CVE-2017-10155

What it actually does

Allows unauthenticated network attackers to trigger a hang or repeatable crash in the MySQL Server pluggable authentication component, resulting in complete denial of service.

Why it matters to the business

Database services can experience sudden unplanned outages that interrupt dependent applications and require manual restarts, increasing operational workload for teams managing older MySQL deployments or packages that embed the vulnerable component.

How an attack unfolds

An attacker with network reachability sends crafted authentication requests over supported protocols to the pluggable auth subsystem; the server processes the input and crashes or hangs without requiring credentials.

How to fix it

Upgrade MySQL Server to versions later than 5.6.37 and 5.7.19. For the affected packages update golangci-lint (Chainguard) and golangci-lint (Wolfi) to 1.58.1-r0.

How to confirm the fix worked

Confirm MySQL server version strings no longer match the vulnerable ranges, then perform connectivity tests that previously triggered the crash to verify stability.

Typical attack path

1. Locate publicly reachable MySQL instances
2. Establish a network connection using any supported protocol
3. Transmit malformed authentication packets targeting the pluggable auth component
4. Observe server process termination or hang

How to detect it

Examine MySQL error logs and process crash reports for repeated abrupt terminations coinciding with authentication attempts from untrusted sources.

What your security team should do

• Apply the listed package and MySQL version updates immediately on all reachable instances
• Restrict network access to database ports to trusted sources only
• Review error and crash logs for prior incidents matching the described symptoms