CVE-2015-4772
Unspecified vulnerability in Oracle MySQL Server 5.6.24 and earlier allows remote authenticated...
4.0 MediumFix available
Unspecified vulnerability in Oracle MySQL Server 5.6.24 and earlier allows remote authenticated users to affect availability via unknown vectors related to Server : Partition.
Exploit likelihood
3.11%Up 1.8 points since Feb 4, 2022
What each source reports
NVD Score used
Unspecified vulnerability in Oracle MySQL Server 5.6.24 and earlier allows remote authenticated users to affect availability via unknown vectors related to Server : Partition.
- Record
CVE-2015-4772- CVSS 2.0
- 4.0 Medium
AV:N/AC:L/Au:S/C:N/I:N/A:P - Updated
- 2026-11-02
CVE List No score
Unspecified vulnerability in Oracle MySQL Server 5.6.24 and earlier allows remote authenticated users to affect availability via unknown vectors related to Server : Partition.
- Record
CVE-2015-4772- Updated
- 2026-11-02
EUVDEUVD-2015-4789 No score
Unspecified vulnerability in Oracle MySQL Server 5.6.24 and earlier allows remote authenticated users to affect availability via unknown vectors related to Server : Partition.
- Record
EUVD-2015-4789- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-fgrv-fgcx-mm52 No score
Unspecified vulnerability in Oracle MySQL Server 5.6.24 and earlier allows remote authenticated...
Unspecified vulnerability in Oracle MySQL Server 5.6.24 and earlier allows remote authenticated users to affect availability via unknown vectors related to Server : Partition.
- Record
GHSA-fgrv-fgcx-mm52- Updated
- 2026-11-02
OSVopenSUSE-SU-2024:10200-1 No score
libmysql56client18-32bit-5.6.34-1.1 on GA media
These are all security issues fixed in the libmysql56client18-32bit-5.6.34-1.1 package on the GA media of openSUSE Tumbleweed.
- Record
openSUSE-SU-2024:10200-1- Updated
- 2026-11-02
OSVSUSE-SU-2015:1788-1 No score
Security update for mysql
MySQL was updated to version 5.5.45, fixing bugs and security issues.
A list of all changes can be found on:
- http://dev.mysql.com/doc/relnotes/mysql/5.5/en/news-5-5-45.html
- http://dev.mysql.com/doc/relnotes/mysql/5.5/en/news-5-5-44.html
To fix the 'BACKRONYM' security issue (CVE-2015-3152) the behaviour of the SSL options was changed slightly to meet expectations: Now using '--ssl-verify-server-cert' and '--ssl[-*]' implies that the ssl connection is required. The mysql client will now print an error if ssl is required, but the server can not handle a ssl connection [bnc#924663], [bnc#928962], [CVE-2015-3152]
Additional bugs fixed:
- fix rc.mysql-multi script to start instances after restart properly [bnc#934401].
- Record
SUSE-SU-2015:1788-1- Updated
- 2026-11-02
OSVUBUNTU-CVE-2015-4772 No score
Unspecified vulnerability in Oracle MySQL Server 5.6.24 and earlier allows remote authenticated users to affect availability via unknown vectors related to Server : Partition.
- Record
UBUNTU-CVE-2015-4772- Updated
- 2026-11-02
OSVUSN-2674-1 No score
mysql-5.5, mysql-5.6 vulnerabilities
Multiple security issues were discovered in MySQL and this update includes new upstream MySQL versions to fix these issues.
MySQL has been updated to 5.5.44 in Ubuntu 12.04 LTS, Ubuntu 14.04 LTS and Ubuntu 14.10. Ubuntu 15.04 has been updated to MySQL 5.6.25.
In addition to security fixes, the updated packages contain bug fixes, new features, and possibly incompatible changes.
