{"id":"CVE-2016-5437","aliases":["EUVD-2016-6381","GHSA-66j4-x2rw-gwpj","UBUNTU-CVE-2016-5437","USN-3040-1"],"status":"published","title":"Unspecified vulnerability in Oracle MySQL 5.7.12 and earlier allows remote administrators to...","description":"Unspecified vulnerability in Oracle MySQL 5.7.12 and earlier allows remote administrators to affect availability via vectors related to Server: Log.","severity":{"version":"3.0","score":4.9,"vector":"CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H","level":"medium","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-08","score":0.02151,"percentile":0.82255,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":true},"published":"2016-07-20T00:00:00Z","modified":"2026-10-24T10:30:41Z","fixes":[{"ecosystem":"Ubuntu:16.04:LTS","package":"mysql-5.7","fixed_in":["5.7.13-0ubuntu0.16.04.2"],"sources":["osv"]}],"affected":[{"source":"osv","ecosystem":"Ubuntu:16.04:LTS","package":"mysql-5.7","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.7.13-0ubuntu0.16.04.2"}]}],"versions":["5.7.11-0ubuntu4","5.7.11-0ubuntu5","5.7.11-0ubuntu6","5.7.12-0ubuntu1","5.7.12-0ubuntu1.1"]},{"source":"osv","ecosystem":"Ubuntu:16.04:LTS","package":"percona-server-5.6","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["5.6.22-rel71.0-0ubuntu2","5.6.22-rel71.0-0ubuntu4","5.6.22-rel71.0-0ubuntu4.1"]},{"source":"osv","ecosystem":"Ubuntu:16.04:LTS","package":"percona-xtradb-cluster-5.6","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["5.6.21-25.8-0ubuntu2","5.6.21-25.8-0ubuntu3","5.6.21-25.8-0ubuntu3.1","5.6.21-25.8-0ubuntu3.2","5.6.34-26.19-0ubuntu0.16.04.1","5.6.34-26.19-0ubuntu0.16.04.2","5.6.37-26.21-0ubuntu0.16.04.1","5.6.37-26.21-0ubuntu0.16.04.2"]},{"source":"osv","ecosystem":"Ubuntu:14.04:LTS","package":"mysql-5.5","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.5.50-0ubuntu0.14.04.1"}]}],"versions":["5.5.32-0ubuntu7","5.5.34-0ubuntu1","5.5.34-0ubuntu2","5.5.35-0ubuntu1","5.5.35+dfsg-1ubuntu1","5.5.37-0ubuntu0.14.04.1","5.5.38-0ubuntu0.14.04.1","5.5.40-0ubuntu0.14.04.1","5.5.41-0ubuntu0.14.04.1","5.5.43-0ubuntu0.14.04.1","5.5.44-0ubuntu0.14.04.1","5.5.46-0ubuntu0.14.04.2","5.5.47-0ubuntu0.14.04.1","5.5.49-0ubuntu0.14.04.1"],"bundled":17},{"source":"osv","ecosystem":"Ubuntu:16.04:LTS","package":"mysql-5.7","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.7.13-0ubuntu0.16.04.2"}]}],"versions":["5.7.11-0ubuntu4","5.7.11-0ubuntu5","5.7.11-0ubuntu6","5.7.12-0ubuntu1","5.7.12-0ubuntu1.1"],"bundled":17}],"products":[{"vendor":"oracle","product":"mysql"}],"references":[{"url":"http://www.ubuntu.com/usn/USN-3040-1","tags":["vendor-advisory","x_refsource_UBUNTU","x_transferred","advisory"]},{"url":"http://www.oracle.com/technetwork/security-advisory/cpujul2016-2881720.html","tags":["x_refsource_CONFIRM","x_transferred","Patch","Vendor Advisory","fix","report"]},{"url":"http://www.securitytracker.com/id/1036362","tags":["vdb-entry","x_refsource_SECTRACK","x_transferred","web"]},{"url":"http://www.securityfocus.com/bid/91787","tags":["vdb-entry","x_refsource_BID","x_transferred","Third Party Advisory","VDB Entry","advisory"]},{"url":"http://www.securityfocus.com/bid/91917","tags":["vdb-entry","x_refsource_BID","x_transferred","web"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2016-5437"},{"url":"https://github.com/advisories/GHSA-66j4-x2rw-gwpj"},{"url":"https://ubuntu.com/security/CVE-2016-5437","tags":["report"]},{"url":"https://ubuntu.com/security/notices/USN-3040-1","tags":["advisory"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2016-5437","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2016-3424","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2016-3459","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2016-3477","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2016-3486","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2016-3501","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2016-3518","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2016-3521","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2016-3588","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2016-3614","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2016-3615","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2016-5436","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2016-5439","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2016-5440","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2016-5441","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2016-5442","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2016-5443","tags":["report"]}],"sources":{"cve":[{"id":"CVE-2016-5437","description":"Unspecified