Heap overflow

Heap-based buffer overflow in Oracle MySQL 5.5.19 and other versions through 5.5.28, and MariaDB 5.5.28a and possibly other versions, allows remote authenticated users to cause a denial of service memory corruption and crash and possibly execute arbitrary code, as demonstrated using certain...

CVE-2012-5611

Disclaimer: This data contains information about vulnerable...

CVE-2012-5614

CVE-2012-5614 affects Oracle MySQL before 5.1.67 and 5.5.29, and MariaDB before 5.5.28a. The vulnerability allows remote authenticated users to cause a denial of service (mysqld crash) via a SELECT that uses UpdateXML with XML containing a large number of unique, nested elements. Connected source...

CVE-2012-5615

Disclaimer: This data contains information about vulnerable...

CVE-2012-5614

Disclaimer: This data contains information about vulnerable...

CVE-2012-5614

Oracle MySQL 5.1.67 and earlier and 5.5.29 and earlier, and MariaDB 5.5.28a and possibly other versions, allows remote authenticated users to cause a denial of service mysqld crash via a SELECT command with an UpdateXML command containing XML with a large number of unique, nested elements...

CVE-2012-5615

CVE-2012-5615 affects Oracle MySQL 5.5.38 and earlier, 5.6.19 and earlier, and MariaDB 5.5.x and earlier. The flaw causes different error messages and time delays depending on whether a username exists, enabling remote username enumeration. The connected Red Hat advisories (RHSA-2014-1940 and rel...

CVE-2012-5615

Oracle MySQL 5.5.38 and earlier, 5.6.19 and earlier, and MariaDB 5.5.28a, 5.3.11, 5.2.13, 5.1.66, and possibly other versions, generates different error messages with different time delays depending on whether a user name exists, which allows remote attackers to enumerate valid usernames...

CVE-2012-5612

Heap-based buffer overflow in Oracle MySQL 5.5.19 and other versions through 5.5.28, and MariaDB 5.5.28a and possibly other versions, allows remote authenticated users to cause a denial of service memory corruption and crash and possibly execute arbitrary code, as demonstrated using certain...

CVE-2012-5611

CVE-2012-5611 is a stack-based buffer overflow in the MySQL acl_get/user permission checking path. An authenticated remote user could crash mysqld or potentially execute arbitrary code. Affected: MySQL/MariaDB branches listed in the initial entry (e.g., 5.5.x up to 5.5.28a, 5.1.x up to 5.1.66; Ma...

CVE-2012-5611

Stack-based buffer overflow in the aclget function in Oracle MySQL 5.5.19 and other versions through 5.5.28, and 5.1.53 and other versions through 5.1.66, and MariaDB 5.5.2.x before 5.5.28a, 5.3.x before 5.3.11, 5.2.x before 5.2.13 and 5.1.x before 5.1.66, allows remote authenticated users to...

CVE-2012-5611

Stack-based buffer overflow in the aclget function in Oracle MySQL 5.5.19 and other versions through 5.5.28, and 5.1.53 and other versions through 5.1.66, and MariaDB 5.5.2.x before 5.5.28a, 5.3.x before 5.3.11, 5.2.x before 5.2.13 and 5.1.x before 5.1.66, allows remote authenticated users to...

CVE-2012-5612

Disclaimer: This data contains information about vulnerable...

CVE-2012-5612

Heap-based buffer overflow in Oracle MySQL 5.5.19 and other versions through 5.5.28, and MariaDB 5.5.28a and possibly other versions, allows remote authenticated users to cause a denial of service memory corruption and crash and possibly execute arbitrary code, as demonstrated using certain...

CVE-2012-5614

Oracle MySQL 5.1.67 and earlier and 5.5.29 and earlier, and MariaDB 5.5.28a and possibly other versions, allows remote authenticated users to cause a denial of service mysqld crash via a SELECT command with an UpdateXML command containing XML with a large number of unique, nested elements...

CVE-2012-5615

Oracle MySQL 5.5.38 and earlier, 5.6.19 and earlier, and MariaDB 5.5.28a, 5.3.11, 5.2.13, 5.1.66, and possibly other versions, generates different error messages with different time delays depending on whether a user name exists, which allows remote attackers to enumerate valid usernames...

CVE-2012-5613: Undefined Security Weakness

MySQL 5.5.19 and possibly other versions, and MariaDB 5.5.28a and possibly other versions, when configured to assign the FILE privilege to users who should not have administrative privileges, allows remote authenticated users to gain privileges by leveraging the FILE privilege to create files as...

CVE-2012-5611: Improper Restriction of Operations within the Bounds of a Memory Buffer

Stack-based buffer overflow in the aclget function in Oracle MySQL 5.5.19 and other versions through 5.5.28, and 5.1.53 and other versions through 5.1.66, and MariaDB 5.5.2.x before 5.5.28a, 5.3.x before 5.3.11, 5.2.x before 5.2.13 and 5.1.x before 5.1.66, allows remote authenticated users to...

UBUNTU-CVE-2012-5615

Oracle MySQL 5.5.38 and earlier, 5.6.19 and earlier, and MariaDB 5.5.28a, 5.3.11, 5.2.13, 5.1.66, and possibly other versions, generates different error messages with different time delays depending on whether a user name exists, which allows remote attackers to enumerate valid usernames...

PT-2012-6059

Name of the Vulnerable Software and Affected Versions Oracle MySQL versions 5.5.19 through 5.5.28 MariaDB versions 5.5.28a and possibly other versions Description A heap-based buffer overflow issue allows remote authenticated users to cause a denial of service, resulting in memory corruption and...