Veracode Vulnerability DatabaseVERACODE:17638Denial Of Service (DoS)
4.9 Medium
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
HIGH
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H
4 Medium
CVSS2
Access Vector
NETWORK
Access Complexity
LOW
Authentication
SINGLE
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
PARTIAL
AV:N/AC:L/Au:S/C:N/I:N/A:P
0.003 Low
EPSS
Percentile
65.2%
Oracle MySQL Server is vulnerable to denial of service (DoS) attacks. A remote user can manipulate with an unknown input, causing the application to crash. The affected component is Federated. Multiple levels of successful authentication are required for exploitation.
References
rhn.redhat.com/errata/RHSA-2016-2130.html
rhn.redhat.com/errata/RHSA-2016-2131.html
rhn.redhat.com/errata/RHSA-2016-2595.html
rhn.redhat.com/errata/RHSA-2016-2749.html
rhn.redhat.com/errata/RHSA-2016-2927.html
rhn.redhat.com/errata/RHSA-2016-2928.html
www.oracle.com/technetwork/security-advisory/cpuoct2016-2881722.html
www.oracle.com/technetwork/security-advisory/cpuoct2016-2881722.html#AppendixMSQL
www.securityfocus.com/bid/93668
www.securitytracker.com/id/1037050
access.redhat.com/security/cve/CVE-2016-6663
access.redhat.com/security/cve/CVE-2016-6664
access.redhat.com/security/updates/classification/#important
bugzilla.redhat.com/show_bug.cgi?id=1386562
dev.mysql.com/doc/relnotes/mysql/5.5/en/news-5-5-51.html
dev.mysql.com/doc/relnotes/mysql/5.5/en/news-5-5-52.html
mariadb.com/kb/en/mariadb/mariadb-10028-release-notes/
mariadb.com/kb/en/mariadb/mariadb-10118-release-notes/
mariadb.com/kb/en/mariadb/mariadb-5552-release-notes/
rhn.redhat.com/errata/RHSA-2016-2130.html
security.gentoo.org/glsa/201701-01
Related
4.9 Medium
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
HIGH
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H
4 Medium
CVSS2
Access Vector
NETWORK
Access Complexity
LOW
Authentication
SINGLE
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
PARTIAL
AV:N/AC:L/Au:S/C:N/I:N/A:P
0.003 Low
EPSS
Percentile
65.2%