CVE-2014-4274

Unspecified vulnerability in Oracle MySQL Server 5.5.38 and earlier and 5.6.19 and earlier allows...

4.1 MediumFix available

Unspecified vulnerability in Oracle MySQL Server 5.5.38 and earlier and 5.6.19 and earlier allows local users to affect confidentiality, integrity, and availability via vectors related to SERVER:MyISAM.

Exploit likelihood

0.34%Down 0.6 points since Feb 4, 2022

What each source reports

NVD Score used 4.1

Record: CVE-2014-4274
CVSS 2.0: 4.1 MediumAV:L/AC:M/Au:S/C:P/I:P/A:P
Updated: 2026-11-02

CVE List No score

Record: CVE-2014-4274
Updated: 2026-11-02

EUVDEUVD-2014-4203 No score

Record: EUVD-2014-4203
Updated: 2026-11-03

GitHub AdvisoriesGHSA-q3fw-w8pr-jpq6 No score

Unspecified vulnerability in Oracle MySQL Server 5.5.38 and earlier and 5.6.19 and earlier allows...

Record: GHSA-q3fw-w8pr-jpq6
Updated: 2026-11-02

OSVMGASA-2014-0377 No score

Updated mariadb packages fix CVE-2014-4274

Updated mariadb packages fix security vulnerability:

MyISAM temporary files could be used to mount a code-execution attack (CVE-2014-4274).

The mariadb package has been updated to version 5.5.39, which fixes this and several other issues. Refer to the upstream Changelog for more details.

Record: MGASA-2014-0377
Updated: 2026-11-02

OSVSUSE-SU-2015:0620-1 No score

Security update for MySQL

This MySQL update provides the following:

* upgrade to version 5.5.39, [bnc#887580]
* CVE's fixed: CVE-2014-2484, CVE-2014-4258, CVE-2014-4260,
  CVE-2014-2494, CVE-2014-4238, CVE-2014-4207, CVE-2014-4233,
  CVE-2014-4240, CVE-2014-4214, CVE-2014-4243

Security Issues:

* CVE-2014-2484
  <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-2484>
* CVE-2014-4258
  <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-4258>
* CVE-2014-4260
  <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-4260>
* CVE-2014-2494
  <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-2494>
* CVE-2014-4238
  <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-4238>
* CVE-2014-4207
  <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-4207>
* CVE-2014-4233
  <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-4233>
* CVE-2014-4240
  <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-4240>
* CVE-2014-4214
  <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-4214>
* CVE-2014-4243
  <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-4243>

Record: SUSE-SU-2015:0620-1
Updated: 2026-11-02

Show 5 moreShow less

OSVSUSE-SU-2015:0743-1 No score

Security update for mariadb

mariadb was updated to version 10.0.16 to fix 40 security issues.

These security issues were fixed:

