Detections
Analytics
MySQL Server < 5.6.x < 5.6.31, 5.7.x < 5.7.13 Multiple Vulnerabilities
medium Log Correlation Engine Plugin ID 802028
Synopsis
The specific version of MySQL Server that the system is running is reportedly affected by multiple vulnerabilities.Description
The specific version of MySQL Server that the system is running is reportedly affected by the following vulnerabilities:- Oracle MySQL Server contains an unspecified flaw related to the FTS subcomponent. This may allow an authenticated attacker to cause a denial of service. No further details have been provided by the vendor. (CVE-2016-3486)
- Oracle MySQL Server contains an unspecified flaw related to the Optimizer subcomponent. This may allow an authenticated attacker to cause a denial of service. No further details have been provided by the vendor. (CVE-2016-3501)
- Oracle MySQL Server contains an unspecified flaw related to the Encryption subcomponent. This may allow an authenticated attacker to cause a denial of service. No further details have been provided by the vendor. (CVE-2016-3614)
- Oracle MySQL Server contains an unspecified flaw related to the InnoDB subcomponent. This may allow an authenticated attacker to cause a denial of service. No further details have been provided by the vendor. (CVE-2016-3459)
- Oracle MySQL Server contains an unspecified flaw related to the Privileges subcomponent. This may allow an authenticated attacker to cause a denial of service. No further details have been provided by the vendor. (CVE-2016-5439)
Solution
Upgrade to MySQL version 5.6.31, 5.7.13 or later.See Also
http://www.oracle.com/technetwork/security-advisory/cpujul2016-2881720.html#AppendixMSQL
Plugin Details
Severity: Medium
ID: 802028
Family: Database
Published: 10/27/2016
Vulnerability Information
Patch Publication Date: 6/2/2016
Vulnerability Publication Date: 7/19/2016
Reference Information
CVE: CVE-2016-3459, CVE-2016-3486, CVE-2016-3501, CVE-2016-3614, CVE-2016-5439