CVE-2013-5894 : Unspecified vulnerability in the MySQL Server component in Oracle MySQL 5.6.13 a

Unspecified vulnerability in the MySQL Server component in Oracle MySQL 5.6.13 and earlier allows remote authenticated users to affect availability via unknown vectors related to InnoDB.

Published 2014-01-15 16:08:06

Updated 2017-08-29 01:33:52

Source Oracle

View at NVD, CVE.org

Products affected by CVE-2013-5894

Oracle » Mysql
Versions up to, including, (<=) 5.6.13
cpe:2.3:a:oracle:mysql:*:*:*:*:*:*:*:*
Matching versions
Oracle » Mysql » Version: 5.6.2
cpe:2.3:a:oracle:mysql:5.6.2:*:*:*:*:*:*:*
Matching versions
Oracle » Mysql » Version: 5.6.3
cpe:2.3:a:oracle:mysql:5.6.3:*:*:*:*:*:*:*
Matching versions
Oracle » Mysql » Version: 5.6.4
cpe:2.3:a:oracle:mysql:5.6.4:*:*:*:*:*:*:*
Matching versions
Oracle » Mysql » Version: 5.6.5
cpe:2.3:a:oracle:mysql:5.6.5:*:*:*:*:*:*:*
Matching versions
Oracle » Mysql » Version: 5.6.6
cpe:2.3:a:oracle:mysql:5.6.6:*:*:*:*:*:*:*
Matching versions
Oracle » Mysql » Version: 5.6.1
cpe:2.3:a:oracle:mysql:5.6.1:*:*:*:*:*:*:*
Matching versions
Oracle » Mysql » Version: 5.6.8
cpe:2.3:a:oracle:mysql:5.6.8:*:*:*:*:*:*:*
Matching versions
Oracle » Mysql » Version: 5.6.0
cpe:2.3:a:oracle:mysql:5.6.0:*:*:*:*:*:*:*
Matching versions
Oracle » Mysql » Version: 5.6.7
cpe:2.3:a:oracle:mysql:5.6.7:*:*:*:*:*:*:*
Matching versions
Oracle » Mysql » Version: 5.6.9
cpe:2.3:a:oracle:mysql:5.6.9:*:*:*:*:*:*:*
Matching versions
Oracle » Mysql » Version: 5.6.10
cpe:2.3:a:oracle:mysql:5.6.10:*:*:*:*:*:*:*
Matching versions
Oracle » Mysql » Version: 5.6.11
cpe:2.3:a:oracle:mysql:5.6.11:*:*:*:*:*:*:*
Matching versions
Oracle » Mysql » Version: 5.6.12
cpe:2.3:a:oracle:mysql:5.6.12:*:*:*:*:*:*:*
Matching versions

Exploit prediction scoring system (EPSS) score for CVE-2013-5894

EPSS FAQ

0.65%

Probability of exploitation activity in the next 30 days EPSS Score History

~ 69 %

Percentile, the proportion of vulnerabilities that are scored at or less

CVSS scores for CVE-2013-5894

Base Score	Base Severity	CVSS Vector	Exploitability Score	Impact Score	Score Source	First Seen
4.0	MEDIUM	AV:N/AC:L/Au:S/C:N/I:N/A:P	8.0	2.9	NIST
Access Vector: Network Access Complexity: Low Authentication: Single Confidentiality Impact: None Integrity Impact: None Availability Impact: Partial

References for CVE-2013-5894

http://www.oracle.com/technetwork/topics/security/cpujan2014-1972949.html

Oracle Critical Patch Update - January 2014
Vendor Advisory;Patch

CVEs referencing this url
http://security.gentoo.org/glsa/glsa-201409-04.xml

MySQL: Multiple vulnerabilities (GLSA 201409-04) — Gentoo security

CVEs referencing this url
http://www.securityfocus.com/bid/64758

RETIRED: Oracle January 2014 Critical Patch Update Multiple Vulnerabilities
Third Party Advisory;VDB Entry

CVEs referencing this url
http://www.securityfocus.com/bid/64873

Oracle MySQL Server CVE-2013-5894 Remote Security Vulnerability
Third Party Advisory;VDB Entry
https://exchange.xforce.ibmcloud.com/vulnerabilities/90376

Oracle MySQL Server InnoDB denial of service CVE-2013-5894 Vulnerability Report

Jump to

Vulnerability Details : CVE-2013-5894

Products affected by CVE-2013-5894

Exploit prediction scoring system (EPSS) score for CVE-2013-5894

CVSS scores for CVE-2013-5894

References for CVE-2013-5894