CVE-2016-3471

Опубликовано: 21 июл. 2016

Источник: nvd

CVSS3: 7.5

CVSS2: 6.2

EPSS Низкий

Описание

Unspecified vulnerability in Oracle MySQL 5.5.45 and earlier and 5.6.26 and earlier allows local users to affect confidentiality, integrity, and availability via vectors related to Server: Option.

Ссылки

http://rhn.redhat.com/errata/RHSA-2016-0534.html
Third Party Advisory
http://rhn.redhat.com/errata/RHSA-2016-0705.html
Third Party Advisory
http://rhn.redhat.com/errata/RHSA-2016-1480.html
Third Party Advisory
http://rhn.redhat.com/errata/RHSA-2016-1481.html
Third Party Advisory
http://www.oracle.com/technetwork/security-advisory/cpujul2016-2881720.html
Patch
Vendor Advisory
http://www.securityfocus.com/bid/91787
Third Party Advisory
VDB Entry
http://www.securityfocus.com/bid/91913
Third Party Advisory
VDB Entry
http://www.securitytracker.com/id/1036362
Third Party Advisory
VDB Entry
https://access.redhat.com/errata/RHSA-2016:1132
Third Party Advisory
http://rhn.redhat.com/errata/RHSA-2016-0534.html
Third Party Advisory
http://rhn.redhat.com/errata/RHSA-2016-0705.html
Third Party Advisory
http://rhn.redhat.com/errata/RHSA-2016-1480.html
Third Party Advisory
http://rhn.redhat.com/errata/RHSA-2016-1481.html
Third Party Advisory
http://www.oracle.com/technetwork/security-advisory/cpujul2016-2881720.html
Patch
Vendor Advisory
http://www.securityfocus.com/bid/91787
Third Party Advisory
VDB Entry
http://www.securityfocus.com/bid/91913
Third Party Advisory
VDB Entry
http://www.securitytracker.com/id/1036362
Third Party Advisory
VDB Entry
https://access.redhat.com/errata/RHSA-2016:1132
Third Party Advisory

Уязвимые конфигурации

Конфигурация 1

Одно из

cpe:2.3:a:oracle:mysql:*:*:*:*:*:*:*:*

Версия от 5.5.0 (включая) до 5.5.45 (включая)

cpe:2.3:a:oracle:mysql:*:*:*:*:*:*:*:*

Версия от 5.6.0 (включая) до 5.6.26 (включая)

Конфигурация 2

Одно из

cpe:2.3:o:redhat:enterprise_linux:6.0:*:*:*:*:*:*:*

cpe:2.3:o:redhat:enterprise_linux:7.0:*:*:*:*:*:*:*

Конфигурация 3

Одно из

cpe:2.3:a:mariadb:mariadb:*:*:*:*:*:*:*:*

Версия от 5.5.0 (включая) до 5.5.46 (исключая)

cpe:2.3:a:mariadb:mariadb:*:*:*:*:*:*:*:*

Версия от 10.0.0 (включая) до 10.0.22 (исключая)

cpe:2.3:a:mariadb:mariadb:*:*:*:*:*:*:*:*

Версия от 10.1.0 (включая) до 10.1.9 (исключая)

EPSS

Процентиль: 26%

0.0009

Низкий

7.5 High

CVSS3

6.2 Medium

CVSS2

Дефекты

NVD-CWE-noinfo

Связанные уязвимости

CVE-2016-3471

CVSS3: 7.5

ubuntu

около 9 лет назад

Unspecified vulnerability in Oracle MySQL 5.5.45 and earlier and 5.6.26 and earlier allows local users to affect confidentiality, integrity, and availability via vectors related to Server: Option.

CVE-2016-3471

CVSS3: 7.5

redhat

около 9 лет назад

Unspecified vulnerability in Oracle MySQL 5.5.45 and earlier and 5.6.26 and earlier allows local users to affect confidentiality, integrity, and availability via vectors related to Server: Option.

CVE-2016-3471

CVSS3: 7.5

debian

около 9 лет назад

Unspecified vulnerability in Oracle MySQL 5.5.45 and earlier and 5.6.2 ...

GHSA-9h8x-h66j-8wqj

CVSS3: 7.5

github

больше 3 лет назад

Unspecified vulnerability in Oracle MySQL 5.5.45 and earlier and 5.6.26 and earlier allows local users to affect confidentiality, integrity, and availability via vectors related to Server: Option.

EPSS

Процентиль: 26%

0.0009

Низкий

7.5 High

CVSS3

6.2 Medium

CVSS2

Дефекты

NVD-CWE-noinfo