CVE catalog
CVE-2015-4792
Security update for mariadb
- Severity
- Unknown
- Published
- Updated
- Source
- [NVD] · [CVE record]
- EPSS
- 3.86% · Oct 25, 2026
Multiple security issues were discovered in MySQL and this update includes new upstream MySQL versions to fix these issues. MySQL has been updated to 5.5.46 in Ubuntu 12.04 LTS and Ubuntu 14.04 LTS. Ubuntu 15.04 and Ubuntu 15.10 have been updated to MySQL 5.6.27. In addition to security fixes, the updated packages contain bug fixes, new features, and possibly incompatible changes. Please see the following for more information: http://dev.mysql.com/doc/relnotes/mysql/5.5/en/news-5-5-45.html http://dev.mysql.com/doc/relnotes/mysql/5.5/en/news-5-5-46.html http://dev.mysql.com/doc/relnotes/mysql/5.6/en/news-5-6-26.html http://dev.mysql.com/doc/relnotes/mysql/5.6/en/news-5-6-27.html http://www.oracle.com/technetwork/topics/security/cpuoct2015-2367953.html
Vulnerable and fixed packages
Distribution-reported package versions and fixes. These do not depend on matching against the OpenFactory package catalog.
| Distribution | Package | Release | Version | Status |
|---|---|---|---|---|
| Ubuntu | mysql-5.5 | 14.04 | 5.5.32-0ubuntu7 | vulnerable |
| Ubuntu | mysql-5.5 | 14.04 | 5.5.34-0ubuntu1 | vulnerable |
| Ubuntu | mysql-5.5 | 14.04 | 5.5.34-0ubuntu2 | vulnerable |
| Ubuntu | mysql-5.5 | 14.04 | 5.5.35-0ubuntu1 | vulnerable |
| Ubuntu | mysql-5.5 | 14.04 | 5.5.35+dfsg-1ubuntu1 | vulnerable |
| Ubuntu | mysql-5.5 | 14.04 | 5.5.37-0ubuntu0.14.04.1 | vulnerable |
| Ubuntu | mysql-5.5 | 14.04 | 5.5.38-0ubuntu0.14.04.1 | vulnerable |
| Ubuntu | mysql-5.5 | 14.04 | 5.5.40-0ubuntu0.14.04.1 | vulnerable |
| Ubuntu | mysql-5.5 | 14.04 | 5.5.41-0ubuntu0.14.04.1 | vulnerable |
| Ubuntu | mysql-5.5 | 14.04 | 5.5.43-0ubuntu0.14.04.1 | vulnerable |
| Ubuntu | mysql-5.5 | 14.04 | 5.5.44-0ubuntu0.14.04.1 | vulnerable |
| Ubuntu | mysql-5.5 | 14.04 | 5.5.46-0ubuntu0.14.04.2 | fixed |
| Ubuntu | mariadb-5.5 | 14.04 | 5.5.32-1ubuntu1 | vulnerable |
| Ubuntu | mariadb-5.5 | 14.04 | 5.5.35-1ubuntu1 | vulnerable |
| Ubuntu | mariadb-5.5 | 14.04 | 5.5.36-1 | vulnerable |
| Ubuntu | mariadb-5.5 | 14.04 | 5.5.37-0ubuntu0.14.04.1 | vulnerable |
| Ubuntu | mariadb-5.5 | 14.04 | 5.5.39-0ubuntu0.14.04.1 | vulnerable |
| Ubuntu | mariadb-5.5 | 14.04 | 5.5.40-0ubuntu0.14.04.1 | vulnerable |
| Ubuntu | mariadb-5.5 | 14.04 | 5.5.41-0ubuntu0.14.04.2 | vulnerable |
| Ubuntu | mariadb-5.5 | 14.04 | 5.5.41-1ubuntu0.14.04.1 | vulnerable |
| Ubuntu | mariadb-5.5 | 14.04 | 5.5.43-1ubuntu0.14.04.2 | vulnerable |
| Ubuntu | mariadb-5.5 | 14.04 | 5.5.44-1ubuntu0.14.04.1 | vulnerable |
| Ubuntu | mariadb-5.5 | 14.04 | 5.5.46-1ubuntu0.14.04.2 | fixed |
