CVE-2015-3152
Fixed in a distro release EPSS 7%
Oracle MySQL before 5.7.3, Oracle MySQL Connector/C (aka libmysqlclient) before 6.1.3, and MariaDB before 5.5.44 use the --ssl option to mean that SSL is optional, which allows man-in-the-middle attackers to spoof servers via a cleartext-downgrade attack, aka a "BACKRONYM" attack.
Products: oracle mysql, oracle mysql_connector/c, mariadb, fedoraproject fedora, debian_linux, redhat enterprise_linux_desktop, redhat enterprise_linux_eus, redhat enterprise_linux_server, redhat enterprise_linux_server_aus, redhat enterprise_linux_server_tus, redhat enterprise_linux_workstation, php
Distro releases
| Release | Package | Fixed in |
|---|---|---|
| Debian 8 | mariadb-10.0 | 10.0.20-0+deb8u1 |
| Red Hat Enterprise Linux 7 | mariadb | 1:5.5.44-1.el7_1 |
| Red Hat Enterprise Linux 7 | mariadb | 1:5.5.44-1.ael7b_1 |
| Red Hat Enterprise Linux 7 | mariadb-bench | 1:5.5.44-1.ael7b_1 |
| Red Hat Enterprise Linux 7 | mariadb-bench | 1:5.5.44-1.el7_1 |
| Red Hat Enterprise Linux 7 | mariadb-debuginfo | 1:5.5.44-1.ael7b_1 |
| Red Hat Enterprise Linux 7 | mariadb-debuginfo | 1:5.5.44-1.el7_1 |
| Red Hat Enterprise Linux 7 | mariadb-devel | 1:5.5.44-1.el7_1 |
| Red Hat Enterprise Linux 7 | mariadb-devel | 1:5.5.44-1.ael7b_1 |
| Red Hat Enterprise Linux 7 | mariadb-embedded | 1:5.5.44-1.ael7b_1 |
| Red Hat Enterprise Linux 7 | mariadb-embedded | 1:5.5.44-1.el7_1 |
| Red Hat Enterprise Linux 7 | mariadb-embedded-devel | 1:5.5.44-1.ael7b_1 |
| Red Hat Enterprise Linux 7 | mariadb-embedded-devel | 1:5.5.44-1.el7_1 |
| Red Hat Enterprise Linux 7 | mariadb-libs | 1:5.5.44-1.el7_1 |
| Red Hat Enterprise Linux 7 | mariadb-libs | 1:5.5.44-1.ael7b_1 |
| Red Hat Enterprise Linux 7 | mariadb-server | 1:5.5.44-1.el7_1 |
| Red Hat Enterprise Linux 7 | mariadb-server | 1:5.5.44-1.ael7b_1 |
| Red Hat Enterprise Linux 7 | mariadb-test | 1:5.5.44-1.ael7b_1 |
| Red Hat Enterprise Linux 7 | mariadb-test | 1:5.5.44-1.el7_1 |
| Red Hat rhel software collections 2 | mariadb55-mariadb | 0:5.5.44-1.el7 |
| Red Hat rhel software collections 2 | mariadb55-mariadb | 0:5.5.44-1.el6 |
| Red Hat rhel software collections 2 | mariadb55-mariadb-bench | 0:5.5.44-1.el7 |
| Red Hat rhel software collections 2 | mariadb55-mariadb-bench | 0:5.5.44-1.el6 |
| Red Hat rhel software collections 2 | mariadb55-mariadb-debuginfo | 0:5.5.44-1.el7 |
| Red Hat rhel software collections 2 | mariadb55-mariadb-debuginfo | 0:5.5.44-1.el6 |
| Red Hat rhel software collections 2 | mariadb55-mariadb-devel | 0:5.5.44-1.el7 |
| Red Hat rhel software collections 2 | mariadb55-mariadb-devel | 0:5.5.44-1.el6 |
| Red Hat rhel software collections 2 | mariadb55-mariadb-libs | 0:5.5.44-1.el7 |
| Red Hat rhel software collections 2 | mariadb55-mariadb-libs | 0:5.5.44-1.el6 |
| Red Hat rhel software collections 2 | mariadb55-mariadb-server | 0:5.5.44-1.el7 |
| Red Hat rhel software collections 2 | mariadb55-mariadb-server | 0:5.5.44-1.el6 |
| Red Hat rhel software collections 2 | mariadb55-mariadb-test | 0:5.5.44-1.el7 |
| Red Hat rhel software collections 2 | mariadb55-mariadb-test | 0:5.5.44-1.el6 |
| Red Hat rhel software collections 2 | rh-mariadb100-mariadb | 1:10.0.20-1.el6 |
