CVE-2014-0001
Fixed in a distro release EPSS 6%
Buffer overflow in client/mysql.cc in Oracle MySQL and MariaDB before 5.5.35 allows remote database servers to cause a denial of service (crash) and possibly execute arbitrary code via a long server version string.
Products: mariadb, redhat enterprise_linux, redhat enterprise_linux_desktop, redhat enterprise_linux_server, redhat enterprise_linux_workstation, oracle mysql
Distro releases
| Release | Package | Fixed in |
|---|---|---|
| Debian 6.0 | mysql-5.1 | 5.1.73-1+deb6u1 |
| Debian 7 | mysql-5.5 | 5.5.37-0+wheezy1 |
| Red Hat Enterprise Linux 5 | mysql55-mysql | 0:5.5.36-2.el5 |
| Red Hat Enterprise Linux 5 | mysql55-mysql-bench | 0:5.5.36-2.el5 |
| Red Hat Enterprise Linux 5 | mysql55-mysql-debuginfo | 0:5.5.36-2.el5 |
| Red Hat Enterprise Linux 5 | mysql55-mysql-devel | 0:5.5.36-2.el5 |
| Red Hat Enterprise Linux 5 | mysql55-mysql-libs | 0:5.5.36-2.el5 |
| Red Hat Enterprise Linux 5 | mysql55-mysql-server | 0:5.5.36-2.el5 |
| Red Hat Enterprise Linux 5 | mysql55-mysql-test | 0:5.5.36-2.el5 |
| Red Hat Enterprise Linux 6 | mysql | 0:5.1.73-3.el6_5 |
| Red Hat Enterprise Linux 6 | mysql-bench | 0:5.1.73-3.el6_5 |
| Red Hat Enterprise Linux 6 | mysql-debuginfo | 0:5.1.73-3.el6_5 |
| Red Hat Enterprise Linux 6 | mysql-devel | 0:5.1.73-3.el6_5 |
| Red Hat Enterprise Linux 6 | mysql-embedded | 0:5.1.73-3.el6_5 |
| Red Hat Enterprise Linux 6 | mysql-embedded-devel | 0:5.1.73-3.el6_5 |
| Red Hat Enterprise Linux 6 | mysql-libs | 0:5.1.73-3.el6_5 |
| Red Hat Enterprise Linux 6 | mysql-server | 0:5.1.73-3.el6_5 |
| Red Hat Enterprise Linux 6 | mysql-test | 0:5.1.73-3.el6_5 |
| Red Hat rhel software collections 1 | mariadb55-mariadb | 0:5.5.35-1.1.el6 |
| Red Hat rhel software collections 1 | mariadb55-mariadb-bench | 0:5.5.35-1.1.el6 |
| Red Hat rhel software collections 1 | mariadb55-mariadb-debuginfo | 0:5.5.35-1.1.el6 |
| Red Hat rhel software collections 1 | mariadb55-mariadb-devel | 0:5.5.35-1.1.el6 |
| Red Hat rhel software collections 1 | mariadb55-mariadb-libs | 0:5.5.35-1.1.el6 |
| Red Hat rhel software collections 1 | mariadb55-mariadb-server | 0:5.5.35-1.1.el6 |
| Red Hat rhel software collections 1 | mariadb55-mariadb-test | 0:5.5.35-1.1.el6 |
| Red Hat rhel software collections 1 | mysql55-mysql | 0:5.5.36-1.1.el6 |
| Red Hat rhel software collections 1 | mysql55-mysql-bench | 0:5.5.36-1.1.el6 |
| Red Hat rhel software collections 1 | mysql55-mysql-debuginfo | 0:5.5.36-1.1.el6 |
| Red Hat rhel software collections 1 | mysql55-mysql-devel | 0:5.5.36-1.1.el6 |
| Red Hat rhel software collections 1 | mysql55-mysql-libs | 0:5.5.36-1.1.el6 |
| Red Hat rhel software collections 1 | mysql55-mysql-server | 0:5.5.36-1.1.el6 |
| Red Hat rhel software collections 1 | mysql55-mysql-test | 0:5.5.36-1.1.el6 |
| Ubuntu 14.04 LTS | mysql-5.5 | 5.5.37-0ubuntu0.14.04.1 |
| Ubuntu 14.04 LTS | mysql-5.6 | 5.6.17-0ubuntu0.14.04.1 |