PT-2015-2567 · Oracle+4 · Mysql Server+3
Publicado
2015-10-20
·
Atualizado
2018-05-03
·
CVE-2015-4766
CVSS v2.0
1.9
Baixa
| Vetor | AV:L/AC:M/Au:N/C:N/I:N/A:P |
Name of the Vulnerable Software and Affected Versions
Oracle MySQL Server versions 5.6.25 and earlier
Description
The issue is related to errors in the code of the Server: Security: Firewall subcomponent of the MySQL database management system. It allows an attacker, potentially with network access, to cause a denial of service (DOS) by exploiting the vulnerability, which can lead to a hang or frequently repeatable crash of the MySQL Server. The vulnerability is easily exploitable and can be compromised by a high-privileged attacker via multiple protocols.
Recommendations
For Oracle MySQL Server versions 5.6.25 and earlier, update to a version that includes the fix for this issue to prevent potential denial of service attacks.
At the moment, there is no information about a newer version that contains a fix for this vulnerability.
Exploit
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
Enumeração de Fraquezas
Identificadores relacionados
Produtos afetados
Alt Linux
Mysql Server
Suse
Ubuntu