CVE-2014-4258
Unspecified vulnerability in the MySQL Server component in Oracle MySQL 5.5.37 and earlier and 5...
Unspecified vulnerability in the MySQL Server component in Oracle MySQL 5.5.37 and earlier and 5.6.17 and earlier allows remote authenticated users to affect confidentiality, integrity, and availability via vectors related to SRINFOSC.
Exploit likelihood
What each source reports
NVD Score used
6.5
Unspecified vulnerability in the MySQL Server component in Oracle MySQL 5.5.37 and earlier and 5.6.17 and earlier allows remote authenticated users to affect confidentiality, integrity, and availability via vectors related to SRINFOSC.
- Record
CVE-2014-4258- CVSS 2.0
- 6.5 Medium
AV:N/AC:L/Au:S/C:P/I:P/A:P - Updated
- 2026-11-02
CVE List No score
Unspecified vulnerability in the MySQL Server component in Oracle MySQL 5.5.37 and earlier and 5.6.17 and earlier allows remote authenticated users to affect confidentiality, integrity, and availability via vectors related to SRINFOSC.
- Record
CVE-2014-4258- Updated
- 2026-11-02
EUVDEUVD-2014-4187 No score
Unspecified vulnerability in the MySQL Server component in Oracle MySQL 5.5.37 and earlier and 5.6.17 and earlier allows remote authenticated users to affect confidentiality, integrity, and availability via vectors related to SRINFOSC.
- Record
EUVD-2014-4187- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-x2cv-5mxq-rr26 No score
Unspecified vulnerability in the MySQL Server component in Oracle MySQL 5.5.37 and earlier and 5...
Unspecified vulnerability in the MySQL Server component in Oracle MySQL 5.5.37 and earlier and 5.6.17 and earlier allows remote authenticated users to affect confidentiality, integrity, and availability via vectors related to SRINFOSC.
- Record
GHSA-x2cv-5mxq-rr26- Updated
- 2026-11-02
OSVMGASA-2014-0299 No score
Updated mariadb package fixes security vulnerabilities
This update provides MariaDB 5.5.38, which fixes several security issues and other bugs.
- Record
MGASA-2014-0299- Updated
- 2026-11-02
OSVSUSE-SU-2015:0620-1 No score
Security update for MySQL
This MySQL update provides the following:
* upgrade to version 5.5.39, [bnc#887580]
* CVE's fixed: CVE-2014-2484, CVE-2014-4258, CVE-2014-4260,
CVE-2014-2494, CVE-2014-4238, CVE-2014-4207, CVE-2014-4233,
CVE-2014-4240, CVE-2014-4214, CVE-2014-4243
See also: http://www.oracle.com/technetwork/topics/security/cpujul2014-1972956.html http://www.oracle.com/technetwork/topics/security/cpujul2014-1972956.html
Security Issues:
* CVE-2014-2484
<http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-2484>
* CVE-2014-4258
<http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-4258>
* CVE-2014-4260
<http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-4260>
* CVE-2014-2494
<http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-2494>
* CVE-2014-4238
<http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-4238>
* CVE-2014-4207
<http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-4207>
* CVE-2014-4233
<http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-4233>
* CVE-2014-4240
<http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-4240>
* CVE-2014-4214
<http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-4214>
* CVE-2014-4243
<http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-4243>
- Record
SUSE-SU-2015:0620-1- Updated
- 2026-11-02
Show 5 moreShow less
OSVSUSE-SU-2015:0743-1 No score
Security update for mariadb
mariadb was updated to version 10.0.16 to fix 40 security issues.
These security issues were fixed:
- CVE-2015-0411: Unspecified vulnerability in Oracle MySQL Server 5.5.40 and earlier, and 5.6.21 and earlier, allowed remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Server : Security : Encryption (bnc#915911).
- CVE-2015-0382: Unspecified vulnerability in Oracle MySQL Server 5.5.40 and earlier and 5.6.21 and earlier allowed remote attackers to affect availability via unknown vectors related to Server : Replication, a different vulnerability than CVE-2015-0381 (bnc#915911).
- CVE-2015-0381: Unspecified vulnerability in Oracle MySQL Server 5.5.40 and earlier and 5.6.21 and earlier allowed remote attackers to affect availability via unknown vectors related to Server : Replication, a different vulnerability than CVE-2015-0382 (bnc#915911).
- CVE-2015-0432: Unspecified vulnerability in Oracle MySQL Server 5.5.40 and earlier allowed remote authenticated users to affect availability via vectors related to Server : InnoDB : DDL : Foreign Key (bnc#915911).
- CVE-2014-6568: Unspecified vulnerability in Oracle MySQL Server 5.5.40 and earlier, and 5.6.21 and earlier, allowed remote authenticated users to affect availability via vectors related to Server : InnoDB : DML (bnc#915911).
- CVE-2015-0374: Unspecified vulnerability in Oracle MySQL Server 5.5.40 and earlier and 5.6.21 and earlier allowed remote authenticated users to affect confidentiality via unknown vectors related to Server : Security : Privileges : Foreign Key (bnc#915911).
