Vulnerability-Lookup

RHSA-2016:1132

Vulnerability from csaf_redhat - Published: 2016-05-26 08:35 - Updated: 2026-08-04 21:57

Summary

Red Hat Security Advisory: rh-mariadb100-mariadb security update

Severity

Important

Notes

Topic: An update for rh-mariadb100-mariadb is now available for Red Hat Software Collections. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.

Details: MariaDB is a multi-user, multi-threaded SQL database server. For all practical purposes, MariaDB is binary-compatible with MySQL. MariaDB uses PCRE, a Perl-compatible regular expression library, to implement regular expression support in SQL queries. Security Fix(es): * It was found that the MariaDB client library did not properly check host names against server identities noted in the X.509 certificates when establishing secure connections using TLS/SSL. A man-in-the-middle attacker could possibly use this flaw to impersonate a server to a client. (CVE-2016-2047) * This update fixes several vulnerabilities in the MariaDB database server. Information about these flaws can be found on the Oracle Critical Patch Update Advisory page, listed in the References section. (CVE-2015-4792, CVE-2015-4802, CVE-2015-4815, CVE-2015-4816, CVE-2015-4819, CVE-2015-4826, CVE-2015-4830, CVE-2015-4836, CVE-2015-4858, CVE-2015-4861, CVE-2015-4870, CVE-2015-4879, CVE-2015-4895, CVE-2015-4913, CVE-2016-0505, CVE-2016-0546, CVE-2016-0596, CVE-2016-0597, CVE-2016-0598, CVE-2016-0600, CVE-2016-0606, CVE-2016-0608, CVE-2016-0609, CVE-2016-0610, CVE-2016-0616, CVE-2016-0640, CVE-2016-0641, CVE-2016-0642, CVE-2016-0643, CVE-2016-0644, CVE-2016-0646, CVE-2016-0647, CVE-2016-0648, CVE-2016-0649, CVE-2016-0650, CVE-2016-0651, CVE-2016-0655, CVE-2016-0666, CVE-2016-0668) * Multiple flaws were found in the way PCRE handled malformed regular expressions. An attacker able to make MariaDB execute an SQL query with a specially crafted regular expression could use these flaws to cause it to crash or, possibly, execute arbitrary code. (CVE-2015-3210, CVE-2015-3217, CVE-2015-5073, CVE-2015-8381, CVE-2015-8383, CVE-2015-8384, CVE-2015-8385, CVE-2015-8386, CVE-2015-8388, CVE-2015-8391, CVE-2015-8392, CVE-2015-8395, CVE-2016-1283, CVE-2016-3191)

Terms of Use: This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.

CVE-2015-3210

Heap-based buffer overflow in PCRE 8.34 through 8.37 and PCRE2 10.10 allows remote attackers to execute arbitrary code via a crafted regular expression, as demonstrated by /^(?P=B)((?P=B)(?J:(?P<B>c)(?P<B>a(?P=B)))>WGXCREDITS)/, a different vulnerability than CVE-2015-8384.

6.8 ()


                
                  AV:N/AC:M/Au:N/C:P/I:P/A:P

CWE-122 - Heap-based Buffer Overflow

Affected products

Fixed 88 products

Product	Version	Remediation
Unresolved product id: 6Server-RHSCL-2.1-6.6.Z:rh-mariadb100-mariadb-1:10.0.25-4.el6.src	—	Vendor Fix fix
Unresolved product id: 6Server-RHSCL-2.1-6.6.Z:rh-mariadb100-mariadb-1:10.0.25-4.el6.x86_64	—	Vendor Fix fix
Unresolved product id: 6Server-RHSCL-2.1-6.6.Z:rh-mariadb100-mariadb-bench-1:10.0.25-4.el6.x86_64	—	Vendor Fix fix
Unresolved product id: 6Server-RHSCL-2.1-6.6.Z:rh-mariadb100-mariadb-common-1:10.0.25-4.el6.x86_64	—	Vendor Fix fix
Unresolved product id: 6Server-RHSCL-2.1-6.6.Z:rh-mariadb100-mariadb-config-1:10.0.25-4.el6.x86_64	—	Vendor Fix fix
Unresolved product id: 6Server-RHSCL-2.1-6.6.Z:rh-mariadb100-mariadb-debuginfo-1:10.0.25-4.el6.x86_64	—	Vendor Fix fix
Unresolved product id: 6Server-RHSCL-2.1-6.6.Z:rh-mariadb100-mariadb-devel-1:10.0.25-4.el6.x86_64	—	Vendor Fix fix
Unresolved product id: 6Server-RHSCL-2.1-6.6.Z:rh-mariadb100-mariadb-errmsg-1:10.0.25-4.el6.x86_64	—	Vendor Fix fix
Unresolved product id: 6Server-RHSCL-2.1-6.6.Z:rh-mariadb100-mariadb-oqgraph-engine-1:10.0.25-4.el6.x86_64	—	Vendor Fix fix
Unresolved product id: 6Server-RHSCL-2.1-6.6.Z:rh-mariadb100-mariadb-server-1:10.0.25-4.el6.x86_64	—	Vendor Fix fix
Unresolved product id: 6Server-RHSCL-2.1-6.6.Z:rh-mariadb100-mariadb-test-1:10.0.25-4.el6.x86_64	—	Vendor Fix fix
Unresolved product id: 6Server-RHSCL-2.1-6.7.Z:rh-mariadb100-mariadb-1:10.0.25-4.el6.src	—	Vendor Fix fix
Unresolved product id: 6Server-RHSCL-2.1-6.7.Z:rh-mariadb100-mariadb-1:10.0.25-4.el6.x86_64	—	Vendor Fix fix
Unresolved product id: 6Server-RHSCL-2.1-6.7.Z:rh-mariadb100-mariadb-bench-1:10.0.25-4.el6.x86_64	—	Vendor Fix fix
Unresolved product id: 6Server-RHSCL-2.1-6.7.Z:rh-mariadb100-mariadb-common-1:10.0.25-4.el6.x86_64	—	Vendor Fix fix
Unresolved product id: 6Server-RHSCL-2.1-6.7.Z:rh-mariadb100-mariadb-config-1:10.0.25-4.el6.x86_64	—	Vendor Fix fix
Unresolved product id: 6Server-RHSCL-2.1-6.7.Z:rh-mariadb100-mariadb-debuginfo-1:10.0.25-4.el6.x86_64	—	Vendor Fix fix
Unresolved product id: 6Server-RHSCL-2.1-6.7.Z:rh-mariadb100-mariadb-devel-1:10.0.25-4.el6.x86_64	—	Vendor Fix fix
Unresolved product id: 6Server-RHSCL-2.1-6.7.Z:rh-mariadb100-mariadb-errmsg-1:10.0.25-4.el6.x86_64	—	Vendor Fix fix
Unresolved product id: 6Server-RHSCL-2.1-6.7.Z:rh-mariadb100-mariadb-oqgraph-engine-1:10.0.25-4.el6.x86_64	—	Vendor Fix fix
Unresolved product id: 6Server-RHSCL-2.1-6.7.Z:rh-mariadb100-mariadb-server-1:10.0.25-4.el6.x86_64	—	Vendor Fix fix
Unresolved product id: 6Server-RHSCL-2.1-6.7.Z:rh-mariadb100-mariadb-test-1:10.0.25-4.el6.x86_64	—	Vendor Fix fix
Unresolved product id: 6Server-RHSCL-2.1:rh-mariadb100-mariadb-1:10.0.25-4.el6.src	—	Vendor Fix fix
Unresolved product id: 6Server-RHSCL-2.1:rh-mariadb100-mariadb-1:10.0.25-4.el6.x86_64	—	Vendor Fix fix
Unresolved product id: 6Server-RHSCL-2.1:rh-mariadb100-mariadb-bench-1:10.0.25-4.el6.x86_64	—	Vendor Fix fix
Unresolved product id: 6Server-RHSCL-2.1:rh-mariadb100-mariadb-common-1:10.0.25-4.el6.x86_64	—	Vendor Fix fix
Unresolved product id: 6Server-RHSCL-2.1:rh-mariadb100-mariadb-config-1:10.0.25-4.el6.x86_64	—	Vendor Fix fix
Unresolved product id: 6Server-RHSCL-2.1:rh-mariadb100-mariadb-debuginfo-1:10.0.25-4.el6.x86_64	—	Vendor Fix fix
Unresolved product id: 6Server-RHSCL-2.1:rh-mariadb100-mariadb-devel-1:10.0.25-4.el6.x86_64	—	Vendor Fix fix
Unresolved product id: 6Server-RHSCL-2.1:rh-mariadb100-mariadb-errmsg-1:10.0.25-4.el6.x86_64	—	Vendor Fix fix
Unresolved product id: 6Server-RHSCL-2.1:rh-mariadb100-mariadb-oqgraph-engine-1:10.0.25-4.el6.x86_64	—	Vendor Fix fix
Unresolved product id: 6Server-RHSCL-2.1:rh-mariadb100-mariadb-server-1:10.0.25-4.el6.x86_64	—	Vendor Fix fix
Unresolved product id: 6Server-RHSCL-2.1:rh-mariadb100-mariadb-test-1:10.0.25-4.el6.x86_64	—	Vendor Fix fix
Unresolved product id: 6Workstation-RHSCL-2.1:rh-mariadb100-mariadb-1:10.0.25-4.el6.src	—	Vendor Fix fix
Unresolved product id: 6Workstation-RHSCL-2.1:rh-mariadb100-mariadb-1:10.0.25-4.el6.x86_64	—	Vendor Fix fix
Unresolved product id: 6Workstation-RHSCL-2.1:rh-mariadb100-mariadb-bench-1:10.0.25-4.el6.x86_64	—	Vendor Fix fix
Unresolved product id: 6Workstation-RHSCL-2.1:rh-mariadb100-mariadb-common-1:10.0.25-4.el6.x86_64	—	Vendor Fix fix
Unresolved product id: 6Workstation-RHSCL-2.1:rh-mariadb100-mariadb-config-1:10.0.25-4.el6.x86_64	—	Vendor Fix fix
Unresolved product id: 6Workstation-RHSCL-2.1:rh-mariadb100-mariadb-debuginfo-1:10.0.25-4.el6.x86_64	—	Vendor Fix fix
Unresolved product id: 6Workstation-RHSCL-2.1:rh-mariadb100-mariadb-devel-1:10.0.25-4.el6.x86_64	—	Vendor Fix fix
Unresolved product id: 6Workstation-RHSCL-2.1:rh-mariadb100-mariadb-errmsg-1:10.0.25-4.el6.x86_64	—	Vendor Fix fix
Unresolved product id: 6Workstation-RHSCL-2.1:rh-mariadb100-mariadb-oqgraph-engine-1:10.0.25-4.el6.x86_64	—	Vendor Fix fix
Unresolved product id: 6Workstation-RHSCL-2.1:rh-mariadb100-mariadb-server-1:10.0.25-4.el6.x86_64	—	Vendor Fix fix
Unresolved product id: 6Workstation-RHSCL-2.1:rh-mariadb100-mariadb-test-1:10.0.25-4.el6.x86_64	—	Vendor Fix fix
Unresolved product id: 7Server-RHSCL-2.1-7.1.Z:rh-mariadb100-mariadb-1:10.0.25-4.el7.src	—	Vendor Fix fix
Unresolved product id: 7Server-RHSCL-2.1-7.1.Z:rh-mariadb100-mariadb-1:10.0.25-4.el7.x86_64	—	Vendor Fix fix
Unresolved product id: 7Server-RHSCL-2.1-7.1.Z:rh-mariadb100-mariadb-bench-1:10.0.25-4.el7.x86_64	—	Vendor Fix fix
Unresolved product id: 7Server-RHSCL-2.1-7.1.Z:rh-mariadb100-mariadb-common-1:10.0.25-4.el7.x86_64	—	Vendor Fix fix
Unresolved product id: 7Server-RHSCL-2.1-7.1.Z:rh-mariadb100-mariadb-config-1:10.0.25-4.el7.x86_64	—	Vendor Fix fix
Unresolved product id: 7Server-RHSCL-2.1-7.1.Z:rh-mariadb100-mariadb-debuginfo-1:10.0.25-4.el7.x86_64	—	Vendor Fix fix
Unresolved product id: 7Server-RHSCL-2.1-7.1.Z:rh-mariadb100-mariadb-devel-1:10.0.25-4.el7.x86_64	—	Vendor Fix fix
Unresolved product id: 7Server-RHSCL-2.1-7.1.Z:rh-mariadb100-mariadb-errmsg-1:10.0.25-4.el7.x86_64	—	Vendor Fix fix
Unresolved product id: 7Server-RHSCL-2.1-7.1.Z:rh-mariadb100-mariadb-oqgraph-engine-1:10.0.25-4.el7.x86_64	—	Vendor Fix fix
Unresolved product id: 7Server-RHSCL-2.1-7.1.Z:rh-mariadb100-mariadb-server-1:10.0.25-4.el7.x86_64	—	Vendor Fix fix
Unresolved product id: 7Server-RHSCL-2.1-7.1.Z:rh-mariadb100-mariadb-test-1:10.0.25-4.el7.x86_64	—	Vendor Fix fix
Unresolved product id: 7Server-RHSCL-2.1-7.2.Z:rh-mariadb100-mariadb-1:10.0.25-4.el7.src	—	Vendor Fix fix
Unresolved product id: 7Server-RHSCL-2.1-7.2.Z:rh-mariadb100-mariadb-1:10.0.25-4.el7.x86_64	—	Vendor Fix fix
Unresolved product id: 7Server-RHSCL-2.1-7.2.Z:rh-mariadb100-mariadb-bench-1:10.0.25-4.el7.x86_64	—	Vendor Fix fix
Unresolved product id: 7Server-RHSCL-2.1-7.2.Z:rh-mariadb100-mariadb-common-1:10.0.25-4.el7.x86_64	—	Vendor Fix fix
Unresolved product id: 7Server-RHSCL-2.1-7.2.Z:rh-mariadb100-mariadb-config-1:10.0.25-4.el7.x86_64	—	Vendor Fix fix
Unresolved product id: 7Server-RHSCL-2.1-7.2.Z:rh-mariadb100-mariadb-debuginfo-1:10.0.25-4.el7.x86_64	—	Vendor Fix fix
Unresolved product id: 7Server-RHSCL-2.1-7.2.Z:rh-mariadb100-mariadb-devel-1:10.0.25-4.el7.x86_64	—	Vendor Fix fix
Unresolved product id: 7Server-RHSCL-2.1-7.2.Z:rh-mariadb100-mariadb-errmsg-1:10.0.25-4.el7.x86_64	—	Vendor Fix fix
Unresolved product id: 7Server-RHSCL-2.1-7.2.Z:rh-mariadb100-mariadb-oqgraph-engine-1:10.0.25-4.el7.x86_64	—	Vendor Fix fix
Unresolved product id: 7Server-RHSCL-2.1-7.2.Z:rh-mariadb100-mariadb-server-1:10.0.25-4.el7.x86_64	—	Vendor Fix fix
Unresolved product id: 7Server-RHSCL-2.1-7.2.Z:rh-mariadb100-mariadb-test-1:10.0.25-4.el7.x86_64	—	Vendor Fix fix
Unresolved product id: 7Server-RHSCL-2.1:rh-mariadb100-mariadb-1:10.0.25-4.el7.src	—	Vendor Fix fix
Unresolved product id: 7Server-RHSCL-2.1:rh-mariadb100-mariadb-1:10.0.25-4.el7.x86_64	—	Vendor Fix fix
Unresolved product id: 7Server-RHSCL-2.1:rh-mariadb100-mariadb-bench-1:10.0.25-4.el7.x86_64	—	Vendor Fix fix
Unresolved product id: 7Server-RHSCL-2.1:rh-mariadb100-mariadb-common-1:10.0.25-4.el7.x86_64	—	Vendor Fix fix
Unresolved product id: 7Server-RHSCL-2.1:rh-mariadb100-mariadb-config-1:10.0.25-4.el7.x86_64	—	Vendor Fix fix
Unresolved product id: 7Server-RHSCL-2.1:rh-mariadb100-mariadb-debuginfo-1:10.0.25-4.el7.x86_64	—	Vendor Fix fix
Unresolved product id: 7Server-RHSCL-2.1:rh-mariadb100-mariadb-devel-1:10.0.25-4.el7.x86_64	—	Vendor Fix fix
Unresolved product id: 7Server-RHSCL-2.1:rh-mariadb100-mariadb-errmsg-1:10.0.25-4.el7.x86_64	—	Vendor Fix fix
Unresolved product id: 7Server-RHSCL-2.1:rh-mariadb100-mariadb-oqgraph-engine-1:10.0.25-4.el7.x86_64	—	Vendor Fix fix
Unresolved product id: 7Server-RHSCL-2.1:rh-mariadb100-mariadb-server-1:10.0.25-4.el7.x86_64	—	Vendor Fix fix
Unresolved product id: 7Server-RHSCL-2.1:rh-mariadb100-mariadb-test-1:10.0.25-4.el7.x86_64	—	Vendor Fix fix
Unresolved product id: 7Workstation-RHSCL-2.1:rh-mariadb100-mariadb-1:10.0.25-4.el7.src	—	Vendor Fix fix
Unresolved product id: 7Workstation-RHSCL-2.1:rh-mariadb100-mariadb-1:10.0.25-4.el7.x86_64	—	Vendor Fix fix
Unresolved product id: 7Workstation-RHSCL-2.1:rh-mariadb100-mariadb-bench-1:10.0.25-4.el7.x86_64	—	Vendor Fix fix
Unresolved product id: 7Workstation-RHSCL-2.1:rh-mariadb100-mariadb-common-1:10.0.25-4.el7.x86_64	—	Vendor Fix fix
Unresolved product id: 7Workstation-RHSCL-2.1:rh-mariadb100-mariadb-config-1:10.0.25-4.el7.x86_64	—	Vendor Fix fix
Unresolved product id: 7Workstation-RHSCL-2.1:rh-mariadb100-mariadb-debuginfo-1:10.0.25-4.el7.x86_64	—	Vendor Fix fix
Unresolved product id: 7Workstation-RHSCL-2.1:rh-mariadb100-mariadb-devel-1:10.0.25-4.el7.x86_64	—	Vendor Fix fix
Unresolved product id: 7Workstation-RHSCL-2.1:rh-mariadb100-mariadb-errmsg-1:10.0.25-4.el7.x86_64	—	Vendor Fix fix
Unresolved product id: 7Workstation-RHSCL-2.1:rh-mariadb100-mariadb-oqgraph-engine-1:10.0.25-4.el7.x86_64	—	Vendor Fix fix
Unresolved product id: 7Workstation-RHSCL-2.1:rh-mariadb100-mariadb-server-1:10.0.25-4.el7.x86_64	—	Vendor Fix fix
Unresolved product id: 7Workstation-RHSCL-2.1:rh-mariadb100-mariadb-test-1:10.0.25-4.el7.x86_64	—	Vendor Fix fix

Threats

Impact Important

CVE-2015-3217

PCRE 7.8 and 8.32 through 8.37, and PCRE2 10.10 mishandle group empty matches, which might allow remote attackers to cause a denial of service (stack-based buffer overflow) via a crafted regular expression, as demonstrated by /^(?:(?(1)\\.|([^\\\\W_])?)+)+$/.

4.3 ()


                
                  AV:N/AC:M/Au:N/C:N/I:N/A:P

CWE-674 - Uncontrolled Recursion

Affected products

Fixed 88 products, the same list as for CVE-2015-3210

Threats

Impact Moderate

CVE-2015-4792

Unspecified vulnerability in Oracle MySQL Server 5.5.45 and earlier and 5.6.26 and earlier allows remote authenticated users to affect availability via unknown vectors related to Server : Partition, a different vulnerability than CVE-2015-4802.

4.0 ()


                
                  AV:N/AC:L/Au:S/C:N/I:N/A:P

Affected products

Fixed 88 products, the same list as for CVE-2015-3210

Threats

Impact Moderate

CVE-2015-4802

4.0 ()


                
                  AV:N/AC:L/Au:S/C:N/I:N/A:P

Affected products

Fixed 88 products, the same list as for CVE-2015-3210

Threats

Impact Moderate

CVE-2015-4815

Unspecified vulnerability in Oracle MySQL Server 5.5.45 and earlier and 5.6.26 and earlier allows remote authenticated users to affect availability via vectors related to Server : DDL.

