ID CVE-2015-4879
Summary Unspecified vulnerability in Oracle MySQL Server 5.5.44 and earlier, and 5.6.25 and earlier, allows remote authenticated users to affect confidentiality, integrity, and availability via vectors related to DML.
References
Vulnerable Configurations
  • cpe:2.3:o:redhat:enterprise_linux_desktop:7.0:*:*:*:*:*:*:*
    cpe:2.3:o:redhat:enterprise_linux_desktop:7.0:*:*:*:*:*:*:*
  • cpe:2.3:o:redhat:enterprise_linux_hpc_node:7.0:*:*:*:*:*:*:*
    cpe:2.3:o:redhat:enterprise_linux_hpc_node:7.0:*:*:*:*:*:*:*
  • cpe:2.3:o:redhat:enterprise_linux_hpc_node_eus:7.2:*:*:*:*:*:*:*
    cpe:2.3:o:redhat:enterprise_linux_hpc_node_eus:7.2:*:*:*:*:*:*:*
  • cpe:2.3:o:redhat:enterprise_linux_server:7.0:*:*:*:*:*:*:*
    cpe:2.3:o:redhat:enterprise_linux_server:7.0:*:*:*:*:*:*:*
  • cpe:2.3:o:redhat:enterprise_linux_server_aus:7.2:*:*:*:*:*:*:*
    cpe:2.3:o:redhat:enterprise_linux_server_aus:7.2:*:*:*:*:*:*:*
  • cpe:2.3:o:redhat:enterprise_linux_server_eus:7.2:*:*:*:*:*:*:*
    cpe:2.3:o:redhat:enterprise_linux_server_eus:7.2:*:*:*:*:*:*:*
  • cpe:2.3:o:redhat:enterprise_linux_workstation:7.0:*:*:*:*:*:*:*
    cpe:2.3:o:redhat:enterprise_linux_workstation:7.0:*:*:*:*:*:*:*
  • cpe:2.3:o:oracle:linux:7.0:*:*:*:*:*:*:*
    cpe:2.3:o:oracle:linux:7.0:*:*:*:*:*:*:*
  • cpe:2.3:o:oracle:solaris:11.3:*:*:*:*:*:*:*
    cpe:2.3:o:oracle:solaris:11.3:*:*:*:*:*:*:*
  • cpe:2.3:a:oracle:mysql:5.5.0:*:*:*:*:*:*:*
    cpe:2.3:a:oracle:mysql:5.5.0:*:*:*:*:*:*:*
  • cpe:2.3:a:oracle:mysql:5.5.1:*:*:*:*:*:*:*
    cpe:2.3:a:oracle:mysql:5.5.1:*:*:*:*:*:*:*
  • cpe:2.3:a:oracle:mysql:5.5.2:*:*:*:*:*:*:*
    cpe:2.3:a:oracle:mysql:5.5.2:*:*:*:*:*:*:*
  • cpe:2.3:a:oracle:mysql:5.5.3:*:*:*:*:*:*:*
    cpe:2.3:a:oracle:mysql:5.5.3:*:*:*:*:*:*:*
  • cpe:2.3:a:oracle:mysql:5.5.4:*:*:*:*:*:*:*
    cpe:2.3:a:oracle:mysql:5.5.4:*:*:*:*:*:*:*
  • cpe:2.3:a:oracle:mysql:5.5.5:*:*:*:*:*:*:*
    cpe:2.3:a:oracle:mysql:5.5.5:*:*:*:*:*:*:*
  • cpe:2.3:a:oracle:mysql:5.5.6:*:*:*:*:*:*:*
    cpe:2.3:a:oracle:mysql:5.5.6:*:*:*:*:*:*:*
  • cpe:2.3:a:oracle:mysql:5.5.7:*:*:*:*:*:*:*
    cpe:2.3:a:oracle:mysql:5.5.7:*:*:*:*:*:*:*
  • cpe:2.3:a:oracle:mysql:5.5.8:*:*:*:*:*:*:*
    cpe:2.3:a:oracle:mysql:5.5.8:*:*:*:*:*:*:*
  • cpe:2.3:a:oracle:mysql:5.5.9:*:*:*:*:*:*:*
    cpe:2.3:a:oracle:mysql:5.5.9:*:*:*:*:*:*:*
  • cpe:2.3:a:oracle:mysql:5.5.10:*:*:*:*:*:*:*
    cpe:2.3:a:oracle:mysql:5.5.10:*:*:*:*:*:*:*
