Red Hat Security AdvisoryRHSA-2014:0173
mysql55-mysql security update
Released 2014-02-13 · Red Hat rating Moderate · View on Red Hat →
Fixed in
- Red Hat Software Collections 1 for Red Hat Enterprise Linux Server (v. 6) mysql55-mysql-5.5.36-1.1.el6, mysql55-mysql-bench-5.5.36-1.1.el6, mysql55-mysql-devel-5.5.36-1.1.el6 +3
- Red Hat Software Collections 1 for Red Hat Enterprise Linux Workstation (v. 6) mysql55-mysql-5.5.36-1.1.el6, mysql55-mysql-bench-5.5.36-1.1.el6, mysql55-mysql-devel-5.5.36-1.1.el6 +3
Fixes 12 records
Priority MEDIUM 42
Buffer overflow in client/mysql.cc in Oracle MySQL and MariaDB before 5.5.35 allows remote database servers to cause a denial of service (crash) and possibly execute arbitrary code via a long server version string.
CVSS 2.0HIGH 7.5· Network · No auth · Interaction — · EPSS 0.06405 · Published 2014-01-31 · Fixed CWE-119
Priority LOW 27
Unspecified vulnerability in Oracle MySQL Server 5.5.x through 5.5.32 and 5.6.x through 5.6.12 allows remote authenticated users to affect confidentiality and integrity via unknown vectors related to Replication.
CVSS 2.0MEDIUM 4.9· Network · Low privileges · Interaction — · EPSS 0.022 · Published 2013-10-16 · Fixed
Priority LOW 25
Unspecified vulnerability in the MySQL Server component in Oracle MySQL 5.1.72 and earlier, 5.5.34 and earlier, and 5.6.14 and earlier allows remote authenticated users to affect availability via unknown vectors related…
CVSS 2.0MEDIUM 4.0· Network · Low privileges · Interaction — · EPSS 0.03388 · Published 2014-01-15 · Fixed
Priority LOW 25
Unspecified vulnerability in the MySQL Server component in Oracle MySQL 5.1.71 and earlier, 5.5.33 and earlier, and 5.6.13 and earlier allows remote authenticated users to affect availability via unknown vectors related…
CVSS 2.0MEDIUM 4.0· Network · Low privileges · Interaction — · EPSS 0.03388 · Published 2014-01-15 · Fixed
Priority LOW 25
Unspecified vulnerability in the MySQL Server component in Oracle MySQL 5.1.72 and earlier, 5.5.34 and earlier, and 5.6.14 and earlier allows remote authenticated users to affect availability via unknown vectors.
CVSS 2.0MEDIUM 4.0· Network · Low privileges · Interaction — · EPSS 0.03818 · Published 2014-01-15 · Fixed
Priority LOW 25
Unspecified vulnerability in the MySQL Server component in Oracle MySQL 5.1.71 and earlier, 5.5.33 and earlier, and 5.6.13 and earlier allows remote authenticated users to affect availability via unknown vectors related…
CVSS 2.0MEDIUM 4.0· Network · Low privileges · Interaction — · EPSS 0.03388 · Published 2014-01-15 · Fixed
Priority LOW 25
Unspecified vulnerability in the MySQL Server component in Oracle MySQL 5.5.33 and earlier and 5.6.13 and earlier allows remote authenticated users to affect availability via unknown vectors related to Partition.
CVSS 2.0MEDIUM 4.0· Network · Low privileges · Interaction — · EPSS 0.03818 · Published 2014-01-15 · Fixed
Priority LOW 24
Unspecified vulnerability in the MySQL Server component in Oracle MySQL 5.1.70 and earlier, 5.5.32 and earlier, and 5.6.12 and earlier allows remote authenticated users to affect availability via unknown vectors related…
CVSS 2.0MEDIUM 4.0· Network · Low privileges · Interaction — · EPSS 0.03115 · Published 2013-10-16 · Partial fix
Priority LOW 23
Unspecified vulnerability in the MySQL Server component in Oracle MySQL 5.1.72 and earlier, 5.5.34 and earlier, and 5.6.14 and earlier allows remote authenticated users to affect availability via unknown vectors related…
CVSS 2.0LOW 3.5· Network · Low privileges · Interaction — · EPSS 0.03212 · Published 2014-01-15 · Fixed
Priority LOW 22
Unspecified vulnerability in the MySQL Server component in Oracle MySQL 5.1.71 and earlier, 5.5.33 and earlier, and 5.6.13 and earlier allows remote authenticated users to affect integrity via unknown vectors related to…
CVSS 2.0LOW 3.3· Network · Low privileges · Interaction — · EPSS 0.03041 · Published 2014-01-15 · Fixed
Priority LOW 21
Unspecified vulnerability in the MySQL Server component in Oracle MySQL 5.1.72 and earlier, 5.5.34 and earlier, and 5.6.14 and earlier allows remote attackers to affect availability via unknown vectors related to Error H…
CVSS 2.0LOW 2.6· Network · No auth · Interaction — · EPSS 0.0467 · Published 2014-01-15 · Fixed
Priority LOW 20
Unspecified vulnerability in the MySQL Server component in Oracle MySQL 5.5.34 and earlier, and 5.6.14 and earlier, allows remote authenticated users to affect availability via unknown vectors related to Replication.
CVSS 2.0LOW 2.8· Network · Low privileges · Interaction — · EPSS 0.03702 · Published 2014-01-15 · Fixed