CVE-2015-5969 - CVE House

Back to Database

Status published Medium CVE-2015-5969

The mysql-systemd-helper script in the mysql-community-server package before 5.6.28-2.17.1 in...

6.2 CVSS

Vulnerability Description

The mysql-systemd-helper script in the mysql-community-server package before 5.6.28-2.17.1 in openSUSE 13.2 and before 5.6.28-13.1 in openSUSE Leap 42.1 and the mariadb package before 10.0.22-2.21.2 in openSUSE 13.2 and before 10.0.22-3.1 in SUSE Linux Enterprise (SLE) 12.1 and openSUSE Leap 42.1 allows local users to discover database credentials by listing a process and its arguments.

Impact Analysis

Refer to official advisory for detailed impact metrics.

Remediation

Ensure systems are updated to the latest vendor-supplied patch levels.

THREAT MONITOR

Am I Vulnerable?

Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2015-5969

Check My Exposure

Credits & Attribution

No credits recorded in the NVD database.

References

More from opensuse

View All →

Two heap-overflow vulnerabilities exist in openSUSE/libsolv libsolv through 13 Dec...

Buffer overflow vulnerability in libsolv 2020-12-13 via the Solver *...

Buffer overflow vulnerability in function prune_to_recommended in src/policy.c in libsolv...

Buffer overflow vulnerability in function pool_installable_whatprovides in src/repo.h in libsolv...

Buffer overflow vulnerability in function pool_disabled_solvable in src/repo.h in libsolv...

Affected Vendor

opensuse

View all reports →

Affected Software

leap, opensuse, linux enterprise desktop, linux enterprise server, linux enterprise software development kit, linux enterprise workstation extension

Vulnerable Versions:

42.1, 13.2, 12

Timeline

Official Publish: April 8th, 2016

Last Modified: August 6th, 2024

Added to House: July 19th, 2026

CVSS Vectors

V3: CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Weaknesses (CWE)

No CWE data available

MITRE ATT&CK TTPs

No associated TTPs found for this vulnerability.