Vulnerability

CVE-2016-0546

HIGH 7.2 patch available

CVE-2016-0546 is a high-severity vulnerability (CVSS v2 7.2). As of 2026-10-11, 7 452 hosts in our data show software it affects on an open service in at least 15 countries.

Unspecified vulnerability in Oracle MySQL 5.5.46 and earlier, 5.6.27 and earlier, and 5.7.9 and MariaDB before 5.5.47, 10.0.x before 10.0.23, and 10.1.x before 10.1.10 allows local users to affect confidentiality, integrity, and availability via unknown vectors related to Client. NOTE: the previous information is from the January 2016 CPU. Oracle has not commented on third-party claims that these are multiple buffer overflows in the mysqlshow tool that allow remote database servers to have unspecified impact via a long table or database name.

Published
2016-01-21
Last modified
2026-06-17
CVSS score
7.2 CVSS v2
CVSS vector (v2)
AV:L/AC:L/Au:N/C:C/I:C/A:C
Exploit likelihood (EPSS)
0.6% in the next 30 days (higher than 47% of CVEs)

Exposure in our data

7 452 hosts

Hosts whose banner shows an affected software version on a service open at their latest check.

Not counted: 129 hosts with this CVE only from an older observation.

Not counted: 2 hosts where the software version is too vague to tell (only a major release).

Not counted: 104 more on distribution builds that may be patched (the distribution may have backported the fix without changing the version).

153 more hosts had it earlier (the software version has since changed or the service is gone).

Counted 2026-10-11 04:20 UTC

By country

China CN4 614
United States US686
South Korea KR543
Hong Kong HK202
India IN174
Türkiye TR137
Russia RU136
Taiwan TW120
Japan JP85
Singapore SG76
Indonesia ID73
Brazil BR70
Malaysia MY60
Serbia RS53
Sweden SE51

Affected software seen

mysql 5.6.161 575
mysql 5.5.18.1770
mysql 5.6.25515
mysql 5.6.21301
mysql 5.5.28238
mysql 5.6.26172
mysql 5.6.17164
mysql 5.5.30159
mysql 5.5.40158
mysql 5.6.24156
mysql 5.6.14114
mysql 5.5.37110