CVE-2016-5584
Unspecified vulnerability in Oracle MySQL 5.5.52 and earlier, 5.6.33 and earlier, and 5.7.15 and...
4.4 MediumFix available
Unspecified vulnerability in Oracle MySQL 5.5.52 and earlier, 5.6.33 and earlier, and 5.7.15 and earlier allows remote administrators to affect confidentiality via vectors related to Server: Security: Encryption.
Attack profile
How easy it is to exploit
- Attack vector
- Network
- Complexity
- High
- Privileges needed
- High
- User interaction
- None
What an attacker can affect
- Confidentiality
- High
- Integrity
- None
- Availability
- None
Exploit likelihood
1.49%Up 0.5 points since Feb 4, 2022
What each source reports
NVD Score used
Unspecified vulnerability in Oracle MySQL 5.5.52 and earlier, 5.6.33 and earlier, and 5.7.15 and earlier allows remote administrators to affect confidentiality via vectors related to Server: Security: Encryption.
- Record
CVE-2016-5584- CVSS 3.1
- 4.4 Medium
CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:N/A:N - CVSS 2.0
- 3.5 Low
AV:N/AC:M/Au:S/C:P/I:N/A:N - Updated
- 2026-11-02
CVE List No score
Unspecified vulnerability in Oracle MySQL 5.5.52 and earlier, 5.6.33 and earlier, and 5.7.15 and earlier allows remote administrators to affect confidentiality via vectors related to Server: Security: Encryption.
- Record
CVE-2016-5584- Updated
- 2026-11-02
EUVDEUVD-2016-6528 No score
Unspecified vulnerability in Oracle MySQL 5.5.52 and earlier, 5.6.33 and earlier, and 5.7.15 and earlier allows remote administrators to affect confidentiality via vectors related to Server: Security: Encryption.
- Record
EUVD-2016-6528- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-m4x2-9645-g5v7
Unspecified vulnerability in Oracle MySQL 5.5.52 and earlier, 5.6.33 and earlier, and 5.7.15 and...
Unspecified vulnerability in Oracle MySQL 5.5.52 and earlier, 5.6.33 and earlier, and 5.7.15 and earlier allows remote administrators to affect confidentiality via vectors related to Server: Security: Encryption.
- Record
GHSA-m4x2-9645-g5v7- CVSS 3.0
- 4.4 Medium
CVSS:3.0/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:N/A:N - Weakness
- CWE-200
- Updated
- 2026-11-02
OSV
Unspecified vulnerability in Oracle MySQL 5.5.52 and earlier, 5.6.33 and earlier, and 5.7.15 and earlier allows remote administrators to affect confidentiality via vectors related to Server: Security: Encryption.
- Record
CVE-2016-5584- CVSS 3.1
- 4.4 Medium
CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:N/A:N - Updated
- 2026-11-02
OSVUBUNTU-CVE-2016-5584
Unspecified vulnerability in Oracle MySQL 5.5.52 and earlier, 5.6.33 and earlier, and 5.7.15 and earlier allows remote administrators to affect confidentiality via vectors related to Server: Security: Encryption.
- Record
UBUNTU-CVE-2016-5584- CVSS 3.1
- 4.4 Medium
CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:N/A:N - Updated
- 2026-11-02
Show 9 moreShow less
OSVMGASA-2016-0371 No score
Updated mariadb packages fix security vulnerabilities
A race condition was found in the way MariaDB performed MyISAM engine table repair. A database user with shell access to the server running mysqld could use this flaw to change permissions of arbitrary files writable by the mysql system user (CVE-2016-6663).
This update fixes several vulnerabilities in the MariaDB database server. Information about these flaws can be found on the Oracle Critical Patch Update Advisory page, listed in the References section (CVE-2016-3492, CVE-2016-5584, CVE-2016-5616, CVE-2016-5624, CVE-2016-5626, CVE-2016-5629, CVE-2016-7440, CVE-2016-8283).
