High
Security advisory
Unspecified vulnerability in Oracle MySQL 5.5.49 and earlier, 5.6.30 and earlier, and 5.7.12 and earlier and MariaDB before 5.5.50, 10.0.x before 10.0.26, and 10.1.x before 10.1.15 allows local users to affect confidentiality, integrity, and availability via vectors related to Server: Parser.
- Products
- Not specified
- Affected versions
- Not specified
- Fixed versions
- Not specified
- CVEs
- CVE-2016-3477
- Confirmed fixed CVEs
- Not specified
- Updated in this feed
- 1 Nov 2026, 09:02 UTC · Revision 1
Source evidence
Unspecified vulnerability in Oracle MySQL 5.5.49 and earlier, 5.6.30 and earlier, and 5.7.12 and earlier and MariaDB before 5.5.50, 10.0.x before 10.0.26, and 10.1.x before 10.1.15 allows local users to affect confidentiality, integrity, and availability via vectors related to Server: Parser.
osv:CVE-2016-3477
Complete source record
{
"id": "7d345eb5930507b5027f5c4f3b74b9354a288a8f92e3713c429080d225379810",
"url": "https://osv.dev/vulnerability/CVE-2016-3477",
"method": "structured",
"payload": {
"kind": "advisory",
"title": "CVE-2016-3477",
"summary": "Unspecified vulnerability in Oracle MySQL 5.5.49 and earlier, 5.6.30 and earlier, and 5.7.12 and earlier and MariaDB before 5.5.50, 10.0.x before 10.0.26, and 10.1.x before 10.1.15 allows local users to affect confidentiality, integrity, and availability via vectors related to Server: Parser.",
"evidence": "osv:CVE-2016-3477",
"products": [],
"severity": "high",
"structured": {
"id": "CVE-2016-3477",
"aliases": [
"CVE-2016-3477"
],
"metrics": [
{
"type": "CVSS_V3",
"score": "CVSS:3.0/AV:L/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:H"
}
],
"affected": [
{
"ranges": [
{
"repo": "https://github.com/mariadb/server",
"type": "GIT",
"events": [
{
"introduced": "5a6300dcc45da2d6c2b046560da0580548354b93"
},
{
"fixed": "ef3f09f0c9e62ea1bf86b33b5d97e954b3ae34fe"
},
{
"introduced": "776555af021e917ce0d6235386b43ae59fdd5161"
},
{
"fixed": "10880d67b95d29dc1a764f2ee5c2010dc89659df"
},
{
"introduced": "c235de12ae3723b96944337bd89ad9cc87f21d8f"
},
{
"fixed": "3fd214c8be7c2340ebe06f4c887c67f5c928e5f0"
}
],
"database_specific": {
"extracted_events": [
{
"cpe": "cpe:2.3:a:mariadb:mariadb:*:*:*:*:*:*:*:*",
"range": [
{
"introduced": "5.5.20"
},
{
"fixed": "5.5.50"
}
],
"source": "CPE_RANGE"
},
{
"cpe": "cpe:2.3:a:mariadb:mariadb:*:*:*:*:*:*:*:*",
"range": [
{
"introduced": "10.0.0"
},
{
"fixed": "10.0.26"
}
],
"source": "CPE_RANGE"
},
{
"cpe": "cpe:2.3:a:mariadb:mariadb:*:*:*:*:*:*:*:*",
"range": [
{
"introduced": "10.1.0"
},
{
"fixed": "10.1.15"
}
],
"source": "CPE_RANGE"
}
]
}
}
],
"versions": [
"mariadb-10.1.14",
"mariadb-10.1.13",
"mariadb-10.1.12",
"mariadb-10.1.11",
"mariadb-10.1.10",
"mariadb-10.1.9",
"mariadb-10.1.8",
"mariadb-10.1.7",
"mariadb-10.1.6",
"mariadb-10.1.5",
"mariadb-10.1.4",
"mariadb-10.1.3",
"mariadb-10.1.2",
"mariadb-10.1.0"
],
"database_specific": {
"source": "https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2016-3477.json",
"vanir_signatures": [
{
"id": "CVE-2016-3477-01a16507",
"digest": {
"length": 1204,
"function_hash": "324338701515339397734700601565648618539"
},
"source": "https://github.com/mariadb/server/commit/3fd214c8be7c2340ebe06f4c887c67f5c928e5f0",
"target": {
"file": "sql/log.cc",
"function": "TC_LOG_BINLOG::mark_xid_done"
},
"deprecated": false,
"signature_type": "Function",
"signature_version": "v1"
