First published: Thu Jul 17 2014(Updated: )
Unspecified vulnerability in the MySQL Server component in Oracle MySQL 5.5.37 and earlier and 5.6.17 and earlier allows remote authenticated users to affect confidentiality, integrity, and availability via vectors related to SRINFOSC.
Credit: secalert_us@oracle.com
Affected Software | Affected Version | How to fix |
---|---|---|
MySQL | >=5.5.0<=5.5.37 | |
MySQL | >=5.6.0<=5.6.17 | |
VMware vCenter Server Appliance | =5.0 | |
VMware vCenter Server Appliance | =5.0-update_1 | |
VMware vCenter Server Appliance | =5.0-update_2 | |
VMware vCenter Server Appliance | =5.1 | |
VMware vCenter Server Appliance | =5.1-update_1 | |
VMware vCenter Server Appliance | =5.1-update_2 | |
VMware vCenter Server Appliance | =5.5 | |
VMware vCenter Server Appliance | =5.5-update_1 | |
Oracle Solaris SPARC | =11.3 | |
SUSE Linux Enterprise Desktop | =11.0-sp3 | |
SUSE Linux Enterprise Server | =11.0-sp3 | |
SUSE Linux Enterprise Server | =11.0-sp3 | |
SUSE Linux Enterprise Software Development Kit | =11.0-sp3 | |
Debian | =7.0 | |
Ariadne CMS | >=5.5.0<5.5.38 | |
Ariadne CMS | >=10.0.0<10.0.12 | |
SUSE Linux Enterprise Desktop with Beagle | =11-sp3 | |
SUSE Linux Enterprise Desktop with Beagle | =12 | |
SUSE Linux Enterprise Server | =11-sp3 | |
suse linux enterprise server vmware | =11-sp3 | |
SUSE Linux Enterprise Server | =12 | |
SUSE Linux Enterprise Software Development Kit | =11-sp3 | |
SUSE Linux Enterprise Software Development Kit | =12 | |
SUSE Linux Enterprise Workstation Extension | =12 |
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
CVE-2014-4258 is considered a medium severity vulnerability as it can impact confidentiality, integrity, and availability.
To fix CVE-2014-4258, you should upgrade MySQL to a version later than 5.5.37 or 5.6.17.
CVE-2014-4258 affects the MySQL Server component of Oracle MySQL versions 5.5.37 and earlier and 5.6.17 and earlier.
Yes, CVE-2014-4258 can be exploited by remote authenticated users.
Products known to be affected by CVE-2014-4258 include Oracle MySQL and various versions of VMware vCenter Server Appliance.