PT-2012-2926 · Oracle · Yassl+1

Vincent Danen · Published 2012-12-21 · Updated 2023-02-13 · CVE-2012-0882

Positive Technologies (AI Summary)

CVSS v2.0

7.5

High

Base vector

AV:N/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions MySQL versions 5.5.20 through 5.5.21 MySQL versions 5.1.x through 5.1.61

Description A buffer overflow issue in yaSSL, used by MySQL, allows remote attackers to execute arbitrary code. The issue is related to unspecified vectors. There is no information available about the estimated number of potentially affected devices or real-world incidents where this issue was exploited.

Recommendations For MySQL versions 5.5.20 through 5.5.21, update to version 5.5.22 or later. For MySQL versions 5.1.x through 5.1.61, update to version 5.1.62 or later.

Fix

Buffer Overflow

Weakness Enumeration

CWE-119

Related Identifiers

CVE-2012-0882

Affected Products

Mysql Server

Yassl

References · 6

• https://nvd.nist.gov/vuln/detail/CVE-2012-0882 · Security Note
• https://blogs.oracle.com/sunsecurity/entry/cve_2012_0882buffer_overflow_vulnerability · Vendor Advisory
• https://bugzilla.redhat.com/show_bug.cgi?id=789141 · Note
• https://lists.immunityinc.com/pipermail/canvas/2012-February/000014.html · Note
• https://lists.immunityinc.com/pipermail/canvas/2012-February/000011.html · Note
• http://openwall.com/lists/oss-security/2012/02/24/2 · Note