CVE-2014-0001

Buffer overflow in client/mysql.cc in Oracle MySQL and MariaDB before 5.5.35 allows remote...

7.5 HighFix available

Buffer overflow in client/mysql.cc in Oracle MySQL and MariaDB before 5.5.35 allows remote database servers to cause a denial of service (crash) and possibly execute arbitrary code via a long server version string.

Exploit likelihood

6.40%Up 2.2 points since Feb 4, 2022

What each source reports

NVD Score used 7.5

Record: CVE-2014-0001
CVSS 2.0: 7.5 HighAV:N/AC:L/Au:N/C:P/I:P/A:P
Weakness: CWE-119
Updated: 2026-11-02

CVE List No score

Record: CVE-2014-0001
Updated: 2026-11-02

EUVDEUVD-2014-0108 No score

Record: EUVD-2014-0108
Updated: 2026-11-03

GitHub AdvisoriesGHSA-7pq3-qq22-gpw3 No score

Buffer overflow in client/mysql.cc in Oracle MySQL and MariaDB before 5.5.35 allows remote...

Record: GHSA-7pq3-qq22-gpw3
Weakness: CWE-119
Updated: 2026-11-02

OSVSUSE-SU-2015:0620-1 No score

Security update for MySQL

This MySQL update provides the following:

* upgrade to version 5.5.39, [bnc#887580]
* CVE's fixed: CVE-2014-2484, CVE-2014-4258, CVE-2014-4260,
  CVE-2014-2494, CVE-2014-4238, CVE-2014-4207, CVE-2014-4233,
  CVE-2014-4240, CVE-2014-4214, CVE-2014-4243

Security Issues:

* CVE-2014-2484
  <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-2484>
* CVE-2014-4258
  <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-4258>
* CVE-2014-4260
  <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-4260>
* CVE-2014-2494
  <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-2494>
* CVE-2014-4238
  <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-4238>
* CVE-2014-4207
  <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-4207>
* CVE-2014-4233
  <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-4233>
* CVE-2014-4240
  <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-4240>
* CVE-2014-4214
  <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-4214>
* CVE-2014-4243
  <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-4243>

Record: SUSE-SU-2015:0620-1
Updated: 2026-11-02

OSVSUSE-SU-2015:0946-1 No score

Security update for MySQL

This MySQL update provides the following:

* upgrade to version 5.5.39, [bnc#887580]
* CVE's fixed: CVE-2014-2484, CVE-2014-4258, CVE-2014-4260,
  CVE-2014-2494, CVE-2014-4238, CVE-2014-4207, CVE-2014-4233,
  CVE-2014-4240, CVE-2014-4214, CVE-2014-4243

Security Issues:

* CVE-2014-2484
  <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-2484>
* CVE-2014-4258
  <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-4258>
* CVE-2014-4260
  <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-4260>
* CVE-2014-2494
  <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-2494>
* CVE-2014-4238
  <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-4238>
* CVE-2014-4207
  <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-4207>
* CVE-2014-4233
  <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-4233>
* CVE-2014-4240
  <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-4240>
* CVE-2014-4214
  <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-4214>
* CVE-2014-4243
  <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-4243>

Record: SUSE-SU-2015:0946-1
Updated: 2026-11-02

OSVSUSE-SU-2015:1177-1 No score

Security update for MySQL

This MySQL update provides the following:

* upgrade to version 5.5.39, [bnc#887580]
* CVE's fixed: CVE-2014-2484, CVE-2014-4258, CVE-2014-4260,
  CVE-2014-2494, CVE-2014-4238, CVE-2014-4207, CVE-2014-4233,
  CVE-2014-4240, CVE-2014-4214, CVE-2014-4243

Security Issues:

* CVE-2014-2484
  <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-2484>
* CVE-2014-4258
  <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-4258>
* CVE-2014-4260
  <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-4260>
* CVE-2014-2494
  <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-2494>
* CVE-2014-4238
  <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-4238>
* CVE-2014-4207
  <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-4207>
* CVE-2014-4233
  <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-4233>
* CVE-2014-4240
  <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-4240>
* CVE-2014-4214
  <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-4214>
* CVE-2014-4243
  <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-4243>

Record: SUSE-SU-2015:1177-1
Updated: 2026-11-02

OSVUBUNTU-CVE-2014-0001 No score

Record: UBUNTU-CVE-2014-0001
Updated: 2026-11-02

OSVUSN-2170-1 No score

mysql-5.5 vulnerabilities

Multiple security issues were discovered in MySQL and this update includes a new upstream MySQL version to fix these issues. MySQL has been updated to 5.5.37.

