mysql: unspecified vulnerability related to SERVER:REPLICATION ROW FORMAT BINARY LOG DML (CPU October 2014)
Published Oct 15, 2014
3.3
LOWCVSS 2.0
EPSS 2.81%
Description
Unspecified vulnerability in Oracle MySQL Server 5.5.38 and earlier and 5.6.19 and earlier allows remote authenticated users to affect availability via vectors related to SERVER:REPLICATION ROW FORMAT BINARY LOG DML.
Affected products
No data.
Configuration 2
Configuration 3
- 12
- 12
- 12
- 12
No data.
Red Hat Enterprise Linux 5
mysql55-mysql-0:5.5.40-2.el5
Fixed · RHSA-2014:1859
Red Hat Enterprise Linux 7
mariadb-1:5.5.40-1.el7_0
Fixed · RHSA-2014:1861
Red Hat Enterprise Linux OpenStack Platform 5.0 (Icehouse) for RHEL 6
mariadb-galera-0:5.5.40-2.el6ost
Fixed · RHSA-2014:1937
Red Hat Enterprise Linux OpenStack Platform 5.0 (Icehouse) for RHEL 7
mariadb-galera-1:5.5.40-2.el7ost
Fixed · RHSA-2014:1940
Red Hat Software Collections 1 for Red Hat Enterprise Linux 6
mariadb55-mariadb-0:5.5.40-10.el6
Fixed · RHSA-2014:1862
Red Hat Software Collections 1 for Red Hat Enterprise Linux 6
mysql55-mysql-0:5.5.40-1.el6
Fixed · RHSA-2014:1860
Red Hat Software Collections 1 for Red Hat Enterprise Linux 6.4 EUS
mariadb55-mariadb-0:5.5.40-10.el6
Fixed · RHSA-2014:1862
Red Hat Software Collections 1 for Red Hat Enterprise Linux 6.4 EUS
mysql55-mysql-0:5.5.40-1.el6
Fixed · RHSA-2014:1860
Red Hat Software Collections 1 for Red Hat Enterprise Linux 6.5 EUS
mariadb55-mariadb-0:5.5.40-10.el6
Fixed · RHSA-2014:1862
Red Hat Software Collections 1 for Red Hat Enterprise Linux 6.5 EUS
mysql55-mysql-0:5.5.40-1.el6
Fixed · RHSA-2014:1860
Red Hat Software Collections 1 for Red Hat Enterprise Linux 6.6 EUS
mariadb55-mariadb-0:5.5.40-10.el6
Fixed · RHSA-2014:1862
Red Hat Software Collections 1 for Red Hat Enterprise Linux 6.6 EUS
mysql55-mysql-0:5.5.40-1.el6
Fixed · RHSA-2014:1860
Red Hat Software Collections 1 for Red Hat Enterprise Linux 7
mariadb55-mariadb-0:5.5.40-10.el7
Fixed · RHSA-2014:1862
Red Hat Software Collections 1 for Red Hat Enterprise Linux 7
mysql55-mysql-0:5.5.40-1.el7
Fixed · RHSA-2014:1860
Red Hat Enterprise Linux 6
mysql
Under investigation
| Product | Package | State | Advisory |
|---|---|---|---|
| Red Hat Enterprise Linux 5 | mysql55-mysql-0:5.5.40-2.el5 | Fixed | RHSA-2014:1859 |
| Red Hat Enterprise Linux 7 | mariadb-1:5.5.40-1.el7_0 | Fixed | RHSA-2014:1861 |
| Red Hat Enterprise Linux OpenStack Platform 5.0 (Icehouse) for RHEL 6 | mariadb-galera-0:5.5.40-2.el6ost | Fixed | RHSA-2014:1937 |
| Red Hat Enterprise Linux OpenStack Platform 5.0 (Icehouse) for RHEL 7 | mariadb-galera-1:5.5.40-2.el7ost | Fixed | RHSA-2014:1940 |
| Red Hat Software Collections 1 for Red Hat Enterprise Linux 6 | mariadb55-mariadb-0:5.5.40-10.el6 | Fixed | RHSA-2014:1862 |
| Red Hat Software Collections 1 for Red Hat Enterprise Linux 6 | mysql55-mysql-0:5.5.40-1.el6 | Fixed | RHSA-2014:1860 |
