CVE-2014-0001
mysql: command-line tool buffer overflow via long server version string
Severity Score
7.5
*CVSS v2
Exploit Likelihood
*EPSS
Affected Versions
*CPE
Public Exploits
0
*Multiple Sources
Exploited in Wild
-
*KEV
Decision
-
*SSVC
Descriptions
Buffer overflow in client/mysql.cc in Oracle MySQL and MariaDB before 5.5.35 allows remote database servers to cause a denial of service (crash) and possibly execute arbitrary code via a long server version string.
Desbordamiento de buffer en client/mysql.cc en Oracle MySQL y MariaDB anterior a 5.5.35 permite a servidores de bases de datos remotos causar una denegación de servicio (caída) y posiblemente ejecutar código arbitrario a través de una cadena de versión del servidor larga.
*Credits:
N/A
CVSS Scores
Attack Vector
Attack Complexity
Authentication
Confidentiality
Integrity
Availability
Attack Vector
Attack Complexity
Authentication
Confidentiality
Integrity
Availability
* Common Vulnerability Scoring System
SSVC
- Decision:-
Exploitation
Automatable
Tech. Impact
* Organization's Worst-case Scenario
Timeline
- 2013-12-03 CVE Reserved
- 2014-01-31 CVE Published
- 2023-07-28 EPSS Updated
- 2024-08-06 CVE Updated
- ---------- Exploited in Wild
- ---------- KEV Due Date
- ---------- First Exploit
CWE
- CWE-119: Improper Restriction of Operations within the Bounds of a Memory Buffer
CAPEC
References (16)
| URL | Tag | Source |
|---|---|---|
| http://bazaar.launchpad.net/~maria-captains/maria/5.5/revision/2502.565.64 | Not Applicable | |
| http://osvdb.org/102713 | Broken Link | |
| http://secunia.com/advisories/52161 | Third Party Advisory | |
| http://www.osvdb.org/102714 | Broken Link | |
| http://www.securityfocus.com/bid/65298 | Third Party Advisory | |
| http://www.securitytracker.com/id/1029708 | Vdb Entry | |
| https://exchange.xforce.ibmcloud.com/vulnerabilities/90901 | Vdb Entry |
| URL | Date | SRC |
|---|
| URL | Date | SRC |
|---|---|---|
| http://security.gentoo.org/glsa/glsa-201409-04.xml | 2019-12-17 | |
| https://bugzilla.redhat.com/show_bug.cgi?id=1054592 | 2014-02-19 | |
| https://mariadb.com/kb/en/mariadb-5535-changelog | 2019-12-17 |
| URL | Date | SRC |
|---|---|---|
| http://rhn.redhat.com/errata/RHSA-2014-0164.html | 2019-12-17 | |
| http://rhn.redhat.com/errata/RHSA-2014-0173.html | 2019-12-17 | |
| http://rhn.redhat.com/errata/RHSA-2014-0186.html | 2019-12-17 | |
| http://rhn.redhat.com/errata/RHSA-2014-0189.html | 2019-12-17 | |
| http://www.mandriva.com/security/advisories?name=MDVSA-2014:029 | 2019-12-17 | |
| https://access.redhat.com/security/cve/CVE-2014-0001 | 2014-02-19 |
Affected Vendors, Products, and Versions
| Vendor | Product | Version | Other | Status | ||||||
|---|---|---|---|---|---|---|---|---|---|---|
| Vendor | Product | Version | Other | Status | <-- --> | Vendor | Product | Version | Other | Status |
| Mariadb Search vendor "Mariadb" | Mariadb Search vendor "Mariadb" for product "Mariadb" | <= 5.5.34 Search vendor "Mariadb" for product "Mariadb" and version " <= 5.5.34" | - |
Affected
| ||||||
| Redhat Search vendor "Redhat" | Enterprise Linux Search vendor "Redhat" for product "Enterprise Linux" | 5 Search vendor "Redhat" for product "Enterprise Linux" and version "5" | - |
Affected
| ||||||
| Redhat Search vendor "Redhat" | Enterprise Linux Search vendor "Redhat" for product "Enterprise Linux" | 5 Search vendor "Redhat" for product "Enterprise Linux" and version "5" | client_workstation |
Affected
| ||||||
| Redhat Search vendor "Redhat" | Enterprise Linux Search vendor "Redhat" for product "Enterprise Linux" | 5 Search vendor "Redhat" for product "Enterprise Linux" and version "5" | server |
