First published: Thu Jan 21 2016(Updated: )
Unspecified vulnerability in Oracle MySQL 5.5.46 and earlier, 5.6.27 and earlier, and 5.7.9 and MariaDB before 5.5.47, 10.0.x before 10.0.23, and 10.1.x before 10.1.10 allows remote authenticated users to affect availability via vectors related to DML.
Credit: secalert_us@oracle.com
Affected Software | Affected Version | How to fix |
---|---|---|
redhat/mysql | <5.5.47 | 5.5.47 |
redhat/mysql | <5.6.28 | 5.6.28 |
redhat/mysql | <5.7.10 | 5.7.10 |
redhat/mariadb | <5.5.47 | 5.5.47 |
redhat/mariadb | <10.1.10 | 10.1.10 |
redhat/mariadb | <10.0.23 | 10.0.23 |
openSUSE | =42.1 | |
openSUSE | =13.2 | |
Oracle Linux | =7 | |
Red Hat Enterprise Linux | =6.0 | |
Red Hat Enterprise Linux | =7.0 | |
redhat enterprise Linux desktop | =7.0 | |
Red Hat Enterprise Linux HPC Node | =7.0 | |
Red Hat Enterprise Linux HPC Node | =7.2 | |
redhat enterprise Linux server | =7.0 | |
redhat enterprise Linux server aus | =7.2 | |
redhat enterprise Linux server eus | =7.2 | |
redhat enterprise Linux workstation | =7.0 | |
Debian | =8.0 | |
Oracle Solaris SPARC | =11.3 | |
Ubuntu | =12.04 | |
Ubuntu | =14.04 | |
Ubuntu | =15.04 | |
Ubuntu | =15.10 | |
Ariadne CMS | >=5.5.20<5.5.47 | |
Ariadne CMS | >=10.0.0<10.0.23 | |
Ariadne CMS | >=10.1.0<10.1.10 | |
MySQL | >=5.5.0<=5.5.46 | |
MySQL | >=5.6.0<=5.6.27 | |
MySQL | >=5.7.0<=5.7.9 |
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
CVE-2016-0598 has a medium severity level which can impact the availability of MySQL and MariaDB installations.
To fix CVE-2016-0598, update MySQL to version 5.5.47 or later, 5.6.28, or 5.7.10, and for MariaDB, update to versions 5.5.47, 10.0.23, or 10.1.10.
MySQL versions 5.5.46 and earlier, 5.6.27 and earlier, and 5.7.9 and earlier are affected by CVE-2016-0598.
MariaDB versions 5.5.46 and earlier, 10.0.x before 10.0.23, and 10.1.x before 10.1.10 are affected by CVE-2016-0598.
Remote authenticated users of Oracle MySQL and MariaDB installations could impact system availability due to CVE-2016-0598.