{"api_version":"1","generated_at":"2026-07-23T23:57:11+00:00","cve":"CVE-2016-0546","urls":{"html":"https://cve.report/CVE-2016-0546","api":"https://cve.report/api/cve/CVE-2016-0546.json","docs":"https://cve.report/api","cve_org":"https://www.cve.org/CVERecord?id=CVE-2016-0546","nvd":"https://nvd.nist.gov/vuln/detail/CVE-2016-0546"},"summary":{"title":"CVE-2016-0546","description":"Unspecified vulnerability in Oracle MySQL 5.5.46 and earlier, 5.6.27 and earlier, and 5.7.9 and MariaDB before 5.5.47, 10.0.x before 10.0.23, and 10.1.x before 10.1.10 allows local users to affect confidentiality, integrity, and availability via unknown vectors related to Client.  NOTE: the previous information is from the January 2016 CPU. Oracle has not commented on third-party claims that these are multiple buffer overflows in the mysqlshow tool that allow remote database servers to have unspecified impact via a long table or database name.","state":"PUBLISHED","assigner":"oracle","published_at":"2016-01-21 03:01:33","updated_at":"2026-05-06 22:30:45"},"problem_types":["NVD-CWE-noinfo","n/a"],"metrics":[{"version":"2.0","source":"nvd@nist.gov","type":"Primary","score":"7.2","severity":"","vector":"AV:L/AC:L/Au:N/C:C/I:C/A:C","data":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:C/I:C/A:C","baseScore":7.2,"accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE"}}],"references":[{"url":"http://rhn.redhat.com/errata/RHSA-2016-1480.html","name":"http://rhn.redhat.com/errata/RHSA-2016-1480.html","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"],"title":"Red Hat Customer Portal","mime":"text/html","httpstatus":"-1","archivestatus":"200"},{"url":"http://www.debian.org/security/2016/dsa-3453","name":"http://www.debian.org/security/2016/dsa-3453","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Third Party Advisory"],"title":"Debian -- Security Information -- DSA-3453-1 mariadb-10.0","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"http://rhn.redhat.com/errata/RHSA-2016-0534.html","name":"http://rhn.redhat.com/errata/RHSA-2016-0534.html","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"],"title":"Red Hat Customer Portal","mime":"text/html","httpstatus":"-1","archivestatus":"200"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-02/msg00016.html","name":"http://lists.opensuse.org/opensuse-security-announce/2016-02/msg00016.html","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Third Party Advisory"],"title":"[security-announce] openSUSE-SU-2016:0377-1: important: Security update","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"https://mariadb.com/kb/en/mdb-10023-rn/","name":"https://mariadb.com/kb/en/mdb-10023-rn/","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"],"title":"MariaDB 10.0.23 Release Notes - MariaDB Knowledge Base","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-06/msg00033.html","name":"http://lists.opensuse.org/opensuse-security-announce/2016-06/msg00033.html","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Third Party Advisory"],"title":"[security-announce] SUSE-SU-2016:1619-1: important: Security update for","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"http://www.ubuntu.com/usn/USN-2881-1","name":"http://www.ubuntu.com/usn/USN-2881-1","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"],"title":"USN-2881-1: MySQL vulnerabilities | Ubuntu","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"http://www.securityfocus.com/bid/81066","name":"http://www.securityfocus.com/bid/81066","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"],"title":"Oracle MySQL CVE-2016-0546 Local Security