CVE-2012-2102: Buffer Overflow

Published Aug 17, 2012

Updated

MySQL 5.1.x before 5.1.62 and 5.5.x before 5.5.22 allows remote authenticated users to cause a denial of service (assertion failure and mysqld abort) by deleting a record and using HANDLER READ NEXT.

Affected Software

92 affected components

MySQL mysql=5.1.5

MySQL mysql=5.1.23

MySQL mysql=5.1.31

MySQL mysql=5.1.32

MySQL mysql=5.1.34

MySQL mysql=5.1.37

Oracle MySQL=5.1

Oracle MySQL=5.1.1

Oracle MySQL=5.1.2

Oracle MySQL=5.1.3

Oracle MySQL=5.1.4

Oracle MySQL=5.1.6

Oracle MySQL=5.1.7

Oracle MySQL=5.1.8

Oracle MySQL=5.1.9

Oracle MySQL=5.1.10

Oracle MySQL=5.1.11

Oracle MySQL=5.1.12

Oracle MySQL=5.1.13

Oracle MySQL=5.1.14

Oracle MySQL=5.1.15

Oracle MySQL=5.1.16

Oracle MySQL=5.1.17

Oracle MySQL=5.1.18

Oracle MySQL=5.1.19

Oracle MySQL=5.1.20

Oracle MySQL=5.1.21

Oracle MySQL=5.1.22

Oracle MySQL=5.1.23-a

Oracle MySQL=5.1.24

Oracle MySQL=5.1.25

Oracle MySQL=5.1.26

Oracle MySQL=5.1.27

Oracle MySQL=5.1.28

Oracle MySQL=5.1.29

Oracle MySQL=5.1.30

Oracle MySQL=5.1.31-sp1

Oracle MySQL=5.1.33

Oracle MySQL=5.1.34-sp1

Oracle MySQL=5.1.35

Oracle MySQL=5.1.36

Oracle MySQL=5.1.37-sp1

Oracle MySQL=5.1.38

Oracle MySQL=5.1.39

Oracle MySQL=5.1.40

Oracle MySQL=5.1.40-sp1

Oracle MySQL=5.1.41

Oracle MySQL=5.1.42

Oracle MySQL=5.1.43

Oracle MySQL=5.1.43-sp1

Oracle MySQL=5.1.44

Oracle MySQL=5.1.45

Oracle MySQL=5.1.46

Oracle MySQL=5.1.46-sp1

Oracle MySQL=5.1.47

Oracle MySQL=5.1.48

Oracle MySQL=5.1.49

Oracle MySQL=5.1.49-sp1

Oracle MySQL=5.1.50

Oracle MySQL=5.1.51

Oracle MySQL=5.1.52

Oracle MySQL=5.1.52-sp1

Oracle MySQL=5.1.53

Oracle MySQL=5.1.54

Oracle MySQL=5.1.55

Oracle MySQL=5.1.56

Oracle MySQL=5.1.57

Oracle MySQL=5.1.58

Oracle MySQL=5.1.59

Oracle MySQL=5.1.60

Oracle MySQL=5.1.61

Oracle MySQL=5.5.0

Oracle MySQL=5.5.1

Oracle MySQL=5.5.2

Oracle MySQL=5.5.3

Oracle MySQL=5.5.4

Oracle MySQL=5.5.5

Oracle MySQL=5.5.6

Oracle MySQL=5.5.7

Oracle MySQL=5.5.9

Oracle MySQL=5.5.10

Oracle MySQL=5.5.11

Oracle MySQL=5.5.12

Oracle MySQL=5.5.13

Oracle MySQL=5.5.14

Oracle MySQL=5.5.15

Oracle MySQL=5.5.16

Oracle MySQL=5.5.17

Oracle MySQL=5.5.18

Oracle MySQL=5.5.19

Oracle MySQL=5.5.20

Oracle MySQL=5.5.21

Event History

Aug 17, 2012

CVE Published

via MITRE·12:00 AM

Data Sourced

via MITRE·12:00 AM

Description

Frequently Asked Questions

What is the severity of CVE-2012-2102?

The severity of CVE-2012-2102 is considered medium as it allows a denial of service condition.

How do I fix CVE-2012-2102?

To fix CVE-2012-2102, upgrade MySQL to version 5.1.62 or 5.5.22 or later.

What versions of MySQL are affected by CVE-2012-2102?

CVE-2012-2102 affects MySQL versions 5.1.x before 5.1.62 and 5.5.x before 5.5.22.

How does CVE-2012-2102 exploit occur?

CVE-2012-2102 exploits occur when remote authenticated users delete a record and utilize the HANDLER READ NEXT command.

What type of vulnerability is CVE-2012-2102 classified as?

CVE-2012-2102 is classified as a denial of service vulnerability.