  • cpe:2.3:a:oracle:mysql:5.5.11:*:*:*:*:*:*:*
    cpe:2.3:a:oracle:mysql:5.5.11:*:*:*:*:*:*:*
  • cpe:2.3:a:oracle:mysql:5.5.12:*:*:*:*:*:*:*
    cpe:2.3:a:oracle:mysql:5.5.12:*:*:*:*:*:*:*
  • cpe:2.3:a:oracle:mysql:5.5.13:*:*:*:*:*:*:*
    cpe:2.3:a:oracle:mysql:5.5.13:*:*:*:*:*:*:*
  • cpe:2.3:a:oracle:mysql:5.5.14:*:*:*:*:*:*:*
    cpe:2.3:a:oracle:mysql:5.5.14:*:*:*:*:*:*:*
  • cpe:2.3:a:oracle:mysql:5.5.15:*:*:*:*:*:*:*
    cpe:2.3:a:oracle:mysql:5.5.15:*:*:*:*:*:*:*
  • cpe:2.3:a:oracle:mysql:5.5.16:*:*:*:*:*:*:*
    cpe:2.3:a:oracle:mysql:5.5.16:*:*:*:*:*:*:*
  • cpe:2.3:a:oracle:mysql:5.5.17:*:*:*:*:*:*:*
    cpe:2.3:a:oracle:mysql:5.5.17:*:*:*:*:*:*:*
  • cpe:2.3:a:oracle:mysql:5.5.18:*:*:*:*:*:*:*
    cpe:2.3:a:oracle:mysql:5.5.18:*:*:*:*:*:*:*
  • cpe:2.3:a:oracle:mysql:5.5.19:*:*:*:*:*:*:*
    cpe:2.3:a:oracle:mysql:5.5.19:*:*:*:*:*:*:*
  • cpe:2.3:a:oracle:mysql:5.5.20:*:*:*:*:*:*:*
    cpe:2.3:a:oracle:mysql:5.5.20:*:*:*:*:*:*:*
  • cpe:2.3:a:oracle:mysql:5.5.21:*:*:*:*:*:*:*
    cpe:2.3:a:oracle:mysql:5.5.21:*:*:*:*:*:*:*
  • cpe:2.3:a:oracle:mysql:5.5.22:*:*:*:*:*:*:*
    cpe:2.3:a:oracle:mysql:5.5.22:*:*:*:*:*:*:*
  • cpe:2.3:a:oracle:mysql:5.5.23:*:*:*:*:*:*:*
    cpe:2.3:a:oracle:mysql:5.5.23:*:*:*:*:*:*:*
  • cpe:2.3:a:oracle:mysql:5.5.24:*:*:*:*:*:*:*
    cpe:2.3:a:oracle:mysql:5.5.24:*:*:*:*:*:*:*
  • cpe:2.3:a:oracle:mysql:5.5.25:*:*:*:*:*:*:*
    cpe:2.3:a:oracle:mysql:5.5.25:*:*:*:*:*:*:*
  • cpe:2.3:a:oracle:mysql:5.5.25:a:*:*:*:*:*:*
    cpe:2.3:a:oracle:mysql:5.5.25:a:*:*:*:*:*:*
  • cpe:2.3:a:oracle:mysql:5.5.26:*:*:*:*:*:*:*
    cpe:2.3:a:oracle:mysql:5.5.26:*:*:*:*:*:*:*
  • cpe:2.3:a:oracle:mysql:5.5.27:*:*:*:*:*:*:*
    cpe:2.3:a:oracle:mysql:5.5.27:*:*:*:*:*:*:*
  • cpe:2.3:a:oracle:mysql:5.5.28:*:*:*:*:*:*:*
    cpe:2.3:a:oracle:mysql:5.5.28:*:*:*:*:*:*:*
  • cpe:2.3:a:oracle:mysql:5.5.29:*:*:*:*:*:*:*
    cpe:2.3:a:oracle:mysql:5.5.29:*:*:*:*:*:*:*
  • cpe:2.3:a:oracle:mysql:5.5.30:*:*:*:*:*:*:*
    cpe:2.3:a:oracle:mysql:5.5.30:*:*:*:*:*:*:*
  • cpe:2.3:a:oracle:mysql:5.5.31:*:*:*:*:*:*:*
    cpe:2.3:a:oracle:mysql:5.5.31:*:*:*:*:*:*:*
  • cpe:2.3:a:oracle:mysql:5.5.32:*:*:*:*:*:*:*
    cpe:2.3:a:oracle:mysql:5.5.32:*:*:*:*:*:*:*
  • cpe:2.3:a:oracle:mysql:5.5.33:*:*:*:*:*:*:*
    cpe:2.3:a:oracle:mysql:5.5.33:*:*:*:*:*:*:*
  • cpe:2.3:a:oracle:mysql:5.5.34:*:*:*:*:*:*:*
    cpe:2.3:a:oracle:mysql:5.5.34:*:*:*:*:*:*:*
  • cpe:2.3:a:oracle:mysql:5.5.35:*:*:*:*:*:*:*
