Unspecified vulnerability in Oracle MySQL Server 5.6.15 and earlier allows remote authenticated users to affect confidentiality, integrity, and availability via unknown vectors related to InnoDB.

MySQL was updated to version 5.5.37 to address various security issues.

More information is available at http://www.oracle.com/technetwork/topics/security/cpujan2014-1972949.h tml#AppendixMSQL and http://www.oracle.com/technetwork/topics/security/cpuapr2014-1972952.h tml#AppendixMSQL .

The version of MySQL installed on the remote host is older than 5.5.36 / 5.6.16, and is thus unpatched for vulnerabilities within the following components:

  - InnoDB
  - RBR
  - Client
  - DML
  - InnoDB
  - MyISAM
  - Optimizer
  - Partition
  - XML
  - Performance Schema
  - Privileges
  - Replication
  - Federated
  - Options 

The version of MySQL installed on the remote host is version 5.6.x prior to 5.6.16. It is, therefore, affected by vulnerabilities in the following components :

  - DML
  - ENFED
  - Federated
  - MyISAM
  - Optimizer
  - Partition
  - Privileges
  - Replication
  - XML

ID	Name	Product	Family	Type	Severity
74373	SuSE 11.3 Security Update : MySQL (SAT Patch Number 9303)	Nessus	SuSE Local Security Checks	Local	critical
8211	Oracle MySQL 5.5.x <= 5.5.35 / 5.6.x <= 5.6.15 Multiple Vulnerabilities	Nessus Network Monitor	Database		medium
73573	MySQL 5.6.x < 5.6.16 Multiple Vulnerabilities	Nessus	Databases	Remote	medium

Detections

Analytics

CVE-2014-2444

critical

Tenable Plugins

critical

medium

medium