CVE-2016-3471

See a problem?
Please try reporting it to the source first.
Source
https://nvd.nist.gov/vuln/detail/CVE-2016-3471
Import Source
https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2016-3471.json
JSON Data
https://api.test.osv.dev/v1/vulns/CVE-2016-3471
Downstream
Published
2016-07-21T10:12:25Z
Modified
2025-10-18T13:36:59.328628Z
Severity
  • 7.5 (High) CVSS_V3 - CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:C/C:H/I:H/A:H CVSS Calculator
Summary
[none]
Details

Unspecified vulnerability in Oracle MySQL 5.5.45 and earlier and 5.6.26 and earlier allows local users to affect confidentiality, integrity, and availability via vectors related to Server: Option.

References

Affected packages

Git / github.com/mariadb/server

Affected ranges

Type
GIT
Repo
https://github.com/mariadb/server
Events
Introduced
5bfe1a3917ee1bddc7f2cde0c88961875148873c
Fixed
b9768521bdeb1a8069c7b871f4536792b65fd79b

Database specific

vanir_signatures

[
    {
        "signature_type": "Function",
        "target": {
            "function": "CertificateVerify::Build",
            "file": "extra/yassl/src/yassl_imp.cpp"
        },
        "digest": {
            "length": 1279.0,
            "function_hash": "272044820098228092970937818851523802945"
        },
        "id": "CVE-2016-3471-5c63033b",
        "source": "https://github.com/mariadb/server/commit/b9768521bdeb1a8069c7b871f4536792b65fd79b",
        "signature_version": "v1",
        "deprecated": false
    },
    {
        "signature_type": "Function",
        "target": {
            "function": "SetErrorString",
            "file": "extra/yassl/src/yassl_error.cpp"
        },
        "digest": {
            "length": 4731.0,
            "function_hash": "315503665402952802675592496886709669772"
        },
        "id": "CVE-2016-3471-7005bf51",
        "source": "https://github.com/mariadb/server/commit/b9768521bdeb1a8069c7b871f4536792b65fd79b",
        "signature_version": "v1",
        "deprecated": false
    },
    {
        "signature_type": "Function",
        "target": {
            "function": "DH_Server::build",
            "file": "extra/yassl/src/yassl_imp.cpp"
        },
        "digest": {
            "length": 2559.0,
            "function_hash": "46975870005828366040638209346810365877"
        },
        "id": "CVE-2016-3471-8c3171f1",
        "source": "https://github.com/mariadb/server/commit/b9768521bdeb1a8069c7b871f4536792b65fd79b",
        "signature_version": "v1",
        "deprecated": false
    },
    {
        "signature_type": "Line",
        "target": {
            "file": "extra/yassl/src/yassl_error.cpp"
        },
        "digest": {
            "line_hashes": [
                "57248392826115285220715661389409750131",
                "119661056949224539051154886786283811515",
                "101696571178136960950076477160822307085"
            ],
            "threshold": 0.9
        },
        "id": "CVE-2016-3471-8d5793e4",
        "source": "https://github.com/mariadb/server/commit/b9768521bdeb1a8069c7b871f4536792b65fd79b",
        "signature_version": "v1",
        "deprecated": false
    },
    {
        "signature_type": "Line",
        "target": {
            "file": "extra/yassl/src/yassl_imp.cpp"
        },
        "digest": {
            "line_hashes": [
                "318191172539277246755459617926955744505",
                "254541478843544755662381547845904652300",
                "54611158850969751301851086590952628930",
                "302163634400636825149017150007684831665",
                "189998908723996230938131694619656807943",
                "116866421171719334797154527726827554745",
                "63002157905645375881709121950844844710",
                "213730524434689387980355047141216967259",
                "171851186081481727127885226401230028656",
                "111686806875080769917645340067285185153"
            ],
            "threshold": 0.9
        },
        "id": "CVE-2016-3471-bda7a2dd",
        "source": "https://github.com/mariadb/server/commit/b9768521bdeb1a8069c7b871f4536792b65fd79b",
        "signature_version": "v1",
        "deprecated": false
    },
    {
        "signature_type": "Line",
        "target": {
            "file": "extra/yassl/include/yassl_error.hpp"
        },
        "digest": {
            "line_hashes": [
                "53228238731089417596214118720962938977",
                "277402405450698143280666152936637809078",
                "144031700655018854448410967691007543222",
                "67642837746220755452538215699521074013"
            ],
            "threshold": 0.9
        },
        "id": "CVE-2016-3471-cbe2a036",
        "source": "https://github.com/mariadb/server/commit/b9768521bdeb1a8069c7b871f4536792b65fd79b",
        "signature_version": "v1",
        "deprecated": false
    },
    {
        "signature_type": "Function",
        "target": {
            "function": "sendCertificateVerify",
            "file": "extra/yassl/src/handshake.cpp"
        },
        "digest": {
            "length": 511.0,
            "function_hash": "65883879829300206530716652549419963265"
        },
        "id": "CVE-2016-3471-e6670ae9",
        "source": "https://github.com/mariadb/server/commit/b9768521bdeb1a8069c7b871f4536792b65fd79b",
        "signature_version": "v1",
        "deprecated": false
    },
    {
        "signature_type": "Line",
        "target": {
            "file": "extra/yassl/src/handshake.cpp"
        },
        "digest": {
            "line_hashes": [
                "206466407836171049544989872457880780103",
                "300898926962521654039968805530655777728",
                "53859862795470716343051009615782488068",
                "96932451662644561594274820598624521910"
            ],
            "threshold": 0.9
        },
        "id": "CVE-2016-3471-f20a4f0f",
        "source": "https://github.com/mariadb/server/commit/b9768521bdeb1a8069c7b871f4536792b65fd79b",
        "signature_version": "v1",
        "deprecated": false
    }
]

