CVE-2015-4737: Canonical Ubuntu Linux

Low severity, CVSS 3.5. EPSS: 3.6% chance of exploitation in the next 30 days.

Unspecified vulnerability in Oracle MySQL Server 5.5.43 and earlier, and 5.6.23 and earlier, allows remote authenticated users to affect confidentiality via unknown vectors related to Server : Pluggable Auth.

Affected products

• Canonical Ubuntu Linux: version 12.04 only; version 14.04 only; version 14.10 only; version 15.04 only
• Debian Debian Linux: version 8.0 only
• Oracle MySQL: from 5.5.0, up to and including 5.5.43; from 5.6.0, up to and including 5.6.24
• Oracle Solaris: version 11.3 only

Published 2015-07-16. Last modified 2026-06-17.