CVE-2016-0651
Unspecified vulnerability in Oracle MySQL 5.5.46 and earlier allows local users to affect...
Unspecified vulnerability in Oracle MySQL 5.5.46 and earlier allows local users to affect availability via vectors related to Optimizer.
Attack profile
How easy it is to exploit
- Attack vector
- Local
- Complexity
- Low
- Privileges needed
- Low
- User interaction
- None
What an attacker can affect
- Confidentiality
- None
- Integrity
- None
- Availability
- High
Exploit likelihood
What each source reports
NVD Score used
5.5
Unspecified vulnerability in Oracle MySQL 5.5.46 and earlier allows local users to affect availability via vectors related to Optimizer.
- Record
CVE-2016-0651- CVSS 3.1
- 5.5 Medium
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H - CVSS 2.0
- 3.5 Low
AV:N/AC:M/Au:S/C:N/I:N/A:P - Updated
- 2026-11-02
CVE List No score
Unspecified vulnerability in Oracle MySQL 5.5.46 and earlier allows local users to affect availability via vectors related to Optimizer.
- Record
CVE-2016-0651- Updated
- 2026-11-02
EUVDEUVD-2016-0686 No score
Unspecified vulnerability in Oracle MySQL 5.5.46 and earlier allows local users to affect availability via vectors related to Optimizer.
- Record
EUVD-2016-0686- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-f28w-g82h-6rwv
5.5
Unspecified vulnerability in Oracle MySQL 5.5.46 and earlier allows local users to affect...
Unspecified vulnerability in Oracle MySQL 5.5.46 and earlier allows local users to affect availability via vectors related to Optimizer.
- Record
GHSA-f28w-g82h-6rwv- CVSS 3.0
- 5.5 Medium
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H - Updated
- 2026-11-02
OSV
5.5
Unspecified vulnerability in Oracle MySQL 5.5.46 and earlier allows local users to affect availability via vectors related to Optimizer.
- Record
CVE-2016-0651- CVSS 3.1
- 5.5 Medium
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H - Updated
- 2026-11-02
OSVRHSA-2016:0534
7.5
Red Hat Security Advisory: mariadb security and bug fix update
- Record
RHSA-2016:0534- CVSS 3.0
- 7.5 High
CVSS:3.0/AV:L/AC:H/PR:H/UI:N/S:C/C:H/I:H/A:H - Updated
- 2026-11-02
Show 9 moreShow less
OSVRHSA-2016:1132
7.5
Red Hat Security Advisory: rh-mariadb100-mariadb security update
- Record
RHSA-2016:1132- CVSS 3.0
- 7.5 High
CVSS:3.0/AV:L/AC:H/PR:H/UI:N/S:C/C:H/I:H/A:H - Updated
- 2026-11-02
OSVRHSA-2016:1480
7.5
Red Hat Security Advisory: mysql55-mysql security update
- Record
RHSA-2016:1480- CVSS 3.0
- 7.5 High
CVSS:3.0/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H - Updated
- 2026-11-02
OSVRHSA-2016:1481
7.5
Red Hat Security Advisory: mariadb55-mariadb security update
- Record
RHSA-2016:1481- CVSS 3.0
- 7.5 High
CVSS:3.0/AV:L/AC:H/PR:H/UI:N/S:C/C:H/I:H/A:H - Updated
- 2026-11-02
OSVUBUNTU-CVE-2016-0651
5.5
Unspecified vulnerability in Oracle MySQL 5.5.46 and earlier allows local users to affect availability via vectors related to Optimizer.
- Record
UBUNTU-CVE-2016-0651- CVSS 3.1
- 5.5 Medium
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H - Updated
- 2026-11-02
OSVSUSE-RU-2023:3956-1 No score
Recommended update for mariadb104
This update for mariadb104 fixes the following issues:
- Implement version 10.4 of MariaDB (jsc#PED-2455):
- It is possible to use more than one authentication plugin for each user account.
- The root user account is being created with the ability to use two authentication plugins.
- All user accounts, passwords, and global privileges are now stored in the mysql.global_priv table.
- Is being supported for User Password Expiry, which is not active by default.
- Faster privilege checks for MariaDB setups with many user accounts or many database grants.
- Update mysql-systemd-helper to be aware of custom group (bsc#1200105)
- MariaDB is now support lz4 compression for 'INNODB'. (bsc#1186031)
- Add 'mysql-user.conf' file to enable systemd generating mysql user in containers. (bsc#1173028)
- Fixes an issue when MariaDB is ignoring the value of the parameter 'open_files_limit' in the global variables. (bsc#1180014)
- Record
SUSE-RU-2023:3956-1- Updated
- 2026-11-02
OSVSUSE-RU-2023:4991-1 No score
Recommended update for mariadb104
This update for mariadb104 fixes the following issues:
- Implement version 10.4 of MariaDB (jsc#PED-2455):
- It is possible to use more than one authentication plugin for each user account.
- The root user account is being created with the ability to use two authentication plugins.
- All user accounts, passwords, and global privileges are now stored in the mysql.global_priv table.
- Is being supported for User Password Expiry, which is not active by default.
- Faster privilege checks for MariaDB setups with many user accounts or many database grants.
- Update mysql-systemd-helper to be aware of custom group (bsc#1200105)
- MariaDB is now support lz4 compression for 'INNODB'. (bsc#1186031)
- Add 'mysql-user.conf' file to enable systemd generating mysql user in containers. (bsc#1173028)
- Fixes an issue when MariaDB is ignoring the value of the parameter 'open_files_limit' in the global variables. (bsc#1180014)
- Record
SUSE-RU-2023:4991-1- Updated
- 2026-11-02
OSVSUSE-SU-2016:1279-1 No score
Security update for mysql
mysql was updated to version 5.5.49 to fix 13 security issues.
These security issues were fixed:
- CVE-2016-0644: Unspecified vulnerability allowed local users to affect availability via vectors related to DDL (bsc#976341).
- CVE-2016-0646: Unspecified vulnerability allowed local users to affect availability via vectors related to DML (bsc#976341).
- CVE-2016-0647: Unspecified vulnerability allowed local users to affect availability via vectors related to FTS (bsc#976341).
- CVE-2016-0640: Unspecified vulnerability allowed local users to affect integrity and availability via vectors related to DML (bsc#976341).
- CVE-2016-0641: Unspecified vulnerability allowed local users to affect confidentiality and availability via vectors related to MyISAM (bsc#976341).
- CVE-2016-0642: Unspecified vulnerability allowed local users to affect integrity and availability via vectors related to Federated (bsc#976341).
