Oracle MySQL Server CVE-2015-2568 Remote Security Vulnerability
BID:74073
Info
Oracle MySQL Server CVE-2015-2568 Remote Security Vulnerability
| Bugtraq ID: | 74073 |
| Class: | Unknown |
| CVE: |
CVE-2015-2568 |
| Remote: | Yes |
| Local: | No |
| Published: | Apr 14 2015 12:00AM |
| Updated: | Oct 26 2016 01:13AM |
| Credit: | Oracle |
| Vulnerable: |
Ubuntu Ubuntu Linux 14.10 Ubuntu Ubuntu Linux 14.04 LTS Ubuntu Ubuntu Linux 12.04 LTS i386 Ubuntu Ubuntu Linux 12.04 LTS amd64 SuSE SUSE Linux Enterprise Software Development Kit 11 SP3 SuSE SUSE Linux Enterprise Server for VMware 11 SP3 SuSE SUSE Linux Enterprise Server 11 SP3 SuSE Suse Linux Enterprise Desktop 11 SP3 Slackware Slackware Linux 14.1 Slackware Linux x86_64 -current Slackware Linux 14.1 x86_64 Slackware Linux 14.0 x86_64 Slackware Linux 14.0 Slackware Linux -current S.u.S.E. openSUSE 13.2 S.u.S.E. openSUSE 13.1 Redhat Software Collections 1 for RHEL 7 0 Redhat Software Collections 1 for RHEL 6 0 Redhat Enterprise Linux Workstation 7 Redhat Enterprise Linux Server 7 Redhat Enterprise Linux HPC Node 7 Redhat Enterprise Linux Desktop Workstation 5 client Redhat Enterprise Linux Desktop 7 Redhat Enterprise Linux Desktop 5 client Redhat Enterprise Linux 5 Server Oracle MySQL Server 5.6.22 Oracle MySQL Server 5.6.21 Oracle MySQL Server 5.5.41 Oracle MySQL Server 5.5.40 Oracle MySQL Server 5.6.16 Oracle MySQL Server 5.6.15 Oracle MySQL Server 5.6 Oracle MySQL Server 5.5.36 Oracle MySQL Server 5.5.35 Oracle Enterprise Linux 7 Oracle Enterprise Linux 5 Oracle Communications Policy Management 12.1.1 Oracle Communications Policy Management 10.4.1 Oracle Communications Policy Management 9.9.1 Oracle Communications Policy Management 9.7.3 IBM Tivoli Network Manager 3.9 IBM Tivoli Network Manager 3.8 Gentoo Linux Debian Linux 6.0 sparc Debian Linux 6.0 s/390 Debian Linux 6.0 powerpc Debian Linux 6.0 mips Debian Linux 6.0 ia-64 Debian Linux 6.0 ia-32 Debian Linux 6.0 arm Debian Linux 6.0 amd64 CentOS CentOS 7 CentOS CentOS 5 |
| Not Vulnerable: | |
Discussion
Oracle MySQL Server CVE-2015-2568 Remote Security Vulnerability
Oracle MySQL Server is prone to a remote security vulnerability.
The vulnerability can be exploited over the 'MySQL Protocol' protocol. The 'Server : Security : Privileges' sub component is affected.
This vulnerability affects the following supported versions:
5.5.41 and earlier, 5.6.22 and earlier
Oracle MySQL Server is prone to a remote security vulnerability.
The vulnerability can be exploited over the 'MySQL Protocol' protocol. The 'Server : Security : Privileges' sub component is affected.
This vulnerability affects the following supported versions:
5.5.41 and earlier, 5.6.22 and earlier
Exploit / POC
Oracle MySQL Server CVE-2015-2568 Remote Security Vulnerability
Currently we are not aware of any working exploits. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].
Currently we are not aware of any working exploits. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].
Solution / Fix
Oracle MySQL Server CVE-2015-2568 Remote Security Vulnerability
Solution:
Updates are available. Please see the references or vendor advisory for more information.
Slackware Linux x86_64 -current
Slackware Linux -current
Slackware Linux 14.1 x86_64
Slackware Linux 14.0 x86_64
Slackware Slackware Linux 14.1
Slackware Linux 14.0
Solution:
Updates are available. Please see the references or vendor advisory for more information.
Slackware Linux x86_64 -current
-
Slackware mariadb-10.0.18-x86_64-1.txz
ftp://ftp.slackware.com/pub/slackware/slackware64-current/slackware64/ ap/mariadb-10.0.18-x86_64-1.txz
Slackware Linux -current
-
Slackware mariadb-10.0.18-i586-1.txz
ftp://ftp.slackware.com/pub/slackware/slackware-current/slackware/ap/m ariadb-10.0.18-i586-1.txz
Slackware Linux 14.1 x86_64
-
Slackware mariadb-5.5.43-x86_64-1_slack14.1.txz
ftp://ftp.slackware.com/pub/slackware/slackware64-14.1/patches/package s/mariadb-5.5.43-x86_64-1_slack14.1.txz
Slackware Linux 14.0 x86_64
-
Slackware mysql-5.5.43-x86_64-1_slack14.0.txz
ftp://ftp.slackware.com/pub/slackware/slackware64-14.0/patches/package s/mysql-5.5.43-x86_64-1_slack14.0.txz
Slackware Slackware Linux 14.1
-
Slackware mariadb-5.5.43-i486-1_slack14.1.txz
ftp://ftp.slackware.com/pub/slackware/slackware-14.1/patches/packages/ mariadb-5.5.43-i486-1_slack14.1.txz
Slackware Linux 14.0
-
Slackware mysql-5.5.43-i486-1_slack14.0.txz
ftp://ftp.slackware.com/pub/slackware/slackware-14.0/patches/packages/ mysql-5.5.43-i486-1_slack14.0.txz
References
Oracle MySQL Server CVE-2015-2568 Remote Security Vulnerability
References:
References:
- Oracle Homepage (Oracle)
- Critical Patch Security Advisory - October 2016 (Oracle)
- Moderate: mariadb security update (Red Hat)
- Oracle Critical Patch Update Advisory - April 2015 (Oracle)
- RHSA-2015:1647 Moderate: mariadb55-mariadb security update (Red Hat)
- Security vulnerabilities have been identified in Oracle MySQL shipped with IBM T (IBM)