    cpe:2.3:a:oracle:mysql:5.5.35:*:*:*:*:*:*:*
  • cpe:2.3:a:oracle:mysql:5.5.36:*:*:*:*:*:*:*
    cpe:2.3:a:oracle:mysql:5.5.36:*:*:*:*:*:*:*
  • cpe:2.3:a:oracle:mysql:5.5.37:*:*:*:*:*:*:*
    cpe:2.3:a:oracle:mysql:5.5.37:*:*:*:*:*:*:*
  • cpe:2.3:a:oracle:mysql:5.5.38:*:*:*:*:*:*:*
    cpe:2.3:a:oracle:mysql:5.5.38:*:*:*:*:*:*:*
  • cpe:2.3:a:oracle:mysql:5.5.39:*:*:*:*:*:*:*
    cpe:2.3:a:oracle:mysql:5.5.39:*:*:*:*:*:*:*
  • cpe:2.3:a:oracle:mysql:5.5.40:*:*:*:*:*:*:*
    cpe:2.3:a:oracle:mysql:5.5.40:*:*:*:*:*:*:*
  • cpe:2.3:a:oracle:mysql:5.5.41:*:*:*:*:*:*:*
    cpe:2.3:a:oracle:mysql:5.5.41:*:*:*:*:*:*:*
  • cpe:2.3:a:oracle:mysql:5.5.42:*:*:*:*:*:*:*
    cpe:2.3:a:oracle:mysql:5.5.42:*:*:*:*:*:*:*
  • cpe:2.3:a:oracle:mysql:5.5.43:*:*:*:*:*:*:*
    cpe:2.3:a:oracle:mysql:5.5.43:*:*:*:*:*:*:*
  • cpe:2.3:a:oracle:mysql:5.5.44:*:*:*:*:*:*:*
    cpe:2.3:a:oracle:mysql:5.5.44:*:*:*:*:*:*:*
  • cpe:2.3:a:oracle:mysql:5.6.0:*:*:*:*:*:*:*
    cpe:2.3:a:oracle:mysql:5.6.0:*:*:*:*:*:*:*
  • cpe:2.3:a:oracle:mysql:5.6.0:*:*:*:enterprise:*:*:*
    cpe:2.3:a:oracle:mysql:5.6.0:*:*:*:enterprise:*:*:*
  • cpe:2.3:a:oracle:mysql:5.6.1:*:*:*:*:*:*:*
    cpe:2.3:a:oracle:mysql:5.6.1:*:*:*:*:*:*:*
  • cpe:2.3:a:oracle:mysql:5.6.2:*:*:*:*:*:*:*
    cpe:2.3:a:oracle:mysql:5.6.2:*:*:*:*:*:*:*
  • cpe:2.3:a:oracle:mysql:5.6.3:*:*:*:*:*:*:*
    cpe:2.3:a:oracle:mysql:5.6.3:*:*:*:*:*:*:*
  • cpe:2.3:a:oracle:mysql:5.6.4:*:*:*:*:*:*:*
    cpe:2.3:a:oracle:mysql:5.6.4:*:*:*:*:*:*:*
  • cpe:2.3:a:oracle:mysql:5.6.5:*:*:*:*:*:*:*
    cpe:2.3:a:oracle:mysql:5.6.5:*:*:*:*:*:*:*
  • cpe:2.3:a:oracle:mysql:5.6.6:*:*:*:*:*:*:*
    cpe:2.3:a:oracle:mysql:5.6.6:*:*:*:*:*:*:*
  • cpe:2.3:a:oracle:mysql:5.6.7:*:*:*:*:*:*:*
    cpe:2.3:a:oracle:mysql:5.6.7:*:*:*:*:*:*:*
  • cpe:2.3:a:oracle:mysql:5.6.8:*:*:*:*:*:*:*
    cpe:2.3:a:oracle:mysql:5.6.8:*:*:*:*:*:*:*
  • cpe:2.3:a:oracle:mysql:5.6.9:*:*:*:*:*:*:*
    cpe:2.3:a:oracle:mysql:5.6.9:*:*:*:*:*:*:*
  • cpe:2.3:a:oracle:mysql:5.6.10:*:*:*:*:*:*:*
    cpe:2.3:a:oracle:mysql:5.6.10:*:*:*:*:*:*:*
  • cpe:2.3:a:oracle:mysql:5.6.11:*:*:*:*:*:*:*
    cpe:2.3:a:oracle:mysql:5.6.11:*:*:*:*:*:*:*
  • cpe:2.3:a:oracle:mysql:5.6.12:*:*:*:*:*:*:*
    cpe:2.3:a:oracle:mysql:5.6.12:*:*:*:*:*:*:*
  • cpe:2.3:a:oracle:mysql:5.6.13:*:*:*:*:*:*:*
    cpe:2.3:a:oracle:mysql:5.6.13:*:*:*:*:*:*:*
  • cpe:2.3:a:oracle:mysql:5.6.14:*:*:*:*:*:*:*
