CVE-2014-0001

mysql: command-line tool buffer overflow via long server version string

Published Jan 31, 2014 CVSS 2.0 · 7.5 High EPSS 6.4% KEV · Not listed
Description
Buffer overflow in client/mysql.cc in Oracle MySQL and MariaDB before 5.5.35 allows remote database servers to cause a denial of service (crash) and possibly execute arbitrary code via a long server version string.

Remediation

No solution or workaround provided in the CVE record

Tracking

Sign in to view the affected projects.

Advisories

Source ID Title
Debian DLA Debian DLA DLA-75-1 mysql-5.1 security update
Debian DSA Debian DSA DSA-2919-1 mysql-5.5 security update
Ubuntu USN Ubuntu USN USN-2170-1 MySQL vulnerabilities
History

No history.