CVE-2014-6507

Published: Oct 15, 2014Modified: May 6, 2026

4.3

Vector

AV:N/AC:M/Au:N/C:N/I:N/A:P

Exploitability: 8.6 / Impact: 2.9

Source: NVD

Description

Unspecified vulnerability in Oracle MySQL Server 5.5.39 and earlier, and 5.6.20 and earlier, allows remote authenticated users to affect confidentiality, integrity, and availability via vectors related to SERVER:DML.

Affected (9)

Products: Mariadb: Mariadb · Oracle: Solaris, Mysql · Suse: Linux Enterprise Desktop, Linux Enterprise Server, Linux Enterprise Software Development Kit, Linux Enterprise Workstation Extension

1 product

2 products

4 products

Linux Enterprise Desktop

Linux Enterprise Server

Linux Enterprise Software Development Kit

Linux Enterprise Workstation Extension

Configuration A

2 vulnerable

Vulnerable Software	Affected Versions
Mariadb Mariadb	From 10.0.0 to 10.0.15
Mariadb Mariadb	From 5.5.0 to 5.5.40

Configuration B

1 vulnerable

Vulnerable Software	Affected Versions
Oracle Solaris	Version 11.3

Configuration C

2 vulnerable

Vulnerable Software	Affected Versions
Oracle Mysql	From 5.5.0 to 5.5.39
Oracle Mysql	From 5.6.0 to 5.6.20

Configuration D

4 vulnerable

Vulnerable Software	Affected Versions
Suse Linux Enterprise Desktop	Version 12
Suse Linux Enterprise Server	Version 12
Suse Linux Enterprise Software Development Kit	Version 12
Suse Linux Enterprise Workstation Extension	Version 12

References (16)

http://lists.opensuse.org/opensuse-security-announce/2015-04/msg00016.html

Source: secalert_us@oracle.com

Mailing ListThird Party Advisory

http://secunia.com/advisories/61579

Source: secalert_us@oracle.com

Not Applicable

http://secunia.com/advisories/62073

Source: secalert_us@oracle.com

Not Applicable

http://security.gentoo.org/glsa/glsa-201411-02.xml

Source: secalert_us@oracle.com

Third Party Advisory

http://www.oracle.com/technetwork/topics/security/bulletinapr2016-2952098.html

Source: secalert_us@oracle.com

Vendor Advisory

http://www.oracle.com/technetwork/topics/security/bulletinoct2015-2511968.html

Source: secalert_us@oracle.com

Vendor Advisory

http://www.oracle.com/technetwork/topics/security/cpuoct2014-1972960.html

Source: secalert_us@oracle.com

PatchVendor Advisory

http://www.securityfocus.com/bid/70550

Source: secalert_us@oracle.com

Third Party AdvisoryVDB Entry

http://lists.opensuse.org/opensuse-security-announce/2015-04/msg00016.html

Source: af854a3a-2127-422b-91ae-364da2661108

Mailing ListThird Party Advisory

http://secunia.com/advisories/61579

Source: af854a3a-2127-422b-91ae-364da2661108

Not Applicable

http://secunia.com/advisories/62073

Source: af854a3a-2127-422b-91ae-364da2661108

Not Applicable

http://security.gentoo.org/glsa/glsa-201411-02.xml

Source: af854a3a-2127-422b-91ae-364da2661108

Third Party Advisory

http://www.oracle.com/technetwork/topics/security/bulletinapr2016-2952098.html

Source: af854a3a-2127-422b-91ae-364da2661108

Vendor Advisory

http://www.oracle.com/technetwork/topics/security/bulletinoct2015-2511968.html

Source: af854a3a-2127-422b-91ae-364da2661108

Vendor Advisory

http://www.oracle.com/technetwork/topics/security/cpuoct2014-1972960.html

Source: af854a3a-2127-422b-91ae-364da2661108

PatchVendor Advisory

http://www.securityfocus.com/bid/70550

Source: af854a3a-2127-422b-91ae-364da2661108

Third Party AdvisoryVDB Entry

Timeline

No history available yet.