KLA10265 Multiple vulnerabilities in MySQL

Unspecified vulnerabilities were found in MySQL Server. By exploiting these vulnerabilities malicious users can affect integrity, confidentiality and availability. These vulnerabilities can be exploited remotely at vectors related to SRCHAR, SRINFOSC and ENFED.

Original advisories

Related products

MySQL

CVE list

CVE-2014-4258 high

CVE-2014-4260 high

CVE-2014-4243 warning

Solution

Update to latest version

Impacts

• OSI

Obtain sensitive information. Exploitation of vulnerabilities with this impact can lead to capturing by abuser information, critical for user or system.

• DoS

Denial of service. Exploitation of vulnerabilities with this impact can lead to loss of system availability or critical functional fault.

• LoI

Loss of integrity. Exploitation of vulnerabilities with this impact can lead to partial system fault or system components connection disruption.

Affected Products

• Oracle MySQL Server versions 5.5.37 and earlierOracle MySQL Server 5.6 versions 5.6.17 and earlier