4.0 ()


                
                  AV:N/AC:L/Au:S/C:N/I:N/A:P

Affected products

Fixed 88 products, the same list as for CVE-2015-3210

Threats

Impact Moderate

CVE-2015-4816

Unspecified vulnerability in Oracle MySQL Server 5.5.44 and earlier allows remote authenticated users to affect availability via unknown vectors related to Server : InnoDB.

4.0 ()


                
                  AV:N/AC:L/Au:S/C:N/I:N/A:P

Affected products

Fixed 88 products, the same list as for CVE-2015-3210

Threats

Impact Moderate

CVE-2015-4819

Unspecified vulnerability in Oracle MySQL Server 5.5.44 and earlier, and 5.6.25 and earlier, allows local users to affect confidentiality, integrity, and availability via unknown vectors related to Client programs.

1.2 ()


                
                  AV:L/AC:H/Au:N/C:N/I:N/A:P

CWE-120 - Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')

Affected products

Fixed 88 products, the same list as for CVE-2015-3210

Threats

Impact Low

CVE-2015-4826

Unspecified vulnerability in Oracle MySQL Server 5.5.45 and earlier and 5.6.26 and earlier allows remote authenticated users to affect confidentiality via unknown vectors related to Server : Types.

4.0 ()


                
                  AV:N/AC:L/Au:S/C:N/I:N/A:P

Affected products

Fixed 88 products, the same list as for CVE-2015-3210

Threats

Impact Moderate

CVE-2015-4830

Unspecified vulnerability in Oracle MySQL Server 5.5.45 and earlier and 5.6.26 and earlier allows remote authenticated users to affect integrity via unknown vectors related to Server : Security : Privileges.

4.0 ()


                
                  AV:N/AC:L/Au:S/C:N/I:N/A:P

Affected products

Fixed 88 products, the same list as for CVE-2015-3210

Threats

Impact Moderate

CVE-2015-4836

Unspecified vulnerability in Oracle MySQL Server 5.5.45 and earlier, and 5.6.26 and earlier, allows remote authenticated users to affect availability via unknown vectors related to Server : SP.

4.0 ()


                
                  AV:N/AC:L/Au:S/C:N/I:N/A:P

Affected products

Fixed 88 products, the same list as for CVE-2015-3210

Threats

Impact Moderate

CVE-2015-4858

Unspecified vulnerability in Oracle MySQL Server 5.5.45 and earlier, and 5.6.26 and earlier, allows remote authenticated users to affect availability via vectors related to DML, a different vulnerability than CVE-2015-4913.

4.0 ()


                
                  AV:N/AC:L/Au:S/C:N/I:N/A:P

Affected products

Fixed 88 products, the same list as for CVE-2015-3210

Threats

Impact Moderate

CVE-2015-4861

Unspecified vulnerability in Oracle MySQL Server 5.5.45 and earlier, and 5.6.26 and earlier, allows remote authenticated users to affect availability via unknown vectors related to Server : InnoDB.

4.0 ()


                
                  AV:N/AC:L/Au:S/C:N/I:N/A:P

Affected products

Fixed 88 products, the same list as for CVE-2015-3210

Threats

Impact Moderate

CVE-2015-4870

Unspecified vulnerability in Oracle MySQL Server 5.5.45 and earlier, and 5.6.26 and earlier, allows remote authenticated users to affect availability via unknown vectors related to Server : Parser.

4.0 ()


                
                  AV:N/AC:L/Au:S/C:N/I:N/A:P

Affected products

Fixed 88 products, the same list as for CVE-2015-3210

Threats

Impact Moderate

CVE-2015-4879

Unspecified vulnerability in Oracle MySQL Server 5.5.44 and earlier, and 5.6.25 and earlier, allows remote authenticated users to affect confidentiality, integrity, and availability via vectors related to DML.

4.6 ()


                
                  AV:N/AC:H/Au:S/C:P/I:P/A:P

Affected products

Fixed 88 products, the same list as for CVE-2015-3210

Threats

Impact Moderate

CVE-2015-4895

Unspecified vulnerability in Oracle MySQL Server 5.6.25 and earlier allows remote authenticated users to affect availability via unknown vectors related to Server : InnoDB.

4.0 ()


                
                  AV:N/AC:L/Au:S/C:N/I:N/A:P

Affected products

Fixed 88 products, the same list as for CVE-2015-3210

Threats

Impact Moderate

CVE-2015-4913

Unspecified vulnerability in Oracle MySQL Server 5.5.45 and earlier and 5.6.26 and earlier allows remote authenticated users to affect availability via vectors related to Server : DML, a different vulnerability than CVE-2015-4858.

4.0 ()


                
                  AV:N/AC:L/Au:S/C:N/I:N/A:P

Affected products

Fixed 88 products, the same list as for CVE-2015-3210

Threats

Impact Moderate

CVE-2015-5073

Heap-based buffer overflow in the find_fixedlength function in pcre_compile.c in PCRE before 8.38 allows remote attackers to cause a denial of service (crash) or obtain sensitive information from heap memory and possibly bypass the ASLR protection mechanism via a crafted regular expression with an excess closing parenthesis.

4.3 ()


                
                  AV:N/AC:M/Au:N/C:N/I:N/A:P

CWE-122 - Heap-based Buffer Overflow

Affected products

Fixed 88 products, the same list as for CVE-2015-3210

Threats

Impact Moderate

CVE-2015-8381

The compile_regex function in pcre_compile.c in PCRE before 8.38 and pcre2_compile.c in PCRE2 before 10.2x mishandles the /(?J:(?|(:(?|(?'R')(\k'R')|((?'R')))H'Rk'Rf)|s(?'R'))))/ and /(?J:(?|(:(?|(?'R')(\z(?|(?'R')(\k'R')|((?'R')))k'R')|((?'R')))H'Ak'Rf)|s(?'R')))/ patterns, and related patterns with certain group references, which allows remote attackers to cause a denial of service (heap-based buffer overflow) or possibly have unspecified other impact via a crafted regular expression, as demonstrated by a JavaScript RegExp object encountered by Konqueror.

6.8 ()


                
                  AV:N/AC:M/Au:N/C:P/I:P/A:P

CWE-120 - Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')

Affected products

Fixed 88 products, the same list as for CVE-2015-3210

Threats

Impact Important

CVE-2015-8383

PCRE before 8.38 mishandles certain repeated conditional groups, which allows remote attackers to cause a denial of service (buffer overflow) or possibly have unspecified other impact via a crafted regular expression, as demonstrated by a JavaScript RegExp object encountered by Konqueror.

6.8 ()


                
                  AV:N/AC:M/Au:N/C:P/I:P/A:P

CWE-120 - Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')

Affected products

Fixed 88 products, the same list as for CVE-2015-3210

Threats

Impact Important

CVE-2015-8384

PCRE before 8.38 mishandles the /(?J)(?'d'(?'d'\g{d}))/ pattern and related patterns with certain recursive back references, which allows remote attackers to cause a denial of service (buffer overflow) or possibly have unspecified other impact via a crafted regular expression, as demonstrated by a JavaScript RegExp object encountered by Konqueror, a related issue to CVE-2015-8392 and CVE-2015-8395.

6.8 ()


                
                  AV:N/AC:M/Au:N/C:P/I:P/A:P

CWE-122 - Heap-based Buffer Overflow

Affected products

Fixed 88 products, the same list as for CVE-2015-3210

Threats

Impact Important

CVE-2015-8385

PCRE before 8.38 mishandles the /(?|(\k'Pm')|(?'Pm'))/ pattern and related patterns with certain forward references, which allows remote attackers to cause a denial of service (buffer overflow) or possibly have unspecified other impact via a crafted regular expression, as demonstrated by a JavaScript RegExp object encountered by Konqueror.

6.8 ()


                
                  AV:N/AC:M/Au:N/C:P/I:P/A:P

CWE-120 - Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')

Affected products

Fixed 88 products, the same list as for CVE-2015-3210

Threats

Impact Important

CVE-2015-8386

PCRE before 8.38 mishandles the interaction of lookbehind assertions and mutually recursive subpatterns, which allows remote attackers to cause a denial of service (buffer overflow) or possibly have unspecified other impact via a crafted regular expression, as demonstrated by a JavaScript RegExp object encountered by Konqueror.

2.6 ()


                
                  AV:N/AC:H/Au:N/C:N/I:N/A:P

CWE-120 - Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')

Affected products

Fixed 88 products, the same list as for CVE-2015-3210

Threats

Impact Low

CVE-2015-8388

PCRE before 8.38 mishandles the /(?=di(?<=(?1))|(?=(.))))/ pattern and related patterns with an unmatched closing parenthesis, which allows remote attackers to cause a denial of service (buffer overflow) or possibly have unspecified other impact via a crafted regular expression, as demonstrated by a JavaScript RegExp object encountered by Konqueror.

4.3 ()


                
                  AV:N/AC:M/Au:N/C:N/I:N/A:P

CWE-122 - Heap-based Buffer Overflow

Affected products

Fixed 88 products, the same list as for CVE-2015-3210

Threats

Impact Moderate

CVE-2015-8391

The pcre_compile function in pcre_compile.c in PCRE before 8.38 mishandles certain [: nesting, which allows remote attackers to cause a denial of service (CPU consumption) or possibly have unspecified other impact via a crafted regular expression, as demonstrated by a JavaScript RegExp object encountered by Konqueror.

4.3 ()


                
                  AV:N/AC:M/Au:N/C:N/I:N/A:P

CWE-407 - Inefficient Algorithmic Complexity

Affected products

Fixed 88 products, the same list as for CVE-2015-3210

Threats

Impact Moderate

CVE-2015-8392

PCRE before 8.38 mishandles certain instances of the (?| substring, which allows remote attackers to cause a denial of service (unintended recursion and buffer overflow) or possibly have unspecified other impact via a crafted regular expression, as demonstrated by a JavaScript RegExp object encountered by Konqueror, a related issue to CVE-2015-8384 and CVE-2015-8395.

6.8 ()


                
                  AV:N/AC:M/Au:N/C:P/I:P/A:P

CWE-120 - Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')

Affected products

Fixed 88 products, the same list as for CVE-2015-3210

Threats

Impact Important

CVE-2015-8395

PCRE before 8.38 mishandles certain references, which allows remote attackers to cause a denial of service or possibly have unspecified other impact via a crafted regular expression, as demonstrated by a JavaScript RegExp object encountered by Konqueror, a related issue to CVE-2015-8384 and CVE-2015-8392.

6.8 ()


                
                  AV:N/AC:M/Au:N/C:P/I:P/A:P

CWE-120 - Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')

Affected products

Fixed 88 products, the same list as for CVE-2015-3210

Threats

Impact Important

CVE-2016-0505

4.0 ()


                
                  AV:N/AC:L/Au:S/C:N/I:N/A:P

Affected products

Fixed 88 products, the same list as for CVE-2015-3210

Threats

Impact Moderate

CVE-2016-0546

Unspecified vulnerability in Oracle MySQL 5.5.46 and earlier, 5.6.27 and earlier, and 5.7.9 and MariaDB before 5.5.47, 10.0.x before 10.0.23, and 10.1.x before 10.1.10 allows local users to affect confidentiality, integrity, and availability via unknown vectors related to Client. NOTE: the previous information is from the January 2016 CPU. Oracle has not commented on third-party claims that these are multiple buffer overflows in the mysqlshow tool that allow remote database servers to have unspecified impact via a long table or database name.

5.1 ()


                
                  AV:N/AC:H/Au:N/C:P/I:P/A:P

CWE-120 - Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')

Affected products

Fixed 88 products, the same list as for CVE-2015-3210

Threats

Impact Low

CVE-2016-0596

Unspecified vulnerability in Oracle MySQL 5.5.46 and earlier and 5.6.27 and earlier and MariaDB before 5.5.47, 10.0.x before 10.0.23, and 10.1.x before 10.1.10 allows remote authenticated users to affect availability via vectors related to DML.

4.0 ()


                
                  AV:N/AC:L/Au:S/C:N/I:N/A:P

Affected products

Fixed 88 products, the same list as for CVE-2015-3210

Threats

Impact Moderate

CVE-2016-0597

4.0 ()


                
                  AV:N/AC:L/Au:S/C:N/I:N/A:P

Affected products

Fixed 88 products, the same list as for CVE-2015-3210

Threats

Impact Moderate

CVE-2016-0598

3.5 ()


                
                  AV:N/AC:M/Au:S/C:N/I:N/A:P

Affected products

Fixed 88 products, the same list as for CVE-2015-3210

Threats

Impact Low

CVE-2016-0600

3.5 ()


                
                  AV:N/AC:M/Au:S/C:N/I:N/A:P

Affected products

Fixed 88 products, the same list as for CVE-2015-3210

Threats

Impact Low

CVE-2016-0606

3.5 ()


                
                  AV:N/AC:M/Au:S/C:N/I:P/A:N

Affected products

Fixed 88 products, the same list as for CVE-2015-3210

Threats

Impact Low

CVE-2016-0608

3.5 ()


                
                  AV:N/AC:M/Au:S/C:N/I:N/A:P

Affected products

Fixed 88 products, the same list as for CVE-2015-3210

Threats

Impact Low

CVE-2016-0609

1.7 ()


                
                  AV:N/AC:H/Au:M/C:N/I:N/A:P

Affected products

Fixed 88 products, the same list as for CVE-2015-3210

Threats

Impact Low

CVE-2016-0610

Unspecified vulnerability in Oracle MySQL 5.6.27 and earlier and MariaDB before 10.0.22 and 10.1.x before 10.1.9 allows remote authenticated users to affect availability via unknown vectors related to InnoDB.

3.5 ()


                
                  AV:N/AC:M/Au:S/C:N/I:N/A:P

Affected products

Fixed 88 products, the same list as for CVE-2015-3210

Threats

Impact Low

CVE-2016-0616

Unspecified vulnerability in Oracle MySQL 5.5.46 and earlier and MariaDB before 5.5.47, 10.0.x before 10.0.23, and 10.1.x before 10.1.10 allows remote authenticated users to affect availability via unknown vectors related to Optimizer.

4.0 ()


                
                  AV:N/AC:L/Au:S/C:N/I:N/A:P

Affected products

Fixed 88 products, the same list as for CVE-2015-3210

Threats

Impact Moderate

CVE-2016-0640

Unspecified vulnerability in Oracle MySQL 5.5.47 and earlier, 5.6.28 and earlier, and 5.7.10 and earlier and MariaDB before 5.5.48, 10.0.x before 10.0.24, and 10.1.x before 10.1.12 allows local users to affect integrity and availability via vectors related to DML.

4.9 ()


                
                  AV:N/AC:M/Au:S/C:N/I:P/A:P

Affected products

Fixed 88 products, the same list as for CVE-2015-3210

Threats

Impact Moderate

CVE-2016-0641

Unspecified vulnerability in Oracle MySQL 5.5.47 and earlier, 5.6.28 and earlier, and 5.7.10 and earlier and MariaDB before 5.5.48, 10.0.x before 10.0.24, and 10.1.x before 10.1.12 allows local users to affect confidentiality and availability via vectors related to MyISAM.

4.9 ()


                
                  AV:N/AC:M/Au:S/C:P/I:N/A:P

Affected products

Fixed 88 products, the same list as for CVE-2015-3210

Threats

Impact Moderate

CVE-2016-0642

Unspecified vulnerability in Oracle MySQL 5.5.48 and earlier, 5.6.29 and earlier, and 5.7.11 and earlier allows local users to affect integrity and availability via vectors related to Federated.

4.3 ()


                
                  AV:N/AC:M/Au:M/C:N/I:P/A:P

Affected products

Fixed 88 products, the same list as for CVE-2015-3210

Threats

Impact Moderate

CVE-2016-0643

Unspecified vulnerability in Oracle MySQL 5.5.48 and earlier, 5.6.29 and earlier, and 5.7.11 and earlier and MariaDB before 5.5.49, 10.0.x before 10.0.25, and 10.1.x before 10.1.14 allows local users to affect confidentiality via vectors related to DML.

4.0 ()


                
                  AV:N/AC:L/Au:S/C:N/I:N/A:P

Affected products

Fixed 88 products, the same list as for CVE-2015-3210

Threats

Impact Moderate

CVE-2016-0644

4.0 ()


                
                  AV:N/AC:L/Au:S/C:N/I:N/A:P

Affected products

Fixed 88 products, the same list as for CVE-2015-3210

Threats

Impact Moderate

CVE-2016-0646

4.0 ()


                
                  AV:N/AC:L/Au:S/C:N/I:N/A:P

Affected products

Fixed 88 products, the same list as for CVE-2015-3210

Threats

Impact Moderate

CVE-2016-0647

4.0 ()


                
                  AV:N/AC:L/Au:S/C:N/I:N/A:P

Affected products

Fixed 88 products, the same list as for CVE-2015-3210

Threats

Impact Moderate

CVE-2016-0648

4.0 ()


                
                  AV:N/AC:L/Au:S/C:N/I:N/A:P

Affected products

Fixed 88 products, the same list as for CVE-2015-3210

Threats

Impact Moderate

CVE-2016-0649

4.0 ()


                
                  AV:N/AC:L/Au:S/C:N/I:N/A:P

Affected products

Fixed 88 products, the same list as for CVE-2015-3210

Threats

Impact Moderate

CVE-2016-0650

4.0 ()


                
                  AV:N/AC:L/Au:S/C:N/I:N/A:P

Affected products

Fixed 88 products, the same list as for CVE-2015-3210

Threats

Impact Moderate

CVE-2016-0651

Unspecified vulnerability in Oracle MySQL 5.5.46 and earlier allows local users to affect availability via vectors related to Optimizer.

3.5 ()


                
                  AV:N/AC:M/Au:S/C:N/I:N/A:P

Affected products

Fixed 88 products, the same list as for CVE-2015-3210

Threats

Impact Low

CVE-2016-0655

Unspecified vulnerability in Oracle MySQL 5.6.29 and earlier and 5.7.11 and earlier and MariaDB 10.0.x before 10.0.25 and 10.1.x before 10.1.14 allows local users to affect availability via vectors related to InnoDB.

3.5 ()


                
                  AV:N/AC:M/Au:S/C:N/I:N/A:P

Affected products

Fixed 88 products, the same list as for CVE-2015-3210

Threats

Impact Moderate

CVE-2016-0666

3.5 ()


                
                  AV:N/AC:M/Au:S/C:N/I:N/A:P

Affected products

Fixed 88 products, the same list as for CVE-2015-3210

Threats

Impact Low

CVE-2016-0668

Unspecified vulnerability in Oracle MySQL 5.6.28 and earlier and 5.7.10 and earlier and MariaDB 10.0.x before 10.0.24 and 10.1.x before 10.1.12 allows local users to affect availability via vectors related to InnoDB.

1.7 ()


                
                  AV:N/AC:H/Au:M/C:N/I:N/A:P

Affected products

Fixed 88 products, the same list as for CVE-2015-3210

Threats

Impact Low

CVE-2016-1283

The pcre_compile2 function in pcre_compile.c in PCRE 8.38 mishandles the /((?:F?+(?:^(?(R)a+\"){99}-))(?J)(?'R'(?'R'<((?'RR'(?'R'\){97)?J)?J)(?'R'(?'R'\){99|(:(?|(?'R')(\k'R')|((?'R')))H'R'R)(H'R))))))/ pattern and related patterns with named subgroups, which allows remote attackers to cause a denial of service (heap-based buffer overflow) or possibly have unspecified other impact via a crafted regular expression, as demonstrated by a JavaScript RegExp object encountered by Konqueror.

6.8 ()


                
                  AV:N/AC:M/Au:N/C:P/I:P/A:P

CWE-122 - Heap-based Buffer Overflow

Affected products

Fixed 88 products, the same list as for CVE-2015-3210

Threats

Impact Important

CVE-2016-2047

It was found that the MariaDB client library did not properly check host names against server identities noted in the X.509 certificates when establishing secure connections using TLS/SSL. A man-in-the-middle attacker could possibly use this flaw to impersonate a server to a client.

4.9 ()


                
                  AV:N/AC:M/Au:S/C:P/I:P/A:N

CWE-295 - Improper Certificate Validation

Affected products

Fixed 88 products, the same list as for CVE-2015-3210

Threats

Impact Moderate

CVE-2016-3191

The compile_branch function in pcre_compile.c in PCRE 8.x before 8.39 and pcre2_compile.c in PCRE2 before 10.22 mishandles patterns containing an (*ACCEPT) substring in conjunction with nested parentheses, which allows remote attackers to execute arbitrary code or cause a denial of service (stack-based buffer overflow) via a crafted regular expression, as demonstrated by a JavaScript RegExp object encountered by Konqueror, aka ZDI-CAN-3542.

