CVE-2016-5612 json
Unspecified vulnerability in Oracle MySQL 5.5.50 and earlier, 5.6.31 and earlier, and 5.7.13 and earlier allows remote authenticated users…
published 2016-10-25 10 y ago modified 2026-06-17 4 mo ago also EUVD-2016-6556
- cvss
- 6.5
- version 3.1, NVD
- cisa kev
- Not listed
- not in CISA's catalog
- epss
- 3.7%
- EPSS 3.7% chance of exploitation in 30 days, percentile 89%
- public exploits
- 0
- none known
Summary
Unspecified vulnerability in Oracle MySQL 5.5.50 and earlier, 5.6.31 and earlier, and 5.7.13 and earlier allows remote authenticated users to affect availability via vectors related to DML.
Patch / fix
- mariadb mariadb 5.5.51, 10.0.27
- mysql-5.5 Ubuntu 14.04 LTS 5.5.52-0ubuntu0.14.04.1
- mariadb-5.5 Ubuntu 14.04 LTS 5.5.52-1ubuntu0.14.04.1
- mariadb-10.0 Ubuntu 16.04 LTS 10.0.27-0ubuntu0.16.04.1
- percona-xtradb-cluster-5.6 Ubuntu 16.04 LTS 5.6.34-26.19-0ubuntu0.16.04.1
ubuntu advisories UBUNTU-CVE-2016-5612
Ubuntu security data © Canonical Ltd., from https://github.com/canonical/ubuntu-security-notices via OSV; changed: normalised to fixed package versions per release. CC BY-SA 4.0
- mysql55-mysql RHEL 2 SOFTWARE_COLLECTIONS 5.5.52-1.el6
- mysql55-mysql RHEL 2 SOFTWARE_COLLECTIONS 5.5.52-1.el7
- mysql55-mysql-libs RHEL 2 SOFTWARE_COLLECTIONS 5.5.52-1.el6
- mysql55-mysql-libs RHEL 2 SOFTWARE_COLLECTIONS 5.5.52-1.el7
- mysql55-mysql-test RHEL 2 SOFTWARE_COLLECTIONS 5.5.52-1.el6
- mysql55-mysql-test RHEL 2 SOFTWARE_COLLECTIONS 5.5.52-1.el7
- mysql55-mysql-bench RHEL 2 SOFTWARE_COLLECTIONS 5.5.52-1.el6
- mysql55-mysql-bench RHEL 2 SOFTWARE_COLLECTIONS 5.5.52-1.el7
red hat advisories RHSA-2016:2130RHSA-2016:2131RHSA-2016:2927RHSA-2016:2595RHSA-2016:1601
Vendor advisories
What the vendors themselves say about their products: affected, fixed or not affected, and what to do.
red hat product security vex CVE-2016-5612 updated cvss 6.5
mysql: unspecified vulnerability in subcomponent: Server: DML (CPU October 2016)
-
Red Hat Enterprise Linux 5 mysql55-mysql Red Hat Enterprise Linux OpenStack Platform 5 (Icehouse) mariadb-galera Red Hat Enterprise Linux OpenStack Platform 6 (Juno) mariadb-galera Red Hat Enterprise Linux OpenStack Platform 7 (Kilo) mariadb-galera, mariadb-galera-common, mariadb-galera-server Red Hat OpenStack Platform 8 (Liberty) mariadb-galera, mariadb-galera-common, mariadb-galera-server Red Hat OpenStack Platform 9 (Mitaka) mariadb-galera, mariadb-galera-common, mariadb-galera-serveraffected: no fix planned “Will not fix”
+3 more productsfewer
Red Hat OpenStack Platform 10 (Newton) mariadb-galera, mariadb-galera-common, mariadb-galera-server Red Hat OpenStack Platform 11 (Ocata) mariadb-galera Red Hat OpenStack Platform 12 (Pike) mariadb-galera-common, mariadb-galera-server -
