CVE-2016-3477

7 documents7 sources

Severity

8.1HIGH

EPSS

0.1%

top 69.91%

CISA KEV

Not in KEV

Exploit

No known exploits

Affected products

Mariadb Mariadb Oracle Mysql Canonical Ubuntu Linux +3 more

Timeline

PublishedJul 21

Latest updateMay 13

Description

Unspecified vulnerability in Oracle MySQL 5.5.49 and earlier, 5.6.30 and earlier, and 5.7.12 and earlier and MariaDB before 5.5.50, 10.0.x before 10.0.26, and 10.1.x before 10.1.15 allows local users to affect confidentiality, integrity, and availability via vectors related to Server: Parser.

CVSS vector

CVSS:3.0/AV:L/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:HExploitability: 1.4 | Impact: 6.0

Affected Packages5 packages

▶NVDoracle/mysql5.5.0 — 5.5.49+2

▶NVDmariadb/mariadb5.5.20 — 5.5.50+2

▶Alpinemariadb< 5.5.51-r0+1

▶NVDoracle/linux7

▶NVDibm/powerkvm2.1, 3.1+1

Also affects: Debian Linux 8.0, Ubuntu Linux 12.04, 14.04, 15.10, 16.04

Patches

Patch: www.oracle.com ↗Patch: www.oracle.com ↗

🔴Vulnerability Details

GHSA

GHSA-x24r-xfh8-7ww8: Unspecified vulnerability in Oracle MySQL 5↗2022-05-13

▶

CVEList

CVE-2016-3477: Unspecified vulnerability in Oracle MySQL 5↗2016-07-21

▶

OSV

CVE-2016-3477: Unspecified vulnerability in Oracle MySQL 5↗2016-07-21

▶

📋Vendor Advisories

Ubuntu

MySQL vulnerabilities↗2016-07-21

▶

Red Hat

mysql: unspecified vulnerability in subcomponent: Server: Parser (CPU July 2016)↗2016-07-20

▶

💬Community

Bugzilla

CVE-2016-3477 mysql: unspecified vulnerability in subcomponent: Server: Parser (CPU July 2016)↗2016-07-20

▶