CVE-2014-2484 Other in n/a
Remote authenticated users can compromise confidentiality, integrity, and availability of MySQL Server via unspecified SRFTS vectors.
- Exploited in the wild
- Not known
- Login needed
- Any signed-in user
- Attackable
- Over the internet
- Victim action needed
- Not needed
- Fix
- Available
What is CVE-2014-2484?
CVE-2014-2484 is a medium-severity vulnerability in Oracle Mysql, published on 17 Jul 2014. Any signed-in user can exploit it over the network, with no action from the victim.
Official description
Unspecified vulnerability in the MySQL Server component in Oracle MySQL 5.6.17 and earlier allows remote authenticated users to affect confidentiality, integrity, and availability via vectors related to SRFTS.
Which versions are affected by CVE-2014-2484?
It affects 3 products.
Products include Oracle Mysql, Suse Linux Enterprise Desktop, Suse Linux Enterprise Server.
How do I fix CVE-2014-2484?
Upgrade to a fixed version.
Is CVE-2014-2484 being exploited?
There is no known exploitation of CVE-2014-2484 in the wild and no public exploit code.
Other vulnerabilities in Oracle Mysql
Sources
Also known as GHSA-5g8c-9j8m-c3v5, UBUNTU-CVE-2014-2484.