Medium
Security advisory
Unspecified vulnerability in Oracle MySQL 5.5.47 and earlier, 5.6.28 and earlier, and 5.7.10 and earlier and MariaDB before 5.5.48, 10.0.x before 10.0.24, and 10.1.x before 10.1.12 allows local users to affect integrity and availability via vectors related to DML.
- Products
- Not specified
- Affected versions
- Not specified
- Fixed versions
- Not specified
- CVEs
- CVE-2016-0640
- Confirmed fixed CVEs
- Not specified
- Updated in this feed
- 1 Nov 2026, 09:02 UTC · Revision 1
Source evidence
Unspecified vulnerability in Oracle MySQL 5.5.47 and earlier, 5.6.28 and earlier, and 5.7.10 and earlier and MariaDB before 5.5.48, 10.0.x before 10.0.24, and 10.1.x before 10.1.12 allows local users to affect integrity and availability via vectors related to DML.
osv:CVE-2016-0640
Complete source record
{
"id": "e5d31203ab70aa93ff0ad1c65435b4ed85ed11ebf260947a18a9c0d09597c364",
"url": "https://osv.dev/vulnerability/CVE-2016-0640",
"method": "structured",
"payload": {
"kind": "advisory",
"title": "CVE-2016-0640",
"summary": "Unspecified vulnerability in Oracle MySQL 5.5.47 and earlier, 5.6.28 and earlier, and 5.7.10 and earlier and MariaDB before 5.5.48, 10.0.x before 10.0.24, and 10.1.x before 10.1.12 allows local users to affect integrity and availability via vectors related to DML.",
"evidence": "osv:CVE-2016-0640",
"products": [],
"severity": "medium",
"structured": {
"id": "CVE-2016-0640",
"aliases": [
"CVE-2016-0640"
],
"metrics": [
{
"type": "CVSS_V3",
"score": "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:H"
}
],
"affected": [
{
"ranges": [
{
"repo": "https://github.com/mariadb/server",
"type": "GIT",
"events": [
{
"introduced": "5a6300dcc45da2d6c2b046560da0580548354b93"
},
{
"fixed": "93a6142dd0c0c8b2e0683e4d57082582eac91fdb"
},
{
"introduced": "776555af021e917ce0d6235386b43ae59fdd5161"
},
{
"fixed": "01897db10203312ccd20f2b76ba957825ccef613"
},
{
"introduced": "c235de12ae3723b96944337bd89ad9cc87f21d8f"
},
{
"fixed": "b05158cc10a75196b5c0bf8dad9360608a2dd5b9"
}
],
"database_specific": {
"extracted_events": [
{
"cpe": "cpe:2.3:a:mariadb:mariadb:*:*:*:*:*:*:*:*",
"range": [
{
"introduced": "5.5.20"
},
{
"fixed": "5.5.48"
}
],
"source": "CPE_RANGE"
},
{
"cpe": "cpe:2.3:a:mariadb:mariadb:*:*:*:*:*:*:*:*",
"range": [
{
"introduced": "10.0.0"
},
{
"fixed": "10.0.24"
}
],
"source": "CPE_RANGE"
},
{
"cpe": "cpe:2.3:a:mariadb:mariadb:*:*:*:*:*:*:*:*",
"range": [
{
"introduced": "10.1.0"
},
{
"fixed": "10.1.12"
}
],
"source": "CPE_RANGE"
}
]
}
}
],
"versions": [
"mariadb-10.1.11",
"mariadb-10.1.10",
"mariadb-10.1.9",
"mariadb-10.1.8",
"mariadb-10.1.7",
"mariadb-10.1.6",
"mariadb-10.1.5",
"mariadb-10.1.4",
"mariadb-10.1.3",
"mariadb-10.1.2",
"mariadb-10.1.0"
],
"database_specific": {
"source": "https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2016-0640.json",
"vanir_signatures": [
{
"id": "CVE-2016-0640-6f7ab738",
"digest": {
"threshold": 0.9,
"line_hashes": [
"274298000087880993560015421704917208476",