In addition to security fixes, the updated packages contain bug fixes, new features, and possibly incompatible changes.

Please see the following for more information: http://dev.mysql.com/doc/relnotes/mysql/5.5/en/news-5-5-36.html http://dev.mysql.com/doc/relnotes/mysql/5.5/en/news-5-5-37.html http://www.oracle.com/technetwork/topics/security/cpuapr2014-1972952.html

Additionally, Matthias Reichl discovered that the mysql-5.5 packages were missing the patches applied previously in the mysql-5.1 packages to drop the default test database and localhost permissions granting access to any databases starting with "test_". This update reintroduces these patches for Ubuntu 12.04 LTS, Ubuntu 12.10, and Ubuntu 13.10. Existing test databases and permissions will not be modified on upgrade. To manually restrict access for existing installations, please refer to the following:

http://dev.mysql.com/doc/refman/5.5/en/default-privileges.html

Record: USN-2170-1
Updated: 2026-11-02

Affected products

Affected packages

Affected packages
Package	Affected	Fixed
`mysql-5.1` Debian:6.0 From an advisory covering 3 CVEs	before 5.1.73-1+deb6u1, plus listed versions 5.1.49-35.1.50-15.1.51-15.1.53-15.1.54-1 Show 20 moreShow less 5.1.54-25.1.55-15.1.56-15.1.57-15.1.57-1.15.1.57-1.25.1.57-1.35.1.57-25.1.57-35.1.57-3.15.1.58-15.1.61-0+squeeze15.1.61-25.1.61-35.1.62-15.1.62-1+m68k5.1.63-0+squeeze15.1.66-0+squeeze15.1.72-25.1.73-1	5.1.73-1+deb6u1
`mysql-5.5` Debian:7 From an advisory covering 9 CVEs	before 5.5.37-0+wheezy1, plus listed versions 5.5.30+dfsg-1.15.5.31+dfsg-0+wheezy15.5.31+dfsg-15.5.33+dfsg-0+wheezy15.5.33+dfsg-15.5.35+dfsg-0+wheezy15.5.35+dfsg-15.5.35+dfsg-2	5.5.37-0+wheezy1
`mysql` Red Hat:enterprise_linux:6::client From an advisory covering 8 CVEs	before 0:5.1.73-3.el6_5	0:5.1.73-3.el6_5
`mysql-debuginfo` Red Hat:enterprise_linux:6::client From an advisory covering 8 CVEs	before 0:5.1.73-3.el6_5	0:5.1.73-3.el6_5
`mysql-libs` Red Hat:enterprise_linux:6::client From an advisory covering 8 CVEs	before 0:5.1.73-3.el6_5	0:5.1.73-3.el6_5
`mysql-server` Red Hat:enterprise_linux:6::client From an advisory covering 8 CVEs	before 0:5.1.73-3.el6_5	0:5.1.73-3.el6_5
`mysql-bench` Red Hat:enterprise_linux:6::client From an advisory covering 8 CVEs	before 0:5.1.73-3.el6_5	0:5.1.73-3.el6_5
`mysql-devel` Red Hat:enterprise_linux:6::client From an advisory covering 8 CVEs	before 0:5.1.73-3.el6_5	0:5.1.73-3.el6_5
`mysql-embedded` Red Hat:enterprise_linux:6::client From an advisory covering 8 CVEs	before 0:5.1.73-3.el6_5	0:5.1.73-3.el6_5
`mysql-embedded-devel` Red Hat:enterprise_linux:6::client From an advisory covering 8 CVEs	before 0:5.1.73-3.el6_5	0:5.1.73-3.el6_5

