SA106 : MySQL Vulnerabilities October 2015
1341
04 May 2021
17 December 2015
CLOSED
High
CVSS v2: 7.2
SUMMARY
Blue Coat products using affected versions of MySQL 5.5 and 5.6 are susceptible to multiple vulnerabilities. An attacker can exploit these vulnerabilities to execute arbitrary code and gain unauthorized read, insert, update, or delete access to subsets of MySQL Server accessible data. The attacker can also cause denial of service through application crashes.
AFFECTED PRODUCTS
Malware Analysis Appliance | ||
---|---|---|
CVE | Affected Version(s) | Remediation |
CVE-2015-4792, CVE-2015-4800, CVE-2015-4802, CVE-2015-4815, CVE-2015-4816, CVE-2015-4819, CVE-2015-4826, CVE-2015-4830, CVE-2015-4836, CVE-2015-4858, CVE-2015-4861, CVE-2015-4864, CVE-2015-4870, CVE-2015-4879, CVE-2015-4913 |
4.2 | Upgrade to 4.2.8. |
ADDITIONAL PRODUCT INFORMATION
DLP
Please, contact Digital Guardian technical support regarding vulnerability information for DLP.
The following products are not vulnerable:
Advanced Secure Gateway
Android Mobile Agent
AuthConnector
BCAAA
Blue Coat HSM Agent for the Luna SP
CacheFlow
Client Connector
Cloud Data Protection for Salesforce
Cloud Data Protection for Salesforce Analytics
Cloud Data Protection for ServiceNow
Cloud Data Protection for Oracle CRM On Demand
Cloud Data Protection for Oracle Sales Cloud
Cloud Data Protection Integration Server
Cloud Data Protection Communication Server
Cloud Data Protection Policy Builder
Content Analysis System
Director
General Auth Connector Login Application
IntelligenceCenter
IntelligenceCenter Data Collector
K9
Mail Threat Defense
Management Center
Norman Shark Industrial Control System Protection
Norman Shark Network Protection
Norman Shark SCADA Protection
PacketShaper
PacketShaper S-Series
PolicyCenter
PolicyCenter S-Series
ProxyClient
ProxyAV
ProxyAV ConLog and ConLogXP
ProxySG
Reporter
Security Analytics
SSL Visibility
Unified Agent
X-Series XOS
ISSUES
CVE-2015-4730 | |
---|---|
Severity / CVSSv2 | Medium / 4.0 (AV:N/AC:L/Au:S/C:N/I:N/A:P) |
References | SecurityFocus: BID 77199 / NVD: CVE-2015-4730 |
Impact | Denial of service |
Description | A flaw in the Server: Types sub-component allows a remote authenticated attacker to cause the server application to hang or repeatedly crash, resulting in denial of service. |
CVE-2015-4766 | |
---|---|
Severity / CVSSv2 | Low / 1.9 (AV:L/AC:M/Au:N/C:N/I:N/A:P) |
References | SecurityFocus: BID 77232 / NVD: CVE-2015-4766 |
Impact | Denial of service |
Description | A flaw in the Server: Security: Firewall sub-component allows a local attacker to cause the server application to hang or repeatedly crash, resulting in denial of service. |
CVE-2015-4791 | |
---|---|
Severity / CVSSv2 | Low / 3.5 (AV:N/AC:M/Au:S/C:N/I:N/A:P) |
References | SecurityFocus: BID 77213 / NVD: CVE-2015-4791 |
Impact | Denial of service |
Description | A flaw in the Server: Security: Privileges sub-component allows a remote authenticated attacker to cause the server application to hang or repeatedly crash, resulting in denial of service. |
CVE-2015-4792 | |
---|---|
Severity / CVSSv2 | Low / 1.7 (AV:N/AC:H/Au:M/C:N/I:N/A:P) |
References | SecurityFocus: BID 77171 / NVD: CVE-2015-4792 |
Impact | Denial of service |
Description | A flaw in the Server: Partition sub-component allows a remote authenticated attacker to cause the server application to hang or repeatedly crash, resulting in denial of service. |
CVE-2015-4800 | |
---|---|
Severity / CVSSv2 | Medium / 4.0 (AV:N/AC:L/Au:S/C:N/I:N/A:P) |
References | SecurityFocus: BID 77216 / NVD: CVE-2015-4800 |
Impact | Denial of service |
Description | A flaw in the Server: Optimizer sub-component allows a remote authenticated attacker to cause the server application to hang or repeatedly crash, resulting in denial of service. |
CVE-2015-4802 | |
---|---|
Severity / CVSSv2 | Medium / 4.0 (AV:N/AC:L/Au:S/C:N/I:N/A:P) |
References | SecurityFocus: BID 77165 / NVD: CVE-2015-4802 |
Impact | Denial of service |
Description | A flaw in the Server: Partition sub-component allows a remote authenticated attacker to cause the server application to hang to repeatedly crash, resulting in denial of service. |
CVE-2015-4807 | |
---|---|