- CVE-2014-6507: Unspecified vulnerability in Oracle MySQL Server 5.5.39 and earlier, and 5.6.20 and earlier, allowed remote authenticated users to affect confidentiality, integrity, and availability via vectors related to SERVER:DML (bnc#915912).
- CVE-2014-6491: Unspecified vulnerability in Oracle MySQL Server 5.5.39 and earlier and 5.6.20 and earlier allowed remote attackers to affect confidentiality, integrity, and availability via vectors related to SERVER:SSL:yaSSL, a different vulnerability than CVE-2014-6500 (bnc#915912).
- CVE-2014-6500: Unspecified vulnerability in Oracle MySQL Server 5.5.39 and earlier, and 5.6.20 and earlier, allowed remote attackers to affect confidentiality, integrity, and availability via vectors related to SERVER:SSL:yaSSL, a different vulnerability than CVE-2014-6491 (bnc#915912).
- CVE-2014-6469: Unspecified vulnerability in Oracle MySQL Server 5.5.39 and eariler and 5.6.20 and earlier allowed remote authenticated users to affect availability via vectors related to SERVER:OPTIMIZER (bnc#915912).
- CVE-2014-6555: Unspecified vulnerability in Oracle MySQL Server 5.5.39 and earlier and 5.6.20 and earlier allowed remote authenticated users to affect confidentiality, integrity, and availability via vectors related to SERVER:DML (bnc#915912).
- CVE-2014-6559: Unspecified vulnerability in Oracle MySQL Server 5.5.39 and earlier, and 5.6.20 and earlier, allowed remote attackers to affect confidentiality via vectors related to C API SSL CERTIFICATE HANDLING (bnc#915912).
- CVE-2014-6494: Unspecified vulnerability in Oracle MySQL Server 5.5.39 and earlier, and 5.6.20 and earlier, allowed remote attackers to affect availability via vectors related to CLIENT:SSL:yaSSL, a different vulnerability than CVE-2014-6496 (bnc#915912).
- CVE-2014-6496: Unspecified vulnerability in Oracle MySQL Server 5.5.39 and earlier, and 5.6.20 and earlier, allowed remote attackers to affect availability via vectors related to CLIENT:SSL:yaSSL, a different vulnerability than CVE-2014-6494 (bnc#915912).
- CVE-2014-6464: Unspecified vulnerability in Oracle MySQL Server 5.5.39 and earlier and 5.6.20 and earlier allowed remote authenticated users to affect availability via vectors related to SERVER:INNODB DML FOREIGN KEYS (bnc#915912).
- CVE-2010-5298: Race condition in the ssl3_read_bytes function in s3_pkt.c in OpenSSL through 1.0.1g, when…
- Record
SUSE-SU-2015:0743-1- Updated
- 2026-11-02
OSVSUSE-SU-2015:0946-1 No score
Security update for MySQL
This MySQL update provides the following:
* upgrade to version 5.5.39, [bnc#887580]
* CVE's fixed: CVE-2014-2484, CVE-2014-4258, CVE-2014-4260,
CVE-2014-2494, CVE-2014-4238, CVE-2014-4207, CVE-2014-4233,
CVE-2014-4240, CVE-2014-4214, CVE-2014-4243
See also: http://www.oracle.com/technetwork/topics/security/cpujul2014-1972956.html http://www.oracle.com/technetwork/topics/security/cpujul2014-1972956.html
Security Issues:
* CVE-2014-2484
<http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-2484>
* CVE-2014-4258
<http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-4258>
* CVE-2014-4260
<http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-4260>
* CVE-2014-2494
<http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-2494>
* CVE-2014-4238
<http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-4238>
* CVE-2014-4207
<http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-4207>
* CVE-2014-4233
<http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-4233>
* CVE-2014-4240
<http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-4240>
* CVE-2014-4214
<http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-4214>
* CVE-2014-4243
<http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-4243>
- Record
SUSE-SU-2015:0946-1- Updated
- 2026-11-02
OSVSUSE-SU-2015:1177-1 No score
Security update for MySQL
This MySQL update provides the following:
* upgrade to version 5.5.39, [bnc#887580]
* CVE's fixed: CVE-2014-2484, CVE-2014-4258, CVE-2014-4260,
CVE-2014-2494, CVE-2014-4238, CVE-2014-4207, CVE-2014-4233,
CVE-2014-4240, CVE-2014-4214, CVE-2014-4243
See also: http://www.oracle.com/technetwork/topics/security/cpujul2014-1972956.html http://www.oracle.com/technetwork/topics/security/cpujul2014-1972956.html
Security Issues:
* CVE-2014-2484
<http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-2484>
* CVE-2014-4258
<http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-4258>
* CVE-2014-4260
<http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-4260>
* CVE-2014-2494
<http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-2494>
* CVE-2014-4238
<http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-4238>
* CVE-2014-4207
<http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-4207>
* CVE-2014-4233
<http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-4233>
* CVE-2014-4240
<http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-4240>
* CVE-2014-4214
<http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-4214>
* CVE-2014-4243
<http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-4243>
- Record
SUSE-SU-2015:1177-1- Updated
- 2026-11-02
OSVUBUNTU-CVE-2014-4258 No score
Unspecified vulnerability in the MySQL Server component in Oracle MySQL 5.5.37 and earlier and 5.6.17 and earlier allows remote authenticated users to affect confidentiality, integrity, and availability via vectors related to SRINFOSC.
