CVE-2014-6494: Medium severity mariadb vulnerability
Published Oct 15, 2014
·Updated
Unspecified vulnerability in Oracle MySQL Server 5.5.39 and earlier, and 5.6.20 and earlier, allows remote attackers to affect availability via vectors related to CLIENT:SSL:yaSSL, a different vulnerability than CVE-2014-6496.
Affected Software
11 affected componentsFixes available
debian/wolfssl
4.6.0+p1-0+deb11u25.5.4-2+deb12u15.7.0-0.3
MariaDB MariaDB>=5.5.0<5.5.40
MariaDB MariaDB>=10.0.0<10.0.15
Oracle Solaris=11.3
Juniper Junos Space<=15.1
Oracle MySQL>=5.5.0<=5.5.39
Oracle MySQL>=5.6.0<=5.6.20
SUSE Linux Enterprise Desktop=12
SUSE Linux Enterprise Server=12
SUSE Linux Enterprise Software Development Kit=12
SUSE Linux Enterprise Workstation Extension=12
Remediation
Event History
Oct 15, 2014
CVE Published
via MITRE·10:03 PM
Data Sourced
via MITRE·10:03 PM
Description
Frequently Asked Questions
1
What is the severity of CVE-2014-6494?
CVE-2014-6494 is classified as a vulnerability that affects the availability of Oracle MySQL Server versions 5.5.39 and earlier, and 5.6.20 and earlier.
2
How do I fix CVE-2014-6494?
To fix CVE-2014-6494, update Oracle MySQL Server to a version later than 5.5.39 or 5.6.20.
3
Which software is affected by CVE-2014-6494?
CVE-2014-6494 affects Oracle MySQL Server, MariaDB, and other dependent software utilizing SSL yaSSL.
4
Can CVE-2014-6494 be exploited remotely?
Yes, CVE-2014-6494 allows remote attackers to affect the availability of the affected systems.
5
What versions of MySQL are vulnerable to CVE-2014-6494?
Vulnerable versions of MySQL include 5.5.39 and earlier, and 5.6.20 and earlier.