CVE-2016-5011

CVE-2016-5011 affects the libblkid component of util-linux (partitions/dos.c). The root cause is a vulnerability in parse_dos_extended that allows a crafted MSDOS partition table with an extended partition boot record at offset zero to cause memory consumption leading to a denial of service. The ...

CVE-2015-3217

CVE-2015-3217 affects PCRE (PCRE 7.8, 8.32–8.37) and PCRE2 10.10, allowing remote attackers to cause a DoS via a crafted regex by triggering a stack-based buffer overflow; multiple advisories reference this in PCRE-related updates. The connected documents provide concrete vulnerability details bu...

CVE-2016-3477

CVE-2016-3477 affects Oracle MySQL Server (versions before 5.5.50, 5.6 before 5.6.30, 5.7 before 5.7.12) and MariaDB (before 5.5.50, 10.0.x before 10.0.26, 10.1.x before 10.1.15). The vulnerability is in the Server: Parser component and can allow a local user to impact confidentiality, integrity,...

CVE-2016-0647

CVE-2016-0647 corresponds to an unspecified vulnerability in MySQL/MariaDB affecting Full-Text Search (FTS) that allows local users to impact availability. Affected: Oracle MySQL 5.5.48 and earlier, 5.6.29 and earlier, 5.7.11 and earlier; MariaDB before 5.5.49, 10.0.x before 10.0.25, and 10.1.x b...

CVE-2016-5440

CVE-2016-5440 is an unspecified vulnerability in Oracle MySQL Server and MariaDB that can impact availability via Server: RBR. Affected are MySQL 5.5.49 and earlier, 5.6.30 and earlier, 5.7.12 and earlier, and MariaDB before 5.5.50; newer upstream fixes exist for MariaDB (e.g., 5.5.50, 10.0.26, 1...

CVE-2016-0648

CVE-2016-0648 is an unspecified local-privilege/availability vulnerability in Oracle MySQL (versions 5.5.48 and earlier, 5.6.29 and earlier, 5.7.11 and earlier) and in MariaDB before 5.5.49, 10.0.x before 10.0.25, and 10.1.x before 10.1.14 that can affect availability via PS-related vectors. Conn...

CVE-2015-5073

The CVE-2015-5073 issue affects PCRE (pcre_compile.c: find_fixedlength) before version 8.38, causing a heap-based buffer overflow that can crash a program or reveal heap data and may bypass ASLR when processing a crafted regular expression (closing parenthesis). The vulnerability is documented ac...

CVE-2016-3521

CVE-2016-3521 affects multiple MySQL/MariaDB releases with an unspecified vulnerability in the Server: Types component that can allow remote authenticated users to affect availability. Affected: MySQL 5.5.49 and earlier, 5.6.30 and earlier, 5.7.12 and earlier; MariaDB before 5.5.50; 10.0.x before...

CVE-2016-0666

CVE-2016-0666 is an unspecified local-privilege/vulnerability in MySQL/MariaDB affecting multiple branches (MySQL 5.5.48 and earlier, 5.6.29 and earlier, 5.7.11 and earlier; MariaDB before 5.5.49, and some 10.x lines). The connected advisories confirm that this family of issues can impact availab...

CVE-2016-3615

CVE-2016-3615 affects Oracle MySQL and MariaDB: an unspecified vulnerability in the Server: DML component that can allow remote authenticated users to affect availability. Affected products/versions include MySQL 5.5.49 and earlier, 5.6.30 and earlier, 5.7.12 and earlier; MariaDB before 5.5.50, 1...

CVE-2016-0643

CVE-2016-0643 is an unspecified vulnerability affecting Oracle MySQL up to 5.7.11 and MariaDB up to 5.5.49, 10.0.x up to 10.0.25, and 10.1.x up to 10.1.14, allowing local users to affect confidentiality through DML-related vectors. Public documents confirm affected products/versions and indicate ...

CVE-2016-0641

CVE-2016-0641 affects multiple MySQL/MariaDB lineages with a MyISAM-related vulnerability that can impact confidentiality and availability when untrusted local users access certain database components. Affected: Oracle MySQL 5.5.47 and earlier, 5.6.28 and earlier, 5.7.10 and earlier; MariaDB befo...

CVE-2016-0644

CVE-2016-0644 is an unspecified local-vulnerability in Oracle MySQL/MariaDB affecting DDL paths that can impact availability. Public HOTFIXes exist: MariaDB 10.0.25 (per Debian DSA-3595-1) and MariaDB 5.5.50 (per CentOS CentOS-announce 2016:1602). IBM/PowerKVM advisories also reference this CVE w...

CVE-2016-0640

CVE-2016-0640 is an unspecified MySQL/MariaDB server vulnerability affecting DML operations with partial integrity/availability impact. Public notices in 2016 (Debian DSA-3595, CentOS/CentOS-announce, Red Hat advisories) show fixes across MariaDB/MySQL branches (e.g., MariaDB 10.0.x and MySQL 5.5...

CVE-2016-0646

CVE-2016-0646 is an unspecified vulnerability in Oracle MySQL Server (DML-related) that can affect availability via local access. Connected advisories confirm multiple MariaDB/MySQL fixes and provide concrete remediations: upgrade to fixed upstream versions (e.g., MariaDB 10.0.25+ per Debian DSA-...

CVE-2016-0650

CVE-2016-0650 is described in the connected documents as an unspecified vulnerability in Oracle MySQL Server related to the Server: Replication component that could allow a local/remote attacker to impact availability (DoS). The public details indicate the issue affects MySQL/MariaDB families acr...

CVE-2016-5444

CVE-2016-5444 is an unspecified vulnerability in Oracle MySQL Server and MariaDB that allows remote attackers to affect confidentiality via the Server: Connection vector. Affected are MySQL: 5.5.48 and earlier, 5.6.29 and earlier, 5.7.11 and earlier; MariaDB before 5.5.49, 10.0.x before 10.0.25, ...

CVE-2016-0649

CVE-2016-0649 is cited in IBM Security Bulletins as an unspecified vulnerability in Oracle MySQL Server related to the Server: PS component that could cause a partial availability DoS. Affected product in this IBM bulletin is PowerKVM (versions 2.1 and 3.1); remediation is to apply updates via yu...

CVE-2016-3452

CVE-2016-3452 is an unspecified vulnerability in Oracle MySQL Server affecting versions up to MySQL 5.5.48/5.6.29/5.7.10 and MariaDB up to 5.5.49 (and related 10.x branches). The vulnerability relates to the Server: Security: Encryption component and can allow remote attackers to affect confident...

CVE-2016-3044

CVE-2016-3044 affects IBM PowerKVM's Linux kernel component for PowerKVM 2.1 and 3.1. The vulnerability allows a guest OS user to cause a denial of service by making the host loop infinitely with interrupts disabled, effectively hanging the host. IBM’s advisory specifies affected ranges: PowerKVM...