High severity8.1NVD Advisory· Published Jul 21, 2016· Updated Jun 17, 2026

CVE-2016-3477

Description

Unspecified vulnerability in Oracle MySQL 5.5.49 and earlier, 5.6.30 and earlier, and 5.7.12 and earlier and MariaDB before 5.5.50, 10.0.x before 10.0.26, and 10.1.x before 10.1.15 allows local users to affect confidentiality, integrity, and availability via vectors related to Server: Parser.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

IBM/Powerkvm2 versions
cpe:2.3:a:ibm:powerkvm:2.1:*:*:*:*:*:*:*+ 1 more
- cpe:2.3:a:ibm:powerkvm:2.1:*:*:*:*:*:*:*
- cpe:2.3:a:ibm:powerkvm:3.1:*:*:*:*:*:*:*
MariaDB/MariaDB2 versions
cpe:2.3:a:mariadb:mariadb:*:*:*:*:*:*:*:*+ 1 more
- cpe:2.3:a:mariadb:mariadb:*:*:*:*:*:*:*:*range: >=5.5.20,<5.5.50
- (no CPE)range: <5.5.50, 10.0.x <10.0.26, 10.1.x <10.1.15
Oracle Corporation/MySQL2 versions
cpe:2.3:a:oracle:mysql:*:*:*:*:*:*:*:*+ 1 more
- cpe:2.3:a:oracle:mysql:*:*:*:*:*:*:*:*range: >=5.5.0,<=5.5.49
- (no CPE)range: <=5.5.49, <=5.6.30, <=5.7.12
Canonical/Ubuntu Linux4 versions
cpe:2.3:o:canonical:ubuntu_linux:12.04:*:*:*:lts:*:*:*+ 3 more
- cpe:2.3:o:canonical:ubuntu_linux:12.04:*:*:*:lts:*:*:*
- cpe:2.3:o:canonical:ubuntu_linux:14.04:*:*:*:lts:*:*:*
- cpe:2.3:o:canonical:ubuntu_linux:15.10:*:*:*:*:*:*:*
- cpe:2.3:o:canonical:ubuntu_linux:16.04:*:*:*:lts:*:*:*
Debian/linux
cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:*
Oracle Corporation/Linux
cpe:2.3:o:oracle:linux:7:*:*:*:*:*:*:*
osv-coords34 versions
pkg:rpm/suse/lz4&distro=SUSE%20Linux%20Enterprise%20Server%2012%20SP5 pkg:rpm/suse/lz4&distro=SUSE%20Linux%20Enterprise%20Server%20for%20SAP%20Applications%2012%20SP5 pkg:rpm/suse/lz4&distro=SUSE%20Linux%20Enterprise%20Software%20Development%20Kit%2012%20SP5 pkg:rpm/suse/mariadb104&distro=SUSE%20Linux%20Enterprise%20High%20Performance%20Computing%2015%20SP1-LTSS pkg:rpm/suse/mariadb104&distro=SUSE%20Linux%20Enterprise%20Server%2012%20SP5 pkg:rpm/suse/mariadb104&distro=SUSE%20Linux%20Enterprise%20Server%2015%20SP1-LTSS pkg:rpm/suse/mariadb104&distro=SUSE%20Linux%20Enterprise%20Server%20for%20SAP%20Applications%2012%20SP5 pkg:rpm/suse/mariadb104&distro=SUSE%20Linux%20Enterprise%20Server%20for%20SAP%20Applications%2015%20SP1 pkg:rpm/suse/mariadb104&distro=SUSE%20Linux%20Enterprise%20Software%20Development%20Kit%2012%20SP5 pkg:rpm/suse/mariadb-connector-c&distro=SUSE%20Linux%20Enterprise%20Server%2012%20SP5 pkg:rpm/suse/mariadb-connector-c&distro=SUSE%20Linux%20Enterprise%20Server%20for%20SAP%20Applications%2012%20SP5 pkg:rpm/suse/mariadb-connector-c&distro=SUSE%20Linux%20Enterprise%20Software%20Development%20Kit%2012%20SP5 pkg:rpm/suse/mariadb&distro=SUSE%20Linux%20Enterprise%20Desktop%2012%20SP1 pkg:rpm/suse/mariadb&distro=SUSE%20Linux%20Enterprise%20Server%2012%20SP1 pkg:rpm/suse/mariadb&distro=SUSE%20Linux%20Enterprise%20Server%2012-LTSS pkg:rpm/suse/mariadb&distro=SUSE%20Linux%20Enterprise%20Server%20for%20SAP%20Applications%2012 pkg:rpm/suse/mariadb&distro=SUSE%20Linux%20Enterprise%20Server%20for%20SAP%20Applications%2012%20SP1 pkg:rpm/suse/mariadb&distro=SUSE%20Linux%20Enterprise%20Software%20Development%20Kit%2012%20SP1 pkg:rpm/suse/mariadb&distro=SUSE%20Linux%20Enterprise%20Workstation%20Extension%2012%20SP1 pkg:rpm/suse/mysql&distro=SUSE%20Linux%20Enterprise%20Point%20of%20Sale%2011%20SP3 pkg:rpm/suse/mysql&distro=SUSE%20Linux%20Enterprise%20Server%2011%20SP3-LTSS pkg:rpm/suse/mysql&distro=SUSE%20Linux%20Enterprise%20Server%2011%20SP3-TERADATA pkg:rpm/suse/mysql&distro=SUSE%20Linux%20Enterprise%20Server%2011%20SP4 pkg:rpm/suse/mysql&distro=SUSE%20Linux%20Enterprise%20Server%20for%20SAP%20Applications%2011%20SP4 pkg:rpm/suse/mysql&distro=SUSE%20Linux%20Enterprise%20Software%20Development%20Kit%2011%20SP4 pkg:rpm/suse/mysql&distro=SUSE%20Manager%202.1 pkg:rpm/suse/mysql&distro=SUSE%20Manager%20Proxy%202.1 pkg:rpm/suse/mysql&distro=SUSE%20OpenStack%20Cloud%205 pkg:rpm/suse/python-mysqlclient&distro=SUSE%20Linux%20Enterprise%20High%20Performance%20Computing%2015%20SP1-LTSS pkg:rpm/suse/python-mysqlclient&distro=SUSE%20Linux%20Enterprise%20Server%2012%20SP5 pkg:rpm/suse/python-mysqlclient&distro=SUSE%20Linux%20Enterprise%20Server%2015%20SP1-LTSS pkg:rpm/suse/python-mysqlclient&distro=SUSE%20Linux%20Enterprise%20Server%20for%20SAP%20Applications%2012%20SP5 pkg:rpm/suse/python-mysqlclient&distro=SUSE%20Linux%20Enterprise%20Server%20for%20SAP%20Applications%2015%20SP1 pkg:rpm/suse/python-mysqlclient&distro=SUSE%20Linux%20Enterprise%20Software%20Development%20Kit%2012%20SP5
< 1.8.0-3.5.2+ 33 more
- (no CPE)range: < 1.8.0-3.5.2
- (no CPE)range: < 1.8.0-3.5.2
- (no CPE)range: < 1.8.0-3.5.2
- (no CPE)range: < 10.4.30-150100.3.5.10
- (no CPE)range: < 10.4.30-8.5.46
- (no CPE)range: < 10.4.30-150100.3.5.10
- (no CPE)range: < 10.4.30-8.5.46
- (no CPE)range: < 10.4.30-150100.3.5.10
- (no CPE)range: < 10.4.30-8.5.46
- (no CPE)range: < 3.1.22-2.35.1
- (no CPE)range: < 3.1.22-2.35.1
- (no CPE)range: < 3.1.22-2.35.1
- (no CPE)range: < 10.0.26-9.2
- (no CPE)range: < 10.0.26-9.2
- (no CPE)range: < 10.0.26-20.10.2
- (no CPE)range: < 10.0.26-20.10.2
- (no CPE)range: < 10.0.26-9.2
- (no CPE)range: < 10.0.26-9.2
- (no CPE)range: < 10.0.26-9.2
- (no CPE)range: < 5.5.52-0.27.1
- (no CPE)range: < 5.5.52-0.27.1
- (no CPE)range: < 5.5.52-0.27.1
- (no CPE)range: < 5.5.52-0.27.1
- (no CPE)range: < 5.5.52-0.27.1
- (no CPE)range: < 5.5.52-0.27.1
- (no CPE)range: < 5.5.52-0.27.1
- (no CPE)range: < 5.5.52-0.27.1
- (no CPE)range: < 5.5.52-0.27.1
- (no CPE)range: < 1.4.6-150100.3.3.7
- (no CPE)range: < 1.3.14-8.9.2
- (no CPE)range: < 1.4.6-150100.3.3.7
- (no CPE)range: < 1.3.14-8.9.2
- (no CPE)range: < 1.4.6-150100.3.3.7
- (no CPE)range: < 1.3.14-8.9.2

