CVE-2013-5908

Low

Description

Unspecified vulnerability in the MySQL Server component in Oracle MySQL 5.1.72 and earlier, 5.5.34 and earlier, and 5.6.14 and earlier allows remote attackers to affect availability via unknown vectors related to Error Handling.

SeverityLow
CVSS2.6
Exploit probability—
ProductOracle Mysql
PublishedJan 15, 2014
First seenJan 15, 2014

How to fix

Update
  • mariadb mariadb5.5.35, 10.0.8 or later

Affected products

ProductAffected versionsFixed in
oracle mysql5.1.0 ≤ v ≤ 5.1.72, 5.5.0 ≤ v ≤ 5.5.34, 5.6.0 ≤ v ≤ 5.6.14—
debian debian_linux6.0, 7.0—
canonical ubuntu_linux10.04, 12.04, 12.10, 13.10—
redhat enterprise_linux_desktop5.0, 6.0—
redhat enterprise_linux_eus6.5—
redhat enterprise_linux_server5.0, 6.0—
redhat enterprise_linux_server_aus6.5—
redhat enterprise_linux_server_tus6.5—
redhat enterprise_linux_workstation5.0, 6.0—
mariadb mariadb5.5.0 ≤ v < 5.5.35, 10.0.0 ≤ v < 10.0.85.5.35, 10.0.8

Check your version

Choose the product and enter the version you run to see whether it falls in the affected range.

In the Intelligence 360 plan

Attack Surface Management

See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.

CVE-2013-5908 · Oracle Mysql · Dark Radar