- Record
UBUNTU-CVE-2014-4258- Updated
- 2026-11-02
OSVUSN-2291-1 No score
mysql-5.5 vulnerabilities
Multiple security issues were discovered in MySQL and this update includes a new upstream MySQL version to fix these issues. MySQL has been updated to 5.5.38.
In addition to security fixes, the updated packages contain bug fixes, new features, and possibly incompatible changes.
Please see the following for more information: http://dev.mysql.com/doc/relnotes/mysql/5.5/en/news-5-5-38.html http://www.oracle.com/technetwork/topics/security/cpujul2014-1972956.html
- Record
USN-2291-1- Updated
- 2026-11-02
Affected products
- oracle mysql
- oracle solaris
- debian linux
- mariadb
- opensuse project suse linux enterprise desktop
- opensuse project suse linux enterprise server
- opensuse project suse linux enterprise software development kit
- suse linux enterprise desktop
- suse linux enterprise server
- suse linux enterprise software development kit
- suse linux enterprise workstation extension
- vmware vcenter server appliance
Affected packages
| Package | Affected | Fixed |
|---|---|---|
mysql-5.5Debian:7 |
before 5.5.38-0+wheezy1, plus listed versions 5.5.30+dfsg-1.15.5.31+dfsg-0+wheezy15.5.31+dfsg-15.5.33+dfsg-0+wheezy15.5.33+dfsg-1 Show 5 moreShow less5.5.35+dfsg-0+wheezy15.5.35+dfsg-15.5.35+dfsg-25.5.37-0+wheezy15.5.37-1 |
5.5.38-0+wheezy1 |
mariadbMageia:3 |
before 5.5.38-1.mga3 | 5.5.38-1.mga3 |
mariadbMageia:4 |
before 5.5.38-1.mga4 | 5.5.38-1.mga4 |
mysql55-mysqlRed Hat:enterprise_linux:5::client |
before 0:5.5.40-2.el5 | 0:5.5.40-2.el5 |
mysql55-mysql-benchRed Hat:enterprise_linux:5::client |
before 0:5.5.40-2.el5 | 0:5.5.40-2.el5 |
mysql55-mysql-debuginfoRed Hat:enterprise_linux:5::client |
before 0:5.5.40-2.el5 | 0:5.5.40-2.el5 |
mysql55-mysql-libsRed Hat:enterprise_linux:5::client |
before 0:5.5.40-2.el5 | 0:5.5.40-2.el5 |
mysql55-mysql-serverRed Hat:enterprise_linux:5::client |
before 0:5.5.40-2.el5 | 0:5.5.40-2.el5 |
mysql55-mysql-testRed Hat:enterprise_linux:5::client |
before 0:5.5.40-2.el5 | 0:5.5.40-2.el5 |
mysql55-mysqlRed Hat:enterprise_linux:5::client_workstation |
before 0:5.5.40-2.el5 | 0:5.5.40-2.el5 |
Show 89 moreShow less
| Package | Affected | Fixed |
|---|---|---|
mysql55-mysql-debuginfoRed Hat:enterprise_linux:5::client_workstation |
before 0:5.5.40-2.el5 | 0:5.5.40-2.el5 |
mysql55-mysql-develRed Hat:enterprise_linux:5::client_workstation |
before 0:5.5.40-2.el5 | 0:5.5.40-2.el5 |
mysql55-mysqlRed Hat:enterprise_linux:5::server |
before 0:5.5.40-2.el5 | 0:5.5.40-2.el5 |
mysql55-mysql-benchRed Hat:enterprise_linux:5::server |
before 0:5.5.40-2.el5 | 0:5.5.40-2.el5 |
mysql55-mysql-debuginfoRed Hat:enterprise_linux:5::server |
before 0:5.5.40-2.el5 | 0:5.5.40-2.el5 |
mysql55-mysql-develRed Hat:enterprise_linux:5::server |
before 0:5.5.40-2.el5 | 0:5.5.40-2.el5 |
mysql55-mysql-libsRed Hat:enterprise_linux:5::server |
before 0:5.5.40-2.el5 | 0:5.5.40-2.el5 |