},
{
"id": "CVE-2016-3477-1216635d",
"digest": {
"length": 612,
"function_hash": "42728812859158735675723682623275565129"
},
"source": "https://github.com/mariadb/server/commit/ef3f09f0c9e62ea1bf86b33b5d97e954b3ae34fe",
"target": {
"file": "mysys/errors.c",
"function": "wait_for_free_space"
},
"deprecated": false,
"signature_type": "Function",
"signature_version": "v1"
},
{
"id": "CVE-2016-3477-1cbab1b4",
"digest": {
"length": 809,
"function_hash": "101153305727465451529751380340644582808"
},
"source": "https://github.com/mariadb/server/commit/ef3f09f0c9e62ea1bf86b33b5d97e954b3ae34fe",
"target": {
"file": "sql/slave.cc",
"function": "process_io_rotate"
},
"deprecated": false,
"signature_type": "Function",
"signature_version": "v1"
},
{
"id": "CVE-2016-3477-1ea3ad58",
"digest": {
"threshold": 0.9,
"line_hashes": [
"68378593971693548042298469876110902351",
"138569157148948663433504001054827263236",
"209733619483613065137091015828744213574",
"35144081733275354096750229165566017438",
"97948844521434856617622814252919796241",
"318363209792047048326404888721043811657",
"242442400545117034761000998361552503631",
"331862577825959172253595628331920668354",
"122529425218090503415441108636230870981",
"70161996043287984561414417848339834613",
"119842240827633458857247860246663554036",
"111345366480236381537137587947188660352",
"311695894208989958772026153192326943795",
"337049265625138408745355510528077743047",
"273132312672481724978575845268612261557",
"161630481980049814284801295624492341606",
"54008158806151358773936006380168366564",
"116368635590876706994774988678338140433",
"143700012416409602942984406907122916772",
"203930454185760946563855942445429378738",
"2867117532971074831733751510567886618",
"245900444468031500543475199370743756102",
"201253989371956417210498541404994568345",
"12878223704538268141100716313603096541",
"239319180888950684724880555517836117544",
"292547922586376328991538761928369094196",
"321283867431714814997117778274934731076",
"298108889831385096364186295864531461780",
"149292262674211470716442453233906871518",
"15773717387606210310541251506428438650",
"240979062276628350482529325569467086555",
"41702706479479004103274244696671680603",
"18293633267776816998821642745571015227",
"119032701454092650731722924566580896101",
"221653025071932860763246559136741168413",
"301155608125058906729484824118057649938",
"41139082634474891457815398611366715601",
"95018309862129920654370010732143443635",
"57614163025517163350336465420345141284",
"57836949730879794729449169336705836775",
"289300884846183277327204075389972437572",
"225734122798667266123426918946898697055",
"146192447020436402627318405874646551591",
"42733162146611639737886966494425539493",
"335343637575940820517309586833428619759",
"9335997723827223827783563305287343250",
"322135744959340631667530139871624794221",
"262568636127830212496273432258213574754",
"170180876493795397471026810761426104858",
"145643523993434972992704773908820914237",
"43181305563074050533852164281974088531",
"34550963438757055567035157132788841940",
"188160003101262294095710745653998714061",
"82801137715501025947198155904679482703",
"203930454185760946563855942445429378738",
"2867117532971074831733751510567886618",
"245900444468031500543475199370743756102",
"201253989371956417210498541404994568345",
"12878223704538268141100716313603096541",
"198684005478743634553820009316398213339",
