CVE-2014-4240: Low severity ORACLE MySQL vulnerability
Published Jul 17, 2014
·Updated
Unspecified vulnerability in the MySQL Server component in Oracle MySQL 5.6.17 and earlier allows local users to affect confidentiality and integrity via vectors related to SRREP.
Affected Software
18 affected components
ORACLE MySQL<=5.6.17
ORACLE MySQL=5.6.0
ORACLE MySQL=5.6.1
ORACLE MySQL=5.6.2
ORACLE MySQL=5.6.3
ORACLE MySQL=5.6.4
ORACLE MySQL=5.6.5
ORACLE MySQL=5.6.6
ORACLE MySQL=5.6.7
ORACLE MySQL=5.6.8
ORACLE MySQL=5.6.9
ORACLE MySQL=5.6.10
ORACLE MySQL=5.6.11
ORACLE MySQL=5.6.12
ORACLE MySQL=5.6.13
ORACLE MySQL=5.6.14
ORACLE MySQL=5.6.15
ORACLE MySQL=5.6.16
Event History
Jul 17, 2014
CVE Published
via MITRE·10:00 AM
Data Sourced
via MITRE·10:00 AM
Description
Frequently Asked Questions
1
What is the severity of CVE-2014-4240?
CVE-2014-4240 is considered to have a moderate severity level due to its potential impact on confidentiality and integrity.
2
How do I fix CVE-2014-4240?
To fix CVE-2014-4240, upgrade your MySQL Server to version 5.6.18 or later.
3
What versions of MySQL are affected by CVE-2014-4240?
CVE-2014-4240 affects MySQL versions 5.6.17 and earlier.
4
What type of vulnerability is CVE-2014-4240?
CVE-2014-4240 is an unspecified vulnerability that allows local users to affect confidentiality and integrity.
5
Who is the vendor for CVE-2014-4240?
The vendor for CVE-2014-4240 is Oracle, and it specifically involves their MySQL product.