- CVE-2016-0643: Unspecified vulnerability allowed local users to affect confidentiality via vectors related to DML (bsc#976341).
- CVE-2016-0666: Unspecified vulnerability allowed local users to affect availability via vectors related to Security: Privileges (bsc#976341).
- CVE-2016-0651: Unspecified vulnerability allowed local users to affect availability via vectors related to Optimizer (bsc#976341).
- CVE-2016-0650: Unspecified vulnerability allowed local users to affect availability via vectors related to Replication (bsc#976341).
- CVE-2016-0648: Unspecified vulnerability allowed local users to affect availability via vectors related to PS (bsc#976341).
- CVE-2016-0649: Unspecified vulnerability allowed local users to affect availability via vectors related to PS (bsc#976341).
- CVE-2016-2047: The ssl_verify_server_cert function in sql-common/client.c did not properly verify that the server hostname matches a domain name in the subject's Common Name (CN) or subjectAltName field of the X.509 certificate, which allowed man-in-the-middle attackers to spoof SSL servers via a '/CN=' string in a field in a certificate, as demonstrated by '/OU=/CN=bar.com/CN=foo.com (bsc#963806).
More details are available at
- Record
SUSE-SU-2016:1279-1- Updated
- 2026-11-02
OSVSUSE-SU-2016:1619-1 No score
Security update for mariadb
mariadb was updated to version 10.0.25 to fix 25 security issues.
These security issues were fixed:
- CVE-2016-0505: Unspecified vulnerability allowed remote authenticated users to affect availability via unknown vectors related to Options (bsc#980904).
- CVE-2016-0546: Unspecified vulnerability allowed local users to affect confidentiality, integrity, and availability via unknown vectors related to Client (bsc#980904).
- CVE-2016-0596: Unspecified vulnerability allowed remote authenticated users to affect availability via vectors related to DML (bsc#980904).
- CVE-2016-0597: Unspecified vulnerability allowed remote authenticated users to affect availability via unknown vectors related to Optimizer (bsc#980904).
- CVE-2016-0598: Unspecified vulnerability allowed remote authenticated users to affect availability via vectors related to DML (bsc#980904).
- CVE-2016-0600: Unspecified vulnerability allowed remote authenticated users to affect availability via unknown vectors related to InnoDB (bsc#980904).
- CVE-2016-0606: Unspecified vulnerability allowed remote authenticated users to affect integrity via unknown vectors related to encryption (bsc#980904).
- CVE-2016-0608: Unspecified vulnerability allowed remote authenticated users to affect availability via vectors related to UDF (bsc#980904).
- CVE-2016-0609: Unspecified vulnerability allowed remote authenticated users to affect availability via unknown vectors related to privileges (bsc#980904).
- CVE-2016-0616: Unspecified vulnerability allowed remote authenticated users to affect availability via unknown vectors related to Optimizer (bsc#980904).
- CVE-2016-0640: Unspecified vulnerability allowed local users to affect integrity and availability via vectors related to DML (bsc#980904).
- CVE-2016-0641: Unspecified vulnerability allowed local users to affect confidentiality and availability via vectors related to MyISAM (bsc#980904).
- CVE-2016-0642: Unspecified vulnerability allowed local users to affect integrity and availability via vectors related to Federated (bsc#980904).
- CVE-2016-0643: Unspecified vulnerability allowed local users to affect confidentiality via vectors related to DML (bsc#980904).
- CVE-2016-0644: Unspecified vulnerability allowed local users to affect availability via vectors related to DDL (bsc#980904).
- CVE-2016-0646: Unspecified vulnerability allowed local users to affect availability via vectors related to DML (bsc#980904).
- CVE-2016-0647: Unspecified vulnerability allowed local users to affect availability via vectors related to FTS (bsc#980904).
- CVE-2016-0648: Unspecified vulnerability allowed local users to affect availability via vectors related to PS (bsc#980904).
- CVE-2016-0649: Unspecified vulnerability allowed local users to affect availability via vectors related to PS (bsc#980904).
- CVE-2016-0650: Unspecified vulnerability allowed local users to affect availability via vectors related to Replication (bsc#980904).
- CVE-2016-0651: Unspecified vulnerability allowed local users to affect availability via vectors related to Optimizer (bsc#980904).
- CVE-2016-0655: Unspecified vulnerability allowed local users to affect availability via vectors related to InnoDB (bsc#980904).
- CVE-2016-0666: Unspecified vulnerability allowed local users to affect availability via vectors related to Security: Privileges (bsc#980904).
- CVE-2016-0668: Unspecified vulnerability allowed local users to affect availability via vectors related to InnoDB (bsc#980904).
- CVE-2016-2047: The ssl_verify_server_cert function in sql-common/client.c did not properly verify that the server hostname matches a domain name in the subject's Common Name (CN) or subjectAltName field of the X.509 certificate, which allowed man-in-the-middle attackers to spoof SSL servers via a '/CN=' string in a field in a certificate, as demonstrated by '/OU=/CN=bar.com/CN=foo.com (bsc#963806).
These non-security issues were fixed:
- bsc#960961: Use 'plugin-load-add' instead of…
- Record
SUSE-SU-2016:1619-1- Updated
- 2026-11-02
OSVSUSE-SU-2016:1620-1 No score
Security update for mariadb
mariadb was updated to version 10.0.25 to fix 25 security issues.
These security issues were fixed:
- CVE-2016-0505: Unspecified vulnerability allowed remote authenticated users to affect availability via unknown vectors related to Options (bsc#980904).
- CVE-2016-0546: Unspecified vulnerability allowed local users to affect confidentiality, integrity, and availability via unknown vectors related to Client (bsc#980904).
- CVE-2016-0596: Unspecified vulnerability allowed remote authenticated users to affect availability via vectors related to DML (bsc#980904).
- CVE-2016-0597: Unspecified vulnerability allowed remote authenticated users to affect availability via unknown vectors related to Optimizer (bsc#980904).
- CVE-2016-0598: Unspecified vulnerability allowed remote authenticated users to affect availability via vectors related to DML (bsc#980904).
- CVE-2016-0600: Unspecified vulnerability allowed remote authenticated users to affect availability via unknown vectors related to InnoDB (bsc#980904).
- CVE-2016-0606: Unspecified vulnerability allowed remote authenticated users to affect integrity via unknown vectors related to encryption (bsc#980904).
- CVE-2016-0608: Unspecified vulnerability allowed remote authenticated users to affect availability via vectors related to UDF (bsc#980904).
- CVE-2016-0609: Unspecified vulnerability allowed remote authenticated users to affect availability via unknown vectors related to privileges (bsc#980904).