Red Hat Software Collections rh-mariadb101-mariadb, rh-mariadb101-mariadb-test, rh-mariadb101-mariadb-bench, rh-mariadb101-mariadb-common, rh-mariadb101-mariadb-config, rh-mariadb101-mariadb-errmsg, +3 moreaffected: no fix available
-
Red Hat Enterprise Linux 6 mysql, mysql-libs, mysql-test, mysql-bench, mysql-server, mysql-embeddedunder investigation
-
Red Hat Enterprise Linux Client (v. 7) mariadb 5.5.52-1.el7, mariadb-libs 5.5.52-1.el7, mariadb-server 5.5.52-1.el7 Red Hat Enterprise Linux Client Optional (v. 7) mariadb-test 5.5.52-1.el7, mariadb-bench 5.5.52-1.el7, mariadb-embedded 5.5.52-1.el7 Red Hat Enterprise Linux ComputeNode (v. 7) mariadb 5.5.52-1.el7, mariadb-libs 5.5.52-1.el7 Red Hat Enterprise Linux ComputeNode Optional (v. 7) mariadb-test 5.5.52-1.el7, mariadb-bench 5.5.52-1.el7, mariadb-server 5.5.52-1.el7, mariadb-embedded 5.5.52-1.el7 Red Hat Enterprise Linux Server (v. 7) mariadb 5.5.52-1.el7, mariadb-libs 5.5.52-1.el7, mariadb-test 5.5.52-1.el7, mariadb-bench 5.5.52-1.el7, mariadb-server 5.5.52-1.el7 Red Hat Enterprise Linux Server Optional (v. 7) mariadb-embedded 5.5.52-1.el7fixed: vendor fix RHSA-2016:2595
+2 more productsfewer
Red Hat Enterprise Linux Workstation (v. 7) mariadb 5.5.52-1.el7, mariadb-libs 5.5.52-1.el7, mariadb-test 5.5.52-1.el7, mariadb-bench 5.5.52-1.el7, mariadb-server 5.5.52-1.el7 Red Hat Enterprise Linux Workstation Optional (v. 7) mariadb-embedded 5.5.52-1.el7 -
Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 6) mysql55-mysql 5.5.52-1.el6, rh-mysql56-mysql 5.6.32-1.el6, mariadb55-mariadb 5.5.53-1.el6, mysql55-mysql-libs 5.5.52-1.el6, mysql55-mysql-test 5.5.52-1.el6, mysql55-mysql-bench 5.5.52-1.el6, +19 more Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 7) mysql55-mysql 5.5.52-1.el7, rh-mysql56-mysql 5.6.32-1.el7, mariadb55-mariadb 5.5.53-1.el7, mysql55-mysql-libs 5.5.52-1.el7, mysql55-mysql-test 5.5.52-1.el7, mysql55-mysql-bench 5.5.52-1.el7, +19 more Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 6.6) mysql55-mysql 5.5.52-1.el6, rh-mysql56-mysql 5.6.32-1.el6, mariadb55-mariadb 5.5.53-1.el6, mysql55-mysql-libs 5.5.52-1.el6, mysql55-mysql-test 5.5.52-1.el6, mysql55-mysql-bench 5.5.52-1.el6, +11 more Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 6.7) mysql55-mysql 5.5.52-1.el6, rh-mysql56-mysql 5.6.32-1.el6, mariadb55-mariadb 5.5.53-1.el6, mysql55-mysql-libs 5.5.52-1.el6, mysql55-mysql-test 5.5.52-1.el6, mysql55-mysql-bench 5.5.52-1.el6, +19 more Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.1) mysql55-mysql 5.5.52-1.el7, rh-mysql56-mysql 5.6.32-1.el7, mariadb55-mariadb 5.5.53-1.el7, mysql55-mysql-libs 5.5.52-1.el7, mysql55-mysql-test 5.5.52-1.el7, mysql55-mysql-bench 5.5.52-1.el7, +11 more Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.2) mysql55-mysql 5.5.52-1.el7, rh-mysql56-mysql 5.6.32-1.el7, mariadb55-mariadb 5.5.53-1.el7, mysql55-mysql-libs 5.5.52-1.el7, mysql55-mysql-test 5.5.52-1.el7, mysql55-mysql-bench 5.5.52-1.el7, +19 morefixed: vendor fix RHSA-2016:2131
