CVE-2012-5612: Buffer Overflow
Heap-based buffer overflow in Oracle MySQL 5.5.19 and other versions through 5.5.28, and MariaDB 5.5.28a and possibly other versions, allows remote authenticated users to cause a denial of service (memory corruption and crash) and possibly execute arbitrary code, as demonstrated using certain variations of the (1) USE, (2) SHOW TABLES, (3) DESCRIBE, (4) SHOW FIELDS FROM, (5) SHOW COLUMNS FROM, (6) SHOW INDEX FROM, (7) CREATE TABLE, (8) DROP TABLE, (9) ALTER TABLE, (10) DELETE FROM, (11) UPDATE, and (12) SET PASSWORD commands.
Affected Software
Remediation
Patch Available
Event History
Frequently Asked Questions
What is the severity of CVE-2012-5612?
CVE-2012-5612 has a high severity rating due to its potential to cause denial of service and possibly allow remote code execution.
How does CVE-2012-5612 affect Oracle MySQL and MariaDB?
CVE-2012-5612 affects Oracle MySQL versions 5.5.19 to 5.5.28 and MariaDB versions 5.5.28a and possibly others by allowing a heap-based buffer overflow.
How do I fix CVE-2012-5612?
To fix CVE-2012-5612, upgrade Oracle MySQL to version 5.5.29 or later and MariaDB to a patched version.
Can CVE-2012-5612 be exploited remotely?
Yes, CVE-2012-5612 can be exploited by remote authenticated users, leading to memory corruption and application crashes.
What types of systems are impacted by CVE-2012-5612?
CVE-2012-5612 impacts systems running affected versions of Oracle MySQL and MariaDB, including various Linux distributions.