CVE-2016-0639 Auth bypass in n/a

What is CVE-2016-0639?

CVE-2016-0639 is a critical authentication bypass vulnerability in Oracle Mysql, published on 21 Apr 2016. An attacker can exploit it over the internet without logging in, with no action from the victim.

Official description

Unspecified vulnerability in Oracle MySQL 5.6.29 and earlier and 5.7.11 and earlier allows remote attackers to affect confidentiality, integrity, and availability via vectors related to Pluggable Authentication.

Which versions are affected by CVE-2016-0639?

It affects 2 products.

Products include Oracle Mysql, Redhat Enterprise Linux.

How do I fix CVE-2016-0639?

Upgrade to a fixed version.

Upgrade, and rotate credentials and sessions that may have been exposed. More about Authentication bypass.

Is CVE-2016-0639 being exploited?

There is no known exploitation of CVE-2016-0639 in the wild and no public exploit code.

Other vulnerabilities in Oracle Mysql

• CVE-2003-0150 Privilege escalation in n/a Critical 9.0
• CVE-2005-2572 Denial of service in n/a High 8.5
• CVE-2020-14878 Auth bypass in MySQL Server High 8.0
• CVE-2002-0969 Memory corruption in n/a High 7.8
• CVE-2016-3440 Denial of service in n/a High 7.7

All Oracle Mysql vulnerabilities

Sources

• CVE record
• NVD
• OSV
• GitHub advisory
• How this page is made

Also known as GHSA-f26j-7rwf-2gmf, UBUNTU-CVE-2016-0639.