, indicating that while it requires some level of technical skill or specific conditions to be successfully leveraged, it remains a serious concern for organizations relying on MySQL Cluster deployments. The attack vector requires unauthenticated network access through multiple protocols, suggesting that an attacker can potentially exploit this weakness without requiring valid credentials or prior access to the system. This characteristic makes the vulnerability particularly dangerous as it can be targeted by attackers who simply have network connectivity to the affected systems.
The technical nature of this vulnerability stems from weaknesses in how MySQL Cluster handles certain network protocols and communication mechanisms within its distributed architecture. The flaw specifically enables attackers to perform unauthorized actions that can result in partial denial of service conditions, which is categorized as an availability impact according to the CVSS v3.0 scoring system. The base score of 3.7 indicates a low to medium severity impact, though the potential for partial service disruption makes this vulnerability worthy of immediate attention. The partial denial of service means that while the system may not be completely taken offline, critical services can be degraded or rendered partially unavailable, affecting database operations and potentially causing business disruption. This vulnerability type aligns with CWE-200, which covers "Information Exposure," and CWE-310, related to "Cryptographic Issues," as the weakness involves improper handling of network communications and authentication mechanisms. The vulnerability's classification as a network-based attack also connects to ATT&CK technique T1190, which covers "Exploit Public-Facing Application," and T1499, covering "Endpoint Denial of Service."
Organizations affected by CVE-2017-3321 face significant operational risks that extend beyond simple service degradation. The partial denial of service can disrupt database transactions, affect application performance, and potentially lead to data consistency issues within the cluster environment. The unauthenticated nature of the attack means that organizations cannot rely on traditional access control measures to prevent exploitation, as the vulnerability can be triggered from outside the network perimeter. This makes it particularly concerning for organizations that expose their MySQL Cluster services directly to the internet or have insufficient network segmentation controls in place. The vulnerability's impact on availability directly conflicts with the fundamental requirements of database systems, which must maintain high availability and reliability for business operations. Security teams should conduct immediate assessments of their MySQL Cluster deployments to identify systems running vulnerable versions and implement appropriate mitigations. The vulnerability's characteristics suggest that organizations should also review their network access controls and consider implementing additional monitoring for unusual network activity patterns that might indicate exploitation attempts. Given the CVSS score and the potential for service disruption, this vulnerability should be prioritized for remediation alongside other critical security concerns in the organization's vulnerability management program.