6.8 ()


                
                  AV:N/AC:M/Au:N/C:P/I:P/A:P

CWE-121 - Stack-based Buffer Overflow

Affected products

Fixed 88 products, the same list as for CVE-2015-3210

Threats

Impact Important

CVE-2016-3452

Unspecified vulnerability in Oracle MySQL 5.5.48 and earlier, 5.6.29 and earlier, and 5.7.10 and earlier and MariaDB before 5.5.49, 10.0.x before 10.0.25, and 10.1.x before 10.1.14 allows remote attackers to affect confidentiality via vectors related to Server: Security: Encryption.

3.7 (Low)


                
                  CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N

Affected products

Fixed 88 products, the same list as for CVE-2015-3210

Threats

Impact Low

CVE-2016-3459

Unspecified vulnerability in Oracle MySQL 5.6.30 and earlier and 5.7.12 and earlier and MariaDB 10.0.x before 10.0.25 and 10.1.x before 10.1.14 allows remote administrators to affect availability via vectors related to Server: InnoDB.

4.9 (Medium)


                
                  CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H

Affected products

Fixed 88 products, the same list as for CVE-2015-3210

Threats

Impact Moderate

CVE-2016-3471

Unspecified vulnerability in Oracle MySQL 5.5.45 and earlier and 5.6.26 and earlier allows local users to affect confidentiality, integrity, and availability via vectors related to Server: Option.

7.5 (High)


                
                  CVSS:3.0/AV:L/AC:H/PR:H/UI:N/S:C/C:H/I:H/A:H

Affected products

Fixed 88 products, the same list as for CVE-2015-3210

Threats

Impact Moderate

CVE-2016-5444

Unspecified vulnerability in Oracle MySQL 5.5.48 and earlier, 5.6.29 and earlier, and 5.7.11 and earlier and MariaDB before 5.5.49, 10.0.x before 10.0.25, and 10.1.x before 10.1.14 allows remote attackers to affect confidentiality via vectors related to Server: Connection.

3.7 (Low)


                
                  CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N

Affected products

Fixed 88 products, the same list as for CVE-2015-3210

Threats

Impact Low

References

298 references

URL	Category
https://access.redhat.com/errata/RHSA-2016:1132	self
https://access.redhat.com/security/updates/classi…	external
http://www.oracle.com/technetwork/topics/security…	external
http://www.oracle.com/technetwork/topics/security…	external
http://www.oracle.com/technetwork/topics/security…	external
https://mariadb.com/kb/en/mariadb/mariadb-10021-r…	external
https://mariadb.com/kb/en/mariadb/mariadb-10022-r…	external
https://mariadb.com/kb/en/mariadb/mariadb-10023-r…	external
https://mariadb.com/kb/en/mariadb/mariadb-10024-r…	external
https://mariadb.com/kb/en/mariadb/mariadb-10025-r…	external
https://bugzilla.redhat.com/show_bug.cgi?id=1228283	external
https://bugzilla.redhat.com/show_bug.cgi?id=1237223	external
https://bugzilla.redhat.com/show_bug.cgi?id=1274752	external
https://bugzilla.redhat.com/show_bug.cgi?id=1274756	external
https://bugzilla.redhat.com/show_bug.cgi?id=1274759	external
https://bugzilla.redhat.com/show_bug.cgi?id=1274761	external
https://bugzilla.redhat.com/show_bug.cgi?id=1274764	external
https://bugzilla.redhat.com/show_bug.cgi?id=1274766	external
https://bugzilla.redhat.com/show_bug.cgi?id=1274767	external
https://bugzilla.redhat.com/show_bug.cgi?id=1274771	external
https://bugzilla.redhat.com/show_bug.cgi?id=1274773	external
https://bugzilla.redhat.com/show_bug.cgi?id=1274776	external
https://bugzilla.redhat.com/show_bug.cgi?id=1274781	external
https://bugzilla.redhat.com/show_bug.cgi?id=1274783	external
https://bugzilla.redhat.com/show_bug.cgi?id=1274786	external
https://bugzilla.redhat.com/show_bug.cgi?id=1274794	external
https://bugzilla.redhat.com/show_bug.cgi?id=1287614	external
https://bugzilla.redhat.com/show_bug.cgi?id=1287623	external
https://bugzilla.redhat.com/show_bug.cgi?id=1287629	external
https://bugzilla.redhat.com/show_bug.cgi?id=1287636	external
https://bugzilla.redhat.com/show_bug.cgi?id=1287671	external
https://bugzilla.redhat.com/show_bug.cgi?id=1287690	external
https://bugzilla.redhat.com/show_bug.cgi?id=1287711	external
https://bugzilla.redhat.com/show_bug.cgi?id=1295385	external
https://bugzilla.redhat.com/show_bug.cgi?id=1301492	external
https://bugzilla.redhat.com/show_bug.cgi?id=1301493	external
https://bugzilla.redhat.com/show_bug.cgi?id=1301496	external
https://bugzilla.redhat.com/show_bug.cgi?id=1301497	external
https://bugzilla.redhat.com/show_bug.cgi?id=1301498	external
https://bugzilla.redhat.com/show_bug.cgi?id=1301501	external
https://bugzilla.redhat.com/show_bug.cgi?id=1301504	external
https://bugzilla.redhat.com/show_bug.cgi?id=1301506	external
https://bugzilla.redhat.com/show_bug.cgi?id=1301507	external
https://bugzilla.redhat.com/show_bug.cgi?id=1301508	external
https://bugzilla.redhat.com/show_bug.cgi?id=1301510	external
https://bugzilla.redhat.com/show_bug.cgi?id=1301874	external
https://bugzilla.redhat.com/show_bug.cgi?id=1311503	external
https://bugzilla.redhat.com/show_bug.cgi?id=1329239	external
https://bugzilla.redhat.com/show_bug.cgi?id=1329241	external
https://bugzilla.redhat.com/show_bug.cgi?id=1329243	external
https://bugzilla.redhat.com/show_bug.cgi?id=1329245	external
https://bugzilla.redhat.com/show_bug.cgi?id=1329247	external
https://bugzilla.redhat.com/show_bug.cgi?id=1329248	external
https://bugzilla.redhat.com/show_bug.cgi?id=1329249	external
https://bugzilla.redhat.com/show_bug.cgi?id=1329251	external
https://bugzilla.redhat.com/show_bug.cgi?id=1329252	external
https://bugzilla.redhat.com/show_bug.cgi?id=1329253	external
https://bugzilla.redhat.com/show_bug.cgi?id=1329254	external
https://bugzilla.redhat.com/show_bug.cgi?id=1329259	external
https://bugzilla.redhat.com/show_bug.cgi?id=1329270	external
https://bugzilla.redhat.com/show_bug.cgi?id=1329273	external
https://security.access.redhat.com/data/csaf/v2/a…	self
https://access.redhat.com/security/cve/CVE-2015-3210	self
https://bugzilla.redhat.com/show_bug.cgi?id=1287623	external
https://www.cve.org/CVERecord?id=CVE-2015-3210	external
https://nvd.nist.gov/vuln/detail/CVE-2015-3210	external
https://access.redhat.com/security/cve/CVE-2015-3217	self
https://bugzilla.redhat.com/show_bug.cgi?id=1228283	external
https://www.cve.org/CVERecord?id=CVE-2015-3217	external
https://nvd.nist.gov/vuln/detail/CVE-2015-3217	external
https://access.redhat.com/security/cve/CVE-2015-4792	self
https://bugzilla.redhat.com/show_bug.cgi?id=1274752	external
https://www.cve.org/CVERecord?id=CVE-2015-4792	external
https://nvd.nist.gov/vuln/detail/CVE-2015-4792	external
http://www.oracle.com/technetwork/topics/security…	external
https://access.redhat.com/security/cve/CVE-2015-4802	self
https://bugzilla.redhat.com/show_bug.cgi?id=1274756	external
https://www.cve.org/CVERecord?id=CVE-2015-4802	external
https://nvd.nist.gov/vuln/detail/CVE-2015-4802	external
https://access.redhat.com/security/cve/CVE-2015-4815	self
https://bugzilla.redhat.com/show_bug.cgi?id=1274759	external
https://www.cve.org/CVERecord?id=CVE-2015-4815	external
https://nvd.nist.gov/vuln/detail/CVE-2015-4815	external
https://access.redhat.com/security/cve/CVE-2015-4816	self
https://bugzilla.redhat.com/show_bug.cgi?id=1274761	external
https://www.cve.org/CVERecord?id=CVE-2015-4816	external
https://nvd.nist.gov/vuln/detail/CVE-2015-4816	external
https://access.redhat.com/security/cve/CVE-2015-4819	self
https://bugzilla.redhat.com/show_bug.cgi?id=1274764	external
https://www.cve.org/CVERecord?id=CVE-2015-4819	external
https://nvd.nist.gov/vuln/detail/CVE-2015-4819	external
https://access.redhat.com/security/cve/CVE-2015-4826	self
https://bugzilla.redhat.com/show_bug.cgi?id=1274766	external
https://www.cve.org/CVERecord?id=CVE-2015-4826	external
https://nvd.nist.gov/vuln/detail/CVE-2015-4826	external
https://access.redhat.com/security/cve/CVE-2015-4830	self
https://bugzilla.redhat.com/show_bug.cgi?id=1274767	external
https://www.cve.org/CVERecord?id=CVE-2015-4830	external
https://nvd.nist.gov/vuln/detail/CVE-2015-4830	external
https://access.redhat.com/security/cve/CVE-2015-4836	self
https://bugzilla.redhat.com/show_bug.cgi?id=1274771	external
https://www.cve.org/CVERecord?id=CVE-2015-4836	external
https://nvd.nist.gov/vuln/detail/CVE-2015-4836	external
https://access.redhat.com/security/cve/CVE-2015-4858	self
https://bugzilla.redhat.com/show_bug.cgi?id=1274773	external
https://www.cve.org/CVERecord?id=CVE-2015-4858	external
https://nvd.nist.gov/vuln/detail/CVE-2015-4858	external
https://access.redhat.com/security/cve/CVE-2015-4861	self
https://bugzilla.redhat.com/show_bug.cgi?id=1274776	external
https://www.cve.org/CVERecord?id=CVE-2015-4861	external
https://nvd.nist.gov/vuln/detail/CVE-2015-4861	external
https://access.redhat.com/security/cve/CVE-2015-4870	self
https://bugzilla.redhat.com/show_bug.cgi?id=1274781	external
https://www.cve.org/CVERecord?id=CVE-2015-4870	external
https://nvd.nist.gov/vuln/detail/CVE-2015-4870	external
https://access.redhat.com/security/cve/CVE-2015-4879	self
https://bugzilla.redhat.com/show_bug.cgi?id=1274783	external
https://www.cve.org/CVERecord?id=CVE-2015-4879	external
https://nvd.nist.gov/vuln/detail/CVE-2015-4879	external
https://access.redhat.com/security/cve/CVE-2015-4895	self
https://bugzilla.redhat.com/show_bug.cgi?id=1274786	external
https://www.cve.org/CVERecord?id=CVE-2015-4895	external
https://nvd.nist.gov/vuln/detail/CVE-2015-4895	external
https://access.redhat.com/security/cve/CVE-2015-4913	self
https://bugzilla.redhat.com/show_bug.cgi?id=1274794	external
https://www.cve.org/CVERecord?id=CVE-2015-4913	external
https://nvd.nist.gov/vuln/detail/CVE-2015-4913	external
https://access.redhat.com/security/cve/CVE-2015-5073	self
https://bugzilla.redhat.com/show_bug.cgi?id=1237223	external
https://www.cve.org/CVERecord?id=CVE-2015-5073	external
https://nvd.nist.gov/vuln/detail/CVE-2015-5073	external
https://access.redhat.com/security/cve/CVE-2015-8381	self
https://bugzilla.redhat.com/show_bug.cgi?id=1287711	external
https://www.cve.org/CVERecord?id=CVE-2015-8381	external
https://nvd.nist.gov/vuln/detail/CVE-2015-8381	external
https://access.redhat.com/security/cve/CVE-2015-8383	self
https://bugzilla.redhat.com/show_bug.cgi?id=1287614	external
https://www.cve.org/CVERecord?id=CVE-2015-8383	external
https://nvd.nist.gov/vuln/detail/CVE-2015-8383	external
https://access.redhat.com/security/cve/CVE-2015-8384	self
https://www.cve.org/CVERecord?id=CVE-2015-8384	external
https://nvd.nist.gov/vuln/detail/CVE-2015-8384	external
https://access.redhat.com/security/cve/CVE-2015-8385	self
https://bugzilla.redhat.com/show_bug.cgi?id=1287629	external
https://www.cve.org/CVERecord?id=CVE-2015-8385	external
https://nvd.nist.gov/vuln/detail/CVE-2015-8385	external
https://access.redhat.com/security/cve/CVE-2015-8386	self
https://bugzilla.redhat.com/show_bug.cgi?id=1287636	external
https://www.cve.org/CVERecord?id=CVE-2015-8386	external
https://nvd.nist.gov/vuln/detail/CVE-2015-8386	external
https://access.redhat.com/security/cve/CVE-2015-8388	self
https://www.cve.org/CVERecord?id=CVE-2015-8388	external
https://nvd.nist.gov/vuln/detail/CVE-2015-8388	external
https://access.redhat.com/security/cve/CVE-2015-8391	self
https://bugzilla.redhat.com/show_bug.cgi?id=1287671	external
https://www.cve.org/CVERecord?id=CVE-2015-8391	external
https://nvd.nist.gov/vuln/detail/CVE-2015-8391	external
https://access.redhat.com/security/cve/CVE-2015-8392	self
https://bugzilla.redhat.com/show_bug.cgi?id=1287690	external
https://www.cve.org/CVERecord?id=CVE-2015-8392	external
https://nvd.nist.gov/vuln/detail/CVE-2015-8392	external
https://access.redhat.com/security/cve/CVE-2015-8395	self
https://www.cve.org/CVERecord?id=CVE-2015-8395	external
https://nvd.nist.gov/vuln/detail/CVE-2015-8395	external
https://access.redhat.com/security/cve/CVE-2016-0505	self
https://bugzilla.redhat.com/show_bug.cgi?id=1301492	external
https://www.cve.org/CVERecord?id=CVE-2016-0505	external
https://nvd.nist.gov/vuln/detail/CVE-2016-0505	external
http://www.oracle.com/technetwork/topics/security…	external
https://access.redhat.com/security/cve/CVE-2016-0546	self
https://bugzilla.redhat.com/show_bug.cgi?id=1301493	external
https://www.cve.org/CVERecord?id=CVE-2016-0546	external
https://nvd.nist.gov/vuln/detail/CVE-2016-0546	external
https://access.redhat.com/security/cve/CVE-2016-0596	self
https://bugzilla.redhat.com/show_bug.cgi?id=1301496	external
https://www.cve.org/CVERecord?id=CVE-2016-0596	external
https://nvd.nist.gov/vuln/detail/CVE-2016-0596	external
https://access.redhat.com/security/cve/CVE-2016-0597	self
https://bugzilla.redhat.com/show_bug.cgi?id=1301497	external
https://www.cve.org/CVERecord?id=CVE-2016-0597	external
https://nvd.nist.gov/vuln/detail/CVE-2016-0597	external
https://access.redhat.com/security/cve/CVE-2016-0598	self
https://bugzilla.redhat.com/show_bug.cgi?id=1301498	external
https://www.cve.org/CVERecord?id=CVE-2016-0598	external
https://nvd.nist.gov/vuln/detail/CVE-2016-0598	external
https://access.redhat.com/security/cve/CVE-2016-0600	self
https://bugzilla.redhat.com/show_bug.cgi?id=1301501	external
https://www.cve.org/CVERecord?id=CVE-2016-0600	external
https://nvd.nist.gov/vuln/detail/CVE-2016-0600	external
https://access.redhat.com/security/cve/CVE-2016-0606	self
https://bugzilla.redhat.com/show_bug.cgi?id=1301504	external
https://www.cve.org/CVERecord?id=CVE-2016-0606	external
https://nvd.nist.gov/vuln/detail/CVE-2016-0606	external
https://access.redhat.com/security/cve/CVE-2016-0608	self
https://bugzilla.redhat.com/show_bug.cgi?id=1301506	external
https://www.cve.org/CVERecord?id=CVE-2016-0608	external
https://nvd.nist.gov/vuln/detail/CVE-2016-0608	external
https://access.redhat.com/security/cve/CVE-2016-0609	self
https://bugzilla.redhat.com/show_bug.cgi?id=1301507	external
https://www.cve.org/CVERecord?id=CVE-2016-0609	external
https://nvd.nist.gov/vuln/detail/CVE-2016-0609	external
https://access.redhat.com/security/cve/CVE-2016-0610	self
https://bugzilla.redhat.com/show_bug.cgi?id=1301508	external
https://www.cve.org/CVERecord?id=CVE-2016-0610	external
https://nvd.nist.gov/vuln/detail/CVE-2016-0610	external
https://access.redhat.com/security/cve/CVE-2016-0616	self
https://bugzilla.redhat.com/show_bug.cgi?id=1301510	external
https://www.cve.org/CVERecord?id=CVE-2016-0616	external
https://nvd.nist.gov/vuln/detail/CVE-2016-0616	external
https://access.redhat.com/security/cve/CVE-2016-0640	self
https://bugzilla.redhat.com/show_bug.cgi?id=1329239	external
https://www.cve.org/CVERecord?id=CVE-2016-0640	external
https://nvd.nist.gov/vuln/detail/CVE-2016-0640	external
http://www.oracle.com/technetwork/topics/security…	external
https://access.redhat.com/security/cve/CVE-2016-0641	self
https://bugzilla.redhat.com/show_bug.cgi?id=1329241	external
https://www.cve.org/CVERecord?id=CVE-2016-0641	external
https://nvd.nist.gov/vuln/detail/CVE-2016-0641	external
https://access.redhat.com/security/cve/CVE-2016-0642	self
https://bugzilla.redhat.com/show_bug.cgi?id=1329243	external
https://www.cve.org/CVERecord?id=CVE-2016-0642	external
https://nvd.nist.gov/vuln/detail/CVE-2016-0642	external
https://access.redhat.com/security/cve/CVE-2016-0643	self
https://bugzilla.redhat.com/show_bug.cgi?id=1329245	external
https://www.cve.org/CVERecord?id=CVE-2016-0643	external
https://nvd.nist.gov/vuln/detail/CVE-2016-0643	external
https://access.redhat.com/security/cve/CVE-2016-0644	self
https://bugzilla.redhat.com/show_bug.cgi?id=1329247	external
https://www.cve.org/CVERecord?id=CVE-2016-0644	external
https://nvd.nist.gov/vuln/detail/CVE-2016-0644	external
https://access.redhat.com/security/cve/CVE-2016-0646	self
https://bugzilla.redhat.com/show_bug.cgi?id=1329248	external
https://www.cve.org/CVERecord?id=CVE-2016-0646	external
https://nvd.nist.gov/vuln/detail/CVE-2016-0646	external
https://access.redhat.com/security/cve/CVE-2016-0647	self
https://bugzilla.redhat.com/show_bug.cgi?id=1329249	external
https://www.cve.org/CVERecord?id=CVE-2016-0647	external
https://nvd.nist.gov/vuln/detail/CVE-2016-0647	external
https://access.redhat.com/security/cve/CVE-2016-0648	self
https://bugzilla.redhat.com/show_bug.cgi?id=1329251	external
https://www.cve.org/CVERecord?id=CVE-2016-0648	external
https://nvd.nist.gov/vuln/detail/CVE-2016-0648	external
https://access.redhat.com/security/cve/CVE-2016-0649	self
https://bugzilla.redhat.com/show_bug.cgi?id=1329252	external
https://www.cve.org/CVERecord?id=CVE-2016-0649	external
https://nvd.nist.gov/vuln/detail/CVE-2016-0649	external
http://www.oracle.com/technetwork/security-adviso…	external
http://www.oracle.com/technetwork/topics/security…	external
https://access.redhat.com/security/cve/CVE-2016-0650	self
https://bugzilla.redhat.com/show_bug.cgi?id=1329253	external
https://www.cve.org/CVERecord?id=CVE-2016-0650	external
https://nvd.nist.gov/vuln/detail/CVE-2016-0650	external
https://access.redhat.com/security/cve/CVE-2016-0651	self
https://bugzilla.redhat.com/show_bug.cgi?id=1329254	external
https://www.cve.org/CVERecord?id=CVE-2016-0651	external
https://nvd.nist.gov/vuln/detail/CVE-2016-0651	external
https://access.redhat.com/security/cve/CVE-2016-0655	self
https://bugzilla.redhat.com/show_bug.cgi?id=1329259	external
https://www.cve.org/CVERecord?id=CVE-2016-0655	external
https://nvd.nist.gov/vuln/detail/CVE-2016-0655	external
https://access.redhat.com/security/cve/CVE-2016-0666	self
https://bugzilla.redhat.com/show_bug.cgi?id=1329270	external
https://www.cve.org/CVERecord?id=CVE-2016-0666	external
https://nvd.nist.gov/vuln/detail/CVE-2016-0666	external
https://access.redhat.com/security/cve/CVE-2016-0668	self
https://bugzilla.redhat.com/show_bug.cgi?id=1329273	external
https://www.cve.org/CVERecord?id=CVE-2016-0668	external
https://nvd.nist.gov/vuln/detail/CVE-2016-0668	external
https://access.redhat.com/security/cve/CVE-2016-1283	self
https://bugzilla.redhat.com/show_bug.cgi?id=1295385	external
https://www.cve.org/CVERecord?id=CVE-2016-1283	external
https://nvd.nist.gov/vuln/detail/CVE-2016-1283	external
https://access.redhat.com/security/cve/CVE-2016-2047	self
https://bugzilla.redhat.com/show_bug.cgi?id=1301874	external
https://www.cve.org/CVERecord?id=CVE-2016-2047	external
https://nvd.nist.gov/vuln/detail/CVE-2016-2047	external
http://www.openwall.com/lists/oss-security/2016/01/26/3	external
https://access.redhat.com/security/cve/CVE-2016-3191	self
https://bugzilla.redhat.com/show_bug.cgi?id=1311503	external
https://www.cve.org/CVERecord?id=CVE-2016-3191	external
https://nvd.nist.gov/vuln/detail/CVE-2016-3191	external
https://access.redhat.com/security/cve/CVE-2016-3452	self
https://bugzilla.redhat.com/show_bug.cgi?id=1358201	external
https://www.cve.org/CVERecord?id=CVE-2016-3452	external
https://nvd.nist.gov/vuln/detail/CVE-2016-3452	external
http://www.oracle.com/technetwork/topics/security…	external
https://access.redhat.com/security/cve/CVE-2016-3459	self
https://bugzilla.redhat.com/show_bug.cgi?id=1358202	external
https://www.cve.org/CVERecord?id=CVE-2016-3459	external
https://nvd.nist.gov/vuln/detail/CVE-2016-3459	external
https://access.redhat.com/security/cve/CVE-2016-3471	self
https://bugzilla.redhat.com/show_bug.cgi?id=1358203	external
https://www.cve.org/CVERecord?id=CVE-2016-3471	external
https://nvd.nist.gov/vuln/detail/CVE-2016-3471	external
https://access.redhat.com/security/cve/CVE-2016-5444	self
https://bugzilla.redhat.com/show_bug.cgi?id=1358223	external
https://www.cve.org/CVERecord?id=CVE-2016-5444	external
https://nvd.nist.gov/vuln/detail/CVE-2016-5444	external

