Vulnerability-Lookup

RHSA-2016:2595

Vulnerability from csaf_opensuse - Published: 2016-11-03 00:00 - Updated: 2026-09-20 10:57

Summary

security update for mariadb

Severity

Important

Notes

Title of the patch: security update for mariadb

Description of the patch: This security update provides a functional equivalent of RHSA-2016:2595. The original Red Hat(R) advisory is available from the Red Hat web site at https://access.redhat.com/errata/RHSA-2016:2595.

Patchnames: RHSA-2016:2595

CVE-2016-3492

6.5 (Medium)


                
                  CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Affected products

Recommended 12 products

Product	Version	Remediation
Unresolved product id: SUSE Liberty Linux 7:mariadb-1:5.5.52-1.el7.x86_64	—	Vendor Fix
Unresolved product id: SUSE Liberty Linux 7:mariadb-bench-1:5.5.52-1.el7.x86_64	—	Vendor Fix
Unresolved product id: SUSE Liberty Linux 7:mariadb-devel-1:5.5.52-1.el7.i686	—	Vendor Fix
Unresolved product id: SUSE Liberty Linux 7:mariadb-devel-1:5.5.52-1.el7.x86_64	—	Vendor Fix
Unresolved product id: SUSE Liberty Linux 7:mariadb-embedded-1:5.5.52-1.el7.i686	—	Vendor Fix
Unresolved product id: SUSE Liberty Linux 7:mariadb-embedded-1:5.5.52-1.el7.x86_64	—	Vendor Fix
Unresolved product id: SUSE Liberty Linux 7:mariadb-embedded-devel-1:5.5.52-1.el7.i686	—	Vendor Fix
Unresolved product id: SUSE Liberty Linux 7:mariadb-embedded-devel-1:5.5.52-1.el7.x86_64	—	Vendor Fix
Unresolved product id: SUSE Liberty Linux 7:mariadb-libs-1:5.5.52-1.el7.i686	—	Vendor Fix
Unresolved product id: SUSE Liberty Linux 7:mariadb-libs-1:5.5.52-1.el7.x86_64	—	Vendor Fix
Unresolved product id: SUSE Liberty Linux 7:mariadb-server-1:5.5.52-1.el7.x86_64	—	Vendor Fix
Unresolved product id: SUSE Liberty Linux 7:mariadb-test-1:5.5.52-1.el7.x86_64	—	Vendor Fix

Threats

Impact moderate

CVE-2016-5612

6.5 (Medium)


                
                  CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Affected products

Recommended 12 products, the same list as for CVE-2016-3492

Threats

Impact moderate

CVE-2016-5616

Affected products

Recommended 12 products, the same list as for CVE-2016-3492

Threats

Impact moderate

CVE-2016-5624

6.5 (Medium)


                
                  CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Affected products

Recommended 12 products, the same list as for CVE-2016-3492

Threats

Impact moderate

CVE-2016-5626

6.5 (Medium)


                
                  CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Affected products

Recommended 12 products, the same list as for CVE-2016-3492

Threats

Impact moderate

CVE-2016-5629

4.9 (Medium)


                
                  CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H

Affected products

Recommended 12 products, the same list as for CVE-2016-3492

Threats

Impact moderate

CVE-2016-6662

9.8 (Critical)


                
                  CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Affected products

Recommended 12 products, the same list as for CVE-2016-3492

Threats

Impact important

CVE-2016-6663

7 (High)


                
                  CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H

Affected products

Recommended 12 products, the same list as for CVE-2016-3492

Threats

Impact moderate

CVE-2016-8283

4.3 (Medium)


                
                  CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L

Affected products

Recommended 12 products, the same list as for CVE-2016-3492

Threats

Impact moderate

References

43 references

URL	Category
https://www.suse.com/support/security/rating/	external
https://ftp.suse.com/pub/projects/security/csaf/r…	self
https://www.suse.com/security/cve/CVE-2016-3492/	self
https://www.suse.com/security/cve/CVE-2016-5612/	self
https://www.suse.com/security/cve/CVE-2016-5616/	self
https://www.suse.com/security/cve/CVE-2016-5624/	self
https://www.suse.com/security/cve/CVE-2016-5626/	self
https://www.suse.com/security/cve/CVE-2016-5629/	self
https://www.suse.com/security/cve/CVE-2016-6662/	self
https://www.suse.com/security/cve/CVE-2016-6663/	self
https://www.suse.com/security/cve/CVE-2016-8283/	self
https://www.suse.com/security/cve/CVE-2016-3492	external
https://bugzilla.suse.com/1005555	external
https://bugzilla.suse.com/1008318	external
https://www.suse.com/security/cve/CVE-2016-5612	external
https://bugzilla.suse.com/1005561	external
https://www.suse.com/security/cve/CVE-2016-5616	external
https://bugzilla.suse.com/1005562	external
https://www.suse.com/security/cve/CVE-2016-5624	external
https://bugzilla.suse.com/1005564	external
https://bugzilla.suse.com/1008318	external
https://www.suse.com/security/cve/CVE-2016-5626	external
https://bugzilla.suse.com/1005566	external
https://bugzilla.suse.com/1008318	external
https://www.suse.com/security/cve/CVE-2016-5629	external
https://bugzilla.suse.com/1005569	external
https://bugzilla.suse.com/1008318	external
https://www.suse.com/security/cve/CVE-2016-6662	external
https://bugzilla.suse.com/1001367	external
https://bugzilla.suse.com/1005580	external
https://bugzilla.suse.com/1020873	external
https://bugzilla.suse.com/1020884	external
https://bugzilla.suse.com/1021755	external
https://bugzilla.suse.com/998309	external
https://www.suse.com/security/cve/CVE-2016-6663	external
https://bugzilla.suse.com/1001367	external
https://bugzilla.suse.com/1008253	external
https://bugzilla.suse.com/1008318	external
https://bugzilla.suse.com/1021755	external
https://bugzilla.suse.com/998309	external
https://www.suse.com/security/cve/CVE-2016-8283	external
https://bugzilla.suse.com/1005582	external
https://bugzilla.suse.com/1008318	external

