CVE-2012-3173: Medium severity mysql vulnerability
Published Oct 17, 2012
·Updated
Unspecified vulnerability in the MySQL Server component in Oracle MySQL 5.1.63 and earlier, and 5.5.25 and earlier, allows remote authenticated users to affect availability via unknown vectors related to InnoDB Plugin.
Affected Software
14 affected components
Oracle MySQL>=5.1.0<=5.1.63
Oracle MySQL>=5.5.0<=5.5.25
MariaDB MariaDB>=5.1.0<5.1.66
MariaDB MariaDB>=5.5.0<5.5.27
redhat Enterprise Linux Desktop=6.0
redhat Enterprise Linux Eus=6.3
redhat Enterprise Linux Server=6.0
redhat Enterprise Linux Workstation=6.0
Canonical Ubuntu Linux=10.04
Canonical Ubuntu Linux=11.10
Canonical Ubuntu Linux=12.04
Canonical Ubuntu Linux=12.10
Debian Debian Linux=6.0
Debian Debian Linux=7.0
Remediation
Event History
Oct 17, 2012
CVE Published
via MITRE·12:00 AM
Data Sourced
via MITRE·12:00 AM
Description
Frequently Asked Questions
1
What is the severity of CVE-2012-3173?
CVE-2012-3173 has a moderate severity rating, allowing remote authenticated users to impact system availability.
2
How do I fix CVE-2012-3173?
To fix CVE-2012-3173, upgrade your MySQL Server to a version later than 5.1.63 or 5.5.25.
3
Which versions of MySQL are affected by CVE-2012-3173?
CVE-2012-3173 affects MySQL versions 5.1.63 and earlier, and 5.5.25 and earlier.
4
Can CVE-2012-3173 affect MariaDB?
Yes, CVE-2012-3173 can affect MariaDB versions prior to 5.1.66 and 5.5.27.
5
What types of users can exploit CVE-2012-3173?
CVE-2012-3173 can be exploited by remote authenticated users.