Every CVE Search/ Get API key

CVE-2014-0001

Buffer overflow in client/mysql.cc in Oracle MySQL and MariaDB before 5.5.35 allows remote...

7.5 HighFix available

Buffer overflow in client/mysql.cc in Oracle MySQL and MariaDB before 5.5.35 allows remote database servers to cause a denial of service (crash) and possibly execute arbitrary code via a long server version string.

Exploit likelihood

6.40%Up 2.2 points since Feb 4, 2022
90%50%10%1%

What each source reports

NVD Score used 7.5

Buffer overflow in client/mysql.cc in Oracle MySQL and MariaDB before 5.5.35 allows remote database servers to cause a denial of service (crash) and possibly execute arbitrary code via a long server version string.

Record
CVE-2014-0001
CVSS 2.0
7.5 HighAV:N/AC:L/Au:N/C:P/I:P/A:P
Weakness
CWE-119
Updated
2026-11-02
CVE List No score

Buffer overflow in client/mysql.cc in Oracle MySQL and MariaDB before 5.5.35 allows remote database servers to cause a denial of service (crash) and possibly execute arbitrary code via a long server version string.

Record
CVE-2014-0001
Updated
2026-11-02
EUVDEUVD-2014-0108 No score

Buffer overflow in client/mysql.cc in Oracle MySQL and MariaDB before 5.5.35 allows remote database servers to cause a denial of service (crash) and possibly execute arbitrary code via a long server version string.

Record
EUVD-2014-0108
Updated
2026-11-03
GitHub AdvisoriesGHSA-7pq3-qq22-gpw3 No score

Buffer overflow in client/mysql.cc in Oracle MySQL and MariaDB before 5.5.35 allows remote...

Buffer overflow in client/mysql.cc in Oracle MySQL and MariaDB before 5.5.35 allows remote database servers to cause a denial of service (crash) and possibly execute arbitrary code via a long server version string.

Record
GHSA-7pq3-qq22-gpw3
Weakness
CWE-119
Updated
2026-11-02
OSVSUSE-SU-2015:0620-1 No score

Security update for MySQL

This MySQL update provides the following:

* upgrade to version 5.5.39, [bnc#887580]
* CVE's fixed: CVE-2014-2484, CVE-2014-4258, CVE-2014-4260,
  CVE-2014-2494, CVE-2014-4238, CVE-2014-4207, CVE-2014-4233,
  CVE-2014-4240, CVE-2014-4214, CVE-2014-4243

See also: http://www.oracle.com/technetwork/topics/security/cpujul2014-1972956.html http://www.oracle.com/technetwork/topics/security/cpujul2014-1972956.html

Security Issues:

* CVE-2014-2484
  <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-2484>
* CVE-2014-4258
  <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-4258>
* CVE-2014-4260
  <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-4260>
* CVE-2014-2494
  <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-2494>
* CVE-2014-4238
  <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-4238>
* CVE-2014-4207
  <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-4207>
* CVE-2014-4233
  <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-4233>
* CVE-2014-4240
  <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-4240>
* CVE-2014-4214
  <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-4214>
* CVE-2014-4243
  <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-4243>
Record
SUSE-SU-2015:0620-1
Updated
2026-11-02
OSVSUSE-SU-2015:0946-1 No score

Security update for MySQL

This MySQL update provides the following:

* upgrade to version 5.5.39, [bnc#887580]
* CVE's fixed: CVE-2014-2484, CVE-2014-4258, CVE-2014-4260,
  CVE-2014-2494, CVE-2014-4238, CVE-2014-4207, CVE-2014-4233,
  CVE-2014-4240, CVE-2014-4214, CVE-2014-4243

See also: http://www.oracle.com/technetwork/topics/security/cpujul2014-1972956.html http://www.oracle.com/technetwork/topics/security/cpujul2014-1972956.html

Security Issues:

