First published: Wed Apr 16 2014(Updated: )
Unspecified vulnerability in the MySQL Client component in Oracle MySQL 5.5.36 and earlier and 5.6.16 and earlier allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors.
Credit: secalert_us@oracle.com
Affected Software | Affected Version | How to fix |
---|---|---|
MySQL | >=5.5.0<=5.5.36 | |
MySQL | >=5.6.0<=5.6.16 | |
Oracle Solaris SPARC | =11.3 | |
Mariadb Mariadb | >=5.5.0<5.5.37 | |
Mariadb Mariadb | >=10.0.0<10.0.11 | |
redhat enterprise Linux desktop | =5.0 | |
redhat enterprise Linux desktop | =7.0 | |
redhat enterprise Linux eus | =7.3 | |
redhat enterprise Linux eus | =7.4 | |
redhat enterprise Linux eus | =7.5 | |
redhat enterprise Linux eus | =7.6 | |
redhat enterprise Linux eus | =7.7 | |
redhat enterprise Linux server | =5.0 | |
redhat enterprise Linux server | =7.0 | |
redhat enterprise Linux server aus | =7.3 | |
redhat enterprise Linux server aus | =7.4 | |
redhat enterprise Linux server aus | =7.6 | |
redhat enterprise Linux server aus | =7.7 | |
redhat enterprise Linux server tus | =7.3 | |
redhat enterprise Linux server tus | =7.6 | |
redhat enterprise Linux server tus | =7.7 | |
redhat enterprise Linux workstation | =5.0 | |
redhat enterprise Linux workstation | =7.0 |
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
CVE-2014-2440 has an unspecified severity level that allows remote attackers to potentially impact confidentiality, integrity, and availability.
To fix CVE-2014-2440, upgrade to a version of MySQL that is newer than 5.5.36 or 5.6.16.
CVE-2014-2440 affects Oracle MySQL versions 5.5.36 and earlier, as well as 5.6.16 and earlier.
Yes, there are specific versions of MariaDB that fall within the affected range, namely those below 5.5.37 and between 10.0.0 and 10.0.11.
CVE-2014-2440 could impact systems running Oracle MySQL or affected versions of Red Hat Enterprise Linux.