Read the docs
TI-2012-03756 Aliases CVE-2012-4414GHSA-fq8v-ghvx-jmqh

Multiple SQL injection vulnerabilities in the replication code in Oracle MySQL possibly…

Priority LOW 34CWE-89Published · Updated

Key facts

Attack vector
Network
Privileges required
Low
User interaction
— Not recorded in CVSS 2.0
Attack complexity
Low
Impact type
SQL injection
Confidentiality · integrity · availability
Partial · Partial · Partial
Fix status
Will not fix Red Hat: no fix planned

Attack profile from CVSS 2.0 · NVD. Fix status from CNA and Red Hat. Impact type from CWE-89.

Summary

Multiple SQL injection vulnerabilities in the replication code in Oracle MySQL possibly before 5.5.29, and MariaDB 5.1.x through 5.1.62, 5.2.x through 5.2.12, 5.3.x through 5.3.7, and 5.5.x through 5.5.25, allow remote authenticated users to execute arbitrary SQL commands via vectors related to the binary log. NOTE: as of 20130116, Oracle has not commented on claims from a downstream vendor that the fix in MySQL 5.5.29 is incomplete.

Why it matters now

EPSS 0.03119 87th percentileScored 2026-11-07
Fix Will not fix Red Hat: no fix planned

SSVC decision points

Not available: CISA has not published SSVC decision points for this record.

Affected products

VendorProductAffected versionsFixed inStatusSource
——all versions—No fix listedCNA
  • — Vendor— Affected all versions Fixed in — No fix listed CNA

