OR
     *cpe:2.3:o:oracle:linux:7.0:*:*:*:*:*:*:*

OR
     *cpe:2.3:o:oracle:linux:7:*:*:*:*:*:*:*

OR
     *cpe:2.3:o:redhat:enterprise_linux:6:*:*:*:*:*:*:*

OR
     *cpe:2.3:o:redhat:enterprise_linux:6.0:*:*:*:*:*:*:*

OR
     *cpe:2.3:o:canonical:ubuntu_linux:12.04:*:*:*:lts:*:*:*
     *cpe:2.3:o:canonical:ubuntu_linux:14.04:*:*:*:lts:*:*:*
     *cpe:2.3:o:canonical:ubuntu_linux:15.10:*:*:*:*:*:*:*
     *cpe:2.3:o:canonical:ubuntu_linux:16.04:*:*:*:lts:*:*:*

OR
     *cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:*
     *cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:*

OR
     *cpe:2.3:a:mariadb:mariadb:5.5.46:*:*:*:*:*:*:*
     *cpe:2.3:a:mariadb:mariadb:10.0.0:*:*:*:*:*:*:*
     *cpe:2.3:a:mariadb:mariadb:10.0.1:*:*:*:*:*:*:*
     *cpe:2.3:a:mariadb:mariadb:10.0.2:*:*:*:*:*:*:*
     *cpe:2.3:a:mariadb:mariadb:10.0.3:*:*:*:*:*:*:*
     *cpe:2.3:a:mariadb:mariadb:10.0.4:*:*:*:*:*:*:*
     *cpe:2.3:a:mariadb:mariadb:10.0.5:*:*:*:*:*:*:*
     *cpe:2.3:a:mariadb:mariadb:10.0.6:*:*:*:*:*:*:*
     *cpe:2.3:a:mariadb:mariadb:10.0.7:*:*:*:*:*:*:*
     *cpe:2.3:a:mari

OR
     *cpe:2.3:a:mariadb:mariadb:*:*:*:*:*:*:*:* versions from (including) 5.5.20 up to (excluding) 5.5.47
     *cpe:2.3:a:mariadb:mariadb:*:*:*:*:*:*:*:* versions from (including) 10.0.0 up to (excluding) 10.0.23
     *cpe:2.3:a:mariadb:mariadb:*:*:*:*:*:*:*:* versions from (including) 10.1.0 up to (excluding) 10.1.10

OR
     *cpe:2.3:a:oracle:mysql:*:*:*:*:*:*:*:* versions up to (including) 5.5.48
     *cpe:2.3:a:oracle:mysql:*:*:*:*:*:*:*:* versions up to (including) 5.6.29
     *cpe:2.3:a:oracle:mysql:*:*:*:*:*:*:*:* versions up to (including) 5.7.11

OR
     *cpe:2.3:a:oracle:mysql:*:*:*:*:*:*:*:* versions from (including) 5.5.0 up to (including) 5.5.48
     *cpe:2.3:a:oracle:mysql:*:*:*:*:*:*:*:* versions from (including) 5.6.0 up to (including) 5.6.29
     *cpe:2.3:a:oracle:mysql:*:*:*:*:*:*:*:* versions from (including) 5.7.0 up to (including) 5.7.11

http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00035.html No Types Assigned

http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00035.html Mailing List, Third Party Advisory

http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00053.html No Types Assigned

http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00053.html Mailing List, Third Party Advisory

http://lists.opensuse.org/opensuse-security-announce/2016-06/msg00033.html No Types Assigned

http://lists.opensuse.org/opensuse-security-announce/2016-06/msg00033.html Mailing List, Third Party Advisory

http://lists.opensuse.org/opensuse-security-announce/2016-06/msg00034.html No Types Assigned

http://lists.opensuse.org/opensuse-security-announce/2016-06/msg00034.html Mailing List, Third Party Advisory

http://lists.opensuse.org/opensuse-security-announce/2016-06/msg00051.html No Types Assigned