Show 61 moreShow less

Affected packages
Package	Affected	Fixed
`mysql-test` Red Hat:enterprise_linux:6::client From an advisory covering 8 CVEs	before 0:5.1.73-3.el6_5	0:5.1.73-3.el6_5
`mysql` Red Hat:enterprise_linux:6::computenode From an advisory covering 8 CVEs	before 0:5.1.73-3.el6_5	0:5.1.73-3.el6_5
`mysql-debuginfo` Red Hat:enterprise_linux:6::computenode From an advisory covering 8 CVEs	before 0:5.1.73-3.el6_5	0:5.1.73-3.el6_5
`mysql-libs` Red Hat:enterprise_linux:6::computenode From an advisory covering 8 CVEs	before 0:5.1.73-3.el6_5	0:5.1.73-3.el6_5
`mysql-bench` Red Hat:enterprise_linux:6::computenode From an advisory covering 8 CVEs	before 0:5.1.73-3.el6_5	0:5.1.73-3.el6_5
`mysql-devel` Red Hat:enterprise_linux:6::computenode From an advisory covering 8 CVEs	before 0:5.1.73-3.el6_5	0:5.1.73-3.el6_5
`mysql-embedded` Red Hat:enterprise_linux:6::computenode From an advisory covering 8 CVEs	before 0:5.1.73-3.el6_5	0:5.1.73-3.el6_5
`mysql-embedded-devel` Red Hat:enterprise_linux:6::computenode From an advisory covering 8 CVEs	before 0:5.1.73-3.el6_5	0:5.1.73-3.el6_5
`mysql-server` Red Hat:enterprise_linux:6::computenode From an advisory covering 8 CVEs	before 0:5.1.73-3.el6_5	0:5.1.73-3.el6_5
`mysql-test` Red Hat:enterprise_linux:6::computenode From an advisory covering 8 CVEs	before 0:5.1.73-3.el6_5	0:5.1.73-3.el6_5
`mysql` Red Hat:enterprise_linux:6::server From an advisory covering 8 CVEs	before 0:5.1.73-3.el6_5	0:5.1.73-3.el6_5
`mysql-bench` Red Hat:enterprise_linux:6::server From an advisory covering 8 CVEs	before 0:5.1.73-3.el6_5	0:5.1.73-3.el6_5
`mysql-debuginfo` Red Hat:enterprise_linux:6::server From an advisory covering 8 CVEs	before 0:5.1.73-3.el6_5	0:5.1.73-3.el6_5
`mysql-devel` Red Hat:enterprise_linux:6::server From an advisory covering 8 CVEs	before 0:5.1.73-3.el6_5	0:5.1.73-3.el6_5
`mysql-libs` Red Hat:enterprise_linux:6::server From an advisory covering 8 CVEs	before 0:5.1.73-3.el6_5	0:5.1.73-3.el6_5
`mysql-server` Red Hat:enterprise_linux:6::server From an advisory covering 8 CVEs	before 0:5.1.73-3.el6_5	0:5.1.73-3.el6_5
`mysql-test` Red Hat:enterprise_linux:6::server From an advisory covering 8 CVEs	before 0:5.1.73-3.el6_5	0:5.1.73-3.el6_5
`mysql-embedded` Red Hat:enterprise_linux:6::server From an advisory covering 8 CVEs	before 0:5.1.73-3.el6_5	0:5.1.73-3.el6_5
`mysql-embedded-devel` Red Hat:enterprise_linux:6::server From an advisory covering 8 CVEs	before 0:5.1.73-3.el6_5	0:5.1.73-3.el6_5
`mysql` Red Hat:enterprise_linux:6::workstation From an advisory covering 8 CVEs	before 0:5.1.73-3.el6_5	0:5.1.73-3.el6_5
`mysql-bench` Red Hat:enterprise_linux:6::workstation From an advisory covering 8 CVEs	before 0:5.1.73-3.el6_5	0:5.1.73-3.el6_5
`mysql-debuginfo` Red Hat:enterprise_linux:6::workstation From an advisory covering 8 CVEs	before 0:5.1.73-3.el6_5	0:5.1.73-3.el6_5
`mysql-devel` Red Hat:enterprise_linux:6::workstation From an advisory covering 8 CVEs	before 0:5.1.73-3.el6_5	0:5.1.73-3.el6_5
