CVE-2014-4258
Unspecified vulnerability in the MySQL Server component in Oracle MySQL 5.5.37 and earlier and 5.6.17 and earlier allows remote authenticated users to affect confidentiality, integrity, and availability via vectors related to SRINFOSC.
- Score
- CVSS 2.0 6.5 Medium
- Status
- Modified - secalert_us@oracle.com
- Published
- 2014-07-17
- Last modified
- 2024-08-06
Affected products
- Debian Linux (Debian)
- Mariadb (Mariadb)
- Suse Linux Enterprise Desktop (Opensuse Project)
- Suse Linux Enterprise Server (Opensuse Project)
- Suse Linux Enterprise Software Development Kit (Opensuse Project)
- Mysql (Oracle)
- Solaris (Oracle)
- Linux Enterprise Desktop (Suse)
- Linux Enterprise Server (Suse)
- Linux Enterprise Software Development Kit (Suse)
- Linux Enterprise Workstation Extension (Suse)
- Vcenter Server Appliance (Vmware)
References
- http://lists.opensuse.org/opensuse-security-announce/2014-08/msg00012.html
- http://lists.opensuse.org/opensuse-security-announce/2015-04/msg00016.html
- http://seclists.org/fulldisclosure/2014/Dec/23
- http://secunia.com/advisories/60425
- http://www.debian.org/security/2014/dsa-2985
- http://www.oracle.com/technetwork/topics/security/bulletinoct2015-2511968.html
- http://www.oracle.com/technetwork/topics/security/cpujul2014-1972956.html
- http://www.securityfocus.com/archive/1/534161/100/0/threaded
- http://www.securityfocus.com/bid/68564
- http://www.securitytracker.com/id/1030578
- http://www.vmware.com/security/advisories/VMSA-2014-0012.html
- https://exchange.xforce.ibmcloud.com/vulnerabilities/94620
