Red Hat Security Advisory

RHSA-2013:0772

mysql security update

Released 2013-04-25 · Red Hat rating Important · View on Red Hat →

Fixed in

Red Hat Enterprise Linux Desktop (v. 6) mysql-5.1.69-1.el6_4, mysql-libs-5.1.69-1.el6_4, mysql-server-5.1.69-1.el6_4
Red Hat Enterprise Linux Desktop Optional (v. 6) mysql-5.1.69-1.el6_4, mysql-bench-5.1.69-1.el6_4, mysql-devel-5.1.69-1.el6_4 +3
Red Hat Enterprise Linux HPC Node (v. 6) mysql-5.1.69-1.el6_4, mysql-libs-5.1.69-1.el6_4
Red Hat Enterprise Linux HPC Node Optional (v. 6) mysql-5.1.69-1.el6_4, mysql-bench-5.1.69-1.el6_4, mysql-devel-5.1.69-1.el6_4 +4
Red Hat Enterprise Linux Server (v. 6) mysql-5.1.69-1.el6_4, mysql-bench-5.1.69-1.el6_4, mysql-devel-5.1.69-1.el6_4 +5
Red Hat Enterprise Linux Server Optional (v. 6) mysql-5.1.69-1.el6_4, mysql-embedded-5.1.69-1.el6_4, mysql-embedded-5.1.69-1.el6_4.ppc +2
Red Hat Enterprise Linux Workstation (v. 6) mysql-5.1.69-1.el6_4, mysql-bench-5.1.69-1.el6_4, mysql-devel-5.1.69-1.el6_4 +3
Red Hat Enterprise Linux Workstation Optional (v. 6) mysql-5.1.69-1.el6_4, mysql-embedded-5.1.69-1.el6_4, mysql-embedded-devel-5.1.69-1.el6_4

Fixes 15 records

TI-2013-02125 CVE-2013-2378 · GHSA-8gmm-vc39-qf6m

Unspecified vulnerability in Oracle MySQL 5.1.67 and earlier, 5.5.29 and earlier, and…

LOW 33

Unspecified vulnerability in Oracle MySQL 5.1.67 and earlier, 5.5.29 and earlier, and 5.6.10 and earlier allows remote authenticated users to affect confidentiality, integrity, and availability via unknown vectors relate…

CVSS 2.0MEDIUM 6.5 Network Low privileges Interaction — EPSS 0.02242 Published 2013-04-17 Partial fix

TI-2013-02122 CVE-2013-2375 · GHSA-gg9r-7879-9jhr

Unspecified vulnerability in Oracle MySQL 5.1.68 and earlier, 5.5.30 and earlier, and…

LOW 33

Unspecified vulnerability in Oracle MySQL 5.1.68 and earlier, 5.5.30 and earlier, and 5.6.10 and earlier allows remote authenticated users to affect confidentiality, integrity, and availability via unknown vectors.

CVSS 2.0MEDIUM 6.5 Network Low privileges Interaction — EPSS 0.02281 Published 2013-04-17 Partial fix

TI-2013-01359 CVE-2013-1552 · GHSA-m2xc-9ww8-5fj3

Unspecified vulnerability in Oracle MySQL 5.1.67 and earlier and 5.5.29 and earlier…

LOW 33

Unspecified vulnerability in Oracle MySQL 5.1.67 and earlier and 5.5.29 and earlier allows remote authenticated users to affect confidentiality, integrity, and availability via unknown vectors.

CVSS 2.0MEDIUM 6.5 Network Low privileges Interaction — EPSS 0.02242 Published 2013-04-17 Partial fix

TI-2013-01338 CVE-2013-1531 · GHSA-m76w-jmjw-m248

Unspecified vulnerability in Oracle MySQL 5.1.66 and earlier and 5.5.28 and earlier…

LOW 33

Unspecified vulnerability in Oracle MySQL 5.1.66 and earlier and 5.5.28 and earlier allows remote authenticated users to affect confidentiality, integrity, and availability via unknown vectors related to Server Privilege…

CVSS 2.0MEDIUM 6.5 Network Low privileges Interaction — EPSS 0.02262 Published 2013-04-17 Partial fix

TI-2013-01328 CVE-2013-1521 · GHSA-jg63-3vq5-5v6c

Unspecified vulnerability in Oracle MySQL 5.1.67 and earlier and 5.5.29 and earlier…

LOW 33

Unspecified vulnerability in Oracle MySQL 5.1.67 and earlier and 5.5.29 and earlier allows remote authenticated users to affect confidentiality, integrity, and availability via unknown vectors related to Server Locking.

