Red Hat Security Advisory

RHSA-2014:1859

mysql55-mysql security update

Released 2014-11-17 · Red Hat rating Important · View on Red Hat →

Fixed in

Red Hat Enterprise Linux (v. 5 server) mysql55-mysql-5.5.40-2.el5, mysql55-mysql-5.5.40-2.el5.i386, mysql55-mysql-5.5.40-2.el5.ia64 +21
Red Hat Enterprise Linux Desktop (v. 5 client) mysql55-mysql-5.5.40-2.el5, mysql55-mysql-5.5.40-2.el5.i386, mysql55-mysql-bench-5.5.40-2.el5 +7
Red Hat Enterprise Linux Desktop Workstation (v. 5 client) mysql55-mysql-5.5.40-2.el5, mysql55-mysql-devel-5.5.40-2.el5, mysql55-mysql-devel-5.5.40-2.el5.i386

Fixes 19 records

TI-2012-04719 CVE-2012-5615 · GHSA-7ccw-fmfw-7xm6

Oracle MySQL 5.5.38 and earlier, 5.6.19 and earlier, and MariaDB 5.5.28a, 5.3.11, 5.2.13…

LOW 38

Oracle MySQL 5.5.38 and earlier, 5.6.19 and earlier, and MariaDB 5.5.28a, 5.3.11, 5.2.13, 5.1.66, and possibly other versions, generates different error messages with different time delays depending on whether a user nam…

CVSS 2.0MEDIUM 5.0 Network No auth Interaction — EPSS 0.14784 Published 2012-12-03 Partial fix CWE-200

TI-2014-05319 CVE-2014-6469 · GHSA-9hqq-q36x-r842

Unspecified vulnerability in Oracle MySQL Server 5.5.39 and earlier and 5.6.20 and…

LOW 37

Unspecified vulnerability in Oracle MySQL Server 5.5.39 and earlier and 5.6.20 and earlier allows remote authenticated users to affect availability via vectors related to SERVER:OPTIMIZER.

CVSS 2.0MEDIUM 6.8 Network Low privileges Interaction — EPSS 0.04444 Published 2014-10-15 Partial fix

TI-2014-05405 CVE-2014-6555 · GHSA-j4wv-3vp2-6h26

Unspecified vulnerability in Oracle MySQL Server 5.5.39 and earlier and 5.6.20 and…

LOW 36

Unspecified vulnerability in Oracle MySQL Server 5.5.39 and earlier and 5.6.20 and earlier allows remote authenticated users to affect confidentiality, integrity, and availability via vectors related to SERVER:DML.

CVSS 2.0MEDIUM 6.5 Network Low privileges Interaction — EPSS 0.03928 Published 2014-10-15 Partial fix

TI-2014-03483 CVE-2014-4258 · GHSA-x2cv-5mxq-rr26

Unspecified vulnerability in the MySQL Server component in Oracle MySQL 5.5.37 and…

LOW 35

Unspecified vulnerability in the MySQL Server component in Oracle MySQL 5.5.37 and earlier and 5.6.17 and earlier allows remote authenticated users to affect confidentiality, integrity, and availability via vectors relat…

CVSS 2.0MEDIUM 6.5 Network Low privileges Interaction — EPSS 0.03511 Published 2014-07-17 Partial fix

TI-2014-05380 CVE-2014-6530 · GHSA-9hcp-g7mj-3x43

Unspecified vulnerability in Oracle MySQL Server 5.5.38 and earlier, and 5.6.19 and…

LOW 34

Unspecified vulnerability in Oracle MySQL Server 5.5.38 and earlier, and 5.6.19 and earlier, allows remote authenticated users to affect confidentiality, integrity, and availability via vectors related to CLIENT:MYSQLDUM…

CVSS 2.0MEDIUM 6.5 Network Low privileges Interaction — EPSS 0.02689 Published 2014-10-15 Partial fix

TI-2014-03485 CVE-2014-4260 · GHSA-cvmv-873q-9hjf

Unspecified vulnerability in the MySQL Server component in Oracle MySQL 5.5.37 and…

LOW 31

Unspecified vulnerability in the MySQL Server component in Oracle MySQL 5.5.37 and earlier, and 5.6.17 and earlier, allows remote authenticated users to affect integrity and availability via vectors related to SRCHAR.

