CVE-2014-0420

Unspecified vulnerability in the MySQL Server component in Oracle MySQL 5.5.34 and earlier, and 5.6.14 and earlier, allows remote authenticated users to affect availability via unknown vectors related to Replication.

CVSS v2.0 2.8 LOW

2.8^/10

CVSS v2.0 : LOW

V2 Legend

Vector : AV:N/AC:M/Au:M/C:N/I:N/A:P

Exploitability : 5.5 / Impact : 2.9

Access Vector NETWORK

Access Complexity MEDIUM

Authentication MULTIPLE

Confidentiality Impact NONE

Integrity Impact NONE

Availability Impact PARTIAL

References

Link	Resource
http://www.oracle.com/technetwork/topics/security/cpujan2014-1972949.html	Vendor Advisory
http://www.securityfocus.com/bid/64758	Third Party Advisory VDB Entry
http://osvdb.org/102077	Broken Link
http://secunia.com/advisories/56580	Not Applicable Permissions Required
http://www.securityfocus.com/bid/64888	Third Party Advisory VDB Entry
http://ubuntu.com/usn/usn-2086-1	Third Party Advisory
http://secunia.com/advisories/56491	Not Applicable Permissions Required
http://rhn.redhat.com/errata/RHSA-2014-0189.html	Third Party Advisory
http://www.debian.org/security/2014/dsa-2848	Third Party Advisory
http://rhn.redhat.com/errata/RHSA-2014-0186.html	Third Party Advisory
http://rhn.redhat.com/errata/RHSA-2014-0173.html	Third Party Advisory
http://www.oracle.com/technetwork/topics/security/bulletinoct2015-2511968.html	Vendor Advisory
http://security.gentoo.org/glsa/glsa-201409-04.xml	Third Party Advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/90388	Third Party Advisory VDB Entry

Configurations

Configuration 1 (hide)

cpe:2.3:o:oracle:solaris:11.3:*:*:*:*:*:*:*

Configuration 2 (hide)

OR	cpe:2.3:a:oracle:mysql::::::::
	cpe:2.3:a:oracle:mysql::::::::

Configuration 3 (hide)

cpe:2.3:o:debian:debian_linux:7.0:*:*:*:*:*:*:*

Configuration 4 (hide)

OR	cpe:2.3:o:canonical:ubuntu_linux:13.10:::::::*
	cpe:2.3:o:canonical:ubuntu_linux:12.10:::::::*
	cpe:2.3:o:canonical:ubuntu_linux:10.04::::-:::
	cpe:2.3:o:canonical:ubuntu_linux:12.04::::-:::

Configuration 5 (hide)

OR	cpe:2.3:o:redhat:enterprise_linux_server:5.0:::::::*
	cpe:2.3:o:redhat:enterprise_linux_workstation:5.0:::::::*
	cpe:2.3:o:redhat:enterprise_linux_desktop:5.0:::::::*

Configuration 6 (hide)

OR	cpe:2.3:a:mariadb:mariadb::::::::
	cpe:2.3:a:mariadb:mariadb::::::::

