PT-2014-7265 · Oracle+6 · Mysql Server+6

Publicado 2014-08-05 · Atualizado 2022-08-26 · CVE-2014-6520

Positive Technologies (AI Summary)

CVSS v2.0

4.0

Média

Vetor base

AV:N/AC:L/Au:S/C:N/I:N/A:P

Name of the Vulnerable Software and Affected Versions Oracle MySQL Server versions 5.5.38 and earlier

Description The issue allows remote authenticated users to affect availability via vectors related to SERVER:DDL. This means that authenticated users can potentially impact the system's availability through specific actions related to data definition language (DDL) operations on the server.

Recommendations For Oracle MySQL Server versions 5.5.38 and earlier, consider restricting access to DDL operations to minimize the risk of exploitation until a fix is available. As a temporary workaround, limit the privileges of remote authenticated users to reduce the potential impact on availability.

Correção

Identificadores relacionados

ALT-PU-2015-1152

ALT-PU-2015-1749

CESA-2014_1861

CVE-2014-6520

DSA-3054-1

RHSA-2014:1859

RHSA-2014:1860

RHSA-2014:1861

RHSA-2014:1862

RHSA-2014:1937

RHSA-2014:1940

RHSA-2014_1859

RHSA-2014_1861

SUSE-SU-2015:0743-1

USN-2384-1

Produtos afetados

Alt Linux

Centos

Mariadb Server

Mysql Server

Red Hat

Suse

Ubuntu

Referências · 258

• https://github.com/duo-labs/mysslstrip · Nota
• https://errata.altlinux.org/ALT-PU-2015-1749 · Aviso do Fabricante
• https://access.redhat.com/security/cve/CVE-2014-6507 · Nota
• https://bdu.fstec.ru/vul/2014-00354 · Nota de Segurança
• https://suse.com/security/cve/CVE-2014-6478 · Nota
• https://ubuntu.com/security/CVE-2014-6507 · Aviso do Fabricante
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-2740 · Nota de Segurança
• https://ubuntu.com/security/CVE-2014-6530 · Aviso do Fabricante
• https://access.redhat.com/security/cve/CVE-2014-4260 · Nota
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-2922 · Nota de Segurança
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-2571 · Nota de Segurança
• https://suse.com/security/cve/CVE-2014-4258 · Nota
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-6464 · Nota de Segurança
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-4243 · Nota de Segurança
• https://suse.com/security/cve/CVE-2012-5615 · Nota