PT-2012-6059 · Mariadb+2 · Mariadb+3
Huzaifa Sidhpurwala
·
Publicado
2012-12-03
·
Atualizado
2024-06-15
·
CVE-2012-5612
CVSS v2.0
6.5
Média
| Vetor | AV:N/AC:L/Au:S/C:P/I:P/A:P |
Name of the Vulnerable Software and Affected Versions
Oracle MySQL versions 5.5.19 through 5.5.28
MariaDB versions 5.5.28a and possibly other versions
Description
A heap-based buffer overflow issue allows remote authenticated users to cause a denial of service, resulting in memory corruption and crash, and possibly execute arbitrary code. This can be demonstrated using various database commands, including
USE, SHOW TABLES, DESCRIBE, SHOW FIELDS FROM, SHOW COLUMNS FROM, SHOW INDEX FROM, CREATE TABLE, DROP TABLE, ALTER TABLE, DELETE FROM, UPDATE, and SET PASSWORD.Recommendations
For Oracle MySQL versions 5.5.19 through 5.5.28, update to a version outside of this range to resolve the issue.
For MariaDB versions 5.5.28a and possibly other versions, consider restricting access to the affected database commands as a temporary workaround until a patch is available.
Exploit
Correção
DoS
Memory Corruption
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
Enumeração de Fraquezas
Identificadores relacionados
Produtos afetados
Mariadb
Mariadb Server
Mysql Server
Suse