PT-2014-7251 · Oracle+2 · Mysql Server+2

Published 2014-08-11 · Updated 2022-07-13 · CVE-2014-6489

Positive Technologies (AI Summary)

CVSS v2.0

5.5

Medium

Base vector

AV:N/AC:L/Au:S/C:N/I:P/A:P

Name of the Vulnerable Software and Affected Versions Oracle MySQL Server versions 5.6.19 and earlier

Description The issue allows remote authenticated users to affect integrity and availability via vectors related to SERVER:SP. This means that authenticated users can potentially exploit this issue to impact the database's integrity and availability.

Recommendations For Oracle MySQL Server versions 5.6.19 and earlier, at the moment, there is no information about a newer version that contains a fix for this vulnerability.

Related Identifiers

CVE-2014-6489

SUSE-SU-2015:0743-1

Affected Products

Mariadb Server

Mysql Server

Suse

References · 65

• https://nvd.nist.gov/vuln/detail/CVE-2014-6489 · Security Note
• https://cve.org/CVERecord?id=CVE-2014-6489 · Security Note
• http://oracle.com/technetwork/topics/security/cpuoct2014-1972960.html · Vendor Advisory
• http://lists.opensuse.org/opensuse-security-announce/2015-04/msg00016.html · Vendor Advisory
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-6489 · Security Note
• https://osv.dev/vulnerability/SUSE-SU-2015:0743-1 · Vendor Advisory
• https://osv.dev/vulnerability/UBUNTU-CVE-2014-6489 · Vendor Advisory
• https://ubuntu.com/security/CVE-2014-6489 · Vendor Advisory
• https://suse.com/security/cve/CVE-2014-6500 · Note
• https://suse.com/security/cve/CVE-2014-4207 · Note
• https://suse.com/security/cve/CVE-2015-0411 · Note
• https://suse.com/security/cve/CVE-2014-6494 · Note
• https://suse.com/security/cve/CVE-2014-0221 · Note
• https://suse.com/security/cve/CVE-2014-4287 · Note
• https://suse.com/security/cve/CVE-2014-6478 · Note