CVE-2014-0384: Medium severity Oracle MySQL vulnerability
Published Apr 15, 2014
·Updated
Unspecified vulnerability in the MySQL Server component in Oracle MySQL 5.5.35 and earlier and 5.6.15 and earlier allows remote authenticated users to affect availability via vectors related to XML.
Affected Software
22 affected components
Oracle MySQL>=5.5.0<=5.5.35
Oracle MySQL>=5.6.0<=5.6.15
MariaDB MariaDB>=5.5.0<5.5.36
MariaDB MariaDB>=10.0.0<10.0.9
redhat Enterprise Linux Desktop=5.0
redhat Enterprise Linux Desktop=7.0
redhat Enterprise Linux Eus=7.3
redhat Enterprise Linux Eus=7.4
redhat Enterprise Linux Eus=7.5
redhat Enterprise Linux Eus=7.6
redhat Enterprise Linux Eus=7.7
redhat Enterprise Linux Server=5.0
redhat Enterprise Linux Server=7.0
redhat Enterprise Linux Server Aus=7.3
redhat Enterprise Linux Server Aus=7.4
redhat Enterprise Linux Server Aus=7.6
redhat Enterprise Linux Server Aus=7.7
redhat Enterprise Linux Server Tus=7.3
redhat Enterprise Linux Server Tus=7.6
redhat Enterprise Linux Server Tus=7.7
redhat Enterprise Linux Workstation=5.0
redhat Enterprise Linux Workstation=7.0
Event History
Apr 15, 2014
CVE Published
via MITRE·10:00 PM
Data Sourced
via MITRE·10:00 PM
Description
Apr 16, 2014
Data Sourced
via NVD·12:55 AM
DescriptionSeverityAffected Software
Frequently Asked Questions
1
What is the severity of CVE-2014-0384?
CVE-2014-0384 is classified as a medium severity vulnerability affecting MySQL and MariaDB.
2
How do I fix CVE-2014-0384?
To fix CVE-2014-0384, upgrade MySQL to version 5.5.36 or later and 5.6.16 or later; for MariaDB, upgrade to version 5.5.36 or later.
3
Which versions of MySQL are affected by CVE-2014-0384?
CVE-2014-0384 affects MySQL versions 5.5.35 and earlier as well as 5.6.15 and earlier.
4
Can unprivileged users exploit CVE-2014-0384?
CVE-2014-0384 can only be exploited by remote authenticated users, potentially affecting service availability.
5
Is there a patch available for CVE-2014-0384?
Yes, patches for CVE-2014-0384 are available in the newer versions of MySQL and MariaDB.