PT-2014-9071 · Oracle+6 · Mysql Server+6

Publicado 2014-12-21 · Atualizado 2022-08-29 · CVE-2015-0432

Positive Technologies (AI Summary)

CVSS v2.0

4.0

Média

Vetor base

AV:N/AC:L/Au:S/C:N/I:N/A:P

Name of the Vulnerable Software and Affected Versions Oracle MySQL Server versions 5.5.40 and earlier

Description The issue allows remote authenticated users to affect availability via vectors related to Server: InnoDB: DDL: Foreign Key.

Recommendations For Oracle MySQL Server versions 5.5.40 and earlier, at the moment, there is no information about a newer version that contains a fix for this vulnerability.

Identificadores relacionados

ALT-PU-2015-1152

ALT-PU-2015-1749

CESA-2015_0118

CVE-2015-0432

DSA-3135-1

OPENSUSE-SU-2015_1216-1

RHSA-2015:0116

RHSA-2015:0117

RHSA-2015:0118

RHSA-2015:1628

RHSA-2015_0118

RHSA-2015_1628

SUSE-SU-2015:0743-1

USN-2480-1

Produtos afetados

Alt Linux

Centos

Mariadb Server

Mysql Server

Red Hat

Suse

Ubuntu

Referências · 316

• https://github.com/rapid7/metasploit-framework/blob/master/modules/auxiliary/scanner/ssl/ssl_version.rb · Nota
• https://github.com/duo-labs/mysslstrip · Nota
• https://github.com/fatlan/HAProxy-Keepalived-Sec-HighLoads · Nota
• https://access.redhat.com/security/cve/CVE-2015-4819 · Nota
• https://errata.altlinux.org/ALT-PU-2015-1749 · Aviso do Fabricante
• https://access.redhat.com/security/cve/CVE-2015-0499 · Nota
• https://bdu.fstec.ru/vul/2014-00354 · Nota de Segurança
• https://suse.com/security/cve/CVE-2014-6478 · Nota
• https://suse.com/security/cve/CVE-2015-0382.html · Nota
• https://access.redhat.com/security/cve/CVE-2015-2620 · Nota
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-2740 · Nota de Segurança
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-2922 · Nota de Segurança
• https://suse.com/security/cve/CVE-2014-6494.html · Nota
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-2571 · Nota de Segurança
• https://mariadb.com/kb/en/mariadb/mariadb-10014-release-notes · Nota