CVE-2014-6555

published 2014-10-15

CVE-2014-6555: Unspecified vulnerability in Oracle MySQL Server 5.5.39 and earlier and 5.6.20 and earlier allows remote authenticated users to affect confidentiality…

medium 6.5 CVSS 3.1

AV N AC L Au S C P I P A P

Unspecified vulnerability in Oracle MySQL Server 5.5.39 and earlier and 5.6.20 and earlier allows remote authenticated users to affect confidentiality, integrity, and availability via vectors related to SERVER:DML.

Affected

8 ranges

Vendor	Product	Version range	Fixed in
mariadb	mariadb	>= 10.0.0 < 10.0.15	10.0.15
mariadb	mariadb	>= 5.5.0 < 5.5.40	5.5.40
oracle	mysql	5.5.0 – 5.5.39	—
oracle	mysql	5.6.0 – 5.6.20	—
suse	linux_enterprise_desktop	—	—
suse	linux_enterprise_server	—	—
suse	linux_enterprise_software_development_kit	—	—
suse	linux_enterprise_workstation_extension	—	—

CVSS provenance

nvd 6.5 MEDIUM AV:N/AC:L/Au:S/C:P/I:P/A:P

osv 6.5 MEDIUM