- CVE-2016-0616: Unspecified vulnerability allowed remote authenticated users to affect availability via unknown vectors related to Optimizer (bsc#980904).
- CVE-2016-0640: Unspecified vulnerability allowed local users to affect integrity and availability via vectors related to DML (bsc#980904).
- CVE-2016-0641: Unspecified vulnerability allowed local users to affect confidentiality and availability via vectors related to MyISAM (bsc#980904).
- CVE-2016-0642: Unspecified vulnerability allowed local users to affect integrity and availability via vectors related to Federated (bsc#980904).
- CVE-2016-0643: Unspecified vulnerability allowed local users to affect confidentiality via vectors related to DML (bsc#980904).
- CVE-2016-0644: Unspecified vulnerability allowed local users to affect availability via vectors related to DDL (bsc#980904).
- CVE-2016-0646: Unspecified vulnerability allowed local users to affect availability via vectors related to DML (bsc#980904).
- CVE-2016-0647: Unspecified vulnerability allowed local users to affect availability via vectors related to FTS (bsc#980904).
- CVE-2016-0648: Unspecified vulnerability allowed local users to affect availability via vectors related to PS (bsc#980904).
- CVE-2016-0649: Unspecified vulnerability allowed local users to affect availability via vectors related to PS (bsc#980904).
- CVE-2016-0650: Unspecified vulnerability allowed local users to affect availability via vectors related to Replication (bsc#980904).
- CVE-2016-0651: Unspecified vulnerability allowed local users to affect availability via vectors related to Optimizer (bsc#980904).
- CVE-2016-0655: Unspecified vulnerability allowed local users to affect availability via vectors related to InnoDB (bsc#980904).
- CVE-2016-0666: Unspecified vulnerability allowed local users to affect availability via vectors related to Security: Privileges (bsc#980904).
- CVE-2016-0668: Unspecified vulnerability allowed local users to affect availability via vectors related to InnoDB (bsc#980904).
- CVE-2016-2047: The ssl_verify_server_cert function in sql-common/client.c did not properly verify that the server hostname matches a domain name in the subject's Common Name (CN) or subjectAltName field of the X.509 certificate, which allowed man-in-the-middle attackers to spoof SSL servers via a '/CN=' string in a field in a certificate, as demonstrated by '/OU=/CN=bar.com/CN=foo.com (bsc#963806).
These non-security issues were fixed:
- bsc#961935: Remove the leftovers of 'openSUSE' string…
- Record
SUSE-SU-2016:1620-1- Updated
- 2026-11-02
Affected products
Affected packages
| Package | Affected | Fixed |
|---|---|---|
mariadbRed Hat:enterprise_linux:7::client From an advisory covering 27 CVEs |
before 1:5.5.47-1.el7_2 | 1:5.5.47-1.el7_2 |
mariadb-debuginfoRed Hat:enterprise_linux:7::client From an advisory covering 27 CVEs |
before 1:5.5.47-1.el7_2 | 1:5.5.47-1.el7_2 |
mariadb-libsRed Hat:enterprise_linux:7::client From an advisory covering 27 CVEs |
before 1:5.5.47-1.el7_2 | 1:5.5.47-1.el7_2 |
mariadb-serverRed Hat:enterprise_linux:7::client From an advisory covering 27 CVEs |
before 1:5.5.47-1.el7_2 | 1:5.5.47-1.el7_2 |
mariadb-benchRed Hat:enterprise_linux:7::client From an advisory covering 27 CVEs |
before 1:5.5.47-1.el7_2 | 1:5.5.47-1.el7_2 |
mariadb-develRed Hat:enterprise_linux:7::client From an advisory covering 27 CVEs |
before 1:5.5.47-1.el7_2 | 1:5.5.47-1.el7_2 |
mariadb-embeddedRed Hat:enterprise_linux:7::client From an advisory covering 27 CVEs |
before 1:5.5.47-1.el7_2 | 1:5.5.47-1.el7_2 |
mariadb-embedded-develRed Hat:enterprise_linux:7::client From an advisory covering 27 CVEs |
before 1:5.5.47-1.el7_2 | 1:5.5.47-1.el7_2 |
mariadb-testRed Hat:enterprise_linux:7::client From an advisory covering 27 CVEs |
before 1:5.5.47-1.el7_2 | 1:5.5.47-1.el7_2 |
mariadbRed Hat:enterprise_linux:7::computenode From an advisory covering 27 CVEs |
before 1:5.5.47-1.el7_2 | 1:5.5.47-1.el7_2 |
Show 108 moreShow less
| Package | Affected | Fixed |
|---|---|---|
mariadb-debuginfoRed Hat:enterprise_linux:7::computenode From an advisory covering 27 CVEs |
before 1:5.5.47-1.el7_2 | 1:5.5.47-1.el7_2 |
mariadb-libsRed Hat:enterprise_linux:7::computenode From an advisory covering 27 CVEs |
before 1:5.5.47-1.el7_2 | 1:5.5.47-1.el7_2 |
mariadb-benchRed Hat:enterprise_linux:7::computenode From an advisory covering 27 CVEs |
before 1:5.5.47-1.el7_2 | 1:5.5.47-1.el7_2 |
mariadb-develRed Hat:enterprise_linux:7::computenode From an advisory covering 27 CVEs |
before 1:5.5.47-1.el7_2 | 1:5.5.47-1.el7_2 |
mariadb-embeddedRed Hat:enterprise_linux:7::computenode From an advisory covering 27 CVEs |
before 1:5.5.47-1.el7_2 | 1:5.5.47-1.el7_2 |
mariadb-embedded-develRed Hat:enterprise_linux:7::computenode From an advisory covering 27 CVEs |
before 1:5.5.47-1.el7_2 | 1:5.5.47-1.el7_2 |
mariadb-serverRed Hat:enterprise_linux:7::computenode From an advisory covering 27 CVEs |
