CVE-2016-0640

MEDIUM

Oracle MySQL <5.5.47, 5.6.<28, 5.7.<10 - SQL Injection

Title source: llm

Description

Unspecified vulnerability in Oracle MySQL 5.5.47 and earlier, 5.6.28 and earlier, and 5.7.10 and earlier and MariaDB before 5.5.48, 10.0.x before 10.0.24, and 10.1.x before 10.1.12 allows local users to affect integrity and availability via vectors related to DML.

References (22)

Core 22

Core References

Mailing List, Third Party Advisory vendor-advisory x_refsource_suse

http://lists.opensuse.org/opensuse-security-announce/2016-06/msg00034.html

Third Party Advisory vendor-advisory x_refsource_redhat

http://rhn.redhat.com/errata/RHSA-2016-1481.html

Vendor Advisory x_refsource_confirm

https://mariadb.com/kb/en/mariadb/mariadb-5548-release-notes/

Third Party Advisory vendor-advisory x_refsource_redhat

https://access.redhat.com/errata/RHSA-2016:1132

Third Party Advisory, VDB Entry vdb-entry x_refsource_bid

http://www.securityfocus.com/bid/86427

Third Party Advisory, VDB Entry vdb-entry x_refsource_sectrack

http://www.securitytracker.com/id/1035606

Vendor Advisory x_refsource_confirm

http://www.oracle.com/technetwork/topics/security/linuxbulletinjul2016-3090544.html

Third Party Advisory vendor-advisory x_refsource_ubuntu

http://www.ubuntu.com/usn/USN-2953-1

Mailing List, Third Party Advisory vendor-advisory x_refsource_suse

http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00053.html

Vendor Advisory x_refsource_confirm

https://mariadb.com/kb/en/mariadb/mariadb-10112-release-notes/

Mailing List, Third Party Advisory vendor-advisory x_refsource_suse

http://lists.opensuse.org/opensuse-security-announce/2016-06/msg00033.html

Third Party Advisory vendor-advisory x_refsource_redhat

http://rhn.redhat.com/errata/RHSA-2016-1480.html

Mailing List, Third Party Advisory vendor-advisory x_refsource_suse

http://lists.opensuse.org/opensuse-security-announce/2016-06/msg00051.html

Vendor Advisory x_refsource_confirm

https://mariadb.com/kb/en/mariadb/mariadb-10024-release-notes/

Third Party Advisory x_refsource_confirm

http://www-01.ibm.com/support/docview.wss?uid=isg3T1024168

Third Party Advisory vendor-advisory x_refsource_debian

http://www.debian.org/security/2016/dsa-3557

Third Party Advisory vendor-advisory x_refsource_redhat

http://rhn.redhat.com/errata/RHSA-2016-1602.html

Third Party Advisory vendor-advisory x_refsource_debian

http://www.debian.org/security/2016/dsa-3595

Patch, Vendor Advisory x_refsource_confirm

http://www.oracle.com/technetwork/security-advisory/cpuapr2016v3-2985753.html

Third Party Advisory vendor-advisory x_refsource_suse

http://lists.opensuse.org/opensuse-security-announce/2016-06/msg00053.html

Third Party Advisory vendor-advisory x_refsource_redhat

http://rhn.redhat.com/errata/RHSA-2016-0705.html

Mailing List, Third Party Advisory vendor-advisory x_refsource_suse

http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00035.html

Scores

CVSS v3 6.1

EPSS 0.0022

EPSS Percentile 45.2%

Attack Vector LOCAL

CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:H

CISA SSVC

Vulnrichment

Exploitation none

Automatable no

Technical Impact partial

Details

Status published

Products (9)

debian/debian_linux 8.0

ibm/powerkvm 2.1

ibm/powerkvm 3.1

mariadb/mariadb 5.5.20 - 5.5.48

opensuse/leap 42.1

oracle/linux 7

oracle/mysql 5.5.0 - 5.5.47

redhat/enterprise_linux 6.0

redhat/enterprise_linux 7.0

Published Apr 21, 2016

Tracked Since Feb 18, 2026