CVE-2016-8283: Medium severity oracle mysql vulnerability

Q: What types of impacts can CVE-2016-8283 have on Oracle MySQL and MariaDB systems?

CVE-2016-8283 can potentially affect the availability of Oracle MySQL and MariaDB systems for remote authenticated users.

Q: Which versions of Oracle MySQL are affected by CVE-2016-8283?

The affected versions of Oracle MySQL are 5.5.51 and earlier, 5.6.32 and earlier, and 5.7.14 and earlier.

Q: What should I do to mitigate the risks associated with CVE-2016-8283?

To mitigate the risks of CVE-2016-8283, upgrade to supported versions of Oracle MySQL or MariaDB that have patched this vulnerability.

Q: Are there any specific MariaDB versions impacted by CVE-2016-8283?

Yes, MariaDB versions prior to 5.5.52, 10.0.28, and 10.1.38 are impacted by CVE-2016-8283.

Q: What steps are recommended if I am using affected versions of MySQL or MariaDB identified in CVE-2016-8283?

It is recommended to assess your current database workloads and perform an upgrade to the latest stable version to resolve CVE-2016-8283.

Published Oct 25, 2016

Updated

Unspecified vulnerability in Oracle MySQL 5.5.51 and earlier, 5.6.32 and earlier, and 5.7.14 and earlier allows remote authenticated users to affect availability via vectors related to Server: Types.

Affected Software

6 affected components

ORACLE MySQL>=5.5.0<=5.5.51

ORACLE MySQL>=5.6.0<=5.6.32

ORACLE MySQL>=5.7.0<=5.7.14

MariaDB MariaDB>=5.5.20<5.5.52

MariaDB MariaDB>=10.0.0<10.0.28

MariaDB MariaDB>=10.1.0<10.1.38

Remediation

Patch Available

http://www.oracle.com/technetwork/security-advisory/cpuoct2016-2881722.html

Event History

Oct 25, 2016

CVE Published

via MITRE·02:00 PM

Data Sourced

via MITRE·02:00 PM

Description

Frequently Asked Questions

What types of impacts can CVE-2016-8283 have on Oracle MySQL and MariaDB systems?

CVE-2016-8283 can potentially affect the availability of Oracle MySQL and MariaDB systems for remote authenticated users.

Which versions of Oracle MySQL are affected by CVE-2016-8283?