CVE-2015-0411: Unspecified vulnerability in Oracle MySQL Server 5.5.40 and earlier, and 5.6.21 and earlier, allowed remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Server : Security : Encryption (bnc#915911).
CVE-2015-0382: Unspecified vulnerability in Oracle MySQL Server 5.5.40 and earlier and 5.6.21 and earlier allowed remote attackers to affect availability via unknown vectors related to Server : Replication, a different vulnerability than CVE-2015-0381 (bnc#915911).
CVE-2015-0381: Unspecified vulnerability in Oracle MySQL Server 5.5.40 and earlier and 5.6.21 and earlier allowed remote attackers to affect availability via unknown vectors related to Server : Replication, a different vulnerability than CVE-2015-0382 (bnc#915911).
CVE-2015-0432: Unspecified vulnerability in Oracle MySQL Server 5.5.40 and earlier allowed remote authenticated users to affect availability via vectors related to Server : InnoDB : DDL : Foreign Key (bnc#915911).
CVE-2014-6568: Unspecified vulnerability in Oracle MySQL Server 5.5.40 and earlier, and 5.6.21 and earlier, allowed remote authenticated users to affect availability via vectors related to Server : InnoDB : DML (bnc#915911).
CVE-2015-0374: Unspecified vulnerability in Oracle MySQL Server 5.5.40 and earlier and 5.6.21 and earlier allowed remote authenticated users to affect confidentiality via unknown vectors related to Server : Security : Privileges : Foreign Key (bnc#915911).
CVE-2014-6507: Unspecified vulnerability in Oracle MySQL Server 5.5.39 and earlier, and 5.6.20 and earlier, allowed remote authenticated users to affect confidentiality, integrity, and availability via vectors related to SERVER:DML (bnc#915912).
CVE-2014-6491: Unspecified vulnerability in Oracle MySQL Server 5.5.39 and earlier and 5.6.20 and earlier allowed remote attackers to affect confidentiality, integrity, and availability via vectors related to SERVER:SSL:yaSSL, a different vulnerability than CVE-2014-6500 (bnc#915912).
CVE-2014-6500: Unspecified vulnerability in Oracle MySQL Server 5.5.39 and earlier, and 5.6.20 and earlier, allowed remote attackers to affect confidentiality, integrity, and availability via vectors related to SERVER:SSL:yaSSL, a different vulnerability than CVE-2014-6491 (bnc#915912).
CVE-2014-6469: Unspecified vulnerability in Oracle MySQL Server 5.5.39 and eariler and 5.6.20 and earlier allowed remote authenticated users to affect availability via vectors related to SERVER:OPTIMIZER (bnc#915912).
CVE-2014-6555: Unspecified vulnerability in Oracle MySQL Server 5.5.39 and earlier and 5.6.20 and earlier allowed remote authenticated users to affect confidentiality, integrity, and availability via vectors related to SERVER:DML (bnc#915912).
CVE-2014-6559: Unspecified vulnerability in Oracle MySQL Server 5.5.39 and earlier, and 5.6.20 and earlier, allowed remote attackers to affect confidentiality via vectors related to C API SSL CERTIFICATE HANDLING (bnc#915912).
CVE-2014-6494: Unspecified vulnerability in Oracle MySQL Server 5.5.39 and earlier, and 5.6.20 and earlier, allowed remote attackers to affect availability via vectors related to CLIENT:SSL:yaSSL, a different vulnerability than CVE-2014-6496 (bnc#915912).
CVE-2014-6496: Unspecified vulnerability in Oracle MySQL Server 5.5.39 and earlier, and 5.6.20 and earlier, allowed remote attackers to affect availability via vectors related to CLIENT:SSL:yaSSL, a different vulnerability than CVE-2014-6494 (bnc#915912).
CVE-2014-6464: Unspecified vulnerability in Oracle MySQL Server 5.5.39 and earlier and 5.6.20 and earlier allowed remote authenticated users to affect availability via vectors related to SERVER:INNODB DML FOREIGN KEYS (bnc#915912).
CVE-2010-5298: Race condition in the ssl3_read_bytes function in s3_pkt.c in OpenSSL through 1.0.1g, when…

Record: SUSE-SU-2015:0743-1
Updated: 2026-11-02

OSVSUSE-SU-2015:0946-1 No score

Security update for MySQL

This MySQL update provides the following:

* upgrade to version 5.5.39, [bnc#887580]
* CVE's fixed: CVE-2014-2484, CVE-2014-4258, CVE-2014-4260,
  CVE-2014-2494, CVE-2014-4238, CVE-2014-4207, CVE-2014-4233,
  CVE-2014-4240, CVE-2014-4214, CVE-2014-4243

Security Issues:

* CVE-2014-2484
  <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-2484>
* CVE-2014-4258
  <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-4258>
* CVE-2014-4260
  <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-4260>
* CVE-2014-2494
  <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-2494>
* CVE-2014-4238
  <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-4238>
* CVE-2014-4207
  <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-4207>
* CVE-2014-4233
  <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-4233>
* CVE-2014-4240
  <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-4240>
* CVE-2014-4214
  <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-4214>
* CVE-2014-4243
  <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-4243>

