Vulnerability CVE-2016-5440: Information

Description

Unspecified vulnerability in Oracle MySQL 5.5.49 and earlier, 5.6.30 and earlier, and 5.7.12 and earlier and MariaDB before 5.5.50, 10.0.x before 10.0.26, and 10.1.x before 10.1.15 allows remote administrators to affect availability via vectors related to Server: RBR.

Severity: MEDIUM (4.9) Vector: CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H

Published: July 21, 2016
Modified: Dec. 27, 2019

Fixed packages

References to Advisories, Solutions, and Tools

Hyperlink
Resource
http://www.oracle.com/technetwork/security-advisory/cpujul2016-2881720.html
  • Patch
  • Vendor Advisory
https://mariadb.com/kb/en/mariadb/mariadb-5550-release-notes/
  • Vendor Advisory
https://mariadb.com/kb/en/mariadb/mariadb-10115-release-notes/
  • Vendor Advisory
https://mariadb.com/kb/en/mariadb/mariadb-10026-release-notes/
  • Vendor Advisory
91787
  • Third Party Advisory
  • VDB Entry
http://www.oracle.com/technetwork/topics/security/linuxbulletinjul2016-3090544.html
  • Vendor Advisory
http://www-01.ibm.com/support/docview.wss?uid=isg3T1024168
  • Third Party Advisory
RHSA-2016:1601
  • Third Party Advisory
RHSA-2016:1602
  • Third Party Advisory
USN-3040-1
  • Third Party Advisory
91953
  • Third Party Advisory
  • VDB Entry
RHSA-2016:1604
  • Third Party Advisory
RHSA-2016:1603
  • Third Party Advisory
DSA-3632
  • Third Party Advisory
openSUSE-SU-2016:2278
  • Mailing List
  • Third Party Advisory
RHSA-2016:1637
  • Third Party Advisory
DSA-3624
  • Third Party Advisory
1036362
  • Third Party Advisory
  • VDB Entry
RHSA-2016:1480
  • Third Party Advisory
    1. Configuration 1

      cpe:2.3:a:ibm:powerkvm:3.1:*:*:*:*:*:*:*

      cpe:2.3:a:ibm:powerkvm:2.1:*:*:*:*:*:*:*

      Configuration 2

      cpe:2.3:a:mariadb:mariadb:*:*:*:*:*:*:*:*
      Start including
      5.5.20
      End excliding
      5.5.50

      cpe:2.3:a:mariadb:mariadb:*:*:*:*:*:*:*:*
      Start including
      10.0.0
      End excliding
      10.0.26

      cpe:2.3:a:mariadb:mariadb:*:*:*:*:*:*:*:*
      Start including
      10.1.0
      End excliding
      10.1.15

      Configuration 3

      cpe:2.3:a:oracle:mysql:*:*:*:*:*:*:*:*
      Start including
      5.6.0
      End including
      5.6.30

      cpe:2.3:a:oracle:mysql:*:*:*:*:*:*:*:*
      Start including
      5.7.0
      End including
      5.7.12

      cpe:2.3:a:oracle:mysql:*:*:*:*:*:*:*:*
      Start including
      5.5.0
      End including
      5.5.49

      Configuration 4

      cpe:2.3:o:oracle:linux:7:*:*:*:*:*:*:*

      Configuration 5

      cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:*

      Configuration 6

      cpe:2.3:o:canonical:ubuntu_linux:12.04:*:*:*:lts:*:*:*

      cpe:2.3:o:canonical:ubuntu_linux:16.04:*:*:*:lts:*:*:*

      cpe:2.3:o:canonical:ubuntu_linux:15.10:*:*:*:*:*:*:*

      cpe:2.3:o:canonical:ubuntu_linux:14.04:*:*:*:lts:*:*:*

      Configuration 7

      cpe:2.3:o:redhat:enterprise_linux_desktop:7.0:*:*:*:*:*:*:*

      cpe:2.3:o:redhat:enterprise_linux_server_aus:7.2:*:*:*:*:*:*:*

      cpe:2.3:o:redhat:enterprise_linux_workstation:7.0:*:*:*:*:*:*:*

      cpe:2.3:o:redhat:enterprise_linux_server_tus:7.2:*:*:*:*:*:*:*

      cpe:2.3:o:redhat:enterprise_linux_server:7.0:*:*:*:*:*:*:*

      cpe:2.3:o:redhat:enterprise_linux_server_eus:7.2:*:*:*:*:*:*:*

      cpe:2.3:o:redhat:enterprise_linux_server_tus:7.3:*:*:*:*:*:*:*

      cpe:2.3:o:redhat:enterprise_linux_server_eus:7.3:*:*:*:*:*:*:*

      cpe:2.3:o:redhat:enterprise_linux_server_eus:7.4:*:*:*:*:*:*:*

      cpe:2.3:o:redhat:enterprise_linux_server_eus:7.5:*:*:*:*:*:*:*

      cpe:2.3:o:redhat:enterprise_linux_server_tus:7.6:*:*:*:*:*:*:*

      cpe:2.3:o:redhat:enterprise_linux_server_eus:7.6:*:*:*:*:*:*:*

      cpe:2.3:o:redhat:enterprise_linux_server_aus:7.6:*:*:*:*:*:*:*