CVE-2015-4756
Unspecified vulnerability in Oracle MySQL Server 5.6.22 and earlier allows remote authenticated...
4.0 MediumFix available
Unspecified vulnerability in Oracle MySQL Server 5.6.22 and earlier allows remote authenticated users to affect availability via unknown vectors related to Server : InnoDB, a different vulnerability than CVE-2015-0439.
Exploit likelihood
3.02%Up 1.8 points since Feb 4, 2022
What each source reports
NVD Score used
Unspecified vulnerability in Oracle MySQL Server 5.6.22 and earlier allows remote authenticated users to affect availability via unknown vectors related to Server : InnoDB, a different vulnerability than CVE-2015-0439.
- Record
CVE-2015-4756- CVSS 2.0
- 4.0 Medium
AV:N/AC:L/Au:S/C:N/I:N/A:P - Updated
- 2026-11-02
CVE List No score
Unspecified vulnerability in Oracle MySQL Server 5.6.22 and earlier allows remote authenticated users to affect availability via unknown vectors related to Server : InnoDB, a different vulnerability than CVE-2015-0439.
- Record
CVE-2015-4756- Updated
- 2026-11-02
EUVDEUVD-2015-4773 No score
Unspecified vulnerability in Oracle MySQL Server 5.6.22 and earlier allows remote authenticated users to affect availability via unknown vectors related to Server : InnoDB, a different vulnerability than CVE-2015-0439.
- Record
EUVD-2015-4773- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-mc23-6jmw-p76x No score
Unspecified vulnerability in Oracle MySQL Server 5.6.22 and earlier allows remote authenticated...
Unspecified vulnerability in Oracle MySQL Server 5.6.22 and earlier allows remote authenticated users to affect availability via unknown vectors related to Server : InnoDB, a different vulnerability than CVE-2015-0439.
- Record
GHSA-mc23-6jmw-p76x- Updated
- 2026-11-02
OSVopenSUSE-SU-2024:10200-1 No score
libmysql56client18-32bit-5.6.34-1.1 on GA media
These are all security issues fixed in the libmysql56client18-32bit-5.6.34-1.1 package on the GA media of openSUSE Tumbleweed.
- Record
openSUSE-SU-2024:10200-1- Updated
- 2026-11-02
OSVSUSE-SU-2015:1788-1 No score
Security update for mysql
MySQL was updated to version 5.5.45, fixing bugs and security issues.
A list of all changes can be found on:
- http://dev.mysql.com/doc/relnotes/mysql/5.5/en/news-5-5-45.html
- http://dev.mysql.com/doc/relnotes/mysql/5.5/en/news-5-5-44.html
To fix the 'BACKRONYM' security issue (CVE-2015-3152) the behaviour of the SSL options was changed slightly to meet expectations: Now using '--ssl-verify-server-cert' and '--ssl[-*]' implies that the ssl connection is required. The mysql client will now print an error if ssl is required, but the server can not handle a ssl connection [bnc#924663], [bnc#928962], [CVE-2015-3152]
Additional bugs fixed:
- fix rc.mysql-multi script to start instances after restart properly [bnc#934401].
- Record
SUSE-SU-2015:1788-1- Updated
- 2026-11-02
OSVUBUNTU-CVE-2015-4756 No score
Unspecified vulnerability in Oracle MySQL Server 5.6.22 and earlier allows remote authenticated users to affect availability via unknown vectors related to Server : InnoDB, a different vulnerability than CVE-2015-0439.
