CVE-2012-3163: Critical severity mysql vulnerability

Q: What is the severity of CVE-2012-3163?

CVE-2012-3163 is considered a moderate severity vulnerability due to its potential impact on confidentiality, integrity, and availability.

Q: How do I fix CVE-2012-3163?

To fix CVE-2012-3163, upgrade your MySQL server to version 5.1.65 or later, or 5.5.27 or later.

Q: What versions of MySQL are affected by CVE-2012-3163?

CVE-2012-3163 affects MySQL versions 5.1.64 and earlier, as well as 5.5.26 and earlier.

Q: Can CVE-2012-3163 be exploited remotely?

Yes, CVE-2012-3163 can be exploited remotely by authenticated users.

Q: What are the risks associated with CVE-2012-3163?

The risks associated with CVE-2012-3163 include potential disclosure of confidential information and disruption of service.

Published Oct 17, 2012

Updated

Unspecified vulnerability in the MySQL Server component in Oracle MySQL 5.1.64 and earlier, and 5.5.26 and earlier, allows remote authenticated users to affect confidentiality, integrity, and availability via unknown vectors related to Information Schema.

Affected Software

37 affected components

Oracle MySQL>=5.1.0<=5.1.64

Oracle MySQL>=5.5.0<=5.5.26

MariaDB MariaDB>=5.1<5.1.66

MariaDB MariaDB>=5.5.0<5.5.27

Canonical Ubuntu Linux=10.04

Canonical Ubuntu Linux=11.10

Canonical Ubuntu Linux=12.04

Canonical Ubuntu Linux=12.10

Debian Debian Linux=6.0

Debian Debian Linux=7.0

redhat Enterprise Linux Desktop=6.0

redhat Enterprise Linux Eus=6.3

redhat Enterprise Linux Server=6.0

redhat Enterprise Linux Workstation=6.0

F5 BIG-IP Access Policy Manager>=10.1.0<=10.2.4

F5 BIG-IP Access Policy Manager>=11.0.0<=11.3.0

F5 BIG-IP Advanced Firewall Manager=11.3.0

F5 BIG-IP Analytics>=11.0.0<=11.3.0

F5 BIG-IP Application Security Manager>=10.0.0<=10.2.4

F5 BIG-IP Application Security Manager>=11.0.0<=11.3.0

F5 BIG-IP Edge Gateway>=10.1.0<=10.2.4

F5 BIG-IP Edge Gateway>=11.0.0<=11.3.0

F5 Big-ip Enterprise Manager>=2.0.0<=2.3.0

F5 Big-ip Enterprise Manager>=3.0.0<=3.1.1

F5 Big-ip Global Traffic Manager>=10.0.0<=10.2.4

F5 Big-ip Global Traffic Manager>=11.0.0<=11.3.0

F5 Big-ip Link Controller>=10.0.0<=10.2.4

F5 Big-ip Link Controller>=11.0.0<=11.3.0

F5 Big-ip Local Traffic Manager>=10.0.0<=10.2.4

F5 Big-ip Local Traffic Manager>=11.0.0<=11.3.0

F5 Big-ip Policy Enforcement Manager=11.3.0

F5 Big-ip Protocol Security Module>=10.0.0<=10.2.4

F5 Big-ip Protocol Security Module>=11.0.0<=11.3.0

F5 Big-ip Wan Optimization Manager>=10.0.0<=10.2.4

F5 Big-ip Wan Optimization Manager>=11.0.0<=11.3.0

F5 Big-ip Webaccelerator>=10.0.0<=10.2.4

F5 Big-ip Webaccelerator>=11.0.0<=11.3.0

Remediation

Patch Available

http://www.oracle.com/technetwork/topics/security/cpuoct2012-1515893.html

Event History

Oct 17, 2012

CVE Published

via MITRE·12:00 AM

Data Sourced

via MITRE·12:00 AM

Description

Frequently Asked Questions

What is the severity of CVE-2012-3163?

CVE-2012-3163 is considered a moderate severity vulnerability due to its potential impact on confidentiality, integrity, and availability.

How do I fix CVE-2012-3163?