CVE-2015-0423
published 2015-04-16CVE-2015-0423: Unspecified vulnerability in Oracle MySQL Server 5.6.22 and earlier allows remote authenticated users to affect availability via unknown vectors related to…
PriorityP416medium4CVSS 2.0
AVNACLAuSCNINAP
EPSS
2.29%
81.3th percentile
Unspecified vulnerability in Oracle MySQL Server 5.6.22 and earlier allows remote authenticated users to affect availability via unknown vectors related to Optimizer.
Affected
8 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| novell | suse_linux_enterprise_desktop | — | — |
| novell | suse_linux_enterprise_server | — | — |
| novell | suse_linux_enterprise_software_development_kit | — | — |
| oracle | communications_policy_management | <= 9.7.3 | — |
| oracle | communications_policy_management | — | — |
| oracle | communications_policy_management | — | — |
| oracle | communications_policy_management | — | — |
| oracle | mysql | <= 5.6.22 | — |
CVSS provenance
nvdv2.04.0MEDIUMAV:N/AC:L/Au:S/C:N/I:N/A:P
osv4.0MEDIUM
vendor_redhat4.0MEDIUM
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
GHSA
GHSA-j4rx-r23q-g4hh: Unspecified vulnerability in Oracle MySQL Server 5
ghsa_unreviewed·2022-05-17
CVE-2015-0423 [MEDIUM] GHSA-j4rx-r23q-g4hh: Unspecified vulnerability in Oracle MySQL Server 5
Unspecified vulnerability in Oracle MySQL Server 5.6.22 and earlier allows remote authenticated users to affect availability via unknown vectors related to Optimizer.
OSV
CVE-2015-0423: Unspecified vulnerability in Oracle MySQL Server 5
osv·2015-04-16·CVSS 4.0
CVE-2015-0423 [MEDIUM] CVE-2015-0423: Unspecified vulnerability in Oracle MySQL Server 5
Unspecified vulnerability in Oracle MySQL Server 5.6.22 and earlier allows remote authenticated users to affect availability via unknown vectors related to Optimizer.
Red Hat
mysql: unspecified vulnerability related to Server:Optimizer (CPU April 2015)
vendor_redhat·2015-04-15·CVSS 4.0
CVE-2015-0423 [MEDIUM] mysql: unspecified vulnerability related to Server:Optimizer (CPU April 2015)
mysql: unspecified vulnerability related to Server:Optimizer (CPU April 2015)
Unspecified vulnerability in Oracle MySQL Server 5.6.22 and earlier allows remote authenticated users to affect availability via unknown vectors related to Optimizer.
Statement: This issue did not affect the versions of mysql or mysql55 as shipped with Red Hat Enterprise Linux 5, 6 or 7 as it only affects MySQL 5.6.x which are not shipped with these versions of Red Hat Enterprise Linux.
Package: mysql55-mysql (Red Hat Enterprise Linux 5) - Not affected
Package: mysql (Red Hat Enterprise Linux 6) - Not affected
Package: mariadb (Red Hat Enterprise Linux 7) - Not affected
Package: mariadb-galera (Red Hat Enterprise Linux OpenStack Platform 5 (Icehouse)) - Not affected
Package: mariadb-galera (Red Hat Enterpr
No detection rules found.
No public exploits indexed.
http://lists.opensuse.org/opensuse-security-announce/2015-05/msg00026.htmlhttp://www.oracle.com/technetwork/security-advisory/cpuoct2016-2881722.htmlhttp://www.oracle.com/technetwork/topics/security/cpuapr2015-2365600.htmlhttp://www.securitytracker.com/id/1032121https://security.gentoo.org/glsa/201507-19http://lists.opensuse.org/opensuse-security-announce/2015-05/msg00026.htmlhttp://www.oracle.com/technetwork/security-advisory/cpuoct2016-2881722.htmlhttp://www.oracle.com/technetwork/topics/security/cpuapr2015-2365600.htmlhttp://www.securitytracker.com/id/1032121https://security.gentoo.org/glsa/201507-19
2015-04-16
Published