PT-2015-2546 · Oracle+7 · Mysql Server+6

Publicado

2015-08-06

·

Atualizado

2023-12-29

·

CVE-2015-4816

CVSS v2.0

4.0

Média

VetorAV:N/AC:L/Au:S/C:N/I:N/A:P
Name of the Vulnerable Software and Affected Versions Oracle MySQL Server versions 5.5.44 and earlier
Description The issue allows remote authenticated users to affect the availability of the system via unknown vectors related to the Server: InnoDB component. This is due to errors in the code. The exploitation of this issue can lead to a denial of service, allowing an attacker to cause a hang or crash of the MySQL Server.
Recommendations For Oracle MySQL Server versions 5.5.44 and earlier, consider restricting access to the InnoDB component to minimize the risk of exploitation until a patch is available. As a temporary workaround, consider disabling the InnoDB component until a patch is available. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
dbugs@ptsecurity.com

Enumeração de Fraquezas

CWE-17

Identificadores relacionados

ALT-PU-2015-1749
ALT-PU-2016-2238
BDU:2015-11911
CESA-2016_0534
CVE-2015-4816
DLA-359-1
DSA-3377-1
DSA-3385-1
OPENSUSE-SU-2015_2243-1
RHSA-2015:1628
RHSA-2015:1629
RHSA-2015_1628
RHSA-2016:0534
RHSA-2016:1132
RHSA-2016:1481
RHSA-2016_0534
SUSE-RU-2023:3956-1
SUSE-RU-2023:4991-1
SUSE-SU-2015:2303-1
SUSE-SU-2016:0121-1
USN-2781-1

Produtos afetados

Alt Linux
Centos
Mariadb Server
Mysql Server
Red Hat
Suse
Ubuntu