CVE-2016-3471
First published: Thu Jul 21 2016(Updated: )
Unspecified vulnerability in Oracle MySQL 5.5.45 and earlier and 5.6.26 and earlier allows local users to affect confidentiality, integrity, and availability via vectors related to Server: Option.
Credit: secalert_us@oracle.com
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Oracle MySQL | >=5.5.0<=5.5.45 | |
| Oracle MySQL | >=5.6.0<=5.6.26 | |
| Red Hat Enterprise Linux | =6.0 | |
| Red Hat Enterprise Linux | =7.0 | |
| MariaDB | >=5.5.0<5.5.46 | |
| MariaDB | >=10.0.0<10.0.22 | |
| MariaDB | >=10.1.0<10.1.9 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
- http://rhn.redhat.com/errata/RHSA-2016-0534.html
- http://rhn.redhat.com/errata/RHSA-2016-0705.html
- http://rhn.redhat.com/errata/RHSA-2016-1480.html
- http://rhn.redhat.com/errata/RHSA-2016-1481.html
- http://www.oracle.com/technetwork/security-advisory/cpujul2016-2881720.html
- http://www.securityfocus.com/bid/91787
- http://www.securityfocus.com/bid/91913
- http://www.securitytracker.com/id/1036362
- https://access.redhat.com/errata/RHSA-2016:1132
Frequently Asked Questions
What is the severity of CVE-2016-3471?
CVE-2016-3471 has a high severity level due to its potential impact on confidentiality, integrity, and availability.
How do I fix CVE-2016-3471?
To fix CVE-2016-3471, upgrade to MySQL version 5.5.46 or later, or 5.6.27 or later to mitigate the vulnerability.
Which versions of MySQL are affected by CVE-2016-3471?
CVE-2016-3471 affects Oracle MySQL versions 5.5.45 and earlier, and 5.6.26 and earlier.
What types of products are impacted by CVE-2016-3471?
CVE-2016-3471 impacts Oracle MySQL, MariaDB versions below 5.5.46, and certain versions of Red Hat Enterprise Linux.
Is CVE-2016-3471 exploitable by local users?
Yes, CVE-2016-3471 can be exploited by local users, affecting the system's confidentiality and integrity.
- agent/type
- agent/references
- agent/severity
- agent/remedy
- agent/author
- agent/description
- agent/first-publish-date
- agent/event
- collector/mitre-cve
- source/MITRE
- agent/last-modified-date
- agent/source
- agent/softwarecombine
- agent/tags
- collector/nvd-index
- agent/software-canonical-lookup-request
- vendor/oracle
- canonical/oracle mysql
- version/oracle mysql/5.5.0
- version/oracle mysql/5.5.45
- version/oracle mysql/5.6.0
- version/oracle mysql/5.6.26
- vendor/redhat
- canonical/red hat enterprise linux
- version/red hat enterprise linux/6.0
- version/red hat enterprise linux/7.0
- vendor/mariadb
- canonical/mariadb
- version/mariadb/5.5.0
- version/mariadb/10.0.0
- version/mariadb/10.1.0