mysql: command-line tool buffer overflow via long server version string
Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).
| Vendor | Product | Default status | Versions | ||||||
|---|---|---|---|---|---|---|---|---|---|
| n/a | n/a | affected |
|
Configuration 1 [-]
|
Configuration 2 [-]
|
Configuration 3 [-]
|
Configuration 4 [-]
|
| Package | CPE | Advisory | Released Date |
|---|---|---|---|
| Red Hat Enterprise Linux 5 | |||
| mysql55-mysql-0:5.5.36-2.el5 | cpe:/o:redhat:enterprise_linux:5 | RHSA-2014:0186 | 2014-02-18T00:00:00Z |
| Red Hat Enterprise Linux 6 | |||
| mysql-0:5.1.73-3.el6_5 | cpe:/o:redhat:enterprise_linux:6 | RHSA-2014:0164 | 2014-02-12T00:00:00Z |
| Red Hat Software Collections for RHEL-6 | |||
| mysql55-mysql-0:5.5.36-1.1.el6 | cpe:/a:redhat:rhel_software_collections:1::el6 | RHSA-2014:0173 | 2014-02-13T00:00:00Z |
| mariadb55-mariadb-0:5.5.35-1.1.el6 | cpe:/a:redhat:rhel_software_collections:1::el6 | RHSA-2014:0189 | 2014-02-19T00:00:00Z |
No data available yet.
| Source | ID | Title |
|---|---|---|
Debian DLA |
DLA-75-1 | mysql-5.1 security update |
Debian DSA |
DSA-2919-1 | mysql-5.5 security update |
Ubuntu USN |
USN-2170-1 | MySQL vulnerabilities |
No CVSS v4.0
No CVSS v3.1
No CVSS v3.0
This CVE is not in the KEV list.
Exploit prediction score: 6.4% (6.405% probability within 30 days)
Key SSVC decision points have not yet been added.
No history.