ByteOS Network

Vulnerability Details :

CVE-2012-3156

Assigner-oracle

Assigner Org ID-43595867-4340-4103-b7a2-9a5208d29a85

Published At-16 Oct, 2012 | 23:00

Updated At-06 Aug, 2024 | 19:57

Unspecified vulnerability in the MySQL Server component in Oracle MySQL 5.5.25 and earlier allows remote authenticated users to affect availability via unknown vectors related to Server.

EPSS History

Score

Latest Score

N/A

Percentile

Latest Percentile

N/A

▼Common Vulnerabilities and Exposures (CVE)

cve.org

Assigner:oracle

Assigner Org ID:43595867-4340-4103-b7a2-9a5208d29a85

Published At:16 Oct, 2012 | 23:00

Updated At:06 Aug, 2024 | 19:57

▼CVE Numbering Authority (CNA)

Unspecified vulnerability in the MySQL Server component in Oracle MySQL 5.5.25 and earlier allows remote authenticated users to affect availability via unknown vectors related to Server.

Affected Products

Vendor

n/a

Product

n/a

Versions

Affected

Problem Types

Type	CWE ID	Description
text	N/A	n/a

Type: text

CWE ID: N/A

Description: n/a

References

Hyperlink	Resource
http://secunia.com/advisories/51177	third-party-advisory x_refsource_SECUNIA
http://www.oracle.com/technetwork/topics/security/cpuoct2012-1515893.html	x_refsource_CONFIRM
http://www.ubuntu.com/usn/USN-1621-1	vendor-advisory x_refsource_UBUNTU
http://www.mandriva.com/security/advisories?name=MDVSA-2013:150	vendor-advisory x_refsource_MANDRIVA

Hyperlink: http://secunia.com/advisories/51177

Resource:

third-party-advisory

x_refsource_SECUNIA

Hyperlink: http://www.oracle.com/technetwork/topics/security/cpuoct2012-1515893.html

Resource:

x_refsource_CONFIRM

Hyperlink: http://www.ubuntu.com/usn/USN-1621-1

Resource:

vendor-advisory

x_refsource_UBUNTU

Hyperlink: http://www.mandriva.com/security/advisories?name=MDVSA-2013:150

Resource:

vendor-advisory

x_refsource_MANDRIVA

▼Authorized Data Publishers (ADP)

CVE Program Container

References

Hyperlink	Resource
http://secunia.com/advisories/51177	third-party-advisory x_refsource_SECUNIA x_transferred
http://www.oracle.com/technetwork/topics/security/cpuoct2012-1515893.html	x_refsource_CONFIRM x_transferred
http://www.ubuntu.com/usn/USN-1621-1	vendor-advisory x_refsource_UBUNTU x_transferred
http://www.mandriva.com/security/advisories?name=MDVSA-2013:150	vendor-advisory x_refsource_MANDRIVA x_transferred

Hyperlink: http://secunia.com/advisories/51177

Resource:

third-party-advisory

x_refsource_SECUNIA

x_transferred

Hyperlink: http://www.oracle.com/technetwork/topics/security/cpuoct2012-1515893.html

Resource:

x_refsource_CONFIRM

x_transferred

Hyperlink: http://www.ubuntu.com/usn/USN-1621-1

Resource:

vendor-advisory

x_refsource_UBUNTU

x_transferred

Hyperlink: http://www.mandriva.com/security/advisories?name=MDVSA-2013:150

Resource:

vendor-advisory

x_refsource_MANDRIVA

x_transferred

▼National Vulnerability Database (NVD)

nvd.nist.gov

Source:secalert_us@oracle.com

Published At:16 Oct, 2012 | 23:55

Updated At:11 Apr, 2025 | 00:51

Unspecified vulnerability in the MySQL Server component in Oracle MySQL 5.5.25 and earlier allows remote authenticated users to affect availability via unknown vectors related to Server.

