CVE-2012-0487: Medium severity mysql vulnerability

Published Jan 18, 2012

Updated

Unspecified vulnerability in the MySQL Server component in Oracle MySQL 5.5.x allows remote authenticated users to affect availability via unknown vectors, a different vulnerability than CVE-2012-0117, CVE-2012-0486, CVE-2012-0488, CVE-2012-0489, CVE-2012-0491, CVE-2012-0493, and CVE-2012-0495.

Affected Software

22 affected components

ORACLE MySQL=5.5.0

ORACLE MySQL=5.5.1

ORACLE MySQL=5.5.2

ORACLE MySQL=5.5.3

ORACLE MySQL=5.5.4

ORACLE MySQL=5.5.5

ORACLE MySQL=5.5.6

ORACLE MySQL=5.5.7

ORACLE MySQL=5.5.8

ORACLE MySQL=5.5.9

ORACLE MySQL=5.5.10

ORACLE MySQL=5.5.11

ORACLE MySQL=5.5.12

ORACLE MySQL=5.5.13

ORACLE MySQL=5.5.14

ORACLE MySQL=5.5.15

ORACLE MySQL=5.5.16

ORACLE MySQL=5.5.17

ORACLE MySQL=5.5.18

ORACLE MySQL=5.5.19

ORACLE MySQL=5.5.20

ORACLE MySQL=5.5.21

Event History

Jan 18, 2012

CVE Published

via MITRE·10:00 PM

Data Sourced

via MITRE·10:00 PM

Description

Frequently Asked Questions

What is the severity of CVE-2012-0487?

The severity of CVE-2012-0487 is high as it allows remote authenticated users to affect the availability of the MySQL server.

How do I fix CVE-2012-0487?

To fix CVE-2012-0487, you should upgrade your MySQL Server to the latest available version or patch provided by Oracle.

Which versions of MySQL are affected by CVE-2012-0487?

CVE-2012-0487 affects Oracle MySQL versions 5.5.0 through 5.5.21.

What types of attacks can CVE-2012-0487 lead to?

CVE-2012-0487 can potentially lead to denial of service attacks by making the MySQL server unavailable.

Who is impacted by CVE-2012-0487?

CVE-2012-0487 impacts any organization using vulnerable versions of MySQL Server with remote authenticated users.