CVE-2015-4792 
                        Detail
                     
                    
                    
                        
                            
                                
                                    Deferred This CVE record is not being prioritized for NVD enrichment efforts due to resource or other concerns.
                                 
                             
                            Description  
                            
                            Unspecified vulnerability in Oracle MySQL Server 5.5.45 and earlier and 5.6.26 and earlier allows remote authenticated users to affect availability via unknown vectors related to Server : Partition, a different vulnerability than CVE-2015-4802.
                            
                            
                            
                            
                                Metrics 
                                 
                                
                                    CVSS Version 4.0
                                     
                                    CVSS Version 3.x
                                     
                                    CVSS Version 2.0
                                     
                                
                                
                                    
                                        
                                            NVD enrichment efforts reference publicly available information to associate
                                            vector strings. CVSS information contributed by other sources is also
                                            displayed.
                                         
                                     
                                
                                
                                
                                    CVSS 4.0 Severity and Vector Strings: 
                                    
                                    
                                        
                                        
                                        
                                        
                                       
                                             NVD assessment
                                       not yet provided.   
                                     
                                    
                                    
                                    
                                    
                                 
                                
                                
                                    CVSS 3.x Severity and Vector Strings: 
                                    
                                    
                                        
                                        
                                        
                                        
												
                                             NVD assessment
														not yet provided.   
                                     
                                    
                                    
                                    
                                    
                                    
                                    
                                    
                                    
                                 
                                
                                
                                    CVSS 2.0 Severity and Vector Strings:   
                                    
                                    
                                        
                                        
                                        
												Vector:  
													(AV:N/AC:H/Au:M/C:N/I:N/A:P) 
                                     
                                    
                                    
                                    
                                    
                                    
                                    
                                    
                                    
                                 
                             
                            
                                
                                
                                
                                
                                    References to Advisories, Solutions, and Tools 
                                    
                                        By selecting these links, you will be leaving NIST webspace.
                                        We have provided these links to other web sites because they
                                        may have information that would be of interest to you. No
                                        inferences should be drawn on account of other sites being
                                        referenced, or not, from this page. There may be other web
                                        sites that are more appropriate for your purpose. NIST does
                                        not necessarily endorse the views expressed, or concur with
                                        the facts presented on these sites. Further, NIST does not
                                        endorse any commercial products that may be mentioned on
                                        these sites. Please address comments about this page to [email protected] 
                                    
                                        
                                        
                                            URL 
                                            Source(s) 
                                            Tag(s) 
                                         
                                         
                                        
                                        
                                            
                                            
                                                http://lists.fedoraproject.org/pipermail/package-announce/2016-February/177539.html 
                                             
                                            
                                            CVE, Oracle 
                                            
                                            
                                                
                                                    Mailing List  
                                                 
                                                    Third Party Advisory  
                                                 
                                             
                                         
                                        
                                            
                                            
                                                http://lists.opensuse.org/opensuse-security-announce/2015-12/msg00010.html 
                                             
                                            
                                            CVE, Oracle 
                                            
                                            
                                                
                                                    Mailing List  
                                                 
                                                    Third Party Advisory  
                                                 
                                             
                                         
                                        
                                            
                                            
                                                http://lists.opensuse.org/opensuse-security-announce/2015-12/msg00011.html 
                                             
                                            
                                            CVE, Oracle 
                                            
                                            
                                                
                                                    Mailing List  
                                                 
                                                    Third Party Advisory  
                                                 
                                             
                                         
                                        
                                            
                                            
                                                http://lists.opensuse.org/opensuse-updates/2016-02/msg00039.html 
                                             
                                            
                                            CVE, Oracle 
                                            
                                            
                                                
                                                    Mailing List  
                                                 
                                                    Third Party Advisory  
                                                 
                                             
                                         
                                        
                                            
                                            
                                                http://rhn.redhat.com/errata/RHSA-2016-0534.html 
                                             
                                            
                                            CVE, Oracle 
                                            
                                            
                                                
                                                    Third Party Advisory  
                                                 
                                             
                                         
                                        
                                            
                                            
                                                http://rhn.redhat.com/errata/RHSA-2016-0705.html 
                                             
                                            
                                            CVE, Oracle 
                                            
                                            
                                                
                                                    Third Party Advisory  
                                                 
                                             
                                         
                                        
                                            
                                            
                                                http://rhn.redhat.com/errata/RHSA-2016-1480.html 
                                             
                                            
                                            CVE, Oracle 
                                            
                                            
                                                
                                                    Third Party Advisory  
                                                 
                                             
                                         
                                        
                                            
                                            
                                                http://rhn.redhat.com/errata/RHSA-2016-1481.html 
                                             
                                            
                                            CVE, Oracle 
                                            
                                            
                                                
                                                    Third Party Advisory  
                                                 
                                             
                                         
                                        
                                            
                                            
                                                http://www.debian.org/security/2015/dsa-3377 
                                             
                                            
                                            CVE, Oracle 
                                            
                                            
                                                
                                                    Third Party Advisory  
                                                 
                                             
                                         
                                        
                                            
                                            
                                                http://www.debian.org/security/2015/dsa-3385 
                                             
                                            
                                            CVE, Oracle 
                                            
                                            
                                                
                                                    Third Party Advisory  
                                                 
                                             
                                         
                                        
                                            
                                            
                                                http://www.oracle.com/technetwork/topics/security/bulletinapr2016-2952098.html 
                                             
                                            
                                            CVE, Oracle 
                                            
                                            
                                                
                                                    Vendor Advisory  
                                                 
                                             
                                         
                                        
                                            
                                            
                                                http://www.oracle.com/technetwork/topics/security/cpuoct2015-2367953.html 
                                             
                                            
                                            CVE, Oracle 
                                            
                                            
                                                
                                                    Patch  
                                                 
                                                    Vendor Advisory  
                                                 
                                             
                                         
                                        
                                            
                                            
                                                http://www.oracle.com/technetwork/topics/security/linuxbulletinapr2016-2952096.html 
                                             
                                            
                                            CVE, Oracle 
                                            
                                            
                                                
                                                    Vendor Advisory  
                                                 
                                             
                                         
