← All CVEs

CVE-2016-3521

medium · 6.5

Unspecified vulnerability in Oracle MySQL 5.5.49 and earlier, 5.6.30 and earlier, and 5.7.12 and earlier and MariaDB before 5.5.50, 10.0.x before 10.0.26, and 10.1.x before 10.1.15 allows remote authenticated users to affect availability via vectors related to Server: Types.

6.5
CVSS
10.4%
EPSS (exploit prob.)
96th
EPSS percentile
2016-07-21
Published

CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Affected products

VendorProductAffected versions
ibmpowerkvm2.1
ibmpowerkvm3.1
mariadbmariadb>= 5.5.20, < 5.5.50
mariadbmariadb>= 10.0.0, < 10.0.26
mariadbmariadb>= 10.1.0, < 10.1.15
oraclemysql>= 5.5.0, <= 5.5.49
oraclemysql>= 5.6.0, <= 5.6.30
oraclemysql>= 5.7.0, <= 5.7.12
oraclelinux7
debiandebian_linux8.0
canonicalubuntu_linux12.04
canonicalubuntu_linux14.04
canonicalubuntu_linux15.10
canonicalubuntu_linux16.04

Check a specific version with /api/v1/cve/match.

References

Query this programmatically:

curl https://evil-db.io/api/v1/cve/CVE-2016-3521