CVE-2014-6559

published 2014-10-15

CVE-2014-6559: Unspecified vulnerability in Oracle MySQL Server 5.5.39 and earlier, and 5.6.20 and earlier, allows remote attackers to affect confidentiality via vectors…

medium 4.3 CVSS 3.1

AV N AC M Au N C P I N A N

Unspecified vulnerability in Oracle MySQL Server 5.5.39 and earlier, and 5.6.20 and earlier, allows remote attackers to affect confidentiality via vectors related to C API SSL CERTIFICATE HANDLING.

Affected

10 ranges

Vendor	Product	Version range	Fixed in
juniper	junos_space	<= 15.1	—
mariadb	mariadb	>= 10.0.0 < 10.0.15	10.0.15
mariadb	mariadb	>= 5.5.0 < 5.5.40	5.5.40
oracle	mysql	5.5.0 – 5.5.39	—
oracle	mysql	5.6.0 – 5.6.20	—
oracle	solaris	—	—
suse	linux_enterprise_desktop	—	—
suse	linux_enterprise_server	—	—
suse	linux_enterprise_software_development_kit	—	—
suse	linux_enterprise_workstation_extension	—	—

CVSS provenance

nvd 4.3 MEDIUM AV:N/AC:M/Au:N/C:P/I:N/A:N

osv 4.3 MEDIUM