CVE-2016-0546 — Classic Buffer Overflow in Mariadb

CWE-120 — Classic Buffer Overflow7 documents7 sources
Severity
7.2HIGHNVD
EPSS
0.2%
top 60.34%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
16
MariadbOracle MysqlCanonical Ubuntu Linux+13 more
Timeline
PublishedJan 21
Latest updateMay 13

Description

Unspecified vulnerability in Oracle MySQL 5.5.46 and earlier, 5.6.27 and earlier, and 5.7.9 and MariaDB before 5.5.47, 10.0.x before 10.0.23, and 10.1.x before 10.1.10 allows local users to affect confidentiality, integrity, and availability via unknown vectors related to Client. NOTE: the previous information is from the January 2016 CPU. Oracle has not commented on third-party claims that these are multiple buffer overflows in the mysqlshow tool that allow remote database servers to have unspe…

CVSS vector

AV:L/AC:L/C:C/I:C/A:CExploitability: 3.9 | Impact: 10.0

Affected Packages10 packages

▶NVDoracle/mysql5.5.0 — 5.5.46+2
▶NVDoracle/solaris11.3
▶NVDmariadb/mariadb5.5.20 — 5.5.47+2
▶NVDopensuse/leap42.1

Also affects: Debian Linux 8.0, Ubuntu Linux 12.04, 14.04, 15.04, 15.10, Enterprise Linux 6.0, 7.0, 7.2

Patches

Patch: www.debian.org ↗Patch: www.debian.org ↗

🔴Vulnerability Details

3
GHSA
GHSA-c3cx-7x4c-hmh8: Unspecified vulnerability in Oracle MySQL 5↗2022-05-13
▶
CVEList
CVE-2016-0546: Unspecified vulnerability in Oracle MySQL 5↗2016-01-21
▶
OSV
CVE-2016-0546: Unspecified vulnerability in Oracle MySQL 5↗2016-01-20
▶

📋Vendor Advisories

2
Ubuntu
MySQL vulnerabilities↗2016-01-26
▶
Red Hat
mysql: unspecified vulnerability in subcomponent: Client (CPU January 2016)↗2015-01-20
▶

💬Community

1
Bugzilla
CVE-2016-0546 mysql: unspecified vulnerability in subcomponent: Client (CPU January 2016)↗2016-01-25
▶
CVE-2016-0546 — Classic Buffer Overflow in Mariadb | cvebase