Buffer Overflow The advisory has been revoked - it doesn't affect any version of package mariadb-galera.src  (opens in a new tab)


Threat Intelligence

EPSS
0.18% (40th percentile)

Do your applications use this vulnerable package?

In a few clicks we can analyze your entire application and see what components are vulnerable in your application, and suggest you quick fixes.

Test your applications
  • Snyk IDSNYK-RHEL10-MARIADBGALERASRC-12613772
  • published11 Sept 2025
  • disclosed1 Jan 2016

Introduced: 1 Jan 2016

CVE-2016-0546  (opens in a new tab)
CWE-120  (opens in a new tab)

Amendment

The Red Hat security team deemed this advisory irrelevant for RHEL:10.

NVD Description

Note: Versions mentioned in the description apply only to the upstream mariadb-galera.src package and not the mariadb-galera.src package as distributed by RHEL.

Unspecified vulnerability in Oracle MySQL 5.5.46 and earlier, 5.6.27 and earlier, and 5.7.9 and MariaDB before 5.5.47, 10.0.x before 10.0.23, and 10.1.x before 10.1.10 allows local users to affect confidentiality, integrity, and availability via unknown vectors related to Client. NOTE: the previous information is from the January 2016 CPU. Oracle has not commented on third-party claims that these are multiple buffer overflows in the mysqlshow tool that allow remote database servers to have unspecified impact via a long table or database name.

References