CVE-2016-3459 — Mariadb vulnerability

6 documents6 sources
Severity
4.9MEDIUMNVD
EPSS
0.9%
top 24.64%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
2
MariadbOracle Mysql
Timeline
PublishedJul 21
Latest updateMay 14

Description

Unspecified vulnerability in Oracle MySQL 5.6.30 and earlier and 5.7.12 and earlier and MariaDB 10.0.x before 10.0.25 and 10.1.x before 10.1.14 allows remote administrators to affect availability via vectors related to Server: InnoDB.

CVSS vector

CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:HExploitability: 1.2 | Impact: 3.6

Affected Packages2 packages

▶NVDoracle/mysql5.6.0 — 5.6.30+1
▶NVDmariadb/mariadb10.0.0 — 10.0.25+1

Patches

Patch: www.oracle.com ↗Patch: www.oracle.com ↗

🔴Vulnerability Details

2
GHSA
GHSA-9c7x-wvr8-xvf2: Unspecified vulnerability in Oracle MySQL 5↗2022-05-14
▶
OSV
CVE-2016-3459: Unspecified vulnerability in Oracle MySQL 5↗2016-07-20
▶

📋Vendor Advisories

2
Ubuntu
MySQL vulnerabilities↗2016-07-21
▶
Red Hat
mysql: unspecified vulnerability in subcomponent: Server: InnoDB (CPU July 2016)↗2016-07-20
▶

💬Community

1
Bugzilla
CVE-2016-3459 mysql: unspecified vulnerability in subcomponent: Server: InnoDB (CPU July 2016)↗2016-07-20
▶