{"id":"CVE-2014-0001","aliases":["DLA-75-1","DSA-2919-1","EUVD-2014-0108","GHSA-7pq3-qq22-gpw3","RHSA-2014:0164","RHSA-2014:0173","RHSA-2014:0186","RHSA-2014:0189","SUSE-SU-2015:0620-1","SUSE-SU-2015:0946-1","SUSE-SU-2015:1177-1","UBUNTU-CVE-2014-0001","USN-2170-1"],"status":"published","title":"Buffer overflow in client/mysql.cc in Oracle MySQL and MariaDB before 5.5.35 allows remote...","description":"Buffer overflow in client/mysql.cc in Oracle MySQL and MariaDB before 5.5.35 allows remote database servers to cause a denial of service (crash) and possibly execute arbitrary code via a long server version string.","severity":{"version":"2.0","score":7.5,"vector":"AV:N/AC:L/Au:N/C:P/I:P/A:P","level":"high","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-08","score":0.06405,"percentile":0.93721,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":true},"cwes":["CWE-119"],"published":"2014-01-31T00:00:00Z","modified":"2026-06-29T10:06:23Z","fixes":[{"ecosystem":"Ubuntu:14.04:LTS","package":"mysql-5.5","fixed_in":["5.5.37-0ubuntu0.14.04.1"],"sources":["osv"]},{"ecosystem":"Ubuntu:14.04:LTS","package":"mysql-5.6","fixed_in":["5.6.17-0ubuntu0.14.04.1"],"sources":["osv"]}],"affected":[{"source":"osv","ecosystem":"Debian:6.0","package":"mysql-5.1","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.1.73-1+deb6u1"}]}],"versions":["5.1.49-3","5.1.50-1","5.1.51-1","5.1.53-1","5.1.54-1","5.1.54-2","5.1.55-1","5.1.56-1","5.1.57-1","5.1.57-1.1","5.1.57-1.2","5.1.57-1.3","5.1.57-2","5.1.57-3","5.1.57-3.1","5.1.58-1","5.1.61-0+squeeze1","5.1.61-2","5.1.61-3","5.1.62-1","5.1.62-1+m68k","5.1.63-0+squeeze1","5.1.66-0+squeeze1","5.1.72-2","5.1.73-1"],"bundled":3},{"source":"osv","ecosystem":"Debian:7","package":"mysql-5.5","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.5.37-0+wheezy1"}]}],"versions":["5.5.30+dfsg-1.1","5.5.31+dfsg-0+wheezy1","5.5.31+dfsg-1","5.5.33+dfsg-0+wheezy1","5.5.33+dfsg-1","5.5.35+dfsg-0+wheezy1","5.5.35+dfsg-1","5.5.35+dfsg-2"],"bundled":9},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::client","package":"mysql","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.1.73-3.el6_5"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::client","package":"mysql-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.1.73-3.el6_5"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::client","package":"mysql-libs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.1.73-3.el6_5"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::client","package":"mysql-server","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.1.73-3.el6_5"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::client","package":"mysql-bench","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.1.73-3.el6_5"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::client","package":"mysql-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.1.73-3.el6_5"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::client","package":"mysql-embedded","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.1.73-3.el6_5"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::client","package":"mysql-embedded-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.1.73-3.el6_5"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::client","package":"mysql-test","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.1.73-3.el6_5"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::computenode","package":"mysql","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.1.73-3.el6_5"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::computenode","package":"mysql-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.1.73-3.el6_5"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::computenode","package":"mysql-libs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.1.73-3.el6_5"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::computenode","package":"mysql-bench","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.1.73-3.el6_5"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::computenode","package":"mysql-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.1.73-3.el6_5"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::computenode","package":"mysql-embedded","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.1.73-3.el6_5"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::computenode","package":"mysql-embedded-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.1.73-3.el6_5"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::computenode","package":"mysql-server","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.1.73-3.el6_5"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::computenode","package":"mysql-test","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.1.73-3.el6_5"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::server","package":"mysql","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.1.73-3.el6_5"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::server","package":"mysql-bench","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.1.73-3.el6_5"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::server","package":"mysql-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.1.73-3.el6_5"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::server","package":"mysql-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.1.73-3.el6_5"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::server","package":"mysql-libs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.1.73-3.el6_5"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::server","package":"mysql-server","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.1.73-3.el6_5"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::server","package":"mysql-test","