Date Added	Due Date	Vulnerability Name	Required Action
	N/A

Metrics

Type	Version	Base score	Base severity	Vector
Primary	2.0	3.5	LOW	AV:N/AC:M/Au:S/C:N/I:N/A:P

Type: Primary

Version: 2.0

Base score: 3.5

Base severity: LOW

Vector:

AV:N/AC:M/Au:S/C:N/I:N/A:P

CPE Matches

Oracle Corporation

>>mysql>>Versions up to 5.5.25(inclusive)

cpe:2.3:a:oracle:mysql:*:*:*:*:*:*:*:*

Oracle Corporation

>>mysql>>5.5.0

cpe:2.3:a:oracle:mysql:5.5.0:*:*:*:*:*:*:*

Oracle Corporation

>>mysql>>5.5.1

cpe:2.3:a:oracle:mysql:5.5.1:*:*:*:*:*:*:*

Oracle Corporation

>>mysql>>5.5.2

cpe:2.3:a:oracle:mysql:5.5.2:*:*:*:*:*:*:*

Oracle Corporation

>>mysql>>5.5.3

cpe:2.3:a:oracle:mysql:5.5.3:*:*:*:*:*:*:*

Oracle Corporation

>>mysql>>5.5.4

cpe:2.3:a:oracle:mysql:5.5.4:*:*:*:*:*:*:*

Oracle Corporation

>>mysql>>5.5.5

cpe:2.3:a:oracle:mysql:5.5.5:*:*:*:*:*:*:*

Oracle Corporation

>>mysql>>5.5.6

cpe:2.3:a:oracle:mysql:5.5.6:*:*:*:*:*:*:*

Oracle Corporation

>>mysql>>5.5.7

cpe:2.3:a:oracle:mysql:5.5.7:*:*:*:*:*:*:*

Oracle Corporation

>>mysql>>5.5.9

cpe:2.3:a:oracle:mysql:5.5.9:*:*:*:*:*:*:*

Oracle Corporation

>>mysql>>5.5.10

cpe:2.3:a:oracle:mysql:5.5.10:*:*:*:*:*:*:*

Oracle Corporation

>>mysql>>5.5.11

cpe:2.3:a:oracle:mysql:5.5.11:*:*:*:*:*:*:*

Oracle Corporation

>>mysql>>5.5.12

cpe:2.3:a:oracle:mysql:5.5.12:*:*:*:*:*:*:*

Oracle Corporation

>>mysql>>5.5.13

cpe:2.3:a:oracle:mysql:5.5.13:*:*:*:*:*:*:*

Oracle Corporation

>>mysql>>5.5.14

cpe:2.3:a:oracle:mysql:5.5.14:*:*:*:*:*:*:*

Oracle Corporation

>>mysql>>5.5.15

cpe:2.3:a:oracle:mysql:5.5.15:*:*:*:*:*:*:*

Oracle Corporation

>>mysql>>5.5.16

cpe:2.3:a:oracle:mysql:5.5.16:*:*:*:*:*:*:*

Oracle Corporation

>>mysql>>5.5.17

cpe:2.3:a:oracle:mysql:5.5.17:*:*:*:*:*:*:*

Oracle Corporation

>>mysql>>5.5.18

cpe:2.3:a:oracle:mysql:5.5.18:*:*:*:*:*:*:*

Oracle Corporation

>>mysql>>5.5.19

cpe:2.3:a:oracle:mysql:5.5.19:*:*:*:*:*:*:*

Oracle Corporation

>>mysql>>5.5.20

cpe:2.3:a:oracle:mysql:5.5.20:*:*:*:*:*:*:*

Oracle Corporation

>>mysql>>5.5.21

cpe:2.3:a:oracle:mysql:5.5.21:*:*:*:*:*:*:*

Oracle Corporation

>>mysql>>5.5.22

cpe:2.3:a:oracle:mysql:5.5.22:*:*:*:*:*:*:*

Oracle Corporation

>>mysql>>5.5.23

cpe:2.3:a:oracle:mysql:5.5.23:*:*:*:*:*:*:*

Oracle Corporation

>>mysql>>5.5.24

cpe:2.3:a:oracle:mysql:5.5.24:*:*:*:*:*:*:*

Weaknesses

CWE ID	Type	Source
NVD-CWE-noinfo	Primary	nvd@nist.gov

CWE ID: NVD-CWE-noinfo

Type: Primary

Source: nvd@nist.gov

References

Hyperlink	Source	Resource
http://secunia.com/advisories/51177	secalert_us@oracle.com	N/A
http://www.mandriva.com/security/advisories?name=MDVSA-2013:150	secalert_us@oracle.com	N/A
http://www.oracle.com/technetwork/topics/security/cpuoct2012-1515893.html	secalert_us@oracle.com	Patch Vendor Advisory
http://www.ubuntu.com/usn/USN-1621-1	secalert_us@oracle.com	N/A
http://secunia.com/advisories/51177	af854a3a-2127-422b-91ae-364da2661108	N/A
http://www.mandriva.com/security/advisories?name=MDVSA-2013:150	af854a3a-2127-422b-91ae-364da2661108	N/A
http://www.oracle.com/technetwork/topics/security/cpuoct2012-1515893.html	af854a3a-2127-422b-91ae-364da2661108	Patch Vendor Advisory