    cpe:2.3:a:oracle:mysql:5.6.14:*:*:*:*:*:*:*
  • cpe:2.3:a:oracle:mysql:5.6.15:*:*:*:*:*:*:*
    cpe:2.3:a:oracle:mysql:5.6.15:*:*:*:*:*:*:*
  • cpe:2.3:a:oracle:mysql:5.6.16:*:*:*:*:*:*:*
    cpe:2.3:a:oracle:mysql:5.6.16:*:*:*:*:*:*:*
  • cpe:2.3:a:oracle:mysql:5.6.17:*:*:*:*:*:*:*
    cpe:2.3:a:oracle:mysql:5.6.17:*:*:*:*:*:*:*
  • cpe:2.3:a:oracle:mysql:5.6.18:*:*:*:*:*:*:*
    cpe:2.3:a:oracle:mysql:5.6.18:*:*:*:*:*:*:*
  • cpe:2.3:a:oracle:mysql:5.6.19:*:*:*:*:*:*:*
    cpe:2.3:a:oracle:mysql:5.6.19:*:*:*:*:*:*:*
  • cpe:2.3:a:oracle:mysql:5.6.20:*:*:*:*:*:*:*
    cpe:2.3:a:oracle:mysql:5.6.20:*:*:*:*:*:*:*
  • cpe:2.3:a:oracle:mysql:5.6.21:*:*:*:*:*:*:*
    cpe:2.3:a:oracle:mysql:5.6.21:*:*:*:*:*:*:*
  • cpe:2.3:a:oracle:mysql:5.6.22:*:*:*:*:*:*:*
    cpe:2.3:a:oracle:mysql:5.6.22:*:*:*:*:*:*:*
  • cpe:2.3:a:oracle:mysql:5.6.23:*:*:*:*:*:*:*
    cpe:2.3:a:oracle:mysql:5.6.23:*:*:*:*:*:*:*
  • cpe:2.3:a:oracle:mysql:5.6.24:*:*:*:*:*:*:*
    cpe:2.3:a:oracle:mysql:5.6.24:*:*:*:*:*:*:*
  • cpe:2.3:a:oracle:mysql:5.6.25:*:*:*:*:*:*:*
    cpe:2.3:a:oracle:mysql:5.6.25:*:*:*:*:*:*:*
  • cpe:2.3:o:debian:debian_linux:7.0:*:*:*:*:*:*:*
    cpe:2.3:o:debian:debian_linux:7.0:*:*:*:*:*:*:*
  • cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:*
    cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:*
  • cpe:2.3:o:canonical:ubuntu_linux:12.04:*:*:*:lts:*:*:*
    cpe:2.3:o:canonical:ubuntu_linux:12.04:*:*:*:lts:*:*:*
  • cpe:2.3:o:canonical:ubuntu_linux:14.04:*:*:*:lts:*:*:*
    cpe:2.3:o:canonical:ubuntu_linux:14.04:*:*:*:lts:*:*:*
  • cpe:2.3:o:canonical:ubuntu_linux:15.04:*:*:*:*:*:*:*
    cpe:2.3:o:canonical:ubuntu_linux:15.04:*:*:*:*:*:*:*
  • cpe:2.3:o:canonical:ubuntu_linux:15.10:*:*:*:*:*:*:*
    cpe:2.3:o:canonical:ubuntu_linux:15.10:*:*:*:*:*:*:*
CVSS
Base: 4.6 (as of 11-02-2019 - 17:46)
Impact:
Exploitability:
CWE NVD-CWE-noinfo
CAPEC
Access
VectorComplexityAuthentication
NETWORK HIGH SINGLE
Impact
ConfidentialityIntegrityAvailability
PARTIAL PARTIAL PARTIAL
cvss-vector via4 AV:N/AC:H/Au:S/C:P/I:P/A:P
redhat via4
advisories
  • bugzilla
    id 1244781
    title CVE-2015-4757 mysql: unspecified vulnerability related to Server:Optimizer (CPU July 2015)
    oval
    AND
    • comment Red Hat Enterprise Linux 5 is installed
      oval oval:com.redhat.rhba:tst:20070331001
    • OR
      • AND
        • comment mysql55-mysql is earlier than 0:5.5.45-1.el5
          oval oval:com.redhat.rhsa:tst:20151628002
