CVE-2014-0433: Medium severity ORACLE MySQL vulnerability
Published Jan 15, 2014
·Updated
Unspecified vulnerability in the MySQL Server component in Oracle MySQL 5.6.13 and earlier allows remote attackers to affect availability via unknown vectors related to Thread Pooling.
Affected Software
14 affected components
ORACLE MySQL<=5.6.13
ORACLE MySQL=5.6.0
ORACLE MySQL=5.6.1
ORACLE MySQL=5.6.2
ORACLE MySQL=5.6.3
ORACLE MySQL=5.6.4
ORACLE MySQL=5.6.5
ORACLE MySQL=5.6.6
ORACLE MySQL=5.6.7
ORACLE MySQL=5.6.8
ORACLE MySQL=5.6.9
ORACLE MySQL=5.6.10
ORACLE MySQL=5.6.11
ORACLE MySQL=5.6.12
Event History
Jan 15, 2014
CVE Published
via MITRE·02:50 AM
Data Sourced
via MITRE·02:50 AM
Description
Data Sourced
via NVD·04:08 PM
DescriptionSeverityAffected Software
Frequently Asked Questions
1
What is the severity of CVE-2014-0433?
CVE-2014-0433 is rated as a medium vulnerability affecting the availability of the MySQL Server.
2
How do I fix CVE-2014-0433?
To resolve CVE-2014-0433, upgrade to MySQL version 5.6.14 or later immediately.
3
What versions of MySQL are affected by CVE-2014-0433?
CVE-2014-0433 affects MySQL versions 5.6.13 and earlier.
4
Can CVE-2014-0433 be exploited remotely?
Yes, CVE-2014-0433 can be exploited by remote attackers to affect the availability of the MySQL Server.
5
What component of MySQL is affected by CVE-2014-0433?
CVE-2014-0433 impacts the Thread Pooling component of the MySQL Server.