CVE-2014-2431

LOW 2.6CVE-2014-2431 · Published 16/04/2014 · updated 17/06/2026

In short

CVE-2014-2431 is a LOW (CVSS 2.6) vulnerability affecting mariadb (mariadb), mysql (oracle).
Chance of exploitation in the next 30 days (EPSS): 5.1%, higher than 92.3% of all vulnerabilities.
Fix: update to 10.0.11, 5.5.37 or later.

Package	Affected versions	Patched versions
mariadb mariadb	`≥ 10.0.0, < 10.0.11≥ 5.5.0, < 5.5.37`	`10.0.115.5.37`
mysql oracle	`≥ 5.5.0, ≤ 5.5.36≥ 5.6.0, ≤ 5.6.16`	No fix yet

Description

Unspecified vulnerability in Oracle MySQL Server 5.5.36 and earlier and 5.6.16 and earlier allows remote attackers to affect availability via unknown vectors related to Options.

References

rhn.redhat.com/errata/RHSA-2014-0522.html · Third Party Advisory
rhn.redhat.com/errata/RHSA-2014-0536.html · Third Party Advisory
rhn.redhat.com/errata/RHSA-2014-0537.html · Third Party Advisory
rhn.redhat.com/errata/RHSA-2014-0702.html · Third Party Advisory
security.gentoo.org/glsa/glsa-201409-04.xml · Third Party Advisory
oracle.com/technetwork/topics/security/bulletinoct2015-2511968.html · Vendor Advisory
oracle.com/technetwork/topics/security/cpuapr2014-1972952.html · Vendor Advisory
securityfocus.com/bid/66890 · Third Party Advisory

More vulnerabilities in mariadb

See all →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free

Package

Affected versions

Patched versions

mariadb

≥ 10.0.0, < 10.0.11≥ 5.5.0, < 5.5.37

10.0.115.5.37

mysql

oracle

≥ 5.5.0, ≤ 5.5.36≥ 5.6.0, ≤ 5.6.16

No fix yet

More vulnerabilities in mariadb

See all →