PT-2012-4525 · Oracle+3 · Mysql Server+3

Published 2012-10-16 · Updated 2022-06-30 · CVE-2012-3158

Positive Technologies (AI Summary)

CVSS v2.0

7.5

High

Base vector

AV:N/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions MySQL Server versions 5.1.64 and earlier MySQL Server versions 5.5.26 and earlier

Description The issue affects confidentiality, integrity, and availability. It is related to unknown vectors in the Protocol. The estimated number of potentially affected devices is not specified.

Recommendations For MySQL Server versions 5.1.64 and earlier, update to a version later than 5.1.64. For MySQL Server versions 5.5.26 and earlier, update to a version later than 5.5.26. As a temporary workaround, consider restricting access to the Protocol component until a patch is available.

Fix

Related Identifiers

CESA-2012_1462

CVE-2012-3158

DSA-2581-1

RHSA-2012:1462

RHSA-2012_1462

Affected Products

Centos

Mariadb Server

Mysql Server

Red Hat

References · 62

• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-1703 · Security Note
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-1734 · Security Note
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-1689 · Security Note
• http://debian.org/security/2012/dsa-2581 · Vendor Advisory
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-3167 · Security Note
• http://security.gentoo.org/glsa/glsa-201308-06.xml · Vendor Advisory
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-3163 · Security Note
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-3150 · Security Note
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-3173 · Security Note
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-3177 · Security Note
• http://mandriva.com/security/advisories?name=MDVSA-2013:102 · Vendor Advisory
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-1688 · Security Note
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-3166 · Security Note
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-3160 · Security Note
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-3158 · Security Note