CPE configurations NVD · 77

CPEVersionsRoleVendor
cpe:2.3:a:oracle:mysql:*:*:*:*:*:*:*:*up to 5.5.28VulnerableOracle
cpe:2.3:a:oracle:mysql:5.1.51:*:*:*:*:*:*:*5.1.51VulnerableOracle
cpe:2.3:a:oracle:mysql:5.1.52:*:*:*:*:*:*:*5.1.52VulnerableOracle
cpe:2.3:a:oracle:mysql:5.1.52:sp1:*:*:*:*:*:*5.1.52 sp1VulnerableOracle
cpe:2.3:a:oracle:mysql:5.1.53:*:*:*:*:*:*:*5.1.53VulnerableOracle
cpe:2.3:a:oracle:mysql:5.1.54:*:*:*:*:*:*:*5.1.54VulnerableOracle
cpe:2.3:a:oracle:mysql:5.1.55:*:*:*:*:*:*:*5.1.55VulnerableOracle
cpe:2.3:a:oracle:mysql:5.1.56:*:*:*:*:*:*:*5.1.56VulnerableOracle
cpe:2.3:a:oracle:mysql:5.1.57:*:*:*:*:*:*:*5.1.57VulnerableOracle
cpe:2.3:a:oracle:mysql:5.1.58:*:*:*:*:*:*:*5.1.58VulnerableOracle
  • cpe:2.3:a:oracle:mysql:*:*:*:*:*:*:*:* Versions up to 5.5.28 Vulnerable ·Oracle
  • cpe:2.3:a:oracle:mysql:5.1.51:*:*:*:*:*:*:* Versions 5.1.51 Vulnerable ·Oracle
  • cpe:2.3:a:oracle:mysql:5.1.52:*:*:*:*:*:*:* Versions 5.1.52 Vulnerable ·Oracle
  • cpe:2.3:a:oracle:mysql:5.1.52:sp1:*:*:*:*:*:* Versions 5.1.52 sp1 Vulnerable ·Oracle
  • cpe:2.3:a:oracle:mysql:5.1.53:*:*:*:*:*:*:* Versions 5.1.53 Vulnerable ·Oracle
  • cpe:2.3:a:oracle:mysql:5.1.54:*:*:*:*:*:*:* Versions 5.1.54 Vulnerable ·Oracle
  • cpe:2.3:a:oracle:mysql:5.1.55:*:*:*:*:*:*:* Versions 5.1.55 Vulnerable ·Oracle
  • cpe:2.3:a:oracle:mysql:5.1.56:*:*:*:*:*:*:* Versions 5.1.56 Vulnerable ·Oracle
  • cpe:2.3:a:oracle:mysql:5.1.57:*:*:*:*:*:*:* Versions 5.1.57 Vulnerable ·Oracle
  • cpe:2.3:a:oracle:mysql:5.1.58:*:*:*:*:*:*:* Versions 5.1.58 Vulnerable ·Oracle
Show 67 more CPE
CPEVersionsRoleVendor
cpe:2.3:a:oracle:mysql:5.1.59:*:*:*:*:*:*:*5.1.59VulnerableOracle
cpe:2.3:a:oracle:mysql:5.1.60:*:*:*:*:*:*:*5.1.60VulnerableOracle
cpe:2.3:a:oracle:mysql:5.1.61:*:*:*:*:*:*:*5.1.61VulnerableOracle
cpe:2.3:a:oracle:mysql:5.1.62:*:*:*:*:*:*:*5.1.62VulnerableOracle
cpe:2.3:a:oracle:mysql:5.1.63:*:*:*:*:*:*:*5.1.63VulnerableOracle
cpe:2.3:a:oracle:mysql:5.1.64:*:*:*:*:*:*:*5.1.64VulnerableOracle
cpe:2.3:a:oracle:mysql:5.1.65:*:*:*:*:*:*:*5.1.65VulnerableOracle
cpe:2.3:a:oracle:mysql:5.1.66:*:*:*:*:*:*:*5.1.66VulnerableOracle
cpe:2.3:a:oracle:mysql:5.1.67:*:*:*:*:*:*:*5.1.67VulnerableOracle
cpe:2.3:a:oracle:mysql:5.5.10:*:*:*:*:*:*:*5.5.10VulnerableOracle
cpe:2.3:a:oracle:mysql:5.5.11:*:*:*:*:*:*:*5.5.11VulnerableOracle
cpe:2.3:a:oracle:mysql:5.5.12:*:*:*:*:*:*:*5.5.12VulnerableOracle
cpe:2.3:a:oracle:mysql:5.5.13:*:*:*:*:*:*:*5.5.13VulnerableOracle
