CVE-2014-0001

Buffer overflow in client/mysql.cc in Oracle MySQL and MariaDB before 5.5.35 allows remote database servers to cause a denial of service (crash) and possibly execute arbitrary code via a long server version string.

• CWE-119

• http://bazaar.launchpad.net/~maria-captains/maria/5.5/revision/2502.565.64Not Applicable
• http://osvdb.org/102713Broken Link
• http://rhn.redhat.com/errata/RHSA-2014-0164.htmlThird Party Advisory
• http://rhn.redhat.com/errata/RHSA-2014-0173.htmlThird Party Advisory
• http://rhn.redhat.com/errata/RHSA-2014-0186.htmlThird Party Advisory
• http://rhn.redhat.com/errata/RHSA-2014-0189.htmlThird Party Advisory
• http://secunia.com/advisories/52161
• http://security.gentoo.org/glsa/glsa-201409-04.xmlPatch, Third Party Advisory, VDB Entry
• http://www.mandriva.com/security/advisories?name=MDVSA-2014:029Broken Link
• http://www.osvdb.org/102714Broken Link
• http://www.securityfocus.com/bid/65298Third Party Advisory, VDB Entry
• http://www.securitytracker.com/id/1029708
• https://bugzilla.redhat.com/show_bug.cgi?id=1054592Issue Tracking, Patch, Third Party Advisory
• https://exchange.xforce.ibmcloud.com/vulnerabilities/90901
• https://mariadb.com/kb/en/mariadb-5535-changelog/Patch, Vendor Advisory
• http://bazaar.launchpad.net/~maria-captains/maria/5.5/revision/2502.565.64Not Applicable
• http://osvdb.org/102713Broken Link
• http://rhn.redhat.com/errata/RHSA-2014-0164.htmlThird Party Advisory
• http://rhn.redhat.com/errata/RHSA-2014-0173.htmlThird Party Advisory
• http://rhn.redhat.com/errata/RHSA-2014-0186.htmlThird Party Advisory
• http://rhn.redhat.com/errata/RHSA-2014-0189.htmlThird Party Advisory
• http://secunia.com/advisories/52161
• http://security.gentoo.org/glsa/glsa-201409-04.xmlPatch, Third Party Advisory, VDB Entry
• http://www.mandriva.com/security/advisories?name=MDVSA-2014:029Broken Link
• http://www.osvdb.org/102714Broken Link
• http://www.securityfocus.com/bid/65298Third Party Advisory, VDB Entry
• http://www.securitytracker.com/id/1029708
• https://bugzilla.redhat.com/show_bug.cgi?id=1054592Issue Tracking, Patch, Third Party Advisory
• https://exchange.xforce.ibmcloud.com/vulnerabilities/90901
• https://mariadb.com/kb/en/mariadb-5535-changelog/Patch, Vendor Advisory

Published

Jan 31, 2014

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2014-0002The XSLT component in Apache Camel before 2.11.4 and 2.12.x …
• CVE-2014-0003The XSLT component in Apache Camel 2.11.x before 2.11.4, 2.1…
• CVE-2014-0004Stack-based buffer overflow in udisks before 1.0.5 and 2.x b…
• CVE-2014-0005PicketBox and JBossSX, as used in Red Hat JBoss Enterprise A…
• CVE-2014-0006The TempURL middleware in OpenStack Object Storage (Swift) 1…
• CVE-2014-0007The Smart-Proxy in Foreman before 1.4.5 and 1.5.x before 1.5…