{"schemaVersion":3,"id":"RHSA-2016:1602","aliases":[],"status":"published","duplicateOf":null,"title":null,"description":"Red Hat Security Advisory: mariadb security update","dates":{"published":"2024-09-13T12:28:22.000Z","modified":"2026-06-29T10:13:15.000Z","reserved":null,"kevAdded":[],"kevDue":[]},"cvss":{"headline":{"score":7.5,"severity":"high","version":"3.0","versionLabel":"v3.0","source":"OSV · Red hat","vector":"CVSS:3.0/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H","computed":true,"selection":"version-preference"},"metrics":[{"version":"3.0","versionLabel":"v3.0","source":"OSV · Red hat","score":7.5,"severity":"high","vector":"CVSS:3.0/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H","exploitability":4.1,"impact":9.8,"computed":true}]},"epss":{"probability":null,"percentile":null,"severity":"unknown","asOf":null,"change":{"pp":null,"baselineDate":null,"baselineScore":null},"history":[],"last30":[]},"kev":{"state":"not-listed","entries":[],"listedCount":0,"totalCatalogs":3,"catalogs":[{"source":"cisa","label":"CISA","listed":false,"entry":null},{"source":"enisa","label":"ENISA","listed":false,"entry":null},{"source":"circl","label":"CIRCL","listed":false,"entry":null}]},"ransomware":{"state":"none-recorded","sources":[]},"exploits":[],"exploitCount":0,"weaknesses":[],"affected":[{"vendor":"redhat","product":"mariadb","name":"mariadb","label":"mariadb","ecosystem":"Red Hat","cpePart":null,"purl":"pkg:rpm/redhat/mariadb","purlType":"rpm","versions":[{"text":"< 1:5.5.50-1.el7_2","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 1:5.5.50-1.el7_2","eol":null,"hubHref":null},{"vendor":"redhat","product":"mariadb-bench","name":"mariadb-bench","label":"mariadb-bench","ecosystem":"Red Hat","cpePart":null,"purl":"pkg:rpm/redhat/mariadb-bench","purlType":"rpm","versions":[{"text":"< 1:5.5.50-1.el7_2","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 1:5.5.50-1.el7_2","eol":null,"hubHref":null},{"vendor":"redhat","product":"mariadb-debuginfo","name":"mariadb-debuginfo","label":"mariadb-debuginfo","ecosystem":"Red Hat","cpePart":null,"purl":"pkg:rpm/redhat/mariadb-debuginfo","purlType":"rpm","versions":[{"text":"< 1:5.5.50-1.el7_2","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 1:5.5.50-1.el7_2","eol":null,"hubHref":null},{"vendor":"redhat","product":"mariadb-devel","name":"mariadb-devel","label":"mariadb-devel","ecosystem":"Red Hat","cpePart":null,"purl":"pkg:rpm/redhat/mariadb-devel","purlType":"rpm","versions":[{"text":"< 1:5.5.50-1.el7_2","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 1:5.5.50-1.el7_2","eol":null,"hubHref":null},{"vendor":"redhat","product":"mariadb-embedded","name":"mariadb-embedded","label":"mariadb-embedded","ecosystem":"Red Hat","cpePart":null,"purl":"pkg:rpm/redhat/mariadb-embedded","purlType":"rpm","versions":[{"text":"< 1:5.5.50-1.el7_2","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 1:5.5.50-1.el7_2","eol":null,"hubHref":null},{"vendor":"redhat","product":"mariadb-embedded-devel","name":"mariadb-embedded-devel","label":"mariadb-embedded-devel","ecosystem":"Red Hat","cpePart":null,"purl":"pkg:rpm/redhat/mariadb-embedded-devel","purlType":"rpm","versions":[{"text":"< 1:5.5.50-1.el7_2","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 1:5.5.50-1.el7_2","eol":null,"hubHref":null},{"vendor":"redhat","product":"mariadb-libs","name":"mariadb-libs","label":"mariadb-libs","ecosystem":"Red Hat","cpePart":null,"purl":"pkg:rpm/redhat/mariadb-libs","purlType":"rpm","versions":[{"text":"< 1:5.5.50-1.el7_2","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 1:5.5.50-1.el7_2","eol":null,"hubHref":null},{"vendor":"redhat","product":"mariadb-server","name":"mariadb-server","label":"mariadb-server","ecosystem":"Red Hat","cpePart":null,"purl":"pkg:rpm/redhat/mariadb-server","purlType":"rpm","versions":[{"text":"< 1:5.5.50-1.el7_2","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 1:5.5.50-1.el7_2","eol":null,"hubHref":null},{"vendor":"redhat","product":"mariadb-test","name":"mariadb-test","label":"mariadb-test","ecosystem":"Red Hat","cpePart":null,"purl":"pkg:rpm/redhat/mariadb-test","purlType":"rpm","versions":[{"text":"< 1:5.5.50-1.el7_2","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 