CVE-2015-4870

medium · 4

Unspecified vulnerability in Oracle MySQL Server 5.5.45 and earlier, and 5.6.26 and earlier, allows remote authenticated users to affect availability via unknown vectors related to Server : Parser.

CVSS

30.1%

EPSS (exploit prob.)

98th

EPSS percentile

2015-10-21

Published

AV:N/AC:L/Au:S/C:N/I:N/A:P

Affected products

Vendor	Product	Affected versions
oracle	linux	7
oracle	solaris	11.3
opensuse	leap	42.1
opensuse	opensuse	13.1
opensuse	opensuse	13.2
oracle	mysql	>= 5.5.0, <= 5.5.45
oracle	mysql	>= 5.6.0, <= 5.6.26
mariadb	mariadb	>= 5.5.0, < 5.5.46
mariadb	mariadb	>= 10.0.0, < 10.0.22
mariadb	mariadb	>= 10.1.0, < 10.1.8
canonical	ubuntu_linux	12.04
canonical	ubuntu_linux	14.04
canonical	ubuntu_linux	15.04
canonical	ubuntu_linux	15.10
debian	debian_linux	7.0
debian	debian_linux	8.0
redhat	enterprise_linux_desktop	7.0
redhat	enterprise_linux_eus	7.1
redhat	enterprise_linux_eus	7.2
redhat	enterprise_linux_eus	7.3
redhat	enterprise_linux_eus	7.4
redhat	enterprise_linux_eus	7.5
redhat	enterprise_linux_eus	7.6
redhat	enterprise_linux_eus	7.7
redhat	enterprise_linux_server	7.0
redhat	enterprise_linux_server_aus	7.3
redhat	enterprise_linux_server_aus	7.4
redhat	enterprise_linux_server_aus	7.6
redhat	enterprise_linux_server_aus	7.7
redhat	enterprise_linux_server_tus	7.3
redhat	enterprise_linux_server_tus	7.6
redhat	enterprise_linux_server_tus	7.7
redhat	enterprise_linux_workstation	7.0
fedoraproject	fedora	23

Check a specific version with /api/v1/cve/match.

References

Query this programmatically:

curl https://evil-db.io/api/v1/cve/CVE-2015-4870