CVE-2015-3152

Oracle MySQL before 5.7.3, Oracle MySQL Connector/C (aka libmysqlclient) before 6.1.3, and MariaDB before 5.5.44 use the --ssl option to mean that SSL is optional, which allows man-in-the-middle attackers to spoof servers via a cleartext-downgrade attack, aka a "BACKRONYM" attack.
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTPrimary
5.9 MEDIUM
NETWORK
HIGH
NONE
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N
Base Score
CVSS 3.x
EPSS Score
Percentile: 97%
Affected Products (NVD)
VendorProductVersion
oraclemysql
𝑥
≤ 5.7.2
oraclemysql_connector\/c
𝑥
≤ 6.1.2
mariadbmariadb
5.5.0 ≤
𝑥
< 5.5.44
mariadbmariadb
10.0.0 ≤
𝑥
< 10.0.20
debiandebian_linux
8.0
redhatenterprise_linux_desktop
7.0
redhatenterprise_linux_eus
7.1
redhatenterprise_linux_eus
7.2
redhatenterprise_linux_eus
7.3
redhatenterprise_linux_eus
7.4
redhatenterprise_linux_eus
7.5
redhatenterprise_linux_eus
7.6
redhatenterprise_linux_eus
7.7
redhatenterprise_linux_server
7.0
redhatenterprise_linux_server_aus
7.3
redhatenterprise_linux_server_aus
7.4
redhatenterprise_linux_server_aus
7.6
redhatenterprise_linux_server_aus
7.7
redhatenterprise_linux_server_tus
7.3
redhatenterprise_linux_server_tus
7.6
redhatenterprise_linux_server_tus
7.7
redhatenterprise_linux_workstation
7.0
phpphp
5.4.0 ≤
𝑥
< 5.4.43
phpphp
5.5.0 ≤
𝑥
< 5.5.27
phpphp
5.6.0 ≤
𝑥
< 5.6.11
𝑥
= Vulnerable software versions
Ubuntu logo
Ubuntu Releases
Ubuntu Product
Codename
mariadb-10.0
artful
dne
bionic
dne
cosmic
dne
disco
dne
eoan
dne
focal
dne
groovy
dne
hirsute
dne
impish
dne
jammy
dne
lucid
dne
mantic
dne
noble
dne
precise
dne
trusty
dne
utopic
dne
vivid
Fixed 10.0.20-0ubuntu0.15.04.1
released
wily
Fixed 10.0.22-0ubuntu0.15.10.1
released
xenial
Fixed 10.0.22-0ubuntu1
released
yakkety
Fixed 10.0.22-0ubuntu1
released
zesty
dne
mariadb-5.5
artful
dne
bionic
dne
cosmic
dne
disco
dne
eoan
dne
focal
dne
groovy
dne
hirsute
dne
impish
dne
jammy
dne
lucid
dne
mantic
dne
noble
dne
precise
dne
trusty
Fixed 5.5.44-1ubuntu0.14.04.1
released
utopic
Fixed 5.5.44-1ubuntu0.14.10.1
released
vivid
dne
wily
dne
xenial
dne
yakkety
dne
zesty
dne
mysql-5.5
artful
dne
bionic
dne
cosmic
dne
disco
dne
eoan
dne
focal
dne
groovy
dne
hirsute
dne
impish
dne
jammy
dne
lucid
dne
mantic
dne
noble
dne
precise
ignored
trusty
ignored
utopic
ignored
vivid
dne
wily
dne
xenial
dne
yakkety
dne
zesty
dne
mysql-5.6
artful
dne
bionic
dne
cosmic
dne
disco
dne
eoan
dne
focal
dne
groovy
dne
hirsute
dne
impish
dne
jammy
dne
lucid
dne
mantic
dne
noble
dne
precise
dne
trusty
dne
utopic
ignored
vivid
ignored
wily
ignored
xenial
dne
yakkety
dne
zesty
dne
mysql-dfsg-5.1
artful
dne
bionic
dne
cosmic
dne
disco
dne
eoan
dne
focal
dne
groovy
dne
hirsute
dne
impish
dne
jammy
dne
lucid
ignored
mantic
dne
noble
dne
precise
dne
trusty
dne
utopic
dne
vivid
dne
wily
dne
xenial
dne
yakkety
dne
zesty
dne
percona-server-5.6
artful
ignored
bionic
dne
cosmic
dne
disco
dne
eoan
dne
focal
dne
groovy
dne
hirsute
dne
impish
dne
jammy
dne
lucid
dne
mantic
dne
noble
dne
precise
dne
trusty
dne
utopic
dne
vivid
ignored
wily
ignored
xenial
needed
yakkety
ignored
zesty
ignored
percona-xtradb-cluster-5.5
artful
dne
bionic
dne
cosmic
dne
disco
dne
eoan
dne
focal
dne
groovy
dne
hirsute
dne
impish
dne
jammy
dne
lucid
dne
mantic
dne
noble
dne
precise
dne
trusty
dne
utopic
ignored
vivid
dne
wily
dne
xenial
dne
yakkety
dne
zesty
dne
openSUSE logo
openSUSE / SLES Releases
openSUSE Product
Release