JSON

To clipboard

Loading 1.6 MB of JSON…

CVE-2015-3210 (GCVE-0-2015-3210)

Vulnerability from cvelistv5 – Published: 2016-12-13 16:00 – Updated: 2024-08-06 05:39

Summary

Severity

No CVSS data available.

CWE

Assigner

redhat redhat root

References

6 references

URL	Tags
https://access.redhat.com/errata/RHSA-2016:1132	vendor-advisoryx_refsource_REDHAT
http://www.securityfocus.com/bid/74934	vdb-entryx_refsource_BID
http://rhn.redhat.com/errata/RHSA-2016-2750.html	vendor-advisoryx_refsource_REDHAT
http://www.openwall.com/lists/oss-security/2015/06/01/7	mailing-listx_refsource_MLIST
http://www.openwall.com/lists/oss-security/2015/1…	mailing-listx_refsource_MLIST
https://bugs.exim.org/show_bug.cgi?id=1636	x_refsource_CONFIRM

Date Public

2015-05-29 00:00

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-06T05:39:31.991Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "name": "RHSA-2016:1132",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2016:1132"
          },
          {
            "name": "74934",
            "tags": [
              "vdb-entry",
              "x_refsource_BID",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/bid/74934"
          },
          {
            "name": "RHSA-2016:2750",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://rhn.redhat.com/errata/RHSA-2016-2750.html"
          },
          {
            "name": "[oss-security] 20150601 CVE-2015-3210: PCRE Library Heap Overflow Vulnerability",
            "tags": [
              "mailing-list",
              "x_refsource_MLIST",
              "x_transferred"
            ],
            "url": "http://www.openwall.com/lists/oss-security/2015/06/01/7"
          },
          {
            "name": "[oss-security] 20151202 Re: Heap Overflow in PCRE",
            "tags": [
              "mailing-list",
              "x_refsource_MLIST",
              "x_transferred"
            ],
            "url": "http://www.openwall.com/lists/oss-security/2015/12/02/11"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://bugs.exim.org/show_bug.cgi?id=1636"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "datePublic": "2015-05-29T00:00:00.000Z",
      "descriptions": [
        {
          "lang": "en",
          "value": "Heap-based buffer overflow in PCRE 8.34 through 8.37 and PCRE2 10.10 allows remote attackers to execute arbitrary code via a crafted regular expression, as demonstrated by /^(?P=B)((?P=B)(?J:(?P\u003cB\u003ec)(?P\u003cB\u003ea(?P=B)))\u003eWGXCREDITS)/, a different vulnerability than CVE-2015-8384."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "n/a",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2018-01-04T19:57:01.000Z",
        "orgId": "53f830b8-0a3f-465b-8143-3b8a9948e749",
        "shortName": "redhat"
      },
      "references": [
        {
          "name": "RHSA-2016:1132",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2016:1132"
        },
        {
          "name": "74934",
          "tags": [
            "vdb-entry",
            "x_refsource_BID"
          ],
          "url": "http://www.securityfocus.com/bid/74934"
        },
        {
          "name": "RHSA-2016:2750",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://rhn.redhat.com/errata/RHSA-2016-2750.html"
        },
        {
          "name": "[oss-security] 20150601 CVE-2015-3210: PCRE Library Heap Overflow Vulnerability",
          "tags": [
            "mailing-list",
            "x_refsource_MLIST"
          ],
          "url": "http://www.openwall.com/lists/oss-security/2015/06/01/7"
        },
        {
          "name": "[oss-security] 20151202 Re: Heap Overflow in PCRE",
          "tags": [
            "mailing-list",
            "x_refsource_MLIST"
          ],
          "url": "http://www.openwall.com/lists/oss-security/2015/12/02/11"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://bugs.exim.org/show_bug.cgi?id=1636"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "secalert@redhat.com",
          "ID": "CVE-2015-3210",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "n/a",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "n/a"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "n/a"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "Heap-based buffer overflow in PCRE 8.34 through 8.37 and PCRE2 10.10 allows remote attackers to execute arbitrary code via a crafted regular expression, as demonstrated by /^(?P=B)((?P=B)(?J:(?P\u003cB\u003ec)(?P\u003cB\u003ea(?P=B)))\u003eWGXCREDITS)/, a different vulnerability than CVE-2015-8384."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "n/a"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "RHSA-2016:1132",
              "refsource": "REDHAT",
              "url": "https://access.redhat.com/errata/RHSA-2016:1132"
            },
            {
              "name": "74934",
              "refsource": "BID",
              "url": "http://www.securityfocus.com/bid/74934"
            },
            {
              "name": "RHSA-2016:2750",
              "refsource": "REDHAT",
              "url": "http://rhn.redhat.com/errata/RHSA-2016-2750.html"
            },
            {
              "name": "[oss-security] 20150601 CVE-2015-3210: PCRE Library Heap Overflow Vulnerability",
              "refsource": "MLIST",
              "url": "http://www.openwall.com/lists/oss-security/2015/06/01/7"
            },
            {
              "name": "[oss-security] 20151202 Re: Heap Overflow in PCRE",
              "refsource": "MLIST",
              "url": "http://www.openwall.com/lists/oss-security/2015/12/02/11"
            },
            {
              "name": "https://bugs.exim.org/show_bug.cgi?id=1636",
              "refsource": "CONFIRM",
              "url": "https://bugs.exim.org/show_bug.cgi?id=1636"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "53f830b8-0a3f-465b-8143-3b8a9948e749",
    "assignerShortName": "redhat",
    "cveId": "CVE-2015-3210",
    "datePublished": "2016-12-13T16:00:00.000Z",
    "dateReserved": "2015-04-10T00:00:00.000Z",
    "dateUpdated": "2024-08-06T05:39:31.991Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

CVE-2015-3217 (GCVE-0-2015-3217)

Vulnerability from cvelistv5 – Published: 2016-12-13 16:00 – Updated: 2024-08-06 05:39

Summary

Severity

No CVSS data available.

CWE

Assigner

redhat redhat root

References

10 references

URL	Tags
https://access.redhat.com/errata/RHSA-2016:1132	vendor-advisoryx_refsource_REDHAT
http://vcs.pcre.org/pcre?view=revision&revision=1566	x_refsource_CONFIRM
https://bugs.exim.org/show_bug.cgi?id=1638	x_refsource_CONFIRM
http://www.oracle.com/technetwork/topics/security…	x_refsource_CONFIRM
http://www.openwall.com/lists/oss-security/2015/06/03/7	mailing-listx_refsource_MLIST
http://www-01.ibm.com/support/docview.wss?uid=isg…	x_refsource_CONFIRM
http://rhn.redhat.com/errata/RHSA-2016-1025.html	vendor-advisoryx_refsource_REDHAT
http://rhn.redhat.com/errata/RHSA-2016-2750.html	vendor-advisoryx_refsource_REDHAT
https://bugzilla.redhat.com/show_bug.cgi?id=1228283	x_refsource_CONFIRM
http://www.securityfocus.com/bid/75018	vdb-entryx_refsource_BID

Date Public

2015-06-03 00:00

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-06T05:39:31.985Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "name": "RHSA-2016:1132",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2016:1132"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://vcs.pcre.org/pcre?view=revision\u0026revision=1566"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://bugs.exim.org/show_bug.cgi?id=1638"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://www.oracle.com/technetwork/topics/security/linuxbulletinapr2016-2952096.html"
          },
          {
            "name": "[oss-security] 20150603 CVE-2015-3217: PCRE Library Call Stack Overflow Vulnerability in match()",
            "tags": [
              "mailing-list",
              "x_refsource_MLIST",
              "x_transferred"
            ],
            "url": "http://www.openwall.com/lists/oss-security/2015/06/03/7"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://www-01.ibm.com/support/docview.wss?uid=isg3T1023886"
          },
          {
            "name": "RHSA-2016:1025",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://rhn.redhat.com/errata/RHSA-2016-1025.html"
          },
          {
            "name": "RHSA-2016:2750",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://rhn.redhat.com/errata/RHSA-2016-2750.html"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1228283"
          },
          {
            "name": "75018",
            "tags": [
              "vdb-entry",
              "x_refsource_BID",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/bid/75018"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "datePublic": "2015-06-03T00:00:00.000Z",
      "descriptions": [
        {
          "lang": "en",
          "value": "PCRE 7.8 and 8.32 through 8.37, and PCRE2 10.10 mishandle group empty matches, which might allow remote attackers to cause a denial of service (stack-based buffer overflow) via a crafted regular expression, as demonstrated by /^(?:(?(1)\\\\.|([^\\\\\\\\W_])?)+)+$/."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "n/a",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2018-05-17T16:57:01.000Z",
        "orgId": "53f830b8-0a3f-465b-8143-3b8a9948e749",
        "shortName": "redhat"
      },
      "references": [
        {
          "name": "RHSA-2016:1132",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2016:1132"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://vcs.pcre.org/pcre?view=revision\u0026revision=1566"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://bugs.exim.org/show_bug.cgi?id=1638"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://www.oracle.com/technetwork/topics/security/linuxbulletinapr2016-2952096.html"
        },
        {
          "name": "[oss-security] 20150603 CVE-2015-3217: PCRE Library Call Stack Overflow Vulnerability in match()",
          "tags": [
            "mailing-list",
            "x_refsource_MLIST"
          ],
          "url": "http://www.openwall.com/lists/oss-security/2015/06/03/7"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://www-01.ibm.com/support/docview.wss?uid=isg3T1023886"
        },
        {
          "name": "RHSA-2016:1025",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://rhn.redhat.com/errata/RHSA-2016-1025.html"
        },
        {
          "name": "RHSA-2016:2750",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://rhn.redhat.com/errata/RHSA-2016-2750.html"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1228283"
        },
        {
          "name": "75018",
          "tags": [
            "vdb-entry",
            "x_refsource_BID"
          ],
          "url": "http://www.securityfocus.com/bid/75018"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "secalert@redhat.com",
          "ID": "CVE-2015-3217",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "n/a",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "n/a"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "n/a"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "PCRE 7.8 and 8.32 through 8.37, and PCRE2 10.10 mishandle group empty matches, which might allow remote attackers to cause a denial of service (stack-based buffer overflow) via a crafted regular expression, as demonstrated by /^(?:(?(1)\\\\.|([^\\\\\\\\W_])?)+)+$/."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "n/a"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "RHSA-2016:1132",
              "refsource": "REDHAT",
              "url": "https://access.redhat.com/errata/RHSA-2016:1132"
            },
            {
              "name": "http://vcs.pcre.org/pcre?view=revision\u0026revision=1566",
              "refsource": "CONFIRM",
              "url": "http://vcs.pcre.org/pcre?view=revision\u0026revision=1566"
            },
            {
              "name": "https://bugs.exim.org/show_bug.cgi?id=1638",
              "refsource": "CONFIRM",
              "url": "https://bugs.exim.org/show_bug.cgi?id=1638"
            },
            {
              "name": "http://www.oracle.com/technetwork/topics/security/linuxbulletinapr2016-2952096.html",
              "refsource": "CONFIRM",
              "url": "http://www.oracle.com/technetwork/topics/security/linuxbulletinapr2016-2952096.html"
            },
            {
              "name": "[oss-security] 20150603 CVE-2015-3217: PCRE Library Call Stack Overflow Vulnerability in match()",
              "refsource": "MLIST",
              "url": "http://www.openwall.com/lists/oss-security/2015/06/03/7"
            },
            {
              "name": "http://www-01.ibm.com/support/docview.wss?uid=isg3T1023886",
              "refsource": "CONFIRM",
              "url": "http://www-01.ibm.com/support/docview.wss?uid=isg3T1023886"
            },
            {
              "name": "RHSA-2016:1025",
              "refsource": "REDHAT",
              "url": "http://rhn.redhat.com/errata/RHSA-2016-1025.html"
            },
            {
              "name": "RHSA-2016:2750",
              "refsource": "REDHAT",
              "url": "http://rhn.redhat.com/errata/RHSA-2016-2750.html"
            },
            {
              "name": "https://bugzilla.redhat.com/show_bug.cgi?id=1228283",
              "refsource": "CONFIRM",
              "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1228283"
            },
            {
              "name": "75018",
              "refsource": "BID",
              "url": "http://www.securityfocus.com/bid/75018"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "53f830b8-0a3f-465b-8143-3b8a9948e749",
    "assignerShortName": "redhat",
    "cveId": "CVE-2015-3217",
    "datePublished": "2016-12-13T16:00:00.000Z",
    "dateReserved": "2015-04-10T00:00:00.000Z",
    "dateUpdated": "2024-08-06T05:39:31.985Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

CVE-2015-4792 (GCVE-0-2015-4792)

Vulnerability from cvelistv5 – Published: 2015-10-21 21:00 – Updated: 2024-08-06 06:25

Summary

Severity

No CVSS data available.

CWE

Assigner

oracle mitre root

References

18 references

URL	Tags
http://lists.opensuse.org/opensuse-security-annou…	vendor-advisoryx_refsource_SUSE
http://rhn.redhat.com/errata/RHSA-2016-1481.html	vendor-advisoryx_refsource_REDHAT
http://www.securitytracker.com/id/1033894	vdb-entryx_refsource_SECTRACK
https://access.redhat.com/errata/RHSA-2016:1132	vendor-advisoryx_refsource_REDHAT
http://rhn.redhat.com/errata/RHSA-2016-0534.html	vendor-advisoryx_refsource_REDHAT
http://www.ubuntu.com/usn/USN-2781-1	vendor-advisoryx_refsource_UBUNTU
https://www.suse.com/support/update/announcement/…	vendor-advisoryx_refsource_SUSE
http://www.oracle.com/technetwork/topics/security…	x_refsource_CONFIRM
http://www.securityfocus.com/bid/77171	vdb-entryx_refsource_BID
http://www.oracle.com/technetwork/topics/security…	x_refsource_CONFIRM
http://rhn.redhat.com/errata/RHSA-2016-1480.html	vendor-advisoryx_refsource_REDHAT
http://lists.opensuse.org/opensuse-security-annou…	vendor-advisoryx_refsource_SUSE
http://www.debian.org/security/2015/dsa-3385	vendor-advisoryx_refsource_DEBIAN
http://www.oracle.com/technetwork/topics/security…	x_refsource_CONFIRM
http://lists.opensuse.org/opensuse-updates/2016-0…	vendor-advisoryx_refsource_SUSE
http://www.debian.org/security/2015/dsa-3377	vendor-advisoryx_refsource_DEBIAN
http://rhn.redhat.com/errata/RHSA-2016-0705.html	vendor-advisoryx_refsource_REDHAT
http://lists.fedoraproject.org/pipermail/package-…	vendor-advisoryx_refsource_FEDORA