`mysql-libs` Red Hat:enterprise_linux:6::workstation From an advisory covering 8 CVEs	before 0:5.1.73-3.el6_5	0:5.1.73-3.el6_5
`mysql-server` Red Hat:enterprise_linux:6::workstation From an advisory covering 8 CVEs	before 0:5.1.73-3.el6_5	0:5.1.73-3.el6_5
`mysql-test` Red Hat:enterprise_linux:6::workstation From an advisory covering 8 CVEs	before 0:5.1.73-3.el6_5	0:5.1.73-3.el6_5
`mysql-embedded` Red Hat:enterprise_linux:6::workstation From an advisory covering 8 CVEs	before 0:5.1.73-3.el6_5	0:5.1.73-3.el6_5
`mysql-embedded-devel` Red Hat:enterprise_linux:6::workstation From an advisory covering 8 CVEs	before 0:5.1.73-3.el6_5	0:5.1.73-3.el6_5
`mysql55-mysql` Red Hat:rhel_software_collections:1::el6 From an advisory covering 12 CVEs	before 0:5.5.36-1.1.el6	0:5.5.36-1.1.el6
`mysql55-mysql-bench` Red Hat:rhel_software_collections:1::el6 From an advisory covering 12 CVEs	before 0:5.5.36-1.1.el6	0:5.5.36-1.1.el6
`mysql55-mysql-debuginfo` Red Hat:rhel_software_collections:1::el6 From an advisory covering 12 CVEs	before 0:5.5.36-1.1.el6	0:5.5.36-1.1.el6
`mysql55-mysql-devel` Red Hat:rhel_software_collections:1::el6 From an advisory covering 12 CVEs	before 0:5.5.36-1.1.el6	0:5.5.36-1.1.el6
`mysql55-mysql-libs` Red Hat:rhel_software_collections:1::el6 From an advisory covering 12 CVEs	before 0:5.5.36-1.1.el6	0:5.5.36-1.1.el6
`mysql55-mysql-server` Red Hat:rhel_software_collections:1::el6 From an advisory covering 12 CVEs	before 0:5.5.36-1.1.el6	0:5.5.36-1.1.el6
`mysql55-mysql-test` Red Hat:rhel_software_collections:1::el6 From an advisory covering 12 CVEs	before 0:5.5.36-1.1.el6	0:5.5.36-1.1.el6
`mysql55-mysql` Red Hat:enterprise_linux:5::client From an advisory covering 12 CVEs	before 0:5.5.36-2.el5	0:5.5.36-2.el5
`mysql55-mysql-bench` Red Hat:enterprise_linux:5::client From an advisory covering 12 CVEs	before 0:5.5.36-2.el5	0:5.5.36-2.el5
`mysql55-mysql-debuginfo` Red Hat:enterprise_linux:5::client From an advisory covering 12 CVEs	before 0:5.5.36-2.el5	0:5.5.36-2.el5
`mysql55-mysql-libs` Red Hat:enterprise_linux:5::client From an advisory covering 12 CVEs	before 0:5.5.36-2.el5	0:5.5.36-2.el5
`mysql55-mysql-server` Red Hat:enterprise_linux:5::client From an advisory covering 12 CVEs	before 0:5.5.36-2.el5	0:5.5.36-2.el5
`mysql55-mysql-test` Red Hat:enterprise_linux:5::client From an advisory covering 12 CVEs	before 0:5.5.36-2.el5	0:5.5.36-2.el5
`mysql55-mysql` Red Hat:enterprise_linux:5::client_workstation From an advisory covering 12 CVEs	before 0:5.5.36-2.el5	0:5.5.36-2.el5
`mysql55-mysql-debuginfo` Red Hat:enterprise_linux:5::client_workstation From an advisory covering 12 CVEs	before 0:5.5.36-2.el5	0:5.5.36-2.el5
`mysql55-mysql-devel` Red Hat:enterprise_linux:5::client_workstation From an advisory covering 12 CVEs	before 0:5.5.36-2.el5	0:5.5.36-2.el5
`mysql55-mysql` Red Hat:enterprise_linux:5::server From an advisory covering 12 CVEs	before 0:5.5.36-2.el5	0:5.5.36-2.el5
