CVE-2012-3160 — Oracle Mysql vulnerability

5 documents5 sources

Severity

2.1LOWNVD

EPSS

0.1%

top 76.89%

CISA KEV

Not in KEV

Exploit

No known exploits

Affected products

Mariadb Oracle Mysql Canonical Ubuntu Linux +5 more

Timeline

PublishedOct 16

Latest updateMay 13

Description

Unspecified vulnerability in the MySQL Server component in Oracle MySQL 5.1.65 and earlier, and 5.5.27 and earlier, allows local users to affect confidentiality via unknown vectors related to Server Installation.

CVSS vector

AV:L/AC:L/C:P/I:N/A:NExploitability: 3.9 | Impact: 2.9

Affected Packages5 packages

▶NVDoracle/mysql5.1.0 — 5.1.65+1

▶NVDredhat/enterprise_linux_server6.0

▶NVDmariadb/mariadb5.1.0 — 5.1.66+1

▶NVDredhat/enterprise_linux_desktop6.0

▶NVDredhat/enterprise_linux_workstation6.0

Also affects: Debian Linux 6.0, 7.0, Ubuntu Linux 10.04, 11.10, 12.04, 12.10, Enterprise Linux 6.3

Patches

Patch: www.oracle.com ↗Patch: www.oracle.com ↗

🔴Vulnerability Details

GHSA

GHSA-wc83-5m7f-xhpq: Unspecified vulnerability in the MySQL Server component in Oracle MySQL 5↗2022-05-13

▶

📋Vendor Advisories

Ubuntu

MySQL vulnerabilities↗2012-11-05

▶

Red Hat

mysql: unspecified vulnerability in Server Installation leading to information disclosure (CPU Oct 2012)↗2012-10-16

▶

💬Community

Bugzilla

CVE-2012-3160 mysql: unspecified vulnerability in Server Installation leading to information disclosure (CPU Oct 2012)↗2012-10-17

▶