Lucene search
Ubuntu.comUB:CVE-2014-0001HistoryJan 31, 2014 - 12:00 a.m.
CVE-2014-0001
2014-01-3100:00:00
ubuntu.com
ubuntu.com
10
0.952 High
EPSS
Percentile
99.3%
Buffer overflow in client/mysql.cc in Oracle MySQL and MariaDB before
5.5.35 allows remote database servers to cause a denial of service (crash)
and possibly execute arbitrary code via a long server version string.
Bugs
Notes
| Author | Note |
|---|---|
| mdeslaur | Looks like this was fixed in 5.5.37 |
| OS | Version | Architecture | Package | Version | Filename |
|---|---|---|---|---|---|
| ubuntu | 12.04 | noarch | mysql-5.5 | <Â 5.5.37-0ubuntu0.12.04.1 | UNKNOWN |
| ubuntu | 12.10 | noarch | mysql-5.5 | <Â 5.5.37-0ubuntu0.12.10.1 | UNKNOWN |
| ubuntu | 13.10 | noarch | mysql-5.5 | <Â 5.5.37-0ubuntu0.13.10.1 | UNKNOWN |
| ubuntu | 14.04 | noarch | mysql-5.5 | <Â 5.5.37-0ubuntu0.14.04.1 | UNKNOWN |
| ubuntu | 14.10 | noarch | mysql-5.5 | <Â 5.5.37-0ubuntu0.14.04.1 | UNKNOWN |
| ubuntu | 14.04 | noarch | mysql-5.6 | <Â 5.6.17-0ubuntu0.14.04.1 | UNKNOWN |
References
bazaar.launchpad.net/~maria-captains/maria/5.5/revision/2502.565.64
osvdb.org/102713
bugzilla.redhat.com/show_bug.cgi?id=1054592
launchpad.net/bugs/cve/CVE-2014-0001
mariadb.com/kb/en/mariadb-5535-changelog/
nvd.nist.gov/vuln/detail/CVE-2014-0001
security-tracker.debian.org/tracker/CVE-2014-0001
ubuntu.com/security/notices/USN-2170-1
www.cve.org/CVERecord?id=CVE-2014-0001
Related
nessus
nessus
Slackware 13.0 / 13.1 / 13.37 / 14.0 / 14.1 / current : mariadb, mysql (SSA:2014-050-02)
2014-02-20 00:00:00
Debian DLA-75-1 : mysql-5.1 security update
2015-03-26 00:00:00
MySQL 5.5.x < 5.5.36 Multiple Vulnerabilities
2014-04-16 00:00:00
cve
cve
CVE-2014-0001
2014-01-31 23:55:00
openvas
openvas
Oracle MySQL Client Remote Buffer Overflow Vulnerability - Windows
2014-02-03 00:00:00
Slackware: Security Advisory (SSA:2014-050-02)
2022-04-21 00:00:00
slackware
slackware
mariadb, mysql
2014-02-19 20:24:35
cvelist
cvelist
CVE-2014-0001
2014-01-31 23:00:00
checkpoint_advisories
checkpoint_advisories
Oracle MySQL Client Heap Buffer Overflow (CVE-2014-0001)
2014-03-16 00:00:00
prion
prion
Buffer overflow
2014-01-31 23:55:00
osv
osv
mysql-5.1 - security update
2014-10-22 00:00:00
mysql-5.5 - security update
2014-05-03 00:00:00
debian
debian
[SECURITY] [DLA 75-1] mysql-5.1 security update
2014-10-22 06:46:51
[SECURITY] [DSA 2919-1] mysql-5.5 security update
2014-05-03 08:06:27
[SECURITY] [DSA 2919-1] mysql-5.5 security update
2014-05-03 08:06:48
veracode
veracode
Denial Of Service (DoS)
2019-05-02 04:56:40
Denial Of Service (DoS)
2019-05-02 04:56:40
Denial Of Service (DoS)
2019-05-02 04:56:40
centos
centos
mysql security update
2014-02-12 19:48:34
mysql55 security update
2014-02-19 13:53:22
mysql55 security update
2014-02-19 17:28:37
oraclelinux
oraclelinux
mysql security and bug fix update
2014-02-12 00:00:00
mysql55-mysql security update
2014-02-18 00:00:00
redhat
redhat
(RHSA-2014:0164) Moderate: mysql security and bug fix update
2014-02-12 00:00:00
(RHSA-2014:0186) Moderate: mysql55-mysql security update
2014-02-18 00:00:00
(RHSA-2014:0189) Moderate: mariadb55-mariadb security update
2014-02-19 00:00:00
amazon
amazon
Medium: mysql51
2014-03-06 14:56:00
fedora
fedora
[SECURITY] Fedora 19 Update: community-mysql-5.5.37-1.fc19
2014-04-29 05:28:52
[SECURITY] Fedora 20 Update: community-mysql-5.5.37-1.fc20
2014-04-29 05:25:43
[SECURITY] Fedora 20 Update: community-mysql-5.5.41-1.fc20
2015-02-15 03:25:22
ubuntu
ubuntu
MySQL vulnerabilities
2014-04-23 00:00:00
suse
suse
Security update for MySQL (important)
2014-06-07 00:04:26
gentoo
gentoo
MySQL: Multiple vulnerabilities
2014-09-04 00:00:00
oracle
oracle
Oracle Critical Patch Update - April 2014
2014-04-15 00:00:00