Vulnerability

CVE-2016-5507

MEDIUM 4.9

CVE-2016-5507 is a medium-severity vulnerability (CVSS v3.1 4.9). As of 2026-10-24, 5 642 hosts in our data show software it affects on an open service in at least 15 countries.

Unspecified vulnerability in Oracle MySQL 5.6.32 and earlier and 5.7.14 and earlier allows remote administrators to affect availability via vectors related to Server: InnoDB.

Published
2016-10-25
Last modified
2026-06-17
CVSS score
4.9 CVSS v3.1
CVSS vector (v3.1)
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H
Exploit likelihood (EPSS)
2.8% in the next 30 days (top 14% of CVEs)

Exposure in our data

5 642 hosts

Hosts whose banner shows an affected software version on a service open at their latest check.

Not counted: 23 hosts with this CVE only from an older observation.

Not counted: 40 more on distribution builds that may be patched (the distribution may have backported the fix without changing the version).

133 more hosts had it earlier (the software version has since changed or the service is gone).

Counted 2026-10-24 04:20 UTC

By country

China CN3 611
United States US690
South Korea KR353
Hong Kong HK157
India IN117
Serbia RS80
Singapore SG70
Japan JP67
Türkiye TR64
Taiwan TW55
Brazil BR54
Russia RU36
Indonesia ID32
Philippines PH31
Canada CA20

Affected software seen

mysql 5.6.161 611
mysql 5.6.25522
mysql 5.7.12465
mysql 5.6.21311
mysql 5.6.29202
mysql 5.7.11189
mysql 5.6.26181
mysql 5.6.17169
mysql 5.6.24160
mysql 5.6.28160
mysql 5.7.10129
mysql 5.6.14118