CVE-2016-0643

low

Description

Unspecified vulnerability in Oracle MySQL 5.5.48 and earlier, 5.6.29 and earlier, and 5.7.11 and earlier and MariaDB before 5.5.49, 10.0.x before 10.0.25, and 10.1.x before 10.1.14 allows local users to affect confidentiality via vectors related to DML.

References

Advisories
More

https://access.redhat.com/errata/RHSA-2016:1132

http://www.ubuntu.com/usn/USN-2954-1

http://www.ubuntu.com/usn/USN-2953-1

http://www.securitytracker.com/id/1035606

http://www.securityfocus.com/bid/86486

http://www.debian.org/security/2016/dsa-3595

http://www.debian.org/security/2016/dsa-3557

http://www-01.ibm.com/support/docview.wss?uid=isg3T1024168

http://rhn.redhat.com/errata/RHSA-2016-1602.html

http://rhn.redhat.com/errata/RHSA-2016-1481.html

http://rhn.redhat.com/errata/RHSA-2016-1480.html

http://rhn.redhat.com/errata/RHSA-2016-0705.html

http://lists.opensuse.org/opensuse-security-announce/2016-06/msg00053.html

http://lists.opensuse.org/opensuse-security-announce/2016-06/msg00051.html

http://lists.opensuse.org/opensuse-security-announce/2016-06/msg00034.html

http://lists.opensuse.org/opensuse-security-announce/2016-06/msg00033.html

http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00053.html

http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00035.html

https://mariadb.com/kb/en/mariadb/mariadb-5549-release-notes/

https://mariadb.com/kb/en/mariadb/mariadb-10114-release-notes/

https://mariadb.com/kb/en/mariadb/mariadb-10025-release-notes/

http://www.oracle.com/technetwork/security-advisory/cpuapr2016v3-2985753.html

Details

Source: Mitre, NVD

Published: 2016-04-21

Updated: 2025-04-12

Risk Information

CVSS v2

Base Score: 4

Vector: CVSS2#AV:N/AC:L/Au:S/C:P/I:N/A:N

Severity: Medium

CVSS v3

Base Score: 3.3

Vector: CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N

Severity: Low

EPSS

EPSS: 0.00474