* CVE-2014-2484
  <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-2484>
* CVE-2014-4258
  <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-4258>
* CVE-2014-4260
  <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-4260>
* CVE-2014-2494
  <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-2494>
* CVE-2014-4238
  <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-4238>
* CVE-2014-4207
  <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-4207>
* CVE-2014-4233
  <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-4233>
* CVE-2014-4240
  <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-4240>
* CVE-2014-4214
  <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-4214>
* CVE-2014-4243
  <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-4243>
Record
SUSE-SU-2015:0946-1
Updated
2026-11-02
OSVSUSE-SU-2015:1177-1 No score

Security update for MySQL

This MySQL update provides the following:

* upgrade to version 5.5.39, [bnc#887580]
* CVE's fixed: CVE-2014-2484, CVE-2014-4258, CVE-2014-4260,
  CVE-2014-2494, CVE-2014-4238, CVE-2014-4207, CVE-2014-4233,
  CVE-2014-4240, CVE-2014-4214, CVE-2014-4243

See also: http://www.oracle.com/technetwork/topics/security/cpujul2014-1972956.html http://www.oracle.com/technetwork/topics/security/cpujul2014-1972956.html

Security Issues:

* CVE-2014-2484
  <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-2484>
* CVE-2014-4258
  <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-4258>
* CVE-2014-4260
  <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-4260>
* CVE-2014-2494
  <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-2494>
* CVE-2014-4238
  <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-4238>
* CVE-2014-4207
  <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-4207>
* CVE-2014-4233
  <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-4233>
* CVE-2014-4240
  <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-4240>
* CVE-2014-4214
  <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-4214>
* CVE-2014-4243
  <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-4243>
Record
SUSE-SU-2015:1177-1
Updated
2026-11-02
OSVUBUNTU-CVE-2014-0001 No score

Buffer overflow in client/mysql.cc in Oracle MySQL and MariaDB before 5.5.35 allows remote database servers to cause a denial of service (crash) and possibly execute arbitrary code via a long server version string.

Record
UBUNTU-CVE-2014-0001
Updated
2026-11-02
OSVUSN-2170-1 No score

mysql-5.5 vulnerabilities

Multiple security issues were discovered in MySQL and this update includes a new upstream MySQL version to fix these issues. MySQL has been updated to 5.5.37.

In addition to security fixes, the updated packages contain bug fixes, new features, and possibly incompatible changes.

Please see the following for more information: http://dev.mysql.com/doc/relnotes/mysql/5.5/en/news-5-5-36.html http://dev.mysql.com/doc/relnotes/mysql/5.5/en/news-5-5-37.html http://www.oracle.com/technetwork/topics/security/cpuapr2014-1972952.html

Additionally, Matthias Reichl discovered that the mysql-5.5 packages were missing the patches applied previously in the mysql-5.1 packages to drop the default test database and localhost permissions granting access to any databases starting with "test_". This update reintroduces these patches for Ubuntu 12.04 LTS, Ubuntu 12.10, and Ubuntu 13.10. Existing test databases and permissions will not be modified on upgrade. To manually restrict access for existing installations, please refer to the following:

