MySQL Server Security: Encryption Confidentiality Vulnerability

Successful exploitation may result in low-impact disclosure of confidential information. Available scoring indicates no integrity or availability impact.

Until patched, limit MySQL/MariaDB network exposure to trusted clients and administrative networks using host and network access controls. Do not expose database listener services directly to untrusted networks. These measures reduce attack surface but do not remediate the flaw.

Upgrade MySQL to a fixed release later than 5.5.48, 5.6.29, or 5.7.10, as applicable, or upgrade MariaDB to 5.5.49 or later, 10.0.25 or later, or 10.1.14 or later. For affected Red Hat deployments, install the applicable vendor security update; fixed package streams include MySQL 5.6.30, MySQL 5.5.50, MariaDB 5.5.49 or later, and the RHEL 7 MariaDB update containing 5.5.50-1.el7_2. Account for vendor security backports when assessing package versions.