                                        
                                            
                                            
                                                http://www.securityfocus.com/bid/77171 
                                             
                                            
                                            CVE, Oracle 
                                            
                                            
                                                
                                                    Third Party Advisory  
                                                 
                                                    VDB Entry  
                                                 
                                             
                                         
                                        
                                            
                                            
                                                http://www.securitytracker.com/id/1033894 
                                             
                                            
                                            CVE, Oracle 
                                            
                                            
                                                
                                                    Broken Link  
                                                 
                                                    Third Party Advisory  
                                                 
                                                    VDB Entry  
                                                 
                                             
                                         
                                        
                                            
                                            
                                                http://www.ubuntu.com/usn/USN-2781-1 
                                             
                                            
                                            CVE, Oracle 
                                            
                                            
                                                
                                                    Third Party Advisory  
                                                 
                                             
                                         
                                        
                                            
                                            
                                                https://access.redhat.com/errata/RHSA-2016:1132 
                                             
                                            
                                            CVE, Oracle 
                                            
                                            
                                                
                                                    Third Party Advisory  
                                                 
                                             
                                         
                                        
                                            
                                            
                                                https://www.suse.com/support/update/announcement/2016/suse-su-20160296-1.html 
                                             
                                            
                                            CVE, Oracle 
                                            
                                            
                                                
                                                    Third Party Advisory  
                                                 
                                             
                                         
                                         
                                    
                                 
                                
                                
                                    Weakness Enumeration 
                                    
                                        
                                        
                                            CWE-ID 
                                            CWE Name 
                                            Source 
                                         
                                         
                                        
                                        
                                            
                                                
                                                NVD-CWE-noinfo 
                                             
                                            Insufficient Information 
                                            
														
														NIST   
														 
                                             
                                         
                                         
                                    
                                 
                                
                                
                                    Change History 
                                     22 change records found show changes 
                                     
                                    
	
		
			 
			
				CVE Modified by CVE  11/20/2024 9:31:45 PM  
			
				 
					
						Action 
						Type 
						Old Value 
						New Value 
					 
				 
				
					
						Added 
						Reference 
						
							
							
								
								
							
							
						 
							
						
							
								http://lists.fedoraproject.org/pipermail/package-announce/2016-February/177539.html 
								  
					 
					
						Added 
						Reference 
						
							
							
								
								
							
							
						 
							
						
							
								http://lists.opensuse.org/opensuse-security-announce/2015-12/msg00010.html 
								  
					 
					
						Added 
						Reference 
						
							
							
								
								
							
							
						 
							
						
							
								http://lists.opensuse.org/opensuse-security-announce/2015-12/msg00011.html 
								  
					 
					
						Added 
						Reference 
						
							
							
								
								
							
							
						 
							
						
							
								http://lists.opensuse.org/opensuse-updates/2016-02/msg00039.html 
								  
					 
					
						Added 
						Reference 
						
							
							
								
								
							
							
						 
							
						
							
								http://rhn.redhat.com/errata/RHSA-2016-0534.html 
								  
					 
					
						Added 
						Reference 
						
							
							
								
								
							
							
						 
							
						
							
								http://rhn.redhat.com/errata/RHSA-2016-0705.html 
								  
					 
					
						Added 
						Reference 
						
							
							
								
								
							
							
						 
							
						
							
								http://rhn.redhat.com/errata/RHSA-2016-1480.html 
								  
					 
					
						Added 
						Reference 
						
							
							
								
								
							
							
						 
							
						
							
								http://rhn.redhat.com/errata/RHSA-2016-1481.html 
								  
					 
					
						Added 
						Reference 
						
							
							
								
								
							
							
						 
							
						
							
								http://www.debian.org/security/2015/dsa-3377 
								  
					 
					
						Added 
						Reference 
						
							
							
								
								
							
							
						 
							
						
							
								http://www.debian.org/security/2015/dsa-3385 
								  
					 
					
						Added 
						Reference 
						
							
							
								
								
							
							
						 
							
						
							
								http://www.oracle.com/technetwork/topics/security/bulletinapr2016-2952098.html 
								  
					 
					
						Added 
						Reference 
						
							
							
								
								
							
							
						 
							
						
							
								http://www.oracle.com/technetwork/topics/security/cpuoct2015-2367953.html 
								  
					 
					
						Added 
						Reference 
						
							
							
								
								
							
							
						 
							
						
							
								http://www.oracle.com/technetwork/topics/security/linuxbulletinapr2016-2952096.html 
								  
					 
					
						Added 
						Reference 
						
							
							
								
								
							
							
						 
							
						
							
								http://www.securityfocus.com/bid/77171 
								  
					 
					
						Added 
						Reference 
						
							
							
								
								
							
							
						 
							
						
							
								http://www.securitytracker.com/id/1033894 
								  
					 
					
						Added 
						Reference 
						
							
							
								
								
							
							
						 
							
						
							
								http://www.ubuntu.com/usn/USN-2781-1 
								  
					 
					
						Added 
						Reference 
						
							
							
								
								
							
							
						 
							
						
							
								https://access.redhat.com/errata/RHSA-2016:1132 
								  
					 
					
						Added 
						Reference 
						
							
							
								
								
							
							
						 
							
						
							
								https://www.suse.com/support/update/announcement/2016/suse-su-20160296-1.html 
								  
					 
				 
			
		 
	
		
			 
			
				CVE Modified by Oracle  5/13/2024 11:36:41 PM  
			
				 
					
						Action 
						Type 
						Old Value 
						New Value 
					 
				 
				
					
				 
			
		 
	
		
			 
			
				Reanalysis by NIST  9/15/2022 5:01:56 PM  
			
				 
					
						Action 
						Type 
						Old Value 
						New Value 
					 
				 
				
					
						Changed 
						CPE Configuration 
						
							
							
							
								OR
     *cpe:2.3:o:opensuse:leap:42.1:*:*:*:*:*:*:* 
								  
							
						
