CVE-2016-0668

Опубликовано: 21 апр. 2016

Источник: nvd

CVSS3: 4.1

CVSS2: 1.7

EPSS Низкий

Описание

Unspecified vulnerability in Oracle MySQL 5.6.28 and earlier and 5.7.10 and earlier and MariaDB 10.0.x before 10.0.24 and 10.1.x before 10.1.12 allows local users to affect availability via vectors related to InnoDB.

Ссылки

http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00053.html
Mailing List
Third Party Advisory
http://lists.opensuse.org/opensuse-security-announce/2016-06/msg00033.html
Mailing List
Third Party Advisory
http://lists.opensuse.org/opensuse-security-announce/2016-06/msg00034.html
Mailing List
Third Party Advisory
http://lists.opensuse.org/opensuse-security-announce/2016-06/msg00051.html
Mailing List
Third Party Advisory
http://lists.opensuse.org/opensuse-security-announce/2016-06/msg00053.html
Mailing List
Third Party Advisory
http://rhn.redhat.com/errata/RHSA-2016-0705.html
Third Party Advisory
http://www.debian.org/security/2016/dsa-3595
Third Party Advisory
http://www.oracle.com/technetwork/security-advisory/cpuapr2016v3-2985753.html
Patch
Vendor Advisory
http://www.securityfocus.com/bid/86467
Third Party Advisory
VDB Entry
http://www.securitytracker.com/id/1035606
Broken Link
Third Party Advisory
VDB Entry
http://www.ubuntu.com/usn/USN-2953-1
Third Party Advisory
https://access.redhat.com/errata/RHSA-2016:1132
Third Party Advisory
https://mariadb.com/kb/en/mariadb/mariadb-10024-release-notes/
Vendor Advisory
https://mariadb.com/kb/en/mariadb/mariadb-10112-release-notes/
Vendor Advisory
http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00053.html
Mailing List
Third Party Advisory
http://lists.opensuse.org/opensuse-security-announce/2016-06/msg00033.html
Mailing List
Third Party Advisory
http://lists.opensuse.org/opensuse-security-announce/2016-06/msg00034.html
Mailing List
Third Party Advisory
http://lists.opensuse.org/opensuse-security-announce/2016-06/msg00051.html
Mailing List
Third Party Advisory
http://lists.opensuse.org/opensuse-security-announce/2016-06/msg00053.html
Mailing List
Third Party Advisory
http://rhn.redhat.com/errata/RHSA-2016-0705.html
Third Party Advisory

Уязвимые конфигурации

Конфигурация 1

Одно из

cpe:2.3:a:oracle:mysql:*:*:*:*:*:*:*:*

Версия от 5.6.0 (включая) до 5.6.28 (включая)

cpe:2.3:a:oracle:mysql:*:*:*:*:*:*:*:*

Версия от 5.7.0 (включая) до 5.7.10 (включая)

Конфигурация 2

Одно из

cpe:2.3:a:mariadb:mariadb:*:*:*:*:*:*:*:*

Версия от 10.0.0 (включая) до 10.0.24 (исключая)

cpe:2.3:a:mariadb:mariadb:*:*:*:*:*:*:*:*

Версия от 10.1.0 (включая) до 10.1.12 (включая)

Конфигурация 3

cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:*

Конфигурация 4

Одно из

cpe:2.3:o:opensuse:leap:42.1:*:*:*:*:*:*:*

cpe:2.3:o:opensuse:opensuse:13.2:*:*:*:*:*:*:*

cpe:2.3:o:suse:linux_enterprise_desktop:12:-:*:*:*:*:*:*

cpe:2.3:o:suse:linux_enterprise_desktop:12:sp1:*:*:*:*:*:*

cpe:2.3:o:suse:linux_enterprise_server:12:-:*:*:*:*:*:*

cpe:2.3:o:suse:linux_enterprise_server:12:sp1:*:*:*:*:*:*

cpe:2.3:o:suse:linux_enterprise_software_development_kit:12:-:*:*:*:*:*:*

cpe:2.3:o:suse:linux_enterprise_software_development_kit:12:sp1:*:*:*:*:*:*

cpe:2.3:o:suse:linux_enterprise_workstation_extension:12:-:*:*:*:*:*:*

cpe:2.3:o:suse:linux_enterprise_workstation_extension:12:sp1:*:*:*:*:*:*

Конфигурация 5

Одно из

cpe:2.3:o:canonical:ubuntu_linux:12.04:*:*:*:-:*:*:*

cpe:2.3:o:canonical:ubuntu_linux:14.04:*:*:*:esm:*:*:*

cpe:2.3:o:canonical:ubuntu_linux:15.10:*:*:*:*:*:*:*

EPSS

Процентиль: 62%

0.00439

Низкий

4.1 Medium

CVSS3

1.7 Low

CVSS2

Дефекты

NVD-CWE-noinfo

Связанные уязвимости

CVE-2016-0668

CVSS3: 4.1

ubuntu

больше 9 лет назад

CVE-2016-0668

redhat

больше 9 лет назад

CVE-2016-0668

CVSS3: 4.1

debian

больше 9 лет назад

Unspecified vulnerability in Oracle MySQL 5.6.28 and earlier and 5.7.1 ...

GHSA-4mj5-vgr9-v4pr

CVSS3: 4.1

github

больше 3 лет назад

openSUSE-SU-2016:1332-1

suse-cvrf

больше 9 лет назад

Security update for mysql-community-server

EPSS

Процентиль: 62%

0.00439

Низкий

4.1 Medium

CVSS3

1.7 Low

CVSS2

Дефекты

NVD-CWE-noinfo