Lucene search

Veracode Vulnerability DatabaseVERACODE:16857

HistoryMay 02, 2019 - 5:29 a.m.

Memory Corruption

2019-05-0205:29:18

Veracode Vulnerability Database

sca.analysiscenter.veracode.com

7.2 High

CVSS2

Access Vector

LOCAL

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:L/AC:L/Au:N/C:C/I:C/A:C

JSON

Oracle MySQL Server and MariaDB are vulnerable to memory corruption attacks. A local user is able to inject an unknown input via the component Client, allowing memory corruption attacks impacting in confidentiality, integrity, and availability…

CPENameOperatorVersion
rh-mysql56-mysqleq5.6.26__1.el6
rh-mysql56-mysqleq5.6.24__3.el6
rh-mariadb100-mariadbeq10.0.17__9.el6
rh-mariadb100-mariadbeq10.0.20__1.el6
mysql55-mysqleq5.5.37__5.el6
mysql55-mysqleq5.5.32__2.el6
mysql55-mysqleq5.5.45__1.el6
mysql55-mysqleq5.5.41__2.el6
mysql55-mysqleq5.5.36__1.1.el6
mysql55-mysqleq5.5.37__1.2.el6

Name	Operator	Version
rh-mysql56-mysql	eq	5.6.26__1.el6
rh-mysql56-mysql	eq	5.6.24__3.el6
rh-mariadb100-mariadb	eq	10.0.17__9.el6
rh-mariadb100-mariadb	eq	10.0.20__1.el6
mysql55-mysql	eq	5.5.37__5.el6
mysql55-mysql	eq	5.5.32__2.el6
mysql55-mysql	eq	5.5.45__1.el6
mysql55-mysql	eq	5.5.41__2.el6
mysql55-mysql	eq	5.5.36__1.1.el6
mysql55-mysql	eq	5.5.37__1.2.el6

Rows per page:

1-10 of 181

References

lists.opensuse.org/opensuse-security-announce/2016-02/msg00015.html

lists.opensuse.org/opensuse-security-announce/2016-02/msg00016.html

lists.opensuse.org/opensuse-security-announce/2016-06/msg00033.html

lists.opensuse.org/opensuse-security-announce/2016-06/msg00034.html

lists.opensuse.org/opensuse-security-announce/2016-06/msg00051.html

lists.opensuse.org/opensuse-security-announce/2016-06/msg00053.html

rhn.redhat.com/errata/RHSA-2016-0534.html

rhn.redhat.com/errata/RHSA-2016-0705.html

rhn.redhat.com/errata/RHSA-2016-1480.html

rhn.redhat.com/errata/RHSA-2016-1481.html

www.debian.org/security/2016/dsa-3453

www.debian.org/security/2016/dsa-3459

www.oracle.com/technetwork/topics/security/bulletinapr2016-2952098.html

www.oracle.com/technetwork/topics/security/cpuapr2016-2881694.html#AppendixMSQL

www.oracle.com/technetwork/topics/security/cpujan2016-2367955.html

www.oracle.com/technetwork/topics/security/cpujan2016-2367955.html#AppendixMSQL

www.oracle.com/technetwork/topics/security/cpuoct2015-2367953.html#AppendixMSQL

www.oracle.com/technetwork/topics/security/linuxbulletinapr2016-2952096.html

www.securityfocus.com/bid/81066

www.securitytracker.com/id/1034708

www.ubuntu.com/usn/USN-2881-1

access.redhat.com/errata/RHSA-2016:0705

access.redhat.com/errata/RHSA-2016:1132

access.redhat.com/security/cve/CVE-2016-3452

access.redhat.com/security/cve/CVE-2016-3471

access.redhat.com/security/cve/CVE-2016-5444

access.redhat.com/security/updates/classification/#critical

bugzilla.redhat.com/show_bug.cgi?id=1301493

dev.mysql.com/doc/relnotes/mysql/5.5/en/news-5-5-47.html

dev.mysql.com/doc/relnotes/mysql/5.6/en/news-5-6-27.html

dev.mysql.com/doc/relnotes/mysql/5.6/en/news-5-6-28.html

dev.mysql.com/doc/relnotes/mysql/5.6/en/news-5-6-29.html

dev.mysql.com/doc/relnotes/mysql/5.6/en/news-5-6-30.html

github.com/mysql/mysql-server/commit/0dbd5a8797ed4bd18e8b883988fb62177eb0f73f

mariadb.com/kb/en/mariadb/mariadb-10110-release-notes/

mariadb.com/kb/en/mariadb/mariadb-5547-release-notes/

mariadb.com/kb/en/mdb-10023-rn/

7.2 High

CVSS2

Access Vector

LOCAL

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:L/AC:L/Au:N/C:C/I:C/A:C

JSON

Related for VERACODE:16857