http://www.ubuntu.com/usn/USN-1621-1	af854a3a-2127-422b-91ae-364da2661108	N/A

Hyperlink: http://secunia.com/advisories/51177

Source: secalert_us@oracle.com

Resource: N/A

Hyperlink: http://www.mandriva.com/security/advisories?name=MDVSA-2013:150

Source: secalert_us@oracle.com

Resource: N/A

Hyperlink: http://www.oracle.com/technetwork/topics/security/cpuoct2012-1515893.html

Source: secalert_us@oracle.com

Resource:

Patch

Vendor Advisory

Hyperlink: http://www.ubuntu.com/usn/USN-1621-1

Source: secalert_us@oracle.com

Resource: N/A

Hyperlink: http://secunia.com/advisories/51177

Source: af854a3a-2127-422b-91ae-364da2661108

Resource: N/A

Hyperlink: http://www.mandriva.com/security/advisories?name=MDVSA-2013:150

Source: af854a3a-2127-422b-91ae-364da2661108

Resource: N/A

Hyperlink: http://www.oracle.com/technetwork/topics/security/cpuoct2012-1515893.html

Source: af854a3a-2127-422b-91ae-364da2661108

Resource:

Patch

Vendor Advisory

Hyperlink: http://www.ubuntu.com/usn/USN-1621-1

Source: af854a3a-2127-422b-91ae-364da2661108

Resource: N/A

Similar CVEs

113Records found

CVE-2019-2617

Matching Score-8

Assigner-Oracle

View Details

Matching Score-8

Assigner-Oracle

CVSS Score-4.4||MEDIUM

EPSS-0.18% / 39.97%

7 Day CHG-0.15%

Published-23 Apr, 2019 | 18:16

Updated-02 Oct, 2024 | 15:46

Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Replication). Supported versions that are affected are 8.0.15 and prior. Difficult to exploit vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.0 Base Score 4.4 (Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:H).

Vendor-Oracle Corporation Red Hat, Inc.Fedora Project

Product-software_collections enterprise_linux_server_aus fedora enterprise_linux enterprise_linux_eus enterprise_linux_server_tus mysql MySQL Server

CVE-2019-2938

Matching Score-8

Assigner-Oracle

View Details

Matching Score-8

Assigner-Oracle

CVSS Score-4.4||MEDIUM

EPSS-0.13% / 33.13%

7 Day CHG~0.00%

Published-16 Oct, 2019 | 17:40

Updated-01 Oct, 2024 | 16:31

Vulnerability in the MySQL Server product of Oracle MySQL (component: InnoDB). Supported versions that are affected are 5.7.27 and prior and 8.0.17 and prior. Difficult to exploit vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.0 Base Score 4.4 (Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:H).

Vendor-MariaDB Foundation NetApp, Inc.Fedora Project openSUSE Oracle Corporation Canonical Ltd.

Product-ubuntu_linux snapcenter mariadb oncommand_insight fedora active_iq_unified_manager oncommand_workflow_automation mysql leap MySQL Server

CVE-2019-2993

Matching Score-8

Assigner-Oracle

View Details

Matching Score-8

Assigner-Oracle

CVSS Score-5.3||MEDIUM

EPSS-0.91% / 74.82%

7 Day CHG~0.00%

Published-16 Oct, 2019 | 17:40

Updated-01 Oct, 2024 | 16:24

Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: C API). Supported versions that are affected are 5.7.27 and prior and 8.0.17 and prior. Difficult to exploit vulnerability allows low privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.0 Base Score 5.3 (Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H).

