CVE-2016-0655
Unspecified vulnerability in Oracle MySQL 5.6.29 and earlier and 5.7.11 and earlier and MariaDB...
Unspecified vulnerability in Oracle MySQL 5.6.29 and earlier and 5.7.11 and earlier and MariaDB 10.0.x before 10.0.25 and 10.1.x before 10.1.14 allows local users to affect availability via vectors related to InnoDB.
Attack profile
How easy it is to exploit
- Attack vector
- Local
- Complexity
- High
- Privileges needed
- Low
- User interaction
- None
What an attacker can affect
- Confidentiality
- None
- Integrity
- None
- Availability
- High
Exploit likelihood
What each source reports
NVD Score used
4.7
Unspecified vulnerability in Oracle MySQL 5.6.29 and earlier and 5.7.11 and earlier and MariaDB 10.0.x before 10.0.25 and 10.1.x before 10.1.14 allows local users to affect availability via vectors related to InnoDB.
- Record
CVE-2016-0655- CVSS 3.0
- 4.7 Medium
CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H - CVSS 2.0
- 3.5 Low
AV:N/AC:M/Au:S/C:N/I:N/A:P - Updated
- 2026-11-02
CVE List No score
Unspecified vulnerability in Oracle MySQL 5.6.29 and earlier and 5.7.11 and earlier and MariaDB 10.0.x before 10.0.25 and 10.1.x before 10.1.14 allows local users to affect availability via vectors related to InnoDB.
- Record
CVE-2016-0655- Updated
- 2026-11-02
EUVDEUVD-2016-0690 No score
Unspecified vulnerability in Oracle MySQL 5.6.29 and earlier and 5.7.11 and earlier and MariaDB 10.0.x before 10.0.25 and 10.1.x before 10.1.14 allows local users to affect availability via vectors related to InnoDB.
- Record
EUVD-2016-0690- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-4p34-xvm4-h22p
4.7
Unspecified vulnerability in Oracle MySQL 5.6.29 and earlier and 5.7.11 and earlier and MariaDB...
Unspecified vulnerability in Oracle MySQL 5.6.29 and earlier and 5.7.11 and earlier and MariaDB 10.0.x before 10.0.25 and 10.1.x before 10.1.14 allows local users to affect availability via vectors related to InnoDB.
- Record
GHSA-4p34-xvm4-h22p- CVSS 3.0
- 4.7 Medium
CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H - Updated
- 2026-11-02
OSV
4.7
Unspecified vulnerability in Oracle MySQL 5.6.29 and earlier and 5.7.11 and earlier and MariaDB 10.0.x before 10.0.25 and 10.1.x before 10.1.14 allows local users to affect availability via vectors related to InnoDB.
- Record
CVE-2016-0655- CVSS 3.0
- 4.7 Medium
CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H - Updated
- 2026-11-02
OSVRHSA-2016:0705
7.5
Red Hat Security Advisory: rh-mysql56-mysql security update
- Record
RHSA-2016:0705- CVSS 3.0
- 7.5 High
CVSS:3.0/AV:L/AC:H/PR:H/UI:N/S:C/C:H/I:H/A:H - Updated
- 2026-11-02
Show 8 moreShow less
OSVRHSA-2016:1132
7.5
Red Hat Security Advisory: rh-mariadb100-mariadb security update
- Record
RHSA-2016:1132- CVSS 3.0
- 7.5 High
CVSS:3.0/AV:L/AC:H/PR:H/UI:N/S:C/C:H/I:H/A:H - Updated
- 2026-11-02
OSVUBUNTU-CVE-2016-0655
4.7
Unspecified vulnerability in Oracle MySQL 5.6.29 and earlier and 5.7.11 and earlier and MariaDB 10.0.x before 10.0.25 and 10.1.x before 10.1.14 allows local users to affect availability via vectors related to InnoDB.
- Record
UBUNTU-CVE-2016-0655- CVSS 3.0
- 4.7 Medium
CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H - Updated
- 2026-11-02
OSVMGASA-2016-0182 No score
Updated mariadb packages fix security vulnerabilities
Updated mariadb packages fix security vulnerabilities:
The mariadb package has been updated to version 10.0.25. It fixes several security issues (CVE-2016-0643, CVE-2016-0647, CVE-2016-0648, CVE-2016-0655, CVE-2016-0666) and other bugs. See the upstream release notes for details.
- Record
MGASA-2016-0182- Updated
- 2026-11-02
OSVopenSUSE-SU-2024:10200-1 No score
libmysql56client18-32bit-5.6.34-1.1 on GA media
These are all security issues fixed in the libmysql56client18-32bit-5.6.34-1.1 package on the GA media of openSUSE Tumbleweed.
- Record
openSUSE-SU-2024:10200-1- Updated
- 2026-11-02
OSVSUSE-SU-2016:1619-1 No score
Security update for mariadb
mariadb was updated to version 10.0.25 to fix 25 security issues.
These security issues were fixed:
- CVE-2016-0505: Unspecified vulnerability allowed remote authenticated users to affect availability via unknown vectors related to Options (bsc#980904).
