CVE-2016-3521

7 documents7 sources
Severity
6.5MEDIUM
EPSS
1.3%
top 19.91%
CISA KEV
Not in KEV
Exploit
No known exploits
Timeline
PublishedJul 21
Latest updateMay 13

Description

Unspecified vulnerability in Oracle MySQL 5.5.49 and earlier, 5.6.30 and earlier, and 5.7.12 and earlier and MariaDB before 5.5.50, 10.0.x before 10.0.26, and 10.1.x before 10.1.15 allows remote authenticated users to affect availability via vectors related to Server: Types.

CVSS vector

CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:HExploitability: 2.8 | Impact: 3.6

Affected Packages5 packages

NVDoracle/mysql5.5.05.5.49+2
NVDmariadb/mariadb5.5.205.5.50+2
Alpinemariadb< 5.5.51-r0+1
NVDibm/powerkvm2.1, 3.1+1

Also affects: Debian Linux 8.0, Ubuntu Linux 12.04, 14.04, 15.10, 16.04

Patches

🔴Vulnerability Details

3
GHSA
GHSA-h534-4fvw-mm64: Unspecified vulnerability in Oracle MySQL 52022-05-13
CVEList
CVE-2016-3521: Unspecified vulnerability in Oracle MySQL 52016-07-21
OSV
CVE-2016-3521: Unspecified vulnerability in Oracle MySQL 52016-07-21

📋Vendor Advisories

2
Ubuntu
MySQL vulnerabilities2016-07-21
Red Hat
mysql: unspecified vulnerability in subcomponent: Server: Types (CPU July 2016)2016-07-20

💬Community

1
Bugzilla
CVE-2016-3521 mysql: unspecified vulnerability in subcomponent: Server: Types (CPU July 2016)2016-07-20
CVE-2016-3521 (MEDIUM CVSS 6.5) | Unspecified vulnerability in Oracle | cvebase.io