CVE-2014-0001

Published: Jan 31, 2014Modified: Apr 29, 2026

7.5

Vector

AV:N/AC:L/Au:N/C:P/I:P/A:P

Exploitability: 10.0 / Impact: 6.4

Source: NVD

Description

Buffer overflow in client/mysql.cc in Oracle MySQL and MariaDB before 5.5.35 allows remote database servers to cause a denial of service (crash) and possibly execute arbitrary code via a long server version string.

Affected (63)

Products: Mariadb: Mariadb · Redhat: Enterprise Linux, Enterprise Linux Desktop, Enterprise Linux Server, Enterprise Linux Workstation · Oracle: Mysql

1 product

4 products

Enterprise Linux

Enterprise Linux Desktop

Enterprise Linux Server

Enterprise Linux Workstation

1 product

Configuration A

1 vulnerable

Vulnerable Software	Affected Versions
Mariadb Mariadb	Up to 5.5.34

Configuration B

8 vulnerable

Vulnerable Software	Affected Versions
Redhat Enterprise Linux	Version 5
Redhat Enterprise Linux	Version 5
Redhat Enterprise Linux	Version 5
Redhat Enterprise Linux	Version 6.0
Redhat Enterprise Linux Desktop	Version 5.0
Redhat Enterprise Linux Desktop	Version 6.0
Redhat Enterprise Linux Server	Version 6.0
Redhat Enterprise Linux Workstation	Version 6.0

Configuration C

37 vulnerable

Vulnerable Software	Affected Versions
Oracle Mysql	Version 5.5.0
Oracle Mysql	Version 5.5.10
Oracle Mysql	Version 5.5.11
Oracle Mysql	Version 5.5.12
Oracle Mysql	Version 5.5.13
Oracle Mysql	Version 5.5.14
Oracle Mysql	Version 5.5.15
Oracle Mysql	Version 5.5.16
Oracle Mysql	Version 5.5.17
Oracle Mysql	Version 5.5.18
Oracle Mysql	Version 5.5.19
Oracle Mysql	Version 5.5.1
Oracle Mysql	Version 5.5.20
Oracle Mysql	Version 5.5.21
Oracle Mysql	Version 5.5.22
Oracle Mysql	Version 5.5.23
Oracle Mysql	Version 5.5.24
Oracle Mysql	Version 5.5.25
Oracle Mysql	Version 5.5.25 a
Oracle Mysql	Version 5.5.26
Oracle Mysql	Version 5.5.27
Oracle Mysql	Version 5.5.28
Oracle Mysql	Version 5.5.29
Oracle Mysql	Version 5.5.2
Oracle Mysql	Version 5.5.30
Oracle Mysql	Version 5.5.31
Oracle Mysql	Version 5.5.32
Oracle Mysql	Version 5.5.33
Oracle Mysql	Version 5.5.34
Oracle Mysql	Version 5.5.35
Oracle Mysql	Version 5.5.36
Oracle Mysql	Version 5.5.3
Oracle Mysql	Version 5.5.4
Oracle Mysql	Version 5.5.5
Oracle Mysql	Version 5.5.6
Oracle Mysql	Version 5.5.7
Oracle Mysql	Version 5.5.9

Configuration D

17 vulnerable

Vulnerable Software	Affected Versions
Oracle Mysql	Version 5.6.0
Oracle Mysql	Version 5.6.10
Oracle Mysql	Version 5.6.11
Oracle Mysql	Version 5.6.12
Oracle Mysql	Version 5.6.13
Oracle Mysql	Version 5.6.14
Oracle Mysql	Version 5.6.15
Oracle Mysql	Version 5.6.16
Oracle Mysql	Version 5.6.1
Oracle Mysql	Version 5.6.2
Oracle Mysql	Version 5.6.3
Oracle Mysql	Version 5.6.4
Oracle Mysql	Version 5.6.5
Oracle Mysql	Version 5.6.6
Oracle Mysql	Version 5.6.7
Oracle Mysql	Version 5.6.8
Oracle Mysql	Version 5.6.9

Related CWEs

Improper Restriction of Operations within the Bounds of a Memory Buffer

The product performs operations on a memory buffer, but it reads from or writes to a memory location outside the buffer's intended boundary. This may result in read or write operations on unexpected memory locations that could be linked to other variables, data structures, or internal program data.