Vulnerability","mime":"text/html","httpstatus":"200","archivestatus":"0"},{"url":"https://dev.mysql.com/doc/relnotes/mysql/5.5/en/news-5-5-47.html","name":"https://dev.mysql.com/doc/relnotes/mysql/5.5/en/news-5-5-47.html","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"],"title":"MySQL :: MySQL 5.5 Release Notes :: Changes in MySQL 5.5.47 (2015-12-07, General Availability)","mime":"text/html","httpstatus":"404","archivestatus":"200"},{"url":"https://dev.mysql.com/doc/relnotes/mysql/5.6/en/news-5-6-28.html","name":"https://dev.mysql.com/doc/relnotes/mysql/5.6/en/news-5-6-28.html","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"],"title":"MySQL :: MySQL 5.6 Release Notes :: Changes in MySQL 5.6.28 (2015-12-07, General Availability)","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"http://rhn.redhat.com/errata/RHSA-2016-0705.html","name":"http://rhn.redhat.com/errata/RHSA-2016-0705.html","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"],"title":"Red Hat Customer Portal","mime":"text/html","httpstatus":"-1","archivestatus":"200"},{"url":"http://www.oracle.com/technetwork/topics/security/cpujan2016-2367955.html","name":"http://www.oracle.com/technetwork/topics/security/cpujan2016-2367955.html","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"],"title":"Oracle Critical Patch Update - January 2016","mime":"text/html","httpstatus":"200","archivestatus":"0"},{"url":"https://mariadb.com/kb/en/mariadb/mariadb-10110-release-notes/","name":"https://mariadb.com/kb/en/mariadb/mariadb-10110-release-notes/","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"],"title":"MariaDB 10.1.10 Release Notes - MariaDB Knowledge Base","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-06/msg00034.html","name":"http://lists.opensuse.org/opensuse-security-announce/2016-06/msg00034.html","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Third Party Advisory"],"title":"[security-announce] SUSE-SU-2016:1620-1: important: Security update for","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"http://www.debian.org/security/2016/dsa-3459","name":"http://www.debian.org/security/2016/dsa-3459","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"],"title":"Debian -- Security Information -- DSA-3459-1 mysql-5.5","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-02/msg00015.html","name":"http://lists.opensuse.org/opensuse-security-announce/2016-02/msg00015.html","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"],"title":"[security-announce] openSUSE-SU-2016:0367-1: important: Security update","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"https://access.redhat.com/errata/RHSA-2016:1132","name":"https://access.redhat.com/errata/RHSA-2016:1132","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"],"title":"Red Hat Customer Portal","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"http://rhn.redhat.com/errata/RHSA-2016-1481.html","name":"http://rhn.redhat.com/errata/RHSA-2016-1481.html","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"],"title":"Red Hat Customer Portal","mime":"text/html","httpstatus":"-1","archivestatus":"200"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-06/msg00051.html","name":"http://lists.opensuse.org/opensuse-security-announce/2016-06/msg00051.html","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Third Party Advisory"],"title":"[security-announce] openSUSE-SU-2016:1664-1: important: Security update","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"http://www.securitytracker.com/id/1034708","name":"http://www.securitytracker.com/id/1034708","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"],"title":"MySQL Multiple Bugs Let Remote Users Access Data and Deny Service, Remote