apache2-mod_php7
suse enterprise sap 15 SP4
7.4.25-150400.2.8
fixed
suse enterprise sap 15 SP5
7.4.33-150400.4.22.1
fixed
suse enterprise sap 15 SP6
7.4.33-150400.4.34.1
fixed
suse enterprise sap 15 SP7
7.4.33-150400.4.48.1
fixed
suse enterprise server 15 SP4
7.4.25-150400.2.8
fixed
suse enterprise server 15 SP5
7.4.33-150400.4.22.1
fixed
suse enterprise server 15 SP6
7.4.33-150400.4.34.1
fixed
suse enterprise server 15 SP7
7.4.33-150400.4.48.1
fixed
libmysqlclient18
suse enterprise sap 12
10.0.20-18.1
fixed
suse enterprise sap 12 SP5
10.0.40.1-2.9.1
fixed
suse enterprise server 12
10.0.20-18.1
fixed
suse enterprise server 12 SP5
10.0.40.1-2.9.1
fixed
libmysqlclient18-32bit
suse enterprise sap 12
10.0.20-18.1
fixed
suse enterprise sap 12 SP5
10.0.40.1-2.9.1
fixed
suse enterprise server 12
10.0.20-18.1
fixed
suse enterprise server 12 SP5
10.0.40.1-2.9.1
fixed
libmysqlclient_r18
suse enterprise desktop 12
10.0.20-18.1
fixed
suse enterprise desktop 12 SP1
10.0.21-1.17
fixed
suse enterprise desktop 12 SP2
10.0.27-12.1
fixed
suse enterprise desktop 12 SP3
10.0.30-28.1
fixed
suse enterprise desktop 12 SP4
10.0.35-1.7
fixed
suse enterprise sap 12
10.0.20-18.1
fixed
suse enterprise sap 12 SP1
10.0.21-1.17
fixed
suse enterprise sap 12 SP2
10.0.27-12.1
fixed
suse enterprise sap 12 SP3
10.0.30-28.1
fixed
suse enterprise sap 12 SP4
10.0.35-1.7
fixed
suse enterprise sap 12 SP5
10.0.40.1-2.9.1
fixed
suse enterprise server 12
10.0.20-18.1
fixed
suse enterprise server 12 SP1
10.0.21-1.17
fixed
suse enterprise server 12 SP2
10.0.27-12.1
fixed
suse enterprise server 12 SP3
10.0.30-28.1
fixed
suse enterprise server 12 SP4
10.0.35-1.7
fixed
suse enterprise server 12 SP5
10.0.40.1-2.9.1
fixed
suse enterprise workstation 12
10.0.20-18.1
fixed
suse enterprise workstation 12 SP1
10.0.21-1.17
fixed
suse enterprise workstation 12 SP2
10.0.27-12.1
fixed
suse enterprise workstation 12 SP3
10.0.30-28.1
fixed
suse enterprise workstation 12 SP4
10.0.35-1.7
fixed
suse enterprise workstation 12 SP5
10.0.40.1-2.9.1
fixed
libmysqlclient_r18-32bit
suse enterprise desktop 12
10.0.20-18.1
fixed
suse enterprise desktop 12 SP1
10.0.21-1.17
fixed
suse enterprise desktop 12 SP2
10.0.27-12.1
fixed
suse enterprise desktop 12 SP3
10.0.30-28.1
fixed
suse enterprise desktop 12 SP4
10.0.35-1.7
fixed
suse enterprise sap 12
10.0.20-18.1
fixed
suse enterprise sap 12 SP1
10.0.21-1.17
fixed
suse enterprise sap 12 SP2
10.0.27-12.1
fixed
suse enterprise sap 12 SP3
10.0.30-28.1
fixed
suse enterprise sap 12 SP4
10.0.35-1.7
fixed
suse enterprise sap 12 SP5
10.0.40.1-2.9.1
fixed
suse enterprise server 12
10.0.20-18.1
fixed
suse enterprise server 12 SP1
10.0.21-1.17
fixed
suse enterprise server 12 SP2
10.0.27-12.1
fixed
suse enterprise server 12 SP3
10.0.30-28.1
fixed
suse enterprise server 12 SP4
10.0.35-1.7
fixed
suse enterprise server 12 SP5
10.0.40.1-2.9.1
fixed
suse enterprise workstation 12
10.0.20-18.1
fixed
suse enterprise workstation 12 SP1
10.0.21-1.17
fixed
suse enterprise workstation 12 SP2
10.0.27-12.1
fixed
suse enterprise workstation 12 SP3
10.0.30-28.1
fixed
suse enterprise workstation 12 SP4
10.0.35-1.7
fixed
suse enterprise workstation 12 SP5
10.0.40.1-2.9.1
fixed
mariadb
suse enterprise sap 12
10.0.20-18.1
fixed
suse enterprise sap 12 SP5
10.2.25-3.19.2
fixed
suse enterprise server 12
10.0.20-18.1
fixed
suse enterprise server 12 SP5
10.2.25-3.19.2
fixed
mariadb-100-errormessages
suse enterprise sap 12 SP5
