Published: 21/01/2016 Updated: 27/12/2019

CVSS v2 Base Score: 4 | Impact Score: 2.9 | Exploitability Score: 8

VMScore: 356

Vector: AV:N/AC:L/Au:S/C:N/I:N/A:P

Subscribe to Enterprise Linux Server Eus

Unspecified vulnerability in Oracle MySQL 5.5.46 and previous versions and MariaDB prior to 5.5.47, 10.0.x prior to 10.0.23, and 10.1.x prior to 10.1.10 allows remote authenticated users to affect availability via unknown vectors related to Optimizer.

Vulnerable Product	Search on Vulmon	Subscribe to Product
redhat enterprise linux server eus 7.2
redhat enterprise linux workstation 7.0
redhat enterprise linux hpc node eus 7.2
redhat enterprise linux server aus 7.2
redhat enterprise linux server 7.0
redhat enterprise linux hpc node 7.0
redhat enterprise linux desktop 7.0
canonical ubuntu linux 14.04
canonical ubuntu linux 12.04
canonical ubuntu linux 15.10
canonical ubuntu linux 15.04
mariadb mariadb 10.1.3
mariadb mariadb 10.1.2
mariadb mariadb 10.0.18
mariadb mariadb 10.0.17
mariadb mariadb 10.0.9
mariadb mariadb 10.0.8
mariadb mariadb 10.0.1
mariadb mariadb 10.0.0
mariadb mariadb 10.1.5
mariadb mariadb 10.1.4
mariadb mariadb 10.0.20
mariadb mariadb 10.0.19
mariadb mariadb 10.0.12
mariadb mariadb 10.0.11
mariadb mariadb 10.0.10
mariadb mariadb 10.0.3
mariadb mariadb 10.0.2
mariadb mariadb 10.1.9
mariadb mariadb 10.1.8
mariadb mariadb 10.1.1
mariadb mariadb 10.1.0
mariadb mariadb 10.0.16
mariadb mariadb 10.0.15
mariadb mariadb 10.0.7
mariadb mariadb 10.0.6
mariadb mariadb
mariadb mariadb 10.1.7
mariadb mariadb 10.1.6
mariadb mariadb 10.0.22
mariadb mariadb 10.0.21
mariadb mariadb 10.0.14
mariadb mariadb 10.0.13
mariadb mariadb 10.0.5
mariadb mariadb 10.0.4
oracle mysql
opensuse leap 42.1
oracle linux 7
oracle solaris 11.3
debian debian linux 8.0

Debian Bug report logs - #811428 mysql-55: Multiple security fixes from the January 2016 CPU Package: src:mysql-55; Maintainer for src:mysql-55 is Debian MySQL Maintainers <pkg-mysql-maint@listsaliothdebianorg>; Reported by: "Norvald H Ryeng" <norvaldryeng@oraclecom> Date: Mon, 18 Jan 2016 20:33:07 UTC Sever ...

Several security issues were fixed in MySQL ...

Several issues have been discovered in the MariaDB database server The vulnerabilities are addressed by upgrading MariaDB to the new upstream version 10023 Please see the MariaDB 100 Release Notes for further details: mariadbcom/kb/en/mariadb/mariadb-10023-release-notes/ For the stable distribution (jessie), these problems have been ...

It was found that the MariaDB client library did not properly check host names against server identities noted in the X509 certificates when establishing secure connections using TLS/SSL A man-in-the-middle attacker could possibly use this flaw to impersonate a server to a client (CVE-2016-2047) Unspecified vulnerability in Oracle MySQL 5546 a ...

wolfSSL (formerly CyaSSL) before 368 does not properly handle faults associated with the Chinese Remainder Theorem (CRT) process when allowing ephemeral key exchange without low memory optimizations on a server, which makes it easier for remote attackers to obtain private RSA keys by capturing TLS handshakes, also known as a Lenstra attack (CVE- ...

Unspecified vulnerability in Oracle MySQL 5546 and earlier and MariaDB before 5547, 100x before 10023, and 101x before 10110 allows remote authenticated users to affect availability via unknown vectors related to Optimizer ...

NVD-CWE-noinfo http://www.oracle.com/technetwork/topics/security/cpujan2016-2367955.html https://mariadb.com/kb/en/mariadb/mariadb-5547-release-notes/http://www.debian.org/security/2016/dsa-3453 https://mariadb.com/kb/en/mariadb/mariadb-10110-release-notes/https://mariadb.com/kb/en/mdb-10023-rn/http://rhn.redhat.com/errata/RHSA-2016-0534.html http://www.ubuntu.com/usn/USN-2881-1 http://lists.opensuse.org/opensuse-security-announce/2016-06/msg00053.html http://www.oracle.com/technetwork/topics/security/linuxbulletinapr2016-2952096.html http://www.oracle.com/technetwork/topics/security/bulletinapr2016-2952098.html http://www.securityfocus.com/bid/81176 http://lists.opensuse.org/opensuse-security-announce/2016-06/msg00034.html http://lists.opensuse.org/opensuse-security-announce/2016-06/msg00033.html http://lists.opensuse.org/opensuse-security-announce/2016-06/msg00051.html http://www.debian.org/security/2016/dsa-3459 http://www.securitytracker.com/id/1034708 https://access.redhat.com/errata/RHSA-2016:1132 http://rhn.redhat.com/errata/RHSA-2016-1481.html http://rhn.redhat.com/errata/RHSA-2016-1480.html https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=811428 https://usn.ubuntu.com/2881-1/https://nvd.nist.gov https://access.redhat.com/security/cve/cve-2016-0616

CVE-2016-0616

Vulnerability Summary

Vendor Advisories

References

Vulmon Search

About

Products

Connect