CVE-2016-0596: Medium severity red hat enterprise linux desktop vulnerability
Unspecified vulnerability in Oracle MySQL 5.5.46 and earlier and 5.6.27 and earlier and MariaDB before 5.5.47, 10.0.x before 10.0.23, and 10.1.x before 10.1.10 allows remote authenticated users to affect availability via vectors related to DML.
Other sources
Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: DML). Supported versions that are affected are 5.5.46 and earlier and 5.6.27 and earlier. Easily exploitable vulnerability allows successful authenticated network attacks via multiple protocols. Successful attack of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server.
External References:
http://www.oracle.com/technetwork/topics/security/cpujan2016verbose-2367956.html
— Red Hat
Affected Software
Remediation
Patch Available
Event History
Frequently Asked Questions
What is the severity of CVE-2016-0596?
The severity of CVE-2016-0596 is currently not specified, but it affects the availability of databases.
How do I fix CVE-2016-0596?
To fix CVE-2016-0596, update MySQL to version 5.5.47 or 5.6.28, or MariaDB to version 5.5.47, 10.0.23, or 10.1.10.
Which database versions are affected by CVE-2016-0596?
CVE-2016-0596 affects Oracle MySQL versions 5.5.46 and earlier, 5.6.27 and earlier, and various MariaDB versions before the specified fixed releases.
Can remote users exploit CVE-2016-0596?
Yes, remote authenticated users can exploit CVE-2016-0596 to affect the availability of the database.
What are the impacts of CVE-2016-0596?
The impact of CVE-2016-0596 is primarily related to the availability of affected MySQL and MariaDB databases.