"139145636241216056385508861118446489286",
"338449612803683363914571601868732314234",
"269103915272444797243883319290725278457"
]
},
"source": "https://github.com/mariadb/server/commit/b05158cc10a75196b5c0bf8dad9360608a2dd5b9",
"target": {
"file": "sql/sql_select.cc"
},
"deprecated": false,
"signature_type": "Line",
"signature_version": "v1"
},
{
"id": "CVE-2016-0640-9a3cb7b5",
"digest": {
"threshold": 0.9,
"line_hashes": [
"101618810264590050332860595868827487828",
"151684181180313039129960101383182994884",
"245723464035028011391222552709459444000",
"200158032217569512795301531542981901708",
"167412436514908738347579721415132230937",
"114731481270423150548293400924664004313",
"126927749514388854555249755074356036374",
"299913887995491286320469046083681187389",
"204058529217883360154382064572680149094",
"292398400697841792237378782961741064660",
"253405681862239406781542629497795693831",
"20453322842544021734317470372247290844",
"135469071627134196195743088104119986545",
"125390321843579766155298245939321224306",
"133784874913285018020895797509124548688",
"316130965776004554812004803718833283219",
"204795600828567315257287083588839829389"
]
},
"source": "https://github.com/mariadb/server/commit/93a6142dd0c0c8b2e0683e4d57082582eac91fdb",
"target": {
"file": "storage/innobase/srv/srv0srv.c"
},
"deprecated": false,
"signature_type": "Line",
"signature_version": "v1"
},
{
"id": "CVE-2016-0640-c53e1a7c",
"digest": {
"length": 645,
"function_hash": "148682213127556972962097231534381503457"
},
"source": "https://github.com/mariadb/server/commit/93a6142dd0c0c8b2e0683e4d57082582eac91fdb",
"target": {
"file": "storage/innobase/buf/buf0flu.c",
"function": "buf_flush_stat_update"
},
"deprecated": false,
"signature_type": "Function",
"signature_version": "v1"
},
{
"id": "CVE-2016-0640-f5653062",
"digest": {
"threshold": 0.9,
"line_hashes": [
"70944286196790103913235935046485175129",
"70216736230457630044913030527495888989",
"234715019206600995395395222423194408578",
"232126951106032907535935331544487284708",
"200232940830908561830841644863696919182"
]
},
"source": "https://github.com/mariadb/server/commit/93a6142dd0c0c8b2e0683e4d57082582eac91fdb",
"target": {
"file": "storage/innobase/buf/buf0flu.c"
},
"deprecated": false,
"signature_type": "Line",
"signature_version": "v1"
}
],
"vanir_signatures_modified": "2026-10-24T14:03:54Z"
}
},
{
"ranges": [
{
"repo": "https://github.com/mysql/mysql-server",
"type": "GIT",
"events": [
{
"introduced": "54df0057e18d8c82c23fbd4e0bf5b5dc2e762955"
},
{
"last_affected": "40ae1b9b618fbbc3b494a896a9d074b74e414337"
},
{
"introduced": "0"
},
{
"last_affected": "9dba27386d59892dd400767f09a39d0e3e3179a8"
},
{
"last_affected": "d04d7a8f844caf78f03c007243681a1b5471d0a3"
}
],
"database_specific": {
"extracted_events": [
{
"cpe": "cpe:2.3:a:oracle:mysql:*:*:*:*:*:*:*:*",
"range": [
{
"introduced": "5.5.0"
},
{
"last_affected": "5.5.47"
}
],
"source": "CPE_RANGE"
},
{
