VulnerabilityModified

CVE-2016-3459

Unspecified vulnerability in Oracle MySQL 5.6.30 and earlier and 5.7.12 and earlier and MariaDB 10.0.x before 10.0.25 and 10.1.x before 10.1.14 allows remote administrators to affect availability via vectors related to Server: InnoDB.

MEDIUM 4.9EPSS 3.25%

Does this matter?

Lower severity and a low EPSS score (3.25%). Track it; it rarely justifies an emergency change on its own.

Description

CVSS 3.0: 4.9 MEDIUMCVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H
EPSS: 3.25% probability · 88th percentile
CISA KEV: Not listed
Affected: mariadb/mariadb · oracle/mysql
Source: secalert_us@oracle.com

References

http://rhn.redhat.com/errata/RHSA-2016-1601.htmlThird Party Advisory
http://www.oracle.com/technetwork/security-advisory/cpujul2016-2881720.htmlPatch, Vendor Advisory
http://www.securityfocus.com/bid/91787Third Party Advisory, VDB Entry
http://www.securityfocus.com/bid/91943Third Party Advisory, VDB Entry
http://www.securitytracker.com/id/1036362Third Party Advisory, VDB Entry
http://www.ubuntu.com/usn/USN-3040-1Third Party Advisory
https://access.redhat.com/errata/RHSA-2016:1132Third Party Advisory
https://mariadb.com/kb/en/mariadb/mariadb-10025-release-notes/Vendor Advisory
https://mariadb.com/kb/en/mariadb/mariadb-10114-release-notes/Vendor Advisory
http://rhn.redhat.com/errata/RHSA-2016-1601.htmlThird Party Advisory
http://www.oracle.com/technetwork/security-advisory/cpujul2016-2881720.htmlPatch, Vendor Advisory
http://www.securityfocus.com/bid/91787Third Party Advisory, VDB Entry
http://www.securityfocus.com/bid/91943Third Party Advisory, VDB Entry
http://www.securitytracker.com/id/1036362Third Party Advisory, VDB Entry
http://www.ubuntu.com/usn/USN-3040-1Third Party Advisory
https://access.redhat.com/errata/RHSA-2016:1132Third Party Advisory
https://mariadb.com/kb/en/mariadb/mariadb-10025-release-notes/Vendor Advisory
https://mariadb.com/kb/en/mariadb/mariadb-10114-release-notes/Vendor Advisory

Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.