mysql55-mysql-serverRed Hat:enterprise_linux:5::server |
before 0:5.5.40-2.el5 | 0:5.5.40-2.el5 |
mysql55-mysql-testRed Hat:enterprise_linux:5::server |
before 0:5.5.40-2.el5 | 0:5.5.40-2.el5 |
mysql55-mysqlRed Hat:rhel_software_collections:1::el6 |
before 0:5.5.40-1.el6 | 0:5.5.40-1.el6 |
mysql55-mysql-benchRed Hat:rhel_software_collections:1::el6 |
before 0:5.5.40-1.el6 | 0:5.5.40-1.el6 |
mysql55-mysql-debuginfoRed Hat:rhel_software_collections:1::el6 |
before 0:5.5.40-1.el6 | 0:5.5.40-1.el6 |
mysql55-mysql-develRed Hat:rhel_software_collections:1::el6 |
before 0:5.5.40-1.el6 | 0:5.5.40-1.el6 |
mysql55-mysql-libsRed Hat:rhel_software_collections:1::el6 |
before 0:5.5.40-1.el6 | 0:5.5.40-1.el6 |
mysql55-mysql-serverRed Hat:rhel_software_collections:1::el6 |
before 0:5.5.40-1.el6 | 0:5.5.40-1.el6 |
mysql55-mysql-testRed Hat:rhel_software_collections:1::el6 |
before 0:5.5.40-1.el6 | 0:5.5.40-1.el6 |
mysql55-mysqlRed Hat:rhel_software_collections:1::el7 |
before 0:5.5.40-1.el7 | 0:5.5.40-1.el7 |
mysql55-mysql-benchRed Hat:rhel_software_collections:1::el7 |
before 0:5.5.40-1.el7 | 0:5.5.40-1.el7 |
mysql55-mysql-debuginfoRed Hat:rhel_software_collections:1::el7 |
before 0:5.5.40-1.el7 | 0:5.5.40-1.el7 |
mysql55-mysql-develRed Hat:rhel_software_collections:1::el7 |
before 0:5.5.40-1.el7 | 0:5.5.40-1.el7 |
mysql55-mysql-libsRed Hat:rhel_software_collections:1::el7 |
before 0:5.5.40-1.el7 | 0:5.5.40-1.el7 |
mysql55-mysql-serverRed Hat:rhel_software_collections:1::el7 |
before 0:5.5.40-1.el7 | 0:5.5.40-1.el7 |
mysql55-mysql-testRed Hat:rhel_software_collections:1::el7 |
before 0:5.5.40-1.el7 | 0:5.5.40-1.el7 |
mariadbRed Hat:enterprise_linux:7::client |
before 1:5.5.40-1.el7_0 | 1:5.5.40-1.el7_0 |
mariadb-debuginfoRed Hat:enterprise_linux:7::client |
before 1:5.5.40-1.el7_0 | 1:5.5.40-1.el7_0 |
mariadb-libsRed Hat:enterprise_linux:7::client |
before 1:5.5.40-1.el7_0 | 1:5.5.40-1.el7_0 |
mariadb-serverRed Hat:enterprise_linux:7::client |
before 1:5.5.40-1.el7_0 | 1:5.5.40-1.el7_0 |
mariadb-benchRed Hat:enterprise_linux:7::client |
before 1:5.5.40-1.el7_0 | 1:5.5.40-1.el7_0 |
mariadb-develRed Hat:enterprise_linux:7::client |
before 1:5.5.40-1.el7_0 | 1:5.5.40-1.el7_0 |
mariadb-embeddedRed Hat:enterprise_linux:7::client |
before 1:5.5.40-1.el7_0 | 1:5.5.40-1.el7_0 |
mariadb-embedded-develRed Hat:enterprise_linux:7::client |
before 1:5.5.40-1.el7_0 | 1:5.5.40-1.el7_0 |
mariadb-testRed Hat:enterprise_linux:7::client |
before 1:5.5.40-1.el7_0 | 1:5.5.40-1.el7_0 |
mariadbRed Hat:enterprise_linux:7::computenode |
before 1:5.5.40-1.el7_0 | 1:5.5.40-1.el7_0 |
mariadb-debuginfoRed Hat:enterprise_linux:7::computenode |
before 1:5.5.40-1.el7_0 | 1:5.5.40-1.el7_0 |
mariadb-libsRed Hat:enterprise_linux:7::computenode |
before 1:5.5.40-1.el7_0 | 1:5.5.40-1.el7_0 |
mariadb-benchRed Hat:enterprise_linux:7::computenode |
before 1:5.5.40-1.el7_0 | 1:5.5.40-1.el7_0 |
mariadb-develRed Hat:enterprise_linux:7::computenode |
