CVE-2014-0001

CVE-2014-0001 describes a buffer overflow vulnerability in Oracle MySQL and MariaDB versions prior to 5.5.35, specifically within the client/mysql.cc component. This flaw allows a malicious database server to trigger a denial of service (crash) and potentially execute arbitrary code on a connecting client via an excessively long server version string. With a CVSS score of 7.5, it is considered highly severe due to its network-based attack vector and low attack complexity, potentially leading to full compromise of confidentiality, integrity, and availability. Despite its high FAUCET Risk Score of 88/100 and moderate EPSS, there is no evidence of active exploitation, public exploit code (Metasploit, Nuclei, ExploitDB), or significant community discussion or media coverage.