Affected
| ||||||
| Redhat Search vendor "Redhat" | Enterprise Linux Search vendor "Redhat" for product "Enterprise Linux" | 6.0 Search vendor "Redhat" for product "Enterprise Linux" and version "6.0" | - |
Affected
| ||||||
| Redhat Search vendor "Redhat" | Enterprise Linux Desktop Search vendor "Redhat" for product "Enterprise Linux Desktop" | 5.0 Search vendor "Redhat" for product "Enterprise Linux Desktop" and version "5.0" | - |
Affected
| ||||||
| Redhat Search vendor "Redhat" | Enterprise Linux Desktop Search vendor "Redhat" for product "Enterprise Linux Desktop" | 6.0 Search vendor "Redhat" for product "Enterprise Linux Desktop" and version "6.0" | - |
Affected
| ||||||
| Redhat Search vendor "Redhat" | Enterprise Linux Server Search vendor "Redhat" for product "Enterprise Linux Server" | 6.0 Search vendor "Redhat" for product "Enterprise Linux Server" and version "6.0" | - |
Affected
| ||||||
| Redhat Search vendor "Redhat" | Enterprise Linux Workstation Search vendor "Redhat" for product "Enterprise Linux Workstation" | 6.0 Search vendor "Redhat" for product "Enterprise Linux Workstation" and version "6.0" | - |
Affected
| ||||||
| Oracle Search vendor "Oracle" | Mysql Search vendor "Oracle" for product "Mysql" | 5.5.0 Search vendor "Oracle" for product "Mysql" and version "5.5.0" | - |
Affected
| ||||||
| Oracle Search vendor "Oracle" | Mysql Search vendor "Oracle" for product "Mysql" | 5.5.1 Search vendor "Oracle" for product "Mysql" and version "5.5.1" | - |
Affected
| ||||||
| Oracle Search vendor "Oracle" | Mysql Search vendor "Oracle" for product "Mysql" | 5.5.2 Search vendor "Oracle" for product "Mysql" and version "5.5.2" | - |
Affected
| ||||||
| Oracle Search vendor "Oracle" | Mysql Search vendor "Oracle" for product "Mysql" | 5.5.3 Search vendor "Oracle" for product "Mysql" and version "5.5.3" | - |
Affected
| ||||||
| Oracle Search vendor "Oracle" | Mysql Search vendor "Oracle" for product "Mysql" | 5.5.4 Search vendor "Oracle" for product "Mysql" and version "5.5.4" | - |
Affected
| ||||||
| Oracle Search vendor "Oracle" | Mysql Search vendor "Oracle" for product "Mysql" | 5.5.5 Search vendor "Oracle" for product "Mysql" and version "5.5.5" | - |
Affected
| ||||||
| Oracle Search vendor "Oracle" | Mysql Search vendor "Oracle" for product "Mysql" | 5.5.6 Search vendor "Oracle" for product "Mysql" and version "5.5.6" | - |
Affected
| ||||||
| Oracle Search vendor "Oracle" | Mysql Search vendor "Oracle" for product "Mysql" | 5.5.7 Search vendor "Oracle" for product "Mysql" and version "5.5.7" | - |
Affected
| ||||||
| Oracle Search vendor "Oracle" | Mysql Search vendor "Oracle" for product "Mysql" | 5.5.9 Search vendor "Oracle" for product "Mysql" and version "5.5.9" | - |
Affected
| ||||||
| Oracle Search vendor "Oracle" | Mysql Search vendor "Oracle" for product "Mysql" | 5.5.10 Search vendor "Oracle" for product "Mysql" and version "5.5.10" | - |
Affected
| ||||||
| Oracle Search vendor "Oracle" | Mysql Search vendor "Oracle" for product "Mysql" | 5.5.11 Search vendor "Oracle" for product "Mysql" and version "5.5.11" | - |
Affected
| ||||||
| Oracle Search vendor "Oracle" | Mysql Search vendor "Oracle" for product "Mysql" | 5.5.12 Search vendor "Oracle" for product "Mysql" and version "5.5.12" | - |
Affected
| ||||||
| Oracle Search vendor "Oracle" | Mysql Search vendor "Oracle" for product "Mysql" | 5.5.13 Search vendor "Oracle" for product "Mysql" and version "5.5.13" | - |
Affected
| ||||||
| Oracle Search vendor "Oracle" | Mysql Search vendor "Oracle" for product "Mysql" | 5.5.14 Search vendor "Oracle" for product "Mysql" and version "5.5.14" | - |
