CVE-2016-0616
Summary
| CVE | CVE-2016-0616 |
|---|---|
| State | PUBLISHED |
| Assigner | oracle |
| Source Priority | CVE Program / NVD first with legacy fallback |
| Published | 2016-01-21 03:02:39 UTC |
| Updated | 2026-05-06 22:30:45 UTC |
| Description | Unspecified vulnerability in Oracle MySQL 5.5.46 and earlier and MariaDB before 5.5.47, 10.0.x before 10.0.23, and 10.1.x before 10.1.10 allows remote authenticated users to affect availability via unknown vectors related to Optimizer. |
Risk And Classification
Primary CVSS: v2.0 4 from [email protected]
AV:N/AC:L/Au:S/C:N/I:N/A:P
Problem Types: NVD-CWE-noinfo | n/a
CVSS v2.0 Breakdown
Access Vector
NetworkAccess Complexity
LowAuthentication
SingleConfidentiality
NoneIntegrity
NoneAvailability
PartialAV:N/AC:L/Au:S/C:N/I:N/A:P
NVD Known Affected Configurations (CPE 2.3)
| Type | Vendor | Product | Version | Update | Edition | Language |
|---|---|---|---|---|---|---|
| Operating System | Canonical | Ubuntu Linux | 12.04 | All | All | All |
| Operating System | Canonical | Ubuntu Linux | 14.04 | All | All | All |
| Operating System | Canonical | Ubuntu Linux | 15.04 | All | All | All |
| Operating System | Canonical | Ubuntu Linux | 15.10 | All | All | All |
| Operating System | Debian | Debian Linux | 8.0 | All | All | All |
| Application | Mariadb | Mariadb | 10.0.0 | All | All | All |
| Application | Mariadb | Mariadb | 10.0.1 | All | All | All |
| Application | Mariadb | Mariadb | 10.0.10 | All | All | All |
| Application | Mariadb | Mariadb | 10.0.11 | All | All | All |
| Application | Mariadb | Mariadb | 10.0.12 | All | All | All |
| Application | Mariadb | Mariadb | 10.0.13 | All | All | All |
| Application | Mariadb | Mariadb | 10.0.14 | All | All | All |
| Application | Mariadb | Mariadb | 10.0.15 | All | All | All |
| Application | Mariadb | Mariadb | 10.0.16 | All | All | All |
| Application | Mariadb | Mariadb | 10.0.17 | All | All | All |
| Application | Mariadb | Mariadb | 10.0.18 | All | All | All |
| Application | Mariadb | Mariadb | 10.0.19 | All | All | All |
| Application | Mariadb | Mariadb | 10.0.2 | All | All | All |
| Application | Mariadb | Mariadb | 10.0.20 | All | All | All |
| Application | Mariadb | Mariadb | 10.0.21 | All | All | All |
| Application | Mariadb | Mariadb | 10.0.22 | All | All | All |
| Application | Mariadb | Mariadb | 10.0.3 | All | All | All |
| Application | Mariadb | Mariadb | 10.0.4 | All | All | All |
| Application | Mariadb | Mariadb | 10.0.5 | All | All | All |
| Application | Mariadb | Mariadb | 10.0.6 | All | All | All |
| Application | Mariadb | Mariadb | 10.0.7 | All | All | All |
| Application | Mariadb | Mariadb | 10.0.8 | All | All | All |
| Application | Mariadb | Mariadb | 10.0.9 | All | All | All |
| Application | Mariadb | Mariadb | 10.1.0 | All | All | All |
| Application | Mariadb | Mariadb | 10.1.1 | All | All | All |
| Application | Mariadb | Mariadb | 10.1.2 | All | All | All |
| Application | Mariadb | Mariadb | 10.1.3 | All | All | All |
| Application | Mariadb | Mariadb | 10.1.4 | All | All | All |
| Application | Mariadb | Mariadb | 10.1.5 | All | All | All |
| Application | Mariadb | Mariadb | 10.1.6 | All | All | All |
| Application | Mariadb | Mariadb | 10.1.7 | All | All | All |
| Application | Mariadb | Mariadb | 10.1.8 | All | All | All |
| Application | Mariadb | Mariadb | 10.1.9 | All | All | All |
| Application | Mariadb | Mariadb | All | All | All | All |
| Operating System | Opensuse | Leap | 42.1 | All | All | All |