before 1:5.5.47-1.el7_2 | 1:5.5.47-1.el7_2 |
mariadb-testRed Hat:enterprise_linux:7::computenode From an advisory covering 27 CVEs |
before 1:5.5.47-1.el7_2 | 1:5.5.47-1.el7_2 |
mariadbRed Hat:enterprise_linux:7::server From an advisory covering 27 CVEs |
before 1:5.5.47-1.el7_2 | 1:5.5.47-1.el7_2 |
mariadb-benchRed Hat:enterprise_linux:7::server From an advisory covering 27 CVEs |
before 1:5.5.47-1.el7_2 | 1:5.5.47-1.el7_2 |
mariadb-debuginfoRed Hat:enterprise_linux:7::server From an advisory covering 27 CVEs |
before 1:5.5.47-1.el7_2 | 1:5.5.47-1.el7_2 |
mariadb-develRed Hat:enterprise_linux:7::server From an advisory covering 27 CVEs |
before 1:5.5.47-1.el7_2 | 1:5.5.47-1.el7_2 |
mariadb-libsRed Hat:enterprise_linux:7::server From an advisory covering 27 CVEs |
before 1:5.5.47-1.el7_2 | 1:5.5.47-1.el7_2 |
mariadb-serverRed Hat:enterprise_linux:7::server From an advisory covering 27 CVEs |
before 1:5.5.47-1.el7_2 | 1:5.5.47-1.el7_2 |
mariadb-testRed Hat:enterprise_linux:7::server From an advisory covering 27 CVEs |
before 1:5.5.47-1.el7_2 | 1:5.5.47-1.el7_2 |
mariadb-embeddedRed Hat:enterprise_linux:7::server From an advisory covering 27 CVEs |
before 1:5.5.47-1.el7_2 | 1:5.5.47-1.el7_2 |
mariadb-embedded-develRed Hat:enterprise_linux:7::server From an advisory covering 27 CVEs |
before 1:5.5.47-1.el7_2 | 1:5.5.47-1.el7_2 |
mariadbRed Hat:enterprise_linux:7::workstation From an advisory covering 27 CVEs |
before 1:5.5.47-1.el7_2 | 1:5.5.47-1.el7_2 |
mariadb-benchRed Hat:enterprise_linux:7::workstation From an advisory covering 27 CVEs |
before 1:5.5.47-1.el7_2 | 1:5.5.47-1.el7_2 |
mariadb-debuginfoRed Hat:enterprise_linux:7::workstation From an advisory covering 27 CVEs |
before 1:5.5.47-1.el7_2 | 1:5.5.47-1.el7_2 |
mariadb-develRed Hat:enterprise_linux:7::workstation From an advisory covering 27 CVEs |
before 1:5.5.47-1.el7_2 | 1:5.5.47-1.el7_2 |
mariadb-libsRed Hat:enterprise_linux:7::workstation From an advisory covering 27 CVEs |
before 1:5.5.47-1.el7_2 | 1:5.5.47-1.el7_2 |
mariadb-serverRed Hat:enterprise_linux:7::workstation From an advisory covering 27 CVEs |
before 1:5.5.47-1.el7_2 | 1:5.5.47-1.el7_2 |
mariadb-testRed Hat:enterprise_linux:7::workstation From an advisory covering 27 CVEs |
before 1:5.5.47-1.el7_2 | 1:5.5.47-1.el7_2 |
mariadb-embeddedRed Hat:enterprise_linux:7::workstation From an advisory covering 27 CVEs |
before 1:5.5.47-1.el7_2 | 1:5.5.47-1.el7_2 |
mariadb-embedded-develRed Hat:enterprise_linux:7::workstation From an advisory covering 27 CVEs |
before 1:5.5.47-1.el7_2 | 1:5.5.47-1.el7_2 |
rh-mariadb100-mariadbRed Hat:rhel_software_collections:2::el6 From an advisory covering 58 CVEs |
before 1:10.0.25-4.el6 | 1:10.0.25-4.el6 |
rh-mariadb100-mariadb-benchRed Hat:rhel_software_collections:2::el6 From an advisory covering 58 CVEs |
before 1:10.0.25-4.el6 | 1:10.0.25-4.el6 |
rh-mariadb100-mariadb-commonRed Hat:rhel_software_collections:2::el6 From an advisory covering 58 CVEs |
before 1:10.0.25-4.el6 | 1:10.0.25-4.el6 |
rh-mariadb100-mariadb-configRed Hat:rhel_software_collections:2::el6 From an advisory covering 58 CVEs |
before 1:10.0.25-4.el6 | 1:10.0.25-4.el6 |
rh-mariadb100-mariadb-debuginfoRed Hat:rhel_software_collections:2::el6 From an advisory covering 58 CVEs |
before 1:10.0.25-4.el6 | 1:10.0.25-4.el6 |
rh-mariadb100-mariadb-develRed Hat:rhel_software_collections:2::el6 From an advisory covering 58 CVEs |
before 1:10.0.25-4.el6 | 1:10.0.25-4.el6 |
rh-mariadb100-mariadb-errmsgRed Hat:rhel_software_collections:2::el6 From an advisory covering 58 CVEs |
before 1:10.0.25-4.el6 | 1:10.0.25-4.el6 |
rh-mariadb100-mariadb-oqgraph-engineRed Hat:rhel_software_collections:2::el6 From an advisory covering 58 CVEs |
before 1:10.0.25-4.el6 | 1:10.0.25-4.el6 |
rh-mariadb100-mariadb-serverRed Hat:rhel_software_collections:2::el6 From an advisory covering 58 CVEs |
before 1:10.0.25-4.el6 | 1:10.0.25-4.el6 |
rh-mariadb100-mariadb-testRed Hat:rhel_software_collections:2::el6 From an advisory covering 58 CVEs |
before 1:10.0.25-4.el6 | 1:10.0.25-4.el6 |
rh-mariadb100-mariadbRed Hat:rhel_software_collections:2::el7 From an advisory covering 58 CVEs |
before 1:10.0.25-4.el7 | 1:10.0.25-4.el7 |
rh-mariadb100-mariadb-benchRed Hat:rhel_software_collections:2::el7 From an advisory covering 58 CVEs |
before 1:10.0.25-4.el7 | 1:10.0.25-4.el7 |
rh-mariadb100-mariadb-commonRed Hat:rhel_software_collections:2::el7 From an advisory covering 58 CVEs |
before 1:10.0.25-4.el7 | 1:10.0.25-4.el7 |
rh-mariadb100-mariadb-configRed Hat:rhel_software_collections:2::el7 From an advisory covering 58 CVEs |
before 1:10.0.25-4.el7 | 1:10.0.25-4.el7 |
rh-mariadb100-mariadb-debuginfoRed Hat:rhel_software_collections:2::el7 From an advisory covering 58 CVEs |
before 1:10.0.25-4.el7 | 1:10.0.25-4.el7 |
rh-mariadb100-mariadb-develRed Hat:rhel_software_collections:2::el7 From an advisory covering 58 CVEs |
before 1:10.0.25-4.el7 | 1:10.0.25-4.el7 |
