SB2016042106 - Input validation error in MariaDB



SB2016042106 - Input validation error in MariaDB

Published: April 21, 2016 Updated: August 4, 2020

Security Bulletin ID SB2016042106
Severity
Low
Patch available
YES
Number of vulnerabilities 1
Exploitation vector Local access
Highest impact Information disclosure

Breakdown by Severity

Low 100%
  • Low
  • Medium
  • High
  • Critical

Description

This security bulletin contains information about 1 security vulnerability.


1) Input validation error (CVE-ID: CVE-2016-0643)

The vulnerability allows a local authenticated user to gain access to sensitive information.

Unspecified vulnerability in Oracle MySQL 5.5.48 and earlier, 5.6.29 and earlier, and 5.7.11 and earlier and MariaDB before 5.5.49, 10.0.x before 10.0.25, and 10.1.x before 10.1.14 allows local users to affect confidentiality via vectors related to DML.


Remediation

Install update from vendor's website.