CVE-2015-3152

Published: May 16, 2016Modified: May 6, 2026

5.9

Vector

CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N

Exploitability: 2.2 / Impact: 3.6

Source: NVD

Description

Oracle MySQL before 5.7.3, Oracle MySQL Connector/C (aka libmysqlclient) before 6.1.3, and MariaDB before 5.5.44 use the --ssl option to mean that SSL is optional, which allows man-in-the-middle attackers to spoof servers via a cleartext-downgrade attack, aka a "BACKRONYM" attack.

Affected (27)

Products: Oracle: Mysql, Mysql Connector/c · Mariadb: Mariadb · Fedoraproject: Fedora · +3 more

Show all products

Oracle: Mysql, Mysql Connector/c · Mariadb: Mariadb · Fedoraproject: Fedora · Debian: Debian Linux · Redhat: Enterprise Linux Desktop, Enterprise Linux Eus, Enterprise Linux Server, Enterprise Linux Server Aus, Enterprise Linux Server Tus, Enterprise Linux Workstation · Php: Php

2 products

1 product

1 product

1 product

6 products

Enterprise Linux Desktop

Enterprise Linux Eus

Enterprise Linux Server

Enterprise Linux Server Aus

Enterprise Linux Server Tus

Enterprise Linux Workstation

Php

1 product

Php

Configuration A

2 vulnerable

Vulnerable Software	Affected Versions
Oracle Mysql	Up to 5.7.2
Oracle Mysql Connector/c	Up to 6.1.2

Configuration B

2 vulnerable

Vulnerable Software	Affected Versions
Mariadb Mariadb	From 10.0.0 to 10.0.20
Mariadb Mariadb	From 5.5.0 to 5.5.44

Configuration C

2 vulnerable

Vulnerable Software	Affected Versions
Fedoraproject Fedora	Version 21
Fedoraproject Fedora	Version 22

Configuration D

1 vulnerable

Vulnerable Software	Affected Versions
Debian Debian Linux	Version 8.0

Configuration E

17 vulnerable

Vulnerable Software	Affected Versions
Redhat Enterprise Linux Desktop	Version 7.0
Redhat Enterprise Linux Eus	Version 7.1
Redhat Enterprise Linux Eus	Version 7.2
Redhat Enterprise Linux Eus	Version 7.3
Redhat Enterprise Linux Eus	Version 7.4
Redhat Enterprise Linux Eus	Version 7.5
Redhat Enterprise Linux Eus	Version 7.6
Redhat Enterprise Linux Eus	Version 7.7
Redhat Enterprise Linux Server	Version 7.0
Redhat Enterprise Linux Server Aus	Version 7.3
Redhat Enterprise Linux Server Aus	Version 7.4
Redhat Enterprise Linux Server Aus	Version 7.6
Redhat Enterprise Linux Server Aus	Version 7.7
Redhat Enterprise Linux Server Tus	Version 7.3
Redhat Enterprise Linux Server Tus	Version 7.6
Redhat Enterprise Linux Server Tus	Version 7.7
Redhat Enterprise Linux Workstation	Version 7.0

Configuration F

3 vulnerable

Vulnerable Software	Affected Versions
Php Php	From 5.4.0 to 5.4.43
Php Php	From 5.5.0 to 5.5.27
Php Php	From 5.6.0 to 5.6.11

Related CWEs

CWE-295

Improper Certificate Validation

The product does not validate, or incorrectly validates, a certificate.

References (34)

http://lists.fedoraproject.org/pipermail/package-announce/2015-July/161436.html

Source: secalert@redhat.com

Mailing ListThird Party Advisory

http://lists.fedoraproject.org/pipermail/package-announce/2015-July/161625.html

Source: secalert@redhat.com

Mailing ListThird Party Advisory

http://mysqlblog.fivefarmers.com/2014/04/02/redefining-ssl-option/

Source: secalert@redhat.com

ExploitThird Party Advisory

http://mysqlblog.fivefarmers.com/2015/04/29/ssltls-in-5-6-and-5-5-ocert-advisory/

Source: secalert@redhat.com

Third Party Advisory

http://packetstormsecurity.com/files/131688/MySQL-SSL-TLS-Downgrade.html

Source: secalert@redhat.com

Third Party AdvisoryVDB Entry

http://rhn.redhat.com/errata/RHSA-2015-1646.html

Source: secalert@redhat.com

Third Party Advisory

http://rhn.redhat.com/errata/RHSA-2015-1647.html

Source: secalert@redhat.com

Third Party Advisory

http://rhn.redhat.com/errata/RHSA-2015-1665.html

Source: secalert@redhat.com

Third Party Advisory

http://www.debian.org/security/2015/dsa-3311

Source: secalert@redhat.com

Third Party Advisory

http://www.ocert.org/advisories/ocert-2015-003.html

Source: secalert@redhat.com

Vendor Advisory

http://www.securityfocus.com/archive/1/535397/100/1100/threaded

Source: secalert@redhat.com

Third Party AdvisoryVDB Entry

http://www.securityfocus.com/bid/74398

Source: secalert@redhat.com

Third Party AdvisoryVDB Entry

http://www.securitytracker.com/id/1032216

Source: secalert@redhat.com

Third Party AdvisoryVDB Entry

https://access.redhat.com/security/cve/cve-2015-3152

Source: secalert@redhat.com

Third Party Advisory

https://github.com/mysql/mysql-server/commit/3bd5589e1a5a93f9c224badf983cd65c45215390

Source: secalert@redhat.com

PatchThird Party Advisory

https://jira.mariadb.org/browse/MDEV-7937

Source: secalert@redhat.com

Issue TrackingVendor Advisory

https://www.duosecurity.com/blog/backronym-mysql-vulnerability

Source: secalert@redhat.com

Third Party Advisory

http://lists.fedoraproject.org/pipermail/package-announce/2015-July/161436.html