CVE-2015-4870

Published: Oct 21, 2015Modified: May 6, 2026

4.0

Vector

AV:N/AC:L/Au:S/C:N/I:N/A:P

Exploitability: 8.0 / Impact: 2.9

Source: NVD

Description

Unspecified vulnerability in Oracle MySQL Server 5.5.45 and earlier, and 5.6.26 and earlier, allows remote authenticated users to affect availability via unknown vectors related to Server : Parser.

Affected (34)

Products: Oracle: Linux, Solaris, Mysql · Opensuse: Leap, Opensuse · Mariadb: Mariadb · +4 more

Show all products

3 products

2 products

1 product

1 product

1 product

6 products

Enterprise Linux Desktop

Enterprise Linux Eus

Enterprise Linux Server

Enterprise Linux Server Aus

Enterprise Linux Server Tus

Enterprise Linux Workstation

Fedoraproject

1 product

Fedora

Configuration A

2 vulnerable

Vulnerable Software	Affected Versions
Oracle Linux	Version 7
Oracle Solaris	Version 11.3

Configuration B

3 vulnerable

Vulnerable Software	Affected Versions
Opensuse Leap	Version 42.1
Opensuse Opensuse	Version 13.1
Opensuse Opensuse	Version 13.2

Configuration C

2 vulnerable

Vulnerable Software	Affected Versions
Oracle Mysql	From 5.5.0 to 5.5.45
Oracle Mysql	From 5.6.0 to 5.6.26

Configuration D

3 vulnerable

Vulnerable Software	Affected Versions
Mariadb Mariadb	From 10.0.0 to 10.0.22
Mariadb Mariadb	From 10.1.0 to 10.1.8
Mariadb Mariadb	From 5.5.0 to 5.5.46

Configuration E

4 vulnerable

Vulnerable Software	Affected Versions
Canonical Ubuntu Linux	Version 12.04
Canonical Ubuntu Linux	Version 14.04
Canonical Ubuntu Linux	Version 15.04
Canonical Ubuntu Linux	Version 15.10

Configuration F

2 vulnerable

Vulnerable Software	Affected Versions
Debian Debian Linux	Version 7.0
Debian Debian Linux	Version 8.0

Configuration G

17 vulnerable

Vulnerable Software	Affected Versions
Redhat Enterprise Linux Desktop	Version 7.0
Redhat Enterprise Linux Eus	Version 7.1
Redhat Enterprise Linux Eus	Version 7.2
Redhat Enterprise Linux Eus	Version 7.3
Redhat Enterprise Linux Eus	Version 7.4
Redhat Enterprise Linux Eus	Version 7.5
Redhat Enterprise Linux Eus	Version 7.6
Redhat Enterprise Linux Eus	Version 7.7
Redhat Enterprise Linux Server	Version 7.0
Redhat Enterprise Linux Server Aus	Version 7.3
Redhat Enterprise Linux Server Aus	Version 7.4
Redhat Enterprise Linux Server Aus	Version 7.6
Redhat Enterprise Linux Server Aus	Version 7.7
Redhat Enterprise Linux Server Tus	Version 7.3
Redhat Enterprise Linux Server Tus	Version 7.6
Redhat Enterprise Linux Server Tus	Version 7.7
Redhat Enterprise Linux Workstation	Version 7.0

Configuration H

1 vulnerable

Vulnerable Software	Affected Versions
Fedoraproject Fedora	Version 23

References (40)

http://lists.fedoraproject.org/pipermail/package-announce/2016-February/177539.html

Source: secalert_us@oracle.com

Mailing ListThird Party Advisory

http://lists.opensuse.org/opensuse-security-announce/2015-12/msg00010.html

Source: secalert_us@oracle.com

Mailing ListThird Party Advisory

http://lists.opensuse.org/opensuse-security-announce/2015-12/msg00011.html

Source: secalert_us@oracle.com

Mailing ListThird Party Advisory

http://lists.opensuse.org/opensuse-updates/2016-02/msg00039.html

Source: secalert_us@oracle.com

Mailing ListThird Party Advisory

http://packetstormsecurity.com/files/137232/MySQL-Procedure-Analyse-Denial-Of-Service.html

Source: secalert_us@oracle.com

ExploitThird Party AdvisoryVDB Entry

http://rhn.redhat.com/errata/RHSA-2016-0534.html

Source: secalert_us@oracle.com

Third Party Advisory

http://rhn.redhat.com/errata/RHSA-2016-0705.html

Source: secalert_us@oracle.com

Third Party Advisory

http://rhn.redhat.com/errata/RHSA-2016-1480.html

Source: secalert_us@oracle.com

Third Party Advisory

http://rhn.redhat.com/errata/RHSA-2016-1481.html

Source: secalert_us@oracle.com

Third Party Advisory

http://www.debian.org/security/2015/dsa-3377

Source: secalert_us@oracle.com

Third Party Advisory

http://www.debian.org/security/2015/dsa-3385

Source: secalert_us@oracle.com

Third Party Advisory

http://www.oracle.com/technetwork/topics/security/bulletinapr2016-2952098.html

Source: secalert_us@oracle.com

Vendor Advisory

http://www.oracle.com/technetwork/topics/security/cpuoct2015-2367953.html

Source: secalert_us@oracle.com

PatchVendor Advisory

http://www.oracle.com/technetwork/topics/security/linuxbulletinapr2016-2952096.html

Source: secalert_us@oracle.com

Vendor Advisory

http://www.securityfocus.com/bid/77208

Source: secalert_us@oracle.com

Third Party AdvisoryVDB Entry

http://www.securitytracker.com/id/1033894

Source: secalert_us@oracle.com

Broken LinkThird Party AdvisoryVDB Entry

http://www.ubuntu.com/usn/USN-2781-1

Source: secalert_us@oracle.com

Third Party Advisory

https://access.redhat.com/errata/RHSA-2016:1132

Source: secalert_us@oracle.com

Third Party Advisory

https://www.exploit-db.com/exploits/39867/

Source: secalert_us@oracle.com

ExploitThird Party AdvisoryVDB Entry

https://www.suse.com/support/update/announcement/2016/suse-su-20160296-1.html

Source: secalert_us@oracle.com

Third Party Advisory

http://lists.fedoraproject.org/pipermail/package-announce/2016-February/177539.html