CVE-2016-5626

Опубликовано: 25 окт. 2016

Источник: nvd

CVSS3: 6.5

CVSS2: 4

EPSS Низкий

Описание

Unspecified vulnerability in Oracle MySQL 5.5.51 and earlier, 5.6.32 and earlier, and 5.7.14 and earlier allows remote authenticated users to affect availability via vectors related to GIS.

Ссылки

http://rhn.redhat.com/errata/RHSA-2016-2130.html
Third Party Advisory
http://rhn.redhat.com/errata/RHSA-2016-2131.html
Third Party Advisory
http://rhn.redhat.com/errata/RHSA-2016-2595.html
Third Party Advisory
http://rhn.redhat.com/errata/RHSA-2016-2749.html
Third Party Advisory
http://rhn.redhat.com/errata/RHSA-2016-2927.html
Third Party Advisory
http://rhn.redhat.com/errata/RHSA-2016-2928.html
Third Party Advisory
http://www.oracle.com/technetwork/security-advisory/cpuoct2016-2881722.html
Patch
Vendor Advisory
http://www.securityfocus.com/bid/93638
Third Party Advisory
VDB Entry
http://www.securitytracker.com/id/1037050
Broken Link
Third Party Advisory
VDB Entry
https://mariadb.com/kb/en/mariadb/mariadb-10028-release-notes/
Release Notes
Third Party Advisory
https://mariadb.com/kb/en/mariadb/mariadb-10118-release-notes/
Release Notes
Third Party Advisory
https://mariadb.com/kb/en/mariadb/mariadb-5552-release-notes/
Release Notes
Third Party Advisory
https://security.gentoo.org/glsa/201701-01
Third Party Advisory
VDB Entry
http://rhn.redhat.com/errata/RHSA-2016-2130.html
Third Party Advisory
http://rhn.redhat.com/errata/RHSA-2016-2131.html
Third Party Advisory
http://rhn.redhat.com/errata/RHSA-2016-2595.html
Third Party Advisory
http://rhn.redhat.com/errata/RHSA-2016-2749.html
Third Party Advisory
http://rhn.redhat.com/errata/RHSA-2016-2927.html
Third Party Advisory
http://rhn.redhat.com/errata/RHSA-2016-2928.html
Third Party Advisory
http://www.oracle.com/technetwork/security-advisory/cpuoct2016-2881722.html
Patch
Vendor Advisory

Уязвимые конфигурации

Конфигурация 1

Одно из

cpe:2.3:a:oracle:mysql:*:*:*:*:*:*:*:*

Версия от 5.5.0 (включая) до 5.5.51 (включая)

cpe:2.3:a:oracle:mysql:*:*:*:*:*:*:*:*

Версия от 5.6.0 (включая) до 5.6.32 (включая)

cpe:2.3:a:oracle:mysql:*:*:*:*:*:*:*:*

Версия от 5.7.0 (включая) до 5.7.14 (включая)

Конфигурация 2

Одно из

cpe:2.3:a:mariadb:mariadb:*:*:*:*:*:*:*:*

Версия от 5.5.0 (включая) до 5.5.52 (исключая)

cpe:2.3:a:mariadb:mariadb:*:*:*:*:*:*:*:*

Версия от 10.0.0 (включая) до 10.0.28 (исключая)

cpe:2.3:a:mariadb:mariadb:*:*:*:*:*:*:*:*

Версия от 10.1.0 (включая) до 10.1.18 (исключая)

Конфигурация 3

Одно из

cpe:2.3:o:redhat:enterprise_linux_eus:7.3:*:*:*:*:*:*:*

cpe:2.3:o:redhat:enterprise_linux_eus:7.4:*:*:*:*:*:*:*

cpe:2.3:o:redhat:enterprise_linux_eus:7.5:*:*:*:*:*:*:*

cpe:2.3:o:redhat:enterprise_linux_eus:7.6:*:*:*:*:*:*:*

cpe:2.3:o:redhat:enterprise_linux_eus:7.7:*:*:*:*:*:*:*

cpe:2.3:o:redhat:enterprise_linux_server:7.0:*:*:*:*:*:*:*

cpe:2.3:o:redhat:enterprise_linux_server_aus:7.3:*:*:*:*:*:*:*

cpe:2.3:o:redhat:enterprise_linux_server_aus:7.4:*:*:*:*:*:*:*

cpe:2.3:o:redhat:enterprise_linux_server_aus:7.6:*:*:*:*:*:*:*

cpe:2.3:o:redhat:enterprise_linux_server_aus:7.7:*:*:*:*:*:*:*

cpe:2.3:o:redhat:enterprise_linux_server_tus:7.3:*:*:*:*:*:*:*

cpe:2.3:o:redhat:enterprise_linux_server_tus:7.6:*:*:*:*:*:*:*

cpe:2.3:o:redhat:enterprise_linux_server_tus:7.7:*:*:*:*:*:*:*

EPSS

Процентиль: 94%

0.0634

Низкий

6.5 Medium

CVSS3

4 Medium

CVSS2

Дефекты

NVD-CWE-noinfo

Связанные уязвимости

CVE-2016-5626

CVSS3: 6.5

ubuntu

около 10 лет назад

Unspecified vulnerability in Oracle MySQL 5.5.51 and earlier, 5.6.32 and earlier, and 5.7.14 and earlier allows remote authenticated users to affect availability via vectors related to GIS.

CVE-2016-5626

CVSS3: 6.5

redhat

около 10 лет назад

Unspecified vulnerability in Oracle MySQL 5.5.51 and earlier, 5.6.32 and earlier, and 5.7.14 and earlier allows remote authenticated users to affect availability via vectors related to GIS.

CVE-2016-5626

CVSS3: 6.5

debian

около 10 лет назад

Unspecified vulnerability in Oracle MySQL 5.5.51 and earlier, 5.6.32 a ...

GHSA-4fg8-3vx8-366w

CVSS3: 6.5

github

больше 4 лет назад

Unspecified vulnerability in Oracle MySQL 5.5.51 and earlier, 5.6.32 and earlier, and 5.7.14 and earlier allows remote authenticated users to affect availability via vectors related to GIS.

ALT-PU-2016-2177

CVSS3: 7

altlinux

около 10 лет назад

ALT-PU-2016-2177: package `mariadb` update to version 10.1.18-alt1

EPSS

Процентиль: 94%

0.0634

Низкий

6.5 Medium

CVSS3

4 Medium

CVSS2

Дефекты

NVD-CWE-noinfo