JSON

To clipboard

{
  "document": {
    "aggregate_severity": {
      "namespace": "https://www.suse.com/support/security/rating/",
      "text": "Important"
    },
    "category": "csaf_security_advisory",
    "csaf_version": "2.0",
    "distribution": {
      "text": "Copyright 2024 SUSE LLC. All rights reserved.",
      "tlp": {
        "label": "WHITE",
        "url": "https://www.first.org/tlp/"
      }
    },
    "lang": "en",
    "notes": [
      {
        "category": "summary",
        "text": "security update for mariadb",
        "title": "Title of the patch"
      },
      {
        "category": "description",
        "text": "This security update provides a functional equivalent of RHSA-2016:2595.\nThe original Red Hat(R) advisory is available from the Red Hat web site at\nhttps://access.redhat.com/errata/RHSA-2016:2595.\n",
        "title": "Description of the patch"
      },
      {
        "category": "details",
        "text": "RHSA-2016:2595",
        "title": "Patchnames"
      },
      {
        "category": "legal_disclaimer",
        "text": "CSAF 2.0 data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).",
        "title": "Terms of use"
      }
    ],
    "publisher": {
      "category": "vendor",
      "contact_details": "https://www.suse.com/support/security/contact/",
      "name": "SUSE Product Security Team",
      "namespace": "https://www.suse.com/"
    },
    "references": [
      {
        "category": "external",
        "summary": "SUSE ratings",
        "url": "https://www.suse.com/support/security/rating/"
      },
      {
        "category": "self",
        "summary": "URL of this CSAF notice",
        "url": "https://ftp.suse.com/pub/projects/security/csaf/rhsa-2016_2595.json"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2016-3492 page",
        "url": "https://www.suse.com/security/cve/CVE-2016-3492/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2016-5612 page",
        "url": "https://www.suse.com/security/cve/CVE-2016-5612/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2016-5616 page",
        "url": "https://www.suse.com/security/cve/CVE-2016-5616/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2016-5624 page",
        "url": "https://www.suse.com/security/cve/CVE-2016-5624/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2016-5626 page",
        "url": "https://www.suse.com/security/cve/CVE-2016-5626/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2016-5629 page",
        "url": "https://www.suse.com/security/cve/CVE-2016-5629/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2016-6662 page",
        "url": "https://www.suse.com/security/cve/CVE-2016-6662/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2016-6663 page",
        "url": "https://www.suse.com/security/cve/CVE-2016-6663/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2016-8283 page",
        "url": "https://www.suse.com/security/cve/CVE-2016-8283/"
      }
    ],
    "title": "security update for mariadb",
    "tracking": {
      "current_release_date": "2026-09-20T10:57:38Z",
      "generator": {
        "date": "2016-11-03T00:00:00Z",
        "engine": {
          "name": "cve-database.git:bin/generate-csaf.pl",
          "version": "1"
        }
      },
      "id": "RHSA-2016:2595",
      "initial_release_date": "2016-11-03T00:00:00Z",
      "revision_history": [
        {
          "date": "2016-11-03T00:00:00Z",
          "number": "1",
          "summary": "Current version"
        },
        {
          "date": "2026-09-20T10:57:38Z",
          "number": "2",
          "summary": "unknown changes"
        }
      ],
      "status": "final",
      "version": "2"
    }
  },
  "product_tree": {
    "branches": [
      {
        "branches": [
          {
            "branches": [
              {
                "category": "product_version",
                "name": "mariadb-devel-1:5.5.52-1.el7.i686",
                "product": {
                  "name": "mariadb-devel-1:5.5.52-1.el7.i686",
                  "product_id": "mariadb-devel-1:5.5.52-1.el7.i686",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/suse/mariadb-devel@5.5.52-1.el7?arch=i686\u0026epoch=1"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "mariadb-embedded-1:5.5.52-1.el7.i686",
                "product": {
                  "name": "mariadb-embedded-1:5.5.52-1.el7.i686",
                  "product_id": "mariadb-embedded-1:5.5.52-1.el7.i686",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/suse/mariadb-embedded@5.5.52-1.el7?arch=i686\u0026epoch=1"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "mariadb-embedded-devel-1:5.5.52-1.el7.i686",
                "product": {
                  "name": "mariadb-embedded-devel-1:5.5.52-1.el7.i686",
                  "product_id": "mariadb-embedded-devel-1:5.5.52-1.el7.i686",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/suse/mariadb-embedded-devel@5.5.52-1.el7?arch=i686\u0026epoch=1"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "mariadb-libs-1:5.5.52-1.el7.i686",
                "product": {
                  "name": "mariadb-libs-1:5.5.52-1.el7.i686",
                  "product_id": "mariadb-libs-1:5.5.52-1.el7.i686",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/suse/mariadb-libs@5.5.52-1.el7?arch=i686\u0026epoch=1"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "i686"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "mariadb-1:5.5.52-1.el7.x86_64",
                "product": {
                  "name": "mariadb-1:5.5.52-1.el7.x86_64",
                  "product_id": "mariadb-1:5.5.52-1.el7.x86_64",
                  "product_identification_helper": {
                    "cpe": "cpe:2.3:a:mariadb:mariadb:5.5.52:*:*:*:*:*:*:*",
                    "purl": "pkg:rpm/suse/mariadb@5.5.52-1.el7?arch=x86_64\u0026epoch=1\u0026upstream=mariadb-1:5.5.52-1.el7.src.rpm"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "mariadb-bench-1:5.5.52-1.el7.x86_64",
                "product": {
                  "name": "mariadb-bench-1:5.5.52-1.el7.x86_64",
                  "product_id": "mariadb-bench-1:5.5.52-1.el7.x86_64",
                  "product_identification_helper": {
                    "cpe": "cpe:2.3:a:mariadb:mariadb:5.5.52:*:*:*:*:*:*:*",
                    "purl": "pkg:rpm/suse/mariadb-bench@5.5.52-1.el7?arch=x86_64\u0026epoch=1\u0026upstream=mariadb-1:5.5.52-1.el7.src.rpm"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "mariadb-devel-1:5.5.52-1.el7.x86_64",
                "product": {
                  "name": "mariadb-devel-1:5.5.52-1.el7.x86_64",
                  "product_id": "mariadb-devel-1:5.5.52-1.el7.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/suse/mariadb-devel@5.5.52-1.el7?arch=x86_64\u0026epoch=1"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "mariadb-embedded-1:5.5.52-1.el7.x86_64",
                "product": {
                  "name": "mariadb-embedded-1:5.5.52-1.el7.x86_64",
                  "product_id": "mariadb-embedded-1:5.5.52-1.el7.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/suse/mariadb-embedded@5.5.52-1.el7?arch=x86_64\u0026epoch=1"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "mariadb-embedded-devel-1:5.5.52-1.el7.x86_64",
                "product": {
                  "name": "mariadb-embedded-devel-1:5.5.52-1.el7.x86_64",
                  "product_id": "mariadb-embedded-devel-1:5.5.52-1.el7.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/suse/mariadb-embedded-devel@5.5.52-1.el7?arch=x86_64\u0026epoch=1"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "mariadb-libs-1:5.5.52-1.el7.x86_64",
                "product": {
                  "name": "mariadb-libs-1:5.5.52-1.el7.x86_64",
                  "product_id": "mariadb-libs-1:5.5.52-1.el7.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/suse/mariadb-libs@5.5.52-1.el7?arch=x86_64\u0026epoch=1"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "mariadb-server-1:5.5.52-1.el7.x86_64",
                "product": {
                  "name": "mariadb-server-1:5.5.52-1.el7.x86_64",
                  "product_id": "mariadb-server-1:5.5.52-1.el7.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/suse/mariadb-server@5.5.52-1.el7?arch=x86_64\u0026epoch=1"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "mariadb-test-1:5.5.52-1.el7.x86_64",
                "product": {
                  "name": "mariadb-test-1:5.5.52-1.el7.x86_64",
                  "product_id": "mariadb-test-1:5.5.52-1.el7.x86_64",
                  "product_identification_helper": {
                    "cpe": "cpe:2.3:a:mariadb:mariadb:5.5.52:*:*:*:*:*:*:*",
                    "purl": "pkg:rpm/suse/mariadb-test@5.5.52-1.el7?arch=x86_64\u0026epoch=1\u0026upstream=mariadb-1:5.5.52-1.el7.src.rpm"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "x86_64"
          },
          {
            "branches": [
              {
                "category": "product_name",
                "name": "SUSE Liberty Linux 7",
                "product": {
                  "name": "SUSE Liberty Linux 7",
                  "product_id": "SUSE Liberty Linux 7",
                  "product_identification_helper": {
                    "cpe": "cpe:/o:suse:sll:7"
                  }
                }
              }
            ],
            "category": "product_family",
            "name": "SUSE Linux Enterprise"
          }
        ],
        "category": "vendor",
        "name": "SUSE"
      }
    ],
    "relationships": [
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "mariadb-1:5.5.52-1.el7.x86_64 as component of SUSE Liberty Linux 7",
          "product_id": "SUSE Liberty Linux 7:mariadb-1:5.5.52-1.el7.x86_64"
        },
        "product_reference": "mariadb-1:5.5.52-1.el7.x86_64",
        "relates_to_product_reference": "SUSE Liberty Linux 7"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "mariadb-bench-1:5.5.52-1.el7.x86_64 as component of SUSE Liberty Linux 7",
          "product_id": "SUSE Liberty Linux 7:mariadb-bench-1:5.5.52-1.el7.x86_64"
        },
        "product_reference": "mariadb-bench-1:5.5.52-1.el7.x86_64",
        "relates_to_product_reference": "SUSE Liberty Linux 7"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "mariadb-devel-1:5.5.52-1.el7.i686 as component of SUSE Liberty Linux 7",
          "product_id": "SUSE Liberty Linux 7:mariadb-devel-1:5.5.52-1.el7.i686"
        },
        "product_reference": "mariadb-devel-1:5.5.52-1.el7.i686",
        "relates_to_product_reference": "SUSE Liberty Linux 7"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "mariadb-devel-1:5.5.52-1.el7.x86_64 as component of SUSE Liberty Linux 7",
          "product_id": "SUSE Liberty Linux 7:mariadb-devel-1:5.5.52-1.el7.x86_64"
        },
        "product_reference": "mariadb-devel-1:5.5.52-1.el7.x86_64",
        "relates_to_product_reference": "SUSE Liberty Linux 7"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "mariadb-embedded-1:5.5.52-1.el7.i686 as component of SUSE Liberty Linux 7",
          "product_id": "SUSE Liberty Linux 7:mariadb-embedded-1:5.5.52-1.el7.i686"
        },
        "product_reference": "mariadb-embedded-1:5.5.52-1.el7.i686",
        "relates_to_product_reference": "SUSE Liberty Linux 7"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "mariadb-embedded-1:5.5.52-1.el7.x86_64 as component of SUSE Liberty Linux 7",
          "product_id": "SUSE Liberty Linux 7:mariadb-embedded-1:5.5.52-1.el7.x86_64"
        },
        "product_reference": "mariadb-embedded-1:5.5.52-1.el7.x86_64",
        "relates_to_product_reference": "SUSE Liberty Linux 7"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "mariadb-embedded-devel-1:5.5.52-1.el7.i686 as component of SUSE Liberty Linux 7",
          "product_id": "SUSE Liberty Linux 7:mariadb-embedded-devel-1:5.5.52-1.el7.i686"
        },
        "product_reference": "mariadb-embedded-devel-1:5.5.52-1.el7.i686",
        "relates_to_product_reference": "SUSE Liberty Linux 7"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "mariadb-embedded-devel-1:5.5.52-1.el7.x86_64 as component of SUSE Liberty Linux 7",
          "product_id": "SUSE Liberty Linux 7:mariadb-embedded-devel-1:5.5.52-1.el7.x86_64"
        },
        "product_reference": "mariadb-embedded-devel-1:5.5.52-1.el7.x86_64",
        "relates_to_product_reference": "SUSE Liberty Linux 7"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "mariadb-libs-1:5.5.52-1.el7.i686 as component of SUSE Liberty Linux 7",
          "product_id": "SUSE Liberty Linux 7:mariadb-libs-1:5.5.52-1.el7.i686"
        },
        "product_reference": "mariadb-libs-1:5.5.52-1.el7.i686",
        "relates_to_product_reference": "SUSE Liberty Linux 7"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "mariadb-libs-1:5.5.52-1.el7.x86_64 as component of SUSE Liberty Linux 7",
          "product_id": "SUSE Liberty Linux 7:mariadb-libs-1:5.5.52-1.el7.x86_64"
        },
        "product_reference": "mariadb-libs-1:5.5.52-1.el7.x86_64",
        "relates_to_product_reference": "SUSE Liberty Linux 7"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "mariadb-server-1:5.5.52-1.el7.x86_64 as component of SUSE Liberty Linux 7",
          "product_id": "SUSE Liberty Linux 7:mariadb-server-1:5.5.52-1.el7.x86_64"
        },
        "product_reference": "mariadb-server-1:5.5.52-1.el7.x86_64",
        "relates_to_product_reference": "SUSE Liberty Linux 7"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "mariadb-test-1:5.5.52-1.el7.x86_64 as component of SUSE Liberty Linux 7",
          "product_id": "SUSE Liberty Linux 7:mariadb-test-1:5.5.52-1.el7.x86_64"
        },
        "product_reference": "mariadb-test-1:5.5.52-1.el7.x86_64",
        "relates_to_product_reference": "SUSE Liberty Linux 7"
      }
    ]
  },
  "vulnerabilities": [
    {
      "cve": "CVE-2016-3492",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2016-3492"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "Unspecified vulnerability in Oracle MySQL 5.5.51 and earlier, 5.6.32 and earlier, and 5.7.14 and earlier allows remote authenticated users to affect availability via vectors related to Server: Optimizer.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Liberty Linux 7:mariadb-1:5.5.52-1.el7.x86_64",
          "SUSE Liberty Linux 7:mariadb-bench-1:5.5.52-1.el7.x86_64",
          "SUSE Liberty Linux 7:mariadb-devel-1:5.5.52-1.el7.i686",
          "SUSE Liberty Linux 7:mariadb-devel-1:5.5.52-1.el7.x86_64",
          "SUSE Liberty Linux 7:mariadb-embedded-1:5.5.52-1.el7.i686",
          "SUSE Liberty Linux 7:mariadb-embedded-1:5.5.52-1.el7.x86_64",
          "SUSE Liberty Linux 7:mariadb-embedded-devel-1:5.5.52-1.el7.i686",
          "SUSE Liberty Linux 7:mariadb-embedded-devel-1:5.5.52-1.el7.x86_64",
          "SUSE Liberty Linux 7:mariadb-libs-1:5.5.52-1.el7.i686",
          "SUSE Liberty Linux 7:mariadb-libs-1:5.5.52-1.el7.x86_64",
          "SUSE Liberty Linux 7:mariadb-server-1:5.5.52-1.el7.x86_64",
          "SUSE Liberty Linux 7:mariadb-test-1:5.5.52-1.el7.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2016-3492",
          "url": "https://www.suse.com/security/cve/CVE-2016-3492"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1005555 for CVE-2016-3492",
          "url": "https://bugzilla.suse.com/1005555"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1008318 for CVE-2016-3492",
          "url": "https://bugzilla.suse.com/1008318"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Liberty Linux 7:mariadb-1:5.5.52-1.el7.x86_64",
            "SUSE Liberty Linux 7:mariadb-bench-1:5.5.52-1.el7.x86_64",
            "SUSE Liberty Linux 7:mariadb-devel-1:5.5.52-1.el7.i686",
            "SUSE Liberty Linux 7:mariadb-devel-1:5.5.52-1.el7.x86_64",
            "SUSE Liberty Linux 7:mariadb-embedded-1:5.5.52-1.el7.i686",
            "SUSE Liberty Linux 7:mariadb-embedded-1:5.5.52-1.el7.x86_64",
            "SUSE Liberty Linux 7:mariadb-embedded-devel-1:5.5.52-1.el7.i686",
            "SUSE Liberty Linux 7:mariadb-embedded-devel-1:5.5.52-1.el7.x86_64",
            "SUSE Liberty Linux 7:mariadb-libs-1:5.5.52-1.el7.i686",
            "SUSE Liberty Linux 7:mariadb-libs-1:5.5.52-1.el7.x86_64",
            "SUSE Liberty Linux 7:mariadb-server-1:5.5.52-1.el7.x86_64",
            "SUSE Liberty Linux 7:mariadb-test-1:5.5.52-1.el7.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 6.5,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "SUSE Liberty Linux 7:mariadb-1:5.5.52-1.el7.x86_64",
            "SUSE Liberty Linux 7:mariadb-bench-1:5.5.52-1.el7.x86_64",
            "SUSE Liberty Linux 7:mariadb-devel-1:5.5.52-1.el7.i686",
            "SUSE Liberty Linux 7:mariadb-devel-1:5.5.52-1.el7.x86_64",
            "SUSE Liberty Linux 7:mariadb-embedded-1:5.5.52-1.el7.i686",
            "SUSE Liberty Linux 7:mariadb-embedded-1:5.5.52-1.el7.x86_64",
            "SUSE Liberty Linux 7:mariadb-embedded-devel-1:5.5.52-1.el7.i686",
            "SUSE Liberty Linux 7:mariadb-embedded-devel-1:5.5.52-1.el7.x86_64",
            "SUSE Liberty Linux 7:mariadb-libs-1:5.5.52-1.el7.i686",
            "SUSE Liberty Linux 7:mariadb-libs-1:5.5.52-1.el7.x86_64",
            "SUSE Liberty Linux 7:mariadb-server-1:5.5.52-1.el7.x86_64",
            "SUSE Liberty Linux 7:mariadb-test-1:5.5.52-1.el7.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2016-11-03T00:00:00Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2016-3492"
    },
    {
      "cve": "CVE-2016-5612",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2016-5612"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "Unspecified vulnerability in Oracle MySQL 5.5.50 and earlier, 5.6.31 and earlier, and 5.7.13 and earlier allows remote authenticated users to affect availability via vectors related to DML.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Liberty Linux 7:mariadb-1:5.5.52-1.el7.x86_64",
          "SUSE Liberty Linux 7:mariadb-bench-1:5.5.52-1.el7.x86_64",
          "SUSE Liberty Linux 7:mariadb-devel-1:5.5.52-1.el7.i686",
          "SUSE Liberty Linux 7:mariadb-devel-1:5.5.52-1.el7.x86_64",
          "SUSE Liberty Linux 7:mariadb-embedded-1:5.5.52-1.el7.i686",
          "SUSE Liberty Linux 7:mariadb-embedded-1:5.5.52-1.el7.x86_64",
          "SUSE Liberty Linux 7:mariadb-embedded-devel-1:5.5.52-1.el7.i686",
          "SUSE Liberty Linux 7:mariadb-embedded-devel-1:5.5.52-1.el7.x86_64",
          "SUSE Liberty Linux 7:mariadb-libs-1:5.5.52-1.el7.i686",
          "SUSE Liberty Linux 7:mariadb-libs-1:5.5.52-1.el7.x86_64",
          "SUSE Liberty Linux 7:mariadb-server-1:5.5.52-1.el7.x86_64",
          "SUSE Liberty Linux 7:mariadb-test-1:5.5.52-1.el7.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2016-5612",
          "url": "https://www.suse.com/security/cve/CVE-2016-5612"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1005561 for CVE-2016-5612",
          "url": "https://bugzilla.suse.com/1005561"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Liberty Linux 7:mariadb-1:5.5.52-1.el7.x86_64",
            "SUSE Liberty Linux 7:mariadb-bench-1:5.5.52-1.el7.x86_64",
            "SUSE Liberty Linux 7:mariadb-devel-1:5.5.52-1.el7.i686",
            "SUSE Liberty Linux 7:mariadb-devel-1:5.5.52-1.el7.x86_64",
            "SUSE Liberty Linux 7:mariadb-embedded-1:5.5.52-1.el7.i686",
            "SUSE Liberty Linux 7:mariadb-embedded-1:5.5.52-1.el7.x86_64",
            "SUSE Liberty Linux 7:mariadb-embedded-devel-1:5.5.52-1.el7.i686",
            "SUSE Liberty Linux 7:mariadb-embedded-devel-1:5.5.52-1.el7.x86_64",
            "SUSE Liberty Linux 7:mariadb-libs-1:5.5.52-1.el7.i686",
            "SUSE Liberty Linux 7:mariadb-libs-1:5.5.52-1.el7.x86_64",
            "SUSE Liberty Linux 7:mariadb-server-1:5.5.52-1.el7.x86_64",
            "SUSE Liberty Linux 7:mariadb-test-1:5.5.52-1.el7.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 6.5,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "SUSE Liberty Linux 7:mariadb-1:5.5.52-1.el7.x86_64",
            "SUSE Liberty Linux 7:mariadb-bench-1:5.5.52-1.el7.x86_64",
            "SUSE Liberty Linux 7:mariadb-devel-1:5.5.52-1.el7.i686",
            "SUSE Liberty Linux 7:mariadb-devel-1:5.5.52-1.el7.x86_64",
            "SUSE Liberty Linux 7:mariadb-embedded-1:5.5.52-1.el7.i686",
            "SUSE Liberty Linux 7:mariadb-embedded-1:5.5.52-1.el7.x86_64",
            "SUSE Liberty Linux 7:mariadb-embedded-devel-1:5.5.52-1.el7.i686",
            "SUSE Liberty Linux 7:mariadb-embedded-devel-1:5.5.52-1.el7.x86_64",
            "SUSE Liberty Linux 7:mariadb-libs-1:5.5.52-1.el7.i686",
            "SUSE Liberty Linux 7:mariadb-libs-1:5.5.52-1.el7.x86_64",
            "SUSE Liberty Linux 7:mariadb-server-1:5.5.52-1.el7.x86_64",
            "SUSE Liberty Linux 7:mariadb-test-1:5.5.52-1.el7.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2016-11-03T00:00:00Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2016-5612"
    },
    {
      "cve": "CVE-2016-5616",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2016-5616"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2016-6663. Reason:  This candidate is a reservation duplicate of CVE-2016-6663.  Notes: All CVE users should reference CVE-2016-6663 instead of this candidate.  All references and descriptions in this candidate have been removed to prevent accidental usage",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Liberty Linux 7:mariadb-1:5.5.52-1.el7.x86_64",
          "SUSE Liberty Linux 7:mariadb-bench-1:5.5.52-1.el7.x86_64",
          "SUSE Liberty Linux 7:mariadb-devel-1:5.5.52-1.el7.i686",
          "SUSE Liberty Linux 7:mariadb-devel-1:5.5.52-1.el7.x86_64",
          "SUSE Liberty Linux 7:mariadb-embedded-1:5.5.52-1.el7.i686",
          "SUSE Liberty Linux 7:mariadb-embedded-1:5.5.52-1.el7.x86_64",
          "SUSE Liberty Linux 7:mariadb-embedded-devel-1:5.5.52-1.el7.i686",
          "SUSE Liberty Linux 7:mariadb-embedded-devel-1:5.5.52-1.el7.x86_64",
          "SUSE Liberty Linux 7:mariadb-libs-1:5.5.52-1.el7.i686",
          "SUSE Liberty Linux 7:mariadb-libs-1:5.5.52-1.el7.x86_64",
          "SUSE Liberty Linux 7:mariadb-server-1:5.5.52-1.el7.x86_64",
          "SUSE Liberty Linux 7:mariadb-test-1:5.5.52-1.el7.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2016-5616",
          "url": "https://www.suse.com/security/cve/CVE-2016-5616"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1005562 for CVE-2016-5616",
          "url": "https://bugzilla.suse.com/1005562"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Liberty Linux 7:mariadb-1:5.5.52-1.el7.x86_64",
            "SUSE Liberty Linux 7:mariadb-bench-1:5.5.52-1.el7.x86_64",
            "SUSE Liberty Linux 7:mariadb-devel-1:5.5.52-1.el7.i686",
            "SUSE Liberty Linux 7:mariadb-devel-1:5.5.52-1.el7.x86_64",
            "SUSE Liberty Linux 7:mariadb-embedded-1:5.5.52-1.el7.i686",
            "SUSE Liberty Linux 7:mariadb-embedded-1:5.5.52-1.el7.x86_64",
            "SUSE Liberty Linux 7:mariadb-embedded-devel-1:5.5.52-1.el7.i686",
            "SUSE Liberty Linux 7:mariadb-embedded-devel-1:5.5.52-1.el7.x86_64",
            "SUSE Liberty Linux 7:mariadb-libs-1:5.5.52-1.el7.i686",
            "SUSE Liberty Linux 7:mariadb-libs-1:5.5.52-1.el7.x86_64",
            "SUSE Liberty Linux 7:mariadb-server-1:5.5.52-1.el7.x86_64",
            "SUSE Liberty Linux 7:mariadb-test-1:5.5.52-1.el7.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2016-11-03T00:00:00Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2016-5616"
    },
    {