							
								OR
     *cpe:2.3:o:opensuse:leap:42.1:*:*:*:*:*:*:*
     *cpe:2.3:o:opensuse:opensuse:13.1:*:*:*:*:*:*:*
     *cpe:2.3:o:opensuse:opensuse:13.2:*:*:*:*:*:*:* 
								  
					 
					
						Changed 
						CPE Configuration 
						
							
							
							
								OR
     *cpe:2.3:o:oracle:linux:7:*:*:*:*:*:*:*
     *cpe:2.3:o:oracle:solaris:11.3:*:*:*:*:*:*:* 
								  
							
						
							
								OR
     *cpe:2.3:o:oracle:linux:7:-:*:*:*:*:*:*
     *cpe:2.3:o:oracle:solaris:11.3:*:*:*:*:*:*:* 
								  
					 
					
						Changed 
						CPE Configuration 
						
							
							
							
								OR
     *cpe:2.3:o:redhat:enterprise_linux_desktop:7.0:*:*:*:*:*:*:*
     *cpe:2.3:o:redhat:enterprise_linux_hpc_node:7.0:*:*:*:*:*:*:*
     *cpe:2.3:o:redhat:enterprise_linux_hpc_node_eus:7.2:*:*:*:*:*:*:*
     *cpe:2.3:o:redhat:enterprise_linux_server:7.0:*:*:*:*:*:*:*
     *cpe:2.3:o:redhat:enterprise_linux_server_aus:7.2:*:*:*:*:*:*:*
     *cpe:2.3:o:redhat:enterprise_linux_server_eus:7.2:*:*:*:*:*:*:*
     *cpe:2.3:o:redhat:enterprise_linux_workstation:7.0:*:*:*:*:*:*:* 
								  
							
						
							
								OR
     *cpe:2.3:o:redhat:enterprise_linux_desktop:7.0:*:*:*:*:*:*:*
     *cpe:2.3:o:redhat:enterprise_linux_eus:7.2:*:*:*:*:*:*:*
     *cpe:2.3:o:redhat:enterprise_linux_eus:7.3:*:*:*:*:*:*:*
     *cpe:2.3:o:redhat:enterprise_linux_eus:7.4:*:*:*:*:*:*:*
     *cpe:2.3:o:redhat:enterprise_linux_eus:7.5:*:*:*:*:*:*:*
     *cpe:2.3:o:redhat:enterprise_linux_eus:7.6:*:*:*:*:*:*:*
     *cpe:2.3:o:redhat:enterprise_linux_eus:7.7:*:*:*:*:*:*:*
     *cpe:2.3:o:redhat:enterprise_linux_server:7.0:*:*:*:*:*:*:*
     *cpe:2.3:o:redhat:enterprise_linux_server_aus:7.2:*:*:*:*:*:*:*
     *cpe:2.3:o:redhat:enterprise_linux_server_aus:7.3:*:*:*:*:*:*:*
     *cpe:2.3:o:redhat:enterprise_linux_server_aus:7.4:*:*:*:*:*:*:*
     *cpe:2.3:o:redhat:enterprise_linux_server_aus:7.6:*:*:*:*:*:*:*
     *cpe:2.3:o:redhat:enterprise_linux_server_aus:7.7:*:*:*:*:*:*:*
     *cpe:2.3:o:redhat:enterprise_linux_server_tus:7.2:*:*:*:*:*:*:*
     *cpe:2.3:o:redhat:enterprise_linux_server_tus:7.3:*:*:*:*:*:*:*
     *cpe:2.3:o:redhat:enterprise_linux_server_tus:7.6:*:*:*:*:*:*:*
     *cpe:2.3:o:redhat:enterprise_linux_server_tus:7.7:*:*:*:*:*:*:*
     *cpe:2.3:o:redhat:enterprise_linux_workstation:7.0:*:*:*:*:*:*:* 
								  
					 
					
						Added 
						CPE Configuration 
						
							
							
								
								
							
							
						 
							
						
							
								OR
     *cpe:2.3:a:mariadb:mariadb:*:*:*:*:*:*:*:* versions from (including) 5.5.0 up to (excluding) 5.5.46
     *cpe:2.3:a:mariadb:mariadb:*:*:*:*:*:*:*:* versions from (including) 10.0.0 up to (excluding) 10.0.22
     *cpe:2.3:a:mariadb:mariadb:*:*:*:*:*:*:*:* versions from (including) 10.1.0 up to (excluding) 10.1.8 
								  
					 
					
						Added 
						CPE Configuration 
						
							
							
								
								
							
							
						 
							
						
							
								OR
     *cpe:2.3:o:canonical:ubuntu_linux:12.04:*:*:*:-:*:*:*
     *cpe:2.3:o:canonical:ubuntu_linux:14.04:*:*:*:esm:*:*:*
     *cpe:2.3:o:canonical:ubuntu_linux:15.04:*:*:*:*:*:*:*
     *cpe:2.3:o:canonical:ubuntu_linux:15.10:*:*:*:*:*:*:* 
								  
					 
					
						Added 
						CPE Configuration 
						
							
							
								
								
							
							
						 
							
						
							
								OR
     *cpe:2.3:o:debian:debian_linux:7.0:*:*:*:*:*:*:*
     *cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:* 
								  
					 
					
						Added 
						CPE Configuration 
						
							
							
								
								
							
							
						 
							
						
							
								OR
     *cpe:2.3:o:fedoraproject:fedora:23:*:*:*:*:*:*:* 
								  
					 
					
						Removed 
						CPE Configuration 
						
							
							
							
								OR
     *cpe:2.3:o:novell:suse_linux_enterprise_desktop:12.0:sp1:*:*:*:*:*:*
     *cpe:2.3:o:novell:suse_linux_enterprise_server:12.0:sp1:*:*:*:*:*:*
     *cpe:2.3:o:novell:suse_linux_enterprise_software_development_kit:12.0:sp1:*:*:*:*:*:*
     *cpe:2.3:o:novell:suse_linux_enterprise_workstation_extension:12.0:sp1:*:*:*:*:*:* 
								  
							
						
								
								
						 
					 
					
						Removed 
						CPE Configuration 
						
							
							