before 1:5.5.40-1.el7_0 | 1:5.5.40-1.el7_0 |
mariadb-embeddedRed Hat:enterprise_linux:7::computenode |
before 1:5.5.40-1.el7_0 | 1:5.5.40-1.el7_0 |
mariadb-embedded-develRed Hat:enterprise_linux:7::computenode |
before 1:5.5.40-1.el7_0 | 1:5.5.40-1.el7_0 |
mariadb-serverRed Hat:enterprise_linux:7::computenode |
before 1:5.5.40-1.el7_0 | 1:5.5.40-1.el7_0 |
mariadb-testRed Hat:enterprise_linux:7::computenode |
before 1:5.5.40-1.el7_0 | 1:5.5.40-1.el7_0 |
mariadbRed Hat:enterprise_linux:7::server |
before 1:5.5.40-1.el7_0 | 1:5.5.40-1.el7_0 |
mariadb-benchRed Hat:enterprise_linux:7::server |
before 1:5.5.40-1.el7_0 | 1:5.5.40-1.el7_0 |
mariadb-debuginfoRed Hat:enterprise_linux:7::server |
before 1:5.5.40-1.el7_0 | 1:5.5.40-1.el7_0 |
mariadb-develRed Hat:enterprise_linux:7::server |
before 1:5.5.40-1.el7_0 | 1:5.5.40-1.el7_0 |
mariadb-libsRed Hat:enterprise_linux:7::server |
before 1:5.5.40-1.el7_0 | 1:5.5.40-1.el7_0 |
mariadb-serverRed Hat:enterprise_linux:7::server |
before 1:5.5.40-1.el7_0 | 1:5.5.40-1.el7_0 |
mariadb-testRed Hat:enterprise_linux:7::server |
before 1:5.5.40-1.el7_0 | 1:5.5.40-1.el7_0 |
mariadb-embeddedRed Hat:enterprise_linux:7::server |
before 1:5.5.40-1.el7_0 | 1:5.5.40-1.el7_0 |
mariadb-embedded-develRed Hat:enterprise_linux:7::server |
before 1:5.5.40-1.el7_0 | 1:5.5.40-1.el7_0 |
mariadbRed Hat:enterprise_linux:7::workstation |
before 1:5.5.40-1.el7_0 | 1:5.5.40-1.el7_0 |
mariadb-benchRed Hat:enterprise_linux:7::workstation |
before 1:5.5.40-1.el7_0 | 1:5.5.40-1.el7_0 |
mariadb-debuginfoRed Hat:enterprise_linux:7::workstation |
before 1:5.5.40-1.el7_0 | 1:5.5.40-1.el7_0 |
mariadb-develRed Hat:enterprise_linux:7::workstation |
before 1:5.5.40-1.el7_0 | 1:5.5.40-1.el7_0 |
mariadb-libsRed Hat:enterprise_linux:7::workstation |
before 1:5.5.40-1.el7_0 | 1:5.5.40-1.el7_0 |
mariadb-serverRed Hat:enterprise_linux:7::workstation |
before 1:5.5.40-1.el7_0 | 1:5.5.40-1.el7_0 |
mariadb-testRed Hat:enterprise_linux:7::workstation |
before 1:5.5.40-1.el7_0 | 1:5.5.40-1.el7_0 |
mariadb-embeddedRed Hat:enterprise_linux:7::workstation |
before 1:5.5.40-1.el7_0 | 1:5.5.40-1.el7_0 |
mariadb-embedded-develRed Hat:enterprise_linux:7::workstation |
before 1:5.5.40-1.el7_0 | 1:5.5.40-1.el7_0 |
mariadb55-mariadbRed Hat:rhel_software_collections:1::el6 |
before 0:5.5.40-10.el6 | 0:5.5.40-10.el6 |
mariadb55-mariadb-benchRed Hat:rhel_software_collections:1::el6 |
before 0:5.5.40-10.el6 | 0:5.5.40-10.el6 |
mariadb55-mariadb-debuginfoRed Hat:rhel_software_collections:1::el6 |
before 0:5.5.40-10.el6 | 0:5.5.40-10.el6 |
mariadb55-mariadb-develRed Hat:rhel_software_collections:1::el6 |
before 0:5.5.40-10.el6 | 0:5.5.40-10.el6 |
mariadb55-mariadb-libsRed Hat:rhel_software_collections:1::el6 |
before 0:5.5.40-10.el6 | 0:5.5.40-10.el6 |
mariadb55-mariadb-serverRed Hat:rhel_software_collections:1::el6 |
before 0:5.5.40-10.el6 | 0:5.5.40-10.el6 |
mariadb55-mariadb-testRed Hat:rhel_software_collections:1::el6 |
