PT-2016-7481 · Oracle+2 · Mysql Server+1

Publicado

2016-10-18

·

Atualizado

2018-05-03

·

CVE-2016-8286

CVSS v2.0

3.5

Baixa

VetorAV:N/AC:M/Au:S/C:P/I:N/A:N
Name of the Vulnerable Software and Affected Versions Oracle MySQL versions 5.7.14 and earlier
Description The issue affects the confidentiality of the system, allowing remote authenticated users to exploit it via vectors related to Server: Security: Privileges. This vulnerability can be easily exploited by a high-privileged attacker with network access via multiple protocols, potentially leading to a denial-of-service (DOS) condition where the MySQL Server hangs or crashes repeatedly.
Recommendations For Oracle MySQL versions 5.7.14 and earlier, update to a version later than 5.7.14 to resolve the issue. As a temporary workaround, consider restricting network access to the MySQL Server to minimize the risk of exploitation.

Correção

DoS

Information Disclosure

Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
dbugs@ptsecurity.com

Enumeração de Fraquezas

CWE-200

Identificadores relacionados

ALT-PU-2018-1647
CVE-2016-8286

Produtos afetados

Alt Linux
Mysql Server