CVE-2016-3521
Medium · 6.5CVSS
6.5
EPSS
10.4%
Published
Jul 21, 2016
CISA due date
—
The record
Unspecified vulnerability in Oracle MySQL 5.5.49 and earlier, 5.6.30 and earlier, and 5.7.12 and earlier and MariaDB before 5.5.50, 10.0.x before 10.0.26, and 10.1.x before 10.1.15 allows remote authenticated users to affect availability via vectors related to Server: Types.
Affected packages
| Ecosystem | Package | Introduced | Fixed |
|---|---|---|---|
| Alpine:v3.2 | mariadb | 0 | 5.5.51-r0 |
| Alpine:v3.3 | mariadb | 0 | 10.1.17-r0 |
| Debian:7 | mysql-5.5 | 0 | 5.5.50-0+deb7u1 |
| Debian:8 | mariadb-10.0 | 0 | 10.0.26-0+deb8u1 |
| Debian:8 | mysql-5.5 | 0 | 5.5.50-0+deb8u1 |
| Mageia:5 | mariadb | 0 | 10.0.26-1.mga5 |
| Red Hat:enterprise_linux:7::client | mariadb | 0 | 1:5.5.50-1.el7_2 |
| Red Hat:enterprise_linux:7::client | mariadb-bench | 0 | 1:5.5.50-1.el7_2 |
| Red Hat:enterprise_linux:7::client | mariadb-debuginfo | 0 | 1:5.5.50-1.el7_2 |
| Red Hat:enterprise_linux:7::client | mariadb-devel | 0 | 1:5.5.50-1.el7_2 |
| Red Hat:enterprise_linux:7::client | mariadb-embedded | 0 | 1:5.5.50-1.el7_2 |
| Red Hat:enterprise_linux:7::client | mariadb-embedded-devel | 0 | 1:5.5.50-1.el7_2 |
| Red Hat:enterprise_linux:7::client | mariadb-libs | 0 | 1:5.5.50-1.el7_2 |
| Red Hat:enterprise_linux:7::client | mariadb-server | 0 | 1:5.5.50-1.el7_2 |
| Red Hat:enterprise_linux:7::client | mariadb-test | 0 | 1:5.5.50-1.el7_2 |
| Red Hat:enterprise_linux:7::computenode | mariadb | 0 | 1:5.5.50-1.el7_2 |
| Red Hat:enterprise_linux:7::computenode | mariadb-bench | 0 | 1:5.5.50-1.el7_2 |
| Red Hat:enterprise_linux:7::computenode | mariadb-debuginfo | 0 | 1:5.5.50-1.el7_2 |
| Red Hat:enterprise_linux:7::computenode | mariadb-devel | 0 | 1:5.5.50-1.el7_2 |
| Red Hat:enterprise_linux:7::computenode | mariadb-embedded | 0 | 1:5.5.50-1.el7_2 |
| Red Hat:enterprise_linux:7::computenode | mariadb-embedded-devel | 0 | 1:5.5.50-1.el7_2 |
| Red Hat:enterprise_linux:7::computenode | mariadb-libs | 0 | 1:5.5.50-1.el7_2 |
| Red Hat:enterprise_linux:7::computenode | mariadb-server | 0 | 1:5.5.50-1.el7_2 |
| Red Hat:enterprise_linux:7::computenode | mariadb-test | 0 | 1:5.5.50-1.el7_2 |
| Red Hat:enterprise_linux:7::server | mariadb | 0 | 1:5.5.50-1.el7_2 |
| Red Hat:enterprise_linux:7::server | mariadb-bench | 0 | 1:5.5.50-1.el7_2 |
| Red Hat:enterprise_linux:7::server | mariadb-debuginfo | 0 | 1:5.5.50-1.el7_2 |
| Red Hat:enterprise_linux:7::server | mariadb-devel | 0 | 1:5.5.50-1.el7_2 |
| Red Hat:enterprise_linux:7::server | mariadb-embedded | 0 | 1:5.5.50-1.el7_2 |
| Red Hat:enterprise_linux:7::server | mariadb-embedded-devel | 0 | 1:5.5.50-1.el7_2 |
| Red Hat:enterprise_linux:7::server | mariadb-libs | 0 | 1:5.5.50-1.el7_2 |
