RHSA-2016:1480: mysql55-mysql security update

TI-2016-02981 CVE-2016-3521 · GHSA-h534-4fvw-mm64

Unspecified vulnerability in Oracle MySQL 5.5.49 and earlier, 5.6.30 and earlier, and…

MEDIUM 42

Unspecified vulnerability in Oracle MySQL 5.5.49 and earlier, 5.6.30 and earlier, and 5.7.12 and earlier and MariaDB before 5.5.50, 10.0.x before 10.0.26, and 10.1.x before 10.1.15 allows remote authenticated users to af…

CVSS 3.0MEDIUM 6.5 Network Low privileges No interaction EPSS 0.10441 Published 2016-07-21 Partial fix

TI-2015-04088 CVE-2015-4870 · GHSA-4466-76rw-3vm6

Unspecified vulnerability in Oracle MySQL Server 5.5.45 and earlier, and 5.6.26 and…

MEDIUM 42

Unspecified vulnerability in Oracle MySQL Server 5.5.45 and earlier, and 5.6.26 and earlier, allows remote authenticated users to affect availability via unknown vectors related to Server : Parser.

CVSS 2.0MEDIUM 4.0 Network Low privileges Interaction — EPSS 0.30146 Published 2015-10-21 Partial fix

TI-2016-00458 CVE-2016-0505 · GHSA-6rv3-mhw2-mm6h

Unspecified vulnerability in Oracle MySQL 5.5.46 and earlier, 5.6.27 and earlier, and…

MEDIUM 40

Unspecified vulnerability in Oracle MySQL 5.5.46 and earlier, 5.6.27 and earlier, and 5.7.9 and MariaDB before 5.5.47, 10.0.x before 10.0.23, and 10.1.x before 10.1.10 allows remote authenticated users to affect availabi…

CVSS 2.0MEDIUM 6.8 Network Low privileges Interaction — EPSS 0.07505 Published 2016-01-21 Partial fix

TI-2016-02937 CVE-2016-3477 · GHSA-x24r-xfh8-7ww8

Unspecified vulnerability in Oracle MySQL 5.5.49 and earlier, 5.6.30 and earlier, and…

LOW 38

Unspecified vulnerability in Oracle MySQL 5.5.49 and earlier, 5.6.30 and earlier, and 5.7.12 and earlier and MariaDB before 5.5.50, 10.0.x before 10.0.26, and 10.1.x before 10.1.15 allows local users to affect confidenti…

CVSS 3.0HIGH 8.1 Local No auth No interaction EPSS 0.00466 Published 2016-07-21 Partial fix

TI-2016-02931 CVE-2016-3471 · GHSA-9h8x-h66j-8wqj

Unspecified vulnerability in Oracle MySQL 5.5.45 and earlier and 5.6.26 and earlier…

LOW 35

Unspecified vulnerability in Oracle MySQL 5.5.45 and earlier and 5.6.26 and earlier allows local users to affect confidentiality, integrity, and availability via vectors related to Server: Option.

CVSS 3.1HIGH 7.5 Local High privileges No interaction EPSS 0.00381 Published 2016-07-21 Partial fix

TI-2016-03068 CVE-2016-3615 · GHSA-6rqj-j79f-57vc

Unspecified vulnerability in Oracle MySQL 5.5.49 and earlier, 5.6.30 and earlier, and…

LOW 33

Unspecified vulnerability in Oracle MySQL 5.5.49 and earlier, 5.6.30 and earlier, and 5.7.12 and earlier and MariaDB before 5.5.50, 10.0.x before 10.0.26, and 10.1.x before 10.1.15 allows remote authenticated users to af…

CVSS 3.0MEDIUM 5.3 Network Low privileges No interaction EPSS 0.0568 Published 2016-07-21 Partial fix

TI-2016-01878 CVE-2016-2047 · GHSA-gw5g-54qg-7583

The ssl_verify_server_cert function in sql-common/client.c in MariaDB before 5.5.47…

LOW 33

The ssl_verify_server_cert function in sql-common/client.c in MariaDB before 5.5.47, 10.0.x before 10.0.23, and 10.1.x before 10.1.10; Oracle MySQL 5.5.48 and earlier, 5.6.29 and earlier, and 5.7.11 and earlier; and Perc…

