CVE-2012-5614
NoneCVSS
—
EPSS
13.2%
Published
Dec 3, 2012
CISA due date
—
The record
Oracle MySQL 5.1.67 and earlier and 5.5.29 and earlier, and MariaDB 5.5.28a and possibly other versions, allows remote authenticated users to cause a denial of service (mysqld crash) via a SELECT command with an UpdateXML command containing XML with a large number of unique, nested elements.
Affected packages
| Ecosystem | Package | Introduced | Fixed |
|---|---|---|---|
| Red Hat:enterprise_linux:6::client | mysql | 0 | 0:5.1.69-1.el6_4 |
| Red Hat:enterprise_linux:6::client | mysql-bench | 0 | 0:5.1.69-1.el6_4 |
| Red Hat:enterprise_linux:6::client | mysql-debuginfo | 0 | 0:5.1.69-1.el6_4 |
| Red Hat:enterprise_linux:6::client | mysql-devel | 0 | 0:5.1.69-1.el6_4 |
| Red Hat:enterprise_linux:6::client | mysql-embedded | 0 | 0:5.1.69-1.el6_4 |
| Red Hat:enterprise_linux:6::client | mysql-embedded-devel | 0 | 0:5.1.69-1.el6_4 |
| Red Hat:enterprise_linux:6::client | mysql-libs | 0 | 0:5.1.69-1.el6_4 |
| Red Hat:enterprise_linux:6::client | mysql-server | 0 | 0:5.1.69-1.el6_4 |
| Red Hat:enterprise_linux:6::client | mysql-test | 0 | 0:5.1.69-1.el6_4 |
| Red Hat:enterprise_linux:6::computenode | mysql | 0 | 0:5.1.69-1.el6_4 |
| Red Hat:enterprise_linux:6::computenode | mysql-bench | 0 | 0:5.1.69-1.el6_4 |
| Red Hat:enterprise_linux:6::computenode | mysql-debuginfo | 0 | 0:5.1.69-1.el6_4 |
| Red Hat:enterprise_linux:6::computenode | mysql-devel | 0 | 0:5.1.69-1.el6_4 |
| Red Hat:enterprise_linux:6::computenode | mysql-embedded | 0 | 0:5.1.69-1.el6_4 |
| Red Hat:enterprise_linux:6::computenode | mysql-embedded-devel | 0 | 0:5.1.69-1.el6_4 |
| Red Hat:enterprise_linux:6::computenode | mysql-libs | 0 | 0:5.1.69-1.el6_4 |
| Red Hat:enterprise_linux:6::computenode | mysql-server | 0 | 0:5.1.69-1.el6_4 |
| Red Hat:enterprise_linux:6::computenode | mysql-test | 0 | 0:5.1.69-1.el6_4 |
| Red Hat:enterprise_linux:6::server | mysql | 0 | 0:5.1.69-1.el6_4 |
| Red Hat:enterprise_linux:6::server | mysql-bench | 0 | 0:5.1.69-1.el6_4 |
| Red Hat:enterprise_linux:6::server | mysql-debuginfo | 0 | 0:5.1.69-1.el6_4 |
| Red Hat:enterprise_linux:6::server | mysql-devel | 0 | 0:5.1.69-1.el6_4 |
| Red Hat:enterprise_linux:6::server | mysql-embedded | 0 | 0:5.1.69-1.el6_4 |
| Red Hat:enterprise_linux:6::server | mysql-embedded-devel | 0 | 0:5.1.69-1.el6_4 |
| Red Hat:enterprise_linux:6::server | mysql-libs | 0 | 0:5.1.69-1.el6_4 |
| Red Hat:enterprise_linux:6::server | mysql-server | 0 | 0:5.1.69-1.el6_4 |
| Red Hat:enterprise_linux:6::server | mysql-test | 0 | 0:5.1.69-1.el6_4 |
| Red Hat:enterprise_linux:6::workstation | mysql | 0 | 0:5.1.69-1.el6_4 |
| Red Hat:enterprise_linux:6::workstation | mysql-bench | 0 | 0:5.1.69-1.el6_4 |
| Red Hat:enterprise_linux:6::workstation | mysql-debuginfo | 0 | 0:5.1.69-1.el6_4 |
| Red Hat:enterprise_linux:6::workstation | mysql-devel | 0 | 0:5.1.69-1.el6_4 |
| Red Hat:enterprise_linux:6::workstation | mysql-embedded | 0 | 0:5.1.69-1.el6_4 |
| Red Hat:enterprise_linux:6::workstation | mysql-embedded-devel | 0 | 0:5.1.69-1.el6_4 |
| Red Hat:enterprise_linux:6::workstation | mysql-libs | 0 | 0:5.1.69-1.el6_4 |
| Red Hat:enterprise_linux:6::workstation | mysql-server | 0 | 0:5.1.69-1.el6_4 |
| Red Hat:enterprise_linux:6::workstation | mysql-test | 0 | 0:5.1.69-1.el6_4 |
Related vulnerabilities
- CVE-2016-6662 Oracle MySQL through 5.5.52, 5.6.x through 5.6.33, and 5.7.x through 5.7.15; MariaDB… Also affects mysql
- CVE-2014-0001 Buffer overflow in client/mysql.cc in Oracle MySQL and MariaDB before 5.5.35 allows… Also affects mysql
- CVE-2013-1861 MariaDB 5.5.x before 5.5.30, 5.3.x before 5.3.13, 5.2.x before 5.2.15, and 5.1.x before… Also affects mysql
- CVE-2012-5611 Stack-based buffer overflow in the acl_get function in Oracle MySQL 5.5.19 and other… Also affects mysql
- CVE-2012-2122 sql/password.c in Oracle MySQL 5.1.x before 5.1.63, 5.5.x before 5.5.24, and 5.6.x before… Also affects mysql
- CVE-2010-3681 Oracle MySQL 5.1 before 5.1.49 and 5.5 before 5.5.5 allows remote authenticated users to… Also affects mysql
- CVE-2010-3683 Oracle MySQL 5.1 before 5.1.49 and 5.5 before 5.5.5 sends an OK packet when a LOAD DATA… Also affects mysql
- CVE-2010-3679 Oracle MySQL 5.1 before 5.1.49 allows remote authenticated users to cause a denial of… Also affects mysql