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.1.73-3.el6_5"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::server","package":"mysql-embedded","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.1.73-3.el6_5"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::server","package":"mysql-embedded-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.1.73-3.el6_5"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::workstation","package":"mysql","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.1.73-3.el6_5"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::workstation","package":"mysql-bench","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.1.73-3.el6_5"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::workstation","package":"mysql-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.1.73-3.el6_5"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::workstation","package":"mysql-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.1.73-3.el6_5"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::workstation","package":"mysql-libs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.1.73-3.el6_5"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::workstation","package":"mysql-server","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.1.73-3.el6_5"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::workstation","package":"mysql-test","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.1.73-3.el6_5"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::workstation","package":"mysql-embedded","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.1.73-3.el6_5"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::workstation","package":"mysql-embedded-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.1.73-3.el6_5"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:1::el6","package":"mysql55-mysql","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.5.36-1.1.el6"}]}],"bundled":12},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:1::el6","package":"mysql55-mysql-bench","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.5.36-1.1.el6"}]}],"bundled":12},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:1::el6","package":"mysql55-mysql-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.5.36-1.1.el6"}]}],"bundled":12},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:1::el6","package":"mysql55-mysql-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.5.36-1.1.el6"}]}],"bundled":12},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:1::el6","package":"mysql55-mysql-libs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.5.36-1.1.el6"}]}],"bundled":12},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:1::el6","package":"mysql55-mysql-server","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.5.36-1.1.el6"}]}],"bundled":12},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:1::el6","package":"mysql55-mysql-test","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.5.36-1.1.el6"}]}],"bundled":12},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:5::client","package":"mysql55-mysql","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.5.36-2.el5"}]}],"bundled":12},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:5::client","package":"mysql55-mysql-bench","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.5.36-2.el5"}]}],"bundled":12},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:5::client","package":"mysql55-mysql-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.5.36-2.el5"}]}],"bundled":12},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:5::client","package":"mysql55-mysql-libs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.5.36-2.el5"}]}],"bundled":12},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:5::client","package":"mysql55-mysql-server","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.5.36-2.el5"}]}],"bundled":12},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:5::client","package":"mysql55-mysql-test","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.5.36-2.el5"}]}],"bundled":12},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:5::client_workstation","package":"mysql55-mysql","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.5.36-2.el5"}]}],"bundled":12},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:5::client_workstation","package":"mysql55-mysql-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.5.36-2.el5"}]}],"bundled":12},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:5::client_workstation","package":"mysql55-mysql-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.5.36-2.el5"}]}],"bundled":12},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:5::server","package":"mysql55-mysql","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.5.36-2.el5"}]}],"bundled":12},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:5::server","package":"mysql55-mysql-bench","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.5.36-2.el5"}]}],"bundled":12},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:5::server","package":"mysql55-mysql-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.5.36-2.el5"}]}],"bundled":12},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:5::server","package":"mysql55-mysql-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.5.36-2.el5"}]}],"bundled":12},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:5::server","package":"mysql55-mysql-libs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.5.36-2.el5"}]}],"bundled":12},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:5::server","package":"mysql55-mysql-server","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.5.36-2.el5"}]}],"bundled":12},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:5::server","package":"mysql55-mysql-test