Vulnerability CVE-2016-3459: Information

Description

Unspecified vulnerability in Oracle MySQL 5.6.30 and earlier and 5.7.12 and earlier and MariaDB 10.0.x before 10.0.25 and 10.1.x before 10.1.14 allows remote administrators to affect availability via vectors related to Server: InnoDB.

Severity: MEDIUM (4.9) Vector: CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H

Published: July 21, 2016
Modified: Feb. 21, 2019

Fixed packages

References to Advisories, Solutions, and Tools

Hyperlink
Resource
http://www.oracle.com/technetwork/security-advisory/cpujul2016-2881720.html
  • Patch
  • Vendor Advisory
https://mariadb.com/kb/en/mariadb/mariadb-10025-release-notes/
  • Vendor Advisory
https://mariadb.com/kb/en/mariadb/mariadb-10114-release-notes/
  • Vendor Advisory
91787
  • Third Party Advisory
  • VDB Entry
RHSA-2016:1601
  • Third Party Advisory
91943
  • Third Party Advisory
  • VDB Entry
USN-3040-1
  • Third Party Advisory
1036362
  • Third Party Advisory
  • VDB Entry
RHSA-2016:1132
  • Third Party Advisory
    1. Configuration 1

      cpe:2.3:a:mariadb:mariadb:*:*:*:*:*:*:*:*
      Start including
      10.0.0
      End excliding
      10.0.25

      cpe:2.3:a:mariadb:mariadb:*:*:*:*:*:*:*:*
      Start including
      10.1.0
      End excliding
      10.1.14

      Configuration 2

      cpe:2.3:a:oracle:mysql:*:*:*:*:*:*:*:*
      Start including
      5.6.0
      End including
      5.6.30

      cpe:2.3:a:oracle:mysql:*:*:*:*:*:*:*:*
      Start including
      5.7.0
      End including
      5.7.12