CVE-2015-2648: Medium severity mysql vulnerability
Published Jul 16, 2015
·Updated
Unspecified vulnerability in Oracle MySQL Server 5.5.43 and earlier and 5.6.24 and earlier allows remote authenticated users to affect availability via vectors related to DML.
Affected Software
33 affected components
Oracle MySQL>=5.5.0<=5.5.43
Oracle MySQL>=5.6.0<=5.6.24
Oracle Solaris=11.3
Canonical Ubuntu Linux=12.04
Canonical Ubuntu Linux=14.04
Canonical Ubuntu Linux=14.10
Canonical Ubuntu Linux=15.04
MariaDB MariaDB>=5.5.0<5.5.44
MariaDB MariaDB>=10.0.0<10.0.20
Debian Debian Linux=7.0
Debian Debian Linux=8.0
openSUSE openSUSE=13.1
openSUSE openSUSE=13.2
redhat Enterprise Linux Desktop=5.0
redhat Enterprise Linux Desktop=7.0
redhat Enterprise Linux Eus=7.1
redhat Enterprise Linux Eus=7.2
redhat Enterprise Linux Eus=7.3
redhat Enterprise Linux Eus=7.4
redhat Enterprise Linux Eus=7.5
redhat Enterprise Linux Eus=7.6
redhat Enterprise Linux Eus=7.7
redhat Enterprise Linux Server=5.0
redhat Enterprise Linux Server=7.0
redhat Enterprise Linux Server Aus=7.3
redhat Enterprise Linux Server Aus=7.4
redhat Enterprise Linux Server Aus=7.6
redhat Enterprise Linux Server Aus=7.7
redhat Enterprise Linux Server Tus=7.3
redhat Enterprise Linux Server Tus=7.6
redhat Enterprise Linux Server Tus=7.7
redhat Enterprise Linux Workstation=5.0
redhat Enterprise Linux Workstation=7.0
Remediation
Event History
Jul 16, 2015
CVE Published
via MITRE·10:00 AM
Data Sourced
via MITRE·10:00 AM
Description
Frequently Asked Questions
1
What is the severity of CVE-2015-2648?
CVE-2015-2648 has not been assigned a specific severity rating but affects the availability of Oracle MySQL Server.
2
How do I fix CVE-2015-2648?
To address CVE-2015-2648, upgrade to Oracle MySQL Server version 5.5.44 or later, and 5.6.25 or later.
3
What versions of MySQL are affected by CVE-2015-2648?
CVE-2015-2648 affects Oracle MySQL Server versions 5.5.43 and earlier, and 5.6.24 and earlier.
4
Are there any known exploits for CVE-2015-2648?
There are no publicly available exploits for CVE-2015-2648 reported at this time.
5
Can CVE-2015-2648 be exploited remotely?
Yes, CVE-2015-2648 can be exploited by remote authenticated users.