Lucene search
OracleCVE-2014-2438HistoryApr 16, 2014 - 2:55 a.m.
CVE-2014-2438
2014-04-1602:55:16
oracle
web.nvd.nist.gov
53
cve-2014-2438
oracle
mysql server
vulnerability
remote authenticated users
availability
replication
nvd
CVSS2
3.5
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
SINGLE
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
PARTIAL
AV:N/AC:M/Au:S/C:N/I:N/A:P
AI Score
3.9
Confidence
High
EPSS
0.004
Percentile
73.6%
Unspecified vulnerability in Oracle MySQL Server 5.5.35 and earlier and 5.6.15 and earlier allows remote authenticated users to affect availability via unknown vectors related to Replication.
Affected configurations
Node
oraclemysqlRange5.5.0–5.5.35
ORoraclemysqlRange5.6.0–5.6.15
Node
mariadbmariadbRange5.5.0–5.5.36
ORmariadbmariadbRange10.0.0–10.0.9
Node
redhatenterprise_linux_desktopMatch5.0
ORredhatenterprise_linux_desktopMatch7.0
ORredhatenterprise_linux_eusMatch7.3
ORredhatenterprise_linux_eusMatch7.4
ORredhatenterprise_linux_eusMatch7.5
ORredhatenterprise_linux_eusMatch7.6
ORredhatenterprise_linux_eusMatch7.7
ORredhatenterprise_linux_serverMatch5.0
ORredhatenterprise_linux_serverMatch7.0
ORredhatenterprise_linux_server_ausMatch7.3
ORredhatenterprise_linux_server_ausMatch7.4
ORredhatenterprise_linux_server_ausMatch7.6
ORredhatenterprise_linux_server_ausMatch7.7
ORredhatenterprise_linux_server_tusMatch7.3
ORredhatenterprise_linux_server_tusMatch7.6
ORredhatenterprise_linux_workstationMatch5.0
ORredhatenterprise_linux_workstationMatch7.0
| Vendor | Product | Version | CPE |
|---|---|---|---|
| oracle | mysql | * | cpe:2.3:a:oracle:mysql:*:*:*:*:*:*:*:* |
| mariadb | mariadb | * | cpe:2.3:a:mariadb:mariadb:*:*:*:*:*:*:*:* |
| redhat | enterprise_linux_desktop | 5.0 | cpe:2.3:o:redhat:enterprise_linux_desktop:5.0:*:*:*:*:*:*:* |
| redhat | enterprise_linux_desktop | 7.0 | cpe:2.3:o:redhat:enterprise_linux_desktop:7.0:*:*:*:*:*:*:* |
| redhat | enterprise_linux_eus | 7.3 | cpe:2.3:o:redhat:enterprise_linux_eus:7.3:*:*:*:*:*:*:* |
| redhat | enterprise_linux_eus | 7.4 | cpe:2.3:o:redhat:enterprise_linux_eus:7.4:*:*:*:*:*:*:* |
| redhat | enterprise_linux_eus | 7.5 | cpe:2.3:o:redhat:enterprise_linux_eus:7.5:*:*:*:*:*:*:* |
| redhat | enterprise_linux_eus | 7.6 | cpe:2.3:o:redhat:enterprise_linux_eus:7.6:*:*:*:*:*:*:* |
| redhat | enterprise_linux_eus | 7.7 | cpe:2.3:o:redhat:enterprise_linux_eus:7.7:*:*:*:*:*:*:* |
| redhat | enterprise_linux_server | 5.0 | cpe:2.3:o:redhat:enterprise_linux_server:5.0:*:*:*:*:*:*:* |
References
rhn.redhat.com/errata/RHSA-2014-0522.html
rhn.redhat.com/errata/RHSA-2014-0536.html
rhn.redhat.com/errata/RHSA-2014-0537.html
rhn.redhat.com/errata/RHSA-2014-0702.html
security.gentoo.org/glsa/glsa-201409-04.xml
