Vulnerability Details : CVE-2014-0437
Unspecified vulnerability in the MySQL Server component in Oracle MySQL 5.1.72 and earlier, 5.5.34 and earlier, and 5.6.14 and earlier allows remote authenticated users to affect availability via unknown vectors related to Optimizer.
Exploit prediction scoring system (EPSS) score for CVE-2014-0437
Probability of exploitation activity in the next 30 days: 0.32%
Percentile, the proportion of vulnerabilities that are scored at or less: ~ 67 % EPSS Score History EPSS FAQ
CVSS scores for CVE-2014-0437
| Base Score | Base Severity | CVSS Vector | Exploitability Score | Impact Score | Source |
|---|---|---|---|---|---|
|
3.5
|
LOW | AV:N/AC:M/Au:S/C:N/I:N/A:P |
6.8
|
2.9
|
[email protected] |
References for CVE-2014-0437
-
http://rhn.redhat.com/errata/RHSA-2014-0189.html
Third Party Advisory
-
http://rhn.redhat.com/errata/RHSA-2014-0164.html
Third Party Advisory
-
http://www.oracle.com/technetwork/topics/security/cpujan2014-1972949.html
Vendor Advisory
-
http://security.gentoo.org/glsa/glsa-201409-04.xml
Third Party Advisory
-
http://www.securityfocus.com/bid/64758
Third Party Advisory;VDB Entry
-
http://rhn.redhat.com/errata/RHSA-2014-0173.html
Third Party Advisory
-
https://exchange.xforce.ibmcloud.com/vulnerabilities/90385
Third Party Advisory;VDB Entry
-
http://rhn.redhat.com/errata/RHSA-2014-0186.html
Third Party Advisory
-
http://www.securityfocus.com/bid/64849
Third Party Advisory;VDB Entry
-
http://ubuntu.com/usn/usn-2086-1
Third Party Advisory
-
http://www.debian.org/security/2014/dsa-2845
Third Party Advisory
-
http://www.debian.org/security/2014/dsa-2848
Third Party Advisory
Products affected by CVE-2014-0437
- cpe:2.3:o:debian:debian_linux:6.0:*:*:*:*:*:*:*
- cpe:2.3:o:debian:debian_linux:7.0:*:*:*:*:*:*:*
- cpe:2.3:o:redhat:enterprise_linux_desktop:5.0:*:*:*:*:*:*:*
- cpe:2.3:o:redhat:enterprise_linux_desktop:6.0:*:*:*:*:*:*:*
- cpe:2.3:o:redhat:enterprise_linux_eus:6.5:*:*:*:*:*:*:*
- cpe:2.3:o:redhat:enterprise_linux_server:5.0:*:*:*:*:*:*:*
- cpe:2.3:o:redhat:enterprise_linux_server:6.0:*:*:*:*:*:*:*
- cpe:2.3:o:redhat:enterprise_linux_workstation:5.0:*:*:*:*:*:*:*
- cpe:2.3:o:redhat:enterprise_linux_workstation:6.0:*:*:*:*:*:*:*
- cpe:2.3:o:redhat:enterprise_linux_server_aus:6.5:*:*:*:*:*:*:*
- cpe:2.3:o:redhat:enterprise_linux_server_tus:6.5:*:*:*:*:*:*:*
- cpe:2.3:a:oracle:mysql:*:*:*:*:*:*:*:*
- cpe:2.3:a:oracle:mysql:*:*:*:*:*:*:*:*
- cpe:2.3:a:oracle:mysql:*:*:*:*:*:*:*:*
- cpe:2.3:o:canonical:ubuntu_linux:12.04:*:*:*:-:*:*:*
- cpe:2.3:o:canonical:ubuntu_linux:12.10:*:*:*:*:*:*:*
- cpe:2.3:o:canonical:ubuntu_linux:10.04:*:*:*:-:*:*:*
- cpe:2.3:o:canonical:ubuntu_linux:13.10:*:*:*:*:*:*:*
- cpe:2.3:a:mariadb:mariadb:*:*:*:*:*:*:*:*
- cpe:2.3:a:mariadb:mariadb:*:*:*:*:*:*:*:*