CVSS 3.0MEDIUM 5.9 Network No auth No interaction EPSS 0.03741 Published 2016-01-27 Partial fix CWE-254

TI-2016-00499 CVE-2016-0546 · GHSA-c3cx-7x4c-hmh8

Unspecified vulnerability in Oracle MySQL 5.5.46 and earlier, 5.6.27 and earlier, and…

LOW 32

Unspecified vulnerability in Oracle MySQL 5.5.46 and earlier, 5.6.27 and earlier, and 5.7.9 and MariaDB before 5.5.47, 10.0.x before 10.0.23, and 10.1.x before 10.1.10 allows local users to affect confidentiality, integr…

CVSS 2.0HIGH 7.2 Local No auth Interaction — EPSS 0.0059 Published 2016-01-21 Partial fix

TI-2016-00573 CVE-2016-0640 · GHSA-mhc3-cvw4-x398

Unspecified vulnerability in Oracle MySQL 5.5.47 and earlier, 5.6.28 and earlier, and…

LOW 30

Unspecified vulnerability in Oracle MySQL 5.5.47 and earlier, 5.6.28 and earlier, and 5.7.10 and earlier and MariaDB before 5.5.48, 10.0.x before 10.0.24, and 10.1.x before 10.1.12 allows local users to affect integrity…

CVSS 3.0MEDIUM 6.1 Local Low privileges No interaction EPSS 0.01567 Published 2016-04-21 Partial fix

TI-2016-04714 CVE-2016-5440 · GHSA-jgx2-h5wg-8cmc

Unspecified vulnerability in Oracle MySQL 5.5.49 and earlier, 5.6.30 and earlier, and…

LOW 29

Unspecified vulnerability in Oracle MySQL 5.5.49 and earlier, 5.6.30 and earlier, and 5.7.12 and earlier and MariaDB before 5.5.50, 10.0.x before 10.0.26, and 10.1.x before 10.1.15 allows remote administrators to affect…

CVSS 3.0MEDIUM 4.9 Network High privileges No interaction EPSS 0.03854 Published 2016-07-21 Partial fix

TI-2016-00582 CVE-2016-0650 · GHSA-48hx-p379-52c7

Unspecified vulnerability in Oracle MySQL 5.5.47 and earlier, 5.6.28 and earlier, and…

LOW 29

Unspecified vulnerability in Oracle MySQL 5.5.47 and earlier, 5.6.28 and earlier, and 5.7.10 and earlier and MariaDB before 5.5.48, 10.0.x before 10.0.24, and 10.1.x before 10.1.12 allows local users to affect availabili…

CVSS 3.0MEDIUM 5.5 Local Low privileges No interaction EPSS 0.0185 Published 2016-04-21 Partial fix

TI-2016-00581 CVE-2016-0649 · GHSA-94q8-xx3m-wf2w

Unspecified vulnerability in Oracle MySQL 5.5.47 and earlier, 5.6.28 and earlier, and…

LOW 29

Unspecified vulnerability in Oracle MySQL 5.5.47 and earlier, 5.6.28 and earlier, and 5.7.10 and earlier and MariaDB before 5.5.48, 10.0.x before 10.0.24, and 10.1.x before 10.1.12 allows local users to affect availabili…

CVSS 3.0MEDIUM 5.5 Local Low privileges No interaction EPSS 0.0185 Published 2016-04-21 Partial fix

TI-2016-00580 CVE-2016-0648 · GHSA-q8wg-797w-5xvw

Unspecified vulnerability in Oracle MySQL 5.5.48 and earlier, 5.6.29 and earlier, and…

LOW 29

Unspecified vulnerability in Oracle MySQL 5.5.48 and earlier, 5.6.29 and earlier, and 5.7.11 and earlier and MariaDB before 5.5.49, 10.0.x before 10.0.25, and 10.1.x before 10.1.14 allows local users to affect availabili…

CVSS 3.0MEDIUM 5.5 Local Low privileges No interaction EPSS 0.01867 Published 2016-04-21 Partial fix

