CVE-2013-5860 : Unspecified vulnerability in the MySQL Server component in Oracle MySQL 5.6.14 a

Unspecified vulnerability in the MySQL Server component in Oracle MySQL 5.6.14 and earlier allows remote authenticated users to affect availability via vectors related to GIS.

Published 2014-01-15 16:11:05

Updated 2017-08-29 01:33:51

Source Oracle

View at NVD, CVE.org

Products affected by CVE-2013-5860

Oracle » Mysql
Versions up to, including, (<=) 5.6.14
cpe:2.3:a:oracle:mysql:*:*:*:*:*:*:*:*
Matching versions
Oracle » Mysql » Version: 5.6.2
cpe:2.3:a:oracle:mysql:5.6.2:*:*:*:*:*:*:*
Matching versions
Oracle » Mysql » Version: 5.6.3
cpe:2.3:a:oracle:mysql:5.6.3:*:*:*:*:*:*:*
Matching versions
Oracle » Mysql » Version: 5.6.4
cpe:2.3:a:oracle:mysql:5.6.4:*:*:*:*:*:*:*
Matching versions
Oracle » Mysql » Version: 5.6.5
cpe:2.3:a:oracle:mysql:5.6.5:*:*:*:*:*:*:*
Matching versions
Oracle » Mysql » Version: 5.6.6
cpe:2.3:a:oracle:mysql:5.6.6:*:*:*:*:*:*:*
Matching versions
Oracle » Mysql » Version: 5.6.1
cpe:2.3:a:oracle:mysql:5.6.1:*:*:*:*:*:*:*
Matching versions
Oracle » Mysql » Version: 5.6.8
cpe:2.3:a:oracle:mysql:5.6.8:*:*:*:*:*:*:*
Matching versions
Oracle » Mysql » Version: 5.6.0
cpe:2.3:a:oracle:mysql:5.6.0:*:*:*:*:*:*:*
Matching versions
Oracle » Mysql » Version: 5.6.7
cpe:2.3:a:oracle:mysql:5.6.7:*:*:*:*:*:*:*
Matching versions
Oracle » Mysql » Version: 5.6.9
cpe:2.3:a:oracle:mysql:5.6.9:*:*:*:*:*:*:*
Matching versions
Oracle » Mysql » Version: 5.6.10
cpe:2.3:a:oracle:mysql:5.6.10:*:*:*:*:*:*:*
Matching versions
Oracle » Mysql » Version: 5.6.11
cpe:2.3:a:oracle:mysql:5.6.11:*:*:*:*:*:*:*
Matching versions
Oracle » Mysql » Version: 5.6.12
cpe:2.3:a:oracle:mysql:5.6.12:*:*:*:*:*:*:*
Matching versions
Oracle » Mysql » Version: 5.6.13
cpe:2.3:a:oracle:mysql:5.6.13:*:*:*:*:*:*:*
Matching versions

Exploit prediction scoring system (EPSS) score for CVE-2013-5860

EPSS FAQ

0.25%

Probability of exploitation activity in the next 30 days EPSS Score History

~ 62 %

Percentile, the proportion of vulnerabilities that are scored at or less

CVSS scores for CVE-2013-5860

Base Score	Base Severity	CVSS Vector	Exploitability Score	Impact Score	Score Source	First Seen
6.8	MEDIUM	AV:N/AC:L/Au:S/C:N/I:N/A:C	8.0	6.9	NIST
Access Vector: Network Access Complexity: Low Authentication: Single Confidentiality Impact: None Integrity Impact: None Availability Impact: Complete

References for CVE-2013-5860

http://www.securityfocus.com/bid/64864

Oracle MySQL Server CVE-2013-5860 Remote Security Vulnerability
Third Party Advisory;VDB Entry
http://www.oracle.com/technetwork/topics/security/cpujan2014-1972949.html

Oracle Critical Patch Update - January 2014
Patch;Vendor Advisory

CVEs referencing this url
http://security.gentoo.org/glsa/glsa-201409-04.xml

MySQL: Multiple vulnerabilities (GLSA 201409-04) — Gentoo security

CVEs referencing this url
https://exchange.xforce.ibmcloud.com/vulnerabilities/90373

Oracle MySQL Server GIS denial of service CVE-2013-5860 Vulnerability Report
http://www.securityfocus.com/bid/64758

RETIRED: Oracle January 2014 Critical Patch Update Multiple Vulnerabilities
Third Party Advisory;VDB Entry

CVEs referencing this url

Jump to

Vulnerability Details : CVE-2013-5860

Products affected by CVE-2013-5860

Exploit prediction scoring system (EPSS) score for CVE-2013-5860

CVSS scores for CVE-2013-5860

References for CVE-2013-5860