Veracode Vulnerability DatabaseVERACODE:16855Memory Corruption
0.006 Low
EPSS
Percentile
78.5%
Oracle MySQL Server is vulnerable to memory corruption attacks. A remote authenticated user is able to inject an unknown input via the component DML, allowing memory corruption attacks leading to denial of service.
| CPE | Name | Operator | Version |
|---|---|---|---|
| rh-mysql56-mysql | eq | 5.6.26__1.el6 | |
| rh-mysql56-mysql | eq | 5.6.24__3.el6 | |
| rh-mysql56-mysql | eq | 5.6.26__1.el6 | |
| rh-mysql56-mysql | eq | 5.6.24__3.el6 |
References
lists.opensuse.org/opensuse-security-announce/2016-02/msg00015.html
lists.opensuse.org/opensuse-security-announce/2016-02/msg00016.html
rhn.redhat.com/errata/RHSA-2016-0705.html
www.oracle.com/technetwork/topics/security/cpuapr2016-2881694.html#AppendixMSQL
www.oracle.com/technetwork/topics/security/cpujan2016-2367955.html
www.oracle.com/technetwork/topics/security/cpujan2016-2367955.html#AppendixMSQL
www.oracle.com/technetwork/topics/security/cpuoct2015-2367953.html#AppendixMSQL
www.securityfocus.com/bid/81077
www.securitytracker.com/id/1034708
www.ubuntu.com/usn/USN-2881-1
access.redhat.com/errata/RHSA-2016:0705
access.redhat.com/security/cve/CVE-2016-3452
access.redhat.com/security/cve/CVE-2016-3471
access.redhat.com/security/cve/CVE-2016-5444
access.redhat.com/security/updates/classification/#critical
dev.mysql.com/doc/relnotes/mysql/5.6/en/news-5-6-27.html
dev.mysql.com/doc/relnotes/mysql/5.6/en/news-5-6-28.html
dev.mysql.com/doc/relnotes/mysql/5.6/en/news-5-6-29.html
dev.mysql.com/doc/relnotes/mysql/5.6/en/news-5-6-30.html
Related