Date Public

2015-10-21 00:00

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-06T06:25:21.637Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "name": "openSUSE-SU-2015:2244",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2015-12/msg00010.html"
          },
          {
            "name": "RHSA-2016:1481",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://rhn.redhat.com/errata/RHSA-2016-1481.html"
          },
          {
            "name": "1033894",
            "tags": [
              "vdb-entry",
              "x_refsource_SECTRACK",
              "x_transferred"
            ],
            "url": "http://www.securitytracker.com/id/1033894"
          },
          {
            "name": "RHSA-2016:1132",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2016:1132"
          },
          {
            "name": "RHSA-2016:0534",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://rhn.redhat.com/errata/RHSA-2016-0534.html"
          },
          {
            "name": "USN-2781-1",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "http://www.ubuntu.com/usn/USN-2781-1"
          },
          {
            "name": "SUSE-SU-2016:0296",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "https://www.suse.com/support/update/announcement/2016/suse-su-20160296-1.html"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://www.oracle.com/technetwork/topics/security/linuxbulletinapr2016-2952096.html"
          },
          {
            "name": "77171",
            "tags": [
              "vdb-entry",
              "x_refsource_BID",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/bid/77171"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://www.oracle.com/technetwork/topics/security/cpuoct2015-2367953.html"
          },
          {
            "name": "RHSA-2016:1480",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://rhn.redhat.com/errata/RHSA-2016-1480.html"
          },
          {
            "name": "openSUSE-SU-2015:2246",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2015-12/msg00011.html"
          },
          {
            "name": "DSA-3385",
            "tags": [
              "vendor-advisory",
              "x_refsource_DEBIAN",
              "x_transferred"
            ],
            "url": "http://www.debian.org/security/2015/dsa-3385"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://www.oracle.com/technetwork/topics/security/bulletinapr2016-2952098.html"
          },
          {
            "name": "openSUSE-SU-2016:0368",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-updates/2016-02/msg00039.html"
          },
          {
            "name": "DSA-3377",
            "tags": [
              "vendor-advisory",
              "x_refsource_DEBIAN",
              "x_transferred"
            ],
            "url": "http://www.debian.org/security/2015/dsa-3377"
          },
          {
            "name": "RHSA-2016:0705",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://rhn.redhat.com/errata/RHSA-2016-0705.html"
          },
          {
            "name": "FEDORA-2016-e30164d0a2",
            "tags": [
              "vendor-advisory",
              "x_refsource_FEDORA",
              "x_transferred"
            ],
            "url": "http://lists.fedoraproject.org/pipermail/package-announce/2016-February/177539.html"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "datePublic": "2015-10-21T00:00:00.000Z",
      "descriptions": [
        {
          "lang": "en",
          "value": "Unspecified vulnerability in Oracle MySQL Server 5.5.45 and earlier and 5.6.26 and earlier allows remote authenticated users to affect availability via unknown vectors related to Server : Partition, a different vulnerability than CVE-2015-4802."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "n/a",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2018-01-04T19:57:01.000Z",
        "orgId": "43595867-4340-4103-b7a2-9a5208d29a85",
        "shortName": "oracle"
      },
      "references": [
        {
          "name": "openSUSE-SU-2015:2244",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2015-12/msg00010.html"
        },
        {
          "name": "RHSA-2016:1481",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://rhn.redhat.com/errata/RHSA-2016-1481.html"
        },
        {
          "name": "1033894",
          "tags": [
            "vdb-entry",
            "x_refsource_SECTRACK"
          ],
          "url": "http://www.securitytracker.com/id/1033894"
        },
        {
          "name": "RHSA-2016:1132",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2016:1132"
        },
        {
          "name": "RHSA-2016:0534",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://rhn.redhat.com/errata/RHSA-2016-0534.html"
        },
        {
          "name": "USN-2781-1",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "http://www.ubuntu.com/usn/USN-2781-1"
        },
        {
          "name": "SUSE-SU-2016:0296",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "https://www.suse.com/support/update/announcement/2016/suse-su-20160296-1.html"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://www.oracle.com/technetwork/topics/security/linuxbulletinapr2016-2952096.html"
        },
        {
          "name": "77171",
          "tags": [
            "vdb-entry",
            "x_refsource_BID"
          ],
          "url": "http://www.securityfocus.com/bid/77171"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://www.oracle.com/technetwork/topics/security/cpuoct2015-2367953.html"
        },
        {
          "name": "RHSA-2016:1480",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://rhn.redhat.com/errata/RHSA-2016-1480.html"
        },
        {
          "name": "openSUSE-SU-2015:2246",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2015-12/msg00011.html"
        },
        {
          "name": "DSA-3385",
          "tags": [
            "vendor-advisory",
            "x_refsource_DEBIAN"
          ],
          "url": "http://www.debian.org/security/2015/dsa-3385"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://www.oracle.com/technetwork/topics/security/bulletinapr2016-2952098.html"
        },
        {
          "name": "openSUSE-SU-2016:0368",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-updates/2016-02/msg00039.html"
        },
        {
          "name": "DSA-3377",
          "tags": [
            "vendor-advisory",
            "x_refsource_DEBIAN"
          ],
          "url": "http://www.debian.org/security/2015/dsa-3377"
        },
        {
          "name": "RHSA-2016:0705",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://rhn.redhat.com/errata/RHSA-2016-0705.html"
        },
        {
          "name": "FEDORA-2016-e30164d0a2",
          "tags": [
            "vendor-advisory",
            "x_refsource_FEDORA"
          ],
          "url": "http://lists.fedoraproject.org/pipermail/package-announce/2016-February/177539.html"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "secalert_us@oracle.com",
          "ID": "CVE-2015-4792",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "n/a",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "n/a"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "n/a"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "Unspecified vulnerability in Oracle MySQL Server 5.5.45 and earlier and 5.6.26 and earlier allows remote authenticated users to affect availability via unknown vectors related to Server : Partition, a different vulnerability than CVE-2015-4802."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "n/a"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "openSUSE-SU-2015:2244",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2015-12/msg00010.html"
            },
            {
              "name": "RHSA-2016:1481",
              "refsource": "REDHAT",
              "url": "http://rhn.redhat.com/errata/RHSA-2016-1481.html"
            },
            {
              "name": "1033894",
              "refsource": "SECTRACK",
              "url": "http://www.securitytracker.com/id/1033894"
            },
            {
              "name": "RHSA-2016:1132",
              "refsource": "REDHAT",
              "url": "https://access.redhat.com/errata/RHSA-2016:1132"
            },
            {
              "name": "RHSA-2016:0534",
              "refsource": "REDHAT",
              "url": "http://rhn.redhat.com/errata/RHSA-2016-0534.html"
            },
            {
              "name": "USN-2781-1",
              "refsource": "UBUNTU",
              "url": "http://www.ubuntu.com/usn/USN-2781-1"
            },
            {
              "name": "SUSE-SU-2016:0296",
              "refsource": "SUSE",
              "url": "https://www.suse.com/support/update/announcement/2016/suse-su-20160296-1.html"
            },
            {
              "name": "http://www.oracle.com/technetwork/topics/security/linuxbulletinapr2016-2952096.html",
              "refsource": "CONFIRM",
              "url": "http://www.oracle.com/technetwork/topics/security/linuxbulletinapr2016-2952096.html"
            },
            {
              "name": "77171",
              "refsource": "BID",
              "url": "http://www.securityfocus.com/bid/77171"
            },
            {
              "name": "http://www.oracle.com/technetwork/topics/security/cpuoct2015-2367953.html",
              "refsource": "CONFIRM",
              "url": "http://www.oracle.com/technetwork/topics/security/cpuoct2015-2367953.html"
            },
            {
              "name": "RHSA-2016:1480",
              "refsource": "REDHAT",
              "url": "http://rhn.redhat.com/errata/RHSA-2016-1480.html"
            },
            {
              "name": "openSUSE-SU-2015:2246",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2015-12/msg00011.html"
            },
            {
              "name": "DSA-3385",
              "refsource": "DEBIAN",
              "url": "http://www.debian.org/security/2015/dsa-3385"
            },
            {
              "name": "http://www.oracle.com/technetwork/topics/security/bulletinapr2016-2952098.html",
              "refsource": "CONFIRM",
              "url": "http://www.oracle.com/technetwork/topics/security/bulletinapr2016-2952098.html"
            },
            {
              "name": "openSUSE-SU-2016:0368",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-updates/2016-02/msg00039.html"
            },
            {
              "name": "DSA-3377",
              "refsource": "DEBIAN",
              "url": "http://www.debian.org/security/2015/dsa-3377"
            },
            {
              "name": "RHSA-2016:0705",
              "refsource": "REDHAT",
              "url": "http://rhn.redhat.com/errata/RHSA-2016-0705.html"
            },
            {
              "name": "FEDORA-2016-e30164d0a2",
              "refsource": "FEDORA",
              "url": "http://lists.fedoraproject.org/pipermail/package-announce/2016-February/177539.html"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "43595867-4340-4103-b7a2-9a5208d29a85",
    "assignerShortName": "oracle",
    "cveId": "CVE-2015-4792",
    "datePublished": "2015-10-21T21:00:00.000Z",
    "dateReserved": "2015-06-24T00:00:00.000Z",
    "dateUpdated": "2024-08-06T06:25:21.637Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

CVE-2015-4802 (GCVE-0-2015-4802)

Vulnerability from cvelistv5 – Published: 2015-10-21 21:00 – Updated: 2024-08-06 06:25

Summary

Severity

No CVSS data available.

CWE

Assigner

oracle mitre root

References

18 references

URL	Tags
http://lists.opensuse.org/opensuse-security-annou…	vendor-advisoryx_refsource_SUSE
http://rhn.redhat.com/errata/RHSA-2016-1481.html	vendor-advisoryx_refsource_REDHAT
http://www.securitytracker.com/id/1033894	vdb-entryx_refsource_SECTRACK
https://access.redhat.com/errata/RHSA-2016:1132	vendor-advisoryx_refsource_REDHAT
http://rhn.redhat.com/errata/RHSA-2016-0534.html	vendor-advisoryx_refsource_REDHAT
http://www.ubuntu.com/usn/USN-2781-1	vendor-advisoryx_refsource_UBUNTU
https://www.suse.com/support/update/announcement/…	vendor-advisoryx_refsource_SUSE
http://www.oracle.com/technetwork/topics/security…	x_refsource_CONFIRM
http://www.oracle.com/technetwork/topics/security…	x_refsource_CONFIRM
http://rhn.redhat.com/errata/RHSA-2016-1480.html	vendor-advisoryx_refsource_REDHAT
http://lists.opensuse.org/opensuse-security-annou…	vendor-advisoryx_refsource_SUSE
http://www.debian.org/security/2015/dsa-3385	vendor-advisoryx_refsource_DEBIAN
http://www.oracle.com/technetwork/topics/security…	x_refsource_CONFIRM
http://www.securityfocus.com/bid/77165	vdb-entryx_refsource_BID
http://lists.opensuse.org/opensuse-updates/2016-0…	vendor-advisoryx_refsource_SUSE
http://www.debian.org/security/2015/dsa-3377	vendor-advisoryx_refsource_DEBIAN
http://rhn.redhat.com/errata/RHSA-2016-0705.html	vendor-advisoryx_refsource_REDHAT
http://lists.fedoraproject.org/pipermail/package-…	vendor-advisoryx_refsource_FEDORA

Date Public

2015-10-21 00:00

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-06T06:25:21.858Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "name": "openSUSE-SU-2015:2244",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2015-12/msg00010.html"
          },
          {
            "name": "RHSA-2016:1481",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://rhn.redhat.com/errata/RHSA-2016-1481.html"
          },
          {
            "name": "1033894",
            "tags": [
              "vdb-entry",
              "x_refsource_SECTRACK",
              "x_transferred"
            ],
            "url": "http://www.securitytracker.com/id/1033894"
          },
          {
            "name": "RHSA-2016:1132",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2016:1132"
          },
          {
            "name": "RHSA-2016:0534",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://rhn.redhat.com/errata/RHSA-2016-0534.html"
          },
          {
            "name": "USN-2781-1",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "http://www.ubuntu.com/usn/USN-2781-1"
          },
          {
            "name": "SUSE-SU-2016:0296",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "https://www.suse.com/support/update/announcement/2016/suse-su-20160296-1.html"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://www.oracle.com/technetwork/topics/security/linuxbulletinapr2016-2952096.html"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://www.oracle.com/technetwork/topics/security/cpuoct2015-2367953.html"
          },
          {
            "name": "RHSA-2016:1480",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://rhn.redhat.com/errata/RHSA-2016-1480.html"
          },
          {
            "name": "openSUSE-SU-2015:2246",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2015-12/msg00011.html"
          },
          {
            "name": "DSA-3385",
            "tags": [
              "vendor-advisory",
              "x_refsource_DEBIAN",
              "x_transferred"
            ],
            "url": "http://www.debian.org/security/2015/dsa-3385"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://www.oracle.com/technetwork/topics/security/bulletinapr2016-2952098.html"
          },
          {
            "name": "77165",
            "tags": [
              "vdb-entry",
              "x_refsource_BID",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/bid/77165"
          },
          {
            "name": "openSUSE-SU-2016:0368",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-updates/2016-02/msg00039.html"
          },
          {
            "name": "DSA-3377",
            "tags": [
              "vendor-advisory",
              "x_refsource_DEBIAN",
              "x_transferred"
            ],
            "url": "http://www.debian.org/security/2015/dsa-3377"
          },
          {
            "name": "RHSA-2016:0705",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://rhn.redhat.com/errata/RHSA-2016-0705.html"
          },
          {
            "name": "FEDORA-2016-e30164d0a2",
            "tags": [
              "vendor-advisory",
              "x_refsource_FEDORA",
              "x_transferred"
            ],
            "url": "http://lists.fedoraproject.org/pipermail/package-announce/2016-February/177539.html"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "datePublic": "2015-10-21T00:00:00.000Z",
      "descriptions": [
        {
          "lang": "en",
          "value": "Unspecified vulnerability in Oracle MySQL Server 5.5.45 and earlier and 5.6.26 and earlier allows remote authenticated users to affect availability via unknown vectors related to Server : Partition, a different vulnerability than CVE-2015-4792."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "n/a",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2018-01-04T19:57:01.000Z",
        "orgId": "43595867-4340-4103-b7a2-9a5208d29a85",
        "shortName": "oracle"
      },
      "references": [
        {
          "name": "openSUSE-SU-2015:2244",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2015-12/msg00010.html"
        },
        {
          "name": "RHSA-2016:1481",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://rhn.redhat.com/errata/RHSA-2016-1481.html"
        },
        {
          "name": "1033894",
          "tags": [
            "vdb-entry",
            "x_refsource_SECTRACK"
          ],
          "url": "http://www.securitytracker.com/id/1033894"
        },
        {
          "name": "RHSA-2016:1132",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2016:1132"
        },
        {
          "name": "RHSA-2016:0534",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://rhn.redhat.com/errata/RHSA-2016-0534.html"
        },
        {
          "name": "USN-2781-1",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "http://www.ubuntu.com/usn/USN-2781-1"
        },
        {
          "name": "SUSE-SU-2016:0296",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "https://www.suse.com/support/update/announcement/2016/suse-su-20160296-1.html"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://www.oracle.com/technetwork/topics/security/linuxbulletinapr2016-2952096.html"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://www.oracle.com/technetwork/topics/security/cpuoct2015-2367953.html"
        },
        {
          "name": "RHSA-2016:1480",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://rhn.redhat.com/errata/RHSA-2016-1480.html"
        },
        {
          "name": "openSUSE-SU-2015:2246",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2015-12/msg00011.html"
        },
        {
          "name": "DSA-3385",
          "tags": [
            "vendor-advisory",
            "x_refsource_DEBIAN"
          ],
          "url": "http://www.debian.org/security/2015/dsa-3385"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://www.oracle.com/technetwork/topics/security/bulletinapr2016-2952098.html"
        },
        {
          "name": "77165",
          "tags": [
            "vdb-entry",
            "x_refsource_BID"
          ],
          "url": "http://www.securityfocus.com/bid/77165"
        },
        {
          "name": "openSUSE-SU-2016:0368",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-updates/2016-02/msg00039.html"
        },
        {
          "name": "DSA-3377",
          "tags": [
            "vendor-advisory",
            "x_refsource_DEBIAN"
          ],
          "url": "http://www.debian.org/security/2015/dsa-3377"
        },
        {
          "name": "RHSA-2016:0705",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://rhn.redhat.com/errata/RHSA-2016-0705.html"
        },
        {
          "name": "FEDORA-2016-e30164d0a2",
          "tags": [
            "vendor-advisory",
            "x_refsource_FEDORA"
          ],
          "url": "http://lists.fedoraproject.org/pipermail/package-announce/2016-February/177539.html"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "secalert_us@oracle.com",
          "ID": "CVE-2015-4802",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "n/a",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "n/a"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "n/a"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "Unspecified vulnerability in Oracle MySQL Server 5.5.45 and earlier and 5.6.26 and earlier allows remote authenticated users to affect availability via unknown vectors related to Server : Partition, a different vulnerability than CVE-2015-4792."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "n/a"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "openSUSE-SU-2015:2244",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2015-12/msg00010.html"
            },
            {
              "name": "RHSA-2016:1481",
              "refsource": "REDHAT",
              "url": "http://rhn.redhat.com/errata/RHSA-2016-1481.html"
            },
            {
              "name": "1033894",
              "refsource": "SECTRACK",
              "url": "http://www.securitytracker.com/id/1033894"
            },
            {
              "name": "RHSA-2016:1132",
              "refsource": "REDHAT",
              "url": "https://access.redhat.com/errata/RHSA-2016:1132"
            },
            {
              "name": "RHSA-2016:0534",
              "refsource": "REDHAT",
              "url": "http://rhn.redhat.com/errata/RHSA-2016-0534.html"
            },
            {
              "name": "USN-2781-1",
              "refsource": "UBUNTU",
              "url": "http://www.ubuntu.com/usn/USN-2781-1"
            },
            {
              "name": "SUSE-SU-2016:0296",
              "refsource": "SUSE",
              "url": "https://www.suse.com/support/update/announcement/2016/suse-su-20160296-1.html"
            },
            {
              "name": "http://www.oracle.com/technetwork/topics/security/linuxbulletinapr2016-2952096.html",
              "refsource": "CONFIRM",
              "url": "http://www.oracle.com/technetwork/topics/security/linuxbulletinapr2016-2952096.html"
            },
            {
              "name": "http://www.oracle.com/technetwork/topics/security/cpuoct2015-2367953.html",
              "refsource": "CONFIRM",
              "url": "http://www.oracle.com/technetwork/topics/security/cpuoct2015-2367953.html"
            },
            {
              "name": "RHSA-2016:1480",
              "refsource": "REDHAT",
              "url": "http://rhn.redhat.com/errata/RHSA-2016-1480.html"
            },
            {
              "name": "openSUSE-SU-2015:2246",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2015-12/msg00011.html"
            },
            {
              "name": "DSA-3385",
              "refsource": "DEBIAN",
              "url": "http://www.debian.org/security/2015/dsa-3385"
            },
            {
              "name": "http://www.oracle.com/technetwork/topics/security/bulletinapr2016-2952098.html",
              "refsource": "CONFIRM",
              "url": "http://www.oracle.com/technetwork/topics/security/bulletinapr2016-2952098.html"
            },
            {
              "name": "77165",
              "refsource": "BID",
              "url": "http://www.securityfocus.com/bid/77165"
            },
            {
              "name": "openSUSE-SU-2016:0368",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-updates/2016-02/msg00039.html"
            },
            {
              "name": "DSA-3377",
              "refsource": "DEBIAN",
              "url": "http://www.debian.org/security/2015/dsa-3377"
            },
            {
              "name": "RHSA-2016:0705",
              "refsource": "REDHAT",
              "url": "http://rhn.redhat.com/errata/RHSA-2016-0705.html"
            },
            {
              "name": "FEDORA-2016-e30164d0a2",
              "refsource": "FEDORA",
              "url": "http://lists.fedoraproject.org/pipermail/package-announce/2016-February/177539.html"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "43595867-4340-4103-b7a2-9a5208d29a85",
    "assignerShortName": "oracle",
    "cveId": "CVE-2015-4802",
    "datePublished": "2015-10-21T21:00:00.000Z",
    "dateReserved": "2015-06-24T00:00:00.000Z",
    "dateUpdated": "2024-08-06T06:25:21.858Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

CVE-2015-4815 (GCVE-0-2015-4815)

Vulnerability from cvelistv5 – Published: 2015-10-21 21:00 – Updated: 2024-08-06 06:25

Summary

Unspecified vulnerability in Oracle MySQL Server 5.5.45 and earlier and 5.6.26 and earlier allows remote authenticated users to affect availability via vectors related to Server : DDL.

Severity

No CVSS data available.

