CVE-2014-4258: Medium severity Oracle MySQL vulnerability

Q: What is the severity of CVE-2014-4258?

CVE-2014-4258 is considered a medium severity vulnerability as it can impact confidentiality, integrity, and availability.

Q: How do I fix CVE-2014-4258?

To fix CVE-2014-4258, you should upgrade MySQL to a version later than 5.5.37 or 5.6.17.

Q: What components are affected by CVE-2014-4258?

CVE-2014-4258 affects the MySQL Server component of Oracle MySQL versions 5.5.37 and earlier and 5.6.17 and earlier.

Q: Can CVE-2014-4258 be exploited remotely?

Yes, CVE-2014-4258 can be exploited by remote authenticated users.

Q: What specific products are known to be affected by CVE-2014-4258?

Products known to be affected by CVE-2014-4258 include Oracle MySQL and various versions of VMware vCenter Server Appliance.

Published Jul 17, 2014

Updated

Unspecified vulnerability in the MySQL Server component in Oracle MySQL 5.5.37 and earlier and 5.6.17 and earlier allows remote authenticated users to affect confidentiality, integrity, and availability via vectors related to SRINFOSC.

Affected Software

26 affected components

Oracle MySQL>=5.5.0<=5.5.37

Oracle MySQL>=5.6.0<=5.6.17

VMware vCenter Server Appliance=5.0

VMware vCenter Server Appliance=5.0-update_1

VMware vCenter Server Appliance=5.0-update_2

VMware vCenter Server Appliance=5.1

VMware vCenter Server Appliance=5.1-update_1

VMware vCenter Server Appliance=5.1-update_2

VMware vCenter Server Appliance=5.5

VMware vCenter Server Appliance=5.5-update_1

Oracle Solaris=11.3

Opensuse Project Suse Linux Enterprise Desktop=11.0-sp3

Opensuse Project Suse Linux Enterprise Server=11.0-sp3

Opensuse Project Suse Linux Enterprise Server Vmware=11.0-sp3

Opensuse Project Suse Linux Enterprise Software Development Kit=11.0-sp3

Debian Debian Linux=7.0

MariaDB MariaDB>=5.5.0<5.5.38

MariaDB MariaDB>=10.0.0<10.0.12

SUSE Linux Enterprise Desktop=11-sp3

SUSE Linux Enterprise Desktop=12

SUSE Linux Enterprise Server=11-sp3

SUSE Linux Enterprise Server Vmware=11-sp3

SUSE Linux Enterprise Server=12

SUSE Linux Enterprise Software Development Kit=11-sp3

SUSE Linux Enterprise Software Development Kit=12

SUSE Linux Enterprise Workstation Extension=12

Event History

Jul 17, 2014

CVE Published

via MITRE·10:00 AM

Data Sourced

via MITRE·10:00 AM

Description

Frequently Asked Questions

What is the severity of CVE-2014-4258?

CVE-2014-4258 is considered a medium severity vulnerability as it can impact confidentiality, integrity, and availability.

How do I fix CVE-2014-4258?

To fix CVE-2014-4258, you should upgrade MySQL to a version later than 5.5.37 or 5.6.17.

What components are affected by CVE-2014-4258?

CVE-2014-4258 affects the MySQL Server component of Oracle MySQL versions 5.5.37 and earlier and 5.6.17 and earlier.

Can CVE-2014-4258 be exploited remotely?

Yes, CVE-2014-4258 can be exploited by remote authenticated users.

What specific products are known to be affected by CVE-2014-4258?