CVE-2014-0001

EUVD-2014-0108
Buffer overflow in client/mysql.cc in Oracle MySQL and MariaDB before 5.5.35 allows remote database servers to cause a denial of service (crash) and possibly execute arbitrary code via a long server version string.
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTPrimary
7.5 UNKNOWN
NETWORK
LOW
AV:N/AC:L/Au:N/C:P/I:P/A:P
Base Score
CVSS 3.x
EPSS Score
Percentile: 95%
Affected Products (NVD)
VendorProductVersion
mariadbmariadb
𝑥
≤ 5.5.34
redhatenterprise_linux
6.0
redhatenterprise_linux_desktop
5.0
redhatenterprise_linux_desktop
6.0
redhatenterprise_linux_server
6.0
redhatenterprise_linux_workstation
6.0
oraclemysql
5.5.0
oraclemysql
5.5.1
oraclemysql
5.5.2
oraclemysql
5.5.3
oraclemysql
5.5.4
oraclemysql
5.5.5
oraclemysql
5.5.6
oraclemysql
5.5.7
oraclemysql
5.5.9
oraclemysql
5.5.10
oraclemysql
5.5.11
oraclemysql
5.5.12
oraclemysql
5.5.13
oraclemysql
5.5.14
oraclemysql
5.5.15
oraclemysql
5.5.16
oraclemysql
5.5.17
oraclemysql
5.5.18
oraclemysql
5.5.19
oraclemysql
5.5.20
oraclemysql
5.5.21
oraclemysql
5.5.22
oraclemysql
5.5.23
oraclemysql
5.5.24
oraclemysql
5.5.25
oraclemysql
5.5.25:a
oraclemysql
5.5.26
oraclemysql
5.5.27
oraclemysql
5.5.28
oraclemysql
5.5.29
oraclemysql
5.5.30
oraclemysql
5.5.31
oraclemysql
5.5.32
oraclemysql
5.5.33
oraclemysql
5.5.34
oraclemysql
5.5.35
oraclemysql
5.5.36
oraclemysql
5.6.0
oraclemysql
5.6.1
oraclemysql
5.6.2
oraclemysql
5.6.3
oraclemysql
5.6.4
oraclemysql
5.6.5
oraclemysql
5.6.6
oraclemysql
5.6.7
oraclemysql
5.6.8
oraclemysql
5.6.9
oraclemysql
5.6.10
oraclemysql
5.6.11
oraclemysql
5.6.12
oraclemysql
5.6.13
oraclemysql
5.6.14
oraclemysql
5.6.15
oraclemysql
5.6.16
𝑥
= Vulnerable software versions
Ubuntu logo
Ubuntu Releases
Ubuntu Product
Codename
mysql-5.5
lucid
dne
precise
Fixed 5.5.37-0ubuntu0.12.04.1
released
quantal
Fixed 5.5.37-0ubuntu0.12.10.1
released
saucy
Fixed 5.5.37-0ubuntu0.13.10.1
released
trusty
Fixed 5.5.37-0ubuntu0.14.04.1
released
utopic
Fixed 5.5.37-0ubuntu0.14.04.1
released
vivid
dne
mysql-5.6
lucid
dne
precise
dne
trusty
Fixed 5.6.17-0ubuntu0.14.04.1
released
utopic
not-affected
vivid
not-affected
mysql-dfsg-5.1
lucid
ignored
precise
dne
quantal
dne
saucy
dne
trusty
dne
utopic
dne
vivid
dne