{"id":"CVE-2015-4905","aliases":["EUVD-2015-4922","GHSA-68qm-jv3w-qjc5","SUSE-SU-2015:2303-1","UBUNTU-CVE-2015-4905","openSUSE-SU-2024:10200-1"],"status":"published","title":"Unspecified vulnerability in Oracle MySQL Server 5.6.23 and earlier allows remote authenticated...","description":"Unspecified vulnerability in Oracle MySQL Server 5.6.23 and earlier allows remote authenticated users to affect availability via vectors related to Server : DML.","severity":{"version":"2.0","score":4,"vector":"AV:N/AC:L/Au:S/C:N/I:N/A:P","level":"medium","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-07","score":0.02238,"percentile":0.82916,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":true},"published":"2015-10-21T23:00:00Z","modified":"2026-06-17T00:28:09Z","fixes":[{"ecosystem":"Ubuntu:14.04:LTS","package":"mariadb-5.5","fixed_in":["5.5.46-1ubuntu0.14.04.2"],"sources":["osv"]},{"ecosystem":"Ubuntu:14.04:LTS","package":"mysql-5.6","fixed_in":["5.6.27-0ubuntu0.14.04.1"],"sources":["osv"]},{"ecosystem":"Ubuntu:16.04:LTS","package":"mariadb-10.0","fixed_in":["10.0.22-0ubuntu1"],"sources":["osv"]},{"ecosystem":"Ubuntu:16.04:LTS","package":"percona-xtradb-cluster-5.6","fixed_in":["5.6.34-26.19-0ubuntu0.16.04.1"],"sources":["osv"]}],"affected":[{"source":"osv","ecosystem":"SUSE:Linux Enterprise Software Development Kit 11 SP3","package":"mysql","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.5.46-0.14.1"}]}],"bundled":29},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Software Development Kit 11 SP4","package":"mysql","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.5.46-0.14.1"}]}],"bundled":29},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Desktop 11 SP3","package":"mysql","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.5.46-0.14.1"}]}],"bundled":29},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Desktop 11 SP4","package":"mysql","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.5.46-0.14.1"}]}],"bundled":29},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 11 SP3","package":"mysql","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.5.46-0.14.1"}]}],"bundled":29},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 11 SP3-TERADATA","package":"mysql","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.5.46-0.14.1"}]}],"bundled":29},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 11 SP3","package":"mysql","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.5.46-0.14.1"}]}],"bundled":29},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 11 SP4","package":"mysql","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.5.46-0.14.1"}]}],"bundled":29},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 11 SP4","package":"mysql","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.5.46-0.14.1"}]}],"bundled":29},{"source":"osv","ecosystem":"Ubuntu:14.04:LTS","package":"mariadb-5.5","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.5.46-1ubuntu0.14.04.2"}]}],"versions":["5.5.32-1ubuntu1","5.5.35-1ubuntu1","5.5.36-1","5.5.37-0ubuntu0.14.04.1","5.5.39-0ubuntu0.14.04.1","5.5.40-0ubuntu0.14.04.1","5.5.41-0ubuntu0.14.04.2","5.5.41-1ubuntu0.14.04.1","5.5.43-1ubuntu0.14.04.2","5.5.44-1ubuntu0.14.04.1"]},{"source":"osv","ecosystem":"Ubuntu:14.04:LTS","package":"mysql-5.6","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.6.27-0ubuntu0.14.04.1"}]}],"versions":["5.6.15-0ubuntu1","5.6.15-1~exp2","5.6.16-1~exp1","5.6.17-0ubuntu0.14.04.1","5.6.19-0ubuntu0.14.04.1"]},{"source":"osv","ecosystem":"Ubuntu:16.04:LTS","package":"mariadb-10.0","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"10.0.22-0ubuntu1"}]}],"versions":["10.0.20-0ubuntu0.15.04.1"]},{"source":"osv","ecosystem":"Ubuntu:16.04:LTS","package":"percona-xtradb-cluster-5.6","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.6.34-26.19-0ubuntu0.16.04.1"}]}],"versions":["5.6.21-25.8-0ubuntu2","5.6.21-25.8-0ubuntu3","5.6.21-25.8-0ubuntu3.1","5.6.21-25.8-0ubuntu3.2"]},{"source":"osv","ecosystem":"Ubuntu:16.04:LTS","package":"percona-server-5.6","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["5.6.22-rel71.0-0ubuntu2","5.6.22-rel71.0-0ubuntu4","5.6.22-rel71.0-0ubuntu4.1"]}],"products":[{"vendor":"oracle","product":"mysql"}],"references":[{"url":"http://www.securitytracker.com/id/1033894","tags":["vdb-entry","x_refsource_SECTRACK","x_transferred"]},{"url":"http://www.securityfocus.com/bid/77143","tags":["vdb-entry","x_refsource_BID","x_transferred"]},{"url":"http://www.oracle.com/technetwork/topics/security/cpuoct2015-2367953.html","tags":["x_refsource_CONFIRM","x_transferred","Vendor Advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2015-4905"},{"url":"https://github.com/advisories/GHSA-68qm-jv3w-qjc5"},{"url":"https://www.suse.com/support/update/announcement/2015/suse-su-20152303-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/951391","tags":["report"]},{"url":"https://bugzilla.suse.com/952196","tags":["report"]},{"url":"https://www.suse.com/security/cve/CVE-2015-0286","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-0288","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-1789","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-1793","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-4730","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-4766","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-4792","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-4800","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-4802","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-4815","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-4816","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-4819","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-4826","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-4830","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-4833","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-4836","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-4858","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-4861","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-4862","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-4864","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-4866","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-4870","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-4879","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-4890","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-4895","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-4904","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-4905","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-4910","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-4913","tags":["web"]},{"url":"https://ubuntu.com/security/CVE-2015-4905","tags":["report"]},{"url":"http://www.oracle.com/technetwork/topics/security/cpuoct2015-2367953.html#AppendixMSQL","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2015-4905","tags":["report"]},{"url":"","tags":["advisory"]},{"url":"https://www.suse.com/security/cve/CVE-2007-5970","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2008-7247","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2009-4019","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2009-4028","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2009-4030","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2013-1976","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-2582","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-2611","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-2617","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-2620","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-2639","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-2641","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-2643","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-2648","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-2661","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