CVE-2016-3471

See a problem?
Please try reporting it to the source first.
Source
https://cve.org/CVERecord?id=CVE-2016-3471
Import Source
https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2016-3471.json
JSON Data
https://api.osv.dev/v1/vulns/CVE-2016-3471
Downstream
Published
2016-07-21T10:12:25.117Z
Modified
2026-03-03T01:01:47.907656Z
Severity
  • 7.5 (High) CVSS_V3 - CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:C/C:H/I:H/A:H CVSS Calculator
Summary
[none]
Details

Unspecified vulnerability in Oracle MySQL 5.5.45 and earlier and 5.6.26 and earlier allows local users to affect confidentiality, integrity, and availability via vectors related to Server: Option.

References

Affected packages

Git / github.com/mariadb/server

Affected ranges

Type
GIT
Repo
https://github.com/mariadb/server
Events
Introduced
5bfe1a3917ee1bddc7f2cde0c88961875148873c
Fixed
16c4b3c68b06653592a9500050ad977a38f4ebae
Introduced
776555af021e917ce0d6235386b43ae59fdd5161
Fixed
d775ecdd010daad4dc6147fba58acd006bf2c60c
Introduced
b11c4651917bd4472ea8837c64e6d1072a2a19e9
Fixed
370a2cbe96e026fdb8966d8e58e7c93f75597cb8

Database specific

vanir_signatures 
[
    {
        "id": "CVE-2016-3471-3709570b",
        "signature_version": "v1",
        "deprecated": false,
        "source": "https://github.com/mariadb/server/commit/16c4b3c68b06653592a9500050ad977a38f4ebae",
        "target": {
            "function": "safe_exit",
            "file": "client/mysqlimport.c"
        },
        "digest": {
            "length": 313.0,
            "function_hash": "70520979698859754602962471822233912200"
        },
        "signature_type": "Function"
    },
    {
        "id": "CVE-2016-3471-457bce7e",
        "signature_version": "v1",
        "deprecated": false,
        "source": "https://github.com/mariadb/server/commit/16c4b3c68b06653592a9500050ad977a38f4ebae",
        "target": {
            "file": "client/mysqlimport.c"
        },
        "digest": {
            "threshold": 0.9,
            "line_hashes": [
                "319306721365181819754270452344095783319",
                "75486913532168966865963185398878756446",
                "289448229277228600740877591219256766234",
                "25246141807848731794356751479272969377",
                "32983791837449660710010425521858678170",
                "31499729048454009097997911245410864280",
                "81382336406219296530114998196115930132",
                "68966262286854969059193055348029978539"
            ]
        },
        "signature_type": "Line"
    },
    {
        "id": "CVE-2016-3471-59dae30f",
        "signature_version": "v1",
        "deprecated": false,
        "source": "https://github.com/mariadb/server/commit/16c4b3c68b06653592a9500050ad977a38f4ebae",
        "target": {
            "file": "storage/xtradb/row/row0purge.c"
        },
        "digest": {
            "threshold": 0.9,
            "line_hashes": [
                "324363993595237366579095611893867884034",
                "176768127517096593576468313033706185578",
                "86564832187836738093584425820231665756"
            ]
        },
        "signature_type": "Line"
    },
    {
        "id": "CVE-2016-3471-628b485c",
        "signature_version": "v1",
        "deprecated": false,
        "source": "https://github.com/mariadb/server/commit/16c4b3c68b06653592a9500050ad977a38f4ebae",
        "target": {
            "file": "win/packaging/ca/CustomAction.cpp"
        },
        "digest": {
            "threshold": 0.9,
            "line_hashes": [
                "183591468015176205431360325268529505272",
                "31800705453188669957226202311365826444"
            ]
        },
        "signature_type": "Line"
    },
    {
        "id": "CVE-2016-3471-9b9ac1b2",
        "signature_version": "v1",
        "deprecated": false,
        "source": "https://github.com/mariadb/server/commit/16c4b3c68b06653592a9500050ad977a38f4ebae",
        "target": {
            "file": "storage/xtradb/include/row0purge.h"
        },
        "digest": {
            "threshold": 0.9,
            "line_hashes": [
                "119032171330219234282385420154414521892",
                "20417786531583289855798491398358406170",
                "107942896877908573850556268657041680498"
            ]
        },
        "signature_type": "Line"
    }
]
source 
"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2016-3471.json"