      "cve": "CVE-2016-5624",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2016-5624"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "Unspecified vulnerability in Oracle MySQL 5.5.51 and earlier allows remote authenticated users to affect availability via vectors related to DML.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Liberty Linux 7:mariadb-1:5.5.52-1.el7.x86_64",
          "SUSE Liberty Linux 7:mariadb-bench-1:5.5.52-1.el7.x86_64",
          "SUSE Liberty Linux 7:mariadb-devel-1:5.5.52-1.el7.i686",
          "SUSE Liberty Linux 7:mariadb-devel-1:5.5.52-1.el7.x86_64",
          "SUSE Liberty Linux 7:mariadb-embedded-1:5.5.52-1.el7.i686",
          "SUSE Liberty Linux 7:mariadb-embedded-1:5.5.52-1.el7.x86_64",
          "SUSE Liberty Linux 7:mariadb-embedded-devel-1:5.5.52-1.el7.i686",
          "SUSE Liberty Linux 7:mariadb-embedded-devel-1:5.5.52-1.el7.x86_64",
          "SUSE Liberty Linux 7:mariadb-libs-1:5.5.52-1.el7.i686",
          "SUSE Liberty Linux 7:mariadb-libs-1:5.5.52-1.el7.x86_64",
          "SUSE Liberty Linux 7:mariadb-server-1:5.5.52-1.el7.x86_64",
          "SUSE Liberty Linux 7:mariadb-test-1:5.5.52-1.el7.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2016-5624",
          "url": "https://www.suse.com/security/cve/CVE-2016-5624"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1005564 for CVE-2016-5624",
          "url": "https://bugzilla.suse.com/1005564"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1008318 for CVE-2016-5624",
          "url": "https://bugzilla.suse.com/1008318"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Liberty Linux 7:mariadb-1:5.5.52-1.el7.x86_64",
            "SUSE Liberty Linux 7:mariadb-bench-1:5.5.52-1.el7.x86_64",
            "SUSE Liberty Linux 7:mariadb-devel-1:5.5.52-1.el7.i686",
            "SUSE Liberty Linux 7:mariadb-devel-1:5.5.52-1.el7.x86_64",
            "SUSE Liberty Linux 7:mariadb-embedded-1:5.5.52-1.el7.i686",
            "SUSE Liberty Linux 7:mariadb-embedded-1:5.5.52-1.el7.x86_64",
            "SUSE Liberty Linux 7:mariadb-embedded-devel-1:5.5.52-1.el7.i686",
            "SUSE Liberty Linux 7:mariadb-embedded-devel-1:5.5.52-1.el7.x86_64",
            "SUSE Liberty Linux 7:mariadb-libs-1:5.5.52-1.el7.i686",
            "SUSE Liberty Linux 7:mariadb-libs-1:5.5.52-1.el7.x86_64",
            "SUSE Liberty Linux 7:mariadb-server-1:5.5.52-1.el7.x86_64",
            "SUSE Liberty Linux 7:mariadb-test-1:5.5.52-1.el7.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 6.5,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "SUSE Liberty Linux 7:mariadb-1:5.5.52-1.el7.x86_64",
            "SUSE Liberty Linux 7:mariadb-bench-1:5.5.52-1.el7.x86_64",
            "SUSE Liberty Linux 7:mariadb-devel-1:5.5.52-1.el7.i686",
            "SUSE Liberty Linux 7:mariadb-devel-1:5.5.52-1.el7.x86_64",
            "SUSE Liberty Linux 7:mariadb-embedded-1:5.5.52-1.el7.i686",
            "SUSE Liberty Linux 7:mariadb-embedded-1:5.5.52-1.el7.x86_64",
            "SUSE Liberty Linux 7:mariadb-embedded-devel-1:5.5.52-1.el7.i686",
            "SUSE Liberty Linux 7:mariadb-embedded-devel-1:5.5.52-1.el7.x86_64",
            "SUSE Liberty Linux 7:mariadb-libs-1:5.5.52-1.el7.i686",
            "SUSE Liberty Linux 7:mariadb-libs-1:5.5.52-1.el7.x86_64",
            "SUSE Liberty Linux 7:mariadb-server-1:5.5.52-1.el7.x86_64",
            "SUSE Liberty Linux 7:mariadb-test-1:5.5.52-1.el7.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2016-11-03T00:00:00Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2016-5624"
    },
    {
      "cve": "CVE-2016-5626",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2016-5626"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "Unspecified vulnerability in Oracle MySQL 5.5.51 and earlier, 5.6.32 and earlier, and 5.7.14 and earlier allows remote authenticated users to affect availability via vectors related to GIS.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Liberty Linux 7:mariadb-1:5.5.52-1.el7.x86_64",
          "SUSE Liberty Linux 7:mariadb-bench-1:5.5.52-1.el7.x86_64",
          "SUSE Liberty Linux 7:mariadb-devel-1:5.5.52-1.el7.i686",
          "SUSE Liberty Linux 7:mariadb-devel-1:5.5.52-1.el7.x86_64",
          "SUSE Liberty Linux 7:mariadb-embedded-1:5.5.52-1.el7.i686",
          "SUSE Liberty Linux 7:mariadb-embedded-1:5.5.52-1.el7.x86_64",
          "SUSE Liberty Linux 7:mariadb-embedded-devel-1:5.5.52-1.el7.i686",
          "SUSE Liberty Linux 7:mariadb-embedded-devel-1:5.5.52-1.el7.x86_64",
          "SUSE Liberty Linux 7:mariadb-libs-1:5.5.52-1.el7.i686",
          "SUSE Liberty Linux 7:mariadb-libs-1:5.5.52-1.el7.x86_64",
          "SUSE Liberty Linux 7:mariadb-server-1:5.5.52-1.el7.x86_64",
          "SUSE Liberty Linux 7:mariadb-test-1:5.5.52-1.el7.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2016-5626",
          "url": "https://www.suse.com/security/cve/CVE-2016-5626"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1005566 for CVE-2016-5626",
          "url": "https://bugzilla.suse.com/1005566"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1008318 for CVE-2016-5626",
          "url": "https://bugzilla.suse.com/1008318"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Liberty Linux 7:mariadb-1:5.5.52-1.el7.x86_64",
            "SUSE Liberty Linux 7:mariadb-bench-1:5.5.52-1.el7.x86_64",
            "SUSE Liberty Linux 7:mariadb-devel-1:5.5.52-1.el7.i686",
            "SUSE Liberty Linux 7:mariadb-devel-1:5.5.52-1.el7.x86_64",
            "SUSE Liberty Linux 7:mariadb-embedded-1:5.5.52-1.el7.i686",
            "SUSE Liberty Linux 7:mariadb-embedded-1:5.5.52-1.el7.x86_64",
            "SUSE Liberty Linux 7:mariadb-embedded-devel-1:5.5.52-1.el7.i686",
            "SUSE Liberty Linux 7:mariadb-embedded-devel-1:5.5.52-1.el7.x86_64",
            "SUSE Liberty Linux 7:mariadb-libs-1:5.5.52-1.el7.i686",
            "SUSE Liberty Linux 7:mariadb-libs-1:5.5.52-1.el7.x86_64",
            "SUSE Liberty Linux 7:mariadb-server-1:5.5.52-1.el7.x86_64",
            "SUSE Liberty Linux 7:mariadb-test-1:5.5.52-1.el7.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 6.5,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "SUSE Liberty Linux 7:mariadb-1:5.5.52-1.el7.x86_64",
            "SUSE Liberty Linux 7:mariadb-bench-1:5.5.52-1.el7.x86_64",
            "SUSE Liberty Linux 7:mariadb-devel-1:5.5.52-1.el7.i686",
            "SUSE Liberty Linux 7:mariadb-devel-1:5.5.52-1.el7.x86_64",
            "SUSE Liberty Linux 7:mariadb-embedded-1:5.5.52-1.el7.i686",
            "SUSE Liberty Linux 7:mariadb-embedded-1:5.5.52-1.el7.x86_64",
            "SUSE Liberty Linux 7:mariadb-embedded-devel-1:5.5.52-1.el7.i686",
            "SUSE Liberty Linux 7:mariadb-embedded-devel-1:5.5.52-1.el7.x86_64",
            "SUSE Liberty Linux 7:mariadb-libs-1:5.5.52-1.el7.i686",
            "SUSE Liberty Linux 7:mariadb-libs-1:5.5.52-1.el7.x86_64",
            "SUSE Liberty Linux 7:mariadb-server-1:5.5.52-1.el7.x86_64",
            "SUSE Liberty Linux 7:mariadb-test-1:5.5.52-1.el7.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2016-11-03T00:00:00Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2016-5626"
    },
    {
      "cve": "CVE-2016-5629",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2016-5629"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "Unspecified vulnerability in Oracle MySQL 5.5.51 and earlier, 5.6.32 and earlier, and 5.7.14 and earlier allows remote administrators to affect availability via vectors related to Server: Federated.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Liberty Linux 7:mariadb-1:5.5.52-1.el7.x86_64",
          "SUSE Liberty Linux 7:mariadb-bench-1:5.5.52-1.el7.x86_64",
          "SUSE Liberty Linux 7:mariadb-devel-1:5.5.52-1.el7.i686",
          "SUSE Liberty Linux 7:mariadb-devel-1:5.5.52-1.el7.x86_64",
          "SUSE Liberty Linux 7:mariadb-embedded-1:5.5.52-1.el7.i686",
          "SUSE Liberty Linux 7:mariadb-embedded-1:5.5.52-1.el7.x86_64",
          "SUSE Liberty Linux 7:mariadb-embedded-devel-1:5.5.52-1.el7.i686",
          "SUSE Liberty Linux 7:mariadb-embedded-devel-1:5.5.52-1.el7.x86_64",
          "SUSE Liberty Linux 7:mariadb-libs-1:5.5.52-1.el7.i686",
          "SUSE Liberty Linux 7:mariadb-libs-1:5.5.52-1.el7.x86_64",
          "SUSE Liberty Linux 7:mariadb-server-1:5.5.52-1.el7.x86_64",
          "SUSE Liberty Linux 7:mariadb-test-1:5.5.52-1.el7.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2016-5629",
          "url": "https://www.suse.com/security/cve/CVE-2016-5629"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1005569 for CVE-2016-5629",
          "url": "https://bugzilla.suse.com/1005569"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1008318 for CVE-2016-5629",
          "url": "https://bugzilla.suse.com/1008318"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Liberty Linux 7:mariadb-1:5.5.52-1.el7.x86_64",
            "SUSE Liberty Linux 7:mariadb-bench-1:5.5.52-1.el7.x86_64",
            "SUSE Liberty Linux 7:mariadb-devel-1:5.5.52-1.el7.i686",
            "SUSE Liberty Linux 7:mariadb-devel-1:5.5.52-1.el7.x86_64",
            "SUSE Liberty Linux 7:mariadb-embedded-1:5.5.52-1.el7.i686",
            "SUSE Liberty Linux 7:mariadb-embedded-1:5.5.52-1.el7.x86_64",
            "SUSE Liberty Linux 7:mariadb-embedded-devel-1:5.5.52-1.el7.i686",
            "SUSE Liberty Linux 7:mariadb-embedded-devel-1:5.5.52-1.el7.x86_64",
            "SUSE Liberty Linux 7:mariadb-libs-1:5.5.52-1.el7.i686",
            "SUSE Liberty Linux 7:mariadb-libs-1:5.5.52-1.el7.x86_64",
            "SUSE Liberty Linux 7:mariadb-server-1:5.5.52-1.el7.x86_64",
            "SUSE Liberty Linux 7:mariadb-test-1:5.5.52-1.el7.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 4.9,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "SUSE Liberty Linux 7:mariadb-1:5.5.52-1.el7.x86_64",
            "SUSE Liberty Linux 7:mariadb-bench-1:5.5.52-1.el7.x86_64",
            "SUSE Liberty Linux 7:mariadb-devel-1:5.5.52-1.el7.i686",
            "SUSE Liberty Linux 7:mariadb-devel-1:5.5.52-1.el7.x86_64",
            "SUSE Liberty Linux 7:mariadb-embedded-1:5.5.52-1.el7.i686",
            "SUSE Liberty Linux 7:mariadb-embedded-1:5.5.52-1.el7.x86_64",
            "SUSE Liberty Linux 7:mariadb-embedded-devel-1:5.5.52-1.el7.i686",
            "SUSE Liberty Linux 7:mariadb-embedded-devel-1:5.5.52-1.el7.x86_64",
            "SUSE Liberty Linux 7:mariadb-libs-1:5.5.52-1.el7.i686",
            "SUSE Liberty Linux 7:mariadb-libs-1:5.5.52-1.el7.x86_64",
            "SUSE Liberty Linux 7:mariadb-server-1:5.5.52-1.el7.x86_64",
            "SUSE Liberty Linux 7:mariadb-test-1:5.5.52-1.el7.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2016-11-03T00:00:00Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2016-5629"
    },
    {
      "cve": "CVE-2016-6662",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2016-6662"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "Oracle MySQL through 5.5.52, 5.6.x through 5.6.33, and 5.7.x through 5.7.15; MariaDB before 5.5.51, 10.0.x before 10.0.27, and 10.1.x before 10.1.17; and Percona Server before 5.5.51-38.1, 5.6.x before 5.6.32-78.0, and 5.7.x before 5.7.14-7 allow local users to create arbitrary configurations and bypass certain protection mechanisms by setting general_log_file to a my.cnf configuration. NOTE: this can be leveraged to execute arbitrary code with root privileges by setting malloc_lib. NOTE: the affected MySQL version information is from Oracle\u0027s October 2016 CPU. Oracle has not commented on third-party claims that the issue was silently patched in MySQL 5.5.52, 5.6.33, and 5.7.15.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Liberty Linux 7:mariadb-1:5.5.52-1.el7.x86_64",
          "SUSE Liberty Linux 7:mariadb-bench-1:5.5.52-1.el7.x86_64",
          "SUSE Liberty Linux 7:mariadb-devel-1:5.5.52-1.el7.i686",
          "SUSE Liberty Linux 7:mariadb-devel-1:5.5.52-1.el7.x86_64",
          "SUSE Liberty Linux 7:mariadb-embedded-1:5.5.52-1.el7.i686",
          "SUSE Liberty Linux 7:mariadb-embedded-1:5.5.52-1.el7.x86_64",
          "SUSE Liberty Linux 7:mariadb-embedded-devel-1:5.5.52-1.el7.i686",
          "SUSE Liberty Linux 7:mariadb-embedded-devel-1:5.5.52-1.el7.x86_64",
          "SUSE Liberty Linux 7:mariadb-libs-1:5.5.52-1.el7.i686",
          "SUSE Liberty Linux 7:mariadb-libs-1:5.5.52-1.el7.x86_64",
          "SUSE Liberty Linux 7:mariadb-server-1:5.5.52-1.el7.x86_64",
          "SUSE Liberty Linux 7:mariadb-test-1:5.5.52-1.el7.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2016-6662",
          "url": "https://www.suse.com/security/cve/CVE-2016-6662"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1001367 for CVE-2016-6662",
          "url": "https://bugzilla.suse.com/1001367"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1005580 for CVE-2016-6662",
          "url": "https://bugzilla.suse.com/1005580"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1020873 for CVE-2016-6662",
          "url": "https://bugzilla.suse.com/1020873"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1020884 for CVE-2016-6662",
          "url": "https://bugzilla.suse.com/1020884"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1021755 for CVE-2016-6662",
          "url": "https://bugzilla.suse.com/1021755"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 998309 for CVE-2016-6662",
          "url": "https://bugzilla.suse.com/998309"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Liberty Linux 7:mariadb-1:5.5.52-1.el7.x86_64",
            "SUSE Liberty Linux 7:mariadb-bench-1:5.5.52-1.el7.x86_64",
            "SUSE Liberty Linux 7:mariadb-devel-1:5.5.52-1.el7.i686",
            "SUSE Liberty Linux 7:mariadb-devel-1:5.5.52-1.el7.x86_64",
            "SUSE Liberty Linux 7:mariadb-embedded-1:5.5.52-1.el7.i686",
            "SUSE Liberty Linux 7:mariadb-embedded-1:5.5.52-1.el7.x86_64",
            "SUSE Liberty Linux 7:mariadb-embedded-devel-1:5.5.52-1.el7.i686",
            "SUSE Liberty Linux 7:mariadb-embedded-devel-1:5.5.52-1.el7.x86_64",
            "SUSE Liberty Linux 7:mariadb-libs-1:5.5.52-1.el7.i686",
            "SUSE Liberty Linux 7:mariadb-libs-1:5.5.52-1.el7.x86_64",
            "SUSE Liberty Linux 7:mariadb-server-1:5.5.52-1.el7.x86_64",
            "SUSE Liberty Linux 7:mariadb-test-1:5.5.52-1.el7.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 9.8,
            "baseSeverity": "CRITICAL",
            "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.0"
          },
          "products": [
            "SUSE Liberty Linux 7:mariadb-1:5.5.52-1.el7.x86_64",
            "SUSE Liberty Linux 7:mariadb-bench-1:5.5.52-1.el7.x86_64",
            "SUSE Liberty Linux 7:mariadb-devel-1:5.5.52-1.el7.i686",
            "SUSE Liberty Linux 7:mariadb-devel-1:5.5.52-1.el7.x86_64",
            "SUSE Liberty Linux 7:mariadb-embedded-1:5.5.52-1.el7.i686",
            "SUSE Liberty Linux 7:mariadb-embedded-1:5.5.52-1.el7.x86_64",
            "SUSE Liberty Linux 7:mariadb-embedded-devel-1:5.5.52-1.el7.i686",
            "SUSE Liberty Linux 7:mariadb-embedded-devel-1:5.5.52-1.el7.x86_64",
            "SUSE Liberty Linux 7:mariadb-libs-1:5.5.52-1.el7.i686",
            "SUSE Liberty Linux 7:mariadb-libs-1:5.5.52-1.el7.x86_64",
            "SUSE Liberty Linux 7:mariadb-server-1:5.5.52-1.el7.x86_64",
            "SUSE Liberty Linux 7:mariadb-test-1:5.5.52-1.el7.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2016-11-03T00:00:00Z",
          "details": "important"
        }
      ],
      "title": "CVE-2016-6662"
    },
    {
      "cve": "CVE-2016-6663",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2016-6663"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "Race condition in Oracle MySQL before 5.5.52, 5.6.x before 5.6.33, 5.7.x before 5.7.15, and 8.x before 8.0.1; MariaDB before 5.5.52, 10.0.x before 10.0.28, and 10.1.x before 10.1.18; Percona Server before 5.5.51-38.2, 5.6.x before 5.6.32-78-1, and 5.7.x before 5.7.14-8; and Percona XtraDB Cluster before 5.5.41-37.0, 5.6.x before 5.6.32-25.17, and 5.7.x before 5.7.14-26.17 allows local users with certain permissions to gain privileges by leveraging use of my_copystat by REPAIR TABLE to repair a MyISAM table.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Liberty Linux 7:mariadb-1:5.5.52-1.el7.x86_64",
          "SUSE Liberty Linux 7:mariadb-bench-1:5.5.52-1.el7.x86_64",
          "SUSE Liberty Linux 7:mariadb-devel-1:5.5.52-1.el7.i686",
          "SUSE Liberty Linux 7:mariadb-devel-1:5.5.52-1.el7.x86_64",
          "SUSE Liberty Linux 7:mariadb-embedded-1:5.5.52-1.el7.i686",
          "SUSE Liberty Linux 7:mariadb-embedded-1:5.5.52-1.el7.x86_64",
          "SUSE Liberty Linux 7:mariadb-embedded-devel-1:5.5.52-1.el7.i686",
          "SUSE Liberty Linux 7:mariadb-embedded-devel-1:5.5.52-1.el7.x86_64",
          "SUSE Liberty Linux 7:mariadb-libs-1:5.5.52-1.el7.i686",
          "SUSE Liberty Linux 7:mariadb-libs-1:5.5.52-1.el7.x86_64",
          "SUSE Liberty Linux 7:mariadb-server-1:5.5.52-1.el7.x86_64",
          "SUSE Liberty Linux 7:mariadb-test-1:5.5.52-1.el7.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2016-6663",
          "url": "https://www.suse.com/security/cve/CVE-2016-6663"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1001367 for CVE-2016-6663",
          "url": "https://bugzilla.suse.com/1001367"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1008253 for CVE-2016-6663",
          "url": "https://bugzilla.suse.com/1008253"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1008318 for CVE-2016-6663",
          "url": "https://bugzilla.suse.com/1008318"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1021755 for CVE-2016-6663",
          "url": "https://bugzilla.suse.com/1021755"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 998309 for CVE-2016-6663",
          "url": "https://bugzilla.suse.com/998309"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Liberty Linux 7:mariadb-1:5.5.52-1.el7.x86_64",
            "SUSE Liberty Linux 7:mariadb-bench-1:5.5.52-1.el7.x86_64",
            "SUSE Liberty Linux 7:mariadb-devel-1:5.5.52-1.el7.i686",
            "SUSE Liberty Linux 7:mariadb-devel-1:5.5.52-1.el7.x86_64",
            "SUSE Liberty Linux 7:mariadb-embedded-1:5.5.52-1.el7.i686",
            "SUSE Liberty Linux 7:mariadb-embedded-1:5.5.52-1.el7.x86_64",
            "SUSE Liberty Linux 7:mariadb-embedded-devel-1:5.5.52-1.el7.i686",
            "SUSE Liberty Linux 7:mariadb-embedded-devel-1:5.5.52-1.el7.x86_64",
            "SUSE Liberty Linux 7:mariadb-libs-1:5.5.52-1.el7.i686",
            "SUSE Liberty Linux 7:mariadb-libs-1:5.5.52-1.el7.x86_64",
            "SUSE Liberty Linux 7:mariadb-server-1:5.5.52-1.el7.x86_64",
            "SUSE Liberty Linux 7:mariadb-test-1:5.5.52-1.el7.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 7,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.0"
          },
          "products": [
            "SUSE Liberty Linux 7:mariadb-1:5.5.52-1.el7.x86_64",
            "SUSE Liberty Linux 7:mariadb-bench-1:5.5.52-1.el7.x86_64",
            "SUSE Liberty Linux 7:mariadb-devel-1:5.5.52-1.el7.i686",
            "SUSE Liberty Linux 7:mariadb-devel-1:5.5.52-1.el7.x86_64",
            "SUSE Liberty Linux 7:mariadb-embedded-1:5.5.52-1.el7.i686",
            "SUSE Liberty Linux 7:mariadb-embedded-1:5.5.52-1.el7.x86_64",
            "SUSE Liberty Linux 7:mariadb-embedded-devel-1:5.5.52-1.el7.i686",
            "SUSE Liberty Linux 7:mariadb-embedded-devel-1:5.5.52-1.el7.x86_64",
            "SUSE Liberty Linux 7:mariadb-libs-1:5.5.52-1.el7.i686",
            "SUSE Liberty Linux 7:mariadb-libs-1:5.5.52-1.el7.x86_64",
            "SUSE Liberty Linux 7:mariadb-server-1:5.5.52-1.el7.x86_64",
            "SUSE Liberty Linux 7:mariadb-test-1:5.5.52-1.el7.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2016-11-03T00:00:00Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2016-6663"
    },
    {
      "cve": "CVE-2016-8283",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2016-8283"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "Unspecified vulnerability in Oracle MySQL 5.5.51 and earlier, 5.6.32 and earlier, and 5.7.14 and earlier allows remote authenticated users to affect availability via vectors related to Server: Types.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Liberty Linux 7:mariadb-1:5.5.52-1.el7.x86_64",
          "SUSE Liberty Linux 7:mariadb-bench-1:5.5.52-1.el7.x86_64",
          "SUSE Liberty Linux 7:mariadb-devel-1:5.5.52-1.el7.i686",
          "SUSE Liberty Linux 7:mariadb-devel-1:5.5.52-1.el7.x86_64",
          "SUSE Liberty Linux 7:mariadb-embedded-1:5.5.52-1.el7.i686",
          "SUSE Liberty Linux 7:mariadb-embedded-1:5.5.52-1.el7.x86_64",
          "SUSE Liberty Linux 7:mariadb-embedded-devel-1:5.5.52-1.el7.i686",
          "SUSE Liberty Linux 7:mariadb-embedded-devel-1:5.5.52-1.el7.x86_64",
          "SUSE Liberty Linux 7:mariadb-libs-1:5.5.52-1.el7.i686",
          "SUSE Liberty Linux 7:mariadb-libs-1:5.5.52-1.el7.x86_64",
          "SUSE Liberty Linux 7:mariadb-server-1:5.5.52-1.el7.x86_64",
          "SUSE Liberty Linux 7:mariadb-test-1:5.5.52-1.el7.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2016-8283",
          "url": "https://www.suse.com/security/cve/CVE-2016-8283"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1005582 for CVE-2016-8283",
          "url": "https://bugzilla.suse.com/1005582"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1008318 for CVE-2016-8283",
          "url": "https://bugzilla.suse.com/1008318"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Liberty Linux 7:mariadb-1:5.5.52-1.el7.x86_64",
            "SUSE Liberty Linux 7:mariadb-bench-1:5.5.52-1.el7.x86_64",
            "SUSE Liberty Linux 7:mariadb-devel-1:5.5.52-1.el7.i686",
            "SUSE Liberty Linux 7:mariadb-devel-1:5.5.52-1.el7.x86_64",
            "SUSE Liberty Linux 7:mariadb-embedded-1:5.5.52-1.el7.i686",
            "SUSE Liberty Linux 7:mariadb-embedded-1:5.5.52-1.el7.x86_64",
            "SUSE Liberty Linux 7:mariadb-embedded-devel-1:5.5.52-1.el7.i686",
            "SUSE Liberty Linux 7:mariadb-embedded-devel-1:5.5.52-1.el7.x86_64",
            "SUSE Liberty Linux 7:mariadb-libs-1:5.5.52-1.el7.i686",
            "SUSE Liberty Linux 7:mariadb-libs-1:5.5.52-1.el7.x86_64",
            "SUSE Liberty Linux 7:mariadb-server-1:5.5.52-1.el7.x86_64",
            "SUSE Liberty Linux 7:mariadb-test-1:5.5.52-1.el7.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 4.3,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L",
            "version": "3.1"
          },
          "products": [
            "SUSE Liberty Linux 7:mariadb-1:5.5.52-1.el7.x86_64",
            "SUSE Liberty Linux 7:mariadb-bench-1:5.5.52-1.el7.x86_64",
            "SUSE Liberty Linux 7:mariadb-devel-1:5.5.52-1.el7.i686",
            "SUSE Liberty Linux 7:mariadb-devel-1:5.5.52-1.el7.x86_64",
            "SUSE Liberty Linux 7:mariadb-embedded-1:5.5.52-1.el7.i686",
            "SUSE Liberty Linux 7:mariadb-embedded-1:5.5.52-1.el7.x86_64",
            "SUSE Liberty Linux 7:mariadb-embedded-devel-1:5.5.52-1.el7.i686",
            "SUSE Liberty Linux 7:mariadb-embedded-devel-1:5.5.52-1.el7.x86_64",
            "SUSE Liberty Linux 7:mariadb-libs-1:5.5.52-1.el7.i686",
            "SUSE Liberty Linux 7:mariadb-libs-1:5.5.52-1.el7.x86_64",
            "SUSE Liberty Linux 7:mariadb-server-1:5.5.52-1.el7.x86_64",
            "SUSE Liberty Linux 7:mariadb-test-1:5.5.52-1.el7.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2016-11-03T00:00:00Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2016-8283"
    }
  ]
}

