CVE-2013-5860: Medium severity mysql vulnerability
Published Jan 15, 2014
·Updated
Unspecified vulnerability in the MySQL Server component in Oracle MySQL 5.6.14 and earlier allows remote authenticated users to affect availability via vectors related to GIS.
Affected Software
15 affected components
ORACLE MySQL<=5.6.14
ORACLE MySQL=5.6.0
ORACLE MySQL=5.6.1
ORACLE MySQL=5.6.2
ORACLE MySQL=5.6.3
ORACLE MySQL=5.6.4
ORACLE MySQL=5.6.5
ORACLE MySQL=5.6.6
ORACLE MySQL=5.6.7
ORACLE MySQL=5.6.8
ORACLE MySQL=5.6.9
ORACLE MySQL=5.6.10
ORACLE MySQL=5.6.11
ORACLE MySQL=5.6.12
ORACLE MySQL=5.6.13
Remediation
Event History
Jan 15, 2014
CVE Published
via MITRE·12:30 AM
Data Sourced
via MITRE·12:30 AM
Description
Frequently Asked Questions
1
What is the severity of CVE-2013-5860?
The severity of CVE-2013-5860 is categorized as medium, primarily affecting availability.
2
How do I fix CVE-2013-5860?
To fix CVE-2013-5860, upgrade MySQL Server to version 5.6.15 or later.
3
Who is affected by CVE-2013-5860?
CVE-2013-5860 affects remote authenticated users of Oracle MySQL versions 5.6.14 and earlier.
4
What types of attacks can exploit CVE-2013-5860?
CVE-2013-5860 can be exploited to affect the availability of MySQL Server through vectors related to GIS functionality.
5
When was CVE-2013-5860 disclosed?
CVE-2013-5860 was disclosed in January 2014 during Oracle's Critical Patch Update.