CVE-2015-0500
published 2015-04-16CVE-2015-0500: Unspecified vulnerability in Oracle MySQL Server 5.6.23 and earlier allows remote authenticated users to affect availability via unknown vectors.
PriorityP416medium4CVSS 2.0
AVNACLAuSCNINAP
EPSS
2.44%
82.5th percentile
Unspecified vulnerability in Oracle MySQL Server 5.6.23 and earlier allows remote authenticated users to affect availability via unknown vectors.
Affected
8 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| oracle | communications_policy_management | <= 9.7.3 | — |
| oracle | communications_policy_management | — | — |
| oracle | communications_policy_management | — | — |
| oracle | communications_policy_management | — | — |
| oracle | mysql | <= 5.6.23 | — |
| suse | suse_linux_enterprise_desktop | — | — |
| suse | suse_linux_enterprise_server | — | — |
| suse | suse_linux_enterprise_software_development_kit | — | — |
CVSS provenance
nvdv2.04.0MEDIUMAV:N/AC:L/Au:S/C:N/I:N/A:P
osv4.0MEDIUM
vendor_redhat4.0MEDIUM
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
Red Hat
mysql: unspecified vulnerability related to Server:Information Schema (CPU April 2015)
vendor_redhat·2015-04-15·CVSS 4.0
CVE-2015-0500 [MEDIUM] mysql: unspecified vulnerability related to Server:Information Schema (CPU April 2015)
mysql: unspecified vulnerability related to Server:Information Schema (CPU April 2015)
Unspecified vulnerability in Oracle MySQL Server 5.6.23 and earlier allows remote authenticated users to affect availability via unknown vectors.
Statement: This issue did not affect the versions of mysql or mysql55 as shipped with Red Hat Enterprise Linux 5, 6 or 7 as it only affects MySQL 5.6.x which are not shipped with these versions of Red Hat Enterprise Linux.
Package: mysql55-mysql (Red Hat Enterprise Linux 5) - Not affected
Package: mysql (Red Hat Enterprise Linux 6) - Not affected
Package: mariadb (Red Hat Enterprise Linux 7) - Not affected
Package: mariadb-galera (Red Hat Enterprise Linux OpenStack Platform 5 (Icehouse)) - Not affected
Package: mariadb-galera (Red Hat Enterprise Linux Op
GHSA
GHSA-r55g-hwj5-8wmc: Unspecified vulnerability in Oracle MySQL Server 5
ghsa_unreviewed·2022-05-17
CVE-2015-0500 [MEDIUM] GHSA-r55g-hwj5-8wmc: Unspecified vulnerability in Oracle MySQL Server 5
Unspecified vulnerability in Oracle MySQL Server 5.6.23 and earlier allows remote authenticated users to affect availability via unknown vectors.
OSV
CVE-2015-0500: Unspecified vulnerability in Oracle MySQL Server 5
osv·2015-04-16·CVSS 4.0
CVE-2015-0500 [MEDIUM] CVE-2015-0500: Unspecified vulnerability in Oracle MySQL Server 5
Unspecified vulnerability in Oracle MySQL Server 5.6.23 and earlier allows remote authenticated users to affect availability via unknown vectors.
No detection rules found.
No public exploits indexed.
Bugzilla
CVE-2015-8816 kernel: USB hub invalid memory access in hub_activate()
bugzilla·2016-02-24·CVSS 6.8
CVE-2015-8816 [MEDIUM] CVE-2015-8816 kernel: USB hub invalid memory access in hub_activate()
CVE-2015-8816 kernel: USB hub invalid memory access in hub_activate()
Quickly plugging in and unplugging a USB hub can lead to a null
pointer dereference in kernel (local denial of service) or the USB
port to which the hub is connected becomes unusable, for kernel
versions 2.6.32
Date: Wed Dec 16 13:32:38 2015 -0500
USB: fix invalid memory access in hub_activate()
commit e50293ef9775c5f1cf3fcc093037dd6a8c5684ea upstream.
Fedora 22 is the only branch still on the 4.3.y kernel series and it is already at 4.3.5 or newer. The remainder of the Fedora branches already contain this fix.
---
Statement:
This issue does not affect the Linux kernel packages as shipped with Red Hat Enterprise Linux 5 as the code with the flaw is not present in the products listed.
This issue affects the Linux
Bugzilla
CVE-2015-0500 mysql: unspecified vulnerability related to Server:Information Schema (CPU April 2015)
bugzilla·2015-04-17·CVSS 4.0
CVE-2015-0500 [MEDIUM] CVE-2015-0500 mysql: unspecified vulnerability related to Server:Information Schema (CPU April 2015)
CVE-2015-0500 mysql: unspecified vulnerability related to Server:Information Schema (CPU April 2015)
Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server : Information Schema). Supported versions that are affected are 5.6.23 and earlier. Easily exploitable vulnerability allows successful authenticated network attacks via multiple protocols. Successful attack of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server.
External References:
http://www.oracle.com/technetwork/topics/security/cpuapr2015-2365600.html#AppendixMSQL
Discussion:
Statement:
This issue did not affect the versions of mysql or mysql55 as shipped with Red Hat Enterprise Linux 5, 6 or 7 as it only affects MySQL 5.
Bugzilla
CVE-2015-1472 glibc: heap buffer overflow in glibc swscanf
bugzilla·2015-02-02·CVSS 7.5
CVE-2015-1472 [HIGH] CVE-2015-1472 glibc: heap buffer overflow in glibc swscanf
CVE-2015-1472 glibc: heap buffer overflow in glibc swscanf
Heap buffer overflow was reported [1] in glibc stdio-common/vfscanf.c.
stdio-common/vfscanf.c has an ADDW macro that tries to determine whether to use malloc or alloca for allocations. But in the malloc case, it only allocates newsize bytes instead of the required newsize * sizeof (CHAR_T). Thus the allocated buffer gets overrun in the wide-string case, as shown in the following testcase:
int
main (void)
{
wchar_t *s = malloc ((SIZE + 1) * sizeof (*s));
if (s == NULL)
abort ();
for (size_t i = 0; i
Date: Fri Feb 6 00:30:42 2015 -0500
CVE-2015-1472: wscanf allocates too little memory
BZ #16618
Under certain conditions wscanf can allocate too little memory for the
to-be-scanned arguments and overflow the allocated buffer. The
i
http://lists.opensuse.org/opensuse-security-announce/2015-05/msg00026.htmlhttp://www.oracle.com/technetwork/security-advisory/cpuoct2016-2881722.htmlhttp://www.oracle.com/technetwork/topics/security/cpuapr2015-2365600.htmlhttp://www.securityfocus.com/bid/74081http://www.securitytracker.com/id/1032121https://security.gentoo.org/glsa/201507-19http://lists.opensuse.org/opensuse-security-announce/2015-05/msg00026.htmlhttp://www.oracle.com/technetwork/security-advisory/cpuoct2016-2881722.htmlhttp://www.oracle.com/technetwork/topics/security/cpuapr2015-2365600.htmlhttp://www.securityfocus.com/bid/74081http://www.securitytracker.com/id/1032121https://security.gentoo.org/glsa/201507-19
2015-04-16
Published