UBUNTU-CVE-2015-4737

Details

Unspecified vulnerability in Oracle MySQL Server 5.5.43 and earlier, and 5.6.23 and earlier, allows remote authenticated users to affect confidentiality via unknown vectors related to Server : Pluggable Auth.

Affected Packages

mariadb-5.5

Ubuntu 14.04 LTS

Fixed in:

5.5.46-1ubuntu0.14.04.2

mysql-5.5

Ubuntu 14.04 LTS

Fixed in:

5.5.44-0ubuntu0.14.04.1

mysql-5.6

Ubuntu 14.04 LTS

Fixed in:

5.6.27-0ubuntu0.14.04.1

mariadb-10.0

Ubuntu 16.04 LTS

Fixed in:

10.0.22-0ubuntu1

percona-server-5.6

Ubuntu 16.04 LTS

Affected versions:

5.6.22-rel71.0-0ubuntu25.6.22-rel71.0-0ubuntu45.6.22-rel71.0-0ubuntu4.1

References

REPORT

http://www.oracle.com/technetwork/topics/security/cpujul2015-2367936.html

REPORT

https://ubuntu.com/security/CVE-2015-4737

ADVISORY

https://ubuntu.com/security/notices/USN-2674-1

REPORT

https://www.cve.org/CVERecord?id=CVE-2015-4737