","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.5.36-2.el5"}]}],"bundled":12},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:1::el6","package":"mariadb55-mariadb","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.5.35-1.1.el6"}]}],"bundled":12},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:1::el6","package":"mariadb55-mariadb-bench","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.5.35-1.1.el6"}]}],"bundled":12},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:1::el6","package":"mariadb55-mariadb-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.5.35-1.1.el6"}]}],"bundled":12},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:1::el6","package":"mariadb55-mariadb-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.5.35-1.1.el6"}]}],"bundled":12},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:1::el6","package":"mariadb55-mariadb-libs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.5.35-1.1.el6"}]}],"bundled":12},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:1::el6","package":"mariadb55-mariadb-server","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.5.35-1.1.el6"}]}],"bundled":12},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:1::el6","package":"mariadb55-mariadb-test","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.5.35-1.1.el6"}]}],"bundled":12},{"source":"osv","ecosystem":"Ubuntu:14.04:LTS","package":"mysql-5.5","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.5.37-0ubuntu0.14.04.1"}]}],"versions":["5.5.32-0ubuntu7","5.5.34-0ubuntu1","5.5.34-0ubuntu2","5.5.35-0ubuntu1","5.5.35+dfsg-1ubuntu1"]},{"source":"osv","ecosystem":"Ubuntu:14.04:LTS","package":"mysql-5.6","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.6.17-0ubuntu0.14.04.1"}]}],"versions":["5.6.15-0ubuntu1","5.6.15-1~exp2","5.6.16-1~exp1"]},{"source":"osv","ecosystem":"Ubuntu:14.04:LTS","package":"mysql-5.5","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.5.37-0ubuntu0.14.04.1"}]}],"versions":["5.5.32-0ubuntu7","5.5.34-0ubuntu1","5.5.34-0ubuntu2","5.5.35-0ubuntu1","5.5.35+dfsg-1ubuntu1"],"bundled":9}],"products":[{"vendor":"mariadb","product":"mariadb"},{"vendor":"oracle","product":"mysql"},{"vendor":"redhat","product":"enterprise_linux"},{"vendor":"redhat","product":"enterprise_linux_desktop"},{"vendor":"redhat","product":"enterprise_linux_server"},{"vendor":"redhat","product":"enterprise_linux_workstation"}],"references":[{"url":"http://www.securitytracker.com/id/1029708","tags":["vdb-entry","x_refsource_SECTRACK","x_transferred"]},{"url":"http://secunia.com/advisories/52161","tags":["third-party-advisory","x_refsource_SECUNIA","x_transferred"]},{"url":"http://bazaar.launchpad.net/~maria-captains/maria/5.5/revision/2502.565.64","tags":["x_refsource_CONFIRM","x_transferred","Not Applicable","report"]},{"url":"http://www.osvdb.org/102714","tags":["vdb-entry","x_refsource_OSVDB","x_transferred","Broken Link"]},{"url":"http://rhn.redhat.com/errata/RHSA-2014-0186.html","tags":["vendor-advisory","x_refsource_REDHAT","x_transferred","Third Party Advisory"]},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2014:029","tags":["vendor-advisory","x_refsource_MANDRIVA","x_transferred","Broken Link"]},{"url":"http://www.securityfocus.com/bid/65298","tags":["vdb-entry","x_refsource_BID","x_transferred","Third Party Advisory","VDB Entry"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/90901","tags":["vdb-entry","x_refsource_XF","x_transferred"]},{"url":"http://osvdb.org/102713","tags":["vdb-entry","x_refsource_OSVDB","x_transferred","Broken Link","report"]},{"url":"http://rhn.redhat.com/errata/RHSA-2014-0173.html","tags":["vendor-advisory","x_refsource_REDHAT","x_transferred","Third Party Advisory"]},{"url":"http://rhn.redhat.com/errata/RHSA-2014-0189.html","tags":["vendor-advisory","x_refsource_REDHAT","x_transferred","Third Party Advisory"]},{"url":"http://rhn.redhat.com/errata/RHSA-2014-0164.html","tags":["vendor-advisory","x_refsource_REDHAT","x_transferred","Third Party Advisory"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1054592","tags":["x_refsource_CONFIRM","x_transferred","Issue Tracking","Patch","Third Party Advisory","report"]},{"url":"https://mariadb.com/kb/en/mariadb-5535-changelog/","tags":["x_refsource_CONFIRM","x_transferred","Patch","Vendor Advisory","report"]},{"url":"http://security.gentoo.org/glsa/glsa-201409-04.xml","tags":["vendor-advisory","x_refsource_GENTOO","x_transferred","Patch","Third Party Advisory","VDB Entry"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2014-0001","tags":["advisory"]},{"url":"https://mariadb.com/kb/en/mariadb-5535-changelog"},{"url":"https://github.com/advisories/GHSA-7pq3-qq22-gpw3"},{"url":"https://access.redhat.com/errata/RHSA-2014:0164","tags":["advisory"]},{"url":"https://access.redhat.com/security/updates/classification/#moderate","tags":["article"]},{"url":"http://www.oracle.com/technetwork/topics/security/cpujan2014-1972949.html#AppendixMSQL","tags":["article"]},{"url":"http://dev.mysql.com/doc/relnotes/mysql/5.1/en/news-5-1-73.html","tags":["article"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1053373","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1053375","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1053377","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1053378","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1053380","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1053381","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1053390","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1058719","tags":["report"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2014/rhsa-2014_0164.json","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2013-5908","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2013-5908","