CWE

Assigner

oracle mitre root

References

18 references

URL	Tags
http://lists.opensuse.org/opensuse-security-annou…	vendor-advisoryx_refsource_SUSE
http://rhn.redhat.com/errata/RHSA-2016-1481.html	vendor-advisoryx_refsource_REDHAT
http://www.securitytracker.com/id/1033894	vdb-entryx_refsource_SECTRACK
https://access.redhat.com/errata/RHSA-2016:1132	vendor-advisoryx_refsource_REDHAT
http://rhn.redhat.com/errata/RHSA-2016-0534.html	vendor-advisoryx_refsource_REDHAT
http://www.ubuntu.com/usn/USN-2781-1	vendor-advisoryx_refsource_UBUNTU
https://www.suse.com/support/update/announcement/…	vendor-advisoryx_refsource_SUSE
http://www.oracle.com/technetwork/topics/security…	x_refsource_CONFIRM
http://www.oracle.com/technetwork/topics/security…	x_refsource_CONFIRM
http://rhn.redhat.com/errata/RHSA-2016-1480.html	vendor-advisoryx_refsource_REDHAT
http://lists.opensuse.org/opensuse-security-annou…	vendor-advisoryx_refsource_SUSE
http://www.debian.org/security/2015/dsa-3385	vendor-advisoryx_refsource_DEBIAN
http://www.oracle.com/technetwork/topics/security…	x_refsource_CONFIRM
http://lists.opensuse.org/opensuse-updates/2016-0…	vendor-advisoryx_refsource_SUSE
http://www.debian.org/security/2015/dsa-3377	vendor-advisoryx_refsource_DEBIAN
http://rhn.redhat.com/errata/RHSA-2016-0705.html	vendor-advisoryx_refsource_REDHAT
http://www.securityfocus.com/bid/77222	vdb-entryx_refsource_BID
http://lists.fedoraproject.org/pipermail/package-…	vendor-advisoryx_refsource_FEDORA

Date Public

2015-10-21 00:00

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-06T06:25:21.939Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "name": "openSUSE-SU-2015:2244",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2015-12/msg00010.html"
          },
          {
            "name": "RHSA-2016:1481",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://rhn.redhat.com/errata/RHSA-2016-1481.html"
          },
          {
            "name": "1033894",
            "tags": [
              "vdb-entry",
              "x_refsource_SECTRACK",
              "x_transferred"
            ],
            "url": "http://www.securitytracker.com/id/1033894"
          },
          {
            "name": "RHSA-2016:1132",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2016:1132"
          },
          {
            "name": "RHSA-2016:0534",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://rhn.redhat.com/errata/RHSA-2016-0534.html"
          },
          {
            "name": "USN-2781-1",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "http://www.ubuntu.com/usn/USN-2781-1"
          },
          {
            "name": "SUSE-SU-2016:0296",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "https://www.suse.com/support/update/announcement/2016/suse-su-20160296-1.html"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://www.oracle.com/technetwork/topics/security/linuxbulletinapr2016-2952096.html"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://www.oracle.com/technetwork/topics/security/cpuoct2015-2367953.html"
          },
          {
            "name": "RHSA-2016:1480",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://rhn.redhat.com/errata/RHSA-2016-1480.html"
          },
          {
            "name": "openSUSE-SU-2015:2246",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2015-12/msg00011.html"
          },
          {
            "name": "DSA-3385",
            "tags": [
              "vendor-advisory",
              "x_refsource_DEBIAN",
              "x_transferred"
            ],
            "url": "http://www.debian.org/security/2015/dsa-3385"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://www.oracle.com/technetwork/topics/security/bulletinapr2016-2952098.html"
          },
          {
            "name": "openSUSE-SU-2016:0368",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-updates/2016-02/msg00039.html"
          },
          {
            "name": "DSA-3377",
            "tags": [
              "vendor-advisory",
              "x_refsource_DEBIAN",
              "x_transferred"
            ],
            "url": "http://www.debian.org/security/2015/dsa-3377"
          },
          {
            "name": "RHSA-2016:0705",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://rhn.redhat.com/errata/RHSA-2016-0705.html"
          },
          {
            "name": "77222",
            "tags": [
              "vdb-entry",
              "x_refsource_BID",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/bid/77222"
          },
          {
            "name": "FEDORA-2016-e30164d0a2",
            "tags": [
              "vendor-advisory",
              "x_refsource_FEDORA",
              "x_transferred"
            ],
            "url": "http://lists.fedoraproject.org/pipermail/package-announce/2016-February/177539.html"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "datePublic": "2015-10-21T00:00:00.000Z",
      "descriptions": [
        {
          "lang": "en",
          "value": "Unspecified vulnerability in Oracle MySQL Server 5.5.45 and earlier and 5.6.26 and earlier allows remote authenticated users to affect availability via vectors related to Server : DDL."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "n/a",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2018-01-04T19:57:01.000Z",
        "orgId": "43595867-4340-4103-b7a2-9a5208d29a85",
        "shortName": "oracle"
      },
      "references": [
        {
          "name": "openSUSE-SU-2015:2244",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2015-12/msg00010.html"
        },
        {
          "name": "RHSA-2016:1481",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://rhn.redhat.com/errata/RHSA-2016-1481.html"
        },
        {
          "name": "1033894",
          "tags": [
            "vdb-entry",
            "x_refsource_SECTRACK"
          ],
          "url": "http://www.securitytracker.com/id/1033894"
        },
        {
          "name": "RHSA-2016:1132",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2016:1132"
        },
        {
          "name": "RHSA-2016:0534",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://rhn.redhat.com/errata/RHSA-2016-0534.html"
        },
        {
          "name": "USN-2781-1",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "http://www.ubuntu.com/usn/USN-2781-1"
        },
        {
          "name": "SUSE-SU-2016:0296",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "https://www.suse.com/support/update/announcement/2016/suse-su-20160296-1.html"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://www.oracle.com/technetwork/topics/security/linuxbulletinapr2016-2952096.html"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://www.oracle.com/technetwork/topics/security/cpuoct2015-2367953.html"
        },
        {
          "name": "RHSA-2016:1480",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://rhn.redhat.com/errata/RHSA-2016-1480.html"
        },
        {
          "name": "openSUSE-SU-2015:2246",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2015-12/msg00011.html"
        },
        {
          "name": "DSA-3385",
          "tags": [
            "vendor-advisory",
            "x_refsource_DEBIAN"
          ],
          "url": "http://www.debian.org/security/2015/dsa-3385"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://www.oracle.com/technetwork/topics/security/bulletinapr2016-2952098.html"
        },
        {
          "name": "openSUSE-SU-2016:0368",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-updates/2016-02/msg00039.html"
        },
        {
          "name": "DSA-3377",
          "tags": [
            "vendor-advisory",
            "x_refsource_DEBIAN"
          ],
          "url": "http://www.debian.org/security/2015/dsa-3377"
        },
        {
          "name": "RHSA-2016:0705",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://rhn.redhat.com/errata/RHSA-2016-0705.html"
        },
        {
          "name": "77222",
          "tags": [
            "vdb-entry",
            "x_refsource_BID"
          ],
          "url": "http://www.securityfocus.com/bid/77222"
        },
        {
          "name": "FEDORA-2016-e30164d0a2",
          "tags": [
            "vendor-advisory",
            "x_refsource_FEDORA"
          ],
          "url": "http://lists.fedoraproject.org/pipermail/package-announce/2016-February/177539.html"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "secalert_us@oracle.com",
          "ID": "CVE-2015-4815",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "n/a",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "n/a"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "n/a"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "Unspecified vulnerability in Oracle MySQL Server 5.5.45 and earlier and 5.6.26 and earlier allows remote authenticated users to affect availability via vectors related to Server : DDL."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "n/a"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "openSUSE-SU-2015:2244",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2015-12/msg00010.html"
            },
            {
              "name": "RHSA-2016:1481",
              "refsource": "REDHAT",
              "url": "http://rhn.redhat.com/errata/RHSA-2016-1481.html"
            },
            {
              "name": "1033894",
              "refsource": "SECTRACK",
              "url": "http://www.securitytracker.com/id/1033894"
            },
            {
              "name": "RHSA-2016:1132",
              "refsource": "REDHAT",
              "url": "https://access.redhat.com/errata/RHSA-2016:1132"
            },
            {
              "name": "RHSA-2016:0534",
              "refsource": "REDHAT",
              "url": "http://rhn.redhat.com/errata/RHSA-2016-0534.html"
            },
            {
              "name": "USN-2781-1",
              "refsource": "UBUNTU",
              "url": "http://www.ubuntu.com/usn/USN-2781-1"
            },
            {
              "name": "SUSE-SU-2016:0296",
              "refsource": "SUSE",
              "url": "https://www.suse.com/support/update/announcement/2016/suse-su-20160296-1.html"
            },
            {
              "name": "http://www.oracle.com/technetwork/topics/security/linuxbulletinapr2016-2952096.html",
              "refsource": "CONFIRM",
              "url": "http://www.oracle.com/technetwork/topics/security/linuxbulletinapr2016-2952096.html"
            },
            {
              "name": "http://www.oracle.com/technetwork/topics/security/cpuoct2015-2367953.html",
              "refsource": "CONFIRM",
              "url": "http://www.oracle.com/technetwork/topics/security/cpuoct2015-2367953.html"
            },
            {
              "name": "RHSA-2016:1480",
              "refsource": "REDHAT",
              "url": "http://rhn.redhat.com/errata/RHSA-2016-1480.html"
            },
            {
              "name": "openSUSE-SU-2015:2246",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2015-12/msg00011.html"
            },
            {
              "name": "DSA-3385",
              "refsource": "DEBIAN",
              "url": "http://www.debian.org/security/2015/dsa-3385"
            },
            {
              "name": "http://www.oracle.com/technetwork/topics/security/bulletinapr2016-2952098.html",
              "refsource": "CONFIRM",
              "url": "http://www.oracle.com/technetwork/topics/security/bulletinapr2016-2952098.html"
            },
            {
              "name": "openSUSE-SU-2016:0368",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-updates/2016-02/msg00039.html"
            },
            {
              "name": "DSA-3377",
              "refsource": "DEBIAN",
              "url": "http://www.debian.org/security/2015/dsa-3377"
            },
            {
              "name": "RHSA-2016:0705",
              "refsource": "REDHAT",
              "url": "http://rhn.redhat.com/errata/RHSA-2016-0705.html"
            },
            {
              "name": "77222",
              "refsource": "BID",
              "url": "http://www.securityfocus.com/bid/77222"
            },
            {
              "name": "FEDORA-2016-e30164d0a2",
              "refsource": "FEDORA",
              "url": "http://lists.fedoraproject.org/pipermail/package-announce/2016-February/177539.html"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "43595867-4340-4103-b7a2-9a5208d29a85",
    "assignerShortName": "oracle",
    "cveId": "CVE-2015-4815",
    "datePublished": "2015-10-21T21:00:00.000Z",
    "dateReserved": "2015-06-24T00:00:00.000Z",
    "dateUpdated": "2024-08-06T06:25:21.939Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

CVE-2015-4816 (GCVE-0-2015-4816)

Vulnerability from cvelistv5 – Published: 2015-10-21 21:00 – Updated: 2024-08-06 06:25

Summary

Unspecified vulnerability in Oracle MySQL Server 5.5.44 and earlier allows remote authenticated users to affect availability via unknown vectors related to Server : InnoDB.

Severity

No CVSS data available.

CWE

Assigner

oracle mitre root

References

13 references

URL	Tags
http://rhn.redhat.com/errata/RHSA-2016-1481.html	vendor-advisoryx_refsource_REDHAT
http://www.securitytracker.com/id/1033894	vdb-entryx_refsource_SECTRACK
https://access.redhat.com/errata/RHSA-2016:1132	vendor-advisoryx_refsource_REDHAT
http://rhn.redhat.com/errata/RHSA-2016-0534.html	vendor-advisoryx_refsource_REDHAT
http://www.ubuntu.com/usn/USN-2781-1	vendor-advisoryx_refsource_UBUNTU
http://www.securityfocus.com/bid/77134	vdb-entryx_refsource_BID
http://www.oracle.com/technetwork/topics/security…	x_refsource_CONFIRM
http://www.oracle.com/technetwork/topics/security…	x_refsource_CONFIRM
http://www.debian.org/security/2015/dsa-3385	vendor-advisoryx_refsource_DEBIAN
http://www.oracle.com/technetwork/topics/security…	x_refsource_CONFIRM
http://rhn.redhat.com/errata/RHSA-2015-1628.html	vendor-advisoryx_refsource_REDHAT
http://www.debian.org/security/2015/dsa-3377	vendor-advisoryx_refsource_DEBIAN
http://lists.fedoraproject.org/pipermail/package-…	vendor-advisoryx_refsource_FEDORA

Date Public

2015-10-21 00:00

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-06T06:25:21.890Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "name": "RHSA-2016:1481",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://rhn.redhat.com/errata/RHSA-2016-1481.html"
          },
          {
            "name": "1033894",
            "tags": [
              "vdb-entry",
              "x_refsource_SECTRACK",
              "x_transferred"
            ],
            "url": "http://www.securitytracker.com/id/1033894"
          },
          {
            "name": "RHSA-2016:1132",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2016:1132"
          },
          {
            "name": "RHSA-2016:0534",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://rhn.redhat.com/errata/RHSA-2016-0534.html"
          },
          {
            "name": "USN-2781-1",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "http://www.ubuntu.com/usn/USN-2781-1"
          },
          {
            "name": "77134",
            "tags": [
              "vdb-entry",
              "x_refsource_BID",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/bid/77134"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://www.oracle.com/technetwork/topics/security/linuxbulletinapr2016-2952096.html"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://www.oracle.com/technetwork/topics/security/cpuoct2015-2367953.html"
          },
          {
            "name": "DSA-3385",
            "tags": [
              "vendor-advisory",
              "x_refsource_DEBIAN",
              "x_transferred"
            ],
            "url": "http://www.debian.org/security/2015/dsa-3385"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://www.oracle.com/technetwork/topics/security/bulletinapr2016-2952098.html"
          },
          {
            "name": "RHSA-2015:1628",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://rhn.redhat.com/errata/RHSA-2015-1628.html"
          },
          {
            "name": "DSA-3377",
            "tags": [
              "vendor-advisory",
              "x_refsource_DEBIAN",
              "x_transferred"
            ],
            "url": "http://www.debian.org/security/2015/dsa-3377"
          },
          {
            "name": "FEDORA-2016-e30164d0a2",
            "tags": [
              "vendor-advisory",
              "x_refsource_FEDORA",
              "x_transferred"
            ],
            "url": "http://lists.fedoraproject.org/pipermail/package-announce/2016-February/177539.html"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "datePublic": "2015-10-21T00:00:00.000Z",
      "descriptions": [
        {
          "lang": "en",
          "value": "Unspecified vulnerability in Oracle MySQL Server 5.5.44 and earlier allows remote authenticated users to affect availability via unknown vectors related to Server : InnoDB."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "n/a",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2018-01-04T19:57:01.000Z",
        "orgId": "43595867-4340-4103-b7a2-9a5208d29a85",
        "shortName": "oracle"
      },
      "references": [
        {
          "name": "RHSA-2016:1481",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://rhn.redhat.com/errata/RHSA-2016-1481.html"
        },
        {
          "name": "1033894",
          "tags": [
            "vdb-entry",
            "x_refsource_SECTRACK"
          ],
          "url": "http://www.securitytracker.com/id/1033894"
        },
        {
          "name": "RHSA-2016:1132",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2016:1132"
        },
        {
          "name": "RHSA-2016:0534",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://rhn.redhat.com/errata/RHSA-2016-0534.html"
        },
        {
          "name": "USN-2781-1",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "http://www.ubuntu.com/usn/USN-2781-1"
        },
        {
          "name": "77134",
          "tags": [
            "vdb-entry",
            "x_refsource_BID"
          ],
          "url": "http://www.securityfocus.com/bid/77134"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://www.oracle.com/technetwork/topics/security/linuxbulletinapr2016-2952096.html"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://www.oracle.com/technetwork/topics/security/cpuoct2015-2367953.html"
        },
        {
          "name": "DSA-3385",
          "tags": [
            "vendor-advisory",
            "x_refsource_DEBIAN"
          ],
          "url": "http://www.debian.org/security/2015/dsa-3385"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://www.oracle.com/technetwork/topics/security/bulletinapr2016-2952098.html"
        },
        {
          "name": "RHSA-2015:1628",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://rhn.redhat.com/errata/RHSA-2015-1628.html"
        },
        {
          "name": "DSA-3377",
          "tags": [
            "vendor-advisory",
            "x_refsource_DEBIAN"
          ],
          "url": "http://www.debian.org/security/2015/dsa-3377"
        },
        {
          "name": "FEDORA-2016-e30164d0a2",
          "tags": [
            "vendor-advisory",
            "x_refsource_FEDORA"
          ],
          "url": "http://lists.fedoraproject.org/pipermail/package-announce/2016-February/177539.html"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "secalert_us@oracle.com",
          "ID": "CVE-2015-4816",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "n/a",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "n/a"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "n/a"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "Unspecified vulnerability in Oracle MySQL Server 5.5.44 and earlier allows remote authenticated users to affect availability via unknown vectors related to Server : InnoDB."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "n/a"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "RHSA-2016:1481",
              "refsource": "REDHAT",
              "url": "http://rhn.redhat.com/errata/RHSA-2016-1481.html"
            },
            {
              "name": "1033894",
              "refsource": "SECTRACK",
              "url": "http://www.securitytracker.com/id/1033894"
            },
            {
              "name": "RHSA-2016:1132",
              "refsource": "REDHAT",
              "url": "https://access.redhat.com/errata/RHSA-2016:1132"
            },
            {
              "name": "RHSA-2016:0534",
              "refsource": "REDHAT",
              "url": "http://rhn.redhat.com/errata/RHSA-2016-0534.html"
            },
            {
              "name": "USN-2781-1",
              "refsource": "UBUNTU",
              "url": "http://www.ubuntu.com/usn/USN-2781-1"
            },
            {
              "name": "77134",
              "refsource": "BID",
              "url": "http://www.securityfocus.com/bid/77134"
            },
            {
              "name": "http://www.oracle.com/technetwork/topics/security/linuxbulletinapr2016-2952096.html",
              "refsource": "CONFIRM",
              "url": "http://www.oracle.com/technetwork/topics/security/linuxbulletinapr2016-2952096.html"
            },
            {
              "name": "http://www.oracle.com/technetwork/topics/security/cpuoct2015-2367953.html",
              "refsource": "CONFIRM",
              "url": "http://www.oracle.com/technetwork/topics/security/cpuoct2015-2367953.html"
            },
            {
              "name": "DSA-3385",
              "refsource": "DEBIAN",
              "url": "http://www.debian.org/security/2015/dsa-3385"
            },
            {
              "name": "http://www.oracle.com/technetwork/topics/security/bulletinapr2016-2952098.html",
              "refsource": "CONFIRM",
              "url": "http://www.oracle.com/technetwork/topics/security/bulletinapr2016-2952098.html"
            },
            {
              "name": "RHSA-2015:1628",
              "refsource": "REDHAT",
              "url": "http://rhn.redhat.com/errata/RHSA-2015-1628.html"
            },
            {
              "name": "DSA-3377",
              "refsource": "DEBIAN",
              "url": "http://www.debian.org/security/2015/dsa-3377"
            },
            {
              "name": "FEDORA-2016-e30164d0a2",
              "refsource": "FEDORA",
              "url": "http://lists.fedoraproject.org/pipermail/package-announce/2016-February/177539.html"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "43595867-4340-4103-b7a2-9a5208d29a85",
    "assignerShortName": "oracle",
    "cveId": "CVE-2015-4816",
    "datePublished": "2015-10-21T21:00:00.000Z",
    "dateReserved": "2015-06-24T00:00:00.000Z",
    "dateUpdated": "2024-08-06T06:25:21.890Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

CVE-2015-4819 (GCVE-0-2015-4819)

Vulnerability from cvelistv5 – Published: 2015-10-21 21:00 – Updated: 2024-08-06 06:25

Summary

Severity

No CVSS data available.