- Record
MGASA-2016-0371- Updated
- 2026-11-02
OSVopenSUSE-SU-2024:10200-1 No score
libmysql56client18-32bit-5.6.34-1.1 on GA media
These are all security issues fixed in the libmysql56client18-32bit-5.6.34-1.1 package on the GA media of openSUSE Tumbleweed.
- Record
openSUSE-SU-2024:10200-1- Updated
- 2026-11-02
OSVopenSUSE-SU-2024:11038-1 No score
libmariadbd-devel-10.6.4-2.1 on GA media
These are all security issues fixed in the libmariadbd-devel-10.6.4-2.1 package on the GA media of openSUSE Tumbleweed.
- Record
openSUSE-SU-2024:11038-1- Updated
- 2026-11-02
OSVSUSE-RU-2023:3956-1 No score
Recommended update for mariadb104
This update for mariadb104 fixes the following issues:
- Implement version 10.4 of MariaDB (jsc#PED-2455):
- It is possible to use more than one authentication plugin for each user account.
- The root user account is being created with the ability to use two authentication plugins.
- All user accounts, passwords, and global privileges are now stored in the mysql.global_priv table.
- Is being supported for User Password Expiry, which is not active by default.
- Faster privilege checks for MariaDB setups with many user accounts or many database grants.
- Update mysql-systemd-helper to be aware of custom group (bsc#1200105)
- MariaDB is now support lz4 compression for 'INNODB'. (bsc#1186031)
- Add 'mysql-user.conf' file to enable systemd generating mysql user in containers. (bsc#1173028)
- Fixes an issue when MariaDB is ignoring the value of the parameter 'open_files_limit' in the global variables. (bsc#1180014)
- Record
SUSE-RU-2023:3956-1- Updated
- 2026-11-02
OSVSUSE-RU-2023:4991-1 No score
Recommended update for mariadb104
This update for mariadb104 fixes the following issues:
- Implement version 10.4 of MariaDB (jsc#PED-2455):
- It is possible to use more than one authentication plugin for each user account.
- The root user account is being created with the ability to use two authentication plugins.
- All user accounts, passwords, and global privileges are now stored in the mysql.global_priv table.
- Is being supported for User Password Expiry, which is not active by default.
- Faster privilege checks for MariaDB setups with many user accounts or many database grants.
- Update mysql-systemd-helper to be aware of custom group (bsc#1200105)
- MariaDB is now support lz4 compression for 'INNODB'. (bsc#1186031)
- Add 'mysql-user.conf' file to enable systemd generating mysql user in containers. (bsc#1173028)
- Fixes an issue when MariaDB is ignoring the value of the parameter 'open_files_limit' in the global variables. (bsc#1180014)
- Record
SUSE-RU-2023:4991-1- Updated
- 2026-11-02
OSVSUSE-SU-2016:2780-1 No score
Security update for mysql
This mysql version update to 5.5.53 fixes the following issues:
- CVE-2016-6662: Unspecified vulnerability in subcomponent Logging (bsc#1005580)
- CVE-2016-7440: Unspecified vulnerability in subcomponent Encryption (bsc#1005581)
- CVE-2016-5584: Unspecified vulnerability in subcomponent Encryption (bsc#1005558)
Release Notes: http://dev.mysql.com/doc/relnotes/mysql/5.5/en/news-5-5-53.html
- Record
SUSE-SU-2016:2780-1- Updated
