Red Hat Security Advisory

RHSA-2012:1462

mysql security update

Released 2012-11-14 · Red Hat rating Important · View on Red Hat →

Fixed in

Red Hat Enterprise Linux Desktop (v. 6) mysql-5.1.66-1.el6_3, mysql-libs-5.1.66-1.el6_3, mysql-server-5.1.66-1.el6_3
Red Hat Enterprise Linux Desktop Optional (v. 6) mysql-5.1.66-1.el6_3, mysql-bench-5.1.66-1.el6_3, mysql-devel-5.1.66-1.el6_3 +3
Red Hat Enterprise Linux HPC Node (v. 6) mysql-5.1.66-1.el6_3, mysql-libs-5.1.66-1.el6_3
Red Hat Enterprise Linux HPC Node Optional (v. 6) mysql-5.1.66-1.el6_3, mysql-bench-5.1.66-1.el6_3, mysql-devel-5.1.66-1.el6_3 +4
Red Hat Enterprise Linux Server (v. 6) mysql-5.1.66-1.el6_3, mysql-bench-5.1.66-1.el6_3, mysql-devel-5.1.66-1.el6_3 +5
Red Hat Enterprise Linux Server Optional (v. 6) mysql-5.1.66-1.el6_3, mysql-embedded-5.1.66-1.el6_3, mysql-embedded-5.1.66-1.el6_3.ppc +2
Red Hat Enterprise Linux Workstation (v. 6) mysql-5.1.66-1.el6_3, mysql-bench-5.1.66-1.el6_3, mysql-devel-5.1.66-1.el6_3 +3
Red Hat Enterprise Linux Workstation Optional (v. 6) mysql-5.1.66-1.el6_3, mysql-embedded-5.1.66-1.el6_3, mysql-embedded-devel-5.1.66-1.el6_3

Fixes 18 records

TI-2012-01895 CVE-2012-2122 · GHSA-4qx9-mwf7-7cx8

sql/password.c in Oracle MySQL 5.1.x before 5.1.63, 5.5.x before 5.5.24, and 5.6.x before…

HIGH 68

sql/password.c in Oracle MySQL 5.1.x before 5.1.63, 5.5.x before 5.5.24, and 5.6.x before 5.6.6, and MariaDB 5.1.x before 5.1.62, 5.2.x before 5.2.12, 5.3.x before 5.3.6, and 5.5.x before 5.5.23, when running in certain…

CVSS 2.0MEDIUM 5.1 Network No auth Interaction — EPSS 0.96619 Published 2012-06-26 Partial fix CWE-287

TI-2012-02715 CVE-2012-3163 · GHSA-cr8v-8mh7-xwrm

Unspecified vulnerability in the MySQL Server component in Oracle MySQL 5.1.64 and…

MEDIUM 47

Unspecified vulnerability in the MySQL Server component in Oracle MySQL 5.1.64 and earlier, and 5.5.26 and earlier, allows remote authenticated users to affect confidentiality, integrity, and availability via unknown vec…

CVSS 2.0HIGH 9.0 Network Low privileges Interaction — EPSS 0.05138 Published 2012-10-17 Partial fix

TI-2012-02710 CVE-2012-3158 · GHSA-cw5v-74xv-hcxg

Unspecified vulnerability in the MySQL Server component in Oracle MySQL 5.1.64 and…

MEDIUM 40

Unspecified vulnerability in the MySQL Server component in Oracle MySQL 5.1.64 and earlier, and 5.5.26 and earlier, allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors relat…

CVSS 2.0HIGH 7.5 Network No auth Interaction — EPSS 0.04538 Published 2012-10-16 Partial fix

TI-2012-02729 CVE-2012-3177 · GHSA-2c2w-j78h-7xwc

Unspecified vulnerability in the MySQL Server component in Oracle MySQL 5.1.65 and…

LOW 36

Unspecified vulnerability in the MySQL Server component in Oracle MySQL 5.1.65 and earlier, and 5.5.27 and earlier, allows remote authenticated users to affect availability via unknown vectors related to Server.

CVSS 2.0MEDIUM 6.8 Network Low privileges Interaction — EPSS 0.03711 Published 2012-10-17 Partial fix

TI-2012-01491 CVE-2012-1703 · GHSA-6xhq-pwm3-5877

Unspecified vulnerability in the MySQL Server component in Oracle MySQL 5.1.61 and…

LOW 36

Unspecified vulnerability in the MySQL Server component in Oracle MySQL 5.1.61 and earlier, and 5.5.21 and earlier, allows remote authenticated users to affect availability via unknown vectors related to Server Optimizer…

CVSS 2.0MEDIUM 6.8 Network Low privileges Interaction — EPSS 0.03728 Published 2012-05-03 Partial fix

TI-2012-02732 CVE-2012-3180 · GHSA-wg3m-mv9w-8f9q

Unspecified vulnerability in the MySQL Server component in Oracle MySQL 5.1.65 and…

LOW 25

CVSS 2.0MEDIUM 4.0 Network Low privileges Interaction — EPSS 0.03421 Published 2012-10-17 Partial fix

TI-2012-02725 CVE-2012-3173 · GHSA-2w89-7wx5-gppj

Unspecified vulnerability in the MySQL Server component in Oracle MySQL 5.1.63 and…

LOW 25

Unspecified vulnerability in the MySQL Server component in Oracle MySQL 5.1.63 and earlier, and 5.5.25 and earlier, allows remote authenticated users to affect availability via unknown vectors related to InnoDB Plugin.

