PT-2016-6597 · Oracle+6 · Mysql Server+5

Publicado

2016-09-13

·

Atualizado

2024-06-15

·

CVE-2016-5624

CVSS v3.1

6.5

Média

VetorAV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
Name of the Vulnerable Software and Affected Versions Oracle MySQL versions 5.5.51 and earlier
Description The issue allows remote authenticated users to affect availability via vectors related to DML, potentially resulting in unauthorized ability to cause a hang or frequently repeatable crash of MySQL Server. This can be exploited by a high-privileged attacker with network access via multiple protocols.
Recommendations For Oracle MySQL versions 5.5.51 and earlier, update to a version later than 5.5.51 to resolve the issue. As a temporary workaround, consider restricting access to the DML component to minimize the risk of exploitation.

Exploit

Correção

Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
dbugs@ptsecurity.com

Identificadores relacionados

ALT-PU-2016-2177
ALT-PU-2016-2238
CESA-2016_2595
CVE-2016-5624
DSA-3711-1
MGASA-2016-0371
OPENSUSE-SU-2016_3025-1
OPENSUSE-SU-2016_3028-1
OPENSUSE-SU-2024:11038-1
RHSA-2016:2130
RHSA-2016:2131
RHSA-2016:2595
RHSA-2016:2927
RHSA-2016:2928
RHSA-2016_2595
SUSE-RU-2023:3956-1
SUSE-RU-2023:4991-1
SUSE-SU-2016:2932-1
SUSE-SU-2016:2933-1

Produtos afetados

Alt Linux
Centos
Mariadb Server
Mysql Server
Red Hat
Suse