CVE-2015-3152

Descripción original

Oracle MySQL before 5.7.3, Oracle MySQL Connector/C (aka libmysqlclient) before 6.1.3, and MariaDB before 5.5.44 use the --ssl option to mean that SSL is optional, which allows man-in-the-middle attackers to spoof servers via a cleartext-downgrade attack, aka a "BACKRONYM" attack.

Software afectado

• PHP ≥ 5.6.0 < 5.6.11≥ 5.4.0 < 5.4.43≥ 5.5.0 < 5.5.27 Corregido en: 5.6.11, 5.4.43, 5.5.27 coincidencia exacta
• MariaDB ≥ 10.0.0 < 10.0.20≥ 5.5.0 < 5.5.44 Corregido en: 10.0.20, 5.5.44 coincidencia exacta

Detalles

Publicación

2016-05-16

Última modificación

2026-06-17

Vector CVSS

CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N

CWE

CWE-295

Referencias

• cve.org/CVE-2015-3152
• nvd.nist.gov/vuln/detail/CVE-2015-3152
• lists.fedoraproject.org/pipermail/package-announce/2015-July/161436.html
• lists.fedoraproject.org/pipermail/package-announce/2015-July/161625.html
• mysqlblog.fivefarmers.com/2014/04/02/redefining-ssl-option/
• mysqlblog.fivefarmers.com/2015/04/29/ssltls-in-5-6-and-5-5-ocert-advisory/
• packetstormsecurity.com/files/131688/MySQL-SSL-TLS-Downgrade.html
• rhn.redhat.com/errata/RHSA-2015-1646.html
• rhn.redhat.com/errata/RHSA-2015-1647.html
• rhn.redhat.com/errata/RHSA-2015-1665.html
• www.debian.org/security/2015/dsa-3311
• www.ocert.org/advisories/ocert-2015-003.html
• www.securityfocus.com/archive/1/535397/100/1100/threaded
• www.securityfocus.com/bid/74398