- CVE-2016-0546: Unspecified vulnerability allowed local users to affect confidentiality, integrity, and availability via unknown vectors related to Client (bsc#980904).
- CVE-2016-0596: Unspecified vulnerability allowed remote authenticated users to affect availability via vectors related to DML (bsc#980904).
- CVE-2016-0597: Unspecified vulnerability allowed remote authenticated users to affect availability via unknown vectors related to Optimizer (bsc#980904).
- CVE-2016-0598: Unspecified vulnerability allowed remote authenticated users to affect availability via vectors related to DML (bsc#980904).
- CVE-2016-0600: Unspecified vulnerability allowed remote authenticated users to affect availability via unknown vectors related to InnoDB (bsc#980904).
- CVE-2016-0606: Unspecified vulnerability allowed remote authenticated users to affect integrity via unknown vectors related to encryption (bsc#980904).
- CVE-2016-0608: Unspecified vulnerability allowed remote authenticated users to affect availability via vectors related to UDF (bsc#980904).
- CVE-2016-0609: Unspecified vulnerability allowed remote authenticated users to affect availability via unknown vectors related to privileges (bsc#980904).
- CVE-2016-0616: Unspecified vulnerability allowed remote authenticated users to affect availability via unknown vectors related to Optimizer (bsc#980904).
- CVE-2016-0640: Unspecified vulnerability allowed local users to affect integrity and availability via vectors related to DML (bsc#980904).
- CVE-2016-0641: Unspecified vulnerability allowed local users to affect confidentiality and availability via vectors related to MyISAM (bsc#980904).
- CVE-2016-0642: Unspecified vulnerability allowed local users to affect integrity and availability via vectors related to Federated (bsc#980904).
- CVE-2016-0643: Unspecified vulnerability allowed local users to affect confidentiality via vectors related to DML (bsc#980904).
- CVE-2016-0644: Unspecified vulnerability allowed local users to affect availability via vectors related to DDL (bsc#980904).
- CVE-2016-0646: Unspecified vulnerability allowed local users to affect availability via vectors related to DML (bsc#980904).
- CVE-2016-0647: Unspecified vulnerability allowed local users to affect availability via vectors related to FTS (bsc#980904).
- CVE-2016-0648: Unspecified vulnerability allowed local users to affect availability via vectors related to PS (bsc#980904).
- CVE-2016-0649: Unspecified vulnerability allowed local users to affect availability via vectors related to PS (bsc#980904).
- CVE-2016-0650: Unspecified vulnerability allowed local users to affect availability via vectors related to Replication (bsc#980904).
- CVE-2016-0651: Unspecified vulnerability allowed local users to affect availability via vectors related to Optimizer (bsc#980904).
- CVE-2016-0655: Unspecified vulnerability allowed local users to affect availability via vectors related to InnoDB (bsc#980904).
- CVE-2016-0666: Unspecified vulnerability allowed local users to affect availability via vectors related to Security: Privileges (bsc#980904).
- CVE-2016-0668: Unspecified vulnerability allowed local users to affect availability via vectors related to InnoDB (bsc#980904).
- CVE-2016-2047: The ssl_verify_server_cert function in sql-common/client.c did not properly verify that the server hostname matches a domain name in the subject's Common Name (CN) or subjectAltName field of the X.509 certificate, which allowed man-in-the-middle attackers to spoof SSL servers via a '/CN=' string in a field in a certificate, as demonstrated by '/OU=/CN=bar.com/CN=foo.com (bsc#963806).
These non-security issues were fixed:
- bsc#960961: Use 'plugin-load-add' instead of…
- Record
SUSE-SU-2016:1619-1- Updated
- 2026-11-02
OSVSUSE-SU-2016:1620-1 No score
Security update for mariadb
mariadb was updated to version 10.0.25 to fix 25 security issues.
These security issues were fixed:
- CVE-2016-0505: Unspecified vulnerability allowed remote authenticated users to affect availability via unknown vectors related to Options (bsc#980904).
- CVE-2016-0546: Unspecified vulnerability allowed local users to affect confidentiality, integrity, and availability via unknown vectors related to Client (bsc#980904).
- CVE-2016-0596: Unspecified vulnerability allowed remote authenticated users to affect availability via vectors related to DML (bsc#980904).
- CVE-2016-0597: Unspecified vulnerability allowed remote authenticated users to affect availability via unknown vectors related to Optimizer (bsc#980904).
- CVE-2016-0598: Unspecified vulnerability allowed remote authenticated users to affect availability via vectors related to DML (bsc#980904).
- CVE-2016-0600: Unspecified vulnerability allowed remote authenticated users to affect availability via unknown vectors related to InnoDB (bsc#980904).
- CVE-2016-0606: Unspecified vulnerability allowed remote authenticated users to affect integrity via unknown vectors related to encryption (bsc#980904).
- CVE-2016-0608: Unspecified vulnerability allowed remote authenticated users to affect availability via vectors related to UDF (bsc#980904).
- CVE-2016-0609: Unspecified vulnerability allowed remote authenticated users to affect availability via unknown vectors related to privileges (bsc#980904).