Record: SUSE-SU-2015:0946-1
Updated: 2026-11-02

OSVSUSE-SU-2015:1177-1 No score

Security update for MySQL

This MySQL update provides the following:

* upgrade to version 5.5.39, [bnc#887580]
* CVE's fixed: CVE-2014-2484, CVE-2014-4258, CVE-2014-4260,
  CVE-2014-2494, CVE-2014-4238, CVE-2014-4207, CVE-2014-4233,
  CVE-2014-4240, CVE-2014-4214, CVE-2014-4243

Security Issues:

* CVE-2014-2484
  <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-2484>
* CVE-2014-4258
  <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-4258>
* CVE-2014-4260
  <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-4260>
* CVE-2014-2494
  <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-2494>
* CVE-2014-4238
  <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-4238>
* CVE-2014-4207
  <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-4207>
* CVE-2014-4233
  <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-4233>
* CVE-2014-4240
  <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-4240>
* CVE-2014-4214
  <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-4214>
* CVE-2014-4243
  <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-4243>

Record: SUSE-SU-2015:1177-1
Updated: 2026-11-02

OSVUBUNTU-CVE-2014-4274 No score

Record: UBUNTU-CVE-2014-4274
Updated: 2026-11-02

OSVUSN-2384-1 No score

mysql-5.5 vulnerabilities

Multiple security issues were discovered in MySQL and this update includes a new upstream MySQL version to fix these issues. MySQL has been updated to 5.5.40.

In addition to security fixes, the updated packages contain bug fixes, new features, and possibly incompatible changes.

Please see the following for more information: http://dev.mysql.com/doc/relnotes/mysql/5.5/en/news-5-5-39.html http://dev.mysql.com/doc/relnotes/mysql/5.5/en/news-5-5-40.html http://www.oracle.com/technetwork/topics/security/cpuoct2014-1972960.html

Record: USN-2384-1
Updated: 2026-11-02

Affected products

Affected packages

Affected packages
Package	Affected	Fixed
`mysql-5.1` Debian:6.0 From an advisory covering 3 CVEs	before 5.1.73-1+deb6u1, plus listed versions 5.1.49-35.1.50-15.1.51-15.1.53-15.1.54-1 Show 20 moreShow less 5.1.54-25.1.55-15.1.56-15.1.57-15.1.57-1.15.1.57-1.25.1.57-1.35.1.57-25.1.57-35.1.57-3.15.1.58-15.1.61-0+squeeze15.1.61-25.1.61-35.1.62-15.1.62-1+m68k5.1.63-0+squeeze15.1.66-0+squeeze15.1.72-25.1.73-1	5.1.73-1+deb6u1
`mysql-5.5` Debian:7 From an advisory covering 20 CVEs	before 5.5.40-0+wheezy1, plus listed versions 5.5.30+dfsg-1.15.5.31+dfsg-0+wheezy15.5.31+dfsg-15.5.33+dfsg-0+wheezy15.5.33+dfsg-1 Show 7 moreShow less 5.5.35+dfsg-0+wheezy15.5.35+dfsg-15.5.35+dfsg-25.5.37-0+wheezy15.5.37-15.5.38-0+wheezy15.5.39-1	5.5.40-0+wheezy1
`mariadb` Mageia:3	before 5.5.39-1.mga3	5.5.39-1.mga3
`mariadb` Mageia:4	before 5.5.39-1.mga4	5.5.39-1.mga4
`mysql55-mysql` Red Hat:enterprise_linux:5::client From an advisory covering 19 CVEs	before 0:5.5.40-2.el5	0:5.5.40-2.el5
`mysql55-mysql-bench` Red Hat:enterprise_linux:5::client From an advisory covering 19 CVEs	before 0:5.5.40-2.el5	0:5.5.40-2.el5
`mysql55-mysql-debuginfo` Red Hat:enterprise_linux:5::client From an advisory covering 19 CVEs	before 0:5.5.40-2.el5	0:5.5.40-2.el5
`mysql55-mysql-libs` Red Hat:enterprise_linux:5::client From an advisory covering 19 CVEs	before 0:5.5.40-2.el5	0:5.5.40-2.el5
`mysql55-mysql-server` Red Hat:enterprise_linux:5::client From an advisory covering 19 CVEs	before 0:5.5.40-2.el5	0:5.5.40-2.el5
`mysql55-mysql-test` Red Hat:enterprise_linux:5::client From an advisory covering 19 CVEs	before 0:5.5.40-2.el5	0:5.5.40-2.el5

