PT-2016-1099 · Oracle+1 · Mysql Server

Publicado 2016-01-19 · Atualizado 2016-12-07 · CVE-2016-0601

Positive Technologies (AI Summary)

CVSS v2.0

3.5

Baixa

Vetor base

AV:N/AC:M/Au:S/C:N/I:N/A:P

Name of the Vulnerable Software and Affected Versions Oracle MySQL versions 5.7.9 and earlier

Description The issue is related to an unspecified vulnerability in the Partition component of the MySQL Server, which can be exploited by a remote authenticated user to affect availability. This can be achieved through unknown vectors, potentially allowing an attacker to cause the system to hang or crash, resulting in a denial of service. The vulnerability is easily exploitable and can be compromised by a high-privileged attacker with network access via multiple protocols.

Recommendations For Oracle MySQL versions 5.7.9 and earlier, update to a version that contains a fix for this issue to prevent potential exploitation. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Enumeração de Fraquezas

CWE-17

Identificadores relacionados

BDU:2016-00176

CVE-2016-0601

Produtos afetados

Mysql Server

Referências · 10

• https://osv.dev/vulnerability/CVE-2016-0601 · Aviso do Fabricante
• https://bdu.fstec.ru/vul/2016-00176 · Nota de Segurança
• http://securitytracker.com/id/1034708 · Nota
• https://osv.dev/vulnerability/UBUNTU-CVE-2016-0601 · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2016-0601 · Nota de Segurança
• https://oracle.com/security-alerts/cpujan2016.html · Nota
• https://ubuntu.com/security/CVE-2016-0601 · Aviso do Fabricante
• https://cve.org/CVERecord?id=CVE-2016-0601 · Nota de Segurança
• http://oracle.com/technetwork/topics/security/cpujan2016-2367955.html · Aviso do Fabricante
• http://oracle.com/technetwork/topics/security/cpujan2016-2367955.html#AppendixMSQL · Nota