CVSS 2.0MEDIUM 5.5 Network Low privileges Interaction — EPSS 0.03511 Published 2014-07-17 Partial fix

TI-2014-05357 CVE-2014-6507 · GHSA-22q4-5758-44qv

Unspecified vulnerability in Oracle MySQL Server 5.5.39 and earlier, and 5.6.20 and…

LOW 30

Unspecified vulnerability in Oracle MySQL Server 5.5.39 and earlier, and 5.6.20 and earlier, allows remote authenticated users to affect confidentiality, integrity, and availability via vectors related to SERVER:DML.

CVSS 2.0MEDIUM 4.3 Network No auth Interaction — EPSS 0.0726 Published 2014-10-15 Partial fix

TI-2014-05409 CVE-2014-6559 · GHSA-w8x6-wwmf-7h55

Unspecified vulnerability in Oracle MySQL Server 5.5.39 and earlier, and 5.6.20 and…

LOW 28

Unspecified vulnerability in Oracle MySQL Server 5.5.39 and earlier, and 5.6.20 and earlier, allows remote attackers to affect confidentiality via vectors related to C API SSL CERTIFICATE HANDLING.

CVSS 2.0MEDIUM 4.3 Network No auth Interaction — EPSS 0.04672 Published 2014-10-15 Partial fix

TI-2014-05314 CVE-2014-6464 · GHSA-c7hg-6jw5-r93r

Unspecified vulnerability in Oracle MySQL Server 5.5.39 and earlier and 5.6.20 and…

LOW 26

Unspecified vulnerability in Oracle MySQL Server 5.5.39 and earlier and 5.6.20 and earlier allows remote authenticated users to affect availability via vectors related to SERVER:INNODB DML FOREIGN KEYS.

CVSS 2.0MEDIUM 4.0 Network Low privileges Interaction — EPSS 0.04132 Published 2014-10-15 Partial fix

TI-2014-03432 CVE-2014-4207 · GHSA-j92r-fc65-r2hf

Unspecified vulnerability in the MySQL Server component in Oracle MySQL 5.5.37 and…

LOW 26

Unspecified vulnerability in the MySQL Server component in Oracle MySQL 5.5.37 and earlier allows remote authenticated users to affect availability via vectors related to SROPTZR.

CVSS 2.0MEDIUM 4.0 Network Low privileges Interaction — EPSS 0.03944 Published 2014-07-17 Partial fix

TI-2014-02003 CVE-2014-2494 · GHSA-8cpc-jvx2-9h3j

Unspecified vulnerability in the MySQL Server component in Oracle MySQL 5.5.37 and…

LOW 25

Unspecified vulnerability in the MySQL Server component in Oracle MySQL 5.5.37 and earlier allows remote authenticated users to affect availability via vectors related to ENARC.

CVSS 2.0MEDIUM 4.0 Network Low privileges Interaction — EPSS 0.03511 Published 2014-07-17 Partial fix

TI-2014-05370 CVE-2014-6520 · GHSA-6r9q-5mgc-68fr

Unspecified vulnerability in Oracle MySQL Server 5.5.38 and earlier allows remote…

LOW 24

Unspecified vulnerability in Oracle MySQL Server 5.5.38 and earlier allows remote authenticated users to affect availability via vectors related to SERVER:DDL.