Please see the following for more information: http://dev.mysql.com/doc/relnotes/mysql/5.5/en/news-5-5-44.html http://dev.mysql.com/doc/relnotes/mysql/5.6/en/news-5-6-25.html http://www.oracle.com/technetwork/topics/security/cpujul2015-2367936.html
- Record
USN-2674-1- Updated
- 2026-11-02
Affected products
Affected packages
| Package | Affected | Fixed |
|---|---|---|
rh-mysql56-mysqlRed Hat:rhel_software_collections:2::el6 |
before 0:5.6.26-1.el6 | 0:5.6.26-1.el6 |
rh-mysql56-mysql-benchRed Hat:rhel_software_collections:2::el6 |
before 0:5.6.26-1.el6 | 0:5.6.26-1.el6 |
rh-mysql56-mysql-commonRed Hat:rhel_software_collections:2::el6 |
before 0:5.6.26-1.el6 | 0:5.6.26-1.el6 |
rh-mysql56-mysql-configRed Hat:rhel_software_collections:2::el6 |
before 0:5.6.26-1.el6 | 0:5.6.26-1.el6 |
rh-mysql56-mysql-debuginfoRed Hat:rhel_software_collections:2::el6 |
before 0:5.6.26-1.el6 | 0:5.6.26-1.el6 |
rh-mysql56-mysql-develRed Hat:rhel_software_collections:2::el6 |
before 0:5.6.26-1.el6 | 0:5.6.26-1.el6 |
rh-mysql56-mysql-errmsgRed Hat:rhel_software_collections:2::el6 |
before 0:5.6.26-1.el6 | 0:5.6.26-1.el6 |
rh-mysql56-mysql-serverRed Hat:rhel_software_collections:2::el6 |
before 0:5.6.26-1.el6 | 0:5.6.26-1.el6 |
rh-mysql56-mysql-testRed Hat:rhel_software_collections:2::el6 |
before 0:5.6.26-1.el6 | 0:5.6.26-1.el6 |
rh-mysql56-mysqlRed Hat:rhel_software_collections:2::el7 |
before 0:5.6.26-1.el7 | 0:5.6.26-1.el7 |
Show 42 moreShow less
| Package | Affected | Fixed |
|---|---|---|
rh-mysql56-mysql-benchRed Hat:rhel_software_collections:2::el7 |
before 0:5.6.26-1.el7 | 0:5.6.26-1.el7 |
rh-mysql56-mysql-commonRed Hat:rhel_software_collections:2::el7 |
before 0:5.6.26-1.el7 | 0:5.6.26-1.el7 |
rh-mysql56-mysql-configRed Hat:rhel_software_collections:2::el7 |
before 0:5.6.26-1.el7 | 0:5.6.26-1.el7 |
rh-mysql56-mysql-debuginfoRed Hat:rhel_software_collections:2::el7 |
before 0:5.6.26-1.el7 | 0:5.6.26-1.el7 |
rh-mysql56-mysql-develRed Hat:rhel_software_collections:2::el7 |
before 0:5.6.26-1.el7 | 0:5.6.26-1.el7 |
rh-mysql56-mysql-errmsgRed Hat:rhel_software_collections:2::el7 |
before 0:5.6.26-1.el7 | 0:5.6.26-1.el7 |
rh-mysql56-mysql-serverRed Hat:rhel_software_collections:2::el7 |
before 0:5.6.26-1.el7 | 0:5.6.26-1.el7 |
rh-mysql56-mysql-testRed Hat:rhel_software_collections:2::el7 |
before 0:5.6.26-1.el7 | 0:5.6.26-1.el7 |
rh-mariadb100-mariadbRed Hat:rhel_software_collections:2::el6 |
before 1:10.0.20-1.el6 | 1:10.0.20-1.el6 |
rh-mariadb100-mariadb-benchRed Hat:rhel_software_collections:2::el6 |
before 1:10.0.20-1.el6 | 1:10.0.20-1.el6 |
rh-mariadb100-mariadb-commonRed Hat:rhel_software_collections:2::el6 |
