CVE-2014-6497

Unspecified vulnerability in Oracle Sun Solaris 11 allows local users to affect availability via...

4.9 Medium

Unspecified vulnerability in Oracle Sun Solaris 11 allows local users to affect availability via unknown vectors related to Kernel.

Exploit likelihood

0.39%Down 0.6 points since Feb 4, 2022

What each source reports

NVD Score used 4.9

Unspecified vulnerability in Oracle Sun Solaris 11 allows local users to affect availability via unknown vectors related to Kernel.

Record: CVE-2014-6497
CVSS 2.0: 4.9 MediumAV:L/AC:L/Au:N/C:N/I:N/A:C
Updated: 2026-11-02

CVE List No score

Unspecified vulnerability in Oracle Sun Solaris 11 allows local users to affect availability via unknown vectors related to Kernel.

Record: CVE-2014-6497
Updated: 2026-11-02

EUVDEUVD-2014-6376 No score

Unspecified vulnerability in Oracle Sun Solaris 11 allows local users to affect availability via unknown vectors related to Kernel.

Record: EUVD-2014-6376
Updated: 2026-11-03

GitHub AdvisoriesGHSA-4w43-h2cj-3qvc No score

Unspecified vulnerability in Oracle Sun Solaris 11 allows local users to affect availability via...

Unspecified vulnerability in Oracle Sun Solaris 11 allows local users to affect availability via unknown vectors related to Kernel.

Record: GHSA-4w43-h2cj-3qvc
Updated: 2026-11-02

OSVMGASA-2014-0487 No score

Updated clamav packages fix security vulnerabilities

Certain javascript files causes ClamAV to segfault when scanned with the -a (list archived files) (CVE-2013-6497).

A heap buffer overflow was reported in ClamAV when scanning a specially crafted y0da Crypter obfuscated PE file (CVE-2014-9050).

ClamAV has been updated to version 0.98.5 to address these and other issues.

Record: MGASA-2014-0487
Updated: 2026-11-02

Affected products

sun sunos

Affected packages

Affected packages
Package	Affected	Fixed
`clamav` Mageia:3 From an advisory covering 2 CVEs	before 0.98.5-1.mga3	0.98.5-1.mga3
`clamav` Mageia:4 From an advisory covering 2 CVEs	before 0.98.5-1.mga4	0.98.5-1.mga4

History

History
Recorded	Changed	Sources
Nov 6, 2026	affected, facts
Nov 3, 2026	aliases	EUVD
Nov 2, 2026	first indexed	CVE List, GitHub Advisories, NVD, OSV

Dates are when Every CVE recorded each change. Upstream dates may differ.

In short

CVE-2014-6497 is a medium vulnerability (CVSS 4.9) in Sun Sunos, published October 15, 2014. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 0.39%, the 32nd percentile. No source names a fixed version.

References

Show 6 moreShow less