medium4.0Public exploit code
CVE-2015-4870
Unspecified vulnerability in Oracle MySQL Server 5.5.45 and earlier, and 5.6.26 and earlier, allows remote authenticated users to affect availability via unkno…
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- MySQL 5.5.45 - procedure analyse Function Denial of Service2016-05-30 · dos · multiple
Impact
Unspecified vulnerability in Oracle MySQL Server 5.5.45 and earlier, and 5.6.26 and earlier, allows remote authenticated users to affect availability via unknown vectors related to Server : Parser.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Oracle | Linux | Version 7 |
| Oracle | Solaris | Version 11.3 |
| Opensuse | Leap | Version 42.1 |
| Opensuse | Opensuse | Versions 13.1, 13.2 |
| Oracle | Mysql | from 5.5.0 through 5.5.45 from 5.6.0 through 5.6.26 |
| Mariadb | Mariadb | from 5.5.0 before 5.5.46 from 10.0.0 before 10.0.22 from 10.1.0 before 10.1.8 |
| Canonical | Ubuntu Linux | Versions 12.04, 14.04, 15.04, 15.10 |
| Debian | Debian Linux | Versions 7.0, 8.0 |
| Redhat | Enterprise Linux Desktop | Version 7.0 |
| Redhat | Enterprise Linux Eus | Versions 7.1, 7.2, 7.3, 7.4, 7.5, 7.6 |
| Redhat | Enterprise Linux Server | Version 7.0 |
| Redhat | Enterprise Linux Server Aus | Versions 7.3, 7.4, 7.6, 7.7 |
References
- NVD record
- CVE.org record
- http://lists.fedoraproject.org/pipermail/package-announce/2016-February/177539.html
- http://lists.opensuse.org/opensuse-security-announce/2015-12/msg00010.html
- http://lists.opensuse.org/opensuse-security-announce/2015-12/msg00011.html
- http://lists.opensuse.org/opensuse-updates/2016-02/msg00039.html
- http://packetstormsecurity.com/files/137232/MySQL-Procedure-Analyse-Denial-Of-Service.html
- http://rhn.redhat.com/errata/RHSA-2016-0534.html
- http://rhn.redhat.com/errata/RHSA-2016-0705.html
- http://rhn.redhat.com/errata/RHSA-2016-1480.html
- http://rhn.redhat.com/errata/RHSA-2016-1481.html
- http://www.debian.org/security/2015/dsa-3377
- http://www.debian.org/security/2015/dsa-3385
- http://www.oracle.com/technetwork/topics/security/bulletinapr2016-2952098.html
- http://www.oracle.com/technetwork/topics/security/cpuoct2015-2367953.html
- http://www.oracle.com/technetwork/topics/security/linuxbulletinapr2016-2952096.html
- http://www.securityfocus.com/bid/77208
- http://www.securitytracker.com/id/1033894
- http://www.ubuntu.com/usn/USN-2781-1
- https://access.redhat.com/errata/RHSA-2016:1132
- https://www.exploit-db.com/exploits/39867/
- https://www.suse.com/support/update/announcement/2016/suse-su-20160296-1.html
- http://lists.fedoraproject.org/pipermail/package-announce/2016-February/177539.html
- http://lists.opensuse.org/opensuse-security-announce/2015-12/msg00010.html
- http://lists.opensuse.org/opensuse-security-announce/2015-12/msg00011.html
- http://lists.opensuse.org/opensuse-updates/2016-02/msg00039.html
- http://packetstormsecurity.com/files/137232/MySQL-Procedure-Analyse-Denial-Of-Service.html