CVE-2016-0608: Low severity oracle linux vulnerability
Unspecified vulnerability in Oracle MySQL 5.5.46 and earlier, 5.6.27 and earlier, and 5.7.9 and MariaDB before 5.5.47, 10.0.x before 10.0.23, and 10.1.x before 10.1.10 allows remote authenticated users to affect availability via vectors related to UDF.
Other sources
Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: UDF). Supported versions that are affected are 5.5.46 and earlier, 5.6.27 and earlier and 5.7.9. Difficult to exploit vulnerability allows successful authenticated network attacks via multiple protocols. Successful attack of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server.
External References:
http://www.oracle.com/technetwork/topics/security/cpujan2016verbose-2367956.html
— Red Hat
Affected Software
Remediation
Patch Available
Event History
Frequently Asked Questions
What is the severity of CVE-2016-0608?
CVE-2016-0608 is classified as a medium severity vulnerability affecting several versions of Oracle MySQL and MariaDB.
How do I fix CVE-2016-0608?
To fix CVE-2016-0608, upgrade MySQL to version 5.5.47, 5.6.28, or 5.7.10, or upgrade MariaDB to version 5.5.47, 10.0.23, or 10.1.10.
Which versions are affected by CVE-2016-0608?
CVE-2016-0608 affects Oracle MySQL 5.5.46 and earlier, 5.6.27 and earlier, 5.7.9 and earlier, as well as specific versions of MariaDB.
Can remote authenticated users exploit CVE-2016-0608?
Yes, remote authenticated users can exploit CVE-2016-0608 through vectors related to User Defined Functions (UDF).
Is there a known fix for MariaDB regarding CVE-2016-0608?
Yes, upgrading to MariaDB versions 5.5.47, 10.0.23, or 10.1.10 will resolve the issues related to CVE-2016-0608.