High WID-SEC-2024-1483 30 CVEs

Oracle MySQL: Mehrere Schwachstellen gefährden die Integrität, Vertraulichkeit und Verfügbarkeit

Published Oct 20, 2015 · Updated Jun 30, 2024 · Revision 20 · de-DE

Vendor: amazon Vendor: Debian Vendor: F5 Vendor: Oracle Vendor: Red Hat Vendor: SUSE Vendor: Ubuntu Product: BIG-IP Product: Enterprise Linux Product: Enterprise Manager Product: Linux Product: Linux Product: Linux Product: Linux 2 Product: MySQL Product: MySQL Enterprise Monitor Platform: Linux Platform: Windows

Summary

Ein entfernter, authentisierter, entfernter, anonymer oder lokaler Angreifer kann mehrere Schwachstellen in Oracle MySQL ausnutzen, um dadurch die Integrität, Vertraulichkeit und Verfügbarkeit zu gefährden.

Product

MySQL ist ein Open Source Datenbankserver von Oracle.
Der MySQL Enterprise Monitor überwacht kontinuierlich MySQL Anfragen und performaz relevante Server Werte.

Vulnerabilities 30

Unscored —

CVE-2015-0286 EPSS 20%

The ASN1_TYPE_cmp function in crypto/asn1/a_type.c in OpenSSL before 0.9.8zf, 1.0.0 before 1.0.0r, 1.0.1 before 1.0.1m,…

openssl openssl Debian Ubuntu

Mar 19, 2015
Unscored —

CVE-2015-1793 Public exploit EPSS 58%

The X509_verify_cert function in crypto/x509/x509_vfy.c in OpenSSL 1.0.1n, 1.0.1o, 1.0.2b, and 1.0.2c does not properly…

openssl Debian

Jul 9, 2015
Unscored —

CVE-2015-3144 EPSS 11%

The fix_hostname function in cURL and libcurl 7.37.0 through 7.41.0 does not properly calculate an index, which allows …

curl Debian

Apr 24, 2015
Unscored —

CVE-2015-4730

Unspecified vulnerability in Oracle MySQL 5.6.20 and earlier allows remote authenticated users to affect availability v…

percona-server-5.6 percona-xtradb-cluster-5.6 mariadb-10.0 mariadb-5.5 Ubuntu

Oct 21, 2015
Unscored —

CVE-2015-4766

Unspecified vulnerability in Oracle MySQL Server 5.6.25 and earlier allows local users to affect availability via unkno…

percona-server-5.6 percona-xtradb-cluster-5.6 mariadb-10.0 mariadb-5.5 Ubuntu

Oct 21, 2015
Unscored —

CVE-2015-4791

Unspecified vulnerability in Oracle MySQL Server 5.6.26 and earlier allows remote authenticated users to affect availab…

Oct 21, 2015
Unscored —

CVE-2015-4792

Unspecified vulnerability in Oracle MySQL Server 5.5.45 and earlier and 5.6.26 and earlier allows remote authenticated …

percona-server-5.6 percona-xtradb-cluster-5.6 mysql-5.5 mariadb-10.0 Ubuntu

Oct 21, 2015
Unscored —

CVE-2015-4800

Unspecified vulnerability in Oracle MySQL Server 5.6.26 and earlier allows remote authenticated users to affect availab…

percona-server-5.6 percona-xtradb-cluster-5.6 mariadb-10.0 mariadb-5.5 Ubuntu

Oct 21, 2015
Unscored —

CVE-2015-4802

Unspecified vulnerability in Oracle MySQL Server 5.5.45 and earlier and 5.6.26 and earlier allows remote authenticated …

percona-server-5.6 percona-xtradb-cluster-5.6 mysql-5.5 mariadb-10.0 Ubuntu

Oct 21, 2015
Unscored —

CVE-2015-4807

Unspecified vulnerability in Oracle MySQL Server 5.5.45 and earlier and 5.6.26 and earlier, when running on Windows, al…

