CVE-2016-5584Sensitive Information Exposure in Oracle Mysql

Severity
4.4MEDIUMNVD
EPSS
0.4%
top 36.68%
CISA KEV
Not in KEV
Exploit
No known exploits
Timeline
PublishedOct 25
Latest updateMay 14

Description

Unspecified vulnerability in Oracle MySQL 5.5.52 and earlier, 5.6.33 and earlier, and 5.7.15 and earlier allows remote administrators to affect confidentiality via vectors related to Server: Security: Encryption.

CVSS vector

CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:N/A:NExploitability: 0.7 | Impact: 3.6

Affected Packages2 packages

NVDoracle/mysql5.5.05.5.52+2
NVDmariadb/mariadb5.5.05.5.53+2

Also affects: Debian Linux 8.0

Patches

🔴Vulnerability Details

2
GHSA
GHSA-m4x2-9645-g5v7: Unspecified vulnerability in Oracle MySQL 52022-05-14
OSV
CVE-2016-5584: Unspecified vulnerability in Oracle MySQL 52016-10-19

📋Vendor Advisories

2
Ubuntu
MySQL vulnerabilities2016-10-25
Red Hat
mysql: unspecified vulnerability in subcomponent: Server: Security: Encryption (CPU October 2016)2016-10-19

💬Community

4
Bugzilla
CVE-2016-3492 CVE-2016-5507 CVE-2016-5609 CVE-2016-5612 CVE-2016-5616 CVE-2016-5617 CVE-2016-5626 CVE-2016-5627 CVE-2016-5629 CVE-2016-5630 CVE-2016-8283 CVE-2016-8284 CVE-2016-8288 community-mysql: v2016-10-19
Bugzilla
CVE-2016-3492 CVE-2016-5612 CVE-2016-5616 CVE-2016-5617 CVE-2016-5624 CVE-2016-5626 CVE-2016-5629 CVE-2016-8283 mariadb-galera: various flaws [fedora-all]2016-10-19
Bugzilla
CVE-2016-5584 mysql: unspecified vulnerability in subcomponent: Server: Security: Encryption (CPU October 2016)2016-10-19
Bugzilla
CVE-2016-3492 CVE-2016-5612 CVE-2016-5616 CVE-2016-5617 CVE-2016-5624 CVE-2016-5626 CVE-2016-5629 CVE-2016-8283 mariadb: various flaws [fedora-all]2016-10-19