CVE-2014-6507: Medium severity mariadb vulnerability
Published Oct 15, 2014
·Updated
Unspecified vulnerability in Oracle MySQL Server 5.5.39 and earlier, and 5.6.20 and earlier, allows remote authenticated users to affect confidentiality, integrity, and availability via vectors related to SERVER:DML.
Affected Software
9 affected components
MariaDB MariaDB>=5.5.0<5.5.40
MariaDB MariaDB>=10.0.0<10.0.15
Oracle Solaris=11.3
Oracle MySQL>=5.5.0<=5.5.39
Oracle MySQL>=5.6.0<=5.6.20
SUSE Linux Enterprise Desktop=12
SUSE Linux Enterprise Server=12
SUSE Linux Enterprise Software Development Kit=12
SUSE Linux Enterprise Workstation Extension=12
Remediation
Event History
Oct 15, 2014
CVE Published
via MITRE·10:03 PM
Data Sourced
via MITRE·10:03 PM
Description
Frequently Asked Questions
1
What is the severity of CVE-2014-6507?
CVE-2014-6507 has a medium severity rating due to potential impacts on confidentiality, integrity, and availability.
2
How do I fix CVE-2014-6507?
To fix CVE-2014-6507, upgrade Oracle MySQL Server to version 5.5.40 or later, or 5.6.21 or later.
3
Which versions of MySQL are affected by CVE-2014-6507?
CVE-2014-6507 affects Oracle MySQL Server versions 5.5.39 and earlier as well as 5.6.20 and earlier.
4
Are there any alternative databases affected by CVE-2014-6507?
Yes, MariaDB versions prior to 5.5.40 and those below 10.0.15 are also affected by CVE-2014-6507.
5
Can CVE-2014-6507 be exploited by unauthenticated users?
No, CVE-2014-6507 can only be exploited by remote authenticated users.