http://dev.mysql.com/doc/refman/5.5/en/default-privileges.html

Record
USN-2170-1
Updated
2026-11-02

Affected products

Affected packages

Affected packages
PackageAffectedFixed
mysql-5.1
Debian:6.0
 before 5.1.73-1+deb6u1, plus listed versions
5.1.49-35.1.50-15.1.51-15.1.53-15.1.54-1
Show 20 moreShow less
5.1.54-25.1.55-15.1.56-15.1.57-15.1.57-1.15.1.57-1.25.1.57-1.35.1.57-25.1.57-35.1.57-3.15.1.58-15.1.61-0+squeeze15.1.61-25.1.61-35.1.62-15.1.62-1+m68k5.1.63-0+squeeze15.1.66-0+squeeze15.1.72-25.1.73-1
5.1.73-1+deb6u1
mysql-5.5
Debian:7
 before 5.5.37-0+wheezy1, plus listed versions
5.5.30+dfsg-1.15.5.31+dfsg-0+wheezy15.5.31+dfsg-15.5.33+dfsg-0+wheezy15.5.33+dfsg-15.5.35+dfsg-0+wheezy15.5.35+dfsg-15.5.35+dfsg-2
5.5.37-0+wheezy1
mysql
Red Hat:enterprise_linux:6::client
 before 0:5.1.73-3.el6_5
0:5.1.73-3.el6_5
mysql-debuginfo
Red Hat:enterprise_linux:6::client
 before 0:5.1.73-3.el6_5
0:5.1.73-3.el6_5
mysql-libs
Red Hat:enterprise_linux:6::client
 before 0:5.1.73-3.el6_5
0:5.1.73-3.el6_5
mysql-server
Red Hat:enterprise_linux:6::client
 before 0:5.1.73-3.el6_5
0:5.1.73-3.el6_5
mysql-bench
Red Hat:enterprise_linux:6::client
 before 0:5.1.73-3.el6_5
0:5.1.73-3.el6_5
mysql-devel
Red Hat:enterprise_linux:6::client
 before 0:5.1.73-3.el6_5
0:5.1.73-3.el6_5
mysql-embedded
Red Hat:enterprise_linux:6::client
 before 0:5.1.73-3.el6_5
0:5.1.73-3.el6_5
mysql-embedded-devel
Red Hat:enterprise_linux:6::client
 before 0:5.1.73-3.el6_5
0:5.1.73-3.el6_5
Show 60 moreShow less
Affected packages
PackageAffectedFixed
mysql-test
Red Hat:enterprise_linux:6::client
 before 0:5.1.73-3.el6_5
0:5.1.73-3.el6_5
mysql
Red Hat:enterprise_linux:6::computenode
 before 0:5.1.73-3.el6_5
0:5.1.73-3.el6_5
mysql-debuginfo
Red Hat:enterprise_linux:6::computenode
 before 0:5.1.73-3.el6_5
0:5.1.73-3.el6_5
mysql-libs
Red Hat:enterprise_linux:6::computenode
 before 0:5.1.73-3.el6_5
0:5.1.73-3.el6_5
mysql-bench
Red Hat:enterprise_linux:6::computenode
 before 0:5.1.73-3.el6_5
0:5.1.73-3.el6_5
mysql-devel
Red Hat:enterprise_linux:6::computenode
 before 0:5.1.73-3.el6_5
0:5.1.73-3.el6_5
mysql-embedded
Red Hat:enterprise_linux:6::computenode
 before 0:5.1.73-3.el6_5
0:5.1.73-3.el6_5
mysql-embedded-devel
Red Hat:enterprise_linux:6::computenode
 before 0:5.1.73-3.el6_5
0:5.1.73-3.el6_5
mysql-server
Red Hat:enterprise_linux:6::computenode
 before 0:5.1.73-3.el6_5
0:5.1.73-3.el6_5
mysql-test
Red Hat:enterprise_linux:6::computenode
 before 0:5.1.73-3.el6_5
0:5.1.73-3.el6_5
mysql
Red Hat:enterprise_linux:6::server
 before 0:5.1.73-3.el6_5
0:5.1.73-3.el6_5
mysql-bench
Red Hat:enterprise_linux:6::server
 before 0:5.1.73-3.el6_5
0:5.1.73-3.el6_5
mysql-debuginfo
Red Hat:enterprise_linux:6::server