Affected
| ||||||
| Oracle Search vendor "Oracle" | Mysql Search vendor "Oracle" for product "Mysql" | 5.5.15 Search vendor "Oracle" for product "Mysql" and version "5.5.15" | - |
Affected
| ||||||
| Oracle Search vendor "Oracle" | Mysql Search vendor "Oracle" for product "Mysql" | 5.5.16 Search vendor "Oracle" for product "Mysql" and version "5.5.16" | - |
Affected
| ||||||
| Oracle Search vendor "Oracle" | Mysql Search vendor "Oracle" for product "Mysql" | 5.5.17 Search vendor "Oracle" for product "Mysql" and version "5.5.17" | - |
Affected
| ||||||
| Oracle Search vendor "Oracle" | Mysql Search vendor "Oracle" for product "Mysql" | 5.5.18 Search vendor "Oracle" for product "Mysql" and version "5.5.18" | - |
Affected
| ||||||
| Oracle Search vendor "Oracle" | Mysql Search vendor "Oracle" for product "Mysql" | 5.5.19 Search vendor "Oracle" for product "Mysql" and version "5.5.19" | - |
Affected
| ||||||
| Oracle Search vendor "Oracle" | Mysql Search vendor "Oracle" for product "Mysql" | 5.5.20 Search vendor "Oracle" for product "Mysql" and version "5.5.20" | - |
Affected
| ||||||
| Oracle Search vendor "Oracle" | Mysql Search vendor "Oracle" for product "Mysql" | 5.5.21 Search vendor "Oracle" for product "Mysql" and version "5.5.21" | - |
Affected
| ||||||
| Oracle Search vendor "Oracle" | Mysql Search vendor "Oracle" for product "Mysql" | 5.5.22 Search vendor "Oracle" for product "Mysql" and version "5.5.22" | - |
Affected
| ||||||
| Oracle Search vendor "Oracle" | Mysql Search vendor "Oracle" for product "Mysql" | 5.5.23 Search vendor "Oracle" for product "Mysql" and version "5.5.23" | - |
Affected
| ||||||
| Oracle Search vendor "Oracle" | Mysql Search vendor "Oracle" for product "Mysql" | 5.5.24 Search vendor "Oracle" for product "Mysql" and version "5.5.24" | - |
Affected
| ||||||
| Oracle Search vendor "Oracle" | Mysql Search vendor "Oracle" for product "Mysql" | 5.5.25 Search vendor "Oracle" for product "Mysql" and version "5.5.25" | - |
Affected
| ||||||
| Oracle Search vendor "Oracle" | Mysql Search vendor "Oracle" for product "Mysql" | 5.5.25 Search vendor "Oracle" for product "Mysql" and version "5.5.25" | a |
Affected
| ||||||
| Oracle Search vendor "Oracle" | Mysql Search vendor "Oracle" for product "Mysql" | 5.5.26 Search vendor "Oracle" for product "Mysql" and version "5.5.26" | - |
Affected
| ||||||
| Oracle Search vendor "Oracle" | Mysql Search vendor "Oracle" for product "Mysql" | 5.5.27 Search vendor "Oracle" for product "Mysql" and version "5.5.27" | - |
Affected
| ||||||
| Oracle Search vendor "Oracle" | Mysql Search vendor "Oracle" for product "Mysql" | 5.5.28 Search vendor "Oracle" for product "Mysql" and version "5.5.28" | - |
Affected
| ||||||
| Oracle Search vendor "Oracle" | Mysql Search vendor "Oracle" for product "Mysql" | 5.5.29 Search vendor "Oracle" for product "Mysql" and version "5.5.29" | - |
Affected
| ||||||
| Oracle Search vendor "Oracle" | Mysql Search vendor "Oracle" for product "Mysql" | 5.5.30 Search vendor "Oracle" for product "Mysql" and version "5.5.30" | - |
Affected
| ||||||
| Oracle Search vendor "Oracle" | Mysql Search vendor "Oracle" for product "Mysql" | 5.5.31 Search vendor "Oracle" for product "Mysql" and version "5.5.31" | - |
Affected
| ||||||
| Oracle Search vendor "Oracle" | Mysql Search vendor "Oracle" for product "Mysql" | 5.5.32 Search vendor "Oracle" for product "Mysql" and version "5.5.32" | - |
Affected
| ||||||
| Oracle Search vendor "Oracle" | Mysql Search vendor "Oracle" for product "Mysql" | 5.5.33 Search vendor "Oracle" for product "Mysql" and version "5.5.33" | - |