| Red Hat rhel software collections 2 | rh-mariadb100-mariadb | 1:10.0.20-1.el7 |
| Red Hat rhel software collections 2 | rh-mariadb100-mariadb-bench | 1:10.0.20-1.el7 |
| Red Hat rhel software collections 2 | rh-mariadb100-mariadb-bench | 1:10.0.20-1.el6 |
| Red Hat rhel software collections 2 | rh-mariadb100-mariadb-common | 1:10.0.20-1.el6 |
| Red Hat rhel software collections 2 | rh-mariadb100-mariadb-common | 1:10.0.20-1.el7 |
| Red Hat rhel software collections 2 | rh-mariadb100-mariadb-config | 1:10.0.20-1.el6 |
| Red Hat rhel software collections 2 | rh-mariadb100-mariadb-config | 1:10.0.20-1.el7 |
| Red Hat rhel software collections 2 | rh-mariadb100-mariadb-debuginfo | 1:10.0.20-1.el6 |
| Red Hat rhel software collections 2 | rh-mariadb100-mariadb-debuginfo | 1:10.0.20-1.el7 |
| Red Hat rhel software collections 2 | rh-mariadb100-mariadb-devel | 1:10.0.20-1.el6 |
| Red Hat rhel software collections 2 | rh-mariadb100-mariadb-devel | 1:10.0.20-1.el7 |
| Red Hat rhel software collections 2 | rh-mariadb100-mariadb-errmsg | 1:10.0.20-1.el6 |
| Red Hat rhel software collections 2 | rh-mariadb100-mariadb-errmsg | 1:10.0.20-1.el7 |
| Red Hat rhel software collections 2 | rh-mariadb100-mariadb-oqgraph-engine | 1:10.0.20-1.el6 |
| Red Hat rhel software collections 2 | rh-mariadb100-mariadb-oqgraph-engine | 1:10.0.20-1.el7 |
| Red Hat rhel software collections 2 | rh-mariadb100-mariadb-server | 1:10.0.20-1.el7 |
| Red Hat rhel software collections 2 | rh-mariadb100-mariadb-server | 1:10.0.20-1.el6 |
| Red Hat rhel software collections 2 | rh-mariadb100-mariadb-test | 1:10.0.20-1.el6 |
| Red Hat rhel software collections 2 | rh-mariadb100-mariadb-test | 1:10.0.20-1.el7 |
| SUSE Linux Enterprise Desktop 11 SP3 | mysql | 5.5.45-0.11.1 |
| SUSE Linux Enterprise Desktop 11 SP4 | mysql | 5.5.45-0.11.1 |
| SUSE Linux Enterprise Desktop 12 | mariadb | 10.0.20-18.1 |
| SUSE Linux Enterprise Server 11 SP2-LTSS | php53 | 5.3.17-47.1 |
| SUSE Linux Enterprise Server 11 SP3 | mysql | 5.5.45-0.11.1 |
| SUSE Linux Enterprise Server 11 SP3-TERADATA | mysql | 5.5.45-0.11.1 |
| SUSE Linux Enterprise Server 11 SP4 | mysql | 5.5.45-0.11.1 |
| SUSE Linux Enterprise Server 12 | mariadb | 10.0.20-18.1 |
| SUSE Linux Enterprise Server for SAP Applications 11 SP3 | mysql | 5.5.45-0.11.1 |
| SUSE Linux Enterprise Server for SAP Applications 11 SP4 | mysql | 5.5.45-0.11.1 |
| SUSE Linux Enterprise Server for SAP Applications 12 | mariadb | 10.0.20-18.1 |
| SUSE Linux Enterprise Software Development Kit 11 SP3 | mysql | 5.5.45-0.11.1 |
| SUSE Linux Enterprise Software Development Kit 11 SP4 | mysql | 5.5.45-0.11.1 |
| SUSE Linux Enterprise Software Development Kit 12 | mariadb | 10.0.20-18.1 |
| SUSE Linux Enterprise Workstation Extension 12 | mariadb | 10.0.20-18.1 |
| Ubuntu 14.04 LTS | mariadb-5.5 | 5.5.44-1ubuntu0.14.04.1 |
| Ubuntu 14.04 LTS | mysql-5.5 | no fix |
| Ubuntu 16.04 LTS | mariadb-10.0 | 10.0.22-0ubuntu1 |
| Ubuntu 16.04 LTS | percona-server-5.6 | no fix |
| openSUSE Tumbleweed | php5 | 5.6.28-1.1 |
| openSUSE Tumbleweed | php7 | 7.0.14-1.4 |
| openSUSE Tumbleweed | php8 | 8.0.11-1.1 |