CVE-2016-8283 : Unspecified vulnerability in Oracle MySQL 5.5.51 and earlier, 5.6.32 and earlier

Unspecified vulnerability in Oracle MySQL 5.5.51 and earlier, 5.6.32 and earlier, and 5.7.14 and earlier allows remote authenticated users to affect availability via vectors related to Server: Types.

Published 2016-10-25 14:31:54

Updated 2025-04-12 10:46:41

Source Oracle

View at NVD, CVE.org

Products affected by CVE-2016-8283

Oracle » Mysql
Versions from including (>=) 5.7.0 and up to, including, (<=) 5.7.14
cpe:2.3:a:oracle:mysql:*:*:*:*:*:*:*:*
Matching versions
Oracle » Mysql
Versions from including (>=) 5.6.0 and up to, including, (<=) 5.6.32
cpe:2.3:a:oracle:mysql:*:*:*:*:*:*:*:*
Matching versions
Oracle » Mysql
Versions from including (>=) 5.5.0 and up to, including, (<=) 5.5.51
cpe:2.3:a:oracle:mysql:*:*:*:*:*:*:*:*
Matching versions
Mariadb » Mariadb
Versions from including (>=) 5.5.20 and before (<) 5.5.52
cpe:2.3:a:mariadb:mariadb:*:*:*:*:*:*:*:*
Matching versions
Mariadb » Mariadb
Versions from including (>=) 10.1.0 and before (<) 10.1.38
cpe:2.3:a:mariadb:mariadb:*:*:*:*:*:*:*:*
Matching versions
Mariadb » Mariadb
Versions from including (>=) 10.0.0 and before (<) 10.0.28
cpe:2.3:a:mariadb:mariadb:*:*:*:*:*:*:*:*
Matching versions

Threat overview for CVE-2016-8283

Top countries where our scanners detected CVE-2016-8283

Top open port discovered on systems with this issue 3306

IPs affected by CVE-2016-8283 1,009

Threat actors abusing to this issue? Yes

Find out if you^* are affected by CVE-2016-8283!

^*Directly or indirectly through your vendors, service providers and 3rd parties. Powered by attack surface intelligence from SecurityScorecard.

Exploit prediction scoring system (EPSS) score for CVE-2016-8283

EPSS FAQ

0.68%

Probability of exploitation activity in the next 30 days EPSS Score History

~ 69 %

Percentile, the proportion of vulnerabilities that are scored at or less

CVSS scores for CVE-2016-8283

Base Score	Base Severity	CVSS Vector	Exploitability Score	Impact Score	Score Source
4.0	MEDIUM	AV:N/AC:L/Au:S/C:N/I:N/A:P	8.0	2.9	NIST
Access Vector: Network Access Complexity: Low Authentication: Single Confidentiality Impact: None Integrity Impact: None Availability Impact: Partial
4.3	MEDIUM	CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L	2.8	1.4	NIST
Attack Vector: Network Attack Complexity: Low Privileges Required: Low User Interaction: None Scope: Unchanged Confidentiality: None Integrity: None Availability: Low

References for CVE-2016-8283

https://mariadb.com/kb/en/mariadb/mariadb-10028-release-notes/

MariaDB 10.0.28 Release Notes - MariaDB Knowledge Base
Third Party Advisory

CVEs referencing this url
http://rhn.redhat.com/errata/RHSA-2016-2130.html

RHSA-2016:2130 - Security Advisory - Red Hat Customer Portal
Third Party Advisory

CVEs referencing this url
https://security.gentoo.org/glsa/201701-01

MariaDB and MySQL: Multiple vulnerabilities (GLSA 201701-01) — Gentoo security
Third Party Advisory

CVEs referencing this url
http://rhn.redhat.com/errata/RHSA-2016-2131.html

RHSA-2016:2131 - Security Advisory - Red Hat Customer Portal
Third Party Advisory

CVEs referencing this url
https://mariadb.com/kb/en/mariadb/mariadb-10118-release-notes/

MariaDB 10.1.18 Release Notes - MariaDB Knowledge Base
Third Party Advisory

CVEs referencing this url
http://www.securityfocus.com/bid/93737

Oracle MySQL CVE-2016-8283 Remote Security Vulnerability
Third Party Advisory;VDB Entry
http://www.oracle.com/technetwork/security-advisory/cpuoct2016-2881722.html

Oracle Critical Patch Update - October 2016
Patch;Vendor Advisory

CVEs referencing this url
http://rhn.redhat.com/errata/RHSA-2016-2927.html

RHSA-2016:2927 - Security Advisory - Red Hat Customer Portal
Third Party Advisory

CVEs referencing this url
https://mariadb.com/kb/en/mariadb/mariadb-5552-release-notes/

MariaDB 5.5.52 Release Notes - MariaDB Knowledge Base
Third Party Advisory

CVEs referencing this url
http://rhn.redhat.com/errata/RHSA-2016-2928.html

RHSA-2016:2928 - Security Advisory - Red Hat Customer Portal
Third Party Advisory

CVEs referencing this url
http://rhn.redhat.com/errata/RHSA-2016-2595.html

RHSA-2016:2595 - Security Advisory - Red Hat Customer Portal
Third Party Advisory

CVEs referencing this url
http://www.securitytracker.com/id/1037050

MySQL Multiple Bugs Let Remote Users Access and Modify Data, Remote and Local Users Deny Service, and Local Users Modify Data and Gain Elevated Privileges - SecurityTracker
Third Party Advisory;VDB Entry

CVEs referencing this url
http://rhn.redhat.com/errata/RHSA-2016-2749.html

RHSA-2016:2749 - Security Advisory - Red Hat Customer Portal
Third Party Advisory

CVEs referencing this url

Jump to

Vulnerability Details : CVE-2016-8283

Products affected by CVE-2016-8283

Threat overview for CVE-2016-8283

Exploit prediction scoring system (EPSS) score for CVE-2016-8283

CVSS scores for CVE-2016-8283

References for CVE-2016-8283