CVE-2012-1690: Medium severity Oracle MySQL vulnerability
Published May 3, 2012
·Updated
Unspecified vulnerability in the MySQL Server component in Oracle MySQL 5.1.61 and earlier, and 5.5.21 and earlier, allows remote authenticated users to affect availability via unknown vectors related to Server Optimizer, a different vulnerability than CVE-2012-1703.
Affected Software
8 affected components
Oracle MySQL>=5.1.0<=5.1.61
Oracle MySQL>=5.5.0<=5.5.21
MariaDB MariaDB>=5.1.0<5.1.62
MariaDB MariaDB>=5.5.0<5.5.22
redhat Enterprise Linux Desktop=6.0
redhat Enterprise Linux Eus=6.3
redhat Enterprise Linux Server=6.0
redhat Enterprise Linux Workstation=6.0
Event History
May 3, 2012
CVE Published
via MITRE·10:00 PM
Data Sourced
via MITRE·10:00 PM
Description
Frequently Asked Questions
1
What is the severity of CVE-2012-1690?
CVE-2012-1690 has not been assigned a CVSS score but is recognized as a vulnerability affecting the availability of MySQL Server.
2
How do I fix CVE-2012-1690?
To remediate CVE-2012-1690, upgrade to MySQL versions 5.1.62, 5.5.22 or later.
3
Which versions of MySQL are affected by CVE-2012-1690?
CVE-2012-1690 affects MySQL versions 5.1.61 and earlier, as well as 5.5.21 and earlier.
4
Is MariaDB also affected by CVE-2012-1690?
Yes, MariaDB versions prior to 5.1.62 and 5.5.22 are also vulnerable to CVE-2012-1690.
5
What types of users are impacted by CVE-2012-1690?
CVE-2012-1690 affects remote authenticated users of MySQL Server.