cpe:2.3:a:oracle:mysql:5.5.14:*:*:*:*:*:*:*5.5.14VulnerableOracle
cpe:2.3:a:oracle:mysql:5.5.15:*:*:*:*:*:*:*5.5.15VulnerableOracle
cpe:2.3:a:oracle:mysql:5.5.16:*:*:*:*:*:*:*5.5.16VulnerableOracle
cpe:2.3:a:oracle:mysql:5.5.17:*:*:*:*:*:*:*5.5.17VulnerableOracle
cpe:2.3:a:oracle:mysql:5.5.18:*:*:*:*:*:*:*5.5.18VulnerableOracle
cpe:2.3:a:oracle:mysql:5.5.19:*:*:*:*:*:*:*5.5.19VulnerableOracle
cpe:2.3:a:oracle:mysql:5.5.20:*:*:*:*:*:*:*5.5.20VulnerableOracle
cpe:2.3:a:oracle:mysql:5.5.21:*:*:*:*:*:*:*5.5.21VulnerableOracle
cpe:2.3:a:oracle:mysql:5.5.22:*:*:*:*:*:*:*5.5.22VulnerableOracle
cpe:2.3:a:oracle:mysql:5.5.23:*:*:*:*:*:*:*5.5.23VulnerableOracle
cpe:2.3:a:oracle:mysql:5.5.24:*:*:*:*:*:*:*5.5.24VulnerableOracle
cpe:2.3:a:oracle:mysql:5.5.25:*:*:*:*:*:*:*5.5.25VulnerableOracle
cpe:2.3:a:oracle:mysql:5.5.25:a:*:*:*:*:*:*5.5.25 aVulnerableOracle
cpe:2.3:a:oracle:mysql:5.5.26:*:*:*:*:*:*:*5.5.26VulnerableOracle
cpe:2.3:a:oracle:mysql:5.5.27:*:*:*:*:*:*:*5.5.27VulnerableOracle
cpe:2.3:a:mariadb:mariadb:5.1.41:*:*:*:*:*:*:*5.1.41VulnerableMariaDB
cpe:2.3:a:mariadb:mariadb:5.1.42:*:*:*:*:*:*:*5.1.42VulnerableMariaDB
cpe:2.3:a:mariadb:mariadb:5.1.44:*:*:*:*:*:*:*5.1.44VulnerableMariaDB
cpe:2.3:a:mariadb:mariadb:5.1.47:*:*:*:*:*:*:*5.1.47VulnerableMariaDB
cpe:2.3:a:mariadb:mariadb:5.1.49:*:*:*:*:*:*:*5.1.49VulnerableMariaDB
cpe:2.3:a:mariadb:mariadb:5.1.50:*:*:*:*:*:*:*5.1.50VulnerableMariaDB
cpe:2.3:a:mariadb:mariadb:5.1.51:*:*:*:*:*:*:*5.1.51VulnerableMariaDB
cpe:2.3:a:mariadb:mariadb:5.1.53:*:*:*:*:*:*:*5.1.53VulnerableMariaDB
cpe:2.3:a:mariadb:mariadb:5.1.55:*:*:*:*:*:*:*5.1.55VulnerableMariaDB
cpe:2.3:a:mariadb:mariadb:5.1.60:*:*:*:*:*:*:*5.1.60VulnerableMariaDB
cpe:2.3:a:mariadb:mariadb:5.1.61:*:*:*:*:*:*:*5.1.61VulnerableMariaDB
cpe:2.3:a:mariadb:mariadb:5.1.62:*:*:*:*:*:*:*5.1.62VulnerableMariaDB
cpe:2.3:a:mariadb:mariadb:5.2.0:*:*:*:*:*:*:*5.2.0VulnerableMariaDB
cpe:2.3:a:mariadb:mariadb:5.2.1:*:*:*:*:*:*:*5.2.1VulnerableMariaDB
cpe:2.3:a:mariadb:mariadb:5.2.2:*:*:*:*:*:*:*5.2.2VulnerableMariaDB
cpe:2.3:a:mariadb:mariadb:5.2.3:*:*:*:*:*:*:*5.2.3VulnerableMariaDB
cpe:2.3:a:mariadb:mariadb:5.2.4:*:*:*:*:*:*:*5.2.4VulnerableMariaDB
cpe:2.3:a:mariadb:mariadb:5.2.5:*:*:*:*:*:*:*5.2.5VulnerableMariaDB
cpe:2.3:a:mariadb:mariadb:5.2.6:*:*:*:*:*:*:*5.2.6VulnerableMariaDB
cpe:2.3:a:mariadb:mariadb:5.2.7:*:*:*:*:*:*:*5.2.7VulnerableMariaDB
cpe:2.3:a:mariadb:mariadb:5.2.8:*:*:*:*:*:*:*5.2.8VulnerableMariaDB
cpe:2.3:a:mariadb:mariadb:5.2.9:*:*:*:*:*:*:*5.2.9VulnerableMariaDB
