CVE-2012-4414

Published: Jan 22, 2013Modified: Apr 29, 2026

6.5

Vector

AV:N/AC:L/Au:S/C:P/I:P/A:P

Exploitability: 8.0 / Impact: 6.4

Source: NVD

Description

Multiple SQL injection vulnerabilities in the replication code in Oracle MySQL possibly before 5.5.29, and MariaDB 5.1.x through 5.1.62, 5.2.x through 5.2.12, 5.3.x through 5.3.7, and 5.5.x through 5.5.25, allow remote authenticated users to execute arbitrary SQL commands via vectors related to the binary log. NOTE: as of 20130116, Oracle has not commented on claims from a downstream vendor that the fix in MySQL 5.5.29 is incomplete.

Affected (77)

Products: Oracle: Mysql · Mariadb: Mariadb

1 product

1 product

Configuration A

38 vulnerable

Vulnerable Software	Affected Versions
Oracle Mysql	Up to 5.5.28
Oracle Mysql	Version 5.1.51
Oracle Mysql	Version 5.1.52
Oracle Mysql	Version 5.1.52 sp1
Oracle Mysql	Version 5.1.53
Oracle Mysql	Version 5.1.54
Oracle Mysql	Version 5.1.55
Oracle Mysql	Version 5.1.56
Oracle Mysql	Version 5.1.57
Oracle Mysql	Version 5.1.58
Oracle Mysql	Version 5.1.59
Oracle Mysql	Version 5.1.60
Oracle Mysql	Version 5.1.61
Oracle Mysql	Version 5.1.62
Oracle Mysql	Version 5.1.63
Oracle Mysql	Version 5.1.64
Oracle Mysql	Version 5.1.65
Oracle Mysql	Version 5.1.66
Oracle Mysql	Version 5.1.67
Oracle Mysql	Version 5.5.10
Oracle Mysql	Version 5.5.11
Oracle Mysql	Version 5.5.12
Oracle Mysql	Version 5.5.13
Oracle Mysql	Version 5.5.14
Oracle Mysql	Version 5.5.15
Oracle Mysql	Version 5.5.16
Oracle Mysql	Version 5.5.17
Oracle Mysql	Version 5.5.18
Oracle Mysql	Version 5.5.19
Oracle Mysql	Version 5.5.20
Oracle Mysql	Version 5.5.21
Oracle Mysql	Version 5.5.22
Oracle Mysql	Version 5.5.23
Oracle Mysql	Version 5.5.24
Oracle Mysql	Version 5.5.25
Oracle Mysql	Version 5.5.25 a
Oracle Mysql	Version 5.5.26
Oracle Mysql	Version 5.5.27

Configuration B

12 vulnerable

Vulnerable Software	Affected Versions
Mariadb Mariadb	Version 5.1.41
Mariadb Mariadb	Version 5.1.42
Mariadb Mariadb	Version 5.1.44
Mariadb Mariadb	Version 5.1.47
Mariadb Mariadb	Version 5.1.49
Mariadb Mariadb	Version 5.1.50
Mariadb Mariadb	Version 5.1.51
Mariadb Mariadb	Version 5.1.53
Mariadb Mariadb	Version 5.1.55
Mariadb Mariadb	Version 5.1.60
Mariadb Mariadb	Version 5.1.61
Mariadb Mariadb	Version 5.1.62

Configuration C

13 vulnerable

Vulnerable Software	Affected Versions
Mariadb Mariadb	Version 5.2.0
Mariadb Mariadb	Version 5.2.10
Mariadb Mariadb	Version 5.2.11
Mariadb Mariadb	Version 5.2.12
Mariadb Mariadb	Version 5.2.1
Mariadb Mariadb	Version 5.2.2
Mariadb Mariadb	Version 5.2.3
Mariadb Mariadb	Version 5.2.4
Mariadb Mariadb	Version 5.2.5
Mariadb Mariadb	Version 5.2.6
Mariadb Mariadb	Version 5.2.7
Mariadb Mariadb	Version 5.2.8
Mariadb Mariadb	Version 5.2.9

Configuration D

8 vulnerable

Vulnerable Software	Affected Versions
Mariadb Mariadb	Version 5.3.0
Mariadb Mariadb	Version 5.3.1
Mariadb Mariadb	Version 5.3.2
Mariadb Mariadb	Version 5.3.3
Mariadb Mariadb	Version 5.3.4
Mariadb Mariadb	Version 5.3.5
Mariadb Mariadb	Version 5.3.6
Mariadb Mariadb	Version 5.3.7

Configuration E

6 vulnerable

Vulnerable Software	Affected Versions
Mariadb Mariadb	Version 5.5.20
Mariadb Mariadb	Version 5.5.21
Mariadb Mariadb	Version 5.5.22
Mariadb Mariadb	Version 5.5.23
Mariadb Mariadb	Version 5.5.24
Mariadb Mariadb	Version 5.5.25