PT-2015-2487 · Oracle+4 · Mysql Server+3

Publicado 2015-10-20 · Atualizado 2018-05-03 · CVE-2015-4890

Positive Technologies (AI Summary)

CVSS v2.0

3.5

Baixa

Vetor base

AV:N/AC:M/Au:S/C:N/I:N/A:P

Name of the Vulnerable Software and Affected Versions Oracle MySQL Server versions 5.6.26 and earlier

Description The issue is related to errors in the code of the MySQL database management system. It allows a remote attacker to cause a denial of service. The vulnerability can be exploited by a high-privileged attacker with network access via multiple protocols, resulting in the ability to cause a hang or frequently repeatable crash of the MySQL Server.

Recommendations For Oracle MySQL Server versions 5.6.26 and earlier, update to a version later than 5.6.26 to resolve the issue. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Enumeração de Fraquezas

CWE-17

Identificadores relacionados

ALT-PU-2018-1647

BDU:2015-11852

CVE-2015-4890

OPENSUSE-SU-2015_2243-1

RHSA-2016:0705

SUSE-SU-2015:2303-1

USN-2781-1

Produtos afetados

Alt Linux

Mysql Server

Suse

Ubuntu

Referências · 387

• 🔥 https://github.com/OsandaMalith/CVE-2015-4870 · Exploit
• https://github.com/rapid7/metasploit-framework/blob/master/modules/auxiliary/server/openssl_altchainsforgery_mitm_proxy.rb · Nota
• https://github.com/duo-labs/mysslstrip · Nota
• https://bdu.fstec.ru/vul/2020-00679 · Nota de Segurança
• https://suse.com/security/cve/CVE-2015-4792 · Nota
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-0409 · Nota de Segurança
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-0503 · Nota de Segurança
• https://suse.com/security/cve/CVE-2015-4905.html · Nota
• https://suse.com/security/cve/CVE-2015-4866.html · Nota
• https://bdu.fstec.ru/vul/2015-12166 · Nota de Segurança
• https://ubuntu.com/security/CVE-2015-4861 · Aviso do Fabricante
• https://osv.dev/vulnerability/USN-2781-1 · Aviso do Fabricante
• http://rhn.redhat.com/errata/RHSA-2016-0705.html · Aviso do Fabricante
• https://bdu.fstec.ru/vul/2015-11924 · Nota de Segurança
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-3518 · Nota de Segurança