PT-2014-1663 · Oracle+2 · Mysql Server+2

Publicado

2014-01-15

·

Atualizado

2018-05-03

·

CVE-2013-5882

CVSS v2.0

6.8

Média

VetorAV:N/AC:L/Au:S/C:N/I:N/A:C
Name of the Vulnerable Software and Affected Versions Oracle MySQL versions 5.6.13 and earlier
Description The issue allows remote authenticated users to affect data availability using the Stored Procedure subcomponent. This can potentially lead to impacts on data accessibility.
Recommendations For versions 5.6.13 and earlier, consider restricting access to the Stored Procedure subcomponent until a fix is available. As a temporary workaround, consider disabling the use of Stored Procedures in Oracle MySQL until the issue is resolved. At the moment, there is no information about a newer version that contains a fix for this vulnerability.
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
dbugs@ptsecurity.com

Enumeração de Fraquezas

CWE-264

Identificadores relacionados

ALT-PU-2018-1647
BDU:2015-00597
BDU:2015-00614
CVE-2013-5882

Produtos afetados

Alt Linux
Mysql Server
Suse