CVE-2016-3471
mysql: unspecified vulnerability in subcomponent: Server: Option (CPU July 2016)
Severity Score
Exploit Likelihood
Affected Versions
Public Exploits
0Exploited in Wild
-Decision
Descriptions
Unspecified vulnerability in Oracle MySQL 5.5.45 and earlier and 5.6.26 and earlier allows local users to affect confidentiality, integrity, and availability via vectors related to Server: Option.
Vulnerabilidad no especificada en Oracle MySQL 5.5.45 y versiones anteriores y 5.6.26 y versiones anteriores permite a usuarios locales afectar la confidencialidad, la integridad y la disponibilidad a través de vectores relacionados con Server: Option.
MariaDB is a multi-user, multi-threaded SQL database server. For all practical purposes, MariaDB is binary-compatible with MySQL. The following packages have been upgraded to a newer upstream version: mariadb55-mariadb. Security Fix: It was found that the MariaDB client library did not properly check host names against server identities noted in the X.509 certificates when establishing secure connections using TLS/SSL. A man-in-the-middle attacker could possibly use this flaw to impersonate a server to a client.
CVSS Scores
SSVC
- Decision:Track*
Timeline
- 2016-03-17 CVE Reserved
- 2016-07-21 CVE Published
- 2024-10-11 CVE Updated
- 2025-03-30 EPSS Updated
- ---------- Exploited in Wild
- ---------- KEV Due Date
- ---------- First Exploit
CWE
CAPEC
References (11)
| URL | Tag | Source |
|---|---|---|
| http://www.securityfocus.com/bid/91787 | Third Party Advisory | |
| http://www.securityfocus.com/bid/91913 | Third Party Advisory | |
| http://www.securitytracker.com/id/1036362 | Third Party Advisory |
| URL | Date | SRC |
|---|
| URL | Date | SRC |
|---|---|---|
| http://www.oracle.com/technetwork/security-advisory/cpujul2016-2881720.html | 2022-07-05 |
| URL | Date | SRC |
|---|---|---|
| http://rhn.redhat.com/errata/RHSA-2016-0534.html | 2022-07-05 | |
| http://rhn.redhat.com/errata/RHSA-2016-0705.html | 2022-07-05 | |
| http://rhn.redhat.com/errata/RHSA-2016-1480.html | 2022-07-05 | |
| http://rhn.redhat.com/errata/RHSA-2016-1481.html | 2022-07-05 | |
| https://access.redhat.com/errata/RHSA-2016:1132 | 2022-07-05 | |
| https://access.redhat.com/security/cve/CVE-2016-3471 | 2016-07-25 | |
| https://bugzilla.redhat.com/show_bug.cgi?id=1358203 | 2016-07-25 |
Affected Vendors, Products, and Versions
| Vendor | Product | Version | Other | Status | ||||||
|---|---|---|---|---|---|---|---|---|---|---|
| Vendor | Product | Version | Other | Status | <-- --> | Vendor | Product | Version | Other | Status |
| Oracle Search vendor "Oracle" | Mysql Search vendor "Oracle" for product "Mysql" | >= 5.5.0 <= 5.5.45 Search vendor "Oracle" for product "Mysql" and version " >= 5.5.0 <= 5.5.45" | - |
Affected
| ||||||
| Oracle Search vendor "Oracle" | Mysql Search vendor "Oracle" for product "Mysql" | >= 5.6.0 <= 5.6.26 Search vendor "Oracle" for product "Mysql" and version " >= 5.6.0 <= 5.6.26" | - |
Affected
| ||||||
| Redhat Search vendor "Redhat" | Enterprise Linux Search vendor "Redhat" for product "Enterprise Linux" | 6.0 Search vendor "Redhat" for product "Enterprise Linux" and version "6.0" | - |
Affected
| ||||||
| Redhat Search vendor "Redhat" | Enterprise Linux Search vendor "Redhat" for product "Enterprise Linux" | 7.0 Search vendor "Redhat" for product "Enterprise Linux" and version "7.0" | - |
Affected
| ||||||
| Mariadb Search vendor "Mariadb" | Mariadb Search vendor "Mariadb" for product "Mariadb" | >= 5.5.0 < 5.5.46 Search vendor "Mariadb" for product "Mariadb" and version " >= 5.5.0 < 5.5.46" | - |
Affected
| ||||||
| Mariadb Search vendor "Mariadb" | Mariadb Search vendor "Mariadb" for product "Mariadb" | >= 10.0.0 < 10.0.22 Search vendor "Mariadb" for product "Mariadb" and version " >= 10.0.0 < 10.0.22" | - |
Affected
| ||||||
| Mariadb Search vendor "Mariadb" | Mariadb Search vendor "Mariadb" for product "Mariadb" | >= 10.1.0 < 10.1.9 Search vendor "Mariadb" for product "Mariadb" and version " >= 10.1.0 < 10.1.9" | - |
Affected
| ||||||