Patches

Vulnerability mechanics

References

www.oracle.com/technetwork/security-advisory/cpujul2016-2881720.htmlnvdPatchVendor Advisory
lists.opensuse.org/opensuse-updates/2016-09/msg00042.htmlnvdMailing ListThird Party Advisory
rhn.redhat.com/errata/RHSA-2016-1480.htmlnvdThird Party Advisory
rhn.redhat.com/errata/RHSA-2016-1601.htmlnvdThird Party Advisory
rhn.redhat.com/errata/RHSA-2016-1602.htmlnvdThird Party Advisory
rhn.redhat.com/errata/RHSA-2016-1603.htmlnvdThird Party Advisory
rhn.redhat.com/errata/RHSA-2016-1604.htmlnvdThird Party Advisory
rhn.redhat.com/errata/RHSA-2016-1637.htmlnvdThird Party Advisory
www-01.ibm.com/support/docview.wssnvdThird Party Advisory
www.debian.org/security/2016/dsa-3624nvdThird Party Advisory
www.debian.org/security/2016/dsa-3632nvdThird Party Advisory
www.oracle.com/technetwork/topics/security/linuxbulletinjul2016-3090544.htmlnvdVendor Advisory
www.securityfocus.com/bid/91787nvdThird Party AdvisoryVDB Entry
www.securityfocus.com/bid/91902nvdThird Party AdvisoryVDB Entry
www.securitytracker.com/id/1036362nvdThird Party AdvisoryVDB Entry
www.ubuntu.com/usn/USN-3040-1nvdThird Party Advisory
mariadb.com/kb/en/mariadb/mariadb-10026-release-notes/nvdVendor Advisory
mariadb.com/kb/en/mariadb/mariadb-10115-release-notes/nvdVendor Advisory
mariadb.com/kb/en/mariadb/mariadb-5550-release-notes/nvdVendor Advisory

News mentions

No linked articles in our index yet.

cvss	0.526
epss	0.000
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000