10.0.40.1-2.9.1
fixed
suse enterprise server 12 SP5
10.0.40.1-2.9.1
fixed
mariadb-client
suse enterprise sap 12
10.0.20-18.1
fixed
suse enterprise sap 12 SP5
10.2.25-3.19.2
fixed
suse enterprise server 12
10.0.20-18.1
fixed
suse enterprise server 12 SP5
10.2.25-3.19.2
fixed
mariadb-errormessages
suse enterprise sap 12
10.0.20-18.1
fixed
suse enterprise sap 12 SP5
10.2.25-3.19.2
fixed
suse enterprise server 12
10.0.20-18.1
fixed
suse enterprise server 12 SP5
10.2.25-3.19.2
fixed
mariadb-tools
suse enterprise sap 12
10.0.20-18.1
fixed
suse enterprise sap 12 SP5
10.2.25-3.19.2
fixed
suse enterprise server 12
10.0.20-18.1
fixed
suse enterprise server 12 SP5
10.2.25-3.19.2
fixed
php7
suse enterprise sap 15 SP4
7.4.25-150400.2.7
fixed
suse enterprise sap 15 SP5
7.4.33-150400.4.22.1
fixed
suse enterprise sap 15 SP6
7.4.33-150400.4.34.1
fixed
suse enterprise sap 15 SP7
7.4.33-150400.4.48.1
fixed
suse enterprise server 15 SP4
7.4.25-150400.2.7
fixed
suse enterprise server 15 SP5
7.4.33-150400.4.22.1
fixed
suse enterprise server 15 SP6
7.4.33-150400.4.34.1
fixed
suse enterprise server 15 SP7
7.4.33-150400.4.48.1
fixed
php7-bcmath
suse enterprise sap 15 SP4
7.4.25-150400.2.7
fixed
suse enterprise sap 15 SP5
7.4.33-150400.4.22.1
fixed
suse enterprise sap 15 SP6
7.4.33-150400.4.34.1
fixed
suse enterprise server 15 SP4
7.4.25-150400.2.7
fixed
suse enterprise server 15 SP5
7.4.33-150400.4.22.1
fixed
suse enterprise server 15 SP6
7.4.33-150400.4.34.1
fixed
php7-bz2
suse enterprise sap 15 SP4
7.4.25-150400.2.7
fixed
suse enterprise sap 15 SP5
7.4.33-150400.4.22.1
fixed
suse enterprise sap 15 SP6
7.4.33-150400.4.34.1
fixed
suse enterprise server 15 SP4
7.4.25-150400.2.7
fixed
suse enterprise server 15 SP5
7.4.33-150400.4.22.1
fixed
suse enterprise server 15 SP6
7.4.33-150400.4.34.1
fixed
php7-calendar
suse enterprise sap 15 SP4
7.4.25-150400.2.7
fixed
suse enterprise sap 15 SP5
7.4.33-150400.4.22.1
fixed
suse enterprise sap 15 SP6
7.4.33-150400.4.34.1
fixed
suse enterprise server 15 SP4
7.4.25-150400.2.7
fixed
suse enterprise server 15 SP5
7.4.33-150400.4.22.1
fixed
suse enterprise server 15 SP6
7.4.33-150400.4.34.1
fixed
php7-cli
suse enterprise sap 15 SP4
7.4.25-150400.2.7
fixed
suse enterprise sap 15 SP5
7.4.33-150400.4.22.1
fixed
suse enterprise sap 15 SP6
7.4.33-150400.4.34.1
fixed
suse enterprise server 15 SP4
7.4.25-150400.2.7
fixed
suse enterprise server 15 SP5
7.4.33-150400.4.22.1
fixed
suse enterprise server 15 SP6
7.4.33-150400.4.34.1
fixed
php7-ctype
suse enterprise sap 15 SP4
7.4.25-150400.2.7
fixed
suse enterprise sap 15 SP5
7.4.33-150400.4.22.1
fixed
suse enterprise sap 15 SP6
7.4.33-150400.4.34.1
fixed
suse enterprise server 15 SP4
7.4.25-150400.2.7
fixed
suse enterprise server 15 SP5
7.4.33-150400.4.22.1
fixed
suse enterprise server 15 SP6
7.4.33-150400.4.34.1
fixed
php7-curl
suse enterprise sap 15 SP4
7.4.25-150400.2.7
fixed
suse enterprise sap 15 SP5
7.4.33-150400.4.22.1
fixed
suse enterprise sap 15 SP6
7.4.33-150400.4.34.1
fixed
suse enterprise server 15 SP4
7.4.25-150400.2.7
fixed
suse enterprise server 15 SP5
7.4.33-150400.4.22.1
fixed
suse enterprise server 15 SP6
7.4.33-150400.4.34.1
fixed
php7-dba
suse enterprise sap 15 SP4
7.4.25-150400.2.7
fixed
suse enterprise sap 15 SP5
7.4.33-150400.4.22.1
fixed
suse enterprise sap 15 SP6
7.4.33-150400.4.34.1
fixed
suse enterprise server 15 SP4
7.4.25-150400.2.7
fixed
suse enterprise server 15 SP5
7.4.33-150400.4.22.1
