6.5 Medium
CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
SINGLE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:L/Au:S/C:P/I:P/A:P
6.1 Medium
AI Score
Confidence
Low
0.004 Low
EPSS
Percentile
72.3%
Debian Security Advisory DSA-2985-1 [email protected]
http://www.debian.org/security/ Salvatore Bonaccorso
July 22, 2014 http://www.debian.org/security/faq
Package : mysql-5.5
CVE ID : CVE-2014-2494 CVE-2014-4207 CVE-2014-4258 CVE-2014-4260
Debian Bug : 754941
Several issues have been discovered in the MySQL database server. The
vulnerabilities are addressed by upgrading MySQL to the new upstream
version 5.5.38. Please see the MySQL 5.5 Release Notes and Oracle's
Critical Patch Update advisory for further details:
http://dev.mysql.com/doc/relnotes/mysql/5.5/en/news-5-5-38.html
http://www.oracle.com/technetwork/topics/security/cpujul2014-1972956.html
For the stable distribution (wheezy), these problems have been fixed in
version 5.5.38-0+wheezy1.
For the unstable distribution (sid), these problems will be fixed soon.
We recommend that you upgrade your mysql-5.5 packages.
Further information about Debian Security Advisories, how to apply
these updates to your system and frequently asked questions can be
found at: http://www.debian.org/security/
Mailing list: [email protected]
OS | Version | Architecture | Package | Version | Filename |
---|---|---|---|---|---|
Debian | 7 | amd64 | libmysqld-pic | < 5.5.38-0+wheezy1 | libmysqld-pic_5.5.38-0+wheezy1_amd64.deb |
Debian | 7 | s390 | mysql-client-5.5 | < 5.5.38-0+wheezy1 | mysql-client-5.5_5.5.38-0+wheezy1_s390.deb |
Debian | 7 | sparc | mysql-testsuite-5.5 | < 5.5.38-0+wheezy1 | mysql-testsuite-5.5_5.5.38-0+wheezy1_sparc.deb |
Debian | 7 | s390 | mysql-server-5.5 | < 5.5.38-0+wheezy1 | mysql-server-5.5_5.5.38-0+wheezy1_s390.deb |
Debian | 7 | kfreebsd-amd64 | libmysqlclient18 | < 5.5.38-0+wheezy1 | libmysqlclient18_5.5.38-0+wheezy1_kfreebsd-amd64.deb |
Debian | 7 | amd64 | mysql-testsuite-5.5 | < 5.5.38-0+wheezy1 | mysql-testsuite-5.5_5.5.38-0+wheezy1_amd64.deb |
Debian | 7 | ia64 | mysql-server-5.5 | < 5.5.38-0+wheezy1 | mysql-server-5.5_5.5.38-0+wheezy1_ia64.deb |
Debian | 7 | mipsel | mysql-server-5.5 | < 5.5.38-0+wheezy1 | mysql-server-5.5_5.5.38-0+wheezy1_mipsel.deb |
Debian | 7 | armel | mysql-testsuite-5.5 | < 5.5.38-0+wheezy1 | mysql-testsuite-5.5_5.5.38-0+wheezy1_armel.deb |
Debian | 7 | amd64 | libmysqlclient18 | < 5.5.38-0+wheezy1 | libmysqlclient18_5.5.38-0+wheezy1_amd64.deb |