CVE-2016-3492 (GCVE-0-2016-3492)

Vulnerability from cvelistv5 – Published: 2016-10-25 14:00 – Updated: 2024-10-10 18:49

Summary

Unspecified vulnerability in Oracle MySQL 5.5.51 and earlier, 5.6.32 and earlier, and 5.7.14 and earlier allows remote authenticated users to affect availability via vectors related to Server: Optimizer.

Severity

No CVSS data available.

SSVC

Exploitation: none Automatable: no Technical Impact: partial

CISA Coordinator · CISA-ADP (v2.0.3)

Decision recorded 2024-10-10 17:50 UTC

CWE

Assigner

oracle mitre root

References

13 references

URL	Tags
http://rhn.redhat.com/errata/RHSA-2016-2749.html	vendor-advisoryx_refsource_REDHAT
http://rhn.redhat.com/errata/RHSA-2016-2131.html	vendor-advisoryx_refsource_REDHAT
https://mariadb.com/kb/en/mariadb/mariadb-5552-re…	x_refsource_CONFIRM
https://security.gentoo.org/glsa/201701-01	vendor-advisoryx_refsource_GENTOO
http://www.oracle.com/technetwork/security-adviso…	x_refsource_CONFIRM
http://www.securityfocus.com/bid/93650	vdb-entryx_refsource_BID
http://rhn.redhat.com/errata/RHSA-2016-2130.html	vendor-advisoryx_refsource_REDHAT
http://rhn.redhat.com/errata/RHSA-2016-2927.html	vendor-advisoryx_refsource_REDHAT
http://rhn.redhat.com/errata/RHSA-2016-2595.html	vendor-advisoryx_refsource_REDHAT
https://mariadb.com/kb/en/mariadb/mariadb-10118-r…	x_refsource_CONFIRM
http://www.securitytracker.com/id/1037050	vdb-entryx_refsource_SECTRACK
http://rhn.redhat.com/errata/RHSA-2016-2928.html	vendor-advisoryx_refsource_REDHAT
https://mariadb.com/kb/en/mariadb/mariadb-10028-r…	x_refsource_CONFIRM

Date Public

2016-10-18 00:00

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-05T23:56:14.405Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "name": "RHSA-2016:2749",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://rhn.redhat.com/errata/RHSA-2016-2749.html"
          },
          {
            "name": "RHSA-2016:2131",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://rhn.redhat.com/errata/RHSA-2016-2131.html"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://mariadb.com/kb/en/mariadb/mariadb-5552-release-notes/"
          },
          {
            "name": "GLSA-201701-01",
            "tags": [
              "vendor-advisory",
              "x_refsource_GENTOO",
              "x_transferred"
            ],
            "url": "https://security.gentoo.org/glsa/201701-01"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://www.oracle.com/technetwork/security-advisory/cpuoct2016-2881722.html"
          },
          {
            "name": "93650",
            "tags": [
              "vdb-entry",
              "x_refsource_BID",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/bid/93650"
          },
          {
            "name": "RHSA-2016:2130",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://rhn.redhat.com/errata/RHSA-2016-2130.html"
          },
          {
            "name": "RHSA-2016:2927",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://rhn.redhat.com/errata/RHSA-2016-2927.html"
          },
          {
            "name": "RHSA-2016:2595",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://rhn.redhat.com/errata/RHSA-2016-2595.html"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://mariadb.com/kb/en/mariadb/mariadb-10118-release-notes/"
          },
          {
            "name": "1037050",
            "tags": [
              "vdb-entry",
              "x_refsource_SECTRACK",
              "x_transferred"
            ],
            "url": "http://www.securitytracker.com/id/1037050"
          },
          {
            "name": "RHSA-2016:2928",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://rhn.redhat.com/errata/RHSA-2016-2928.html"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://mariadb.com/kb/en/mariadb/mariadb-10028-release-notes/"
          }
        ],
        "title": "CVE Program Container"
      },
      {
        "metrics": [
          {
            "other": {
              "content": {
                "id": "CVE-2016-3492",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "partial"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2024-10-10T17:50:08.059360Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2024-10-10T18:49:00.294Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "datePublic": "2016-10-18T00:00:00.000Z",
      "descriptions": [
        {
          "lang": "en",
          "value": "Unspecified vulnerability in Oracle MySQL 5.5.51 and earlier, 5.6.32 and earlier, and 5.7.14 and earlier allows remote authenticated users to affect availability via vectors related to Server: Optimizer."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "n/a",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2018-01-04T19:57:01.000Z",
        "orgId": "43595867-4340-4103-b7a2-9a5208d29a85",
        "shortName": "oracle"
      },
      "references": [
        {
          "name": "RHSA-2016:2749",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://rhn.redhat.com/errata/RHSA-2016-2749.html"
        },
        {
          "name": "RHSA-2016:2131",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://rhn.redhat.com/errata/RHSA-2016-2131.html"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://mariadb.com/kb/en/mariadb/mariadb-5552-release-notes/"
        },
        {
          "name": "GLSA-201701-01",
          "tags": [
            "vendor-advisory",
            "x_refsource_GENTOO"
          ],
          "url": "https://security.gentoo.org/glsa/201701-01"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://www.oracle.com/technetwork/security-advisory/cpuoct2016-2881722.html"
        },
        {
          "name": "93650",
          "tags": [
            "vdb-entry",
            "x_refsource_BID"
          ],
          "url": "http://www.securityfocus.com/bid/93650"
        },
        {
          "name": "RHSA-2016:2130",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://rhn.redhat.com/errata/RHSA-2016-2130.html"
        },
        {
          "name": "RHSA-2016:2927",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://rhn.redhat.com/errata/RHSA-2016-2927.html"
        },
        {
          "name": "RHSA-2016:2595",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://rhn.redhat.com/errata/RHSA-2016-2595.html"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://mariadb.com/kb/en/mariadb/mariadb-10118-release-notes/"
        },
        {
          "name": "1037050",
          "tags": [
            "vdb-entry",
            "x_refsource_SECTRACK"
          ],
          "url": "http://www.securitytracker.com/id/1037050"
        },
        {
          "name": "RHSA-2016:2928",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://rhn.redhat.com/errata/RHSA-2016-2928.html"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://mariadb.com/kb/en/mariadb/mariadb-10028-release-notes/"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "secalert_us@oracle.com",
          "ID": "CVE-2016-3492",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "n/a",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "n/a"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "n/a"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "Unspecified vulnerability in Oracle MySQL 5.5.51 and earlier, 5.6.32 and earlier, and 5.7.14 and earlier allows remote authenticated users to affect availability via vectors related to Server: Optimizer."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "n/a"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "RHSA-2016:2749",
              "refsource": "REDHAT",
              "url": "http://rhn.redhat.com/errata/RHSA-2016-2749.html"
            },
            {
              "name": "RHSA-2016:2131",
              "refsource": "REDHAT",
              "url": "http://rhn.redhat.com/errata/RHSA-2016-2131.html"
            },
            {
              "name": "https://mariadb.com/kb/en/mariadb/mariadb-5552-release-notes/",
              "refsource": "CONFIRM",
              "url": "https://mariadb.com/kb/en/mariadb/mariadb-5552-release-notes/"
            },
            {
              "name": "GLSA-201701-01",
              "refsource": "GENTOO",
              "url": "https://security.gentoo.org/glsa/201701-01"
            },
            {
              "name": "http://www.oracle.com/technetwork/security-advisory/cpuoct2016-2881722.html",
              "refsource": "CONFIRM",
              "url": "http://www.oracle.com/technetwork/security-advisory/cpuoct2016-2881722.html"
            },
            {
              "name": "93650",
              "refsource": "BID",
              "url": "http://www.securityfocus.com/bid/93650"
            },
            {
              "name": "RHSA-2016:2130",
              "refsource": "REDHAT",
              "url": "http://rhn.redhat.com/errata/RHSA-2016-2130.html"
            },
            {
              "name": "RHSA-2016:2927",
              "refsource": "REDHAT",
              "url": "http://rhn.redhat.com/errata/RHSA-2016-2927.html"
            },
            {
              "name": "RHSA-2016:2595",
              "refsource": "REDHAT",
              "url": "http://rhn.redhat.com/errata/RHSA-2016-2595.html"
            },
            {
              "name": "https://mariadb.com/kb/en/mariadb/mariadb-10118-release-notes/",
              "refsource": "CONFIRM",
              "url": "https://mariadb.com/kb/en/mariadb/mariadb-10118-release-notes/"
            },
            {
              "name": "1037050",
              "refsource": "SECTRACK",
              "url": "http://www.securitytracker.com/id/1037050"
            },
            {
              "name": "RHSA-2016:2928",
              "refsource": "REDHAT",
              "url": "http://rhn.redhat.com/errata/RHSA-2016-2928.html"
            },
            {
              "name": "https://mariadb.com/kb/en/mariadb/mariadb-10028-release-notes/",
              "refsource": "CONFIRM",
              "url": "https://mariadb.com/kb/en/mariadb/mariadb-10028-release-notes/"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "43595867-4340-4103-b7a2-9a5208d29a85",
    "assignerShortName": "oracle",
    "cveId": "CVE-2016-3492",
    "datePublished": "2016-10-25T14:00:00.000Z",
    "dateReserved": "2016-03-17T00:00:00.000Z",
    "dateUpdated": "2024-10-10T18:49:00.294Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

CVE-2016-5612 (GCVE-0-2016-5612)

Vulnerability from cvelistv5 – Published: 2016-10-25 14:00 – Updated: 2024-10-10 18:17

Summary

Unspecified vulnerability in Oracle MySQL 5.5.50 and earlier, 5.6.31 and earlier, and 5.7.13 and earlier allows remote authenticated users to affect availability via vectors related to DML.

Severity

No CVSS data available.

SSVC

Exploitation: none Automatable: no Technical Impact: partial

CISA Coordinator · CISA-ADP (v2.0.3)

Decision recorded 2024-10-10 17:48 UTC

CWE

Assigner

oracle mitre root

References

9 references

URL	Tags
http://rhn.redhat.com/errata/RHSA-2016-2131.html	vendor-advisoryx_refsource_REDHAT
http://www.securityfocus.com/bid/93630	vdb-entryx_refsource_BID
https://security.gentoo.org/glsa/201701-01	vendor-advisoryx_refsource_GENTOO
http://www.oracle.com/technetwork/security-adviso…	x_refsource_CONFIRM
http://rhn.redhat.com/errata/RHSA-2016-1601.html	vendor-advisoryx_refsource_REDHAT
http://rhn.redhat.com/errata/RHSA-2016-2130.html	vendor-advisoryx_refsource_REDHAT
http://rhn.redhat.com/errata/RHSA-2016-2927.html	vendor-advisoryx_refsource_REDHAT
http://rhn.redhat.com/errata/RHSA-2016-2595.html	vendor-advisoryx_refsource_REDHAT
http://www.securitytracker.com/id/1037050	vdb-entryx_refsource_SECTRACK

Date Public

2016-10-18 00:00

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-06T01:07:57.983Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "name": "RHSA-2016:2131",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://rhn.redhat.com/errata/RHSA-2016-2131.html"
          },
          {
            "name": "93630",
            "tags": [
              "vdb-entry",
              "x_refsource_BID",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/bid/93630"
          },
          {
            "name": "GLSA-201701-01",
            "tags": [
              "vendor-advisory",
              "x_refsource_GENTOO",
              "x_transferred"
            ],
            "url": "https://security.gentoo.org/glsa/201701-01"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://www.oracle.com/technetwork/security-advisory/cpuoct2016-2881722.html"
          },
          {
            "name": "RHSA-2016:1601",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://rhn.redhat.com/errata/RHSA-2016-1601.html"
          },
          {
            "name": "RHSA-2016:2130",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://rhn.redhat.com/errata/RHSA-2016-2130.html"
          },
          {
            "name": "RHSA-2016:2927",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://rhn.redhat.com/errata/RHSA-2016-2927.html"
          },
          {
            "name": "RHSA-2016:2595",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://rhn.redhat.com/errata/RHSA-2016-2595.html"
          },
          {
            "name": "1037050",
            "tags": [
              "vdb-entry",
              "x_refsource_SECTRACK",
              "x_transferred"
            ],
            "url": "http://www.securitytracker.com/id/1037050"
          }
        ],
        "title": "CVE Program Container"
      },
      {
        "metrics": [
          {
            "other": {
              "content": {
                "id": "CVE-2016-5612",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "partial"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2024-10-10T17:48:48.425793Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2024-10-10T18:17:18.308Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "datePublic": "2016-10-18T00:00:00.000Z",
      "descriptions": [
        {
          "lang": "en",
          "value": "Unspecified vulnerability in Oracle MySQL 5.5.50 and earlier, 5.6.31 and earlier, and 5.7.13 and earlier allows remote authenticated users to affect availability via vectors related to DML."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "n/a",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2018-01-04T19:57:01.000Z",
        "orgId": "43595867-4340-4103-b7a2-9a5208d29a85",
        "shortName": "oracle"
      },
      "references": [
        {
          "name": "RHSA-2016:2131",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://rhn.redhat.com/errata/RHSA-2016-2131.html"
        },
        {
          "name": "93630",
          "tags": [
            "vdb-entry",
            "x_refsource_BID"
          ],
          "url": "http://www.securityfocus.com/bid/93630"
        },
        {
          "name": "GLSA-201701-01",
          "tags": [
            "vendor-advisory",
            "x_refsource_GENTOO"
          ],
          "url": "https://security.gentoo.org/glsa/201701-01"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://www.oracle.com/technetwork/security-advisory/cpuoct2016-2881722.html"
        },
        {
          "name": "RHSA-2016:1601",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://rhn.redhat.com/errata/RHSA-2016-1601.html"
        },
        {
          "name": "RHSA-2016:2130",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://rhn.redhat.com/errata/RHSA-2016-2130.html"
        },
        {
          "name": "RHSA-2016:2927",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://rhn.redhat.com/errata/RHSA-2016-2927.html"
        },
        {
          "name": "RHSA-2016:2595",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://rhn.redhat.com/errata/RHSA-2016-2595.html"
        },
        {
          "name": "1037050",
          "tags": [
            "vdb-entry",
            "x_refsource_SECTRACK"
          ],
          "url": "http://www.securitytracker.com/id/1037050"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "secalert_us@oracle.com",
          "ID": "CVE-2016-5612",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "n/a",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "n/a"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "n/a"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "Unspecified vulnerability in Oracle MySQL 5.5.50 and earlier, 5.6.31 and earlier, and 5.7.13 and earlier allows remote authenticated users to affect availability via vectors related to DML."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "n/a"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "RHSA-2016:2131",
              "refsource": "REDHAT",
              "url": "http://rhn.redhat.com/errata/RHSA-2016-2131.html"
            },
            {
              "name": "93630",
              "refsource": "BID",
              "url": "http://www.securityfocus.com/bid/93630"
            },
            {
              "name": "GLSA-201701-01",
              "refsource": "GENTOO",
              "url": "https://security.gentoo.org/glsa/201701-01"
            },
            {
              "name": "http://www.oracle.com/technetwork/security-advisory/cpuoct2016-2881722.html",
              "refsource": "CONFIRM",
              "url": "http://www.oracle.com/technetwork/security-advisory/cpuoct2016-2881722.html"
            },
            {
              "name": "RHSA-2016:1601",
              "refsource": "REDHAT",
              "url": "http://rhn.redhat.com/errata/RHSA-2016-1601.html"
            },
            {
              "name": "RHSA-2016:2130",
              "refsource": "REDHAT",
              "url": "http://rhn.redhat.com/errata/RHSA-2016-2130.html"
            },
            {
              "name": "RHSA-2016:2927",
              "refsource": "REDHAT",
              "url": "http://rhn.redhat.com/errata/RHSA-2016-2927.html"
            },
            {
              "name": "RHSA-2016:2595",
              "refsource": "REDHAT",
              "url": "http://rhn.redhat.com/errata/RHSA-2016-2595.html"
            },
            {
              "name": "1037050",
              "refsource": "SECTRACK",
              "url": "http://www.securitytracker.com/id/1037050"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "43595867-4340-4103-b7a2-9a5208d29a85",
    "assignerShortName": "oracle",
    "cveId": "CVE-2016-5612",
    "datePublished": "2016-10-25T14:00:00.000Z",
    "dateReserved": "2016-06-16T00:00:00.000Z",
    "dateUpdated": "2024-10-10T18:17:18.308Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

CVE-2016-5616 (GCVE-0-2016-5616)

Vulnerability from cvelistv5 – Published: 2016-10-25 14:00 – Updated: 2016-12-13 20:57

DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2016-6663. Reason: This candidate is a reservation duplicate of CVE-2016-6663. Notes: All CVE users should reference CVE-2016-6663 instead of this candidate. All references and descriptions in this candidate have been removed to prevent accidental usage

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "cna": {
      "providerMetadata": {
        "dateUpdated": "2016-12-13T20:57:01.000Z",
        "orgId": "43595867-4340-4103-b7a2-9a5208d29a85",
        "shortName": "oracle"
      },
      "rejectedReasons": [
        {
          "lang": "en",
          "value": "DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2016-6663. Reason:  This candidate is a reservation duplicate of CVE-2016-6663.  Notes: All CVE users should reference CVE-2016-6663 instead of this candidate.  All references and descriptions in this candidate have been removed to prevent accidental usage"
        }
      ]
    }
  },
  "cveMetadata": {
    "assignerOrgId": "43595867-4340-4103-b7a2-9a5208d29a85",
    "assignerShortName": "oracle",
    "cveId": "CVE-2016-5616",
    "datePublished": "2016-10-25T14:00:00.000Z",
    "dateRejected": "2016-12-13T20:57:01.000Z",
    "dateReserved": "2016-06-16T00:00:00.000Z",
    "dateUpdated": "2016-12-13T20:57:01.000Z",
    "state": "REJECTED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.0"
}

CVE-2016-5624 (GCVE-0-2016-5624)

Vulnerability from cvelistv5 – Published: 2016-10-25 14:00 – Updated: 2024-10-10 18:15

Summary

Unspecified vulnerability in Oracle MySQL 5.5.51 and earlier allows remote authenticated users to affect availability via vectors related to DML.

