What’s Vulnerable › Vulnerabilities

CVE-2016-5624

• Severity: medium (CVSS 6.5 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 5.1% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2016-10-25 · updated 2026-06-17

Description

Unspecified vulnerability in Oracle MySQL 5.5.51 and earlier allows remote authenticated users to affect availability via vectors related to DML.

Affected products

• MariaDB: from 5.5.0 before 5.5.52; from 10.0.0 before 10.0.28; from 10.1.0 before 10.1.18 — fixed in 10.0.28, 10.1.18, 5.5.52
• MySQL Server: from 5.5.0 through 5.5.51
• RedHat Enterprise Linux Desktop: 7.0
• RedHat Enterprise Linux Eus: 7.3, 7.4, 7.5, 7.6, 7.7
• RedHat Enterprise Linux Server: 7.0
• RedHat Enterprise Linux Server Aus: 7.3, 7.4, 7.6, 7.7
• RedHat Enterprise Linux Server Tus: 7.3, 7.6, 7.7
• RedHat Enterprise Linux Workstation: 7.0

How to fix

Upgrade to a fixed version: MariaDB 10.0.28, 10.1.18, 5.5.52. Check the vendor advisory for mitigations.

References

• http://rhn.redhat.com/errata/RHSA-2016-2130.html
• http://rhn.redhat.com/errata/RHSA-2016-2131.html
• http://rhn.redhat.com/errata/RHSA-2016-2595.html
• http://rhn.redhat.com/errata/RHSA-2016-2927.html
• http://rhn.redhat.com/errata/RHSA-2016-2928.html
• http://www.oracle.com/technetwork/security-advisory/cpuoct2016-2881722.html
• http://www.securityfocus.com/bid/93635
• http://www.securitytracker.com/id/1037050
• https://mariadb.com/kb/en/mariadb/mariadb-10028-release-notes/
• https://mariadb.com/kb/en/mariadb/mariadb-10118-release-notes/
• https://mariadb.com/kb/en/mariadb/mariadb-5552-release-notes/
• http://rhn.redhat.com/errata/RHSA-2016-2130.html

Get alerted when CVE-2016-5624 or the next vulnerability affects your stack