Unspecified vulnerability in the MySQL Server component in Oracle MySQL 5.6.12 and earlier allows remote authenticated users to affect availability via unknown vectors related to Optimizer.

The remote host is affected by the vulnerability described in GLSA-201409-04 (MySQL: Multiple vulnerabilities)

    Multiple vulnerabilities have been discovered in MySQL. Please review       the CVE identifiers referenced below for details.
  Impact :

    A local attacker could possibly gain escalated privileges. A remote       attacker could send a specially crafted SQL query, possibly resulting in       a Denial of Service condition. A remote attacker could entice a user to       connect to specially crafted MySQL server, possibly resulting in       execution of arbitrary code with the privileges of the process.
  Workaround :

    There is no known workaround at this time.

The version of MySQL installed on the remote host is 5.6.x older than 5.6.13.  As such, it is reportedly affected by vulnerabilities in the following components :

  - InnoDB
  - Server Optimizer
  - Server Replication

The version of MySQL installed on the remote host is earlier than 5.6.13. Therefore, vulnerabilities likely exist in the following components :

 - InnoDB

  - Server Optimizer

  - Server Replication

ID	Name	Product	Family	Severity
77548	GLSA-201409-04 : MySQL: Multiple vulnerabilities	Nessus	Gentoo Local Security Checks	high
70463	MySQL 5.6.x < 5.6.13 Multiple Vulnerabilities	Nessus	Databases	medium
8029	Oracle MySQL 5.x < 5.6.13 Multiple Vulnerabilities	Nessus Network Monitor	Database	medium

Detections

Analytics

CVE-2013-5767

high

Tenable Plugins

high

medium

medium