{"id":"CVE-2016-0657","aliases":["EUVD-2016-0692","GHSA-2v3h-p724-x392","UBUNTU-CVE-2016-0657","USN-2954-1"],"status":"published","title":"Unspecified vulnerability in Oracle MySQL 5.7.11 and earlier allows local users to affect...","description":"Unspecified vulnerability in Oracle MySQL 5.7.11 and earlier allows local users to affect confidentiality via vectors related to JSON.","severity":{"version":"3.0","score":5.5,"vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N","level":"medium","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-08","score":0.01058,"percentile":0.64705,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":true},"published":"2016-04-20T00:00:00Z","modified":"2026-10-24T10:30:35Z","fixes":[{"ecosystem":"Ubuntu:16.04:LTS","package":"mysql-5.7","fixed_in":["5.7.12-0ubuntu1"],"sources":["osv"]}],"affected":[{"source":"osv","ecosystem":"Ubuntu:16.04:LTS","package":"mysql-5.7","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.7.12-0ubuntu1"}]}],"versions":["5.7.11-0ubuntu4","5.7.11-0ubuntu5","5.7.11-0ubuntu6"]},{"source":"osv","ecosystem":"Ubuntu:16.04:LTS","package":"percona-server-5.6","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["5.6.22-rel71.0-0ubuntu2","5.6.22-rel71.0-0ubuntu4","5.6.22-rel71.0-0ubuntu4.1"]},{"source":"osv","ecosystem":"Ubuntu:16.04:LTS","package":"percona-xtradb-cluster-5.6","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["5.6.21-25.8-0ubuntu2","5.6.21-25.8-0ubuntu3","5.6.21-25.8-0ubuntu3.1","5.6.21-25.8-0ubuntu3.2","5.6.34-26.19-0ubuntu0.16.04.1","5.6.34-26.19-0ubuntu0.16.04.2","5.6.37-26.21-0ubuntu0.16.04.1","5.6.37-26.21-0ubuntu0.16.04.2"]},{"source":"osv","ecosystem":"Ubuntu:16.04:LTS","package":"mysql-5.7","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.7.12-0ubuntu1"}]}],"versions":["5.7.11-0ubuntu4","5.7.11-0ubuntu5","5.7.11-0ubuntu6"],"bundled":12}],"products":[{"vendor":"oracle","product":"mysql"}],"references":[{"url":"http://www.securitytracker.com/id/1035606","tags":["vdb-entry","x_refsource_SECTRACK","x_transferred","web"]},{"url":"http://www.ubuntu.com/usn/USN-2954-1","tags":["vendor-advisory","x_refsource_UBUNTU","x_transferred","advisory"]},{"url":"http://www.oracle.com/technetwork/security-advisory/cpuapr2016v3-2985753.html","tags":["x_refsource_CONFIRM","x_transferred","Patch","Vendor Advisory","fix","report"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2016-0657"},{"url":"https://github.com/advisories/GHSA-2v3h-p724-x392"},{"url":"https://ubuntu.com/security/CVE-2016-0657","tags":["report"]},{"url":"https://ubuntu.com/security/notices/USN-2954-1","tags":["advisory"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2016-0657","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2016-0639","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2016-0642","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2016-0643","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2016-0647","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2016-0648","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2016-0655","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2016-0659","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2016-0662","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2016-0666","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2016-0667","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2016-2047","tags":["report"]}],"sources":{"cve":[{"id":"CVE-2016-0657","description":"Unspecified vulnerability in Oracle MySQL 5.7.11 and earlier allows local users to affect confidentiality via vectors related to JSON.","status":"published","published":"2016-04-21T10:00:00Z","modified":"2024-10-15T19:14:16.129Z","updated_at":"2026-11-02T14:33:36.802481Z"}],"euvd":[{"id":"EUVD-2016-0692","description":"Unspecified vulnerability in Oracle MySQL 5.7.11 and earlier allows local users to affect confidentiality via vectors related to JSON.","status":"published","published":"2016-04-21T10:00:00Z","modified":"2024-10-15T19:14:16Z","updated_at":"2026-11-03T00:27:35.740934Z"}],"ghsa":[{"id":"GHSA-2v3h-p724-x392","title":"Unspecified vulnerability in Oracle MySQL 5.7.11 and earlier allows local users to affect...","description":"Unspecified vulnerability in Oracle MySQL 5.7.11 and earlier allows local users to affect confidentiality via vectors related to JSON.","status":"published","published":"2022-05-17T03:32:54Z","modified":"2023-01-27T05:07:12Z","cvss":[{"version":"3.0","score":5.5,"vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N","level":"medium"}],"updated_at":"2026-11-02T14:43:04.442683Z"}],"nvd":[{"id":"CVE-2016-0657","description":"Unspecified vulnerability in Oracle MySQL 5.7.11 and earlier allows local users to affect confidentiality via vectors related to JSON.","status":"published","published":"2016-04-21T10:59:24.587Z","modified":"2026-06-17T00:37:57.493Z","cvss":[{"version":"3.0","score":5.5,"vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N","level":"medium","assessor":"primary"},{"version":"2.0","score":3.5,"vector":"AV:N/AC:M/Au:S/C:P/I:N/A:N","level":"low","assessor":"primary"}],"updated_at":"2026-11-02T14:03:23.795791Z"}],"osv":[{"id":"CVE-2016-0657","description":"Unspecified vulnerability in Oracle MySQL 5.7.11 and earlier allows local users to affect confidentiality via vectors related to JSON.","status":"published","published":"2016-04-21T10:59:24.587Z","modified":"2026-10-24T10:30:35.444652981Z","cvss":[{"version":"3.0","score":5.5,"vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N","level":"medium"}],"updated_at":"2026-11-02T15:44:01.531338Z"},{"id":"UBUNTU-CVE-2016-0657","description":"Unspecified vulnerability in Oracle MySQL 5.7.11 and earlier allows local users to affect confidentiality via vectors related to JSON.","status":"published","published":"2016-04-20T00:00:00Z","modified":"2026-04-22T10:26:54.548978Z","cvss":[{"version":"3.0","score":5.5,"vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N","level":"medium"}],"updated_at":"2026-11-02T15:54:11.100633Z"},{"id":"USN-2954-1","title":"mysql-5.7 vulnerabilities","description":"Multiple security issues were discovered in MySQL and this update includes\nnew upstream MySQL versions to fix these issues.\n\nMySQL has been updated to 5.7.12 in Ubuntu 16.04 LTS.\n\nIn addition to security fixes, the updated packages contain bug fixes,\nnew features, and possibly incompatible changes.\n\nPlease see the following for more information:\nhttp://dev.mysql.com/doc/relnotes/mysql/5.7/en/news-5-7-12.html\nhttp://www.oracle.com/technetwork/security-advisory/cpuapr2016v3-2985753.html\n","status":"published","published":"2016-04-25T12:20:23Z","modified":"2026-04-27T15:10:57.64416Z","updated_at":"2026-11-02T16:58:10.303275Z"}]}}