- CVE-2016-0616: Unspecified vulnerability allowed remote authenticated users to affect availability via unknown vectors related to Optimizer (bsc#980904).
- CVE-2016-0640: Unspecified vulnerability allowed local users to affect integrity and availability via vectors related to DML (bsc#980904).
- CVE-2016-0641: Unspecified vulnerability allowed local users to affect confidentiality and availability via vectors related to MyISAM (bsc#980904).
- CVE-2016-0642: Unspecified vulnerability allowed local users to affect integrity and availability via vectors related to Federated (bsc#980904).
- CVE-2016-0643: Unspecified vulnerability allowed local users to affect confidentiality via vectors related to DML (bsc#980904).
- CVE-2016-0644: Unspecified vulnerability allowed local users to affect availability via vectors related to DDL (bsc#980904).
- CVE-2016-0646: Unspecified vulnerability allowed local users to affect availability via vectors related to DML (bsc#980904).
- CVE-2016-0647: Unspecified vulnerability allowed local users to affect availability via vectors related to FTS (bsc#980904).
- CVE-2016-0648: Unspecified vulnerability allowed local users to affect availability via vectors related to PS (bsc#980904).
- CVE-2016-0649: Unspecified vulnerability allowed local users to affect availability via vectors related to PS (bsc#980904).
- CVE-2016-0650: Unspecified vulnerability allowed local users to affect availability via vectors related to Replication (bsc#980904).
- CVE-2016-0651: Unspecified vulnerability allowed local users to affect availability via vectors related to Optimizer (bsc#980904).
- CVE-2016-0655: Unspecified vulnerability allowed local users to affect availability via vectors related to InnoDB (bsc#980904).
- CVE-2016-0666: Unspecified vulnerability allowed local users to affect availability via vectors related to Security: Privileges (bsc#980904).
- CVE-2016-0668: Unspecified vulnerability allowed local users to affect availability via vectors related to InnoDB (bsc#980904).
- CVE-2016-2047: The ssl_verify_server_cert function in sql-common/client.c did not properly verify that the server hostname matches a domain name in the subject's Common Name (CN) or subjectAltName field of the X.509 certificate, which allowed man-in-the-middle attackers to spoof SSL servers via a '/CN=' string in a field in a certificate, as demonstrated by '/OU=/CN=bar.com/CN=foo.com (bsc#963806).
These non-security issues were fixed:
- bsc#961935: Remove the leftovers of 'openSUSE' string…
- Record
SUSE-SU-2016:1620-1- Updated
- 2026-11-02
OSVUSN-2953-1 No score
mysql-5.5, mysql-5.6 vulnerabilities
Multiple security issues were discovered in MySQL and this update includes new upstream MySQL versions to fix these issues.
MySQL has been updated to 5.5.49 in Ubuntu 12.04 LTS and Ubuntu 14.04 LTS. Ubuntu 15.10 has been updated to MySQL 5.6.30.
In addition to security fixes, the updated packages contain bug fixes, new features, and possibly incompatible changes.
Please see the following for more information: http://dev.mysql.com/doc/relnotes/mysql/5.5/en/news-5-5-48.html http://dev.mysql.com/doc/relnotes/mysql/5.5/en/news-5-5-49.html http://dev.mysql.com/doc/relnotes/mysql/5.6/en/news-5-6-29.html http://dev.mysql.com/doc/relnotes/mysql/5.6/en/news-5-6-30.html http://www.oracle.com/technetwork/security-advisory/cpuapr2016v3-2985753.html
- Record
USN-2953-1- Updated
- 2026-11-02
OSVUSN-2954-1 No score
mysql-5.7 vulnerabilities
Multiple security issues were discovered in MySQL and this update includes new upstream MySQL versions to fix these issues.
MySQL has been updated to 5.7.12 in Ubuntu 16.04 LTS.
In addition to security fixes, the updated packages contain bug fixes, new features, and possibly incompatible changes.