vulnerability in Oracle MySQL 5.7.12 and earlier allows remote administrators to affect availability via vectors related to Server: Log.","status":"published","published":"2016-07-21T10:00:00Z","modified":"2024-10-11T20:39:46.531Z","updated_at":"2026-11-02T14:33:30.767029Z"}],"euvd":[{"id":"EUVD-2016-6381","description":"Unspecified vulnerability in Oracle MySQL 5.7.12 and earlier allows remote administrators to affect availability via vectors related to Server: Log.","status":"published","published":"2016-07-21T10:00:00Z","modified":"2024-10-11T20:39:46Z","updated_at":"2026-11-03T00:27:38.618953Z"}],"ghsa":[{"id":"GHSA-66j4-x2rw-gwpj","title":"Unspecified vulnerability in Oracle MySQL 5.7.12 and earlier allows remote administrators to...","description":"Unspecified vulnerability in Oracle MySQL 5.7.12 and earlier allows remote administrators to affect availability via vectors related to Server: Log.","status":"published","published":"2022-05-17T01:19:28Z","modified":"2023-02-03T05:03:42Z","cvss":[{"version":"3.0","score":4.9,"vector":"CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H","level":"medium"}],"updated_at":"2026-11-02T14:53:24.767237Z"}],"nvd":[{"id":"CVE-2016-5437","description":"Unspecified vulnerability in Oracle MySQL 5.7.12 and earlier allows remote administrators to affect availability via vectors related to Server: Log.","status":"published","published":"2016-07-21T10:14:51.693Z","modified":"2026-06-17T00:49:24.67Z","cvss":[{"version":"3.0","score":4.9,"vector":"CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H","level":"medium","assessor":"primary"},{"version":"2.0","score":4,"vector":"AV:N/AC:L/Au:S/C:N/I:N/A:P","level":"medium","assessor":"primary"}],"updated_at":"2026-11-02T14:03:27.736698Z"}],"osv":[{"id":"CVE-2016-5437","description":"Unspecified vulnerability in Oracle MySQL 5.7.12 and earlier allows remote administrators to affect availability via vectors related to Server: Log.","status":"published","published":"2016-07-21T10:14:51.693Z","modified":"2026-10-24T10:30:41.777902904Z","cvss":[{"version":"3.0","score":4.9,"vector":"CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H","level":"medium"}],"updated_at":"2026-11-02T15:44:02.776224Z"},{"id":"UBUNTU-CVE-2016-5437","description":"Unspecified vulnerability in Oracle MySQL 5.7.12 and earlier allows remote administrators to affect availability via vectors related to Server: Log.","status":"published","published":"2016-07-20T00:00:00Z","modified":"2026-04-22T10:52:49.853093Z","cvss":[{"version":"3.0","score":4.9,"vector":"CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H","level":"medium"}],"updated_at":"2026-11-02T15:54:12.642042Z"},{"id":"USN-3040-1","title":"mysql-5.5, mysql-5.6, mysql-5.7 vulnerabilities","description":"Multiple security issues were discovered in MySQL and this update includes\nnew upstream MySQL versions to fix these issues.\n\nMySQL has been updated to 5.5.50 in Ubuntu 12.04 LTS and Ubuntu 14.04 LTS.\nUbuntu 15.10 has been updated to MySQL 5.6.31. Ubuntu 16.04 LTS has been\nupdated to MySQL 5.7.13.\n\nIn addition to security fixes, the updated packages contain bug fixes,\nnew features, and possibly incompatible changes.\n\nPlease see the following for more information:\nhttp://dev.mysql.com/doc/relnotes/mysql/5.5/en/news-5-5-50.html\nhttp://dev.mysql.com/doc/relnotes/mysql/5.6/en/news-5-6-31.html\nhttp://dev.mysql.com/doc/relnotes/mysql/5.7/en/news-5-7-13.html\nhttp://www.oracle.com/technetwork/security-advisory/cpujul2016-2881720.html\n","status":"published","published":"2016-07-21T16:46:08Z","modified":"2026-04-27T15:12:42.922554Z","updated_at":"2026-11-02T16:58:10.303275Z"}]}}