CVSS 2.0MEDIUM 6.5 Network Low privileges Interaction — EPSS 0.02261 Published 2013-04-17 Partial fix

TI-2012-04718 CVE-2012-5614 · GHSA-g68p-rgrw-xp3p

Oracle MySQL 5.1.67 and earlier and 5.5.29 and earlier, and MariaDB 5.5.28a and possibly…

LOW 33

Oracle MySQL 5.1.67 and earlier and 5.5.29 and earlier, and MariaDB 5.5.28a and possibly other versions, allows remote authenticated users to cause a denial of service (mysqld crash) via a SELECT command with an UpdateXM…

CVSS 2.0MEDIUM 4.0 Network Low privileges Interaction — EPSS 0.13175 Published 2012-12-03 Fixed

TI-2013-03321 CVE-2013-3808 · GHSA-2h42-5wxm-jmgg

Unspecified vulnerability in the MySQL Server component in Oracle MySQL 5.1.68 and…

LOW 24

Unspecified vulnerability in the MySQL Server component in Oracle MySQL 5.1.68 and earlier, 5.5.30 and earlier, and 5.6.10 allows remote authenticated users to affect availability via unknown vectors related to Server Op…

CVSS 2.0MEDIUM 4.0 Network Low privileges Interaction — EPSS 0.0285 Published 2013-07-17 Partial fix

TI-2013-01362 CVE-2013-1555 · GHSA-r9v3-wgrf-c4jw

Unspecified vulnerability in Oracle MySQL 5.1.67 and earlier, and 5.5.29 and earlier…

LOW 24

Unspecified vulnerability in Oracle MySQL 5.1.67 and earlier, and 5.5.29 and earlier, allows remote authenticated users to affect availability via unknown vectors related to Server Partition.

CVSS 2.0MEDIUM 4.0 Network Low privileges Interaction — EPSS 0.02623 Published 2013-04-17 Partial fix

TI-2013-02139 CVE-2013-2392 · GHSA-gfp5-9782-hmxv

Unspecified vulnerability in Oracle MySQL 5.1.68 and earlier, 5.5.30 and earlier, and…

LOW 23

Unspecified vulnerability in Oracle MySQL 5.1.68 and earlier, 5.5.30 and earlier, and 5.6.10 and earlier allows remote authenticated users to affect availability via unknown vectors related to Server Optimizer.

CVSS 2.0MEDIUM 4.0 Network Low privileges Interaction — EPSS 0.02278 Published 2013-04-17 Partial fix

TI-2013-02136 CVE-2013-2389 · GHSA-7gf6-788h-c56f

Unspecified vulnerability in Oracle MySQL 5.1.68 and earlier, 5.5.30 and earlier, and…

LOW 23

CVSS 2.0MEDIUM 4.0 Network Low privileges Interaction — EPSS 0.02278 Published 2013-04-17 Partial fix

TI-2013-01351 CVE-2013-1544 · GHSA-5gp7-9v5c-hpf7

Unspecified vulnerability in Oracle MySQL 5.1.68 and earlier, 5.5.30 and earlier, and…

LOW 23

CVSS 2.0MEDIUM 4.0 Network Low privileges Interaction — EPSS 0.02298 Published 2013-04-17 Partial fix

TI-2013-01339 CVE-2013-1532 · GHSA-jg97-69vx-6w8x

Unspecified vulnerability in Oracle MySQL 5.1.68 and earlier, 5.5.30 and earlier, and…

LOW 23

CVSS 2.0MEDIUM 4.0 Network Low privileges Interaction — EPSS 0.02278 Published 2013-04-17 Partial fix

TI-2013-01355 CVE-2013-1548 · GHSA-j4p5-jfpf-jqfr

Unspecified vulnerability in Oracle MySQL 5.1.63 and earlier allows remote authenticated…

LOW 20

Unspecified vulnerability in Oracle MySQL 5.1.63 and earlier allows remote authenticated users to affect availability via unknown vectors related to Server Types.

CVSS 2.0LOW 3.5 Network Low privileges Interaction — EPSS 0.01824 Published 2013-04-17 Partial fix

TI-2013-01313 CVE-2013-1506 · GHSA-h9jm-q59h-8jwg

Unspecified vulnerability in Oracle MySQL 5.1.67 and earlier, 5.5.29 and earlier, and…

LOW 18

Unspecified vulnerability in Oracle MySQL 5.1.67 and earlier, 5.5.29 and earlier, and 5.6.10 and earlier allows remote authenticated users to affect availability via unknown vectors related to Server Locking.

CVSS 2.0LOW 2.8 Network Low privileges Interaction — EPSS 0.01905 Published 2013-04-17 Partial fix

TI-2013-02138 CVE-2013-2391 · GHSA-hhcf-p726-6qcc

Unspecified vulnerability in Oracle MySQL 5.1.68 and earlier, 5.5.30 and earlier, and…

LOW 15

Unspecified vulnerability in Oracle MySQL 5.1.68 and earlier, 5.5.30 and earlier, and 5.6.10 and earlier allows local users to affect confidentiality and integrity via unknown vectors related to Server Install.

CVSS 2.0LOW 3.0 Local Low privileges Interaction — EPSS 0.00363 Published 2013-04-17 Partial fix