CVE-2012-2122
NoneCVSS
—
EPSS
96.5%
Published
Jun 26, 2012
CISA due date
—
The record
sql/password.c in Oracle MySQL 5.1.x before 5.1.63, 5.5.x before 5.5.24, and 5.6.x before 5.6.6, and MariaDB 5.1.x before 5.1.62, 5.2.x before 5.2.12, 5.3.x before 5.3.6, and 5.5.x before 5.5.23, when running in certain environments with certain implementations of the memcmp function, allows remote attackers to bypass authentication by repeatedly authenticating with the same incorrect password, which eventually causes a token comparison to succeed due to an improperly-checked return value.
Affected packages
| Ecosystem | Package | Introduced | Fixed |
|---|---|---|---|
| Debian:6.0 | mysql-5.1 | 0 | 5.1.63-0+squeeze1 |
| Red Hat:enterprise_linux:6::client | mysql | 0 | 0:5.1.66-1.el6_3 |
| Red Hat:enterprise_linux:6::client | mysql-bench | 0 | 0:5.1.66-1.el6_3 |
| Red Hat:enterprise_linux:6::client | mysql-debuginfo | 0 | 0:5.1.66-1.el6_3 |
| Red Hat:enterprise_linux:6::client | mysql-devel | 0 | 0:5.1.66-1.el6_3 |
| Red Hat:enterprise_linux:6::client | mysql-embedded | 0 | 0:5.1.66-1.el6_3 |
| Red Hat:enterprise_linux:6::client | mysql-embedded-devel | 0 | 0:5.1.66-1.el6_3 |
| Red Hat:enterprise_linux:6::client | mysql-libs | 0 | 0:5.1.66-1.el6_3 |
| Red Hat:enterprise_linux:6::client | mysql-server | 0 | 0:5.1.66-1.el6_3 |
| Red Hat:enterprise_linux:6::client | mysql-test | 0 | 0:5.1.66-1.el6_3 |
| Red Hat:enterprise_linux:6::computenode | mysql | 0 | 0:5.1.66-1.el6_3 |
| Red Hat:enterprise_linux:6::computenode | mysql-bench | 0 | 0:5.1.66-1.el6_3 |
| Red Hat:enterprise_linux:6::computenode | mysql-debuginfo | 0 | 0:5.1.66-1.el6_3 |
| Red Hat:enterprise_linux:6::computenode | mysql-devel | 0 | 0:5.1.66-1.el6_3 |
| Red Hat:enterprise_linux:6::computenode | mysql-embedded | 0 | 0:5.1.66-1.el6_3 |
| Red Hat:enterprise_linux:6::computenode | mysql-embedded-devel | 0 | 0:5.1.66-1.el6_3 |
| Red Hat:enterprise_linux:6::computenode | mysql-libs | 0 | 0:5.1.66-1.el6_3 |
| Red Hat:enterprise_linux:6::computenode | mysql-server | 0 | 0:5.1.66-1.el6_3 |
| Red Hat:enterprise_linux:6::computenode | mysql-test | 0 | 0:5.1.66-1.el6_3 |
| Red Hat:enterprise_linux:6::server | mysql | 0 | 0:5.1.66-1.el6_3 |
| Red Hat:enterprise_linux:6::server | mysql-bench | 0 | 0:5.1.66-1.el6_3 |
| Red Hat:enterprise_linux:6::server | mysql-debuginfo | 0 | 0:5.1.66-1.el6_3 |
| Red Hat:enterprise_linux:6::server | mysql-devel | 0 | 0:5.1.66-1.el6_3 |
| Red Hat:enterprise_linux:6::server | mysql-embedded | 0 | 0:5.1.66-1.el6_3 |
| Red Hat:enterprise_linux:6::server | mysql-embedded-devel | 0 | 0:5.1.66-1.el6_3 |
| Red Hat:enterprise_linux:6::server | mysql-libs | 0 | 0:5.1.66-1.el6_3 |
| Red Hat:enterprise_linux:6::server | mysql-server | 0 | 0:5.1.66-1.el6_3 |
| Red Hat:enterprise_linux:6::server | mysql-test | 0 | 0:5.1.66-1.el6_3 |
| Red Hat:enterprise_linux:6::workstation | mysql | 0 | 0:5.1.66-1.el6_3 |
| Red Hat:enterprise_linux:6::workstation | mysql-bench | 0 | 0:5.1.66-1.el6_3 |
| Red Hat:enterprise_linux:6::workstation | mysql-debuginfo | 0 | 0:5.1.66-1.el6_3 |
| Red Hat:enterprise_linux:6::workstation | mysql-devel | 0 | 0:5.1.66-1.el6_3 |
| Red Hat:enterprise_linux:6::workstation | mysql-embedded | 0 | 0:5.1.66-1.el6_3 |
| Red Hat:enterprise_linux:6::workstation | mysql-embedded-devel | 0 | 0:5.1.66-1.el6_3 |
| Red Hat:enterprise_linux:6::workstation | mysql-libs | 0 | 0:5.1.66-1.el6_3 |
| Red Hat:enterprise_linux:6::workstation | mysql-server | 0 | 0:5.1.66-1.el6_3 |
| Red Hat:enterprise_linux:6::workstation | mysql-test | 0 | 0:5.1.66-1.el6_3 |
Related vulnerabilities
- CVE-2014-0001 Buffer overflow in client/mysql.cc in Oracle MySQL and MariaDB before 5.5.35 allows… Also affects mysql-5.1
- CVE-2013-1861 MariaDB 5.5.x before 5.5.30, 5.3.x before 5.3.13, 5.2.x before 5.2.15, and 5.1.x before… Also affects mysql-5.1
- CVE-2012-5611 Stack-based buffer overflow in the acl_get function in Oracle MySQL 5.5.19 and other… Also affects mysql-5.1
- CVE-2016-6662 Oracle MySQL through 5.5.52, 5.6.x through 5.6.33, and 5.7.x through 5.7.15; MariaDB… Also affects mysql
- CVE-2012-5614 Oracle MySQL 5.1.67 and earlier and 5.5.29 and earlier, and MariaDB 5.5.28a and possibly… Also affects mysql
- CVE-2010-3681 Oracle MySQL 5.1 before 5.1.49 and 5.5 before 5.5.5 allows remote authenticated users to… Also affects mysql
- CVE-2010-3683 Oracle MySQL 5.1 before 5.1.49 and 5.5 before 5.5.5 sends an OK packet when a LOAD DATA… Also affects mysql
- CVE-2010-3679 Oracle MySQL 5.1 before 5.1.49 allows remote authenticated users to cause a denial of… Also affects mysql