| Ubuntu | mysql-5.5 | 14.04 | 5.5.32-0ubuntu7 | vulnerable |
| Ubuntu | mysql-5.5 | 14.04 | 5.5.34-0ubuntu1 | vulnerable |
| Ubuntu | mysql-5.5 | 14.04 | 5.5.34-0ubuntu2 | vulnerable |
| Ubuntu | mysql-5.5 | 14.04 | 5.5.35-0ubuntu1 | vulnerable |
| Ubuntu | mysql-5.5 | 14.04 | 5.5.35+dfsg-1ubuntu1 | vulnerable |
| Ubuntu | mysql-5.5 | 14.04 | 5.5.37-0ubuntu0.14.04.1 | vulnerable |
| Ubuntu | mysql-5.5 | 14.04 | 5.5.38-0ubuntu0.14.04.1 | vulnerable |
| Ubuntu | mysql-5.5 | 14.04 | 5.5.40-0ubuntu0.14.04.1 | vulnerable |
| Ubuntu | mysql-5.5 | 14.04 | 5.5.41-0ubuntu0.14.04.1 | vulnerable |
| Ubuntu | mysql-5.5 | 14.04 | 5.5.43-0ubuntu0.14.04.1 | vulnerable |
| Ubuntu | mysql-5.5 | 14.04 | 5.5.44-0ubuntu0.14.04.1 | vulnerable |
| Ubuntu | mysql-5.5 | 14.04 | 5.5.46-0ubuntu0.14.04.2 | fixed |
| Ubuntu | mysql-5.6 | 14.04 | 5.6.15-0ubuntu1 | vulnerable |
| Ubuntu | mysql-5.6 | 14.04 | 5.6.15-1~exp2 | vulnerable |
| Ubuntu | mysql-5.6 | 14.04 | 5.6.16-1~exp1 | vulnerable |
| Ubuntu | mysql-5.6 | 14.04 | 5.6.17-0ubuntu0.14.04.1 | vulnerable |
| Ubuntu | mysql-5.6 | 14.04 | 5.6.19-0ubuntu0.14.04.1 | vulnerable |
| Ubuntu | mysql-5.6 | 14.04 | 5.6.27-0ubuntu0.14.04.1 | fixed |
| Ubuntu | mariadb-10.0 | 16.04 | 10.0.20-0ubuntu0.15.04.1 | vulnerable |
| Ubuntu | mariadb-10.0 | 16.04 | 10.0.22-0ubuntu1 | fixed |
| Ubuntu | percona-xtradb-cluster-5.6 | 16.04 | 5.6.21-25.8-0ubuntu2 | vulnerable |
| Ubuntu | percona-xtradb-cluster-5.6 | 16.04 | 5.6.21-25.8-0ubuntu3 | vulnerable |
| Ubuntu | percona-xtradb-cluster-5.6 | 16.04 | 5.6.21-25.8-0ubuntu3.1 | vulnerable |
| Ubuntu | percona-xtradb-cluster-5.6 | 16.04 | 5.6.21-25.8-0ubuntu3.2 | vulnerable |
| Ubuntu | percona-xtradb-cluster-5.6 | 16.04 | 5.6.34-26.19-0ubuntu0.16.04.1 | fixed |
| Ubuntu | percona-server-5.6 | 16.04 | 5.6.22-rel71.0-0ubuntu2 | vulnerable |
| Ubuntu | percona-server-5.6 | 16.04 | 5.6.22-rel71.0-0ubuntu4 | vulnerable |
| Ubuntu | percona-server-5.6 | 16.04 | 5.6.22-rel71.0-0ubuntu4.1 | vulnerable |
| Debian | mariadb-10.0 | 8 | 10.0.16-1 | vulnerable |
| Debian | mariadb-10.0 | 8 | 10.0.17-1 | vulnerable |
| Debian | mariadb-10.0 | 8 | 10.0.17-1~exp1 | vulnerable |
| Debian | mariadb-10.0 | 8 | 10.0.17-1~exp2 | vulnerable |
| Debian | mariadb-10.0 | 8 | 10.0.18-1~exp1 | vulnerable |
| Debian | mariadb-10.0 | 8 | 10.0.19-1 | vulnerable |
| Debian | mariadb-10.0 | 8 | 10.0.20-0+deb8u1 | vulnerable |
| Debian | mariadb-10.0 | 8 | 10.0.20-1 | vulnerable |
| Debian | mariadb-10.0 | 8 | 10.0.20-2 | vulnerable |
| Debian | mariadb-10.0 | 8 | 10.0.20-3 | vulnerable |
| Debian | mariadb-10.0 | 8 | 10.0.21-1 | vulnerable |
| Debian | mariadb-10.0 | 8 | 10.0.21-2 | vulnerable |
