CVE-2016-0643: Medium severity debian linux vulnerability
Unspecified vulnerability in Oracle MySQL 5.5.48 and earlier, 5.6.29 and earlier, and 5.7.11 and earlier and MariaDB before 5.5.49, 10.0.x before 10.0.25, and 10.1.x before 10.1.14 allows local users to affect confidentiality via vectors related to DML.
Other sources
Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: DML). Supported versions that are affected are 5.5.48 and earlier, 5.6.29 and earlier and 5.7.11 and earlier. Easily exploitable vulnerability allows low privileged attacker with logon to the infrastructure where MySQL Server executes to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized read access to a subset of MySQL Server accessible data.
External References:
http://www.oracle.com/technetwork/topics/security/cpuapr2016verbose-2881709.html
— Red Hat
Affected Software
Remediation
Event History
Frequently Asked Questions
What is the severity of CVE-2016-0643?
CVE-2016-0643 has been categorized as a medium-severity vulnerability due to its potential impact on data confidentiality.
How do I fix CVE-2016-0643?
To fix CVE-2016-0643, upgrade MySQL to version 5.5.49 or later, 5.6.30 or later, or 5.7.12 or later, and for MariaDB, upgrade to version 5.5.49, 10.0.25, or 10.1.14.
What versions of MySQL are affected by CVE-2016-0643?
CVE-2016-0643 affects MySQL versions 5.5.48 and earlier, 5.6.29 and earlier, and 5.7.11 and earlier.
Which MariaDB versions are vulnerable to CVE-2016-0643?
MariaDB versions before 5.5.49, 10.0.x before 10.0.25, and 10.1.x before 10.1.14 are vulnerable to CVE-2016-0643.
What are the potential risks associated with CVE-2016-0643?
CVE-2016-0643 poses risks to data confidentiality, allowing local users to manipulate data through vectors related to DML.