CVE-2016-3477

published 2016-07-21

CVE-2016-3477: Unspecified vulnerability in Oracle MySQL 5.5.49 and earlier, 5.6.30 and earlier, and 5.7.12 and earlier and MariaDB before 5.5.50, 10.0.x before 10.0.26, and…

Priority P3 37 high 8.1 CVSS 3.0

AV L AC H PR N UI N S C C H I H A H

Unspecified vulnerability in Oracle MySQL 5.5.49 and earlier, 5.6.30 and earlier, and 5.7.12 and earlier and MariaDB before 5.5.50, 10.0.x before 10.0.26, and 10.1.x before 10.1.15 allows local users to affect confidentiality, integrity, and availability via vectors related to Server: Parser.

Affected

16 ranges

Vendor	Product	Version range	Fixed in
canonical	ubuntu_linux	—	—
canonical	ubuntu_linux	—	—
canonical	ubuntu_linux	—	—
canonical	ubuntu_linux	—	—
debian	debian_linux	—	—
ibm	powerkvm	—	—
ibm	powerkvm	—	—
mariadb	mariadb	>= 0 < 5.5.51-r0	5.5.51-r0
mariadb	mariadb	>= 0 < 10.1.17-r0	10.1.17-r0
mariadb	mariadb	>= 10.0.0 < 10.0.26	10.0.26
mariadb	mariadb	>= 10.1.0 < 10.1.15	10.1.15
mariadb	mariadb	>= 5.5.20 < 5.5.50	5.5.50
oracle	linux	—	—
oracle	mysql	5.5.0 – 5.5.49	—
oracle	mysql	5.6.0 – 5.6.30	—
oracle	mysql	5.7.0 – 5.7.12	—

CVSS provenance

nvd v3.0 8.1 HIGH CVSS:3.0/AV:L/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:H

nvd v2.0 4.1 MEDIUM AV:L/AC:M/Au:S/C:P/I:P/A:P

osv 8.1 HIGH

vendor_redhat 8.1 HIGH

Stop checking back — get the weekly exploitation signal.

Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.