Veracode Vulnerability DatabaseVERACODE:16865Denial Of Service (DoS)
0.003 Low
EPSS
Percentile
71.9%
Oracle MySQL Server is vulnerable to denial of service (DoS) attacks. A remote user can manipulate with an unknown input, causing the application to crash. Exploitation requires multiple levels of successful authentication .The affected component is Replication.
| CPE | Name | Operator | Version |
|---|---|---|---|
| rh-mysql56-mysql | eq | 5.6.26__1.el6 | |
| rh-mysql56-mysql | eq | 5.6.24__3.el6 | |
| rh-mysql56-mysql | eq | 5.6.26__1.el6 | |
| rh-mysql56-mysql | eq | 5.6.24__3.el6 |
References
lists.opensuse.org/opensuse-security-announce/2016-02/msg00015.html
lists.opensuse.org/opensuse-security-announce/2016-02/msg00015.html
lists.opensuse.org/opensuse-security-announce/2016-02/msg00016.html
lists.opensuse.org/opensuse-security-announce/2016-02/msg00016.html
rhn.redhat.com/errata/RHSA-2016-0705.html
rhn.redhat.com/errata/RHSA-2016-0705.html
www.oracle.com/technetwork/topics/security/cpuapr2016-2881694.html#AppendixMSQL
www.oracle.com/technetwork/topics/security/cpujan2016-2367955.html
www.oracle.com/technetwork/topics/security/cpujan2016-2367955.html
www.oracle.com/technetwork/topics/security/cpujan2016-2367955.html#AppendixMSQL
www.oracle.com/technetwork/topics/security/cpuoct2015-2367953.html#AppendixMSQL
www.securityfocus.com/bid/81238
www.securityfocus.com/bid/81238
www.securitytracker.com/id/1034708
www.securitytracker.com/id/1034708
www.ubuntu.com/usn/USN-2881-1
www.ubuntu.com/usn/USN-2881-1
access.redhat.com/errata/RHSA-2016:0705
access.redhat.com/security/cve/CVE-2016-3452
access.redhat.com/security/cve/CVE-2016-3471
access.redhat.com/security/cve/CVE-2016-5444
access.redhat.com/security/updates/classification/#critical
dev.mysql.com/doc/relnotes/mysql/5.6/en/news-5-6-27.html
dev.mysql.com/doc/relnotes/mysql/5.6/en/news-5-6-28.html
dev.mysql.com/doc/relnotes/mysql/5.6/en/news-5-6-29.html
dev.mysql.com/doc/relnotes/mysql/5.6/en/news-5-6-30.html
Related