Show 91 moreShow less

Affected packages
Package	Affected	Fixed
`mysql55-mysql` Red Hat:enterprise_linux:5::client_workstation From an advisory covering 19 CVEs	before 0:5.5.40-2.el5	0:5.5.40-2.el5
`mysql55-mysql-debuginfo` Red Hat:enterprise_linux:5::client_workstation From an advisory covering 19 CVEs	before 0:5.5.40-2.el5	0:5.5.40-2.el5
`mysql55-mysql-devel` Red Hat:enterprise_linux:5::client_workstation From an advisory covering 19 CVEs	before 0:5.5.40-2.el5	0:5.5.40-2.el5
`mysql55-mysql` Red Hat:enterprise_linux:5::server From an advisory covering 19 CVEs	before 0:5.5.40-2.el5	0:5.5.40-2.el5
`mysql55-mysql-bench` Red Hat:enterprise_linux:5::server From an advisory covering 19 CVEs	before 0:5.5.40-2.el5	0:5.5.40-2.el5
`mysql55-mysql-debuginfo` Red Hat:enterprise_linux:5::server From an advisory covering 19 CVEs	before 0:5.5.40-2.el5	0:5.5.40-2.el5
`mysql55-mysql-devel` Red Hat:enterprise_linux:5::server From an advisory covering 19 CVEs	before 0:5.5.40-2.el5	0:5.5.40-2.el5
`mysql55-mysql-libs` Red Hat:enterprise_linux:5::server From an advisory covering 19 CVEs	before 0:5.5.40-2.el5	0:5.5.40-2.el5
`mysql55-mysql-server` Red Hat:enterprise_linux:5::server From an advisory covering 19 CVEs	before 0:5.5.40-2.el5	0:5.5.40-2.el5
`mysql55-mysql-test` Red Hat:enterprise_linux:5::server From an advisory covering 19 CVEs	before 0:5.5.40-2.el5	0:5.5.40-2.el5
`mysql55-mysql` Red Hat:rhel_software_collections:1::el6 From an advisory covering 19 CVEs	before 0:5.5.40-1.el6	0:5.5.40-1.el6
`mysql55-mysql-bench` Red Hat:rhel_software_collections:1::el6 From an advisory covering 19 CVEs	before 0:5.5.40-1.el6	0:5.5.40-1.el6
`mysql55-mysql-debuginfo` Red Hat:rhel_software_collections:1::el6 From an advisory covering 19 CVEs	before 0:5.5.40-1.el6	0:5.5.40-1.el6
`mysql55-mysql-devel` Red Hat:rhel_software_collections:1::el6 From an advisory covering 19 CVEs	before 0:5.5.40-1.el6	0:5.5.40-1.el6
`mysql55-mysql-libs` Red Hat:rhel_software_collections:1::el6 From an advisory covering 19 CVEs	before 0:5.5.40-1.el6	0:5.5.40-1.el6
`mysql55-mysql-server` Red Hat:rhel_software_collections:1::el6 From an advisory covering 19 CVEs	before 0:5.5.40-1.el6	0:5.5.40-1.el6
`mysql55-mysql-test` Red Hat:rhel_software_collections:1::el6 From an advisory covering 19 CVEs	before 0:5.5.40-1.el6	0:5.5.40-1.el6
`mysql55-mysql` Red Hat:rhel_software_collections:1::el7 From an advisory covering 19 CVEs	before 0:5.5.40-1.el7	0:5.5.40-1.el7
`mysql55-mysql-bench` Red Hat:rhel_software_collections:1::el7 From an advisory covering 19 CVEs	before 0:5.5.40-1.el7	0:5.5.40-1.el7
