CVE-2016-0600: Low severity red hat enterprise linux vulnerability
Unspecified vulnerability in Oracle MySQL 5.5.46 and earlier, 5.6.27 and earlier, and 5.7.9 and MariaDB before 5.5.47, 10.0.x before 10.0.23, and 10.1.x before 10.1.10 allows remote authenticated users to affect availability via unknown vectors related to InnoDB.
Other sources
Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: InnoDB). Supported versions that are affected are 5.5.46 and earlier, 5.6.27 and earlier and 5.7.9. Difficult to exploit vulnerability allows successful authenticated network attacks via multiple protocols. Successful attack of this vulnerability can result in unauthorized ability to cause a partial denial of service (partial DOS) of MySQL Server.
External References:
http://www.oracle.com/technetwork/topics/security/cpujan2016verbose-2367956.html
— Red Hat
Affected Software
Remediation
Patch Available
Event History
Frequently Asked Questions
What is the severity of CVE-2016-0600?
The severity of CVE-2016-0600 is currently not specified, but it can affect the availability of affected systems.
How do I fix CVE-2016-0600?
To fix CVE-2016-0600, upgrade MySQL to version 5.5.47, 5.6.28, or 5.7.10, and MariaDB to version 5.5.47, 10.0.23, or 10.1.10.
Which versions of MySQL are affected by CVE-2016-0600?
Affected versions of MySQL include 5.5.46 and earlier, 5.6.27 and earlier, and 5.7.9 and earlier.
Which versions of MariaDB are impacted by CVE-2016-0600?
CVE-2016-0600 affects MariaDB versions prior to 5.5.47, 10.0.x before 10.0.23, and 10.1.x before 10.1.10.
Can remote authenticated users exploit CVE-2016-0600?
Yes, CVE-2016-0600 allows remote authenticated users to affect the availability of the system.