Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
centosCentOS ProjectCESA-2016:1602
HistoryAug 12, 2016 - 11:27 a.m.

mariadb security update

2016-08-1211:27:37
CentOS Project
lists.centos.org
76

8.1 High

CVSS3

Attack Vector

LOCAL

Attack Complexity

HIGH

Privileges Required

NONE

User Interaction

NONE

Scope

CHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.0/AV:L/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:H

6.8 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

SINGLE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

COMPLETE

AV:N/AC:L/Au:S/C:N/I:N/A:C

0.005 Low

EPSS

Percentile

75.8%

JSON

CentOS Errata and Security Advisory CESA-2016:1602

MariaDB is a multi-user, multi-threaded SQL database server that is binary compatible with MySQL.

The following packages have been upgraded to a newer upstream version: mariadb (5.5.50).

Security Fix(es):

  • This update fixes several vulnerabilities in the MariaDB database server. Information about these flaws can be found on the Oracle Critical Patch Update Advisory pages, listed in the References section. (CVE-2016-0640, CVE-2016-0641, CVE-2016-0643, CVE-2016-0644, CVE-2016-0646, CVE-2016-0647, CVE-2016-0648, CVE-2016-0649, CVE-2016-0650, CVE-2016-0666, CVE-2016-3452, CVE-2016-3477, CVE-2016-3521, CVE-2016-3615, CVE-2016-5440, CVE-2016-5444)

Merged security bulletin from advisories:
https://lists.centos.org/pipermail/centos-announce/2016-August/084197.html

Affected packages:
mariadb
mariadb-bench
mariadb-devel
mariadb-embedded
mariadb-embedded-devel
mariadb-libs
mariadb-server
mariadb-test

Upstream details at:
https://access.redhat.com/errata/RHSA-2016:1602

OSVersionArchitecturePackageVersionFilename
CentOS7x86_64mariadb< 5.5.50-1.el7_2mariadb-5.5.50-1.el7_2.x86_64.rpm
CentOS7x86_64mariadb-bench< 5.5.50-1.el7_2mariadb-bench-5.5.50-1.el7_2.x86_64.rpm
CentOS7i686mariadb-devel< 5.5.50-1.el7_2mariadb-devel-5.5.50-1.el7_2.i686.rpm
CentOS7x86_64mariadb-devel< 5.5.50-1.el7_2mariadb-devel-5.5.50-1.el7_2.x86_64.rpm
CentOS7i686mariadb-embedded< 5.5.50-1.el7_2mariadb-embedded-5.5.50-1.el7_2.i686.rpm
CentOS7x86_64mariadb-embedded< 5.5.50-1.el7_2mariadb-embedded-5.5.50-1.el7_2.x86_64.rpm
CentOS7i686mariadb-embedded-devel< 5.5.50-1.el7_2mariadb-embedded-devel-5.5.50-1.el7_2.i686.rpm
CentOS7x86_64mariadb-embedded-devel< 5.5.50-1.el7_2mariadb-embedded-devel-5.5.50-1.el7_2.x86_64.rpm
CentOS7i686mariadb-libs< 5.5.50-1.el7_2mariadb-libs-5.5.50-1.el7_2.i686.rpm
CentOS7x86_64mariadb-libs< 5.5.50-1.el7_2mariadb-libs-5.5.50-1.el7_2.x86_64.rpm
Rows per page:
1-10 of 121