1:5.5.50-1.el7_2","eol":null,"hubHref":null}],"affectedCount":9,"eol":{"hasEol":false,"count":0},"references":[{"url":"https://access.redhat.com/errata/RHSA-2016:1602","label":"access.redhat.com/errata/RHSA-2016:1602","hostname":"access.redhat.com","tags":["Advisory"]},{"url":"https://access.redhat.com/security/updates/classification/#important","label":"access.redhat.com/security/updates/classification/","hostname":"access.redhat.com","tags":["ARTICLE"]},{"url":"http://www.oracle.com/technetwork/topics/security/cpuapr2016-2881694.html#AppendixMSQL","label":"www.oracle.com/technetwork/topics/security/cpuapr2016-2881694.html","hostname":"www.oracle.com","tags":["ARTICLE"]},{"url":"http://www.oracle.com/technetwork/security-advisory/cpujul2016-2881720.html#AppendixMSQL","label":"www.oracle.com/technetwork/security-advisory/cpujul2016-2881720.html","hostname":"www.oracle.com","tags":["ARTICLE"]},{"url":"https://mariadb.com/kb/en/mariadb/mariadb-5548-release-notes/","label":"mariadb.com/kb/en/mariadb/mariadb-5548-release-notes/","hostname":"mariadb.com","tags":["ARTICLE"]},{"url":"https://mariadb.com/kb/en/mariadb/mariadb-5549-release-notes/","label":"mariadb.com/kb/en/mariadb/mariadb-5549-release-notes/","hostname":"mariadb.com","tags":["ARTICLE"]},{"url":"https://mariadb.com/kb/en/mariadb/mariadb-5550-release-notes/","label":"mariadb.com/kb/en/mariadb/mariadb-5550-release-notes/","hostname":"mariadb.com","tags":["ARTICLE"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1329239","label":"bugzilla.redhat.com/show_bug.cgi?id=1329239","hostname":"bugzilla.redhat.com","tags":["REPORT"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1329241","label":"bugzilla.redhat.com/show_bug.cgi?id=1329241","hostname":"bugzilla.redhat.com","tags":["REPORT"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1329245","label":"bugzilla.redhat.com/show_bug.cgi?id=1329245","hostname":"bugzilla.redhat.com","tags":["REPORT"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1329247","label":"bugzilla.redhat.com/show_bug.cgi?id=1329247","hostname":"bugzilla.redhat.com","tags":["REPORT"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1329248","label":"bugzilla.redhat.com/show_bug.cgi?id=1329248","hostname":"bugzilla.redhat.com","tags":["REPORT"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1329249","label":"bugzilla.redhat.com/show_bug.cgi?id=1329249","hostname":"bugzilla.redhat.com","tags":["REPORT"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1329251","label":"bugzilla.redhat.com/show_bug.cgi?id=1329251","hostname":"bugzilla.redhat.com","tags":["REPORT"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1329252","label":"bugzilla.redhat.com/show_bug.cgi?id=1329252","hostname":"bugzilla.redhat.com","tags":["REPORT"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1329253","label":"bugzilla.redhat.com/show_bug.cgi?id=1329253","hostname":"bugzilla.redhat.com","tags":["REPORT"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1329270","label":"bugzilla.redhat.com/show_bug.cgi?id=1329270","hostname":"bugzilla.redhat.com","tags":["REPORT"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1358201","label":"bugzilla.redhat.com/show_bug.cgi?id=1358201","hostname":"bugzilla.redhat.com","tags":["REPORT"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1358205","label":"bugzilla.redhat.com/show_bug.cgi?id=1358205","hostname":"bugzilla.redhat.com","tags":["REPORT"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1358209","label":"bugzilla.redhat.com/show_bug.cgi?id=1358209","hostname":"bugzilla.redhat.com","tags":["REPORT"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1358212","label":"bugzilla.redhat.com/show_bug.cgi?id=1358212","hostname":"bugzilla.redhat.com","tags":["REPORT"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1358218","label":"bugzilla.redhat.com/show_bug.cgi?id=1358218","hostname":"bugzilla.redhat.com","tags":["REPORT"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1358223","label":"bugzilla.redhat.com/show_bug.cgi?id=1358223","hostname":"bugzilla.redhat.com","tags":["REPORT"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2016/rhsa-2016_1602.json","label":"security.access.redhat.com/data/csaf/v2/advisories/2016/rhsa-2016_1602.json","hostname":"security.access.redhat.com","tags":["Advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2016-0640","label":"access.redhat.com/security/cve/CVE-2016-0640","hostname":"access.redhat.com","tags":["REPORT"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