www.oracle.com/technetwork/topics/security/cpuapr2014-1972952.html
www.securityfocus.com/bid/66846
Related
mariadbunix
mariadbunix
CVE-2014-2438
2014-04-16 02:55:16
cvelist
cvelist
CVE-2014-2438
2014-04-16 02:05:00
nvd
nvd
CVE-2014-2438
2014-04-16 02:55:16
prion
prion
Design/Logic Flaw
2014-04-16 02:55:00
veracode
veracode
Denial Of Service (DoS)
2019-05-02 04:58:14
Denial Of Service (DoS)
2019-05-02 04:58:13
Denial Of Service (DoS)
2019-05-02 04:58:13
ubuntucve
ubuntucve
CVE-2014-2438
2014-04-15 00:00:00
openvas
openvas
Oracle MySQL Multiple Unspecified vulnerabilities - 01 (May 2014) - Windows
2014-05-08 00:00:00
Oracle MySQL Multiple Unspecified Vulnerabilities - 21 (Jun 2016) - Linux
2016-06-03 00:00:00
Amazon Linux: Security Advisory (ALAS-2014-329)
2015-09-08 00:00:00
nessus
nessus
MariaDB 5.5 < 5.5.36 Multiple DoS Vulnerabilities
2014-02-26 00:00:00
MariaDB 10 < 10.0.9 Multiple DoS Vulnerabilities
2019-09-17 00:00:00
MySQL 5.5.x < 5.5.36 Multiple Vulnerabilities
2014-04-16 00:00:00
oraclelinux
oraclelinux
mysql55-mysql security update
2014-05-22 00:00:00
mariadb security update
2014-07-23 00:00:00
mariadb security update
2014-11-17 00:00:00
redhat
redhat
(RHSA-2014:0537) Moderate: mysql55-mysql security update
2014-05-22 17:05:47
(RHSA-2014:0522) Moderate: mariadb55-mariadb security update
2014-05-20 11:06:28
(RHSA-2014:0536) Moderate: mysql55-mysql security update
2014-05-22 00:00:00
fedora
fedora
[SECURITY] Fedora 20 Update: mariadb-galera-5.5.37-2.fc20
2014-05-16 10:09:50
[SECURITY] Fedora 19 Update: community-mysql-5.5.37-1.fc19
2014-04-29 05:28:52
[SECURITY] Fedora 20 Update: community-mysql-5.5.37-1.fc20
2014-04-29 05:25:43
centos
centos
mysql55 security update
2014-05-22 23:08:29
mysql55 security update
2014-05-22 23:25:52
mariadb55 security update
2014-05-21 17:57:10
mageia
mageia
Updated mariadb packages fix security vulnerabilities
2014-05-24 11:23:00
slackware
slackware
[slackware-security] mariadb
2014-06-01 21:04:10
amazon
amazon
Medium: mysql55
2014-04-25 15:48:00
osv
osv
mysql-5.5 - security update
2014-05-03 00:00:00
debian
debian
[SECURITY] [DSA 2919-1] mysql-5.5 security update
2014-05-03 08:06:27
[SECURITY] [DSA 2919-1] mysql-5.5 security update
2014-05-03 08:06:27
ubuntu
ubuntu
MySQL vulnerabilities
2014-04-23 00:00:00
suse
suse
Security update for MySQL (important)
2014-06-07 00:04:26
gentoo
gentoo
MySQL: Multiple vulnerabilities
2014-09-04 00:00:00
oracle
oracle
Oracle Critical Patch Update - April 2014
2014-04-15 00:00:00
securityvulns
securityvulns
CVSS2
3.5
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
SINGLE
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
PARTIAL
AV:N/AC:M/Au:S/C:N/I:N/A:P
AI Score
3.9
Confidence
High
EPSS
0.004
Percentile
73.6%
Related for CVE-2014-2438