cpe:2.3:a:mariadb:mariadb:5.2.10:*:*:*:*:*:*:*5.2.10VulnerableMariaDB
cpe:2.3:a:mariadb:mariadb:5.2.11:*:*:*:*:*:*:*5.2.11VulnerableMariaDB
cpe:2.3:a:mariadb:mariadb:5.2.12:*:*:*:*:*:*:*5.2.12VulnerableMariaDB
cpe:2.3:a:mariadb:mariadb:5.3.0:*:*:*:*:*:*:*5.3.0VulnerableMariaDB
cpe:2.3:a:mariadb:mariadb:5.3.1:*:*:*:*:*:*:*5.3.1VulnerableMariaDB
cpe:2.3:a:mariadb:mariadb:5.3.2:*:*:*:*:*:*:*5.3.2VulnerableMariaDB
cpe:2.3:a:mariadb:mariadb:5.3.3:*:*:*:*:*:*:*5.3.3VulnerableMariaDB
cpe:2.3:a:mariadb:mariadb:5.3.4:*:*:*:*:*:*:*5.3.4VulnerableMariaDB
cpe:2.3:a:mariadb:mariadb:5.3.5:*:*:*:*:*:*:*5.3.5VulnerableMariaDB
cpe:2.3:a:mariadb:mariadb:5.3.6:*:*:*:*:*:*:*5.3.6VulnerableMariaDB
cpe:2.3:a:mariadb:mariadb:5.3.7:*:*:*:*:*:*:*5.3.7VulnerableMariaDB
cpe:2.3:a:mariadb:mariadb:5.5.20:*:*:*:*:*:*:*5.5.20VulnerableMariaDB
cpe:2.3:a:mariadb:mariadb:5.5.21:*:*:*:*:*:*:*5.5.21VulnerableMariaDB
cpe:2.3:a:mariadb:mariadb:5.5.22:*:*:*:*:*:*:*5.5.22VulnerableMariaDB
cpe:2.3:a:mariadb:mariadb:5.5.23:*:*:*:*:*:*:*5.5.23VulnerableMariaDB
cpe:2.3:a:mariadb:mariadb:5.5.24:*:*:*:*:*:*:*5.5.24VulnerableMariaDB
cpe:2.3:a:mariadb:mariadb:5.5.25:*:*:*:*:*:*:*5.5.25VulnerableMariaDB
  • cpe:2.3:a:oracle:mysql:5.1.59:*:*:*:*:*:*:* Versions 5.1.59 Vulnerable ·Oracle
  • cpe:2.3:a:oracle:mysql:5.1.60:*:*:*:*:*:*:* Versions 5.1.60 Vulnerable ·Oracle
  • cpe:2.3:a:oracle:mysql:5.1.61:*:*:*:*:*:*:* Versions 5.1.61 Vulnerable ·Oracle
  • cpe:2.3:a:oracle:mysql:5.1.62:*:*:*:*:*:*:* Versions 5.1.62 Vulnerable ·Oracle
  • cpe:2.3:a:oracle:mysql:5.1.63:*:*:*:*:*:*:* Versions 5.1.63 Vulnerable ·Oracle
  • cpe:2.3:a:oracle:mysql:5.1.64:*:*:*:*:*:*:* Versions 5.1.64 Vulnerable ·Oracle
  • cpe:2.3:a:oracle:mysql:5.1.65:*:*:*:*:*:*:* Versions 5.1.65 Vulnerable ·Oracle
  • cpe:2.3:a:oracle:mysql:5.1.66:*:*:*:*:*:*:* Versions 5.1.66 Vulnerable ·Oracle
  • cpe:2.3:a:oracle:mysql:5.1.67:*:*:*:*:*:*:* Versions 5.1.67 Vulnerable ·Oracle
  • cpe:2.3:a:oracle:mysql:5.5.10:*:*:*:*:*:*:* Versions 5.5.10 Vulnerable ·Oracle
  • cpe:2.3:a:oracle:mysql:5.5.11:*:*:*:*:*:*:* Versions 5.5.11 Vulnerable ·Oracle
  • cpe:2.3:a:oracle:mysql:5.5.12:*:*:*:*:*:*:* Versions 5.5.12 Vulnerable ·Oracle
  • cpe:2.3:a:oracle:mysql:5.5.13:*:*:*:*:*:*:* Versions 5.5.13 Vulnerable ·Oracle
  • cpe:2.3:a:oracle:mysql:5.5.14:*:*:*:*:*:*:* Versions 5.5.14 Vulnerable ·Oracle
  • cpe:2.3:a:oracle:mysql:5.5.15:*:*:*:*:*:*:* Versions 5.5.15 Vulnerable ·Oracle