Authenticated Users Modify Data, and Local Users Gain Elevated Privileges - SecurityTracker","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"http://www.oracle.com/technetwork/topics/security/linuxbulletinapr2016-2952096.html","name":"http://www.oracle.com/technetwork/topics/security/linuxbulletinapr2016-2952096.html","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"],"title":"Oracle Linux Bulletin - April 2016","mime":"text/html","httpstatus":"200","archivestatus":"0"},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1301493","name":"https://bugzilla.redhat.com/show_bug.cgi?id=1301493","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":["Issue Tracking","Third Party Advisory"],"title":"1301493 – (CVE-2016-0546) CVE-2016-0546 mysql: unspecified vulnerability in subcomponent: Client (CPU January 2016)","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"https://github.com/mysql/mysql-server/commit/0dbd5a8797ed4bd18e8b883988fb62177eb0f73f","name":"https://github.com/mysql/mysql-server/commit/0dbd5a8797ed4bd18e8b883988fb62177eb0f73f","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"],"title":"Bug#21973610: BUFFER OVERFLOW ISSUES · mysql/mysql-server@0dbd5a8 · GitHub","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"https://mariadb.com/kb/en/mariadb/mariadb-5547-release-notes/","name":"https://mariadb.com/kb/en/mariadb/mariadb-5547-release-notes/","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"],"title":"MariaDB 5.5.47 Release Notes - MariaDB Knowledge Base","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-06/msg00053.html","name":"http://lists.opensuse.org/opensuse-security-announce/2016-06/msg00053.html","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"],"title":"[security-announce] openSUSE-SU-2016:1686-1: important: Security update","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"http://www.oracle.com/technetwork/topics/security/bulletinapr2016-2952098.html","name":"http://www.oracle.com/technetwork/topics/security/bulletinapr2016-2952098.html","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"],"title":"Oracle Solaris Bulletin - April 2016","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"https://www.cve.org/CVERecord?id=CVE-2016-0546","name":"CVE Program record","refsource":"CVE.ORG","tags":["canonical"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2016-0546","name":"NVD vulnerability detail","refsource":"NVD","tags":["canonical","analysis"]}],"affected":[{"source":"CNA","vendor":"n/a","product":"n/a","version":"affected n/a","platforms":[]}],"timeline":[],"solutions":[],"workarounds":[],"exploits":[],"credits":[],"nvd_cpes":[{"cve_year":"2016","cve_id":"546","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"o","cpe4":"canonical","cpe5":"ubuntu_linux","cpe6":"12.04","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"lts","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2016","cve_id":"546","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"o","cpe4":"canonical","cpe5":"ubuntu_linux","cpe6":"14.04","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"lts","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2016","cve_id":"546","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"o","cpe4":"canonical","cpe5":"ubuntu_linux","cpe6":"15.04","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2016","cve_id":"546","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"o","cpe4":"canonical","cpe5":"ubuntu_linux","cpe6":"15.10","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2016","cve_id":"546","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"mariadb","cpe5":"mariadb","cpe6":"*","