CVE-2015-4879: Medium severity oracle linux vulnerability
Unspecified vulnerability in Oracle MySQL Server 5.5.44 and earlier, and 5.6.25 and earlier, allows remote authenticated users to affect confidentiality, integrity, and availability via vectors related to DML.
Other sources
Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server : DML). Supported versions that are affected are 5.5.44 and earlier and 5.6.25 and earlier. Very difficult to exploit vulnerability allows successful authenticated network attacks via multiple protocols. Successful attack of this vulnerability can result in unauthorized takeover of MySQL Server possibly including arbitrary code execution within the MySQL Server.
External References:
http://www.oracle.com/technetwork/topics/security/cpuoct2015-2367953.html#AppendixMSQL
— Red Hat
Affected Software
Remediation
Event History
Frequently Asked Questions
What is the severity of CVE-2015-4879?
CVE-2015-4879 has been identified as affecting confidentiality, integrity, and availability, indicating it poses a significant security risk.
How do I fix CVE-2015-4879?
To mitigate CVE-2015-4879, upgrade Oracle MySQL Server to versions 5.5.45 or 5.6.26 or later.
What software is affected by CVE-2015-4879?
CVE-2015-4879 affects Oracle MySQL Server versions 5.5.44 and earlier, and 5.6.25 and earlier.
Who are the affected users for CVE-2015-4879?
Remote authenticated users of Oracle MySQL Server are potentially affected by CVE-2015-4879.
What components are involved in CVE-2015-4879?
CVE-2015-4879 is related to the MySQL Server component concentrating on DML operations.