Oracle MySQL before 5.7.3, Oracle MySQL Connector/C (aka libmysqlclient) before 6.1.3, and MariaDB before 5.5.44 use the --ssl option to mean that SSL is optional, which allows man-in-the-middle attackers to spoof servers via a cleartext-downgrade attack, aka a "BACKRONYM" attack.
CVSS Details
- CVSS 3.1 Base Score: 5.9
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | — | Upgrade mariadb | Sep 20, 2017 | May 16, 2016 |
| Centos_linux | — | Upgrade mariadb-benchUpgrade mariadbUpgrade mariadb-develUpgrade mariadb-embedded-develUpgrade mariadb-serverUpgrade mariadb-testUpgrade mariadb-embeddedUpgrade mariadb-libs | Dec 1, 2016 | May 16, 2016 |
| F5 Big Ip | — | Update F5 BIG-IP to the latest version | Jun 17, 2026 | Jul 2, 2015 |
| Freebsd | — | Upgrade php5-mysqliUpgrade php5-mysqlUpgrade php56-mysqliUpgrade mariadb100-clientUpgrade php55-mysqlUpgrade php56-mysqlUpgrade mariadb55-clientUpgrade php55-mysqli | Dec 10, 2025 | Jul 13, 2015 |
| Mariadb Mariadb | — | Upgrade MariaDB to the latest version | Mar 4, 2025 | May 16, 2016 |
| Oracle Mysql | — | Upgrade to Oracle MySQL version 5.7.3Upgrade to Oracle MySQL version 6.1.3 | May 19, 2016 | May 16, 2016 |
| Oracle Solaris | — | Upgrade library/perl-5/dbd-mysql-526 to version 4048-11.4.3.0.1.4.0 on Solaris 11.4Upgrade library/perl-5/dbd-mysql to version 4048-11.4.3.0.1.4.0 on Solaris 11.4Upgrade library/perl-5/dbd-mysql-522 to version 4048-11.4.3.0.1.4.0 on Solaris 11.4 | Nov 19, 2018 | May 16, 2016 |
| Oracle_linux | — | Upgrade mariadb-libsUpgrade mariadbUpgrade mariadb-embeddedUpgrade mariadb-develUpgrade mariadb-serverUpgrade mariadb-embedded-develUpgrade mariadb-benchUpgrade mariadb-test | Oct 16, 2024 | May 16, 2016 |
| Php | — | Upgrade to PHP version 5.4.43Upgrade to PHP version 5.6.11Upgrade to PHP version 5.5.27 | Sep 15, 2022 | May 16, 2016 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | Apr 29, 2015 |
| Suse | — | Upgrade libmysqlclient-develUpgrade php7-enchantUpgrade libmysqld18Upgrade php7-fastcgiUpgrade php53-gmpUpgrade php53-fileinfoUpgrade php7-sodiumUpgrade php7-xmlwriterUpgrade php7-curlUpgrade php7-snmpUpgrade php53-exifUpgrade php53-bcmathUpgrade php53-ldapUpgrade php72-develUpgrade php7-odbcUpgrade php53-dbaUpgrade php7-shmopUpgrade php53-intlUpgrade libmysql55client18-x86Upgrade php53-ctypeUpgrade php7-develUpgrade php53-snmpUpgrade php7-mcryptUpgrade php7-ldapUpgrade libmysqlclient18-32bitUpgrade php7-bcmathUpgrade php53-tokenizerUpgrade php7-pspellUpgrade php7-dbaUpgrade apache2-mod_php53Upgrade php7-sysvsemUpgrade php53-opensslUpgrade php53-domUpgrade mariadbUpgrade mariadb-clientUpgrade libmysqlclient_r18Upgrade php7-calendarUpgrade php7-fileinfoUpgrade php7-zlibUpgrade php53-xslUpgrade php7-pearUpgrade php53-zlibUpgrade php53-pspellUpgrade php7-sysvshmUpgrade php53-pearUpgrade mariadb-toolsUpgrade php7-opcacheUpgrade php53-jsonUpgrade php7-ctypeUpgrade php53-fastcgiUpgrade libmysql55client_r18-32bitUpgrade php53-xmlrpcUpgrade libmysql55client18-32bitUpgrade php7-zipUpgrade php7-mysqlUpgrade php7-pgsqlUpgrade php7-mbstringUpgrade libmysqlclient_r18-32bitUpgrade php7-bz2Upgrade php53-mbstringUpgrade php7-domUpgrade php53-zipUpgrade php7-exifUpgrade php53-sysvshmUpgrade php7-tokenizerUpgrade php7Upgrade php7-xmlreaderUpgrade php53-gdUpgrade php53-iconvUpgrade php7-fpmUpgrade php7-ftpUpgrade php53-soapUpgrade apache2-mod_php7Upgrade php7-pear-archive_tarUpgrade php7-gmpUpgrade php7-gettextUpgrade php7-tidyUpgrade php53-pcntlUpgrade php7-gdUpgrade php53-mysqlUpgrade php53-pgsqlUpgrade php7-pharUpgrade php53-xmlreaderUpgrade php53-shmopUpgrade php7-posixUpgrade php53-suhosinUpgrade php53-curlUpgrade php7-pdoUpgrade php7-socketsUpgrade libmysql55client_r18Upgrade php7-sqliteUpgrade php53-ftpUpgrade php53-xmlwriterUpgrade libmysql55client18Upgrade mysqlUpgrade php7-wddxUpgrade php7-embedUpgrade mysql-toolsUpgrade php53-odbcUpgrade php7-intlUpgrade php53-calendarUpgrade php7-jsonUpgrade php53-sysvsemUpgrade php7-pcntlUpgrade php53-bz2Upgrade php7-soapUpgrade php7-opensslUpgrade php53-mcryptUpgrade mysql-clientUpgrade libmysql55client_r18-x86Upgrade php53-gettextUpgrade libmysqlclient18Upgrade php53-wddxUpgrade php7-imapUpgrade mariadb-errormessagesUpgrade php7-sysvmsgUpgrade php53-pdoUpgrade libmysqld-develUpgrade php7-xmlrpcUpgrade php7-readlineUpgrade php7-xslUpgrade php7-iconvUpgrade mariadb-100-errormessagesUpgrade php53-sysvmsgUpgrade php53 | Dec 18, 2015 | Jul 21, 2015 |
| Ubuntu | — | Upgrade mariadb-10.0Upgrade mariadb-5.5 | Nov 19, 2024 | May 16, 2016 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub