Branch sisyphus update bulletin.

Package MySQL updated to version 5.5.42-alt1 for branch sisyphus in task 139691.

Published: 2014-01-31

BDU:2014-00338

Уязвимость системы управления базами данных MySQL, позволяющая злоумышленнику вызвать отказ в обслуживании

Severity: HIGH (7.5)

References:

Published: 2014-01-31

BDU:2014-00339

Уязвимость системы управления базами данных Marida DB, позволяющая злоумышленнику вызвать отказ в обслуживании

Severity: HIGH (7.5)

References:

Published: 2014-04-15

BDU:2014-00340

Уязвимость системы управления базами данных MySQL, позволяющая удаленным пользователям, прошедшим аутентификацию, оказать воздействие на доступность данных

Severity: MEDIUM (4.0)

References:

Published: 2014-04-15

BDU:2014-00341

Severity: MEDIUM (4.0)

References:

Published: 2014-04-15

BDU:2014-00343

Severity: LOW (3.5)

References:

Published: 2014-04-15

BDU:2014-00345

Severity: MEDIUM (4.3)

References:

Published: 2014-01-15

BDU:2014-00346

Severity: LOW (2.8)

References:

Published: 2014-01-15

BDU:2014-00347

Severity: MEDIUM (4.0)

References:

Published: 2014-01-15

BDU:2014-00348

Severity: MEDIUM (4.0)

References:

Published: 2014-04-15

BDU:2014-00350

Severity: MEDIUM (6.0)

References:

Published: 2014-04-15

BDU:2014-00351

Severity: LOW (2.8)

References:

Published: 2014-04-15

BDU:2014-00352

Severity: LOW (3.5)

References:

Published: 2014-01-15

BDU:2014-00353

Severity: MEDIUM (4.0)

References:

Published: 2014-04-15

BDU:2014-00354

Severity: LOW (2.6)

References:

Published: 2014-01-15

BDU:2014-00355

Severity: LOW (3.3)

References:

Published: 2014-01-15

BDU:2014-00356

Severity: LOW (3.5)

References:

Published: 2014-01-15

BDU:2014-00357

Severity: MEDIUM (4.0)

References:

Published: 2014-01-15

BDU:2014-00360

Severity: MEDIUM (4.0)

References:

Published: 2014-01-15

BDU:2014-00361

Severity: LOW (2.6)

References:

Published: 2015-04-16

BDU:2015-09981

Уязвимость системы управления базами данных MySQL, позволяющая удаленному нарушителю вызвать отказ в обслуживании

Severity: MEDIUM (5.0)

References:

CVE-2015-2568

Published: 2015-04-16

BDU:2015-09982

Severity: MEDIUM (4.0)

References:

CVE-2015-2573

Published: 2015-04-16

BDU:2015-09986

Severity: MEDIUM (4.0)

References:

CVE-2015-0433

Published: 2015-04-16

BDU:2015-09991

Severity: MEDIUM (4.0)

References:

CVE-2015-0441

Published: 2013-04-17
Modified: 2024-11-21

CVE-2013-2391

Unspecified vulnerability in Oracle MySQL 5.1.68 and earlier, 5.5.30 and earlier, and 5.6.10 and earlier allows local users to affect confidentiality and integrity via unknown vectors related to Server Install.

Severity: LOW (3.0)

References:

Published: 2013-10-16
Modified: 2024-11-21

CVE-2013-3839

Unspecified vulnerability in the MySQL Server component in Oracle MySQL 5.1.70 and earlier, 5.5.32 and earlier, and 5.6.12 and earlier allows remote authenticated users to affect availability via unknown vectors related to Optimizer.

Severity: MEDIUM (4.0)

References:

Published: 2013-10-16
Modified: 2024-11-21

CVE-2013-5807

Unspecified vulnerability in Oracle MySQL Server 5.5.x through 5.5.32 and 5.6.x through 5.6.12 allows remote authenticated users to affect confidentiality and integrity via unknown vectors related to Replication.

Severity: MEDIUM (4.9)

References:

Published: 2014-01-15
Modified: 2024-11-21

CVE-2013-5891

Unspecified vulnerability in the MySQL Server component in Oracle MySQL 5.5.33 and earlier and 5.6.13 and earlier allows remote authenticated users to affect availability via unknown vectors related to Partition.

