PT-2015-7850 · Mariadb+8 · Mariadb+8
Alex Gaynor
+1
·
Published
2015-12-10
·
Updated
2024-06-15
·
CVE-2016-2047
CVSS v3.1
5.9
Medium
| Vector | AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N |
Name of the Vulnerable Software and Affected Versions
MariaDB versions prior to 5.5.47
MariaDB versions 10.0.x prior to 10.0.23
MariaDB versions 10.1.x prior to 10.1.10
Oracle MySQL versions 5.5.48 and earlier
Oracle MySQL versions 5.6.29 and earlier
Oracle MySQL versions 5.7.11 and earlier
Percona Server (affected versions not specified)
Description
The issue arises from improper verification of the server hostname against the domain name in the subject's Common Name (CN) or subjectAltName field of the X.509 certificate. This allows man-in-the-middle attackers to spoof SSL servers via a specific string in a certificate field. The vulnerability can be exploited by a high-privileged attacker with network access to compromise the MySQL Server, potentially leading to a denial-of-service (DOS) condition where the server hangs or crashes repeatedly.
Recommendations
For MariaDB versions prior to 5.5.47, update to version 5.5.47 or later.
For MariaDB versions 10.0.x prior to 10.0.23, update to version 10.0.23 or later.
For MariaDB versions 10.1.x prior to 10.1.10, update to version 10.1.10 or later.
For Oracle MySQL versions 5.5.48 and earlier, update to a version later than 5.5.48.
For Oracle MySQL versions 5.6.29 and earlier, update to a version later than 5.6.29.
For Oracle MySQL versions 5.7.11 and earlier, update to a version later than 5.7.11.
For Percona Server, at the moment, there is no information about a newer version that contains a fix for this vulnerability.
Exploit
DoS
Found an issue in the description? Have something to add? Feel free to write us 👾
Weakness Enumeration
Related Identifiers
Affected Products
Alt Linux
Centos
Mariadb
Mariadb Server
Mysql Server
Percona Server
Red Hat
Suse
Ubuntu