PT-2016-1098 · Oracle+1 · Mysql Server

Publicado 2016-01-19 · Atualizado 2016-12-07 · CVE-2016-0599

Positive Technologies (AI Summary)

CVSS v2.0

3.5

Baixa

Vetor base

AV:N/AC:M/Au:S/C:N/I:N/A:P

Name of the Vulnerable Software and Affected Versions Oracle MySQL versions 5.7.9 and earlier

Description The issue is related to errors in the code of the Optimizer component in the MySQL database management system. It can be exploited by a remote attacker to cause the system to hang or crash, resulting in a denial of service. The vulnerability can be exploited via multiple protocols by an attacker with high privileges and network access.

Recommendations For Oracle MySQL versions 5.7.9 and earlier, update to a version that contains a fix for this issue. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Enumeração de Fraquezas

CWE-17

Identificadores relacionados

BDU:2016-00174

CVE-2016-0599

Produtos afetados

Mysql Server

Referências · 10

• http://securitytracker.com/id/1034708 · Nota
• https://bdu.fstec.ru/vul/2016-00174 · Nota de Segurança
• https://osv.dev/vulnerability/CVE-2016-0599 · Aviso do Fabricante
• https://cve.org/CVERecord?id=CVE-2016-0599 · Nota de Segurança
• https://oracle.com/security-alerts/cpujan2016.html · Nota
• https://osv.dev/vulnerability/UBUNTU-CVE-2016-0599 · Aviso do Fabricante
• https://ubuntu.com/security/CVE-2016-0599 · Aviso do Fabricante
• http://oracle.com/technetwork/topics/security/cpujan2016-2367955.html · Aviso do Fabricante
• http://oracle.com/technetwork/topics/security/cpujan2016-2367955.html#AppendixMSQL · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2016-0599 · Nota de Segurança