"266715802001724401574505384771475969725",
"316019726433006891452523385453738145994",
"46015574343461262027670405005252798324",
"298108889831385096364186295864531461780",
"149292262674211470716442453233906871518",
"74908466397124932490623733847080018092",
"287754024027029302333650124463751853312",
"113514961073580190710214495515729035323",
"223971154908383157121425625562314457745"
]
},
"source": "https://github.com/mariadb/server/commit/ef3f09f0c9e62ea1bf86b33b5d97e954b3ae34fe",
"target": {
"file": "sql/log.cc"
},
"deprecated": false,
"signature_type": "Line",
"signature_version": "v1"
},
{
"id": "CVE-2016-3477-1f89df00",
"digest": {
"threshold": 0.9,
"line_hashes": [
"239119738676189252663247272173998897809",
"141758372283075763623869825690701468647",
"243521214594813576567790403712675586691",
"164926203599003494793800943535979531797",
"17743353984189385369896036530189280996",
"124891242187950317597191573918717960484",
"139086891079897942461334045524015484235",
"232821865618084061052323030988545248643",
"41628663795706741967062577426733366266",
"198454223294510235452682533826992082561",
"188890226137996487933732059636506684770",
"232024685634183201171184532636107588080",
"198464841640315331648396065370290854650",
"132158629927957809404858086676982431149",
"173755956709116045705534734250764036551",
"51164848190446813873302115074265557885",
"246893869760794999036016954901560117730",
"307466048153972859121212293238164252907",
"23937842620734888541962337150786963465",
"118148054585365928938402636979017576733",
"275223968293675951111106075919305259289",
"304154674971705309156495946953755399222",
"58474414692536626273316069449158268401",
"111651122292942894798005318211823776099",
"216579154230968342750111716879007062094",
"129182288226200497218090872363680274880",
"157438502521242005176449745337510549412",
"196635108059587186871770178543871245704",
"331860204555390117963159016026739741043",
"19484044881589946518365455012389629149",
"314446438374401582148492550833396592891",
"196635108059587186871770178543871245704",
"42593977843373952070376349811011746480",
"42247001600456837792307741516645609272",
"29007693795568227218399527731424989726",
"171266280542912432138621796451410233663",
"284246049825967968371623077691858280471",
"121336851932640637849143071018803862120",
"133390671263185693370251797154026870068",
"250145105079610157883765686077603428635",
"206169031230938894832398673472475889001",
"27581665280200913057294480976434245909",
"62548225589430864199471766964949437044",
"90187702786073769311463295686641948203",
"332248005124531594020819884501553805306",
"227590618657018834174343132284533929396",
"163937064972577745165918280549728720649",
"132175203871231160018604196725285681558",
"83745435953342750273132716708704335405",
"193489543216891940044227182201549820365",
"37608322756984965354742441153629437272",
"197662558136274330588653319483025720691",
"314073557524608640135241590855905700311",
"155682872754747218387041589023418972194",
"30230446978221898402370069206170822178",
"270701041842536460825421647600957184175",
"134225326396760604942840874750593517068",
"197323827374204852028987449129139442373",
"330017327744366021016978427807939406323",
"19603016429160128461188390575522027016",
"222795540916176658453817855515691879620",
"237674438067622501698598014244312833833",
"257026490810391288599650449576970526883",
"232018766625647688421278656298826881084",
