CVE-2015-0391

Опубликовано: 21 янв. 2015

Источник: nvd

CVSS2: 4

EPSS Низкий

Описание

Unspecified vulnerability in Oracle MySQL Server 5.5.38 and earlier, and 5.6.19 and earlier, allows remote authenticated users to affect availability via vectors related to DDL.

Ссылки

http://lists.opensuse.org/opensuse-security-announce/2015-04/msg00016.html
Mailing List
Third Party Advisory
http://rhn.redhat.com/errata/RHSA-2015-0116.html
Third Party Advisory
http://rhn.redhat.com/errata/RHSA-2015-0117.html
Third Party Advisory
http://rhn.redhat.com/errata/RHSA-2015-0118.html
Third Party Advisory
http://rhn.redhat.com/errata/RHSA-2015-1628.html
Third Party Advisory
http://secunia.com/advisories/62728
Not Applicable
Third Party Advisory
http://secunia.com/advisories/62730
Not Applicable
Third Party Advisory
http://secunia.com/advisories/62732
Not Applicable
Third Party Advisory
http://www.oracle.com/technetwork/topics/security/cpujan2015-1972971.html
Patch
Vendor Advisory
http://www.securityfocus.com/bid/72205
Third Party Advisory
VDB Entry
http://www.securitytracker.com/id/1031581
Broken Link
Third Party Advisory
VDB Entry
https://exchange.xforce.ibmcloud.com/vulnerabilities/100186
Third Party Advisory
VDB Entry
https://security.gentoo.org/glsa/201504-05
Third Party Advisory
http://lists.opensuse.org/opensuse-security-announce/2015-04/msg00016.html
Mailing List
Third Party Advisory
http://rhn.redhat.com/errata/RHSA-2015-0116.html
Third Party Advisory
http://rhn.redhat.com/errata/RHSA-2015-0117.html
Third Party Advisory
http://rhn.redhat.com/errata/RHSA-2015-0118.html
Third Party Advisory
http://rhn.redhat.com/errata/RHSA-2015-1628.html
Third Party Advisory
http://secunia.com/advisories/62728
Not Applicable
Third Party Advisory
http://secunia.com/advisories/62730
Not Applicable
Third Party Advisory

Уязвимые конфигурации

Конфигурация 1

Одно из

cpe:2.3:a:oracle:mysql:*:*:*:*:*:*:*:*

Версия от 5.5.0 (включая) до 5.5.38 (включая)

cpe:2.3:a:oracle:mysql:*:*:*:*:*:*:*:*

Версия от 5.6.0 (включая) до 5.6.19 (включая)

Конфигурация 2

Одно из

cpe:2.3:o:redhat:enterprise_linux_desktop:5.0:*:*:*:*:*:*:*

cpe:2.3:o:redhat:enterprise_linux_desktop:7.0:*:*:*:*:*:*:*

cpe:2.3:o:redhat:enterprise_linux_eus:7.3:*:*:*:*:*:*:*

cpe:2.3:o:redhat:enterprise_linux_eus:7.4:*:*:*:*:*:*:*

cpe:2.3:o:redhat:enterprise_linux_eus:7.5:*:*:*:*:*:*:*

cpe:2.3:o:redhat:enterprise_linux_eus:7.6:*:*:*:*:*:*:*

cpe:2.3:o:redhat:enterprise_linux_eus:7.7:*:*:*:*:*:*:*

cpe:2.3:o:redhat:enterprise_linux_server:5.0:*:*:*:*:*:*:*

cpe:2.3:o:redhat:enterprise_linux_server:7.0:*:*:*:*:*:*:*

cpe:2.3:o:redhat:enterprise_linux_server_aus:7.3:*:*:*:*:*:*:*

cpe:2.3:o:redhat:enterprise_linux_server_aus:7.4:*:*:*:*:*:*:*

cpe:2.3:o:redhat:enterprise_linux_server_aus:7.6:*:*:*:*:*:*:*

cpe:2.3:o:redhat:enterprise_linux_server_aus:7.7:*:*:*:*:*:*:*

cpe:2.3:o:redhat:enterprise_linux_server_tus:7.3:*:*:*:*:*:*:*

cpe:2.3:o:redhat:enterprise_linux_server_tus:7.6:*:*:*:*:*:*:*

cpe:2.3:o:redhat:enterprise_linux_server_tus:7.7:*:*:*:*:*:*:*

cpe:2.3:o:redhat:enterprise_linux_workstation:5.0:*:*:*:*:*:*:*

cpe:2.3:o:redhat:enterprise_linux_workstation:7.0:*:*:*:*:*:*:*

Конфигурация 3

Одно из

cpe:2.3:o:suse:linux_enterprise_desktop:12:-:*:*:*:*:*:*

cpe:2.3:o:suse:linux_enterprise_server:12:-:*:*:*:*:*:*

cpe:2.3:o:suse:linux_enterprise_software_development_kit:12:-:*:*:*:*:*:*

cpe:2.3:o:suse:linux_enterprise_workstation_extension:12:-:*:*:*:*:*:*

Конфигурация 4

Одно из

cpe:2.3:a:mariadb:mariadb:*:*:*:*:*:*:*:*

Версия от 5.5.0 (включая) до 5.5.39 (исключая)

cpe:2.3:a:mariadb:mariadb:*:*:*:*:*:*:*:*

Версия от 10.0.0 (включая) до 10.0.13 (исключая)

EPSS

Процентиль: 65%

0.00501

Низкий

4 Medium

CVSS2

Дефекты

NVD-CWE-noinfo

Связанные уязвимости

CVE-2015-0391

ubuntu

больше 10 лет назад

Unspecified vulnerability in Oracle MySQL Server 5.5.38 and earlier, and 5.6.19 and earlier, allows remote authenticated users to affect availability via vectors related to DDL.

CVE-2015-0391

redhat

больше 10 лет назад

Unspecified vulnerability in Oracle MySQL Server 5.5.38 and earlier, and 5.6.19 and earlier, allows remote authenticated users to affect availability via vectors related to DDL.

CVE-2015-0391

debian

больше 10 лет назад

Unspecified vulnerability in Oracle MySQL Server 5.5.38 and earlier, a ...

GHSA-m485-3xh7-77xf

github

больше 3 лет назад

Unspecified vulnerability in Oracle MySQL Server 5.5.38 and earlier, and 5.6.19 and earlier, allows remote authenticated users to affect availability via vectors related to DDL.

ELSA-2015-0118

oracle-oval

больше 10 лет назад

ELSA-2015-0118: mariadb security update (MODERATE)

EPSS

Процентиль: 65%

0.00501

Низкий

4 Medium

CVSS2

Дефекты

NVD-CWE-noinfo