- Record
UBUNTU-CVE-2015-4756- Updated
- 2026-11-02
Affected products
Affected packages
| Package | Affected | Fixed |
|---|---|---|
rh-mysql56-mysqlRed Hat:rhel_software_collections:2::el6 From an advisory covering 25 CVEs |
before 0:5.6.26-1.el6 | 0:5.6.26-1.el6 |
rh-mysql56-mysql-benchRed Hat:rhel_software_collections:2::el6 From an advisory covering 25 CVEs |
before 0:5.6.26-1.el6 | 0:5.6.26-1.el6 |
rh-mysql56-mysql-commonRed Hat:rhel_software_collections:2::el6 From an advisory covering 25 CVEs |
before 0:5.6.26-1.el6 | 0:5.6.26-1.el6 |
rh-mysql56-mysql-configRed Hat:rhel_software_collections:2::el6 From an advisory covering 25 CVEs |
before 0:5.6.26-1.el6 | 0:5.6.26-1.el6 |
rh-mysql56-mysql-debuginfoRed Hat:rhel_software_collections:2::el6 From an advisory covering 25 CVEs |
before 0:5.6.26-1.el6 | 0:5.6.26-1.el6 |
rh-mysql56-mysql-develRed Hat:rhel_software_collections:2::el6 From an advisory covering 25 CVEs |
before 0:5.6.26-1.el6 | 0:5.6.26-1.el6 |
rh-mysql56-mysql-errmsgRed Hat:rhel_software_collections:2::el6 From an advisory covering 25 CVEs |
before 0:5.6.26-1.el6 | 0:5.6.26-1.el6 |
rh-mysql56-mysql-serverRed Hat:rhel_software_collections:2::el6 From an advisory covering 25 CVEs |
before 0:5.6.26-1.el6 | 0:5.6.26-1.el6 |
rh-mysql56-mysql-testRed Hat:rhel_software_collections:2::el6 From an advisory covering 25 CVEs |
before 0:5.6.26-1.el6 | 0:5.6.26-1.el6 |
rh-mysql56-mysqlRed Hat:rhel_software_collections:2::el7 From an advisory covering 25 CVEs |
before 0:5.6.26-1.el7 | 0:5.6.26-1.el7 |
Show 41 moreShow less
| Package | Affected | Fixed |
|---|---|---|
rh-mysql56-mysql-benchRed Hat:rhel_software_collections:2::el7 From an advisory covering 25 CVEs |
before 0:5.6.26-1.el7 | 0:5.6.26-1.el7 |
rh-mysql56-mysql-commonRed Hat:rhel_software_collections:2::el7 From an advisory covering 25 CVEs |
before 0:5.6.26-1.el7 | 0:5.6.26-1.el7 |
rh-mysql56-mysql-configRed Hat:rhel_software_collections:2::el7 From an advisory covering 25 CVEs |
before 0:5.6.26-1.el7 | 0:5.6.26-1.el7 |
rh-mysql56-mysql-debuginfoRed Hat:rhel_software_collections:2::el7 From an advisory covering 25 CVEs |
before 0:5.6.26-1.el7 | 0:5.6.26-1.el7 |
rh-mysql56-mysql-develRed Hat:rhel_software_collections:2::el7 From an advisory covering 25 CVEs |
before 0:5.6.26-1.el7 | 0:5.6.26-1.el7 |
rh-mysql56-mysql-errmsgRed Hat:rhel_software_collections:2::el7 From an advisory covering 25 CVEs |
before 0:5.6.26-1.el7 | 0:5.6.26-1.el7 |
rh-mysql56-mysql-serverRed Hat:rhel_software_collections:2::el7 From an advisory covering 25 CVEs |
before 0:5.6.26-1.el7 | 0:5.6.26-1.el7 |
rh-mysql56-mysql-testRed Hat:rhel_software_collections:2::el7 From an advisory covering 25 CVEs |
before 0:5.6.26-1.el7 | 0:5.6.26-1.el7 |
rh-mariadb100-mariadbRed Hat:rhel_software_collections:2::el6 From an advisory covering 25 CVEs |
before 1:10.0.20-1.el6 | 1:10.0.20-1.el6 |
rh-mariadb100-mariadb-benchRed Hat:rhel_software_collections:2::el6 From an advisory covering 25 CVEs |
before 1:10.0.20-1.el6 | 1:10.0.20-1.el6 |
