CVEvulnerability

CVE-2014-4258

6.5 MEDIUM Published 2014-07-17 Modified 2026-06-17 Official page ↗

Status: Modified
Published: 2014-07-17
Last modified: 2026-06-17
Assigner: [email protected]
CVSS 2.0 ([email protected]): 6.5 MEDIUM — AV:N/AC:L/Au:S/C:P/I:P/A:P

Description

Unspecified vulnerability in the MySQL Server component in Oracle MySQL 5.5.37 and earlier and 5.6.17 and earlier allows remote authenticated users to affect confidentiality, integrity, and availability via vectors related to SRINFOSC.

Affected configurations

• oracle mysql (>= 5.5.0 <= 5.5.37) • oracle mysql (>= 5.6.0 <= 5.6.17) • vmware vcenter server appliance 5.0 • vmware vcenter server appliance 5.1 • vmware vcenter server appliance 5.5 • oracle solaris 11.3 • opensuse project suse linux enterprise desktop 11.0 • opensuse project suse linux enterprise server 11.0 • opensuse project suse linux enterprise software development kit 11.0 • debian debian linux 7.0 • mariadb mariadb (>= 5.5.0 < 5.5.38) • mariadb mariadb (>= 10.0.0 < 10.0.12) • suse linux enterprise desktop 11 • suse linux enterprise desktop 12 • suse linux enterprise server 11 • suse linux enterprise server 12 • suse linux enterprise software development kit 11 • suse linux enterprise software development kit 12 • suse linux enterprise workstation extension 12

References

http://lists.opensuse.org/opensuse-security-announce/2014-08/msg00012.html Mailing List, Third Party Advisory
http://lists.opensuse.org/opensuse-security-announce/2015-04/msg00016.html Mailing List, Third Party Advisory
http://seclists.org/fulldisclosure/2014/Dec/23 Mailing List, Third Party Advisory
http://secunia.com/advisories/60425 Not Applicable
http://www.debian.org/security/2014/dsa-2985 Third Party Advisory
http://www.oracle.com/technetwork/topics/security/bulletinoct2015-2511968.html Vendor Advisory
http://www.oracle.com/technetwork/topics/security/cpujul2014-1972956.html Vendor Advisory
http://www.securityfocus.com/archive/1/534161/100/0/threaded Third Party Advisory, VDB Entry
http://www.securityfocus.com/bid/68564 Third Party Advisory, VDB Entry
http://www.securitytracker.com/id/1030578 Broken Link, Third Party Advisory, VDB Entry
http://www.vmware.com/security/advisories/VMSA-2014-0012.html Third Party Advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/94620 Third Party Advisory, VDB Entry
http://lists.opensuse.org/opensuse-security-announce/2014-08/msg00012.html Mailing List, Third Party Advisory
http://lists.opensuse.org/opensuse-security-announce/2015-04/msg00016.html Mailing List, Third Party Advisory
http://seclists.org/fulldisclosure/2014/Dec/23 Mailing List, Third Party Advisory
http://secunia.com/advisories/60425 Not Applicable
http://www.debian.org/security/2014/dsa-2985 Third Party Advisory
http://www.oracle.com/technetwork/topics/security/bulletinoct2015-2511968.html Vendor Advisory
http://www.oracle.com/technetwork/topics/security/cpujul2014-1972956.html Vendor Advisory
http://www.securityfocus.com/archive/1/534161/100/0/threaded Third Party Advisory, VDB Entry
http://www.securityfocus.com/bid/68564 Third Party Advisory, VDB Entry
http://www.securitytracker.com/id/1030578 Broken Link, Third Party Advisory, VDB Entry
http://www.vmware.com/security/advisories/VMSA-2014-0012.html Third Party Advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/94620 Third Party Advisory, VDB Entry