Vulnerability Description
Unspecified vulnerability in Oracle MySQL 5.6.29 and earlier and 5.7.11 and earlier allows remote attackers to affect confidentiality, integrity, and availability via vectors related to Pluggable Authentication.
CVSS Score
CRITICAL
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Redhat | Enterprise Linux | 6.0 |
| Oracle | Mysql | >= 5.6.0, <= 5.6.29 |
References
- http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00053.htmlMailing ListThird Party Advisory
- http://rhn.redhat.com/errata/RHSA-2016-0705.htmlThird Party Advisory
- http://www.oracle.com/technetwork/security-advisory/cpuapr2016v3-2985753.htmlPatchVendor Advisory
- http://www.securityfocus.com/bid/86418Third Party AdvisoryVDB Entry
- http://www.securitytracker.com/id/1035606Third Party AdvisoryVDB Entry
- http://www.ubuntu.com/usn/USN-2953-1Third Party Advisory
- http://www.ubuntu.com/usn/USN-2954-1Third Party Advisory
- http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00053.htmlMailing ListThird Party Advisory
- http://rhn.redhat.com/errata/RHSA-2016-0705.htmlThird Party Advisory
- http://www.oracle.com/technetwork/security-advisory/cpuapr2016v3-2985753.htmlPatchVendor Advisory
- http://www.securityfocus.com/bid/86418Third Party AdvisoryVDB Entry
- http://www.securitytracker.com/id/1035606Third Party AdvisoryVDB Entry
- http://www.ubuntu.com/usn/USN-2953-1Third Party Advisory
- http://www.ubuntu.com/usn/USN-2954-1Third Party Advisory
FAQ
What is CVE-2016-0639?
CVE-2016-0639 is a vulnerability with a CVSS score of 9.8 (CRITICAL). Unspecified vulnerability in Oracle MySQL 5.6.29 and earlier and 5.7.11 and earlier allows remote attackers to affect confidentiality, integrity, and availability via vectors related to Pluggable Auth...
How severe is CVE-2016-0639?
CVE-2016-0639 has been rated CRITICAL with a CVSS base score of 9.8/10. This is considered a critical vulnerability requiring immediate attention.
Is there a patch for CVE-2016-0639?
Check the references section above for vendor advisories and patch information. Affected products include: Redhat Enterprise Linux, Oracle Mysql.