CVE-2016-0641: Medium severity suse linux vulnerability
Unspecified vulnerability in Oracle MySQL 5.5.47 and earlier, 5.6.28 and earlier, and 5.7.10 and earlier and MariaDB before 5.5.48, 10.0.x before 10.0.24, and 10.1.x before 10.1.12 allows local users to affect confidentiality and availability via vectors related to MyISAM.
Other sources
Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: MyISAM). Supported versions that are affected are 5.5.47 and earlier, 5.6.28 and earlier and 5.7.10 and earlier. Easily exploitable vulnerability allows high privileged attacker with logon to the infrastructure where MySQL Server executes to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server and unauthorized read access to a subset of MySQL Server accessible data.
External References:
http://www.oracle.com/technetwork/topics/security/cpuapr2016verbose-2881709.html
— Red Hat
Affected Software
Remediation
Event History
Frequently Asked Questions
What is the severity of CVE-2016-0641?
The severity of CVE-2016-0641 is considered moderate, affecting confidentiality and availability.
How do I fix CVE-2016-0641?
To fix CVE-2016-0641, upgrade to MySQL version 5.5.48 or later, 5.6.29 or later, or 5.7.11 or later.
What software versions are affected by CVE-2016-0641?
CVE-2016-0641 affects Oracle MySQL versions 5.5.47 and earlier, 5.6.28 and earlier, and 5.7.10 and earlier, as well as specific versions of MariaDB.
Who is at risk from CVE-2016-0641?
Local users with access to the affected MySQL and MariaDB instances may be at risk from CVE-2016-0641.
Is CVE-2016-0641 exploited in the wild?
There is no public information confirming that CVE-2016-0641 has been actively exploited in the wild.