Description
Unspecified vulnerability in Oracle MySQL 5.6.30 and earlier and 5.7.12 and earlier allows remote authenticated users to affect availability via vectors related to Server: Security: Encryption.
Fixed in Linux distributions
Distributions backport fixes, so the version that fixes this vulnerability differs per release — upgrade to at least the version shown. From the distributions' security trackers and advisories.
Ubuntu
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Ubuntu 16.04 LTS | mysql-5.7 | 5.7.13-0ubuntu0.16.04.2 | USN-3040-1 |
| Ubuntu 16.04 LTS | percona-server-5.6 | No fix yet | — |
| Ubuntu 16.04 LTS | percona-xtradb-cluster-5.6 | 5.6.34-26.19-0ubuntu0.16.04.1 | — |
| Ubuntu 14.04 LTS | mysql-5.5 | 5.5.50-0ubuntu0.14.04.1 | USN-3040-1 |
| Ubuntu 14.04 LTS | mysql-5.6 | 5.6.31-0ubuntu0.14.04.2 | — |
Red Hat
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| RHEL 2 | rh-mysql56-mysql +7 | 5.6.32-1.el6 | RHSA-2016:1601 |
Advisories 2
- RHSA-2016:1601 Red Hat Security Advisory: rh-mysql56-mysql security update Red Hat Security Advisories (RHSA) · Jun 29, 2026
- USN-3040-1 mysql-5.5, mysql-5.6, mysql-5.7 vulnerabilities Ubuntu Security Notices (USN) · Apr 27, 2026
References
- USN-3040-1 vendor-advisory
- http://www.oracle.com/technetwork/security-advisory/cpujul2016-2881720.html
- RHSA-2016:1601 vendor-advisory
- 1036362 vdb-entry
- 91992 vdb-entry
- 91787 vdb-entry