Related

ibm 2
redhat 7
nessus 59
openvas 45
oraclelinux 1
debian 10
osv 7
suse 8
mageia 2
f5 4
amazon 3
ubuntu 2
fedora 2
freebsd 2
kaspersky 2
veracode 6
prion 7
mariadbunix 6
ubuntucve 7
cve 8
redhatcve 3
alpinelinux 6
ibm
ibm
Security Bulletin: Multiple vulnerabilities in mariadb affect PowerKVM
2018-06-18 01:33:09
Security Bulletin: IBM Security Guardium is affected by Open Source Oracle MySQL Vulnerabilities (multiple CVEs)
2018-06-16 21:50:33
redhat
redhat
(RHSA-2016:1602) Important: mariadb security update
2016-08-11 12:05:12
(RHSA-2016:1604) Important: rh-mariadb100-mariadb security update
2016-08-11 12:06:21
(RHSA-2016:1603) Important: mariadb55-mariadb security update
2016-08-11 12:05:47
nessus
nessus
EulerOS 2.0 SP1 : mariadb (EulerOS-SA-2016-1035)
2017-05-01 00:00:00
RHEL 7 : mariadb (RHSA-2016:1602)
2016-08-12 00:00:00
Scientific Linux Security Update : mariadb on SL7.x x86_64 (20160811)
2016-08-17 00:00:00
openvas
openvas
Huawei EulerOS: Security Advisory for mariadb (EulerOS-SA-2016-1035)
2020-01-23 00:00:00
CentOS Update for mariadb CESA-2016:1602 centos7
2016-08-13 00:00:00
RedHat Update for mariadb RHSA-2016:1602-01
2016-08-12 00:00:00
oraclelinux
oraclelinux
mariadb security update
2016-08-11 00:00:00
debian
debian
[SECURITY] [DLA 447-1] mysql-5.5 security update
2016-04-30 09:29:15
[SECURITY] [DSA 3557-1] mysql-5.5 security update
2016-04-26 17:32:19
[SECURITY] [DSA 3595-1] mariadb-10.0 security update
2016-06-05 19:51:35
osv
osv
mysql-5.5 - security update
2016-04-26 00:00:00
mysql-5.5 - security update
2016-07-29 00:00:00
CVE-2016-5444
2016-07-21 10:14:00
suse
suse
Security update for mysql (important)
2016-05-11 18:10:17
Security update for mysql (important)
2016-09-20 20:09:32
Security update for mysql-community-server (important)
2016-05-18 14:14:23
mageia
mageia
Updated mariadb packages fix security vulnerability
2016-07-27 00:59:16
Updated mariadb packages fix security vulnerabilities
2016-05-18 23:14:22
f5
f5
SOL70204455 - Multiple MySQL vulnerabilities
2016-08-05 00:00:00
K70204455 : Multiple MySQL vulnerabilities
2016-08-05 00:00:00
K42204713 : Multiple MySQL vulnerabilities
2016-09-30 00:00:00
amazon
amazon
Important: mysql55
2016-08-17 13:30:00
Critical: mysql56
2016-05-18 14:00:00
Important: mysql56
2016-08-17 13:30:00
ubuntu
ubuntu
MySQL vulnerabilities
2016-04-21 00:00:00
MySQL vulnerabilities
2016-04-25 00:00:00
fedora
fedora
[SECURITY] Fedora 22 Update: community-mysql-5.6.30-1.fc22
2016-05-16 14:58:35
[SECURITY] Fedora 23 Update: community-mysql-5.6.30-1.fc23
2016-05-15 05:37:20
freebsd
freebsd
MySQL -- multiple vulnerabilities
2016-04-19 00:00:00
MySQL -- Multiple vulnerabilities
2016-07-20 00:00:00
kaspersky
kaspersky
KLA10794 Multiple vulnerabilities in Oracle MySQL
2016-04-19 00:00:00
KLA10847 Multiple vulnerabilities in Oracle MySQL
2016-07-19 00:00:00
veracode
veracode
Information Disclosure
2019-05-02 05:29:22
Denial Of Service (DoS)
2019-05-02 05:39:41
Information Disclosure
2019-05-02 05:29:22
prion
prion
Design/Logic Flaw
2016-07-21 10:12:00
Design/Logic Flaw
2016-04-21 10:59:00
Design/Logic Flaw
2016-07-21 10:14:00
mariadbunix
mariadbunix
CVE-2016-0650
2016-04-21 10:59:00
CVE-2016-5444
2016-07-21 10:14:00
CVE-2016-0643
2016-04-21 10:59:00
ubuntucve
ubuntucve
CVE-2016-0650
2016-04-20 00:00:00
CVE-2016-5440
2016-07-20 00:00:00
CVE-2016-5444
2016-07-21 00:00:00
cve
cve
CVE-2016-0650
2016-04-21 10:59:00
CVE-2016-0643
2016-04-21 10:59:00
CVE-2016-3452
2016-07-21 10:12:00
redhatcve
redhatcve
CVE-2016-5440
2016-07-20 10:19:31
CVE-2016-5444
2016-07-20 10:19:48
CVE-2016-3452
2016-07-20 09:48:40
alpinelinux
alpinelinux
CVE-2016-0643
2016-04-21 10:59:00
CVE-2016-5440
2016-07-21 10:14:00
CVE-2016-0647
2016-04-21 10:59:00

8.1 High

CVSS3

Attack Vector

LOCAL

Attack Complexity

HIGH

Privileges Required

NONE

User Interaction

NONE

Scope

CHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.0/AV:L/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:H

6.8 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

SINGLE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

COMPLETE

AV:N/AC:L/Au:S/C:N/I:N/A:C

0.005 Low

EPSS

Percentile

75.8%

JSON
Related for CESA-2016:1602
ibm2redhat7nessus59openvas45oraclelinux1debian10osv7suse8mageia2f54amazon3ubuntu2fedora2freebsd2kaspersky2veracode6prion7mariadbunix6ubuntucve7cve8redhatcve3alpinelinux6