CVE-2016-5440

7 documents7 sources

Severity

4.9MEDIUM

EPSS

0.9%

top 25.06%

CISA KEV

Not in KEV

Exploit

No known exploits

Affected products

Mariadb Mariadb Oracle Mysql Canonical Ubuntu Linux +9 more

Timeline

PublishedJul 21

Latest updateMay 13

Description

Unspecified vulnerability in Oracle MySQL 5.5.49 and earlier, 5.6.30 and earlier, and 5.7.12 and earlier and MariaDB before 5.5.50, 10.0.x before 10.0.26, and 10.1.x before 10.1.15 allows remote administrators to affect availability via vectors related to Server: RBR.

CVSS vector

CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:HExploitability: 1.2 | Impact: 3.6

Affected Packages8 packages

▶NVDoracle/mysql5.5.0 — 5.5.49+2

▶NVDmariadb/mariadb5.5.20 — 5.5.50+2

▶Alpinemariadb< 5.5.51-r0+1

▶NVDoracle/linux7

▶NVDredhat/enterprise_linux_server7.0

Also affects: Debian Linux 8.0, Ubuntu Linux 12.04, 14.04, 15.10, 16.04, Enterprise Linux 7.2, 7.6, 7.3, 7.4, 7.5

Patches

Patch: www.oracle.com ↗Patch: www.oracle.com ↗

🔴Vulnerability Details

GHSA

GHSA-jgx2-h5wg-8cmc: Unspecified vulnerability in Oracle MySQL 5↗2022-05-13

▶

OSV

CVE-2016-5440: Unspecified vulnerability in Oracle MySQL 5↗2016-07-21

▶

CVEList

CVE-2016-5440: Unspecified vulnerability in Oracle MySQL 5↗2016-07-21

▶

📋Vendor Advisories

Ubuntu

MySQL vulnerabilities↗2016-07-21

▶

Red Hat

mysql: unspecified vulnerability in subcomponent: Server: RBR (CPU July 2016)↗2016-07-20

▶

💬Community

Bugzilla

CVE-2016-5440 mysql: unspecified vulnerability in subcomponent: Server: RBR (CPU July 2016)↗2016-07-20

▶