{"id":"CVE-2016-0502","aliases":["EUVD-2016-0537","GHSA-vv3q-9x8q-835j","SUSE-SU-2016:0348-1","UBUNTU-CVE-2016-0502","openSUSE-SU-2024:10200-1"],"status":"published","title":"Unspecified vulnerability in Oracle MySQL 5.5.31 and earlier and 5.6.11 and earlier allows remote...","description":"Unspecified vulnerability in Oracle MySQL 5.5.31 and earlier and 5.6.11 and earlier allows remote authenticated users to affect availability via unknown vectors related to Optimizer.","severity":{"version":"3.1","score":6.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","level":"medium","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-08","score":0.03115,"percentile":0.87899,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":false},"published":"2016-01-21T02:00:00Z","modified":"2026-10-24T14:03:49Z","affected":[{"source":"osv","ecosystem":"SUSE:Linux Enterprise Software Development Kit 11 SP3","package":"mysql","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.5.47-0.17.1"}]}],"bundled":12},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Software Development Kit 11 SP4","package":"mysql","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.5.47-0.17.1"}]}],"bundled":12},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Desktop 11 SP3","package":"mysql","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.5.47-0.17.1"}]}],"bundled":12},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Desktop 11 SP4","package":"mysql","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.5.47-0.17.1"}]}],"bundled":12},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 11 SP3","package":"mysql","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.5.47-0.17.1"}]}],"bundled":12},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 11 SP3-TERADATA","package":"mysql","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.5.47-0.17.1"}]}],"bundled":12},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 11 SP3","package":"mysql","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.5.47-0.17.1"}]}],"bundled":12},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 11 SP4","package":"mysql","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.5.47-0.17.1"}]}],"bundled":12},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 11 SP4","package":"mysql","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.5.47-0.17.1"}]}],"bundled":12},{"source":"osv","ecosystem":"Ubuntu:16.04:LTS","package":"percona-server-5.6","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["5.6.22-rel71.0-0ubuntu2","5.6.22-rel71.0-0ubuntu4","5.6.22-rel71.0-0ubuntu4.1"]},{"source":"osv","ecosystem":"Ubuntu:16.04:LTS","package":"percona-xtradb-cluster-5.6","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["5.6.21-25.8-0ubuntu2","5.6.21-25.8-0ubuntu3","5.6.21-25.8-0ubuntu3.1","5.6.21-25.8-0ubuntu3.2","5.6.34-26.19-0ubuntu0.16.04.1","5.6.34-26.19-0ubuntu0.16.04.2","5.6.37-26.21-0ubuntu0.16.04.1","5.6.37-26.21-0ubuntu0.16.04.2"]}],"products":[{"vendor":"mariadb","product":"mariadb"},{"vendor":"opensuse","product":"leap"},{"vendor":"opensuse","product":"opensuse"},{"vendor":"oracle","product":"mysql"}],"references":[{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-02/msg00015.html","tags":["vendor-advisory","x_refsource_SUSE","x_transferred","Mailing List","Third Party Advisory","advisory"]},{"url":"http://www.securitytracker.com/id/1034708","tags":["vdb-entry","x_refsource_SECTRACK","x_transferred","Broken Link","Third Party Advisory","VDB Entry","advisory"]},{"url":"http://www.oracle.com/technetwork/topics/security/cpujan2016-2367955.html","tags":["x_refsource_CONFIRM","x_transferred","Vendor Advisory","advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-02/msg00016.html","tags":["vendor-advisory","x_refsource_SUSE","x_transferred","Mailing List","Third Party Advisory","advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2016-0502"},{"url":"https://github.com/advisories/GHSA-vv3q-9x8q-835j"},{"url":"https://www.suse.com/support/update/announcement/2016/suse-su-20160348-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/959724","tags":["report"]},{"url":"https://bugzilla.suse.com/960961","tags":["report"]},{"url":"https://bugzilla.suse.com/962779","tags":["report"]},{"url":"https://www.suse.com/security/cve/CVE-2015-7744","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-0502","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-0505","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-0546","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-0596","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-0597","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-0598","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-0600","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-0606","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-0608","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-0609","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-0616","tags":["web"]},{"url":"https://ubuntu.com/security/CVE-2016-0502","tags":["report"]},{"url":"http://www.oracle.com/technetwork/topics/security/cpujan2016-2367955.html#AppendixMSQL","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2016-0502","tags":["report"]},{"url":"","tags":["advisory"]},{"url":"https://www.suse.com/security/cve/CVE-2007-5970","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2008-7247","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2009-4019","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2009-4028","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2009-4030","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2013-1976","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-0286","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-0288","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-1789","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-1793","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-2582","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-2611","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-2617","