PT-2016-1778

Name of the Vulnerable Software and Affected Versions Oracle MySQL versions 5.7.10 and earlier Description The issue is related to errors in the code of the MySQL database management system, specifically in the Optimizer component. It allows an attacker, potentially with network access, to impact...

Oracle MySQL 5.6.x < 5.6.27 Multiple DoS

Binary data 9236.prm...

Amazon Linux AMI : mysql56 (ALAS-2016-684)

wolfSSL formerly CyaSSL before 3.6.8 does not properly handle faults associated with the Chinese Remainder Theorem CRT process when allowing ephemeral key exchange without low memory optimizations on a server, which makes it easier for remote attackers to obtain private RSA keys by capturing TLS...

Debian Security Advisory DSA 3546-1 (optipng - security update)

Hans Jerry Illikainen discovered that missing input sanitising in the BMP processing code of the optipng PNG optimiser may result in denial of service or the execution of arbitrary code if a malformed file is processed. OpenVAS Vulnerability Test $Id: deb3546.nasl 6608 2017-07-07 12:05:05Z cfisch...

Droid Optimizer - Runtime privilege escalation, WebView code execution vulnerabilities

HackApp vulnerability scanner discovered that application Droid Optimizer published at the 'play' market has multiple vulnerabilities...

Avira Android Optimizer - Customized SSL, Dangerous filesystem permissions, Redefined SSL Common Names verifier vulnerabilities

HackApp vulnerability scanner discovered that application Avira Android Optimizer published at the 'play' market has multiple vulnerabilities...

Contacts Optimizer - External URLs, SD-card access, Unsafe deleting vulnerabilities

HackApp vulnerability scanner discovered that application Contacts Optimizer published at the 'play' market has multiple vulnerabilities...

Internet Booster & Optimizer - Customized SSL, Dangerous filesystem permissions, Runtime privilege escalation vulnerabilities

HackApp vulnerability scanner discovered that application Internet Booster & Optimizer published at the 'play' market has multiple vulnerabilities...

mysql: unspecified vulnerability in subcomponent: Server: Optimizer (CPU January 2016)

Unspecified vulnerability in Oracle MySQL 5.5.46 and earlier, 5.6.27 and earlier, and 5.7.9 and MariaDB before 5.5.47, 10.0.x before 10.0.23, and 10.1.x before 10.1.10 allows remote authenticated users to affect availability via unknown vectors related to Optimizer...

mysql: unspecified vulnerability in subcomponent: Server: Optimizer (CPU April 2016)

Unspecified vulnerability in Oracle MySQL 5.5.46 and earlier allows local users to affect availability via vectors related to Optimizer...

mysql: unspecified vulnerability in subcomponent: Server: Optimizer (CPU January 2016)

Unspecified vulnerability in Oracle MySQL 5.5.46 and earlier and MariaDB before 5.5.47, 10.0.x before 10.0.23, and 10.1.x before 10.1.10 allows remote authenticated users to affect availability via unknown vectors related to Optimizer...

openSUSE Security Update : MySQL (openSUSE-2016-169)

This update to MySQL 5.6.28 fixes the following issues bsc962779 : - CVE-2015-7744: Lack of verification against faults associated with the Chinese Remainder Theorem CRT process when allowing ephemeral key exchange without low memory optimizations on a server, which makes it easier for remote...

Security update for MySQL (important)

This update to MySQL 5.6.28 fixes the following issues bsc962779: - CVE-2015-7744: Lack of verification against faults associated with the Chinese Remainder Theorem CRT process when allowing ephemeral key exchange without low memory optimizations on a server, which makes it easier for remote...

openSUSE Security Update : MySQL (openSUSE-2016-165)

This update to MySQL 5.6.28 fixes the following issues bsc962779 : - CVE-2015-7744: Lack of verification against faults associated with the Chinese Remainder Theorem CRT process when allowing ephemeral key exchange without low memory optimizations on a server, which makes it easier for remote...

Oracle MySQL 5.5.x < 5.5.32 Optimizer DoS (January 2016 CPU)

The version of Oracle MySQL installed on the remote host is 5.5.x prior to 5.5.32. It is, therefore, affected by an unspecified flaw in the Optimizer subcomponent. An authenticated, remote attacker can exploit this to cause a denial of service condition. C Tenable Network Security, Inc...

The vulnerability of the MySQL database management system allows a hacker to cause a service failure.

The vulnerability of the Server: Optimizer component of the MySQL database management system is related to errors in the code. Exploiting this vulnerability can allow a malicious actor to cause the system to become unresponsive or, in rare cases, to crash through network packets...

The vulnerability of the MySQL database management system allows a hacker to cause a service failure.

The vulnerability of the Server: Optimizer component of the MySQL database management system is related to errors in the code. Exploiting this vulnerability can allow a malicious actor to cause the system to become unresponsive or, in rare cases, to crash through network packets...

Oracle MySQL 5.7.x < 5.7.10 Multiple Vulnerabilities (January 2016 CPU)

The version of Oracle MySQL installed on the remote host is 5.7.x prior to 5.7.10. It is, therefore, affected by the following vulnerabilities : - An unspecified flaw exists in the Client subcomponent. A local attacker can exploit this to execute arbitrary code. CVE-2016-0546 - An unspecified fla...

Oracle MySQL 5.6.x < 5.6.12 Optimizer DoS (January 2016 CPU)

The version of Oracle MySQL installed on the remote host is 5.6.x prior to 5.6.12. It is, therefore, affected by an unspecified flaw in the Optimizer subcomponent. An authenticated, remote attacker can exploit this to cause a denial of service condition. C Tenable Network Security, Inc...

The vulnerability of the MySQL database management system allows a hacker to cause a service failure.

The vulnerability of the Server: Optimizer component of the MySQL database management system is related to errors in the code. Exploiting this vulnerability can allow a malicious actor to cause the system to become unresponsive or, in rare cases, to crash through network packets...