Git / github.com/mariadb/server

Affected ranges

Type
GIT
Repo
https://github.com/mysql/mysql-server
Events
Introduced
54df0057e18d8c82c23fbd4e0bf5b5dc2e762955
Fixed
b9768521bdeb1a8069c7b871f4536792b65fd79b

Affected versions

mysql-5.*

mysql-5.0.87sp1
mysql-5.0.90
mysql-5.0.91
mysql-5.0.92
mysql-5.0.93
mysql-5.0.94
mysql-5.0.95
mysql-5.0.96
mysql-5.1.40sp1
mysql-5.1.41
mysql-5.1.42
mysql-5.1.43
mysql-5.1.43sp1
mysql-5.1.44
mysql-5.1.45
mysql-5.1.46
mysql-5.1.46sp1
mysql-5.1.47
mysql-5.1.48
mysql-5.1.49
mysql-5.1.49sp1
mysql-5.1.50
mysql-5.1.51
mysql-5.1.52
mysql-5.1.52sp1
mysql-5.1.53
mysql-5.1.54
mysql-5.1.55
mysql-5.1.56
mysql-5.1.57
mysql-5.1.58
mysql-5.1.59
mysql-5.1.60
mysql-5.1.61
mysql-5.1.62
mysql-5.1.63
mysql-5.1.65
mysql-5.1.66
mysql-5.1.67
mysql-5.1.68
mysql-5.1.69
mysql-5.1.69-retag
mysql-5.1.70
mysql-5.1.71
mysql-5.1.72
mysql-5.1.73
mysql-5.1.74
mysql-5.1.75
mysql-5.1.76
mysql-5.1.77
mysql-5.5.0
mysql-5.5.1-m2
mysql-5.5.10
mysql-5.5.11
mysql-5.5.12
mysql-5.5.13
mysql-5.5.14
mysql-5.5.15
mysql-5.5.16
mysql-5.5.17
mysql-5.5.18
mysql-5.5.19
mysql-5.5.2-m2
mysql-5.5.20
mysql-5.5.21
mysql-5.5.22
mysql-5.5.23
mysql-5.5.24
mysql-5.5.25
mysql-5.5.25a
mysql-5.5.27
mysql-5.5.28
mysql-5.5.29
mysql-5.5.3-m3
mysql-5.5.30
mysql-5.5.31
mysql-5.5.32
mysql-5.5.33
mysql-5.5.34
mysql-5.5.35
mysql-5.5.36
mysql-5.5.37
mysql-5.5.38
mysql-5.5.39
mysql-5.5.40
mysql-5.5.41
mysql-5.5.42
mysql-5.5.43
mysql-5.5.44
mysql-5.5.45
mysql-5.5.5-m3
mysql-5.5.6-rc
mysql-5.5.7
mysql-5.5.8
mysql-5.5.9

