CVE-2014-6495: Medium severity mysql vulnerability
Published Oct 15, 2014
·Updated
Unspecified vulnerability in Oracle MySQL Server 5.5.38 and earlier, and 5.6.19 and earlier, allows remote attackers to affect availability via vectors related to SERVER:SSL:yaSSL.
Affected Software
11 affected componentsFixes available
debian/wolfssl
4.6.0+p1-0+deb11u25.5.4-2+deb12u15.7.0-0.3
Oracle MySQL>=5.5.0<=5.5.38
Oracle MySQL>=5.6.0<=5.6.19
Oracle Solaris=11.3
Juniper Junos Space<=15.1
MariaDB MariaDB>=5.5.0<5.5.39
MariaDB MariaDB>=10.0.0<10.0.13
SUSE Linux Enterprise Desktop=12
SUSE Linux Enterprise Server=12
SUSE Linux Enterprise Software Development Kit=12
SUSE Linux Enterprise Workstation Extension=12
Remediation
Event History
Oct 15, 2014
CVE Published
via MITRE·10:03 PM
Data Sourced
via MITRE·10:03 PM
Description
Frequently Asked Questions
1
What is the severity of CVE-2014-6495?
CVE-2014-6495 is classified as a vulnerability that affects the availability of Oracle MySQL Server.
2
How do I fix CVE-2014-6495?
To address CVE-2014-6495, upgrade MySQL Server to versions later than 5.5.38 and 5.6.19.
3
Which software versions are affected by CVE-2014-6495?
CVE-2014-6495 affects Oracle MySQL Server versions 5.5.38 and earlier, and 5.6.19 and earlier.
4
Can CVE-2014-6495 be exploited remotely?
Yes, CVE-2014-6495 can be exploited by remote attackers affecting the availability of the database server.
5
What systems are impacted by CVE-2014-6495?
Systems running affected versions of Oracle MySQL and related software such as MariaDB and Solaris may be impacted by CVE-2014-6495.