CVE-2012-3197: Low severity mysql vulnerability
Published Oct 17, 2012
·Updated
Unspecified vulnerability in the MySQL Server component in Oracle MySQL 5.1.64 and earlier, and 5.5.26 and earlier, allows remote authenticated users to affect availability via unknown vectors related to Server Replication.
Affected Software
14 affected components
Oracle MySQL>=5.1.0<=5.1.64
Oracle MySQL>=5.5.0<=5.5.26
MariaDB MariaDB>=5.1.0<5.1.66
MariaDB MariaDB>=5.5.0<5.5.27
Debian Debian Linux=6.0
Debian Debian Linux=7.0
Canonical Ubuntu Linux=10.04
Canonical Ubuntu Linux=11.10
Canonical Ubuntu Linux=12.04
Canonical Ubuntu Linux=12.10
redhat Enterprise Linux Desktop=6.0
redhat Enterprise Linux Eus=6.3
redhat Enterprise Linux Server=6.0
redhat Enterprise Linux Workstation=6.0
Remediation
Event History
Oct 17, 2012
CVE Published
via MITRE·12:00 AM
Data Sourced
via MITRE·12:00 AM
Description
Frequently Asked Questions
1
What is the severity of CVE-2012-3197?
CVE-2012-3197 is categorized as a moderate severity vulnerability affecting MySQL Server.
2
How do I fix CVE-2012-3197?
To mitigate CVE-2012-3197, upgrade MySQL to version 5.1.65 or 5.5.27 or later.
3
Who is affected by CVE-2012-3197?
CVE-2012-3197 affects remote authenticated users on MySQL Server versions 5.1.64 and earlier, and 5.5.26 and earlier.
4
What type of attack does CVE-2012-3197 facilitate?
CVE-2012-3197 allows remote authenticated users to potentially affect availability via unknown vectors related to Server Replication.
5
Is CVE-2012-3197 applicable to MariaDB?
Yes, CVE-2012-3197 affects certain versions of MariaDB that are based on the vulnerable MySQL versions.