CVE-2016-0659
Unspecified vulnerability in Oracle MySQL 5.7.11 and earlier allows local users to affect...
Unspecified vulnerability in Oracle MySQL 5.7.11 and earlier allows local users to affect availability via vectors related to Optimizer.
Attack profile
How easy it is to exploit
- Attack vector
- Local
- Complexity
- Low
- Privileges needed
- Low
- User interaction
- None
What an attacker can affect
- Confidentiality
- None
- Integrity
- None
- Availability
- High
Exploit likelihood
What each source reports
NVD Score used
5.5
Unspecified vulnerability in Oracle MySQL 5.7.11 and earlier allows local users to affect availability via vectors related to Optimizer.
- Record
CVE-2016-0659- CVSS 3.0
- 5.5 Medium
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H - CVSS 2.0
- 3.5 Low
AV:N/AC:M/Au:S/C:N/I:N/A:P - Updated
- 2026-11-02
CVE List No score
Unspecified vulnerability in Oracle MySQL 5.7.11 and earlier allows local users to affect availability via vectors related to Optimizer.
- Record
CVE-2016-0659- Updated
- 2026-11-02
EUVDEUVD-2016-0694 No score
Unspecified vulnerability in Oracle MySQL 5.7.11 and earlier allows local users to affect availability via vectors related to Optimizer.
- Record
EUVD-2016-0694- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-pvqc-h82m-474h
5.5
Unspecified vulnerability in Oracle MySQL 5.7.11 and earlier allows local users to affect...
Unspecified vulnerability in Oracle MySQL 5.7.11 and earlier allows local users to affect availability via vectors related to Optimizer.
- Record
GHSA-pvqc-h82m-474h- CVSS 3.0
- 5.5 Medium
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H - Updated
- 2026-11-02
OSV
5.5
Unspecified vulnerability in Oracle MySQL 5.7.11 and earlier allows local users to affect availability via vectors related to Optimizer.
- Record
CVE-2016-0659- CVSS 3.0
- 5.5 Medium
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H - Updated
- 2026-11-02
OSVUBUNTU-CVE-2016-0659
5.5
Unspecified vulnerability in Oracle MySQL 5.7.11 and earlier allows local users to affect availability via vectors related to Optimizer.
- Record
UBUNTU-CVE-2016-0659- CVSS 3.0
- 5.5 Medium
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H - Updated
- 2026-11-02
OSVUSN-2954-1 No score
mysql-5.7 vulnerabilities
Multiple security issues were discovered in MySQL and this update includes new upstream MySQL versions to fix these issues.
MySQL has been updated to 5.7.12 in Ubuntu 16.04 LTS.
In addition to security fixes, the updated packages contain bug fixes, new features, and possibly incompatible changes.
Please see the following for more information: http://dev.mysql.com/doc/relnotes/mysql/5.7/en/news-5-7-12.html http://www.oracle.com/technetwork/security-advisory/cpuapr2016v3-2985753.html
- Record
USN-2954-1- Updated
- 2026-11-02
Affected products
Affected packages
| Package | Affected | Fixed |
|---|---|---|
mysql-5.7Ubuntu:16.04:LTS |
before 5.7.12-0ubuntu1, plus listed versions 5.7.11-0ubuntu45.7.11-0ubuntu55.7.11-0ubuntu6 |
5.7.12-0ubuntu1 |
percona-server-5.6Ubuntu:16.04:LTS |
All versions, plus listed versions 5.6.22-rel71.0-0ubuntu25.6.22-rel71.0-0ubuntu45.6.22-rel71.0-0ubuntu4.1 |
None known |
percona-xtradb-cluster-5.6Ubuntu:16.04:LTS |
All versions, plus listed versions 5.6.21-25.8-0ubuntu25.6.21-25.8-0ubuntu35.6.21-25.8-0ubuntu3.15.6.21-25.8-0ubuntu3.25.6.34-26.19-0ubuntu0.16.04.15.6.34-26.19-0ubuntu0.16.04.25.6.37-26.21-0ubuntu0.16.04.15.6.37-26.21-0ubuntu0.16.04.2 |
None known |
mysql-5.7Ubuntu:16.04:LTS From an advisory covering 12 CVEs |
before 5.7.12-0ubuntu1, plus listed versions 5.7.11-0ubuntu45.7.11-0ubuntu55.7.11-0ubuntu6 |
5.7.12-0ubuntu1 |
History
| Recorded | Changed | Sources |
|---|---|---|
| affected, facts | ||
| aliases | EUVD | |
| first indexed | CVE List, GitHub Advisories, NVD, OSV |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2016-0659 is a medium vulnerability (CVSS 5.5) in Oracle Mysql, published April 20, 2016. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 1.10%, the 65th percentile. Fixed in mysql-5.7 5.7.12-0ubuntu1.
References
securitytracker.com/id/1035606
ubuntu.com/usn/USN-2954-1
oracle.com/technetwork/security-advisory/cpuapr2016v3-2985753.html
nvd.nist.gov/vuln/detail/CVE-2016-0659
github.com/advisories/GHSA-pvqc-h82m-474h
ubuntu.com/security/CVE-2016-0659
Show 13 moreShow less
ubuntu.com/security/notices/USN-2954-1
cve.org/CVERecord?id=CVE-2016-0659
ubuntu.com/security/CVE-2016-0639
ubuntu.com/security/CVE-2016-0642
ubuntu.com/security/CVE-2016-0643
ubuntu.com/security/CVE-2016-0647
ubuntu.com/security/CVE-2016-0648
ubuntu.com/security/CVE-2016-0655
ubuntu.com/security/CVE-2016-0657
ubuntu.com/security/CVE-2016-0662
ubuntu.com/security/CVE-2016-0666
ubuntu.com/security/CVE-2016-0667
ubuntu.com/security/CVE-2016-2047