rh-mariadb100-mariadb-errmsgRed Hat:rhel_software_collections:2::el7 From an advisory covering 58 CVEs |
before 1:10.0.25-4.el7 | 1:10.0.25-4.el7 |
rh-mariadb100-mariadb-oqgraph-engineRed Hat:rhel_software_collections:2::el7 From an advisory covering 58 CVEs |
before 1:10.0.25-4.el7 | 1:10.0.25-4.el7 |
rh-mariadb100-mariadb-serverRed Hat:rhel_software_collections:2::el7 From an advisory covering 58 CVEs |
before 1:10.0.25-4.el7 | 1:10.0.25-4.el7 |
rh-mariadb100-mariadb-testRed Hat:rhel_software_collections:2::el7 From an advisory covering 58 CVEs |
before 1:10.0.25-4.el7 | 1:10.0.25-4.el7 |
mysql55-mysqlRed Hat:rhel_software_collections:2::el6 From an advisory covering 40 CVEs |
before 0:5.5.50-1.el6 | 0:5.5.50-1.el6 |
mysql55-mysql-benchRed Hat:rhel_software_collections:2::el6 From an advisory covering 40 CVEs |
before 0:5.5.50-1.el6 | 0:5.5.50-1.el6 |
mysql55-mysql-debuginfoRed Hat:rhel_software_collections:2::el6 From an advisory covering 40 CVEs |
before 0:5.5.50-1.el6 | 0:5.5.50-1.el6 |
mysql55-mysql-develRed Hat:rhel_software_collections:2::el6 From an advisory covering 40 CVEs |
before 0:5.5.50-1.el6 | 0:5.5.50-1.el6 |
mysql55-mysql-libsRed Hat:rhel_software_collections:2::el6 From an advisory covering 40 CVEs |
before 0:5.5.50-1.el6 | 0:5.5.50-1.el6 |
mysql55-mysql-serverRed Hat:rhel_software_collections:2::el6 From an advisory covering 40 CVEs |
before 0:5.5.50-1.el6 | 0:5.5.50-1.el6 |
mysql55-mysql-testRed Hat:rhel_software_collections:2::el6 From an advisory covering 40 CVEs |
before 0:5.5.50-1.el6 | 0:5.5.50-1.el6 |
mysql55-mysqlRed Hat:rhel_software_collections:2::el7 From an advisory covering 40 CVEs |
before 0:5.5.50-1.el7 | 0:5.5.50-1.el7 |
mysql55-mysql-benchRed Hat:rhel_software_collections:2::el7 From an advisory covering 40 CVEs |
before 0:5.5.50-1.el7 | 0:5.5.50-1.el7 |
mysql55-mysql-debuginfoRed Hat:rhel_software_collections:2::el7 From an advisory covering 40 CVEs |
before 0:5.5.50-1.el7 | 0:5.5.50-1.el7 |
mysql55-mysql-develRed Hat:rhel_software_collections:2::el7 From an advisory covering 40 CVEs |
before 0:5.5.50-1.el7 | 0:5.5.50-1.el7 |
mysql55-mysql-libsRed Hat:rhel_software_collections:2::el7 From an advisory covering 40 CVEs |
before 0:5.5.50-1.el7 | 0:5.5.50-1.el7 |
mysql55-mysql-serverRed Hat:rhel_software_collections:2::el7 From an advisory covering 40 CVEs |
before 0:5.5.50-1.el7 | 0:5.5.50-1.el7 |
mysql55-mysql-testRed Hat:rhel_software_collections:2::el7 From an advisory covering 40 CVEs |
before 0:5.5.50-1.el7 | 0:5.5.50-1.el7 |
mariadb55-mariadbRed Hat:rhel_software_collections:2::el6 From an advisory covering 39 CVEs |
before 0:5.5.49-1.el6 | 0:5.5.49-1.el6 |
mariadb55-mariadb-benchRed Hat:rhel_software_collections:2::el6 From an advisory covering 39 CVEs |
before 0:5.5.49-1.el6 | 0:5.5.49-1.el6 |
mariadb55-mariadb-debuginfoRed Hat:rhel_software_collections:2::el6 From an advisory covering 39 CVEs |
before 0:5.5.49-1.el6 | 0:5.5.49-1.el6 |
mariadb55-mariadb-develRed Hat:rhel_software_collections:2::el6 From an advisory covering 39 CVEs |
before 0:5.5.49-1.el6 | 0:5.5.49-1.el6 |
mariadb55-mariadb-libsRed Hat:rhel_software_collections:2::el6 From an advisory covering 39 CVEs |
before 0:5.5.49-1.el6 | 0:5.5.49-1.el6 |
mariadb55-mariadb-serverRed Hat:rhel_software_collections:2::el6 From an advisory covering 39 CVEs |
before 0:5.5.49-1.el6 | 0:5.5.49-1.el6 |
mariadb55-mariadb-testRed Hat:rhel_software_collections:2::el6 From an advisory covering 39 CVEs |
before 0:5.5.49-1.el6 | 0:5.5.49-1.el6 |
mariadb55-mariadbRed Hat:rhel_software_collections:2::el7 From an advisory covering 39 CVEs |
before 0:5.5.49-1.el7 | 0:5.5.49-1.el7 |
mariadb55-mariadb-benchRed Hat:rhel_software_collections:2::el7 From an advisory covering 39 CVEs |
before 0:5.5.49-1.el7 | 0:5.5.49-1.el7 |
mariadb55-mariadb-debuginfoRed Hat:rhel_software_collections:2::el7 From an advisory covering 39 CVEs |
before 0:5.5.49-1.el7 | 0:5.5.49-1.el7 |
mariadb55-mariadb-develRed Hat:rhel_software_collections:2::el7 From an advisory covering 39 CVEs |
before 0:5.5.49-1.el7 | 0:5.5.49-1.el7 |
mariadb55-mariadb-libsRed Hat:rhel_software_collections:2::el7 From an advisory covering 39 CVEs |
before 0:5.5.49-1.el7 | 0:5.5.49-1.el7 |
mariadb55-mariadb-serverRed Hat:rhel_software_collections:2::el7 From an advisory covering 39 CVEs |
before 0:5.5.49-1.el7 | 0:5.5.49-1.el7 |
mariadb55-mariadb-testRed Hat:rhel_software_collections:2::el7 From an advisory covering 39 CVEs |
before 0:5.5.49-1.el7 | 0:5.5.49-1.el7 |
mariadb104SUSE:Linux Enterprise High Performance Computing 15 SP1-LTSS From an advisory covering 221 CVEs |
before 10.4.30-150100.3.5.10 | 10.4.30-150100.3.5.10 |
python-mysqlclientSUSE:Linux Enterprise High Performance Computing 15 SP1-LTSS From an advisory covering 221 CVEs |
before 1.4.6-150100.3.3.7 | 1.4.6-150100.3.3.7 |
mariadb104SUSE:Linux Enterprise Server 15 SP1-LTSS From an advisory covering 221 CVEs |
before 10.4.30-150100.3.5.10 | 10.4.30-150100.3.5.10 |