| Red Hat:enterprise_linux:7::server | mariadb-server | 0 | 1:5.5.50-1.el7_2 |
| Red Hat:enterprise_linux:7::server | mariadb-test | 0 | 1:5.5.50-1.el7_2 |
| Red Hat:enterprise_linux:7::workstation | mariadb | 0 | 1:5.5.50-1.el7_2 |
| Red Hat:enterprise_linux:7::workstation | mariadb-bench | 0 | 1:5.5.50-1.el7_2 |
| Red Hat:enterprise_linux:7::workstation | mariadb-debuginfo | 0 | 1:5.5.50-1.el7_2 |
| Red Hat:enterprise_linux:7::workstation | mariadb-devel | 0 | 1:5.5.50-1.el7_2 |
| Red Hat:enterprise_linux:7::workstation | mariadb-embedded | 0 | 1:5.5.50-1.el7_2 |
| Red Hat:enterprise_linux:7::workstation | mariadb-embedded-devel | 0 | 1:5.5.50-1.el7_2 |
| Red Hat:enterprise_linux:7::workstation | mariadb-libs | 0 | 1:5.5.50-1.el7_2 |
| Red Hat:enterprise_linux:7::workstation | mariadb-server | 0 | 1:5.5.50-1.el7_2 |
| Red Hat:enterprise_linux:7::workstation | mariadb-test | 0 | 1:5.5.50-1.el7_2 |
| Red Hat:rhel_software_collections:2::el6 | mariadb55-mariadb | 0 | 0:5.5.50-1.el6 |
| Red Hat:rhel_software_collections:2::el6 | mariadb55-mariadb-bench | 0 | 0:5.5.50-1.el6 |
| Red Hat:rhel_software_collections:2::el6 | mariadb55-mariadb-debuginfo | 0 | 0:5.5.50-1.el6 |
| Red Hat:rhel_software_collections:2::el6 | mariadb55-mariadb-devel | 0 | 0:5.5.50-1.el6 |
| Red Hat:rhel_software_collections:2::el6 | mariadb55-mariadb-libs | 0 | 0:5.5.50-1.el6 |
| Red Hat:rhel_software_collections:2::el6 | mariadb55-mariadb-server | 0 | 0:5.5.50-1.el6 |
| Red Hat:rhel_software_collections:2::el6 | mariadb55-mariadb-test | 0 | 0:5.5.50-1.el6 |
| Red Hat:rhel_software_collections:2::el6 | mysql55-mysql | 0 | 0:5.5.50-1.el6 |
| Red Hat:rhel_software_collections:2::el6 | mysql55-mysql-bench | 0 | 0:5.5.50-1.el6 |
| Red Hat:rhel_software_collections:2::el6 | mysql55-mysql-debuginfo | 0 | 0:5.5.50-1.el6 |
| Red Hat:rhel_software_collections:2::el6 | mysql55-mysql-devel | 0 | 0:5.5.50-1.el6 |
| Red Hat:rhel_software_collections:2::el6 | mysql55-mysql-libs | 0 | 0:5.5.50-1.el6 |
| Red Hat:rhel_software_collections:2::el6 | mysql55-mysql-server | 0 | 0:5.5.50-1.el6 |
| Red Hat:rhel_software_collections:2::el6 | mysql55-mysql-test | 0 | 0:5.5.50-1.el6 |
| Red Hat:rhel_software_collections:2::el6 | rh-mariadb100-mariadb | 0 | 1:10.0.26-2.el6 |
| Red Hat:rhel_software_collections:2::el6 | rh-mariadb100-mariadb-bench | 0 | 1:10.0.26-2.el6 |
| Red Hat:rhel_software_collections:2::el6 | rh-mariadb100-mariadb-common | 0 | 1:10.0.26-2.el6 |
| Red Hat:rhel_software_collections:2::el6 | rh-mariadb100-mariadb-config | 0 | 1:10.0.26-2.el6 |
| Red Hat:rhel_software_collections:2::el6 | rh-mariadb100-mariadb-debuginfo | 0 | 1:10.0.26-2.el6 |