http://lists.opensuse.org/opensuse-security-announce/2016-06/msg00051.html Mailing List, Third Party Advisory

http://rhn.redhat.com/errata/RHSA-2016-1480.html No Types Assigned

http://rhn.redhat.com/errata/RHSA-2016-1480.html Third Party Advisory

http://rhn.redhat.com/errata/RHSA-2016-1481.html No Types Assigned

http://rhn.redhat.com/errata/RHSA-2016-1481.html Third Party Advisory

http://www.debian.org/security/2016/dsa-3557 No Types Assigned

http://www.debian.org/security/2016/dsa-3557 Third Party Advisory

http://www.openwall.com/lists/oss-security/2016/01/26/3 Third Party Advisory

http://www.openwall.com/lists/oss-security/2016/01/26/3 Mailing List, Third Party Advisory

http://www.oracle.com/technetwork/security-advisory/cpuapr2016v3-2985753.html Vendor Advisory

http://www.oracle.com/technetwork/security-advisory/cpuapr2016v3-2985753.html Patch, Vendor Advisory

http://www.securityfocus.com/bid/81810 No Types Assigned

http://www.securityfocus.com/bid/81810 Third Party Advisory, VDB Entry

http://www.securitytracker.com/id/1035606 No Types Assigned

http://www.securitytracker.com/id/1035606 Third Party Advisory, VDB Entry

http://www.ubuntu.com/usn/USN-2953-1 No Types Assigned

http://www.ubuntu.com/usn/USN-2953-1 Third Party Advisory

http://www.ubuntu.com/usn/USN-2954-1 No Types Assigned

http://www.ubuntu.com/usn/USN-2954-1 Third Party Advisory

https://access.redhat.com/errata/RHSA-2016:1132 No Types Assigned

https://access.redhat.com/errata/RHSA-2016:1132 Third Party Advisory

OR
     *cpe:2.3:o:novell:leap:42.1:*:*:*:*:*:*:*

OR
     *cpe:2.3:o:opensuse:leap:42.1:*:*:*:*:*:*:*

http://rhn.redhat.com/errata/RHSA-2016-1480.html [No Types Assigned]

http://rhn.redhat.com/errata/RHSA-2016-1481.html [No Types Assigned]

https://access.redhat.com/errata/RHSA-2016:1132 [No Types Assigned]

http://www.debian.org/security/2016/dsa-3557 [No Types Assigned]

http://www.securitytracker.com/id/1035606 [No Types Assigned]

http://www.ubuntu.com/usn/USN-2953-1 [No Types Assigned]

http://www.ubuntu.com/usn/USN-2954-1 [No Types Assigned]

http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00035.html [No Types Assigned]

http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00053.html [No Types Assigned]

http://lists.opensuse.org/opensuse-security-announce/2016-06/msg00033.html [No Types Assigned]

http://lists.opensuse.org/opensuse-security-announce/2016-06/msg00034.html [No Types Assigned]

http://lists.opensuse.org/opensuse-security-announce/2016-06/msg00051.html [No Types Assigned]

http://www.securityfocus.com/bid/81810 [No Types Assigned]

Configuration 1
     OR
          *cpe:2.3:a:mariadb:mariadb:10.1.9:*:*:*:*:*:*:*
          *cpe:2.3:a:mariadb:mariadb:10.1.8:*:*:*:*:*:*:*
          *cpe:2.3:a:mariadb:mariadb:10.1.7:*:*:*:*:*:*:*
          *cpe:2.3:a:mariadb:mariadb:10.1.6:*:*:*:*:*:*:*
          *cpe:2.3:a:mariadb:mariadb:10.1.5:*:*:*:*:*:*:*
          *cpe:2.3:a:mariadb:mariadb:10.1.4:*:*:*:*:*:*:*
          *cpe:2.3:a:mariadb:mariadb:10.1.3:*:*:*:*:*:*:*
          *cpe:2.3:a:mariadb:mariadb:10.1.2:*:*:*:*:*:*:*
          *c

Configuration 1
     OR
          *cpe:2.3:a:mariadb:mariadb:10.1.9:*:*:*:*:*:*:*
          *cpe:2.3:a:mariadb:mariadb:10.1.8:*:*:*:*:*:*:*
          *cpe:2.3:a:mariadb:mariadb:10.1.7:*:*:*:*:*:*:*
          *cpe:2.3:a:mariadb:mariadb:10.1.6:*:*:*:*:*:*:*
          *cpe:2.3:a:mariadb:mariadb:10.1.5:*:*:*:*:*:*:*
          *cpe:2.3:a:mariadb:mariadb:10.1.4:*:*:*:*:*:*:*
          *cpe:2.3:a:mariadb:mariadb:10.1.3:*:*:*:*:*:*:*
          *cpe:2.3:a:mariadb:mariadb:10.1.2:*:*:*:*:*:*:*
          *c

http://www.oracle.com/technetwork/topics/security/linuxbulletinapr2016-2952096.html No Types Assigned

http://www.oracle.com/technetwork/topics/security/linuxbulletinapr2016-2952096.html Third Party Advisory

http://www.oracle.com/technetwork/topics/security/linuxbulletinapr2016-2952096.html

Configuration 1
     OR
          *cpe:2.3:o:novell:leap:42.1:*:*:*:*:*:*:*
Configuration 2
     OR
          *cpe:2.3:a:oracle:mysql:5.7.11:*:*:*:*:*:*:* (and previous)
          *cpe:2.3:a:oracle:mysql:5.6.29:*:*:*:*:*:*:* (and previous)
          *cpe:2.3:a:oracle:mysql:5.5.48:*:*:*:*:*:*:* (and previous)
Configuration 3
     OR
          *cpe:2.3:a:mariadb:mariadb:10.1.9:*:*:*:*:*:*:*
          *cpe:2.3:a:mariadb:mariadb:10.1.8:*:*:*:*:*:*:*
          *cpe:2.3:a:mariadb:mariadb:10.1.7:*:*:*:

Configuration 1
     OR
          *cpe:2.3:a:mariadb:mariadb:10.1.9:*:*:*:*:*:*:*
          *cpe:2.3:a:mariadb:mariadb:10.1.8:*:*:*:*:*:*:*
          *cpe:2.3:a:mariadb:mariadb:10.1.7:*:*:*:*:*:*:*
          *cpe:2.3:a:mariadb:mariadb:10.1.6:*:*:*:*:*:*:*
          *cpe:2.3:a:mariadb:mariadb:10.1.5:*:*:*:*:*:*:*
          *cpe:2.3:a:mariadb:mariadb:10.1.4:*:*:*:*:*:*:*
          *cpe:2.3:a:mariadb:mariadb:10.1.3:*:*:*:*:*:*:*
          *cpe:2.3:a:mariadb:mariadb:10.1.2:*:*:*:*:*:*:*
          *c

http://rhn.redhat.com/errata/RHSA-2016-0705.html No Types Assigned

http://rhn.redhat.com/errata/RHSA-2016-0705.html Third Party Advisory

http://rhn.redhat.com/errata/RHSA-2016-0705.html

Configuration 1
     OR
          *cpe:2.3:a:mariadb:mariadb:10.1.9:*:*:*:*:*:*:*
          *cpe:2.3:a:mariadb:mariadb:10.1.8:*:*:*:*:*:*:*
          *cpe:2.3:a:mariadb:mariadb:10.1.7:*:*:*:*:*:*:*
          *cpe:2.3:a:mariadb:mariadb:10.1.6:*:*:*:*:*:*:*
          *cpe:2.3:a:mariadb:mariadb:10.1.5:*:*:*:*:*:*:*
          *cpe:2.3:a:mariadb:mariadb:10.1.4:*:*:*:*:*:*:*
          *cpe:2.3:a:mariadb:mariadb:10.1.3:*:*:*:*:*:*:*
          *cpe:2.3:a:mariadb:mariadb:10.1.2:*:*:*:*:*:*:*
          *c

