CVE-2016-5584 Information disclosure in n/a
Remote administrators can compromise confidentiality in Oracle MySQL Server through unspecified encryption-related vectors.
- Exploited in the wild
- Not known
- Login needed
- An administrator
- Attackable
- Over the internet
- Victim action needed
- Not needed
- Fix
- Available
What is CVE-2016-5584?
CVE-2016-5584 is a medium-severity vulnerability in Debian Debian Linux, published on 25 Oct 2016. An attacker needs administrator access to exploit it, with no action from the victim.
Official description
Unspecified vulnerability in Oracle MySQL 5.5.52 and earlier, 5.6.33 and earlier, and 5.7.15 and earlier allows remote administrators to affect confidentiality via vectors related to Server: Security: Encryption.
Which versions are affected by CVE-2016-5584?
It affects 3 products.
Products include Debian Debian Linux, Mariadb Mariadb, Oracle Mysql.
How do I fix CVE-2016-5584?
Upgrade to a fixed version.
Is CVE-2016-5584 being exploited?
There is no known exploitation of CVE-2016-5584 in the wild and no public exploit code.
Other vulnerabilities in Debian Debian Linux
Sources
Also known as GHSA-m4x2-9645-g5v7, UBUNTU-CVE-2016-5584.