| Red Hat:rhel_software_collections:2::el6 | rh-mariadb100-mariadb-devel | 0 | 1:10.0.26-2.el6 |
| Red Hat:rhel_software_collections:2::el6 | rh-mariadb100-mariadb-errmsg | 0 | 1:10.0.26-2.el6 |
| Red Hat:rhel_software_collections:2::el6 | rh-mariadb100-mariadb-oqgraph-engine | 0 | 1:10.0.26-2.el6 |
| Red Hat:rhel_software_collections:2::el6 | rh-mariadb100-mariadb-server | 0 | 1:10.0.26-2.el6 |
| Red Hat:rhel_software_collections:2::el6 | rh-mariadb100-mariadb-test | 0 | 1:10.0.26-2.el6 |
| Red Hat:rhel_software_collections:2::el6 | rh-mariadb101-mariadb | 0 | 1:10.1.16-1.el6 |
| Red Hat:rhel_software_collections:2::el6 | rh-mariadb101-mariadb-bench | 0 | 1:10.1.16-1.el6 |
| Red Hat:rhel_software_collections:2::el6 | rh-mariadb101-mariadb-common | 0 | 1:10.1.16-1.el6 |
| Red Hat:rhel_software_collections:2::el6 | rh-mariadb101-mariadb-config | 0 | 1:10.1.16-1.el6 |
| Red Hat:rhel_software_collections:2::el6 | rh-mariadb101-mariadb-debuginfo | 0 | 1:10.1.16-1.el6 |
| Red Hat:rhel_software_collections:2::el6 | rh-mariadb101-mariadb-devel | 0 | 1:10.1.16-1.el6 |
| Red Hat:rhel_software_collections:2::el6 | rh-mariadb101-mariadb-errmsg | 0 | 1:10.1.16-1.el6 |
| Red Hat:rhel_software_collections:2::el6 | rh-mariadb101-mariadb-oqgraph-engine | 0 | 1:10.1.16-1.el6 |
| Red Hat:rhel_software_collections:2::el6 | rh-mariadb101-mariadb-server | 0 | 1:10.1.16-1.el6 |
| Red Hat:rhel_software_collections:2::el6 | rh-mariadb101-mariadb-server-galera | 0 | 1:10.1.16-1.el6 |
| Red Hat:rhel_software_collections:2::el6 | rh-mariadb101-mariadb-test | 0 | 1:10.1.16-1.el6 |
| Red Hat:rhel_software_collections:2::el6 | rh-mysql56-mysql | 0 | 0:5.6.32-1.el6 |
| Red Hat:rhel_software_collections:2::el6 | rh-mysql56-mysql-bench | 0 | 0:5.6.32-1.el6 |
| Red Hat:rhel_software_collections:2::el6 | rh-mysql56-mysql-common | 0 | 0:5.6.32-1.el6 |
| Red Hat:rhel_software_collections:2::el6 | rh-mysql56-mysql-config | 0 | 0:5.6.32-1.el6 |
| Red Hat:rhel_software_collections:2::el6 | rh-mysql56-mysql-debuginfo | 0 | 0:5.6.32-1.el6 |
| Red Hat:rhel_software_collections:2::el6 | rh-mysql56-mysql-devel | 0 | 0:5.6.32-1.el6 |
| Red Hat:rhel_software_collections:2::el6 | rh-mysql56-mysql-errmsg | 0 | 0:5.6.32-1.el6 |
| Red Hat:rhel_software_collections:2::el6 | rh-mysql56-mysql-server | 0 | 0:5.6.32-1.el6 |
| Red Hat:rhel_software_collections:2::el6 | rh-mysql56-mysql-test | 0 | 0:5.6.32-1.el6 |
| Red Hat:rhel_software_collections:2::el7 | mariadb55-mariadb | 0 | 0:5.5.50-1.el7 |
| Red Hat:rhel_software_collections:2::el7 | mariadb55-mariadb-bench | 0 | 0:5.5.50-1.el7 |
| Red Hat:rhel_software_collections:2::el7 | mariadb55-mariadb-debuginfo | 0 | 0:5.5.50-1.el7 |
| Red Hat:rhel_software_collections:2::el7 | mariadb55-mariadb-devel | 0 | 0:5.5.50-1.el7 |
