CVE-2016-0598: Low severity suse linux vulnerability
Unspecified vulnerability in Oracle MySQL 5.5.46 and earlier, 5.6.27 and earlier, and 5.7.9 and MariaDB before 5.5.47, 10.0.x before 10.0.23, and 10.1.x before 10.1.10 allows remote authenticated users to affect availability via vectors related to DML.
Other sources
Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: DML). Supported versions that are affected are 5.5.46 and earlier, 5.6.27 and earlier and 5.7.9. Difficult to exploit vulnerability allows successful authenticated network attacks via multiple protocols. Successful attack of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server.
External References:
http://www.oracle.com/technetwork/topics/security/cpujan2016verbose-2367956.html
— Red Hat
Affected Software
Remediation
Patch Available
Event History
Frequently Asked Questions
What is the severity of CVE-2016-0598?
CVE-2016-0598 has a medium severity level which can impact the availability of MySQL and MariaDB installations.
How do I fix CVE-2016-0598?
To fix CVE-2016-0598, update MySQL to version 5.5.47 or later, 5.6.28, or 5.7.10, and for MariaDB, update to versions 5.5.47, 10.0.23, or 10.1.10.
Which versions of MySQL are affected by CVE-2016-0598?
MySQL versions 5.5.46 and earlier, 5.6.27 and earlier, and 5.7.9 and earlier are affected by CVE-2016-0598.
Which versions of MariaDB are affected by CVE-2016-0598?
MariaDB versions 5.5.46 and earlier, 10.0.x before 10.0.23, and 10.1.x before 10.1.10 are affected by CVE-2016-0598.
Who is impacted by CVE-2016-0598?
Remote authenticated users of Oracle MySQL and MariaDB installations could impact system availability due to CVE-2016-0598.