Buffer overflow in client/mysql.cc in Oracle MySQL and MariaDB before 5.5.35 allows remote database servers to cause a denial of service (crash) and possibly execute arbitrary code via a long server version string.
CVSS Details
- CVSS 3.1 Base Score: 9.8
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | — | Upgrade mysql. | Aug 30, 2017 | Jan 31, 2014 |
| Centos_linux | — | Upgrade mysqlUpgrade mysql55-mysql-testUpgrade mysql-benchUpgrade mysql-testUpgrade mysql-serverUpgrade mysql55-mysqlUpgrade mysql55-mysql-benchUpgrade mysql-embeddedUpgrade mysql55-mysql-develUpgrade mysql-develUpgrade mysql55-mysql-serverUpgrade mysql-embedded-develUpgrade mysql-libsUpgrade mysql55-mysql-libs | Dec 1, 2016 | Jan 31, 2014 |
| Gentoo Linux | — | Upgrade dev-db/mysql. | Oct 30, 2017 | Jan 31, 2014 |
| Oracle Mysql | — | Upgrade to Oracle MySQL version 5.5.35 | Feb 5, 2014 | Jan 31, 2014 |
| Oracle_linux | — | Upgrade mysql55-mysql-libsUpgrade mysql55-mysqlUpgrade mysql55-mysql-develUpgrade mysql55-mysql-benchUpgrade mysql55-mysql-serverUpgrade mysql55-mysql-test | Oct 16, 2024 | Jan 31, 2014 |
| Suse | — | Upgrade libmysqlclient_r15Upgrade libmysqlclient15Upgrade libmysql55client18-32bitUpgrade libmysql55client_r18Upgrade libmysqlclient_r15-x86Upgrade libmysqlclient_r15-32bitUpgrade libmysql55client18-x86Upgrade libmysql55client_r18-32bitUpgrade libmysqlclient15-32bitUpgrade libmysql55client18Upgrade libmysqlclient15-x86Upgrade libmysql55client_r18-x86Upgrade mysql-toolsUpgrade mysql-clientUpgrade mysql | Dec 18, 2015 | Jan 31, 2014 |
| Ubuntu | — | Upgrade mysql-server-5.5 | Nov 8, 2024 | Jan 31, 2014 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub