PT-2016-1775 · Oracle+3 · Mysql Server+2

Published 2016-04-19 · Updated 2018-05-03 · CVE-2016-0662

Positive Technologies (AI Summary)

CVSS v3.1

5.5

Medium

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions Oracle MySQL versions 5.7.11 and earlier

Description The issue is related to errors in the code of the MySQL database management system, specifically in the Partition component. It allows an attacker with network access to compromise the MySQL Server, potentially leading to a denial of service (DOS) by causing the server to hang or crash repeatedly. The vulnerability can be exploited by a high-privileged attacker via multiple protocols.

Recommendations For Oracle MySQL versions 5.7.11 and earlier, update to a version that contains a fix for this issue to prevent potential denial of service attacks. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Weakness Enumeration

CWE-17

Related Identifiers

ALT-PU-2018-1647

BDU:2016-01101

CVE-2016-0662

USN-2954-1

Affected Products

Alt Linux

Mysql Server

Ubuntu

References · 276

• https://bdu.fstec.ru/vul/2020-00679 · Security Note
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-3152 · Security Note
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-0409 · Security Note
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-0503 · Security Note
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-2668 · Security Note
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-3645 · Security Note
• https://bdu.fstec.ru/vul/2020-00677 · Security Note
• https://bdu.fstec.ru/vul/2015-12166 · Security Note
• https://bdu.fstec.ru/vul/2016-01105 · Security Note
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-3518 · Security Note
• https://bdu.fstec.ru/vul/2015-11924 · Security Note
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-3798 · Security Note
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5786 · Security Note
• https://bdu.fstec.ru/vul/2020-00675 · Security Note
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-1570 · Security Note