Database specific

vanir_signatures

[
    {
        "signature_type": "Line",
        "target": {
            "file": "extra/yassl/include/yassl_error.hpp"
        },
        "digest": {
            "line_hashes": [
                "53228238731089417596214118720962938977",
                "277402405450698143280666152936637809078",
                "144031700655018854448410967691007543222",
                "67642837746220755452538215699521074013"
            ],
            "threshold": 0.9
        },
        "id": "CVE-2016-3471-2e169b41",
        "source": "https://github.com/mysql/mysql-server/commit/b9768521bdeb1a8069c7b871f4536792b65fd79b",
        "signature_version": "v1",
        "deprecated": false
    },
    {
        "signature_type": "Function",
        "target": {
            "function": "SetErrorString",
            "file": "extra/yassl/src/yassl_error.cpp"
        },
        "digest": {
            "length": 4731.0,
            "function_hash": "315503665402952802675592496886709669772"
        },
        "id": "CVE-2016-3471-3708afeb",
        "source": "https://github.com/mysql/mysql-server/commit/b9768521bdeb1a8069c7b871f4536792b65fd79b",
        "signature_version": "v1",
        "deprecated": false
    },
    {
        "signature_type": "Line",
        "target": {
            "file": "extra/yassl/src/yassl_error.cpp"
        },
        "digest": {
            "line_hashes": [
                "57248392826115285220715661389409750131",
                "119661056949224539051154886786283811515",
                "101696571178136960950076477160822307085"
            ],
            "threshold": 0.9
        },
        "id": "CVE-2016-3471-464feddf",
        "source": "https://github.com/mysql/mysql-server/commit/b9768521bdeb1a8069c7b871f4536792b65fd79b",
        "signature_version": "v1",
        "deprecated": false
    },
    {
        "signature_type": "Function",
        "target": {
            "function": "sendCertificateVerify",
            "file": "extra/yassl/src/handshake.cpp"
        },
        "digest": {
            "length": 511.0,
            "function_hash": "65883879829300206530716652549419963265"
        },
        "id": "CVE-2016-3471-47119c80",
        "source": "https://github.com/mysql/mysql-server/commit/b9768521bdeb1a8069c7b871f4536792b65fd79b",
        "signature_version": "v1",
        "deprecated": false
    },
    {
        "signature_type": "Line",
        "target": {
            "file": "extra/yassl/src/handshake.cpp"
        },
        "digest": {
            "line_hashes": [
                "206466407836171049544989872457880780103",
                "300898926962521654039968805530655777728",
                "53859862795470716343051009615782488068",
                "96932451662644561594274820598624521910"
            ],
            "threshold": 0.9
        },
        "id": "CVE-2016-3471-711c1e15",
        "source": "https://github.com/mysql/mysql-server/commit/b9768521bdeb1a8069c7b871f4536792b65fd79b",
        "signature_version": "v1",
        "deprecated": false
    },
    {
        "signature_type": "Line",
        "target": {
            "file": "extra/yassl/src/yassl_imp.cpp"
        },
        "digest": {
            "line_hashes": [
                "318191172539277246755459617926955744505",
                "254541478843544755662381547845904652300",
                "54611158850969751301851086590952628930",
                "302163634400636825149017150007684831665",
                "189998908723996230938131694619656807943",
                "116866421171719334797154527726827554745",
                "63002157905645375881709121950844844710",
                "213730524434689387980355047141216967259",
                "171851186081481727127885226401230028656",
                "111686806875080769917645340067285185153"
            ],
            "threshold": 0.9
        },
        "id": "CVE-2016-3471-93adb102",
        "source": "https://github.com/mysql/mysql-server/commit/b9768521bdeb1a8069c7b871f4536792b65fd79b",
        "signature_version": "v1",
        "deprecated": false
    },
    {
        "signature_type": "Function",
        "target": {
            "function": "DH_Server::build",
            "file": "extra/yassl/src/yassl_imp.cpp"
        },
        "digest": {
            "length": 2559.0,
            "function_hash": "46975870005828366040638209346810365877"
        },
        "id": "CVE-2016-3471-c6f15d99",
        "source": "https://github.com/mysql/mysql-server/commit/b9768521bdeb1a8069c7b871f4536792b65fd79b",
        "signature_version": "v1",
        "deprecated": false
    },
    {
        "signature_type": "Function",
        "target": {
            "function": "CertificateVerify::Build",
            "file": "extra/yassl/src/yassl_imp.cpp"
        },
        "digest": {
            "length": 1279.0,
            "function_hash": "272044820098228092970937818851523802945"
        },
        "id": "CVE-2016-3471-f8130068",
        "source": "https://github.com/mysql/mysql-server/commit/b9768521bdeb1a8069c7b871f4536792b65fd79b",
        "signature_version": "v1",
        "deprecated": false
    }
]