before 0:5.5.40-10.el6 | 0:5.5.40-10.el6 |
mariadb55-mariadbRed Hat:rhel_software_collections:1::el7 |
before 0:5.5.40-10.el7 | 0:5.5.40-10.el7 |
mariadb55-mariadb-benchRed Hat:rhel_software_collections:1::el7 |
before 0:5.5.40-10.el7 | 0:5.5.40-10.el7 |
mariadb55-mariadb-debuginfoRed Hat:rhel_software_collections:1::el7 |
before 0:5.5.40-10.el7 | 0:5.5.40-10.el7 |
mariadb55-mariadb-develRed Hat:rhel_software_collections:1::el7 |
before 0:5.5.40-10.el7 | 0:5.5.40-10.el7 |
mariadb55-mariadb-libsRed Hat:rhel_software_collections:1::el7 |
before 0:5.5.40-10.el7 | 0:5.5.40-10.el7 |
mariadb55-mariadb-serverRed Hat:rhel_software_collections:1::el7 |
before 0:5.5.40-10.el7 | 0:5.5.40-10.el7 |
mariadb55-mariadb-testRed Hat:rhel_software_collections:1::el7 |
before 0:5.5.40-10.el7 | 0:5.5.40-10.el7 |
mariadb-galeraRed Hat:openstack:5::el6 |
before 0:5.5.40-2.el6ost | 0:5.5.40-2.el6ost |
mariadb-galera-commonRed Hat:openstack:5::el6 |
before 0:5.5.40-2.el6ost | 0:5.5.40-2.el6ost |
mariadb-galera-debuginfoRed Hat:openstack:5::el6 |
before 0:5.5.40-2.el6ost | 0:5.5.40-2.el6ost |
mariadb-galera-serverRed Hat:openstack:5::el6 |
before 0:5.5.40-2.el6ost | 0:5.5.40-2.el6ost |
mariadb-galeraRed Hat:openstack:5::el7 |
before 1:5.5.40-2.el7ost | 1:5.5.40-2.el7ost |
mariadb-galera-commonRed Hat:openstack:5::el7 |
before 1:5.5.40-2.el7ost | 1:5.5.40-2.el7ost |
mariadb-galera-debuginfoRed Hat:openstack:5::el7 |
before 1:5.5.40-2.el7ost | 1:5.5.40-2.el7ost |
mariadb-galera-serverRed Hat:openstack:5::el7 |
before 1:5.5.40-2.el7ost | 1:5.5.40-2.el7ost |
mariadbSUSE:Linux Enterprise Desktop 12 |
before 10.0.16-15.1 | 10.0.16-15.1 |
mariadbSUSE:Linux Enterprise Software Development Kit 12 |
before 10.0.16-15.1 | 10.0.16-15.1 |
mariadbSUSE:Linux Enterprise Server 12 |
before 10.0.16-15.1 | 10.0.16-15.1 |
mariadbSUSE:Linux Enterprise Server for SAP Applications 12 |
before 10.0.16-15.1 | 10.0.16-15.1 |
mariadbSUSE:Linux Enterprise Workstation Extension 12 |
before 10.0.16-15.1 | 10.0.16-15.1 |
mariadb-5.5Ubuntu:14.04:LTS |
before 5.5.39-0ubuntu0.14.04.1, plus listed versions 5.5.32-1ubuntu15.5.35-1ubuntu15.5.36-15.5.37-0ubuntu0.14.04.1 |
5.5.39-0ubuntu0.14.04.1 |
mysql-5.5Ubuntu:14.04:LTS |
before 5.5.38-0ubuntu0.14.04.1, plus listed versions 5.5.32-0ubuntu75.5.34-0ubuntu15.5.34-0ubuntu25.5.35-0ubuntu15.5.35+dfsg-1ubuntu15.5.37-0ubuntu0.14.04.1 |
5.5.38-0ubuntu0.14.04.1 |
mysql-5.6Ubuntu:14.04:LTS |
before 5.6.19-0ubuntu0.14.04.1, plus listed versions 5.6.15-0ubuntu15.6.15-1~exp25.6.16-1~exp15.6.17-0ubuntu0.14.04.1 |
5.6.19-0ubuntu0.14.04.1 |
History
| Recorded | Changed | Sources |
|---|---|---|
| aliases | EUVD | |
| first indexed | CVE List, GitHub Advisories, NVD, OSV |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2014-4258 is a medium vulnerability (CVSS 6.5) in Oracle Mysql, published July 16, 2014. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 3.51%, the 89th percentile. Fixed in mysql-5.5 5.5.38-0+wheezy1.
