CVE-2016-3501

Severity: medium (CVSS 6.5 v3.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 3.8% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2016-07-21 · updated 2026-06-17

Description

Unspecified vulnerability in Oracle MySQL 5.6.30 and earlier and 5.7.12 and earlier allows remote authenticated users to affect availability via vectors related to Server: Optimizer.

Affected products

Canonical Ubuntu Linux: 12.04, 14.04, 15.10, 16.04
MySQL Server: from 5.6.0 through 5.6.30; from 5.7.0 through 5.7.12

References

http://rhn.redhat.com/errata/RHSA-2016-1601.html
http://www.oracle.com/technetwork/security-advisory/cpujul2016-2881720.html
http://www.securityfocus.com/bid/91787
http://www.securityfocus.com/bid/91949
http://www.securitytracker.com/id/1036362
http://www.ubuntu.com/usn/USN-3040-1
http://rhn.redhat.com/errata/RHSA-2016-1601.html
http://www.oracle.com/technetwork/security-advisory/cpujul2016-2881720.html
http://www.securityfocus.com/bid/91787
http://www.securityfocus.com/bid/91949
http://www.securitytracker.com/id/1036362
http://www.ubuntu.com/usn/USN-3040-1

Get alerted when CVE-2016-3501 or the next vulnerability affects your stack