CVE-2012-5612

Published: Dec 3, 2012Modified: Apr 29, 2026

6.5

Vector

AV:N/AC:L/Au:S/C:P/I:P/A:P

Exploitability: 8.0 / Impact: 6.4

Source: NVD

Description

Heap-based buffer overflow in Oracle MySQL 5.5.19 and other versions through 5.5.28, and MariaDB 5.5.28a and possibly other versions, allows remote authenticated users to cause a denial of service (memory corruption and crash) and possibly execute arbitrary code, as demonstrated using certain variations of the (1) USE, (2) SHOW TABLES, (3) DESCRIBE, (4) SHOW FIELDS FROM, (5) SHOW COLUMNS FROM, (6) SHOW INDEX FROM, (7) CREATE TABLE, (8) DROP TABLE, (9) ALTER TABLE, (10) DELETE FROM, (11) UPDATE, and (12) SET PASSWORD commands.

Affected (14)

Products: Mariadb: Mariadb · Oracle: Mysql · Suse: Linux Enterprise Desktop, Linux Enterprise Server, Linux Enterprise Software Development Kit · +1 more

Show all products

Mariadb: Mariadb · Oracle: Mysql · Suse: Linux Enterprise Desktop, Linux Enterprise Server, Linux Enterprise Software Development Kit · Canonical: Ubuntu Linux

1 product

1 product

3 products

Linux Enterprise Desktop

Linux Enterprise Server

Linux Enterprise Software Development Kit

1 product

Configuration A

5 vulnerable

Vulnerable Software	Affected Versions
Mariadb Mariadb	From 5.1.0 to 5.1.67
Mariadb Mariadb	From 5.2.0 to 5.2.14
Mariadb Mariadb	From 5.3.0 to 5.3.12
Mariadb Mariadb	From 5.5.0 to 5.5.29
Mariadb Mariadb	Version 10.0.0

Configuration B

1 vulnerable

Vulnerable Software	Affected Versions
Oracle Mysql	From 5.5.0 to 5.5.28

Configuration C

4 vulnerable

Vulnerable Software	Affected Versions
Suse Linux Enterprise Desktop	Version 11 sp2
Suse Linux Enterprise Server	Version 11 sp2
Suse Linux Enterprise Server	Version 11 sp2
Suse Linux Enterprise Software Development Kit	Version 11 sp2

Configuration D

4 vulnerable

Vulnerable Software	Affected Versions
Canonical Ubuntu Linux	Version 10.04
Canonical Ubuntu Linux	Version 11.10
Canonical Ubuntu Linux	Version 12.04
Canonical Ubuntu Linux	Version 12.10

Related CWEs

Out-of-bounds Write

The product writes data past the end, or before the beginning, of the intended buffer.

References (26)

http://lists.opensuse.org/opensuse-security-announce/2013-02/msg00000.html

Source: secalert@redhat.com

Mailing ListThird Party Advisory

http://seclists.org/fulldisclosure/2012/Dec/5

Source: secalert@redhat.com

ExploitMailing ListThird Party Advisory

http://secunia.com/advisories/53372

Source: secalert@redhat.com

Not Applicable

http://security.gentoo.org/glsa/glsa-201308-06.xml

Source: secalert@redhat.com

Third Party Advisory

http://www.exploit-db.com/exploits/23076

Source: secalert@redhat.com

ExploitThird Party AdvisoryVDB Entry

http://www.mandriva.com/security/advisories?name=MDVSA-2013:102

Source: secalert@redhat.com

Broken Link

http://www.mandriva.com/security/advisories?name=MDVSA-2013:150

Source: secalert@redhat.com

Broken Link

http://www.openwall.com/lists/oss-security/2012/12/02/3

Source: secalert@redhat.com

Mailing ListThird Party Advisory

http://www.openwall.com/lists/oss-security/2012/12/02/4

Source: secalert@redhat.com

Mailing ListThird Party Advisory

http://www.oracle.com/technetwork/topics/security/cpujan2013-1515902.html

Source: secalert@redhat.com

Vendor Advisory

http://www.ubuntu.com/usn/USN-1703-1

Source: secalert@redhat.com

Third Party Advisory

https://mariadb.atlassian.net/browse/MDEV-3908

Source: secalert@redhat.com

Broken LinkExploitPatch

https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A16960

Source: secalert@redhat.com

Third Party Advisory

http://lists.opensuse.org/opensuse-security-announce/2013-02/msg00000.html

Source: af854a3a-2127-422b-91ae-364da2661108

Mailing ListThird Party Advisory

http://seclists.org/fulldisclosure/2012/Dec/5

Source: af854a3a-2127-422b-91ae-364da2661108

ExploitMailing ListThird Party Advisory

http://secunia.com/advisories/53372

Source: af854a3a-2127-422b-91ae-364da2661108

Not Applicable

http://security.gentoo.org/glsa/glsa-201308-06.xml

Source: af854a3a-2127-422b-91ae-364da2661108

Third Party Advisory

http://www.exploit-db.com/exploits/23076

Source: af854a3a-2127-422b-91ae-364da2661108

ExploitThird Party AdvisoryVDB Entry

http://www.mandriva.com/security/advisories?name=MDVSA-2013:102

Source: af854a3a-2127-422b-91ae-364da2661108

Broken Link

http://www.mandriva.com/security/advisories?name=MDVSA-2013:150

Source: af854a3a-2127-422b-91ae-364da2661108

Broken Link

http://www.openwall.com/lists/oss-security/2012/12/02/3

Source: af854a3a-2127-422b-91ae-364da2661108

Mailing ListThird Party Advisory

http://www.openwall.com/lists/oss-security/2012/12/02/4

Source: af854a3a-2127-422b-91ae-364da2661108

Mailing ListThird Party Advisory

http://www.oracle.com/technetwork/topics/security/cpujan2013-1515902.html

Source: af854a3a-2127-422b-91ae-364da2661108

Vendor Advisory

http://www.ubuntu.com/usn/USN-1703-1

Source: af854a3a-2127-422b-91ae-364da2661108

Third Party Advisory

https://mariadb.atlassian.net/browse/MDEV-3908

Source: af854a3a-2127-422b-91ae-364da2661108

Broken LinkExploitPatch

https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A16960

Source: af854a3a-2127-422b-91ae-364da2661108

Third Party Advisory

Timeline

No history available yet.