before 1:10.0.20-1.el6 | 1:10.0.20-1.el6 |
rh-mariadb100-mariadb-configRed Hat:rhel_software_collections:2::el6 |
before 1:10.0.20-1.el6 | 1:10.0.20-1.el6 |
rh-mariadb100-mariadb-debuginfoRed Hat:rhel_software_collections:2::el6 |
before 1:10.0.20-1.el6 | 1:10.0.20-1.el6 |
rh-mariadb100-mariadb-develRed Hat:rhel_software_collections:2::el6 |
before 1:10.0.20-1.el6 | 1:10.0.20-1.el6 |
rh-mariadb100-mariadb-errmsgRed Hat:rhel_software_collections:2::el6 |
before 1:10.0.20-1.el6 | 1:10.0.20-1.el6 |
rh-mariadb100-mariadb-oqgraph-engineRed Hat:rhel_software_collections:2::el6 |
before 1:10.0.20-1.el6 | 1:10.0.20-1.el6 |
rh-mariadb100-mariadb-serverRed Hat:rhel_software_collections:2::el6 |
before 1:10.0.20-1.el6 | 1:10.0.20-1.el6 |
rh-mariadb100-mariadb-testRed Hat:rhel_software_collections:2::el6 |
before 1:10.0.20-1.el6 | 1:10.0.20-1.el6 |
rh-mariadb100-mariadbRed Hat:rhel_software_collections:2::el7 |
before 1:10.0.20-1.el7 | 1:10.0.20-1.el7 |
rh-mariadb100-mariadb-benchRed Hat:rhel_software_collections:2::el7 |
before 1:10.0.20-1.el7 | 1:10.0.20-1.el7 |
rh-mariadb100-mariadb-commonRed Hat:rhel_software_collections:2::el7 |
before 1:10.0.20-1.el7 | 1:10.0.20-1.el7 |
rh-mariadb100-mariadb-configRed Hat:rhel_software_collections:2::el7 |
before 1:10.0.20-1.el7 | 1:10.0.20-1.el7 |
rh-mariadb100-mariadb-debuginfoRed Hat:rhel_software_collections:2::el7 |
before 1:10.0.20-1.el7 | 1:10.0.20-1.el7 |
rh-mariadb100-mariadb-develRed Hat:rhel_software_collections:2::el7 |
before 1:10.0.20-1.el7 | 1:10.0.20-1.el7 |
rh-mariadb100-mariadb-errmsgRed Hat:rhel_software_collections:2::el7 |
before 1:10.0.20-1.el7 | 1:10.0.20-1.el7 |
rh-mariadb100-mariadb-oqgraph-engineRed Hat:rhel_software_collections:2::el7 |
before 1:10.0.20-1.el7 | 1:10.0.20-1.el7 |
rh-mariadb100-mariadb-serverRed Hat:rhel_software_collections:2::el7 |
before 1:10.0.20-1.el7 | 1:10.0.20-1.el7 |
rh-mariadb100-mariadb-testRed Hat:rhel_software_collections:2::el7 |
before 1:10.0.20-1.el7 | 1:10.0.20-1.el7 |
mysqlSUSE:Linux Enterprise Software Development Kit 11 SP3 |
before 5.5.45-0.11.1 | 5.5.45-0.11.1 |
mysqlSUSE:Linux Enterprise Software Development Kit 11 SP4 |
before 5.5.45-0.11.1 | 5.5.45-0.11.1 |
mysqlSUSE:Linux Enterprise Desktop 11 SP3 |
before 5.5.45-0.11.1 | 5.5.45-0.11.1 |
mysqlSUSE:Linux Enterprise Desktop 11 SP4 |
before 5.5.45-0.11.1 | 5.5.45-0.11.1 |
mysqlSUSE:Linux Enterprise Server 11 SP3 |
before 5.5.45-0.11.1 | 5.5.45-0.11.1 |
mysqlSUSE:Linux Enterprise Server 11 SP3-TERADATA |
before 5.5.45-0.11.1 | 5.5.45-0.11.1 |
mysqlSUSE:Linux Enterprise Server for SAP Applications 11 SP3 |
before 5.5.45-0.11.1 | 5.5.45-0.11.1 |
mysqlSUSE:Linux Enterprise Server 11 SP4 |
