CVE-2015-4830MEDIUM
Description
Unspecified vulnerability in Oracle MySQL Server 5.5.45 and earlier and 5.6.26 and earlier allows remote authenticated users to affect integrity via unknown vectors related to Server : Security : Privileges.
References
http://lists.fedoraproject.org/pipermail/package-announce/2016-February/177539.html
http://lists.opensuse.org/opensuse-security-announce/2015-12/msg00010.html
http://lists.opensuse.org/opensuse-security-announce/2015-12/msg00011.html
http://lists.opensuse.org/opensuse-updates/2016-02/msg00039.html
http://rhn.redhat.com/errata/RHSA-2016-0534.html
http://rhn.redhat.com/errata/RHSA-2016-0705.html
http://rhn.redhat.com/errata/RHSA-2016-1480.html
http://rhn.redhat.com/errata/RHSA-2016-1481.html
http://www.debian.org/security/2015/dsa-3377
http://www.debian.org/security/2015/dsa-3385
http://www.oracle.com/technetwork/topics/security/bulletinapr2016-2952098.html
http://www.oracle.com/technetwork/topics/security/cpuoct2015-2367953.html
http://www.securityfocus.com/bid/77228
http://www.securitytracker.com/id/1033894
http://www.ubuntu.com/usn/USN-2781-1
https://access.redhat.com/errata/RHSA-2016:1132
https://www.suse.com/support/update/announcement/2016/suse-su-20160296-1.html
Details
Source: MITRE
Published: 2015-10-21
Updated: 2019-02-11
Type: NVD-CWE-noinfo
Risk Information
CVSS v2.0
Base Score: 4
Vector: AV:N/AC:L/Au:S/C:N/I:P/A:N
Impact Score: 2.9
Exploitability Score: 8
Severity: MEDIUM
Vulnerable Software
Configuration 1
OR
cpe:2.3:a:novell:suse_linux_enterprise_software_development_kit:12.0:sp1:*:*:*:*:*:*
cpe:2.3:o:novell:suse_linux_enterprise_desktop:12.0:sp1:*:*:*:*:*:*
cpe:2.3:o:novell:suse_linux_enterprise_server:12.0:sp1:*:*:*:*:*:*
cpe:2.3:o:novell:suse_linux_enterprise_workstation_extension:12.0:sp1:*:*:*:*:*:*
Configuration 2
OR
Configuration 3
OR
Configuration 4
OR
cpe:2.3:o:redhat:enterprise_linux_desktop:7.0:*:*:*:*:*:*:*
cpe:2.3:o:redhat:enterprise_linux_hpc_node:7.0:*:*:*:*:*:*:*
cpe:2.3:o:redhat:enterprise_linux_hpc_node_eus:7.2:*:*:*:*:*:*:*
cpe:2.3:o:redhat:enterprise_linux_server:7.0:*:*:*:*:*:*:*
cpe:2.3:o:redhat:enterprise_linux_server_aus:7.2:*:*:*:*:*:*:*
cpe:2.3:o:redhat:enterprise_linux_server_eus:7.2:*:*:*:*:*:*:*
cpe:2.3:o:redhat:enterprise_linux_workstation:7.0:*:*:*:*:*:*:*
Configuration 5
OR
cpe:2.3:a:oracle:mysql:*:*:*:*:*:*:*:* versions from 5.5.0 to 5.5.45 (inclusive)
cpe:2.3:a:oracle:mysql:*:*:*:*:*:*:*:* versions from 5.6.0 to 5.6.26 (inclusive)
Tenable Plugins
| ID | Name | Product | Family | Severity |
|---|---|---|---|---|
| 99774 | EulerOS 2.0 SP1 : mariadb (EulerOS-SA-2016-1011) | Nessus | Huawei Local Security Checks | medium |
| 9284 | MariaDB Server 10.0.x < 10.0.22 Multiple DoS Vulnerabilities | Nessus Network Monitor | Database | medium |
| 9252 | Oracle MySQL 5.5.x < 5.5.46 / 5.6.x < 5.6.27 Multiple Vulnerabilities | Nessus Network Monitor | Database | high |
| 90366 | Amazon Linux AMI : mysql56 (ALAS-2016-684) | Nessus | Amazon Linux Local Security Checks | high |
| 90345 | Scientific Linux Security Update : mariadb on SL7.x x86_64 (20160404) | Nessus | Scientific Linux Local Security Checks | high |
| 90300 | RHEL 7 : mariadb (RHSA-2016:0534) | Nessus | Red Hat Local Security Checks | high |
| 90296 | Oracle Linux 7 : mariadb (ELSA-2016-0534) | Nessus | Oracle Linux Local Security Checks | high |
| 90276 | CentOS 7 : mariadb (CESA-2016:0534) | Nessus | CentOS Local Security Checks | high |
| 89628 | Fedora 23 : mariadb-10.0.23-1.fc23 (2016-e30164d0a2) | Nessus | Fedora Local Security Checks | high |
| 88615 | openSUSE Security Update : mariadb (openSUSE-2016-164) | Nessus | SuSE Local Security Checks | medium |
| 88515 | SUSE SLED12 / SLES12 Security Update : mariadb (SUSE-SU-2016:0296-1) | Nessus | SuSE Local Security Checks | medium |
| 87964 | SUSE SLED12 / SLES12 Security Update : mariadb (SUSE-SU-2016:0121-1) | Nessus | SuSE Local Security Checks | high |
| 87525 | SUSE SLED11 / SLES11 Security Update : mysql (SUSE-SU-2015:2303-1) | Nessus | SuSE Local Security Checks | high |
| 87486 | openSUSE Security Update : MariaDB 5.5.46 (openSUSE-2015-890) | Nessus | SuSE Local Security Checks | medium |
| 87442 | openSUSE Security Update : mysql (openSUSE-2015-889) (BACKRONYM) | Nessus | SuSE Local Security Checks | high |
| 87440 | openSUSE Security Update : mariadb (openSUSE-2015-884) | Nessus | SuSE Local Security Checks | medium |
| 87210 | MariaDB < 5.5.46 Multiple Vulnerabilities | Nessus | Databases | medium |
| 86874 | MariaDB 10.0.x < 10.0.22 Multiple Vulnerabilities | Nessus | Databases | medium |
| 86858 | FreeBSD : MySQL - Multiple vulnerabilities (851a0eea-88aa-11e5-90e7-b499baebfeaf) | Nessus | FreeBSD Local Security Checks | medium |
| 86679 | Debian DSA-3385-1 : mariadb-10.0 - security update | Nessus | Debian Local Security Checks | high |
| 86661 | Oracle MySQL 5.6.x < 5.6.27 Multiple Vulnerabilities (October 2015 CPU) (January 2016 CPU) (July 2016 CPU) | Nessus | Databases | high |
| 86658 | Oracle MySQL 5.5.x < 5.5.46 Multiple Vulnerabilities (October 2015 CPU) (January 2016 CPU) (July 2016 CPU) | Nessus | Databases | high |
| 86617 | Ubuntu 12.04 LTS / 14.04 LTS / 15.04 / 15.10 : mysql-5.5, mysql-5.6 vulnerabilities (USN-2781-1) | Nessus | Ubuntu Local Security Checks | high |
| 86580 | Debian DSA-3377-1 : mysql-5.5 - security update | Nessus | Debian Local Security Checks | high |
| 86547 | MySQL 5.6.x < 5.6.27 Multiple Vulnerabilities | Nessus | Databases | high |
| 86546 | MySQL 5.5.x < 5.5.46 Multiple Vulnerabilities | Nessus | Databases | high |