`mysql55-mysql-debuginfo` Red Hat:rhel_software_collections:1::el7 From an advisory covering 19 CVEs	before 0:5.5.40-1.el7	0:5.5.40-1.el7
`mysql55-mysql-devel` Red Hat:rhel_software_collections:1::el7 From an advisory covering 19 CVEs	before 0:5.5.40-1.el7	0:5.5.40-1.el7
`mysql55-mysql-libs` Red Hat:rhel_software_collections:1::el7 From an advisory covering 19 CVEs	before 0:5.5.40-1.el7	0:5.5.40-1.el7
`mysql55-mysql-server` Red Hat:rhel_software_collections:1::el7 From an advisory covering 19 CVEs	before 0:5.5.40-1.el7	0:5.5.40-1.el7
`mysql55-mysql-test` Red Hat:rhel_software_collections:1::el7 From an advisory covering 19 CVEs	before 0:5.5.40-1.el7	0:5.5.40-1.el7
`mariadb` Red Hat:enterprise_linux:7::client From an advisory covering 19 CVEs	before 1:5.5.40-1.el7_0	1:5.5.40-1.el7_0
`mariadb-debuginfo` Red Hat:enterprise_linux:7::client From an advisory covering 19 CVEs	before 1:5.5.40-1.el7_0	1:5.5.40-1.el7_0
`mariadb-libs` Red Hat:enterprise_linux:7::client From an advisory covering 19 CVEs	before 1:5.5.40-1.el7_0	1:5.5.40-1.el7_0
`mariadb-server` Red Hat:enterprise_linux:7::client From an advisory covering 19 CVEs	before 1:5.5.40-1.el7_0	1:5.5.40-1.el7_0
`mariadb-bench` Red Hat:enterprise_linux:7::client From an advisory covering 19 CVEs	before 1:5.5.40-1.el7_0	1:5.5.40-1.el7_0
`mariadb-devel` Red Hat:enterprise_linux:7::client From an advisory covering 19 CVEs	before 1:5.5.40-1.el7_0	1:5.5.40-1.el7_0
`mariadb-embedded` Red Hat:enterprise_linux:7::client From an advisory covering 19 CVEs	before 1:5.5.40-1.el7_0	1:5.5.40-1.el7_0
`mariadb-embedded-devel` Red Hat:enterprise_linux:7::client From an advisory covering 19 CVEs	before 1:5.5.40-1.el7_0	1:5.5.40-1.el7_0
`mariadb-test` Red Hat:enterprise_linux:7::client From an advisory covering 19 CVEs	before 1:5.5.40-1.el7_0	1:5.5.40-1.el7_0
`mariadb` Red Hat:enterprise_linux:7::computenode From an advisory covering 19 CVEs	before 1:5.5.40-1.el7_0	1:5.5.40-1.el7_0
`mariadb-debuginfo` Red Hat:enterprise_linux:7::computenode From an advisory covering 19 CVEs	before 1:5.5.40-1.el7_0	1:5.5.40-1.el7_0
`mariadb-libs` Red Hat:enterprise_linux:7::computenode From an advisory covering 19 CVEs	before 1:5.5.40-1.el7_0	1:5.5.40-1.el7_0
`mariadb-bench` Red Hat:enterprise_linux:7::computenode From an advisory covering 19 CVEs	before 1:5.5.40-1.el7_0	1:5.5.40-1.el7_0
`mariadb-devel` Red Hat:enterprise_linux:7::computenode From an advisory covering 19 CVEs	before 1:5.5.40-1.el7_0	1:5.5.40-1.el7_0
`mariadb-embedded` Red Hat:enterprise_linux:7::computenode From an advisory covering 19 CVEs	before 1:5.5.40-1.el7_0	1:5.5.40-1.el7_0
