High WID-SEC-2023-2068 26 CVEs

Oracle MySQL: Mehrere Schwachstellen

Published Apr 14, 2015 · Updated Aug 15, 2023 · Revision 26 · de-DE

Vendor: Debian Vendor: F5 Vendor: Juniper Networks Vendor: MariaDB Vendor: Oracle Vendor: Red Hat Vendor: SUSE Product: BIG-IP < 14.0.0 Product: BIG-IP Access Policy Manager Product: BIG-IP Access Policy Manager 10.1.0 - 10.2.4 Product: BIG-IP Access Policy Manager 11.0.0 - 11.6.0 Product: BIG-IP Access Policy Manager 12.0.0 Product: BIG-IP Analytics Product: BIG-IP Analytics 11.0.0 - 11.6.0 Product: BIG-IP Analytics 12.0.0 Product: BIG-IP Application Security Manager Product: BIG-IP Application Security Manager 10.1.0 - 10.2.4 Product: BIG-IP Application Security Manager 11.0.0 - 11.6.0 Product: BIG-IP Application Security Manager 12.0.0 Product: BIG-IP Edge Gateway Product: BIG-IP Edge Gateway 10.1.0 - 10.2.4 Product: BIG-IP Edge Gateway 11.0.0 - 11.3.0 Product: BIG-IP Global Traffic Manager Product: BIG-IP Global Traffic Manager 10.1.0 - 10.2.4 Product: BIG-IP Global Traffic Manager 11.0.0 - 11.6.0 Product: BIG-IP Link Controller Product: BIG-IP Link Controller 10.1.0 - 10.2.4 Product: BIG-IP Link Controller 11.0.0 - 11.6.0 Product: BIG-IP Link Controller 12.0.0 Product: BIG-IP Local Traffic Manager +42 more

Summary

Ein entfernter, anonymer Angreifer kann mehrere Schwachstellen in Oracle MySQL ausnutzen, um dadurch die Integrität, Vertraulichkeit und Verfügbarkeit zu gefährden.

Product

MySQL ist ein Open Source Datenbankserver von Oracle.
Der MySQL Enterprise Monitor überwacht kontinuierlich MySQL Anfragen und performaz relevante Server Werte.

Vulnerabilities 26

High —

CVE-2014-0112 Public exploit EPSS 98%

ClassLoader manipulation in Apache Struts

ParametersInterceptor in Apache Struts before 2.3.20 does not properly restrict access to the getClass method, which allows remote attackers to "manipulate" the ClassLoader and execute arbitrary code via a crafted request. NOTE: this vulnerability exists beca…

org.apache.struts:struts2-core Maven

Apr 29, 2014
Unscored —

CVE-2014-3569 EPSS 20%

The ssl23_get_client_hello function in s23_srvr.c in OpenSSL 0.9.8zc, 1.0.0o, and 1.0.1j does not properly handle attem…

openssl openssl Debian Ubuntu

Dec 24, 2014
Medium —

CVE-2014-7809

Cross-Site Request Forgery in Apache Struts

Apache Struts 2.0.0 through 2.3.x before 2.3.20 uses predictable <s:token/> values, which allows remote attackers to bypass the CSRF protection mechanism.

org.apache.struts:struts2-core Maven

Dec 10, 2014
Unscored —

CVE-2015-0405

Unspecified vulnerability in Oracle MySQL Server 5.6.22 and earlier allows remote authenticated users to affect availab…

mariadb-5.5 mysql-5.6 Ubuntu

Apr 16, 2015
Unscored —

CVE-2015-0423

Unspecified vulnerability in Oracle MySQL Server 5.6.22 and earlier allows remote authenticated users to affect availab…

mariadb-5.5 mysql-5.6 Ubuntu

Apr 16, 2015
Unscored —

CVE-2015-0433

Unspecified vulnerability in Oracle MySQL Server 5.5.41 and earlier, and 5.6.22 and earlier, allows remote authenticate…

mysql-5.5 mariadb-5.5 mysql-5.6 Ubuntu

Apr 16, 2015
Unscored —

CVE-2015-0438

Unspecified vulnerability in Oracle MySQL Server 5.6.22 and earlier allows remote authenticated users to affect availab…

mariadb-5.5 mysql-5.6 Ubuntu

Apr 16, 2015
Unscored —

CVE-2015-0439

Unspecified vulnerability in Oracle MySQL Server 5.6.22 and earlier allows remote authenticated users to affect availab…

mariadb-5.5 mysql-5.6 Ubuntu

Apr 16, 2015
Unscored —

CVE-2015-0441

Unspecified vulnerability in Oracle MySQL Server 5.5.41 and earlier, and 5.6.22 and earlier, allows remote authenticate…

