First published: Thu Jul 16 2015(Updated: )
Unspecified vulnerability in Oracle MySQL Server 5.5.43 and earlier and 5.6.24 and earlier allows remote authenticated users to affect availability via vectors related to DML.
Credit: secalert_us@oracle.com
Affected Software | Affected Version | How to fix |
---|---|---|
MySQL | >=5.5.0<=5.5.43 | |
MySQL | >=5.6.0<=5.6.24 | |
Oracle Solaris SPARC | =11.3 | |
Ubuntu Linux | =12.04 | |
Ubuntu Linux | =14.04 | |
Ubuntu Linux | =14.10 | |
Ubuntu Linux | =15.04 | |
Mariadb Mariadb | >=5.5.0<5.5.44 | |
Mariadb Mariadb | >=10.0.0<10.0.20 | |
Debian Debian Linux | =7.0 | |
Debian Debian Linux | =8.0 | |
openSUSE | =13.1 | |
openSUSE | =13.2 | |
redhat enterprise Linux desktop | =5.0 | |
redhat enterprise Linux desktop | =7.0 | |
redhat enterprise Linux eus | =7.1 | |
redhat enterprise Linux eus | =7.2 | |
redhat enterprise Linux eus | =7.3 | |
redhat enterprise Linux eus | =7.4 | |
redhat enterprise Linux eus | =7.5 | |
redhat enterprise Linux eus | =7.6 | |
redhat enterprise Linux eus | =7.7 | |
redhat enterprise Linux server | =5.0 | |
redhat enterprise Linux server | =7.0 | |
redhat enterprise Linux server aus | =7.3 | |
redhat enterprise Linux server aus | =7.4 | |
redhat enterprise Linux server aus | =7.6 | |
redhat enterprise Linux server aus | =7.7 | |
redhat enterprise Linux server tus | =7.3 | |
redhat enterprise Linux server tus | =7.6 | |
redhat enterprise Linux server tus | =7.7 | |
redhat enterprise Linux workstation | =5.0 | |
redhat enterprise Linux workstation | =7.0 |
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
CVE-2015-2648 has not been assigned a specific severity rating but affects the availability of Oracle MySQL Server.
To address CVE-2015-2648, upgrade to Oracle MySQL Server version 5.5.44 or later, and 5.6.25 or later.
CVE-2015-2648 affects Oracle MySQL Server versions 5.5.43 and earlier, and 5.6.24 and earlier.
There are no publicly available exploits for CVE-2015-2648 reported at this time.
Yes, CVE-2015-2648 can be exploited by remote authenticated users.