CVE-2014-6496: Medium severity juniper networks junos space vulnerability

Q: What is the severity of CVE-2014-6496?

CVE-2014-6496 is classified as a vulnerability that can potentially affect the availability of the Oracle MySQL Server.

Q: How do I fix CVE-2014-6496?

To mitigate CVE-2014-6496, updating to the latest supported version of Oracle MySQL Server or applying available patches is recommended.

Q: Which versions of Oracle MySQL are affected by CVE-2014-6496?

CVE-2014-6496 affects Oracle MySQL Server versions 5.5.39 and earlier, as well as 5.6.20 and earlier.

Q: What software can be impacted by CVE-2014-6496?

CVE-2014-6496 can impact Oracle MySQL, MariaDB, and various versions of Juniper Junos Space and Oracle Solaris.

Q: Can CVE-2014-6496 be exploited remotely?

Yes, CVE-2014-6496 allows remote attackers to affect the availability of the system through specific vectors.

Published Oct 15, 2014

Updated

Unspecified vulnerability in Oracle MySQL Server 5.5.39 and earlier, and 5.6.20 and earlier, allows remote attackers to affect availability via vectors related to CLIENT:SSL:yaSSL, a different vulnerability than CVE-2014-6494.

Affected Software

11 affected componentsFixes available

debian/wolfssl

4.6.0+p1-0+deb11u25.5.4-2+deb12u15.7.0-0.3

Juniper Junos Space<=15.1

Oracle Solaris=11.3

MariaDB MariaDB>=5.5.0<5.5.40

MariaDB MariaDB>=10.0.0<10.0.15

Oracle MySQL>=5.5.0<=5.5.39

Oracle MySQL>=5.6.0<=5.6.20

SUSE Linux Enterprise Desktop=12

SUSE Linux Enterprise Server=12

SUSE Linux Enterprise Software Development Kit=12

SUSE Linux Enterprise Workstation Extension=12

Remediation

Patch Available

http://www.oracle.com/technetwork/topics/security/cpuoct2014-1972960.html

Event History

Oct 15, 2014

CVE Published

via MITRE·10:03 PM

Data Sourced

via MITRE·10:03 PM

Description

Frequently Asked Questions

What is the severity of CVE-2014-6496?

CVE-2014-6496 is classified as a vulnerability that can potentially affect the availability of the Oracle MySQL Server.

How do I fix CVE-2014-6496?