Input validation error in Oracle Solaris - CVE-2014-4274
Published: October 15, 2014 / Updated: August 10, 2020
Vulnerability identifier: #VU41214
CSH Severity: Low
CVSS v4: 4.6 [CVSS:4.0/AV:L/AC:L/AT:N/PR:H/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N]
CVE-ID: CVE-2014-4274
CWE-ID: CWE-20
Exploitation vector: Local access
Exploit availability:
No public exploit available
Vulnerability details
The vulnerability allows a local #AU# to read and manipulate data.
Unspecified vulnerability in Oracle MySQL Server 5.5.38 and earlier and 5.6.19 and earlier allows local users to affect confidentiality, integrity, and availability via vectors related to SERVER:MyISAM.
Affected software
Oracle Solaris
How to mitigate CVE-2014-4274
Install update from vendor's website.