CVE-2017-14477

CRITICAL 9.8CVE-2017-14477 · Published 09/05/2018 · updated 17/06/2026

In short

CVE-2017-14477 is a CRITICAL (CVSS 9.8) vulnerability affecting mysql multi-master replication manager (mysql-mmm).
Chance of exploitation in the next 30 days (EPSS): 6.0%, higher than 93.3% of all vulnerabilities.
No patched version is listed yet: follow the vendor's advisory in References.

Package	Affected versions	Patched versions
mysql multi-master replication manager mysql-mmm	`= 2.2.1`	No fix yet

Description

In the MMM::Agent::Helpers::Network::add_ip function in MySQL Multi-Master Replication Manager (MMM) mmm_agentd 2.2.1 (for FreeBSD), a specially crafted MMM protocol message can cause a shell command injection resulting in arbitrary command execution with the privileges of the mmm\_agentd process. An attacker that can initiate a TCP session with mmm\_agentd can trigger this vulnerability.

References

talosintelligence.com/vulnerability_reports/TALOS-2017-0501 · Exploit

More vulnerabilities in mysql multi-master replication manager

See all →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free

Package

Affected versions

Patched versions

mysql multi-master replication manager

mysql-mmm

= 2.2.1

No fix yet

Description

More vulnerabilities in mysql multi-master replication manager

See all →