CVE-2012-2749: Medium severity MySQL mysql vulnerability
MySQL 5.1.x before 5.1.63 and 5.5.x before 5.5.24 allows remote authenticated users to cause a denial of service (mysqld crash) via vectors related to incorrect calculation and a sort order index.
Other sources
MySQL versions 5.1.63 and 5.5.24 fix the following bug noted in the 5.1.63 release notes:
Security Fix: Bug #59387 was fixed.
http://dev.mysql.com/doc/refman/5.1/en/news-5-1-63.html
This bug is also fixed in 5.5.24, but not mentioned in the release notes or changelog.
Related upstream change is:
http://bazaar.launchpad.net/~mysql/mysql-server/5.1/revision/3560.10.16 Bug#11766300 59387: FAILING ASSERTION: CURSOR->POSSTATE == 1997660512 (BTRPCURISPOSITIONE Bug#13639204 64111: CRASH ON SELECT SUBQUERY WITH NON UNIQUE INDEX
This issue allows non-admin database user with full SQL access to crash mysqld. Upstream commit explains issue details:
The crash happened due to wrong calculation of key length during creation of reference for sort order index. The problem is that keyuse->usedtables can have OUTERREFTABLEBIT enabled but usedtables parameter(createrefforkey() func) does not have it. So key parts which have OUTERREFTABLEBIT are ommited and it could lead to incorrect key length calculation(zero key length).
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2012-2749?
The severity of CVE-2012-2749 is categorized as medium, as it allows for denial of service through a crash of the mysqld process.
How do I fix CVE-2012-2749?
To fix CVE-2012-2749, you should upgrade your MySQL installation to version 5.1.63 or 5.5.24 or later.
Who is affected by CVE-2012-2749?
CVE-2012-2749 affects authenticated users of MySQL versions 5.1.x before 5.1.63 and 5.5.x before 5.5.24.
What can exploit CVE-2012-2749?
CVE-2012-2749 can be exploited by remote authenticated users via incorrect calculation and sort order index, leading to a denial of service.
What are the vulnerable versions of MySQL for CVE-2012-2749?
The vulnerable versions of MySQL for CVE-2012-2749 are 5.1.5 through 5.1.62 and 5.5.0 through 5.5.23.