Severity: MEDIUM (4.0)

References:

Published: 2014-01-15
Modified: 2024-11-21

CVE-2013-5908

Unspecified vulnerability in the MySQL Server component in Oracle MySQL 5.1.72 and earlier, 5.5.34 and earlier, and 5.6.14 and earlier allows remote attackers to affect availability via unknown vectors related to Error Handling.

Severity: LOW (2.6)

References:

Published: 2014-02-01
Modified: 2024-11-21

CVE-2014-0001

Buffer overflow in client/mysql.cc in Oracle MySQL and MariaDB before 5.5.35 allows remote database servers to cause a denial of service (crash) and possibly execute arbitrary code via a long server version string.

Severity: HIGH (7.5)

References:

Published: 2014-04-16
Modified: 2024-11-21

CVE-2014-0384

Unspecified vulnerability in the MySQL Server component in Oracle MySQL 5.5.35 and earlier and 5.6.15 and earlier allows remote authenticated users to affect availability via vectors related to XML.

Severity: MEDIUM (4.0)

References:

Published: 2014-01-15
Modified: 2024-11-21

CVE-2014-0386

Unspecified vulnerability in the MySQL Server component in Oracle MySQL 5.1.71 and earlier, 5.5.33 and earlier, and 5.6.13 and earlier allows remote authenticated users to affect availability via unknown vectors related to Optimizer.

Severity: MEDIUM (4.0)

References:

Published: 2014-01-15
Modified: 2024-11-21

CVE-2014-0393

Severity: LOW (3.3)

References:

Published: 2014-01-15
Modified: 2024-11-21

CVE-2014-0401

Unspecified vulnerability in the MySQL Server component in Oracle MySQL 5.1.72 and earlier, 5.5.34 and earlier, and 5.6.14 and earlier allows remote authenticated users to affect availability via unknown vectors.

Severity: MEDIUM (4.0)

References:

Published: 2014-01-15
Modified: 2024-11-21

CVE-2014-0402

Severity: MEDIUM (4.0)

References:

Published: 2014-01-15
Modified: 2024-11-21

CVE-2014-0412

Severity: MEDIUM (4.0)

References:

Published: 2014-01-15
Modified: 2024-11-21

CVE-2014-0420

Unspecified vulnerability in the MySQL Server component in Oracle MySQL 5.5.34 and earlier, and 5.6.14 and earlier, allows remote authenticated users to affect availability via unknown vectors related to Replication.

Severity: LOW (2.8)

References:

Published: 2014-01-15
Modified: 2024-11-21

CVE-2014-0437

Severity: LOW (3.5)

References:

Published: 2014-04-16
Modified: 2024-11-21

CVE-2014-2419

Unspecified vulnerability in Oracle MySQL Server 5.5.35 and earlier and 5.6.15 and earlier allows remote authenticated users to affect availability via unknown vectors related to Partition.

Severity: MEDIUM (4.0)

References:

Published: 2014-04-16
Modified: 2024-11-21

CVE-2014-2430

Unspecified vulnerability in Oracle MySQL Server 5.5.36 and earlier and 5.6.16 and earlier allows remote authenticated users to affect availability via unknown vectors related to Performance Schema.

Severity: LOW (3.5)

References:

Published: 2014-04-16
Modified: 2024-11-21

CVE-2014-2431

Unspecified vulnerability in Oracle MySQL Server 5.5.36 and earlier and 5.6.16 and earlier allows remote attackers to affect availability via unknown vectors related to Options.

Severity: LOW (2.6)

References:

Published: 2014-04-16
Modified: 2024-11-21

CVE-2014-2432

Unspecified vulnerability Oracle the MySQL Server component 5.5.35 and earlier and 5.6.15 and earlier allows remote authenticated users to affect availability via unknown vectors related to Federated.

Severity: LOW (2.8)

References:

Published: 2014-04-16
Modified: 2024-11-21

CVE-2014-2436

Unspecified vulnerability in Oracle MySQL Server 5.5.36 and earlier and 5.6.16 and earlier allows remote authenticated users to affect confidentiality, integrity, and availability via vectors related to RBR.

Severity: MEDIUM (6.5)

References:

Published: 2014-04-16
Modified: 2024-11-21

CVE-2014-2438

Unspecified vulnerability in Oracle MySQL Server 5.5.35 and earlier and 5.6.15 and earlier allows remote authenticated users to affect availability via unknown vectors related to Replication.

