Unspecified vulnerability in the MySQL Server component in Oracle MySQL 5.6.11 and earlier allows remote authenticated users to affect availability via unknown vectors related to Locking.

The remote host is affected by the vulnerability described in GLSA-201409-04 (MySQL: Multiple vulnerabilities)

    Multiple vulnerabilities have been discovered in MySQL. Please review       the CVE identifiers referenced below for details.
  Impact :

    A local attacker could possibly gain escalated privileges. A remote       attacker could send a specially crafted SQL query, possibly resulting in       a Denial of Service condition. A remote attacker could entice a user to       connect to specially crafted MySQL server, possibly resulting in       execution of arbitrary code with the privileges of the process.
  Workaround :

    There is no known workaround at this time.

The version of MySQL installed on the remote host is earlier than 5.6.13. Therefore, vulnerabilities likely exist in the following components :

 - InnoDB

  - Server Optimizer

  - Server Replication

The version of MySQL installed on the remote host is earlier than 5.6.12. Therefore, affected by vulnerabilities in the following components :

 - Audit Log

  - Data Manipulation Language

  - Full Text Search

  - GIS

  - InnoDB

  - MemCached

  - Server Optimizer

  - Server Privileges

  - Server Replication

  - XA Transactions

  - 'Server Options' sub component (for MySQL versions earlier than and up to 5.5.30, as well as 5.6.10)

  - The 'Prepared Statements' sub component (for MySQL versions earlier than and up to 5.5.30, as well as 5.6.10)

The version of MySQL installed on the remote host is 5.6.x older than 5.6.12.  As such, it is reportedly affected by vulnerabilities in the following components :

  - Audit Log
  - Data Manipulation Language
  - Full Text Search
  - GIS
  - InnoDB
  - Locking
  - MemCached
  - Server Optimizer
  - Server Privileges
  - Server Replication
  - XA Transactions

ID	Name	Product	Family	Type	Severity
77548	GLSA-201409-04 : MySQL: Multiple vulnerabilities	Nessus	Gentoo Local Security Checks	Local	high
8029	Oracle MySQL 5.x < 5.6.13 Multiple Vulnerabilities	Nessus Network Monitor	Database		medium
6934	Oracle MySQL 5.6.x < 5.6.12 Multiple Vulnerabilities	Nessus Network Monitor	Database		medium
68939	MySQL 5.6.x < 5.6.12 Multiple Vulnerabilities	Nessus	Databases	Remote	medium

Detections

Analytics

CVE-2013-5770

medium

Tenable Plugins

high

medium

medium

medium