PT-2016-1782 · Oracle+2 · Mysql Server+1

Publicado 2016-04-19 · Atualizado 2018-05-03 · CVE-2016-0654

Positive Technologies (AI Summary)

CVSS v3.1

5.5

Média

Vetor base

AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions Oracle MySQL versions 5.7.10 and earlier

Description The issue is related to errors in the code of the MySQL database management system. It can be exploited by a remote attacker to affect availability by impacting the InnoDB server, potentially leading to a denial of service (DOS) where the MySQL Server can be made to hang or crash repeatedly. This can result in unauthorized ability to cause a complete DOS of the MySQL Server.

Recommendations For Oracle MySQL versions 5.7.10 and earlier, at the moment, there is no information about a newer version that contains a fix for this vulnerability.

Enumeração de Fraquezas

CWE-17

Identificadores relacionados

ALT-PU-2018-1647

BDU:2016-01108

CVE-2016-0654

Produtos afetados

Alt Linux

Mysql Server

Referências · 247

• https://github.com/duo-labs/mysslstrip · Nota
• https://bdu.fstec.ru/vul/2020-00679 · Nota de Segurança
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-3152 · Nota de Segurança
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-0409 · Nota de Segurança
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-0503 · Nota de Segurança
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-2668 · Nota de Segurança
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-3645 · Nota de Segurança
• https://bdu.fstec.ru/vul/2020-00677 · Nota de Segurança
• https://bdu.fstec.ru/vul/2015-12166 · Nota de Segurança
• https://bdu.fstec.ru/vul/2016-01105 · Nota de Segurança
• https://osv.dev/vulnerability/UBUNTU-CVE-2016-0654 · Aviso do Fabricante
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-3518 · Nota de Segurança
• https://bdu.fstec.ru/vul/2015-11924 · Nota de Segurança
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-3798 · Nota de Segurança
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5786 · Nota de Segurança