before 5.5.45-0.11.1 | 5.5.45-0.11.1 |
mysqlSUSE:Linux Enterprise Server for SAP Applications 11 SP4 |
before 5.5.45-0.11.1 | 5.5.45-0.11.1 |
mariadb-5.5Ubuntu:14.04:LTS |
before 5.5.46-1ubuntu0.14.04.2, plus listed versions 5.5.32-1ubuntu15.5.35-1ubuntu15.5.36-15.5.37-0ubuntu0.14.04.15.5.39-0ubuntu0.14.04.1 Show 5 moreShow less5.5.40-0ubuntu0.14.04.15.5.41-0ubuntu0.14.04.25.5.41-1ubuntu0.14.04.15.5.43-1ubuntu0.14.04.25.5.44-1ubuntu0.14.04.1 |
5.5.46-1ubuntu0.14.04.2 |
mysql-5.6Ubuntu:14.04:LTS |
before 5.6.27-0ubuntu0.14.04.1, plus listed versions 5.6.15-0ubuntu15.6.15-1~exp25.6.16-1~exp15.6.17-0ubuntu0.14.04.15.6.19-0ubuntu0.14.04.1 |
5.6.27-0ubuntu0.14.04.1 |
mariadb-10.0Ubuntu:16.04:LTS |
before 10.0.22-0ubuntu1, plus listed versions 10.0.20-0ubuntu0.15.04.1 |
10.0.22-0ubuntu1 |
percona-server-5.6Ubuntu:16.04:LTS |
All versions, plus listed versions 5.6.22-rel71.0-0ubuntu25.6.22-rel71.0-0ubuntu45.6.22-rel71.0-0ubuntu4.1 |
None known |
mysql-5.5Ubuntu:14.04:LTS |
before 5.5.44-0ubuntu0.14.04.1, plus listed versions 5.5.32-0ubuntu75.5.34-0ubuntu15.5.34-0ubuntu25.5.35-0ubuntu15.5.35+dfsg-1ubuntu1 Show 5 moreShow less5.5.37-0ubuntu0.14.04.15.5.38-0ubuntu0.14.04.15.5.40-0ubuntu0.14.04.15.5.41-0ubuntu0.14.04.15.5.43-0ubuntu0.14.04.1 |
5.5.44-0ubuntu0.14.04.1 |
History
| Recorded | Changed | Sources |
|---|---|---|
| aliases | EUVD | |
| first indexed | CVE List, GitHub Advisories, NVD, OSV |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2015-4772 is a medium vulnerability (CVSS 4.0) in Oracle Mysql, published July 16, 2015. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 3.11%, the 87th percentile. Fixed in rh-mysql56-mysql 0:5.6.26-1.el6.
References
oracle.com/technetwork/topics/security/cpujul2015-2367936.html
securitytracker.com/id/1032911
rhn.redhat.com/errata/RHSA-2015-1646.html
lists.opensuse.org/opensuse-updates/2015-09/msg00042.html
ubuntu.com/usn/USN-2674-1
security.gentoo.org/glsa/201610-06
Show 194 moreShow less
securityfocus.com/bid/75781
nvd.nist.gov/vuln/detail/CVE-2015-4772
github.com/advisories/GHSA-fgrv-fgcx-mm52
access.redhat.com/errata/RHSA-2015:1630
dev.mysql.com/doc/relnotes/mysql/5.6/en/news-5-6-26.html
bugzilla.redhat.com/show_bug.cgi?id=1244768
security.access.redhat.com/data/csaf/v2/advisories/2015/rhsa-2015_1630.json
cve.org/CVERecord?id=CVE-2015-2582
mariadb.com/kb/en/mariadb/mariadb-10020-release-notes
ocert.org/advisories/ocert-2015-003.html
suse.com/support/update/announcement/2015/suse-su-20151788-1
bugzilla.suse.com/924663
ubuntu.com/security/CVE-2015-4772
This page doesn't list everything
Left out here: 87 references. The JSON record has them.