Vendor-NetApp, Inc.Canonical Ltd.Oracle Corporation Fedora Project

Product-ubuntu_linux snapcenter fedora active_iq_unified_manager oncommand_workflow_automation mysql oncommand_insight MySQL Server

CVE-2012-3197

Matching Score-8

Assigner-Oracle

View Details

Matching Score-8

Assigner-Oracle

CVSS Score-3.5||LOW

EPSS-0.32% / 54.13%

7 Day CHG~0.00%

Published-17 Oct, 2012 | 00:00

Updated-11 Apr, 2025 | 00:51

Unspecified vulnerability in the MySQL Server component in Oracle MySQL 5.1.64 and earlier, and 5.5.26 and earlier, allows remote authenticated users to affect availability via unknown vectors related to Server Replication.

Vendor-n/a Canonical Ltd.Red Hat, Inc.Oracle Corporation MariaDB Foundation Debian GNU/Linux

Product-enterprise_linux_desktop ubuntu_linux enterprise_linux_eus enterprise_linux_workstation mariadb debian_linux mysql enterprise_linux_server n/a

CVE-2012-2102

Matching Score-8

Assigner-Red Hat, Inc.

View Details

Matching Score-8

Assigner-Red Hat, Inc.

CVSS Score-3.5||LOW

EPSS-0.83% / 73.63%

7 Day CHG~0.00%

Published-17 Aug, 2012 | 00:00

Updated-11 Apr, 2025 | 00:51

MySQL 5.1.x before 5.1.62 and 5.5.x before 5.5.22 allows remote authenticated users to cause a denial of service (assertion failure and mysqld abort) by deleting a record and using HANDLER READ NEXT.

Vendor-mysql n/a Oracle Corporation

Product-mysql n/a

CWE ID-CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

CVE-2012-0577

Matching Score-8

Assigner-Oracle

View Details

Matching Score-8

Assigner-Oracle

CVSS Score-3.5||LOW

EPSS-0.74% / 72.09%

7 Day CHG~0.00%

Published-03 May, 2012 | 22:00

Updated-11 Apr, 2025 | 00:51

Unspecified vulnerability in the Oracle FLEXCUBE Universal Banking component in Oracle Financial Services Software 10.0.0 through 10.5.0 and 11.0.0 through 11.4.0 allows remote authenticated users to affect availability via unknown vectors related to Core.

Vendor-n/a Oracle Corporation

Product-financial_services_software n/a

CVE-2012-0117

Matching Score-8

Assigner-Oracle

View Details

Matching Score-8

Assigner-Oracle

CVSS Score-3.5||LOW

EPSS-0.37% / 57.84%

7 Day CHG~0.00%

Published-18 Jan, 2012 | 22:00

Updated-11 Apr, 2025 | 00:51

Unspecified vulnerability in the MySQL Server component in Oracle MySQL 5.5.x allows remote authenticated users to affect availability via unknown vectors, a different vulnerability than CVE-2012-0486, CVE-2012-0487, CVE-2012-0488, CVE-2012-0489, CVE-2012-0491, CVE-2012-0493, and CVE-2012-0495.

Vendor-n/a Oracle Corporation

Product-mysql n/a

CVE-2012-0112

Matching Score-8

Assigner-Oracle

View Details

Matching Score-8

Assigner-Oracle

CVSS Score-3.5||LOW

EPSS-0.67% / 70.41%

7 Day CHG~0.00%

Published-18 Jan, 2012 | 22:00

Updated-11 Apr, 2025 | 00:51

Unspecified vulnerability in the MySQL Server component in Oracle MySQL 5.1.x and 5.5.x allows remote authenticated users to affect availability via unknown vectors, a different vulnerability than CVE-2012-0115, CVE-2012-0119, CVE-2012-0120, CVE-2012-0485, and CVE-2012-0492.

Vendor-mysql n/a Oracle Corporation

Product-mysql n/a

CVE-2011-2198

Matching Score-8

Assigner-Red Hat, Inc.

View Details

Matching Score-8

Assigner-Red Hat, Inc.

CVSS Score-3.5||LOW

EPSS-0.81% / 73.23%

7 Day CHG~0.00%

Published-21 May, 2014 | 14:00

Updated-12 Apr, 2025 | 10:46

The "insert-blank-characters" capability in caps.c in gnome-terminal (vte) before 0.28.1 allows remote authenticated users to cause a denial of service (CPU and memory consumption and crash) via a crafted file, as demonstrated by a file containing the string "\033[100000000000000000@".