Please see the following for more information: http://dev.mysql.com/doc/relnotes/mysql/5.7/en/news-5-7-12.html http://www.oracle.com/technetwork/security-advisory/cpuapr2016v3-2985753.html
- Record
USN-2954-1- Updated
- 2026-11-02
Affected products
Affected packages
| Package | Affected | Fixed |
|---|---|---|
mariadb-10.0Debian:8 From an advisory covering 12 CVEs |
before 10.0.25-0+deb8u1, plus listed versions 10.0.16-110.0.17-110.0.17-1~exp110.0.17-1~exp210.0.18-1~exp1 Show 30 moreShow less10.0.19-110.0.20-0+deb8u110.0.20-110.0.20-210.0.20-310.0.21-110.0.21-210.0.21-310.0.22-0+deb8u110.0.22-110.0.22-210.0.22-2~exp110.0.22-2~exp210.0.22-310.0.22-410.0.22-4~exp110.0.22-510.0.22-610.0.23-0+deb8u110.0.23-110.0.23-210.0.23-310.0.24-110.0.24-210.0.24-310.0.24-410.0.24-4~exp110.0.24-510.0.24-610.0.24-7 |
10.0.25-0+deb8u1 |
mariadbMageia:5 From an advisory covering 5 CVEs |
before 10.0.25-1.mga5 | 10.0.25-1.mga5 |
rh-mysql56-mysqlRed Hat:rhel_software_collections:2::el6 From an advisory covering 50 CVEs |
before 0:5.6.30-1.el6 | 0:5.6.30-1.el6 |
rh-mysql56-mysql-benchRed Hat:rhel_software_collections:2::el6 From an advisory covering 50 CVEs |
before 0:5.6.30-1.el6 | 0:5.6.30-1.el6 |
rh-mysql56-mysql-commonRed Hat:rhel_software_collections:2::el6 From an advisory covering 50 CVEs |
before 0:5.6.30-1.el6 | 0:5.6.30-1.el6 |
rh-mysql56-mysql-configRed Hat:rhel_software_collections:2::el6 From an advisory covering 50 CVEs |
before 0:5.6.30-1.el6 | 0:5.6.30-1.el6 |
rh-mysql56-mysql-debuginfoRed Hat:rhel_software_collections:2::el6 From an advisory covering 50 CVEs |
before 0:5.6.30-1.el6 | 0:5.6.30-1.el6 |
rh-mysql56-mysql-develRed Hat:rhel_software_collections:2::el6 From an advisory covering 50 CVEs |
before 0:5.6.30-1.el6 | 0:5.6.30-1.el6 |
rh-mysql56-mysql-errmsgRed Hat:rhel_software_collections:2::el6 From an advisory covering 50 CVEs |
before 0:5.6.30-1.el6 | 0:5.6.30-1.el6 |
rh-mysql56-mysql-serverRed Hat:rhel_software_collections:2::el6 From an advisory covering 50 CVEs |
before 0:5.6.30-1.el6 | 0:5.6.30-1.el6 |
Show 47 moreShow less
| Package | Affected | Fixed |
|---|---|---|
rh-mysql56-mysql-testRed Hat:rhel_software_collections:2::el6 From an advisory covering 50 CVEs |
before 0:5.6.30-1.el6 | 0:5.6.30-1.el6 |
rh-mysql56-mysqlRed Hat:rhel_software_collections:2::el7 From an advisory covering 50 CVEs |
before 0:5.6.30-1.el7 | 0:5.6.30-1.el7 |
rh-mysql56-mysql-benchRed Hat:rhel_software_collections:2::el7 From an advisory covering 50 CVEs |
before 0:5.6.30-1.el7 | 0:5.6.30-1.el7 |
rh-mysql56-mysql-commonRed Hat:rhel_software_collections:2::el7 From an advisory covering 50 CVEs |
before 0:5.6.30-1.el7 | 0:5.6.30-1.el7 |
rh-mysql56-mysql-configRed Hat:rhel_software_collections:2::el7 From an advisory covering 50 CVEs |
before 0:5.6.30-1.el7 | 0:5.6.30-1.el7 |
rh-mysql56-mysql-debuginfoRed Hat:rhel_software_collections:2::el7 From an advisory covering 50 CVEs |
before 0:5.6.30-1.el7 | 0:5.6.30-1.el7 |
rh-mysql56-mysql-develRed Hat:rhel_software_collections:2::el7 From an advisory covering 50 CVEs |
before 0:5.6.30-1.el7 | 0:5.6.30-1.el7 |
rh-mysql56-mysql-errmsgRed Hat:rhel_software_collections:2::el7 From an advisory covering 50 CVEs |
before 0:5.6.30-1.el7 | 0:5.6.30-1.el7 |
rh-mysql56-mysql-serverRed Hat:rhel_software_collections:2::el7 From an advisory covering 50 CVEs |
before 0:5.6.30-1.el7 | 0:5.6.30-1.el7 |
rh-mysql56-mysql-testRed Hat:rhel_software_collections:2::el7 From an advisory covering 50 CVEs |
before 0:5.6.30-1.el7 | 0:5.6.30-1.el7 |
rh-mariadb100-mariadbRed Hat:rhel_software_collections:2::el6 From an advisory covering 58 CVEs |
