CVE-2016-5598 Other in n/a

Medium 5.6 Published 25 Oct 2016 Updated 10 Oct 2024

Remote attackers can compromise confidentiality, integrity, and availability of applications using the MySQL Connector/Python library.

Exploited in the wild: Not known
Login needed: Not needed
Attackable: Over the internet
Victim action needed: Not needed
Fix: Available

What is CVE-2016-5598?

CVE-2016-5598 is a medium-severity vulnerability in n/a, published on 25 Oct 2016. An attacker can exploit it over the internet without logging in, with no action from the victim.

Official description

Unspecified vulnerability in the MySQL Connector component 2.1.3 and earlier and 2.0.4 and earlier in Oracle MySQL allows remote attackers to affect confidentiality, integrity, and availability via vectors related to Connector/Python.

Weakness: CWE-284

Which versions are affected by CVE-2016-5598?

It affects 1 product.

Linux distribution packages (1)

python-mysql-connector-python openSUSE:Tumbleweed All versions 2.1.4-1.1

Products include Oracle Mysql Connector\/Python.

How do I fix CVE-2016-5598?

Upgrade to a fixed version.

Is CVE-2016-5598 being exploited?

There is no known exploitation of CVE-2016-5598 in the wild and no public exploit code.

Sources

Also known as GHSA-j5cf-mr37-wmwc, UBUNTU-CVE-2016-5598, openSUSE-SU-2024:10543-1.