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-2620","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-2639","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-2641","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-2643","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-2648","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-2661","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-3152","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-3194","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-4730","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-4737","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-4752","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-4756","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-4757","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-4761","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-4766","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-4767","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-4769","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-4771","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-4772","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-4792","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-4800","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-4802","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-4815","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-4816","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-4819","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-4826","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-4830","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-4833","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-4836","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-4858","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-4861","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-4862","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-4864","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-4866","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-4870","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-4879","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-4890","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-4895","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-4904","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-4905","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-4910","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-4913","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-5969","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-0503","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-0504","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-0594","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-0595","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-0605","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-0607","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-0610","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-0611","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-0639","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-0640","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-0641","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-0642","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-0643","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-0644","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-0646","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-0647","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-0648","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-0649","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-0650","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-0655","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-0661","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-0665","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-0666","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-0668","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-0705","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-2047","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-2105","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-3459","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-3477","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-3486","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-3492","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-3501","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-3521","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-3614","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-3615","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-5439","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-5440","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-5507","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-5584","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-5609","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-5612","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-5616","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-5617","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-5626","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-5627","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-5629","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-5630","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-6304","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-6662","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-7440","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-8283","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-8284","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-8288","tags":["web"]}],"sources":{"cve":[{"id":"CVE-2016-0502","description":"Unspecified vulnerability in Oracle MySQL 5.5.31 and earlier and 5.6.11 and earlier allows remote authenticated users to affect availability via unknown vectors related