PT-2015-1108 · Oracle+6 · Mysql Server+6

Published 2015-04-15 · Updated 2022-07-19 · CVE-2015-0501

Positive Technologies (AI Summary)

CVSS v2.0

5.7

Medium

Base vector

AV:N/AC:M/Au:M/C:N/I:N/A:C

Name of the Vulnerable Software and Affected Versions MySQL Server versions 5.5.42 and earlier MySQL Server versions 5.6.23 and earlier

Description The issue allows a remote authenticated user to affect data availability via unknown vectors related to Server: Compiling. This can potentially lead to disruption of data access.

Recommendations For MySQL Server versions 5.5.42 and earlier, update to a version later than 5.5.42 to resolve the issue. For MySQL Server versions 5.6.23 and earlier, update to a version later than 5.6.23 to resolve the issue.

Fix

RCE

Weakness Enumeration

CWE-20

Related Identifiers

ALT-PU-2015-1389

ALT-PU-2015-1749

BDU:2015-09979

CESA-2015_1665

CVE-2015-0501

DLA-359-1

DSA-3229-1

DSA-3311-1

MGASA-2015-0193

OPENSUSE-SU-2015_1216-1

RHSA-2015:1628

RHSA-2015:1629

RHSA-2015:1646

RHSA-2015:1647

RHSA-2015:1665

RHSA-2015_1628

RHSA-2015_1665

SUSE-SU-2015:1273-1

USN-2575-1

Affected Products

Alt Linux

Centos

Mariadb Server

Mysql Server

Red Hat

Suse

Ubuntu

References · 280

• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-2627 · Security Note
• https://bdu.fstec.ru/vul/2014-00353 · Security Note
• https://security-tracker.debian.org/tracker/source-package/mariadb-10.0 · Vendor Advisory
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-2737 · Security Note
• https://bdu.fstec.ru/vul/2015-09993 · Security Note
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-6551 · Security Note
• https://bdu.fstec.ru/vul/2014-00340 · Security Note
• https://ubuntu.com/security/CVE-2015-0433 · Vendor Advisory
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-2974 · Security Note
• https://bdu.fstec.ru/vul/2014-00361 · Security Note
• https://osv.dev/vulnerability/DSA-3311-1 · Vendor Advisory
• https://bdu.fstec.ru/vul/2021-00422 · Security Note
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-2582 · Security Note
• https://bdu.fstec.ru/vul/2014-00356 · Security Note
• https://bdu.fstec.ru/vul/2014-00346 · Security Note