| Red Hat:rhel_software_collections:2::el7 | mariadb55-mariadb-libs | 0 | 0:5.5.50-1.el7 |
| Red Hat:rhel_software_collections:2::el7 | mariadb55-mariadb-server | 0 | 0:5.5.50-1.el7 |
| Red Hat:rhel_software_collections:2::el7 | mariadb55-mariadb-test | 0 | 0:5.5.50-1.el7 |
| Red Hat:rhel_software_collections:2::el7 | mysql55-mysql | 0 | 0:5.5.50-1.el7 |
| Red Hat:rhel_software_collections:2::el7 | mysql55-mysql-bench | 0 | 0:5.5.50-1.el7 |
| Red Hat:rhel_software_collections:2::el7 | mysql55-mysql-debuginfo | 0 | 0:5.5.50-1.el7 |
| Red Hat:rhel_software_collections:2::el7 | mysql55-mysql-devel | 0 | 0:5.5.50-1.el7 |
| Red Hat:rhel_software_collections:2::el7 | mysql55-mysql-libs | 0 | 0:5.5.50-1.el7 |
| Red Hat:rhel_software_collections:2::el7 | mysql55-mysql-server | 0 | 0:5.5.50-1.el7 |
| Red Hat:rhel_software_collections:2::el7 | mysql55-mysql-test | 0 | 0:5.5.50-1.el7 |
| Red Hat:rhel_software_collections:2::el7 | rh-mariadb100-mariadb | 0 | 1:10.0.26-2.el7 |
| Red Hat:rhel_software_collections:2::el7 | rh-mariadb100-mariadb-bench | 0 | 1:10.0.26-2.el7 |
| Red Hat:rhel_software_collections:2::el7 | rh-mariadb100-mariadb-common | 0 | 1:10.0.26-2.el7 |
| Red Hat:rhel_software_collections:2::el7 | rh-mariadb100-mariadb-config | 0 | 1:10.0.26-2.el7 |
| Red Hat:rhel_software_collections:2::el7 | rh-mariadb100-mariadb-debuginfo | 0 | 1:10.0.26-2.el7 |
| Red Hat:rhel_software_collections:2::el7 | rh-mariadb100-mariadb-devel | 0 | 1:10.0.26-2.el7 |
| Red Hat:rhel_software_collections:2::el7 | rh-mariadb100-mariadb-errmsg | 0 | 1:10.0.26-2.el7 |
| Red Hat:rhel_software_collections:2::el7 | rh-mariadb100-mariadb-oqgraph-engine | 0 | 1:10.0.26-2.el7 |
| Red Hat:rhel_software_collections:2::el7 | rh-mariadb100-mariadb-server | 0 | 1:10.0.26-2.el7 |
| Red Hat:rhel_software_collections:2::el7 | rh-mariadb100-mariadb-test | 0 | 1:10.0.26-2.el7 |
| Red Hat:rhel_software_collections:2::el7 | rh-mariadb101-mariadb | 0 | 1:10.1.16-1.el7 |
| Red Hat:rhel_software_collections:2::el7 | rh-mariadb101-mariadb-bench | 0 | 1:10.1.16-1.el7 |
| Red Hat:rhel_software_collections:2::el7 | rh-mariadb101-mariadb-common | 0 | 1:10.1.16-1.el7 |
| Red Hat:rhel_software_collections:2::el7 | rh-mariadb101-mariadb-config | 0 | 1:10.1.16-1.el7 |
| Red Hat:rhel_software_collections:2::el7 | rh-mariadb101-mariadb-debuginfo | 0 | 1:10.1.16-1.el7 |
| Red Hat:rhel_software_collections:2::el7 | rh-mariadb101-mariadb-devel | 0 | 1:10.1.16-1.el7 |
| Red Hat:rhel_software_collections:2::el7 | rh-mariadb101-mariadb-errmsg | 0 | 1:10.1.16-1.el7 |
| Red Hat:rhel_software_collections:2::el7 | rh-mariadb101-mariadb-oqgraph-engine | 0 | 1:10.1.16-1.el7 |
| Red Hat:rhel_software_collections:2::el7 | rh-mariadb101-mariadb-server | 0 | 1:10.1.16-1.el7 |