- 2026-11-02
OSVSUSE-SU-2016:2932-1 No score
Security update for mariadb
This mariadb update to version 10.0.28 fixes the following issues (bsc#1008318):
Security fixes:
- CVE-2016-8283: Unspecified vulnerability in subcomponent Types (bsc#1005582)
- CVE-2016-7440: Unspecified vulnerability in subcomponent Encryption (bsc#1005581)
- CVE-2016-5629: Unspecified vulnerability in subcomponent Federated (bsc#1005569)
- CVE-2016-5626: Unspecified vulnerability in subcomponent GIS (bsc#1005566)
- CVE-2016-5624: Unspecified vulnerability in subcomponent DML (bsc#1005564)
- CVE-2016-5616: Unspecified vulnerability in subcomponent MyISAM (bsc#1005562)
- CVE-2016-5584: Unspecified vulnerability in subcomponent Encryption (bsc#1005558)
- CVE-2016-3492: Unspecified vulnerability in subcomponent Optimizer (bsc#1005555)
- CVE-2016-6663: Privilege Escalation / Race Condition (bsc#1001367)
Bugfixes:
- mysql_install_db can't find data files (bsc#1006539)
- mariadb failing test sys_vars.optimizer_switch_basic (bsc#1003800)
- Notable changes:
- XtraDB updated to 5.6.33-79.0
- TokuDB updated to 5.6.33-79.0
- Innodb updated to 5.6.33
- Performance Schema updated to 5.6.33
- Release notes and upstream changelog:
- Record
SUSE-SU-2016:2932-1- Updated
- 2026-11-02
OSVSUSE-SU-2016:2933-1 No score
Recommended update for mariadb
This mariadb update to version 10.0.28 fixes the following issues (bsc#1008318):
Security fixes:
- CVE-2016-8283: Unspecified vulnerability in subcomponent Types (bsc#1005582)
- CVE-2016-7440: Unspecified vulnerability in subcomponent Encryption (bsc#1005581)
- CVE-2016-5629: Unspecified vulnerability in subcomponent Federated (bsc#1005569)
- CVE-2016-5626: Unspecified vulnerability in subcomponent GIS (bsc#1005566)
- CVE-2016-5624: Unspecified vulnerability in subcomponent DML (bsc#1005564)
- CVE-2016-5616: Unspecified vulnerability in subcomponent MyISAM (bsc#1005562)
- CVE-2016-5584: Unspecified vulnerability in subcomponent Encryption (bsc#1005558)
- CVE-2016-3492: Unspecified vulnerability in subcomponent Optimizer (bsc#1005555)
- CVE-2016-6663: Privilege Escalation / Race Condition (bsc#1001367)
Bugfixes:
- mysql_install_db can't find data files (bsc#1006539)
- mariadb failing test sys_vars.optimizer_switch_basic (bsc#1003800)
- Remove useless [email protected] (bsc#1004477)
- Replace all occurrences of the string '@sysconfdir@' with '/etc' as it wasn't expanded properly (bsc#990890)
- Notable changes:
- XtraDB updated to 5.6.33-79.0
- TokuDB updated to 5.6.33-79.0
- Innodb updated to 5.6.33
- Performance Schema updated to 5.6.33
- Release notes and upstream changelog:
- Record
SUSE-SU-2016:2933-1- Updated
- 2026-11-02
OSVUSN-3109-1 No score
mysql-5.5, mysql-5.7 vulnerabilities
Multiple security issues were discovered in MySQL and this update includes new upstream MySQL versions to fix these issues.
MySQL has been updated to 5.5.53 in Ubuntu 12.04 LTS and Ubuntu 14.04 LTS. Ubuntu 16.04 LTS and Ubuntu 16.10 have been updated to MySQL 5.7.16.
In addition to security fixes, the updated packages contain bug fixes, new features, and possibly incompatible changes.
