Track vulnerabilities like this one. Sign up free to get alerted when software you use is affected.
4.0

CVE-2013-5881: Oracle MySQL ≤5.6.14 may be disrupted by authenticated users

CVE-2013-5881 · published 12 years ago
Summary

Versions of Oracle MySQL up to 5.6.14 let a remote user who has a valid login cause the database service to stop responding. This can interrupt applications that rely on the database and impact business operations. Upgrade to a newer MySQL release or apply any patches Oracle provides to resolve the issue.

What to do

The CVE record does not list a fixed version. Check the vendor's site or the advisory links below - a fix may already be released.

Affected software
VendorProductAffected versions
oracle mysql <= 5.6.14
5.6.0
5.6.1
5.6.2
5.6.3
5.6.4
5.6.5
5.6.6
5.6.7
5.6.8
5.6.9
5.6.10
3 more version ranges
cpe:2.3:a:oracle:mysql:*:*:*:*:*:*:*:*
Original advisory text
Unspecified vulnerability in the MySQL Server component in Oracle MySQL 5.6.14 and earlier allows remote authenticated users to affect availability via unknown vectors related to InnoDB, a differen...
Unspecified vulnerability in the MySQL Server component in Oracle MySQL 5.6.14 and earlier allows remote authenticated users to affect availability via unknown vectors related to InnoDB, a different vulnerability than CVE-2014-0431.
Fix within
Internet-facing 60 days
Internal At next upgrade
  • Not known to be exploited
  • Needs hands-on effort to exploit (estimated)
  • Gives an attacker partial control (estimated)
Severity
4.0 Medium
Exploitation
3% chance of attack within 30 days
Timeline
Published15 Jan 2014
Updated30 Oct 2026
First seen29 Sep 2026
Sources
CVE-2013-5881 · NVD
Track software like this
Free during beta