to Optimizer.","status":"published","published":"2016-01-21T02:00:00Z","modified":"2024-08-05T22:22:55.591Z","updated_at":"2026-11-02T14:33:37.446553Z"}],"euvd":[{"id":"EUVD-2016-0537","description":"Unspecified vulnerability in Oracle MySQL 5.5.31 and earlier and 5.6.11 and earlier allows remote authenticated users to affect availability via unknown vectors related to Optimizer.","status":"published","published":"2016-01-21T02:00:00Z","modified":"2024-08-05T22:22:55Z","updated_at":"2026-11-03T02:23:00.870142Z"}],"ghsa":[{"id":"GHSA-vv3q-9x8q-835j","title":"Unspecified vulnerability in Oracle MySQL 5.5.31 and earlier and 5.6.11 and earlier allows remote...","description":"Unspecified vulnerability in Oracle MySQL 5.5.31 and earlier and 5.6.11 and earlier allows remote authenticated users to affect availability via unknown vectors related to Optimizer.","status":"published","published":"2022-05-14T01:33:57Z","modified":"2023-01-29T05:01:53Z","cvss":[{"version":"3.1","score":6.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","level":"medium"}],"updated_at":"2026-11-02T14:44:56.341286Z"}],"nvd":[{"id":"CVE-2016-0502","description":"Unspecified vulnerability in Oracle MySQL 5.5.31 and earlier and 5.6.11 and earlier allows remote authenticated users to affect availability via unknown vectors related to Optimizer.","status":"published","published":"2016-01-21T03:00:50.667Z","modified":"2026-06-17T00:37:39.36Z","cvss":[{"version":"3.1","score":6.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","level":"medium","assessor":"primary"},{"version":"2.0","score":4,"vector":"AV:N/AC:L/Au:S/C:N/I:N/A:P","level":"medium","assessor":"primary"}],"updated_at":"2026-11-02T14:03:21.143462Z"}],"osv":[{"id":"CVE-2016-0502","description":"Unspecified vulnerability in Oracle MySQL 5.5.31 and earlier and 5.6.11 and earlier allows remote authenticated users to affect availability via unknown vectors related to Optimizer.","status":"published","published":"2016-01-21T03:00:50.667Z","modified":"2026-10-24T14:03:49.522543727Z","cvss":[{"version":"3.1","score":6.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","level":"medium"}],"updated_at":"2026-11-02T15:44:01.068991Z"},{"id":"UBUNTU-CVE-2016-0502","description":"Unspecified vulnerability in Oracle MySQL 5.5.31 and earlier and 5.6.11 and earlier allows remote authenticated users to affect availability via unknown vectors related to Optimizer.","status":"published","published":"2016-01-21T03:00:00Z","modified":"2025-10-24T04:45:33Z","cvss":[{"version":"3.1","score":6.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","level":"medium"}],"updated_at":"2026-11-02T15:54:11.100633Z"},{"id":"openSUSE-SU-2024:10200-1","title":"libmysql56client18-32bit-5.6.34-1.1 on GA media","description":"These are all security issues fixed in the libmysql56client18-32bit-5.6.34-1.1 package on the GA media of openSUSE Tumbleweed.","status":"published","published":"2024-06-15T00:00:00Z","modified":"2026-02-04T04:16:49.073812Z","updated_at":"2026-11-02T16:58:33.135986Z"},{"id":"SUSE-SU-2016:0348-1","title":"Security update for mysql","description":"\nThis update to MySQL 5.5.47 fixes the following issues (bsc#962779):\n\n- CVE-2015-7744: Lack of verification against faults associated with the Chinese Remainder Theorem (CRT) process when allowing ephemeral key exchange without low memory optimizations on a server, which makes it easier for remote attackers to obtain private RSA keys by capturing TLS handshakes, aka a Lenstra attack.\n- CVE-2016-0502: Unspecified vulnerability in Oracle MySQL 5.5.31 and earlier and 5.6.11 and earlier allows remote authenticated users to affect availability via unknown vectors related to Optimizer. \n- CVE-2016-0505: Unspecified vulnerability in Oracle MySQL 5.5.46 and earlier, 5.6.27 and earlier, and 5.7.9 allows remote authenticated users to affect availability via unknown vectors related to Options. \n- CVE-2016-0546: Unspecified vulnerability in Oracle MySQL 5.5.46 and earlier, 5.6.27 and earlier, and 5.7.9 allows local users to affect confidentiality, integrity, and availability via unknown vectors related to Client. \n- CVE-2016-0596: Unspecified vulnerability in Oracle MySQL 5.5.46 and earlier and 5.6.27 and earlier allows remote authenticated users to affect availability via vectors related to DML. \n- CVE-2016-0597: Unspecified vulnerability in Oracle MySQL 5.5.46 and earlier, 5.6.27 and earlier, and 5.7.9 allows remote authenticated users to affect availability via unknown vectors related to Optimizer. \n- CVE-2016-0598: Unspecified vulnerability in Oracle MySQL 5.5.46 and earlier, 5.6.27 and earlier, and 5.7.9 allows remote authenticated users to affect availability via vectors related to DML. \n- CVE-2016-0600: Unspecified vulnerability in Oracle MySQL 5.5.46 and earlier, 5.6.27 and earlier, and 5.7.9 allows remote authenticated users to affect availability via unknown vectors related to InnoDB. \n- CVE-2016-0606: Unspecified vulnerability in Oracle MySQL 5.5.46 and earlier, 5.6.27 and earlier, and 5.7.9 allows remote authenticated users to affect integrity via unknown vectors related to encryption. \n- CVE-2016-0608: Unspecified vulnerability in Oracle MySQL 5.5.46 and earlier, 5.6.27 and earlier, and 5.7.9 allows remote authenticated users to affect availability via vectors related to UDF. \n- CVE-2016-0609: Unspecified vulnerability in Oracle MySQL 5.5.46 and earlier, 5.6.27 and earlier, and 5.7.9 allows remote authenticated users to affect availability via unknown vectors related to privileges. \n- CVE-2016-0616: Unspecified vulnerability in Oracle MySQL 5.5.46 and earlier allows remote authenticated users to affect availability via unknown vectors related to Optimizer.\n- bsc#959724: Possible buffer overflow from incorrect use of strcpy() and sprintf()\n    \nThe following bugs were fixed:\n    \n- bsc#960961: Incorrect use of plugin-load option in default_plugins.cnf\n","status":"published","published":"2016-02-05T13:54:00Z","modified":"2026-02-04T04:25:06.235326Z","updated_at":"2026-11-02T15:53:43.030986Z"}]}}