| Debian | mariadb-10.0 | 8 | 10.0.21-3 | vulnerable |
| Debian | mariadb-10.0 | 8 | 10.0.22-0+deb8u1 | fixed |
| Debian | mysql-5.5 | 7 | 5.5.30+dfsg-1.1 | vulnerable |
| Debian | mysql-5.5 | 7 | 5.5.31+dfsg-0+wheezy1 | vulnerable |
| Debian | mysql-5.5 | 7 | 5.5.31+dfsg-1 | vulnerable |
| Debian | mysql-5.5 | 7 | 5.5.33+dfsg-0+wheezy1 | vulnerable |
| Debian | mysql-5.5 | 7 | 5.5.33+dfsg-1 | vulnerable |
| Debian | mysql-5.5 | 7 | 5.5.35+dfsg-0+wheezy1 | vulnerable |
| Debian | mysql-5.5 | 7 | 5.5.35+dfsg-1 | vulnerable |
| Debian | mysql-5.5 | 7 | 5.5.35+dfsg-2 | vulnerable |
| Debian | mysql-5.5 | 7 | 5.5.37-0+wheezy1 | vulnerable |
| Debian | mysql-5.5 | 7 | 5.5.37-1 | vulnerable |
| Debian | mysql-5.5 | 7 | 5.5.38-0+wheezy1 | vulnerable |
| Debian | mysql-5.5 | 7 | 5.5.39-1 | vulnerable |
| Debian | mysql-5.5 | 7 | 5.5.40-0+wheezy1 | vulnerable |
| Debian | mysql-5.5 | 7 | 5.5.40-1 | vulnerable |
| Debian | mysql-5.5 | 7 | 5.5.41-0+wheezy1 | vulnerable |
| Debian | mysql-5.5 | 7 | 5.5.42-1 | vulnerable |
| Debian | mysql-5.5 | 7 | 5.5.43-0+deb7u1 | vulnerable |
| Debian | mysql-5.5 | 7 | 5.5.44-0+deb7u1 | vulnerable |
| Debian | mysql-5.5 | 7 | 5.5.46-0+deb7u1 | fixed |
| Debian | mysql-5.5 | 8 | 5.5.42-1 | vulnerable |
| Debian | mysql-5.5 | 8 | 5.5.43-0+deb8u1 | vulnerable |
| Debian | mysql-5.5 | 8 | 5.5.44-0+deb8u1 | vulnerable |
| Debian | mysql-5.5 | 8 | 5.5.46-0+deb8u1 | fixed |
| Suse | mariadb | linux enterprise desktop 12 | 10.0.22-20.3.1 | fixed |
| Suse | mariadb | linux enterprise software development kit 12 | 10.0.22-20.3.1 | fixed |
| Suse | mariadb | linux enterprise server 12 | 10.0.22-20.3.1 | fixed |
| Suse | mariadb | linux enterprise server for sap applications 12 | 10.0.22-20.3.1 | fixed |
| Suse | mariadb | linux enterprise workstation extension 12 | 10.0.22-20.3.1 | fixed |
| Suse | mariadb | linux enterprise desktop 12 sp1 | 10.0.22-3.1 | fixed |
| Suse | mariadb | linux enterprise software development kit 12 sp1 | 10.0.22-3.1 | fixed |
| Suse | mariadb | linux enterprise server 12 sp1 | 10.0.22-3.1 | fixed |
| Suse | mariadb | linux enterprise server for sap applications 12 sp1 | 10.0.22-3.1 | fixed |
| Suse | mariadb | linux enterprise workstation extension 12 sp1 | 10.0.22-3.1 | fixed |
Fixed-version evidence
| Distribution | Package | Type | Release | Fixed version | Urgency | Origin | Bugs |
|---|---|---|---|---|---|---|---|
| Ubuntu | mysql-5.5 | deb | 14.04 | 5.5.46-0ubuntu0.14.04.2 | Not reported | USN-2781-1 | Not reported |
| Ubuntu | mariadb-5.5 | deb | 14.04 | 5.5.46-1ubuntu0.14.04.2 | Not reported | UBUNTU-CVE-2015-4792 | Not reported |
| Ubuntu | mysql-5.5 | deb | 14.04 | 5.5.46-0ubuntu0.14.04.2 | Not reported | UBUNTU-CVE-2015-4792 | Not reported |