Vendor-n/a The GNOME Project Oracle Corporation openSUSE

Product-gnome-terminal opensuse solaris n/a

CWE ID-CWE-20

Improper Input Validation

CVE-2010-2008

Matching Score-8

Assigner-MITRE Corporation

View Details

Matching Score-8

Assigner-MITRE Corporation

CVSS Score-3.5||LOW

EPSS-4.62% / 88.85%

7 Day CHG~0.00%

Published-13 Jul, 2010 | 20:00

Updated-11 Apr, 2025 | 00:51

MySQL before 5.1.48 allows remote authenticated users with alter database privileges to cause a denial of service (server crash and database loss) via an ALTER DATABASE command with a #mysql50# string followed by a . (dot), .. (dot dot), ../ (dot dot slash) or similar sequence, and an UPGRADE DATA DIRECTORY NAME command, which causes MySQL to move certain directories to the server data directory.

Vendor-n/a Fedora Project Canonical Ltd.Oracle Corporation

Product-ubuntu_linux fedora mysql n/a

CWE ID-CWE-77

Improper Neutralization of Special Elements used in a Command ('Command Injection')

CVE-2015-0385

Matching Score-8

Assigner-Oracle

View Details

Matching Score-8

Assigner-Oracle

CVSS Score-3.5||LOW

EPSS-0.74% / 71.97%

7 Day CHG~0.00%

Published-21 Jan, 2015 | 18:00

Updated-12 Apr, 2025 | 10:46

Unspecified vulnerability in Oracle MySQL Server 5.6.21 and earlier allows remote authenticated users to affect availability via unknown vectors related to Pluggable Auth.

Vendor-n/a Oracle Corporation

Product-mysql n/a

CVE-2017-10153

Matching Score-8

Assigner-Oracle

View Details

Matching Score-8

Assigner-Oracle

CVSS Score-6.3||MEDIUM

EPSS-0.51% / 65.27%

7 Day CHG~0.00%

Published-19 Oct, 2017 | 17:00

Updated-20 Apr, 2025 | 01:37

Vulnerability in the Oracle Communications WebRTC Session Controller component of Oracle Communications Applications (subcomponent: Security (Gson)). Supported versions that are affected are 7.0, 7.1 and 7.2. Difficult to exploit vulnerability allows low privileged attacker with network access via multiple protocols to compromise Oracle Communications WebRTC Session Controller. While the vulnerability is in Oracle Communications WebRTC Session Controller, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of Oracle Communications WebRTC Session Controller. CVSS 3.0 Base Score 6.3 (Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:H/PR:L/UI:N/S:C/C:N/I:N/A:H).

Vendor-Oracle Corporation

Product-communications_webrtc_session_controller Communications WebRTC Session Controller

CVE-2016-0659

Matching Score-8

Assigner-Oracle

View Details

Matching Score-8

Assigner-Oracle

CVSS Score-5.5||MEDIUM

EPSS-0.15% / 36.37%

7 Day CHG~0.00%

Published-21 Apr, 2016 | 10:00

Updated-12 Apr, 2025 | 10:46

Unspecified vulnerability in Oracle MySQL 5.7.11 and earlier allows local users to affect availability via vectors related to Optimizer.

Vendor-n/a Oracle Corporation

Product-mysql n/a

CVE-2012-3156

Credits

Vendors

Products

Metrics (CVSS)

Weaknesses

Attack Patterns

Solution/Workaround

References

EPSS History

Score

Latest Score

N/A

Percentile

Latest Percentile

N/A

Stakeholder-Specific Vulnerability Categorization (SSVC)

Affected Products

Affected

Problem Types

Metrics

Metrics Other Info

Impacts

Solutions

Configurations

Workarounds

Exploits

Credits

Timeline

Replaced By

Rejected Reason

References

Affected Products

Metrics

Metrics Other Info

Impacts

Solutions

Configurations

Workarounds

Exploits

Credits

Timeline

Replaced By

Rejected Reason

References

CISA Catalog

Metrics

CPE Matches

Weaknesses

Evaluator Description

Evaluator Impact

Evaluator Solution

Vendor Statements

References

Change History

Similar CVEs