"cpe": "cpe:2.3:a:oracle:mysql:*:*:*:*:*:*:*:*",
"range": [
{
"introduced": "5.6.0"
},
{
"last_affected": "5.6.28"
}
],
"source": "CPE_RANGE"
},
{
"cpe": "cpe:2.3:a:oracle:mysql:*:*:*:*:*:*:*:*",
"range": [
{
"introduced": "5.7.0"
},
{
"last_affected": "5.7.10"
}
],
"source": "CPE_RANGE"
}
]
}
}
],
"versions": [
"mysql-5.7.10",
"mysql-5.5.47",
"mysql-5.5.44",
"mysql-5.5.27",
"mysql-5.5.25",
"mysql-5.5.23",
"mysql-5.5.19",
"mysql-5.5.15",
"mysql-5.1.4",
"mysql-4.0.4",
"mysql-4.0.2",
"mysql-3.23.36",
"mysql-3.23.33",
"mysql-3.23.32",
"mysql-3.23.31",
"mysql-3.23.30-gamma",
"mysql-3.23.28-gamma",
"mysql-3.23.22-beta"
],
"database_specific": {
"source": "https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2016-0640.json"
}
}
],
"modified": "2026-10-24T14:03:54.308590483Z",
"provider": "osv",
"references": [
"https://access.redhat.com/errata/RHSA-2016:1132",
"https://mariadb.com/kb/en/mariadb/mariadb-10024-release-notes/",
"https://mariadb.com/kb/en/mariadb/mariadb-10112-release-notes/",
"https://mariadb.com/kb/en/mariadb/mariadb-5548-release-notes/"
],
"provider_metadata": {
"unresolved_ranges": [
{
"cpes": [
"cpe:2.3:a:mariadb:mariadb:*:*:*:*:*:*:*:*"
],
"vendor_product": "mariadb:mariadb",
"extracted_events": [
{
"range": [
{
"introduced": "5.5.20"
},
{
"fixed": "5.5.48"
},
{
"introduced": "10.0.0"
},
{
"fixed": "10.0.24"
},
{
"introduced": "10.1.0"
},
{
"fixed": "10.1.12"
}
],
"source": "CPE_RANGE"
}
]
},
{
"cpes": [
"cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:*"
],
"vendor_product": "debian:debian_linux",
"extracted_events": [
{
"range": [
{
"introduced": "8.0"
},
{
"last_affected": "8.0"
}
],
"source": "CPE_STRING"
}
]
},
{
"cpes": [
"cpe:2.3:a:ibm:powerkvm:2.1:*:*:*:*:*:*:*",
"cpe:2.3:a:ibm:powerkvm:3.1:*:*:*:*:*:*:*"
],
"vendor_product": "ibm:powerkvm",
"extracted_events": [
{
"range": [
{
"introduced": "2.1"
},
{
"last_affected": "2.1"
},
{
"introduced": "3.1"
},
{
"last_affected": "3.1"
}
],
"source": "CPE_STRING"
}
]
},
{
"cpes": [
"cpe:2.3:o:opensuse:leap:42.1:*:*:*:*:*:*:*"
],
"vendor_product": "opensuse:leap",
"extracted_events": [
{
"range": [
{
"introduced": "42.1"
},
{
"last_affected": "42.1"
}
],
"source": "CPE_STRING"
}
]
},
{
"cpes": [
"cpe:2.3:o:oracle:linux:7:*:*:*:*:*:*:*"
],
"vendor_product": "oracle:linux",
"extracted_events": [
{
"range": [
{
"introduced": "7"
},
{
"last_affected": "7"
}
],
"source": "CPE_STRING"
}
]
},
{
"cpes": [
"cpe:2.3:o:redhat:enterprise_linux:6.0:*:*:*:*:*:*:*",
"cpe:2.3:o:redhat:enterprise_linux:7.0:*:*:*:*:*:*:*"
],
"vendor_product": "redhat:enterprise_linux",
"extracted_events": [
{
"range": [
{
"introduced": "6.0"
},
{
"last_affected": "6.0"
},
{
"introduced": "7.0"
},
{
"last_affected": "7.0"
}
],
"source": "CPE_STRING"
}
]
}
]
}
},
"related_cves": [
{
"value": "CVE-2016-0640",
"evidence": "/id"
}
],
"security_relevant": true,
"severity_evidence": "/severity/0/score"
},
"source_id": "core-osv",
"document_id": 442868,
"published_at": "2016-04-21T10:59:09.977+00:00"
}