References
vmware.com/security/advisories/VMSA-2014-0012.html
securityfocus.com/bid/68564
exchange.xforce.ibmcloud.com/vulnerabilities/94620
securityfocus.com/archive/1/534161/100/0/threaded
securitytracker.com/id/1030578
lists.opensuse.org/opensuse-security-announce/2014-08/msg00012.html
Show 194 moreShow less
lists.opensuse.org/opensuse-security-announce/2015-04/msg00016.html
debian.org/security/2014/dsa-2985
oracle.com/technetwork/topics/security/cpujul2014-1972956.html
seclists.org/fulldisclosure/2014/Dec/23
secunia.com/advisories/60425
oracle.com/technetwork/topics/security/bulletinoct2015-2511968.html
nvd.nist.gov/vuln/detail/CVE-2014-4258
github.com/advisories/GHSA-x2cv-5mxq-rr26
advisories.mageia.org/MGASA-2014-0299.html
bugs.mageia.org/show_bug.cgi?id=13757
mariadb.com/kb/en/mariadb-5538-changelog
ubuntu.com/usn/usn-2291-1
access.redhat.com/errata/RHSA-2014:1859
access.redhat.com/security/updates/classification
oracle.com/technetwork/topics/security/cpuoct2014-1972960.html
dev.mysql.com/doc/relnotes/mysql/5.5/en/news-5-5-40.html
bugzilla.redhat.com/show_bug.cgi?id=1120382
bugzilla.redhat.com/show_bug.cgi?id=1120383
bugzilla.redhat.com/show_bug.cgi?id=1120385
bugzilla.redhat.com/show_bug.cgi?id=1120387
bugzilla.redhat.com/show_bug.cgi?id=1120388
bugzilla.redhat.com/show_bug.cgi?id=1126271
bugzilla.redhat.com/show_bug.cgi?id=1153461
bugzilla.redhat.com/show_bug.cgi?id=1153462
bugzilla.redhat.com/show_bug.cgi?id=1153463
bugzilla.redhat.com/show_bug.cgi?id=1153464
bugzilla.redhat.com/show_bug.cgi?id=1153467
bugzilla.redhat.com/show_bug.cgi?id=1153489
bugzilla.redhat.com/show_bug.cgi?id=1153490
bugzilla.redhat.com/show_bug.cgi?id=1153491
bugzilla.redhat.com/show_bug.cgi?id=1153493
bugzilla.redhat.com/show_bug.cgi?id=1153494
bugzilla.redhat.com/show_bug.cgi?id=1153495
bugzilla.redhat.com/show_bug.cgi?id=1153496
security.access.redhat.com/data/csaf/v2/advisories/2014/rhsa-2014_1859.json
access.redhat.com/security/cve/CVE-2012-5615
bugzilla.redhat.com/show_bug.cgi?id=882608
cve.org/CVERecord?id=CVE-2012-5615
nvd.nist.gov/vuln/detail/CVE-2012-5615
access.redhat.com/security/cve/CVE-2014-2494
cve.org/CVERecord?id=CVE-2014-2494
nvd.nist.gov/vuln/detail/CVE-2014-2494
access.redhat.com/security/cve/CVE-2014-4207
cve.org/CVERecord?id=CVE-2014-4207
nvd.nist.gov/vuln/detail/CVE-2014-4207
access.redhat.com/security/cve/CVE-2014-4243
cve.org/CVERecord?id=CVE-2014-4243
nvd.nist.gov/vuln/detail/CVE-2014-4243
access.redhat.com/security/cve/CVE-2014-4258
cve.org/CVERecord?id=CVE-2014-4258
access.redhat.com/security/cve/CVE-2014-4260
cve.org/CVERecord?id=CVE-2014-4260
nvd.nist.gov/vuln/detail/CVE-2014-4260
access.redhat.com/security/cve/CVE-2014-4274
cve.org/CVERecord?id=CVE-2014-4274
nvd.nist.gov/vuln/detail/CVE-2014-4274
access.redhat.com/security/cve/CVE-2014-4287
cve.org/CVERecord?id=CVE-2014-4287
nvd.nist.gov/vuln/detail/CVE-2014-4287
access.redhat.com/security/cve/CVE-2014-6463
cve.org/CVERecord?id=CVE-2014-6463
nvd.nist.gov/vuln/detail/CVE-2014-6463
access.redhat.com/security/cve/CVE-2014-6464
cve.org/CVERecord?id=CVE-2014-6464
nvd.nist.gov/vuln/detail/CVE-2014-6464
access.redhat.com/security/cve/CVE-2014-6469
cve.org/CVERecord?id=CVE-2014-6469
nvd.nist.gov/vuln/detail/CVE-2014-6469
access.redhat.com/security/cve/CVE-2014-6484
cve.org/CVERecord?id=CVE-2014-6484
nvd.nist.gov/vuln/detail/CVE-2014-6484
access.redhat.com/security/cve/CVE-2014-6505
cve.org/CVERecord?id=CVE-2014-6505
nvd.nist.gov/vuln/detail/CVE-2014-6505
access.redhat.com/security/cve/CVE-2014-6507
cve.org/CVERecord?id=CVE-2014-6507
nvd.nist.gov/vuln/detail/CVE-2014-6507
access.redhat.com/security/cve/CVE-2014-6520
cve.org/CVERecord?id=CVE-2014-6520
nvd.nist.gov/vuln/detail/CVE-2014-6520
access.redhat.com/security/cve/CVE-2014-6530
cve.org/CVERecord?id=CVE-2014-6530
nvd.nist.gov/vuln/detail/CVE-2014-6530
access.redhat.com/security/cve/CVE-2014-6551
cve.org/CVERecord?id=CVE-2014-6551
nvd.nist.gov/vuln/detail/CVE-2014-6551