Git / github.com/mysql/mysql-server

Affected ranges

Type
GIT
Repo
https://github.com/mysql/mysql-server
Events
Introduced
54df0057e18d8c82c23fbd4e0bf5b5dc2e762955
Fixed
b9768521bdeb1a8069c7b871f4536792b65fd79b

Affected versions

mysql-5.*
mysql-5.0.87sp1
mysql-5.0.90
mysql-5.0.91
mysql-5.0.92
mysql-5.0.93
mysql-5.0.94
mysql-5.0.95
mysql-5.0.96
mysql-5.1.40sp1
mysql-5.1.41
mysql-5.1.42
mysql-5.1.43
mysql-5.1.43sp1
mysql-5.1.44
mysql-5.1.45
mysql-5.1.46
mysql-5.1.46sp1
mysql-5.1.47
mysql-5.1.48
mysql-5.1.49
mysql-5.1.49sp1
mysql-5.1.50
mysql-5.1.51
mysql-5.1.52
mysql-5.1.52sp1
mysql-5.1.53
mysql-5.1.54
mysql-5.1.55
mysql-5.1.56
mysql-5.1.57
mysql-5.1.58
mysql-5.1.59
mysql-5.1.60
mysql-5.1.61
mysql-5.1.62
mysql-5.1.63
mysql-5.1.65
mysql-5.1.66
mysql-5.1.67
mysql-5.1.68
mysql-5.1.69
mysql-5.1.69-retag
mysql-5.1.70
mysql-5.1.71
mysql-5.1.72
mysql-5.1.73
mysql-5.1.74
mysql-5.1.75
mysql-5.1.76
mysql-5.1.77
mysql-5.5.0
mysql-5.5.1-m2
mysql-5.5.10
mysql-5.5.11
mysql-5.5.12
mysql-5.5.13
mysql-5.5.14
mysql-5.5.15
mysql-5.5.16
mysql-5.5.17
mysql-5.5.18
mysql-5.5.19
mysql-5.5.2-m2
mysql-5.5.20
mysql-5.5.21
mysql-5.5.22
mysql-5.5.23
mysql-5.5.24
mysql-5.5.25
mysql-5.5.25a
mysql-5.5.27
mysql-5.5.28
mysql-5.5.29
mysql-5.5.3-m3
mysql-5.5.30
mysql-5.5.31
mysql-5.5.32
mysql-5.5.33
mysql-5.5.34
mysql-5.5.35
mysql-5.5.36
mysql-5.5.37
mysql-5.5.38
mysql-5.5.39
mysql-5.5.40
mysql-5.5.41
mysql-5.5.42
mysql-5.5.43
mysql-5.5.44
mysql-5.5.45
mysql-5.5.5-m3
mysql-5.5.6-rc
mysql-5.5.7
mysql-5.5.8
mysql-5.5.9

