CVE-2016-5584: Medium severity mysql vulnerability
Published Oct 25, 2016
·Updated
Unspecified vulnerability in Oracle MySQL 5.5.52 and earlier, 5.6.33 and earlier, and 5.7.15 and earlier allows remote administrators to affect confidentiality via vectors related to Server: Security: Encryption.
Affected Software
7 affected components
Oracle MySQL>=5.5.0<=5.5.52
Oracle MySQL>=5.6.0<=5.6.33
Oracle MySQL>=5.7.0<=5.7.15
MariaDB MariaDB>=5.5.0<5.5.53
MariaDB MariaDB>=10.0.0<10.0.28
MariaDB MariaDB>=10.1.0<10.1.19
Debian Debian Linux=8.0
Remediation
Event History
Oct 25, 2016
CVE Published
via MITRE·02:00 PM
Data Sourced
via MITRE·02:00 PM
Description
Frequently Asked Questions
1
What is the severity of CVE-2016-5584?
CVE-2016-5584 has a medium severity rating due to its impact on data confidentiality.
2
How can I mitigate CVE-2016-5584?
You can mitigate CVE-2016-5584 by upgrading to a patched version of MySQL or MariaDB.
3
What versions are affected by CVE-2016-5584?
CVE-2016-5584 affects Oracle MySQL versions 5.5.52 and earlier, 5.6.33 and earlier, and 5.7.15 and earlier, as well as specific versions of MariaDB.
4
Is CVE-2016-5584 exploitable remotely?
Yes, CVE-2016-5584 allows remote administrators to potentially affect confidentiality.
5
What software is impacted by CVE-2016-5584?
CVE-2016-5584 impacts Oracle MySQL and certain versions of MariaDB.