							
								OR
     *cpe:2.3:o:redhat:enterprise_linux:6.0:*:*:*:*:*:*:*
     *cpe:2.3:o:redhat:enterprise_linux:7.0:*:*:*:*:*:*:* 
								  
							
						
								
								
						 
					 
					
						Changed 
						Reference Type 
						
							
							
							
								http://lists.opensuse.org/opensuse-updates/2016-02/msg00039.html Third Party Advisory 
								  
							
						
							
								http://lists.opensuse.org/opensuse-updates/2016-02/msg00039.html Mailing List, Third Party Advisory 
								  
					 
					
						Changed 
						Reference Type 
						
							
							
							
								http://www.securitytracker.com/id/1033894 Third Party Advisory, VDB Entry 
								  
							
						
							
								http://www.securitytracker.com/id/1033894 Broken Link, Third Party Advisory, VDB Entry 
								  
					 
				 
			
		 
	
		
			 
			
				CPE Deprecation Remap by NIST  12/27/2019 11:09:04 AM  
			
				 
					
						Action 
						Type 
						Old Value 
						New Value 
					 
				 
				
					
						Changed 
						CPE Configuration 
						
							
							
							
								OR
     *cpe:2.3:o:oracle:linux:7.0:*:*:*:*:*:*:* 
								  
							
						
							
								OR
     *cpe:2.3:o:oracle:linux:7:*:*:*:*:*:*:* 
								  
					 
				 
			
		 
	
		
			 
			
				Modified Analysis by NIST  2/11/2019 2:21:04 PM  
			
				 
					
						Action 
						Type 
						Old Value 
						New Value 
					 
				 
				
					
						Changed 
						CPE Configuration 
						
							
							
							
								OR
     *cpe:2.3:a:oracle:mysql:*:*:*:*:*:*:*:* versions up to (including) 5.5.45
     *cpe:2.3:a:oracle:mysql:*:*:*:*:*:*:*:* versions up to (including) 5.6.26 
								  
							
						
							
								OR
     *cpe:2.3:a:oracle:mysql:*:*:*:*:*:*:*:* versions from (including) 5.5.0 up to (including) 5.5.45
     *cpe:2.3:a:oracle:mysql:*:*:*:*:*:*:*:* versions from (including) 5.6.0 up to (including) 5.6.26 
								  
					 
					
						Changed 
						Reference Type 
						
							
							
							
								http://lists.fedoraproject.org/pipermail/package-announce/2016-February/177539.html No Types Assigned 
								  
							
						
							
								http://lists.fedoraproject.org/pipermail/package-announce/2016-February/177539.html Mailing List, Third Party Advisory 
								  
					 
					
						Changed 
						Reference Type 
						
							
							
							
								http://lists.opensuse.org/opensuse-security-announce/2015-12/msg00010.html No Types Assigned 
								  
							
						
							
								http://lists.opensuse.org/opensuse-security-announce/2015-12/msg00010.html Mailing List, Third Party Advisory 
								  
					 
					
						Changed 
						Reference Type 
						
							
							
							
								http://lists.opensuse.org/opensuse-security-announce/2015-12/msg00011.html No Types Assigned 
								  
							
						
							
								http://lists.opensuse.org/opensuse-security-announce/2015-12/msg00011.html Mailing List, Third Party Advisory 
								  
					 
					
						Changed 
						Reference Type 
						
							
							
							
								http://rhn.redhat.com/errata/RHSA-2016-1480.html No Types Assigned 
								  
							
						
							
								http://rhn.redhat.com/errata/RHSA-2016-1480.html Third Party Advisory 
								  
					 
					
						Changed 
						Reference Type 
						
							
							
							
								http://rhn.redhat.com/errata/RHSA-2016-1481.html No Types Assigned 
								  
							
						
							
								http://rhn.redhat.com/errata/RHSA-2016-1481.html Third Party Advisory 
								  
					 
					
						Changed 
						Reference Type 
						
							
							
							
								http://www.debian.org/security/2015/dsa-3377 No Types Assigned 
								  
							
						
							
								http://www.debian.org/security/2015/dsa-3377 Third Party Advisory 
								  
					 
					
						Changed 
						Reference Type 
						
							
							
							
								http://www.debian.org/security/2015/dsa-3385 No Types Assigned 
								  
							
						
							
								http://www.debian.org/security/2015/dsa-3385 Third Party Advisory 
								  
					 
					
						Changed 
						Reference Type 
						
							
							
							
								http://www.securityfocus.com/bid/77171 No Types Assigned 
								  
							
						
							
								http://www.securityfocus.com/bid/77171 Third Party Advisory, VDB Entry 
								  
					 
					
						Changed 
						Reference Type 
						
							
							
							
								http://www.securitytracker.com/id/1033894 No Types Assigned 
								  
							
						
							
								http://www.securitytracker.com/id/1033894 Third Party Advisory, VDB Entry 
								  
					 
					
						Changed 
						Reference Type 
						
							
							
							
								http://www.ubuntu.com/usn/USN-2781-1 No Types Assigned 
								  
							
						
							
								http://www.ubuntu.com/usn/USN-2781-1 Third Party Advisory 
								  
					 
					
						Changed 
						Reference Type 
						
							
							
							
								https://access.redhat.com/errata/RHSA-2016:1132 No Types Assigned 
								  
							
						
							
								https://access.redhat.com/errata/RHSA-2016:1132 Third Party Advisory 
								  
					 
				 
			
		 
	
		
			 
			
				CPE Deprecation Remap by NIST  10/30/2018 12:27:32 PM  
			
				 
					
						Action 
						Type 
						Old Value 
						New Value 
					 
				 
				
					
						Changed 
						CPE Configuration 
						
							
							
							
								OR
     *cpe:2.3:o:novell:leap:42.1:*:*:*:*:*:*:* 
								  
							
						
							
								OR
     *cpe:2.3:o:opensuse:leap:42.1:*:*:*:*:*:*:* 
								  
					 
				 
			
		 
	
		
			 
			
				CVE Modified by Oracle  1/04/2018 9:30:10 PM  
			
				 
					
						Action 
						Type 
						Old Value 
						New Value 
					 
				 
				
					
						Added 
						Reference 
						
							
							
