CVE-2015-0374

Published: Jan 21, 2015Modified: May 6, 2026

3.5

Vector

AV:N/AC:M/Au:S/C:P/I:N/A:N

Exploitability: 6.8 / Impact: 2.9

Source: NVD

Description

Unspecified vulnerability in Oracle MySQL Server 5.5.40 and earlier and 5.6.21 and earlier allows remote authenticated users to affect confidentiality via unknown vectors related to Server : Security : Privileges : Foreign Key.

Affected (32)

Products: Canonical: Ubuntu Linux · Debian: Debian Linux · Fedoraproject: Fedora · +4 more

Show all products

1 product

1 product

1 product

2 products

4 products

Linux Enterprise Desktop

Linux Enterprise Server

Linux Enterprise Software Development Kit

Linux Enterprise Workstation Extension

Redhat

6 products

Enterprise Linux Desktop

Enterprise Linux Eus

Enterprise Linux Server

Enterprise Linux Server Aus

Enterprise Linux Server Tus

Enterprise Linux Workstation

Mariadb

1 product

Mariadb

Configuration A

5 vulnerable

Vulnerable Software	Affected Versions
Canonical Ubuntu Linux	Version 12.04
Canonical Ubuntu Linux	Version 14.04
Canonical Ubuntu Linux	Version 14.10
Debian Debian Linux	Version 7.0
Fedoraproject Fedora	Version 20

Configuration B

1 vulnerable

Vulnerable Software	Affected Versions
Oracle Solaris	Version 11.3

Configuration C

2 vulnerable

Vulnerable Software	Affected Versions
Oracle Mysql	From 5.5.0 to 5.5.40
Oracle Mysql	From 5.6.0 to 5.6.21

Configuration D

4 vulnerable

Vulnerable Software	Affected Versions
Suse Linux Enterprise Desktop	Version 12
Suse Linux Enterprise Server	Version 12
Suse Linux Enterprise Software Development Kit	Version 12
Suse Linux Enterprise Workstation Extension	Version 12

Configuration E

18 vulnerable

Vulnerable Software	Affected Versions
Redhat Enterprise Linux Desktop	Version 5.0
Redhat Enterprise Linux Desktop	Version 7.0
Redhat Enterprise Linux Eus	Version 7.3
Redhat Enterprise Linux Eus	Version 7.4
Redhat Enterprise Linux Eus	Version 7.5
Redhat Enterprise Linux Eus	Version 7.6
Redhat Enterprise Linux Eus	Version 7.7
Redhat Enterprise Linux Server	Version 5.0
Redhat Enterprise Linux Server	Version 7.0
Redhat Enterprise Linux Server Aus	Version 7.3
Redhat Enterprise Linux Server Aus	Version 7.4
Redhat Enterprise Linux Server Aus	Version 7.6
Redhat Enterprise Linux Server Aus	Version 7.7
Redhat Enterprise Linux Server Tus	Version 7.3
Redhat Enterprise Linux Server Tus	Version 7.6
Redhat Enterprise Linux Server Tus	Version 7.7
Redhat Enterprise Linux Workstation	Version 5.0
Redhat Enterprise Linux Workstation	Version 7.0

Configuration F

2 vulnerable

Vulnerable Software	Affected Versions
Mariadb Mariadb	From 10.0.0 to 10.0.16
Mariadb Mariadb	From 5.5.0 to 5.5.41

References (36)

http://lists.fedoraproject.org/pipermail/package-announce/2015-February/149929.html

Source: secalert_us@oracle.com

Third Party Advisory

http://lists.opensuse.org/opensuse-security-announce/2015-04/msg00016.html

Source: secalert_us@oracle.com

Mailing ListThird Party Advisory

http://rhn.redhat.com/errata/RHSA-2015-0116.html

Source: secalert_us@oracle.com

Third Party Advisory

http://rhn.redhat.com/errata/RHSA-2015-0117.html

Source: secalert_us@oracle.com

Third Party Advisory

http://rhn.redhat.com/errata/RHSA-2015-0118.html

Source: secalert_us@oracle.com

Third Party Advisory

http://rhn.redhat.com/errata/RHSA-2015-1628.html

Source: secalert_us@oracle.com

Third Party Advisory

http://secunia.com/advisories/62728

Source: secalert_us@oracle.com

Not ApplicablePermissions RequiredThird Party Advisory

http://secunia.com/advisories/62730

Source: secalert_us@oracle.com

Not ApplicablePermissions RequiredThird Party Advisory

http://secunia.com/advisories/62732

Source: secalert_us@oracle.com

Not ApplicablePermissions RequiredThird Party Advisory

http://www.debian.org/security/2015/dsa-3135

Source: secalert_us@oracle.com

Third Party Advisory

http://www.oracle.com/technetwork/topics/security/bulletinapr2016-2952098.html

Source: secalert_us@oracle.com

Vendor Advisory

http://www.oracle.com/technetwork/topics/security/bulletinoct2015-2511968.html

Source: secalert_us@oracle.com

Vendor Advisory

http://www.oracle.com/technetwork/topics/security/cpujan2015-1972971.html

Source: secalert_us@oracle.com

PatchVendor Advisory

http://www.securityfocus.com/bid/72227

Source: secalert_us@oracle.com

Third Party AdvisoryVDB Entry

http://www.securitytracker.com/id/1031581

Source: secalert_us@oracle.com

Broken LinkThird Party AdvisoryVDB Entry

http://www.ubuntu.com/usn/USN-2480-1

Source: secalert_us@oracle.com

Third Party Advisory

https://exchange.xforce.ibmcloud.com/vulnerabilities/100191

Source: secalert_us@oracle.com

Third Party AdvisoryVDB Entry

https://security.gentoo.org/glsa/201504-05

Source: secalert_us@oracle.com

Third Party Advisory

http://lists.fedoraproject.org/pipermail/package-announce/2015-February/149929.html