FreeBSD VuXML: Documenting security issues in FreeBSD and the FreeBSD Ports Collection

CVE-2012-5612

This CVE name corresponds to:

Entered Topic
2013-02-01 mysql/mariadb/percona server -- multiple vulnerabilities

The following information is adapted from the Common Vulnerabilities and Exposures (CVE) project. CVE and the CVE logo are trademarks of The MITRE Corporation. CVE content is Copyright 2005, The MITRE Corporation.

Details

Type Candidate
Name CVE-2012-5612
Phase Assigned(20121024)

Description

Heap-based buffer overflow in Oracle MySQL 5.5.19 and other versions through 5.5.28, and MariaDB 5.5.28a and possibly other versions, allows remote authenticated users to cause a denial of service (memory corruption and crash) and possibly execute arbitrary code, as demonstrated using certain variations of the (1) USE, (2) SHOW TABLES, (3) DESCRIBE, (4) SHOW FIELDS FROM, (5) SHOW COLUMNS FROM, (6) SHOW INDEX FROM, (7) CREATE TABLE, (8) DROP TABLE, (9) ALTER TABLE, (10) DELETE FROM, (11) UPDATE, and (12) SET PASSWORD commands.

References

Source Reference
EXPLOIT-DB 23076
FULLDISC 20121201 MySQL (Linux) Heap Based Overrun PoC Zeroday
MLIST [oss-security] 20121202 Re: Re: [Full-disclosure] MySQL (Linux) Stack based buffer overrun PoC Zeroday
MLIST [oss-security] 20121202 Re: Re: [Full-disclosure] MySQL (Linux) Stack based buffer overrun PoC Zeroday
CONFIRM https://mariadb.atlassian.net/browse/MDEV-3908
CONFIRM http://www.oracle.com/technetwork/topics/security/cpujan2013-1515902.html
GENTOO GLSA-201308-06
MANDRIVA MDVSA-2013:150
MANDRIVA MDVSA-2013:102
SUSE SUSE-SU-2013:0262
UBUNTU USN-1703-1
OVAL oval:org.mitre.oval:def:16960
SECUNIA 53372