CVE-2014-6520: Medium severity mysql vulnerability
Published Oct 15, 2014
·Updated
Unspecified vulnerability in Oracle MySQL Server 5.5.38 and earlier allows remote authenticated users to affect availability via vectors related to SERVER:DDL.
Affected Software
7 affected components
Oracle MySQL>=5.5.0<=5.5.38
SUSE Linux Enterprise Desktop=12
SUSE Linux Enterprise Server=12
SUSE Linux Enterprise Software Development Kit=12
SUSE Linux Enterprise Workstation Extension=12
MariaDB MariaDB>=5.5.0<5.5.39
MariaDB MariaDB>=10.0.0<10.0.13
Remediation
Event History
Oct 15, 2014
CVE Published
via MITRE·10:03 PM
Data Sourced
via MITRE·10:03 PM
Description
Frequently Asked Questions
1
What is the severity of CVE-2014-6520?
CVE-2014-6520 has a medium severity rating as it allows remote authenticated users to impact the availability of Oracle MySQL Server.
2
How do I fix CVE-2014-6520?
To fix CVE-2014-6520, you should upgrade Oracle MySQL Server to version 5.5.39 or later.
3
Which versions of MySQL are affected by CVE-2014-6520?
CVE-2014-6520 affects Oracle MySQL Server versions 5.5.38 and earlier.
4
Are there other databases affected by CVE-2014-6520?
Yes, versions of MariaDB from 5.5.0 to 5.5.39 and 10.0.0 to 10.0.13 are also affected by CVE-2014-6520.
5
What type of vulnerability is CVE-2014-6520?
CVE-2014-6520 is an unspecified vulnerability related to server DDL operations in Oracle MySQL Server.