CVE-2016-8289
published 2016-10-25CVE-2016-8289: Unspecified vulnerability in Oracle MySQL 5.7.13 and earlier allows local users to affect integrity and availability via vectors related to Server: InnoDB.
PriorityP413medium4.7CVSS 3.0
AVLACHPRHUINSUCNILAH
EPSS
0.34%
25.7th percentile
Unspecified vulnerability in Oracle MySQL 5.7.13 and earlier allows local users to affect integrity and availability via vectors related to Server: InnoDB.
Affected
1 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| oracle | mysql | <= 5.7.13 | — |
CVSS provenance
nvdv3.04.7MEDIUMCVSS:3.0/AV:L/AC:H/PR:H/UI:N/S:U/C:N/I:L/A:H
nvdv2.03.3LOWAV:L/AC:M/Au:N/C:N/I:P/A:P
osv4.7MEDIUM
vendor_redhat4.7MEDIUM
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
Red Hat
mysql: unspecified vulnerability in subcomponent: Server: InnoDB (CPU October 2016)
vendor_redhat·2016-10-19·CVSS 4.7
CVE-2016-8289 [MEDIUM] mysql: unspecified vulnerability in subcomponent: Server: InnoDB (CPU October 2016)
mysql: unspecified vulnerability in subcomponent: Server: InnoDB (CPU October 2016)
Unspecified vulnerability in Oracle MySQL 5.7.13 and earlier allows local users to affect integrity and availability via vectors related to Server: InnoDB.
Package: mysql55-mysql (Red Hat Enterprise Linux 5) - Not affected
Package: mysql (Red Hat Enterprise Linux 6) - Not affected
Package: mariadb (Red Hat Enterprise Linux 7) - Not affected
Package: mariadb-galera (Red Hat Enterprise Linux OpenStack Platform 5 (Icehouse)) - Not affected
Package: mariadb-galera (Red Hat Enterprise Linux OpenStack Platform 6 (Juno)) - Not affected
Package: mariadb-galera (Red Hat Enterprise Linux OpenStack Platform 7 (Kilo)) - Not affected
Package: mariadb-galera (Red Hat OpenStack Platform 10 (Newton)) - Not affected
GHSA
GHSA-mgcx-5h2c-2w28: Unspecified vulnerability in Oracle MySQL 5
ghsa_unreviewed·2022-05-17
CVE-2016-8289 [MEDIUM] GHSA-mgcx-5h2c-2w28: Unspecified vulnerability in Oracle MySQL 5
Unspecified vulnerability in Oracle MySQL 5.7.13 and earlier allows local users to affect integrity and availability via vectors related to Server: InnoDB.
OSV
CVE-2016-8289: Unspecified vulnerability in Oracle MySQL 5
osv·2016-10-25·CVSS 4.7
CVE-2016-8289 [MEDIUM] CVE-2016-8289: Unspecified vulnerability in Oracle MySQL 5
Unspecified vulnerability in Oracle MySQL 5.7.13 and earlier allows local users to affect integrity and availability via vectors related to Server: InnoDB.
No detection rules found.
No public exploits indexed.
http://www.oracle.com/technetwork/security-advisory/cpuoct2016-2881722.htmlhttp://www.securityfocus.com/bid/93720http://www.securitytracker.com/id/1037050https://security.gentoo.org/glsa/201701-01http://www.oracle.com/technetwork/security-advisory/cpuoct2016-2881722.htmlhttp://www.securityfocus.com/bid/93720http://www.securitytracker.com/id/1037050https://security.gentoo.org/glsa/201701-01
2016-10-25
Published