CWE

Assigner

oracle mitre root

References

13 references

URL	Tags
http://rhn.redhat.com/errata/RHSA-2016-1481.html	vendor-advisoryx_refsource_REDHAT
http://www.securitytracker.com/id/1033894	vdb-entryx_refsource_SECTRACK
https://access.redhat.com/errata/RHSA-2016:1132	vendor-advisoryx_refsource_REDHAT
http://rhn.redhat.com/errata/RHSA-2016-0534.html	vendor-advisoryx_refsource_REDHAT
http://www.ubuntu.com/usn/USN-2781-1	vendor-advisoryx_refsource_UBUNTU
http://www.oracle.com/technetwork/topics/security…	x_refsource_CONFIRM
http://www.oracle.com/technetwork/topics/security…	x_refsource_CONFIRM
http://www.securityfocus.com/bid/77196	vdb-entryx_refsource_BID
http://www.debian.org/security/2015/dsa-3385	vendor-advisoryx_refsource_DEBIAN
http://www.oracle.com/technetwork/topics/security…	x_refsource_CONFIRM
http://rhn.redhat.com/errata/RHSA-2015-1628.html	vendor-advisoryx_refsource_REDHAT
http://www.debian.org/security/2015/dsa-3377	vendor-advisoryx_refsource_DEBIAN
http://lists.fedoraproject.org/pipermail/package-…	vendor-advisoryx_refsource_FEDORA

Date Public

2015-10-21 00:00

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-06T06:25:21.881Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "name": "RHSA-2016:1481",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://rhn.redhat.com/errata/RHSA-2016-1481.html"
          },
          {
            "name": "1033894",
            "tags": [
              "vdb-entry",
              "x_refsource_SECTRACK",
              "x_transferred"
            ],
            "url": "http://www.securitytracker.com/id/1033894"
          },
          {
            "name": "RHSA-2016:1132",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2016:1132"
          },
          {
            "name": "RHSA-2016:0534",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://rhn.redhat.com/errata/RHSA-2016-0534.html"
          },
          {
            "name": "USN-2781-1",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "http://www.ubuntu.com/usn/USN-2781-1"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://www.oracle.com/technetwork/topics/security/linuxbulletinapr2016-2952096.html"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://www.oracle.com/technetwork/topics/security/cpuoct2015-2367953.html"
          },
          {
            "name": "77196",
            "tags": [
              "vdb-entry",
              "x_refsource_BID",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/bid/77196"
          },
          {
            "name": "DSA-3385",
            "tags": [
              "vendor-advisory",
              "x_refsource_DEBIAN",
              "x_transferred"
            ],
            "url": "http://www.debian.org/security/2015/dsa-3385"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://www.oracle.com/technetwork/topics/security/bulletinapr2016-2952098.html"
          },
          {
            "name": "RHSA-2015:1628",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://rhn.redhat.com/errata/RHSA-2015-1628.html"
          },
          {
            "name": "DSA-3377",
            "tags": [
              "vendor-advisory",
              "x_refsource_DEBIAN",
              "x_transferred"
            ],
            "url": "http://www.debian.org/security/2015/dsa-3377"
          },
          {
            "name": "FEDORA-2016-e30164d0a2",
            "tags": [
              "vendor-advisory",
              "x_refsource_FEDORA",
              "x_transferred"
            ],
            "url": "http://lists.fedoraproject.org/pipermail/package-announce/2016-February/177539.html"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "datePublic": "2015-10-21T00:00:00.000Z",
      "descriptions": [
        {
          "lang": "en",
          "value": "Unspecified vulnerability in Oracle MySQL Server 5.5.44 and earlier, and 5.6.25 and earlier, allows local users to affect confidentiality, integrity, and availability via unknown vectors related to Client programs."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "n/a",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2018-01-04T19:57:01.000Z",
        "orgId": "43595867-4340-4103-b7a2-9a5208d29a85",
        "shortName": "oracle"
      },
      "references": [
        {
          "name": "RHSA-2016:1481",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://rhn.redhat.com/errata/RHSA-2016-1481.html"
        },
        {
          "name": "1033894",
          "tags": [
            "vdb-entry",
            "x_refsource_SECTRACK"
          ],
          "url": "http://www.securitytracker.com/id/1033894"
        },
        {
          "name": "RHSA-2016:1132",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2016:1132"
        },
        {
          "name": "RHSA-2016:0534",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://rhn.redhat.com/errata/RHSA-2016-0534.html"
        },
        {
          "name": "USN-2781-1",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "http://www.ubuntu.com/usn/USN-2781-1"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://www.oracle.com/technetwork/topics/security/linuxbulletinapr2016-2952096.html"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://www.oracle.com/technetwork/topics/security/cpuoct2015-2367953.html"
        },
        {
          "name": "77196",
          "tags": [
            "vdb-entry",
            "x_refsource_BID"
          ],
          "url": "http://www.securityfocus.com/bid/77196"
        },
        {
          "name": "DSA-3385",
          "tags": [
            "vendor-advisory",
            "x_refsource_DEBIAN"
          ],
          "url": "http://www.debian.org/security/2015/dsa-3385"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://www.oracle.com/technetwork/topics/security/bulletinapr2016-2952098.html"
        },
        {
          "name": "RHSA-2015:1628",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://rhn.redhat.com/errata/RHSA-2015-1628.html"
        },
        {
          "name": "DSA-3377",
          "tags": [
            "vendor-advisory",
            "x_refsource_DEBIAN"
          ],
          "url": "http://www.debian.org/security/2015/dsa-3377"
        },
        {
          "name": "FEDORA-2016-e30164d0a2",
          "tags": [
            "vendor-advisory",
            "x_refsource_FEDORA"
          ],
          "url": "http://lists.fedoraproject.org/pipermail/package-announce/2016-February/177539.html"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "secalert_us@oracle.com",
          "ID": "CVE-2015-4819",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "n/a",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "n/a"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "n/a"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "Unspecified vulnerability in Oracle MySQL Server 5.5.44 and earlier, and 5.6.25 and earlier, allows local users to affect confidentiality, integrity, and availability via unknown vectors related to Client programs."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "n/a"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "RHSA-2016:1481",
              "refsource": "REDHAT",
              "url": "http://rhn.redhat.com/errata/RHSA-2016-1481.html"
            },
            {
              "name": "1033894",
              "refsource": "SECTRACK",
              "url": "http://www.securitytracker.com/id/1033894"
            },
            {
              "name": "RHSA-2016:1132",
              "refsource": "REDHAT",
              "url": "https://access.redhat.com/errata/RHSA-2016:1132"
            },
            {
              "name": "RHSA-2016:0534",
              "refsource": "REDHAT",
              "url": "http://rhn.redhat.com/errata/RHSA-2016-0534.html"
            },
            {
              "name": "USN-2781-1",
              "refsource": "UBUNTU",
              "url": "http://www.ubuntu.com/usn/USN-2781-1"
            },
            {
              "name": "http://www.oracle.com/technetwork/topics/security/linuxbulletinapr2016-2952096.html",
              "refsource": "CONFIRM",
              "url": "http://www.oracle.com/technetwork/topics/security/linuxbulletinapr2016-2952096.html"
            },
            {
              "name": "http://www.oracle.com/technetwork/topics/security/cpuoct2015-2367953.html",
              "refsource": "CONFIRM",
              "url": "http://www.oracle.com/technetwork/topics/security/cpuoct2015-2367953.html"
            },
            {
              "name": "77196",
              "refsource": "BID",
              "url": "http://www.securityfocus.com/bid/77196"
            },
            {
              "name": "DSA-3385",
              "refsource": "DEBIAN",
              "url": "http://www.debian.org/security/2015/dsa-3385"
            },
            {
              "name": "http://www.oracle.com/technetwork/topics/security/bulletinapr2016-2952098.html",
              "refsource": "CONFIRM",
              "url": "http://www.oracle.com/technetwork/topics/security/bulletinapr2016-2952098.html"
            },
            {
              "name": "RHSA-2015:1628",
              "refsource": "REDHAT",
              "url": "http://rhn.redhat.com/errata/RHSA-2015-1628.html"
            },
            {
              "name": "DSA-3377",
              "refsource": "DEBIAN",
              "url": "http://www.debian.org/security/2015/dsa-3377"
            },
            {
              "name": "FEDORA-2016-e30164d0a2",
              "refsource": "FEDORA",
              "url": "http://lists.fedoraproject.org/pipermail/package-announce/2016-February/177539.html"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "43595867-4340-4103-b7a2-9a5208d29a85",
    "assignerShortName": "oracle",
    "cveId": "CVE-2015-4819",
    "datePublished": "2015-10-21T21:00:00.000Z",
    "dateReserved": "2015-06-24T00:00:00.000Z",
    "dateUpdated": "2024-08-06T06:25:21.881Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

CVE-2015-4826 (GCVE-0-2015-4826)

Vulnerability from cvelistv5 – Published: 2015-10-21 21:00 – Updated: 2024-08-06 06:25

Summary

Unspecified vulnerability in Oracle MySQL Server 5.5.45 and earlier and 5.6.26 and earlier allows remote authenticated users to affect confidentiality via unknown vectors related to Server : Types.

Severity

No CVSS data available.

CWE

Assigner

oracle mitre root

References

17 references

URL	Tags
http://lists.opensuse.org/opensuse-security-annou…	vendor-advisoryx_refsource_SUSE
http://rhn.redhat.com/errata/RHSA-2016-1481.html	vendor-advisoryx_refsource_REDHAT
http://www.securitytracker.com/id/1033894	vdb-entryx_refsource_SECTRACK
https://access.redhat.com/errata/RHSA-2016:1132	vendor-advisoryx_refsource_REDHAT
http://rhn.redhat.com/errata/RHSA-2016-0534.html	vendor-advisoryx_refsource_REDHAT
http://www.ubuntu.com/usn/USN-2781-1	vendor-advisoryx_refsource_UBUNTU
https://www.suse.com/support/update/announcement/…	vendor-advisoryx_refsource_SUSE
http://www.oracle.com/technetwork/topics/security…	x_refsource_CONFIRM
http://rhn.redhat.com/errata/RHSA-2016-1480.html	vendor-advisoryx_refsource_REDHAT
http://lists.opensuse.org/opensuse-security-annou…	vendor-advisoryx_refsource_SUSE
http://www.debian.org/security/2015/dsa-3385	vendor-advisoryx_refsource_DEBIAN
http://www.oracle.com/technetwork/topics/security…	x_refsource_CONFIRM
http://lists.opensuse.org/opensuse-updates/2016-0…	vendor-advisoryx_refsource_SUSE
http://www.debian.org/security/2015/dsa-3377	vendor-advisoryx_refsource_DEBIAN
http://rhn.redhat.com/errata/RHSA-2016-0705.html	vendor-advisoryx_refsource_REDHAT
http://lists.fedoraproject.org/pipermail/package-…	vendor-advisoryx_refsource_FEDORA
http://www.securityfocus.com/bid/77237	vdb-entryx_refsource_BID

Date Public

2015-10-21 00:00

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-06T06:25:21.970Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "name": "openSUSE-SU-2015:2244",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2015-12/msg00010.html"
          },
          {
            "name": "RHSA-2016:1481",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://rhn.redhat.com/errata/RHSA-2016-1481.html"
          },
          {
            "name": "1033894",
            "tags": [
              "vdb-entry",
              "x_refsource_SECTRACK",
              "x_transferred"
            ],
            "url": "http://www.securitytracker.com/id/1033894"
          },
          {
            "name": "RHSA-2016:1132",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2016:1132"
          },
          {
            "name": "RHSA-2016:0534",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://rhn.redhat.com/errata/RHSA-2016-0534.html"
          },
          {
            "name": "USN-2781-1",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "http://www.ubuntu.com/usn/USN-2781-1"
          },
          {
            "name": "SUSE-SU-2016:0296",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "https://www.suse.com/support/update/announcement/2016/suse-su-20160296-1.html"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://www.oracle.com/technetwork/topics/security/cpuoct2015-2367953.html"
          },
          {
            "name": "RHSA-2016:1480",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://rhn.redhat.com/errata/RHSA-2016-1480.html"
          },
          {
            "name": "openSUSE-SU-2015:2246",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2015-12/msg00011.html"
          },
          {
            "name": "DSA-3385",
            "tags": [
              "vendor-advisory",
              "x_refsource_DEBIAN",
              "x_transferred"
            ],
            "url": "http://www.debian.org/security/2015/dsa-3385"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://www.oracle.com/technetwork/topics/security/bulletinapr2016-2952098.html"
          },
          {
            "name": "openSUSE-SU-2016:0368",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-updates/2016-02/msg00039.html"
          },
          {
            "name": "DSA-3377",
            "tags": [
              "vendor-advisory",
              "x_refsource_DEBIAN",
              "x_transferred"
            ],
            "url": "http://www.debian.org/security/2015/dsa-3377"
          },
          {
            "name": "RHSA-2016:0705",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://rhn.redhat.com/errata/RHSA-2016-0705.html"
          },
          {
            "name": "FEDORA-2016-e30164d0a2",
            "tags": [
              "vendor-advisory",
              "x_refsource_FEDORA",
              "x_transferred"
            ],
            "url": "http://lists.fedoraproject.org/pipermail/package-announce/2016-February/177539.html"
          },
          {
            "name": "77237",
            "tags": [
              "vdb-entry",
              "x_refsource_BID",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/bid/77237"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "datePublic": "2015-10-21T00:00:00.000Z",
      "descriptions": [
        {
          "lang": "en",
          "value": "Unspecified vulnerability in Oracle MySQL Server 5.5.45 and earlier and 5.6.26 and earlier allows remote authenticated users to affect confidentiality via unknown vectors related to Server : Types."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "n/a",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2018-01-04T19:57:01.000Z",
        "orgId": "43595867-4340-4103-b7a2-9a5208d29a85",
        "shortName": "oracle"
      },
      "references": [
        {
          "name": "openSUSE-SU-2015:2244",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2015-12/msg00010.html"
        },
        {
          "name": "RHSA-2016:1481",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://rhn.redhat.com/errata/RHSA-2016-1481.html"
        },
        {
          "name": "1033894",
          "tags": [
            "vdb-entry",
            "x_refsource_SECTRACK"
          ],
          "url": "http://www.securitytracker.com/id/1033894"
        },
        {
          "name": "RHSA-2016:1132",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2016:1132"
        },
        {
          "name": "RHSA-2016:0534",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://rhn.redhat.com/errata/RHSA-2016-0534.html"
        },
        {
          "name": "USN-2781-1",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "http://www.ubuntu.com/usn/USN-2781-1"
        },
        {
          "name": "SUSE-SU-2016:0296",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "https://www.suse.com/support/update/announcement/2016/suse-su-20160296-1.html"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://www.oracle.com/technetwork/topics/security/cpuoct2015-2367953.html"
        },
        {
          "name": "RHSA-2016:1480",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://rhn.redhat.com/errata/RHSA-2016-1480.html"
        },
        {
          "name": "openSUSE-SU-2015:2246",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2015-12/msg00011.html"
        },
        {
          "name": "DSA-3385",
          "tags": [
            "vendor-advisory",
            "x_refsource_DEBIAN"
          ],
          "url": "http://www.debian.org/security/2015/dsa-3385"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://www.oracle.com/technetwork/topics/security/bulletinapr2016-2952098.html"
        },
        {
          "name": "openSUSE-SU-2016:0368",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-updates/2016-02/msg00039.html"
        },
        {
          "name": "DSA-3377",
          "tags": [
            "vendor-advisory",
            "x_refsource_DEBIAN"
          ],
          "url": "http://www.debian.org/security/2015/dsa-3377"
        },
        {
          "name": "RHSA-2016:0705",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://rhn.redhat.com/errata/RHSA-2016-0705.html"
        },
        {
          "name": "FEDORA-2016-e30164d0a2",
          "tags": [
            "vendor-advisory",
            "x_refsource_FEDORA"
          ],
          "url": "http://lists.fedoraproject.org/pipermail/package-announce/2016-February/177539.html"
        },
        {
          "name": "77237",
          "tags": [
            "vdb-entry",
            "x_refsource_BID"
          ],
          "url": "http://www.securityfocus.com/bid/77237"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "secalert_us@oracle.com",
          "ID": "CVE-2015-4826",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "n/a",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "n/a"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "n/a"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "Unspecified vulnerability in Oracle MySQL Server 5.5.45 and earlier and 5.6.26 and earlier allows remote authenticated users to affect confidentiality via unknown vectors related to Server : Types."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "n/a"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "openSUSE-SU-2015:2244",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2015-12/msg00010.html"
            },
            {
              "name": "RHSA-2016:1481",
              "refsource": "REDHAT",
              "url": "http://rhn.redhat.com/errata/RHSA-2016-1481.html"
            },
            {
              "name": "1033894",
              "refsource": "SECTRACK",
              "url": "http://www.securitytracker.com/id/1033894"
            },
            {
              "name": "RHSA-2016:1132",
              "refsource": "REDHAT",
              "url": "https://access.redhat.com/errata/RHSA-2016:1132"
            },
            {
              "name": "RHSA-2016:0534",
              "refsource": "REDHAT",
              "url": "http://rhn.redhat.com/errata/RHSA-2016-0534.html"
            },
            {
              "name": "USN-2781-1",
              "refsource": "UBUNTU",
              "url": "http://www.ubuntu.com/usn/USN-2781-1"
            },
            {
              "name": "SUSE-SU-2016:0296",
              "refsource": "SUSE",
              "url": "https://www.suse.com/support/update/announcement/2016/suse-su-20160296-1.html"
            },
            {
              "name": "http://www.oracle.com/technetwork/topics/security/cpuoct2015-2367953.html",
              "refsource": "CONFIRM",
              "url": "http://www.oracle.com/technetwork/topics/security/cpuoct2015-2367953.html"
            },
            {
              "name": "RHSA-2016:1480",
              "refsource": "REDHAT",
              "url": "http://rhn.redhat.com/errata/RHSA-2016-1480.html"
            },
            {
              "name": "openSUSE-SU-2015:2246",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2015-12/msg00011.html"
            },
            {
              "name": "DSA-3385",
              "refsource": "DEBIAN",
              "url": "http://www.debian.org/security/2015/dsa-3385"
            },
            {
              "name": "http://www.oracle.com/technetwork/topics/security/bulletinapr2016-2952098.html",
              "refsource": "CONFIRM",
              "url": "http://www.oracle.com/technetwork/topics/security/bulletinapr2016-2952098.html"
            },
            {
              "name": "openSUSE-SU-2016:0368",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-updates/2016-02/msg00039.html"
            },
            {
              "name": "DSA-3377",
              "refsource": "DEBIAN",
              "url": "http://www.debian.org/security/2015/dsa-3377"
            },
            {
              "name": "RHSA-2016:0705",
              "refsource": "REDHAT",
              "url": "http://rhn.redhat.com/errata/RHSA-2016-0705.html"
            },
            {
              "name": "FEDORA-2016-e30164d0a2",
              "refsource": "FEDORA",
              "url": "http://lists.fedoraproject.org/pipermail/package-announce/2016-February/177539.html"
            },
            {
              "name": "77237",
              "refsource": "BID",
              "url": "http://www.securityfocus.com/bid/77237"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "43595867-4340-4103-b7a2-9a5208d29a85",
    "assignerShortName": "oracle",
    "cveId": "CVE-2015-4826",
    "datePublished": "2015-10-21T21:00:00.000Z",
    "dateReserved": "2015-06-24T00:00:00.000Z",
    "dateUpdated": "2024-08-06T06:25:21.970Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

CVE-2015-4830 (GCVE-0-2015-4830)

Vulnerability from cvelistv5 – Published: 2015-10-21 21:00 – Updated: 2024-08-06 06:25

Summary

Severity

No CVSS data available.

