Unscored severity · published Dec 3, 2012
CVE-2012-5612
Heap-based buffer overflow in Oracle MySQL 5.5.19 and other versions through 5.5.28, and MariaDB 5.5.28a and possibly other versions, allows remote authenticated users to cause a…
–
CVSS
21%
EPSS
No
On KEV
Description
Heap-based buffer overflow in Oracle MySQL 5.5.19 and other versions through 5.5.28, and MariaDB 5.5.28a and possibly other versions, allows remote authenticated users to cause a denial of service (memory corruption and crash) and possibly execute arbitrary code, as demonstrated using certain variations of the (1) USE, (2) SHOW TABLES, (3) DESCRIBE, (4) SHOW FIELDS FROM, (5) SHOW COLUMNS FROM, (6) SHOW INDEX FROM, (7) CREATE TABLE, (8) DROP TABLE, (9) ALTER TABLE, (10) DELETE FROM, (11) UPDATE, and (12) SET PASSWORD commands.
Exploitation
Is it being used?
Exploit prediction (EPSS)21.0% · higher than 98% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
MY
MySQL · Oracle
5.5.0 through 5.5.28 · source: NVD
LE
Linux Enterprise Desktop · Suse
11 · source: NVD
LE
Linux Enterprise Server · Suse
11; 11 · source: NVD
LE
Linux Enterprise Software Development Kit · Suse
11 · source: NVD
MA
Mariadb · Mariadb
5.1.0 before 5.1.67; 5.2.0 before 5.2.14; 5.3.0 before 5.3.12; 5.5.0 before 5.5.29; 10.0.0 · source: NVD
UL
Ubuntu Linux · Canonical
10.04; 11.10; 12.04; 12.10 · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2012-5612
CVE.org
https://www.cve.org/CVERecord?id=CVE-2012-5612
Mailing List
http://lists.opensuse.org/opensuse-security-announce/2013-02/msg00000.html
Exploit
http://seclists.org/fulldisclosure/2012/Dec/5
Not Applicable
http://secunia.com/advisories/53372
Third Party Advisory
http://security.gentoo.org/glsa/glsa-201308-06.xml
Exploit
http://www.exploit-db.com/exploits/23076
Broken Link
http://www.mandriva.com/security/advisories?name=MDVSA-2013:102
More from MySQL
9.8
CVE-2020-11656
In SQLite through 3.31.1, the ALTER TABLE implementation has a use-after-free, as demonstrated by an ORDER BY clause that belongs to a compound SELECT statement
9.8
CVE-2019-14540
A Polymorphic Typing issue was discovered in FasterXML jackson-databind before 2.9.10
9.8
CVE-2016-9843
The crc32_big function in crc32.c in zlib 1.2.8 might allow context-dependent attackers to have unspecified impact via vectors involving big-endian CRC calculation
9.8
CVE-2016-9841
inffast.c in zlib 1.2.8 might allow context-dependent attackers to have unspecified impact by leveraging improper pointer arithmetic
9.8
CVE-2016-6662
Oracle MySQL through 5.5.52, 5.6.x through 5.6.33, and 5.7.x through 5.7.15; MariaDB before 5.5.51, 10.0.x before 10.0.27, and 10.1.x before 10.1.17; and Percona Server before…