4

CVE-2016-0611

Unspecified vulnerability in Oracle MySQL 5.6.27 and earlier and 5.7.9 allows remote authenticated users to affect availability via unknown vectors related to Optimizer.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Canonical ≫ Ubuntu Linux Version 12.04 SwEdition lts
Canonical ≫ Ubuntu Linux Version 14.04 SwEdition lts
Canonical ≫ Ubuntu Linux Version 15.04
Canonical ≫ Ubuntu Linux Version 15.10
Oracle ≫ Mysql Version <= 5.6.27
Oracle ≫ Mysql Version 5.7.9
Opensuse ≫ Leap Version 42.1
Opensuse ≫ Opensuse Version 13.1
Opensuse ≫ Opensuse Version 13.2
Redhat ≫ Enterprise Linux Version 6.0
Redhat ≫ Enterprise Linux Version 7.0
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 3.2% 0.865
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
NIST 4 8 2.9
AV:N/AC:L/Au:S/C:N/I:N/A:P
CWE-284 Improper Access Control

The product does not restrict or incorrectly restricts access to a resource from an unauthorized actor.

http://www.oracle.com/technetwork/topics/security/cpujan2016-2367955.html
Patch
Vendor Advisory
http://rhn.redhat.com/errata/RHSA-2016-0705.html
Third Party Advisory
http://lists.opensuse.org/opensuse-security-announce/2016-02/msg00015.html
Third Party Advisory
http://lists.opensuse.org/opensuse-security-announce/2016-02/msg00016.html
Third Party Advisory
http://www.securitytracker.com/id/1034708
Third Party Advisory
VDB Entry
http://www.ubuntu.com/usn/USN-2881-1
Third Party Advisory
http://www.securityfocus.com/bid/81164
Third Party Advisory
VDB Entry