[email protected]CVE-2016-5440

HistoryJul 21, 2016 - 10:14 a.m.

CVE-2016-5440

2016-07-2110:14:00

NVD-CWE-noinfo

[email protected]

web.nvd.nist.gov

101

cve-2016-5440

oracle mysql

mariadb

vulnerability

availability

server rbr

nvd

4.9 Medium

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

HIGH

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H

5.4 Medium

AI Score

Confidence

Low

4 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

SINGLE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:L/Au:S/C:N/I:N/A:P

0.002 Low

EPSS

Percentile

58.3%

JSON

Unspecified vulnerability in Oracle MySQL 5.5.49 and earlier, 5.6.30 and earlier, and 5.7.12 and earlier and MariaDB before 5.5.50, 10.0.x before 10.0.26, and 10.1.x before 10.1.15 allows remote administrators to affect availability via vectors related to Server: RBR.

CPENameOperatorVersion
ibm:powerkvmibm powerkvmeq3.1
ibm:powerkvmibm powerkvmeq2.1
mariadb:mariadbmariadblt5.5.50
mariadb:mariadbmariadblt10.0.26
mariadb:mariadbmariadblt10.1.15
oracle:mysqloracle mysqlle5.6.30
oracle:mysqloracle mysqlle5.7.12
oracle:mysqloracle mysqlle5.5.49
oracle:linuxoracle linuxeq7
debian:debian_linuxdebian debian linuxeq8.0

CPE	Name	Operator	Version
ibm:powerkvm	ibm powerkvm	eq	3.1
ibm:powerkvm	ibm powerkvm	eq	2.1
mariadb:mariadb	mariadb	lt	5.5.50
mariadb:mariadb	mariadb	lt	10.0.26
mariadb:mariadb	mariadb	lt	10.1.15
oracle:mysql	oracle mysql	le	5.6.30
oracle:mysql	oracle mysql	le	5.7.12
oracle:mysql	oracle mysql	le	5.5.49
oracle:linux	oracle linux	eq	7
debian:debian_linux	debian debian linux	eq	8.0