Cloudanix VulnDB

CVE-2015-4730

None

CVSS

—

EPSS

2.2%

Published

Oct 21, 2015

CISA due date

—

Cloudanix analysis

Schedule a fix SSVC: Track

A flaw in an old database version can let someone who already has login access knock the service offline, causing temporary outages until the software is updated.

Exploitation
Remote Authenticated
Attacker needs
Low Privilege
Complexity
Low
Impact
Denial Of Service
Component
Network Service
Class
Denial of service
Remediation
Upgrade
Effort
Medium
Patch risk
Low

What it actually does

Unspecified vulnerability in the Types component allows a remote authenticated user to affect availability, resulting in denial of service.

Why it matters to the business

Service outages and downtime for database-dependent operations; low exploit likelihood but high urgency for any remaining unpatched Ubuntu 14.04 flashplugin-nonfree deployments given the 4005-day exposure window.

How an attack unfolds

An attacker with valid database credentials crafts input that triggers the flaw in the Types handling path, causing the MySQL server process to become unavailable; no named threat actors or ransomware use recorded.

How to fix it

Upgrade flashplugin-nonfree on Ubuntu 14.04 LTS to version 25.0.0.171ubuntu0.14.04.1 or later; apply the corresponding MySQL 5.6 patch that resolves the Types issue.

How to confirm the fix worked

Confirm the installed flashplugin-nonfree package version is at least 25.0.0.171ubuntu0.14.04.1 and verify MySQL 5.6.21 or newer is deployed; re-test availability under authenticated load.

Typical attack path

  1. Obtain valid database credentials
  2. Connect to the MySQL instance over the network
  3. Submit specially crafted requests targeting the Types component
  4. Trigger service crash or unavailability

How to detect it

Review database error and crash logs for unexpected terminations around the Types component; no specific threat-actor indicators available.

What your security team should do

  • Immediately upgrade all affected flashplugin-nonfree and MySQL 5.6 instances
  • Disable unnecessary remote authenticated access
  • Monitor for availability anomalies in database logs

The record

Unspecified vulnerability in Oracle MySQL 5.6.20 and earlier allows remote authenticated users to affect availability via unknown vectors related to Types.

Affected packages

Ecosystem Package Introduced Fixed
SUSE:Linux Enterprise Desktop 11 SP3 mysql 0 5.5.46-0.14.1
SUSE:Linux Enterprise Desktop 11 SP4 mysql 0 5.5.46-0.14.1
SUSE:Linux Enterprise Server 11 SP3 mysql 0 5.5.46-0.14.1
SUSE:Linux Enterprise Server 11 SP3-TERADATA mysql 0 5.5.46-0.14.1
SUSE:Linux Enterprise Server 11 SP4 mysql 0 5.5.46-0.14.1
SUSE:Linux Enterprise Server for SAP Applications 11 SP3 mysql 0 5.5.46-0.14.1
SUSE:Linux Enterprise Server for SAP Applications 11 SP4 mysql 0 5.5.46-0.14.1
SUSE:Linux Enterprise Software Development Kit 11 SP3 mysql 0 5.5.46-0.14.1
SUSE:Linux Enterprise Software Development Kit 11 SP4 mysql 0 5.5.46-0.14.1
Ubuntu:14.04:LTS mariadb-5.5 0 5.5.46-1ubuntu0.14.04.2
Ubuntu:14.04:LTS mysql-5.5 0 5.5.46-0ubuntu0.14.04.2
Ubuntu:14.04:LTS mysql-5.6 0 5.6.27-0ubuntu0.14.04.1
Ubuntu:16.04:LTS mariadb-10.0 0 10.0.22-0ubuntu1
Ubuntu:16.04:LTS percona-server-5.6 0 No fix
Ubuntu:16.04:LTS percona-xtradb-cluster-5.6 0 No fix
Ubuntu:Pro:16.04:LTS percona-server-5.6 0 No fix
Ubuntu:Pro:16.04:LTS percona-xtradb-cluster-5.6 0 No fix

Related vulnerabilities