CVE-2013-2392

2013-04-1717:55:00

NVD-CWE-noinfo

[email protected]

web.nvd.nist.gov

cve-2013-2392

oracle mysql

vulnerability

availability

server optimizer

4.2 Medium

AI Score

Confidence

High

4 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

SINGLE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:L/Au:S/C:N/I:N/A:P

0.004 Low

EPSS

Percentile

73.1%

JSON

Unspecified vulnerability in Oracle MySQL 5.1.68 and earlier, 5.5.30 and earlier, and 5.6.10 and earlier allows remote authenticated users to affect availability via unknown vectors related to Server Optimizer.

CPENameOperatorVersion
oracle:mysqloracle mysqlle5.1.68
oracle:mysqloracle mysqlle5.5.30
oracle:mysqloracle mysqlle5.6.10
mariadb:mariadbmariadblt5.5.31
mariadb:mariadbmariadblt10.0.3
redhat:enterprise_linux_desktopredhat enterprise linux desktopeq6.0
redhat:enterprise_linux_serverredhat enterprise linux servereq6.0
redhat:enterprise_linux_workstationredhat enterprise linux workstationeq6.0
redhat:enterprise_linux_eusredhat enterprise linux euseq6.4

CPE	Name	Operator	Version
oracle:mysql	oracle mysql	le	5.1.68
oracle:mysql	oracle mysql	le	5.5.30
oracle:mysql	oracle mysql	le	5.6.10
mariadb:mariadb	mariadb	lt	5.5.31
mariadb:mariadb	mariadb	lt	10.0.3
redhat:enterprise_linux_desktop	redhat enterprise linux desktop	eq	6.0
redhat:enterprise_linux_server	redhat enterprise linux server	eq	6.0
redhat:enterprise_linux_workstation	redhat enterprise linux workstation	eq	6.0
redhat:enterprise_linux_eus	redhat enterprise linux eus	eq	6.4