Severity: LOW (3.5)

References:

Published: 2014-04-16
Modified: 2024-11-21

CVE-2014-2440

Unspecified vulnerability in the MySQL Client component in Oracle MySQL 5.5.36 and earlier and 5.6.16 and earlier allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors.

Severity: MEDIUM (5.1)

References:

Published: 2014-07-17
Modified: 2024-11-21

CVE-2014-2494

Unspecified vulnerability in the MySQL Server component in Oracle MySQL 5.5.37 and earlier allows remote authenticated users to affect availability via vectors related to ENARC.

Severity: MEDIUM (4.0)

References:

Published: 2014-07-17
Modified: 2024-11-21

CVE-2014-4207

Unspecified vulnerability in the MySQL Server component in Oracle MySQL 5.5.37 and earlier allows remote authenticated users to affect availability via vectors related to SROPTZR.

Severity: MEDIUM (4.0)

References:

Published: 2014-07-17
Modified: 2024-11-21

CVE-2014-4243

Unspecified vulnerability in the MySQL Server component in Oracle MySQL 5.5.35 and earlier and 5.6.15 and earlier allows remote authenticated users to affect availability via vectors related to ENFED.

Severity: LOW (2.8)

References:

Published: 2014-07-17
Modified: 2024-11-21

CVE-2014-4258

Unspecified vulnerability in the MySQL Server component in Oracle MySQL 5.5.37 and earlier and 5.6.17 and earlier allows remote authenticated users to affect confidentiality, integrity, and availability via vectors related to SRINFOSC.

Severity: MEDIUM (6.5)

References:

Published: 2014-07-17
Modified: 2024-11-21

CVE-2014-4260

Unspecified vulnerability in the MySQL Server component in Oracle MySQL 5.5.37 and earlier, and 5.6.17 and earlier, allows remote authenticated users to affect integrity and availability via vectors related to SRCHAR.

Severity: MEDIUM (5.5)

References:

Published: 2014-10-15
Modified: 2024-11-21

CVE-2014-4274

Unspecified vulnerability in Oracle MySQL Server 5.5.38 and earlier and 5.6.19 and earlier allows local users to affect confidentiality, integrity, and availability via vectors related to SERVER:MyISAM.

Severity: MEDIUM (4.1)

References:

Published: 2014-10-15
Modified: 2024-11-21

CVE-2014-4287

Unspecified vulnerability in Oracle MySQL Server 5.5.38 and earlier and 5.6.19 and earlier allows remote authenticated users to affect availability via vectors related to SERVER:CHARACTER SETS.

Severity: MEDIUM (4.0)

References:

Published: 2014-10-15
Modified: 2024-11-21

CVE-2014-6463

Unspecified vulnerability in Oracle MySQL Server 5.5.38 and earlier and 5.6.19 and earlier allows remote authenticated users to affect availability via vectors related to SERVER:REPLICATION ROW FORMAT BINARY LOG DML.

Severity: LOW (3.3)

References:

Published: 2014-10-15
Modified: 2024-11-21

CVE-2014-6464

Unspecified vulnerability in Oracle MySQL Server 5.5.39 and earlier and 5.6.20 and earlier allows remote authenticated users to affect availability via vectors related to SERVER:INNODB DML FOREIGN KEYS.

Severity: MEDIUM (4.0)

References:

Published: 2014-10-15
Modified: 2024-11-21

CVE-2014-6469

Unspecified vulnerability in Oracle MySQL Server 5.5.39 and earlier and 5.6.20 and earlier allows remote authenticated users to affect availability via vectors related to SERVER:OPTIMIZER.

Severity: MEDIUM (6.8)

References:

Published: 2014-10-15
Modified: 2024-11-21

CVE-2014-6478

Unspecified vulnerability in Oracle MySQL Server 5.5.38 and earlier, and 5.6.19 and earlier, allows remote attackers to affect integrity via vectors related to SERVER:SSL:yaSSL.

Severity: MEDIUM (4.3)

References:

Published: 2014-10-15
Modified: 2024-11-21

CVE-2014-6484

Unspecified vulnerability in Oracle MySQL Server 5.5.38 and earlier, and 5.6.19 and earlier, allows remote authenticated users to affect availability via vectors related to SERVER:DML.

Severity: MEDIUM (4.0)

References: