CVE-2012-5614

Oracle MySQL 5.1.67 and earlier and 5.5.29 and earlier, and MariaDB 5.5.28a and possibly other versions, allows remote authenticated users to cause a denial of service mysqld crash via a SELECT command with an UpdateXML command containing XML with a large number of unique, nested elements...

Buffer overflow

Oracle MySQL 5.5.38 and earlier, 5.6.19 and earlier, and MariaDB 5.5.28a, 5.3.11, 5.2.13, 5.1.66, and possibly other versions, generates different error messages with different time delays depending on whether a user name exists, which allows remote attackers to enumerate valid usernames...

Command injection

Oracle MySQL 5.1.67 and earlier and 5.5.29 and earlier, and MariaDB 5.5.28a and possibly other versions, allows remote authenticated users to cause a denial of service mysqld crash via a SELECT command with an UpdateXML command containing XML with a large number of unique, nested elements...

CVE-2012-5611

Stack-based buffer overflow in the aclget function in Oracle MySQL 5.5.19 and other versions through 5.5.28, and 5.1.53 and other versions through 5.1.66, and MariaDB 5.5.2.x before 5.5.28a, 5.3.x before 5.3.11, 5.2.x before 5.2.13 and 5.1.x before 5.1.66, allows remote authenticated users to...

CVE-2012-5614

Disclaimer: This data contains information about vulnerable...

CVE-2012-5614

Oracle MySQL 5.1.67 and earlier and 5.5.29 and earlier, and MariaDB 5.5.28a and possibly other versions, allows remote authenticated users to cause a denial of service mysqld crash via a SELECT command with an UpdateXML command containing XML with a large number of unique, nested elements...

CVE-2012-5612

Heap-based buffer overflow in Oracle MySQL 5.5.19 and other versions through 5.5.28, and MariaDB 5.5.28a and possibly other versions, allows remote authenticated users to cause a denial of service memory corruption and crash and possibly execute arbitrary code, as demonstrated using certain...

CVE-2012-5615

CVE-2012-5615 affects Oracle MySQL 5.5.38 and earlier, 5.6.19 and earlier, and MariaDB 5.5.x and earlier. The flaw causes different error messages and time delays depending on whether a username exists, enabling remote username enumeration. The connected Red Hat advisories (RHSA-2014-1940 and rel...

CVE-2012-5612

Disclaimer: This data contains information about vulnerable...

CVE-2012-5615

Disclaimer: This data contains information about vulnerable...

CVE-2012-5611

Disclaimer: This data contains information about vulnerable...

CVE-2012-5615

Oracle MySQL 5.5.38 and earlier, 5.6.19 and earlier, and MariaDB 5.5.28a, 5.3.11, 5.2.13, 5.1.66, and possibly other versions, generates different error messages with different time delays depending on whether a user name exists, which allows remote attackers to enumerate valid usernames...

CVE-2012-5611

CVE-2012-5611 is a stack-based buffer overflow in the MySQL acl_get/user permission checking path. An authenticated remote user could crash mysqld or potentially execute arbitrary code. Affected: MySQL/MariaDB branches listed in the initial entry (e.g., 5.5.x up to 5.5.28a, 5.1.x up to 5.1.66; Ma...

CVE-2012-5614

CVE-2012-5614 affects Oracle MySQL before 5.1.67 and 5.5.29, and MariaDB before 5.5.28a. The vulnerability allows remote authenticated users to cause a denial of service (mysqld crash) via a SELECT that uses UpdateXML with XML containing a large number of unique, nested elements. Connected source...

CVE-2012-5611

Stack-based buffer overflow in the aclget function in Oracle MySQL 5.5.19 and other versions through 5.5.28, and 5.1.53 and other versions through 5.1.66, and MariaDB 5.5.2.x before 5.5.28a, 5.3.x before 5.3.11, 5.2.x before 5.2.13 and 5.1.x before 5.1.66, allows remote authenticated users to...

CVE-2012-5613

MySQL 5.5.19 and possibly other versions, and MariaDB 5.5.28a and possibly other versions, when configured to assign the FILE privilege to users who should not have administrative privileges, allows remote authenticated users to gain privileges by leveraging the FILE privilege to create files as...

CVE-2012-5613

CVE-2012-5613 affects MySQL 5.5.19 (and potentially other 5.5.x versions) and MariaDB 5.5.28a (and possibly others) when the FILE privilege is assigned to users who should not have administrative rights. The issue allows remote authenticated users to escalate privileges by using the FILE privileg...

PT-2012-6060 · Mariadb Foundation +2 · Mariadb +2

Name of the Vulnerable Software and Affected Versions: MySQL versions 5.5.19 and possibly other versions MariaDB versions 5.5.28a and possibly other versions Description: The issue allows remote authenticated users to gain privileges by leveraging the FILE privilege to create files as the MySQL...

PT-2012-6061 · Oracle +3 · Mysql Server +4

Name of the Vulnerable Software and Affected Versions: Oracle MySQL versions 5.1.67 and earlier Oracle MySQL versions 5.5.29 and earlier MariaDB versions 5.5.28a and possibly other versions Description: The issue allows remote authenticated users to cause a denial of service, resulting in a mysql...

CVE-2012-5611 MySQL Buffer Overflow

Stack-based buffer overflow in the aclget function in Oracle MySQL 5.5.19 and other versions through 5.5.28, and 5.1.53 and other versions through 5.1.66, and MariaDB 5.5.2.x before 5.5.28a, 5.3.x before 5.3.11, 5.2.x before 5.2.13 and 5.1.x before 5.1.66, allows remote authenticated users to...