CVE-2014-4260

MEDIO 5.5CVE-2014-4260 · Published 17/07/2014 · updated 17/06/2026

En resumen

CVE-2014-4260 es una vulnerabilidad MEDIO (CVSS 5.5) que afecta a mariadb (mariadb), mysql (oracle).
Probabilidad de explotación en los próximos 30 días (EPSS): 3.5%, mayor que el 89.2% de las vulnerabilidades.
Solución: actualizar a 10.0.12, 5.5.38 o posterior.

Package	Affected versions	Patched versions
mariadb mariadb	`≥ 10.0.0, < 10.0.12≥ 5.5.0, < 5.5.38`	`10.0.125.5.38`
mysql oracle	`≥ 5.5.0, ≤ 5.5.37≥ 5.6.0, ≤ 5.6.17`	No fix yet

Description

Unspecified vulnerability in the MySQL Server component in Oracle MySQL 5.5.37 and earlier, and 5.6.17 and earlier, allows remote authenticated users to affect integrity and availability via vectors related to SRCHAR.

References

lists.opensuse.org/opensuse-security-announce/2014-08/msg00012.html · Mailing List
lists.opensuse.org/opensuse-security-announce/2015-04/msg00016.html · Mailing List
seclists.org/fulldisclosure/2014/Dec/23 · Mailing List
secunia.com/advisories/60425 · Not Applicable
debian.org/security/2014/dsa-2985 · Third Party Advisory
oracle.com/technetwork/topics/security/bulletinoct2015-2511968.html · Vendor Advisory
oracle.com/technetwork/topics/security/cpujul2014-1972956.html · Vendor Advisory
securityfocus.com/archive/1/534161/100/0/threaded · Third Party Advisory
securityfocus.com/bid/68573 · Third Party Advisory
securitytracker.com/id/1030578 · Broken Link
vmware.com/security/advisories/VMSA-2014-0012.html

Más vulnerabilidades de mariadb

Ver todo →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free