Description
Unspecified vulnerability in Oracle MySQL Server 5.6.24 and earlier allows remote authenticated users to affect availability via vectors related to RBR.
Fixed in Linux distributions
Distributions backport fixes, so the version that fixes this vulnerability differs per release — upgrade to at least the version shown. From the distributions' security trackers and advisories.
Ubuntu
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Ubuntu 16.04 LTS | mariadb-10.0 | 10.0.22-0ubuntu1 | — |
| Ubuntu 16.04 LTS | percona-server-5.6 | No fix yet | — |
| Ubuntu 14.04 LTS | mariadb-5.5 | 5.5.46-1ubuntu0.14.04.2 | — |
| Ubuntu 14.04 LTS | mysql-5.5 | 5.5.44-0ubuntu0.14.04.1 | USN-2674-1 |
| Ubuntu 14.04 LTS | mysql-5.6 | 5.6.27-0ubuntu0.14.04.1 | — |
Red Hat
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| RHEL 2 | rh-mariadb100-mariadb +8 | 1:10.0.20-1.el6 | RHSA-2015:1646 |
| RHEL 2 | rh-mysql56-mysql +7 | 5.6.26-1.el6 | RHSA-2015:1630 |
SUSE
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| SLES 11 SP4 | mysql | 5.5.45-0.11.1 | SUSE-SU-2015:1788-1 |
| SLES 11 SP3 | mysql | 5.5.45-0.11.1 | SUSE-SU-2015:1788-1 |
Show 2 more (older releases, extended support, other products)Fewer releases
| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| SLES for SAP 11 SP4 | mysql | 5.5.45-0.11.1 | SUSE-SU-2015:1788-1 |
| SLES for SAP 11 SP3 | mysql | 5.5.45-0.11.1 | SUSE-SU-2015:1788-1 |
Advisories 4
- RHSA-2015:1646 Red Hat Security Advisory: rh-mariadb100-mariadb security update Red Hat Security Advisories (RHSA) · Jun 29, 2026
- RHSA-2015:1630 Red Hat Security Advisory: rh-mysql56-mysql security update Red Hat Security Advisories (RHSA) · Jun 29, 2026
- USN-2674-1 mysql-5.5, mysql-5.6 vulnerabilities Ubuntu Security Notices (USN) · Apr 27, 2026
- SUSE-SU-2015:1788-1 Security update for mysql SUSE / openSUSE Security Updates · May 2, 2025
References
- http://www.oracle.com/technetwork/topics/security/cpujul2015-2367936.html
- 1032911 vdb-entry
- RHSA-2015:1646 vendor-advisory
- openSUSE-SU-2015:1629 vendor-advisory
- USN-2674-1 vendor-advisory
- GLSA-201610-06 vendor-advisory
- 75835 vdb-entry
- RHSA-2015:1630 vendor-advisory