2016-0640","label":"www.cve.org/CVERecord?id=CVE-2016-0640","hostname":"www.cve.org","tags":["Advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2016-0640","label":"nvd.nist.gov/vuln/detail/CVE-2016-0640","hostname":"nvd.nist.gov","tags":["Advisory"]},{"url":"http://www.oracle.com/technetwork/topics/security/cpuapr2016verbose-2881709.html","label":"www.oracle.com/technetwork/topics/security/cpuapr2016verbose-2881709.html","hostname":"www.oracle.com","tags":["ARTICLE"]},{"url":"https://access.redhat.com/security/cve/CVE-2016-0641","label":"access.redhat.com/security/cve/CVE-2016-0641","hostname":"access.redhat.com","tags":["REPORT"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2016-0641","label":"www.cve.org/CVERecord?id=CVE-2016-0641","hostname":"www.cve.org","tags":["Advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2016-0641","label":"nvd.nist.gov/vuln/detail/CVE-2016-0641","hostname":"nvd.nist.gov","tags":["Advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2016-0643","label":"access.redhat.com/security/cve/CVE-2016-0643","hostname":"access.redhat.com","tags":["REPORT"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2016-0643","label":"www.cve.org/CVERecord?id=CVE-2016-0643","hostname":"www.cve.org","tags":["Advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2016-0643","label":"nvd.nist.gov/vuln/detail/CVE-2016-0643","hostname":"nvd.nist.gov","tags":["Advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2016-0644","label":"access.redhat.com/security/cve/CVE-2016-0644","hostname":"access.redhat.com","tags":["REPORT"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2016-0644","label":"www.cve.org/CVERecord?id=CVE-2016-0644","hostname":"www.cve.org","tags":["Advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2016-0644","label":"nvd.nist.gov/vuln/detail/CVE-2016-0644","hostname":"nvd.nist.gov","tags":["Advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2016-0646","label":"access.redhat.com/security/cve/CVE-2016-0646","hostname":"access.redhat.com","tags":["REPORT"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2016-0646","label":"www.cve.org/CVERecord?id=CVE-2016-0646","hostname":"www.cve.org","tags":["Advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2016-0646","label":"nvd.nist.gov/vuln/detail/CVE-2016-0646","hostname":"nvd.nist.gov","tags":["Advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2016-0647","label":"access.redhat.com/security/cve/CVE-2016-0647","hostname":"access.redhat.com","tags":["REPORT"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2016-0647","label":"www.cve.org/CVERecord?id=CVE-2016-0647","hostname":"www.cve.org","tags":["Advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2016-0647","label":"nvd.nist.gov/vuln/detail/CVE-2016-0647","hostname":"nvd.nist.gov","tags":["Advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2016-0648","label":"access.redhat.com/security/cve/CVE-2016-0648","hostname":"access.redhat.com","tags":["REPORT"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2016-0648","label":"www.cve.org/CVERecord?id=CVE-2016-0648","hostname":"www.cve.org","tags":["Advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2016-0648","label":"nvd.nist.gov/vuln/detail/CVE-2016-0648","hostname":"nvd.nist.gov","tags":["Advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2016-0649","label":"access.redhat.com/security/cve/CVE-2016-0649","hostname":"access.redhat.com","tags":["REPORT"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2016-0649","label":"www.cve.org/CVERecord?id=CVE-2016-0649","hostname":"www.cve.org","tags":["Advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2016-0649","label":"nvd.nist.gov/vuln/detail/CVE-2016-0649","hostname":"nvd.nist.gov","tags":["Advisory"]},{"url":"http://www.oracle.com/technetwork/security-advisory/cpuapr2016v3-2985753.html#AppendixMSQL","label":"www.oracle.com/technetwork/security-advisory/cpuapr2016v3-2985753.html","hostname":"www.oracle.com","tags":["ARTICLE"]},{"url":"https://access.redhat.com/security/cve/CVE-2016-0650","label":"access.redhat.com/security/cve/CVE-2016-0650","hostname":"access.redhat.com","tags":["REPORT"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2016-0650","label":"www.cve.org/CVERecord?id=CVE-2016-0650","hostname":"www.cve.org","tags":["Advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2016-0650","label