  • cpe:2.3:a:oracle:mysql:5.5.16:*:*:*:*:*:*:* Versions 5.5.16 Vulnerable ·Oracle
  • cpe:2.3:a:oracle:mysql:5.5.17:*:*:*:*:*:*:* Versions 5.5.17 Vulnerable ·Oracle
  • cpe:2.3:a:oracle:mysql:5.5.18:*:*:*:*:*:*:* Versions 5.5.18 Vulnerable ·Oracle
  • cpe:2.3:a:oracle:mysql:5.5.19:*:*:*:*:*:*:* Versions 5.5.19 Vulnerable ·Oracle
  • cpe:2.3:a:oracle:mysql:5.5.20:*:*:*:*:*:*:* Versions 5.5.20 Vulnerable ·Oracle
  • cpe:2.3:a:oracle:mysql:5.5.21:*:*:*:*:*:*:* Versions 5.5.21 Vulnerable ·Oracle
  • cpe:2.3:a:oracle:mysql:5.5.22:*:*:*:*:*:*:* Versions 5.5.22 Vulnerable ·Oracle
  • cpe:2.3:a:oracle:mysql:5.5.23:*:*:*:*:*:*:* Versions 5.5.23 Vulnerable ·Oracle
  • cpe:2.3:a:oracle:mysql:5.5.24:*:*:*:*:*:*:* Versions 5.5.24 Vulnerable ·Oracle
  • cpe:2.3:a:oracle:mysql:5.5.25:*:*:*:*:*:*:* Versions 5.5.25 Vulnerable ·Oracle
  • cpe:2.3:a:oracle:mysql:5.5.25:a:*:*:*:*:*:* Versions 5.5.25 a Vulnerable ·Oracle
  • cpe:2.3:a:oracle:mysql:5.5.26:*:*:*:*:*:*:* Versions 5.5.26 Vulnerable ·Oracle
  • cpe:2.3:a:oracle:mysql:5.5.27:*:*:*:*:*:*:* Versions 5.5.27 Vulnerable ·Oracle
  • cpe:2.3:a:mariadb:mariadb:5.1.41:*:*:*:*:*:*:* Versions 5.1.41 Vulnerable ·MariaDB
  • cpe:2.3:a:mariadb:mariadb:5.1.42:*:*:*:*:*:*:* Versions 5.1.42 Vulnerable ·MariaDB
  • cpe:2.3:a:mariadb:mariadb:5.1.44:*:*:*:*:*:*:* Versions 5.1.44 Vulnerable ·MariaDB
  • cpe:2.3:a:mariadb:mariadb:5.1.47:*:*:*:*:*:*:* Versions 5.1.47 Vulnerable ·MariaDB
  • cpe:2.3:a:mariadb:mariadb:5.1.49:*:*:*:*:*:*:* Versions 5.1.49 Vulnerable ·MariaDB
  • cpe:2.3:a:mariadb:mariadb:5.1.50:*:*:*:*:*:*:* Versions 5.1.50 Vulnerable ·MariaDB
  • cpe:2.3:a:mariadb:mariadb:5.1.51:*:*:*:*:*:*:* Versions 5.1.51 Vulnerable ·MariaDB
  • cpe:2.3:a:mariadb:mariadb:5.1.53:*:*:*:*:*:*:* Versions 5.1.53 Vulnerable ·MariaDB
  • cpe:2.3:a:mariadb:mariadb:5.1.55:*:*:*:*:*:*:* Versions 5.1.55 Vulnerable ·MariaDB
  • cpe:2.3:a:mariadb:mariadb:5.1.60:*:*:*:*:*:*:* Versions 5.1.60 Vulnerable ·MariaDB
  • cpe:2.3:a:mariadb:mariadb:5.1.61:*:*:*:*:*:*:* Versions 5.1.61 Vulnerable ·MariaDB
  • cpe:2.3:a:mariadb:mariadb:5.1.62:*:*:*:*:*:*:* Versions 5.1.62 Vulnerable ·MariaDB
  • cpe:2.3:a:mariadb:mariadb:5.2.0:*:*:*:*:*:*:* Versions 5.2.0 Vulnerable ·MariaDB
  • cpe:2.3:a:mariadb:mariadb:5.2.1:*:*:*:*:*:*:* Versions 5.2.1 Vulnerable ·MariaDB
  • cpe:2.3:a:mariadb:mariadb:5.2.2:*:*:*:*:*:*:* Versions 5.2.2 Vulnerable ·MariaDB
  • cpe:2.3:a:mariadb:mariadb:5.2.3:*:*:*:*:*:*:* Versions 5.2.3 Vulnerable ·MariaDB
