First published: Thu Jan 21 2016(Updated: )
Unspecified vulnerability in Oracle MySQL 5.5.46 and earlier and 5.6.27 and earlier and MariaDB before 5.5.47, 10.0.x before 10.0.23, and 10.1.x before 10.1.10 allows remote authenticated users to affect availability via vectors related to DML.
Credit: secalert_us@oracle.com
Affected Software | Affected Version | How to fix |
---|---|---|
redhat/mysql | <5.5.47 | 5.5.47 |
redhat/mysql | <5.6.28 | 5.6.28 |
redhat/mariadb | <5.5.47 | 5.5.47 |
redhat/mariadb | <10.1.10 | 10.1.10 |
redhat/mariadb | <10.0.23 | 10.0.23 |
Red Hat Enterprise Linux Desktop | =7.0 | |
Red Hat Enterprise Linux HPC Node | =7.0 | |
Red Hat Enterprise Linux HPC Node | =7.2 | |
Red Hat Enterprise Linux Server | =7.0 | |
Red Hat Enterprise Linux Server | =7.2 | |
Red Hat Enterprise Linux Server | =7.2 | |
Red Hat Enterprise Linux Workstation | =7.0 | |
Oracle Solaris and Zettabyte File System (ZFS) | =11.3 | |
Debian | =8.0 | |
Red Hat Enterprise Linux | =6.0 | |
Red Hat Enterprise Linux | =7.0 | |
SUSE Linux | =42.1 | |
SUSE Linux | =13.2 | |
Oracle Linux | =7 | |
Ubuntu | =12.04 | |
Ubuntu | =14.04 | |
Ubuntu | =15.04 | |
Ubuntu | =15.10 | |
MariaDB | >=5.5.20<5.5.47 | |
MariaDB | >=10.0.0<10.0.23 | |
MariaDB | >=10.1.0<10.1.10 | |
Oracle MySQL | >=5.5.0<=5.5.46 | |
Oracle MySQL | >=5.6.0<=5.6.27 |
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
The severity of CVE-2016-0596 is currently not specified, but it affects the availability of databases.
To fix CVE-2016-0596, update MySQL to version 5.5.47 or 5.6.28, or MariaDB to version 5.5.47, 10.0.23, or 10.1.10.
CVE-2016-0596 affects Oracle MySQL versions 5.5.46 and earlier, 5.6.27 and earlier, and various MariaDB versions before the specified fixed releases.
Yes, remote authenticated users can exploit CVE-2016-0596 to affect the availability of the database.
The impact of CVE-2016-0596 is primarily related to the availability of affected MySQL and MariaDB databases.