Ubuntu.comUB:CVE-2013-1506CVE-2013-1506
2.8 Low
CVSS2
Access Vector
NETWORK
Access Complexity
MEDIUM
Authentication
MULTIPLE
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
PARTIAL
AV:N/AC:M/Au:M/C:N/I:N/A:P
0.004 Low
EPSS
Percentile
73.0%
Unspecified vulnerability in Oracle MySQL 5.1.67 and earlier, 5.5.29 and
earlier, and 5.6.10 and earlier allows remote authenticated users to affect
availability via unknown vectors related to Server Locking.
Notes
| Author | Note |
|---|---|
| jdstrand | mysql-cluster-7.0 not supported per Ubuntu Server team As of 2012/01/09, Oracle no longer supports MySQL 5.0. Unfortunately, because of upstream update and commit policies it is not possible to backport patches from later releases. Ubuntu is regrettably unable to support MySQL 5.0 and users are encouraged to upgrade to Ubuntu 10.04 LTS or later. |
| OS | Version | Architecture | Package | Version | Filename |
|---|---|---|---|---|---|
| ubuntu | 11.10 | noarch | mysql-5.1 | < 5.1.69-0ubuntu0.11.10.1 | UNKNOWN |
| ubuntu | 12.04 | noarch | mysql-5.5 | < 5.5.31-0ubuntu0.12.04.1 | UNKNOWN |
| ubuntu | 12.10 | noarch | mysql-5.5 | < 5.5.31-0ubuntu0.12.10.1 | UNKNOWN |
| ubuntu | 13.04 | noarch | mysql-5.5 | < 5.5.31-0ubuntu0.13.04.1 | UNKNOWN |
| ubuntu | 10.04 | noarch | mysql-dfsg-5.1 | < 5.1.69-0ubuntu0.10.04.1 | UNKNOWN |
References
www.oracle.com/technetwork/topics/security/cpuapr2013-1899555.html
launchpad.net/bugs/cve/CVE-2013-1506
nvd.nist.gov/vuln/detail/CVE-2013-1506
security-tracker.debian.org/tracker/CVE-2013-1506
ubuntu.com/security/notices/USN-1807-1
ubuntu.com/security/notices/USN-1807-2
www.cve.org/CVERecord?id=CVE-2013-1506
Related
2.8 Low
CVSS2
Access Vector
NETWORK
Access Complexity
MEDIUM
Authentication
MULTIPLE
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
PARTIAL
AV:N/AC:M/Au:M/C:N/I:N/A:P
0.004 Low
EPSS
Percentile
73.0%