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2013-5908","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2014-0001","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2014-0001","tags":["advisory","report"]},{"url":"https://access.redhat.com/security/cve/CVE-2014-0386","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2014-0386","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2014-0386","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2014-0393","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2014-0393","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2014-0393","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2014-0401","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2014-0401","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2014-0401","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2014-0402","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2014-0402","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2014-0402","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2014-0412","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2014-0412","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2014-0412","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2014-0437","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2014-0437","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2014-0437","tags":["advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2014:0173","tags":["advisory"]},{"url":"http://www.oracle.com/technetwork/topics/security/cpuoct2013-1899837.html#AppendixMSQL","tags":["article"]},{"url":"http://dev.mysql.com/doc/relnotes/mysql/5.5/en/news-5-5-36.html","tags":["article"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1019978","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1019997","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1053371","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1053383","tags":["report"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2014/rhsa-2014_0173.json","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2013-3839","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2013-3839","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2013-3839","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2013-5807","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2013-5807","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2013-5807","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2013-5891","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2013-5891","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2013-5891","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2014-0420","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2014-0420","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2014-0420","tags":["advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2014:0186","tags":["advisory"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2014/rhsa-2014_0186.json","tags":["advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2014:0189","tags":["advisory"]},{"url":"https://mariadb.com/kb/en/mariadb-5535-release-notes/","tags":["article"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2014/rhsa-2014_0189.json","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2015/suse-su-20150620-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/734436","tags":["report"]},{"url":"https://bugzilla.suse.com/768832","tags":["report"]},{"url":"https://bugzilla.suse.com/780019","tags":["report"]},{"url":"https://bugzilla.suse.com/789263","tags":["report"]},{"url":"https://bugzilla.suse.com/791863","tags":["report"]},{"url":"https://bugzilla.suse.com/792332","tags":["report"]},{"url":"https://bugzilla.suse.com/803040","tags":["report"]},{"url":"https://bugzilla.suse.com/830086","tags":["report"]},{"url":"https://bugzilla.suse.com/834028","tags":["report"]},{"url":"https://bugzilla.suse.com/834967","tags":["report"]},{"url":"https://bugzilla.suse.com/837801","tags":["report"]},{"url":"https://bugzilla.suse.com/857678","tags":["report"]},{"url":"https://bugzilla.suse.com/858823","tags":["report"]},{"url":"https://bugzilla.suse.com/861493","tags":["report"]},{"url":"https://bugzilla.suse.com/868673","tags":["report"]},{"url":"https://bugzilla.suse.com/873896","tags":["report"]},{"url":"https://bugzilla.suse.com/878779","tags":["report"]},{"url":"https://bugzilla.suse.com/887580","tags":["report"]},{"url":"https://bugzilla.suse.com/901237","tags":["report"]},{"url":"https://bugzilla.suse.com/914058","tags":["report"]},{"url":"https://bugzilla.suse.com/922043","tags":["report"]},{"url":"https://bugzilla.suse.com/927623","tags":["report"]},{"url":"https://bugzilla.suse.com/934789","tags":["report"]},{"url":"https://www.suse.com/security/cve/CVE-2012-5615","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2013-1861","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2013-3783","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2013-3793","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2013-3794","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2013-3795","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2013-3796","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2013-3798","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2013-3801","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2013-3802","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2013-3804","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2013-3805","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2013-3806","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2013-3807","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2013-3808","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2013-3809","