CVE-2016-0606

critical

Description

Unspecified vulnerability in Oracle MySQL 5.5.46 and earlier, 5.6.27 and earlier, and 5.7.9 and MariaDB before 5.5.47, 10.0.x before 10.0.23, and 10.1.x before 10.1.10 allows remote authenticated users to affect integrity via unknown vectors related to encryption.

References

https://mariadb.com/kb/en/mdb-10023-rn/

https://mariadb.com/kb/en/mariadb/mariadb-5547-release-notes/

https://mariadb.com/kb/en/mariadb/mariadb-10110-release-notes/

https://access.redhat.com/errata/RHSA-2016:1132

http://www.ubuntu.com/usn/USN-2881-1

http://www.securitytracker.com/id/1034708

http://www.oracle.com/technetwork/topics/security/linuxbulletinapr2016-2952096.html

http://www.oracle.com/technetwork/topics/security/cpujan2016-2367955.html

http://www.oracle.com/technetwork/topics/security/bulletinapr2016-2952098.html

http://www.debian.org/security/2016/dsa-3459

http://www.debian.org/security/2016/dsa-3453

http://rhn.redhat.com/errata/RHSA-2016-1481.html

http://rhn.redhat.com/errata/RHSA-2016-1480.html

http://rhn.redhat.com/errata/RHSA-2016-0705.html

http://rhn.redhat.com/errata/RHSA-2016-0534.html

http://lists.opensuse.org/opensuse-security-announce/2016-06/msg00053.html

http://lists.opensuse.org/opensuse-security-announce/2016-06/msg00051.html

http://lists.opensuse.org/opensuse-security-announce/2016-06/msg00034.html

http://lists.opensuse.org/opensuse-security-announce/2016-06/msg00033.html

http://lists.opensuse.org/opensuse-security-announce/2016-02/msg00016.html

http://lists.opensuse.org/opensuse-security-announce/2016-02/msg00015.html

Details

Source: Mitre, NVD

Published: 2016-01-21

Updated: 2019-12-27

Risk Information

CVSS v2

Base Score: 3.5

Vector: CVSS2#AV:N/AC:M/Au:S/C:N/I:P/A:N

Severity: Low

CVSS v3

Base Score: 9.4

Vector: CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:H

Severity: Critical