-
Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.3) rh-mariadb100-mariadb 10.0.28-5.el7, rh-mariadb100-mariadb-test 10.0.28-5.el7, rh-mariadb100-mariadb-bench 10.0.28-5.el7, rh-mariadb100-mariadb-common 10.0.28-5.el7, rh-mariadb100-mariadb-config 10.0.28-5.el7, rh-mariadb100-mariadb-errmsg 10.0.28-5.el7, +2 morefixed: vendor fix RHSA-2016:2927
-
Red Hat Software Collections for Red Hat Enterprise Linux Workstation (v. 6) mysql55-mysql 5.5.52-1.el6, rh-mysql56-mysql 5.6.32-1.el6, mariadb55-mariadb 5.5.53-1.el6, mysql55-mysql-libs 5.5.52-1.el6, mysql55-mysql-test 5.5.52-1.el6, mysql55-mysql-bench 5.5.52-1.el6, +19 more Red Hat Software Collections for Red Hat Enterprise Linux Workstation (v. 7) mysql55-mysql 5.5.52-1.el7, rh-mysql56-mysql 5.6.32-1.el7, mariadb55-mariadb 5.5.53-1.el7, mysql55-mysql-libs 5.5.52-1.el7, mysql55-mysql-test 5.5.52-1.el7, mysql55-mysql-bench 5.5.52-1.el7, +19 morefixed: vendor fix RHSA-2016:2131
-
Red Hat Software Collections rh-mysql57-mysql, rh-mysql57-mysql-test, rh-mysql57-mysql-common, rh-mysql57-mysql-config, rh-mysql57-mysql-errmsg, rh-mysql57-mysql-servernot affected: vulnerable code not present
Red Hat CSAF VEX © Red Hat, Inc., from https://security.access.redhat.com/data/csaf/v2/vex/; changed: reduced to product statuses and remediations. CC BY 4.0 · csaf
CISA SSVC
- Exploitation
- none
- Automatable
- no
- Technical impact
- partial
- Assessed
- 2 y ago
Exploit prediction
3.71% chance of exploitation in the next 30 days, higher than 89% of all scored CVEs (FIRST EPSS, 2026-11-08).
CVSS scores
| assigned by | version | score | vector |
|---|---|---|---|
| NVD | 3.1 | 6.5 | CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H |
| NVD | 2.0 | 4.0 | AV:N/AC:L/Au:S/C:N/I:N/A:P |
Classification
- Technology feeds
References
-
oracle.com
/technetwork/security-advisory/cpuoct2016-2881722.html
patch, vendor-advisory
-
rhn.redhat.com
/errata/RHSA-2016-2131.html
vendor-advisory, third-party-advisory
-
security.gentoo.org
/glsa/201701-01
vendor-advisory, third-party-advisory, vdb-entry
-
rhn.redhat.com
/errata/RHSA-2016-1601.html
vendor-advisory, third-party-advisory
-
rhn.redhat.com
/errata/RHSA-2016-2130.html
vendor-advisory, third-party-advisory
-
rhn.redhat.com
/errata/RHSA-2016-2927.html
vendor-advisory, third-party-advisory
-
rhn.redhat.com
/errata/RHSA-2016-2595.html
vendor-advisory, third-party-advisory
-
securityfocus.com
/bid/93630
vdb-entry, third-party-advisory
-
securitytracker.com
/id/1037050
vdb-entry, broken-link, third-party-advisory
Sources
- CVE List CVE-2016-5612
- NVD CVE-2016-5612
Fencer Vulns keeps one entry per vulnerability: the CVE id wins, then GHSA, and records that alias each other are merged, except that two CVEs always keep separate entries. The same data is available as JSON.