CVE-2016-0610: Low severity mysql vulnerability
Unspecified vulnerability in Oracle MySQL 5.6.27 and earlier and MariaDB before 10.0.22 and 10.1.x before 10.1.9 allows remote authenticated users to affect availability via unknown vectors related to InnoDB.
Other sources
Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: InnoDB). Supported versions that are affected are 5.6.27 and earlier. Difficult to exploit vulnerability allows successful authenticated network attacks via multiple protocols. Successful attack of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server.
External References:
http://www.oracle.com/technetwork/topics/security/cpujan2016verbose-2367956.html
— Red Hat
Affected Software
Remediation
Event History
Frequently Asked Questions
What is the severity of CVE-2016-0610?
CVE-2016-0610 is rated with a medium severity; however, the specific impact is not clearly defined.
How do I fix CVE-2016-0610?
To resolve CVE-2016-0610, upgrade to MySQL version 5.6.28 or MariaDB versions 10.0.22 and 10.1.9 or later.
Which software is affected by CVE-2016-0610?
CVE-2016-0610 affects Oracle MySQL versions 5.6.27 and earlier, and MariaDB versions prior to 10.0.22 and 10.1.x prior to 10.1.9.
What components of MySQL are involved in CVE-2016-0610?
The vulnerability is related specifically to the InnoDB component within the MySQL Server.
Can CVE-2016-0610 be exploited remotely?
Yes, CVE-2016-0610 allows remote authenticated users to potentially affect system availability.