CVE-2015-0411
High
Description
Unspecified vulnerability in Oracle MySQL Server 5.5.40 and earlier, and 5.6.21 and earlier, allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Server : Security : Encryption.
SeverityHigh
CVSS7.5
Exploit probability—
Product
Oracle Mysql
PublishedJan 21, 2015
First seenJan 21, 2015
How to fix
Update
- mariadb mariadb5.5.41, 10.0.16 or later
Vendor advisories
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| oracle mysql | 5.5.0 ≤ v ≤ 5.5.40, 5.6.0 ≤ v ≤ 5.6.21 | — |
| canonical ubuntu_linux | 12.04, 14.04, 14.10 | — |
| debian debian_linux | 7.0 | — |
| fedoraproject fedora | 20 | — |
| redhat enterprise_linux | 7.0 | — |
| oracle communications_policy_management | v ≤ 9.7.3, 9.9.1, 10.4.1, 12.1.1 | — |
| oracle solaris | 11.3 | — |
| mariadb mariadb | 5.5.0 ≤ v < 5.5.41, 10.0.0 ≤ v < 10.0.16 | 5.5.41, 10.0.16 |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
In the Intelligence 360 plan
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.