before 1:10.0.25-4.el6 | 1:10.0.25-4.el6 |
rh-mariadb100-mariadb-benchRed Hat:rhel_software_collections:2::el6 From an advisory covering 58 CVEs |
before 1:10.0.25-4.el6 | 1:10.0.25-4.el6 |
rh-mariadb100-mariadb-commonRed Hat:rhel_software_collections:2::el6 From an advisory covering 58 CVEs |
before 1:10.0.25-4.el6 | 1:10.0.25-4.el6 |
rh-mariadb100-mariadb-configRed Hat:rhel_software_collections:2::el6 From an advisory covering 58 CVEs |
before 1:10.0.25-4.el6 | 1:10.0.25-4.el6 |
rh-mariadb100-mariadb-debuginfoRed Hat:rhel_software_collections:2::el6 From an advisory covering 58 CVEs |
before 1:10.0.25-4.el6 | 1:10.0.25-4.el6 |
rh-mariadb100-mariadb-develRed Hat:rhel_software_collections:2::el6 From an advisory covering 58 CVEs |
before 1:10.0.25-4.el6 | 1:10.0.25-4.el6 |
rh-mariadb100-mariadb-errmsgRed Hat:rhel_software_collections:2::el6 From an advisory covering 58 CVEs |
before 1:10.0.25-4.el6 | 1:10.0.25-4.el6 |
rh-mariadb100-mariadb-oqgraph-engineRed Hat:rhel_software_collections:2::el6 From an advisory covering 58 CVEs |
before 1:10.0.25-4.el6 | 1:10.0.25-4.el6 |
rh-mariadb100-mariadb-serverRed Hat:rhel_software_collections:2::el6 From an advisory covering 58 CVEs |
before 1:10.0.25-4.el6 | 1:10.0.25-4.el6 |
rh-mariadb100-mariadb-testRed Hat:rhel_software_collections:2::el6 From an advisory covering 58 CVEs |
before 1:10.0.25-4.el6 | 1:10.0.25-4.el6 |
rh-mariadb100-mariadbRed Hat:rhel_software_collections:2::el7 From an advisory covering 58 CVEs |
before 1:10.0.25-4.el7 | 1:10.0.25-4.el7 |
rh-mariadb100-mariadb-benchRed Hat:rhel_software_collections:2::el7 From an advisory covering 58 CVEs |
before 1:10.0.25-4.el7 | 1:10.0.25-4.el7 |
rh-mariadb100-mariadb-commonRed Hat:rhel_software_collections:2::el7 From an advisory covering 58 CVEs |
before 1:10.0.25-4.el7 | 1:10.0.25-4.el7 |
rh-mariadb100-mariadb-configRed Hat:rhel_software_collections:2::el7 From an advisory covering 58 CVEs |
before 1:10.0.25-4.el7 | 1:10.0.25-4.el7 |
rh-mariadb100-mariadb-debuginfoRed Hat:rhel_software_collections:2::el7 From an advisory covering 58 CVEs |
before 1:10.0.25-4.el7 | 1:10.0.25-4.el7 |
rh-mariadb100-mariadb-develRed Hat:rhel_software_collections:2::el7 From an advisory covering 58 CVEs |
before 1:10.0.25-4.el7 | 1:10.0.25-4.el7 |
rh-mariadb100-mariadb-errmsgRed Hat:rhel_software_collections:2::el7 From an advisory covering 58 CVEs |
before 1:10.0.25-4.el7 | 1:10.0.25-4.el7 |
rh-mariadb100-mariadb-oqgraph-engineRed Hat:rhel_software_collections:2::el7 From an advisory covering 58 CVEs |
before 1:10.0.25-4.el7 | 1:10.0.25-4.el7 |
rh-mariadb100-mariadb-serverRed Hat:rhel_software_collections:2::el7 From an advisory covering 58 CVEs |
before 1:10.0.25-4.el7 | 1:10.0.25-4.el7 |
rh-mariadb100-mariadb-testRed Hat:rhel_software_collections:2::el7 From an advisory covering 58 CVEs |
before 1:10.0.25-4.el7 | 1:10.0.25-4.el7 |
mariadbSUSE:Linux Enterprise Desktop 12 From an advisory covering 25 CVEs |
before 10.0.25-20.6.1 | 10.0.25-20.6.1 |
mariadbSUSE:Linux Enterprise Software Development Kit 12 From an advisory covering 25 CVEs |
before 10.0.25-20.6.1 | 10.0.25-20.6.1 |
mariadbSUSE:Linux Enterprise Server 12 From an advisory covering 25 CVEs |
before 10.0.25-20.6.1 | 10.0.25-20.6.1 |
mariadbSUSE:Linux Enterprise Server for SAP Applications 12 From an advisory covering 25 CVEs |
before 10.0.25-20.6.1 | 10.0.25-20.6.1 |
mariadbSUSE:Linux Enterprise Workstation Extension 12 From an advisory covering 25 CVEs |
before 10.0.25-20.6.1 | 10.0.25-20.6.1 |
mariadbSUSE:Linux Enterprise Desktop 12 SP1 From an advisory covering 25 CVEs |
before 10.0.25-6.1 | 10.0.25-6.1 |