| Red Hat Software Collections 1 for Red Hat Enterprise Linux 6.4 EUS | mariadb55-mariadb-0:5.5.40-10.el6 | Fixed | RHSA-2014:1862 |
| Red Hat Software Collections 1 for Red Hat Enterprise Linux 6.4 EUS | mysql55-mysql-0:5.5.40-1.el6 | Fixed | RHSA-2014:1860 |
| Red Hat Software Collections 1 for Red Hat Enterprise Linux 6.5 EUS | mariadb55-mariadb-0:5.5.40-10.el6 | Fixed | RHSA-2014:1862 |
| Red Hat Software Collections 1 for Red Hat Enterprise Linux 6.5 EUS | mysql55-mysql-0:5.5.40-1.el6 | Fixed | RHSA-2014:1860 |
| Red Hat Software Collections 1 for Red Hat Enterprise Linux 6.6 EUS | mariadb55-mariadb-0:5.5.40-10.el6 | Fixed | RHSA-2014:1862 |
| Red Hat Software Collections 1 for Red Hat Enterprise Linux 6.6 EUS | mysql55-mysql-0:5.5.40-1.el6 | Fixed | RHSA-2014:1860 |
| Red Hat Software Collections 1 for Red Hat Enterprise Linux 7 | mariadb55-mariadb-0:5.5.40-10.el7 | Fixed | RHSA-2014:1862 |
| Red Hat Software Collections 1 for Red Hat Enterprise Linux 7 | mysql55-mysql-0:5.5.40-1.el7 | Fixed | RHSA-2014:1860 |
| Red Hat Enterprise Linux 6 | mysql | Under investigation | n/a |
No package ranges for this CVE.
Remediation
No remediation recorded yet.
No CWE recorded.
References (9)
- http://lists.opensuse.org/opensuse-security-announce/2015-04/msg00016.html vendor-advisoryx_refsource_SUSEMailing ListThird Party Advisory
- http://www.oracle.com/technetwork/topics/security/bulletinoct2015-2511968.html x_refsource_CONFIRMVendor Advisory
- http://www.oracle.com/technetwork/topics/security/cpuoct2014-1972960.html x_refsource_CONFIRMPatchVendor Advisory
- http://www.securityfocus.com/bid/70532 vdb-entryx_refsource_BIDThird Party AdvisoryVDB Entry
- https://access.redhat.com/security/cve/CVE-2014-6463 Vendor Advisory
- https://bugzilla.redhat.com/show_bug.cgi?id=1153462 Issue Tracking
- https://euvd.enisa.europa.eu/vulnerability/EUVD-2014-6342 Advisory
- https://nvd.nist.gov/vuln/detail/CVE-2014-6463
- https://www.cve.org/CVERecord?id=CVE-2014-6463
| Link | Providers | Tags |
|---|---|---|
| http://lists.opensuse.org/opensuse-security-announce/2015-04/msg00016.html | vendor-advisoryx_refsource_SUSEMailing ListThird Party Advisory | |
| http://www.oracle.com/technetwork/topics/security/bulletinoct2015-2511968.html | x_refsource_CONFIRMVendor Advisory | |
| http://www.oracle.com/technetwork/topics/security/cpuoct2014-1972960.html | x_refsource_CONFIRMPatchVendor Advisory | |
| http://www.securityfocus.com/bid/70532 | vdb-entryx_refsource_BIDThird Party AdvisoryVDB Entry | |
| https://access.redhat.com/security/cve/CVE-2014-6463 | Vendor Advisory | |
| https://bugzilla.redhat.com/show_bug.cgi?id=1153462 | Issue Tracking | |
| https://euvd.enisa.europa.eu/vulnerability/EUVD-2014-6342 | Advisory | |
| https://nvd.nist.gov/vuln/detail/CVE-2014-6463 | ||
| https://www.cve.org/CVERecord?id=CVE-2014-6463 |
Change history (0)
No recorded changes yet.