First published: Wed Oct 21 2015(Updated: )
Unspecified vulnerability in Oracle MySQL Server 5.6.23 and earlier allows remote authenticated users to affect availability via unknown vectors related to Server : InnoDB.
Credit: secalert_us@oracle.com
Affected Software | Affected Version | How to fix |
---|---|---|
MySQL | >=5.6.0<=5.6.23 | |
Mariadb Mariadb | >=10.0.0<10.0.18 | |
Mariadb Mariadb | >=10.1.0<10.1.8 | |
Ubuntu Linux | =12.04 | |
Ubuntu Linux | =14.04 | |
Ubuntu Linux | =15.04 | |
Ubuntu Linux | =15.10 |
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
CVE-2015-4866 has been classified as having an unspecified severity level.
To fix CVE-2015-4866, update Oracle MySQL Server to a version later than 5.6.23.
CVE-2015-4866 affects Oracle MySQL Server 5.6.23 and earlier, as well as certain versions of MariaDB and specific Ubuntu Linux distributions.
There are no documented workarounds for CVE-2015-4866; the only mitigation is upgrading to a patched version.
Yes, CVE-2015-4866 can be exploited by remote authenticated users, potentially affecting the availability of the database.