fixed
suse enterprise server 15 SP6
7.4.33-150400.4.34.1
fixed
php7-devel
suse enterprise sap 15 SP4
7.4.25-150400.2.7
fixed
suse enterprise sap 15 SP5
7.4.33-150400.4.22.1
fixed
suse enterprise sap 15 SP6
7.4.33-150400.4.34.1
fixed
suse enterprise server 15 SP4
7.4.25-150400.2.7
fixed
suse enterprise server 15 SP5
7.4.33-150400.4.22.1
fixed
suse enterprise server 15 SP6
7.4.33-150400.4.34.1
fixed
php7-dom
suse enterprise sap 15 SP4
7.4.25-150400.2.7
fixed
suse enterprise sap 15 SP5
7.4.33-150400.4.22.1
fixed
suse enterprise sap 15 SP6
7.4.33-150400.4.34.1
fixed
suse enterprise server 15 SP4
7.4.25-150400.2.7
fixed
suse enterprise server 15 SP5
7.4.33-150400.4.22.1
fixed
suse enterprise server 15 SP6
7.4.33-150400.4.34.1
fixed
php7-enchant
suse enterprise sap 15 SP4
7.4.25-150400.2.7
fixed
suse enterprise sap 15 SP5
7.4.33-150400.4.22.1
fixed
suse enterprise sap 15 SP6
7.4.33-150400.4.34.1
fixed
suse enterprise server 15 SP4
7.4.25-150400.2.7
fixed
suse enterprise server 15 SP5
7.4.33-150400.4.22.1
fixed
suse enterprise server 15 SP6
7.4.33-150400.4.34.1
fixed
php7-exif
suse enterprise sap 15 SP4
7.4.25-150400.2.7
fixed
suse enterprise sap 15 SP5
7.4.33-150400.4.22.1
fixed
suse enterprise sap 15 SP6
7.4.33-150400.4.34.1
fixed
suse enterprise server 15 SP4
7.4.25-150400.2.7
fixed
suse enterprise server 15 SP5
7.4.33-150400.4.22.1
fixed
suse enterprise server 15 SP6
7.4.33-150400.4.34.1
fixed
php7-fastcgi
suse enterprise sap 15 SP4
7.4.25-150400.2.6
fixed
suse enterprise sap 15 SP5
7.4.33-150400.4.22.1
fixed
suse enterprise sap 15 SP6
7.4.33-150400.4.34.1
fixed
suse enterprise server 15 SP4
7.4.25-150400.2.6
fixed
suse enterprise server 15 SP5
7.4.33-150400.4.22.1
fixed
suse enterprise server 15 SP6
7.4.33-150400.4.34.1
fixed
php7-fileinfo
suse enterprise sap 15 SP4
7.4.25-150400.2.7
fixed
suse enterprise sap 15 SP5
7.4.33-150400.4.22.1
fixed
suse enterprise sap 15 SP6
7.4.33-150400.4.34.1
fixed
suse enterprise server 15 SP4
7.4.25-150400.2.7
fixed
suse enterprise server 15 SP5
7.4.33-150400.4.22.1
fixed
suse enterprise server 15 SP6
7.4.33-150400.4.34.1
fixed
php7-fpm
suse enterprise sap 15 SP4
7.4.25-150400.2.6
fixed
suse enterprise sap 15 SP5
7.4.33-150400.4.22.1
fixed
suse enterprise sap 15 SP6
7.4.33-150400.4.34.1
fixed
suse enterprise server 15 SP4
7.4.25-150400.2.6
fixed
suse enterprise server 15 SP5
7.4.33-150400.4.22.1
fixed
suse enterprise server 15 SP6
7.4.33-150400.4.34.1
fixed
php7-ftp
suse enterprise sap 15 SP4
7.4.25-150400.2.7
fixed
suse enterprise sap 15 SP5
7.4.33-150400.4.22.1
fixed
suse enterprise sap 15 SP6
7.4.33-150400.4.34.1
fixed
suse enterprise server 15 SP4
7.4.25-150400.2.7
fixed
suse enterprise server 15 SP5
7.4.33-150400.4.22.1
fixed
suse enterprise server 15 SP6
7.4.33-150400.4.34.1
fixed
php7-gd
suse enterprise sap 15 SP4
7.4.25-150400.2.7
fixed
suse enterprise sap 15 SP5
7.4.33-150400.4.22.1
fixed
suse enterprise sap 15 SP6
7.4.33-150400.4.34.1
fixed
suse enterprise server 15 SP4
7.4.25-150400.2.7
fixed
suse enterprise server 15 SP5
7.4.33-150400.4.22.1
fixed
suse enterprise server 15 SP6
7.4.33-150400.4.34.1
fixed
php7-gettext
suse enterprise sap 15 SP4
7.4.25-150400.2.7
fixed
suse enterprise sap 15 SP5
7.4.33-150400.4.22.1
fixed
suse enterprise sap 15 SP6
7.4.33-150400.4.34.1
fixed
suse enterprise server 15 SP4
7.4.25-150400.2.7
fixed
suse enterprise server 15 SP5
7.4.33-150400.4.22.1
fixed
suse enterprise server 15 SP6