| Red Hat:rhel_software_collections:2::el7 | rh-mariadb101-mariadb-server-galera | 0 | 1:10.1.16-1.el7 |
| Red Hat:rhel_software_collections:2::el7 | rh-mariadb101-mariadb-test | 0 | 1:10.1.16-1.el7 |
| Red Hat:rhel_software_collections:2::el7 | rh-mysql56-mysql | 0 | 0:5.6.32-1.el7 |
| Red Hat:rhel_software_collections:2::el7 | rh-mysql56-mysql-bench | 0 | 0:5.6.32-1.el7 |
| Red Hat:rhel_software_collections:2::el7 | rh-mysql56-mysql-common | 0 | 0:5.6.32-1.el7 |
| Red Hat:rhel_software_collections:2::el7 | rh-mysql56-mysql-config | 0 | 0:5.6.32-1.el7 |
| Red Hat:rhel_software_collections:2::el7 | rh-mysql56-mysql-debuginfo | 0 | 0:5.6.32-1.el7 |
| Red Hat:rhel_software_collections:2::el7 | rh-mysql56-mysql-devel | 0 | 0:5.6.32-1.el7 |
| Red Hat:rhel_software_collections:2::el7 | rh-mysql56-mysql-errmsg | 0 | 0:5.6.32-1.el7 |
| Red Hat:rhel_software_collections:2::el7 | rh-mysql56-mysql-server | 0 | 0:5.6.32-1.el7 |
| Red Hat:rhel_software_collections:2::el7 | rh-mysql56-mysql-test | 0 | 0:5.6.32-1.el7 |
| SUSE:Linux Enterprise Desktop 12 SP1 | mariadb | 0 | 10.0.26-9.2 |
| SUSE:Linux Enterprise High Performance Computing 15 SP1-LTSS | mariadb104 | 0 | 10.4.30-150100.3.5.10 |
| SUSE:Linux Enterprise High Performance Computing 15 SP1-LTSS | python-mysqlclient | 0 | 1.4.6-150100.3.3.7 |
| SUSE:Linux Enterprise Point of Sale 11 SP3 | mysql | 0 | 5.5.52-0.27.1 |
| SUSE:Linux Enterprise Server 11 SP3-LTSS | mysql | 0 | 5.5.52-0.27.1 |
| SUSE:Linux Enterprise Server 11 SP3-TERADATA | mysql | 0 | 5.5.52-0.27.1 |
| SUSE:Linux Enterprise Server 11 SP4 | mysql | 0 | 5.5.52-0.27.1 |
| SUSE:Linux Enterprise Server 12 SP1 | mariadb | 0 | 10.0.26-9.2 |
| SUSE:Linux Enterprise Server 12 SP5 | lz4 | 0 | 1.8.0-3.5.2 |
| SUSE:Linux Enterprise Server 12 SP5 | mariadb-connector-c | 0 | 3.1.22-2.35.1 |
| SUSE:Linux Enterprise Server 12 SP5 | mariadb104 | 0 | 10.4.30-8.5.46 |
| SUSE:Linux Enterprise Server 12 SP5 | python-mysqlclient | 0 | 1.3.14-8.9.2 |
| SUSE:Linux Enterprise Server 12-LTSS | mariadb | 0 | 10.0.26-20.10.2 |
| SUSE:Linux Enterprise Server 15 SP1-LTSS | mariadb104 | 0 | 10.4.30-150100.3.5.10 |
| SUSE:Linux Enterprise Server 15 SP1-LTSS | python-mysqlclient | 0 | 1.4.6-150100.3.3.7 |
| SUSE:Linux Enterprise Server for SAP Applications 11 SP4 | mysql | 0 | 5.5.52-0.27.1 |
| SUSE:Linux Enterprise Server for SAP Applications 12 | mariadb | 0 | 10.0.26-20.10.2 |
| SUSE:Linux Enterprise Server for SAP Applications 12 SP1 | mariadb | 0 | 10.0.26-9.2 |
| SUSE:Linux Enterprise Server for SAP Applications 12 SP5 | lz4 | 0 | 1.8.0-3.5.2 |
| SUSE:Linux Enterprise Server for SAP Applications 12 SP5 | mariadb-connector-c | 0 | 3.1.22-2.35.1 |