-3152","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-3194","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-4737","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-4752","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-4756","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-4757","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-4761","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-4767","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-4769","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-4771","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-4772","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-5969","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-7744","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-0502","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-0503","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-0504","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-0505","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-0546","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-0594","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-0595","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-0596","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-0597","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-0598","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-0600","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-0605","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-0606","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-0607","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-0608","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-0609","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-0610","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-0611","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-0639","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-0640","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-0641","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-0642","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-0643","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-0644","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-0646","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-0647","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-0648","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-0649","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-0650","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-0655","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-0661","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-0665","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-0666","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-0668","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-0705","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-2047","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-2105","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-3459","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-3477","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-3486","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-3492","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-3501","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-3521","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-3614","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-3615","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-5439","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-5440","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-5507","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-5584","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-5609","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-5612","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-5616","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-5617","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-5626","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-5627","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-5629","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-5630","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-6304","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-6662","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-7440","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-8283","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-8284","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-8288","tags":["web"]}],"sources":{"cve":[{"id":"CVE-2015-4905","description":"Unspecified vulnerability in Oracle MySQL Server 5.6.23 and earlier allows remote authenticated users to affect availability via vectors related to Server : DML.","status":"published","published":"2015-10-21T23:00:00Z","modified":"2024-08-06T06:25:22.106Z","updated_at":"2026-11-02T14:35:43.322279Z"}],"euvd":[{"id":"EUVD-2015-4922","description":"Unspecified vulnerability in Oracle MySQL Server 5.6.23 and earlier allows remote authenticated users to affect availability via vectors related to Server : DML.","status":"published","published":"2015-10-21T23:00:00Z","modified":"2024-08-06T06:25:22Z","updated_at":"2026-11-03T02:22:02.164917Z"}],"ghsa":[{"id":"GHSA-68qm-jv3w-qjc5","title":"Unspecified vulnerability in Oracle MySQL Server 5.6.23 and earlier allows remote authenticated...","description":"Unspecified vulnerability in Oracle MySQL Server 5.6.23 and earlier allows remote authenticated users to affect availability via vectors related to Server : DML.","status":"published","published":"2022-05-17T03:16:38Z","modified":"2023-01-27T05:01:56Z","updated_at":"2026-11-02T14:41:59.85242Z"}],"nvd":[{"id":"CVE-2015-4905","description":"Unspecified vulnerability in Oracle MySQL Server 5.6.23 and earlier allows remote authenticated users to affect availability via vectors related to Server : DML.","status":"published","published":"2015-10-22T00:00:07.377Z","modified":"2026-06-17T00:28:09.39Z","cvss":[{"version":"2.0","score":4,"vector":"AV:N/AC:L/Au:S/C:N/I:N/A:P","level":"medium","assessor":"primary"}],"updated_at":"2026-11-02T14:03:10.919251Z"}],"osv":[{"id":"openSUSE-SU-2024:10200-1","title":"libmysql56client18-32bit-5.6.34-1.1 on GA media","description":"These are all security issues fixed in the libmysql56client18-32bit-5.6.34-1.1 package on the GA media of openSUSE Tumbleweed.","status":"published","published":"2024-06-15T00:00:00Z","modified":"2026-02-04T04:16:49.073812Z","updated_at":"2026-11-02T16:58:33.135986Z"},{"id":"SUSE-SU-2015:2303-1","title":"Security update for mysql","description":"The mysql package was updated to version 5.5.46 to fixs several security and non security issues.\n\n- bnc#951391: update to version 5.5.46\n  * changes:\n    http://dev.mysql.com/doc/relnotes/mysql/5.5/en/news-5-5-46.html\n  * fixed CVEs:\n    CVE-2015-1793, CVE-2015-0286, CVE-2015-0288, CVE-2015-1789,\n    CVE-2015-4730, CVE-2015-4766, CVE-2015-4792, CVE-2015-4800,\n    CVE-2015-4802, CVE-2015-4815, CVE-2015-4816, CVE-2015-4819,\n    CVE-2015-4826, CVE-2015-4830, CVE-2015-4833, CVE-2015-4836,\n    CVE-2015-4858, CVE-2015-4861, CVE-2015-4862, CVE-2015-4864,\n    CVE-2015-4866, CVE-2015-4870, CVE-2015-4879, CVE-2015-4890,\n    CVE-2015-4895, CVE-2015-4904, CVE-2015-4905, CVE-2015-4910,\n    CVE-2015-4913\n- bnc#952196: Fixed a build error for ppc*, s390* and ia64 architectures.\n","status":"published","published":"2015-12-18T15:47:51Z","modified":"2026-02-04T03:30:41.47948Z","updated_at":"2026-11-02T15:53:43.030986Z"},{"id":"UBUNTU-CVE-2015-4905","description":"Unspecified vulnerability in Oracle MySQL Server 5.6.23 and earlier allows remote authenticated users to affect availability via vectors related to Server : DML.","status":"published","published":"2015-10-22T00:00:00Z","modified":"2026-04-22T10:12:59.132734Z","updated_at":"2026-11-02T15:54:10.385269Z"}]}}