7.4.33-150400.4.34.1
fixed
php7-gmp
suse enterprise sap 15 SP4
7.4.25-150400.2.7
fixed
suse enterprise sap 15 SP5
7.4.33-150400.4.22.1
fixed
suse enterprise sap 15 SP6
7.4.33-150400.4.34.1
fixed
suse enterprise server 15 SP4
7.4.25-150400.2.7
fixed
suse enterprise server 15 SP5
7.4.33-150400.4.22.1
fixed
suse enterprise server 15 SP6
7.4.33-150400.4.34.1
fixed
php7-iconv
suse enterprise sap 15 SP4
7.4.25-150400.2.7
fixed
suse enterprise sap 15 SP5
7.4.33-150400.4.22.1
fixed
suse enterprise sap 15 SP6
7.4.33-150400.4.34.1
fixed
suse enterprise server 15 SP4
7.4.25-150400.2.7
fixed
suse enterprise server 15 SP5
7.4.33-150400.4.22.1
fixed
suse enterprise server 15 SP6
7.4.33-150400.4.34.1
fixed
php7-intl
suse enterprise sap 15 SP4
7.4.25-150400.2.7
fixed
suse enterprise sap 15 SP5
7.4.33-150400.4.22.1
fixed
suse enterprise sap 15 SP6
7.4.33-150400.4.34.1
fixed
suse enterprise server 15 SP4
7.4.25-150400.2.7
fixed
suse enterprise server 15 SP5
7.4.33-150400.4.22.1
fixed
suse enterprise server 15 SP6
7.4.33-150400.4.34.1
fixed
php7-json
suse enterprise sap 15 SP4
7.4.25-150400.2.7
fixed
suse enterprise sap 15 SP5
7.4.33-150400.4.22.1
fixed
suse enterprise sap 15 SP6
7.4.33-150400.4.34.1
fixed
suse enterprise server 15 SP4
7.4.25-150400.2.7
fixed
suse enterprise server 15 SP5
7.4.33-150400.4.22.1
fixed
suse enterprise server 15 SP6
7.4.33-150400.4.34.1
fixed
php7-ldap
suse enterprise sap 15 SP4
7.4.25-150400.2.7
fixed
suse enterprise sap 15 SP5
7.4.33-150400.4.22.1
fixed
suse enterprise sap 15 SP6
7.4.33-150400.4.34.1
fixed
suse enterprise server 15 SP4
7.4.25-150400.2.7
fixed
suse enterprise server 15 SP5
7.4.33-150400.4.22.1
fixed
suse enterprise server 15 SP6
7.4.33-150400.4.34.1
fixed
php7-mbstring
suse enterprise sap 15 SP4
7.4.25-150400.2.7
fixed
suse enterprise sap 15 SP5
7.4.33-150400.4.22.1
fixed
suse enterprise sap 15 SP6
7.4.33-150400.4.34.1
fixed
suse enterprise server 15 SP4
7.4.25-150400.2.7
fixed
suse enterprise server 15 SP5
7.4.33-150400.4.22.1
fixed
suse enterprise server 15 SP6
7.4.33-150400.4.34.1
fixed
php7-mysql
suse enterprise sap 15 SP4
7.4.25-150400.2.7
fixed
suse enterprise sap 15 SP5
7.4.33-150400.4.22.1
fixed
suse enterprise sap 15 SP6
7.4.33-150400.4.34.1
fixed
suse enterprise server 15 SP4
7.4.25-150400.2.7
fixed
suse enterprise server 15 SP5
7.4.33-150400.4.22.1
fixed
suse enterprise server 15 SP6
7.4.33-150400.4.34.1
fixed
php7-odbc
suse enterprise sap 15 SP4
7.4.25-150400.2.7
fixed
suse enterprise sap 15 SP5
7.4.33-150400.4.22.1
fixed
suse enterprise sap 15 SP6
7.4.33-150400.4.34.1
fixed
suse enterprise server 15 SP4
7.4.25-150400.2.7
fixed
suse enterprise server 15 SP5
7.4.33-150400.4.22.1
fixed
suse enterprise server 15 SP6
7.4.33-150400.4.34.1
fixed
php7-opcache
suse enterprise sap 15 SP4
7.4.25-150400.2.7
fixed
suse enterprise sap 15 SP5
7.4.33-150400.4.22.1
fixed
suse enterprise sap 15 SP6
7.4.33-150400.4.34.1
fixed
suse enterprise server 15 SP4
7.4.25-150400.2.7
fixed
suse enterprise server 15 SP5
7.4.33-150400.4.22.1
fixed
suse enterprise server 15 SP6
7.4.33-150400.4.34.1
fixed
php7-openssl
suse enterprise sap 15 SP4
7.4.25-150400.2.7
fixed
suse enterprise sap 15 SP5
7.4.33-150400.4.22.1
fixed
suse enterprise sap 15 SP6
7.4.33-150400.4.34.1
fixed
suse enterprise server 15 SP4
7.4.25-150400.2.7
fixed
suse enterprise server 15 SP5
7.4.33-150400.4.22.1
fixed
suse enterprise server 15 SP6
7.4.33-150400.4.34.1
fixed
php7-pcntl
