PT-2016-1099 · Oracle+1 · Mysql Server

Published 2016-01-19 · Updated 2016-12-07 · CVE-2016-0601

Positive Technologies (AI Summary)

CVSS v2.0

3.5

Low

Base vector

AV:N/AC:M/Au:S/C:N/I:N/A:P

Name of the Vulnerable Software and Affected Versions Oracle MySQL versions 5.7.9 and earlier

Description The issue is related to an unspecified vulnerability in the Partition component of the MySQL Server, which can be exploited by a remote authenticated user to affect availability. This can be achieved through unknown vectors, potentially allowing an attacker to cause the system to hang or crash, resulting in a denial of service. The vulnerability is easily exploitable and can be compromised by a high-privileged attacker with network access via multiple protocols.

Recommendations For Oracle MySQL versions 5.7.9 and earlier, update to a version that contains a fix for this issue to prevent potential exploitation. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Weakness Enumeration

CWE-17

Related Identifiers

BDU:2016-00176

CVE-2016-0601

Affected Products

Mysql Server

References · 10

• https://osv.dev/vulnerability/CVE-2016-0601 · Vendor Advisory
• https://bdu.fstec.ru/vul/2016-00176 · Security Note
• https://osv.dev/vulnerability/UBUNTU-CVE-2016-0601 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2016-0601 · Security Note
• https://ubuntu.com/security/CVE-2016-0601 · Vendor Advisory
• https://cve.org/CVERecord?id=CVE-2016-0601 · Security Note
• http://oracle.com/technetwork/topics/security/cpujan2016-2367955.html · Vendor Advisory
• http://securitytracker.com/id/1034708 · Note
• https://oracle.com/security-alerts/cpujan2016.html · Note
• http://oracle.com/technetwork/topics/security/cpujan2016-2367955.html#AppendixMSQL · Note