mysql-5.5 mariadb-5.5 mysql-5.6 Ubuntu

Apr 16, 2015
Unscored —

CVE-2015-0498

Unspecified vulnerability in Oracle MySQL Server 5.6.23 and earlier allows remote authenticated users to affect availab…

mariadb-5.5 mysql-5.6 Ubuntu

Apr 16, 2015
Unscored —

CVE-2015-0499

Unspecified vulnerability in Oracle MySQL Server 5.5.42 and earlier, and 5.6.23 and earlier, allows remote authenticate…

mysql-5.5 mariadb-5.5 mysql-5.6 Ubuntu

Apr 16, 2015
Unscored —

CVE-2015-0500

Unspecified vulnerability in Oracle MySQL Server 5.6.23 and earlier allows remote authenticated users to affect availab…

mariadb-5.5 mysql-5.6 Ubuntu

Apr 16, 2015
Unscored —

CVE-2015-0501 EPSS 10%

Unspecified vulnerability in Oracle MySQL Server 5.5.42 and earlier, and 5.6.23 and earlier, allows remote authenticate…

mysql-5.5 mariadb-5.5 mysql-5.6 Ubuntu

Apr 16, 2015
Unscored —

CVE-2015-0503

Unspecified vulnerability in Oracle MySQL Server 5.6.23 and earlier allows remote authenticated users to affect availab…

mariadb-5.5 mysql-5.6 Ubuntu

Apr 16, 2015
Unscored —

CVE-2015-0505

Unspecified vulnerability in Oracle MySQL Server 5.5.42 and earlier, and 5.6.23 and earlier, allows remote authenticate…

mysql-5.5 mariadb-5.5 mysql-5.6 Ubuntu

Apr 16, 2015
Unscored —

CVE-2015-0506

Unspecified vulnerability in Oracle MySQL Server 5.6.23 and earlier allows remote authenticated users to affect availab…

mariadb-5.5 mysql-5.6 Ubuntu

Apr 16, 2015
Unscored —

CVE-2015-0507

Unspecified vulnerability in Oracle MySQL Server 5.6.23 and earlier allows remote authenticated users to affect availab…

mariadb-5.5 mysql-5.6 Ubuntu

Apr 16, 2015
Unscored —

CVE-2015-0508

Unspecified vulnerability in Oracle MySQL Server 5.6.23 and earlier allows remote authenticated users to affect availab…

mariadb-5.5 mysql-5.6 Ubuntu

Apr 16, 2015
Unscored —

CVE-2015-0511

Unspecified vulnerability in Oracle MySQL Server 5.6.23 and earlier allows remote authenticated users to affect availab…

mariadb-5.5 mysql-5.6 Ubuntu

Apr 16, 2015
Unscored —

CVE-2015-2566

Unspecified vulnerability in Oracle MySQL Server 5.6.22 and earlier allows remote authenticated users to affect availab…

mariadb-5.5 mysql-5.6 Ubuntu

Apr 16, 2015
Unscored —

CVE-2015-2567

Unspecified vulnerability in Oracle MySQL Server 5.6.23 and earlier allows remote authenticated users to affect availab…

mariadb-5.5 mysql-5.6 Ubuntu

Apr 16, 2015
Unscored —

CVE-2015-2568

Unspecified vulnerability in Oracle MySQL Server 5.5.41 and earlier, and 5.6.22 and earlier, allows remote attackers to…

mysql-5.5 mariadb-5.5 mysql-5.6 Ubuntu

Apr 16, 2015
Unscored —

CVE-2015-2571

Unspecified vulnerability in Oracle MySQL Server 5.5.42 and earlier, and 5.6.23 and earlier, allows remote authenticate…

mysql-5.5 mariadb-5.5 mysql-5.6 Ubuntu

Apr 16, 2015
Unscored —

CVE-2015-2573

Unspecified vulnerability in Oracle MySQL Server 5.5.41 and earlier, and 5.6.22 and earlier, allows remote authenticate…

mysql-5.5 mariadb-5.5 mysql-5.6 Ubuntu

Apr 16, 2015
Medium —

CVE-2015-2575

Improper Access Control in MySQL Connectors Java

Unspecified vulnerability in the MySQL Connectors component in Oracle MySQL 5.1.34 and earlier allows remote authenticated users to affect confidentiality and integrity via unknown vectors related to Connector/J.

mysql-connector-java mysql:mysql-connector-java Ubuntu Maven

Apr 16, 2015
Unscored —

CVE-2015-2576

Unspecified vulnerability in the MySQL Utilities component in Oracle MySQL 1.5.1 and earlier, when running on Windows, …