Severity

No CVSS data available.

SSVC

Exploitation: none Automatable: no Technical Impact: partial

CISA Coordinator · CISA-ADP (v2.0.3)

Decision recorded 2024-10-10 17:48 UTC

CWE

Assigner

oracle mitre root

References

11 references

URL	Tags
http://rhn.redhat.com/errata/RHSA-2016-2131.html	vendor-advisoryx_refsource_REDHAT
https://mariadb.com/kb/en/mariadb/mariadb-5552-re…	x_refsource_CONFIRM
http://www.oracle.com/technetwork/security-adviso…	x_refsource_CONFIRM
http://www.securityfocus.com/bid/93635	vdb-entryx_refsource_BID
http://rhn.redhat.com/errata/RHSA-2016-2130.html	vendor-advisoryx_refsource_REDHAT
http://rhn.redhat.com/errata/RHSA-2016-2927.html	vendor-advisoryx_refsource_REDHAT
http://rhn.redhat.com/errata/RHSA-2016-2595.html	vendor-advisoryx_refsource_REDHAT
https://mariadb.com/kb/en/mariadb/mariadb-10118-r…	x_refsource_CONFIRM
http://www.securitytracker.com/id/1037050	vdb-entryx_refsource_SECTRACK
http://rhn.redhat.com/errata/RHSA-2016-2928.html	vendor-advisoryx_refsource_REDHAT
https://mariadb.com/kb/en/mariadb/mariadb-10028-r…	x_refsource_CONFIRM

Date Public

2016-10-18 00:00

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-06T01:07:59.111Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "name": "RHSA-2016:2131",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://rhn.redhat.com/errata/RHSA-2016-2131.html"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://mariadb.com/kb/en/mariadb/mariadb-5552-release-notes/"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://www.oracle.com/technetwork/security-advisory/cpuoct2016-2881722.html"
          },
          {
            "name": "93635",
            "tags": [
              "vdb-entry",
              "x_refsource_BID",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/bid/93635"
          },
          {
            "name": "RHSA-2016:2130",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://rhn.redhat.com/errata/RHSA-2016-2130.html"
          },
          {
            "name": "RHSA-2016:2927",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://rhn.redhat.com/errata/RHSA-2016-2927.html"
          },
          {
            "name": "RHSA-2016:2595",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://rhn.redhat.com/errata/RHSA-2016-2595.html"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://mariadb.com/kb/en/mariadb/mariadb-10118-release-notes/"
          },
          {
            "name": "1037050",
            "tags": [
              "vdb-entry",
              "x_refsource_SECTRACK",
              "x_transferred"
            ],
            "url": "http://www.securitytracker.com/id/1037050"
          },
          {
            "name": "RHSA-2016:2928",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://rhn.redhat.com/errata/RHSA-2016-2928.html"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://mariadb.com/kb/en/mariadb/mariadb-10028-release-notes/"
          }
        ],
        "title": "CVE Program Container"
      },
      {
        "metrics": [
          {
            "other": {
              "content": {
                "id": "CVE-2016-5624",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "partial"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2024-10-10T17:48:38.224537Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2024-10-10T18:15:59.847Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "datePublic": "2016-10-18T00:00:00.000Z",
      "descriptions": [
        {
          "lang": "en",
          "value": "Unspecified vulnerability in Oracle MySQL 5.5.51 and earlier allows remote authenticated users to affect availability via vectors related to DML."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "n/a",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2018-01-04T19:57:01.000Z",
        "orgId": "43595867-4340-4103-b7a2-9a5208d29a85",
        "shortName": "oracle"
      },
      "references": [
        {
          "name": "RHSA-2016:2131",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://rhn.redhat.com/errata/RHSA-2016-2131.html"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://mariadb.com/kb/en/mariadb/mariadb-5552-release-notes/"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://www.oracle.com/technetwork/security-advisory/cpuoct2016-2881722.html"
        },
        {
          "name": "93635",
          "tags": [
            "vdb-entry",
            "x_refsource_BID"
          ],
          "url": "http://www.securityfocus.com/bid/93635"
        },
        {
          "name": "RHSA-2016:2130",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://rhn.redhat.com/errata/RHSA-2016-2130.html"
        },
        {
          "name": "RHSA-2016:2927",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://rhn.redhat.com/errata/RHSA-2016-2927.html"
        },
        {
          "name": "RHSA-2016:2595",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://rhn.redhat.com/errata/RHSA-2016-2595.html"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://mariadb.com/kb/en/mariadb/mariadb-10118-release-notes/"
        },
        {
          "name": "1037050",
          "tags": [
            "vdb-entry",
            "x_refsource_SECTRACK"
          ],
          "url": "http://www.securitytracker.com/id/1037050"
        },
        {
          "name": "RHSA-2016:2928",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://rhn.redhat.com/errata/RHSA-2016-2928.html"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://mariadb.com/kb/en/mariadb/mariadb-10028-release-notes/"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "secalert_us@oracle.com",
          "ID": "CVE-2016-5624",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "n/a",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "n/a"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "n/a"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "Unspecified vulnerability in Oracle MySQL 5.5.51 and earlier allows remote authenticated users to affect availability via vectors related to DML."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "n/a"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "RHSA-2016:2131",
              "refsource": "REDHAT",
              "url": "http://rhn.redhat.com/errata/RHSA-2016-2131.html"
            },
            {
              "name": "https://mariadb.com/kb/en/mariadb/mariadb-5552-release-notes/",
              "refsource": "CONFIRM",
              "url": "https://mariadb.com/kb/en/mariadb/mariadb-5552-release-notes/"
            },
            {
              "name": "http://www.oracle.com/technetwork/security-advisory/cpuoct2016-2881722.html",
              "refsource": "CONFIRM",
              "url": "http://www.oracle.com/technetwork/security-advisory/cpuoct2016-2881722.html"
            },
            {
              "name": "93635",
              "refsource": "BID",
              "url": "http://www.securityfocus.com/bid/93635"
            },
            {
              "name": "RHSA-2016:2130",
              "refsource": "REDHAT",
              "url": "http://rhn.redhat.com/errata/RHSA-2016-2130.html"
            },
            {
              "name": "RHSA-2016:2927",
              "refsource": "REDHAT",
              "url": "http://rhn.redhat.com/errata/RHSA-2016-2927.html"
            },
            {
              "name": "RHSA-2016:2595",
              "refsource": "REDHAT",
              "url": "http://rhn.redhat.com/errata/RHSA-2016-2595.html"
            },
            {
              "name": "https://mariadb.com/kb/en/mariadb/mariadb-10118-release-notes/",
              "refsource": "CONFIRM",
              "url": "https://mariadb.com/kb/en/mariadb/mariadb-10118-release-notes/"
            },
            {
              "name": "1037050",
              "refsource": "SECTRACK",
              "url": "http://www.securitytracker.com/id/1037050"
            },
            {
              "name": "RHSA-2016:2928",
              "refsource": "REDHAT",
              "url": "http://rhn.redhat.com/errata/RHSA-2016-2928.html"
            },
            {
              "name": "https://mariadb.com/kb/en/mariadb/mariadb-10028-release-notes/",
              "refsource": "CONFIRM",
              "url": "https://mariadb.com/kb/en/mariadb/mariadb-10028-release-notes/"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "43595867-4340-4103-b7a2-9a5208d29a85",
    "assignerShortName": "oracle",
    "cveId": "CVE-2016-5624",
    "datePublished": "2016-10-25T14:00:00.000Z",
    "dateReserved": "2016-06-16T00:00:00.000Z",
    "dateUpdated": "2024-10-10T18:15:59.847Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

CVE-2016-5626 (GCVE-0-2016-5626)

Vulnerability from cvelistv5 – Published: 2016-10-25 14:00 – Updated: 2024-10-10 18:15

Summary

Unspecified vulnerability in Oracle MySQL 5.5.51 and earlier, 5.6.32 and earlier, and 5.7.14 and earlier allows remote authenticated users to affect availability via vectors related to GIS.

Severity

No CVSS data available.

SSVC

Exploitation: none Automatable: no Technical Impact: partial

CISA Coordinator · CISA-ADP (v2.0.3)

Decision recorded 2024-10-10 17:48 UTC

CWE

Assigner

oracle mitre root

References

13 references

URL	Tags
http://rhn.redhat.com/errata/RHSA-2016-2749.html	vendor-advisoryx_refsource_REDHAT
http://rhn.redhat.com/errata/RHSA-2016-2131.html	vendor-advisoryx_refsource_REDHAT
https://mariadb.com/kb/en/mariadb/mariadb-5552-re…	x_refsource_CONFIRM
https://security.gentoo.org/glsa/201701-01	vendor-advisoryx_refsource_GENTOO
http://www.oracle.com/technetwork/security-adviso…	x_refsource_CONFIRM
http://rhn.redhat.com/errata/RHSA-2016-2130.html	vendor-advisoryx_refsource_REDHAT
http://rhn.redhat.com/errata/RHSA-2016-2927.html	vendor-advisoryx_refsource_REDHAT
http://www.securityfocus.com/bid/93638	vdb-entryx_refsource_BID
http://rhn.redhat.com/errata/RHSA-2016-2595.html	vendor-advisoryx_refsource_REDHAT
https://mariadb.com/kb/en/mariadb/mariadb-10118-r…	x_refsource_CONFIRM
http://www.securitytracker.com/id/1037050	vdb-entryx_refsource_SECTRACK
http://rhn.redhat.com/errata/RHSA-2016-2928.html	vendor-advisoryx_refsource_REDHAT
https://mariadb.com/kb/en/mariadb/mariadb-10028-r…	x_refsource_CONFIRM

Date Public

2016-10-18 00:00

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-06T01:07:58.947Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "name": "RHSA-2016:2749",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://rhn.redhat.com/errata/RHSA-2016-2749.html"
          },
          {
            "name": "RHSA-2016:2131",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://rhn.redhat.com/errata/RHSA-2016-2131.html"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://mariadb.com/kb/en/mariadb/mariadb-5552-release-notes/"
          },
          {
            "name": "GLSA-201701-01",
            "tags": [
              "vendor-advisory",
              "x_refsource_GENTOO",
              "x_transferred"
            ],
            "url": "https://security.gentoo.org/glsa/201701-01"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://www.oracle.com/technetwork/security-advisory/cpuoct2016-2881722.html"
          },
          {
            "name": "RHSA-2016:2130",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://rhn.redhat.com/errata/RHSA-2016-2130.html"
          },
          {
            "name": "RHSA-2016:2927",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://rhn.redhat.com/errata/RHSA-2016-2927.html"
          },
          {
            "name": "93638",
            "tags": [
              "vdb-entry",
              "x_refsource_BID",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/bid/93638"
          },
          {
            "name": "RHSA-2016:2595",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://rhn.redhat.com/errata/RHSA-2016-2595.html"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://mariadb.com/kb/en/mariadb/mariadb-10118-release-notes/"
          },
          {
            "name": "1037050",
            "tags": [
              "vdb-entry",
              "x_refsource_SECTRACK",
              "x_transferred"
            ],
            "url": "http://www.securitytracker.com/id/1037050"
          },
          {
            "name": "RHSA-2016:2928",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://rhn.redhat.com/errata/RHSA-2016-2928.html"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://mariadb.com/kb/en/mariadb/mariadb-10028-release-notes/"
          }
        ],
        "title": "CVE Program Container"
      },
      {
        "metrics": [
          {
            "other": {
              "content": {
                "id": "CVE-2016-5626",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "partial"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2024-10-10T17:48:36.897476Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2024-10-10T18:15:41.870Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "datePublic": "2016-10-18T00:00:00.000Z",
      "descriptions": [
        {
          "lang": "en",
          "value": "Unspecified vulnerability in Oracle MySQL 5.5.51 and earlier, 5.6.32 and earlier, and 5.7.14 and earlier allows remote authenticated users to affect availability via vectors related to GIS."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "n/a",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2018-01-04T19:57:01.000Z",
        "orgId": "43595867-4340-4103-b7a2-9a5208d29a85",
        "shortName": "oracle"
      },
      "references": [
        {
          "name": "RHSA-2016:2749",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://rhn.redhat.com/errata/RHSA-2016-2749.html"
        },
        {
          "name": "RHSA-2016:2131",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://rhn.redhat.com/errata/RHSA-2016-2131.html"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://mariadb.com/kb/en/mariadb/mariadb-5552-release-notes/"
        },
        {
          "name": "GLSA-201701-01",
          "tags": [
            "vendor-advisory",
            "x_refsource_GENTOO"
          ],
          "url": "https://security.gentoo.org/glsa/201701-01"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://www.oracle.com/technetwork/security-advisory/cpuoct2016-2881722.html"
        },
        {
          "name": "RHSA-2016:2130",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://rhn.redhat.com/errata/RHSA-2016-2130.html"
        },
        {
          "name": "RHSA-2016:2927",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://rhn.redhat.com/errata/RHSA-2016-2927.html"
        },
        {
          "name": "93638",
          "tags": [
            "vdb-entry",
            "x_refsource_BID"
          ],
          "url": "http://www.securityfocus.com/bid/93638"
        },
        {
          "name": "RHSA-2016:2595",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://rhn.redhat.com/errata/RHSA-2016-2595.html"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://mariadb.com/kb/en/mariadb/mariadb-10118-release-notes/"
        },
        {
          "name": "1037050",
          "tags": [
            "vdb-entry",
            "x_refsource_SECTRACK"
          ],
          "url": "http://www.securitytracker.com/id/1037050"
        },
        {
          "name": "RHSA-2016:2928",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://rhn.redhat.com/errata/RHSA-2016-2928.html"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://mariadb.com/kb/en/mariadb/mariadb-10028-release-notes/"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "secalert_us@oracle.com",
          "ID": "CVE-2016-5626",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "n/a",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "n/a"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "n/a"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "Unspecified vulnerability in Oracle MySQL 5.5.51 and earlier, 5.6.32 and earlier, and 5.7.14 and earlier allows remote authenticated users to affect availability via vectors related to GIS."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "n/a"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "RHSA-2016:2749",
              "refsource": "REDHAT",
              "url": "http://rhn.redhat.com/errata/RHSA-2016-2749.html"
            },
            {
              "name": "RHSA-2016:2131",
              "refsource": "REDHAT",
              "url": "http://rhn.redhat.com/errata/RHSA-2016-2131.html"
            },
            {
              "name": "https://mariadb.com/kb/en/mariadb/mariadb-5552-release-notes/",
              "refsource": "CONFIRM",
              "url": "https://mariadb.com/kb/en/mariadb/mariadb-5552-release-notes/"
            },
            {
              "name": "GLSA-201701-01",
              "refsource": "GENTOO",
              "url": "https://security.gentoo.org/glsa/201701-01"
            },
            {
              "name": "http://www.oracle.com/technetwork/security-advisory/cpuoct2016-2881722.html",
              "refsource": "CONFIRM",
              "url": "http://www.oracle.com/technetwork/security-advisory/cpuoct2016-2881722.html"
            },
            {
              "name": "RHSA-2016:2130",
              "refsource": "REDHAT",
              "url": "http://rhn.redhat.com/errata/RHSA-2016-2130.html"
            },
            {
              "name": "RHSA-2016:2927",
              "refsource": "REDHAT",
              "url": "http://rhn.redhat.com/errata/RHSA-2016-2927.html"
            },
            {
              "name": "93638",
              "refsource": "BID",
              "url": "http://www.securityfocus.com/bid/93638"
            },
            {
              "name": "RHSA-2016:2595",
              "refsource": "REDHAT",
              "url": "http://rhn.redhat.com/errata/RHSA-2016-2595.html"
            },
            {
              "name": "https://mariadb.com/kb/en/mariadb/mariadb-10118-release-notes/",
              "refsource": "CONFIRM",
              "url": "https://mariadb.com/kb/en/mariadb/mariadb-10118-release-notes/"
            },
            {
              "name": "1037050",
              "refsource": "SECTRACK",
              "url": "http://www.securitytracker.com/id/1037050"
            },
            {
              "name": "RHSA-2016:2928",
              "refsource": "REDHAT",
              "url": "http://rhn.redhat.com/errata/RHSA-2016-2928.html"
            },
            {
              "name": "https://mariadb.com/kb/en/mariadb/mariadb-10028-release-notes/",
              "refsource": "CONFIRM",
              "url": "https://mariadb.com/kb/en/mariadb/mariadb-10028-release-notes/"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "43595867-4340-4103-b7a2-9a5208d29a85",
    "assignerShortName": "oracle",
    "cveId": "CVE-2016-5626",
    "datePublished": "2016-10-25T14:00:00.000Z",
    "dateReserved": "2016-06-16T00:00:00.000Z",
    "dateUpdated": "2024-10-10T18:15:41.870Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

CVE-2016-5629 (GCVE-0-2016-5629)

Vulnerability from cvelistv5 – Published: 2016-10-25 14:00 – Updated: 2024-10-10 18:15

Summary

Unspecified vulnerability in Oracle MySQL 5.5.51 and earlier, 5.6.32 and earlier, and 5.7.14 and earlier allows remote administrators to affect availability via vectors related to Server: Federated.

