CVE-2016-0546

Published: Jan 21, 2016Modified: May 6, 2026

7.2

Vector

AV:L/AC:L/Au:N/C:C/I:C/A:C

Exploitability: 3.9 / Impact: 10.0

Source: NVD

Description

Unspecified vulnerability in Oracle MySQL 5.5.46 and earlier, 5.6.27 and earlier, and 5.7.9 and MariaDB before 5.5.47, 10.0.x before 10.0.23, and 10.1.x before 10.1.10 allows local users to affect confidentiality, integrity, and availability via unknown vectors related to Client. NOTE: the previous information is from the January 2016 CPU. Oracle has not commented on third-party claims that these are multiple buffer overflows in the mysqlshow tool that allow remote database servers to have unspecified impact via a long table or database name.

Affected (24)

Products: Canonical: Ubuntu Linux · Mariadb: Mariadb · Redhat: Enterprise Linux, Enterprise Linux Desktop, Enterprise Linux Hpc Node, Enterprise Linux Hpc Node Eus, Enterprise Linux Server, Enterprise Linux Server Aus, Enterprise Linux Server Eus, Enterprise Linux Workstation · +3 more

Show all products

1 product

1 product

8 products

Enterprise Linux Desktop

Enterprise Linux Hpc Node

Enterprise Linux Hpc Node Eus

Enterprise Linux Server

Enterprise Linux Server Aus

Enterprise Linux Server Eus

Enterprise Linux Workstation

3 products

2 products

1 product

Configuration A

4 vulnerable

Vulnerable Software	Affected Versions
Canonical Ubuntu Linux	Version 12.04
Canonical Ubuntu Linux	Version 14.04
Canonical Ubuntu Linux	Version 15.04
Canonical Ubuntu Linux	Version 15.10

Configuration B

3 vulnerable

Vulnerable Software	Affected Versions
Mariadb Mariadb	From 10.0.0 to 10.0.23
Mariadb Mariadb	From 10.1.0 to 10.1.10
Mariadb Mariadb	From 5.5.20 to 5.5.47

Configuration C

2 vulnerable

Vulnerable Software	Affected Versions
Redhat Enterprise Linux	Version 6.0
Redhat Enterprise Linux	Version 7.0

Configuration D

3 vulnerable

Vulnerable Software	Affected Versions
Oracle Mysql	From 5.5.0 to 5.5.46
Oracle Mysql	From 5.6.0 to 5.6.27
Oracle Mysql	From 5.7.0 to 5.7.9

Configuration E

1 vulnerable

Vulnerable Software	Affected Versions
Oracle Solaris	Version 11.3

Configuration F

1 vulnerable

Vulnerable Software	Affected Versions
Oracle Linux	Version 7

Configuration G

2 vulnerable

Vulnerable Software	Affected Versions
Opensuse Leap	Version 42.1
Opensuse Opensuse	Version 13.2

Configuration H

7 vulnerable

Vulnerable Software	Affected Versions
Redhat Enterprise Linux Desktop	Version 7.0
Redhat Enterprise Linux Hpc Node	Version 7.0
Redhat Enterprise Linux Hpc Node Eus	Version 7.2
Redhat Enterprise Linux Server	Version 7.0
Redhat Enterprise Linux Server Aus	Version 7.2
Redhat Enterprise Linux Server Eus	Version 7.2
Redhat Enterprise Linux Workstation	Version 7.0

Configuration I

1 vulnerable

Vulnerable Software	Affected Versions
Debian Debian Linux	Version 8.0

References (52)

http://lists.opensuse.org/opensuse-security-announce/2016-02/msg00015.html

Source: secalert_us@oracle.com

Third Party Advisory

http://lists.opensuse.org/opensuse-security-announce/2016-02/msg00016.html

Source: secalert_us@oracle.com

Mailing ListThird Party Advisory

http://lists.opensuse.org/opensuse-security-announce/2016-06/msg00033.html

Source: secalert_us@oracle.com

Mailing ListThird Party Advisory

http://lists.opensuse.org/opensuse-security-announce/2016-06/msg00034.html

Source: secalert_us@oracle.com

Mailing ListThird Party Advisory

http://lists.opensuse.org/opensuse-security-announce/2016-06/msg00051.html

Source: secalert_us@oracle.com

Mailing ListThird Party Advisory

http://lists.opensuse.org/opensuse-security-announce/2016-06/msg00053.html

Source: secalert_us@oracle.com

Third Party Advisory

http://rhn.redhat.com/errata/RHSA-2016-0534.html

Source: secalert_us@oracle.com

Third Party Advisory

http://rhn.redhat.com/errata/RHSA-2016-0705.html

Source: secalert_us@oracle.com

Third Party Advisory

http://rhn.redhat.com/errata/RHSA-2016-1480.html

Source: secalert_us@oracle.com

Third Party Advisory

http://rhn.redhat.com/errata/RHSA-2016-1481.html

Source: secalert_us@oracle.com

Third Party Advisory

http://www.debian.org/security/2016/dsa-3453

Source: secalert_us@oracle.com

PatchThird Party Advisory

http://www.debian.org/security/2016/dsa-3459

Source: secalert_us@oracle.com

Third Party Advisory

http://www.oracle.com/technetwork/topics/security/bulletinapr2016-2952098.html

Source: secalert_us@oracle.com

Vendor Advisory

http://www.oracle.com/technetwork/topics/security/cpujan2016-2367955.html

Source: secalert_us@oracle.com

Vendor Advisory

http://www.oracle.com/technetwork/topics/security/linuxbulletinapr2016-2952096.html

Source: secalert_us@oracle.com

Vendor Advisory

http://www.securityfocus.com/bid/81066

Source: secalert_us@oracle.com

Third Party AdvisoryVDB Entry

http://www.securitytracker.com/id/1034708

Source: secalert_us@oracle.com

Third Party AdvisoryVDB Entry

http://www.ubuntu.com/usn/USN-2881-1

Source: secalert_us@oracle.com

Third Party Advisory

https://access.redhat.com/errata/RHSA-2016:1132

Source: secalert_us@oracle.com

Third Party Advisory

https://bugzilla.redhat.com/show_bug.cgi?id=1301493

Source: secalert_us@oracle.com

Issue TrackingThird Party Advisory

https://dev.mysql.com/doc/relnotes/mysql/5.5/en/news-5-5-47.html

Source: secalert_us@oracle.com

Vendor Advisory

https://dev.mysql.com/doc/relnotes/mysql/5.6/en/news-5-6-28.html

Source: secalert_us@oracle.com

Vendor Advisory

https://github.com/mysql/mysql-server/commit/0dbd5a8797ed4bd18e8b883988fb62177eb0f73f

Source: secalert_us@oracle.com

Third Party Advisory

https://mariadb.com/kb/en/mariadb/mariadb-10110-release-notes/

Source: secalert_us@oracle.com

Vendor Advisory

https://mariadb.com/kb/en/mariadb/mariadb-5547-release-notes/

Source: secalert_us@oracle.com

Vendor Advisory

https://mariadb.com/kb/en/mdb-10023-rn/

Source: secalert_us@oracle.com

Vendor Advisory

http://lists.opensuse.org/opensuse-security-announce/2016-02/msg00015.html