Apr 16, 2015

Revision history

2023-08-15 #26
Neue Updates von F5 aufgenommen
2016-09-07 #25
New remediations available
2016-07-18 #24
New remediations available
2015-10-19 #22
New remediations available
2015-10-19 #23
Version nicht vorhanden
2015-10-14 #20
New remediations available
2015-10-14 #21
Version nicht vorhanden
2015-08-25 #18
New remediations available
2015-08-25 #19
Version nicht vorhanden
2015-08-24 #16
New remediations available
2015-08-24 #17
Version nicht vorhanden
2015-08-18 #13
New remediations available
2015-08-18 #14
Version nicht vorhanden
2015-08-18 #15
Version nicht vorhanden
2015-08-17 #11
New remediations available
2015-08-17 #12
Version nicht vorhanden
2015-07-21 #10
New remediations available
2015-07-19 #8
New remediations available
2015-07-19 #9
Version nicht vorhanden
2015-05-26 #6
New remediations available
2015-05-26 #7
Version nicht vorhanden
2015-04-21 #4
New remediations available
2015-04-21 #5
Version nicht vorhanden
2015-04-19 #3
New remediations available
2015-04-14 #1
Initial Release

References

F5 Security Advisory K17115 vom 2023-08-16
https://my.f5.com/manage/s/article/K17115
Debian Security Advisory DSA-3229-1 vom 2015-04-19
https://www.debian.org/security/2015/dsa-3229
Ubuntu Security Notice USN-2575-1 vom 2015-04-21
http://www.ubuntu.com/usn/usn-2575-1/
Oracle Critical Patch Update Advisory Appendix MSQL vom 2015-04-14
http://www.oracle.com/technetwork/topics/security/cpuapr2015-2365600.html#AppendixMSQL
Ubuntu MariaDB 10.0.18 Release NotesNotice USN-2575-1 vom 2015-04-21 vom 2015-05-21
https://mariadb.com/kb/en/mariadb/mariadb-10018-release-notes/
SUSE Security Update SUSE-SU-2015:0946-1 vom 2015-05-26
https://www.suse.com/support/update/announcement/2015/suse-su-20150946-1.html
SUSE Security Update SUSE-SU-2015:0946-1 vom 2015-05-26
https://www.suse.com/support/update/announcement/2015/suse-su-20150946-1.html
SUSE Security Update SUSE-SU-2015:0946-1 vom 2015-05-26
https://www.suse.com/support/update/announcement/2015/suse-su-20150946-1.html
SUSE Security Update SUSE-SU-2015:0946-1 vom 2015-05-26
https://www.suse.com/support/update/announcement/2015/suse-su-20150946-1.html
SUSE Security Update SUSE-SU-2015:0946-1 vom 2015-05-26
https://www.suse.com/support/update/announcement/2015/suse-su-20150946-1.html
SUSE Security Update SUSE-SU-2015:0946-1 vom 2015-05-26
https://www.suse.com/support/update/announcement/2015/suse-su-20150946-1.html
SUSE Security Update SUSE-SU-2015:0946-1 vom 2015-05-26
https://www.suse.com/support/update/announcement/2015/suse-su-20150946-1.html
SUSE Security Update SUSE-SU-2015:0946-1 vom 2015-05-26
https://www.suse.com/support/update/announcement/2015/suse-su-20150946-1.html
SUSE Security Update SUSE-SU-2015:1273-1 vom 2015-07-21
http://lists.opensuse.org/opensuse-security-announce/2015-07/msg00036.html
Debian Security Advisory DSA-3311 vom 2015-07-20
https://www.debian.org/security/2015/dsa-3311
Red Hat Security Advisory RHSA-2015:1629-1 vom 2015-08-17
http://rhn.redhat.com/errata/RHSA-2015-1629.html
Red Hat Security Advisory RHSA-2015:1628-1 vom 2015-08-17
http://rhn.redhat.com/errata/RHSA-2015-1628.html
CESA-2015:1628 Moderate CentOS 5 mysql55-mysql Security Update vom 2015-08-17
http://lists.centos.org/pipermail/centos-announce/2015-August/021331.html
Red Hat Security Advisory RHSA-2015:1647 vom 2015-08-20
https://rhn.redhat.com/errata/RHSA-2015-1647.html
Red Hat Security Advisory RHSA-2015:1665-1 vom 2015-08-24
https://rhn.redhat.com/errata/RHSA-2015-1665.html
CentOS Errata and Security Advisory 2015:1665 vom 2015-08-25
http://lists.centos.org/pipermail/centos-announce/2015-August/021345.html
Juniper Security Advisory JSA10698
http://kb.juniper.net/InfoCenter/index?page=content&id=JSA10698
F5 Security Advisory SOL17115 vom 2015-10-19
https://support.f5.com/kb/en-us/solutions/public/17000/100/sol17115.html
Debian Security Advisory DSA-3621 vom 2016-07-19
https://www.debian.org/security/2016/dsa-3621
SUSE Security Update SUSE-SU-2016:2259-1 vom 2016-09-08
https://www.suse.com/support/update/announcement/2016/suse-su-20162259-1.html