CVSS 2.0MEDIUM 4.0 Network Low privileges Interaction — EPSS 0.03421 Published 2012-10-17 Fixed

TI-2012-02702 CVE-2012-3150 · GHSA-v2f2-hxv3-5cx2

Unspecified vulnerability in the MySQL Server component in Oracle MySQL 5.1.64 and…

LOW 25

Unspecified vulnerability in the MySQL Server component in Oracle MySQL 5.1.64 and earlier, and 5.5.26 and earlier, allows remote authenticated users to affect availability via unknown vectors related to Server Optimizer…

CVSS 2.0MEDIUM 4.0 Network Low privileges Interaction — EPSS 0.03421 Published 2012-10-16 Partial fix

TI-2012-01522 CVE-2012-1734 · GHSA-9496-687r-469r

Unspecified vulnerability in Oracle MySQL Server 5.1.62 and earlier, and 5.5.23 and…

LOW 25

Unspecified vulnerability in Oracle MySQL Server 5.1.62 and earlier, and 5.5.23 and earlier, allows remote authenticated users to affect availability via unknown vectors related to Server Optimizer.

CVSS 2.0MEDIUM 4.0 Network Low privileges Interaction — EPSS 0.03917 Published 2012-07-17 Partial fix

TI-2012-01478 CVE-2012-1690 · GHSA-3prr-gr45-j95v

Unspecified vulnerability in the MySQL Server component in Oracle MySQL 5.1.61 and…

LOW 25

CVSS 2.0MEDIUM 4.0 Network Low privileges Interaction — EPSS 0.03267 Published 2012-05-03 Partial fix

TI-2012-01477 CVE-2012-1689 · GHSA-wgcw-36qc-jvj2

Unspecified vulnerability in Oracle MySQL Server 5.1.62 and earlier, and 5.5.22 and…

LOW 25

Unspecified vulnerability in Oracle MySQL Server 5.1.62 and earlier, and 5.5.22 and earlier, allows remote authenticated users to affect availability via unknown vectors related to Server Optimizer.

CVSS 2.0MEDIUM 4.0 Network Low privileges Interaction — EPSS 0.037 Published 2012-07-17 Partial fix

TI-2012-01476 CVE-2012-1688 · GHSA-rghf-5q3x-c6vw

Unspecified vulnerability in the MySQL Server component in Oracle MySQL 5.1.61 and…

LOW 25

Unspecified vulnerability in the MySQL Server component in Oracle MySQL 5.1.61 and earlier, and 5.5.21 and earlier, allows remote authenticated users to affect availability, related to Server DML.

CVSS 2.0MEDIUM 4.0 Network Low privileges Interaction — EPSS 0.03478 Published 2012-05-03 Partial fix

TI-2012-00488 CVE-2012-0540 · GHSA-3hr4-cx6c-pr3w

Unspecified vulnerability in Oracle MySQL Server 5.1.62 and earlier and 5.5.23 and…

LOW 25

Unspecified vulnerability in Oracle MySQL Server 5.1.62 and earlier and 5.5.23 and earlier allows remote authenticated users to affect availability, related to GIS Extension.

CVSS 2.0MEDIUM 4.0 Network Low privileges Interaction — EPSS 0.037 Published 2012-07-17 Partial fix

TI-2012-02718 CVE-2012-3166 · GHSA-gjqp-j2gg-mgmf

Unspecified vulnerability in the MySQL Server component in Oracle MySQL 5.1.63 and…

LOW 24

CVSS 2.0MEDIUM 4.0 Network Low privileges Interaction — EPSS 0.03033 Published 2012-10-17 Partial fix

TI-2012-02380 CVE-2012-2749 · GHSA-3rhr-hm6q-fchf

MySQL 5.1.x before 5.1.63 and 5.5.x before 5.5.24 allows remote authenticated users to…

LOW 23

MySQL 5.1.x before 5.1.63 and 5.5.x before 5.5.24 allows remote authenticated users to cause a denial of service (mysqld crash) via vectors related to incorrect calculation and a sort order index.

CVSS 2.0MEDIUM 4.0 Network Low privileges Interaction — EPSS 0.019 Published 2012-08-17 Fixed CWE-399

TI-2012-02749 CVE-2012-3197 · GHSA-mcjm-p869-4gcm

Unspecified vulnerability in the MySQL Server component in Oracle MySQL 5.1.64 and…

LOW 22

CVSS 2.0LOW 3.5 Network Low privileges Interaction — EPSS 0.02707 Published 2012-10-17 Partial fix

TI-2012-02719 CVE-2012-3167 · GHSA-73x7-jf69-95mv

Unspecified vulnerability in the MySQL Server component in Oracle MySQL 5.1.63 and…

LOW 22

CVSS 2.0LOW 3.5 Network Low privileges Interaction — EPSS 0.02707 Published 2012-10-17 Partial fix

TI-2012-02712 CVE-2012-3160 · GHSA-wc83-5m7f-xhpq

Unspecified vulnerability in the MySQL Server component in Oracle MySQL 5.1.65 and…

LOW 12

Unspecified vulnerability in the MySQL Server component in Oracle MySQL 5.1.65 and earlier, and 5.5.27 and earlier, allows local users to affect confidentiality via unknown vectors related to Server Installation.

CVSS 2.0LOW 2.1 Local No auth Interaction — EPSS 0.00457 Published 2012-10-16 Partial fix