Published: 03/12/2012 Updated: 29/08/2022

CVSS v2 Base Score: 4 | Impact Score: 2.9 | Exploitability Score: 8

VMScore: 405

Vector: AV:N/AC:L/Au:S/C:N/I:N/A:P

Oracle MySQL 5.1.67 and previous versions and 5.5.29 and previous versions, and MariaDB 5.5.28a and possibly other versions, allows remote authenticated users to cause a denial of service (mysqld crash) via a SELECT command with an UpdateXML command containing XML with a large number of unique, nested elements.

Vulnerable Product	Search on Vulmon	Subscribe to Product
oracle mysql
mariadb mariadb
redhat enterprise linux server aus 6.4
redhat enterprise linux desktop 6.0
redhat enterprise linux server 6.0
redhat enterprise linux workstation 6.0
redhat enterprise linux eus 6.4

Synopsis Important: mysql security update Type/Severity Security Advisory: Important Topic Updated mysql packages that fix several security issues are now availablefor Red Hat Enterprise Linux 6The Red Hat Security Response Team has rated this update as havingimportant security impact Common Vulnerability ...

Debian Bug report logs - #695001 mysql-55: New MySQL issues Package: mysql-55; Maintainer for mysql-55 is Debian MySQL Maintainers <pkg-mysql-maint@listsaliothdebianorg>; Reported by: Moritz Muehlenhoff <jmm@inutilorg> Date: Mon, 3 Dec 2012 07:54:02 UTC Severity: grave Tags: security Fixed in version mysql-5 ...

This update fixes several vulnerabilities in the MySQL database server Information about these flaws can be found in the References section ...

5519-log on SuSE Linux DoS exploit: -------------------------------------------------------------------------------------------------------- use Net::MySQL; use Unicode::UTF8 qw[decode_utf8 encode_utf8]; $|=1; my $mysql = Net::MySQL->new( hostname => '19216823', # Default use UNIX socket database => 'test', ...

NVD-CWE-noinfo https://bugzilla.redhat.com/show_bug.cgi?id=882607 https://mariadb.atlassian.net/browse/MDEV-3910 http://www.openwall.com/lists/oss-security/2012/12/02/3 http://www.openwall.com/lists/oss-security/2012/12/02/4 http://seclists.org/fulldisclosure/2012/Dec/7 http://www.securitytracker.com/id?1027829 http://www.oracle.com/technetwork/topics/security/cpuapr2013-1899555.html http://rhn.redhat.com/errata/RHSA-2013-0772.html http://www.mandriva.com/security/advisories?name=MDVSA-2013:150 http://security.gentoo.org/glsa/glsa-201308-06.xml http://secunia.com/advisories/53372 https://access.redhat.com/errata/RHSA-2013:0772 https://nvd.nist.gov https://www.exploit-db.com/exploits/23078/https://alas.aws.amazon.com/ALAS-2013-186.html

CVE-2012-5614

Vulnerability Summary

Vulnerability Trend

Vendor Advisories

Exploits

References

Vulmon Search

About

Products

Connect