TI-2016-00578 CVE-2016-0646 · GHSA-4mp4-fj98-86xx

Unspecified vulnerability in Oracle MySQL 5.5.47 and earlier, 5.6.28 and earlier, and…

LOW 29

Unspecified vulnerability in Oracle MySQL 5.5.47 and earlier, 5.6.28 and earlier, and 5.7.10 and earlier and MariaDB before 5.5.48, 10.0.x before 10.0.24, and 10.1.x before 10.1.12 allows local users to affect availabili…

CVSS 3.0MEDIUM 5.5 Local Low privileges No interaction EPSS 0.0185 Published 2016-04-21 Partial fix

TI-2016-00577 CVE-2016-0644 · GHSA-6hr2-fc3m-jf9f

Unspecified vulnerability in Oracle MySQL 5.5.47 and earlier, 5.6.28 and earlier, and…

LOW 29

Unspecified vulnerability in Oracle MySQL 5.5.47 and earlier, 5.6.28 and earlier, and 5.7.10 and earlier and MariaDB before 5.5.48, 10.0.x before 10.0.24, and 10.1.x before 10.1.12 allows local users to affect availabili…

CVSS 3.0MEDIUM 5.5 Local Low privileges No interaction EPSS 0.0185 Published 2016-04-21 Partial fix

TI-2016-00596 CVE-2016-0666 · GHSA-g7qh-x4rx-fcwv

Unspecified vulnerability in Oracle MySQL 5.5.48 and earlier, 5.6.29 and earlier, and…

LOW 28

Unspecified vulnerability in Oracle MySQL 5.5.48 and earlier, 5.6.29 and earlier, and 5.7.11 and earlier and MariaDB before 5.5.49, 10.0.x before 10.0.25, and 10.1.x before 10.1.14 allows local users to affect availabili…

CVSS 3.0MEDIUM 5.5 Local Low privileges No interaction EPSS 0.01783 Published 2016-04-21 Partial fix

TI-2016-00583 CVE-2016-0651 · GHSA-f28w-g82h-6rwv

Unspecified vulnerability in Oracle MySQL 5.5.46 and earlier allows local users to affect…

LOW 28

Unspecified vulnerability in Oracle MySQL 5.5.46 and earlier allows local users to affect availability via vectors related to Optimizer.

CVSS 3.1MEDIUM 5.5 Local Low privileges No interaction EPSS 0.01352 Published 2016-04-21 Partial fix

TI-2016-00579 CVE-2016-0647 · GHSA-w2fq-mv2v-xvm5

Unspecified vulnerability in Oracle MySQL 5.5.48 and earlier, 5.6.29 and earlier, and…

LOW 28

Unspecified vulnerability in Oracle MySQL 5.5.48 and earlier, 5.6.29 and earlier, and 5.7.11 and earlier and MariaDB before 5.5.49, 10.0.x before 10.0.25, and 10.1.x before 10.1.14 allows local users to affect availabili…

CVSS 3.0MEDIUM 5.5 Local Low privileges No interaction EPSS 0.01699 Published 2016-04-21 Partial fix

TI-2016-00574 CVE-2016-0641 · GHSA-j2mr-mvgm-8gc5

Unspecified vulnerability in Oracle MySQL 5.5.47 and earlier, 5.6.28 and earlier, and…

LOW 26

Unspecified vulnerability in Oracle MySQL 5.5.47 and earlier, 5.6.28 and earlier, and 5.7.10 and earlier and MariaDB before 5.5.48, 10.0.x before 10.0.24, and 10.1.x before 10.1.12 allows local users to affect confidenti…

CVSS 3.0MEDIUM 5.1 Local High privileges No interaction EPSS 0.01528 Published 2016-04-21 Partial fix

TI-2016-00564 CVE-2016-0616 · GHSA-8r3h-wqhf-vw3f

Unspecified vulnerability in Oracle MySQL 5.5.46 and earlier and MariaDB before 5.5.47…