Database specific

vanir_signatures 
[
    {
        "id": "CVE-2016-3471-2e169b41",
        "signature_version": "v1",
        "deprecated": false,
        "source": "https://github.com/mysql/mysql-server/commit/b9768521bdeb1a8069c7b871f4536792b65fd79b",
        "target": {
            "file": "extra/yassl/include/yassl_error.hpp"
        },
        "digest": {
            "threshold": 0.9,
            "line_hashes": [
                "53228238731089417596214118720962938977",
                "277402405450698143280666152936637809078",
                "144031700655018854448410967691007543222",
                "67642837746220755452538215699521074013"
            ]
        },
        "signature_type": "Line"
    },
    {
        "id": "CVE-2016-3471-3708afeb",
        "signature_version": "v1",
        "deprecated": false,
        "source": "https://github.com/mysql/mysql-server/commit/b9768521bdeb1a8069c7b871f4536792b65fd79b",
        "target": {
            "function": "SetErrorString",
            "file": "extra/yassl/src/yassl_error.cpp"
        },
        "digest": {
            "length": 4731.0,
            "function_hash": "315503665402952802675592496886709669772"
        },
        "signature_type": "Function"
    },
    {
        "id": "CVE-2016-3471-464feddf",
        "signature_version": "v1",
        "deprecated": false,
        "source": "https://github.com/mysql/mysql-server/commit/b9768521bdeb1a8069c7b871f4536792b65fd79b",
        "target": {
            "file": "extra/yassl/src/yassl_error.cpp"
        },
        "digest": {
            "threshold": 0.9,
            "line_hashes": [
                "57248392826115285220715661389409750131",
                "119661056949224539051154886786283811515",
                "101696571178136960950076477160822307085"
            ]
        },
        "signature_type": "Line"
    },
    {
        "id": "CVE-2016-3471-47119c80",
        "signature_version": "v1",
        "deprecated": false,
        "source": "https://github.com/mysql/mysql-server/commit/b9768521bdeb1a8069c7b871f4536792b65fd79b",
        "target": {
            "function": "sendCertificateVerify",
            "file": "extra/yassl/src/handshake.cpp"
        },
        "digest": {
            "length": 511.0,
            "function_hash": "65883879829300206530716652549419963265"
        },
        "signature_type": "Function"
    },
    {
        "id": "CVE-2016-3471-711c1e15",
        "signature_version": "v1",
        "deprecated": false,
        "source": "https://github.com/mysql/mysql-server/commit/b9768521bdeb1a8069c7b871f4536792b65fd79b",
        "target": {
            "file": "extra/yassl/src/handshake.cpp"
        },
        "digest": {
            "threshold": 0.9,
            "line_hashes": [
                "206466407836171049544989872457880780103",
                "300898926962521654039968805530655777728",
                "53859862795470716343051009615782488068",
                "96932451662644561594274820598624521910"
            ]
        },
        "signature_type": "Line"
    },
    {
        "id": "CVE-2016-3471-93adb102",
        "signature_version": "v1",
        "deprecated": false,
        "source": "https://github.com/mysql/mysql-server/commit/b9768521bdeb1a8069c7b871f4536792b65fd79b",
        "target": {
            "file": "extra/yassl/src/yassl_imp.cpp"
        },
        "digest": {
            "threshold": 0.9,
            "line_hashes": [
                "318191172539277246755459617926955744505",
                "254541478843544755662381547845904652300",
                "54611158850969751301851086590952628930",
                "302163634400636825149017150007684831665",
                "189998908723996230938131694619656807943",
                "116866421171719334797154527726827554745",
                "63002157905645375881709121950844844710",
                "213730524434689387980355047141216967259",
                "171851186081481727127885226401230028656",
                "111686806875080769917645340067285185153"
            ]
        },
        "signature_type": "Line"
    },
    {
        "id": "CVE-2016-3471-c6f15d99",
        "signature_version": "v1",
        "deprecated": false,
        "source": "https://github.com/mysql/mysql-server/commit/b9768521bdeb1a8069c7b871f4536792b65fd79b",
        "target": {
            "function": "DH_Server::build",
            "file": "extra/yassl/src/yassl_imp.cpp"
        },
        "digest": {
            "length": 2559.0,
            "function_hash": "46975870005828366040638209346810365877"
        },
        "signature_type": "Function"
    },
    {
        "id": "CVE-2016-3471-f8130068",
        "signature_version": "v1",
        "deprecated": false,
        "source": "https://github.com/mysql/mysql-server/commit/b9768521bdeb1a8069c7b871f4536792b65fd79b",
        "target": {
            "function": "CertificateVerify::Build",
            "file": "extra/yassl/src/yassl_imp.cpp"
        },
        "digest": {
            "length": 1279.0,
            "function_hash": "272044820098228092970937818851523802945"
        },
        "signature_type": "Function"
    }
]
source 
"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2016-3471.json"