Cloudanix VulnDB

CVE-2014-0001

None

CVSS

—

EPSS

6.4%

Published

Jan 31, 2014

CISA due date

—

Cloudanix analysis

Schedule a fix SSVC: Track

A flaw in database client software lets a malicious server crash the connecting program or take control of the machine when it sends an unusually long identification message.

Exploitation
Remote Unauthenticated
Attacker needs
None
Complexity
Low
Impact
Remote Code Execution
Component
Application
Class
Memory Corruption
Remediation
Upgrade
Effort
Medium
Patch risk
Low

What it actually does

Buffer overflow in client/mysql.cc triggered by a remote database server sending an excessively long version string during connection, enabling denial of service via crash or potential arbitrary code execution.

Why it matters to the business

Systems relying on the affected MySQL client component risk service disruption or full compromise when connecting to untrusted database servers; the issue affects a widely used package in legacy Ubuntu deployments with high downstream prevalence.

How an attack unfolds

An attacker configures a malicious database server that responds to client connection requests with a crafted, overly long server version string; when a vulnerable client connects, the buffer overflow occurs in mysql.cc, allowing crash or code execution on the client host.

How to fix it

Upgrade virtualbox on Ubuntu 14.04 LTS to version 4.3.34-dfsg-1+deb8u1ubuntu1.14.04.1 or later; apply equivalent updates for any bundled MySQL/MariaDB client components before 5.5.35.

How to confirm the fix worked

Verify installed package versions match or exceed the listed fixed releases; test connectivity against a server advertising a long version string to confirm absence of crash.

Typical attack path

  1. Attacker deploys a rogue database server listening for connections
  2. Victim client initiates connection to the malicious server
  3. Server responds with a long version string exceeding buffer limits
  4. Overflow corrupts memory leading to crash or attacker-controlled code path

How to detect it

Review application and system logs for unexpected MySQL client crashes or segmentation faults around connection attempts; inspect network traffic for database handshake responses containing abnormally long version strings.

What your security team should do

  • Apply the specified virtualbox update across all Ubuntu 14.04 LTS systems immediately
  • Audit and restrict client connections to only trusted database servers
  • Monitor for any remaining legacy deployments still running pre-5.5.35 MySQL clients

The record

Buffer overflow in client/mysql.cc in Oracle MySQL and MariaDB before 5.5.35 allows remote database servers to cause a denial of service (crash) and possibly execute arbitrary code via a long server version string.