LOW 26

Unspecified vulnerability in Oracle MySQL 5.5.46 and earlier and MariaDB before 5.5.47, 10.0.x before 10.0.23, and 10.1.x before 10.1.10 allows remote authenticated users to affect availability via unknown vectors relate…

CVSS 2.0MEDIUM 4.0 Network Low privileges Interaction — EPSS 0.04284 Published 2016-01-21 Partial fix

TI-2016-00549 CVE-2016-0597 · GHSA-6gr2-mm8m-93vm

Unspecified vulnerability in Oracle MySQL 5.5.46 and earlier, 5.6.27 and earlier, and…

LOW 26

Unspecified vulnerability in Oracle MySQL 5.5.46 and earlier, 5.6.27 and earlier, and 5.7.9 and MariaDB before 5.5.47, 10.0.x before 10.0.23, and 10.1.x before 10.1.10 allows remote authenticated users to affect availabi…

CVSS 2.0MEDIUM 4.0 Network Low privileges Interaction — EPSS 0.043 Published 2016-01-21 Partial fix

TI-2016-00548 CVE-2016-0596 · GHSA-75g5-w67v-qrrh

Unspecified vulnerability in Oracle MySQL 5.5.46 and earlier and 5.6.27 and earlier and…

LOW 26

Unspecified vulnerability in Oracle MySQL 5.5.46 and earlier and 5.6.27 and earlier and MariaDB before 5.5.47, 10.0.x before 10.0.23, and 10.1.x before 10.1.10 allows remote authenticated users to affect availability via…

CVSS 2.0MEDIUM 4.0 Network Low privileges Interaction — EPSS 0.043 Published 2016-01-21 Partial fix

TI-2015-04076 CVE-2015-4858 · GHSA-jwcc-h75g-jhqp

Unspecified vulnerability in Oracle MySQL Server 5.5.45 and earlier, and 5.6.26 and…

LOW 26

Unspecified vulnerability in Oracle MySQL Server 5.5.45 and earlier, and 5.6.26 and earlier, allows remote authenticated users to affect availability via vectors related to DML, a different vulnerability than CVE-2015-49…

CVSS 2.0MEDIUM 4.0 Network Low privileges Interaction — EPSS 0.03952 Published 2015-10-21 Partial fix

TI-2015-04024 CVE-2015-4802 · GHSA-62g5-2m99-jf9g

Unspecified vulnerability in Oracle MySQL Server 5.5.45 and earlier and 5.6.26 and…

LOW 26

Unspecified vulnerability in Oracle MySQL Server 5.5.45 and earlier and 5.6.26 and earlier allows remote authenticated users to affect availability via unknown vectors related to Server : Partition, a different vulnerabi…

CVSS 2.0MEDIUM 4.0 Network Low privileges Interaction — EPSS 0.04193 Published 2015-10-21 Partial fix

TI-2016-04718 CVE-2016-5444 · GHSA-52xg-2453-vmhx

Unspecified vulnerability in Oracle MySQL 5.5.48 and earlier, 5.6.29 and earlier, and…

LOW 25

Unspecified vulnerability in Oracle MySQL 5.5.48 and earlier, 5.6.29 and earlier, and 5.7.11 and earlier and MariaDB before 5.5.49, 10.0.x before 10.0.25, and 10.1.x before 10.1.14 allows remote attackers to affect confi…

CVSS 3.0LOW 3.7 Network No auth No interaction EPSS 0.04341 Published 2016-07-21 Partial fix

TI-2015-04036 CVE-2015-4815 · GHSA-845p-9fm5-54qp

Unspecified vulnerability in Oracle MySQL Server 5.5.45 and earlier and 5.6.26 and…

LOW 25

Unspecified vulnerability in Oracle MySQL Server 5.5.45 and earlier and 5.6.26 and earlier allows remote authenticated users to affect availability via vectors related to Server : DDL.

