CVE-2013-0389: Medium severity mysql vulnerability
Published Jan 17, 2013
·Updated
Unspecified vulnerability in the Server component in Oracle MySQL 5.1.66 and earlier, and 5.5.28 and earlier, allows remote authenticated users to affect availability via unknown vectors related to Server Optimizer.
Affected Software
11 affected components
ORACLE MySQL>=5.1.0<=5.1.66
ORACLE MySQL>=5.5.0<=5.5.28
MariaDB MariaDB>=5.1.0<5.1.67
MariaDB MariaDB>=5.2.0<5.2.14
MariaDB MariaDB>=5.3.0<5.3.12
MariaDB MariaDB>=5.5.0<5.5.29
MariaDB MariaDB=10.0.0
Canonical Ubuntu Linux=10.04
Canonical Ubuntu Linux=11.10
Canonical Ubuntu Linux=12.04
Canonical Ubuntu Linux=12.10
Event History
Jan 17, 2013
CVE Published
via MITRE·01:30 AM
Data Sourced
via MITRE·01:30 AM
Description
Frequently Asked Questions
1
What is the severity of CVE-2013-0389?
CVE-2013-0389 has a severity rating of medium due to its potential impact on system availability.
2
How do I fix CVE-2013-0389?
To fix CVE-2013-0389, upgrade to MySQL version 5.1.67 or 5.5.29 or later.
3
Who is affected by CVE-2013-0389?
CVE-2013-0389 affects Oracle MySQL versions 5.1.66 and earlier, and 5.5.28 and earlier.
4
What types of attacks are possible with CVE-2013-0389?
CVE-2013-0389 allows remote authenticated users to disrupt availability through unspecified vectors related to the Server Optimizer.
5
Is CVE-2013-0389 patched in later versions?
Yes, CVE-2013-0389 is resolved in all versions of MySQL after 5.1.67 and 5.5.29.