CVE-2014-0001 Memory corruption in n/a
A buffer overflow in the MySQL client allows remote servers to crash the client or execute arbitrary code via a long version string.
- Exploited in the wild
- Not known
- Login needed
- Not needed
- Attackable
- Over the internet
- Victim action needed
- Not needed
- Fix
- Available
What is CVE-2014-0001?
CVE-2014-0001 is a high-severity memory corruption vulnerability in Mariadb Mariadb, published on 31 Jan 2014. An attacker can exploit it over the internet without logging in, with no action from the victim.
Official description
Buffer overflow in client/mysql.cc in Oracle MySQL and MariaDB before 5.5.35 allows remote database servers to cause a denial of service (crash) and possibly execute arbitrary code via a long server version string.
Weakness: CWE-119
Which versions are affected by CVE-2014-0001?
It affects 6 products.
Products include Mariadb Mariadb, Oracle Mysql, Redhat Enterprise Linux, Redhat Enterprise Linux Desktop, Redhat Enterprise Linux Server, Redhat Enterprise Linux Workstation.
How do I fix CVE-2014-0001?
Upgrade to a fixed version.
Upgrade to the fixed version. Memory-safe languages, compiler hardening and fuzzing prevent most new cases. More about Memory corruption.
Is CVE-2014-0001 being exploited?
There is no known exploitation of CVE-2014-0001 in the wild and no public exploit code.
Other vulnerabilities in Mariadb Mariadb
- CVE-2026-49261 MariaDB server has unsafe parameter handling in `wsrep_notify_cmd`
- CVE-2026-85746 MariaDB: Out-of-bound buffer write on in `ST_AsText` of nested GeometryCollections
- CVE-2026-85748 MariaDB: Use-after-free with a large number of SYS_REFCURSOR's
- CVE-2026-92262 MariaDB: Numerous issues caused by historical #mysql50# tablename encoding bypass.
- CVE-2023-26785 Code injection in n/a
Sources
Also known as GHSA-7pq3-qq22-gpw3, UBUNTU-CVE-2014-0001.