CVE-2012-5611

Published: Dec 3, 2012Modified: Apr 29, 2026

6.5

Vector

AV:N/AC:L/Au:S/C:P/I:P/A:P

Exploitability: 8.0 / Impact: 6.4

Source: NVD

Description

Stack-based buffer overflow in the acl_get function in Oracle MySQL 5.5.19 and other versions through 5.5.28, and 5.1.53 and other versions through 5.1.66, and MariaDB 5.5.2.x before 5.5.28a, 5.3.x before 5.3.11, 5.2.x before 5.2.13 and 5.1.x before 5.1.66, allows remote authenticated users to execute arbitrary code via a long argument to the GRANT FILE command.

Affected (46)

Products: Mariadb: Mariadb · Oracle: Mysql

1 product

1 product

Configuration A

46 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Mariadb Mariadb	Version 5.1.41
Mariadb Mariadb	Version 5.1.42
Mariadb Mariadb	Version 5.1.44
Mariadb Mariadb	Version 5.1.47
Mariadb Mariadb	Version 5.1.49
Mariadb Mariadb	Version 5.1.50
Mariadb Mariadb	Version 5.1.51
Mariadb Mariadb	Version 5.1.53
Mariadb Mariadb	Version 5.1.55
Mariadb Mariadb	Version 5.1.60
Mariadb Mariadb	Version 5.1.61
Mariadb Mariadb	Version 5.1.62
Mariadb Mariadb	Version 5.2.0
Mariadb Mariadb	Version 5.2.10
Mariadb Mariadb	Version 5.2.11
Mariadb Mariadb	Version 5.2.12
Mariadb Mariadb	Version 5.2.1
Mariadb Mariadb	Version 5.2.2
Mariadb Mariadb	Version 5.2.3
Mariadb Mariadb	Version 5.2.4
Mariadb Mariadb	Version 5.2.5
Mariadb Mariadb	Version 5.2.6
Mariadb Mariadb	Version 5.2.7
Mariadb Mariadb	Version 5.2.8
Mariadb Mariadb	Version 5.2.9
Mariadb Mariadb	Version 5.3.0
Mariadb Mariadb	Version 5.3.10
Mariadb Mariadb	Version 5.3.1
Mariadb Mariadb	Version 5.3.2
Mariadb Mariadb	Version 5.3.3
Mariadb Mariadb	Version 5.3.4
Mariadb Mariadb	Version 5.3.5
Mariadb Mariadb	Version 5.3.6
Mariadb Mariadb	Version 5.3.7
Mariadb Mariadb	Version 5.3.8
Mariadb Mariadb	Version 5.3.9
Mariadb Mariadb	Version 5.5.20
Mariadb Mariadb	Version 5.5.21
Mariadb Mariadb	Version 5.5.22
Mariadb Mariadb	Version 5.5.23
Mariadb Mariadb	Version 5.5.24
Mariadb Mariadb	Version 5.5.25
Mariadb Mariadb	Version 5.5.27
Mariadb Mariadb	Version 5.5.28
Oracle Mysql	Version 5.1.53
Oracle Mysql	Version 5.5.19

Running on/with	Platform Versions
Linux Linux Kernel	All versions

Related CWEs

CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

The product performs operations on a memory buffer, but it reads from or writes to a memory location outside the buffer's intended boundary. This may result in read or write operations on unexpected memory locations that could be linked to other variables, data structures, or internal program data.

References (54)

http://lists.opensuse.org/opensuse-security-announce/2013-01/msg00000.html

Source: secalert@redhat.com

Mailing ListThird Party Advisory

http://lists.opensuse.org/opensuse-security-announce/2013-01/msg00001.html

Source: secalert@redhat.com

Mailing ListThird Party Advisory

http://lists.opensuse.org/opensuse-security-announce/2013-01/msg00002.html

Source: secalert@redhat.com

Mailing ListThird Party Advisory

http://lists.opensuse.org/opensuse-security-announce/2013-01/msg00013.html

Source: secalert@redhat.com

Mailing ListThird Party Advisory

http://lists.opensuse.org/opensuse-security-announce/2013-01/msg00020.html

Source: secalert@redhat.com

Mailing ListThird Party Advisory

http://lists.opensuse.org/opensuse-security-announce/2013-02/msg00000.html

Source: secalert@redhat.com

Mailing ListThird Party Advisory

http://lists.opensuse.org/opensuse-updates/2013-09/msg00010.html

Source: secalert@redhat.com

Mailing ListThird Party Advisory

http://rhn.redhat.com/errata/RHSA-2012-1551.html

Source: secalert@redhat.com

Third Party Advisory

http://rhn.redhat.com/errata/RHSA-2013-0180.html

Source: secalert@redhat.com

Third Party Advisory

http://seclists.org/fulldisclosure/2012/Dec/4

Source: secalert@redhat.com

Mailing ListThird Party Advisory

http://secunia.com/advisories/51443

Source: secalert@redhat.com

Broken Link

http://secunia.com/advisories/53372

Source: secalert@redhat.com

Broken Link

http://security.gentoo.org/glsa/glsa-201308-06.xml

Source: secalert@redhat.com

Third Party Advisory

http://www.debian.org/security/2012/dsa-2581

Source: secalert@redhat.com

Third Party Advisory

http://www.exploit-db.com/exploits/23075

Source: secalert@redhat.com

Third Party AdvisoryVDB Entry

http://www.mandriva.com/security/advisories?name=MDVSA-2013:102

Source: secalert@redhat.com

Third Party Advisory

http://www.mandriva.com/security/advisories?name=MDVSA-2013:150

Source: secalert@redhat.com

Third Party Advisory

http://www.openwall.com/lists/oss-security/2012/12/02/3

Source: secalert@redhat.com

Mailing ListThird Party Advisory

http://www.openwall.com/lists/oss-security/2012/12/02/4

Source: secalert@redhat.com

Mailing ListThird Party Advisory

http://www.oracle.com/technetwork/topics/security/cpujan2013-1515902.html

Source: secalert@redhat.com

Third Party Advisory

http://www.ubuntu.com/usn/USN-1658-1

Source: secalert@redhat.com

Third Party Advisory

http://www.ubuntu.com/usn/USN-1703-1

Source: secalert@redhat.com

Third Party Advisory

https://kb.askmonty.org/en/mariadb-5166-release-notes/

Source: secalert@redhat.com

Third Party Advisory

https://kb.askmonty.org/en/mariadb-5213-release-notes/

Source: secalert@redhat.com

Third Party Advisory

https://kb.askmonty.org/en/mariadb-5311-release-notes/

Source: secalert@redhat.com

Third Party Advisory

https://kb.askmonty.org/en/mariadb-5528a-release-notes/

Source: secalert@redhat.com

Third Party Advisory

https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A16395

Source: secalert@redhat.com

Third Party Advisory

http://lists.opensuse.org/opensuse-security-announce/2013-01/msg00000.html