suse enterprise sap 15 SP4
7.4.25-150400.2.7
fixed
suse enterprise sap 15 SP5
7.4.33-150400.4.22.1
fixed
suse enterprise sap 15 SP6
7.4.33-150400.4.34.1
fixed
suse enterprise server 15 SP4
7.4.25-150400.2.7
fixed
suse enterprise server 15 SP5
7.4.33-150400.4.22.1
fixed
suse enterprise server 15 SP6
7.4.33-150400.4.34.1
fixed
php7-pdo
suse enterprise sap 15 SP4
7.4.25-150400.2.7
fixed
suse enterprise sap 15 SP5
7.4.33-150400.4.22.1
fixed
suse enterprise sap 15 SP6
7.4.33-150400.4.34.1
fixed
suse enterprise server 15 SP4
7.4.25-150400.2.7
fixed
suse enterprise server 15 SP5
7.4.33-150400.4.22.1
fixed
suse enterprise server 15 SP6
7.4.33-150400.4.34.1
fixed
php7-pgsql
suse enterprise sap 15 SP4
7.4.25-150400.2.7
fixed
suse enterprise sap 15 SP5
7.4.33-150400.4.22.1
fixed
suse enterprise sap 15 SP6
7.4.33-150400.4.34.1
fixed
suse enterprise server 15 SP4
7.4.25-150400.2.7
fixed
suse enterprise server 15 SP5
7.4.33-150400.4.22.1
fixed
suse enterprise server 15 SP6
7.4.33-150400.4.34.1
fixed
php7-phar
suse enterprise sap 15 SP4
7.4.25-150400.2.7
fixed
suse enterprise sap 15 SP5
7.4.33-150400.4.22.1
fixed
suse enterprise sap 15 SP6
7.4.33-150400.4.34.1
fixed
suse enterprise server 15 SP4
7.4.25-150400.2.7
fixed
suse enterprise server 15 SP5
7.4.33-150400.4.22.1
fixed
suse enterprise server 15 SP6
7.4.33-150400.4.34.1
fixed
php7-posix
suse enterprise sap 15 SP4
7.4.25-150400.2.7
fixed
suse enterprise sap 15 SP5
7.4.33-150400.4.22.1
fixed
suse enterprise sap 15 SP6
7.4.33-150400.4.34.1
fixed
suse enterprise server 15 SP4
7.4.25-150400.2.7
fixed
suse enterprise server 15 SP5
7.4.33-150400.4.22.1
fixed
suse enterprise server 15 SP6
7.4.33-150400.4.34.1
fixed
php7-readline
suse enterprise sap 15 SP4
7.4.25-150400.2.7
fixed
suse enterprise sap 15 SP5
7.4.33-150400.4.22.1
fixed
suse enterprise sap 15 SP6
7.4.33-150400.4.34.1
fixed
suse enterprise server 15 SP4
7.4.25-150400.2.7
fixed
suse enterprise server 15 SP5
7.4.33-150400.4.22.1
fixed
suse enterprise server 15 SP6
7.4.33-150400.4.34.1
fixed
php7-shmop
suse enterprise sap 15 SP4
7.4.25-150400.2.7
fixed
suse enterprise sap 15 SP5
7.4.33-150400.4.22.1
fixed
suse enterprise sap 15 SP6
7.4.33-150400.4.34.1
fixed
suse enterprise server 15 SP4
7.4.25-150400.2.7
fixed
suse enterprise server 15 SP5
7.4.33-150400.4.22.1
fixed
suse enterprise server 15 SP6
7.4.33-150400.4.34.1
fixed
php7-snmp
suse enterprise sap 15 SP4
7.4.25-150400.2.7
fixed
suse enterprise sap 15 SP5
7.4.33-150400.4.22.1
fixed
suse enterprise sap 15 SP6
7.4.33-150400.4.34.1
fixed
suse enterprise server 15 SP4
7.4.25-150400.2.7
fixed
suse enterprise server 15 SP5
7.4.33-150400.4.22.1
fixed
suse enterprise server 15 SP6
7.4.33-150400.4.34.1
fixed
php7-soap
suse enterprise sap 15 SP4
7.4.25-150400.2.7
fixed
suse enterprise sap 15 SP5
7.4.33-150400.4.22.1
fixed
suse enterprise sap 15 SP6
7.4.33-150400.4.34.1
fixed
suse enterprise server 15 SP4
7.4.25-150400.2.7
fixed
suse enterprise server 15 SP5
7.4.33-150400.4.22.1
fixed
suse enterprise server 15 SP6
7.4.33-150400.4.34.1
fixed
php7-sockets
suse enterprise sap 15 SP4
7.4.25-150400.2.7
fixed
suse enterprise sap 15 SP5
7.4.33-150400.4.22.1
fixed
suse enterprise sap 15 SP6
7.4.33-150400.4.34.1
fixed
suse enterprise server 15 SP4
7.4.25-150400.2.7
fixed
suse enterprise server 15 SP5
7.4.33-150400.4.22.1
fixed
suse enterprise server 15 SP6
7.4.33-150400.4.34.1
fixed
php7-sodium
suse enterprise sap 15 SP4
7.4.25-150400.2.7
