Heap overflow

2012-12-0312:49:00

PRIOn knowledge base

www.prio-n.com

7.6 High

AI Score

Confidence

Low

6.5 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

SINGLE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:S/C:P/I:P/A:P

0.961 High

EPSS

Percentile

99.5%

JSON

Heap-based buffer overflow in Oracle MySQL 5.5.19 and other versions through 5.5.28, and MariaDB 5.5.28a and possibly other versions, allows remote authenticated users to cause a denial of service (memory corruption and crash) and possibly execute arbitrary code, as demonstrated using certain variations of the (1) USE, (2) SHOW TABLES, (3) DESCRIBE, (4) SHOW FIELDS FROM, (5) SHOW COLUMNS FROM, (6) SHOW INDEX FROM, (7) CREATE TABLE, (8) DROP TABLE, (9) ALTER TABLE, (10) DELETE FROM, (11) UPDATE, and (12) SET PASSWORD commands.

CPENameOperatorVersion
ubuntu_linuxeq11.10
ubuntu_linuxeq12.10
ubuntu_linuxeq10.04
ubuntu_linuxeq12.04
mariadbeq10.0.0
mariadbge5.2.0
mariadblt5.2.14
mariadbge5.3.0
mariadblt5.3.12
mariadbge5.5.0

Name	Operator	Version
ubuntu_linux	eq	11.10
ubuntu_linux	eq	12.10
ubuntu_linux	eq	10.04
ubuntu_linux	eq	12.04
mariadb	eq	10.0.0
mariadb	ge	5.2.0
mariadb	lt	5.2.14
mariadb	ge	5.3.0
mariadb	lt	5.3.12
mariadb	ge	5.5.0