CVSS 2.0MEDIUM 4.0 Network Low privileges Interaction — EPSS 0.02666 Published 2014-10-15 Partial fix

TI-2014-05355 CVE-2014-6505 · GHSA-vc65-mfjq-2vp5

Unspecified vulnerability in Oracle MySQL Server 5.5.38 and earlier, and 5.6.19 and…

LOW 24

Unspecified vulnerability in Oracle MySQL Server 5.5.38 and earlier, and 5.6.19 and earlier, allows remote authenticated users to affect availability via vectors related to SERVER:MEMORY STORAGE ENGINE.

CVSS 2.0MEDIUM 4.0 Network Low privileges Interaction — EPSS 0.02689 Published 2014-10-15 Partial fix

TI-2014-05334 CVE-2014-6484 · GHSA-53f6-xf5w-3x63

Unspecified vulnerability in Oracle MySQL Server 5.5.38 and earlier, and 5.6.19 and…

LOW 24

Unspecified vulnerability in Oracle MySQL Server 5.5.38 and earlier, and 5.6.19 and earlier, allows remote authenticated users to affect availability via vectors related to SERVER:DML.

CVSS 2.0MEDIUM 4.0 Network Low privileges Interaction — EPSS 0.02689 Published 2014-10-15 Partial fix

TI-2014-03509 CVE-2014-4287 · GHSA-vhwf-3cfr-2p4m

Unspecified vulnerability in Oracle MySQL Server 5.5.38 and earlier and 5.6.19 and…

LOW 24

Unspecified vulnerability in Oracle MySQL Server 5.5.38 and earlier and 5.6.19 and earlier allows remote authenticated users to affect availability via vectors related to SERVER:CHARACTER SETS.

CVSS 2.0MEDIUM 4.0 Network Low privileges Interaction — EPSS 0.02689 Published 2014-10-15 Partial fix

TI-2014-05313 CVE-2014-6463 · GHSA-qm87-qcwv-gq43

Unspecified vulnerability in Oracle MySQL Server 5.5.38 and earlier and 5.6.19 and…

LOW 21

Unspecified vulnerability in Oracle MySQL Server 5.5.38 and earlier and 5.6.19 and earlier allows remote authenticated users to affect availability via vectors related to SERVER:REPLICATION ROW FORMAT BINARY LOG DML.

CVSS 2.0LOW 3.3 Network Low privileges Interaction — EPSS 0.02815 Published 2014-10-15 Partial fix

TI-2014-03468 CVE-2014-4243 · GHSA-8hx7-fw96-w88r

Unspecified vulnerability in the MySQL Server component in Oracle MySQL 5.5.35 and…

LOW 20

Unspecified vulnerability in the MySQL Server component in Oracle MySQL 5.5.35 and earlier and 5.6.15 and earlier allows remote authenticated users to affect availability via vectors related to ENFED.

CVSS 2.0LOW 2.8 Network Low privileges Interaction — EPSS 0.03404 Published 2014-07-17 Partial fix

TI-2014-03497 CVE-2014-4274 · GHSA-q3fw-w8pr-jpq6

Unspecified vulnerability in Oracle MySQL Server 5.5.38 and earlier and 5.6.19 and…

LOW 19

Unspecified vulnerability in Oracle MySQL Server 5.5.38 and earlier and 5.6.19 and earlier allows local users to affect confidentiality, integrity, and availability via vectors related to SERVER:MyISAM.

CVSS 2.0MEDIUM 4.1 Local Low privileges Interaction — EPSS 0.00343 Published 2014-10-15 Partial fix

TI-2014-05401 CVE-2014-6551 · GHSA-v37f-f38p-2x76

Unspecified vulnerability in Oracle MySQL Server 5.5.38 and earlier and 5.6.19 and…

LOW 11

Unspecified vulnerability in Oracle MySQL Server 5.5.38 and earlier and 5.6.19 and earlier allows local users to affect confidentiality via vectors related to CLIENT:MYSQLADMIN.

CVSS 2.0LOW 2.1 Local No auth Interaction — EPSS 0.0039 Published 2014-10-15 Partial fix