References (30)

http://bazaar.launchpad.net/~maria-captains/maria/5.5/revision/2502.565.64

Source: secalert@redhat.com

Not Applicable

http://osvdb.org/102713

Source: secalert@redhat.com

Broken Link

http://rhn.redhat.com/errata/RHSA-2014-0164.html

Source: secalert@redhat.com

Third Party Advisory

http://rhn.redhat.com/errata/RHSA-2014-0173.html

Source: secalert@redhat.com

Third Party Advisory

http://rhn.redhat.com/errata/RHSA-2014-0186.html

Source: secalert@redhat.com

Third Party Advisory

http://rhn.redhat.com/errata/RHSA-2014-0189.html

Source: secalert@redhat.com

Third Party Advisory

http://secunia.com/advisories/52161

Source: secalert@redhat.com

http://security.gentoo.org/glsa/glsa-201409-04.xml

Source: secalert@redhat.com

PatchThird Party AdvisoryVDB Entry

http://www.mandriva.com/security/advisories?name=MDVSA-2014:029

Source: secalert@redhat.com

Broken Link

http://www.osvdb.org/102714

Source: secalert@redhat.com

Broken Link

http://www.securityfocus.com/bid/65298

Source: secalert@redhat.com

Third Party AdvisoryVDB Entry

http://www.securitytracker.com/id/1029708

Source: secalert@redhat.com

https://bugzilla.redhat.com/show_bug.cgi?id=1054592

Source: secalert@redhat.com

Issue TrackingPatchThird Party Advisory

https://exchange.xforce.ibmcloud.com/vulnerabilities/90901

Source: secalert@redhat.com

https://mariadb.com/kb/en/mariadb-5535-changelog/

Source: secalert@redhat.com

PatchVendor Advisory

http://bazaar.launchpad.net/~maria-captains/maria/5.5/revision/2502.565.64

Source: af854a3a-2127-422b-91ae-364da2661108

Not Applicable

http://osvdb.org/102713

Source: af854a3a-2127-422b-91ae-364da2661108

Broken Link

http://rhn.redhat.com/errata/RHSA-2014-0164.html

Source: af854a3a-2127-422b-91ae-364da2661108

Third Party Advisory

http://rhn.redhat.com/errata/RHSA-2014-0173.html

Source: af854a3a-2127-422b-91ae-364da2661108

Third Party Advisory

http://rhn.redhat.com/errata/RHSA-2014-0186.html

Source: af854a3a-2127-422b-91ae-364da2661108

Third Party Advisory

http://rhn.redhat.com/errata/RHSA-2014-0189.html

Source: af854a3a-2127-422b-91ae-364da2661108

Third Party Advisory

http://secunia.com/advisories/52161

Source: af854a3a-2127-422b-91ae-364da2661108

http://security.gentoo.org/glsa/glsa-201409-04.xml

Source: af854a3a-2127-422b-91ae-364da2661108

PatchThird Party AdvisoryVDB Entry

http://www.mandriva.com/security/advisories?name=MDVSA-2014:029

Source: af854a3a-2127-422b-91ae-364da2661108

Broken Link

http://www.osvdb.org/102714

Source: af854a3a-2127-422b-91ae-364da2661108

Broken Link

http://www.securityfocus.com/bid/65298

Source: af854a3a-2127-422b-91ae-364da2661108

Third Party AdvisoryVDB Entry

http://www.securitytracker.com/id/1029708

Source: af854a3a-2127-422b-91ae-364da2661108

https://bugzilla.redhat.com/show_bug.cgi?id=1054592

Source: af854a3a-2127-422b-91ae-364da2661108

Issue TrackingPatchThird Party Advisory

https://exchange.xforce.ibmcloud.com/vulnerabilities/90901

Source: af854a3a-2127-422b-91ae-364da2661108

https://mariadb.com/kb/en/mariadb-5535-changelog/

Source: af854a3a-2127-422b-91ae-364da2661108

PatchVendor Advisory

Timeline

No history available yet.