First published: Thu Jul 17 2014(Updated: )
Unspecified vulnerability in the MySQL Server component in Oracle MySQL 5.5.37 and earlier, and 5.6.17 and earlier, allows remote authenticated users to affect integrity and availability via vectors related to SRCHAR.
Credit: secalert_us@oracle.com
Affected Software | Affected Version | How to fix |
---|---|---|
MySQL | >=5.5.0<=5.5.37 | |
MySQL | >=5.6.0<=5.6.17 | |
Oracle Solaris SPARC | =11.3 | |
Debian Debian Linux | =7.0 | |
SUSE Linux Enterprise Desktop with Beagle | =11-sp3 | |
SUSE Linux Enterprise Desktop with Beagle | =12 | |
SUSE Linux Enterprise Server | =11-sp3 | |
suse linux enterprise server vmware | =11-sp3 | |
SUSE Linux Enterprise Server | =12 | |
SUSE Linux Enterprise Software Development Kit | =11-sp3 | |
SUSE Linux Enterprise Software Development Kit | =12 | |
SUSE Linux Enterprise Workstation Extension | =12 | |
Mariadb Mariadb | >=5.5.0<5.5.38 | |
Mariadb Mariadb | >=10.0.0<10.0.12 |
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
CVE-2014-4260 is rated as a medium severity vulnerability that affects the integrity and availability of MySQL Server.
To mitigate CVE-2014-4260, update to a version of MySQL Server that is newer than 5.6.17 or 5.5.37.
CVE-2014-4260 affects remote authenticated users of Oracle MySQL versions 5.5.37 and earlier, and 5.6.17 and earlier.
CVE-2014-4260 involves the MySQL Server component in Oracle's database software.
Yes, CVE-2014-4260 can be exploited by remote authenticated users.