PT-2014-1020 · Oracle+2 · Mysql Server+2

Published 2014-04-15 · Updated 2018-05-03 · CVE-2014-2444

Positive Technologies (AI Summary)

CVSS v2.0

6.5

Medium

Base vector

AV:N/AC:L/Au:S/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions Oracle MySQL Server versions 5.6.15 and earlier

Description The issue affects the confidentiality, integrity, and availability of data. It is related to the InnoDB component and can be exploited by remote authenticated users via unknown vectors.

Recommendations For Oracle MySQL Server versions 5.6.15 and earlier, at the moment, there is no information about a newer version that contains a fix for this vulnerability.

Race Condition

Weakness Enumeration

CWE-362

Related Identifiers

ALT-PU-2018-1647

BDU:2014-00083

CVE-2014-2444

Affected Products

Alt Linux

Mysql Server

Suse

References · 246

• https://bdu.fstec.ru/vul/2020-00679 · Security Note
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-3152 · Security Note
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-0409 · Security Note
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-0503 · Security Note
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-2668 · Security Note
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-3645 · Security Note
• https://bdu.fstec.ru/vul/2020-00677 · Security Note
• https://bdu.fstec.ru/vul/2015-12166 · Security Note
• https://bdu.fstec.ru/vul/2016-01105 · Security Note
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-3518 · Security Note
• https://bdu.fstec.ru/vul/2015-11924 · Security Note
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-3798 · Security Note
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5786 · Security Note
• https://bdu.fstec.ru/vul/2020-00675 · Security Note
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-1570 · Security Note