Red Hat Security AdvisoryRHSA-2014:0164
mysql security and bug fix update
Released 2014-02-12 · Red Hat rating Moderate · View on Red Hat →
Fixed in
- Red Hat Enterprise Linux Desktop (v. 6) mysql-5.1.73-3.el6_5, mysql-libs-5.1.73-3.el6_5, mysql-server-5.1.73-3.el6_5
- Red Hat Enterprise Linux Desktop Optional (v. 6) mysql-5.1.73-3.el6_5, mysql-bench-5.1.73-3.el6_5, mysql-devel-5.1.73-3.el6_5 +3
- Red Hat Enterprise Linux HPC Node (v. 6) mysql-5.1.73-3.el6_5, mysql-libs-5.1.73-3.el6_5
- Red Hat Enterprise Linux HPC Node Optional (v. 6) mysql-5.1.73-3.el6_5, mysql-bench-5.1.73-3.el6_5, mysql-devel-5.1.73-3.el6_5 +4
- Red Hat Enterprise Linux Server (v. 6) mysql-5.1.73-3.el6_5, mysql-bench-5.1.73-3.el6_5, mysql-devel-5.1.73-3.el6_5 +5
- Red Hat Enterprise Linux Server Optional (v. 6) mysql-5.1.73-3.el6_5, mysql-embedded-5.1.73-3.el6_5, mysql-embedded-5.1.73-3.el6_5.ppc +2
- Red Hat Enterprise Linux Workstation (v. 6) mysql-5.1.73-3.el6_5, mysql-bench-5.1.73-3.el6_5, mysql-devel-5.1.73-3.el6_5 +3
- Red Hat Enterprise Linux Workstation Optional (v. 6) mysql-5.1.73-3.el6_5, mysql-embedded-5.1.73-3.el6_5, mysql-embedded-devel-5.1.73-3.el6_5
Fixes 8 records
Priority MEDIUM 42
Buffer overflow in client/mysql.cc in Oracle MySQL and MariaDB before 5.5.35 allows remote database servers to cause a denial of service (crash) and possibly execute arbitrary code via a long server version string.
CVSS 2.0HIGH 7.5· Network · No auth · Interaction — · EPSS 0.06405 · Published 2014-01-31 · Fixed CWE-119
Priority LOW 25
Unspecified vulnerability in the MySQL Server component in Oracle MySQL 5.1.72 and earlier, 5.5.34 and earlier, and 5.6.14 and earlier allows remote authenticated users to affect availability via unknown vectors related…
CVSS 2.0MEDIUM 4.0· Network · Low privileges · Interaction — · EPSS 0.03388 · Published 2014-01-15 · Fixed
Priority LOW 25
Unspecified vulnerability in the MySQL Server component in Oracle MySQL 5.1.71 and earlier, 5.5.33 and earlier, and 5.6.13 and earlier allows remote authenticated users to affect availability via unknown vectors related…
CVSS 2.0MEDIUM 4.0· Network · Low privileges · Interaction — · EPSS 0.03388 · Published 2014-01-15 · Fixed
Priority LOW 25
Unspecified vulnerability in the MySQL Server component in Oracle MySQL 5.1.72 and earlier, 5.5.34 and earlier, and 5.6.14 and earlier allows remote authenticated users to affect availability via unknown vectors.
CVSS 2.0MEDIUM 4.0· Network · Low privileges · Interaction — · EPSS 0.03818 · Published 2014-01-15 · Fixed
Priority LOW 25
Unspecified vulnerability in the MySQL Server component in Oracle MySQL 5.1.71 and earlier, 5.5.33 and earlier, and 5.6.13 and earlier allows remote authenticated users to affect availability via unknown vectors related…
CVSS 2.0MEDIUM 4.0· Network · Low privileges · Interaction — · EPSS 0.03388 · Published 2014-01-15 · Fixed
Priority LOW 23
Unspecified vulnerability in the MySQL Server component in Oracle MySQL 5.1.72 and earlier, 5.5.34 and earlier, and 5.6.14 and earlier allows remote authenticated users to affect availability via unknown vectors related…
CVSS 2.0LOW 3.5· Network · Low privileges · Interaction — · EPSS 0.03212 · Published 2014-01-15 · Fixed
Priority LOW 22
Unspecified vulnerability in the MySQL Server component in Oracle MySQL 5.1.71 and earlier, 5.5.33 and earlier, and 5.6.13 and earlier allows remote authenticated users to affect integrity via unknown vectors related to…
CVSS 2.0LOW 3.3· Network · Low privileges · Interaction — · EPSS 0.03041 · Published 2014-01-15 · Fixed
Priority LOW 21
Unspecified vulnerability in the MySQL Server component in Oracle MySQL 5.1.72 and earlier, 5.5.34 and earlier, and 5.6.14 and earlier allows remote attackers to affect availability via unknown vectors related to Error H…
CVSS 2.0LOW 2.6· Network · No auth · Interaction — · EPSS 0.0467 · Published 2014-01-15 · Fixed
THREATIST.IORead the docs