CVE-2016-3477
Unspecified vulnerability in Oracle MySQL 5.5.49 and earlier, 5.6.30 and earlier, and 5.7.12 and earlier and MariaDB before 5.5.50, 10.0.x before 10.0.26, and 10.1.x before 10.1.15 allows local users to affect confidentiality, integrity, and…
Does this matter?
High impact if exploited, but EPSS currently rates exploitation as unlikely (0.47%). Schedule it in the normal patch cycle and watch for a rise in EPSS or a public exploit.
Description
Unspecified vulnerability in Oracle MySQL 5.5.49 and earlier, 5.6.30 and earlier, and 5.7.12 and earlier and MariaDB before 5.5.50, 10.0.x before 10.0.26, and 10.1.x before 10.1.15 allows local users to affect confidentiality, integrity, and availability via vectors related to Server: Parser.
- CVSS 3.0
- 8.1 HIGHCVSS:3.0/AV:L/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:H
- EPSS
- 0.47% probability · 39th percentile
- CISA KEV
- Not listed
- Affected
- ibm/powerkvm · oracle/mysql · oracle/linux · mariadb/mariadb · debian/debian linux · canonical/ubuntu linux
- Source
- secalert_us@oracle.com
References
- http://lists.opensuse.org/opensuse-updates/2016-09/msg00042.htmlMailing List, Third Party Advisory
- http://rhn.redhat.com/errata/RHSA-2016-1480.htmlThird Party Advisory
- http://rhn.redhat.com/errata/RHSA-2016-1601.htmlThird Party Advisory
- http://rhn.redhat.com/errata/RHSA-2016-1602.htmlThird Party Advisory
- http://rhn.redhat.com/errata/RHSA-2016-1603.htmlThird Party Advisory
- http://rhn.redhat.com/errata/RHSA-2016-1604.htmlThird Party Advisory
- http://rhn.redhat.com/errata/RHSA-2016-1637.htmlThird Party Advisory
- http://www-01.ibm.com/support/docview.wss?uid=isg3T1024168Third Party Advisory
- http://www.debian.org/security/2016/dsa-3624Third Party Advisory
- http://www.debian.org/security/2016/dsa-3632Third Party Advisory
- http://www.oracle.com/technetwork/security-advisory/cpujul2016-2881720.htmlPatch, Vendor Advisory
- http://www.oracle.com/technetwork/topics/security/linuxbulletinjul2016-3090544.htmlVendor Advisory
- http://www.securityfocus.com/bid/91787Third Party Advisory, VDB Entry
- http://www.securityfocus.com/bid/91902Third Party Advisory, VDB Entry
- http://www.securitytracker.com/id/1036362Third Party Advisory, VDB Entry
- http://www.ubuntu.com/usn/USN-3040-1Third Party Advisory
- https://mariadb.com/kb/en/mariadb/mariadb-10026-release-notes/Vendor Advisory
- https://mariadb.com/kb/en/mariadb/mariadb-10115-release-notes/Vendor Advisory
- https://mariadb.com/kb/en/mariadb/mariadb-5550-release-notes/Vendor Advisory
- http://lists.opensuse.org/opensuse-updates/2016-09/msg00042.htmlMailing List, Third Party Advisory
- http://rhn.redhat.com/errata/RHSA-2016-1480.htmlThird Party Advisory
- http://rhn.redhat.com/errata/RHSA-2016-1601.htmlThird Party Advisory
- http://rhn.redhat.com/errata/RHSA-2016-1602.htmlThird Party Advisory
- http://rhn.redhat.com/errata/RHSA-2016-1603.htmlThird Party Advisory
- http://rhn.redhat.com/errata/RHSA-2016-1604.htmlThird Party Advisory
- http://rhn.redhat.com/errata/RHSA-2016-1637.htmlThird Party Advisory
- http://www-01.ibm.com/support/docview.wss?uid=isg3T1024168Third Party Advisory
- http://www.debian.org/security/2016/dsa-3624Third Party Advisory
- http://www.debian.org/security/2016/dsa-3632Third Party Advisory
- http://www.oracle.com/technetwork/security-advisory/cpujul2016-2881720.htmlPatch, Vendor Advisory
Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.