Lucene search

[email protected]CVE-2014-4258

HistoryJul 17, 2014 - 11:17 a.m.

CVE-2014-4258

2014-07-1711:17:10

[email protected]

web.nvd.nist.gov

cve-2014-4258

mysql server

oracle

vulnerability

confidentiality

integrity

availability

nvd

6.1 Medium

AI Score

Confidence

High

6.5 Medium

CVSS2

Access Vector

Access Complexity

Authentication

SINGLE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:S/C:P/I:P/A:P

0.001 Low

EPSS

Percentile

48.6%

JSON

Unspecified vulnerability in the MySQL Server component in Oracle MySQL 5.5.37 and earlier and 5.6.17 and earlier allows remote authenticated users to affect confidentiality, integrity, and availability via vectors related to SRINFOSC.

Affected configurations

NVD

Node

oraclemysqlRange5.5.0–5.5.37

oraclemysqlRange5.6.0–5.6.17

Node

vmwarevcenter_server_applianceMatch5.0

vmwarevcenter_server_applianceMatch5.0update_1

vmwarevcenter_server_applianceMatch5.0update_2

vmwarevcenter_server_applianceMatch5.1

vmwarevcenter_server_applianceMatch5.1update_1

vmwarevcenter_server_applianceMatch5.1update_2

vmwarevcenter_server_applianceMatch5.5

vmwarevcenter_server_applianceMatch5.5update_1

Node

oraclesolarisMatch11.3

Node

opensuse_projectsuse_linux_enterprise_desktopMatch11.0sp3

opensuse_projectsuse_linux_enterprise_serverMatch11.0sp3

opensuse_projectsuse_linux_enterprise_serverMatch11.0sp3vmware

opensuse_projectsuse_linux_enterprise_software_development_kitMatch11.0sp3

Node

debiandebian_linuxMatch7.0

Node

mariadbmariadbRange5.5.0–5.5.38

mariadbmariadbRange10.0.0–10.0.12

Node

suselinux_enterprise_desktopMatch11sp3

suselinux_enterprise_desktopMatch12-

suselinux_enterprise_serverMatch11sp3-

suselinux_enterprise_serverMatch11sp3vmware

suselinux_enterprise_serverMatch12-

suselinux_enterprise_software_development_kitMatch11sp3

suselinux_enterprise_software_development_kitMatch12-

suselinux_enterprise_workstation_extensionMatch12

CPENameOperatorVersion
oracle:mysqloracle mysqlle5.5.37
oracle:mysqloracle mysqlle5.6.17

CPE	Name	Operator	Version
oracle:mysql	oracle mysql	le	5.5.37
oracle:mysql	oracle mysql	le	5.6.17

References

lists.opensuse.org/opensuse-security-announce/2014-08/msg00012.html

lists.opensuse.org/opensuse-security-announce/2015-04/msg00016.html

seclists.org/fulldisclosure/2014/Dec/23

secunia.com/advisories/60425

www.debian.org/security/2014/dsa-2985

www.oracle.com/technetwork/topics/security/bulletinoct2015-2511968.html

www.oracle.com/technetwork/topics/security/cpujul2014-1972956.html

www.securityfocus.com/archive/1/534161/100/0/threaded

www.securityfocus.com/bid/68564

www.securitytracker.com/id/1030578

www.vmware.com/security/advisories/VMSA-2014-0012.html

exchange.xforce.ibmcloud.com/vulnerabilities/94620

Social References

6.1 Medium

AI Score

Confidence

High

6.5 Medium

CVSS2

Access Vector

Access Complexity

Authentication

SINGLE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:S/C:P/I:P/A:P

0.001 Low

EPSS

Percentile

48.6%

JSON

Related for CVE-2014-4258

nvd1 mariadbunix1 veracode1 prion1 ubuntucve1 cvelist1 openvas16 kaspersky1 ubuntu1 nessus20 mageia1 debian2 suse2 redhat6 centos2 oraclelinux2 securityvulns1 oracle1