Oct 21, 2015
Unscored —

CVE-2015-4815

Unspecified vulnerability in Oracle MySQL Server 5.5.45 and earlier and 5.6.26 and earlier allows remote authenticated …

percona-server-5.6 percona-xtradb-cluster-5.6 mysql-5.5 mariadb-10.0 Ubuntu

Oct 21, 2015
Unscored —

CVE-2015-4816

Unspecified vulnerability in Oracle MySQL Server 5.5.44 and earlier allows remote authenticated users to affect availab…

percona-server-5.6 percona-xtradb-cluster-5.6 mysql-5.5 mariadb-10.0 Ubuntu

Oct 21, 2015
Unscored —

CVE-2015-4819

Unspecified vulnerability in Oracle MySQL Server 5.5.44 and earlier, and 5.6.25 and earlier, allows local users to affe…

percona-server-5.6 percona-xtradb-cluster-5.6 mysql-5.5 mariadb-10.0 Ubuntu

Oct 21, 2015
Unscored —

CVE-2015-4826

Unspecified vulnerability in Oracle MySQL Server 5.5.45 and earlier and 5.6.26 and earlier allows remote authenticated …

percona-server-5.6 percona-xtradb-cluster-5.6 mysql-5.5 mariadb-10.0 Ubuntu

Oct 21, 2015
Unscored —

CVE-2015-4830

Unspecified vulnerability in Oracle MySQL Server 5.5.45 and earlier and 5.6.26 and earlier allows remote authenticated …

percona-server-5.6 percona-xtradb-cluster-5.6 mysql-5.5 mariadb-10.0 Ubuntu

Oct 21, 2015
Unscored —

CVE-2015-4833

Unspecified vulnerability in Oracle MySQL Server 5.6.25 and earlier allows remote authenticated users to affect availab…

percona-server-5.6 percona-xtradb-cluster-5.6 mariadb-10.0 mariadb-5.5 Ubuntu

Oct 21, 2015
Unscored —

CVE-2015-4836

Unspecified vulnerability in Oracle MySQL Server 5.5.45 and earlier, and 5.6.26 and earlier, allows remote authenticate…

percona-server-5.6 percona-xtradb-cluster-5.6 mysql-5.5 mariadb-10.0 Ubuntu

Oct 21, 2015
Unscored —

CVE-2015-4858

Unspecified vulnerability in Oracle MySQL Server 5.5.45 and earlier, and 5.6.26 and earlier, allows remote authenticate…

percona-server-5.6 percona-xtradb-cluster-5.6 mysql-5.5 mariadb-10.0 Ubuntu

Oct 21, 2015
Unscored —

CVE-2015-4861

Unspecified vulnerability in Oracle MySQL Server 5.5.45 and earlier, and 5.6.26 and earlier, allows remote authenticate…

percona-server-5.6 percona-xtradb-cluster-5.6 mysql-5.5 mariadb-10.0 Ubuntu

Oct 21, 2015
Unscored —

CVE-2015-4862

Unspecified vulnerability in Oracle MySQL Server 5.6.26 and earlier allows remote authenticated users to affect availab…

percona-server-5.6 percona-xtradb-cluster-5.6 mariadb-10.0 mariadb-5.5 Ubuntu

Oct 21, 2015
Unscored —

CVE-2015-4864

Unspecified vulnerability in Oracle MySQL Server 5.5.43 and earlier and 5.6.24 and earlier allows remote authenticated …

percona-server-5.6 percona-xtradb-cluster-5.6 mysql-5.5 mariadb-10.0 Ubuntu

Oct 21, 2015
Unscored —

CVE-2015-4866

Unspecified vulnerability in Oracle MySQL Server 5.6.23 and earlier allows remote authenticated users to affect availab…

percona-server-5.6 percona-xtradb-cluster-5.6 mariadb-10.0 mariadb-5.5 Ubuntu

Oct 21, 2015
Unscored —

CVE-2015-4870 Public exploit EPSS 30%

Unspecified vulnerability in Oracle MySQL Server 5.5.45 and earlier, and 5.6.26 and earlier, allows remote authenticate…

percona-server-5.6 percona-xtradb-cluster-5.6 mysql-5.5 mariadb-10.0 Ubuntu

Oct 21, 2015
Unscored —

CVE-2015-4879

Unspecified vulnerability in Oracle MySQL Server 5.5.44 and earlier, and 5.6.25 and earlier, allows remote authenticate…

percona-server-5.6 percona-xtradb-cluster-5.6 mysql-5.5 mariadb-10.0 Ubuntu

Oct 21, 2015
Unscored —

CVE-2015-4890

Unspecified vulnerability in Oracle MySQL Server 5.6.26 and earlier allows remote authenticated users to affect availab…

