CVE-2014-4258 Unspecified vulnerability in the MySQL Server component in Oracle MySQL 5.5.37 and earlier and 5.6.17 and earlier allows remote authenticated users to affect confidentiality, integrity, and availabili...
MediumCVSS 6.5
EPSS 3.5%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Unspecified vulnerability in the MySQL Server component in Oracle MySQL 5.5.37 and earlier and 5.6.17 and earlier allows remote authenticated users to affect confidentiality, integrity, and availability via vectors related to SRINFOSC.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| oracle MySQL | >= 5.5.0, <= 5.5.37 | No fix listed |
| oracle MySQL | >= 5.6.0, <= 5.6.17 | No fix listed |
| VMware vcenter server appliance | = 5.0 | No fix listed |
| VMware vcenter server appliance | = 5.0-update_1 | No fix listed |
| VMware vcenter server appliance | = 5.0-update_2 | No fix listed |
| VMware vcenter server appliance | = 5.1 | No fix listed |
| VMware vcenter server appliance | = 5.1-update_1 | No fix listed |
| VMware vcenter server appliance | = 5.1-update_2 | No fix listed |
| VMware vcenter server appliance | = 5.5 | No fix listed |
| VMware vcenter server appliance | = 5.5-update_1 | No fix listed |
| oracle solaris | = 11.3 | No fix listed |
| opensuse project suse linux enterprise desktop | = 11.0-sp3 | No fix listed |
| opensuse project suse linux enterprise server | = 11.0-sp3 | No fix listed |
| opensuse project suse linux enterprise software development kit | = 11.0-sp3 | No fix listed |
| debian linux | = 7.0 | No fix listed |
| MariaDB Server | >= 5.5.0, < 5.5.38 | 5.5.38 |
| MariaDB Server | >= 10.0.0, < 10.0.12 | 10.0.12 |
| SUSE linux enterprise desktop | = 11-sp3 | No fix listed |
| SUSE linux enterprise desktop | = 12 | No fix listed |
| SUSE linux enterprise server | = 11-sp3 | No fix listed |
| SUSE linux enterprise server | = 12 | No fix listed |
| SUSE linux enterprise software development kit | = 11-sp3 | No fix listed |
| SUSE linux enterprise software development kit | = 12 | No fix listed |
| SUSE linux enterprise workstation extension | = 12 | No fix listed |
References
- SUSE-SU-2014:1072 mailing-list third-party-advisory vendor-advisory
- SUSE-SU-2015:0743 mailing-list third-party-advisory vendor-advisory
- 20141205 NEW: VMSA-2014-0012 - VMware vSphere product updates address security vulnerabilities mailing-list third-party-advisory
- 60425 not-applicable third-party-advisory
- DSA-2985 third-party-advisory vendor-advisory
- www.oracle.com vendor-advisory
- www.oracle.com vendor-advisory
- 20141205 NEW: VMSA-2014-0012 - VMware vSphere product updates address security vulnerabilities mailing-list third-party-advisory vdb-entry
- 68564 third-party-advisory vdb-entry
- 1030578 broken-link third-party-advisory vdb-entry
- www.vmware.com third-party-advisory
- oracle-cpujul2014-cve20144258(94620) third-party-advisory vdb-entry