mariadbSUSE:Linux Enterprise Software Development Kit 12 SP1 From an advisory covering 25 CVEs |
before 10.0.25-6.1 | 10.0.25-6.1 |
mariadbSUSE:Linux Enterprise Server 12 SP1 From an advisory covering 25 CVEs |
before 10.0.25-6.1 | 10.0.25-6.1 |
mariadbSUSE:Linux Enterprise Server for SAP Applications 12 SP1 From an advisory covering 25 CVEs |
before 10.0.25-6.1 | 10.0.25-6.1 |
mariadbSUSE:Linux Enterprise Workstation Extension 12 SP1 From an advisory covering 25 CVEs |
before 10.0.25-6.1 | 10.0.25-6.1 |
mysql-5.6Ubuntu:14.04:LTS |
before 5.6.30-0ubuntu0.14.04.1, plus listed versions 5.6.15-0ubuntu15.6.15-1~exp25.6.16-1~exp15.6.17-0ubuntu0.14.04.15.6.19-0ubuntu0.14.04.15.6.27-0ubuntu0.14.04.15.6.28-0ubuntu0.14.04.1 |
5.6.30-0ubuntu0.14.04.1 |
mariadb-10.0Ubuntu:16.04:LTS |
before 10.0.25-0ubuntu0.16.04.1, plus listed versions 10.0.20-0ubuntu0.15.04.110.0.22-0ubuntu110.0.23-110.0.23-210.0.24-7 |
10.0.25-0ubuntu0.16.04.1 |
mysql-5.7Ubuntu:16.04:LTS |
before 5.7.12-0ubuntu1, plus listed versions 5.7.11-0ubuntu45.7.11-0ubuntu55.7.11-0ubuntu6 |
5.7.12-0ubuntu1 |
percona-xtradb-cluster-5.6Ubuntu:16.04:LTS |
before 5.6.34-26.19-0ubuntu0.16.04.1, plus listed versions 5.6.21-25.8-0ubuntu25.6.21-25.8-0ubuntu35.6.21-25.8-0ubuntu3.15.6.21-25.8-0ubuntu3.2 |
5.6.34-26.19-0ubuntu0.16.04.1 |
percona-server-5.6Ubuntu:16.04:LTS |
All versions, plus listed versions 5.6.22-rel71.0-0ubuntu25.6.22-rel71.0-0ubuntu45.6.22-rel71.0-0ubuntu4.1 |
None known |
mysql-5.5Ubuntu:14.04:LTS From an advisory covering 17 CVEs |
before 5.5.49-0ubuntu0.14.04.1, plus listed versions 5.5.32-0ubuntu75.5.34-0ubuntu15.5.34-0ubuntu25.5.35-0ubuntu15.5.35+dfsg-1ubuntu1 Show 8 moreShow less5.5.37-0ubuntu0.14.04.15.5.38-0ubuntu0.14.04.15.5.40-0ubuntu0.14.04.15.5.41-0ubuntu0.14.04.15.5.43-0ubuntu0.14.04.15.5.44-0ubuntu0.14.04.15.5.46-0ubuntu0.14.04.25.5.47-0ubuntu0.14.04.1 |
5.5.49-0ubuntu0.14.04.1 |
mysql-5.7Ubuntu:16.04:LTS From an advisory covering 12 CVEs |
before 5.7.12-0ubuntu1, plus listed versions 5.7.11-0ubuntu45.7.11-0ubuntu55.7.11-0ubuntu6 |
5.7.12-0ubuntu1 |
History
| Recorded | Changed | Sources |
|---|---|---|
| affected, facts | ||
| aliases | EUVD | |
| first indexed | CVE List, GitHub Advisories, NVD, OSV |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2016-0655 is a medium vulnerability (CVSS 4.7) in Mariadb, published April 20, 2016. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 1.56%, the 75th percentile. Fixed in mysql-5.6 5.6.30-0ubuntu0.14.04.1.
References
lists.opensuse.org/opensuse-security-announce/2016-06/msg00034.html
securityfocus.com/bid/86424
access.redhat.com/errata/RHSA-2016:1132
securitytracker.com/id/1035606
ubuntu.com/usn/USN-2953-1
lists.opensuse.org/opensuse-security-announce/2016-05/msg00053.html
Show 194 moreShow less
ubuntu.com/usn/USN-2954-1
lists.opensuse.org/opensuse-security-announce/2016-06/msg00033.html
lists.opensuse.org/opensuse-security-announce/2016-06/msg00051.html
mariadb.com/kb/en/mariadb/mariadb-10114-release-notes
debian.org/security/2016/dsa-3595
oracle.com/technetwork/security-advisory/cpuapr2016v3-2985753.html
lists.opensuse.org/opensuse-security-announce/2016-06/msg00053.html
rhn.redhat.com/errata/RHSA-2016-0705.html
mariadb.com/kb/en/mariadb/mariadb-10025-release-notes
nvd.nist.gov/vuln/detail/CVE-2016-0655
github.com/advisories/GHSA-4p34-xvm4-h22p
advisories.mageia.org/MGASA-2016-0182.html
bugs.mageia.org/show_bug.cgi?id=18439
mariadb.com/kb/en/mariadb-10025-changelog
access.redhat.com/errata/RHSA-2016:0705
access.redhat.com/security/updates/classification
oracle.com/technetwork/topics/security/cpuoct2015-2367953.html
oracle.com/technetwork/topics/security/cpujan2016-2367955.html
