PT-2015-1108 · Oracle+6 · Mysql Server+6

Publicado 2015-04-15 · Atualizado 2022-07-19 · CVE-2015-0501

Positive Technologies (AI Summary)

CVSS v2.0

5.7

Média

Vetor base

AV:N/AC:M/Au:M/C:N/I:N/A:C

Name of the Vulnerable Software and Affected Versions MySQL Server versions 5.5.42 and earlier MySQL Server versions 5.6.23 and earlier

Description The issue allows a remote authenticated user to affect data availability via unknown vectors related to Server: Compiling. This can potentially lead to disruption of data access.

Recommendations For MySQL Server versions 5.5.42 and earlier, update to a version later than 5.5.42 to resolve the issue. For MySQL Server versions 5.6.23 and earlier, update to a version later than 5.6.23 to resolve the issue.

Correção

RCE

Enumeração de Fraquezas

CWE-20

Identificadores relacionados

ALT-PU-2015-1389

ALT-PU-2015-1749

BDU:2015-09979

CESA-2015_1665

CVE-2015-0501

DLA-359-1

DSA-3229-1

DSA-3311-1

MGASA-2015-0193

OPENSUSE-SU-2015_1216-1

RHSA-2015:1628

RHSA-2015:1629

RHSA-2015:1646

RHSA-2015:1647

RHSA-2015:1665

RHSA-2015_1628

RHSA-2015_1665

SUSE-SU-2015:1273-1

USN-2575-1

Produtos afetados

Alt Linux

Centos

Mariadb Server

Mysql Server

Red Hat

Suse

Ubuntu

Referências · 280

• https://github.com/rapid7/metasploit-framework/blob/master/modules/auxiliary/scanner/ssl/ssl_version.rb · Nota
• https://github.com/duo-labs/mysslstrip · Nota
• https://github.com/fatlan/HAProxy-Keepalived-Sec-HighLoads · Nota
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-2627 · Nota de Segurança
• https://lists.centos.org/pipermail/centos-announce/2015-August/083507.html · Nota
• https://bdu.fstec.ru/vul/2014-00353 · Nota de Segurança
• https://security-tracker.debian.org/tracker/source-package/mariadb-10.0 · Aviso do Fabricante
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-2737 · Nota de Segurança
• https://bdu.fstec.ru/vul/2015-09993 · Nota de Segurança
• https://suse.com/security/cve/CVE-2015-2573 · Nota
• https://suse.com/security/cve/CVE-2014-6500.html · Nota
• https://suse.com/security/cve/CVE-2015-0501.html · Nota
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-6551 · Nota de Segurança
• https://bdu.fstec.ru/vul/2014-00340 · Nota de Segurança
• https://ubuntu.com/security/CVE-2015-0433 · Aviso do Fabricante