fixed
suse enterprise sap 15 SP5
7.4.33-150400.4.22.1
fixed
suse enterprise sap 15 SP6
7.4.33-150400.4.34.1
fixed
suse enterprise server 15 SP4
7.4.25-150400.2.7
fixed
suse enterprise server 15 SP5
7.4.33-150400.4.22.1
fixed
suse enterprise server 15 SP6
7.4.33-150400.4.34.1
fixed
php7-sqlite
suse enterprise sap 15 SP4
7.4.25-150400.2.7
fixed
suse enterprise sap 15 SP5
7.4.33-150400.4.22.1
fixed
suse enterprise sap 15 SP6
7.4.33-150400.4.34.1
fixed
suse enterprise server 15 SP4
7.4.25-150400.2.7
fixed
suse enterprise server 15 SP5
7.4.33-150400.4.22.1
fixed
suse enterprise server 15 SP6
7.4.33-150400.4.34.1
fixed
php7-sysvmsg
suse enterprise sap 15 SP4
7.4.25-150400.2.7
fixed
suse enterprise sap 15 SP5
7.4.33-150400.4.22.1
fixed
suse enterprise sap 15 SP6
7.4.33-150400.4.34.1
fixed
suse enterprise server 15 SP4
7.4.25-150400.2.7
fixed
suse enterprise server 15 SP5
7.4.33-150400.4.22.1
fixed
suse enterprise server 15 SP6
7.4.33-150400.4.34.1
fixed
php7-sysvsem
suse enterprise sap 15 SP4
7.4.25-150400.2.7
fixed
suse enterprise sap 15 SP5
7.4.33-150400.4.22.1
fixed
suse enterprise sap 15 SP6
7.4.33-150400.4.34.1
fixed
suse enterprise server 15 SP4
7.4.25-150400.2.7
fixed
suse enterprise server 15 SP5
7.4.33-150400.4.22.1
fixed
suse enterprise server 15 SP6
7.4.33-150400.4.34.1
fixed
php7-sysvshm
suse enterprise sap 15 SP4
7.4.25-150400.2.7
fixed
suse enterprise sap 15 SP5
7.4.33-150400.4.22.1
fixed
suse enterprise sap 15 SP6
7.4.33-150400.4.34.1
fixed
suse enterprise server 15 SP4
7.4.25-150400.2.7
fixed
suse enterprise server 15 SP5
7.4.33-150400.4.22.1
fixed
suse enterprise server 15 SP6
7.4.33-150400.4.34.1
fixed
php7-tidy
suse enterprise sap 15 SP4
7.4.25-150400.2.7
fixed
suse enterprise sap 15 SP5
7.4.33-150400.4.22.1
fixed
suse enterprise sap 15 SP6
7.4.33-150400.4.34.1
fixed
suse enterprise server 15 SP4
7.4.25-150400.2.7
fixed
suse enterprise server 15 SP5
7.4.33-150400.4.22.1
fixed
suse enterprise server 15 SP6
7.4.33-150400.4.34.1
fixed
php7-tokenizer
suse enterprise sap 15 SP4
7.4.25-150400.2.7
fixed
suse enterprise sap 15 SP5
7.4.33-150400.4.22.1
fixed
suse enterprise sap 15 SP6
7.4.33-150400.4.34.1
fixed
suse enterprise server 15 SP4
7.4.25-150400.2.7
fixed
suse enterprise server 15 SP5
7.4.33-150400.4.22.1
fixed
suse enterprise server 15 SP6
7.4.33-150400.4.34.1
fixed
php7-xmlreader
suse enterprise sap 15 SP4
7.4.25-150400.2.7
fixed
suse enterprise sap 15 SP5
7.4.33-150400.4.22.1
fixed
suse enterprise sap 15 SP6
7.4.33-150400.4.34.1
fixed
suse enterprise server 15 SP4
7.4.25-150400.2.7
fixed
suse enterprise server 15 SP5
7.4.33-150400.4.22.1
fixed
suse enterprise server 15 SP6
7.4.33-150400.4.34.1
fixed
php7-xmlrpc
suse enterprise sap 15 SP4
7.4.25-150400.2.7
fixed
suse enterprise sap 15 SP5
7.4.33-150400.4.22.1
fixed
suse enterprise sap 15 SP6
7.4.33-150400.4.34.1
fixed
suse enterprise server 15 SP4
7.4.25-150400.2.7
fixed
suse enterprise server 15 SP5
7.4.33-150400.4.22.1
fixed
suse enterprise server 15 SP6
7.4.33-150400.4.34.1
fixed
php7-xmlwriter
suse enterprise sap 15 SP4
7.4.25-150400.2.7
fixed
suse enterprise sap 15 SP5
7.4.33-150400.4.22.1
fixed
suse enterprise sap 15 SP6
7.4.33-150400.4.34.1
fixed
suse enterprise server 15 SP4
7.4.25-150400.2.7
fixed
suse enterprise server 15 SP5
7.4.33-150400.4.22.1
fixed
suse enterprise server 15 SP6
7.4.33-150400.4.34.1
fixed
php7-xsl
suse enterprise sap 15 SP4
7.4.25-150400.2.7
fixed
suse enterprise sap 15 SP5