"118434064714188133570814123516541228483",
"21642663771978829986322084354075658238",
"167774694987232010348205507629306534995",
"112622127686613645859781535520797742098",
"146011576499744877915779685067482173150",
"1618206678400143503617333745671935433",
"217051586300533062550104212689506840713",
"129151569809331889077161962258171285481",
"108332651338245149926452676991843556660"
]
},
"source": "https://github.com/mariadb/server/commit/ef3f09f0c9e62ea1bf86b33b5d97e954b3ae34fe",
"target": {
"file": "sql/slave.cc"
},
"deprecated": false,
"signature_type": "Line",
"signature_version": "v1"
},
{
"id": "CVE-2016-3477-2a8d094a",
"digest": {
"length": 3745,
"function_hash": "183485958015182165786307125793191268919"
},
"source": "https://github.com/mariadb/server/commit/3fd214c8be7c2340ebe06f4c887c67f5c928e5f0",
"target": {
"file": "sql/log.cc",
"function": "MYSQL_BIN_LOG::reset_logs"
},
"deprecated": false,
"signature_type": "Function",
"signature_version": "v1"
},
{
"id": "CVE-2016-3477-50c52d79",
"digest": {
"length": 1281,
"function_hash": "123835591272026387960519551481400654431"
},
"source": "https://github.com/mariadb/server/commit/ef3f09f0c9e62ea1bf86b33b5d97e954b3ae34fe",
"target": {
"file": "sql/slave.cc",
"function": "wait_for_relay_log_space"
},
"deprecated": false,
"signature_type": "Function",
"signature_version": "v1"
},
{
"id": "CVE-2016-3477-601c031a",
"digest": {
"length": 4447,
"function_hash": "293867796943319918492079440341069838120"
},
"source": "https://github.com/mariadb/server/commit/ef3f09f0c9e62ea1bf86b33b5d97e954b3ae34fe",
"target": {
"file": "sql/slave.cc",
"function": "queue_event"
},
"deprecated": false,
"signature_type": "Function",
"signature_version": "v1"
},
{
"id": "CVE-2016-3477-62002115",
"digest": {
"length": 4331,
"function_hash": "145564316614950906134391087632154962792"
},
"source": "https://github.com/mariadb/server/commit/ef3f09f0c9e62ea1bf86b33b5d97e954b3ae34fe",
"target": {
"file": "sql/sql_reload.cc",
"function": "reload_acl_and_cache"
},
"deprecated": false,
"signature_type": "Function",
"signature_version": "v1"
},
{
"id": "CVE-2016-3477-62a5b6cb",
"digest": {
"length": 1941,
"function_hash": "88061190395805965339483472713009090126"
},
"source": "https://github.com/mariadb/server/commit/ef3f09f0c9e62ea1bf86b33b5d97e954b3ae34fe",
"target": {
"file": "mysys/my_write.c",
"function": "my_write"
},
"deprecated": false,
"signature_type": "Function",
"signature_version": "v1"
},
{
"id": "CVE-2016-3477-66805fa3",
"digest": {
"threshold": 0.9,
"line_hashes": [
"134365714070423475956787535466157456489",
"92439959347579133286972054249896775260",
"29031961071672439172553263067432351",
"51064693991532865320483749913865116919"
]
},
"source": "https://github.com/mariadb/server/commit/ef3f09f0c9e62ea1bf86b33b5d97e954b3ae34fe",
"target": {
"file": "sql/sql_reload.cc"
},
"deprecated": false,
"signature_type": "Line",
"signature_version": "v1"
},
{
"id": "CVE-2016-3477-6c703349",
"digest": {
"threshold": 0.9,
"line_hashes": [
"138280766465291402954633948080703548742",
"286918487942372844058516042317042211465",
"271427670978659436578098746540634235896",
"226972039152699814896734336436048973559",
"238260888864092195196218444241072339344",
"225739643561265922996471926307841043317",
"218040180523293014627092972635158231636",
"3330672707799061277179223697638521373",
"45110191429392261073109665541896459162",