        • comment mysql55-mysql is signed with Red Hat redhatrelease key
          oval oval:com.redhat.rhsa:tst:20140186003
      • AND
        • comment mysql55-mysql-bench is earlier than 0:5.5.45-1.el5
          oval oval:com.redhat.rhsa:tst:20151628012
        • comment mysql55-mysql-bench is signed with Red Hat redhatrelease key
          oval oval:com.redhat.rhsa:tst:20140186009
      • AND
        • comment mysql55-mysql-devel is earlier than 0:5.5.45-1.el5
          oval oval:com.redhat.rhsa:tst:20151628006
        • comment mysql55-mysql-devel is signed with Red Hat redhatrelease key
          oval oval:com.redhat.rhsa:tst:20140186011
      • AND
        • comment mysql55-mysql-libs is earlier than 0:5.5.45-1.el5
          oval oval:com.redhat.rhsa:tst:20151628010
        • comment mysql55-mysql-libs is signed with Red Hat redhatrelease key
          oval oval:com.redhat.rhsa:tst:20140186005
      • AND
        • comment mysql55-mysql-server is earlier than 0:5.5.45-1.el5
          oval oval:com.redhat.rhsa:tst:20151628004
        • comment mysql55-mysql-server is signed with Red Hat redhatrelease key
          oval oval:com.redhat.rhsa:tst:20140186007
      • AND
        • comment mysql55-mysql-test is earlier than 0:5.5.45-1.el5
          oval oval:com.redhat.rhsa:tst:20151628008
        • comment mysql55-mysql-test is signed with Red Hat redhatrelease key
          oval oval:com.redhat.rhsa:tst:20140186013
    rhsa
    id RHSA-2015:1628
    released 2015-08-17
    severity Moderate
    title RHSA-2015:1628: mysql55-mysql security update (Moderate)
  • rhsa
    id RHSA-2016:0534
  • rhsa
    id RHSA-2016:1132
  • rhsa
    id RHSA-2016:1481
rpms
  • mysql55-mysql-0:5.5.45-1.el5
  • mysql55-mysql-bench-0:5.5.45-1.el5
  • mysql55-mysql-devel-0:5.5.45-1.el5
  • mysql55-mysql-libs-0:5.5.45-1.el5
  • mysql55-mysql-server-0:5.5.45-1.el5
  • mysql55-mysql-test-0:5.5.45-1.el5
  • mariadb-1:5.5.47-1.el7_2
  • mariadb-bench-1:5.5.47-1.el7_2
  • mariadb-devel-1:5.5.47-1.el7_2
  • mariadb-embedded-1:5.5.47-1.el7_2
  • mariadb-embedded-devel-1:5.5.47-1.el7_2
  • mariadb-libs-1:5.5.47-1.el7_2
  • mariadb-server-1:5.5.47-1.el7_2
  • mariadb-test-1:5.5.47-1.el7_2
refmap via4
bid 77140
confirm
debian
  • DSA-3377
  • DSA-3385
fedora FEDORA-2016-e30164d0a2
sectrack 1033894
ubuntu USN-2781-1
Last major update 11-02-2019 - 17:46
Published 21-10-2015 - 23:59
Back to Top