CVE-2012-5614: Medium severity mysql vulnerability
A Denial-of-Service flaw was found in MySQL. An authenticated database user could use this flaw to cause a temporary denial of service (mysqld crash)
Reference: http://seclists.org/fulldisclosure/2012/Dec/7
This issue was assigned CVE-2012-5614.
Other sources
Oracle MySQL 5.1.67 and earlier and 5.5.29 and earlier, and MariaDB 5.5.28a and possibly other versions, allows remote authenticated users to cause a denial of service (mysqld crash) via a SELECT command with an UpdateXML command containing XML with a large number of unique, nested elements.
— MITRE
Affected Software
Remediation
Patch Available
Event History
Frequently Asked Questions
What is the severity of CVE-2012-5614?
CVE-2012-5614 is classified as a Denial-of-Service vulnerability that can cause mysqld crashes.
How do I fix CVE-2012-5614?
To mitigate CVE-2012-5614, upgrade MySQL to version 5.5.21 or higher.
Which versions of MySQL are affected by CVE-2012-5614?
Versions of MySQL between 5.1.0 and 5.1.67 and between 5.5.0 and 5.5.29 are affected by CVE-2012-5614.
What type of vulnerability is CVE-2012-5614?
CVE-2012-5614 is a Denial-of-Service vulnerability that allows an authenticated user to crash the MySQL server.
Can MariaDB be affected by CVE-2012-5614?
Yes, certain versions of MariaDB between 5.5.0 and 5.5.30 are also affected by CVE-2012-5614.