Vulnerability Details : CVE-2014-0386
Unspecified vulnerability in the MySQL Server component in Oracle MySQL 5.1.71 and earlier, 5.5.33 and earlier, and 5.6.13 and earlier allows remote authenticated users to affect availability via unknown vectors related to Optimizer.
Exploit prediction scoring system (EPSS) score for CVE-2014-0386
Probability of exploitation activity in the next 30 days: 0.32%
Percentile, the proportion of vulnerabilities that are scored at or less: ~ 67 % EPSS Score History EPSS FAQ
CVSS scores for CVE-2014-0386
| Base Score | Base Severity | CVSS Vector | Exploitability Score | Impact Score | Source |
|---|---|---|---|---|---|
|
4.0
|
MEDIUM | AV:N/AC:L/Au:S/C:N/I:N/A:P |
8.0
|
2.9
|
[email protected] |
References for CVE-2014-0386
-
https://exchange.xforce.ibmcloud.com/vulnerabilities/90380
Third Party Advisory;VDB Entry
-
http://rhn.redhat.com/errata/RHSA-2014-0189.html
Third Party Advisory
-
http://rhn.redhat.com/errata/RHSA-2014-0164.html
Third Party Advisory
-
http://www.oracle.com/technetwork/topics/security/cpujan2014-1972949.html
Vendor Advisory
-
http://security.gentoo.org/glsa/glsa-201409-04.xml
Third Party Advisory
-
http://www.securityfocus.com/bid/64758
Third Party Advisory;VDB Entry
-
http://www.securityfocus.com/bid/64904
Third Party Advisory;VDB Entry
-
http://rhn.redhat.com/errata/RHSA-2014-0173.html
Third Party Advisory
-
http://rhn.redhat.com/errata/RHSA-2014-0186.html
Third Party Advisory
-
http://ubuntu.com/usn/usn-2086-1
Third Party Advisory
-
http://www.debian.org/security/2014/dsa-2845
Third Party Advisory
-
http://www.debian.org/security/2014/dsa-2848
Third Party Advisory
Products affected by CVE-2014-0386
- cpe:2.3:o:debian:debian_linux:6.0:*:*:*:*:*:*:*
- cpe:2.3:o:debian:debian_linux:7.0:*:*:*:*:*:*:*
- cpe:2.3:o:redhat:enterprise_linux_desktop:5.0:*:*:*:*:*:*:*
- cpe:2.3:o:redhat:enterprise_linux_desktop:6.0:*:*:*:*:*:*:*
- cpe:2.3:o:redhat:enterprise_linux_eus:6.5:*:*:*:*:*:*:*
- cpe:2.3:o:redhat:enterprise_linux_server:5.0:*:*:*:*:*:*:*
- cpe:2.3:o:redhat:enterprise_linux_server:6.0:*:*:*:*:*:*:*
- cpe:2.3:o:redhat:enterprise_linux_workstation:5.0:*:*:*:*:*:*:*
- cpe:2.3:o:redhat:enterprise_linux_workstation:6.0:*:*:*:*:*:*:*
- cpe:2.3:o:redhat:enterprise_linux_server_aus:6.5:*:*:*:*:*:*:*
- cpe:2.3:o:redhat:enterprise_linux_server_tus:6.5:*:*:*:*:*:*:*
- cpe:2.3:a:oracle:mysql:*:*:*:*:*:*:*:*
- cpe:2.3:a:oracle:mysql:*:*:*:*:*:*:*:*
- cpe:2.3:a:oracle:mysql:*:*:*:*:*:*:*:*
- cpe:2.3:o:canonical:ubuntu_linux:12.04:*:*:*:-:*:*:*
- cpe:2.3:o:canonical:ubuntu_linux:12.10:*:*:*:*:*:*:*
- cpe:2.3:o:canonical:ubuntu_linux:10.04:*:*:*:-:*:*:*
- cpe:2.3:o:canonical:ubuntu_linux:13.10:*:*:*:*:*:*:*
- cpe:2.3:a:mariadb:mariadb:*:*:*:*:*:*:*:*
- cpe:2.3:a:mariadb:mariadb:*:*:*:*:*:*:*:*