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"}],"vendor_comments":[],"enrichments":{"kev":null,"epss":null,"legacy_qids":[]},"source_records":{"cve_program":{"containers":{"adp":[{"providerMetadata":{"dateUpdated":"2024-08-05T22:22:55.686Z","orgId":"af854a3a-2127-422b-91ae-364da2661108","shortName":"CVE"},"references":[{"name":"SUSE-SU-2016:1620","tags":["vendor-advisory","x_refsource_SUSE","x_transferred"],"url":"http://lists.opensuse.org/opensuse-security-announce/2016-06/msg00034.html"},{"name":"RHSA-2016:1481","tags":["vendor-advisory","x_refsource_REDHAT","x_transferred"],"url":"http://rhn.redhat.com/errata/RHSA-2016-1481.html"},{"name":"openSUSE-SU-2016:0367","tags":["vendor-advisory","x_refsource_SUSE","x_transferred"],"url":"http://lists.opensuse.org/opensuse-security-announce/2016-02/msg00015.html"},{"name":"RHSA-2016:1132","tags":["vendor-advisory","x_refsource_REDHAT","x_transferred"],"url":"https://access.redhat.com/errata/RHSA-2016:1132"},{"name":"DSA-3459","tags":["vendor-advisory","x_refsource_DEBIAN","x_transferred"],"url":"http://www.debian.org/security/2016/dsa-3459"},{"name":"1034708","tags":["vdb-entry","x_refsource_SECTRACK","x_transferred"],"url":"http://www.securitytracker.com/id/1034708"},{"name":"RHSA-2016:0534","tags":["vendor-advisory","x_refsource_REDHAT","x_transferred"],"url":"http://rhn.redhat.com/errata/RHSA-2016-0534.html"},{"tags":["x_refsource_CONFIRM","x_transferred"],"url":"http://www.oracle.com/technetwork/topics/security/linuxbulletinapr2016-2952096.html"},{"name":"SUSE-SU-2016:1619","tags":["vendor-advisory","x_refsource_SUSE","x_transferred"],"url":"http://lists.opensuse.org/opensuse-security-announce/2016-06/msg00033.html"},{"tags":["x_refsource_CONFIRM","x_transferred"],"url":"http://www.oracle.com/technetwork/topics/security/cpujan2016-2367955.html"},{"name":"RHSA-2016:1480","tags":["vendor-advisory","x_refsource_REDHAT","x_transferred"],"url":"http://rhn.redhat.com/errata/RHSA-2016-1480.html"},{"tags":["x_refsource_CONFIRM","x_transferred"],"url":"https://github.com/mysql/mysql-server/commit/0dbd5a8797ed4bd18e8b883988fb62177eb0f73f"},{"name":"openSUSE-SU-2016:1664","tags":["vendor-advisory","x_refsource_SUSE","x_transferred"],"url":"http://lists.opensuse.org/opensuse-security-announce/2016-06/msg00051.html"},{"tags":["x_refsource_CONFIRM","x_transferred"],"url":"http://www.oracle.com/technetwork/topics/security/bulletinapr2016-2952098.html"},{"name":"81066","tags":["vdb-entry","x_refsource_BID","x_transferred"],"url":"http://www.securityfocus.com/bid/81066"},{"tags":["x_refsource_CONFIRM","x_transferred"],"url":"https://mariadb.com/kb/en/mdb-10023-rn/"},{"name":"USN-2881-1","tags":["vendor-advisory","x_refsource_UBUNTU","x_transferred"],"url":"http://www.ubuntu.com/usn/USN-2881-1"},{"tags":["x_refsource_CONFIRM","x_transferred"],"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1301493"},{"name":"openSUSE-SU-2016:0377","tags":["vendor-advisory","x_refsource_SUSE","x_transferred"],"url":"http://lists.opensuse.org/opensuse-security-announce/2016-02/msg00016.html"},{"name":"DSA-3453","tags":["vendor-advisory","x_refsource_DEBIAN","x_transferred"],"url":"http://www.debian.org/security/2016/dsa-3453"},{"tags":["x_refsource_CONFIRM","x_transferred"],"url":"https://mariadb.com/kb/en/mariadb/mariadb-5547-release-notes/"},{"tags":["x_refsource_CONFIRM","x_transferred"],"url":"https://dev.mysql.com/doc/relnotes/mysql/5.5/en/news-5-5-47.html"},{"name":"openSUSE-SU-2016:1686","tags":["vendor-advisory","x_refsource_SUSE","x_transferred"],"url":"http://lists.opensuse.org/opensuse-security-announce/2016-06/msg00053.html"},{"tags":["x_refsource_CONFIRM","x_transferred"],"url":"https://mariadb.com/kb/en/mariadb/mariadb-10110-release-notes/"},{"name":"RHSA-2016:0705","tags":["vendor-advisory","x_refsource_REDHAT","x_transferred"],"url":"http://rhn.redhat.com/errata/RHSA-2016-0705.html"},{"tags":["x_refsource_CONFIRM","x_transferred"],"url":"https://dev.mysql.com/doc/relnotes/mysql/5.6/en/news-5-6-28.html"}],"title":"CVE