`mariadb-embedded-devel` Red Hat:enterprise_linux:7::computenode From an advisory covering 19 CVEs	before 1:5.5.40-1.el7_0	1:5.5.40-1.el7_0
`mariadb-server` Red Hat:enterprise_linux:7::computenode From an advisory covering 19 CVEs	before 1:5.5.40-1.el7_0	1:5.5.40-1.el7_0
`mariadb-test` Red Hat:enterprise_linux:7::computenode From an advisory covering 19 CVEs	before 1:5.5.40-1.el7_0	1:5.5.40-1.el7_0
`mariadb` Red Hat:enterprise_linux:7::server From an advisory covering 19 CVEs	before 1:5.5.40-1.el7_0	1:5.5.40-1.el7_0
`mariadb-bench` Red Hat:enterprise_linux:7::server From an advisory covering 19 CVEs	before 1:5.5.40-1.el7_0	1:5.5.40-1.el7_0
`mariadb-debuginfo` Red Hat:enterprise_linux:7::server From an advisory covering 19 CVEs	before 1:5.5.40-1.el7_0	1:5.5.40-1.el7_0
`mariadb-devel` Red Hat:enterprise_linux:7::server From an advisory covering 19 CVEs	before 1:5.5.40-1.el7_0	1:5.5.40-1.el7_0
`mariadb-libs` Red Hat:enterprise_linux:7::server From an advisory covering 19 CVEs	before 1:5.5.40-1.el7_0	1:5.5.40-1.el7_0
`mariadb-server` Red Hat:enterprise_linux:7::server From an advisory covering 19 CVEs	before 1:5.5.40-1.el7_0	1:5.5.40-1.el7_0
`mariadb-test` Red Hat:enterprise_linux:7::server From an advisory covering 19 CVEs	before 1:5.5.40-1.el7_0	1:5.5.40-1.el7_0
`mariadb-embedded` Red Hat:enterprise_linux:7::server From an advisory covering 19 CVEs	before 1:5.5.40-1.el7_0	1:5.5.40-1.el7_0
`mariadb-embedded-devel` Red Hat:enterprise_linux:7::server From an advisory covering 19 CVEs	before 1:5.5.40-1.el7_0	1:5.5.40-1.el7_0
`mariadb` Red Hat:enterprise_linux:7::workstation From an advisory covering 19 CVEs	before 1:5.5.40-1.el7_0	1:5.5.40-1.el7_0
`mariadb-bench` Red Hat:enterprise_linux:7::workstation From an advisory covering 19 CVEs	before 1:5.5.40-1.el7_0	1:5.5.40-1.el7_0
`mariadb-debuginfo` Red Hat:enterprise_linux:7::workstation From an advisory covering 19 CVEs	before 1:5.5.40-1.el7_0	1:5.5.40-1.el7_0
`mariadb-devel` Red Hat:enterprise_linux:7::workstation From an advisory covering 19 CVEs	before 1:5.5.40-1.el7_0	1:5.5.40-1.el7_0
`mariadb-libs` Red Hat:enterprise_linux:7::workstation From an advisory covering 19 CVEs	before 1:5.5.40-1.el7_0	1:5.5.40-1.el7_0
`mariadb-server` Red Hat:enterprise_linux:7::workstation From an advisory covering 19 CVEs	before 1:5.5.40-1.el7_0	1:5.5.40-1.el7_0
`mariadb-test` Red Hat:enterprise_linux:7::workstation From an advisory covering 19 CVEs	before 1:5.5.40-1.el7_0	1:5.5.40-1.el7_0
`mariadb-embedded` Red Hat:enterprise_linux:7::workstation From an advisory covering 19 CVEs	before 1:5.5.40-1.el7_0	1:5.5.40-1.el7_0