"186957242511237368186653017242241880644",
"218040180523293014627092972635158231636",
"79399722498454208195308361619136098549"
]
},
"source": "https://github.com/mariadb/server/commit/3fd214c8be7c2340ebe06f4c887c67f5c928e5f0",
"target": {
"file": "sql/wsrep_sst.cc"
},
"deprecated": false,
"signature_type": "Line",
"signature_version": "v1"
},
{
"id": "CVE-2016-3477-6ec624b6",
"digest": {
"length": 1364,
"function_hash": "154359464276375504728374903731140478001"
},
"source": "https://github.com/mariadb/server/commit/ef3f09f0c9e62ea1bf86b33b5d97e954b3ae34fe",
"target": {
"file": "sql/slave.cc",
"function": "write_ignored_events_info_to_relay_log"
},
"deprecated": false,
"signature_type": "Function",
"signature_version": "v1"
},
{
"id": "CVE-2016-3477-717e2045",
"digest": {
"threshold": 0.9,
"line_hashes": [
"257759959566866723370282032406345825672",
"290004808962043040976641501826527583545",
"223335965409994655696562759219612910834",
"336164319863658612373727263701180561791",
"105184907419824255477516238876284119135",
"249113418247044928476047186548993579019",
"99871709287018298106822876732287627778",
"219494082049966639830662214288274916542",
"54767331739268067526508733362361501592"
]
},
"source": "https://github.com/mariadb/server/commit/ef3f09f0c9e62ea1bf86b33b5d97e954b3ae34fe",
"target": {
"file": "sql/log.h"
},
"deprecated": false,
"signature_type": "Line",
"signature_version": "v1"
},
{
"id": "CVE-2016-3477-80a76fcb",
"digest": {
"threshold": 0.9,
"line_hashes": [
"190761733475525621207741906927875966744",
"204679580233173643026864445685477499135",
"332862544007788820558967173937562092674",
"183703638020207142765110227463355361182"
]
},
"source": "https://github.com/mariadb/server/commit/3fd214c8be7c2340ebe06f4c887c67f5c928e5f0",
"target": {
"file": "sql/log.h"
},
"deprecated": false,
"signature_type": "Line",
"signature_version": "v1"
},
{
"id": "CVE-2016-3477-898dab0e",
"digest": {
"length": 5623,
"function_hash": "239009269083805995141236681555427680010"
},
"source": "https://github.com/mariadb/server/commit/3fd214c8be7c2340ebe06f4c887c67f5c928e5f0",
"target": {
"file": "sql/sql_reload.cc",
"function": "reload_acl_and_cache"
},
"deprecated": false,
"signature_type": "Function",
"signature_version": "v1"
},
{
"id": "CVE-2016-3477-943d95df",
"digest": {
"threshold": 0.9,
"line_hashes": [
"217067244566564363493923158008512346194",
"47472395223709325835592198127309034566",
"43294564006491954594749874719358003641",
"63769546249023660807172732162892930269",
"318003579644003396994966700634343860018",
"190007125863583207804713640139703851223",
"3888943243093897227268118690676751442",
"143226364121715927506590858301255868061",
"13686508052368179632591719556029899727",
"211738386149482794783845409647666403968",
"64424514710896132646826223613702845823",
"259735504168886969655315451750273730995",
"277202462125947031076723231622742717842",
"219236699654139937672492311082517060855",
"214739711648884992365397178394964184531"
]
},
"source": "https://github.com/mariadb/server/commit/ef3f09f0c9e62ea1bf86b33b5d97e954b3ae34fe",
"target": {
"file": "mysys/my_write.c"
},
"deprecated": false,
"signature_type": "Line",
"signature_version": "v1"
},
{
"id": "CVE-2016-3477-a2b2f4ed",
"digest": {
"length": 1755,
"function_hash": "148239541265488997165878549566895115713"
},
"source": "https://github.com/mariadb/server/commit/3fd214c8be7c2340ebe06f4c887c67f5c928e5f0",
