CVE-2012-5612
- State
- Published
- Severity
- Not scored
- Published
- Dec 3, 2012
- Updated
- Aug 6, 2024
- Reserved
- Oct 24, 2012
Description
Heap-based buffer overflow in Oracle MySQL 5.5.19 and other versions through 5.5.28, and MariaDB 5.5.28a and possibly other versions, allows remote authenticated users to cause a denial of service (memory corruption and crash) and possibly execute arbitrary code, as demonstrated using certain variations of the (1) USE, (2) SHOW TABLES, (3) DESCRIBE, (4) SHOW FIELDS FROM, (5) SHOW COLUMNS FROM, (6) SHOW INDEX FROM, (7) CREATE TABLE, (8) DROP TABLE, (9) ALTER TABLE, (10) DELETE FROM, (11) UPDATE, and (12) SET PASSWORD commands.
Scores
The record has no CVSS score.
Weaknesses
The record names no weakness.
Affected Products
| Product | Versions |
|---|---|
n/an/a |
|
References
- 23076exploit
- 20121201 MySQL (Linux) Heap Based Overrun PoC Zerodaymailing-list
- USN-1703-1vendor-advisory
- MDVSA-2013:102vendor-advisory
- 53372third-party-advisory
- http://www.oracle.com/technetwork/topics/security/cpujan2013-1515902.html
- [oss-security] 20121202 Re: Re: [Full-disclosure] MySQL (Linux) Stack based buffer overrun PoC Zerodaymailing-list
- GLSA-201308-06vendor-advisory
- [oss-security] 20121202 Re: Re: [Full-disclosure] MySQL (Linux) Stack based buffer overrun PoC Zerodaymailing-list
- SUSE-SU-2013:0262vendor-advisory
- https://mariadb.atlassian.net/browse/MDEV-3908
- oval:org.mitre.oval:def:16960vdb-entrysignature
- MDVSA-2013:150vendor-advisory
Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.