`mariadb-embedded-devel` Red Hat:enterprise_linux:7::workstation From an advisory covering 19 CVEs	before 1:5.5.40-1.el7_0	1:5.5.40-1.el7_0
`mariadb55-mariadb` Red Hat:rhel_software_collections:1::el6 From an advisory covering 19 CVEs	before 0:5.5.40-10.el6	0:5.5.40-10.el6
`mariadb55-mariadb-bench` Red Hat:rhel_software_collections:1::el6 From an advisory covering 19 CVEs	before 0:5.5.40-10.el6	0:5.5.40-10.el6
`mariadb55-mariadb-debuginfo` Red Hat:rhel_software_collections:1::el6 From an advisory covering 19 CVEs	before 0:5.5.40-10.el6	0:5.5.40-10.el6
`mariadb55-mariadb-devel` Red Hat:rhel_software_collections:1::el6 From an advisory covering 19 CVEs	before 0:5.5.40-10.el6	0:5.5.40-10.el6
`mariadb55-mariadb-libs` Red Hat:rhel_software_collections:1::el6 From an advisory covering 19 CVEs	before 0:5.5.40-10.el6	0:5.5.40-10.el6
`mariadb55-mariadb-server` Red Hat:rhel_software_collections:1::el6 From an advisory covering 19 CVEs	before 0:5.5.40-10.el6	0:5.5.40-10.el6
`mariadb55-mariadb-test` Red Hat:rhel_software_collections:1::el6 From an advisory covering 19 CVEs	before 0:5.5.40-10.el6	0:5.5.40-10.el6
`mariadb55-mariadb` Red Hat:rhel_software_collections:1::el7 From an advisory covering 19 CVEs	before 0:5.5.40-10.el7	0:5.5.40-10.el7
`mariadb55-mariadb-bench` Red Hat:rhel_software_collections:1::el7 From an advisory covering 19 CVEs	before 0:5.5.40-10.el7	0:5.5.40-10.el7
`mariadb55-mariadb-debuginfo` Red Hat:rhel_software_collections:1::el7 From an advisory covering 19 CVEs	before 0:5.5.40-10.el7	0:5.5.40-10.el7
`mariadb55-mariadb-devel` Red Hat:rhel_software_collections:1::el7 From an advisory covering 19 CVEs	before 0:5.5.40-10.el7	0:5.5.40-10.el7
`mariadb55-mariadb-libs` Red Hat:rhel_software_collections:1::el7 From an advisory covering 19 CVEs	before 0:5.5.40-10.el7	0:5.5.40-10.el7
`mariadb55-mariadb-server` Red Hat:rhel_software_collections:1::el7 From an advisory covering 19 CVEs	before 0:5.5.40-10.el7	0:5.5.40-10.el7
`mariadb55-mariadb-test` Red Hat:rhel_software_collections:1::el7 From an advisory covering 19 CVEs	before 0:5.5.40-10.el7	0:5.5.40-10.el7
`mariadb-galera` Red Hat:openstack:5::el6 From an advisory covering 18 CVEs	before 0:5.5.40-2.el6ost	0:5.5.40-2.el6ost
`mariadb-galera-common` Red Hat:openstack:5::el6 From an advisory covering 18 CVEs	before 0:5.5.40-2.el6ost	0:5.5.40-2.el6ost
`mariadb-galera-debuginfo` Red Hat:openstack:5::el6 From an advisory covering 18 CVEs	before 0:5.5.40-2.el6ost	0:5.5.40-2.el6ost
`mariadb-galera-server` Red Hat:openstack:5::el6 From an advisory covering 18 CVEs	before 0:5.5.40-2.el6ost	0:5.5.40-2.el6ost