Please see the following for more information: http://dev.mysql.com/doc/relnotes/mysql/5.5/en/news-5-5-53.html http://dev.mysql.com/doc/relnotes/mysql/5.7/en/news-5-7-16.html http://www.oracle.com/technetwork/security-advisory/cpuoct2016-2881722.html
- Record
USN-3109-1- Updated
- 2026-11-02
Affected products
Affected packages
| Package | Affected | Fixed |
|---|---|---|
mysql-5.5Debian:7 |
before 5.5.53-0+deb7u1, plus listed versions 5.5.30+dfsg-1.15.5.31+dfsg-0+wheezy15.5.31+dfsg-15.5.33+dfsg-0+wheezy15.5.33+dfsg-1 Show 19 moreShow less5.5.35+dfsg-0+wheezy15.5.35+dfsg-15.5.35+dfsg-25.5.37-0+wheezy15.5.37-15.5.38-0+wheezy15.5.39-15.5.40-0+wheezy15.5.40-15.5.41-0+wheezy15.5.42-15.5.43-0+deb7u15.5.44-0+deb7u15.5.46-0+deb7u15.5.47-0+deb7u15.5.49-0+deb7u15.5.50-0+deb7u15.5.50-0+deb7u25.5.52-0+deb7u1 |
5.5.53-0+deb7u1 |
mysql-5.5Debian:8 |
before 5.5.53-0+deb8u1, plus listed versions 5.5.42-15.5.43-0+deb8u15.5.44-0+deb8u15.5.46-0+deb8u15.5.47-0+deb8u15.5.49-0+deb8u15.5.50-0+deb8u15.5.52-0+deb8u1 |
5.5.53-0+deb8u1 |
mariadb-10.0Debian:8 |
before 10.0.28-0+deb8u1, plus listed versions 10.0.16-110.0.17-110.0.17-1~exp110.0.17-1~exp210.0.18-1~exp1 Show 41 moreShow less10.0.19-110.0.20-0+deb8u110.0.20-110.0.20-210.0.20-310.0.21-110.0.21-210.0.21-310.0.22-0+deb8u110.0.22-110.0.22-210.0.22-2~exp110.0.22-2~exp210.0.22-310.0.22-410.0.22-4~exp110.0.22-510.0.22-610.0.23-0+deb8u110.0.23-110.0.23-210.0.23-310.0.24-110.0.24-210.0.24-310.0.24-410.0.24-4~exp110.0.24-510.0.24-610.0.24-710.0.25-0+deb8u110.0.25-110.0.26-0+deb8u110.0.26-110.0.26-210.0.26-2~exp210.0.26-2~exp310.0.26-310.0.27-0+deb8u110.0.27-110.0.27-2 |
10.0.28-0+deb8u1 |
mariadbMageia:5 |
before 10.0.28-1.mga5 | 10.0.28-1.mga5 |
mariadb104SUSE:Linux Enterprise High Performance Computing 15 SP1-LTSS |
before 10.4.30-150100.3.5.10 | 10.4.30-150100.3.5.10 |
python-mysqlclientSUSE:Linux Enterprise High Performance Computing 15 SP1-LTSS |
before 1.4.6-150100.3.3.7 | 1.4.6-150100.3.3.7 |
mariadb104SUSE:Linux Enterprise Server 15 SP1-LTSS |
before 10.4.30-150100.3.5.10 | 10.4.30-150100.3.5.10 |
python-mysqlclientSUSE:Linux Enterprise Server 15 SP1-LTSS |
before 1.4.6-150100.3.3.7 | 1.4.6-150100.3.3.7 |
mariadb104SUSE:Linux Enterprise Server for SAP Applications 15 SP1 |
before 10.4.30-150100.3.5.10 | 10.4.30-150100.3.5.10 |
python-mysqlclientSUSE:Linux Enterprise Server for SAP Applications 15 SP1 |
before 1.4.6-150100.3.3.7 | 1.4.6-150100.3.3.7 |
Show 35 moreShow less
| Package | Affected | Fixed |
|---|---|---|
lz4SUSE:Linux Enterprise Software Development Kit 12 SP5 |
before 1.8.0-3.5.2 | 1.8.0-3.5.2 |
mariadb-connector-cSUSE:Linux Enterprise Software Development Kit 12 SP5 |
before 3.1.22-2.35.1 | 3.1.22-2.35.1 |
