CVE-2016-0640

7 documents7 sources

Severity

6.1MEDIUM

EPSS

0.2%

top 54.69%

CISA KEV

Not in KEV

Exploit

No known exploits

Affected products

Mariadb Mariadb Oracle Mysql Debian Debian Linux +4 more

Timeline

PublishedApr 21

Latest updateMay 13

Description

Unspecified vulnerability in Oracle MySQL 5.5.47 and earlier, 5.6.28 and earlier, and 5.7.10 and earlier and MariaDB before 5.5.48, 10.0.x before 10.0.24, and 10.1.x before 10.1.12 allows local users to affect integrity and availability via vectors related to DML.

CVSS vector

CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:HExploitability: 1.8 | Impact: 4.2

Affected Packages10 packages

▶NVDoracle/mysql5.5.0 — 5.5.47+2

▶NVDmariadb/mariadb5.5.20 — 5.5.48+2

▶Ubuntumysql-5.5< 5.5.49-0ubuntu0.14.04.1

▶Ubuntumysql-5.6< 5.6.30-0ubuntu0.14.04.1

▶Ubuntumariadb-5.5< 5.5.49-1ubuntu0.14.04.1

Also affects: Debian Linux 8.0, Enterprise Linux 6.0, 7.0

Patches

Patch: www.oracle.com ↗Patch: www.oracle.com ↗

🔴Vulnerability Details

GHSA

GHSA-mhc3-cvw4-x398: Unspecified vulnerability in Oracle MySQL 5↗2022-05-13

▶

CVEList

CVE-2016-0640: Unspecified vulnerability in Oracle MySQL 5↗2016-04-21

▶

OSV

CVE-2016-0640: Unspecified vulnerability in Oracle MySQL 5↗2016-04-20

▶

📋Vendor Advisories

Red Hat

mysql: unspecified vulnerability in subcomponent: Server: DML (CPU April 2016)↗2016-04-21

▶

Ubuntu

MySQL vulnerabilities↗2016-04-21

▶

💬Community

Bugzilla

CVE-2016-0640 mysql: unspecified vulnerability in subcomponent: Server: DML (CPU April 2016)↗2016-04-21

▶