CVE-2016-3477
Summary
| CVE | CVE-2016-3477 |
|---|---|
| State | PUBLIC |
| Assigner | [email protected] |
| Source Priority | CVE Program / NVD first with legacy fallback |
| Published | 2016-07-21 10:12:00 UTC |
| Updated | 2019-12-27 16:08:00 UTC |
| Description | Unspecified vulnerability in Oracle MySQL 5.5.49 and earlier, 5.6.30 and earlier, and 5.7.12 and earlier and MariaDB before 5.5.50, 10.0.x before 10.0.26, and 10.1.x before 10.1.15 allows local users to affect confidentiality, integrity, and availability via vectors related to Server: Parser. |
Risk And Classification
Problem Types: NVD-CWE-noinfo
NVD Known Affected Configurations (CPE 2.3)
| Type | Vendor | Product | Version | Update | Edition | Language |
|---|---|---|---|---|---|---|
| Operating System | Canonical | Ubuntu Linux | 12.04 | All | All | All |
| Operating System | Canonical | Ubuntu Linux | 14.04 | All | All | All |
| Operating System | Canonical | Ubuntu Linux | 15.10 | All | All | All |
| Operating System | Canonical | Ubuntu Linux | 16.04 | All | All | All |
| Operating System | Canonical | Ubuntu Linux | 12.04 | All | All | All |
| Operating System | Canonical | Ubuntu Linux | 14.04 | All | All | All |
| Operating System | Canonical | Ubuntu Linux | 15.10 | All | All | All |
| Operating System | Canonical | Ubuntu Linux | 16.04 | All | All | All |
| Operating System | Debian | Debian Linux | 8.0 | All | All | All |
| Operating System | Debian | Debian Linux | 8.0 | All | All | All |
| Application | Ibm | Powerkvm | 2.1 | All | All | All |
| Application | Ibm | Powerkvm | 3.1 | All | All | All |
| Application | Ibm | Powerkvm | 2.1 | All | All | All |
| Application | Ibm | Powerkvm | 3.1 | All | All | All |
| Application | Mariadb | Mariadb | All | All | All | All |
| Application | Mariadb | Mariadb | All | All | All | All |
| Operating System | Oracle | Linux | 7 | All | All | All |
| Operating System | Oracle | Linux | 7 | All | All | All |
| Application | Oracle | Mysql | All | All | All | All |
| Application | Oracle | Mysql | All | All | All | All |
| Application | Oracle | Mysql | All | All | All | All |
References
| Reference | Source | Link | Tags |
|---|---|---|---|
| Red Hat Customer Portal | REDHAT | rhn.redhat.com | Third Party Advisory |
| Red Hat Customer Portal | REDHAT | rhn.redhat.com | Third Party Advisory |
| Oracle Critical Patch Update - July 2016 | CONFIRM | www.oracle.com | Patch, Vendor Advisory |
| Oracle July 2016 Critical Patch Update Multiple Vulnerabilities | BID | www.securityfocus.com | Third Party Advisory, VDB Entry |
| Debian -- Security Information -- DSA-3632-1 mariadb-10.0 | DEBIAN | www.debian.org | Third Party Advisory |
| MariaDB 10.1.15 Release Notes - MariaDB Knowledge Base | CONFIRM | mariadb.com | Vendor Advisory |
| openSUSE-SU-2016:2278-1: moderate: Security update for mariadb | SUSE | lists.opensuse.org | Mailing List, Third Party Advisory |
| Oracle Linux Bulletin - July 2016 | CONFIRM | www.oracle.com | Vendor Advisory |
| Debian -- Security Information -- DSA-3624-1 mysql-5.5 | DEBIAN | www.debian.org | Third Party Advisory |
| MariaDB 10.0.26 Release Notes - MariaDB Knowledge Base | CONFIRM | mariadb.com | Vendor Advisory |
| Security Bulletin: Multiple vulnerabilities in mariadb affect PowerKVM | CONFIRM | www-01.ibm.com | Third Party Advisory |
| MariaDB 5.5.50 Release Notes - MariaDB Knowledge Base | CONFIRM | mariadb.com | Vendor Advisory |
| MySQL Multiple Bugs Let Remote Users Access Data, Remote Authenticated Users Modify Data, Local or Remote Authenticated Users Deny Service, and Local Users Gain Elevated Privileges - SecurityTracker | SECTRACK | www.securitytracker.com | Third Party Advisory, VDB Entry |
| Red Hat Customer Portal | REDHAT | rhn.redhat.com | Third Party Advisory |
| USN-3040-1: MySQL vulnerabilities | Ubuntu | UBUNTU | www.ubuntu.com | Third Party Advisory |
| Red Hat Customer Portal | REDHAT | rhn.redhat.com | Third Party Advisory |
| Red Hat Customer Portal | REDHAT | rhn.redhat.com | Third Party Advisory |
| Oracle MySQL CVE-2016-3477 Local Security Vulnerability | BID | www.securityfocus.com | Third Party Advisory, VDB Entry |
| Red Hat Customer Portal | REDHAT | rhn.redhat.com | Third Party Advisory |
| CVE Program record | CVE.ORG | www.cve.org | canonical |
| NVD vulnerability detail | NVD | nvd.nist.gov | canonical, analysis |
No vendor comments have been submitted for this CVE.
There are currently no legacy QID mappings associated with this CVE.