oracle.com/technetwork/topics/security/cpuapr2016-2881694.html
dev.mysql.com/doc/relnotes/mysql/5.6/en/news-5-6-27.html
dev.mysql.com/doc/relnotes/mysql/5.6/en/news-5-6-28.html
dev.mysql.com/doc/relnotes/mysql/5.6/en/news-5-6-29.html
dev.mysql.com/doc/relnotes/mysql/5.6/en/news-5-6-30.html
bugzilla.redhat.com/show_bug.cgi?id=1274752
bugzilla.redhat.com/show_bug.cgi?id=1274754
bugzilla.redhat.com/show_bug.cgi?id=1274756
bugzilla.redhat.com/show_bug.cgi?id=1274759
bugzilla.redhat.com/show_bug.cgi?id=1274766
bugzilla.redhat.com/show_bug.cgi?id=1274767
bugzilla.redhat.com/show_bug.cgi?id=1274771
bugzilla.redhat.com/show_bug.cgi?id=1274773
bugzilla.redhat.com/show_bug.cgi?id=1274776
bugzilla.redhat.com/show_bug.cgi?id=1274778
bugzilla.redhat.com/show_bug.cgi?id=1274781
bugzilla.redhat.com/show_bug.cgi?id=1274785
bugzilla.redhat.com/show_bug.cgi?id=1274792
bugzilla.redhat.com/show_bug.cgi?id=1274794
bugzilla.redhat.com/show_bug.cgi?id=1301490
bugzilla.redhat.com/show_bug.cgi?id=1301491
bugzilla.redhat.com/show_bug.cgi?id=1301492
bugzilla.redhat.com/show_bug.cgi?id=1301493
bugzilla.redhat.com/show_bug.cgi?id=1301495
bugzilla.redhat.com/show_bug.cgi?id=1301496
bugzilla.redhat.com/show_bug.cgi?id=1301497
bugzilla.redhat.com/show_bug.cgi?id=1301498
bugzilla.redhat.com/show_bug.cgi?id=1301501
bugzilla.redhat.com/show_bug.cgi?id=1301503
bugzilla.redhat.com/show_bug.cgi?id=1301504
bugzilla.redhat.com/show_bug.cgi?id=1301505
bugzilla.redhat.com/show_bug.cgi?id=1301506
security.access.redhat.com/data/csaf/v2/advisories/2016/rhsa-2016_0705.json
access.redhat.com/security/cve/CVE-2015-4792
cve.org/CVERecord?id=CVE-2015-4792
nvd.nist.gov/vuln/detail/CVE-2015-4792
access.redhat.com/security/cve/CVE-2015-4800
cve.org/CVERecord?id=CVE-2015-4800
nvd.nist.gov/vuln/detail/CVE-2015-4800
access.redhat.com/security/cve/CVE-2015-4802
cve.org/CVERecord?id=CVE-2015-4802
nvd.nist.gov/vuln/detail/CVE-2015-4802
access.redhat.com/security/cve/CVE-2015-4815
cve.org/CVERecord?id=CVE-2015-4815
nvd.nist.gov/vuln/detail/CVE-2015-4815
access.redhat.com/security/cve/CVE-2015-4826
cve.org/CVERecord?id=CVE-2015-4826
nvd.nist.gov/vuln/detail/CVE-2015-4826
access.redhat.com/security/cve/CVE-2015-4830
cve.org/CVERecord?id=CVE-2015-4830
nvd.nist.gov/vuln/detail/CVE-2015-4830
access.redhat.com/security/cve/CVE-2015-4836
cve.org/CVERecord?id=CVE-2015-4836
nvd.nist.gov/vuln/detail/CVE-2015-4836
access.redhat.com/security/cve/CVE-2015-4858
cve.org/CVERecord?id=CVE-2015-4858
nvd.nist.gov/vuln/detail/CVE-2015-4858
access.redhat.com/security/cve/CVE-2015-4861
cve.org/CVERecord?id=CVE-2015-4861
nvd.nist.gov/vuln/detail/CVE-2015-4861
access.redhat.com/security/cve/CVE-2015-4862
cve.org/CVERecord?id=CVE-2015-4862
nvd.nist.gov/vuln/detail/CVE-2015-4862
access.redhat.com/security/cve/CVE-2015-4870
cve.org/CVERecord?id=CVE-2015-4870
nvd.nist.gov/vuln/detail/CVE-2015-4870
access.redhat.com/security/cve/CVE-2015-4890
cve.org/CVERecord?id=CVE-2015-4890
nvd.nist.gov/vuln/detail/CVE-2015-4890
access.redhat.com/security/cve/CVE-2015-4910
cve.org/CVERecord?id=CVE-2015-4910
nvd.nist.gov/vuln/detail/CVE-2015-4910
access.redhat.com/security/cve/CVE-2015-4913
cve.org/CVERecord?id=CVE-2015-4913
nvd.nist.gov/vuln/detail/CVE-2015-4913
access.redhat.com/security/cve/CVE-2016-0503
cve.org/CVERecord?id=CVE-2016-0503
nvd.nist.gov/vuln/detail/CVE-2016-0503
oracle.com/technetwork/topics/security/cpujan2016verbose-2367956.html
access.redhat.com/security/cve/CVE-2016-0504
cve.org/CVERecord?id=CVE-2016-0504
nvd.nist.gov/vuln/detail/CVE-2016-0504
access.redhat.com/security/cve/CVE-2016-0505
cve.org/CVERecord?id=CVE-2016-0505