| Ubuntu | mysql-5.6 | deb | 14.04 | 5.6.27-0ubuntu0.14.04.1 | Not reported | UBUNTU-CVE-2015-4792 | Not reported |
| Ubuntu | mariadb-10.0 | deb | 16.04 | 10.0.22-0ubuntu1 | Not reported | UBUNTU-CVE-2015-4792 | Not reported |
| Ubuntu | percona-xtradb-cluster-5.6 | deb | 16.04 | 5.6.34-26.19-0ubuntu0.16.04.1 | Not reported | UBUNTU-CVE-2015-4792 | Not reported |
| Debian | mariadb-10.0 | deb | 8 | 10.0.22-0+deb8u1 | Not reported | DSA-3385-1 | Not reported |
| Debian | mysql-5.5 | deb | 7 | 5.5.46-0+deb7u1 | Not reported | DSA-3377-1 | Not reported |
| Debian | mysql-5.5 | deb | 8 | 5.5.46-0+deb8u1 | Not reported | DSA-3377-1 | Not reported |
| Suse | mariadb | rpm | linux enterprise desktop 12 | 10.0.22-20.3.1 | Not reported | SUSE-SU-2016:0121-1 | Not reported |
| Suse | mariadb | rpm | linux enterprise software development kit 12 | 10.0.22-20.3.1 | Not reported | SUSE-SU-2016:0121-1 | Not reported |
| Suse | mariadb | rpm | linux enterprise server 12 | 10.0.22-20.3.1 | Not reported | SUSE-SU-2016:0121-1 | Not reported |
| Suse | mariadb | rpm | linux enterprise server for sap applications 12 | 10.0.22-20.3.1 | Not reported | SUSE-SU-2016:0121-1 | Not reported |
| Suse | mariadb | rpm | linux enterprise workstation extension 12 | 10.0.22-20.3.1 | Not reported | SUSE-SU-2016:0121-1 | Not reported |
| Suse | mariadb | rpm | linux enterprise desktop 12 sp1 | 10.0.22-3.1 | Not reported | SUSE-SU-2016:0296-1 | Not reported |
| Suse | mariadb | rpm | linux enterprise software development kit 12 sp1 | 10.0.22-3.1 | Not reported | SUSE-SU-2016:0296-1 | Not reported |
| Suse | mariadb | rpm | linux enterprise server 12 sp1 | 10.0.22-3.1 | Not reported | SUSE-SU-2016:0296-1 | Not reported |
| Suse | mariadb | rpm | linux enterprise server for sap applications 12 sp1 | 10.0.22-3.1 | Not reported | SUSE-SU-2016:0296-1 | Not reported |
| Suse | mariadb | rpm | linux enterprise workstation extension 12 sp1 | 10.0.22-3.1 | Not reported | SUSE-SU-2016:0296-1 | Not reported |
OpenFactory catalog packages
No matching packages in this catalog.
Observed:
References
- [https://ftp.suse.com/pub/projects/security/csaf/rhsa-2016_0534.json]
- [https://osv.dev/vulnerability/DSA-3377-1]
- [https://osv.dev/vulnerability/DSA-3385-1]
- [https://osv.dev/vulnerability/SUSE-SU-2016:0121-1]
- [https://osv.dev/vulnerability/SUSE-SU-2016:0296-1]
- [https://osv.dev/vulnerability/UBUNTU-CVE-2015-4792]
- [https://osv.dev/vulnerability/USN-2781-1]
- [https://security.access.redhat.com/data/csaf/v2/vex/2015/cve-2015-4792.json]
[FIRST EPSS] · [OSV Package Vulnerability Database] · [Red Hat security advisories and VEX] · [SUSE security advisories and VEX]