CVE-2016-0647

8 documents7 sources

Severity

5.5MEDIUM

EPSS

0.2%

top 52.48%

CISA KEV

Not in KEV

Exploit

No known exploits

Affected products

Mariadb Mariadb Oracle Mysql Debian Debian Linux +4 more

Timeline

PublishedApr 21

Latest updateMay 13

Description

Unspecified vulnerability in Oracle MySQL 5.5.48 and earlier, 5.6.29 and earlier, and 5.7.11 and earlier and MariaDB before 5.5.49, 10.0.x before 10.0.25, and 10.1.x before 10.1.14 allows local users to affect availability via vectors related to FTS.

CVSS vector

CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:HExploitability: 1.8 | Impact: 3.6

Affected Packages6 packages

▶NVDoracle/mysql5.5.0 — 5.5.48+2

▶NVDmariadb/mariadb5.5.20 — 5.5.49+2

▶Alpinemariadb< 5.5.51-r0+1

▶NVDoracle/linux7

▶NVDibm/powerkvm2.1, 3.1+1

Also affects: Debian Linux 8.0, Enterprise Linux 6.0, 7.0

Patches

Patch: www.oracle.com ↗Patch: www.oracle.com ↗

🔴Vulnerability Details

GHSA

GHSA-w2fq-mv2v-xvm5: Unspecified vulnerability in Oracle MySQL 5↗2022-05-13

▶

OSV

CVE-2016-0647: Unspecified vulnerability in Oracle MySQL 5↗2016-04-21

▶

CVEList

CVE-2016-0647: Unspecified vulnerability in Oracle MySQL 5↗2016-04-21

▶

📋Vendor Advisories

Ubuntu

MySQL vulnerabilities↗2016-04-25

▶

Red Hat

mysql: unspecified vulnerability in subcomponent: Server: FTS (CPU April 2016)↗2016-04-21

▶

Ubuntu

MySQL vulnerabilities↗2016-04-21

▶

💬Community

Bugzilla

CVE-2016-0647 mysql: unspecified vulnerability in subcomponent: Server: FTS (CPU April 2016)↗2016-04-21

▶