Program Container"}],"cna":{"affected":[{"product":"n/a","vendor":"n/a","versions":[{"status":"affected","version":"n/a"}]}],"datePublic":"2016-01-19T00:00:00.000Z","descriptions":[{"lang":"en","value":"Unspecified vulnerability in Oracle MySQL 5.5.46 and earlier, 5.6.27 and earlier, and 5.7.9 and MariaDB before 5.5.47, 10.0.x before 10.0.23, and 10.1.x before 10.1.10 allows local users to affect confidentiality, integrity, and availability via unknown vectors related to Client.  NOTE: the previous information is from the January 2016 CPU. Oracle has not commented on third-party claims that these are multiple buffer overflows in the mysqlshow tool that allow remote database servers to have unspecified impact via a long table or database name."}],"problemTypes":[{"descriptions":[{"description":"n/a","lang":"en","type":"text"}]}],"providerMetadata":{"dateUpdated":"2018-01-04T19:57:01.000Z","orgId":"43595867-4340-4103-b7a2-9a5208d29a85","shortName":"oracle"},"references":[{"name":"SUSE-SU-2016:1620","tags":["vendor-advisory","x_refsource_SUSE"],"url":"http://lists.opensuse.org/opensuse-security-announce/2016-06/msg00034.html"},{"name":"RHSA-2016:1481","tags":["vendor-advisory","x_refsource_REDHAT"],"url":"http://rhn.redhat.com/errata/RHSA-2016-1481.html"},{"name":"openSUSE-SU-2016:0367","tags":["vendor-advisory","x_refsource_SUSE"],"url":"http://lists.opensuse.org/opensuse-security-announce/2016-02/msg00015.html"},{"name":"RHSA-2016:1132","tags":["vendor-advisory","x_refsource_REDHAT"],"url":"https://access.redhat.com/errata/RHSA-2016:1132"},{"name":"DSA-3459","tags":["vendor-advisory","x_refsource_DEBIAN"],"url":"http://www.debian.org/security/2016/dsa-3459"},{"name":"1034708","tags":["vdb-entry","x_refsource_SECTRACK"],"url":"http://www.securitytracker.com/id/1034708"},{"name":"RHSA-2016:0534","tags":["vendor-advisory","x_refsource_REDHAT"],"url":"http://rhn.redhat.com/errata/RHSA-2016-0534.html"},{"tags":["x_refsource_CONFIRM"],"url":"http://www.oracle.com/technetwork/topics/security/linuxbulletinapr2016-2952096.html"},{"name":"SUSE-SU-2016:1619","tags":["vendor-advisory","x_refsource_SUSE"],"url":"http://lists.opensuse.org/opensuse-security-announce/2016-06/msg00033.html"},{"tags":["x_refsource_CONFIRM"],"url":"http://www.oracle.com/technetwork/topics/security/cpujan2016-2367955.html"},{"name":"RHSA-2016:1480","tags":["vendor-advisory","x_refsource_REDHAT"],"url":"http://rhn.redhat.com/errata/RHSA-2016-1480.html"},{"tags":["x_refsource_CONFIRM"],"url":"https://github.com/mysql/mysql-server/commit/0dbd5a8797ed4bd18e8b883988fb62177eb0f73f"},{"name":"openSUSE-SU-2016:1664","tags":["vendor-advisory","x_refsource_SUSE"],"url":"http://lists.opensuse.org/opensuse-security-announce/2016-06/msg00051.html"},{"tags":["x_refsource_CONFIRM"],"url":"http://www.oracle.com/technetwork/topics/security/bulletinapr2016-2952098.html"},{"name":"81066","tags":["vdb-entry","x_refsource_BID"],"url":"http://www.securityfocus.com/bid/81066"},{"tags":["x_refsource_CONFIRM"],"url":"https://mariadb.com/kb/en/mdb-10023-rn/"},{"name":"USN-2881-1","tags":["vendor-advisory","x_refsource_UBUNTU"],"url":"http://www.ubuntu.com/usn/USN-2881-1"},{"tags":["x_refsource_CONFIRM"],"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1301493"},{"name":"openSUSE-SU-2016:0377","tags":["vendor-advisory","x_refsource_