CVE-2016-5444

6 documents6 sources

Severity

3.7LOW

EPSS

3.8%

top 11.90%

CISA KEV

Not in KEV

Exploit

No known exploits

Affected products

Mariadb Mariadb Oracle Mysql IBM Powerkvm +8 more

Timeline

PublishedJul 21

Latest updateMay 13

Description

Unspecified vulnerability in Oracle MySQL 5.5.48 and earlier, 5.6.29 and earlier, and 5.7.11 and earlier and MariaDB before 5.5.49, 10.0.x before 10.0.25, and 10.1.x before 10.1.14 allows remote attackers to affect confidentiality via vectors related to Server: Connection.

CVSS vector

CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:NExploitability: 2.2 | Impact: 1.4

Affected Packages8 packages

▶NVDoracle/mysql5.5.0 — 5.5.48+2

▶NVDmariadb/mariadb5.5.20 — 5.5.49+2

▶Alpinemariadb< 5.5.51-r0+1

▶NVDoracle/linux7

▶NVDredhat/enterprise_linux_server7.0

Also affects: Enterprise Linux 6.0, 7.0, 7.2, 7.3, 7.4, 7.6, 7.5

Patches

Patch: www.oracle.com ↗Patch: www.oracle.com ↗

🔴Vulnerability Details

GHSA

GHSA-52xg-2453-vmhx: Unspecified vulnerability in Oracle MySQL 5↗2022-05-13

▶

OSV

CVE-2016-5444: Unspecified vulnerability in Oracle MySQL 5↗2016-07-21

▶

CVEList

CVE-2016-5444: Unspecified vulnerability in Oracle MySQL 5↗2016-07-21

▶

📋Vendor Advisories

Red Hat

mysql: unspecified vulnerability in subcomponent: Server: Connection (CPU July 2016)↗2016-07-20

▶

💬Community

Bugzilla

CVE-2016-5444 mysql: unspecified vulnerability in subcomponent: Server: Connection (CPU July 2016)↗2016-07-20

▶