7.4.33-150400.4.22.1
fixed
suse enterprise sap 15 SP6
7.4.33-150400.4.34.1
fixed
suse enterprise server 15 SP4
7.4.25-150400.2.7
fixed
suse enterprise server 15 SP5
7.4.33-150400.4.22.1
fixed
suse enterprise server 15 SP6
7.4.33-150400.4.34.1
fixed
php7-zip
suse enterprise sap 15 SP4
7.4.25-150400.2.7
fixed
suse enterprise sap 15 SP5
7.4.33-150400.4.22.1
fixed
suse enterprise sap 15 SP6
7.4.33-150400.4.34.1
fixed
suse enterprise server 15 SP4
7.4.25-150400.2.7
fixed
suse enterprise server 15 SP5
7.4.33-150400.4.22.1
fixed
suse enterprise server 15 SP6
7.4.33-150400.4.34.1
fixed
php7-zlib
suse enterprise sap 15 SP4
7.4.25-150400.2.7
fixed
suse enterprise sap 15 SP5
7.4.33-150400.4.22.1
fixed
suse enterprise sap 15 SP6
7.4.33-150400.4.34.1
fixed
suse enterprise server 15 SP4
7.4.25-150400.2.7
fixed
suse enterprise server 15 SP5
7.4.33-150400.4.22.1
fixed
suse enterprise server 15 SP6
7.4.33-150400.4.34.1
fixed
Red Hat logo
Red Hat Enterprise Linux Releases
Red Hat Product
Release
mariadb
RHEL 7
1:5.5.44-1.el7_1
fixed
mariadb-bench
RHEL 7
1:5.5.44-1.el7_1
fixed
mariadb-devel
RHEL 7
1:5.5.44-1.el7_1
fixed
mariadb-embedded
RHEL 7
1:5.5.44-1.el7_1
fixed
mariadb-embedded-devel
RHEL 7
1:5.5.44-1.el7_1
fixed
mariadb-libs
RHEL 7
1:5.5.44-1.el7_1
fixed
mariadb-server
RHEL 7
1:5.5.44-1.el7_1
fixed
mariadb-test
RHEL 7
1:5.5.44-1.el7_1
fixed
Common Weakness Enumeration
References
http://lists.fedoraproject.org/pipermail/package-announce/2015-July/161436.html
http://lists.fedoraproject.org/pipermail/package-announce/2015-July/161625.html
http://mysqlblog.fivefarmers.com/2014/04/02/redefining-ssl-option/
http://mysqlblog.fivefarmers.com/2015/04/29/ssltls-in-5-6-and-5-5-ocert-advisory/
http://packetstormsecurity.com/files/131688/MySQL-SSL-TLS-Downgrade.html
http://rhn.redhat.com/errata/RHSA-2015-1646.html
http://rhn.redhat.com/errata/RHSA-2015-1647.html
http://rhn.redhat.com/errata/RHSA-2015-1665.html
http://www.debian.org/security/2015/dsa-3311
http://www.ocert.org/advisories/ocert-2015-003.html
http://www.securityfocus.com/archive/1/535397/100/1100/threaded
http://www.securityfocus.com/bid/74398
http://www.securitytracker.com/id/1032216
https://access.redhat.com/security/cve/cve-2015-3152
https://github.com/mysql/mysql-server/commit/3bd5589e1a5a93f9c224badf983cd65c45215390
https://jira.mariadb.org/browse/MDEV-7937
https://www.duosecurity.com/blog/backronym-mysql-vulnerability
http://lists.fedoraproject.org/pipermail/package-announce/2015-July/161436.html
http://lists.fedoraproject.org/pipermail/package-announce/2015-July/161625.html
http://mysqlblog.fivefarmers.com/2014/04/02/redefining-ssl-option/
http://mysqlblog.fivefarmers.com/2015/04/29/ssltls-in-5-6-and-5-5-ocert-advisory/
http://packetstormsecurity.com/files/131688/MySQL-SSL-TLS-Downgrade.html
http://rhn.redhat.com/errata/RHSA-2015-1646.html
http://rhn.redhat.com/errata/RHSA-2015-1647.html
http://rhn.redhat.com/errata/RHSA-2015-1665.html
http://www.debian.org/security/2015/dsa-3311
http://www.ocert.org/advisories/ocert-2015-003.html
http://www.securityfocus.com/archive/1/535397/100/1100/threaded
http://www.securityfocus.com/bid/74398
http://www.securitytracker.com/id/1032216
https://access.redhat.com/security/cve/cve-2015-3152
https://github.com/mysql/mysql-server/commit/3bd5589e1a5a93f9c224badf983cd65c45215390
https://jira.mariadb.org/browse/MDEV-7937
https://www.duosecurity.com/blog/backronym-mysql-vulnerability