Red Hat Security Advisory

RHSA-2012:0127

mysql security update

Released 2012-02-13 · Red Hat rating Moderate · View on Red Hat →

Fixed in

RHEL Desktop Workstation (v. 5 client) mysql-5.0.95-1.el5_7.1, mysql-bench-5.0.95-1.el5_7.1, mysql-bench-5.0.95-1.el5_7.1.i386 +6
Red Hat Enterprise Linux (v. 5 server) mysql-5.0.95-1.el5_7.1, mysql-5.0.95-1.el5_7.1.i386, mysql-5.0.95-1.el5_7.1.ia64 +17
Red Hat Enterprise Linux Desktop (v. 5 client) mysql-5.0.95-1.el5_7.1, mysql-5.0.95-1.el5_7.1.i386

Fixes 8 records

TI-2010-01768 CVE-2010-1849 · GHSA-vqf8-pfrj-qw7g

The my_net_skip_rest function in sql/net_serv.cc in MySQL 5.0 through 5.0.91 and 5.1…

LOW 29

The my_net_skip_rest function in sql/net_serv.cc in MySQL 5.0 through 5.0.91 and 5.1 before 5.1.47 allows remote attackers to cause a denial of service (CPU and bandwidth consumption) by sending a large number of packets…

CVSS 2.0MEDIUM 5.0 Network No auth Interaction — EPSS 0.03723 Published 2010-06-07 Partial fix

TI-2012-00438 CVE-2012-0490 · GHSA-wvqh-f3hv-74rq

Unspecified vulnerability in the MySQL Server component in Oracle MySQL 5.0.x, 5.1.x, and…

LOW 24

Unspecified vulnerability in the MySQL Server component in Oracle MySQL 5.0.x, 5.1.x, and 5.5.x allows remote authenticated users to affect availability via unknown vectors.

CVSS 2.0MEDIUM 4.0 Network Low privileges Interaction — EPSS 0.02897 Published 2012-01-18 Partial fix

TI-2012-00432 CVE-2012-0484 · GHSA-7f9w-cj5h-5vrw

Unspecified vulnerability in the MySQL Server component in Oracle MySQL 5.0.x, 5.1.x, and…

LOW 24

Unspecified vulnerability in the MySQL Server component in Oracle MySQL 5.0.x, 5.1.x, and 5.5.x allows remote authenticated users to affect confidentiality via unknown vectors.

CVSS 2.0MEDIUM 4.0 Network Low privileges Interaction — EPSS 0.0257 Published 2012-01-18 Partial fix

TI-2012-00101 CVE-2012-0102 · GHSA-4jvj-5qx7-wmrj

Unspecified vulnerability in the MySQL Server component in Oracle MySQL 5.0.x and 5.1.x…

LOW 24

Unspecified vulnerability in the MySQL Server component in Oracle MySQL 5.0.x and 5.1.x allows remote authenticated users to affect availability via unknown vectors, a different vulnerability than CVE-2012-0087 and CVE-2…

CVSS 2.0MEDIUM 4.0 Network Low privileges Interaction — EPSS 0.02897 Published 2012-01-18 Partial fix

TI-2012-00100 CVE-2012-0101 · GHSA-q72c-8776-c32j

Unspecified vulnerability in the MySQL Server component in Oracle MySQL 5.0.x and 5.1.x…

LOW 24

CVSS 2.0MEDIUM 4.0 Network Low privileges Interaction — EPSS 0.02897 Published 2012-01-18 Partial fix

TI-2012-00086 CVE-2012-0087 · GHSA-hg7p-48xq-cj3r

Unspecified vulnerability in the MySQL Server component in Oracle MySQL 5.0.x and 5.1.x…

LOW 24

CVSS 2.0MEDIUM 4.0 Network Low privileges Interaction — EPSS 0.02897 Published 2012-01-18 Partial fix

TI-2012-00113 CVE-2012-0114 · GHSA-r83r-52vx-9r2r

Unspecified vulnerability in the MySQL Server component in Oracle MySQL 5.0.x, 5.1.x, and…

LOW 15

Unspecified vulnerability in the MySQL Server component in Oracle MySQL 5.0.x, 5.1.x, and 5.5.x allows local users to affect confidentiality and integrity via unknown vectors.

CVSS 2.0LOW 3.0 Local Low privileges Interaction — EPSS 0.00347 Published 2012-01-18 Partial fix

TI-2012-00074 CVE-2012-0075 · GHSA-qg6g-7jqc-868p

Unspecified vulnerability in the MySQL Server component in Oracle MySQL 5.0.x, 5.1.x, and…

LOW 14

Unspecified vulnerability in the MySQL Server component in Oracle MySQL 5.0.x, 5.1.x, and 5.5.x allows remote authenticated users to affect integrity via unknown vectors.

CVSS 2.0LOW 1.7 Network Low privileges Interaction — EPSS 0.02398 Published 2012-01-18 Partial fix