								
								
							
							
						 
							
						
							
								http://rhn.redhat.com/errata/RHSA-2016-1480.html [No Types Assigned] 
								  
					 
					
						Added 
						Reference 
						
							
							
								
								
							
							
						 
							
						
							
								http://rhn.redhat.com/errata/RHSA-2016-1481.html [No Types Assigned] 
								  
					 
					
						Added 
						Reference 
						
							
							
								
								
							
							
						 
							
						
							
								https://access.redhat.com/errata/RHSA-2016:1132 [No Types Assigned] 
								  
					 
				 
			
		 
	
		
			 
			
				CVE Modified by Oracle  12/23/2016 9:59:20 PM  
			
				 
					
						Action 
						Type 
						Old Value 
						New Value 
					 
				 
				
					
						Added 
						Reference 
						
							
							
								
								
							
							
						 
							
						
							
								http://www.debian.org/security/2015/dsa-3377 [No Types Assigned] 
								  
					 
					
						Added 
						Reference 
						
							
							
								
								
							
							
						 
							
						
							
								http://www.securitytracker.com/id/1033894 [No Types Assigned] 
								  
					 
					
						Added 
						Reference 
						
							
							
								
								
							
							
						 
							
						
							
								http://www.ubuntu.com/usn/USN-2781-1 [No Types Assigned] 
								  
					 
				 
			
		 
	
		
			 
			
				CVE Modified by Oracle  12/07/2016 1:14:04 PM  
			
				 
					
						Action 
						Type 
						Old Value 
						New Value 
					 
				 
				
					
						Added 
						Reference 
						
							
							
								
								
							
							
						 
							
						
							
								http://lists.opensuse.org/opensuse-security-announce/2015-12/msg00010.html [No Types Assigned] 
								  
					 
					
						Added 
						Reference 
						
							
							
								
								
							
							
						 
							
						
							
								http://lists.opensuse.org/opensuse-security-announce/2015-12/msg00011.html [No Types Assigned] 
								  
					 
					
						Added 
						Reference 
						
							
							
								
								
							
							
						 
							
						
							
								http://www.debian.org/security/2015/dsa-3385 [No Types Assigned] 
								  
					 
				 
			
		 
	
		
			 
			
				CVE Modified by Oracle  12/05/2016 10:02:22 PM  
			
				 
					
						Action 
						Type 
						Old Value 
						New Value 
					 
				 
				
					
						Added 
						Reference 
						
							
							
								
								
							
							
						 
							
						
							
								http://lists.fedoraproject.org/pipermail/package-announce/2016-February/177539.html [No Types Assigned] 
								  
					 
				 
			
		 
	
		
			 
			
				CVE Modified by Oracle  11/28/2016 2:29:53 PM  
			
				 
					
						Action 
						Type 
						Old Value 
						New Value 
					 
				 
				
					
						Added 
						Reference 
						
							
							
								
								
							
							
						 
							
						
							
								http://www.securityfocus.com/bid/77171 [No Types Assigned] 
								  
					 
				 
			
		 
	
		
			 
			
				Modified Analysis by NIST  11/02/2016 2:52:44 PM  
			
				 
					
						Action 
						Type 
						Old Value 
						New Value 
					 
				 
				
					
						Changed 
						CPE Configuration 
						
							
							
							
								Configuration 1
     OR
          *cpe:2.3:o:redhat:enterprise_linux_server_eus:7.2:*:*:*:*:*:*:*
          *cpe:2.3:o:redhat:enterprise_linux_server_aus:7.2:*:*:*:*:*:*:*
          *cpe:2.3:o:redhat:enterprise_linux_hpc_node_eus:7.2:*:*:*:*:*:*:*
          *cpe:2.3:o:redhat:enterprise_linux_workstation:7.0:*:*:*:*:*:*:*
          *cpe:2.3:o:redhat:enterprise_linux_server:7.0:*:*:*:*:*:*:*
          *cpe:2.3:o:redhat:enterprise_linux_hpc_node:7.0:*:*:*:*:*:*:*
          *cpe:2.3:o:redhat:enterprise_linux_desktop:7.0:*:*:*:*:*:*:*
Configuration 2
     OR
          *cpe:2.3:a:oracle:mysql:5.5.45:*:*:*:*:*:*:* (and previous)
          *cpe:2.3:a:oracle:mysql:5.6.26:*:*:*:*:*:*:* (and previous)
Configuration 3
     OR
          *cpe:2.3:o:redhat:enterprise_linux:7.0:*:*:*:*:*:*:*
          *cpe:2.3:o:redhat:enterprise_linux:6.0:*:*:*:*:*:*:*
Configuration 4
     OR
          *cpe:2.3:o:novell:suse_linux_enterprise_workstation_extension:12.0:sp1:*:*:*:*:*:*
          *cpe:2.3:o:novell:suse_linux_enterprise_server:12.0:sp1:*:*:*:*:*:*
          *cpe:2.3:o:novell:suse_linux_enterprise_desktop:12.0:sp1:*:*:*:*:*:*
          *cpe:2.3:o:novell:suse_linux_enterprise_software_development_kit:12.0:sp1:*:*:*:*:*:*
Configuration 5
     OR
          *cpe:2.3:o:novell:leap:42.1:*:*:*:*:*:*:* 
								  
							
						
