CVE-2012-1689: Medium severity Oracle MySQL vulnerability

Q: What is the severity of CVE-2012-1689?

CVE-2012-1689 is classified with unspecified severity that could affect the availability of Oracle MySQL and MariaDB servers.

Q: How do I fix CVE-2012-1689?

To fix CVE-2012-1689, you should upgrade your Oracle MySQL to version 5.1.63 or later, or 5.5.23 or later, and MariaDB to versions 5.1.66 and 5.5.23 or later.

Q: Which versions of MySQL are affected by CVE-2012-1689?

CVE-2012-1689 affects Oracle MySQL Server versions 5.1.62 and earlier, and 5.5.22 and earlier.

Q: Which versions of MariaDB are vulnerable to CVE-2012-1689?

CVE-2012-1689 impacts MariaDB versions 5.1.65 and earlier, as well as 5.5.22 and earlier.

Q: Can remote users exploit CVE-2012-1689?

Yes, CVE-2012-1689 can be exploited by remote authenticated users to affect the availability of the server.

Published Jul 17, 2012

Updated

Unspecified vulnerability in Oracle MySQL Server 5.1.62 and earlier, and 5.5.22 and earlier, allows remote authenticated users to affect availability via unknown vectors related to Server Optimizer.

Affected Software

8 affected components

Oracle MySQL>=5.1.0<=5.1.62

Oracle MySQL>=5.5.0<=5.5.22

MariaDB MariaDB>=5.1.0<5.1.66

MariaDB MariaDB>=5.5.0<5.5.23

redhat Enterprise Linux Desktop=6.0

redhat Enterprise Linux Eus=6.3

redhat Enterprise Linux Server=6.0

redhat Enterprise Linux Workstation=6.0

Event History

Jul 17, 2012

CVE Published

via MITRE·10:00 PM

Data Sourced

via MITRE·10:00 PM

Description

Frequently Asked Questions

What is the severity of CVE-2012-1689?

CVE-2012-1689 is classified with unspecified severity that could affect the availability of Oracle MySQL and MariaDB servers.

How do I fix CVE-2012-1689?

To fix CVE-2012-1689, you should upgrade your Oracle MySQL to version 5.1.63 or later, or 5.5.23 or later, and MariaDB to versions 5.1.66 and 5.5.23 or later.

Which versions of MySQL are affected by CVE-2012-1689?