Information

Published : 2014-01-15 08:08

Updated : 2022-09-21 13:10

NVD link : CVE-2014-0420

Mitre link : CVE-2014-0420

JSON object : View

CWE

NVD-CWE-noinfo

Products Affected

redhat

enterprise_linux_desktop
enterprise_linux_workstation
enterprise_linux_server

oracle

mysql
solaris

mariadb

mariadb

canonical

ubuntu_linux

debian

debian_linux

{"cve": {"data_type": "CVE", "references": {"reference_data": [{"url": "http://www.oracle.com/technetwork/topics/security/cpujan2014-1972949.html", "name": "http://www.oracle.com/technetwork/topics/security/cpujan2014-1972949.html", "tags": ["Vendor Advisory"], "refsource": "CONFIRM"}, {"url": "http://www.securityfocus.com/bid/64758", "name": "64758", "tags": ["Third Party Advisory", "VDB Entry"], "refsource": "BID"}, {"url": "http://osvdb.org/102077", "name": "102077", "tags": ["Broken Link"], "refsource": "OSVDB"}, {"url": "http://secunia.com/advisories/56580", "name": "56580", "tags": ["Not Applicable", "Permissions Required"], "refsource": "SECUNIA"}, {"url": "http://www.securityfocus.com/bid/64888", "name": "64888", "tags": ["Third Party Advisory", "VDB Entry"], "refsource": "BID"}, {"url": "http://ubuntu.com/usn/usn-2086-1", "name": "USN-2086-1", "tags": ["Third Party Advisory"], "refsource": "UBUNTU"}, {"url": "http://secunia.com/advisories/56491", "name": "56491", "tags": ["Not Applicable", "Permissions Required"], "refsource": "SECUNIA"}, {"url": "http://rhn.redhat.com/errata/RHSA-2014-0189.html", "name": "RHSA-2014:0189", "tags": ["Third Party Advisory"], "refsource": "REDHAT"}, {"url": "http://www.debian.org/security/2014/dsa-2848", "name": "DSA-2848", "tags": ["Third Party Advisory"], "refsource": "DEBIAN"}, {"url": "http://rhn.redhat.com/errata/RHSA-2014-0186.html", "name": "RHSA-2014:0186", "tags": ["Third Party Advisory"], "refsource": "REDHAT"}, {"url": "http://rhn.redhat.com/errata/RHSA-2014-0173.html", "name": "RHSA-2014:0173", "tags": ["Third Party Advisory"], "refsource": "REDHAT"}, {"url": "http://www.oracle.com/technetwork/topics/security/bulletinoct2015-2511968.html", "name": "http://www.oracle.com/technetwork/topics/security/bulletinoct2015-2511968.html", "tags": ["Vendor Advisory"], "refsource": "CONFIRM"}, {"url": "http://security.gentoo.org/glsa/glsa-201409-04.xml", "name": "GLSA-201409-04", "tags": ["Third Party Advisory"], "refsource": "GENTOO"}, {"url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/90388", "name": "oracle-cpujan2014-cve20140420(90388)", "tags": ["Third Party Advisory", "VDB Entry"], "refsource": "XF"}]}, "data_format": "MITRE", "description": {"description_data": [{"lang": "en", "value": "Unspecified vulnerability in the MySQL Server component in Oracle MySQL 5.5.34 and earlier, and 5.6.14 and earlier, allows remote authenticated users to affect availability via unknown vectors related to Replication."}]}, "problemtype": {"problemtype_data": [{"description": [{"lang": "en", "value": "NVD-CWE-noinfo"}]}]}, "data_version": "4.0", "CVE_data_meta": {"ID": "CVE-2014-0420", "ASSIGNER": "secalert_us@oracle.com"}}, "impact": {"baseMetricV2": {"cvssV2": {"version": "2.0", "baseScore": 2.8, "accessVector": "NETWORK", "vectorString": "AV:N/AC:M/Au:M/C:N/I:N/A:P", "authentication": "MULTIPLE", "integrityImpact": "NONE", "accessComplexity": "MEDIUM", "availabilityImpact": "PARTIAL", "confidentialityImpact": "NONE"}, "severity": "LOW", "impactScore": 2.9, "obtainAllPrivilege": false, "exploitabilityScore": 5.5, "obtainUserPrivilege": false, "obtainOtherPrivilege": false, "userInteractionRequired": false}}, "publishedDate": "2014-01-15T16:08Z", "configurations": {"nodes": [{"children": [], "operator": "OR", "cpe_match": [{"cpe23Uri": "cpe:2.3:o:oracle:solaris:11.3:*:*:*:*:*:*:*", "cpe_name": [], "vulnerable": true}]}, {"children": [], "operator": "OR", "cpe_match": [{"cpe23Uri": "cpe:2.3:a:oracle:mysql:*:*:*:*:*:*:*:*", "cpe_name": [], "vulnerable": true, "versionEndIncluding": "5.5.34", "versionStartIncluding": "5.5.0"}, {"cpe23Uri": "cpe:2.3:a:oracle:mysql:*:*:*:*:*:*:*:*", "cpe_name": [], "vulnerable": true, "versionEndIncluding": "5.6.14", "versionStartIncluding": "5.6.0"}]}, {"children": [], "operator": "OR", "cpe_match": [{"cpe23Uri": "cpe:2.3:o:debian:debian_linux:7.0:*:*:*:*:*:*:*", "cpe_name": [], "vulnerable": true}]}, {"children": [], "operator": "OR", "cpe_match": [{"cpe23Uri": "cpe:2.3:o:canonical:ubuntu_linux:13.10:*:*:*:*:*:*:*", "cpe_name": [], "vulnerable": true}, {"cpe23Uri": "cpe:2.3:o:canonical:ubuntu_linux:12.10:*:*:*:*:*:*:*", "cpe_name": [], "vulnerable": true}, {"cpe23Uri": "cpe:2.3:o:canonical:ubuntu_linux:10.04:*:*:*:-:*:*:*", "cpe_name": [], "vulnerable": true}, {"cpe23Uri": "cpe:2.3:o:canonical:ubuntu_linux:12.04:*:*:*:-:*:*:*", "cpe_name": [], "vulnerable": true}]}, {"children": [], "operator": "OR", "cpe_match": [{"cpe23Uri": "cpe:2.3:o:redhat:enterprise_linux_server:5.0:*:*:*:*:*:*:*", "cpe_name": [], "vulnerable": true}, {"cpe23Uri": "cpe:2.3:o:redhat:enterprise_linux_workstation:5.0:*:*:*:*:*:*:*", "cpe_name": [], "vulnerable": true}, {"cpe23Uri": "cpe:2.3:o:redhat:enterprise_linux_desktop:5.0:*:*:*:*:*:*:*", "cpe_name": [], "vulnerable": true}]}, {"children": [], "operator": "OR", "cpe_match": [{"cpe23Uri": "cpe:2.3:a:mariadb:mariadb:*:*:*:*:*:*:*:*", "cpe_name": [], "vulnerable": true, "versionEndExcluding": "5.5.35", "versionStartIncluding": "5.5.0"}, {"cpe23Uri": "cpe:2.3:a:mariadb:mariadb:*:*:*:*:*:*:*:*", "cpe_name": [], "vulnerable": true, "versionEndExcluding": "10.0.8", "versionStartIncluding": "10.0.0"}]}], "CVE_data_version": "4.0"}, "lastModifiedDate": "2022-09-21T20:10Z"}

2.8 /10