PT-2016-1777 · Oracle+3 · Mysql Server+2

Published 2016-04-19 · Updated 2018-05-03 · CVE-2016-0659

Positive Technologies (AI Summary)

CVSS v3.1

5.5

Medium

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions Oracle MySQL versions 5.7.11 and earlier

Description The issue is related to errors in the code of the MySQL database management system, specifically in the Optimizer component. It allows an attacker, potentially with network access, to impact the availability of the system by exploiting the vulnerability, which can lead to a denial of service (DOS) condition, including causing the MySQL Server to hang or crash repeatedly.

Recommendations For Oracle MySQL versions 5.7.11 and earlier, update to a version that addresses the issue in the Optimizer component to prevent potential exploitation. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Weakness Enumeration

CWE-17

Related Identifiers

ALT-PU-2018-1647

BDU:2016-01103

CVE-2016-0659

USN-2954-1

Affected Products

Alt Linux

Mysql Server

Ubuntu

References · 276

• https://bdu.fstec.ru/vul/2020-00679 · Security Note
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-3152 · Security Note
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-0409 · Security Note
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-0503 · Security Note
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-2668 · Security Note
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-3645 · Security Note
• https://bdu.fstec.ru/vul/2020-00677 · Security Note
• https://bdu.fstec.ru/vul/2015-12166 · Security Note
• https://bdu.fstec.ru/vul/2016-01105 · Security Note
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-3518 · Security Note
• https://bdu.fstec.ru/vul/2015-11924 · Security Note
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-3798 · Security Note
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5786 · Security Note
• https://bdu.fstec.ru/vul/2020-00675 · Security Note
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-1570 · Security Note