CVE-2014-4243 — Use After Free in Oracle Mysql

CWE-416 — Use After Free9 documents6 sources
Severity
2.8LOWNVD
EPSS
0.7%
top 27.99%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
6
MariadbOracle MysqlOracle Solaris+3 more
Timeline
PublishedJul 17
Latest updateMay 13

Description

Unspecified vulnerability in the MySQL Server component in Oracle MySQL 5.5.35 and earlier and 5.6.15 and earlier allows remote authenticated users to affect availability via vectors related to ENFED.

CVSS vector

AV:N/AC:M/C:N/I:N/A:PExploitability: 5.5 | Impact: 2.9

Affected Packages6 packages

▶NVDoracle/mysql5.5.0 — 5.5.35+1
▶NVDoracle/solaris11.3
▶NVDmariadb/mariadb5.5.0 — 5.5.36+1

🔴Vulnerability Details

3
GHSA
GHSA-8hx7-fw96-w88r: Unspecified vulnerability in the MySQL Server component in Oracle MySQL 5↗2022-05-13
▶
CVEList
CVE-2014-4243: Unspecified vulnerability in the MySQL Server component in Oracle MySQL 5↗2014-07-17
▶
OSV
CVE-2014-4243: Unspecified vulnerability in the MySQL Server component in Oracle MySQL 5↗2014-07-17
▶

📋Vendor Advisories

1
Red Hat
mysql: unspecified vulnerability related to ENFED (CPU July 2014)↗2014-04-15
▶

💬Community

3
Bugzilla
CVE-2014-4243 mysql: unspecified vulnerability related to ENFED (CPU July 2014)↗2014-07-16
▶
Bugzilla
CVE-2014-4260 CVE-2014-4258 CVE-2014-4207 CVE-2014-4243 CVE-2014-2494 mariadb: various flaws [fedora-all]↗2014-07-16
▶
Bugzilla
CVE-2014-4260 CVE-2014-4258 CVE-2014-4207 CVE-2014-4243 CVE-2014-2494 community-mysql: various flaws [fedora-all]↗2014-07-16
▶
CVE-2014-4243 — Use After Free in Oracle Mysql | cvebase