| SUSE:Linux Enterprise Server for SAP Applications 12 SP5 | mariadb104 | 0 | 10.4.30-8.5.46 |
| SUSE:Linux Enterprise Server for SAP Applications 12 SP5 | python-mysqlclient | 0 | 1.3.14-8.9.2 |
| SUSE:Linux Enterprise Server for SAP Applications 15 SP1 | mariadb104 | 0 | 10.4.30-150100.3.5.10 |
| SUSE:Linux Enterprise Server for SAP Applications 15 SP1 | python-mysqlclient | 0 | 1.4.6-150100.3.3.7 |
| SUSE:Linux Enterprise Software Development Kit 11 SP4 | mysql | 0 | 5.5.52-0.27.1 |
| SUSE:Linux Enterprise Software Development Kit 12 SP1 | mariadb | 0 | 10.0.26-9.2 |
| SUSE:Linux Enterprise Software Development Kit 12 SP5 | lz4 | 0 | 1.8.0-3.5.2 |
| SUSE:Linux Enterprise Software Development Kit 12 SP5 | mariadb-connector-c | 0 | 3.1.22-2.35.1 |
| SUSE:Linux Enterprise Software Development Kit 12 SP5 | mariadb104 | 0 | 10.4.30-8.5.46 |
| SUSE:Linux Enterprise Software Development Kit 12 SP5 | python-mysqlclient | 0 | 1.3.14-8.9.2 |
| SUSE:Linux Enterprise Workstation Extension 12 SP1 | mariadb | 0 | 10.0.26-9.2 |
| SUSE:Manager 2.1 | mysql | 0 | 5.5.52-0.27.1 |
| SUSE:Manager Proxy 2.1 | mysql | 0 | 5.5.52-0.27.1 |
| SUSE:OpenStack Cloud 5 | mysql | 0 | 5.5.52-0.27.1 |
| Ubuntu:14.04:LTS | mariadb-5.5 | 0 | 5.5.52-1ubuntu0.14.04.1 |
| Ubuntu:14.04:LTS | mysql-5.5 | 0 | 5.5.50-0ubuntu0.14.04.1 |
| Ubuntu:14.04:LTS | mysql-5.6 | 0 | 5.6.31-0ubuntu0.14.04.2 |
| Ubuntu:16.04:LTS | mariadb-10.0 | 0 | 10.0.27-0ubuntu0.16.04.1 |
| Ubuntu:16.04:LTS | mysql-5.7 | 0 | 5.7.13-0ubuntu0.16.04.2 |
| Ubuntu:16.04:LTS | percona-server-5.6 | 0 | No fix |
| Ubuntu:16.04:LTS | percona-xtradb-cluster-5.6 | 0 | 5.6.34-26.19-0ubuntu0.16.04.1 |
| Ubuntu:Pro:16.04:LTS | percona-server-5.6 | 0 | No fix |
Related vulnerabilities
- CVE-2016-6662 Oracle MySQL through 5.5.52, 5.6.x through 5.6.33, and 5.7.x through 5.7.15; MariaDB… Also affects mariadb
- CVE-2017-3302 Crash in libmysqlclient.so in Oracle MySQL before 5.6.21 and 5.7.x before 5.7.5 and… Also affects mariadb
- CVE-2016-5584 Unspecified vulnerability in Oracle MySQL 5.5.52 and earlier, 5.6.33 and earlier, and… Also affects mysql-5.5
- CVE-2015-4870 Unspecified vulnerability in Oracle MySQL Server 5.5.45 and earlier, and 5.6.26 and… Also affects mysql-5.5
- CVE-2015-2582 Unspecified vulnerability in Oracle MySQL Server 5.5.43 and earlier and 5.6.24 and… Also affects mysql-5.5
- CVE-2015-0501 Unspecified vulnerability in Oracle MySQL Server 5.5.42 and earlier, and 5.6.23 and… Also affects mysql-5.5
- CVE-2015-0433 Unspecified vulnerability in Oracle MySQL Server 5.5.41 and earlier, and 5.6.22 and… Also affects mysql-5.5
- CVE-2015-0382 Unspecified vulnerability in Oracle MySQL Server 5.5.40 and earlier and 5.6.21 and… Also affects mysql-5.5