Detections
Analytics
Oracle MySQL 5.6.x < 5.6.20 Multiple Vulnerabilities
medium Nessus Network Monitor Plugin ID 8917
Synopsis
The remote database server is missing a critical Oracle MySQL patch update.Description
The version of MySQL installed on the remote host is version 5.6.x prior to 5.6.20. It is, therefore, affected by errors in the following components :- SERVER:SP (CVE-2014-6489)
- SERVER INNODB FULLTEXT SEARCH (CVE-2014-6564)
- SERVER:MEMCACHED (CVE-2014-6474)
Solution
Upgrade to MySQL 5.6.20 or later.See Also
http://www.oracle.com/technetwork/topics/security/cpuoct2014-1972960.html
Plugin Details
Severity: Medium
ID: 8917
Family: Database
Published: 2/24/2015
Updated: 3/6/2019
Risk Information
VPR
Risk Factor: Low
Score: 3.6
CVSS v2
Risk Factor: Medium
Base Score: 5.5
Temporal Score: 4.8
Vector: CVSS2#AV:N/AC:L/Au:S/C:N/I:P/A:P
CVSS v3
Risk Factor: Medium
Base Score: 5.4
Temporal Score: 5.2
Vector: CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:L
Temporal Vector: CVSS:3.0/E:X/RL:O/RC:C
Vulnerability Information
CPE: cpe:/a:oracle:mysql
Patch Publication Date: 10/28/2014
Vulnerability Publication Date: 10/28/2014