  • cpe:2.3:a:mariadb:mariadb:5.2.4:*:*:*:*:*:*:* Versions 5.2.4 Vulnerable ·MariaDB
  • cpe:2.3:a:mariadb:mariadb:5.2.5:*:*:*:*:*:*:* Versions 5.2.5 Vulnerable ·MariaDB
  • cpe:2.3:a:mariadb:mariadb:5.2.6:*:*:*:*:*:*:* Versions 5.2.6 Vulnerable ·MariaDB
  • cpe:2.3:a:mariadb:mariadb:5.2.7:*:*:*:*:*:*:* Versions 5.2.7 Vulnerable ·MariaDB
  • cpe:2.3:a:mariadb:mariadb:5.2.8:*:*:*:*:*:*:* Versions 5.2.8 Vulnerable ·MariaDB
  • cpe:2.3:a:mariadb:mariadb:5.2.9:*:*:*:*:*:*:* Versions 5.2.9 Vulnerable ·MariaDB
  • cpe:2.3:a:mariadb:mariadb:5.2.10:*:*:*:*:*:*:* Versions 5.2.10 Vulnerable ·MariaDB
  • cpe:2.3:a:mariadb:mariadb:5.2.11:*:*:*:*:*:*:* Versions 5.2.11 Vulnerable ·MariaDB
  • cpe:2.3:a:mariadb:mariadb:5.2.12:*:*:*:*:*:*:* Versions 5.2.12 Vulnerable ·MariaDB
  • cpe:2.3:a:mariadb:mariadb:5.3.0:*:*:*:*:*:*:* Versions 5.3.0 Vulnerable ·MariaDB
  • cpe:2.3:a:mariadb:mariadb:5.3.1:*:*:*:*:*:*:* Versions 5.3.1 Vulnerable ·MariaDB
  • cpe:2.3:a:mariadb:mariadb:5.3.2:*:*:*:*:*:*:* Versions 5.3.2 Vulnerable ·MariaDB
  • cpe:2.3:a:mariadb:mariadb:5.3.3:*:*:*:*:*:*:* Versions 5.3.3 Vulnerable ·MariaDB
  • cpe:2.3:a:mariadb:mariadb:5.3.4:*:*:*:*:*:*:* Versions 5.3.4 Vulnerable ·MariaDB
  • cpe:2.3:a:mariadb:mariadb:5.3.5:*:*:*:*:*:*:* Versions 5.3.5 Vulnerable ·MariaDB
  • cpe:2.3:a:mariadb:mariadb:5.3.6:*:*:*:*:*:*:* Versions 5.3.6 Vulnerable ·MariaDB
  • cpe:2.3:a:mariadb:mariadb:5.3.7:*:*:*:*:*:*:* Versions 5.3.7 Vulnerable ·MariaDB
  • cpe:2.3:a:mariadb:mariadb:5.5.20:*:*:*:*:*:*:* Versions 5.5.20 Vulnerable ·MariaDB
  • cpe:2.3:a:mariadb:mariadb:5.5.21:*:*:*:*:*:*:* Versions 5.5.21 Vulnerable ·MariaDB
  • cpe:2.3:a:mariadb:mariadb:5.5.22:*:*:*:*:*:*:* Versions 5.5.22 Vulnerable ·MariaDB
  • cpe:2.3:a:mariadb:mariadb:5.5.23:*:*:*:*:*:*:* Versions 5.5.23 Vulnerable ·MariaDB
  • cpe:2.3:a:mariadb:mariadb:5.5.24:*:*:*:*:*:*:* Versions 5.5.24 Vulnerable ·MariaDB
  • cpe:2.3:a:mariadb:mariadb:5.5.25:*:*:*:*:*:*:* Versions 5.5.25 Vulnerable ·MariaDB

Remediation

No fixed version listed by the sources yet.

Vendor assessments

Red Hat

Red Hat rating: Moderate. Red Hat's page for this CVE →

ProductStatusPlan or fix
Red Hat Enterprise Linux 5AffectedNo fix planned: Will not fix
Red Hat Enterprise Linux 6AffectedNo fix planned: Will not fix

Timeline

  1. 2026-10-02 Threatist record created from CVE-2012-4414
  2. 2026-10-03 Alias added: GHSA-fq8v-ghvx-jmqh

References

Advisory 6

Other 5

Sources

This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences