CVE-2014-4287: Medium severity Oracle MySQL vulnerability

Q: What is the severity of CVE-2014-4287?

CVE-2014-4287 is considered a medium severity vulnerability due to its potential impact on the availability of affected MySQL servers.

Q: How do I fix CVE-2014-4287?

To fix CVE-2014-4287, it is recommended to upgrade your MySQL server to a version later than 5.5.38 or 5.6.19.

Q: What versions are affected by CVE-2014-4287?

CVE-2014-4287 affects Oracle MySQL Server versions 5.5.38 and earlier, as well as 5.6.19 and earlier.

Q: Can CVE-2014-4287 be exploited remotely?

Yes, CVE-2014-4287 can be exploited by remote authenticated users, impacting the availability of the server.

Q: Is there a workaround for CVE-2014-4287?

No specific workaround is documented for CVE-2014-4287; upgrading to a patched version is the recommended action.

Published Oct 15, 2014

Updated

Unspecified vulnerability in Oracle MySQL Server 5.5.38 and earlier and 5.6.19 and earlier allows remote authenticated users to affect availability via vectors related to SERVER:CHARACTER SETS.

Affected Software

8 affected components

Oracle MySQL>=5.5.0<=5.5.38

Oracle MySQL>=5.6.0<=5.6.19

SUSE Linux Enterprise Desktop=12

SUSE Linux Enterprise Server=12

SUSE Linux Enterprise Software Development Kit=12

SUSE Linux Enterprise Workstation Extension=12

MariaDB MariaDB>=5.5.0<5.5.39

MariaDB MariaDB>=10.0.0<10.0.13

Remediation

Patch Available

http://www.oracle.com/technetwork/topics/security/cpuoct2014-1972960.html

Event History

Oct 15, 2014

CVE Published

via MITRE·03:15 PM

Data Sourced

via MITRE·03:15 PM

Description

Frequently Asked Questions

What is the severity of CVE-2014-4287?

CVE-2014-4287 is considered a medium severity vulnerability due to its potential impact on the availability of affected MySQL servers.

How do I fix CVE-2014-4287?