PT-2015-2546 · Oracle+7 · Mysql Server+6

Published

2015-08-06

·

Updated

2023-12-29

·

CVE-2015-4816

CVSS v2.0

4.0

Medium

VectorAV:N/AC:L/Au:S/C:N/I:N/A:P
Name of the Vulnerable Software and Affected Versions Oracle MySQL Server versions 5.5.44 and earlier
Description The issue allows remote authenticated users to affect the availability of the system via unknown vectors related to the Server: InnoDB component. This is due to errors in the code. The exploitation of this issue can lead to a denial of service, allowing an attacker to cause a hang or crash of the MySQL Server.
Recommendations For Oracle MySQL Server versions 5.5.44 and earlier, consider restricting access to the InnoDB component to minimize the risk of exploitation until a patch is available. As a temporary workaround, consider disabling the InnoDB component until a patch is available. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Found an issue in the description? Have something to add? Feel free to write us 👾
dbugs@ptsecurity.com

Weakness Enumeration

CWE-17

Related Identifiers

ALT-PU-2015-1749
ALT-PU-2016-2238
BDU:2015-11911
CESA-2016_0534
CVE-2015-4816
DLA-359-1
DSA-3377-1
DSA-3385-1
OPENSUSE-SU-2015_2243-1
RHSA-2015:1628
RHSA-2015:1629
RHSA-2015_1628
RHSA-2016:0534
RHSA-2016:1132
RHSA-2016:1481
RHSA-2016_0534
SUSE-RU-2023:3956-1
SUSE-RU-2023:4991-1
SUSE-SU-2015:2303-1
SUSE-SU-2016:0121-1
USN-2781-1

Affected Products

Alt Linux
Centos
Mariadb Server
Mysql Server
Red Hat
Suse
Ubuntu