VulnerabilityModified

CVE-2016-0639

Unspecified vulnerability in Oracle MySQL 5.6.29 and earlier and 5.7.11 and earlier allows remote attackers to affect confidentiality, integrity, and availability via vectors related to Pluggable Authentication.

CRITICAL 9.8EPSS 10.1%

Does this matter?

EPSS puts the probability of exploitation in the next 30 days at 10.1%, higher than 95% of all known CVEs. Patch or mitigate before the next change window.

Description

CVSS 3.0: 9.8 CRITICALCVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
EPSS: 10.14% probability · 95th percentile
CISA KEV: Not listed
Affected: redhat/enterprise linux · oracle/mysql
Source: secalert_us@oracle.com

References

http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00053.htmlMailing List, Third Party Advisory
http://rhn.redhat.com/errata/RHSA-2016-0705.htmlThird Party Advisory
http://www.oracle.com/technetwork/security-advisory/cpuapr2016v3-2985753.htmlPatch, Vendor Advisory
http://www.securityfocus.com/bid/86418Third Party Advisory, VDB Entry
http://www.securitytracker.com/id/1035606Third Party Advisory, VDB Entry
http://www.ubuntu.com/usn/USN-2953-1Third Party Advisory
http://www.ubuntu.com/usn/USN-2954-1Third Party Advisory
http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00053.htmlMailing List, Third Party Advisory
http://rhn.redhat.com/errata/RHSA-2016-0705.htmlThird Party Advisory
http://www.oracle.com/technetwork/security-advisory/cpuapr2016v3-2985753.htmlPatch, Vendor Advisory
http://www.securityfocus.com/bid/86418Third Party Advisory, VDB Entry
http://www.securitytracker.com/id/1035606Third Party Advisory, VDB Entry
http://www.ubuntu.com/usn/USN-2953-1Third Party Advisory
http://www.ubuntu.com/usn/USN-2954-1Third Party Advisory

Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.