"target": {
"file": "sql/wsrep_sst.cc",
"function": "sst_donor_thread"
},
"deprecated": false,
"signature_type": "Function",
"signature_version": "v1"
},
{
"id": "CVE-2016-3477-a8ae8f53",
"digest": {
"length": 764,
"function_hash": "224589336124188058168237286624043284048"
},
"source": "https://github.com/mariadb/server/commit/ef3f09f0c9e62ea1bf86b33b5d97e954b3ae34fe",
"target": {
"file": "sql/log.cc",
"function": "MYSQL_BIN_LOG::append"
},
"deprecated": false,
"signature_type": "Function",
"signature_version": "v1"
},
{
"id": "CVE-2016-3477-ae4893db",
"digest": {
"length": 1220,
"function_hash": "299240266904124968423468137802559901358"
},
"source": "https://github.com/mariadb/server/commit/ef3f09f0c9e62ea1bf86b33b5d97e954b3ae34fe",
"target": {
"file": "sql/slave.cc",
"function": "queue_binlog_ver_3_event"
},
"deprecated": false,
"signature_type": "Function",
"signature_version": "v1"
},
{
"id": "CVE-2016-3477-b07c82e7",
"digest": {
"threshold": 0.9,
"line_hashes": [
"246324540977897627732322915531479380191",
"243249584410576700962048937956267292212",
"270278423179066661243983385602351267358",
"170492905343107048374874090130875590404",
"2651044818390818886666967499007105308",
"218005385349398643677901455381293104953",
"269778807666203349853103433631214867678",
"73106452420202397994383467742165553229",
"226957149388337230797309467805608445009"
]
},
"source": "https://github.com/mariadb/server/commit/10880d67b95d29dc1a764f2ee5c2010dc89659df",
"target": {
"file": "storage/xtradb/srv/srv0srv.cc"
},
"deprecated": false,
"signature_type": "Line",
"signature_version": "v1"
},
{
"id": "CVE-2016-3477-b1de6b08",
"digest": {
"threshold": 0.9,
"line_hashes": [
"37163415469017356262003270619326732878",
"206907561948897524885379099469017714603",
"172160193159108569251101553992103838252",
"276591534502063292608705296606913668844"
]
},
"source": "https://github.com/mariadb/server/commit/ef3f09f0c9e62ea1bf86b33b5d97e954b3ae34fe",
"target": {
"file": "sql/slave.h"
},
"deprecated": false,
"signature_type": "Line",
"signature_version": "v1"
},
{
"id": "CVE-2016-3477-b2560598",
"digest": {
"length": 586,
"function_hash": "108549119445571630048936119205618877655"
},
"source": "https://github.com/mariadb/server/commit/ef3f09f0c9e62ea1bf86b33b5d97e954b3ae34fe",
"target": {
"file": "sql/slave.cc",
"function": "rotate_relay_log"
},
"deprecated": false,
"signature_type": "Function",
"signature_version": "v1"
},
{
"id": "CVE-2016-3477-b30f7355",
"digest": {
"threshold": 0.9,
"line_hashes": [
"51778901953647624533457625127023536663",
"118379140219062356730416557036775288383",
"227050872492421637357223967286584191391",
"94528205174022409529560651282778134627",
"261932826280886158645548008293278475402",
"283441208736908226641696188289282126644",
"61525958597719981543286301807075188949",
"204779201417722926430477908603300808221",
"177726651844785756098559031821534256108",
"229999320615490530632519578366832739810",
"81067317508137369830643150852914085102",
"241324011150096178757773069529691663838",
"255629422655667860411393258013500012664",
"322105057333667143039753604472404984339",
"212017055675345603330823581635545569284",
"93402182149593758217974560356452837398",
"202018430218798993417433625800079827092",
"149684315417916057667522197981182212755",
"70282720407801944706981914592459951807",
"171101862875040484427702073647718491917",
