8.1

CVE-2016-3477

Unspecified vulnerability in Oracle MySQL 5.5.49 and earlier, 5.6.30 and earlier, and 5.7.12 and earlier and MariaDB before 5.5.50, 10.0.x before 10.0.26, and 10.1.x before 10.1.15 allows local users to affect confidentiality, integrity, and availability via vectors related to Server: Parser.

Data is provided by the National Vulnerability Database (NVD)
IbmPowerkvm Version2.1
IbmPowerkvm Version3.1
OracleMysql Version >= 5.5.0 <= 5.5.49
OracleMysql Version >= 5.6.0 <= 5.6.30
OracleMysql Version >= 5.7.0 <= 5.7.12
OracleLinux Version7
MariadbMariadb Version >= 5.5.20 < 5.5.50
MariadbMariadb Version >= 10.0.0 < 10.0.26
MariadbMariadb Version >= 10.1.0 < 10.1.15
DebianDebian Linux Version8.0
CanonicalUbuntu Linux Version12.04 SwEditionlts
CanonicalUbuntu Linux Version14.04 SwEditionlts
CanonicalUbuntu Linux Version15.10
CanonicalUbuntu Linux Version16.04 SwEditionlts
Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.
EPSS Metriken
Type Source Score Percentile
EPSS FIRST.org 0.16% 0.373
CVSS Metriken
Source Base Score Exploit Score Impact Score Vector string
nvd@nist.gov 8.1 1.4 6
CVSS:3.0/AV:L/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:H
nvd@nist.gov 4.1 2.7 6.4
AV:L/AC:M/Au:S/C:P/I:P/A:P
http://www.securityfocus.com/bid/91787
Third Party Advisory
VDB Entry
http://www.securitytracker.com/id/1036362
Third Party Advisory
VDB Entry
http://www.securityfocus.com/bid/91902
Third Party Advisory
VDB Entry