Severity / CVSSv2 | Low / 3.5 (AV:N/AC:M/Au:S/C:N/I:N/A:P) |
References | SecurityFocus: BID 77205 / NVD: CVE-2015-4807 |
Impact | Denial of service |
Description | A flaw in the Server: Query Cache sub-component allows a remote authenticated attacker to cause the server application to hang or repeatedly crash, resulting in denial of service. |
CVE-2015-4815 | |
---|---|
Severity / CVSSv2 | Medium / 4.0 (AV:N/AC:L/Au:S/C:N/I:N/A:P) |
References | SecurityFocus: BID 77222 / NVD: CVE-2015-4815 |
Impact | Denial of service |
Description | A flaw in the Server: DDL sub-component allows a remote authenticated attacker to cause the server application to hang or repeatedly crash, resulting in denial of service. |
CVE-2015-4816 | |
---|---|
Severity / CVSSv2 | Medium / 4.0 (AV:N/AC:L/Au:S/C:N/I:N/A:P) |
References | SecurityFocus: BID 77134 / NVD: CVE-2015-4816 |
Impact | Denial of service |
Description | A flaw in the Server: InnoDB sub-component allows a remote authenticated attacker to cause the server application to hang or repeatedly crash, resulting in denial of service. |
CVE-2015-4819 | |
---|---|
Severity / CVSSv2 | High / 7.2 (AV:L/AC:L/Au:N/C:C/I:C/A:C) |
References | SecurityFocus: BID 77196 / NVD: CVE-2015-4819 |
Impact | Code execution |
Description | A flaw in the Client programs sub-component allows a local attacker to execute arbitrary code. |
CVE-2015-4826 | |
---|---|
Severity / CVSSv2 | Medium / 4.0 (AV:N/AC:L/Au:S/C:P/I:N/A:N) |
References | SecurityFocus: BID 77237 / NVD: CVE-2015-4826 |
Impact | Information disclosure |
Description | A flaw in the Server: Types sub-component allows a remote authenticated attacker to gain unauthorized read access to a subset of data. |
CVE-2015-4830 | |
---|---|
Severity / CVSSv2 | Medium / 4.0 (AV:N/AC:L/Au:S/C:N/I:P/A:N) |
References | SecurityFocus: BID 77228 / NVD: CVE-2015-4830 |
Impact | Unauthorized modification of data |
Description | A flaw in the Server: Security: Privileges sub-component allows a remote authenticated attacker to gain unauthorized update, insert, or delete access to a subset of data. |
CVE-2015-4833 | |
---|---|
Severity / CVSSv2 | Medium / 4.0 (AV:N/AC:L/Au:S/C:N/I:N/A:P) |
References | SecurityFocus: BID 77170 / NVD: CVE-2015-4833 |
Impact | Denial of service |
Description | A flaw in the Server: Partition sub-component allows a remote authenticated attacker to cause the server application to hang to repeatedly crash, resulting in denial of service. |
CVE-2015-4836 | |
---|---|
Severity / CVSSv2 | Low / 2.8 (AV:N/AC:M/Au:M/C:N/I:N/A:P) |
References | SecurityFocus: BID 77190 / NVD: CVE-2015-4836 |
Impact | Denial of service |
Description | A flaw in the Server: SP sub-component allows a remote authenticated attacker to cause the server application to hang or repeatedly crash, resulting in denial of service. |
CVE-2015-4858 | |
---|---|
Severity / CVSSv2 | Medium / 4.0 (AV:N/AC:L/Au:S/C:N/I:N/A:P) |
References | SecurityFocus: BID 77145 / NVD: CVE-2015-4858 |
Impact | Denial of service |
Description | A flaw in the Server: DML sub-component allows a remote authenticated attacker to cause the server application to hang or repeatedly crash, resulting in denial of service. |
CVE-2015-4861 | |
---|---|
Severity / CVSSv2 | Low / 3.5 (AV:N/AC:M/Au:S/C:N/I:N/A:P) |
References | SecurityFocus: BID 77137 / NVD: CVE-2015-4861 |
Impact | Denial of service |
Description | A flaw in the Server: InnoDB sub-component allows a remote authenticated attacker to cause the server application to hang or repeatedly crash, resulting in denial of service. |
CVE-2015-4862 | |
---|---|
Severity / CVSSv2 | Medium / 4.0 (AV:N/AC:L/Au:S/C:N/I:N/A:P) |
References | SecurityFocus: BID 77147 / NVD: CVE-2015-4862 |
Impact | Denial of service |
Description | A flaw in the Server: DML sub-component allows a remote authenticated attacker to cause the server application to hang or repeatedly crash, resulting in denial of service. |
CVE-2015-4864 | |
---|---|
Severity / CVSSv2 | Low / 3.5 (AV:N/AC:M/Au:S/C:N/I:P/A:N) |
References | SecurityFocus: BID 77187 / NVD: CVE-2015-4864 |
Impact | Unauthorized modification of data |
Description | A flaw in the Server: Security:Privileges sub-component allows a remote authenticated attacker to gain unauthorized update, insert, or delete access to a subset of data. |
