VulnerabilityModified

CVE-2013-0375

Unspecified vulnerability in the Server component in Oracle MySQL 5.1.66 and earlier, and 5.1.28 and earlier, allows remote authenticated users to affect confidentiality and integrity via unknown vectors related to Server Replication.

MEDIUM 5.4EPSS 1.92%

Does this matter?

Lower severity and a low EPSS score (1.92%). Track it; it rarely justifies an emergency change on its own.

Description

CVSS 3.1: 5.4 MEDIUMCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N
EPSS: 1.92% probability · 79th percentile
CISA KEV: Not listed
Affected: oracle/mysql · mariadb/mariadb · canonical/ubuntu linux · redhat/enterprise linux desktop · redhat/enterprise linux eus · redhat/enterprise linux server · redhat/enterprise linux workstation
Source: secalert_us@oracle.com

References

http://rhn.redhat.com/errata/RHSA-2013-0219.htmlThird Party Advisory
http://secunia.com/advisories/53372Not Applicable, Third Party Advisory
http://security.gentoo.org/glsa/glsa-201308-06.xmlThird Party Advisory
http://www.mandriva.com/security/advisories?name=MDVSA-2013:150Broken Link, Third Party Advisory
http://www.oracle.com/technetwork/topics/security/cpujan2013-1515902.htmlVendor Advisory
http://www.ubuntu.com/usn/USN-1703-1Third Party Advisory
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A17175Third Party Advisory
http://rhn.redhat.com/errata/RHSA-2013-0219.htmlThird Party Advisory
http://secunia.com/advisories/53372Not Applicable, Third Party Advisory
http://security.gentoo.org/glsa/glsa-201308-06.xmlThird Party Advisory
http://www.mandriva.com/security/advisories?name=MDVSA-2013:150Broken Link, Third Party Advisory
http://www.oracle.com/technetwork/topics/security/cpujan2013-1515902.htmlVendor Advisory
http://www.ubuntu.com/usn/USN-1703-1Third Party Advisory
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A17175Third Party Advisory

Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.