CVE-2013-0384: Medium severity mysql vulnerability
Published Jan 17, 2013
·Updated
Unspecified vulnerability in the Server component in Oracle MySQL 5.1.66 and earlier, and 5.5.28 and earlier, allows remote authenticated users to affect availability via unknown vectors related to Information Schema.
Affected Software
15 affected components
Oracle MySQL>=5.1.0<=5.1.66
Oracle MySQL>=5.5.0<=5.5.28
Canonical Ubuntu Linux=10.04
Canonical Ubuntu Linux=11.10
Canonical Ubuntu Linux=12.04
Canonical Ubuntu Linux=12.10
redhat Enterprise Linux Desktop=7.0
redhat Enterprise Linux Eus=6.3
redhat Enterprise Linux Server=6.0
redhat Enterprise Linux Workstation=6.0
MariaDB MariaDB>=5.1.0<5.1.67
MariaDB MariaDB>=5.2.0<5.2.14
MariaDB MariaDB>=5.3.0<5.3.12
MariaDB MariaDB>=5.5.0<5.5.29
MariaDB MariaDB=10.0.0
Event History
Jan 17, 2013
CVE Published
via MITRE·01:30 AM
Data Sourced
via MITRE·01:30 AM
Description
Frequently Asked Questions
1
What is the severity of CVE-2013-0384?
The severity of CVE-2013-0384 is not explicitly rated, but it allows remote authenticated users to impact the availability of the server.
2
How do I fix CVE-2013-0384?
To fix CVE-2013-0384, it is recommended to upgrade MySQL to a patched version later than 5.1.66 and 5.5.28.
3
Which versions of MySQL are affected by CVE-2013-0384?
CVE-2013-0384 affects MySQL versions 5.1.66 and earlier, and 5.5.28 and earlier.
4
Is CVE-2013-0384 exploitable from remote locations?
Yes, CVE-2013-0384 can be exploited by remote authenticated users, impacting server availability.
5
Are MariaDB versions affected by CVE-2013-0384?
Yes, MariaDB versions prior to 5.1.67, 5.2.14, 5.3.12, and 5.5.29 are affected by CVE-2013-0384.