PT-2014-1189 · Oracle+2 · Mysql Server+2

Published 2014-01-15 · Updated 2018-05-03 · CVE-2014-0433

Positive Technologies (AI Summary)

CVSS v2.0

4.3

Medium

Base vector

AV:N/AC:M/Au:N/C:N/I:N/A:P

Name of the Vulnerable Software and Affected Versions MySQL Server versions prior to 5.6.13

Description The issue affects the availability of data in the MySQL Server component of Oracle MySQL. It is related to Thread Pooling and can be exploited by remote attackers, potentially allowing them to impact data availability. The estimated number of potentially affected devices and details about real-world incidents are not specified.

Recommendations For versions prior to 5.6.13, update to a version that contains a fix for this issue to prevent exploitation. As a temporary workaround, consider restricting access to the Thread Pooling component until a patch is available.

Fix

Weakness Enumeration

CWE-264

Related Identifiers

ALT-PU-2018-1647

BDU:2014-00344

CVE-2014-0433

Affected Products

Alt Linux

Mysql Server

Suse

References · 249

• https://bdu.fstec.ru/vul/2020-00679 · Security Note
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-3152 · Security Note
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-0409 · Security Note
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-0503 · Security Note
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-2668 · Security Note
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-3645 · Security Note
• https://bdu.fstec.ru/vul/2020-00677 · Security Note
• https://bdu.fstec.ru/vul/2015-12166 · Security Note
• https://bdu.fstec.ru/vul/2016-01105 · Security Note
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-3518 · Security Note
• https://bdu.fstec.ru/vul/2015-11924 · Security Note
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-3798 · Security Note
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5786 · Security Note
• https://bdu.fstec.ru/vul/2020-00675 · Security Note
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-1570 · Security Note