CVE-2016-0546

Oracle MySQL <5.5.46, <5.6.27, <5.7.9 - Info Disclosure

Title source: llm

Description

Unspecified vulnerability in Oracle MySQL 5.5.46 and earlier, 5.6.27 and earlier, and 5.7.9 and MariaDB before 5.5.47, 10.0.x before 10.0.23, and 10.1.x before 10.1.10 allows local users to affect confidentiality, integrity, and availability via unknown vectors related to Client. NOTE: the previous information is from the January 2016 CPU. Oracle has not commented on third-party claims that these are multiple buffer overflows in the mysqlshow tool that allow remote database servers to have unspecified impact via a long table or database name.

References (26)

Core 26

Core References

Mailing List, Third Party Advisory vendor-advisory x_refsource_suse

http://lists.opensuse.org/opensuse-security-announce/2016-06/msg00034.html

Third Party Advisory vendor-advisory x_refsource_redhat

http://rhn.redhat.com/errata/RHSA-2016-1481.html

Third Party Advisory vendor-advisory x_refsource_suse

http://lists.opensuse.org/opensuse-security-announce/2016-02/msg00015.html

Third Party Advisory vendor-advisory x_refsource_redhat

https://access.redhat.com/errata/RHSA-2016:1132

Third Party Advisory vendor-advisory x_refsource_debian

http://www.debian.org/security/2016/dsa-3459

Third Party Advisory, VDB Entry vdb-entry x_refsource_sectrack

http://www.securitytracker.com/id/1034708

Third Party Advisory vendor-advisory x_refsource_redhat

http://rhn.redhat.com/errata/RHSA-2016-0534.html

Vendor Advisory x_refsource_confirm

http://www.oracle.com/technetwork/topics/security/linuxbulletinapr2016-2952096.html

Mailing List, Third Party Advisory vendor-advisory x_refsource_suse

http://lists.opensuse.org/opensuse-security-announce/2016-06/msg00033.html

Vendor Advisory x_refsource_confirm

http://www.oracle.com/technetwork/topics/security/cpujan2016-2367955.html

Third Party Advisory vendor-advisory x_refsource_redhat

http://rhn.redhat.com/errata/RHSA-2016-1480.html

Third Party Advisory x_refsource_confirm

https://github.com/mysql/mysql-server/commit/0dbd5a8797ed4bd18e8b883988fb62177eb0f73f

Mailing List, Third Party Advisory vendor-advisory x_refsource_suse

http://lists.opensuse.org/opensuse-security-announce/2016-06/msg00051.html

Vendor Advisory x_refsource_confirm

http://www.oracle.com/technetwork/topics/security/bulletinapr2016-2952098.html

Third Party Advisory, VDB Entry vdb-entry x_refsource_bid

http://www.securityfocus.com/bid/81066

Vendor Advisory x_refsource_confirm

https://mariadb.com/kb/en/mdb-10023-rn/

Third Party Advisory vendor-advisory x_refsource_ubuntu

http://www.ubuntu.com/usn/USN-2881-1

Issue Tracking, Third Party Advisory x_refsource_confirm

https://bugzilla.redhat.com/show_bug.cgi?id=1301493

Mailing List, Third Party Advisory vendor-advisory x_refsource_suse

http://lists.opensuse.org/opensuse-security-announce/2016-02/msg00016.html

Patch, Third Party Advisory vendor-advisory x_refsource_debian

http://www.debian.org/security/2016/dsa-3453

Vendor Advisory x_refsource_confirm

https://mariadb.com/kb/en/mariadb/mariadb-5547-release-notes/

Vendor Advisory x_refsource_confirm

https://dev.mysql.com/doc/relnotes/mysql/5.5/en/news-5-5-47.html

Third Party Advisory vendor-advisory x_refsource_suse

http://lists.opensuse.org/opensuse-security-announce/2016-06/msg00053.html

Vendor Advisory x_refsource_confirm

https://mariadb.com/kb/en/mariadb/mariadb-10110-release-notes/

Third Party Advisory vendor-advisory x_refsource_redhat

http://rhn.redhat.com/errata/RHSA-2016-0705.html

Vendor Advisory x_refsource_confirm

https://dev.mysql.com/doc/relnotes/mysql/5.6/en/news-5-6-28.html

Scores

EPSS 0.0018

EPSS Percentile 39.1%

Details

Status published

Products (20)

canonical/ubuntu_linux 12.04

canonical/ubuntu_linux 14.04

canonical/ubuntu_linux 15.04

canonical/ubuntu_linux 15.10

debian/debian_linux 8.0

mariadb/mariadb 5.5.20 - 5.5.47

opensuse/leap 42.1

opensuse/opensuse 13.2

oracle/linux 7

oracle/mysql 5.5.0 - 5.5.46

... and 10 more

Published Jan 21, 2016

Tracked Since Feb 18, 2026