CVE-2014-4258

9 documents7 sources

Severity

6.5MEDIUM

EPSS

0.6%

top 30.68%

CISA KEV

Not in KEV

Exploit

No known exploits

Affected products

Mariadb Mariadb Oracle Mysql Debian Debian Linux +9 more

Timeline

PublishedJul 17

Latest updateMay 13

Description

Unspecified vulnerability in the MySQL Server component in Oracle MySQL 5.5.37 and earlier and 5.6.17 and earlier allows remote authenticated users to affect confidentiality, integrity, and availability via vectors related to SRINFOSC.

CVSS vector

AV:N/AC:L/C:P/I:P/A:PExploitability: 8.0 | Impact: 6.4

Affected Packages14 packages

▶NVDoracle/mysql5.5.0 — 5.5.37+1

▶Ubuntumysql-5.5< 5.5.38-0ubuntu0.14.04.1

▶Ubuntumysql-5.6< 5.6.19-0ubuntu0.14.04.1

▶NVDoracle/solaris11.3

▶NVDsuse/linux_enterprise_server11, 12+1

Also affects: Debian Linux 7.0

🔴Vulnerability Details

GHSA

GHSA-x2cv-5mxq-rr26: Unspecified vulnerability in the MySQL Server component in Oracle MySQL 5↗2022-05-13

▶

CVEList

CVE-2014-4258: Unspecified vulnerability in the MySQL Server component in Oracle MySQL 5↗2014-07-17

▶

OSV

CVE-2014-4258: Unspecified vulnerability in the MySQL Server component in Oracle MySQL 5↗2014-07-16

▶

📋Vendor Advisories

Ubuntu

MySQL vulnerabilities↗2014-07-17

▶

Red Hat

mysql: unspecified vulnerability related to SRINFOSC (CPU July 2014)↗2014-04-15

▶

💬Community

Bugzilla

CVE-2014-4260 CVE-2014-4258 CVE-2014-4207 CVE-2014-4243 CVE-2014-2494 mariadb: various flaws [fedora-all]↗2014-07-16

▶

Bugzilla

CVE-2014-4260 CVE-2014-4258 CVE-2014-4207 CVE-2014-4243 CVE-2014-2494 community-mysql: various flaws [fedora-all]↗2014-07-16

▶

Bugzilla

CVE-2014-4258 mysql: unspecified vulnerability related to SRINFOSC (CPU July 2014)↗2014-07-16

▶