rh-mariadb100-mariadb-commonRed Hat:rhel_software_collections:2::el6 From an advisory covering 25 CVEs |
before 1:10.0.20-1.el6 | 1:10.0.20-1.el6 |
rh-mariadb100-mariadb-configRed Hat:rhel_software_collections:2::el6 From an advisory covering 25 CVEs |
before 1:10.0.20-1.el6 | 1:10.0.20-1.el6 |
rh-mariadb100-mariadb-debuginfoRed Hat:rhel_software_collections:2::el6 From an advisory covering 25 CVEs |
before 1:10.0.20-1.el6 | 1:10.0.20-1.el6 |
rh-mariadb100-mariadb-develRed Hat:rhel_software_collections:2::el6 From an advisory covering 25 CVEs |
before 1:10.0.20-1.el6 | 1:10.0.20-1.el6 |
rh-mariadb100-mariadb-errmsgRed Hat:rhel_software_collections:2::el6 From an advisory covering 25 CVEs |
before 1:10.0.20-1.el6 | 1:10.0.20-1.el6 |
rh-mariadb100-mariadb-oqgraph-engineRed Hat:rhel_software_collections:2::el6 From an advisory covering 25 CVEs |
before 1:10.0.20-1.el6 | 1:10.0.20-1.el6 |
rh-mariadb100-mariadb-serverRed Hat:rhel_software_collections:2::el6 From an advisory covering 25 CVEs |
before 1:10.0.20-1.el6 | 1:10.0.20-1.el6 |
rh-mariadb100-mariadb-testRed Hat:rhel_software_collections:2::el6 From an advisory covering 25 CVEs |
before 1:10.0.20-1.el6 | 1:10.0.20-1.el6 |
rh-mariadb100-mariadbRed Hat:rhel_software_collections:2::el7 From an advisory covering 25 CVEs |
before 1:10.0.20-1.el7 | 1:10.0.20-1.el7 |
rh-mariadb100-mariadb-benchRed Hat:rhel_software_collections:2::el7 From an advisory covering 25 CVEs |
before 1:10.0.20-1.el7 | 1:10.0.20-1.el7 |
rh-mariadb100-mariadb-commonRed Hat:rhel_software_collections:2::el7 From an advisory covering 25 CVEs |
before 1:10.0.20-1.el7 | 1:10.0.20-1.el7 |
rh-mariadb100-mariadb-configRed Hat:rhel_software_collections:2::el7 From an advisory covering 25 CVEs |
before 1:10.0.20-1.el7 | 1:10.0.20-1.el7 |
rh-mariadb100-mariadb-debuginfoRed Hat:rhel_software_collections:2::el7 From an advisory covering 25 CVEs |
before 1:10.0.20-1.el7 | 1:10.0.20-1.el7 |
rh-mariadb100-mariadb-develRed Hat:rhel_software_collections:2::el7 From an advisory covering 25 CVEs |
before 1:10.0.20-1.el7 | 1:10.0.20-1.el7 |
rh-mariadb100-mariadb-errmsgRed Hat:rhel_software_collections:2::el7 From an advisory covering 25 CVEs |
before 1:10.0.20-1.el7 | 1:10.0.20-1.el7 |
rh-mariadb100-mariadb-oqgraph-engineRed Hat:rhel_software_collections:2::el7 From an advisory covering 25 CVEs |
before 1:10.0.20-1.el7 | 1:10.0.20-1.el7 |
rh-mariadb100-mariadb-serverRed Hat:rhel_software_collections:2::el7 From an advisory covering 25 CVEs |
before 1:10.0.20-1.el7 | 1:10.0.20-1.el7 |
rh-mariadb100-mariadb-testRed Hat:rhel_software_collections:2::el7 From an advisory covering 25 CVEs |
before 1:10.0.20-1.el7 | 1:10.0.20-1.el7 |
mysqlSUSE:Linux Enterprise Software Development Kit 11 SP3 From an advisory covering 19 CVEs |
before 5.5.45-0.11.1 | 5.5.45-0.11.1 |
mysqlSUSE:Linux Enterprise Software Development Kit 11 SP4 From an advisory covering 19 CVEs |
before 5.5.45-0.11.1 | 5.5.45-0.11.1 |
