Unspecified vulnerability in Oracle MySQL Server 5.6.16 and earlier allows remote authenticated users to affect availability via unknown vectors related to InnoDB.

The version of MySQL installed on the remote host is version 5.6.x prior to 5.6.17. It is, therefore, potentially affected by vulnerabilities in the following components :

 - Client
 - InnoDB
 - Options
 - Performance Schema
 - RBR

The remote host is affected by the vulnerability described in GLSA-201409-04 (MySQL: Multiple vulnerabilities)

    Multiple vulnerabilities have been discovered in MySQL. Please review       the CVE identifiers referenced below for details.
  Impact :

    A local attacker could possibly gain escalated privileges. A remote       attacker could send a specially crafted SQL query, possibly resulting in       a Denial of Service condition. A remote attacker could entice a user to       connect to specially crafted MySQL server, possibly resulting in       execution of arbitrary code with the privileges of the process.
  Workaround :

    There is no known workaround at this time.

MySQL was updated to version 5.5.37 to address various security issues.

More information is available at http://www.oracle.com/technetwork/topics/security/cpujan2014-1972949.h tml#AppendixMSQL and http://www.oracle.com/technetwork/topics/security/cpuapr2014-1972952.h tml#AppendixMSQL .

The version of MySQL installed on the remote host is older than 5.5.36 / 5.6.16, and is thus unpatched for vulnerabilities within the following components:

  - InnoDB
  - RBR
  - Client
  - DML
  - InnoDB
  - MyISAM
  - Optimizer
  - Partition
  - XML
  - Performance Schema
  - Privileges
  - Replication
  - Federated
  - Options 

The version of MySQL installed on the remote host is older than 5.5.37 or 5.6.17, and is thus unpatched for vulnerabilities within the following components:

  - RBR
  - Client
  - Performance Schema
  - Options
  - InnoDB (5.6.16 only)

The version of MySQL installed on the remote host is version 5.6.x prior to 5.6.17. It is, therefore, potentially affected by vulnerabilities in the following components :

  - Client
  - InnoDB
  - Options
  - Performance Schema
  - RBR

ID	Name	Product	Family	Severity
700618	MySQL 5.6.x < 5.6.17 Multiple Vulnerabilities	Nessus Network Monitor	Database	medium
77548	GLSA-201409-04 : MySQL: Multiple vulnerabilities	Nessus	Gentoo Local Security Checks	high
74373	SuSE 11.3 Security Update : MySQL (SAT Patch Number 9303)	Nessus	SuSE Local Security Checks	critical
8211	Oracle MySQL 5.5.x <= 5.5.35 / 5.6.x <= 5.6.15 Multiple Vulnerabilities	Nessus Network Monitor	Database	medium
8212	Oracle MySQL 5.5.x <= 5.5.36 / 5.6.x <= 5.6.16 Multiple Vulnerabilities	Nessus Network Monitor	Database	medium
73574	MySQL 5.6.x < 5.6.17 Multiple Vulnerabilities	Nessus	Databases	medium

Detections

Analytics

CVE-2014-2435

critical

Tenable Plugins

medium

high

critical

medium

medium

medium