KLA10553 Denial of service vulnerabilities in Oracle MySQL

An unspecified vulnerabilities were found in Oracle MySQL. By exploiting these vulnerabilities malicious users can affect availability. These vulnerabilities can be exploited remotely via an unknown vectors related to InnoDB, Federated, DDL, Partition, SP, XA, Encryption and other unknown vectors.

Original advisories

Oracle bulletin

Exploitation

Malware exists for this vulnerability. Usually such malware is classified as Exploit. More details.

Related products

Oracle-MySQL

CVE list

CVE-2014-3569 warning

CVE-2015-0508 warning

CVE-2015-0498 warning

CVE-2015-0499 warning

CVE-2015-0433 warning

CVE-2015-0438 warning

CVE-2015-0439 warning

CVE-2015-0506 warning

CVE-2015-0507 warning

CVE-2015-0505 warning

CVE-2015-0503 warning

CVE-2015-0500 warning

CVE-2015-0501 high

CVE-2015-0405 warning

CVE-2015-0423 warning

CVE-2015-0441 warning

CVE-2015-2573 warning

CVE-2015-2571 warning

CVE-2015-2568 warning

CVE-2015-2567 warning

CVE-2015-2566 warning

CVE-2015-0511 warning

Solution

Update to the latest version

Get MySQL

Impacts

• DoS

Denial of service. Exploitation of vulnerabilities with this impact can lead to loss of system availability or critical functional fault.

• SB

Security bypass. Exploitation of vulnerabilities with this impact can lead to performing actions restricted by current security settings.

• LoI

Loss of integrity. Exploitation of vulnerabilities with this impact can lead to partial system fault or system components connection disruption.

Affected Products

• Oracle MySQL Server 5.6 versions earlier than 5.6.24Oracle MySQL Server versions earlier than 5.5.43