CVE-2016-0642 — MEDIUM (4.7)

Q: What is CVE-2016-0642?

CVE-2016-0642 is a vulnerability with a CVSS score of 4.7 (MEDIUM). Unspecified vulnerability in Oracle MySQL 5.5.48 and earlier, 5.6.29 and earlier, and 5.7.11 and earlier allows local users to affect integrity and availability via vectors related to Federated.

Q: How severe is CVE-2016-0642?

CVE-2016-0642 has been rated MEDIUM with a CVSS base score of 4.7/10. Review the CVSS metrics above for detailed severity breakdown.

Q: Is there a patch for CVE-2016-0642?

Check the references section above for vendor advisories and patch information. Affected products include: Oracle Mysql, Suse Linux Enterprise Debuginfo, Opensuse Leap, Opensuse Opensuse, Suse Linux Enterprise Desktop.

Vulnerability Description

Unspecified vulnerability in Oracle MySQL 5.5.48 and earlier, 5.6.29 and earlier, and 5.7.11 and earlier allows local users to affect integrity and availability via vectors related to Federated.

CVSS Score

4.7

MEDIUM

CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:N/I:L/A:H

Attack Vector

LOCAL

Attack Complexity

HIGH

Privileges Required

HIGH

User Interaction

NONE

Scope

UNCHANGED

Confidentiality

NONE

Integrity

LOW

Availability

HIGH

Affected Products

Vendor	Product	Versions
Oracle	Mysql	>= 5.5.0, <= 5.5.48
Suse	Linux Enterprise Debuginfo	11
Opensuse	Leap	42.1
Opensuse	Opensuse	13.2
Suse	Linux Enterprise Desktop	12
Suse	Linux Enterprise Server	11
Suse	Linux Enterprise Software Development Kit	11
Suse	Linux Enterprise Workstation Extension	12
Redhat	Enterprise Linux Desktop	7.0
Redhat	Enterprise Linux Eus	7.2
Redhat	Enterprise Linux Server	7.0
Redhat	Enterprise Linux Server Aus	7.2
Redhat	Enterprise Linux Server Tus	7.2
Redhat	Enterprise Linux Workstation	7.0
Mariadb	Mariadb	>= 5.5.0, < 5.5.47
Debian	Debian Linux	8.0
Canonical	Ubuntu Linux	12.04

References

http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00035.htmlMailing ListThird Party Advisory
http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00053.htmlMailing ListThird Party Advisory
http://lists.opensuse.org/opensuse-security-announce/2016-06/msg00033.htmlMailing ListThird Party Advisory
http://lists.opensuse.org/opensuse-security-announce/2016-06/msg00034.htmlMailing ListThird Party Advisory
http://lists.opensuse.org/opensuse-security-announce/2016-06/msg00051.htmlMailing ListThird Party Advisory
http://lists.opensuse.org/opensuse-security-announce/2016-06/msg00053.htmlMailing ListThird Party Advisory
http://rhn.redhat.com/errata/RHSA-2016-0534.htmlThird Party Advisory
http://rhn.redhat.com/errata/RHSA-2016-0705.htmlThird Party Advisory
http://rhn.redhat.com/errata/RHSA-2016-1480.htmlThird Party Advisory
http://rhn.redhat.com/errata/RHSA-2016-1481.htmlThird Party Advisory
http://www.debian.org/security/2016/dsa-3557Third Party Advisory
http://www.oracle.com/technetwork/security-advisory/cpuapr2016v3-2985753.htmlPatchVendor Advisory
http://www.securityfocus.com/bid/86445Third Party AdvisoryVDB Entry
http://www.securitytracker.com/id/1035606Broken LinkThird Party AdvisoryVDB Entry
http://www.ubuntu.com/usn/USN-2953-1Third Party Advisory

FAQ

What is CVE-2016-0642?

CVE-2016-0642 is a vulnerability with a CVSS score of 4.7 (MEDIUM). Unspecified vulnerability in Oracle MySQL 5.5.48 and earlier, 5.6.29 and earlier, and 5.7.11 and earlier allows local users to affect integrity and availability via vectors related to Federated.

How severe is CVE-2016-0642?

CVE-2016-0642 has been rated MEDIUM with a CVSS base score of 4.7/10. Review the CVSS metrics above for detailed severity breakdown.

Is there a patch for CVE-2016-0642?

Check the references section above for vendor advisories and patch information. Affected products include: Oracle Mysql, Suse Linux Enterprise Debuginfo, Opensuse Leap, Opensuse Opensuse, Suse Linux Enterprise Desktop.