nvd.nist.gov/vuln/detail/CVE-2016-0505
access.redhat.com/security/cve/CVE-2016-0546
cve.org/CVERecord?id=CVE-2016-0546
nvd.nist.gov/vuln/detail/CVE-2016-0546
access.redhat.com/security/cve/CVE-2016-0595
cve.org/CVERecord?id=CVE-2016-0595
nvd.nist.gov/vuln/detail/CVE-2016-0595
access.redhat.com/security/cve/CVE-2016-0596
cve.org/CVERecord?id=CVE-2016-0596
nvd.nist.gov/vuln/detail/CVE-2016-0596
access.redhat.com/security/cve/CVE-2016-0597
cve.org/CVERecord?id=CVE-2016-0597
nvd.nist.gov/vuln/detail/CVE-2016-0597
access.redhat.com/security/cve/CVE-2016-0598
cve.org/CVERecord?id=CVE-2016-0598
nvd.nist.gov/vuln/detail/CVE-2016-0598
access.redhat.com/security/cve/CVE-2016-0600
cve.org/CVERecord?id=CVE-2016-0600
nvd.nist.gov/vuln/detail/CVE-2016-0600
access.redhat.com/security/cve/CVE-2016-0605
cve.org/CVERecord?id=CVE-2016-0605
nvd.nist.gov/vuln/detail/CVE-2016-0605
cve.org/CVERecord?id=CVE-2016-0606
nvd.nist.gov/vuln/detail/CVE-2016-0606
cve.org/CVERecord?id=CVE-2016-0607
nvd.nist.gov/vuln/detail/CVE-2016-0607
cve.org/CVERecord?id=CVE-2016-0608
oracle.com/technetwork/topics/security/cpuapr2016verbose-2881709.html
openwall.com/lists/oss-security/2016/01/26/3
oracle.com/technetwork/topics/security/cpujul2016-2881720.html
mariadb.com/kb/en/mariadb/mariadb-10021-release-notes
mariadb.com/kb/en/mariadb/mariadb-10022-release-notes
mariadb.com/kb/en/mariadb/mariadb-10023-release-notes
mariadb.com/kb/en/mariadb/mariadb-10024-release-notes
security.access.redhat.com/data/csaf/v2/advisories/2016/rhsa-2016_1132.json
suse.com/support/update/announcement/2016/suse-su-20161619-1
bugzilla.suse.com/960961
bugzilla.suse.com/961935
bugzilla.suse.com/963806
bugzilla.suse.com/980904
suse.com/security/cve/CVE-2016-0505
suse.com/security/cve/CVE-2016-0546
suse.com/security/cve/CVE-2016-0596
suse.com/security/cve/CVE-2016-0597
suse.com/security/cve/CVE-2016-0598
suse.com/security/cve/CVE-2016-0600
suse.com/security/cve/CVE-2016-0606
suse.com/security/cve/CVE-2016-0608
suse.com/security/cve/CVE-2016-0609
suse.com/security/cve/CVE-2016-0616
suse.com/security/cve/CVE-2016-0640
suse.com/security/cve/CVE-2016-0641
suse.com/security/cve/CVE-2016-0642
suse.com/security/cve/CVE-2016-0643
suse.com/security/cve/CVE-2016-0644
suse.com/security/cve/CVE-2016-0646
suse.com/security/cve/CVE-2016-0647
suse.com/security/cve/CVE-2016-0648
suse.com/security/cve/CVE-2016-0649
suse.com/security/cve/CVE-2016-0650
suse.com/security/cve/CVE-2016-0651
suse.com/security/cve/CVE-2016-0655
suse.com/security/cve/CVE-2016-0666
suse.com/security/cve/CVE-2016-0668
suse.com/security/cve/CVE-2016-2047
suse.com/support/update/announcement/2016/suse-su-20161620-1
bugzilla.suse.com/963810
bugzilla.suse.com/970287
bugzilla.suse.com/970295
ubuntu.com/security/CVE-2016-0655
ubuntu.com/security/notices/USN-2953-1
ubuntu.com/security/notices/USN-2954-1
ubuntu.com/security/CVE-2016-0639
ubuntu.com/security/CVE-2016-0640
ubuntu.com/security/CVE-2016-0641
ubuntu.com/security/CVE-2016-0642
ubuntu.com/security/CVE-2016-0643
ubuntu.com/security/CVE-2016-0644
ubuntu.com/security/CVE-2016-0646
ubuntu.com/security/CVE-2016-0647
ubuntu.com/security/CVE-2016-0648
ubuntu.com/security/CVE-2016-0649
ubuntu.com/security/CVE-2016-0650
ubuntu.com/security/CVE-2016-0661
ubuntu.com/security/CVE-2016-0665
ubuntu.com/security/CVE-2016-0666
ubuntu.com/security/CVE-2016-0668
ubuntu.com/security/CVE-2016-2047
ubuntu.com/security/CVE-2016-0657
ubuntu.com/security/CVE-2016-0659
ubuntu.com/security/CVE-2016-0662
ubuntu.com/security/CVE-2016-0667
Left out here: 273 references and the rest of 2 source descriptions. The JSON record has them.