CVE-2015-4819: High severity mysql vulnerability
Unspecified vulnerability in Oracle MySQL Server 5.5.44 and earlier, and 5.6.25 and earlier, allows local users to affect confidentiality, integrity, and availability via unknown vectors related to Client programs.
Other sources
Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Client programs). Supported versions that are affected are 5.5.44 and earlier and 5.6.25 and earlier. Easily exploitable vulnerability requiring logon to Operating System. Successful attack of this vulnerability can result in unauthorized Operating System takeover including arbitrary code execution.
External References:
http://www.oracle.com/technetwork/topics/security/cpuoct2015-2367953.html#AppendixMSQL
— Red Hat
Affected Software
Remediation
Event History
Frequently Asked Questions
What is the severity of CVE-2015-4819?
CVE-2015-4819 is considered to have significant implications for confidentiality, integrity, and availability but lacks specific CVSS scoring.
How do I fix CVE-2015-4819?
To resolve CVE-2015-4819, upgrade Oracle MySQL Server to version 5.5.45 or 5.6.26 or higher.
Which software versions are affected by CVE-2015-4819?
CVE-2015-4819 affects Oracle MySQL Server versions 5.5.44 and earlier, and 5.6.25 and earlier.
Can CVE-2015-4819 be exploited remotely?
CVE-2015-4819 requires local access, making it less likely to be exploited remotely.
What components are impacted by CVE-2015-4819?
CVE-2015-4819 specifically impacts the Client programs component of Oracle MySQL.