CVE-2014-0402: Medium severity Oracle MySQL vulnerability
Unspecified vulnerability in the MySQL Server component in Oracle MySQL 5.1.71 and earlier, 5.5.33 and earlier, and 5.6.13 and earlier allows remote authenticated users to affect availability via unknown vectors related to Locking.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2014-0402?
CVE-2014-0402 is classified as a moderate severity vulnerability.
How do I fix CVE-2014-0402?
To remediate CVE-2014-0402, upgrade to a version of MySQL beyond 5.6.13 or apply the recommended patches provided by the vendor.
What types of systems are affected by CVE-2014-0402?
CVE-2014-0402 affects Oracle MySQL versions 5.1.71 and earlier, 5.5.33 and earlier, and 5.6.13 and earlier, as well as certain versions of MariaDB and various Linux distributions.
Can CVE-2014-0402 allow unauthorized access to my database?
CVE-2014-0402 does not grant unauthorized access, but it can be exploited by authenticated users to disrupt service availability.
What should I do if I cannot patch for CVE-2014-0402 immediately?
If immediate patching is not possible for CVE-2014-0402, implement strict access controls to limit authenticated user access and monitor database activity closely.