							
								Configuration 1
     OR
          *cpe:2.3:o:novell:leap:42.1:*:*:*:*:*:*:*
Configuration 2
     OR
          *cpe:2.3:o:novell:suse_linux_enterprise_workstation_extension:12.0:sp1:*:*:*:*:*:*
          *cpe:2.3:o:novell:suse_linux_enterprise_server:12.0:sp1:*:*:*:*:*:*
          *cpe:2.3:o:novell:suse_linux_enterprise_desktop:12.0:sp1:*:*:*:*:*:*
          *cpe:2.3:o:novell:suse_linux_enterprise_software_development_kit:12.0:sp1:*:*:*:*:*:*
Configuration 3
     OR
          *cpe:2.3:o:redhat:enterprise_linux:7.0:*:*:*:*:*:*:*
          *cpe:2.3:o:redhat:enterprise_linux:6.0:*:*:*:*:*:*:*
Configuration 4
     OR
          *cpe:2.3:o:redhat:enterprise_linux_server_eus:7.2:*:*:*:*:*:*:*
          *cpe:2.3:o:redhat:enterprise_linux_server_aus:7.2:*:*:*:*:*:*:*
          *cpe:2.3:o:redhat:enterprise_linux_hpc_node_eus:7.2:*:*:*:*:*:*:*
          *cpe:2.3:o:redhat:enterprise_linux_workstation:7.0:*:*:*:*:*:*:*
          *cpe:2.3:o:redhat:enterprise_linux_server:7.0:*:*:*:*:*:*:*
          *cpe:2.3:o:redhat:enterprise_linux_hpc_node:7.0:*:*:*:*:*:*:*
          *cpe:2.3:o:redhat:enterprise_linux_desktop:7.0:*:*:*:*:*:*:*
Configuration 5
     OR
          *cpe:2.3:o:oracle:linux:7.0:*:*:*:*:*:*:*
          *cpe:2.3:o:oracle:solaris:11.3:*:*:*:*:*:*:*
Configuration 6
     OR
          *cpe:2.3:a:oracle:mysql:5.5.45:*:*:*:*:*:*:* (and previous)
          *cpe:2.3:a:oracle:mysql:5.6.26:*:*:*:*:*:*:* (and previous) 
								  
					 
					
						Changed 
						Reference Type 
						
							
							
							
								http://www.oracle.com/technetwork/topics/security/bulletinapr2016-2952098.html No Types Assigned 
								  
							
						
							
								http://www.oracle.com/technetwork/topics/security/bulletinapr2016-2952098.html Vendor Advisory 
								  
					 
					
						Changed 
						Reference Type 
						
							
							
							
								http://www.oracle.com/technetwork/topics/security/linuxbulletinapr2016-2952096.html No Types Assigned 
								  
							
						
							
								http://www.oracle.com/technetwork/topics/security/linuxbulletinapr2016-2952096.html Vendor Advisory 
								  
					 
				 
			
		 
	
		
			 
			
				Initial CVE Analysis  11/02/2016 2:06:40 PM  
			
				 
					
						Action 
						Type 
						Old Value 
						New Value 
					 
				 
				
					
						Changed 
						CPE Configuration 
						
							
							
							
								Configuration 1
     OR
          *cpe:2.3:a:oracle:mysql:5.5.45:*:*:*:*:*:*:* (and previous)
          *cpe:2.3:a:oracle:mysql:5.6.26:*:*:*:*:*:*:* (and previous)
Configuration 2
     OR
          *cpe:2.3:o:redhat:enterprise_linux_server_eus:7.2:*:*:*:*:*:*:*
          *cpe:2.3:o:redhat:enterprise_linux_server_aus:7.2:*:*:*:*:*:*:*
          *cpe:2.3:o:redhat:enterprise_linux_hpc_node_eus:7.2:*:*:*:*:*:*:*
          *cpe:2.3:o:redhat:enterprise_linux_workstation:7.0:*:*:*:*:*:*:*
          *cpe:2.3:o:redhat:enterprise_linux_server:7.0:*:*:*:*:*:*:*
          *cpe:2.3:o:redhat:enterprise_linux_hpc_node:7.0:*:*:*:*:*:*:*
          *cpe:2.3:o:redhat:enterprise_linux_desktop:7.0:*:*:*:*:*:*:*
Configuration 3
     OR
          *cpe:2.3:o:novell:suse_linux_enterprise_workstation_extension:12.0:sp1:*:*:*:*:*:*
          *cpe:2.3:o:novell:suse_linux_enterprise_server:12.0:sp1:*:*:*:*:*:*
          *cpe:2.3:o:novell:suse_linux_enterprise_desktop:12.0:sp1:*:*:*:*:*:*
          *cpe:2.3:o:novell:suse_linux_enterprise_software_development_kit:12.0:sp1:*:*:*:*:*:*
Configuration 4
     OR
          *cpe:2.3:o:redhat:enterprise_linux:7.0:*:*:*:*:*:*:*
          *cpe:2.3:o:redhat:enterprise_linux:6.0:*:*:*:*:*:*:*
Configuration 5
     OR
          *cpe:2.3:o:novell:leap:42.1:*:*:*:*:*:*:* 
								  
							
						
							
								Configuration 1
     OR
          *cpe:2.3:a:oracle:mysql:5.5.45:*:*:*:*:*:*:* (and previous)
          *cpe:2.3:a:oracle:mysql:5.6.26:*:*:*:*:*:*:* (and previous)
Configuration 2
     OR
          *cpe:2.3:o:novell:suse_linux_enterprise_workstation_extension:12.0:sp1:*:*:*:*:*:*
          *cpe:2.3:o:novell:suse_linux_enterprise_server:12.0:sp1:*:*:*:*:*:*
          *cpe:2.3:o:novell:suse_linux_enterprise_desktop:12.0:sp1:*:*:*:*:*:*
          *cpe:2.3:o:novell:suse_linux_enterprise_software_development_kit:12.0:sp1:*:*:*:*:*:*
Configuration 3
     OR
          *cpe:2.3:o:redhat:enterprise_linux_server_eus:7.2:*:*:*:*:*:*:*
          *cpe:2.3:o:redhat:enterprise_linux_server_aus:7.2:*:*:*:*:*:*:*
          *cpe:2.3:o:redhat:enterprise_linux_hpc_node_eus:7.2:*:*:*:*:*:*:*
          *cpe:2.3:o:redhat:enterprise_linux_workstation:7.0:*:*:*:*:*:*:*
          *cpe:2.3:o:redhat:enterprise_linux_server:7.0:*:*:*:*:*:*:*
          *cpe:2.3:o:redhat:enterprise_linux_hpc_node:7.0:*:*:*:*:*:*:*
          *cpe:2.3:o:redhat:enterprise_linux_desktop:7.0:*:*:*:*:*:*:*
Configuration 4
     OR
          *cpe:2.3:o:oracle:linux:7.0:*:*:*:*:*:*:*
          *cpe:2.3:o:oracle:solaris:11.3:*:*:*:*:*:*:*
Configuration 5
     OR
          *cpe:2.3:o:redhat:enterprise_linux:7.0:*:*:*:*:*:*:*
          *cpe:2.3:o:redhat:enterprise_linux:6.0:*:*:*:*:*:*:*
Configuration 6
     OR
          *cpe:2.3:o:novell:leap:42.1:*:*:*:*:*:*:* 
								  
