Description
Unspecified vulnerability in Oracle MySQL 5.7.12 and earlier allows remote administrators to affect availability via vectors related to Server: Log.
Fixed in Linux distributions
Distributions backport fixes, so the version that fixes this vulnerability differs per release — upgrade to at least the version shown. From the distributions' security trackers and advisories.
Ubuntu
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Ubuntu 16.04 LTS | mysql-5.7 | 5.7.13-0ubuntu0.16.04.2 | USN-3040-1 |
| Ubuntu 16.04 LTS | percona-server-5.6 +1 | No fix yet | — |
| Ubuntu 14.04 LTS | mysql-5.5 | 5.5.50-0ubuntu0.14.04.1 | USN-3040-1 |
Advisories 1
- USN-3040-1 mysql-5.5, mysql-5.6, mysql-5.7 vulnerabilities Ubuntu Security Notices (USN) · Apr 27, 2026
References
- USN-3040-1 vendor-advisory
- http://www.oracle.com/technetwork/security-advisory/cpujul2016-2881720.html
- 1036362 vdb-entry
- 91787 vdb-entry
- 91917 vdb-entry