CVEvulnerability
CVE-2014-0001
7.5 HIGH
Official page ↗
- Status
- Modified
- Published
- 2014-01-31
- Last modified
- 2026-06-17
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 7.5 HIGH — AV:N/AC:L/Au:N/C:P/I:P/A:P
- Weaknesses
- CWE-119
Description
Buffer overflow in client/mysql.cc in Oracle MySQL and MariaDB before 5.5.35 allows remote database servers to cause a denial of service (crash) and possibly execute arbitrary code via a long server version string.
Affected configurations
• mariadb mariadb (<= 5.5.34)
• redhat enterprise linux 5
• redhat enterprise linux 6.0
• redhat enterprise linux desktop 5.0
• redhat enterprise linux desktop 6.0
• redhat enterprise linux server 6.0
• redhat enterprise linux workstation 6.0
• oracle mysql 5.5.0
• oracle mysql 5.5.1
• oracle mysql 5.5.2
• oracle mysql 5.5.3
• oracle mysql 5.5.4
• oracle mysql 5.5.5
• oracle mysql 5.5.6
• oracle mysql 5.5.7
• oracle mysql 5.5.9
• oracle mysql 5.5.10
• oracle mysql 5.5.11
• oracle mysql 5.5.12
• oracle mysql 5.5.13
• oracle mysql 5.5.14
• oracle mysql 5.5.15
• oracle mysql 5.5.16
• oracle mysql 5.5.17
• oracle mysql 5.5.18
• oracle mysql 5.5.19
• oracle mysql 5.5.20
• oracle mysql 5.5.21
• oracle mysql 5.5.22
• oracle mysql 5.5.23
• oracle mysql 5.5.24
• oracle mysql 5.5.25
• oracle mysql 5.5.26
• oracle mysql 5.5.27
• oracle mysql 5.5.28
• oracle mysql 5.5.29
• oracle mysql 5.5.30
• oracle mysql 5.5.31
• oracle mysql 5.5.32
• oracle mysql 5.5.33
• oracle mysql 5.5.34
• oracle mysql 5.5.35
• oracle mysql 5.5.36
• oracle mysql 5.6.0
• oracle mysql 5.6.1
• oracle mysql 5.6.2
• oracle mysql 5.6.3
• oracle mysql 5.6.4
• oracle mysql 5.6.5
• oracle mysql 5.6.6
• oracle mysql 5.6.7
• oracle mysql 5.6.8
• oracle mysql 5.6.9
• oracle mysql 5.6.10
• oracle mysql 5.6.11
• oracle mysql 5.6.12
• oracle mysql 5.6.13
• oracle mysql 5.6.14
• oracle mysql 5.6.15
• oracle mysql 5.6.16
Related
Weakness · CWE (1)
- CWE-119 Improper Restriction of Operations within the Bounds of a Memory Buffer weakness
References
- http://bazaar.launchpad.net/~maria-captains/maria/5.5/revision/2502.565.64 Not Applicable
- http://osvdb.org/102713 Broken Link
- http://rhn.redhat.com/errata/RHSA-2014-0164.html Third Party Advisory
- http://rhn.redhat.com/errata/RHSA-2014-0173.html Third Party Advisory
- http://rhn.redhat.com/errata/RHSA-2014-0186.html Third Party Advisory
- http://rhn.redhat.com/errata/RHSA-2014-0189.html Third Party Advisory
- http://secunia.com/advisories/52161 secunia.com
- http://security.gentoo.org/glsa/glsa-201409-04.xml Patch, Third Party Advisory, VDB Entry
- http://www.mandriva.com/security/advisories?name=MDVSA-2014:029 Broken Link
- http://www.osvdb.org/102714 Broken Link
- http://www.securityfocus.com/bid/65298 Third Party Advisory, VDB Entry
- http://www.securitytracker.com/id/1029708 www.securitytracker.com
- https://bugzilla.redhat.com/show_bug.cgi?id=1054592 Issue Tracking, Patch, Third Party Advisory
- https://exchange.xforce.ibmcloud.com/vulnerabilities/90901 exchange.xforce.ibmcloud.com
- https://mariadb.com/kb/en/mariadb-5535-changelog/ Patch, Vendor Advisory
- http://bazaar.launchpad.net/~maria-captains/maria/5.5/revision/2502.565.64 Not Applicable
- http://osvdb.org/102713 Broken Link
- http://rhn.redhat.com/errata/RHSA-2014-0164.html Third Party Advisory
- http://rhn.redhat.com/errata/RHSA-2014-0173.html Third Party Advisory
- http://rhn.redhat.com/errata/RHSA-2014-0186.html Third Party Advisory
- http://rhn.redhat.com/errata/RHSA-2014-0189.html Third Party Advisory
- http://secunia.com/advisories/52161 secunia.com
- http://security.gentoo.org/glsa/glsa-201409-04.xml Patch, Third Party Advisory, VDB Entry
- http://www.mandriva.com/security/advisories?name=MDVSA-2014:029 Broken Link
- http://www.osvdb.org/102714 Broken Link
- http://www.securityfocus.com/bid/65298 Third Party Advisory, VDB Entry
- http://www.securitytracker.com/id/1029708 www.securitytracker.com
- https://bugzilla.redhat.com/show_bug.cgi?id=1054592 Issue Tracking, Patch, Third Party Advisory
- https://exchange.xforce.ibmcloud.com/vulnerabilities/90901 exchange.xforce.ibmcloud.com
- https://mariadb.com/kb/en/mariadb-5535-changelog/ Patch, Vendor Advisory