":"nvd.nist.gov/vuln/detail/CVE-2016-0650","hostname":"nvd.nist.gov","tags":["Advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2016-0666","label":"access.redhat.com/security/cve/CVE-2016-0666","hostname":"access.redhat.com","tags":["REPORT"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2016-0666","label":"www.cve.org/CVERecord?id=CVE-2016-0666","hostname":"www.cve.org","tags":["Advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2016-0666","label":"nvd.nist.gov/vuln/detail/CVE-2016-0666","hostname":"nvd.nist.gov","tags":["Advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2016-3452","label":"access.redhat.com/security/cve/CVE-2016-3452","hostname":"access.redhat.com","tags":["REPORT"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2016-3452","label":"www.cve.org/CVERecord?id=CVE-2016-3452","hostname":"www.cve.org","tags":["Advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2016-3452","label":"nvd.nist.gov/vuln/detail/CVE-2016-3452","hostname":"nvd.nist.gov","tags":["Advisory"]},{"url":"http://www.oracle.com/technetwork/topics/security/cpujul2016-2881720.html","label":"www.oracle.com/technetwork/topics/security/cpujul2016-2881720.html","hostname":"www.oracle.com","tags":["ARTICLE"]},{"url":"https://access.redhat.com/security/cve/CVE-2016-3477","label":"access.redhat.com/security/cve/CVE-2016-3477","hostname":"access.redhat.com","tags":["REPORT"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2016-3477","label":"www.cve.org/CVERecord?id=CVE-2016-3477","hostname":"www.cve.org","tags":["Advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2016-3477","label":"nvd.nist.gov/vuln/detail/CVE-2016-3477","hostname":"nvd.nist.gov","tags":["Advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2016-3521","label":"access.redhat.com/security/cve/CVE-2016-3521","hostname":"access.redhat.com","tags":["REPORT"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2016-3521","label":"www.cve.org/CVERecord?id=CVE-2016-3521","hostname":"www.cve.org","tags":["Advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2016-3521","label":"nvd.nist.gov/vuln/detail/CVE-2016-3521","hostname":"nvd.nist.gov","tags":["Advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2016-3615","label":"access.redhat.com/security/cve/CVE-2016-3615","hostname":"access.redhat.com","tags":["REPORT"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2016-3615","label":"www.cve.org/CVERecord?id=CVE-2016-3615","hostname":"www.cve.org","tags":["Advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2016-3615","label":"nvd.nist.gov/vuln/detail/CVE-2016-3615","hostname":"nvd.nist.gov","tags":["Advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2016-5440","label":"access.redhat.com/security/cve/CVE-2016-5440","hostname":"access.redhat.com","tags":["REPORT"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2016-5440","label":"www.cve.org/CVERecord?id=CVE-2016-5440","hostname":"www.cve.org","tags":["Advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2016-5440","label":"nvd.nist.gov/vuln/detail/CVE-2016-5440","hostname":"nvd.nist.gov","tags":["Advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2016-5444","label":"access.redhat.com/security/cve/CVE-2016-5444","hostname":"access.redhat.com","tags":["REPORT"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2016-5444","label":"www.cve.org/CVERecord?id=CVE-2016-5444","hostname":"www.cve.org","tags":["Advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2016-5444","label":"nvd.nist.gov/vuln/detail/CVE-2016-5444","hostname":"nvd.nist.gov","tags":["Advisory"]}],"lineage":{"upstream":["CVE-2016-0640","CVE-2016-0641","CVE-2016-0643","CVE-2016-0644","CVE-2016-0646","CVE-2016-0647","CVE-2016-0648","CVE-2016-0649","CVE-2016-0650","CVE-2016-0666","CVE-2016-3452","CVE-2016-3477","CVE-2016-3521","CVE-2016-3615","CVE-2016-5440","CVE-2016-5444"],"downstream":[],"duplicates":[],"related":[]},"timeline":[{"kind":"published","date":"2024-09-13T12:28:22.000Z","label":"Published","detail":"Vulnerability first disclosed.","source":null},{"kind":"modified","date":"2026-06-29T10:13:15.000Z","label":"Last modified","detail":"Vulnerability information updated.","source":null}],"risk":{"score":30,"level":"medium","profile":"Default","thresholds":{"critical":75,"high":50,"medium":25,"low":10}},"meta":{"dataAsOf":"2026-10-19T14:47:08.569Z","stale":false,"partial":false}}