CVE-2016-0640

Severity

49%

Complexity

68%

Confidentiality

81%

Unspecified vulnerability in Oracle MySQL 5.5.47 and earlier, 5.6.28 and earlier, and 5.7.10 and earlier and MariaDB before 5.5.48, 10.0.x before 10.0.24, and 10.1.x before 10.1.12 allows local users to affect integrity and availability via vectors related to DML.

Unspecified vulnerability in Oracle MySQL 5.5.47 and earlier, 5.6.28 and earlier, and 5.7.10 and earlier and MariaDB before 5.5.48, 10.0.x before 10.0.24, and 10.1.x before 10.1.12 allows local users to affect integrity and availability via vectors related to DML.

CVSS 3.0 Base Score 6.1. CVSS Attack Vector: local. CVSS Attack Complexity: low. CVSS Vector: (CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:H).

CVSS 2.0 Base Score 4.9. CVSS Attack Vector: network. CVSS Attack Complexity: medium. CVSS Vector: (AV:N/AC:M/Au:S/C:N/I:P/A:P).

Overview

First reported 8 years ago

2016-04-21 10:59:00

Last updated 5 years ago

2019-12-27 16:08:00

Affected Software

Oracle MySQL -

openSUSE Leap 42.1

42.1

Debian Linux 8.0 (Jessie)

8.0

Red Hat Enterprise Linux 6.0

6.0

Red Hat Enterprise Linux (RHEL) 7.0 (7)

7.0

IBM PowerKVM 2.1

2.1

IBM PowerKVM 3.1

3.1

References

SUSE-SU-2016:1279

Mailing List, Third Party Advisory

openSUSE-SU-2016:1332

Mailing List, Third Party Advisory

SUSE-SU-2016:1619

Mailing List, Third Party Advisory

SUSE-SU-2016:1620

Mailing List, Third Party Advisory

openSUSE-SU-2016:1664

Mailing List, Third Party Advisory

openSUSE-SU-2016:1686

Third Party Advisory

RHSA-2016:0705

Third Party Advisory

RHSA-2016:1480

Third Party Advisory

RHSA-2016:1481

Third Party Advisory

RHSA-2016:1602

Third Party Advisory

DSA-3557

Third Party Advisory

DSA-3595

Third Party Advisory

http://www.oracle.com/technetwork/security-advisory/cpuapr2016v3-2985753.html

Patch, Vendor Advisory

http://www.oracle.com/technetwork/topics/security/linuxbulletinjul2016-3090544.html

Vendor Advisory

86427

Third Party Advisory, VDB Entry

1035606

Third Party Advisory, VDB Entry

USN-2953-1

Third Party Advisory

http://www-01.ibm.com/support/docview.wss?uid=isg3T1024168

Third Party Advisory

RHSA-2016:1132

Third Party Advisory

https://mariadb.com/kb/en/mariadb/mariadb-10024-release-notes/

Vendor Advisory

https://mariadb.com/kb/en/mariadb/mariadb-10112-release-notes/

Vendor Advisory

https://mariadb.com/kb/en/mariadb/mariadb-5548-release-notes/

Vendor Advisory

Stay updated

ExploitPedia is constantly evolving. Sign up to receive a notification when we release additional functionality.

Get in touch

If you'd like to report a bug or have any suggestions for improvements then please do get in touch with us using this form. We will get back to you as soon as we can.