					 
					
						Changed 
						Reference Type 
						
							
							
							
								http://www.oracle.com/technetwork/topics/security/bulletinapr2016-2952098.html No Types Assigned 
								  
							
						
							
								http://www.oracle.com/technetwork/topics/security/bulletinapr2016-2952098.html Vendor Advisory 
								  
					 
					
						Changed 
						Reference Type 
						
							
							
							
								http://www.oracle.com/technetwork/topics/security/linuxbulletinapr2016-2952096.html No Types Assigned 
								  
							
						
							
								http://www.oracle.com/technetwork/topics/security/linuxbulletinapr2016-2952096.html Vendor Advisory 
								  
					 
				 
			
		 
	
		
			 
			
				CVE Modified by Oracle  10/03/2016 10:04:47 PM  
			
				 
					
						Action 
						Type 
						Old Value 
						New Value 
					 
				 
				
					
						Added 
						Reference 
						
							
							
								
								
							
							
						 
							
						
							
								http://www.oracle.com/technetwork/topics/security/bulletinapr2016-2952098.html 
								  
					 
					
						Added 
						Reference 
						
							
							
								
								
							
							
						 
							
						
							
								http://www.oracle.com/technetwork/topics/security/linuxbulletinapr2016-2952096.html 
								  
					 
				 
			
		 
	
		
			 
			
				Modified Analysis by NIST  9/13/2016 2:17:36 PM  
			
				 
					
						Action 
						Type 
						Old Value 
						New Value 
					 
				 
				
					
						Changed 
						CPE Configuration 
						
							
							
							
								Configuration 1
     OR
          *cpe:2.3:a:oracle:mysql:5.5.45:*:*:*:*:*:*:* (and previous)
          *cpe:2.3:a:oracle:mysql:5.6.26:*:*:*:*:*:*:* (and previous)
Configuration 2
     OR
          *cpe:2.3:o:redhat:enterprise_linux_server_eus:7.2:*:*:*:*:*:*:*
          *cpe:2.3:o:redhat:enterprise_linux_server_aus:7.2:*:*:*:*:*:*:*
          *cpe:2.3:o:redhat:enterprise_linux_hpc_node_eus:7.2:*:*:*:*:*:*:*
          *cpe:2.3:o:redhat:enterprise_linux_workstation:7.0:*:*:*:*:*:*:*
          *cpe:2.3:o:redhat:enterprise_linux_server:7.0:*:*:*:*:*:*:*
          *cpe:2.3:o:redhat:enterprise_linux_hpc_node:7.0:*:*:*:*:*:*:*
          *cpe:2.3:o:redhat:enterprise_linux_desktop:7.0:*:*:*:*:*:*:*
Configuration 3
     OR
          *cpe:2.3:o:novell:leap:42.1:*:*:*:*:*:*:* 
								  
							
						
							
								Configuration 1
     OR
          *cpe:2.3:o:redhat:enterprise_linux_server_eus:7.2:*:*:*:*:*:*:*
          *cpe:2.3:o:redhat:enterprise_linux_server_aus:7.2:*:*:*:*:*:*:*
          *cpe:2.3:o:redhat:enterprise_linux_hpc_node_eus:7.2:*:*:*:*:*:*:*
          *cpe:2.3:o:redhat:enterprise_linux_workstation:7.0:*:*:*:*:*:*:*
          *cpe:2.3:o:redhat:enterprise_linux_server:7.0:*:*:*:*:*:*:*
          *cpe:2.3:o:redhat:enterprise_linux_hpc_node:7.0:*:*:*:*:*:*:*
          *cpe:2.3:o:redhat:enterprise_linux_desktop:7.0:*:*:*:*:*:*:*
Configuration 2
     OR
          *cpe:2.3:a:oracle:mysql:5.5.45:*:*:*:*:*:*:* (and previous)
          *cpe:2.3:a:oracle:mysql:5.6.26:*:*:*:*:*:*:* (and previous)
Configuration 3
     OR
          *cpe:2.3:o:redhat:enterprise_linux:7.0:*:*:*:*:*:*:*
          *cpe:2.3:o:redhat:enterprise_linux:6.0:*:*:*:*:*:*:*
Configuration 4
     OR
          *cpe:2.3:o:novell:suse_linux_enterprise_workstation_extension:12.0:sp1:*:*:*:*:*:*
          *cpe:2.3:o:novell:suse_linux_enterprise_server:12.0:sp1:*:*:*:*:*:*
          *cpe:2.3:o:novell:suse_linux_enterprise_desktop:12.0:sp1:*:*:*:*:*:*
          *cpe:2.3:o:novell:suse_linux_enterprise_software_development_kit:12.0:sp1:*:*:*:*:*:*
Configuration 5
     OR
          *cpe:2.3:o:novell:leap:42.1:*:*:*:*:*:*:* 
								  
					 
					
						Changed 
						Reference Type 
						
							
							
							
								http://lists.opensuse.org/opensuse-updates/2016-02/msg00039.html No Types Assigned 
								  
							
						
							
								http://lists.opensuse.org/opensuse-updates/2016-02/msg00039.html Third Party Advisory 
								  
					 
					
						Changed 
						Reference Type 
						
							
							
							
								http://rhn.redhat.com/errata/RHSA-2016-0534.html No Types Assigned 
								  
							
						
							
								http://rhn.redhat.com/errata/RHSA-2016-0534.html Third Party Advisory 
								  
					 
					
						Changed 
						Reference Type 
						
							
							
							
								http://rhn.redhat.com/errata/RHSA-2016-0705.html No Types Assigned 
								  
							
						
							
								http://rhn.redhat.com/errata/RHSA-2016-0705.html Third Party Advisory 
								  
					 
					
