Veracode Vulnerability DatabaseVERACODE:16853Denial Of Service (DoS)
3.5 Low
CVSS2
Access Vector
NETWORK
Access Complexity
MEDIUM
Authentication
SINGLE
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
PARTIAL
AV:N/AC:M/Au:S/C:N/I:N/A:P
Oracle MySQL Server is vulnerable to denial of service (DoS) attacks. An authenticated user is able to manipulate with an unknown input which leads to denial of service by crashing the application.
References
lists.fedoraproject.org/pipermail/package-announce/2016-February/177539.html
lists.opensuse.org/opensuse-security-announce/2015-12/msg00010.html
lists.opensuse.org/opensuse-security-announce/2015-12/msg00011.html
lists.opensuse.org/opensuse-updates/2016-02/msg00039.html
rhn.redhat.com/errata/RHSA-2016-0534.html
rhn.redhat.com/errata/RHSA-2016-0705.html
rhn.redhat.com/errata/RHSA-2016-1480.html
rhn.redhat.com/errata/RHSA-2016-1481.html
www.debian.org/security/2015/dsa-3377
www.debian.org/security/2015/dsa-3385
www.oracle.com/technetwork/topics/security/bulletinapr2016-2952098.html
www.oracle.com/technetwork/topics/security/cpuapr2016-2881694.html#AppendixMSQL
www.oracle.com/technetwork/topics/security/cpujan2016-2367955.html#AppendixMSQL
www.oracle.com/technetwork/topics/security/cpuoct2015-2367953.html
www.oracle.com/technetwork/topics/security/cpuoct2015-2367953.html#AppendixMSQL
www.oracle.com/technetwork/topics/security/linuxbulletinapr2016-2952096.html
www.securityfocus.com/bid/77153
www.securitytracker.com/id/1033894
www.ubuntu.com/usn/USN-2781-1
access.redhat.com/errata/RHSA-2016:0705
access.redhat.com/errata/RHSA-2016:1132
access.redhat.com/security/cve/CVE-2016-3452
access.redhat.com/security/cve/CVE-2016-3471
access.redhat.com/security/cve/CVE-2016-5444
access.redhat.com/security/updates/classification/#critical
dev.mysql.com/doc/relnotes/mysql/5.6/en/news-5-6-27.html
dev.mysql.com/doc/relnotes/mysql/5.6/en/news-5-6-28.html
dev.mysql.com/doc/relnotes/mysql/5.6/en/news-5-6-29.html
dev.mysql.com/doc/relnotes/mysql/5.6/en/news-5-6-30.html
www.suse.com/support/update/announcement/2016/suse-su-20160296-1.html
Related
3.5 Low
CVSS2
Access Vector
NETWORK
Access Complexity
MEDIUM
Authentication
SINGLE
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
PARTIAL
AV:N/AC:M/Au:S/C:N/I:N/A:P