 before 0:5.1.73-3.el6_5
0:5.1.73-3.el6_5
mysql-devel
Red Hat:enterprise_linux:6::server
 before 0:5.1.73-3.el6_5
0:5.1.73-3.el6_5
mysql-libs
Red Hat:enterprise_linux:6::server
 before 0:5.1.73-3.el6_5
0:5.1.73-3.el6_5
mysql-server
Red Hat:enterprise_linux:6::server
 before 0:5.1.73-3.el6_5
0:5.1.73-3.el6_5
mysql-test
Red Hat:enterprise_linux:6::server
 before 0:5.1.73-3.el6_5
0:5.1.73-3.el6_5
mysql-embedded
Red Hat:enterprise_linux:6::server
 before 0:5.1.73-3.el6_5
0:5.1.73-3.el6_5
mysql-embedded-devel
Red Hat:enterprise_linux:6::server
 before 0:5.1.73-3.el6_5
0:5.1.73-3.el6_5
mysql
Red Hat:enterprise_linux:6::workstation
 before 0:5.1.73-3.el6_5
0:5.1.73-3.el6_5
mysql-bench
Red Hat:enterprise_linux:6::workstation
 before 0:5.1.73-3.el6_5
0:5.1.73-3.el6_5
mysql-debuginfo
Red Hat:enterprise_linux:6::workstation
 before 0:5.1.73-3.el6_5
0:5.1.73-3.el6_5
mysql-devel
Red Hat:enterprise_linux:6::workstation
 before 0:5.1.73-3.el6_5
0:5.1.73-3.el6_5
mysql-libs
Red Hat:enterprise_linux:6::workstation
 before 0:5.1.73-3.el6_5
0:5.1.73-3.el6_5
mysql-server
Red Hat:enterprise_linux:6::workstation
 before 0:5.1.73-3.el6_5
0:5.1.73-3.el6_5
mysql-test
Red Hat:enterprise_linux:6::workstation
 before 0:5.1.73-3.el6_5
0:5.1.73-3.el6_5
mysql-embedded
Red Hat:enterprise_linux:6::workstation
 before 0:5.1.73-3.el6_5
0:5.1.73-3.el6_5
mysql-embedded-devel
Red Hat:enterprise_linux:6::workstation
 before 0:5.1.73-3.el6_5
0:5.1.73-3.el6_5
mysql55-mysql
Red Hat:rhel_software_collections:1::el6
 before 0:5.5.36-1.1.el6
0:5.5.36-1.1.el6
mysql55-mysql-bench
Red Hat:rhel_software_collections:1::el6
 before 0:5.5.36-1.1.el6
0:5.5.36-1.1.el6
mysql55-mysql-debuginfo
Red Hat:rhel_software_collections:1::el6
 before 0:5.5.36-1.1.el6
0:5.5.36-1.1.el6
mysql55-mysql-devel
Red Hat:rhel_software_collections:1::el6
 before 0:5.5.36-1.1.el6
0:5.5.36-1.1.el6
mysql55-mysql-libs
Red Hat:rhel_software_collections:1::el6
 before 0:5.5.36-1.1.el6
0:5.5.36-1.1.el6
mysql55-mysql-server
Red Hat:rhel_software_collections:1::el6
 before 0:5.5.36-1.1.el6
0:5.5.36-1.1.el6
mysql55-mysql-test
Red Hat:rhel_software_collections:1::el6
 before 0:5.5.36-1.1.el6
0:5.5.36-1.1.el6
mysql55-mysql
Red Hat:enterprise_linux:5::client
 before 0:5.5.36-2.el5
0:5.5.36-2.el5
mysql55-mysql-bench
Red Hat:enterprise_linux:5::client
 before 0:5.5.36-2.el5
0:5.5.36-2.el5
mysql55-mysql-debuginfo
Red Hat:enterprise_linux:5::client
 before 0:5.5.36-2.el5
0:5.5.36-2.el5
mysql55-mysql-libs
Red Hat:enterprise_linux:5::client
 before 0:5.5.36-2.el5
0:5.5.36-2.el5
mysql55-mysql-server
Red Hat:enterprise_linux:5::client
 before 0:5.5.36-2.el5
0:5.5.36-2.el5
mysql55-mysql-test
Red Hat:enterprise_linux:5::client
