CVE-2015-4866: Medium severity ORACLE MySQL vulnerability
Published Oct 21, 2015
·Updated
Unspecified vulnerability in Oracle MySQL Server 5.6.23 and earlier allows remote authenticated users to affect availability via unknown vectors related to Server : InnoDB.
Affected Software
7 affected components
ORACLE MySQL>=5.6.0<=5.6.23
MariaDB MariaDB>=10.0.0<10.0.18
MariaDB MariaDB>=10.1.0<10.1.8
Canonical Ubuntu Linux=12.04
Canonical Ubuntu Linux=14.04
Canonical Ubuntu Linux=15.04
Canonical Ubuntu Linux=15.10
Remediation
Event History
Oct 21, 2015
CVE Published
via MITRE·11:00 PM
Data Sourced
via MITRE·11:00 PM
Description
Frequently Asked Questions
1
What is the severity of CVE-2015-4866?
CVE-2015-4866 has been classified as having an unspecified severity level.
2
How do I fix CVE-2015-4866?
To fix CVE-2015-4866, update Oracle MySQL Server to a version later than 5.6.23.
3
What systems are affected by CVE-2015-4866?
CVE-2015-4866 affects Oracle MySQL Server 5.6.23 and earlier, as well as certain versions of MariaDB and specific Ubuntu Linux distributions.
4
Is there a workaround for CVE-2015-4866?
There are no documented workarounds for CVE-2015-4866; the only mitigation is upgrading to a patched version.
5
Can CVE-2015-4866 be exploited remotely?
Yes, CVE-2015-4866 can be exploited by remote authenticated users, potentially affecting the availability of the database.