CVE-2014-4260: Debian Linux

Medium severity, CVSS 5.5. EPSS: 3.5% chance of exploitation in the next 30 days.

Unspecified vulnerability in the MySQL Server component in Oracle MySQL 5.5.37 and earlier, and 5.6.17 and earlier, allows remote authenticated users to affect integrity and availability via vectors related to SRCHAR.

Affected products

• Debian Debian Linux: version 7.0 only
• MariaDB MariaDB: from 5.5.0, before 5.5.38 (fixed in 5.5.38); from 10.0.0, before 10.0.12 (fixed in 10.0.12)
• Oracle MySQL: from 5.5.0, up to and including 5.5.37; from 5.6.0, up to and including 5.6.17
• Oracle Solaris: version 11.3 only
• Suse Linux Enterprise Desktop: version 11 only; version 12 only
• Suse Linux Enterprise Server: version 11 only; version 12 only
• Suse Linux Enterprise Software Development Kit: version 11 only; version 12 only
• Suse Linux Enterprise Workstation Extension: version 12 only

Published 2014-07-17. Last modified 2026-06-17.