`mysql55-mysql-bench` Red Hat:enterprise_linux:5::server From an advisory covering 12 CVEs	before 0:5.5.36-2.el5	0:5.5.36-2.el5
`mysql55-mysql-debuginfo` Red Hat:enterprise_linux:5::server From an advisory covering 12 CVEs	before 0:5.5.36-2.el5	0:5.5.36-2.el5
`mysql55-mysql-devel` Red Hat:enterprise_linux:5::server From an advisory covering 12 CVEs	before 0:5.5.36-2.el5	0:5.5.36-2.el5
`mysql55-mysql-libs` Red Hat:enterprise_linux:5::server From an advisory covering 12 CVEs	before 0:5.5.36-2.el5	0:5.5.36-2.el5
`mysql55-mysql-server` Red Hat:enterprise_linux:5::server From an advisory covering 12 CVEs	before 0:5.5.36-2.el5	0:5.5.36-2.el5
`mysql55-mysql-test` Red Hat:enterprise_linux:5::server From an advisory covering 12 CVEs	before 0:5.5.36-2.el5	0:5.5.36-2.el5
`mariadb55-mariadb` Red Hat:rhel_software_collections:1::el6 From an advisory covering 12 CVEs	before 0:5.5.35-1.1.el6	0:5.5.35-1.1.el6
`mariadb55-mariadb-bench` Red Hat:rhel_software_collections:1::el6 From an advisory covering 12 CVEs	before 0:5.5.35-1.1.el6	0:5.5.35-1.1.el6
`mariadb55-mariadb-debuginfo` Red Hat:rhel_software_collections:1::el6 From an advisory covering 12 CVEs	before 0:5.5.35-1.1.el6	0:5.5.35-1.1.el6
`mariadb55-mariadb-devel` Red Hat:rhel_software_collections:1::el6 From an advisory covering 12 CVEs	before 0:5.5.35-1.1.el6	0:5.5.35-1.1.el6
`mariadb55-mariadb-libs` Red Hat:rhel_software_collections:1::el6 From an advisory covering 12 CVEs	before 0:5.5.35-1.1.el6	0:5.5.35-1.1.el6
`mariadb55-mariadb-server` Red Hat:rhel_software_collections:1::el6 From an advisory covering 12 CVEs	before 0:5.5.35-1.1.el6	0:5.5.35-1.1.el6
`mariadb55-mariadb-test` Red Hat:rhel_software_collections:1::el6 From an advisory covering 12 CVEs	before 0:5.5.35-1.1.el6	0:5.5.35-1.1.el6
`mysql-5.5` Ubuntu:14.04:LTS	before 5.5.37-0ubuntu0.14.04.1, plus listed versions 5.5.32-0ubuntu75.5.34-0ubuntu15.5.34-0ubuntu25.5.35-0ubuntu15.5.35+dfsg-1ubuntu1	5.5.37-0ubuntu0.14.04.1
`mysql-5.6` Ubuntu:14.04:LTS	before 5.6.17-0ubuntu0.14.04.1, plus listed versions 5.6.15-0ubuntu15.6.15-1~exp25.6.16-1~exp1	5.6.17-0ubuntu0.14.04.1
`mysql-5.5` Ubuntu:14.04:LTS From an advisory covering 9 CVEs	before 5.5.37-0ubuntu0.14.04.1, plus listed versions 5.5.32-0ubuntu75.5.34-0ubuntu15.5.34-0ubuntu25.5.35-0ubuntu15.5.35+dfsg-1ubuntu1	5.5.37-0ubuntu0.14.04.1

History

History
Recorded	Changed	Sources
Nov 6, 2026	affected, facts
Nov 3, 2026	aliases	EUVD
Nov 2, 2026	first indexed	CVE List, GitHub Advisories, NVD, OSV

Dates are when Every CVE recorded each change. Upstream dates may differ.

In short

CVE-2014-0001 is a high vulnerability (CVSS 7.5) in Mariadb, published January 31, 2014. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 6.40%, the 93rd percentile. Fixed in mysql-5.5 5.5.37-0ubuntu0.14.04.1.

References

Show 194 moreShow less

This page doesn't list everything

Left out here: 40 references. The JSON record has them.