critical
CVE-2016-0639
mysql: unspecified vulnerability in subcomponent: Server: Pluggable Authentication (CPU April 2016)
In the Trivy database since at least 24 Oct 2026, 07:11 UTCWhen it arrived before that build is not recorded.
Severity by source
NVD9.8CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Red Hat7.5AV:N/AC:L/Au:N/C:P/I:P/A:P
Trivy's own label is CRITICAL. Rated critical by NVD, Red Hat, Amazon. Rated lower by Ubuntu (medium).
Description
Unspecified vulnerability in Oracle MySQL 5.6.29 and earlier and 5.7.11 and earlier allows remote attackers to affect confidentiality, integrity, and availability via vectors related to Pluggable Authentication.
Affected packages and fixed versions
| Source | Package | Fixed in |
|---|---|---|
| amazon linux 1 | mysql56, mysql56-bench, mysql56-common and 8 more | 5.6.30-1.15.amzn1 |
| ubuntu 14.04 | mysql-5.6 | 5.6.30-0ubuntu0.14.04.1 |
| ubuntu 15.10 | mysql-5.6 | 5.6.30-0ubuntu0.15.10.1 |
| ubuntu 16.04 | mysql-5.7 | 5.7.12-0ubuntu1 |
| ubuntu 16.04-ESM | mysql-5.7 | 5.7.12-0ubuntu1 |
| ubuntu 16.10 | mysql-5.7 | 5.7.13-0ubuntu4 |
| ubuntu 17.04 | mysql-5.7 | 5.7.13-0ubuntu4 |
| ubuntu 17.10 | mysql-5.7 | 5.7.13-0ubuntu4 |
| ubuntu 18.04 | mysql-5.7 | 5.7.13-0ubuntu4 |
| ubuntu 18.04-ESM | mysql-5.7 | 5.7.13-0ubuntu4 |
| ubuntu 18.10 | mysql-5.7 | 5.7.13-0ubuntu4 |
| ubuntu 19.04 | mysql-5.7 | 5.7.13-0ubuntu4 |
Show all 22 entries from 12 sources
| Source | Package | Fixed in |
|---|---|---|
| amazon linux 1 | mysql56 | 5.6.30-1.15.amzn1 |
| amazon linux 1 | mysql56-bench | 5.6.30-1.15.amzn1 |
| amazon linux 1 | mysql56-common | 5.6.30-1.15.amzn1 |
| amazon linux 1 | mysql56-debuginfo | 5.6.30-1.15.amzn1 |
| amazon linux 1 | mysql56-devel | 5.6.30-1.15.amzn1 |
| amazon linux 1 | mysql56-embedded | 5.6.30-1.15.amzn1 |
| amazon linux 1 | mysql56-embedded-devel | 5.6.30-1.15.amzn1 |
| amazon linux 1 | mysql56-errmsg | 5.6.30-1.15.amzn1 |
| amazon linux 1 | mysql56-libs | 5.6.30-1.15.amzn1 |
| amazon linux 1 | mysql56-server | 5.6.30-1.15.amzn1 |
| amazon linux 1 | mysql56-test | 5.6.30-1.15.amzn1 |
| ubuntu 14.04 | mysql-5.6 | 5.6.30-0ubuntu0.14.04.1 |
| ubuntu 15.10 | mysql-5.6 | 5.6.30-0ubuntu0.15.10.1 |
| ubuntu 16.04 | mysql-5.7 | 5.7.12-0ubuntu1 |
| ubuntu 16.04-ESM | mysql-5.7 | 5.7.12-0ubuntu1 |
| ubuntu 16.10 | mysql-5.7 | 5.7.13-0ubuntu4 |
| ubuntu 17.04 | mysql-5.7 | 5.7.13-0ubuntu4 |
| ubuntu 17.10 | mysql-5.7 | 5.7.13-0ubuntu4 |
| ubuntu 18.04 | mysql-5.7 | 5.7.13-0ubuntu4 |
| ubuntu 18.04-ESM | mysql-5.7 | 5.7.13-0ubuntu4 |
| ubuntu 18.10 | mysql-5.7 | 5.7.13-0ubuntu4 |
| ubuntu 19.04 | mysql-5.7 | 5.7.13-0ubuntu4 |
References
- http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00053.html
- http://rhn.redhat.com/errata/RHSA-2016-0705.html
- http://www.oracle.com/technetwork/security-advisory/cpuapr2016v3-2985753.html
- http://www.oracle.com/technetwork/security-advisory/cpuapr2016v3-2985753.html#AppendixMSQL
- http://www.oracle.com/technetwork/topics/security/cpuapr2016-2881694.html#AppendixMSQL
- http://www.securityfocus.com/bid/86418
- http://www.securitytracker.com/id/1035606
- http://www.ubuntu.com/usn/USN-2953-1