CVE-2014-6507

published 2014-10-15

CVE-2014-6507: Unspecified vulnerability in Oracle MySQL Server 5.5.39 and earlier, and 5.6.20 and earlier, allows remote authenticated users to affect confidentiality…

medium 4.3 CVSS 3.1

AV N AC M Au N C N I N A P

Unspecified vulnerability in Oracle MySQL Server 5.5.39 and earlier, and 5.6.20 and earlier, allows remote authenticated users to affect confidentiality, integrity, and availability via vectors related to SERVER:DML.

Affected

9 ranges

Vendor	Product	Version range	Fixed in
mariadb	mariadb	>= 10.0.0 < 10.0.15	10.0.15
mariadb	mariadb	>= 5.5.0 < 5.5.40	5.5.40
oracle	mysql	5.5.0 – 5.5.39	—
oracle	mysql	5.6.0 – 5.6.20	—
oracle	solaris	—	—
suse	linux_enterprise_desktop	—	—
suse	linux_enterprise_server	—	—
suse	linux_enterprise_software_development_kit	—	—
suse	linux_enterprise_workstation_extension	—	—

CVSS provenance

nvd 4.3 MEDIUM AV:N/AC:M/Au:N/C:N/I:N/A:P

osv 4.3 MEDIUM