						Changed 
						Reference Type 
						
							
							
							
								https://www.suse.com/support/update/announcement/2016/suse-su-20160296-1.html No Types Assigned 
								  
							
						
							
								https://www.suse.com/support/update/announcement/2016/suse-su-20160296-1.html Third Party Advisory 
								  
					 
				 
			
		 
	
		
			 
			
				CVE Modified by Oracle  9/12/2016 9:59:11 PM  
			
				 
					
						Action 
						Type 
						Old Value 
						New Value 
					 
				 
				
					
						Added 
						Reference 
						
							
							
								
								
							
							
						 
							
						
							
								http://rhn.redhat.com/errata/RHSA-2016-0705.html 
								  
					 
				 
			
		 
	
		
			 
			
				Modified Analysis by NIST  5/25/2016 1:52:26 PM  
			
				 
					
						Action 
						Type 
						Old Value 
						New Value 
					 
				 
				
					
						Changed 
						CPE Configuration 
						
							
							
							
								Configuration 1
     OR
          *cpe:2.3:a:oracle:mysql:5.5.45:*:*:*:*:*:*:* (and previous)
          *cpe:2.3:a:oracle:mysql:5.6.26:*:*:*:*:*:*:* (and previous) 
								  
							
						
							
								Configuration 1
     OR
          *cpe:2.3:a:oracle:mysql:5.5.45:*:*:*:*:*:*:* (and previous)
          *cpe:2.3:a:oracle:mysql:5.6.26:*:*:*:*:*:*:* (and previous)
Configuration 2
     OR
          *cpe:2.3:o:redhat:enterprise_linux_server_eus:7.2:*:*:*:*:*:*:*
          *cpe:2.3:o:redhat:enterprise_linux_server_aus:7.2:*:*:*:*:*:*:*
          *cpe:2.3:o:redhat:enterprise_linux_hpc_node_eus:7.2:*:*:*:*:*:*:*
          *cpe:2.3:o:redhat:enterprise_linux_workstation:7.0:*:*:*:*:*:*:*
          *cpe:2.3:o:redhat:enterprise_linux_server:7.0:*:*:*:*:*:*:*
          *cpe:2.3:o:redhat:enterprise_linux_hpc_node:7.0:*:*:*:*:*:*:*
          *cpe:2.3:o:redhat:enterprise_linux_desktop:7.0:*:*:*:*:*:*:*
Configuration 3
     OR
          *cpe:2.3:o:novell:leap:42.1:*:*:*:*:*:*:* 
								  
					 
					
						Changed 
						Reference Type 
						
							
							
							
								http://www.oracle.com/technetwork/topics/security/cpuoct2015-2367953.html No Types Assigned 
								  
							
						
							
								http://www.oracle.com/technetwork/topics/security/cpuoct2015-2367953.html Advisory, Patch 
								  
					 
				 
			
		 
	
		
			 
			
				CVE Modified by Oracle  4/12/2016 9:59:04 PM  
			
				 
					
						Action 
						Type 
						Old Value 
						New Value 
					 
				 
				
					
						Added 
						Reference 
						
							
							
								
								
							
							
						 
							
						
							
								http://rhn.redhat.com/errata/RHSA-2016-0534.html 
								  
					 
				 
			
		 
	
		
			 
			
				CVE Modified by Oracle  4/11/2016 9:59:08 PM  
			
				 
					
						Action 
						Type 
						Old Value 
						New Value 
					 
				 
				
					
						Added 
						Reference 
						
							
							
								
								
							
							
						 
							
						
							
								http://lists.opensuse.org/opensuse-updates/2016-02/msg00039.html 
								  
					 
					
						Added 
						Reference 
						
							
							
								
								
							
							
						 
							
						
							
								https://www.suse.com/support/update/announcement/2016/suse-su-20160296-1.html 
								  
					 
				 
			
		 
	
		
			 
			
				CVE Modified by Oracle  4/06/2016 9:59:33 PM  
			
				 
					
						Action 
						Type 
						Old Value 
						New Value 
					 
				 
				
					
						Added 
						Reference 
						
							
							
								
								
							
							
						 
							
						
							
								http://www.oracle.com/technetwork/topics/security/cpuoct2015-2367953.html 
								  
					 
					
						Removed 
						Reference 
						
							
							
							
								http://www.oracle.com/technetwork/topics/security/alerts-086861.html 
								  
							
						
								
								
						 
					 
				 
			
		 
	
		
			 
			
				Modified Analysis by NIST  10/22/2015 9:14:59 AM  
			
				 
					
						Action 
						Type 
						Old Value 
						New Value 
					 
				 
				
					
						Added 
						CVSS V2 
						
							
							
								
								
							
							
						 
							
						
							
								(AV:N/AC:H/Au:M/C:N/I:N/A:P) 
								  
					 
					
						Added 
						CWE 
						
							
							
								
								
							
							
						 
							
						
							
								NVD-CWE-noinfo 
								  
					 
					
						Added 
						CPE Configuration 
						
							
							
								
								
							
							
						 
							
						
							
								Configuration 1
     OR
          *cpe:2.3:a:oracle:mysql:5.5.45:*:*:*:*:*:*:* (and previous)
          *cpe:2.3:a:oracle:mysql:5.6.26:*:*:*:*:*:*:* (and previous) 
								  
					 
					
						Changed 
						Reference Type 
						
							
							
							
								http://www.oracle.com/technetwork/topics/security/alerts-086861.html No Types Assigned 
								  
							
						
							
								http://www.oracle.com/technetwork/topics/security/alerts-086861.html Advisory, Patch 
								  
					 
				 
			
		 
	
		
			 
			
				Initial CVE Analysis  10/22/2015 9:11:28 AM  
			
				 
					
						Action 
						Type 
						Old Value 
						New Value 
					 
				 
				
					
				 
			
		  
	 
                                 
                             
                         
                        
                            
                                Quick Info 
                                CVE Dictionary Entry:  CVE-2015-4792  NVD
                                Published Date:  10/21/2015  NVD
                                Last Modified:  04/12/2025  
                                Source:  Oracle