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2013-3810","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2013-3811","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2013-3812","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2013-4316","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2013-5860","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2013-5881","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2013-5882","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2013-5891","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2013-5894","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2013-5908","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-0001","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-0224","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-0384","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-0386","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-0393","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-0401","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-0402","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-0412","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-0420","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-0427","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-0430","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-0431","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-0433","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-0437","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-2419","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-2430","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-2431","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-2432","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-2434","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-2435","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-2436","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-2438","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-2440","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-2442","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-2444","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-2450","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-2451","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-2484","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-2494","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-3569","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-3570","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-3571","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-3572","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-4207","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-4214","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-4233","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-4238","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-4240","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-4243","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-4258","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-4260","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-4274","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-4287","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-6463","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-6464","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-6469","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-6474","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-6478","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-6484","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-6489","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-6491","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-6494","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-6495","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-6496","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-6500","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-6505","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-6507","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-6520","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-6530","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-6551","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-6555","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-6559","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-6564","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-6568","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-8275","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-0204","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-0205","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-0206","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-0374","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-0381","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-0382","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-0385","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-0391","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-0405","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-0409","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-0411","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-0423","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-0432","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-0433","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-0438","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-0439","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-0441","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-0498","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-0499","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-0500","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-0501","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-0503","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-0505","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-0506","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-0507","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-0508","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-0511","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-2305","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-2566","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-2567","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-2568","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-2571","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-2573","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-2576","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-4000","tags":["web"]},{"url":"https://www.suse.com/support/update/announcement/2015/suse-su-20150946-1/","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2015/suse-su-20151177-1/","tags":["advisory"]},{"url":"https://ubuntu.com/security/CVE-2014-0001","tags":["report"]},{"url":"https://ubuntu.com/security/notices/USN-2170-1","tags":["advisory"]},{"url":"https://ubuntu.com/security/CVE-2014-0384","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2014-2419","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2014-2430","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2014-2431","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2014-2432","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2014-2436","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2014-2438","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2014-2440","tags":["report"]}],"sources":{"cve":[{"id":"CVE-2014-0001","description":"Buffer overflow in client/mysql.cc in Oracle MySQL and MariaDB before 5.5.35 allows remote database servers to cause a denial of service (crash) and possibly execute arbitrary code via a long server version string.","status":"published","published":"2014-01-31T23:00:00Z","modified":"2024-08-06T08:58:26.471Z","updated_at":"2026-11-02T14:33:47.330011Z"}],"euvd":[{"id":"EUVD-2014-0108","description":"Buffer overflow in client/mysql.cc in Oracle MySQL and MariaDB before 5.5.35 allows remote database servers to cause a denial of service (crash) and possibly execute arbitrary code via a long server version string.","status":"published","published":"2014-01-31T23:00:00Z","modified":"2024-08-06T08:58:26Z","updated_at":"2026-11-03T01:57:23.42372Z"}],"ghsa":[{"id":"GHSA-7pq3-qq22-gpw3","title":"Buffer overflow in client/mysql.cc in Oracle MySQL and MariaDB before 5.5.35 allows remote...","description":"Buffer overflow in client/mysql.cc in Oracle MySQL and MariaDB before 5.5.35 allows remote database servers to cause a denial of service (crash) and possibly execute arbitrary code via a long server version string.","status":"published","published":"2022-05-13T01:30:13Z","modified":"2025-04-11T04:19:43Z","cwes":["CWE-119"],"updated_at":"2026-11-02T15:01:15.928203Z"}],"nvd":[{"id":"CVE-2014-0001","description":"Buffer overflow in client/mysql.cc in Oracle MySQL and MariaDB before 5.5.35 allows remote database servers to cause a denial of service (crash) and possibly execute arbitrary code via a long server version string.","status":"published","published":"2014-01-31T23:55:04.503Z","modified":"2026-06-17T00:02:03.953Z","cvss":[{"version":"2.0","score":7.5,"vector":"AV:N/AC:L/Au:N/C:P/I:P/A:P","level":"high","assessor":"primary"}],"cwes":["CWE-119"],"updated_at":"2026-11-02T14:02:53.330367Z"}],"osv":[{"id":"DLA-75-1","title":"mysql-5.1 - security update","status":"published","published":"2014-10-22T00:00:00Z","modified":"2026-03-09T02:11:25.163701Z","updated_at":"2026-11-02T15:46:13.207219Z"},{"id":"DSA-2919-1","title":"mysql-5.5 - security update","status":"published","published":"2014-05-03T00:00:00Z","modified":"2026-03-09T01:22:16.840554Z","updated_at":"2026-11-02T15:46:15.843838Z"},{"id":"RHSA-2014:0164","title":"Red Hat Security Advisory: mysql security and bug fix update","status":"published","published":"2024-09-13T08:51:41Z","modified":"2026-06-29T10:06:20Z","updated_at":"2026-11-02T15:53:01.993625Z"},{"id":"RHSA-2014:0173","title":"Red Hat Security Advisory: mysql55-mysql security update","status":"published","published":"2024-09-13T08:51:45Z","modified":"2026-06-29T10:06:21Z","updated_at":"2026-11-02T15:53:01.993625Z"},{"id":"RHSA-2014:0186","title":"Red Hat Security Advisory: mysql55-mysql security update","status":"published","published":"2024-09-13T08:51:35Z","modified":"2026-06-29T10:06:23Z","updated_at":"2026-11-02T15:53:01.993625Z"},{"id":"RHSA-2014:0189","title":"Red Hat Security Advisory: mariadb55-mariadb security update","status":"published","published":"2024-09-13T08:51:49Z","modified":"2026-06-29T10:06:23Z","updated_at":"2026-11-02T15:53:01.993625Z"},{"id":"SUSE-SU-2015:0620-1","title":"Security update for MySQL","description":"\nThis MySQL update provides the following:\n\n    * upgrade to version 5.5.39, [bnc#887580]\n    * CVE's fixed: CVE-2014-2484, CVE-2014-4258, CVE-2014-4260,\n      CVE-2014-2494, CVE-2014-4238, CVE-2014-4207, CVE-2014-4233,\n      CVE-2014-4240, CVE-2014-4214, CVE-2014-4243\n\nSee also:\nhttp://www.oracle.com/technetwork/topics/security/cpujul2014-1972956.html\n\u003chttp://www.oracle.com/technetwork/topics/security/cpujul2014-1972956.html\u003e\n\nSecurity Issues:\n\n    * CVE-2014-2484\n      \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-2484\u003e\n    * CVE-2014-4258\n      \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-4258\u003e\n    * CVE-2014-4260\n      \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-4260\u003e\n    * CVE-2014-2494\n      \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-2494\u003e\n    * CVE-2014-4238\n      \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-4238\u003e\n    * CVE-2014-4207\n      \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-4207\u003e\n    * CVE-2014-4233\n      \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-4233\u003e\n    * CVE-2014-4240\n      \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-4240\u003e\n    * CVE-2014-4214\n      \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-4214\u003e\n    * CVE-2014-4243\n      \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-4243\u003e\n\n","status":"published","published":"2014-08-19T23:56:10Z","modified":"2026-02-04T04:24:15.175685Z","updated_at":"2026-11-02T15:53:41.276824Z"},{"id":"SUSE-SU-2015:0946-1","title":"Security update for MySQL","description":"\nThis MySQL update provides the following:\n\n    * upgrade to version 5.5.39, [bnc#887580]\n    * CVE's fixed: CVE-2014-2484, CVE-2014-4258, CVE-2014-4260,\n      CVE-2014-2494, CVE-2014-4238, CVE-2014-4207, CVE-2014-4233,\n      CVE-2014-4240, CVE-2014-4214, CVE-2014-4243\n\nSee also:\nhttp://www.oracle.com/technetwork/topics/security/cpujul2014-1972956.html\n\u003chttp://www.oracle.com/technetwork/topics/security/cpujul2014-1972956.html\u003e\n\nSecurity Issues:\n\n    * CVE-2014-2484\n      \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-2484\u003e\n    * CVE-2014-4258\n      \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-4258\u003e\n    * CVE-2014-4260\n      \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-4260\u003e\n    * CVE-2014-2494\n      \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-2494\u003e\n    * CVE-2014-4238\n      \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-4238\u003e\n    * CVE-2014-4207\n      \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-4207\u003e\n    * CVE-2014-4233\n      \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-4233\u003e\n    * CVE-2014-4240\n      \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-4240\u003e\n    * CVE-2014-4214\n      \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-4214\u003e\n    * CVE-2014-4243\n      \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-4243\u003e\n\n","status":"published","published":"2014-08-19T23:56:10Z","modified":"2026-02-04T02:29:58.141198Z","updated_at":"2026-11-02T15:53:41.276824Z"},{"id":"SUSE-SU-2015:1177-1","title":"Security update for MySQL","description":"\nThis MySQL update provides the following:\n\n    * upgrade to version 5.5.39, [bnc#887580]\n    * CVE's fixed: CVE-2014-2484, CVE-2014-4258, CVE-2014-4260,\n      CVE-2014-2494, CVE-2014-4238, CVE-2014-4207, CVE-2014-4233,\n      CVE-2014-4240, CVE-2014-4214, CVE-2014-4243\n\nSee also:\nhttp://www.oracle.com/technetwork/topics/security/cpujul2014-1972956.html\n\u003chttp://www.oracle.com/technetwork/topics/security/cpujul2014-1972956.html\u003e\n\nSecurity Issues:\n\n    * CVE-2014-2484\n      \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-2484\u003e\n    * CVE-2014-4258\n      \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-4258\u003e\n    * CVE-2014-4260\n      \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-4260\u003e\n    * CVE-2014-2494\n      \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-2494\u003e\n    * CVE-2014-4238\n      \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-4238\u003e\n    * CVE-2014-4207\n      \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-4207\u003e\n    * CVE-2014-4233\n      \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-4233\u003e\n    * CVE-2014-4240\n      \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-4240\u003e\n    * CVE-2014-4214\n      \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-4214\u003e\n    * CVE-2014-4243\n      \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-4243\u003e\n\n","status":"published","published":"2014-08-19T23:56:10Z","modified":"2026-02-04T02:16:44.028585Z","updated_at":"2026-11-02T15:53:43.030986Z"},{"id":"UBUNTU-CVE-2014-0001","description":"Buffer overflow in client/mysql.cc in Oracle MySQL and MariaDB before 5.5.35 allows remote database servers to cause a denial of service (crash) and possibly execute arbitrary code via a long server version string.","status":"published","published":"2014-01-31T00:00:00Z","modified":"2026-04-22T09:26:38.38484Z","updated_at":"2026-11-02T15:54:07.855521Z"},{"id":"USN-2170-1","title":"mysql-5.5 vulnerabilities","description":"Multiple security issues were discovered in MySQL and this update includes\na new upstream MySQL version to fix these issues. MySQL has been updated to\n5.5.37.\n\nIn addition to security fixes, the updated packages contain bug fixes,\nnew features, and possibly incompatible changes.\n\nPlease see the following for more information:\nhttp://dev.mysql.com/doc/relnotes/mysql/5.5/en/news-5-5-36.html\nhttp://dev.mysql.com/doc/relnotes/mysql/5.5/en/news-5-5-37.html\nhttp://www.oracle.com/technetwork/topics/security/cpuapr2014-1972952.html\n\nAdditionally, Matthias Reichl discovered that the mysql-5.5 packages were\nmissing the patches applied previously in the mysql-5.1 packages to drop\nthe default test database and localhost permissions granting access to any\ndatabases starting with \"test_\". This update reintroduces these patches for\nUbuntu 12.04 LTS, Ubuntu 12.10, and Ubuntu 13.10. Existing test databases\nand permissions will not be modified on upgrade. To manually restrict\naccess for existing installations, please refer to the following:\n\nhttp://dev.mysql.com/doc/refman/5.5/en/default-privileges.html\n","status":"published","published":"2014-04-23T12:56:46Z","modified":"2026-04-22T08:48:04.661522Z","updated_at":"2026-11-02T16:58:09.227524Z"}]}}