Affected packages

Ecosystem Package Introduced Fixed
Debian:6.0 mysql-5.1 0 5.1.73-1+deb6u1
Debian:7 mysql-5.5 0 5.5.37-0+wheezy1
Red Hat:enterprise_linux:5::client mysql55-mysql 0 0:5.5.36-2.el5
Red Hat:enterprise_linux:5::client mysql55-mysql-bench 0 0:5.5.36-2.el5
Red Hat:enterprise_linux:5::client mysql55-mysql-debuginfo 0 0:5.5.36-2.el5
Red Hat:enterprise_linux:5::client mysql55-mysql-devel 0 0:5.5.36-2.el5
Red Hat:enterprise_linux:5::client mysql55-mysql-libs 0 0:5.5.36-2.el5
Red Hat:enterprise_linux:5::client mysql55-mysql-server 0 0:5.5.36-2.el5
Red Hat:enterprise_linux:5::client mysql55-mysql-test 0 0:5.5.36-2.el5
Red Hat:enterprise_linux:5::client_workstation mysql55-mysql 0 0:5.5.36-2.el5
Red Hat:enterprise_linux:5::client_workstation mysql55-mysql-bench 0 0:5.5.36-2.el5
Red Hat:enterprise_linux:5::client_workstation mysql55-mysql-debuginfo 0 0:5.5.36-2.el5
Red Hat:enterprise_linux:5::client_workstation mysql55-mysql-devel 0 0:5.5.36-2.el5
Red Hat:enterprise_linux:5::client_workstation mysql55-mysql-libs 0 0:5.5.36-2.el5
Red Hat:enterprise_linux:5::client_workstation mysql55-mysql-server 0 0:5.5.36-2.el5
Red Hat:enterprise_linux:5::client_workstation mysql55-mysql-test 0 0:5.5.36-2.el5
Red Hat:enterprise_linux:5::server mysql55-mysql 0 0:5.5.36-2.el5
Red Hat:enterprise_linux:5::server mysql55-mysql-bench 0 0:5.5.36-2.el5
Red Hat:enterprise_linux:5::server mysql55-mysql-debuginfo 0 0:5.5.36-2.el5
Red Hat:enterprise_linux:5::server mysql55-mysql-devel 0 0:5.5.36-2.el5
Red Hat:enterprise_linux:5::server mysql55-mysql-libs 0 0:5.5.36-2.el5
Red Hat:enterprise_linux:5::server mysql55-mysql-server 0 0:5.5.36-2.el5
Red Hat:enterprise_linux:5::server mysql55-mysql-test 0 0:5.5.36-2.el5
Red Hat:enterprise_linux:6::client mysql 0 0:5.1.73-3.el6_5
Red Hat:enterprise_linux:6::client mysql-bench 0 0:5.1.73-3.el6_5
Red Hat:enterprise_linux:6::client mysql-debuginfo 0 0:5.1.73-3.el6_5
Red Hat:enterprise_linux:6::client mysql-devel 0 0:5.1.73-3.el6_5
Red Hat:enterprise_linux:6::client mysql-embedded 0 0:5.1.73-3.el6_5
Red Hat:enterprise_linux:6::client mysql-embedded-devel 0 0:5.1.73-3.el6_5
Red Hat:enterprise_linux:6::client mysql-libs 0 0:5.1.73-3.el6_5
Red Hat:enterprise_linux:6::client mysql-server 0 0:5.1.73-3.el6_5
Red Hat:enterprise_linux:6::client mysql-test 0 0:5.1.73-3.el6_5
Red Hat:enterprise_linux:6::computenode mysql 0 0:5.1.73-3.el6_5
Red Hat:enterprise_linux:6::computenode mysql-bench 0 0:5.1.73-3.el6_5
Red Hat:enterprise_linux:6::computenode mysql-debuginfo 0 0:5.1.73-3.el6_5
Red Hat:enterprise_linux:6::computenode mysql-devel 0 0:5.1.73-3.el6_5
Red Hat:enterprise_linux:6::computenode mysql-embedded 0 0:5.1.73-3.el6_5
Red Hat:enterprise_linux:6::computenode mysql-embedded-devel 0 0:5.1.73-3.el6_5
Red Hat:enterprise_linux:6::computenode mysql-libs 0 0:5.1.73-3.el6_5
Red Hat:enterprise_linux:6::computenode mysql-server 0 0:5.1.73-3.el6_5
Red Hat:enterprise_linux:6::computenode mysql-test 0 0:5.1.73-3.el6_5
Red Hat:enterprise_linux:6::server mysql 0 0:5.1.73-3.el6_5
Red Hat:enterprise_linux:6::server mysql-bench 0 0:5.1.73-3.el6_5
Red Hat:enterprise_linux:6::server mysql-debuginfo 0 0:5.1.73-3.el6_5
Red Hat:enterprise_linux:6::server mysql-devel 0 0:5.1.73-3.el6_5
Red Hat:enterprise_linux:6::server mysql-embedded 0 0:5.1.73-3.el6_5
Red Hat:enterprise_linux:6::server mysql-embedded-devel 0 0:5.1.73-3.el6_5
Red Hat:enterprise_linux:6::server mysql-libs 0 0:5.1.73-3.el6_5
Red Hat:enterprise_linux:6::server mysql-server 0 0:5.1.73-3.el6_5
Red Hat:enterprise_linux:6::server mysql-test 0 0:5.1.73-3.el6_5
Red Hat:enterprise_linux:6::workstation mysql 0 0:5.1.73-3.el6_5
Red Hat:enterprise_linux:6::workstation mysql-bench 0 0:5.1.73-3.el6_5
Red Hat:enterprise_linux:6::workstation mysql-debuginfo 0 0:5.1.73-3.el6_5
Red Hat:enterprise_linux:6::workstation mysql-devel 0 0:5.1.73-3.el6_5
Red Hat:enterprise_linux:6::workstation mysql-embedded 0 0:5.1.73-3.el6_5
Red Hat:enterprise_linux:6::workstation mysql-embedded-devel 0 0:5.1.73-3.el6_5
Red Hat:enterprise_linux:6::workstation mysql-libs 0 0:5.1.73-3.el6_5
Red Hat:enterprise_linux:6::workstation mysql-server 0 0:5.1.73-3.el6_5
Red Hat:enterprise_linux:6::workstation mysql-test 0 0:5.1.73-3.el6_5
Red Hat:rhel_software_collections:1::el6 mariadb55-mariadb 0 0:5.5.35-1.1.el6
Red Hat:rhel_software_collections:1::el6 mariadb55-mariadb-bench 0 0:5.5.35-1.1.el6
Red Hat:rhel_software_collections:1::el6 mariadb55-mariadb-debuginfo 0 0:5.5.35-1.1.el6
Red Hat:rhel_software_collections:1::el6 mariadb55-mariadb-devel 0 0:5.5.35-1.1.el6
Red Hat:rhel_software_collections:1::el6 mariadb55-mariadb-libs 0 0:5.5.35-1.1.el6
Red Hat:rhel_software_collections:1::el6 mariadb55-mariadb-server 0 0:5.5.35-1.1.el6
Red Hat:rhel_software_collections:1::el6 mariadb55-mariadb-test 0 0:5.5.35-1.1.el6
Red Hat:rhel_software_collections:1::el6 mysql55-mysql 0 0:5.5.36-1.1.el6
Red Hat:rhel_software_collections:1::el6 mysql55-mysql-bench 0 0:5.5.36-1.1.el6
Red Hat:rhel_software_collections:1::el6 mysql55-mysql-debuginfo 0 0:5.5.36-1.1.el6
Red Hat:rhel_software_collections:1::el6 mysql55-mysql-devel 0 0:5.5.36-1.1.el6
Red Hat:rhel_software_collections:1::el6 mysql55-mysql-libs 0 0:5.5.36-1.1.el6
Red Hat:rhel_software_collections:1::el6 mysql55-mysql-server 0 0:5.5.36-1.1.el6
Red Hat:rhel_software_collections:1::el6 mysql55-mysql-test 0 0:5.5.36-1.1.el6
Ubuntu:14.04:LTS mysql-5.5 0 5.5.37-0ubuntu0.14.04.1
Ubuntu:14.04:LTS mysql-5.6 0 5.6.17-0ubuntu0.14.04.1

Related vulnerabilities