"24895459336502345103480515175347681541"
]
},
"source": "https://github.com/mariadb/server/commit/3fd214c8be7c2340ebe06f4c887c67f5c928e5f0",
"target": {
"file": "sql/log.cc"
},
"deprecated": false,
"signature_type": "Line",
"signature_version": "v1"
},
{
"id": "CVE-2016-3477-b31ef968",
"digest": {
"length": 6416,
"function_hash": "97369804720138200227200361646399213134"
},
"source": "https://github.com/mariadb/server/commit/3fd214c8be7c2340ebe06f4c887c67f5c928e5f0",
"target": {
"file": "sql/log.cc",
"function": "MYSQL_BIN_LOG::open"
},
"deprecated": false,
"signature_type": "Function",
"signature_version": "v1"
},
{
"id": "CVE-2016-3477-c8a4ed6f",
"digest": {
"length": 795,
"function_hash": "214318106888297741935426059841043468090"
},
"source": "https://github.com/mariadb/server/commit/10880d67b95d29dc1a764f2ee5c2010dc89659df",
"target": {
"file": "storage/xtradb/srv/srv0srv.cc",
"function": "srv_free"
},
"deprecated": false,
"signature_type": "Function",
"signature_version": "v1"
},
{
"id": "CVE-2016-3477-dbc0d680",
"digest": {
"length": 2325,
"function_hash": "107286220276269211177486059368527812648"
},
"source": "https://github.com/mariadb/server/commit/ef3f09f0c9e62ea1bf86b33b5d97e954b3ae34fe",
"target": {
"file": "sql/slave.cc",
"function": "process_io_create_file"
},
"deprecated": false,
"signature_type": "Function",
"signature_version": "v1"
},
{
"id": "CVE-2016-3477-dc0dc6b8",
"digest": {
"length": 1238,
"function_hash": "288398411028646157451262565420522488912"
},
"source": "https://github.com/mariadb/server/commit/ef3f09f0c9e62ea1bf86b33b5d97e954b3ae34fe",
"target": {
"file": "sql/log.cc",
"function": "MYSQL_BIN_LOG::appendv"
},
"deprecated": false,
"signature_type": "Function",
"signature_version": "v1"
},
{
"id": "CVE-2016-3477-fbb2f6a4",
"digest": {
"threshold": 0.9,
"line_hashes": [
"158429508717059316385449808210753168442",
"328544241944799947343061993779942354175",
"17688033170555013025093611693053505625",
"332740461862767434646677483674960113056",
"258790674519885154688584383402732047872",
"261150820986990427232536253525217055698",
"242691319933942575414556418349749133373",
"28945452821956022294581565050610025815",
"94785724773114462780278584209424544038",
"288052873201087131562202228541223530387",
"214753670054318192566258022406653300181",
"292277408222718022776544368527809216341",
"165525750818703724481955464037115142982",
"26894295437223435512198327213374236202",
"195570545332095397846662519945574410951",
"55848670871465220453452887913255392321",
"318096196943082339592657033682903362232",
"97494625173128587317666588883455118701"
]
},
"source": "https://github.com/mariadb/server/commit/ef3f09f0c9e62ea1bf86b33b5d97e954b3ae34fe",
"target": {
"file": "mysys/errors.c"
},
"deprecated": false,
"signature_type": "Line",
"signature_version": "v1"
},
{
"id": "CVE-2016-3477-fed54dd8",
"digest": {
"length": 2141,
"function_hash": "200015427244367862756248907000710942115"
},
"source": "https://github.com/mariadb/server/commit/ef3f09f0c9e62ea1bf86b33b5d97e954b3ae34fe",
"target": {
"file": "sql/slave.cc",
"function": "queue_binlog_ver_1_event"
},
"deprecated": false,
"signature_type": "Function",
"signature_version": "v1"
}
],
"vanir_signatures_modified": "2026-10-24T14:03:52Z"
}
},
{
"ranges": [
{
"repo": "https://github.com/mysql/mysql-server",
"type": "GIT",
"events": [
{
"introduced": "54df0057e18d8c82c23fbd4e0bf5b5dc2e762955"
