CVE:CVE-2015-3152
CNNVD:CNNVD-201505-333
Oracle MySQL和MariaDB都是数据库管理系统。Oracle MySQL Connector/C（又名libmysqlclient）是使用C开发的一个客户端库。MySQL和Oracle MySQL Connector/C都是美国甲骨文（Oracle）公司的产品。MariaDB是美国Monty Program Ab公司和美国MariaDB基金会共同开发的产品。
多款Oracle产品中存在安全漏洞，该漏洞源于程序使用--ssl选项表示SSL是可选择的。攻击者可通过实施cleartext-downgrade攻击利用该漏洞实施中间人攻击，欺骗服务器。以下产品及版本受到影响：Oracle MySQL 5.7.3之前版本，Oracle MySQL Connector/C 6.1.3之前版本，MariaDB 5.5.44之前版本。
solution:Upgrade oracle mysql to a higher version than 5.7.2,and avoid the version (,5.7.2]; Upgrade oracle mysql_connector/c to a higher version than 6.1.2,and avoid the version (,6.1.2]; Upgrade mariadb mariadb to a higher version than 5.5.44,10.0.20,and avoid the version [5.5.0,5.5.44),[10.0.0,10.0.20); Upgrade fedoraproject fedora to a higher version than 21,22,and avoid the version 21,22; Upgrade debian debian_linux to a higher version than 8.0,and avoid the version 8.0; Upgrade redhat enterprise_linux_desktop to a higher version than 7.0,and avoid the version 7.0; Upgrade redhat enterprise_linux_eus to a higher version than 7.1,7.2,7.3,7.4,7.5,7.6,7.7,and avoid the version 7.1,7.2,7.3,7.4,7.5,7.6,7.7; Upgrade redhat enterprise_linux_server to a higher version than 7.0,and avoid the version 7.0; Upgrade redhat enterprise_linux_server_aus to a higher version than 7.3,7.4,7.6,7.7,and avoid the version 7.3,7.4,7.6,7.7; Upgrade redhat enterprise_linux_server_tus to a higher version than 7.3,7.6,7.7,and avoid the version 7.3,7.6,7.7; Upgrade redhat enterprise_linux_workstation to a higher version than 7.0,and avoid the version 7.0; Upgrade php php to a higher version than 5.4.43,5.5.27,5.6.11,and avoid the version [5.4.0,5.4.43),[5.5.0,5.5.27),[5.6.0,5.6.11)