CVE-2016-0606

critical

Description

Unspecified vulnerability in Oracle MySQL 5.5.46 and earlier, 5.6.27 and earlier, and 5.7.9 and MariaDB before 5.5.47, 10.0.x before 10.0.23, and 10.1.x before 10.1.10 allows remote authenticated users to affect integrity via unknown vectors related to encryption.

References

Advisories
More

https://access.redhat.com/errata/RHSA-2016:1132

http://www.ubuntu.com/usn/USN-2881-1

http://www.securitytracker.com/id/1034708

http://www.debian.org/security/2016/dsa-3459

http://www.debian.org/security/2016/dsa-3453

http://rhn.redhat.com/errata/RHSA-2016-1481.html

http://rhn.redhat.com/errata/RHSA-2016-1480.html

http://rhn.redhat.com/errata/RHSA-2016-0705.html

http://rhn.redhat.com/errata/RHSA-2016-0534.html

http://lists.opensuse.org/opensuse-security-announce/2016-06/msg00053.html

http://lists.opensuse.org/opensuse-security-announce/2016-06/msg00051.html

http://lists.opensuse.org/opensuse-security-announce/2016-06/msg00034.html

http://lists.opensuse.org/opensuse-security-announce/2016-06/msg00033.html

http://lists.opensuse.org/opensuse-security-announce/2016-02/msg00016.html

http://lists.opensuse.org/opensuse-security-announce/2016-02/msg00015.html

https://mariadb.com/kb/en/mdb-10023-rn/

https://mariadb.com/kb/en/mariadb/mariadb-5547-release-notes/

https://mariadb.com/kb/en/mariadb/mariadb-10110-release-notes/

http://www.oracle.com/technetwork/topics/security/linuxbulletinapr2016-2952096.html

http://www.oracle.com/technetwork/topics/security/cpujan2016-2367955.html

http://www.oracle.com/technetwork/topics/security/bulletinapr2016-2952098.html

Details

Source: Mitre, NVD

Published: 2016-01-21

Updated: 2025-04-12

Risk Information

CVSS v2

Base Score: 3.5

Vector: CVSS2#AV:N/AC:M/Au:S/C:N/I:P/A:N

Severity: Low

CVSS v3

Base Score: 9.4

Vector: CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:H

Severity: Critical

EPSS

EPSS: 0.00226