},
{
"last_affected": "e7061f7e5a96c66cb2e0bf46bec7f6ff35801a69"
},
{
"introduced": "0"
},
{
"last_affected": "63f68c53873174e07ef8e6d7d60e9cec05c4b34e"
},
{
"last_affected": "99077a555bc197b8be46287543cbde36ab4da8dd"
}
],
"database_specific": {
"extracted_events": [
{
"cpe": "cpe:2.3:a:oracle:mysql:*:*:*:*:*:*:*:*",
"range": [
{
"introduced": "5.5.0"
},
{
"last_affected": "5.5.49"
}
],
"source": "CPE_RANGE"
},
{
"cpe": "cpe:2.3:a:oracle:mysql:*:*:*:*:*:*:*:*",
"range": [
{
"introduced": "5.6.0"
},
{
"last_affected": "5.6.30"
}
],
"source": "CPE_RANGE"
},
{
"cpe": "cpe:2.3:a:oracle:mysql:*:*:*:*:*:*:*:*",
"range": [
{
"introduced": "5.7.0"
},
{
"last_affected": "5.7.12"
}
],
"source": "CPE_RANGE"
}
]
}
}
],
"versions": [
"mysql-5.7.12",
"mysql-5.5.49",
"mysql-5.5.47",
"mysql-5.5.44",
"mysql-5.5.27",
"mysql-5.5.25",
"mysql-5.5.23",
"mysql-5.5.19",
"mysql-5.5.15",
"mysql-5.1.4",
"mysql-4.0.4",
"mysql-4.0.2",
"mysql-3.23.36",
"mysql-3.23.33",
"mysql-3.23.32",
"mysql-3.23.31",
"mysql-3.23.30-gamma",
"mysql-3.23.28-gamma",
"mysql-3.23.22-beta"
],
"database_specific": {
"source": "https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2016-3477.json"
}
}
],
"modified": "2026-10-24T14:03:52.708326271Z",
"provider": "osv",
"references": [
"https://mariadb.com/kb/en/mariadb/mariadb-10026-release-notes/",
"https://mariadb.com/kb/en/mariadb/mariadb-10115-release-notes/",
"https://mariadb.com/kb/en/mariadb/mariadb-5550-release-notes/"
],
"provider_metadata": {
"unresolved_ranges": [
{
"cpes": [
"cpe:2.3:a:mariadb:mariadb:*:*:*:*:*:*:*:*"
],
"vendor_product": "mariadb:mariadb",
"extracted_events": [
{
"range": [
{
"introduced": "5.5.20"
},
{
"fixed": "5.5.50"
},
{
"introduced": "10.0.0"
},
{
"fixed": "10.0.26"
},
{
"introduced": "10.1.0"
},
{
"fixed": "10.1.15"
}
],
"source": "CPE_RANGE"
}
]
},
{
"cpes": [
"cpe:2.3:o:canonical:ubuntu_linux:12.04:*:*:*:lts:*:*:*",
"cpe:2.3:o:canonical:ubuntu_linux:14.04:*:*:*:lts:*:*:*",
"cpe:2.3:o:canonical:ubuntu_linux:15.10:*:*:*:*:*:*:*",
"cpe:2.3:o:canonical:ubuntu_linux:16.04:*:*:*:lts:*:*:*"
],
"vendor_product": "canonical:ubuntu_linux",
"extracted_events": [
{
"range": [
{
"introduced": "12.04"
},
{
"last_affected": "12.04"
},
{
"introduced": "14.04"
},
{
"last_affected": "14.04"
},
{
"introduced": "15.10"
},
{
"last_affected": "15.10"
},
{
"introduced": "16.04"
},
{
"last_affected": "16.04"
}
],
"source": "CPE_STRING"
}
]
},
{
"cpes": [
"cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:*"
],
"vendor_product": "debian:debian_linux",
"extracted_events": [
{
"range": [
{
"introduced": "8.0"
},
{
"last_affected": "8.0"
}
],
"source": "CPE_STRING"
}
]
},
{
"cpes": [
"cpe:2.3:a:ibm:powerkvm:2.1:*:*:*:*:*:*:*",
"cpe:2.3:a:ibm:powerkvm:3.1:*:*:*:*:*:*:*"
],
"vendor_product": "ibm:powerkvm",
"extracted_events": [
{
"range": [
{
"introduced": "2.1"
},
{
"last_affected": "2.1"
},
{
"introduced": "3.1"
},
{
"last_affected": "3.1"
}
],
"source": "CPE_STRING"
}
]
},
{
"cpes": [
"cpe:2.3:o:oracle:linux:7:*:*:*:*:*:*:*"
],
"vendor_product": "oracle:linux",
"extracted_events": [
{
"range": [
{
"introduced": "7"
},
{
"last_affected": "7"
}
],
"source": "CPE_STRING"
}
]
}
]
}
},
"related_cves": [
{
"value": "CVE-2016-3477",
"evidence": "/id"
}
],
"security_relevant": true,
"severity_evidence": "/severity/0/score"
},
"source_id": "core-osv",
"document_id": 442864,
"published_at": "2016-07-21T10:12:30.523+00:00"
}