CVE-2014-6484 — MEDIUM (4.0)

Q: What is CVE-2014-6484?

CVE-2014-6484 is a vulnerability with a CVSS score of 4.0 (MEDIUM). Unspecified vulnerability in Oracle MySQL Server 5.5.38 and earlier, and 5.6.19 and earlier, allows remote authenticated users to affect availability via vectors related to SERVER:DML.

Q: How severe is CVE-2014-6484?

CVE-2014-6484 has been rated MEDIUM with a CVSS base score of 4.0/10. Review the CVSS metrics above for detailed severity breakdown.

Q: Is there a patch for CVE-2014-6484?

Check the references section above for vendor advisories and patch information. Affected products include: Oracle Mysql, Suse Linux Enterprise Desktop, Suse Linux Enterprise Server, Suse Linux Enterprise Software Development Kit, Suse Linux Enterprise Workstation Extension.

Vulnerability Description

Unspecified vulnerability in Oracle MySQL Server 5.5.38 and earlier, and 5.6.19 and earlier, allows remote authenticated users to affect availability via vectors related to SERVER:DML.

CVSS Score

4.0

MEDIUM

AV:N/AC:L/Au:S/C:N/I:N/A:P

Confidentiality

NONE

Integrity

NONE

Availability

PARTIAL

Affected Products

Vendor	Product	Versions
Oracle	Mysql	>= 5.5.0, <= 5.5.38
Suse	Linux Enterprise Desktop	12
Suse	Linux Enterprise Server	12
Suse	Linux Enterprise Software Development Kit	12
Suse	Linux Enterprise Workstation Extension	12
Mariadb	Mariadb	>= 5.5.0, < 5.5.39

References

http://lists.opensuse.org/opensuse-security-announce/2015-04/msg00016.htmlMailing ListThird Party Advisory
http://www.oracle.com/technetwork/topics/security/bulletinoct2015-2511968.htmlVendor Advisory
http://www.oracle.com/technetwork/topics/security/cpuoct2014-1972960.htmlPatchVendor Advisory
http://www.securityfocus.com/bid/70455Third Party AdvisoryVDB Entry
http://lists.opensuse.org/opensuse-security-announce/2015-04/msg00016.htmlMailing ListThird Party Advisory
http://www.oracle.com/technetwork/topics/security/bulletinoct2015-2511968.htmlVendor Advisory
http://www.oracle.com/technetwork/topics/security/cpuoct2014-1972960.htmlPatchVendor Advisory
http://www.securityfocus.com/bid/70455Third Party AdvisoryVDB Entry

FAQ

What is CVE-2014-6484?

CVE-2014-6484 is a vulnerability with a CVSS score of 4.0 (MEDIUM). Unspecified vulnerability in Oracle MySQL Server 5.5.38 and earlier, and 5.6.19 and earlier, allows remote authenticated users to affect availability via vectors related to SERVER:DML.

How severe is CVE-2014-6484?

CVE-2014-6484 has been rated MEDIUM with a CVSS base score of 4.0/10. Review the CVSS metrics above for detailed severity breakdown.

Is there a patch for CVE-2014-6484?

Check the references section above for vendor advisories and patch information. Affected products include: Oracle Mysql, Suse Linux Enterprise Desktop, Suse Linux Enterprise Server, Suse Linux Enterprise Software Development Kit, Suse Linux Enterprise Workstation Extension.