access.redhat.com/security/cve/CVE-2014-6555
cve.org/CVERecord?id=CVE-2014-6555
nvd.nist.gov/vuln/detail/CVE-2014-6555
access.redhat.com/security/cve/CVE-2014-6559
cve.org/CVERecord?id=CVE-2014-6559
nvd.nist.gov/vuln/detail/CVE-2014-6559
access.redhat.com/errata/RHSA-2014:1860
security.access.redhat.com/data/csaf/v2/advisories/2014/rhsa-2014_1860.json
access.redhat.com/errata/RHSA-2014:1861
mariadb.com/kb/en/mariadb/development/release-notes/mariadb-5540-release-notes
security.access.redhat.com/data/csaf/v2/advisories/2014/rhsa-2014_1861.json
access.redhat.com/errata/RHSA-2014:1862
security.access.redhat.com/data/csaf/v2/advisories/2014/rhsa-2014_1862.json
access.redhat.com/errata/RHSA-2014:1937
mariadb.com/kb/en/mariadb/development/release-notes/mariadb-5539-release-notes
mariadb.com/kb/en/mariadb/development/release-notes/mariadb-5538-release-notes
security.access.redhat.com/data/csaf/v2/advisories/2014/rhsa-2014_1937.json
access.redhat.com/errata/RHSA-2014:1940
security.access.redhat.com/data/csaf/v2/advisories/2014/rhsa-2014_1940.json
suse.com/support/update/announcement/2015/suse-su-20150620-1
bugzilla.suse.com/734436
bugzilla.suse.com/768832
bugzilla.suse.com/780019
bugzilla.suse.com/789263
bugzilla.suse.com/791863
bugzilla.suse.com/792332
bugzilla.suse.com/803040
bugzilla.suse.com/830086
bugzilla.suse.com/834028
bugzilla.suse.com/834967
bugzilla.suse.com/837801
bugzilla.suse.com/857678
bugzilla.suse.com/858823
bugzilla.suse.com/861493
bugzilla.suse.com/868673
bugzilla.suse.com/873896
bugzilla.suse.com/878779
bugzilla.suse.com/887580
bugzilla.suse.com/901237
bugzilla.suse.com/914058
bugzilla.suse.com/922043
bugzilla.suse.com/927623
bugzilla.suse.com/934789
suse.com/security/cve/CVE-2012-5615
suse.com/security/cve/CVE-2013-1861
suse.com/security/cve/CVE-2013-3783
suse.com/security/cve/CVE-2013-3793
suse.com/security/cve/CVE-2013-3794
suse.com/security/cve/CVE-2013-3795
suse.com/security/cve/CVE-2013-3796
suse.com/security/cve/CVE-2013-3798
suse.com/security/cve/CVE-2013-3801
suse.com/security/cve/CVE-2013-3802
suse.com/security/cve/CVE-2013-3804
suse.com/security/cve/CVE-2013-3805
suse.com/security/cve/CVE-2013-3806
suse.com/security/cve/CVE-2013-3807
suse.com/security/cve/CVE-2013-3808
suse.com/security/cve/CVE-2013-3809
suse.com/security/cve/CVE-2013-3810
suse.com/security/cve/CVE-2013-3811
suse.com/security/cve/CVE-2013-3812
suse.com/security/cve/CVE-2013-4316
suse.com/security/cve/CVE-2013-5860
suse.com/security/cve/CVE-2013-5881
suse.com/security/cve/CVE-2013-5882
suse.com/security/cve/CVE-2013-5891
suse.com/security/cve/CVE-2013-5894
suse.com/security/cve/CVE-2013-5908
suse.com/security/cve/CVE-2014-0001
suse.com/security/cve/CVE-2014-0224
suse.com/security/cve/CVE-2014-0384
suse.com/security/cve/CVE-2014-0386
suse.com/security/cve/CVE-2014-0393
suse.com/security/cve/CVE-2014-0401
suse.com/security/cve/CVE-2014-0402
suse.com/security/cve/CVE-2014-0412
suse.com/security/cve/CVE-2014-0420
suse.com/security/cve/CVE-2014-0427
suse.com/security/cve/CVE-2014-0430
suse.com/security/cve/CVE-2014-0431
suse.com/security/cve/CVE-2014-0433
suse.com/security/cve/CVE-2014-0437
suse.com/security/cve/CVE-2014-2419
suse.com/security/cve/CVE-2014-2430
suse.com/security/cve/CVE-2014-2431
suse.com/security/cve/CVE-2014-2432
suse.com/security/cve/CVE-2014-2434
suse.com/security/cve/CVE-2014-2435
bugzilla.suse.com/873351
bugzilla.suse.com/876282
bugzilla.suse.com/880891
bugzilla.suse.com/896400
bugzilla.suse.com/904627
bugzilla.suse.com/906117
bugzilla.suse.com/906194
bugzilla.suse.com/911442
bugzilla.suse.com/911556
bugzilla.suse.com/915911
bugzilla.suse.com/915912
bugzilla.suse.com/915913
bugzilla.suse.com/915914
bugzilla.suse.com/919229
ubuntu.com/security/CVE-2014-4258
ubuntu.com/security/notices/USN-2291-1
ubuntu.com/security/CVE-2014-2494
ubuntu.com/security/CVE-2014-4207
ubuntu.com/security/CVE-2014-4260
Left out here: 88 references and the rest of 1 source description. The JSON record has them.