CVE-2017-3322 in MySQL Cluster
Summary
by MITRE
Vulnerability in the MySQL Cluster component of Oracle MySQL (subcomponent: Cluster: NDBAPI). Supported versions that are affected are 7.2.25 and earlier, 7.3.14 and earlier, 7.4.12 and earlier and . Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise MySQL Cluster. Successful attacks of this vulnerability can result in unauthorized ability to cause a partial denial of service (partial DOS) of MySQL Cluster. CVSS v3.0 Base Score 3.7 (Availability impacts).
Once again VulDB remains the best source for vulnerability data.
Analysis
by VulDB Data Team • 05/15/2026
The vulnerability identified as CVE-2017-3322 resides within the MySQL Cluster component of Oracle MySQL, specifically within the Cluster: NDBAPI subcomponent. This flaw affects multiple version ranges including 7.2.25 and earlier, 7.3.14 and earlier, and 7.4.12 and earlier versions, representing a significant attack surface across the MySQL Cluster ecosystem. The vulnerability's classification as difficult to exploit indicates that while the attack vector requires some level of technical expertise, the accessibility of the flaw through multiple network protocols creates a substantial risk for potential attackers. The vulnerability's CVSS v3.0 base score of 3.7 reflects its availability impact severity, placing it in the low to medium severity range but still representing a meaningful threat to system availability.
The technical nature of this vulnerability stems from weaknesses in the NDBAPI implementation within MySQL Cluster, which serves as the application programming interface for accessing the NDB storage engine. This API layer provides programmatic access to the distributed database functionality that characterizes MySQL Cluster deployments. The flaw manifests in how the system handles certain network requests or API calls, potentially allowing an unauthenticated attacker to manipulate the cluster's operational state. The partial denial of service impact suggests that while the attacker cannot completely shut down the system, they can disrupt specific services or reduce the cluster's operational capacity. This type of vulnerability represents a classic availability attack vector that can significantly impact business operations and data accessibility.
The operational impact of CVE-2017-3322 extends beyond simple service disruption, as MySQL Cluster deployments often form critical components of high-availability database infrastructures. Organizations relying on MySQL Cluster for mission-critical applications face potential data unavailability or performance degradation that could cascade into broader business impacts. The vulnerability's ability to be exploited through multiple protocols indicates that attackers can potentially leverage various attack vectors, increasing the likelihood of successful exploitation. This characteristic aligns with ATT&CK technique T1499.001 for network denial of service attacks, where attackers target availability through protocol-level vulnerabilities. The partial DOS impact specifically relates to CWE-400 weakness categories involving resource exhaustion or system instability, where the cluster's ability to maintain consistent service availability is compromised.
Mitigation strategies for this vulnerability should prioritize immediate patching of affected versions, as Oracle would have released security updates addressing the NDBAPI implementation flaws. Organizations should implement network segmentation and access controls to limit exposure to the affected cluster components, reducing the attack surface available to unauthenticated attackers. Monitoring and logging mechanisms should be enhanced to detect unusual patterns in API calls or network traffic that might indicate exploitation attempts. The vulnerability's characteristics align with the need for robust network security controls and regular vulnerability assessment procedures, as outlined in cybersecurity frameworks such as NIST SP 800-53. Additionally, implementing intrusion detection systems and network monitoring tools can provide early warning capabilities for potential exploitation attempts. Organizations should also consider conducting security assessments to identify and remediate similar vulnerabilities in other database components and ensure comprehensive coverage of their MySQL Cluster deployments.