CVE-2014-2494: Medium severity mysql vulnerability
Published Jul 17, 2014
·Updated
Unspecified vulnerability in the MySQL Server component in Oracle MySQL 5.5.37 and earlier allows remote authenticated users to affect availability via vectors related to ENARC.
Affected Software
12 affected components
Oracle MySQL>=5.5.0<=5.5.37
SUSE Linux Enterprise Desktop=11-sp3
SUSE Linux Enterprise Desktop=12
SUSE Linux Enterprise Server=11-sp3
SUSE Linux Enterprise Server Vmware=11-sp3
SUSE Linux Enterprise Server=12
SUSE Linux Enterprise Software Development Kit=11-sp3
SUSE Linux Enterprise Software Development Kit=12
SUSE Linux Enterprise Workstation Extension=12
MariaDB MariaDB>=5.5.0<5.5.38
MariaDB MariaDB>=10.0.0<10.0.12
Debian Debian Linux=7.0
Event History
Jul 17, 2014
CVE Published
via MITRE·02:36 AM
Data Sourced
via MITRE·02:36 AM
Description
Frequently Asked Questions
1
What is the severity of CVE-2014-2494?
CVE-2014-2494 has a medium severity rating that may affect the availability of MySQL Server.
2
How do I fix CVE-2014-2494?
To fix CVE-2014-2494, upgrade to MySQL version 5.5.38 or later.
3
What are the affected versions in CVE-2014-2494?
CVE-2014-2494 affects Oracle MySQL 5.5.37 and earlier versions.
4
Who are the affected users of CVE-2014-2494?
Remote authenticated users of MySQL may be impacted by CVE-2014-2494.
5
Is CVE-2014-2494 present in MariaDB?
Yes, CVE-2014-2494 affects certain versions of MariaDB prior to 5.5.38.