Description
Unspecified vulnerability in Oracle MySQL 5.6.27 and earlier and 5.7.9 allows remote authenticated users to affect availability via vectors related to DML, a different vulnerability than CVE-2016-0504.
Fixed in Linux distributions
Distributions backport fixes, so the version that fixes this vulnerability differs per release — upgrade to at least the version shown. From the distributions' security trackers and advisories.
Ubuntu
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Ubuntu 16.04 LTS | percona-server-5.6 | No fix yet | — |
| Ubuntu 16.04 LTS | percona-xtradb-cluster-5.6 | 5.6.34-26.19-0ubuntu0.16.04.1 | — |
| Ubuntu 14.04 LTS | mysql-5.5 | 5.5.47-0ubuntu0.14.04.1 | USN-2881-1 |
| Ubuntu 14.04 LTS | mysql-5.6 | 5.6.28-0ubuntu0.14.04.1 | — |
Red Hat
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| RHEL 2 | rh-mysql56-mysql +7 | 5.6.30-1.el6 | RHSA-2016:0705 |
Advisories 3
- RHSA-2016:0705 Red Hat Security Advisory: rh-mysql56-mysql security update Red Hat Security Advisories (RHSA) · Jun 29, 2026
- USN-2881-1 mysql-5.5, mysql-5.6 vulnerabilities Ubuntu Security Notices (USN) · Apr 27, 2026
- WID-SEC-2024-1482 Oracle MySQL: Mehrere Schwachstellen gefährden die Integrität, Vertraulichkeit und Verfügbarkeit BSI CERT-Bund (WID) · Jun 30, 2024
References
- openSUSE-SU-2016:0367 vendor-advisory
- 1034708 vdb-entry
- http://www.oracle.com/technetwork/topics/security/cpujan2016-2367955.html
- 81126 vdb-entry
- USN-2881-1 vendor-advisory
- openSUSE-SU-2016:0377 vendor-advisory
- RHSA-2016:0705 vendor-advisory