Severity

No CVSS data available.

SSVC

Exploitation: none Automatable: no Technical Impact: partial

CISA Coordinator · CISA-ADP (v2.0.3)

Decision recorded 2024-10-10 17:48 UTC

CWE

Assigner

oracle mitre root

References

13 references

URL	Tags
http://rhn.redhat.com/errata/RHSA-2016-2749.html	vendor-advisoryx_refsource_REDHAT
http://rhn.redhat.com/errata/RHSA-2016-2131.html	vendor-advisoryx_refsource_REDHAT
http://www.securityfocus.com/bid/93668	vdb-entryx_refsource_BID
https://mariadb.com/kb/en/mariadb/mariadb-5552-re…	x_refsource_CONFIRM
https://security.gentoo.org/glsa/201701-01	vendor-advisoryx_refsource_GENTOO
http://www.oracle.com/technetwork/security-adviso…	x_refsource_CONFIRM
http://rhn.redhat.com/errata/RHSA-2016-2130.html	vendor-advisoryx_refsource_REDHAT
http://rhn.redhat.com/errata/RHSA-2016-2927.html	vendor-advisoryx_refsource_REDHAT
http://rhn.redhat.com/errata/RHSA-2016-2595.html	vendor-advisoryx_refsource_REDHAT
https://mariadb.com/kb/en/mariadb/mariadb-10118-r…	x_refsource_CONFIRM
http://www.securitytracker.com/id/1037050	vdb-entryx_refsource_SECTRACK
http://rhn.redhat.com/errata/RHSA-2016-2928.html	vendor-advisoryx_refsource_REDHAT
https://mariadb.com/kb/en/mariadb/mariadb-10028-r…	x_refsource_CONFIRM

Date Public

2016-10-18 00:00

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-06T01:07:58.785Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "name": "RHSA-2016:2749",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://rhn.redhat.com/errata/RHSA-2016-2749.html"
          },
          {
            "name": "RHSA-2016:2131",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://rhn.redhat.com/errata/RHSA-2016-2131.html"
          },
          {
            "name": "93668",
            "tags": [
              "vdb-entry",
              "x_refsource_BID",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/bid/93668"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://mariadb.com/kb/en/mariadb/mariadb-5552-release-notes/"
          },
          {
            "name": "GLSA-201701-01",
            "tags": [
              "vendor-advisory",
              "x_refsource_GENTOO",
              "x_transferred"
            ],
            "url": "https://security.gentoo.org/glsa/201701-01"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://www.oracle.com/technetwork/security-advisory/cpuoct2016-2881722.html"
          },
          {
            "name": "RHSA-2016:2130",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://rhn.redhat.com/errata/RHSA-2016-2130.html"
          },
          {
            "name": "RHSA-2016:2927",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://rhn.redhat.com/errata/RHSA-2016-2927.html"
          },
          {
            "name": "RHSA-2016:2595",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://rhn.redhat.com/errata/RHSA-2016-2595.html"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://mariadb.com/kb/en/mariadb/mariadb-10118-release-notes/"
          },
          {
            "name": "1037050",
            "tags": [
              "vdb-entry",
              "x_refsource_SECTRACK",
              "x_transferred"
            ],
            "url": "http://www.securitytracker.com/id/1037050"
          },
          {
            "name": "RHSA-2016:2928",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://rhn.redhat.com/errata/RHSA-2016-2928.html"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://mariadb.com/kb/en/mariadb/mariadb-10028-release-notes/"
          }
        ],
        "title": "CVE Program Container"
      },
      {
        "metrics": [
          {
            "other": {
              "content": {
                "id": "CVE-2016-5629",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "partial"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2024-10-10T17:48:33.270458Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2024-10-10T18:15:10.134Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "datePublic": "2016-10-18T00:00:00.000Z",
      "descriptions": [
        {
          "lang": "en",
          "value": "Unspecified vulnerability in Oracle MySQL 5.5.51 and earlier, 5.6.32 and earlier, and 5.7.14 and earlier allows remote administrators to affect availability via vectors related to Server: Federated."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "n/a",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2018-01-04T19:57:01.000Z",
        "orgId": "43595867-4340-4103-b7a2-9a5208d29a85",
        "shortName": "oracle"
      },
      "references": [
        {
          "name": "RHSA-2016:2749",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://rhn.redhat.com/errata/RHSA-2016-2749.html"
        },
        {
          "name": "RHSA-2016:2131",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://rhn.redhat.com/errata/RHSA-2016-2131.html"
        },
        {
          "name": "93668",
          "tags": [
            "vdb-entry",
            "x_refsource_BID"
          ],
          "url": "http://www.securityfocus.com/bid/93668"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://mariadb.com/kb/en/mariadb/mariadb-5552-release-notes/"
        },
        {
          "name": "GLSA-201701-01",
          "tags": [
            "vendor-advisory",
            "x_refsource_GENTOO"
          ],
          "url": "https://security.gentoo.org/glsa/201701-01"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://www.oracle.com/technetwork/security-advisory/cpuoct2016-2881722.html"
        },
        {
          "name": "RHSA-2016:2130",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://rhn.redhat.com/errata/RHSA-2016-2130.html"
        },
        {
          "name": "RHSA-2016:2927",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://rhn.redhat.com/errata/RHSA-2016-2927.html"
        },
        {
          "name": "RHSA-2016:2595",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://rhn.redhat.com/errata/RHSA-2016-2595.html"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://mariadb.com/kb/en/mariadb/mariadb-10118-release-notes/"
        },
        {
          "name": "1037050",
          "tags": [
            "vdb-entry",
            "x_refsource_SECTRACK"
          ],
          "url": "http://www.securitytracker.com/id/1037050"
        },
        {
          "name": "RHSA-2016:2928",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://rhn.redhat.com/errata/RHSA-2016-2928.html"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://mariadb.com/kb/en/mariadb/mariadb-10028-release-notes/"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "secalert_us@oracle.com",
          "ID": "CVE-2016-5629",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "n/a",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "n/a"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "n/a"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "Unspecified vulnerability in Oracle MySQL 5.5.51 and earlier, 5.6.32 and earlier, and 5.7.14 and earlier allows remote administrators to affect availability via vectors related to Server: Federated."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "n/a"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "RHSA-2016:2749",
              "refsource": "REDHAT",
              "url": "http://rhn.redhat.com/errata/RHSA-2016-2749.html"
            },
            {
              "name": "RHSA-2016:2131",
              "refsource": "REDHAT",
              "url": "http://rhn.redhat.com/errata/RHSA-2016-2131.html"
            },
            {
              "name": "93668",
              "refsource": "BID",
              "url": "http://www.securityfocus.com/bid/93668"
            },
            {
              "name": "https://mariadb.com/kb/en/mariadb/mariadb-5552-release-notes/",
              "refsource": "CONFIRM",
              "url": "https://mariadb.com/kb/en/mariadb/mariadb-5552-release-notes/"
            },
            {
              "name": "GLSA-201701-01",
              "refsource": "GENTOO",
              "url": "https://security.gentoo.org/glsa/201701-01"
            },
            {
              "name": "http://www.oracle.com/technetwork/security-advisory/cpuoct2016-2881722.html",
              "refsource": "CONFIRM",
              "url": "http://www.oracle.com/technetwork/security-advisory/cpuoct2016-2881722.html"
            },
            {
              "name": "RHSA-2016:2130",
              "refsource": "REDHAT",
              "url": "http://rhn.redhat.com/errata/RHSA-2016-2130.html"
            },
            {
              "name": "RHSA-2016:2927",
              "refsource": "REDHAT",
              "url": "http://rhn.redhat.com/errata/RHSA-2016-2927.html"
            },
            {
              "name": "RHSA-2016:2595",
              "refsource": "REDHAT",
              "url": "http://rhn.redhat.com/errata/RHSA-2016-2595.html"
            },
            {
              "name": "https://mariadb.com/kb/en/mariadb/mariadb-10118-release-notes/",
              "refsource": "CONFIRM",
              "url": "https://mariadb.com/kb/en/mariadb/mariadb-10118-release-notes/"
            },
            {
              "name": "1037050",
              "refsource": "SECTRACK",
              "url": "http://www.securitytracker.com/id/1037050"
            },
            {
              "name": "RHSA-2016:2928",
              "refsource": "REDHAT",
              "url": "http://rhn.redhat.com/errata/RHSA-2016-2928.html"
            },
            {
              "name": "https://mariadb.com/kb/en/mariadb/mariadb-10028-release-notes/",
              "refsource": "CONFIRM",
              "url": "https://mariadb.com/kb/en/mariadb/mariadb-10028-release-notes/"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "43595867-4340-4103-b7a2-9a5208d29a85",
    "assignerShortName": "oracle",
    "cveId": "CVE-2016-5629",
    "datePublished": "2016-10-25T14:00:00.000Z",
    "dateReserved": "2016-06-16T00:00:00.000Z",
    "dateUpdated": "2024-10-10T18:15:10.134Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

CVE-2016-6662 (GCVE-0-2016-6662)

Vulnerability from cvelistv5 – Published: 2016-09-20 18:00 – Updated: 2024-08-06 01:36

Summary

Oracle MySQL through 5.5.52, 5.6.x through 5.6.33, and 5.7.x through 5.7.15; MariaDB before 5.5.51, 10.0.x before 10.0.27, and 10.1.x before 10.1.17; and Percona Server before 5.5.51-38.1, 5.6.x before 5.6.32-78.0, and 5.7.x before 5.7.14-7 allow local users to create arbitrary configurations and bypass certain protection mechanisms by setting general_log_file to a my.cnf configuration. NOTE: this can be leveraged to execute arbitrary code with root privileges by setting malloc_lib. NOTE: the affected MySQL version information is from Oracle's October 2016 CPU. Oracle has not commented on third-party claims that the issue was silently patched in MySQL 5.5.52, 5.6.33, and 5.7.15.

Severity

No CVSS data available.

CWE

Assigner

mitre mitre root

References

27 references

URL	Tags
https://mariadb.com/kb/en/mariadb/mariadb-10027-r…	x_refsource_CONFIRM
http://rhn.redhat.com/errata/RHSA-2016-2749.html	vendor-advisoryx_refsource_REDHAT
http://rhn.redhat.com/errata/RHSA-2017-0184.html	vendor-advisoryx_refsource_REDHAT
http://rhn.redhat.com/errata/RHSA-2016-2131.html	vendor-advisoryx_refsource_REDHAT
http://rhn.redhat.com/errata/RHSA-2016-2060.html	vendor-advisoryx_refsource_REDHAT
https://mariadb.com/kb/en/mariadb/mariadb-10117-r…	x_refsource_CONFIRM
https://mariadb.com/kb/en/mariadb/mariadb-5551-re…	x_refsource_CONFIRM
https://jira.mariadb.org/browse/MDEV-10465	x_refsource_CONFIRM
http://www.securityfocus.com/bid/92912	vdb-entryx_refsource_BID
http://seclists.org/fulldisclosure/2016/Sep/23	mailing-listx_refsource_FULLDISC
https://security.gentoo.org/glsa/201701-01	vendor-advisoryx_refsource_GENTOO
http://www.debian.org/security/2016/dsa-3666	vendor-advisoryx_refsource_DEBIAN
http://www.oracle.com/technetwork/security-adviso…	x_refsource_CONFIRM
http://rhn.redhat.com/errata/RHSA-2016-2130.html	vendor-advisoryx_refsource_REDHAT
http://rhn.redhat.com/errata/RHSA-2016-2077.html	vendor-advisoryx_refsource_REDHAT
http://rhn.redhat.com/errata/RHSA-2016-2927.html	vendor-advisoryx_refsource_REDHAT
http://rhn.redhat.com/errata/RHSA-2016-2059.html	vendor-advisoryx_refsource_REDHAT
http://legalhackers.com/advisories/MySQL-Exploit-…	x_refsource_MISC
https://www.percona.com/blog/2016/09/12/percona-s…	x_refsource_CONFIRM
http://rhn.redhat.com/errata/RHSA-2016-2062.html	vendor-advisoryx_refsource_REDHAT
http://rhn.redhat.com/errata/RHSA-2016-2595.html	vendor-advisoryx_refsource_REDHAT
http://www.securitytracker.com/id/1036769	vdb-entryx_refsource_SECTRACK
http://rhn.redhat.com/errata/RHSA-2016-2061.html	vendor-advisoryx_refsource_REDHAT
http://www.openwall.com/lists/oss-security/2016/09/12/3	mailing-listx_refsource_MLIST
https://www.exploit-db.com/exploits/40360/	exploitx_refsource_EXPLOIT-DB
http://rhn.redhat.com/errata/RHSA-2016-2928.html	vendor-advisoryx_refsource_REDHAT
http://rhn.redhat.com/errata/RHSA-2016-2058.html	vendor-advisoryx_refsource_REDHAT

