CVE-2014-0001: mariadb
Vulnerability summary
CVE-2014-0001 is a high (CVSS 7.5) vulnerability in mariadb. EPSS estimates a 6.40% chance of exploitation in the next 30 days, higher than 93.6% of scored vulnerabilities.
Not severe (CVSS 7.5, network access); no exploitation reported by the 5 checked sources
Source freshness unavailable
How is this decided?Advisory lineage
Upstream 0 · Downstream 7 · Related 1Timeline
- 31-01-2014PublishedVulnerability first disclosed.
- 06-08-2024Last modifiedVulnerability information updated.
Description
Buffer overflow in client/mysql.cc in Oracle MySQL and MariaDB before 5.5.35 allows remote database servers to cause a denial of service (crash) and possibly execute arbitrary code via a long server version string.
CVSS metrics
1 score · 1 source · 1 versionEPSS trend
Probability
6.40%
Chance of exploitation in the next 30 days
Percentile
94%
Versus all other CVEs
30-day change
Increase +0.05 pp
From 6.35% on 04-10-2026
Known exploited
Compare KEV catalogsNot in the CISA KEV catalog.
Not in the ENISA CNW catalog.
Not in the CIRCL catalog.
Public exploits
0 foundNo public exploits indexed.
Weaknesses
CWE · root causeAffected systems
Known conditions: network-reachable, no authentication (CVSS vector). Other conditions: not stated in public data.
Redhat4 products
- enterprise_linuxEOL5 | 6.0
- enterprise_linux_desktop5.0 | 6.0
- enterprise_linux_server6.0
- enterprise_linux_workstation6.0
Ubuntu2 products
- mysql-5.5< 5.5.37-0ubuntu0.14.04.1
- mysql-5.6< 5.6.17-0ubuntu0.14.04.1
Mariadb1 product
- mariadb≤ 5.5.34
Oracle1 product
- mysqlEOL5.5.0 | 5.5.1 | 5.5.2 | 5.5.3 | 5.5.4 | 5.5.5 | 5.5.6 | 5.5.7 | 5.5.9 | 5.5.10 | 5.5.11 | 5.5.12 | 5.5.13 | 5.5.14 | 5.5.15 | 5.5.16 | 5.5.17 | 5.5.18 | 5.5.19 | 5.5.20 | 5.5.21 | 5.5.22 | 5.5.23 | 5.5.24 | 5.5.25 | 5.5.25:a | 5.5.26 | 5.5.27 | 5.5.28 | 5.5.29 | 5.5.30 | 5.5.31 | 5.5.32 | 5.5.33 | 5.5.34 | 5.5.35 | 5.5.36 | 5.6.0 | 5.6.1 | 5.6.2 | 5.6.3 | 5.6.4 | 5.6.5 | 5.6.6 | 5.6.7 | 5.6.8 | 5.6.9 | 5.6.10 | 5.6.11 | 5.6.12 | 5.6.13 | 5.6.14 | 5.6.15 | 5.6.16
4 vendors · 8 products
References
18 links- bazaar.launchpad.net/~maria-captains/maria/5.5/revision/2502.565.64X Refsource CONFIRMNot ApplicableREPORT
- www.mandriva.com/security/advisories?name=MDVSA-2014:029Vendor AdvisoryX Refsource MANDRIVABroken Link
Show all 18 references
- bugzilla.redhat.com/show_bug.cgi?id=1054592X Refsource CONFIRMIssue TrackingPatchThird Party AdvisoryREPORT
- security.gentoo.org/glsa/glsa-201409-04.xmlVendor AdvisoryX Refsource GENTOOPatchThird Party AdvisoryVDB Entry