Configuration 1
     OR
          *cpe:2.3:o:novell:leap:42.1:*:*:*:*:*:*:*
Configuration 2
     OR
          *cpe:2.3:a:oracle:mysql:5.7.11:*:*:*:*:*:*:* (and previous)
          *cpe:2.3:a:oracle:mysql:5.6.29:*:*:*:*:*:*:* (and previous)
          *cpe:2.3:a:oracle:mysql:5.5.48:*:*:*:*:*:*:* (and previous)
Configuration 3
     OR
          *cpe:2.3:a:mariadb:mariadb:10.1.9:*:*:*:*:*:*:*
          *cpe:2.3:a:mariadb:mariadb:10.1.8:*:*:*:*:*:*:*
          *cpe:2.3:a:mariadb:mariadb:10.1.7:*:*:*:

http://lists.opensuse.org/opensuse-security-announce/2016-06/msg00053.html No Types Assigned

http://lists.opensuse.org/opensuse-security-announce/2016-06/msg00053.html Third Party Advisory

http://rhn.redhat.com/errata/RHSA-2016-0534.html No Types Assigned

http://rhn.redhat.com/errata/RHSA-2016-0534.html Third Party Advisory

http://www.debian.org/security/2016/dsa-3453 No Types Assigned

http://www.debian.org/security/2016/dsa-3453 Third Party Advisory

http://www.openwall.com/lists/oss-security/2016/01/26/3 No Types Assigned

http://www.openwall.com/lists/oss-security/2016/01/26/3 Third Party Advisory

http://lists.opensuse.org/opensuse-security-announce/2016-06/msg00053.html

Configuration 1
     OR
          *cpe:2.3:a:mariadb:mariadb:10.1.9:*:*:*:*:*:*:*
          *cpe:2.3:a:mariadb:mariadb:10.1.8:*:*:*:*:*:*:*
          *cpe:2.3:a:mariadb:mariadb:10.1.7:*:*:*:*:*:*:*
          *cpe:2.3:a:mariadb:mariadb:10.1.6:*:*:*:*:*:*:*
          *cpe:2.3:a:mariadb:mariadb:10.1.5:*:*:*:*:*:*:*
          *cpe:2.3:a:mariadb:mariadb:10.1.4:*:*:*:*:*:*:*
          *cpe:2.3:a:mariadb:mariadb:10.1.3:*:*:*:*:*:*:*
          *cpe:2.3:a:mariadb:mariadb:10.1.2:*:*:*:*:*:*:*
          *c

Configuration 1
     OR
          *cpe:2.3:a:mariadb:mariadb:10.1.9:*:*:*:*:*:*:*
          *cpe:2.3:a:mariadb:mariadb:10.1.8:*:*:*:*:*:*:*
          *cpe:2.3:a:mariadb:mariadb:10.1.7:*:*:*:*:*:*:*
          *cpe:2.3:a:mariadb:mariadb:10.1.6:*:*:*:*:*:*:*
          *cpe:2.3:a:mariadb:mariadb:10.1.5:*:*:*:*:*:*:*
          *cpe:2.3:a:mariadb:mariadb:10.1.4:*:*:*:*:*:*:*
          *cpe:2.3:a:mariadb:mariadb:10.1.3:*:*:*:*:*:*:*
          *cpe:2.3:a:mariadb:mariadb:10.1.2:*:*:*:*:*:*:*
          *c

http://www.oracle.com/technetwork/security-advisory/cpuapr2016v3-2985753.html No Types Assigned

http://www.oracle.com/technetwork/security-advisory/cpuapr2016v3-2985753.html Advisory

La función ssl_verify_server_cert en sql-common/client.c en MariaDB en versiones anteriores a 5.5.47, 10.0.x en versiones anteriores a 10.0.23 y 10.1.x en versiones anteriores a 10.1.10; Oracle MySQL 5.5.48 y versiones anteriores, 5.6.29 y versiones anteriores y 5.7.11 y versiones anteriores; y Percona Server no verifica correctamente que el nombre de host del servidor coincide con un nombre de dominio en el Common Name (CN) del asunto o en el campo subjectAltName del certificado X.509, lo que p

Vulnerabilidad no especificada en Oracle MySQL 5.7.11 y versiones anteriores permite a usuarios locales afectar a la disponibilidad a través de vectores relacionados con Optimizer.

