CVE-2014-6491: High severity mysql vulnerability

Q: What is the severity of CVE-2014-6491?

CVE-2014-6491 has a high severity level due to its potential impact on confidentiality, integrity, and availability.

Q: How do I fix CVE-2014-6491?

To mitigate CVE-2014-6491, update Oracle MySQL Server to the latest version beyond 5.5.39 or 5.6.20.

Q: What software versions are affected by CVE-2014-6491?

CVE-2014-6491 affects Oracle MySQL Server versions 5.5.39 and earlier, and 5.6.20 and earlier.

Q: Can CVE-2014-6491 be exploited remotely?

Yes, CVE-2014-6491 can be exploited remotely, allowing attackers to compromise the server's security.

Q: Is there any specific software besides MySQL affected by CVE-2014-6491?

Yes, certain versions of Juniper Networks Junos Space and MariaDB are also impacted by CVE-2014-6491.

Published Oct 15, 2014

Updated

Unspecified vulnerability in Oracle MySQL Server 5.5.39 and earlier and 5.6.20 and earlier allows remote attackers to affect confidentiality, integrity, and availability via vectors related to SERVER:SSL:yaSSL, a different vulnerability than CVE-2014-6500.

Affected Software

7 affected componentsFixes available

debian/wolfssl

4.6.0+p1-0+deb11u25.5.4-2+deb12u15.7.0-0.3

ORACLE MySQL>=5.5.0<=5.5.39

ORACLE MySQL>=5.6.0<=5.6.20

Juniper Junos Space<=15.1

MariaDB MariaDB>=5.5.0<5.5.40

MariaDB MariaDB>=10.0.0<10.0.15

Oracle Solaris=11.3

Remediation

Patch Available

http://www.oracle.com/technetwork/topics/security/cpuoct2014-1972960.html

Event History

Oct 15, 2014

CVE Published

via MITRE·10:03 PM

Data Sourced

via MITRE·10:03 PM

Description

Frequently Asked Questions

What is the severity of CVE-2014-6491?

CVE-2014-6491 has a high severity level due to its potential impact on confidentiality, integrity, and availability.

How do I fix CVE-2014-6491?