CVSS 2.0MEDIUM 4.0 Network Low privileges Interaction — EPSS 0.03722 Published 2015-10-21 Partial fix

TI-2016-02912 CVE-2016-3452 · GHSA-chpg-5745-m74h

Unspecified vulnerability in Oracle MySQL 5.5.48 and earlier, 5.6.29 and earlier, and…

LOW 24

Unspecified vulnerability in Oracle MySQL 5.5.48 and earlier, 5.6.29 and earlier, and 5.7.10 and earlier and MariaDB before 5.5.49, 10.0.x before 10.0.25, and 10.1.x before 10.1.14 allows remote attackers to affect confi…

CVSS 3.0LOW 3.7 Network No auth No interaction EPSS 0.04071 Published 2016-07-21 Partial fix

TI-2016-00575 CVE-2016-0642 · GHSA-px8r-9h4w-jc93

Unspecified vulnerability in Oracle MySQL 5.5.48 and earlier, 5.6.29 and earlier, and…

LOW 24

Unspecified vulnerability in Oracle MySQL 5.5.48 and earlier, 5.6.29 and earlier, and 5.7.11 and earlier allows local users to affect integrity and availability via vectors related to Federated.

CVSS 3.1MEDIUM 4.7 Local High privileges No interaction EPSS 0.0119 Published 2016-04-21 Partial fix

TI-2016-00559 CVE-2016-0608 · GHSA-pvj2-6254-2737

Unspecified vulnerability in Oracle MySQL 5.5.46 and earlier, 5.6.27 and earlier, and…

LOW 24

Unspecified vulnerability in Oracle MySQL 5.5.46 and earlier, 5.6.27 and earlier, and 5.7.9 and MariaDB before 5.5.47, 10.0.x before 10.0.23, and 10.1.x before 10.1.10 allows remote authenticated users to affect availabi…

CVSS 2.0LOW 3.5 Network Low privileges Interaction — EPSS 0.03944 Published 2016-01-21 Partial fix

TI-2016-00557 CVE-2016-0606 · GHSA-4cff-62rr-5q5j

Unspecified vulnerability in Oracle MySQL 5.5.46 and earlier, 5.6.27 and earlier, and…

LOW 24

Unspecified vulnerability in Oracle MySQL 5.5.46 and earlier, 5.6.27 and earlier, and 5.7.9 and MariaDB before 5.5.47, 10.0.x before 10.0.23, and 10.1.x before 10.1.10 allows remote authenticated users to affect integrit…

CVSS 2.0LOW 3.5 Network Low privileges Interaction — EPSS 0.0423 Published 2016-01-21 Partial fix

TI-2016-00552 CVE-2016-0600 · GHSA-fcqh-f378-gwwh

Unspecified vulnerability in Oracle MySQL 5.5.46 and earlier, 5.6.27 and earlier, and…

LOW 24

Unspecified vulnerability in Oracle MySQL 5.5.46 and earlier, 5.6.27 and earlier, and 5.7.9 and MariaDB before 5.5.47, 10.0.x before 10.0.23, and 10.1.x before 10.1.10 allows remote authenticated users to affect availabi…

CVSS 2.0LOW 3.5 Network Low privileges Interaction — EPSS 0.03944 Published 2016-01-21 Partial fix

TI-2016-00550 CVE-2016-0598 · GHSA-h9gc-7xh7-xx4h

Unspecified vulnerability in Oracle MySQL 5.5.46 and earlier, 5.6.27 and earlier, and…

LOW 24

Unspecified vulnerability in Oracle MySQL 5.5.46 and earlier, 5.6.27 and earlier, and 5.7.9 and MariaDB before 5.5.47, 10.0.x before 10.0.23, and 10.1.x before 10.1.10 allows remote authenticated users to affect availabi…

CVSS 2.0LOW 3.5 Network Low privileges Interaction — EPSS 0.03944 Published 2016-01-21 Partial fix

TI-2015-04050 CVE-2015-4830 · GHSA-g7p5-fch8-g496

Unspecified vulnerability in Oracle MySQL Server 5.5.45 and earlier and 5.6.26 and…

LOW 24

Unspecified vulnerability in Oracle MySQL Server 5.5.45 and earlier and 5.6.26 and earlier allows remote authenticated users to affect integrity via unknown vectors related to Server : Security : Privileges.

