CVE-2012-1696 — Oracle Mysql vulnerability

5 documents5 sources

Severity

4.0MEDIUMNVD

EPSS

0.7%

top 28.71%

CISA KEV

Not in KEV

Exploit

No known exploits

Affected products

Oracle Mysql Mysql Mysql Community Server +2 more

Timeline

PublishedMay 3

Latest updateMay 13

Description

Unspecified vulnerability in the MySQL Server component in Oracle MySQL 5.5.19 and earlier allows remote authenticated users to affect availability via unknown vectors related to Server Optimizer.

CVSS vector

AV:N/AC:L/C:N/I:N/A:PExploitability: 8.0 | Impact: 2.9

Affected Packages5 packages

▶NVDmysql/mysql_server5.1.22

▶NVDmysql/mysql_community_server22 versions+21

▶NVDoracle/mysql5.5.19+200

▶NVDoracle/mysql_connector_j5.1.8

▶NVDmysql/mysql27 versions+26

🔴Vulnerability Details

GHSA

GHSA-23p3-vg9x-qw6p: Unspecified vulnerability in the MySQL Server component in Oracle MySQL 5↗2022-05-13

▶

CVEList

CVE-2012-1696: Unspecified vulnerability in the MySQL Server component in Oracle MySQL 5↗2012-05-03

▶

📋Vendor Advisories

Red Hat

mysql: Unspecified vulnerability in the server optimizer subcomponent leading to DoS (server hang / crash) (Oracle CPU April 2012)↗2012-04-17

▶

💬Community

Bugzilla

CVE-2012-1696 mysql: Unspecified vulnerability in the server optimizer subcomponent leading to DoS (server hang / crash) (Oracle CPU April 2012)↗2012-04-19

▶