VulnerabilityModified

CVE-2016-0598

Unspecified vulnerability in Oracle MySQL 5.5.46 and earlier, 5.6.27 and earlier, and 5.7.9 and MariaDB before 5.5.47, 10.0.x before 10.0.23, and 10.1.x before 10.1.10 allows remote authenticated users to affect availability via vectors related to DML.

LOW 3.5EPSS 3.40%

Does this matter?

Lower severity and a low EPSS score (3.40%). Track it; it rarely justifies an emergency change on its own.

Description

CVSS 2.0: 3.5 LOWAV:N/AC:M/Au:S/C:N/I:N/A:P
EPSS: 3.40% probability · 88th percentile
CISA KEV: Not listed
Affected: opensuse/leap · opensuse/opensuse · oracle/linux · redhat/enterprise linux · redhat/enterprise linux desktop · redhat/enterprise linux hpc node · redhat/enterprise linux hpc node eus · redhat/enterprise linux server · redhat/enterprise linux server aus · redhat/enterprise linux server eus · redhat/enterprise linux workstation · debian/debian linux · oracle/solaris · canonical/ubuntu linux · mariadb/mariadb · oracle/mysql
Source: secalert_us@oracle.com

References

http://lists.opensuse.org/opensuse-security-announce/2016-02/msg00015.htmlThird Party Advisory
http://lists.opensuse.org/opensuse-security-announce/2016-02/msg00016.htmlMailing List, Third Party Advisory
http://lists.opensuse.org/opensuse-security-announce/2016-06/msg00033.htmlMailing List, Third Party Advisory
http://lists.opensuse.org/opensuse-security-announce/2016-06/msg00034.htmlMailing List, Third Party Advisory
http://lists.opensuse.org/opensuse-security-announce/2016-06/msg00051.htmlMailing List, Third Party Advisory
http://lists.opensuse.org/opensuse-security-announce/2016-06/msg00053.htmlThird Party Advisory
http://rhn.redhat.com/errata/RHSA-2016-0534.htmlThird Party Advisory
http://rhn.redhat.com/errata/RHSA-2016-0705.htmlThird Party Advisory
http://rhn.redhat.com/errata/RHSA-2016-1480.htmlThird Party Advisory
http://rhn.redhat.com/errata/RHSA-2016-1481.htmlThird Party Advisory
http://www.debian.org/security/2016/dsa-3453Patch, Third Party Advisory
http://www.debian.org/security/2016/dsa-3459Third Party Advisory
http://www.oracle.com/technetwork/topics/security/bulletinapr2016-2952098.htmlVendor Advisory
http://www.oracle.com/technetwork/topics/security/cpujan2016-2367955.htmlVendor Advisory
http://www.oracle.com/technetwork/topics/security/linuxbulletinapr2016-2952096.htmlVendor Advisory
http://www.securityfocus.com/bid/81182Third Party Advisory, VDB Entry
http://www.securitytracker.com/id/1034708Third Party Advisory, VDB Entry
http://www.ubuntu.com/usn/USN-2881-1Third Party Advisory
https://access.redhat.com/errata/RHSA-2016:1132Third Party Advisory
https://mariadb.com/kb/en/mariadb/mariadb-10110-release-notes/Vendor Advisory
https://mariadb.com/kb/en/mariadb/mariadb-5547-release-notes/Vendor Advisory
https://mariadb.com/kb/en/mdb-10023-rn/Vendor Advisory
http://lists.opensuse.org/opensuse-security-announce/2016-02/msg00015.htmlThird Party Advisory
http://lists.opensuse.org/opensuse-security-announce/2016-02/msg00016.htmlMailing List, Third Party Advisory
http://lists.opensuse.org/opensuse-security-announce/2016-06/msg00033.htmlMailing List, Third Party Advisory
http://lists.opensuse.org/opensuse-security-announce/2016-06/msg00034.htmlMailing List, Third Party Advisory
http://lists.opensuse.org/opensuse-security-announce/2016-06/msg00051.htmlMailing List, Third Party Advisory
http://lists.opensuse.org/opensuse-security-announce/2016-06/msg00053.htmlThird Party Advisory
http://rhn.redhat.com/errata/RHSA-2016-0534.htmlThird Party Advisory
http://rhn.redhat.com/errata/RHSA-2016-0705.htmlThird Party Advisory

Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.