CVE-2016-0655

Опубликовано: 21 апр. 2016

Источник: nvd

CVSS3: 4.7

CVSS2: 3.5

EPSS Низкий

Описание

Unspecified vulnerability in Oracle MySQL 5.6.29 and earlier and 5.7.11 and earlier and MariaDB 10.0.x before 10.0.25 and 10.1.x before 10.1.14 allows local users to affect availability via vectors related to InnoDB.

Ссылки

http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00053.html
Mailing List
Third Party Advisory
http://lists.opensuse.org/opensuse-security-announce/2016-06/msg00033.html
Mailing List
Third Party Advisory
http://lists.opensuse.org/opensuse-security-announce/2016-06/msg00034.html
Mailing List
Third Party Advisory
http://lists.opensuse.org/opensuse-security-announce/2016-06/msg00051.html
Mailing List
Third Party Advisory
http://lists.opensuse.org/opensuse-security-announce/2016-06/msg00053.html
Third Party Advisory
http://rhn.redhat.com/errata/RHSA-2016-0705.html
Third Party Advisory
http://www.debian.org/security/2016/dsa-3595
Third Party Advisory
http://www.oracle.com/technetwork/security-advisory/cpuapr2016v3-2985753.html
Patch
Vendor Advisory
http://www.securityfocus.com/bid/86424
Third Party Advisory
VDB Entry
http://www.securitytracker.com/id/1035606
Third Party Advisory
VDB Entry
http://www.ubuntu.com/usn/USN-2953-1
Third Party Advisory
http://www.ubuntu.com/usn/USN-2954-1
Third Party Advisory
https://access.redhat.com/errata/RHSA-2016:1132
Third Party Advisory
https://mariadb.com/kb/en/mariadb/mariadb-10025-release-notes/
Vendor Advisory
https://mariadb.com/kb/en/mariadb/mariadb-10114-release-notes/
Vendor Advisory
http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00053.html
Mailing List
Third Party Advisory
http://lists.opensuse.org/opensuse-security-announce/2016-06/msg00033.html
Mailing List
Third Party Advisory
http://lists.opensuse.org/opensuse-security-announce/2016-06/msg00034.html
Mailing List
Third Party Advisory
http://lists.opensuse.org/opensuse-security-announce/2016-06/msg00051.html
Mailing List
Third Party Advisory
http://lists.opensuse.org/opensuse-security-announce/2016-06/msg00053.html
Third Party Advisory

Уязвимые конфигурации

Конфигурация 1

Одно из

cpe:2.3:a:mariadb:mariadb:*:*:*:*:*:*:*:*

Версия от 10.0.0 (включая) до 10.0.25 (исключая)

cpe:2.3:a:mariadb:mariadb:*:*:*:*:*:*:*:*

Версия от 10.1.0 (включая) до 10.1.14 (исключая)

Конфигурация 2

cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:*

Конфигурация 3

cpe:2.3:o:opensuse:leap:42.1:*:*:*:*:*:*:*

Конфигурация 4

Одно из

cpe:2.3:a:oracle:mysql:*:*:*:*:*:*:*:*

Версия от 5.6.0 (включая) до 5.6.29 (включая)

cpe:2.3:a:oracle:mysql:*:*:*:*:*:*:*:*

Версия от 5.7.0 (включая) до 5.7.11 (включая)

Конфигурация 5

Одно из

cpe:2.3:o:redhat:enterprise_linux:6.0:*:*:*:*:*:*:*

cpe:2.3:o:redhat:enterprise_linux:7.0:*:*:*:*:*:*:*

EPSS

Процентиль: 50%

0.00271

Низкий

4.7 Medium

CVSS3

3.5 Low

CVSS2

Дефекты

NVD-CWE-noinfo

Связанные уязвимости

CVE-2016-0655

CVSS3: 4.7

ubuntu

больше 9 лет назад

CVE-2016-0655

redhat

больше 9 лет назад

CVE-2016-0655

CVSS3: 4.7

debian

больше 9 лет назад

Unspecified vulnerability in Oracle MySQL 5.6.29 and earlier and 5.7.1 ...

GHSA-4p34-xvm4-h22p

CVSS3: 4.7

github

больше 3 лет назад

BDU:2016-01107

fstec

больше 9 лет назад

Уязвимость системы управления базами данных MySQL, позволяющая нарушителю повлиять на доступность информации

EPSS

Процентиль: 50%

0.00271

Низкий

4.7 Medium

CVSS3

3.5 Low

CVSS2

Дефекты

NVD-CWE-noinfo