CWE

Assigner

oracle mitre root

References

17 references

URL	Tags
http://lists.opensuse.org/opensuse-security-annou…	vendor-advisoryx_refsource_SUSE
http://rhn.redhat.com/errata/RHSA-2016-1481.html	vendor-advisoryx_refsource_REDHAT
http://www.securitytracker.com/id/1033894	vdb-entryx_refsource_SECTRACK
https://access.redhat.com/errata/RHSA-2016:1132	vendor-advisoryx_refsource_REDHAT
http://rhn.redhat.com/errata/RHSA-2016-0534.html	vendor-advisoryx_refsource_REDHAT
http://www.ubuntu.com/usn/USN-2781-1	vendor-advisoryx_refsource_UBUNTU
https://www.suse.com/support/update/announcement/…	vendor-advisoryx_refsource_SUSE
http://www.securityfocus.com/bid/77228	vdb-entryx_refsource_BID
http://www.oracle.com/technetwork/topics/security…	x_refsource_CONFIRM
http://rhn.redhat.com/errata/RHSA-2016-1480.html	vendor-advisoryx_refsource_REDHAT
http://lists.opensuse.org/opensuse-security-annou…	vendor-advisoryx_refsource_SUSE
http://www.debian.org/security/2015/dsa-3385	vendor-advisoryx_refsource_DEBIAN
http://www.oracle.com/technetwork/topics/security…	x_refsource_CONFIRM
http://lists.opensuse.org/opensuse-updates/2016-0…	vendor-advisoryx_refsource_SUSE
http://www.debian.org/security/2015/dsa-3377	vendor-advisoryx_refsource_DEBIAN
http://rhn.redhat.com/errata/RHSA-2016-0705.html	vendor-advisoryx_refsource_REDHAT
http://lists.fedoraproject.org/pipermail/package-…	vendor-advisoryx_refsource_FEDORA

Date Public

2015-10-21 00:00

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-06T06:25:21.866Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "name": "openSUSE-SU-2015:2244",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2015-12/msg00010.html"
          },
          {
            "name": "RHSA-2016:1481",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://rhn.redhat.com/errata/RHSA-2016-1481.html"
          },
          {
            "name": "1033894",
            "tags": [
              "vdb-entry",
              "x_refsource_SECTRACK",
              "x_transferred"
            ],
            "url": "http://www.securitytracker.com/id/1033894"
          },
          {
            "name": "RHSA-2016:1132",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2016:1132"
          },
          {
            "name": "RHSA-2016:0534",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://rhn.redhat.com/errata/RHSA-2016-0534.html"
          },
          {
            "name": "USN-2781-1",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "http://www.ubuntu.com/usn/USN-2781-1"
          },
          {
            "name": "SUSE-SU-2016:0296",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "https://www.suse.com/support/update/announcement/2016/suse-su-20160296-1.html"
          },
          {
            "name": "77228",
            "tags": [
              "vdb-entry",
              "x_refsource_BID",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/bid/77228"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://www.oracle.com/technetwork/topics/security/cpuoct2015-2367953.html"
          },
          {
            "name": "RHSA-2016:1480",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://rhn.redhat.com/errata/RHSA-2016-1480.html"
          },
          {
            "name": "openSUSE-SU-2015:2246",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2015-12/msg00011.html"
          },
          {
            "name": "DSA-3385",
            "tags": [
              "vendor-advisory",
              "x_refsource_DEBIAN",
              "x_transferred"
            ],
            "url": "http://www.debian.org/security/2015/dsa-3385"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://www.oracle.com/technetwork/topics/security/bulletinapr2016-2952098.html"
          },
          {
            "name": "openSUSE-SU-2016:0368",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-updates/2016-02/msg00039.html"
          },
          {
            "name": "DSA-3377",
            "tags": [
              "vendor-advisory",
              "x_refsource_DEBIAN",
              "x_transferred"
            ],
            "url": "http://www.debian.org/security/2015/dsa-3377"
          },
          {
            "name": "RHSA-2016:0705",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://rhn.redhat.com/errata/RHSA-2016-0705.html"
          },
          {
            "name": "FEDORA-2016-e30164d0a2",
            "tags": [
              "vendor-advisory",
              "x_refsource_FEDORA",
              "x_transferred"
            ],
            "url": "http://lists.fedoraproject.org/pipermail/package-announce/2016-February/177539.html"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "datePublic": "2015-10-21T00:00:00.000Z",
      "descriptions": [
        {
          "lang": "en",
          "value": "Unspecified vulnerability in Oracle MySQL Server 5.5.45 and earlier and 5.6.26 and earlier allows remote authenticated users to affect integrity via unknown vectors related to Server : Security : Privileges."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "n/a",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2018-01-04T19:57:01.000Z",
        "orgId": "43595867-4340-4103-b7a2-9a5208d29a85",
        "shortName": "oracle"
      },
      "references": [
        {
          "name": "openSUSE-SU-2015:2244",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2015-12/msg00010.html"
        },
        {
          "name": "RHSA-2016:1481",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://rhn.redhat.com/errata/RHSA-2016-1481.html"
        },
        {
          "name": "1033894",
          "tags": [
            "vdb-entry",
            "x_refsource_SECTRACK"
          ],
          "url": "http://www.securitytracker.com/id/1033894"
        },
        {
          "name": "RHSA-2016:1132",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2016:1132"
        },
        {
          "name": "RHSA-2016:0534",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://rhn.redhat.com/errata/RHSA-2016-0534.html"
        },
        {
          "name": "USN-2781-1",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "http://www.ubuntu.com/usn/USN-2781-1"
        },
        {
          "name": "SUSE-SU-2016:0296",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "https://www.suse.com/support/update/announcement/2016/suse-su-20160296-1.html"
        },
        {
          "name": "77228",
          "tags": [
            "vdb-entry",
            "x_refsource_BID"
          ],
          "url": "http://www.securityfocus.com/bid/77228"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://www.oracle.com/technetwork/topics/security/cpuoct2015-2367953.html"
        },
        {
          "name": "RHSA-2016:1480",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://rhn.redhat.com/errata/RHSA-2016-1480.html"
        },
        {
          "name": "openSUSE-SU-2015:2246",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2015-12/msg00011.html"
        },
        {
          "name": "DSA-3385",
          "tags": [
            "vendor-advisory",
            "x_refsource_DEBIAN"
          ],
          "url": "http://www.debian.org/security/2015/dsa-3385"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://www.oracle.com/technetwork/topics/security/bulletinapr2016-2952098.html"
        },
        {
          "name": "openSUSE-SU-2016:0368",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-updates/2016-02/msg00039.html"
        },
        {
          "name": "DSA-3377",
          "tags": [
            "vendor-advisory",
            "x_refsource_DEBIAN"
          ],
          "url": "http://www.debian.org/security/2015/dsa-3377"
        },
        {
          "name": "RHSA-2016:0705",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://rhn.redhat.com/errata/RHSA-2016-0705.html"
        },
        {
          "name": "FEDORA-2016-e30164d0a2",
          "tags": [
            "vendor-advisory",
            "x_refsource_FEDORA"
          ],
          "url": "http://lists.fedoraproject.org/pipermail/package-announce/2016-February/177539.html"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "secalert_us@oracle.com",
          "ID": "CVE-2015-4830",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "n/a",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "n/a"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "n/a"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "Unspecified vulnerability in Oracle MySQL Server 5.5.45 and earlier and 5.6.26 and earlier allows remote authenticated users to affect integrity via unknown vectors related to Server : Security : Privileges."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "n/a"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "openSUSE-SU-2015:2244",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2015-12/msg00010.html"
            },
            {
              "name": "RHSA-2016:1481",
              "refsource": "REDHAT",
              "url": "http://rhn.redhat.com/errata/RHSA-2016-1481.html"
            },
            {
              "name": "1033894",
              "refsource": "SECTRACK",
              "url": "http://www.securitytracker.com/id/1033894"
            },
            {
              "name": "RHSA-2016:1132",
              "refsource": "REDHAT",
              "url": "https://access.redhat.com/errata/RHSA-2016:1132"
            },
            {
              "name": "RHSA-2016:0534",
              "refsource": "REDHAT",
              "url": "http://rhn.redhat.com/errata/RHSA-2016-0534.html"
            },
            {
              "name": "USN-2781-1",
              "refsource": "UBUNTU",
              "url": "http://www.ubuntu.com/usn/USN-2781-1"
            },
            {
              "name": "SUSE-SU-2016:0296",
              "refsource": "SUSE",
              "url": "https://www.suse.com/support/update/announcement/2016/suse-su-20160296-1.html"
            },
            {
              "name": "77228",
              "refsource": "BID",
              "url": "http://www.securityfocus.com/bid/77228"
            },
            {
              "name": "http://www.oracle.com/technetwork/topics/security/cpuoct2015-2367953.html",
              "refsource": "CONFIRM",
              "url": "http://www.oracle.com/technetwork/topics/security/cpuoct2015-2367953.html"
            },
            {
              "name": "RHSA-2016:1480",
              "refsource": "REDHAT",
              "url": "http://rhn.redhat.com/errata/RHSA-2016-1480.html"
            },
            {
              "name": "openSUSE-SU-2015:2246",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2015-12/msg00011.html"
            },
            {
              "name": "DSA-3385",
              "refsource": "DEBIAN",
              "url": "http://www.debian.org/security/2015/dsa-3385"
            },
            {
              "name": "http://www.oracle.com/technetwork/topics/security/bulletinapr2016-2952098.html",
              "refsource": "CONFIRM",
              "url": "http://www.oracle.com/technetwork/topics/security/bulletinapr2016-2952098.html"
            },
            {
              "name": "openSUSE-SU-2016:0368",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-updates/2016-02/msg00039.html"
            },
            {
              "name": "DSA-3377",
              "refsource": "DEBIAN",
              "url": "http://www.debian.org/security/2015/dsa-3377"
            },
            {
              "name": "RHSA-2016:0705",
              "refsource": "REDHAT",
              "url": "http://rhn.redhat.com/errata/RHSA-2016-0705.html"
            },
            {
              "name": "FEDORA-2016-e30164d0a2",
              "refsource": "FEDORA",
              "url": "http://lists.fedoraproject.org/pipermail/package-announce/2016-February/177539.html"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "43595867-4340-4103-b7a2-9a5208d29a85",
    "assignerShortName": "oracle",
    "cveId": "CVE-2015-4830",
    "datePublished": "2015-10-21T21:00:00.000Z",
    "dateReserved": "2015-06-24T00:00:00.000Z",
    "dateUpdated": "2024-08-06T06:25:21.866Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

CVE-2015-4836 (GCVE-0-2015-4836)

Vulnerability from cvelistv5 – Published: 2015-10-21 23:00 – Updated: 2024-08-06 06:25

Summary

Unspecified vulnerability in Oracle MySQL Server 5.5.45 and earlier, and 5.6.26 and earlier, allows remote authenticated users to affect availability via unknown vectors related to Server : SP.

Severity

No CVSS data available.

CWE

Assigner

oracle mitre root

References

18 references

URL	Tags
http://lists.opensuse.org/opensuse-security-annou…	vendor-advisoryx_refsource_SUSE
http://rhn.redhat.com/errata/RHSA-2016-1481.html	vendor-advisoryx_refsource_REDHAT
http://www.securitytracker.com/id/1033894	vdb-entryx_refsource_SECTRACK
https://access.redhat.com/errata/RHSA-2016:1132	vendor-advisoryx_refsource_REDHAT
http://rhn.redhat.com/errata/RHSA-2016-0534.html	vendor-advisoryx_refsource_REDHAT
http://www.ubuntu.com/usn/USN-2781-1	vendor-advisoryx_refsource_UBUNTU
https://www.suse.com/support/update/announcement/…	vendor-advisoryx_refsource_SUSE
http://www.oracle.com/technetwork/topics/security…	x_refsource_CONFIRM
http://www.oracle.com/technetwork/topics/security…	x_refsource_CONFIRM
http://rhn.redhat.com/errata/RHSA-2016-1480.html	vendor-advisoryx_refsource_REDHAT
http://lists.opensuse.org/opensuse-security-annou…	vendor-advisoryx_refsource_SUSE
http://www.debian.org/security/2015/dsa-3385	vendor-advisoryx_refsource_DEBIAN
http://www.oracle.com/technetwork/topics/security…	x_refsource_CONFIRM
http://lists.opensuse.org/opensuse-updates/2016-0…	vendor-advisoryx_refsource_SUSE
http://www.securityfocus.com/bid/77190	vdb-entryx_refsource_BID
http://www.debian.org/security/2015/dsa-3377	vendor-advisoryx_refsource_DEBIAN
http://rhn.redhat.com/errata/RHSA-2016-0705.html	vendor-advisoryx_refsource_REDHAT
http://lists.fedoraproject.org/pipermail/package-…	vendor-advisoryx_refsource_FEDORA

Date Public

2015-10-21 00:00

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-06T06:25:21.724Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "name": "openSUSE-SU-2015:2244",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2015-12/msg00010.html"
          },
          {
            "name": "RHSA-2016:1481",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://rhn.redhat.com/errata/RHSA-2016-1481.html"
          },
          {
            "name": "1033894",
            "tags": [
              "vdb-entry",
              "x_refsource_SECTRACK",
              "x_transferred"
            ],
            "url": "http://www.securitytracker.com/id/1033894"
          },
          {
            "name": "RHSA-2016:1132",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2016:1132"
          },
          {
            "name": "RHSA-2016:0534",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://rhn.redhat.com/errata/RHSA-2016-0534.html"
          },
          {
            "name": "USN-2781-1",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "http://www.ubuntu.com/usn/USN-2781-1"
          },
          {
            "name": "SUSE-SU-2016:0296",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "https://www.suse.com/support/update/announcement/2016/suse-su-20160296-1.html"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://www.oracle.com/technetwork/topics/security/linuxbulletinapr2016-2952096.html"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://www.oracle.com/technetwork/topics/security/cpuoct2015-2367953.html"
          },
          {
            "name": "RHSA-2016:1480",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://rhn.redhat.com/errata/RHSA-2016-1480.html"
          },
          {
            "name": "openSUSE-SU-2015:2246",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2015-12/msg00011.html"
          },
          {
            "name": "DSA-3385",
            "tags": [
              "vendor-advisory",
              "x_refsource_DEBIAN",
              "x_transferred"
            ],
            "url": "http://www.debian.org/security/2015/dsa-3385"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://www.oracle.com/technetwork/topics/security/bulletinapr2016-2952098.html"
          },
          {
            "name": "openSUSE-SU-2016:0368",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-updates/2016-02/msg00039.html"
          },
          {
            "name": "77190",
            "tags": [
              "vdb-entry",
              "x_refsource_BID",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/bid/77190"
          },
          {
            "name": "DSA-3377",
            "tags": [
              "vendor-advisory",
              "x_refsource_DEBIAN",
              "x_transferred"
            ],
            "url": "http://www.debian.org/security/2015/dsa-3377"
          },
          {
            "name": "RHSA-2016:0705",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://rhn.redhat.com/errata/RHSA-2016-0705.html"
          },
          {
            "name": "FEDORA-2016-e30164d0a2",
            "tags": [
              "vendor-advisory",
              "x_refsource_FEDORA",
              "x_transferred"
            ],
            "url": "http://lists.fedoraproject.org/pipermail/package-announce/2016-February/177539.html"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "datePublic": "2015-10-21T00:00:00.000Z",
      "descriptions": [
        {
          "lang": "en",
          "value": "Unspecified vulnerability in Oracle MySQL Server 5.5.45 and earlier, and 5.6.26 and earlier, allows remote authenticated users to affect availability via unknown vectors related to Server : SP."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "n/a",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2018-01-04T19:57:01.000Z",
        "orgId": "43595867-4340-4103-b7a2-9a5208d29a85",
        "shortName": "oracle"
      },
      "references": [
        {
          "name": "openSUSE-SU-2015:2244",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2015-12/msg00010.html"
        },
        {
          "name": "RHSA-2016:1481",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://rhn.redhat.com/errata/RHSA-2016-1481.html"
        },
        {
          "name": "1033894",
          "tags": [
            "vdb-entry",
            "x_refsource_SECTRACK"
          ],
          "url": "http://www.securitytracker.com/id/1033894"
        },
        {
          "name": "RHSA-2016:1132",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2016:1132"
        },
        {
          "name": "RHSA-2016:0534",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://rhn.redhat.com/errata/RHSA-2016-0534.html"
        },
        {
          "name": "USN-2781-1",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "http://www.ubuntu.com/usn/USN-2781-1"
        },
        {
          "name": "SUSE-SU-2016:0296",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "https://www.suse.com/support/update/announcement/2016/suse-su-20160296-1.html"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://www.oracle.com/technetwork/topics/security/linuxbulletinapr2016-2952096.html"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://www.oracle.com/technetwork/topics/security/cpuoct2015-2367953.html"
        },
        {
          "name": "RHSA-2016:1480",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://rhn.redhat.com/errata/RHSA-2016-1480.html"
        },
        {
          "name": "openSUSE-SU-2015:2246",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2015-12/msg00011.html"
        },
        {
          "name": "DSA-3385",
          "tags": [
            "vendor-advisory",
            "x_refsource_DEBIAN"
          ],
          "url": "http://www.debian.org/security/2015/dsa-3385"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://www.oracle.com/technetwork/topics/security/bulletinapr2016-2952098.html"
        },
        {
          "name": "openSUSE-SU-2016:0368",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-updates/2016-02/msg00039.html"
        },
        {
          "name": "77190",
          "tags": [
            "vdb-entry",
            "x_refsource_BID"
          ],
          "url": "http://www.securityfocus.com/bid/77190"
        },
        {
          "name": "DSA-3377",
          "tags": [
            "vendor-advisory",
            "x_refsource_DEBIAN"
          ],
          "url": "http://www.debian.org/security/2015/dsa-3377"
        },
        {
          "name": "RHSA-2016:0705",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://rhn.redhat.com/errata/RHSA-2016-0705.html"
        },
        {
          "name": "FEDORA-2016-e30164d0a2",
          "tags": [
            "vendor-advisory",
            "x_refsource_FEDORA"
          ],
          "url": "http://lists.fedoraproject.org/pipermail/package-announce/2016-February/177539.html"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "secalert_us@oracle.com",
          "ID": "CVE-2015-4836",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "n/a",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "n/a"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "n/a"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "Unspecified vulnerability in Oracle MySQL Server 5.5.45 and earlier, and 5.6.26 and earlier, allows remote authenticated users to affect availability via unknown vectors related to Server : SP."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "n/a"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "openSUSE-SU-2015:2244",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2015-12/msg00010.html"
            },
            {
              "name": "RHSA-2016:1481",
              "refsource": "REDHAT",
              "url": "http://rhn.redhat.com/errata/RHSA-2016-1481.html"
            },
            {
              "name": "1033894",
              "refsource": "SECTRACK",
              "url": "http://www.securitytracker.com/id/1033894"
            },
            {
              "name": "RHSA-2016:1132",
              "refsource": "REDHAT",
              "url": "https://access.redhat.com/errata/RHSA-2016:1132"
            },
            {
              "name": "RHSA-2016:0534",
              "refsource": "REDHAT",
              "url": "http://rhn.redhat.com/errata/RHSA-2016-0534.html"
            },
            {
              "name": "USN-2781-1",
              "refsource": "UBUNTU",
              "url": "http://www.ubuntu.com/usn/USN-2781-1"
            },
            {
              "name": "SUSE-SU-2016:0296",
              "refsource": "SUSE",
              "url": "https://www.suse.com/support/update/announcement/2016/suse-su-20160296-1.html"
            },
            {
              "name": "http://www.oracle.com/technetwork/topics/security/linuxbulletinapr2016-2952096.html",
              "refsource": "CONFIRM",
              "url": "http://www.oracle.com/technetwork/topics/security/linuxbulletinapr2016-2952096.html"
            },
            {
              "name": "http://www.oracle.com/technetwork/topics/security/cpuoct2015-2367953.html",
              "refsource": "CONFIRM",
              "url": "http://www.oracle.com/technetwork/topics/security/cpuoct2015-2367953.html"
            },
            {
              "name": "RHSA-2016:1480",
              "refsource": "REDHAT",
              "url": "http://rhn.redhat.com/errata/RHSA-2016-1480.html"
            },
            {
              "name": "openSUSE-SU-2015:2246",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2015-12/msg00011.html"
            },
            {
              "name": "DSA-3385",
              "refsource": "DEBIAN",
              "url": "http://www.debian.org/security/2015/dsa-3385"
            },
            {
              "name": "http://www.oracle.com/technetwork/topics/security/bulletinapr2016-2952098.html",
              "refsource": "CONFIRM",
              "url": "http://www.oracle.com/technetwork/topics/security/bulletinapr2016-2952098.html"
            },
            {
              "name": "openSUSE-SU-2016:0368",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-updates/2016-02/msg00039.html"
            },
            {
              "name": "77190",
              "refsource": "BID",
              "url": "http://www.securityfocus.com/bid/77190"
            },
            {
              "name": "DSA-3377",
              "refsource": "DEBIAN",
              "url": "http://www.debian.org/security/2015/dsa-3377"
            },
            {
              "name": "RHSA-2016:0705",
              "refsource": "REDHAT",
              "url": "http://rhn.redhat.com/errata/RHSA-2016-0705.html"
            },
            {
              "name": "FEDORA-2016-e30164d0a2",
              "refsource": "FEDORA",
              "url": "http://lists.fedoraproject.org/pipermail/package-announce/2016-February/177539.html"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "43595867-4340-4103-b7a2-9a5208d29a85",
    "assignerShortName": "oracle",
    "cveId": "CVE-2015-4836",
    "datePublished": "2015-10-21T23:00:00.000Z",
    "dateReserved": "2015-06-24T00:00:00.000Z",
    "dateUpdated": "2024-08-06T06:25:21.724Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

Sightings

Author	Source	Type	Date	Other

Nomenclature

Seen: The vulnerability was mentioned, discussed, or observed by the user.
Confirmed: The vulnerability has been validated from an analyst's perspective.
Published Proof of Concept: A public proof of concept is available for this vulnerability.
Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
Not confirmed: The user expressed doubt about the validity of the vulnerability.
Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.

Detection rules are retrieved from Rulezet.

The MITRE ATT&CK techniques below are AI-generated suggestions, inferred from the description of the vulnerability by the CIRCL/vulnerability-attack-technique-classification-roberta-base model, served locally by ML-Gateway. They have not been verified by an analyst and are provided for guidance only.
The approach is described in our paper Mapping CVEs to MITRE ATT&CK Techniques: A Curated Gold-Set Classifier and the Limits of LLM-Assisted Label Expansion.

Action not permitted

RHSA-2016:1132

CVE-2015-3210 (GCVE-0-2015-3210)

CVE-2015-3217 (GCVE-0-2015-3217)

CVE-2015-4792 (GCVE-0-2015-4792)

CVE-2015-4802 (GCVE-0-2015-4802)

CVE-2015-4815 (GCVE-0-2015-4815)

CVE-2015-4816 (GCVE-0-2015-4816)

CVE-2015-4819 (GCVE-0-2015-4819)

CVE-2015-4826 (GCVE-0-2015-4826)

CVE-2015-4830 (GCVE-0-2015-4830)

CVE-2015-4836 (GCVE-0-2015-4836)

Tags

Sightings

Nomenclature