CVE-2015-4757
mysql: unspecified vulnerability related to Server:Optimizer (CPU July 2015)
Severity Score
Exploit Likelihood
Affected Versions
31Public Exploits
0Exploited in Wild
-Decision
Descriptions
Unspecified vulnerability in Oracle MySQL Server 5.5.42 and earlier and 5.6.23 and earlier allows remote authenticated users to affect availability via unknown vectors related to Server : Optimizer.
Vulnerabilidad no especificada en Oracle MySQL Server 5.5.42 y anteriores y 5.6.23 y anteriores, permite a usuarios remotos autenticados afectar la disponibilidad a través de vectores desconocidos relacionados con Server : Optimizer.
MariaDB is a multi-user, multi-threaded SQL database server that is binary compatible with MySQL. It was found that the MySQL client library permitted but did not require a client to use SSL/TLS when establishing a secure connection to a MySQL server using the "--ssl" option. A man-in-the-middle attacker could use this flaw to strip the SSL/TLS protection from a connection between a client and a server. This update fixes several vulnerabilities in the MariaDB database server.
CVSS Scores
SSVC
- Decision:-
Timeline
- 2015-06-24 CVE Reserved
- 2015-07-16 CVE Published
- 2024-08-06 CVE Updated
- 2025-03-30 EPSS Updated
- ---------- Exploited in Wild
- ---------- KEV Due Date
- ---------- First Exploit
CWE
CAPEC
References (15)
| URL | Date | SRC |
|---|
| URL | Date | SRC |
|---|---|---|
| http://www.oracle.com/technetwork/topics/security/cpujul20... | 2022-09-20 |
| URL | Date | SRC |
|---|---|---|
| http://lists.opensuse.org/opensuse-updates/2015-09/msg0004... | 2022-09-20 | |
| http://rhn.redhat.com/errata/RHSA-2015-1628.html | 2022-09-20 | |
| http://rhn.redhat.com/errata/RHSA-2015-1629.html | 2022-09-20 | |
| http://rhn.redhat.com/errata/RHSA-2015-1630.html | 2022-09-20 | |
| http://rhn.redhat.com/errata/RHSA-2015-1646.html | 2022-09-20 | |
| http://rhn.redhat.com/errata/RHSA-2015-1647.html | 2022-09-20 | |
| http://rhn.redhat.com/errata/RHSA-2015-1665.html | 2022-09-20 | |
| http://www.debian.org/security/2015/dsa-3311 | 2022-09-20 | |
| http://www.ubuntu.com/usn/USN-2674-1 | 2022-09-20 | |
| https://security.gentoo.org/glsa/201610-06 | 2022-09-20 |