CVE-2015-4866 | |
---|---|
Severity / CVSSv2 | Medium / 4.0 (AV:N/AC:L/Au:S/C:N/I:N/A:P) |
References | SecurityFocus: BID 77132 / NVD: CVE-2015-4866 |
Impact | Denial of service |
Description | A flaw in the Server: InnoDB sub-component allows a remote authenticated attacker to cause the server to hang or repeatedly crash, resulting in denial of service. |
CVE-2015-4870 | |
---|---|
Severity / CVSSv2 | Medium / 4.0 (AV:N/AC:L/Au:S/C:N/I:N/A:P) |
References | SecurityFocus: BID 77208 / NVD: CVE-2015-4870 |
Impact | Denial of service |
Description | A flaw in the Server: Parser sub-component allows a remote authenticated attacker to cause the server application to hang or repeatedly crash, resulting in denial of service. |
CVE-2015-4879 | |
---|---|
Severity / CVSSv2 | Medium / 4.6 (AV:N/AC:H/Au:S/C:P/I:P/A:P) |
References | SecurityFocus: BID 77140 / NVD: CVE-2015-4879 |
Impact | Code execution |
Description | A flaw in the Server: DML sub-component allows a remote authenticated attacker to take over MySQL Server and possibly execute arbitrary code. |
CVE-2015-4890 | |
---|---|
Severity / CVSSv2 | Low / 3.5 (AV:N/AC:M/Au:S/C:N/I:N/A:P) |
References | SecurityFocus: BID 77231 / NVD: CVE-2015-4890 |
Impact | Denial of service |
Description | A flaw in the Server: Replication sub-component allows a remote authenticated attacker to cause the server application to hang or repeatedly crash, resulting in denial of service. |
CVE-2015-4895 | |
---|---|
Severity / CVSSv2 | Low / 3.5 (AV:N/AC:M/Au:S/C:N/I:N/A:P) |
References | SecurityFocus: BID 77136 / NVD: CVE-2015-4895 |
Impact | Denial of service |
Description | A flaw in the Server: InnoDB sub-component allows a remote authenticated attacker to cause the server application to hang or repeatedly crash, resulting in denial of service. |
CVE-2015-4904 | |
---|---|
Severity / CVSSv2 | Medium / 4.0 (AV:N/AC:L/Au:S/C:N/I:N/A:P) |
References | SecurityFocus: BID 77219 / NVD: CVE-2015-4904 |
Impact | Denial of service |
Description | A flaw in the libmysqld sub-component allows a remote authenticated attacker to cause the server application to hang or repeatedly crash, resulting in denial of service. |
CVE-2015-4905 | |
---|---|
Severity / CVSSv2 | Medium / 4.0 (AV:N/AC:L/Au:S/C:N/I:N/A:P) |
References | SecurityFocus: BID 77143 / NVD: CVE-2015-4905 |
Impact | Denial of service |
Description | A flaw in the Server: DML sub-component allows a remote authenticated attacker to cause the server application to hang or repeatedly crash, resulting in denial of service. |
CVE-2015-4910 | |
---|---|
Severity / CVSSv2 | Low / 2.1 (AV:N/AC:H/Au:S/C:N/I:N/A:P) |
References | SecurityFocus: BID 77234 / NVD: CVE-2015-4910 |
Impact | Denial of service |
Description | A flaw in the Server: Memcached sub-component allows a remote authenticated attacker to cause the server application to hang or repeatedly crash, resulting in denial of service. |
CVE-2015-4913 | |
---|---|
Severity / CVSSv2 | Low / 3.5 (AV:N/AC:M/Au:S/C:N/I:N/A:P) |
References | SecurityFocus: BID 77153 / NVD: CVE-2015-4913 |
Impact | Denial of service |
Description | A flaw in the Server: DML sub-component allows a remote authenticated attacker to cause the server application to hang or repeatedly crash, resulting in denial of service. |
REFERENCES
Oracle Critical Patch Update Advisory (October 2015) - https://www.oracle.com/technetwork/topics/security/cpuoct2015-2367953.html#AppendixMSQL
REVISION
2016-11-01 Vulnerability inquiries for DLP should be addressed to Digital Guardian technical support. SA status moved to Final.
2016-06-11 PolicyCenter S-Series is not vulnerable.
2016-05-11 No Cloud Data Protection products are vulnerable.
2016-04-24 Mail Threat Defense is not vulnerable.
2016-03-10 A fix for MAA 4.2 is available in 4.2.8. It was previously reported that MAA 4.2 is vulnerable to CVE-2015-4730, CVE-2015-4766, CVE-2015-4791, CVE-2015-4807, CVE-2015-4833, CVE-2015-4862, CVE-2015-4866, CVE-2015-4890, CVE-2015-4895, CVE-2015-4904, CVE-2015-4905, and CVE-2015-4910. Further investigation has shown that MAA 4.2 is not vulnerable to those CVEs.
2015-12-17 initial public release