CVE-2014-6500

HIGH 7.5CVE-2014-6500 · Published 15/10/2014 · updated 17/06/2026

In short

CVE-2014-6500 is a HIGH (CVSS 7.5) vulnerability affecting junos space (juniper), mariadb (mariadb), mysql (oracle).
Chance of exploitation in the next 30 days (EPSS): 5.7%, higher than 93.0% of all vulnerabilities.
Fix: update to 10.0.15, 5.5.40 or later.

Package	Affected versions	Patched versions
junos space juniper	`≤ 15.1`	No fix yet
mariadb mariadb	`≥ 10.0.0, < 10.0.15≥ 5.5.0, < 5.5.40`	`10.0.155.5.40`
mysql oracle	`≥ 5.5.0, ≤ 5.5.39≥ 5.6.0, ≤ 5.6.20`	No fix yet

Description

Unspecified vulnerability in Oracle MySQL Server 5.5.39 and earlier, and 5.6.20 and earlier, allows remote attackers to affect confidentiality, integrity, and availability via vectors related to SERVER:SSL:yaSSL, a different vulnerability than CVE-2014-6491.

References

kb.juniper.net/InfoCenter/index · Third Party Advisory
lists.opensuse.org/opensuse-security-announce/2015-04/msg00016.html · Mailing List
secunia.com/advisories/61579 · Permissions Required
secunia.com/advisories/62073 · Permissions Required
security.gentoo.org/glsa/glsa-201411-02.xml · Third Party Advisory
oracle.com/technetwork/topics/security/bulletinapr2016-2952098.html · Vendor Advisory
oracle.com/technetwork/topics/security/bulletinoct2015-2511968.html · Vendor Advisory
oracle.com/technetwork/topics/security/cpuoct2014-1972960.html · Patch
securityfocus.com/bid/70478 · Third Party Advisory

More vulnerabilities in junos space

See all →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free

Package

Affected versions

Patched versions

junos space

juniper

≤ 15.1

No fix yet

mariadb

≥ 10.0.0, < 10.0.15≥ 5.5.0, < 5.5.40

10.0.155.5.40

mysql

oracle

≥ 5.5.0, ≤ 5.5.39≥ 5.6.0, ≤ 5.6.20

No fix yet

More vulnerabilities in junos space

See all →