Date Public

2016-09-12 00:00

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-06T01:36:29.525Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://mariadb.com/kb/en/mariadb/mariadb-10027-release-notes/"
          },
          {
            "name": "RHSA-2016:2749",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://rhn.redhat.com/errata/RHSA-2016-2749.html"
          },
          {
            "name": "RHSA-2017:0184",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://rhn.redhat.com/errata/RHSA-2017-0184.html"
          },
          {
            "name": "RHSA-2016:2131",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://rhn.redhat.com/errata/RHSA-2016-2131.html"
          },
          {
            "name": "RHSA-2016:2060",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://rhn.redhat.com/errata/RHSA-2016-2060.html"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://mariadb.com/kb/en/mariadb/mariadb-10117-release-notes/"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://mariadb.com/kb/en/mariadb/mariadb-5551-release-notes/"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://jira.mariadb.org/browse/MDEV-10465"
          },
          {
            "name": "92912",
            "tags": [
              "vdb-entry",
              "x_refsource_BID",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/bid/92912"
          },
          {
            "name": "20160912 CVE-2016-6662 - MySQL Remote Root Code Execution / Privilege Escalation ( 0day )",
            "tags": [
              "mailing-list",
              "x_refsource_FULLDISC",
              "x_transferred"
            ],
            "url": "http://seclists.org/fulldisclosure/2016/Sep/23"
          },
          {
            "name": "GLSA-201701-01",
            "tags": [
              "vendor-advisory",
              "x_refsource_GENTOO",
              "x_transferred"
            ],
            "url": "https://security.gentoo.org/glsa/201701-01"
          },
          {
            "name": "DSA-3666",
            "tags": [
              "vendor-advisory",
              "x_refsource_DEBIAN",
              "x_transferred"
            ],
            "url": "http://www.debian.org/security/2016/dsa-3666"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://www.oracle.com/technetwork/security-advisory/cpuoct2016-2881722.html"
          },
          {
            "name": "RHSA-2016:2130",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://rhn.redhat.com/errata/RHSA-2016-2130.html"
          },
          {
            "name": "RHSA-2016:2077",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://rhn.redhat.com/errata/RHSA-2016-2077.html"
          },
          {
            "name": "RHSA-2016:2927",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://rhn.redhat.com/errata/RHSA-2016-2927.html"
          },
          {
            "name": "RHSA-2016:2059",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://rhn.redhat.com/errata/RHSA-2016-2059.html"
          },
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "http://legalhackers.com/advisories/MySQL-Exploit-Remote-Root-Code-Execution-Privesc-CVE-2016-6662.html"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://www.percona.com/blog/2016/09/12/percona-server-critical-update-cve-2016-6662/"
          },
          {
            "name": "RHSA-2016:2062",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://rhn.redhat.com/errata/RHSA-2016-2062.html"
          },
          {
            "name": "RHSA-2016:2595",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://rhn.redhat.com/errata/RHSA-2016-2595.html"
          },
          {
            "name": "1036769",
            "tags": [
              "vdb-entry",
              "x_refsource_SECTRACK",
              "x_transferred"
            ],
            "url": "http://www.securitytracker.com/id/1036769"
          },
          {
            "name": "RHSA-2016:2061",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://rhn.redhat.com/errata/RHSA-2016-2061.html"
          },
          {
            "name": "[oss-security] 20160912 CVE-2016-6662 - MySQL Remote Root Code Execution / Privilege Escalation ( 0day )",
            "tags": [
              "mailing-list",
              "x_refsource_MLIST",
              "x_transferred"
            ],
            "url": "http://www.openwall.com/lists/oss-security/2016/09/12/3"
          },
          {
            "name": "40360",
            "tags": [
              "exploit",
              "x_refsource_EXPLOIT-DB",
              "x_transferred"
            ],
            "url": "https://www.exploit-db.com/exploits/40360/"
          },
          {
            "name": "RHSA-2016:2928",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://rhn.redhat.com/errata/RHSA-2016-2928.html"
          },
          {
            "name": "RHSA-2016:2058",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://rhn.redhat.com/errata/RHSA-2016-2058.html"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "datePublic": "2016-09-12T00:00:00.000Z",
      "descriptions": [
        {
          "lang": "en",
          "value": "Oracle MySQL through 5.5.52, 5.6.x through 5.6.33, and 5.7.x through 5.7.15; MariaDB before 5.5.51, 10.0.x before 10.0.27, and 10.1.x before 10.1.17; and Percona Server before 5.5.51-38.1, 5.6.x before 5.6.32-78.0, and 5.7.x before 5.7.14-7 allow local users to create arbitrary configurations and bypass certain protection mechanisms by setting general_log_file to a my.cnf configuration. NOTE: this can be leveraged to execute arbitrary code with root privileges by setting malloc_lib. NOTE: the affected MySQL version information is from Oracle\u0027s October 2016 CPU. Oracle has not commented on third-party claims that the issue was silently patched in MySQL 5.5.52, 5.6.33, and 5.7.15."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "n/a",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2018-01-04T19:57:01.000Z",
        "orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
        "shortName": "mitre"
      },
      "references": [
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://mariadb.com/kb/en/mariadb/mariadb-10027-release-notes/"
        },
        {
          "name": "RHSA-2016:2749",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://rhn.redhat.com/errata/RHSA-2016-2749.html"
        },
        {
          "name": "RHSA-2017:0184",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://rhn.redhat.com/errata/RHSA-2017-0184.html"
        },
        {
          "name": "RHSA-2016:2131",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://rhn.redhat.com/errata/RHSA-2016-2131.html"
        },
        {
          "name": "RHSA-2016:2060",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://rhn.redhat.com/errata/RHSA-2016-2060.html"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://mariadb.com/kb/en/mariadb/mariadb-10117-release-notes/"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://mariadb.com/kb/en/mariadb/mariadb-5551-release-notes/"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://jira.mariadb.org/browse/MDEV-10465"
        },
        {
          "name": "92912",
          "tags": [
            "vdb-entry",
            "x_refsource_BID"
          ],
          "url": "http://www.securityfocus.com/bid/92912"
        },
        {
          "name": "20160912 CVE-2016-6662 - MySQL Remote Root Code Execution / Privilege Escalation ( 0day )",
          "tags": [
            "mailing-list",
            "x_refsource_FULLDISC"
          ],
          "url": "http://seclists.org/fulldisclosure/2016/Sep/23"
        },
        {
          "name": "GLSA-201701-01",
          "tags": [
            "vendor-advisory",
            "x_refsource_GENTOO"
          ],
          "url": "https://security.gentoo.org/glsa/201701-01"
        },
        {
          "name": "DSA-3666",
          "tags": [
            "vendor-advisory",
            "x_refsource_DEBIAN"
          ],
          "url": "http://www.debian.org/security/2016/dsa-3666"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://www.oracle.com/technetwork/security-advisory/cpuoct2016-2881722.html"
        },
        {
          "name": "RHSA-2016:2130",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://rhn.redhat.com/errata/RHSA-2016-2130.html"
        },
        {
          "name": "RHSA-2016:2077",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://rhn.redhat.com/errata/RHSA-2016-2077.html"
        },
        {
          "name": "RHSA-2016:2927",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://rhn.redhat.com/errata/RHSA-2016-2927.html"
        },
        {
          "name": "RHSA-2016:2059",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://rhn.redhat.com/errata/RHSA-2016-2059.html"
        },
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "http://legalhackers.com/advisories/MySQL-Exploit-Remote-Root-Code-Execution-Privesc-CVE-2016-6662.html"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://www.percona.com/blog/2016/09/12/percona-server-critical-update-cve-2016-6662/"
        },
        {
          "name": "RHSA-2016:2062",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://rhn.redhat.com/errata/RHSA-2016-2062.html"
        },
        {
          "name": "RHSA-2016:2595",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://rhn.redhat.com/errata/RHSA-2016-2595.html"
        },
        {
          "name": "1036769",
          "tags": [
            "vdb-entry",
            "x_refsource_SECTRACK"
          ],
          "url": "http://www.securitytracker.com/id/1036769"
        },
        {
          "name": "RHSA-2016:2061",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://rhn.redhat.com/errata/RHSA-2016-2061.html"
        },
        {
          "name": "[oss-security] 20160912 CVE-2016-6662 - MySQL Remote Root Code Execution / Privilege Escalation ( 0day )",
          "tags": [
            "mailing-list",
            "x_refsource_MLIST"
          ],
          "url": "http://www.openwall.com/lists/oss-security/2016/09/12/3"
        },
        {
          "name": "40360",
          "tags": [
            "exploit",
            "x_refsource_EXPLOIT-DB"
          ],
          "url": "https://www.exploit-db.com/exploits/40360/"
        },
        {
          "name": "RHSA-2016:2928",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://rhn.redhat.com/errata/RHSA-2016-2928.html"
        },
        {
          "name": "RHSA-2016:2058",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://rhn.redhat.com/errata/RHSA-2016-2058.html"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "cve@mitre.org",
          "ID": "CVE-2016-6662",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "n/a",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "n/a"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "n/a"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "Oracle MySQL through 5.5.52, 5.6.x through 5.6.33, and 5.7.x through 5.7.15; MariaDB before 5.5.51, 10.0.x before 10.0.27, and 10.1.x before 10.1.17; and Percona Server before 5.5.51-38.1, 5.6.x before 5.6.32-78.0, and 5.7.x before 5.7.14-7 allow local users to create arbitrary configurations and bypass certain protection mechanisms by setting general_log_file to a my.cnf configuration. NOTE: this can be leveraged to execute arbitrary code with root privileges by setting malloc_lib. NOTE: the affected MySQL version information is from Oracle\u0027s October 2016 CPU. Oracle has not commented on third-party claims that the issue was silently patched in MySQL 5.5.52, 5.6.33, and 5.7.15."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "n/a"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "https://mariadb.com/kb/en/mariadb/mariadb-10027-release-notes/",
              "refsource": "CONFIRM",
              "url": "https://mariadb.com/kb/en/mariadb/mariadb-10027-release-notes/"
            },
            {
              "name": "RHSA-2016:2749",
              "refsource": "REDHAT",
              "url": "http://rhn.redhat.com/errata/RHSA-2016-2749.html"
            },
            {
              "name": "RHSA-2017:0184",
              "refsource": "REDHAT",
              "url": "http://rhn.redhat.com/errata/RHSA-2017-0184.html"
            },
            {
              "name": "RHSA-2016:2131",
              "refsource": "REDHAT",
              "url": "http://rhn.redhat.com/errata/RHSA-2016-2131.html"
            },
            {
              "name": "RHSA-2016:2060",
              "refsource": "REDHAT",
              "url": "http://rhn.redhat.com/errata/RHSA-2016-2060.html"
            },
            {
              "name": "https://mariadb.com/kb/en/mariadb/mariadb-10117-release-notes/",
              "refsource": "CONFIRM",
              "url": "https://mariadb.com/kb/en/mariadb/mariadb-10117-release-notes/"
            },
            {
              "name": "https://mariadb.com/kb/en/mariadb/mariadb-5551-release-notes/",
              "refsource": "CONFIRM",
              "url": "https://mariadb.com/kb/en/mariadb/mariadb-5551-release-notes/"
            },
            {
              "name": "https://jira.mariadb.org/browse/MDEV-10465",
              "refsource": "CONFIRM",
              "url": "https://jira.mariadb.org/browse/MDEV-10465"
            },
            {
              "name": "92912",
              "refsource": "BID",
              "url": "http://www.securityfocus.com/bid/92912"
            },
            {
              "name": "20160912 CVE-2016-6662 - MySQL Remote Root Code Execution / Privilege Escalation ( 0day )",
              "refsource": "FULLDISC",
              "url": "http://seclists.org/fulldisclosure/2016/Sep/23"
            },
            {
              "name": "GLSA-201701-01",
              "refsource": "GENTOO",
              "url": "https://security.gentoo.org/glsa/201701-01"
            },
            {
              "name": "DSA-3666",
              "refsource": "DEBIAN",
              "url": "http://www.debian.org/security/2016/dsa-3666"
            },
            {
              "name": "http://www.oracle.com/technetwork/security-advisory/cpuoct2016-2881722.html",
              "refsource": "CONFIRM",
              "url": "http://www.oracle.com/technetwork/security-advisory/cpuoct2016-2881722.html"
            },
            {
              "name": "RHSA-2016:2130",
              "refsource": "REDHAT",
              "url": "http://rhn.redhat.com/errata/RHSA-2016-2130.html"
            },
            {
              "name": "RHSA-2016:2077",
              "refsource": "REDHAT",
              "url": "http://rhn.redhat.com/errata/RHSA-2016-2077.html"
            },
            {
              "name": "RHSA-2016:2927",
              "refsource": "REDHAT",
              "url": "http://rhn.redhat.com/errata/RHSA-2016-2927.html"
            },
            {
              "name": "RHSA-2016:2059",
              "refsource": "REDHAT",
              "url": "http://rhn.redhat.com/errata/RHSA-2016-2059.html"
            },
            {
              "name": "http://legalhackers.com/advisories/MySQL-Exploit-Remote-Root-Code-Execution-Privesc-CVE-2016-6662.html",
              "refsource": "MISC",
              "url": "http://legalhackers.com/advisories/MySQL-Exploit-Remote-Root-Code-Execution-Privesc-CVE-2016-6662.html"
            },
            {
              "name": "https://www.percona.com/blog/2016/09/12/percona-server-critical-update-cve-2016-6662/",
              "refsource": "CONFIRM",
              "url": "https://www.percona.com/blog/2016/09/12/percona-server-critical-update-cve-2016-6662/"
            },
            {
              "name": "RHSA-2016:2062",
              "refsource": "REDHAT",
              "url": "http://rhn.redhat.com/errata/RHSA-2016-2062.html"
            },
            {
              "name": "RHSA-2016:2595",
              "refsource": "REDHAT",
              "url": "http://rhn.redhat.com/errata/RHSA-2016-2595.html"
            },
            {
              "name": "1036769",
              "refsource": "SECTRACK",
              "url": "http://www.securitytracker.com/id/1036769"
            },
            {
              "name": "RHSA-2016:2061",
              "refsource": "REDHAT",
              "url": "http://rhn.redhat.com/errata/RHSA-2016-2061.html"
            },
            {
              "name": "[oss-security] 20160912 CVE-2016-6662 - MySQL Remote Root Code Execution / Privilege Escalation ( 0day )",
              "refsource": "MLIST",
              "url": "http://www.openwall.com/lists/oss-security/2016/09/12/3"
            },
            {
              "name": "40360",
              "refsource": "EXPLOIT-DB",
              "url": "https://www.exploit-db.com/exploits/40360/"
            },
            {
              "name": "RHSA-2016:2928",
              "refsource": "REDHAT",
              "url": "http://rhn.redhat.com/errata/RHSA-2016-2928.html"
            },
            {
              "name": "RHSA-2016:2058",
              "refsource": "REDHAT",
              "url": "http://rhn.redhat.com/errata/RHSA-2016-2058.html"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
    "assignerShortName": "mitre",
    "cveId": "CVE-2016-6662",
    "datePublished": "2016-09-20T18:00:00.000Z",
    "dateReserved": "2016-08-10T00:00:00.000Z",
    "dateUpdated": "2024-08-06T01:36:29.525Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

CVE-2016-6663 (GCVE-0-2016-6663)

Vulnerability from cvelistv5 – Published: 2016-12-13 21:00 – Updated: 2024-08-06 01:36

Summary

Race condition in Oracle MySQL before 5.5.52, 5.6.x before 5.6.33, 5.7.x before 5.7.15, and 8.x before 8.0.1; MariaDB before 5.5.52, 10.0.x before 10.0.28, and 10.1.x before 10.1.18; Percona Server before 5.5.51-38.2, 5.6.x before 5.6.32-78-1, and 5.7.x before 5.7.14-8; and Percona XtraDB Cluster before 5.5.41-37.0, 5.6.x before 5.6.32-25.17, and 5.7.x before 5.7.14-26.17 allows local users with certain permissions to gain privileges by leveraging use of my_copystat by REPAIR TABLE to repair a MyISAM table.

Severity

No CVSS data available.

CWE

Assigner

mitre mitre root

References

24 references

URL	Tags
http://rhn.redhat.com/errata/RHSA-2016-2749.html	vendor-advisoryx_refsource_REDHAT
https://dev.mysql.com/doc/relnotes/mysql/5.5/en/n…	x_refsource_CONFIRM
http://rhn.redhat.com/errata/RHSA-2017-0184.html	vendor-advisoryx_refsource_REDHAT
http://seclists.org/fulldisclosure/2016/Nov/4	mailing-listx_refsource_FULLDISC
http://rhn.redhat.com/errata/RHSA-2016-2131.html	vendor-advisoryx_refsource_REDHAT
https://github.com/mysql/mysql-server/commit/4e54…	x_refsource_CONFIRM
https://mariadb.com/kb/en/mariadb/mariadb-5552-re…	x_refsource_CONFIRM
https://www.percona.com/blog/2016/11/02/percona-r…	x_refsource_CONFIRM
http://www.oracle.com/technetwork/security-adviso…	x_refsource_CONFIRM
https://www.exploit-db.com/exploits/40678/	exploitx_refsource_EXPLOIT-DB
http://rhn.redhat.com/errata/RHSA-2016-2130.html	vendor-advisoryx_refsource_REDHAT
http://rhn.redhat.com/errata/RHSA-2016-2927.html	vendor-advisoryx_refsource_REDHAT
http://www.openwall.com/lists/oss-security/2016/10/25/4	mailing-listx_refsource_MLIST
https://dev.mysql.com/doc/relnotes/mysql/5.6/en/n…	x_refsource_CONFIRM
http://www.securityfocus.com/bid/92911	vdb-entryx_refsource_BID
http://www.securityfocus.com/bid/93614	vdb-entryx_refsource_BID
http://rhn.redhat.com/errata/RHSA-2016-2595.html	vendor-advisoryx_refsource_REDHAT
https://dev.mysql.com/doc/relnotes/mysql/8.0/en/n…	x_refsource_CONFIRM
https://mariadb.com/kb/en/mariadb/mariadb-10118-r…	x_refsource_CONFIRM
https://dev.mysql.com/doc/relnotes/mysql/5.7/en/n…	x_refsource_CONFIRM
https://github.com/MariaDB/server/commit/347eeefb…	x_refsource_CONFIRM
http://rhn.redhat.com/errata/RHSA-2016-2928.html	vendor-advisoryx_refsource_REDHAT
https://mariadb.com/kb/en/mariadb/mariadb-10028-r…	x_refsource_CONFIRM
https://legalhackers.com/advisories/MySQL-Maria-P…	x_refsource_MISC