Affected
| ||||||
| Oracle Search vendor "Oracle" | Mysql Search vendor "Oracle" for product "Mysql" | 5.5.34 Search vendor "Oracle" for product "Mysql" and version "5.5.34" | - |
Affected
| ||||||
| Oracle Search vendor "Oracle" | Mysql Search vendor "Oracle" for product "Mysql" | 5.5.35 Search vendor "Oracle" for product "Mysql" and version "5.5.35" | - |
Affected
| ||||||
| Oracle Search vendor "Oracle" | Mysql Search vendor "Oracle" for product "Mysql" | 5.5.36 Search vendor "Oracle" for product "Mysql" and version "5.5.36" | - |
Affected
| ||||||
| Oracle Search vendor "Oracle" | Mysql Search vendor "Oracle" for product "Mysql" | 5.6.0 Search vendor "Oracle" for product "Mysql" and version "5.6.0" | - |
Affected
| ||||||
| Oracle Search vendor "Oracle" | Mysql Search vendor "Oracle" for product "Mysql" | 5.6.1 Search vendor "Oracle" for product "Mysql" and version "5.6.1" | - |
Affected
| ||||||
| Oracle Search vendor "Oracle" | Mysql Search vendor "Oracle" for product "Mysql" | 5.6.2 Search vendor "Oracle" for product "Mysql" and version "5.6.2" | - |
Affected
| ||||||
| Oracle Search vendor "Oracle" | Mysql Search vendor "Oracle" for product "Mysql" | 5.6.3 Search vendor "Oracle" for product "Mysql" and version "5.6.3" | - |
Affected
| ||||||
| Oracle Search vendor "Oracle" | Mysql Search vendor "Oracle" for product "Mysql" | 5.6.4 Search vendor "Oracle" for product "Mysql" and version "5.6.4" | - |
Affected
| ||||||
| Oracle Search vendor "Oracle" | Mysql Search vendor "Oracle" for product "Mysql" | 5.6.5 Search vendor "Oracle" for product "Mysql" and version "5.6.5" | - |
Affected
| ||||||
| Oracle Search vendor "Oracle" | Mysql Search vendor "Oracle" for product "Mysql" | 5.6.6 Search vendor "Oracle" for product "Mysql" and version "5.6.6" | - |
Affected
| ||||||
| Oracle Search vendor "Oracle" | Mysql Search vendor "Oracle" for product "Mysql" | 5.6.7 Search vendor "Oracle" for product "Mysql" and version "5.6.7" | - |
Affected
| ||||||
| Oracle Search vendor "Oracle" | Mysql Search vendor "Oracle" for product "Mysql" | 5.6.8 Search vendor "Oracle" for product "Mysql" and version "5.6.8" | - |
Affected
| ||||||
| Oracle Search vendor "Oracle" | Mysql Search vendor "Oracle" for product "Mysql" | 5.6.9 Search vendor "Oracle" for product "Mysql" and version "5.6.9" | - |
Affected
| ||||||
| Oracle Search vendor "Oracle" | Mysql Search vendor "Oracle" for product "Mysql" | 5.6.10 Search vendor "Oracle" for product "Mysql" and version "5.6.10" | - |
Affected
| ||||||
| Oracle Search vendor "Oracle" | Mysql Search vendor "Oracle" for product "Mysql" | 5.6.11 Search vendor "Oracle" for product "Mysql" and version "5.6.11" | - |
Affected
| ||||||
| Oracle Search vendor "Oracle" | Mysql Search vendor "Oracle" for product "Mysql" | 5.6.12 Search vendor "Oracle" for product "Mysql" and version "5.6.12" | - |
Affected
| ||||||
| Oracle Search vendor "Oracle" | Mysql Search vendor "Oracle" for product "Mysql" | 5.6.13 Search vendor "Oracle" for product "Mysql" and version "5.6.13" | - |
Affected
| ||||||
| Oracle Search vendor "Oracle" | Mysql Search vendor "Oracle" for product "Mysql" | 5.6.14 Search vendor "Oracle" for product "Mysql" and version "5.6.14" | - |
Affected
| ||||||
| Oracle Search vendor "Oracle" | Mysql Search vendor "Oracle" for product "Mysql" | 5.6.15 Search vendor "Oracle" for product "Mysql" and version "5.6.15" | - |
Affected
| ||||||
| Oracle Search vendor "Oracle" | Mysql Search vendor "Oracle" for product "Mysql" | 5.6.16 Search vendor "Oracle" for product "Mysql" and version "5.6.16" | - |
Affected
| ||||||