percona-server-5.6 percona-xtradb-cluster-5.6 mariadb-10.0 mariadb-5.5 Ubuntu

Oct 21, 2015
Unscored —

CVE-2015-4895

Unspecified vulnerability in Oracle MySQL Server 5.6.25 and earlier allows remote authenticated users to affect availab…

percona-server-5.6 percona-xtradb-cluster-5.6 mariadb-10.0 mariadb-5.5 Ubuntu

Oct 21, 2015
Unscored —

CVE-2015-4904

Unspecified vulnerability in Oracle MySQL Server 5.6.25 and earlier allows remote authenticated users to affect availab…

percona-server-5.6 percona-xtradb-cluster-5.6 mariadb-10.0 mariadb-5.5 Ubuntu

Oct 21, 2015
Unscored —

CVE-2015-4905

Unspecified vulnerability in Oracle MySQL Server 5.6.23 and earlier allows remote authenticated users to affect availab…

percona-server-5.6 percona-xtradb-cluster-5.6 mariadb-10.0 mariadb-5.5 Ubuntu

Oct 21, 2015
Unscored —

CVE-2015-4910

Unspecified vulnerability in Oracle MySQL Server 5.6.26 and earlier allows remote authenticated users to affect availab…

percona-server-5.6 percona-xtradb-cluster-5.6 mariadb-10.0 mariadb-5.5 Ubuntu

Oct 21, 2015
Unscored —

CVE-2015-4913

Unspecified vulnerability in Oracle MySQL Server 5.5.45 and earlier and 5.6.26 and earlier allows remote authenticated …

percona-server-5.6 percona-xtradb-cluster-5.6 mysql-5.5 mariadb-10.0 Ubuntu

Oct 21, 2015

Revision history

2024-06-30 #20
Neue Updates von Amazon aufgenommen
2016-05-30 #19
New remediations available
2016-05-02 #16
New remediations available
2016-05-02 #17
Version nicht vorhanden
2016-05-02 #18
Version nicht vorhanden
2016-01-17 #14
New remediations available
2016-01-17 #15
Version nicht vorhanden
2015-12-27 #12
New remediations available
2015-12-27 #13
Version nicht vorhanden
2015-12-16 #10
New remediations available
2015-12-16 #11
Version nicht vorhanden
2015-12-14 #8
New remediations available
2015-12-14 #9
Version nicht vorhanden
2015-11-01 #7
New remediations available
2015-10-26 #5
New remediations available
2015-10-26 #6
Version nicht vorhanden
2015-10-25 #3
New remediations available
2015-10-25 #4
Version nicht vorhanden
2015-10-20 #1
Initial Release
2015-10-20 #2
Version nicht vorhanden

References

Oracle Critical Patch Update Advisory - Appendix Oracle MySQL vom 2015-10-20
http://www.oracle.com/technetwork/topics/security/cpuoct2015-2367953.html#AppendixMSQL
Debian Security Advisory DSA-3377 vom 2015-10-24
https://www.debian.org/security/2015/dsa-3377
Ubuntu Security Notice USN-2781-1 vom 2015-10-26
http://www.ubuntu.com/usn/usn-2781-1/
Debian Security Advisory DSA-3385 vom 2015-10-31
https://www.debian.org/security/2015/dsa-3385
F5 Security Advisory SOL08039 vom 2015-12-15
https://support.f5.com/kb/en-us/solutions/public/k/08/sol08039035.html
F5 Security Advisory SOL59010 vom 2015-12-16
https://support.f5.com/kb/en-us/solutions/public/k/59/sol59010802.html
SUSE Security Update SUSE-SU-2015:2303-1 vom 2015-12-24
https://www.suse.com/support/update/announcement/2015/suse-su-20152303-1.html
SUSE Security Update SUSE-SU-2016:0121-1 vom 2016-01-18
https://www.suse.com/support/update/announcement/2016/suse-su-20160121-1.html
Red Hat Security Advisory RHSA-2016:0705-1 vom 2016-05-02
https://rhn.redhat.com/errata/RHSA-2016-0705.html
CXSecurity #WLB-2016050142 vom 2016-05-30
https://cxsecurity.com/issue/WLB-2016050142
Red Hat Security Advisory RHSA-2016:1132-1
http://rhn.redhat.com/errata/RHSA-2016-1132.html
Amazon Linux Security Advisory ALAS-2016-684 vom 2024-06-29
https://alas.aws.amazon.com/ALAS-2016-684.html