mariadb104SUSE:Linux Enterprise Software Development Kit 12 SP5 |
before 10.4.30-8.5.46 | 10.4.30-8.5.46 |
python-mysqlclientSUSE:Linux Enterprise Software Development Kit 12 SP5 |
before 1.3.14-8.9.2 | 1.3.14-8.9.2 |
lz4SUSE:Linux Enterprise Server 12 SP5 |
before 1.8.0-3.5.2 | 1.8.0-3.5.2 |
mariadb-connector-cSUSE:Linux Enterprise Server 12 SP5 |
before 3.1.22-2.35.1 | 3.1.22-2.35.1 |
mariadb104SUSE:Linux Enterprise Server 12 SP5 |
before 10.4.30-8.5.46 | 10.4.30-8.5.46 |
python-mysqlclientSUSE:Linux Enterprise Server 12 SP5 |
before 1.3.14-8.9.2 | 1.3.14-8.9.2 |
lz4SUSE:Linux Enterprise Server for SAP Applications 12 SP5 |
before 1.8.0-3.5.2 | 1.8.0-3.5.2 |
mariadb-connector-cSUSE:Linux Enterprise Server for SAP Applications 12 SP5 |
before 3.1.22-2.35.1 | 3.1.22-2.35.1 |
mariadb104SUSE:Linux Enterprise Server for SAP Applications 12 SP5 |
before 10.4.30-8.5.46 | 10.4.30-8.5.46 |
python-mysqlclientSUSE:Linux Enterprise Server for SAP Applications 12 SP5 |
before 1.3.14-8.9.2 | 1.3.14-8.9.2 |
mysqlSUSE:Linux Enterprise Software Development Kit 11 SP4 |
before 5.5.53-0.30.1 | 5.5.53-0.30.1 |
mysqlSUSE:Linux Enterprise Server 11 SP4 |
before 5.5.53-0.30.1 | 5.5.53-0.30.1 |
mysqlSUSE:Linux Enterprise Server for SAP Applications 11 SP4 |
before 5.5.53-0.30.1 | 5.5.53-0.30.1 |
mariadbSUSE:Linux Enterprise Server for SAP Applications 12 |
before 10.0.28-20.16.2 | 10.0.28-20.16.2 |
mariadbSUSE:Linux Enterprise Server 12-LTSS |
before 10.0.28-20.16.2 | 10.0.28-20.16.2 |
mariadbSUSE:Linux Enterprise Desktop 12 SP1 |
before 10.0.28-17.2 | 10.0.28-17.2 |
mariadbSUSE:Linux Enterprise Desktop 12 SP2 |
before 10.0.28-17.2 | 10.0.28-17.2 |
mariadbSUSE:Linux Enterprise Server for Raspberry Pi 12 SP2 |
before 10.0.28-17.2 | 10.0.28-17.2 |
mariadbSUSE:Linux Enterprise Software Development Kit 12 SP1 |
before 10.0.28-17.2 | 10.0.28-17.2 |
mariadbSUSE:Linux Enterprise Software Development Kit 12 SP2 |
before 10.0.28-17.2 | 10.0.28-17.2 |
mariadbSUSE:Linux Enterprise Server 12 SP1 |
before 10.0.28-17.2 | 10.0.28-17.2 |
mariadbSUSE:Linux Enterprise Server for SAP Applications 12 SP1 |
before 10.0.28-17.2 | 10.0.28-17.2 |
mariadbSUSE:Linux Enterprise Server 12 SP2 |
before 10.0.28-17.2 | 10.0.28-17.2 |
mariadbSUSE:Linux Enterprise Server for SAP Applications 12 SP2 |
before 10.0.28-17.2 | 10.0.28-17.2 |
mariadbSUSE:Linux Enterprise Workstation Extension 12 SP1 |
before 10.0.28-17.2 | 10.0.28-17.2 |
mariadbSUSE:Linux Enterprise Workstation Extension 12 SP2 |
before 10.0.28-17.2 | 10.0.28-17.2 |
mariadb-5.5Ubuntu:14.04:LTS |
