CVE-2014-6559: Medium severity juniper networks junos space vulnerability

Q: What is the severity of CVE-2014-6559?

CVE-2014-6559 is classified as a medium-severity vulnerability due to its potential impact on confidentiality.

Q: How do I fix CVE-2014-6559?

To fix CVE-2014-6559, update Oracle MySQL Server to a version later than 5.5.39 or 5.6.20.

Q: Which software is affected by CVE-2014-6559?

CVE-2014-6559 affects Oracle MySQL Server versions 5.5.39 and earlier, and 5.6.20 and earlier, along with certain versions of MariaDB and Juniper's Junos Space.

Q: What are the potential consequences of exploiting CVE-2014-6559?

Exploiting CVE-2014-6559 can lead to unauthorized access to sensitive data, compromising the confidentiality of the affected systems.

Q: Is there a workaround for CVE-2014-6559?

There are no recommended workarounds for CVE-2014-6559; updating the software is the advised mitigation.

Published Oct 15, 2014

Updated

Unspecified vulnerability in Oracle MySQL Server 5.5.39 and earlier, and 5.6.20 and earlier, allows remote attackers to affect confidentiality via vectors related to C API SSL CERTIFICATE HANDLING.

Affected Software

10 affected components

Juniper Junos Space<=15.1

MariaDB MariaDB>=5.5.0<5.5.40

MariaDB MariaDB>=10.0.0<10.0.15

Oracle Solaris=11.3

Oracle MySQL>=5.5.0<=5.5.39

Oracle MySQL>=5.6.0<=5.6.20

SUSE Linux Enterprise Desktop=12

SUSE Linux Enterprise Server=12

SUSE Linux Enterprise Software Development Kit=12

SUSE Linux Enterprise Workstation Extension=12

Remediation

Patch Available

http://www.oracle.com/technetwork/topics/security/cpuoct2014-1972960.html

Event History

Oct 15, 2014

CVE Published

via MITRE·10:03 PM

Data Sourced

via MITRE·10:03 PM

Description

Frequently Asked Questions

What is the severity of CVE-2014-6559?

CVE-2014-6559 is classified as a medium-severity vulnerability due to its potential impact on confidentiality.

How do I fix CVE-2014-6559?