Lucene search

K
freebsdFreeBSD22373C43-D728-11E6-A9A5-B499BAEBFEAF
HistorySep 13, 2016 - 12:00 a.m.

MySQL -- multiple vulnerabilities

2016-09-1300:00:00
vuxml.freebsd.org
91

7 High

CVSS3

Attack Vector

LOCAL

Attack Complexity

HIGH

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H

6.9 Medium

CVSS2

Access Vector

LOCAL

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:L/AC:M/Au:N/C:C/I:C/A:C

0.118 Low

EPSS

Percentile

95.2%

The MySQL project reports:

CVE-2016-3492: Remote security vulnerability in β€˜Server: Optimizer’
sub component.
CVE-2016-5616, CVE-2016-6663: Race condition allows local users with
certain permissions to gain privileges by leveraging use of my_copystat
by REPAIR TABLE to repair a MyISAM table.
CVE-2016-5617, CVE-2016-6664: mysqld_safe, when using file-based
logging, allows local users with access to the mysql account to gain
root privileges via a symlink attack on error logs and possibly other
files.
CVE-2016-5624: Remote security vulnerability in β€˜Server: DML’ sub
component.
CVE-2016-5626: Remote security vulnerability in β€˜Server: GIS’ sub
component.
CVE-2016-5629: Remote security vulnerability in β€˜Server: Federated’
sub component.
CVE-2016-8283: Remote security vulnerability in β€˜Server: Types’ sub
component.

7 High

CVSS3

Attack Vector

LOCAL

Attack Complexity

HIGH

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H

6.9 Medium

CVSS2

Access Vector

LOCAL

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:L/AC:M/Au:N/C:C/I:C/A:C

0.118 Low

EPSS

Percentile

95.2%