python-mysqlclientSUSE:Linux Enterprise Server 15 SP1-LTSS From an advisory covering 221 CVEs |
before 1.4.6-150100.3.3.7 | 1.4.6-150100.3.3.7 |
mariadb104SUSE:Linux Enterprise Server for SAP Applications 15 SP1 From an advisory covering 221 CVEs |
before 10.4.30-150100.3.5.10 | 10.4.30-150100.3.5.10 |
python-mysqlclientSUSE:Linux Enterprise Server for SAP Applications 15 SP1 From an advisory covering 221 CVEs |
before 1.4.6-150100.3.3.7 | 1.4.6-150100.3.3.7 |
lz4SUSE:Linux Enterprise Software Development Kit 12 SP5 From an advisory covering 221 CVEs |
before 1.8.0-3.5.2 | 1.8.0-3.5.2 |
mariadb-connector-cSUSE:Linux Enterprise Software Development Kit 12 SP5 From an advisory covering 221 CVEs |
before 3.1.22-2.35.1 | 3.1.22-2.35.1 |
mariadb104SUSE:Linux Enterprise Software Development Kit 12 SP5 From an advisory covering 221 CVEs |
before 10.4.30-8.5.46 | 10.4.30-8.5.46 |
python-mysqlclientSUSE:Linux Enterprise Software Development Kit 12 SP5 From an advisory covering 221 CVEs |
before 1.3.14-8.9.2 | 1.3.14-8.9.2 |
lz4SUSE:Linux Enterprise Server 12 SP5 From an advisory covering 221 CVEs |
before 1.8.0-3.5.2 | 1.8.0-3.5.2 |
mariadb-connector-cSUSE:Linux Enterprise Server 12 SP5 From an advisory covering 221 CVEs |
before 3.1.22-2.35.1 | 3.1.22-2.35.1 |
mariadb104SUSE:Linux Enterprise Server 12 SP5 From an advisory covering 221 CVEs |
before 10.4.30-8.5.46 | 10.4.30-8.5.46 |
python-mysqlclientSUSE:Linux Enterprise Server 12 SP5 From an advisory covering 221 CVEs |
before 1.3.14-8.9.2 | 1.3.14-8.9.2 |
lz4SUSE:Linux Enterprise Server for SAP Applications 12 SP5 From an advisory covering 221 CVEs |
before 1.8.0-3.5.2 | 1.8.0-3.5.2 |
mariadb-connector-cSUSE:Linux Enterprise Server for SAP Applications 12 SP5 From an advisory covering 221 CVEs |
before 3.1.22-2.35.1 | 3.1.22-2.35.1 |
mariadb104SUSE:Linux Enterprise Server for SAP Applications 12 SP5 From an advisory covering 221 CVEs |
before 10.4.30-8.5.46 | 10.4.30-8.5.46 |
python-mysqlclientSUSE:Linux Enterprise Server for SAP Applications 12 SP5 From an advisory covering 221 CVEs |
before 1.3.14-8.9.2 | 1.3.14-8.9.2 |
mysqlSUSE:Linux Enterprise Software Development Kit 11 SP4 From an advisory covering 13 CVEs |
before 5.5.49-0.20.1 | 5.5.49-0.20.1 |
mysqlSUSE:Linux Enterprise Server 11 SP4 From an advisory covering 13 CVEs |
before 5.5.49-0.20.1 | 5.5.49-0.20.1 |
mysqlSUSE:Linux Enterprise Server for SAP Applications 11 SP4 From an advisory covering 13 CVEs |
before 5.5.49-0.20.1 | 5.5.49-0.20.1 |
mariadbSUSE:Linux Enterprise Desktop 12 From an advisory covering 25 CVEs |
before 10.0.25-20.6.1 | 10.0.25-20.6.1 |
mariadbSUSE:Linux Enterprise Software Development Kit 12 From an advisory covering 25 CVEs |
before 10.0.25-20.6.1 | 10.0.25-20.6.1 |
mariadbSUSE:Linux Enterprise Server 12 From an advisory covering 25 CVEs |
before 10.0.25-20.6.1 | 10.0.25-20.6.1 |
mariadbSUSE:Linux Enterprise Server for SAP Applications 12 From an advisory covering 25 CVEs |
before 10.0.25-20.6.1 | 10.0.25-20.6.1 |
mariadbSUSE:Linux Enterprise Workstation Extension 12 From an advisory covering 25 CVEs |
before 10.0.25-20.6.1 | 10.0.25-20.6.1 |
mariadbSUSE:Linux Enterprise Desktop 12 SP1 From an advisory covering 25 CVEs |
before 10.0.25-6.1 | 10.0.25-6.1 |
mariadbSUSE:Linux Enterprise Software Development Kit 12 SP1 From an advisory covering 25 CVEs |
before 10.0.25-6.1 | 10.0.25-6.1 |
mariadbSUSE:Linux Enterprise Server 12 SP1 From an advisory covering 25 CVEs |
before 10.0.25-6.1 | 10.0.25-6.1 |
mariadbSUSE:Linux Enterprise Server for SAP Applications 12 SP1 From an advisory covering 25 CVEs |
before 10.0.25-6.1 | 10.0.25-6.1 |
mariadbSUSE:Linux Enterprise Workstation Extension 12 SP1 From an advisory covering 25 CVEs |
before 10.0.25-6.1 | 10.0.25-6.1 |
mariadb-5.5Ubuntu:14.04:LTS |
before 5.5.47-1ubuntu0.14.04.1, plus listed versions 5.5.32-1ubuntu15.5.35-1ubuntu15.5.36-15.5.37-0ubuntu0.14.04.15.5.39-0ubuntu0.14.04.1 Show 6 moreShow less5.5.40-0ubuntu0.14.04.15.5.41-0ubuntu0.14.04.25.5.41-1ubuntu0.14.04.15.5.43-1ubuntu0.14.04.25.5.44-1ubuntu0.14.04.15.5.46-1ubuntu0.14.04.2 |
5.5.47-1ubuntu0.14.04.1 |
percona-server-5.6Ubuntu:16.04:LTS |
All versions, plus listed versions 5.6.22-rel71.0-0ubuntu25.6.22-rel71.0-0ubuntu45.6.22-rel71.0-0ubuntu4.1 |
None known |
percona-xtradb-cluster-5.6Ubuntu:16.04:LTS |
All versions, plus listed versions 5.6.21-25.8-0ubuntu25.6.21-25.8-0ubuntu35.6.21-25.8-0ubuntu3.15.6.21-25.8-0ubuntu3.25.6.34-26.19-0ubuntu0.16.04.15.6.34-26.19-0ubuntu0.16.04.25.6.37-26.21-0ubuntu0.16.04.15.6.37-26.21-0ubuntu0.16.04.2 |
None known |
History
| Recorded | Changed | Sources |
|---|---|---|
| affected, facts | ||
| aliases | EUVD | |
| first indexed | CVE List, GitHub Advisories, NVD, OSV |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2016-0651 is a medium vulnerability (CVSS 5.5) in Oracle Mysql, published April 21, 2016. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 1.35%, the 71st percentile. Fixed in mariadb-5.5 5.5.47-1ubuntu0.14.04.1.