`mariadb-galera` Red Hat:openstack:5::el7 From an advisory covering 18 CVEs	before 1:5.5.40-2.el7ost	1:5.5.40-2.el7ost
`mariadb-galera-common` Red Hat:openstack:5::el7 From an advisory covering 18 CVEs	before 1:5.5.40-2.el7ost	1:5.5.40-2.el7ost
`mariadb-galera-debuginfo` Red Hat:openstack:5::el7 From an advisory covering 18 CVEs	before 1:5.5.40-2.el7ost	1:5.5.40-2.el7ost
`mariadb-galera-server` Red Hat:openstack:5::el7 From an advisory covering 18 CVEs	before 1:5.5.40-2.el7ost	1:5.5.40-2.el7ost
`mariadb` SUSE:Linux Enterprise Desktop 12 From an advisory covering 40 CVEs	before 10.0.16-15.1	10.0.16-15.1
`mariadb` SUSE:Linux Enterprise Software Development Kit 12 From an advisory covering 40 CVEs	before 10.0.16-15.1	10.0.16-15.1
`mariadb` SUSE:Linux Enterprise Server 12 From an advisory covering 40 CVEs	before 10.0.16-15.1	10.0.16-15.1
`mariadb` SUSE:Linux Enterprise Server for SAP Applications 12 From an advisory covering 40 CVEs	before 10.0.16-15.1	10.0.16-15.1
`mariadb` SUSE:Linux Enterprise Workstation Extension 12 From an advisory covering 40 CVEs	before 10.0.16-15.1	10.0.16-15.1
`mariadb-5.5` Ubuntu:14.04:LTS	before 5.5.39-0ubuntu0.14.04.1, plus listed versions 5.5.32-1ubuntu15.5.35-1ubuntu15.5.36-15.5.37-0ubuntu0.14.04.1	5.5.39-0ubuntu0.14.04.1
`mysql-5.5` Ubuntu:14.04:LTS	before 5.5.40-0ubuntu0.14.04.1, plus listed versions 5.5.32-0ubuntu75.5.34-0ubuntu15.5.34-0ubuntu25.5.35-0ubuntu15.5.35+dfsg-1ubuntu15.5.37-0ubuntu0.14.04.15.5.38-0ubuntu0.14.04.1	5.5.40-0ubuntu0.14.04.1
`mysql-5.6` Ubuntu:14.04:LTS	before 5.6.27-0ubuntu0.14.04.1, plus listed versions 5.6.15-0ubuntu15.6.15-1~exp25.6.16-1~exp15.6.17-0ubuntu0.14.04.15.6.19-0ubuntu0.14.04.1	5.6.27-0ubuntu0.14.04.1
`mysql-5.5` Ubuntu:14.04:LTS From an advisory covering 20 CVEs	before 5.5.40-0ubuntu0.14.04.1, plus listed versions 5.5.32-0ubuntu75.5.34-0ubuntu15.5.34-0ubuntu25.5.35-0ubuntu15.5.35+dfsg-1ubuntu15.5.37-0ubuntu0.14.04.15.5.38-0ubuntu0.14.04.1	5.5.40-0ubuntu0.14.04.1

History

History
Recorded	Changed	Sources
Nov 6, 2026	affected, facts
Nov 3, 2026	aliases	EUVD
Nov 2, 2026	first indexed	CVE List, GitHub Advisories, NVD, OSV

Dates are when Every CVE recorded each change. Upstream dates may differ.

In short

CVE-2014-4274 is a medium vulnerability (CVSS 4.1) in Oracle Mysql, published August 19, 2014. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 0.34%, the 27th percentile. Fixed in mariadb 5.5.39-1.mga3.

References

Show 194 moreShow less

This page doesn't list everything

Left out here: 100 references and the rest of 1 source description. The JSON record has them.