 before 0:5.5.36-2.el5
0:5.5.36-2.el5
mysql55-mysql
Red Hat:enterprise_linux:5::client_workstation
 before 0:5.5.36-2.el5
0:5.5.36-2.el5
mysql55-mysql-debuginfo
Red Hat:enterprise_linux:5::client_workstation
 before 0:5.5.36-2.el5
0:5.5.36-2.el5
mysql55-mysql-devel
Red Hat:enterprise_linux:5::client_workstation
 before 0:5.5.36-2.el5
0:5.5.36-2.el5
mysql55-mysql
Red Hat:enterprise_linux:5::server
 before 0:5.5.36-2.el5
0:5.5.36-2.el5
mysql55-mysql-bench
Red Hat:enterprise_linux:5::server
 before 0:5.5.36-2.el5
0:5.5.36-2.el5
mysql55-mysql-debuginfo
Red Hat:enterprise_linux:5::server
 before 0:5.5.36-2.el5
0:5.5.36-2.el5
mysql55-mysql-devel
Red Hat:enterprise_linux:5::server
 before 0:5.5.36-2.el5
0:5.5.36-2.el5
mysql55-mysql-libs
Red Hat:enterprise_linux:5::server
 before 0:5.5.36-2.el5
0:5.5.36-2.el5
mysql55-mysql-server
Red Hat:enterprise_linux:5::server
 before 0:5.5.36-2.el5
0:5.5.36-2.el5
mysql55-mysql-test
Red Hat:enterprise_linux:5::server
 before 0:5.5.36-2.el5
0:5.5.36-2.el5
mariadb55-mariadb
Red Hat:rhel_software_collections:1::el6
 before 0:5.5.35-1.1.el6
0:5.5.35-1.1.el6
mariadb55-mariadb-bench
Red Hat:rhel_software_collections:1::el6
 before 0:5.5.35-1.1.el6
0:5.5.35-1.1.el6
mariadb55-mariadb-debuginfo
Red Hat:rhel_software_collections:1::el6
 before 0:5.5.35-1.1.el6
0:5.5.35-1.1.el6
mariadb55-mariadb-devel
Red Hat:rhel_software_collections:1::el6
 before 0:5.5.35-1.1.el6
0:5.5.35-1.1.el6
mariadb55-mariadb-libs
Red Hat:rhel_software_collections:1::el6
 before 0:5.5.35-1.1.el6
0:5.5.35-1.1.el6
mariadb55-mariadb-server
Red Hat:rhel_software_collections:1::el6
 before 0:5.5.35-1.1.el6
0:5.5.35-1.1.el6
mariadb55-mariadb-test
Red Hat:rhel_software_collections:1::el6
 before 0:5.5.35-1.1.el6
0:5.5.35-1.1.el6
mysql-5.5
Ubuntu:14.04:LTS
 before 5.5.37-0ubuntu0.14.04.1, plus listed versions
5.5.32-0ubuntu75.5.34-0ubuntu15.5.34-0ubuntu25.5.35-0ubuntu15.5.35+dfsg-1ubuntu1
5.5.37-0ubuntu0.14.04.1
mysql-5.6
Ubuntu:14.04:LTS
 before 5.6.17-0ubuntu0.14.04.1, plus listed versions
5.6.15-0ubuntu15.6.15-1~exp25.6.16-1~exp1
5.6.17-0ubuntu0.14.04.1

History

History
RecordedChangedSources
aliasesEUVD
first indexedCVE List, GitHub Advisories, NVD, OSV

Dates are when Every CVE recorded each change. Upstream dates may differ.

In short

CVE-2014-0001 is a high vulnerability (CVSS 7.5) in Mariadb, published January 31, 2014. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 6.40%, the 93rd percentile. Fixed in mysql-5.1 5.1.73-1+deb6u1.

References

Show 194 moreShow less
This page doesn't list everything

Left out here: 40 references. The JSON record has them.

Pages All vulnerabilities Browse Docs Sources Guide Get API key
MoveEnter Open