CVE-2014-0437

2014-01-1516:08:00

NVD-CWE-noinfo

[email protected]

web.nvd.nist.gov

cve-2014-0437

mysql

server

oracle

vulnerability

remote

authenticated

availability

optimizer

nvd

5 Medium

AI Score

Confidence

Low

3.5 Low

CVSS2

Access Vector

NETWORK

Access Complexity

MEDIUM

Authentication

SINGLE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:M/Au:S/C:N/I:N/A:P

0.003 Low

EPSS

Percentile

70.5%

JSON

Unspecified vulnerability in the MySQL Server component in Oracle MySQL 5.1.72 and earlier, 5.5.34 and earlier, and 5.6.14 and earlier allows remote authenticated users to affect availability via unknown vectors related to Optimizer.

CPENameOperatorVersion
oracle:mysqloracle mysqllt5.6.14
oracle:mysqloracle mysqllt5.5.34
oracle:mysqloracle mysqllt5.1.72
debian:debian_linuxdebian debian linuxeq7.0
debian:debian_linuxdebian debian linuxeq6.0
canonical:ubuntu_linuxcanonical ubuntu linuxeq13.10
canonical:ubuntu_linuxcanonical ubuntu linuxeq12.10
canonical:ubuntu_linuxcanonical ubuntu linuxeq10.04
canonical:ubuntu_linuxcanonical ubuntu linuxeq12.04
mariadb:mariadbmariadblt5.5.35

CPE	Name	Operator	Version
oracle:mysql	oracle mysql	lt	5.6.14
oracle:mysql	oracle mysql	lt	5.5.34
oracle:mysql	oracle mysql	lt	5.1.72
debian:debian_linux	debian debian linux	eq	7.0
debian:debian_linux	debian debian linux	eq	6.0
canonical:ubuntu_linux	canonical ubuntu linux	eq	13.10
canonical:ubuntu_linux	canonical ubuntu linux	eq	12.10
canonical:ubuntu_linux	canonical ubuntu linux	eq	10.04
canonical:ubuntu_linux	canonical ubuntu linux	eq	12.04
mariadb:mariadb	mariadb	lt	5.5.35