MySQL 5.5.x < 5.5.43 / 5.6.x < 5.6.24 Multiple DoS Vulnerabilities (April 2015 CPU)
medium Nessus Plugin ID 82800
Language:
New! Vulnerability Priority Rating (VPR)
Tenable calculates a dynamic VPR for every vulnerability. VPR combines vulnerability information with threat intelligence and machine learning algorithms to predict which vulnerabilities are most likely to be exploited in attacks. Read more about what VPR is and how it is different from CVSS.
VPR Score: 3.7
Synopsis
The remote database server is affected by multiple denial of service vulnerabilities.Description
The version of MySQL running on the remote host is version 5.5.x prior to 5.5.43 or version 5.6.x prior to 5.6.24. It is, therefore, potentially affected by unspecified flaws in the following MySQL subcomponents that allow a denial of service by an authenticated, remote attacker :- Replication (CVE-2015-0498)
- Federated (CVE-2015-0499)
- Information Schema (CVE-2015-0500)
- Compiling (CVE-2015-0501)
- Partition (CVE-2015-0503)
- DDL (CVE-2015-0505)
- InnoDB (CVE-2015-0506, CVE-2015-0508)
- Memcached (CVE-2015-0507)
- SP (CVE-2015-0511)
- Security : Privileges (CVE-2015-2567)
- Optimizer (CVE-2015-2571)
Solution
Upgrade to MySQL version 5.5.43 / 5.6.24 or later as referenced in the Oracle April 2015 Critical Patch Update advisory.See Also
Plugin Details
Severity: Medium
ID: 82800
File Name: mysql_5_6_24.nasl
Version: 1.9
Type: remote
Family: Databases
Published: 4/15/2015
Updated: 11/15/2018
Configuration: Enable paranoid mode
Risk Information
Risk Factor: Medium
VPR Score: 3.7
CVSS v2.0
Base Score: 5.7
Temporal Score: 4.2
Vector: AV:N/AC:M/Au:M/C:N/I:N/A:C
Temporal Vector: E:U/RL:OF/RC:C
Vulnerability Information
CPE: cpe:/a:oracle:mysql
Required KB Items: Settings/ParanoidReport
Exploit Ease: No known exploits are available
Patch Publication Date: 4/14/2015
Vulnerability Publication Date: 4/14/2015
Reference Information
CVE: CVE-2015-0498, CVE-2015-0499, CVE-2015-0500, CVE-2015-0501, CVE-2015-0503, CVE-2015-0505, CVE-2015-0506, CVE-2015-0507, CVE-2015-0508, CVE-2015-0511, CVE-2015-2567, CVE-2015-2571
BID: 74070, 74081, 74086, 74095, 74102, 74112, 74115, 74120, 74121, 74123, 74130, 74133