References
lists.opensuse.org/opensuse-security-announce/2016-06/msg00034.html
rhn.redhat.com/errata/RHSA-2016-1481.html
access.redhat.com/errata/RHSA-2016:1132
rhn.redhat.com/errata/RHSA-2016-0534.html
securitytracker.com/id/1035606
lists.opensuse.org/opensuse-security-announce/2016-06/msg00033.html
Show 194 moreShow less
rhn.redhat.com/errata/RHSA-2016-1480.html
lists.opensuse.org/opensuse-security-announce/2016-06/msg00051.html
oracle.com/technetwork/security-advisory/cpuapr2016v3-2985753.html
lists.opensuse.org/opensuse-security-announce/2016-06/msg00053.html
lists.opensuse.org/opensuse-security-announce/2016-05/msg00035.html
nvd.nist.gov/vuln/detail/CVE-2016-0651
github.com/advisories/GHSA-f28w-g82h-6rwv
access.redhat.com/errata/RHSA-2016:0534
access.redhat.com/security/updates/classification
mariadb.com/kb/en/mariadb/mariadb-5545-release-notes
mariadb.com/kb/en/mariadb/mariadb-5546-release-notes
mariadb.com/kb/en/mariadb/mariadb-5547-release-notes
oracle.com/technetwork/topics/security/cpuoct2015-2367953.html
oracle.com/technetwork/topics/security/cpujan2016-2367955.html
bugzilla.redhat.com/show_bug.cgi?id=1274752
bugzilla.redhat.com/show_bug.cgi?id=1274756
bugzilla.redhat.com/show_bug.cgi?id=1274759
bugzilla.redhat.com/show_bug.cgi?id=1274761
bugzilla.redhat.com/show_bug.cgi?id=1274764
bugzilla.redhat.com/show_bug.cgi?id=1274766
bugzilla.redhat.com/show_bug.cgi?id=1274767
bugzilla.redhat.com/show_bug.cgi?id=1274771
bugzilla.redhat.com/show_bug.cgi?id=1274773
bugzilla.redhat.com/show_bug.cgi?id=1274776
bugzilla.redhat.com/show_bug.cgi?id=1274781
bugzilla.redhat.com/show_bug.cgi?id=1274783
bugzilla.redhat.com/show_bug.cgi?id=1274794
bugzilla.redhat.com/show_bug.cgi?id=1301492
bugzilla.redhat.com/show_bug.cgi?id=1301493
bugzilla.redhat.com/show_bug.cgi?id=1301496
bugzilla.redhat.com/show_bug.cgi?id=1301497
bugzilla.redhat.com/show_bug.cgi?id=1301498
bugzilla.redhat.com/show_bug.cgi?id=1301501
bugzilla.redhat.com/show_bug.cgi?id=1301504
bugzilla.redhat.com/show_bug.cgi?id=1301506
bugzilla.redhat.com/show_bug.cgi?id=1301507
bugzilla.redhat.com/show_bug.cgi?id=1301510
bugzilla.redhat.com/show_bug.cgi?id=1301874
bugzilla.redhat.com/show_bug.cgi?id=1303946
security.access.redhat.com/data/csaf/v2/advisories/2016/rhsa-2016_0534.json
access.redhat.com/security/cve/CVE-2015-4792
cve.org/CVERecord?id=CVE-2015-4792
nvd.nist.gov/vuln/detail/CVE-2015-4792
access.redhat.com/security/cve/CVE-2015-4802
cve.org/CVERecord?id=CVE-2015-4802
nvd.nist.gov/vuln/detail/CVE-2015-4802
access.redhat.com/security/cve/CVE-2015-4815
cve.org/CVERecord?id=CVE-2015-4815
nvd.nist.gov/vuln/detail/CVE-2015-4815
access.redhat.com/security/cve/CVE-2015-4816
cve.org/CVERecord?id=CVE-2015-4816
nvd.nist.gov/vuln/detail/CVE-2015-4816
access.redhat.com/security/cve/CVE-2015-4819
cve.org/CVERecord?id=CVE-2015-4819
nvd.nist.gov/vuln/detail/CVE-2015-4819
access.redhat.com/security/cve/CVE-2015-4826
cve.org/CVERecord?id=CVE-2015-4826
nvd.nist.gov/vuln/detail/CVE-2015-4826
access.redhat.com/security/cve/CVE-2015-4830
cve.org/CVERecord?id=CVE-2015-4830
nvd.nist.gov/vuln/detail/CVE-2015-4830
access.redhat.com/security/cve/CVE-2015-4836
cve.org/CVERecord?id=CVE-2015-4836
nvd.nist.gov/vuln/detail/CVE-2015-4836
access.redhat.com/security/cve/CVE-2015-4858
cve.org/CVERecord?id=CVE-2015-4858
nvd.nist.gov/vuln/detail/CVE-2015-4858
access.redhat.com/security/cve/CVE-2015-4861
cve.org/CVERecord?id=CVE-2015-4861
nvd.nist.gov/vuln/detail/CVE-2015-4861
access.redhat.com/security/cve/CVE-2015-4870
cve.org/CVERecord?id=CVE-2015-4870
nvd.nist.gov/vuln/detail/CVE-2015-4870
access.redhat.com/security/cve/CVE-2015-4879
cve.org/CVERecord?id=CVE-2015-4879
nvd.nist.gov/vuln/detail/CVE-2015-4879
access.redhat.com/security/cve/CVE-2015-4913
cve.org/CVERecord?id=CVE-2015-4913
nvd.nist.gov/vuln/detail/CVE-2015-4913
access.redhat.com/security/cve/CVE-2016-0505
cve.org/CVERecord?id=CVE-2016-0505
nvd.nist.gov/vuln/detail/CVE-2016-0505
oracle.com/technetwork/topics/security/cpujan2016verbose-2367956.html
access.redhat.com/security/cve/CVE-2016-0546
cve.org/CVERecord?id=CVE-2016-0546
nvd.nist.gov/vuln/detail/CVE-2016-0546
access.redhat.com/security/cve/CVE-2016-0596
cve.org/CVERecord?id=CVE-2016-0596
nvd.nist.gov/vuln/detail/CVE-2016-0596