CVSS 2.0MEDIUM 4.0 Network Low privileges Interaction — EPSS 0.03006 Published 2015-10-21 Partial fix

TI-2015-04047 CVE-2015-4826 · GHSA-62j4-9h78-3grj

Unspecified vulnerability in Oracle MySQL Server 5.5.45 and earlier and 5.6.26 and…

LOW 24

Unspecified vulnerability in Oracle MySQL Server 5.5.45 and earlier and 5.6.26 and earlier allows remote authenticated users to affect confidentiality via unknown vectors related to Server : Types.

CVSS 2.0MEDIUM 4.0 Network Low privileges Interaction — EPSS 0.03006 Published 2015-10-21 Partial fix

TI-2015-04129 CVE-2015-4913 · GHSA-r5wh-48h8-qq99

Unspecified vulnerability in Oracle MySQL Server 5.5.45 and earlier and 5.6.26 and…

LOW 23

Unspecified vulnerability in Oracle MySQL Server 5.5.45 and earlier and 5.6.26 and earlier allows remote authenticated users to affect availability via vectors related to Server : DML, a different vulnerability than CVE-…

CVSS 2.0LOW 3.5 Network Low privileges Interaction — EPSS 0.03548 Published 2015-10-21 Partial fix

TI-2015-04079 CVE-2015-4861 · GHSA-rhjv-997j-v3w8

Unspecified vulnerability in Oracle MySQL Server 5.5.45 and earlier, and 5.6.26 and…

LOW 23

Unspecified vulnerability in Oracle MySQL Server 5.5.45 and earlier, and 5.6.26 and earlier, allows remote authenticated users to affect availability via unknown vectors related to Server : InnoDB.

CVSS 2.0LOW 3.5 Network Low privileges Interaction — EPSS 0.03548 Published 2015-10-21 Partial fix

TI-2015-04056 CVE-2015-4836 · GHSA-f37p-x8q3-837p

Unspecified vulnerability in Oracle MySQL Server 5.5.45 and earlier, and 5.6.26 and…

LOW 21

Unspecified vulnerability in Oracle MySQL Server 5.5.45 and earlier, and 5.6.26 and earlier, allows remote authenticated users to affect availability via unknown vectors related to Server : SP.

CVSS 2.0LOW 2.8 Network Low privileges Interaction — EPSS 0.03974 Published 2015-10-21 Partial fix

TI-2016-00576 CVE-2016-0643 · GHSA-mv8j-76fc-g65m

Unspecified vulnerability in Oracle MySQL 5.5.48 and earlier, 5.6.29 and earlier, and…

LOW 19

Unspecified vulnerability in Oracle MySQL 5.5.48 and earlier, 5.6.29 and earlier, and 5.7.11 and earlier and MariaDB before 5.5.49, 10.0.x before 10.0.25, and 10.1.x before 10.1.14 allows local users to affect confidenti…

CVSS 3.0LOW 3.3 Local Low privileges No interaction EPSS 0.0164 Published 2016-04-21 Partial fix

TI-2016-00560 CVE-2016-0609 · GHSA-x67w-xc9w-5cjw

Unspecified vulnerability in Oracle MySQL 5.5.46 and earlier, 5.6.27 and earlier, and…

LOW 17

Unspecified vulnerability in Oracle MySQL 5.5.46 and earlier, 5.6.27 and earlier, and 5.7.9 and MariaDB before 5.5.47, 10.0.x before 10.0.23, and 10.1.x before 10.1.10 allows remote authenticated users to affect availabi…

CVSS 2.0LOW 1.7 Network Low privileges Interaction — EPSS 0.04425 Published 2016-01-21 Partial fix

TI-2015-04014 CVE-2015-4792 · GHSA-vqg7-559j-669q

Unspecified vulnerability in Oracle MySQL Server 5.5.45 and earlier and 5.6.26 and…

LOW 16

Unspecified vulnerability in Oracle MySQL Server 5.5.45 and earlier and 5.6.26 and earlier allows remote authenticated users to affect availability via unknown vectors related to Server : Partition, a different vulnerabi…

CVSS 2.0LOW 1.7 Network Low privileges Interaction — EPSS 0.03861 Published 2015-10-21 Partial fix

RHSA-2016:1480

Fixed in

Fixes 40 records