SUSE"],"url":"http://lists.opensuse.org/opensuse-security-announce/2016-02/msg00016.html"},{"name":"DSA-3453","tags":["vendor-advisory","x_refsource_DEBIAN"],"url":"http://www.debian.org/security/2016/dsa-3453"},{"tags":["x_refsource_CONFIRM"],"url":"https://mariadb.com/kb/en/mariadb/mariadb-5547-release-notes/"},{"tags":["x_refsource_CONFIRM"],"url":"https://dev.mysql.com/doc/relnotes/mysql/5.5/en/news-5-5-47.html"},{"name":"openSUSE-SU-2016:1686","tags":["vendor-advisory","x_refsource_SUSE"],"url":"http://lists.opensuse.org/opensuse-security-announce/2016-06/msg00053.html"},{"tags":["x_refsource_CONFIRM"],"url":"https://mariadb.com/kb/en/mariadb/mariadb-10110-release-notes/"},{"name":"RHSA-2016:0705","tags":["vendor-advisory","x_refsource_REDHAT"],"url":"http://rhn.redhat.com/errata/RHSA-2016-0705.html"},{"tags":["x_refsource_CONFIRM"],"url":"https://dev.mysql.com/doc/relnotes/mysql/5.6/en/news-5-6-28.html"}],"x_legacyV4Record":{"CVE_data_meta":{"ASSIGNER":"secalert_us@oracle.com","ID":"CVE-2016-0546","STATE":"PUBLIC"},"affects":{"vendor":{"vendor_data":[{"product":{"product_data":[{"product_name":"n/a","version":{"version_data":[{"version_value":"n/a"}]}}]},"vendor_name":"n/a"}]}},"data_format":"MITRE","data_type":"CVE","data_version":"4.0","description":{"description_data":[{"lang":"eng","value":"Unspecified vulnerability in Oracle MySQL 5.5.46 and earlier, 5.6.27 and earlier, and 5.7.9 and MariaDB before 5.5.47, 10.0.x before 10.0.23, and 10.1.x before 10.1.10 allows local users to affect confidentiality, integrity, and availability via unknown vectors related to Client.  NOTE: the previous information is from the January 2016 CPU. Oracle has not commented on third-party claims that these are multiple buffer overflows in the mysqlshow tool that allow remote database servers to have unspecified impact via a long table or database name."}]},"problemtype":{"problemtype_data":[{"description":[{"lang":"eng","value":"n/a"}]}]},"references":{"reference_data":[{"name":"SUSE-SU-2016:1620","refsource":"SUSE","url":"http://lists.opensuse.org/opensuse-security-announce/2016-06/msg00034.html"},{"name":"RHSA-2016:1481","refsource":"REDHAT","url":"http://rhn.redhat.com/errata/RHSA-2016-1481.html"},{"name":"openSUSE-SU-2016:0367","refsource":"SUSE","url":"http://lists.opensuse.org/opensuse-security-announce/2016-02/msg00015.html"},{"name":"RHSA-2016:1132","refsource":"REDHAT","url":"https://access.redhat.com/errata/RHSA-2016:1132"},{"name":"DSA-3459","refsource":"DEBIAN","url":"http://www.debian.org/security/2016/dsa-3459"},{"name":"1034708","refsource":"SECTRACK","url":"http://www.securitytracker.com/id/1034708"},{"name":"RHSA-2016:0534","refsource":"REDHAT","url":"http://rhn.redhat.com/errata/RHSA-2016-0534.html"},{"name":"http://www.oracle.com/technetwork/topics/security/linuxbulletinapr2016-2952096.html","refsource":"CONFIRM","url":"http://www.oracle.com/technetwork/topics/security/linuxbulletinapr2016-2952096.html"},{"name":"SUSE-SU-2016:1619","refsource":"SUSE","url":"http://lists.opensuse.org/opensuse-security-announce/2016-06/msg00033.html"},{"name":"http://www.oracle.com/technetwork/topics/security/cpujan2016-2367955.html","refsource":"CONFIRM","url":"http://www.oracle.com/technetwork/topics/security/cpujan2016-2367955.html"},{"name":"RHSA-2016:1480","refsource":"REDHAT","url":"http://rhn.redhat.com/errata/RHSA-2016-1480.html"},{"name":"https://github.com/mysql/mysql-server/commit/0dbd5a8797ed4bd18e8b883988fb62177eb0f73f","refsource":"CONFIRM","url":"https://github.com/mysql/mysql-server/commit/0dbd5a8797ed4bd18e8b883988fb62177eb0f73f"},{"name":"openSUSE-SU-2016:1664","refsource":"SUSE","url":"http://lists.opensuse.org/opensuse-security-announce/2016-06/msg00051.html"},{"name":"http://www.oracle.com/technetwork/topics/security/bulletinapr2016-2952098.html","refsource":"CONFIRM","url":"http://www.oracle.com/technetwork/topics/security/bulletinapr2016-2952098.html"},{"name":"81066","refsource":"BID","url":"http://www.securityfocus.com/bid/81066"},{"name":"https://mariadb.com/kb/en/mdb-10023-rn/","refsource":"CONFIRM","url":"https://mariadb.com/kb/en/mdb-10023-rn/"},{"name":"USN-2881-1","refsource":"UBUNTU","url":"http://www.ubuntu.com/usn/USN-2881-1"},{"name":"https://bugzilla.redhat.com/show_bug.cgi?id=1301493","refsource":"CONFIRM","url":"https://bugzilla.redhat.com/show_bug.cgi?id=1301493"},{"name":"openSUSE-SU-2016:0377","refsource":"SUSE","url":"http://lists.opensuse.org/opensuse-security-announce/2016-02/msg00016.html"},{"name":"DSA-3453","refsource":"DEBIAN","url":"http://www.debian.org/security/2016/dsa-3453"},{"name":"https://mariadb.com/kb/en/mariadb/mariadb-5547-release-notes/","refsource":"CONFIRM","url":"https://mariadb.com/kb/en/mariadb/mariadb-5547-release-notes/"},{"name":"https://dev.mysql.com/doc/relnotes/mysql/5.5/en/news-5-5-47.html","refsource":"CONFIRM","url":"https://dev.mysql.com/doc/relnotes/mysql/5.5/en/news-5-5-47.html"},{"name":"openSUSE-SU-2016:1686","refsource":"SUSE","url":"http://lists.opensuse.org/opensuse-security-announce/2016-06/msg00053.html"},{"name":"https://mariadb.com/kb/en/mariadb/mariadb-10110-release-notes/","refsource":"CONFIRM","url":"https://mariadb.com/kb/en/mariadb/mariadb-10110-release-notes/"},{"name":"RHSA-2016:0705","refsource":"REDHAT","url":"http://rhn.redhat.com/errata/RHSA-2016-0705.html"},{"name":"https://dev.mysql.com/doc/relnotes/mysql/5.6/en/news-5-6-28.html","refsource":"CONFIRM","url":"https://dev.mysql.com/doc/relnotes/mysql/5.6/en/news-5-6-28.html"}]}}}},"cveMetadata":{"assignerOrgId":"43595867-4340-4103-b7a2-9a5208d29a85","assignerShortName":"oracle","cveId":"CVE-2016-0546","datePublished":"2016-01-21T02:00:00.000Z","dateReserved":"2015-12-09T00:00:00.000Z","dateUpdated":"2024-08-05T22:22:55.686Z","state":"PUBLISHED"},"dataType":"CVE_RECORD","dataVersion":"5.1"},"nvd":{"publishedDate":"2016-01-21 03:01:33","lastModifiedDate":"2026-05-06 22:30:45","problem_types":["NVD-CWE-noinfo","n/a"],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:C/I:C/A:C","baseScore":7.2,"accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE"},"baseSeverity":"HIGH","exploitabilityScore":3.9,"impactScore":10,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:canonical:ubuntu_linux:12.04:*:*:*:lts:*:*:*","matchCriteriaId":"B6B7CAD7-9D4E-4FDB-88E3-1E583210A01F"},{"vulnerable":true,"criteria":"cpe:2.3:o:canonical:ubuntu_linux:14.04:*:*:*:lts:*:*:*","matchCriteriaId":"B5A6F2F3-4894-4392-8296-3B8DD2679084"},{"vulnerable":true,"criteria":"cpe:2.3:o:canonical:ubuntu_linux:15.04:*:*:*:*:*:*:*","matchCriteriaId":"F38D3B7E-8429-473F-BB31-FC3583EE5A5B"},{"vulnerable":true,"criteria":"cpe:2.3:o:canonical:ubuntu_linux:15.10:*:*:*:*:*:*:*","matchCriteriaId":"E88A537F-F4D0-46B9-9E37-965233C2A355"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:mariadb:mariadb:*:*:*:*:*:*:*:*","versionStartIncluding":"5.5.20","versionEndExcluding":"5.5.47","matchCriteriaId":"F2EA70BB-425F-4E0F-A618-F72258430EEE"},{"vulnerable":true,"criteria":"cpe:2.3:a:mariadb:mariadb:*:*:*:*:*:*:*:*","versionStartIncluding":"10.0.0","versionEndExcluding":"10.0.23","matchCriteriaId":"889BD0D7-BB02-4317-A9F1-C6E5E03F16D4"},{"vulnerable":true,"criteria":"cpe:2.3:a:mariadb:mariadb:*:*:*:*:*:*:*:*","versionStartIncluding":"10.1.0","versionEndExcluding":"10.1.10","matchCriteriaId":"C682E800-3908-422D-91FE-4C2956691