Description

Buffer overflow in client/mysql.cc in Oracle MySQL and MariaDB before 5.5.35 allows remote database servers to cause a denial of service (crash) and possibly execute arbitrary code via a long server version string.

Remediation

References

CVE-2014-0001

Related Vulnerabilities

Oracle Database Server Improper Restriction of Operations within the Bounds of a Memory Buffer Vulnerability (CVE-2007-0272)

phpMyFAQ Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2023-5316)

MyBB Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2023-28467)

PHP Other Vulnerability (CVE-2006-1015)

WordPress Plugin OneLogin SAML SSO Unspecified Vulnerability (2.1.8)

Severity

High

Classification

CVE-2014-0001 CWE-119

Tags

Missing Update Known Vulnerabilities