CVE-2016-3452
Summary
| CVE | CVE-2016-3452 |
|---|---|
| State | PUBLIC |
| Assigner | [email protected] |
| Source Priority | CVE Program / NVD first with legacy fallback |
| Published | 2016-07-21 10:12:00 UTC |
| Updated | 2019-12-27 16:08:00 UTC |
| Description | Unspecified vulnerability in Oracle MySQL 5.5.48 and earlier, 5.6.29 and earlier, and 5.7.10 and earlier and MariaDB before 5.5.49, 10.0.x before 10.0.25, and 10.1.x before 10.1.14 allows remote attackers to affect confidentiality via vectors related to Server: Security: Encryption. |
Risk And Classification
Problem Types: NVD-CWE-noinfo
NVD Known Affected Configurations (CPE 2.3)
| Type | Vendor | Product | Version | Update | Edition | Language |
|---|---|---|---|---|---|---|
| Application | Ibm | Powerkvm | 2.1 | All | All | All |
| Application | Ibm | Powerkvm | 3.1 | All | All | All |
| Application | Ibm | Powerkvm | 2.1 | All | All | All |
| Application | Ibm | Powerkvm | 3.1 | All | All | All |
| Application | Mariadb | Mariadb | All | All | All | All |
| Application | Mariadb | Mariadb | All | All | All | All |
| Operating System | Oracle | Linux | 7 | All | All | All |
| Operating System | Oracle | Linux | 7 | All | All | All |
| Application | Oracle | Mysql | All | All | All | All |
| Application | Oracle | Mysql | All | All | All | All |
| Application | Oracle | Mysql | All | All | All | All |
| Operating System | Redhat | Enterprise Linux | 6.0 | All | All | All |
| Operating System | Redhat | Enterprise Linux | 7.0 | All | All | All |
| Operating System | Redhat | Enterprise Linux | 6.0 | All | All | All |
| Operating System | Redhat | Enterprise Linux | 7.0 | All | All | All |
References
| Reference | Source | Link | Tags |
|---|---|---|---|
| Red Hat Customer Portal | REDHAT | rhn.redhat.com | Third Party Advisory |
| Red Hat Customer Portal | REDHAT | rhn.redhat.com | Third Party Advisory |
| Red Hat Customer Portal | REDHAT | rhn.redhat.com | Third Party Advisory |
| Oracle Critical Patch Update - July 2016 | CONFIRM | www.oracle.com | Patch, Vendor Advisory |
| Oracle July 2016 Critical Patch Update Multiple Vulnerabilities | BID | www.securityfocus.com | Third Party Advisory, VDB Entry |
| Oracle Linux Bulletin - July 2016 | CONFIRM | www.oracle.com | Vendor Advisory |
| MariaDB 10.1.14 Release Notes - MariaDB Knowledge Base | CONFIRM | mariadb.com | Vendor Advisory |
| Oracle MySQL CVE-2016-3452 Remote Security Vulnerability | BID | www.securityfocus.com | Third Party Advisory, VDB Entry |
| Red Hat Customer Portal | REDHAT | access.redhat.com | Third Party Advisory |
| MariaDB 5.5.49 Release Notes - MariaDB Knowledge Base | CONFIRM | mariadb.com | Vendor Advisory |
| Security Bulletin: Multiple vulnerabilities in mariadb affect PowerKVM | CONFIRM | www-01.ibm.com | Third Party Advisory |
| MySQL Multiple Bugs Let Remote Users Access Data, Remote Authenticated Users Modify Data, Local or Remote Authenticated Users Deny Service, and Local Users Gain Elevated Privileges - SecurityTracker | SECTRACK | www.securitytracker.com | Third Party Advisory, VDB Entry |
| Red Hat Customer Portal | REDHAT | rhn.redhat.com | Third Party Advisory |
| MariaDB 10.0.25 Release Notes - MariaDB Knowledge Base | CONFIRM | mariadb.com | Vendor Advisory |
| CVE Program record | CVE.ORG | www.cve.org | canonical |
| NVD vulnerability detail | NVD | nvd.nist.gov | canonical, analysis |
No vendor comments have been submitted for this CVE.
There are currently no legacy QID mappings associated with this CVE.