Description
Unspecified vulnerability in the MySQL Server component in Oracle MySQL 5.1.72 and earlier, 5.5.34 and earlier, and 5.6.14 and earlier allows remote authenticated users to affect availability via unknown vectors related to Optimizer.
Fixed in Linux distributions
Distributions backport fixes, so the version that fixes this vulnerability differs per release — upgrade to at least the version shown. From the distributions' security trackers and advisories.
Debian
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Debian 7 | mysql-5.5 | 5.5.35+dfsg-0+wheezy1 | DSA-2848-1 |
| Debian 6.0 | mysql-5.1 | 5.1.73-1 | DSA-2845-1 |
Red Hat
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| RHEL 6 | mysql +7 | 5.1.73-3.el6_5 | RHSA-2014:0164 |
| RHEL 5 | mysql55-mysql +5 | 5.5.36-2.el5 | RHSA-2014:0186 |
| RHEL 1 | mariadb55-mariadb +5 | 5.5.35-1.1.el6 | RHSA-2014:0189 |
| RHEL 1 | mysql55-mysql +5 | 5.5.36-1.1.el6 | RHSA-2014:0173 |
Advisories 6
- RHSA-2014:0186 Red Hat Security Advisory: mysql55-mysql security update Red Hat Security Advisories (RHSA) · Jun 29, 2026
- RHSA-2014:0189 Red Hat Security Advisory: mariadb55-mariadb security update Red Hat Security Advisories (RHSA) · Jun 29, 2026
- RHSA-2014:0173 Red Hat Security Advisory: mysql55-mysql security update Red Hat Security Advisories (RHSA) · Jun 29, 2026
- RHSA-2014:0164 Red Hat Security Advisory: mysql security and bug fix update Red Hat Security Advisories (RHSA) · Jun 29, 2026
- DSA-2848-1 mysql-5.5 - several Debian Security (DSA / DLA) · Mar 9, 2026
- DSA-2845-1 mysql-5.1 - several Debian Security (DSA / DLA) · Mar 9, 2026
References
- USN-2086-1 vendor-advisory
- DSA-2845 vendor-advisory
- 102074 vdb-entry
- 56491 third-party-advisory
- RHSA-2014:0186 vendor-advisory
- 56541 third-party-advisory
- DSA-2848 vendor-advisory
- oracle-cpujan2014-cve20140437(90385) vdb-entry
- 56580 third-party-advisory
- 64849 vdb-entry
- RHSA-2014:0173 vendor-advisory
- RHSA-2014:0189 vendor-advisory
- RHSA-2014:0164 vendor-advisory
- 64758 vdb-entry
- http://www.oracle.com/technetwork/topics/security/cpujan2014-1972949.html
- GLSA-201409-04 vendor-advisory