Bug 1244778 – CVE-2015-4737 mysql: unspecified vulnerability related to Server:Pluggable Auth (CPU July 2015)

Bugzilla will be upgraded to version 5.0. The upgrade date is tentatively scheduled for 2 December 2018, pending final testing and feedback.

Bug 1244778 - (CVE-2015-4737) CVE-2015-4737 mysql: unspecified vulnerability related to Server:Pluggable Auth (CPU July 2015)

Summary:	CVE-2015-4737 mysql: unspecified vulnerability related to Server:Pluggable Au...

Status:	NEW

Aliases:	CVE-2015-4737

Product:	Security Response
Classification:	Other
Component:	vulnerability (Show other bugs)
Sub Component:
Version:	unspecified
Hardware:	All Linux

Priority	low Severity low
Target Milestone:	---
Target Release:	---
Assigned To:	Red Hat Product Security
QA Contact:
Docs Contact:

URL:
Whiteboard:	impact=low,public=20150714,reported=2...
Keywords:	Security

Depends On:	1247020 1247021 1247022 1247023 1247024 1247025 1247026 1247027 1247028 1247029 1247030
Blocks:	1244788
	Show dependency tree / graph

Reported:	2015-07-20 09:02 EDT by Martin Prpič
Modified:	2018-04-06 07:53 EDT (History)
CC List:	28 users (show)

See Also:
Fixed In Version:	mysql 5.5.44, mysql 5.6.24
Doc Type:	Bug Fix
Doc Text:
Story Points:	---
Clone Of:
Environment:
Last Closed:
Type:	---
Regression:	---
Mount Type:	---
Documentation:	---
CRM:
Verified Versions:
Category:	---
oVirt Team:	---
RHEL 7.3 requirements from Atomic Host:
Cloudforms Team:	---

Attachments	(Terms of Use)
Add an attachment (proposed patch, testcase, etc.)

External Trackers
Tracker	ID	Priority	Status	Summary	Last Updated
Red Hat Product Errata	RHSA-2015:1628	normal	SHIPPED_LIVE	Moderate: mysql55-mysql security update	2015-08-17 05:44:14 EDT
Red Hat Product Errata	RHSA-2015:1629	normal	SHIPPED_LIVE	Moderate: mysql55-mysql security update	2015-08-17 06:05:22 EDT
Red Hat Product Errata	RHSA-2015:1630	normal	SHIPPED_LIVE	Important: rh-mysql56-mysql security update	2015-08-17 06:29:05 EDT
Red Hat Product Errata	RHSA-2015:1646	normal	SHIPPED_LIVE	Important: rh-mariadb100-mariadb security update	2015-08-20 08:48:37 EDT
Red Hat Product Errata	RHSA-2015:1647	normal	SHIPPED_LIVE	Moderate: mariadb55-mariadb security update	2015-08-20 09:17:49 EDT
Red Hat Product Errata	RHSA-2015:1665	normal	SHIPPED_LIVE	Moderate: mariadb security update	2015-08-24 18:43:12 EDT

Groups: None (edit)

Description Martin Prpič 2015-07-20 09:02:38 EDT

Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server : Pluggable Auth). Supported versions that are affected are 5.5.43 and earlier and 5.6.23 and earlier. Difficult to exploit vulnerability allows successful authenticated network attacks via multiple protocols. Successful attack of this vulnerability can result in unauthorized read access to a subset of MySQL Server accessible data.

External References:

http://www.oracle.com/technetwork/topics/security/cpujul2015-2367936.html#AppendixMSQL
http://www.oracle.com/technetwork/topics/security/cpujul2015verbose-2367947.html#MSQL

Comment 6 errata-xmlrpc 2015-08-17 01:45:57 EDT

This issue has been addressed in the following products:

  Red Hat Enterprise Linux 5

Via RHSA-2015:1628 https://rhn.redhat.com/errata/RHSA-2015-1628.html

Comment 7 errata-xmlrpc 2015-08-17 02:06:29 EDT

This issue has been addressed in the following products:

  Red Hat Software Collections for Red Hat Enterprise Linux 7.1 EUS
  Red Hat Software Collections for Red Hat Enterprise Linux 7
  Red Hat Software Collections for Red Hat Enterprise Linux 6
  Red Hat Software Collections for Red Hat Enterprise Linux 6.6 EUS
  Red Hat Software Collections for Red Hat Enterprise Linux 6.5 EUS

Via RHSA-2015:1629 https://rhn.redhat.com/errata/RHSA-2015-1629.html

Comment 8 errata-xmlrpc 2015-08-17 02:29:56 EDT

This issue has been addressed in the following products:

  Red Hat Software Collections for Red Hat Enterprise Linux 7.1 EUS
  Red Hat Software Collections for Red Hat Enterprise Linux 7
  Red Hat Software Collections for Red Hat Enterprise Linux 6
  Red Hat Software Collections for Red Hat Enterprise Linux 6.6 EUS
  Red Hat Software Collections for Red Hat Enterprise Linux 6.5 EUS

Via RHSA-2015:1630 https://rhn.redhat.com/errata/RHSA-2015-1630.html

Comment 9 errata-xmlrpc 2015-08-20 04:49:32 EDT

This issue has been addressed in the following products:

  Red Hat Software Collections for Red Hat Enterprise Linux 7.1 EUS
  Red Hat Software Collections for Red Hat Enterprise Linux 7
  Red Hat Software Collections for Red Hat Enterprise Linux 6
  Red Hat Software Collections for Red Hat Enterprise Linux 6.6 EUS
  Red Hat Software Collections for Red Hat Enterprise Linux 6.5 EUS

Via RHSA-2015:1646 https://rhn.redhat.com/errata/RHSA-2015-1646.html

Comment 10 errata-xmlrpc 2015-08-20 05:18:53 EDT

This issue has been addressed in the following products:

  Red Hat Software Collections for Red Hat Enterprise Linux 7.1 EUS
  Red Hat Software Collections for Red Hat Enterprise Linux 7
  Red Hat Software Collections for Red Hat Enterprise Linux 6
  Red Hat Software Collections for Red Hat Enterprise Linux 6.6 EUS
  Red Hat Software Collections for Red Hat Enterprise Linux 6.5 EUS

Via RHSA-2015:1647 https://rhn.redhat.com/errata/RHSA-2015-1647.html

Comment 11 errata-xmlrpc 2015-08-24 14:44:17 EDT

This issue has been addressed in the following products:

  Red Hat Enterprise Linux 7

Via RHSA-2015:1665 https://rhn.redhat.com/errata/RHSA-2015-1665.html

Note You need to log in before you can comment on or make changes to this bug.

abaron
apevec
ayoung
byte
chrisw
dallan
databases-maint
dciabrin
gkotton
hhorak
jjoyce
jorton
jschluet
jstanek
kbasil
lhh
lpeer
markmc
mbayer
mburns
mmaslano
mmuzila
rbryant
rohara
sclewis
slinaber
srevivo
tdecacqu