Description
Unspecified vulnerability in Oracle MySQL Server 5.5.x through 5.5.32 and 5.6.x through 5.6.12 allows remote authenticated users to affect confidentiality and integrity via unknown vectors related to Replication.
Fixed in Linux distributions
Distributions backport fixes, so the version that fixes this vulnerability differs per release — upgrade to at least the version shown. From the distributions' security trackers and advisories.
Debian
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Debian 7 | mysql-5.5 | 5.5.33+dfsg-0+wheezy1 | DSA-2818-1 |
Red Hat
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| RHEL 5 | mysql55-mysql +5 | 5.5.36-2.el5 | RHSA-2014:0186 |
| RHEL 1 | mariadb55-mariadb +5 | 5.5.35-1.1.el6 | RHSA-2014:0189 |
| RHEL 1 | mysql55-mysql +5 | 5.5.36-1.1.el6 | RHSA-2014:0173 |
Advisories 4
- RHSA-2014:0186 Red Hat Security Advisory: mysql55-mysql security update Red Hat Security Advisories (RHSA) · Jun 29, 2026
- RHSA-2014:0189 Red Hat Security Advisory: mariadb55-mariadb security update Red Hat Security Advisories (RHSA) · Jun 29, 2026
- RHSA-2014:0173 Red Hat Security Advisory: mysql55-mysql security update Red Hat Security Advisories (RHSA) · Jun 29, 2026
- DSA-2818-1 mysql-5.5 - several Debian Security (DSA / DLA) · Mar 9, 2026
References
- DSA-2818 vendor-advisory
- RHSA-2014:0186 vendor-advisory
- http://www.oracle.com/technetwork/topics/security/cpuoct2013-1899837.html
- 63105 vdb-entry
- USN-2006-1 vendor-advisory
- RHSA-2014:0173 vendor-advisory
- RHSA-2014:0189 vendor-advisory
- 1029184 vdb-entry
- GLSA-201409-04 vendor-advisory