before 5.5.53-1ubuntu0.14.04.1, plus listed versions 5.5.32-1ubuntu15.5.35-1ubuntu15.5.36-15.5.37-0ubuntu0.14.04.15.5.39-0ubuntu0.14.04.1 Show 9 moreShow less5.5.40-0ubuntu0.14.04.15.5.41-0ubuntu0.14.04.25.5.41-1ubuntu0.14.04.15.5.43-1ubuntu0.14.04.25.5.44-1ubuntu0.14.04.15.5.46-1ubuntu0.14.04.25.5.47-1ubuntu0.14.04.15.5.49-1ubuntu0.14.04.15.5.52-1ubuntu0.14.04.1 |
5.5.53-1ubuntu0.14.04.1 |
mysql-5.5Ubuntu:14.04:LTS |
before 5.5.53-0ubuntu0.14.04.1, plus listed versions 5.5.32-0ubuntu75.5.34-0ubuntu15.5.34-0ubuntu25.5.35-0ubuntu15.5.35+dfsg-1ubuntu1 Show 11 moreShow less5.5.37-0ubuntu0.14.04.15.5.38-0ubuntu0.14.04.15.5.40-0ubuntu0.14.04.15.5.41-0ubuntu0.14.04.15.5.43-0ubuntu0.14.04.15.5.44-0ubuntu0.14.04.15.5.46-0ubuntu0.14.04.25.5.47-0ubuntu0.14.04.15.5.49-0ubuntu0.14.04.15.5.50-0ubuntu0.14.04.15.5.52-0ubuntu0.14.04.1 |
5.5.53-0ubuntu0.14.04.1 |
mariadb-10.0Ubuntu:16.04:LTS |
before 10.0.28-0ubuntu0.16.04.1, plus listed versions 10.0.20-0ubuntu0.15.04.110.0.22-0ubuntu110.0.23-110.0.23-210.0.24-710.0.25-0ubuntu0.16.04.110.0.27-0ubuntu0.16.04.1 |
10.0.28-0ubuntu0.16.04.1 |
mysql-5.7Ubuntu:16.04:LTS |
before 5.7.16-0ubuntu0.16.04.1, plus listed versions 5.7.11-0ubuntu45.7.11-0ubuntu55.7.11-0ubuntu65.7.12-0ubuntu15.7.12-0ubuntu1.15.7.13-0ubuntu0.16.04.25.7.15-0ubuntu0.16.04.1 |
5.7.16-0ubuntu0.16.04.1 |
percona-xtradb-cluster-5.6Ubuntu:16.04:LTS |
before 5.6.34-26.19-0ubuntu0.16.04.1, plus listed versions 5.6.21-25.8-0ubuntu25.6.21-25.8-0ubuntu35.6.21-25.8-0ubuntu3.15.6.21-25.8-0ubuntu3.2 |
5.6.34-26.19-0ubuntu0.16.04.1 |
percona-server-5.6Ubuntu:16.04:LTS |
All versions, plus listed versions 5.6.22-rel71.0-0ubuntu25.6.22-rel71.0-0ubuntu45.6.22-rel71.0-0ubuntu4.1 |
None known |
mariadbopenSUSE:Tumbleweed |
before 10.6.4-2.1 | 10.6.4-2.1 |
History
| Recorded | Changed | Sources |
|---|---|---|
| aliases | EUVD | |
| first indexed | CVE List, GitHub Advisories, NVD, OSV |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2016-5584 is a medium vulnerability (CVSS 4.4) in Oracle Mysql, published October 19, 2016. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 1.49%, the 74th percentile. Fixed in mysql-5.5 5.5.53-0+deb7u1.
References
security.gentoo.org/glsa/201701-01
oracle.com/technetwork/security-advisory/cpuoct2016-2881722.html
debian.org/security/2016/dsa-3706
securityfocus.com/bid/93735
securitytracker.com/id/1037050
mariadb.com/kb/en/mariadb/mariadb-10028-release-notes
Show 194 moreShow less
nvd.nist.gov/vuln/detail/CVE-2016-5584
github.com/advisories/GHSA-m4x2-9645-g5v7
advisories.mageia.org/MGASA-2016-0371.html
bugs.mageia.org/show_bug.cgi?id=19693
rhn.redhat.com/errata/RHSA-2016-2595.html
suse.com/support/update/announcement/-2023-3956/suse-ru-20233956-1
bugzilla.suse.com/1001367
ubuntu.com/security/CVE-2016-5584
cve.org/CVERecord?id=CVE-2016-5584
This page doesn't list everything
Left out here: 308 references. The JSON record has them.