CVE-2014-6555: Medium severity mariadb vulnerability

Q: What is the severity of CVE-2014-6555?

CVE-2014-6555 is considered to have a significant impact on confidentiality, integrity, and availability within affected MySQL and MariaDB versions.

Q: How do I fix CVE-2014-6555?

To mitigate CVE-2014-6555, upgrade to MySQL version 5.5.40 or later and 5.6.21 or later or appropriate MariaDB versions.

Q: Which versions of MySQL are affected by CVE-2014-6555?

CVE-2014-6555 affects MySQL versions 5.5.39 and earlier, as well as 5.6.20 and earlier.

Q: Are MariaDB versions impacted by CVE-2014-6555?

Yes, MariaDB versions from 5.5.0 up to 5.5.39 and from 10.0.0 to 10.0.15 are affected by CVE-2014-6555.

Q: What are the implications of CVE-2014-6555?

Exploitation of CVE-2014-6555 can lead to unauthorized access that jeopardizes the confidentiality, integrity, and availability of the database server.

Published Oct 15, 2014

Updated

Unspecified vulnerability in Oracle MySQL Server 5.5.39 and earlier and 5.6.20 and earlier allows remote authenticated users to affect confidentiality, integrity, and availability via vectors related to SERVER:DML.

Affected Software

8 affected components

MariaDB MariaDB>=5.5.0<5.5.40

MariaDB MariaDB>=10.0.0<10.0.15

Oracle MySQL>=5.5.0<=5.5.39

Oracle MySQL>=5.6.0<=5.6.20

SUSE Linux Enterprise Desktop=12

SUSE Linux Enterprise Server=12

SUSE Linux Enterprise Software Development Kit=12

SUSE Linux Enterprise Workstation Extension=12

Remediation

Patch Available

http://www.oracle.com/technetwork/topics/security/cpuoct2014-1972960.html

Event History

Oct 15, 2014

CVE Published

via MITRE·10:03 PM

Data Sourced

via MITRE·10:03 PM

Description

Frequently Asked Questions

What is the severity of CVE-2014-6555?

CVE-2014-6555 is considered to have a significant impact on confidentiality, integrity, and availability within affected MySQL and MariaDB versions.

How do I fix CVE-2014-6555?