CEB"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:enterprise_linux:6.0:*:*:*:*:*:*:*","matchCriteriaId":"2F6AB192-9D7D-4A9A-8995-E53A9DE9EAFC"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:enterprise_linux:7.0:*:*:*:*:*:*:*","matchCriteriaId":"142AD0DD-4CF3-4D74-9442-459CE3347E3A"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:mysql:*:*:*:*:*:*:*:*","versionStartIncluding":"5.5.0","versionEndIncluding":"5.5.46","matchCriteriaId":"124A9D43-F7FE-4E88-AAF5-C5F2214FC9A3"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:mysql:*:*:*:*:*:*:*:*","versionStartIncluding":"5.6.0","versionEndIncluding":"5.6.27","matchCriteriaId":"244C291E-590F-4EB3-B21A-C22EC5BBF93A"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:mysql:*:*:*:*:*:*:*:*","versionStartIncluding":"5.7.0","versionEndIncluding":"5.7.9","matchCriteriaId":"AF18143D-C98A-41E7-B71D-CC6AA5172463"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:oracle:solaris:11.3:*:*:*:*:*:*:*","matchCriteriaId":"79A602C5-61FE-47BA-9786-F045B6C6DBA8"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:oracle:linux:7:*:*:*:*:*:*:*","matchCriteriaId":"104DA87B-DEE4-4262-AE50-8E6BC43B228B"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:opensuse:leap:42.1:*:*:*:*:*:*:*","matchCriteriaId":"4863BE36-D16A-4D75-90D9-FD76DB5B48B7"},{"vulnerable":true,"criteria":"cpe:2.3:o:opensuse:opensuse:13.2:*:*:*:*:*:*:*","matchCriteriaId":"03117DF1-3BEC-4B8D-AD63-DBBDB2126081"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:enterprise_linux_desktop:7.0:*:*:*:*:*:*:*","matchCriteriaId":"33C068A4-3780-4EAB-A937-6082DF847564"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:enterprise_linux_hpc_node:7.0:*:*:*:*:*:*:*","matchCriteriaId":"3C84489B-B08C-4854-8A12-D01B6E45CF79"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:enterprise_linux_hpc_node_eus:7.2:*:*:*:*:*:*:*","matchCriteriaId":"39A901D6-0874-46A4-92A8-5F72C7A89E85"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:enterprise_linux_server:7.0:*:*:*:*:*:*:*","matchCriteriaId":"51EF4996-72F4-4FA4-814F-F5991E7A8318"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:enterprise_linux_server_aus:7.2:*:*:*:*:*:*:*","matchCriteriaId":"1C8D871B-AEA1-4407-AEE3-47EC782250FF"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:enterprise_linux_server_eus:7.2:*:*:*:*:*:*:*","matchCriteriaId":"44B067C7-735E-43C9-9188-7E1522A02491"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:enterprise_linux_workstation:7.0:*:*:*:*:*:*:*","matchCriteriaId":"825ECE2D-E232-46E0-A047-074B34DB1E97"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:*","matchCriteriaId":"C11E6FB0-C8C0-4527-9AA0-CB9B316F8F43"}]}]}]},"legacy_mitre":{"record":{"CveYear":"2016","CveId":"546","Ordinal":"1","Title":"CVE-2016-0546","CVE":"CVE-2016-0546","Year":"2016"},"notes":[{"CveYear":"2016","CveId":"546","Ordinal":"1","NoteData":"Unspecified vulnerability in Oracle MySQL 5.5.46 and earlier, 5.6.27 and earlier, and 5.7.9 and MariaDB before 5.5.47, 10.0.x before 10.0.23, and 10.1.x before 10.1.10 allows local users to affect confidentiality, integrity, and availability via unknown vectors related to Client.  NOTE: the previous information is from the January 2016 CPU. Oracle has not commented on third-party claims that these are multiple buffer overflows in the mysqlshow tool that allow remote database servers to have unspecified impact via a long table or database name.","Type":"Description","Title":"CVE-2016-0546"},{"CveYear":"2016","CveId":"546","Ordinal":"2","NoteData":"2016-01-20","Type":"Other","Title":"Published"},{"CveYear":"2016","CveId":"546","Ordinal":"3","NoteData":"2018-01-04","Type":"Other","Title":"Modified"}]}}}