access.redhat.com/security/cve/CVE-2016-0597
cve.org/CVERecord?id=CVE-2016-0597
nvd.nist.gov/vuln/detail/CVE-2016-0597
access.redhat.com/security/cve/CVE-2016-0598
cve.org/CVERecord?id=CVE-2016-0598
nvd.nist.gov/vuln/detail/CVE-2016-0598
access.redhat.com/security/cve/CVE-2016-0600
cve.org/CVERecord?id=CVE-2016-0600
nvd.nist.gov/vuln/detail/CVE-2016-0600
access.redhat.com/security/cve/CVE-2016-0606
cve.org/CVERecord?id=CVE-2016-0606
nvd.nist.gov/vuln/detail/CVE-2016-0606
access.redhat.com/security/cve/CVE-2016-0608
cve.org/CVERecord?id=CVE-2016-0608
nvd.nist.gov/vuln/detail/CVE-2016-0608
access.redhat.com/security/cve/CVE-2016-0609
cve.org/CVERecord?id=CVE-2016-0609
nvd.nist.gov/vuln/detail/CVE-2016-0609
access.redhat.com/security/cve/CVE-2016-0616
cve.org/CVERecord?id=CVE-2016-0616
nvd.nist.gov/vuln/detail/CVE-2016-0616
access.redhat.com/security/cve/CVE-2016-0642
bugzilla.redhat.com/show_bug.cgi?id=1329243
cve.org/CVERecord?id=CVE-2016-0642
nvd.nist.gov/vuln/detail/CVE-2016-0642
oracle.com/technetwork/topics/security/cpuapr2016verbose-2881709.html
bugzilla.redhat.com/show_bug.cgi?id=1329254
cve.org/CVERecord?id=CVE-2016-0651
cve.org/CVERecord?id=CVE-2016-2047
nvd.nist.gov/vuln/detail/CVE-2016-2047
openwall.com/lists/oss-security/2016/01/26/3
cve.org/CVERecord?id=CVE-2016-3471
nvd.nist.gov/vuln/detail/CVE-2016-3471
oracle.com/technetwork/topics/security/cpujul2016-2881720.html
oracle.com/technetwork/topics/security/cpuapr2016-2881694.html
mariadb.com/kb/en/mariadb/mariadb-10021-release-notes
mariadb.com/kb/en/mariadb/mariadb-10022-release-notes
mariadb.com/kb/en/mariadb/mariadb-10023-release-notes
mariadb.com/kb/en/mariadb/mariadb-10024-release-notes
mariadb.com/kb/en/mariadb/mariadb-10025-release-notes
security.access.redhat.com/data/csaf/v2/advisories/2016/rhsa-2016_1132.json
oracle.com/technetwork/security-advisory/cpujul2016-2881720.html
dev.mysql.com/doc/relnotes/mysql/5.5/en/news-5-5-46.html
dev.mysql.com/doc/relnotes/mysql/5.5/en/news-5-5-47.html
dev.mysql.com/doc/relnotes/mysql/5.5/en/news-5-5-48.html
dev.mysql.com/doc/relnotes/mysql/5.5/en/news-5-5-49.html
dev.mysql.com/doc/relnotes/mysql/5.5/en/news-5-5-50.html
security.access.redhat.com/data/csaf/v2/advisories/2016/rhsa-2016_1480.json
mariadb.com/kb/en/mariadb/mariadb-5548-release-notes
mariadb.com/kb/en/mariadb/mariadb-5549-release-notes
security.access.redhat.com/data/csaf/v2/advisories/2016/rhsa-2016_1481.json
suse.com/support/update/announcement/-2023-3956/suse-ru-20233956-1
bugzilla.suse.com/1001367
bugzilla.suse.com/1005555
bugzilla.suse.com/1005558
bugzilla.suse.com/1005562
bugzilla.suse.com/1005564
bugzilla.suse.com/1005566
bugzilla.suse.com/1005569
bugzilla.suse.com/1005581
bugzilla.suse.com/1005582
bugzilla.suse.com/1006539
bugzilla.suse.com/1008253
bugzilla.suse.com/1012075
bugzilla.suse.com/1013882
bugzilla.suse.com/1019948
bugzilla.suse.com/1020873
bugzilla.suse.com/1020875
bugzilla.suse.com/1020877
bugzilla.suse.com/1020878
bugzilla.suse.com/1020882
bugzilla.suse.com/1020884
bugzilla.suse.com/1020885
bugzilla.suse.com/1020890
bugzilla.suse.com/1020891
bugzilla.suse.com/1020894
bugzilla.suse.com/1020896
bugzilla.suse.com/1020976
suse.com/security/cve/CVE-2006-0903
suse.com/security/cve/CVE-2006-4226
suse.com/security/cve/CVE-2006-4227
suse.com/security/cve/CVE-2007-5969
suse.com/security/cve/CVE-2007-5970
suse.com/security/cve/CVE-2007-6303
suse.com/security/cve/CVE-2007-6304
suse.com/security/cve/CVE-2008-2079
suse.com/security/cve/CVE-2008-7247
suse.com/security/cve/CVE-2009-4019
suse.com/security/cve/CVE-2009-4028
suse.com/security/cve/CVE-2009-4030
suse.com/security/cve/CVE-2012-4414
suse.com/security/cve/CVE-2012-5611
suse.com/security/cve/CVE-2012-5612
suse.com/security/cve/CVE-2012-5615
suse.com/security/cve/CVE-2012-5627
suse.com/security/cve/CVE-2013-1976
suse.com/security/cve/CVE-2015-4792
suse.com/security/cve/CVE-2015-4802
suse.com/security/cve/CVE-2015-4807
suse.com/security/cve/CVE-2015-4815
suse.com/security/cve/CVE-2015-4816
suse.com/security/cve/CVE-2015-4819
suse.com/security/cve/CVE-2015-4826
suse.com/security/cve/CVE-2015-4830
ubuntu.com/security/CVE-2016-0651
Left out here: 525 references and the rest of 2 source descriptions. The JSON record has them.