CVE-2012-3158 — Oracle Mysql vulnerability

5 documents5 sources
Severity
7.5HIGHNVD
EPSS
2.5%
top 14.53%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
8
MariadbOracle MysqlCanonical Ubuntu Linux+5 more
Timeline
PublishedOct 16
Latest updateMay 13

Description

Unspecified vulnerability in the MySQL Server component in Oracle MySQL 5.1.64 and earlier, and 5.5.26 and earlier, allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Protocol.

CVSS vector

AV:N/AC:L/C:P/I:P/A:PExploitability: 10.0 | Impact: 6.4

Affected Packages5 packages

▶NVDoracle/mysql5.1.0 — 5.1.64+1
▶NVDmariadb/mariadb5.1.0 — 5.1.66+1

Also affects: Debian Linux 6.0, 7.0, Ubuntu Linux 10.04, 11.10, 12.04, 12.10, Enterprise Linux 6.3

Patches

Patch: www.oracle.com ↗Patch: www.oracle.com ↗

🔴Vulnerability Details

1
GHSA
GHSA-cw5v-74xv-hcxg: Unspecified vulnerability in the MySQL Server component in Oracle MySQL 5↗2022-05-13
▶

📋Vendor Advisories

2
Ubuntu
MySQL vulnerabilities↗2012-11-05
▶
Red Hat
mysql: unspecified vulnerability related to the MySQL Protocol (CPU Oct 2012)↗2012-10-16
▶

💬Community

1
Bugzilla
CVE-2012-3158 mysql: unspecified vulnerability related to the MySQL Protocol (CPU Oct 2012)↗2012-10-17
▶