6915 matches found
MGASA-2016-0182 Updated mariadb packages fix security vulnerabilities
Updated mariadb packages fix security vulnerabilities: The mariadb package has been updated to version 10.0.25. It fixes several security issues CVE-2016-0643, CVE-2016-0647, CVE-2016-0648, CVE-2016-0655, CVE-2016-0666 and other bugs. See the upstream release notes for details...
CVE-2015-3152
Oracle MySQL before 5.7.3, Oracle MySQL Connector/C aka libmysqlclient before 6.1.3, and MariaDB before 5.5.44 use the --ssl option to mean that SSL is optional, which allows man-in-the-middle attackers to spoof servers via a cleartext-downgrade attack, aka a "BACKRONYM" attack...
CVE-2015-3152
Oracle MySQL before 5.7.3, Oracle MySQL Connector/C aka libmysqlclient before 6.1.3, and MariaDB before 5.5.44 use the --ssl option to mean that SSL is optional, which allows man-in-the-middle attackers to spoof servers via a cleartext-downgrade attack, aka a "BACKRONYM" attack...
Buffer overflow
Oracle MySQL before 5.7.3, Oracle MySQL Connector/C aka libmysqlclient before 6.1.3, and MariaDB before 5.5.44 use the --ssl option to mean that SSL is optional, which allows man-in-the-middle attackers to spoof servers via a cleartext-downgrade attack, aka a "BACKRONYM" attack...
UBUNTU-CVE-2015-3152
Oracle MySQL before 5.7.3, Oracle MySQL Connector/C aka libmysqlclient before 6.1.3, and MariaDB before 5.5.44 use the --ssl option to mean that SSL is optional, which allows man-in-the-middle attackers to spoof servers via a cleartext-downgrade attack, aka a "BACKRONYM" attack...
CVE-2015-3152
The CVE-2015-3152 issue affects MySQL client libraries where the --ssl flag is treated as optional, allowing a MITM downgrade to cleartext SSL and server spoofing. Affected products/versions include Oracle MySQL prior to 5.7.3, Oracle MySQL Connector/C (libmysqlclient) prior to 6.1.3, and MariaDB...
CVE-2015-3152
Disclaimer: This data contains information about vulnerable...
CVE-2015-3152
Oracle MySQL before 5.7.3, Oracle MySQL Connector/C aka libmysqlclient before 6.1.3, and MariaDB before 5.5.44 use the --ssl option to mean that SSL is optional, which allows man-in-the-middle attackers to spoof servers via a cleartext-downgrade attack, aka a "BACKRONYM" attack...
MariaDB Server 10.0.x < 10.0.21 / 10.1.x < 10.1.7 DoS (deprecated)
Binary data 9300.prm...
MariaDB Server 10.1.x < 10.1.7 Multiple DoS Vulnerabilities
Binary data 9289.prm...
MariaDB Server 10.1.x < 10.1.6 Multiple DoS Vulnerabilities
Binary data 9288.prm...
MariaDB Server 5.5.x < 5.5.33 / 5.6.x < 5.6.13 SQL Injection
Binary data 9277.prm...
MariaDB Server 10.0.x < 10.0.21 Multiple Vulnerabilities
Binary data 9283.prm...
MariaDB Server 10.0.x < 10.0.23 Multiple DoS
Binary data 9285.prm...
MariaDB Server 10.1.x < 10.1.10 Multiple Vulnerabilities
Binary data 9291.prm...
MariaDB Server 10.1.x < 10.1.13 Multiple DoS
Binary data 9294.prm...
MariaDB Server 10.1.x < 10.1.12 Multiple DoS
Binary data 9293.prm...
MariaDB Server 5.5.x < 5.5.48 / 10.0.x < 10.0.24 / 10.1.x < 10.1.12 Multiple DoS
Binary data 9280.prm...