CVE-2016-0651: mariadb
CVSS: 5.5v3.1MediumModified
AliasesUBUNTU-CVE-2016-0651
Published 21-04-2016Last modified 15-10-2024
Vulnerability summary
CVE-2016-0651 is a medium (CVSS 5.5) vulnerability in mariadb. EPSS estimates a 1.34% chance of exploitation in the next 30 days, higher than 70.8% of scored vulnerabilities.
CVSS score
5.5/10
010
Medium · v3.1 (NVD)EPSS score
1.34%
0%100%
Low · +0.11 pp in 30 daysKEVNot listedIn no KEV catalog
RansomwareNone recordedNo known use recorded
Public exploits0No public exploits recorded
Advisory lineage
Upstream 0 · Downstream 9 · Related 5Timeline
- 21-04-2016PublishedVulnerability first disclosed.
- 15-10-2024Last modifiedVulnerability information updated.
Description
Unspecified vulnerability in Oracle MySQL 5.5.46 and earlier allows local users to affect availability via vectors related to Optimizer.
CVSS metrics
3 scores · 2 sources · 2 versionsMedium 5.5Preferred score · NVD (NIST)
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:HSourcesAll 2 agree
- OSV · UbuntuEcosystem advisory · calculated5.5MediumCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
Low 3.5Preferred score · NVD (NIST)
AV:N/AC:M/Au:S/C:N/I:N/A:PSourcesSingle source
EPSS trend
Probability
1.34%
Chance of exploitation in the next 30 days
Percentile
71%
Versus all other CVEs
30-day change
+0.11 pp
From 1.23% on 18-09-2026
18-09-202618-10-2026
EPSS score1.34%
Known exploited
Compare KEV catalogsNot in any of the 3 tracked catalogs.
Public exploits
0 foundNo public exploits indexed.
Weaknesses
CWE · root causeNo weakness data has been published for this record.
Affected systems
Redhat6 products
- enterprise_linux_desktop7.0
- enterprise_linux_eus7.2 | 7.3 | 7.4 | 7.5 | 7.6 | 7.7
- enterprise_linux_server7.0
- enterprise_linux_server_aus7.2 | 7.3 | 7.4 | 7.6 | 7.7
- enterprise_linux_server_tus7.2 | 7.3 | 7.6 | 7.7
Suse5 products
- linux_enterprise_debuginfo11:sp4
- linux_enterprise_desktop12 | 12:sp1
- linux_enterprise_server11:sp4 | 12 | 12:sp1
- linux_enterprise_software_development_kit11:sp4 | 12 | 12:sp1
- linux_enterprise_workstation_extension12 | 12:sp1
Ubuntu3 products
- mariadb-5.5< 5.5.47-1ubuntu0.14.04.1
- percona-server-5.6All versions (No fix recorded)
- percona-xtradb-cluster-5.6All versions (No fix recorded)
Mariadb1 product
- mariadb≥ 5.5.0, < 5.5.47 | ≥ 10.0.0, < 10.0.23 | ≥ 10.1.0, < 10.1.10
Oracle1 product
- mysql≥ 5.5.0, ≤ 5.5.46
6 vendors · 18 products
References
13 links- lists.opensuse.org/opensuse-security-announce/2016-06/msg00034.htmlVendor AdvisoryX Refsource SUSEMailing ListThird Party Advisory
- lists.opensuse.org/opensuse-security-announce/2016-06/msg00033.htmlVendor AdvisoryX Refsource SUSEMailing ListThird Party Advisory
- lists.opensuse.org/opensuse-security-announce/2016-06/msg00051.htmlVendor AdvisoryX Refsource SUSEMailing ListThird Party Advisory
- www.oracle.com/technetwork/security-advisory/cpuapr2016v3-2985753.htmlX Refsource CONFIRMPatchVendor AdvisoryREPORT
- lists.opensuse.org/opensuse-security-announce/2016-06/msg00053.htmlVendor AdvisoryX Refsource SUSEThird Party Advisory
Show all 13 references
- lists.opensuse.org/opensuse-security-announce/2016-05/msg00035.htmlVendor AdvisoryX Refsource SUSEMailing ListThird Party Advisory