CVE-2012-1702: Medium severity Oracle MySQL vulnerability
Published Jan 17, 2013
·Updated
Unspecified vulnerability in the Server component in Oracle MySQL 5.1.66 and earlier and 5.5.28 and earlier allows remote attackers to affect availability via unknown vectors.
Affected Software
15 affected components
Oracle MySQL>=5.1.0<=5.1.66
Oracle MySQL>=5.5.0<=5.5.28
MariaDB MariaDB>=5.1.0<5.1.67
MariaDB MariaDB>=5.2.0<5.2.14
MariaDB MariaDB>=5.3.0<5.3.12
MariaDB MariaDB>=5.5.0<5.5.29
MariaDB MariaDB=10.0.0
Canonical Ubuntu Linux=10.04
Canonical Ubuntu Linux=11.10
Canonical Ubuntu Linux=12.04
Canonical Ubuntu Linux=12.10
redhat Enterprise Linux Desktop=6.0
redhat Enterprise Linux Eus=6.3
redhat Enterprise Linux Server=6.0
redhat Enterprise Linux Workstation=6.0
Event History
Jan 17, 2013
CVE Published
via MITRE·01:30 AM
Data Sourced
via MITRE·01:30 AM
Description
Frequently Asked Questions
1
What is the severity of CVE-2012-1702?
CVE-2012-1702 is classified as a vulnerability that may affect the availability of affected systems.
2
How do I fix CVE-2012-1702?
To fix CVE-2012-1702, upgrade to a version of MySQL or MariaDB that is later than 5.1.66 or 5.5.28.
3
Which versions of MySQL are affected by CVE-2012-1702?
MySQL versions 5.1.66 and earlier, and 5.5.28 and earlier are affected by CVE-2012-1702.
4
Are MariaDB versions vulnerable to CVE-2012-1702?
Yes, certain versions of MariaDB prior to 5.1.67, 5.2.14, 5.3.12, and 5.5.29 are vulnerable to CVE-2012-1702.
5
What types of attacks can exploit CVE-2012-1702?
CVE-2012-1702 allows remote attackers to affect the availability of affected MySQL and MariaDB servers via unspecified vectors.