mysqlSUSE:Linux Enterprise Desktop 11 SP3 From an advisory covering 19 CVEs |
before 5.5.45-0.11.1 | 5.5.45-0.11.1 |
mysqlSUSE:Linux Enterprise Desktop 11 SP4 From an advisory covering 19 CVEs |
before 5.5.45-0.11.1 | 5.5.45-0.11.1 |
mysqlSUSE:Linux Enterprise Server 11 SP3 From an advisory covering 19 CVEs |
before 5.5.45-0.11.1 | 5.5.45-0.11.1 |
mysqlSUSE:Linux Enterprise Server 11 SP3-TERADATA From an advisory covering 19 CVEs |
before 5.5.45-0.11.1 | 5.5.45-0.11.1 |
mysqlSUSE:Linux Enterprise Server for SAP Applications 11 SP3 From an advisory covering 19 CVEs |
before 5.5.45-0.11.1 | 5.5.45-0.11.1 |
mysqlSUSE:Linux Enterprise Server 11 SP4 From an advisory covering 19 CVEs |
before 5.5.45-0.11.1 | 5.5.45-0.11.1 |
mysqlSUSE:Linux Enterprise Server for SAP Applications 11 SP4 From an advisory covering 19 CVEs |
before 5.5.45-0.11.1 | 5.5.45-0.11.1 |
mariadb-5.5Ubuntu:14.04:LTS |
before 5.5.46-1ubuntu0.14.04.2, plus listed versions 5.5.32-1ubuntu15.5.35-1ubuntu15.5.36-15.5.37-0ubuntu0.14.04.15.5.39-0ubuntu0.14.04.1 Show 5 moreShow less5.5.40-0ubuntu0.14.04.15.5.41-0ubuntu0.14.04.25.5.41-1ubuntu0.14.04.15.5.43-1ubuntu0.14.04.25.5.44-1ubuntu0.14.04.1 |
5.5.46-1ubuntu0.14.04.2 |
mysql-5.6Ubuntu:14.04:LTS |
before 5.6.27-0ubuntu0.14.04.1, plus listed versions 5.6.15-0ubuntu15.6.15-1~exp25.6.16-1~exp15.6.17-0ubuntu0.14.04.15.6.19-0ubuntu0.14.04.1 |
5.6.27-0ubuntu0.14.04.1 |
mariadb-10.0Ubuntu:16.04:LTS |
before 10.0.22-0ubuntu1, plus listed versions 10.0.20-0ubuntu0.15.04.1 |
10.0.22-0ubuntu1 |
percona-server-5.6Ubuntu:16.04:LTS |
All versions, plus listed versions 5.6.22-rel71.0-0ubuntu25.6.22-rel71.0-0ubuntu45.6.22-rel71.0-0ubuntu4.1 |
None known |
History
| Recorded | Changed | Sources |
|---|---|---|
| affected, facts | ||
| aliases | EUVD | |
| first indexed | CVE List, GitHub Advisories, NVD, OSV |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2015-4756 is a medium vulnerability (CVSS 4.0) in Oracle Mysql, published July 16, 2015. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 3.02%, the 87th percentile. Fixed in mariadb-5.5 5.5.46-1ubuntu0.14.04.2.
References
oracle.com/technetwork/topics/security/cpujul2015-2367936.html
securitytracker.com/id/1032911
rhn.redhat.com/errata/RHSA-2015-1646.html
securityfocus.com/bid/75785
lists.opensuse.org/opensuse-updates/2015-09/msg00042.html
security.gentoo.org/glsa/201610-06
Show 194 moreShow less
nvd.nist.gov/vuln/detail/CVE-2015-4756
github.com/advisories/GHSA-mc23-6jmw-p76x
access.redhat.com/errata/RHSA-2015:1630
dev.mysql.com/doc/relnotes/mysql/5.6/en/news-5-6-26.html
bugzilla.redhat.com/show_bug.cgi?id=1244768
security.access.redhat.com/data/csaf/v2/advisories/2015/rhsa-2015_1630.json
cve.org/CVERecord?id=CVE-2015-2582
mariadb.com/kb/en/mariadb/mariadb-10020-release-notes
ocert.org/advisories/ocert-2015-003.html
suse.com/support/update/announcement/2015/suse-su-20151788-1
bugzilla.suse.com/924663
ubuntu.com/security/CVE-2015-4756
This page doesn't list everything
Left out here: 69 references. The JSON record has them.