Date Public

2016-09-12 00:00

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-06T01:36:29.485Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "name": "RHSA-2016:2749",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://rhn.redhat.com/errata/RHSA-2016-2749.html"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://dev.mysql.com/doc/relnotes/mysql/5.5/en/news-5-5-52.html"
          },
          {
            "name": "RHSA-2017:0184",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://rhn.redhat.com/errata/RHSA-2017-0184.html"
          },
          {
            "name": "20161101 MySQL / MariaDB / PerconaDB - Privilege Escalation / Race Condition Exploit [CVE-2016-6663 / OCVE-2016-5616]",
            "tags": [
              "mailing-list",
              "x_refsource_FULLDISC",
              "x_transferred"
            ],
            "url": "http://seclists.org/fulldisclosure/2016/Nov/4"
          },
          {
            "name": "RHSA-2016:2131",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://rhn.redhat.com/errata/RHSA-2016-2131.html"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://github.com/mysql/mysql-server/commit/4e5473862e6852b0f3802b0cd0c6fa10b5253291"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://mariadb.com/kb/en/mariadb/mariadb-5552-release-notes/"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://www.percona.com/blog/2016/11/02/percona-responds-to-cve-2016-6663-and-cve-2016-6664/"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://www.oracle.com/technetwork/security-advisory/cpuoct2016-2881722.html"
          },
          {
            "name": "40678",
            "tags": [
              "exploit",
              "x_refsource_EXPLOIT-DB",
              "x_transferred"
            ],
            "url": "https://www.exploit-db.com/exploits/40678/"
          },
          {
            "name": "RHSA-2016:2130",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://rhn.redhat.com/errata/RHSA-2016-2130.html"
          },
          {
            "name": "RHSA-2016:2927",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://rhn.redhat.com/errata/RHSA-2016-2927.html"
          },
          {
            "name": "[oss-security] 20161025 Re: CVE-2016-6662 - MySQL Remote Root Code Execution / Privilege Escalation ( 0day )",
            "tags": [
              "mailing-list",
              "x_refsource_MLIST",
              "x_transferred"
            ],
            "url": "http://www.openwall.com/lists/oss-security/2016/10/25/4"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://dev.mysql.com/doc/relnotes/mysql/5.6/en/news-5-6-33.html"
          },
          {
            "name": "92911",
            "tags": [
              "vdb-entry",
              "x_refsource_BID",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/bid/92911"
          },
          {
            "name": "93614",
            "tags": [
              "vdb-entry",
              "x_refsource_BID",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/bid/93614"
          },
          {
            "name": "RHSA-2016:2595",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://rhn.redhat.com/errata/RHSA-2016-2595.html"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://dev.mysql.com/doc/relnotes/mysql/8.0/en/news-8-0-1.html"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://mariadb.com/kb/en/mariadb/mariadb-10118-release-notes/"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://dev.mysql.com/doc/relnotes/mysql/5.7/en/news-5-7-15.html"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://github.com/MariaDB/server/commit/347eeefbfc658c8531878218487d729f4e020805"
          },
          {
            "name": "RHSA-2016:2928",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://rhn.redhat.com/errata/RHSA-2016-2928.html"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://mariadb.com/kb/en/mariadb/mariadb-10028-release-notes/"
          },
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "https://legalhackers.com/advisories/MySQL-Maria-Percona-PrivEscRace-CVE-2016-6663-5616-Exploit.html"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "datePublic": "2016-09-12T00:00:00.000Z",
      "descriptions": [
        {
          "lang": "en",
          "value": "Race condition in Oracle MySQL before 5.5.52, 5.6.x before 5.6.33, 5.7.x before 5.7.15, and 8.x before 8.0.1; MariaDB before 5.5.52, 10.0.x before 10.0.28, and 10.1.x before 10.1.18; Percona Server before 5.5.51-38.2, 5.6.x before 5.6.32-78-1, and 5.7.x before 5.7.14-8; and Percona XtraDB Cluster before 5.5.41-37.0, 5.6.x before 5.6.32-25.17, and 5.7.x before 5.7.14-26.17 allows local users with certain permissions to gain privileges by leveraging use of my_copystat by REPAIR TABLE to repair a MyISAM table."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "n/a",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2018-01-04T19:57:01.000Z",
        "orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
        "shortName": "mitre"
      },
      "references": [
        {
          "name": "RHSA-2016:2749",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://rhn.redhat.com/errata/RHSA-2016-2749.html"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://dev.mysql.com/doc/relnotes/mysql/5.5/en/news-5-5-52.html"
        },
        {
          "name": "RHSA-2017:0184",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://rhn.redhat.com/errata/RHSA-2017-0184.html"
        },
        {
          "name": "20161101 MySQL / MariaDB / PerconaDB - Privilege Escalation / Race Condition Exploit [CVE-2016-6663 / OCVE-2016-5616]",
          "tags": [
            "mailing-list",
            "x_refsource_FULLDISC"
          ],
          "url": "http://seclists.org/fulldisclosure/2016/Nov/4"
        },
        {
          "name": "RHSA-2016:2131",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://rhn.redhat.com/errata/RHSA-2016-2131.html"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://github.com/mysql/mysql-server/commit/4e5473862e6852b0f3802b0cd0c6fa10b5253291"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://mariadb.com/kb/en/mariadb/mariadb-5552-release-notes/"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://www.percona.com/blog/2016/11/02/percona-responds-to-cve-2016-6663-and-cve-2016-6664/"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://www.oracle.com/technetwork/security-advisory/cpuoct2016-2881722.html"
        },
        {
          "name": "40678",
          "tags": [
            "exploit",
            "x_refsource_EXPLOIT-DB"
          ],
          "url": "https://www.exploit-db.com/exploits/40678/"
        },
        {
          "name": "RHSA-2016:2130",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://rhn.redhat.com/errata/RHSA-2016-2130.html"
        },
        {
          "name": "RHSA-2016:2927",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://rhn.redhat.com/errata/RHSA-2016-2927.html"
        },
        {
          "name": "[oss-security] 20161025 Re: CVE-2016-6662 - MySQL Remote Root Code Execution / Privilege Escalation ( 0day )",
          "tags": [
            "mailing-list",
            "x_refsource_MLIST"
          ],
          "url": "http://www.openwall.com/lists/oss-security/2016/10/25/4"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://dev.mysql.com/doc/relnotes/mysql/5.6/en/news-5-6-33.html"
        },
        {
          "name": "92911",
          "tags": [
            "vdb-entry",
            "x_refsource_BID"
          ],
          "url": "http://www.securityfocus.com/bid/92911"
        },
        {
          "name": "93614",
          "tags": [
            "vdb-entry",
            "x_refsource_BID"
          ],
          "url": "http://www.securityfocus.com/bid/93614"
        },
        {
          "name": "RHSA-2016:2595",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://rhn.redhat.com/errata/RHSA-2016-2595.html"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://dev.mysql.com/doc/relnotes/mysql/8.0/en/news-8-0-1.html"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://mariadb.com/kb/en/mariadb/mariadb-10118-release-notes/"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://dev.mysql.com/doc/relnotes/mysql/5.7/en/news-5-7-15.html"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://github.com/MariaDB/server/commit/347eeefbfc658c8531878218487d729f4e020805"
        },
        {
          "name": "RHSA-2016:2928",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://rhn.redhat.com/errata/RHSA-2016-2928.html"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://mariadb.com/kb/en/mariadb/mariadb-10028-release-notes/"
        },
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://legalhackers.com/advisories/MySQL-Maria-Percona-PrivEscRace-CVE-2016-6663-5616-Exploit.html"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "cve@mitre.org",
          "ID": "CVE-2016-6663",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "n/a",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "n/a"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "n/a"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "Race condition in Oracle MySQL before 5.5.52, 5.6.x before 5.6.33, 5.7.x before 5.7.15, and 8.x before 8.0.1; MariaDB before 5.5.52, 10.0.x before 10.0.28, and 10.1.x before 10.1.18; Percona Server before 5.5.51-38.2, 5.6.x before 5.6.32-78-1, and 5.7.x before 5.7.14-8; and Percona XtraDB Cluster before 5.5.41-37.0, 5.6.x before 5.6.32-25.17, and 5.7.x before 5.7.14-26.17 allows local users with certain permissions to gain privileges by leveraging use of my_copystat by REPAIR TABLE to repair a MyISAM table."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "n/a"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "RHSA-2016:2749",
              "refsource": "REDHAT",
              "url": "http://rhn.redhat.com/errata/RHSA-2016-2749.html"
            },
            {
              "name": "https://dev.mysql.com/doc/relnotes/mysql/5.5/en/news-5-5-52.html",
              "refsource": "CONFIRM",
              "url": "https://dev.mysql.com/doc/relnotes/mysql/5.5/en/news-5-5-52.html"
            },
            {
              "name": "RHSA-2017:0184",
              "refsource": "REDHAT",
              "url": "http://rhn.redhat.com/errata/RHSA-2017-0184.html"
            },
            {
              "name": "20161101 MySQL / MariaDB / PerconaDB - Privilege Escalation / Race Condition Exploit [CVE-2016-6663 / OCVE-2016-5616]",
              "refsource": "FULLDISC",
              "url": "http://seclists.org/fulldisclosure/2016/Nov/4"
            },
            {
              "name": "RHSA-2016:2131",
              "refsource": "REDHAT",
              "url": "http://rhn.redhat.com/errata/RHSA-2016-2131.html"
            },
            {
              "name": "https://github.com/mysql/mysql-server/commit/4e5473862e6852b0f3802b0cd0c6fa10b5253291",
              "refsource": "CONFIRM",
              "url": "https://github.com/mysql/mysql-server/commit/4e5473862e6852b0f3802b0cd0c6fa10b5253291"
            },
            {
              "name": "https://mariadb.com/kb/en/mariadb/mariadb-5552-release-notes/",
              "refsource": "CONFIRM",
              "url": "https://mariadb.com/kb/en/mariadb/mariadb-5552-release-notes/"
            },
            {
              "name": "https://www.percona.com/blog/2016/11/02/percona-responds-to-cve-2016-6663-and-cve-2016-6664/",
              "refsource": "CONFIRM",
              "url": "https://www.percona.com/blog/2016/11/02/percona-responds-to-cve-2016-6663-and-cve-2016-6664/"
            },
            {
              "name": "http://www.oracle.com/technetwork/security-advisory/cpuoct2016-2881722.html",
              "refsource": "CONFIRM",
              "url": "http://www.oracle.com/technetwork/security-advisory/cpuoct2016-2881722.html"
            },
            {
              "name": "40678",
              "refsource": "EXPLOIT-DB",
              "url": "https://www.exploit-db.com/exploits/40678/"
            },
            {
              "name": "RHSA-2016:2130",
              "refsource": "REDHAT",
              "url": "http://rhn.redhat.com/errata/RHSA-2016-2130.html"
            },
            {
              "name": "RHSA-2016:2927",
              "refsource": "REDHAT",
              "url": "http://rhn.redhat.com/errata/RHSA-2016-2927.html"
            },
            {
              "name": "[oss-security] 20161025 Re: CVE-2016-6662 - MySQL Remote Root Code Execution / Privilege Escalation ( 0day )",
              "refsource": "MLIST",
              "url": "http://www.openwall.com/lists/oss-security/2016/10/25/4"
            },
            {
              "name": "https://dev.mysql.com/doc/relnotes/mysql/5.6/en/news-5-6-33.html",
              "refsource": "CONFIRM",
              "url": "https://dev.mysql.com/doc/relnotes/mysql/5.6/en/news-5-6-33.html"
            },
            {
              "name": "92911",
              "refsource": "BID",
              "url": "http://www.securityfocus.com/bid/92911"
            },
            {
              "name": "93614",
              "refsource": "BID",
              "url": "http://www.securityfocus.com/bid/93614"
            },
            {
              "name": "RHSA-2016:2595",
              "refsource": "REDHAT",
              "url": "http://rhn.redhat.com/errata/RHSA-2016-2595.html"
            },
            {
              "name": "https://dev.mysql.com/doc/relnotes/mysql/8.0/en/news-8-0-1.html",
              "refsource": "CONFIRM",
              "url": "https://dev.mysql.com/doc/relnotes/mysql/8.0/en/news-8-0-1.html"
            },
            {
              "name": "https://mariadb.com/kb/en/mariadb/mariadb-10118-release-notes/",
              "refsource": "CONFIRM",
              "url": "https://mariadb.com/kb/en/mariadb/mariadb-10118-release-notes/"
            },
            {
              "name": "https://dev.mysql.com/doc/relnotes/mysql/5.7/en/news-5-7-15.html",
              "refsource": "CONFIRM",
              "url": "https://dev.mysql.com/doc/relnotes/mysql/5.7/en/news-5-7-15.html"
            },
            {
              "name": "https://github.com/MariaDB/server/commit/347eeefbfc658c8531878218487d729f4e020805",
              "refsource": "CONFIRM",
              "url": "https://github.com/MariaDB/server/commit/347eeefbfc658c8531878218487d729f4e020805"
            },
            {
              "name": "RHSA-2016:2928",
              "refsource": "REDHAT",
              "url": "http://rhn.redhat.com/errata/RHSA-2016-2928.html"
            },
            {
              "name": "https://mariadb.com/kb/en/mariadb/mariadb-10028-release-notes/",
              "refsource": "CONFIRM",
              "url": "https://mariadb.com/kb/en/mariadb/mariadb-10028-release-notes/"
            },
            {
              "name": "https://legalhackers.com/advisories/MySQL-Maria-Percona-PrivEscRace-CVE-2016-6663-5616-Exploit.html",
              "refsource": "MISC",
              "url": "https://legalhackers.com/advisories/MySQL-Maria-Percona-PrivEscRace-CVE-2016-6663-5616-Exploit.html"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
    "assignerShortName": "mitre",
    "cveId": "CVE-2016-6663",
    "datePublished": "2016-12-13T21:00:00.000Z",
    "dateReserved": "2016-08-10T00:00:00.000Z",
    "dateUpdated": "2024-08-06T01:36:29.485Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

CVE-2016-8283 (GCVE-0-2016-8283)

Vulnerability from cvelistv5 – Published: 2016-10-25 14:00 – Updated: 2024-10-10 18:12

Summary

Unspecified vulnerability in Oracle MySQL 5.5.51 and earlier, 5.6.32 and earlier, and 5.7.14 and earlier allows remote authenticated users to affect availability via vectors related to Server: Types.

Severity

No CVSS data available.

SSVC

Exploitation: none Automatable: no Technical Impact: partial

CISA Coordinator · CISA-ADP (v2.0.3)

Decision recorded 2024-10-10 17:48 UTC

CWE

Assigner

oracle mitre root

References

13 references

URL	Tags
http://rhn.redhat.com/errata/RHSA-2016-2749.html	vendor-advisoryx_refsource_REDHAT
http://rhn.redhat.com/errata/RHSA-2016-2131.html	vendor-advisoryx_refsource_REDHAT
https://mariadb.com/kb/en/mariadb/mariadb-5552-re…	x_refsource_CONFIRM
https://security.gentoo.org/glsa/201701-01	vendor-advisoryx_refsource_GENTOO
http://www.oracle.com/technetwork/security-adviso…	x_refsource_CONFIRM
http://rhn.redhat.com/errata/RHSA-2016-2130.html	vendor-advisoryx_refsource_REDHAT
http://rhn.redhat.com/errata/RHSA-2016-2927.html	vendor-advisoryx_refsource_REDHAT
http://rhn.redhat.com/errata/RHSA-2016-2595.html	vendor-advisoryx_refsource_REDHAT
https://mariadb.com/kb/en/mariadb/mariadb-10118-r…	x_refsource_CONFIRM
http://www.securitytracker.com/id/1037050	vdb-entryx_refsource_SECTRACK
http://www.securityfocus.com/bid/93737	vdb-entryx_refsource_BID
http://rhn.redhat.com/errata/RHSA-2016-2928.html	vendor-advisoryx_refsource_REDHAT
https://mariadb.com/kb/en/mariadb/mariadb-10028-r…	x_refsource_CONFIRM

Date Public

2016-10-18 00:00

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-06T02:20:30.202Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "name": "RHSA-2016:2749",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://rhn.redhat.com/errata/RHSA-2016-2749.html"
          },
          {
            "name": "RHSA-2016:2131",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://rhn.redhat.com/errata/RHSA-2016-2131.html"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://mariadb.com/kb/en/mariadb/mariadb-5552-release-notes/"
          },
          {
            "name": "GLSA-201701-01",
            "tags": [
              "vendor-advisory",
              "x_refsource_GENTOO",
              "x_transferred"
            ],
            "url": "https://security.gentoo.org/glsa/201701-01"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://www.oracle.com/technetwork/security-advisory/cpuoct2016-2881722.html"
          },
          {
            "name": "RHSA-2016:2130",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://rhn.redhat.com/errata/RHSA-2016-2130.html"
          },
          {
            "name": "RHSA-2016:2927",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://rhn.redhat.com/errata/RHSA-2016-2927.html"
          },
          {
            "name": "RHSA-2016:2595",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://rhn.redhat.com/errata/RHSA-2016-2595.html"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://mariadb.com/kb/en/mariadb/mariadb-10118-release-notes/"
          },
          {
            "name": "1037050",
            "tags": [
              "vdb-entry",
              "x_refsource_SECTRACK",
              "x_transferred"
            ],
            "url": "http://www.securitytracker.com/id/1037050"
          },
          {
            "name": "93737",
            "tags": [
              "vdb-entry",
              "x_refsource_BID",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/bid/93737"
          },
          {
            "name": "RHSA-2016:2928",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://rhn.redhat.com/errata/RHSA-2016-2928.html"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://mariadb.com/kb/en/mariadb/mariadb-10028-release-notes/"
          }
        ],
        "title": "CVE Program Container"
      },
      {
        "metrics": [
          {
            "other": {
              "content": {
                "id": "CVE-2016-8283",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "partial"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2024-10-10T17:48:22.894543Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2024-10-10T18:12:25.262Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "datePublic": "2016-10-18T00:00:00.000Z",
      "descriptions": [
        {
          "lang": "en",
          "value": "Unspecified vulnerability in Oracle MySQL 5.5.51 and earlier, 5.6.32 and earlier, and 5.7.14 and earlier allows remote authenticated users to affect availability via vectors related to Server: Types."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "n/a",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2018-01-04T19:57:01.000Z",
        "orgId": "43595867-4340-4103-b7a2-9a5208d29a85",
        "shortName": "oracle"
      },
      "references": [
        {
          "name": "RHSA-2016:2749",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://rhn.redhat.com/errata/RHSA-2016-2749.html"
        },
        {
          "name": "RHSA-2016:2131",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://rhn.redhat.com/errata/RHSA-2016-2131.html"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://mariadb.com/kb/en/mariadb/mariadb-5552-release-notes/"
        },
        {
          "name": "GLSA-201701-01",
          "tags": [
            "vendor-advisory",
            "x_refsource_GENTOO"
          ],
          "url": "https://security.gentoo.org/glsa/201701-01"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://www.oracle.com/technetwork/security-advisory/cpuoct2016-2881722.html"
        },
        {
          "name": "RHSA-2016:2130",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://rhn.redhat.com/errata/RHSA-2016-2130.html"
        },
        {
          "name": "RHSA-2016:2927",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://rhn.redhat.com/errata/RHSA-2016-2927.html"
        },
        {
          "name": "RHSA-2016:2595",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://rhn.redhat.com/errata/RHSA-2016-2595.html"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://mariadb.com/kb/en/mariadb/mariadb-10118-release-notes/"
        },
        {
          "name": "1037050",
          "tags": [
            "vdb-entry",
            "x_refsource_SECTRACK"
          ],
          "url": "http://www.securitytracker.com/id/1037050"
        },
        {
          "name": "93737",
          "tags": [
            "vdb-entry",
            "x_refsource_BID"
          ],
          "url": "http://www.securityfocus.com/bid/93737"
        },
        {
          "name": "RHSA-2016:2928",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://rhn.redhat.com/errata/RHSA-2016-2928.html"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://mariadb.com/kb/en/mariadb/mariadb-10028-release-notes/"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "secalert_us@oracle.com",
          "ID": "CVE-2016-8283",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "n/a",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "n/a"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "n/a"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "Unspecified vulnerability in Oracle MySQL 5.5.51 and earlier, 5.6.32 and earlier, and 5.7.14 and earlier allows remote authenticated users to affect availability via vectors related to Server: Types."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "n/a"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "RHSA-2016:2749",
              "refsource": "REDHAT",
              "url": "http://rhn.redhat.com/errata/RHSA-2016-2749.html"
            },
            {
              "name": "RHSA-2016:2131",
              "refsource": "REDHAT",
              "url": "http://rhn.redhat.com/errata/RHSA-2016-2131.html"
            },
            {
              "name": "https://mariadb.com/kb/en/mariadb/mariadb-5552-release-notes/",
              "refsource": "CONFIRM",
              "url": "https://mariadb.com/kb/en/mariadb/mariadb-5552-release-notes/"
            },
            {
              "name": "GLSA-201701-01",
              "refsource": "GENTOO",
              "url": "https://security.gentoo.org/glsa/201701-01"
            },
            {
              "name": "http://www.oracle.com/technetwork/security-advisory/cpuoct2016-2881722.html",
              "refsource": "CONFIRM",
              "url": "http://www.oracle.com/technetwork/security-advisory/cpuoct2016-2881722.html"
            },
            {
              "name": "RHSA-2016:2130",
              "refsource": "REDHAT",
              "url": "http://rhn.redhat.com/errata/RHSA-2016-2130.html"
            },
            {
              "name": "RHSA-2016:2927",
              "refsource": "REDHAT",
              "url": "http://rhn.redhat.com/errata/RHSA-2016-2927.html"
            },
            {
              "name": "RHSA-2016:2595",
              "refsource": "REDHAT",
              "url": "http://rhn.redhat.com/errata/RHSA-2016-2595.html"
            },
            {
              "name": "https://mariadb.com/kb/en/mariadb/mariadb-10118-release-notes/",
              "refsource": "CONFIRM",
              "url": "https://mariadb.com/kb/en/mariadb/mariadb-10118-release-notes/"
            },
            {
              "name": "1037050",
              "refsource": "SECTRACK",
              "url": "http://www.securitytracker.com/id/1037050"
            },
            {
              "name": "93737",
              "refsource": "BID",
              "url": "http://www.securityfocus.com/bid/93737"
            },
            {
              "name": "RHSA-2016:2928",
              "refsource": "REDHAT",
              "url": "http://rhn.redhat.com/errata/RHSA-2016-2928.html"
            },
            {
              "name": "https://mariadb.com/kb/en/mariadb/mariadb-10028-release-notes/",
              "refsource": "CONFIRM",
              "url": "https://mariadb.com/kb/en/mariadb/mariadb-10028-release-notes/"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "43595867-4340-4103-b7a2-9a5208d29a85",
    "assignerShortName": "oracle",
    "cveId": "CVE-2016-8283",
    "datePublished": "2016-10-25T14:00:00.000Z",
    "dateReserved": "2016-09-26T00:00:00.000Z",
    "dateUpdated": "2024-10-10T18:12:25.262Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

Sightings

Author	Source	Type	Date	Other

Nomenclature

Seen: The vulnerability was mentioned, discussed, or observed by the user.
Confirmed: The vulnerability has been validated from an analyst's perspective.
Published Proof of Concept: A public proof of concept is available for this vulnerability.
Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
Not confirmed: The user expressed doubt about the validity of the vulnerability.
Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.

Detection rules are retrieved from Rulezet.

The MITRE ATT&CK techniques below are AI-generated suggestions, inferred from the description of the vulnerability by the CIRCL/vulnerability-attack-technique-classification-roberta-base model, served locally by ML-Gateway. They have not been verified by an analyst and are provided for guidance only.
The approach is described in our paper Mapping CVEs to MITRE ATT&CK Techniques: A Curated Gold-Set Classifier and the Limits of LLM-Assisted Label Expansion.
Browse all ATT&CK techniques and the vulnerabilities related to each.

Related by attack behaviour

Vulnerabilities whose description is nearest to this one in the vector space of the CIRCL/vulnerability-attack-technique-biencoder model. This is a similarity search over the bi-encoder space (plain cosine), not a classification, and it has no measured accuracy.

Action not permitted

RHSA-2016:2595

CVE-2016-3492 (GCVE-0-2016-3492)

CVE-2016-5612 (GCVE-0-2016-5612)

CVE-2016-5616 (GCVE-0-2016-5616)

CVE-2016-5624 (GCVE-0-2016-5624)

CVE-2016-5626 (GCVE-0-2016-5626)

CVE-2016-5629 (GCVE-0-2016-5629)

CVE-2016-6662 (GCVE-0-2016-6662)

CVE-2016-6663 (GCVE-0-2016-6663)

CVE-2016-8283 (GCVE-0-2016-8283)

Tags

Sightings

Nomenclature

Related by attack behaviour