CVE-2014-2440

Related Vulnerabilities: CVE-2014-2440  

Unspecified vulnerability in the MySQL Client component in Oracle MySQL 5.5.36 and earlier and 5.6.16 and earlier allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors.

The MITRE CVE dictionary describes this issue as:

Unspecified vulnerability in the MySQL Client component in Oracle MySQL 5.5.36 and earlier and 5.6.16 and earlier allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors.

Find out more about CVE-2014-2440 from the MITRE CVE dictionary dictionary and NIST NVD.

Statement

This issue is a duplicate of CVE-2014-0001. See information for CVE-2014-0001 for additional details on errata that corrected this issue in Red Hat products.

CVSS v2 metrics

NOTE: The following CVSS v2 metrics and score provided are preliminary and subject to review.

Base Score 5.1
Base Metrics AV:N/AC:H/Au:N/C:P/I:P/A:P
Access Vector Network
Access Complexity High
Authentication None
Confidentiality Impact Partial
Integrity Impact Partial
Availability Impact Partial

Find out more about Red Hat support for the Common Vulnerability Scoring System (CVSS).

Affected Packages State

Platform Package State
Red Hat Software Collections 1 for Red Hat Enterprise Linux mariadb55-mariadb Will not fix
Red Hat Software Collections 1 for Red Hat Enterprise Linux mysql55-mysql Will not fix
Red Hat Enterprise Linux 7 mariadb Will not fix
Red Hat Enterprise Linux 6 mysql Not affected
Red Hat Enterprise Linux 5 mysql55-mysql Will not fix

External References