Vulnerabilidad no especificada en Oracle MySQL 5.7.11 y versiones anteriores permite a usuarios locales afectar a la disponibilidad a través de vectores relacionados con Optimizer.

La función ssl_verify_server_cert en sql-common/client.c en MariaDB en versiones anteriores a 5.5.47, 10.0.x en versiones anteriores a 10.0.23 y 10.1.x en versiones anteriores a 10.1.10, Oracle MySQL y Percona Server no verifica correctamente que el hostname del servidor coincide con un nombre de dominio en el Common Name (CN) del asunto o en el campo subjectAltName del certificado X.509, lo que permite a atacantes man-in-the-middle suplantar servidores SSL a través de una cadena "/CN=" en un ca

The ssl_verify_server_cert function in sql-common/client.c in MariaDB before 5.5.47, 10.0.x before 10.0.23, and 10.1.x before 10.1.10, Oracle MySQL, and Percona Server do not properly verify that the server hostname matches a domain name in the subject's Common Name (CN) or subjectAltName field of the X.509 certificate, which allows man-in-the-middle attackers to spoof SSL servers via a "/CN=" string in a field in a certificate, as demonstrated by "/OU=/CN=bar.com/CN=foo.com."

The ssl_verify_server_cert function in sql-common/client.c in MariaDB before 5.5.47, 10.0.x before 10.0.23, and 10.1.x before 10.1.10; Oracle MySQL 5.5.48 and earlier, 5.6.29 and earlier, and 5.7.11 and earlier; and Percona Server do not properly verify that the server hostname matches a domain name in the subject's Common Name (CN) or subjectAltName field of the X.509 certificate, which allows man-in-the-middle attackers to spoof SSL servers via a "/CN=" string in a field in a certificate, as d

http://www.oracle.com/technetwork/security-advisory/cpuapr2016v3-2985753.html

http://rhn.redhat.com/errata/RHSA-2016-0534.html

Configuration 1
     OR
          *cpe:2.3:a:mariadb:mariadb:10.1.9:*:*:*:*:*:*:*
          *cpe:2.3:a:mariadb:mariadb:10.1.8:*:*:*:*:*:*:*
          *cpe:2.3:a:mariadb:mariadb:10.1.7:*:*:*:*:*:*:*
          *cpe:2.3:a:mariadb:mariadb:10.1.6:*:*:*:*:*:*:*
          *cpe:2.3:a:mariadb:mariadb:10.1.5:*:*:*:*:*:*:*
          *cpe:2.3:a:mariadb:mariadb:10.1.4:*:*:*:*:*:*:*
          *cpe:2.3:a:mariadb:mariadb:10.1.3:*:*:*:*:*:*:*
          *cpe:2.3:a:mariadb:mariadb:10.1.2:*:*:*:*:*:*:*
          *c

(AV:N/AC:M/Au:N/C:N/I:P/A:N)

AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N

CWE-254

https://mariadb.atlassian.net/browse/MDEV-9212 No Types Assigned

https://mariadb.atlassian.net/browse/MDEV-9212 Advisory

https://mariadb.com/kb/en/mariadb/mariadb-10110-release-notes/ No Types Assigned

https://mariadb.com/kb/en/mariadb/mariadb-10110-release-notes/ Advisory

https://mariadb.com/kb/en/mariadb/mariadb-5547-release-notes/ No Types Assigned

https://mariadb.com/kb/en/mariadb/mariadb-5547-release-notes/ Advisory

https://mariadb.com/kb/en/mdb-10023-rn/ No Types Assigned

https://mariadb.com/kb/en/mdb-10023-rn/ Advisory