| Operating System | Oracle | Linux | 7 | All | All | All |
| Application | Oracle | Mysql | All | All | All | All |
| Operating System | Oracle | Solaris | 11.3 | All | All | All |
| Operating System | Redhat | Enterprise Linux Desktop | 7.0 | All | All | All |
| Operating System | Redhat | Enterprise Linux Hpc Node | 7.0 | All | All | All |
| Operating System | Redhat | Enterprise Linux Hpc Node Eus | 7.2 | All | All | All |
| Operating System | Redhat | Enterprise Linux Server | 7.0 | All | All | All |
| Operating System | Redhat | Enterprise Linux Server Aus | 7.2 | All | All | All |
| Operating System | Redhat | Enterprise Linux Server Eus | 7.2 | All | All | All |
| Operating System | Redhat | Enterprise Linux Workstation | 7.0 | All | All | All |
Vendor Declared Affected Products
References
| Reference | Source | Link | Tags |
|---|---|---|---|
| Red Hat Customer Portal | af854a3a-2127-422b-91ae-364da2661108 | rhn.redhat.com | |
| Debian -- Security Information -- DSA-3453-1 mariadb-10.0 | af854a3a-2127-422b-91ae-364da2661108 | www.debian.org | Patch, Third Party Advisory |
| Red Hat Customer Portal | af854a3a-2127-422b-91ae-364da2661108 | rhn.redhat.com | Third Party Advisory |
| MariaDB 10.0.23 Release Notes - MariaDB Knowledge Base | af854a3a-2127-422b-91ae-364da2661108 | mariadb.com | Vendor Advisory |
| [security-announce] SUSE-SU-2016:1619-1: important: Security update for | af854a3a-2127-422b-91ae-364da2661108 | lists.opensuse.org | |
| USN-2881-1: MySQL vulnerabilities | Ubuntu | af854a3a-2127-422b-91ae-364da2661108 | www.ubuntu.com | Third Party Advisory |
| Oracle Critical Patch Update - January 2016 | af854a3a-2127-422b-91ae-364da2661108 | www.oracle.com | Vendor Advisory |
| MariaDB 10.1.10 Release Notes - MariaDB Knowledge Base | af854a3a-2127-422b-91ae-364da2661108 | mariadb.com | Vendor Advisory |
| [security-announce] SUSE-SU-2016:1620-1: important: Security update for | af854a3a-2127-422b-91ae-364da2661108 | lists.opensuse.org | |
| Debian -- Security Information -- DSA-3459-1 mysql-5.5 | af854a3a-2127-422b-91ae-364da2661108 | www.debian.org | |
| Red Hat Customer Portal | af854a3a-2127-422b-91ae-364da2661108 | access.redhat.com | |
| Red Hat Customer Portal | af854a3a-2127-422b-91ae-364da2661108 | rhn.redhat.com | |
| [security-announce] openSUSE-SU-2016:1664-1: important: Security update | af854a3a-2127-422b-91ae-364da2661108 | lists.opensuse.org | |
| MySQL Multiple Bugs Let Remote Users Access Data and Deny Service, Remote Authenticated Users Modify Data, and Local Users Gain Elevated Privileges - SecurityTracker | af854a3a-2127-422b-91ae-364da2661108 | www.securitytracker.com | |
| Oracle Linux Bulletin - April 2016 | af854a3a-2127-422b-91ae-364da2661108 | www.oracle.com | Vendor Advisory |
| Oracle MySQL CVE-2016-0616 Remote Security Vulnerability | af854a3a-2127-422b-91ae-364da2661108 | www.securityfocus.com | |
| MariaDB 5.5.47 Release Notes - MariaDB Knowledge Base | af854a3a-2127-422b-91ae-364da2661108 | mariadb.com | Vendor Advisory |
| [security-announce] openSUSE-SU-2016:1686-1: important: Security update | af854a3a-2127-422b-91ae-364da2661108 | lists.opensuse.org | Third Party Advisory |
| Oracle Solaris Bulletin - April 2016 | af854a3a-2127-422b-91ae-364da2661108 | www.oracle.com | Vendor Advisory |
| CVE Program record | CVE.ORG | www.cve.org | canonical |
| NVD vulnerability detail | NVD | nvd.nist.gov | canonical, analysis |
No vendor comments have been submitted for this CVE.
There are currently no legacy QID mappings associated with this CVE.