CVE-2012-5612
28Vexday Risk Score
Sem sinal de exploração. Ela tem prova de conceito pública.
ssvc Attendepss 21%
da publicação à arma0 dias
Publicada no NVD3 de dez.
1ª PoC2 de dez.
probabilidade de exploração
21%top 3% das CVEs
exploração observada
nãonenhuma fonte reporta
2 exploit(s) público(s)
Heap-based buffer overflow in Oracle MySQL 5.5.19 and other versions through 5.5.28, and MariaDB 5.5.28a and possibly other versions, allows remote authenticated users to cause a denial of service (memory corruption and crash) and possibly execute arbitrary code, as demonstrated using certain variations of the (1) USE, (2) SHOW TABLES, (3) DESCRIBE, (4) SHOW FIELDS FROM, (5) SHOW COLUMNS FROM, (6) SHOW INDEX FROM, (7) CREATE TABLE, (8) DROP TABLE, (9) ALTER TABLE, (10) DELETE FROM, (11) UPDATE, and (12) SET PASSWORD commands.
Produtos afetados
n/a · n/aPoCs públicas encontradas — 2
cve_referencewww.exploit-db.com/exploits/23076não verificadoexploitdbwww.exploit-db.com/exploits/23076não verificado⚠ Recursos públicos, para você avaliar a exposição de sistemas que controla ou está autorizado a testar. Teste apenas com autorização.
Referências
http://lists.opensuse.org/opensuse-security-announce/2013-02/msg00000.htmlhttp://seclists.org/fulldisclosure/2012/Dec/5http://secunia.com/advisories/53372http://security.gentoo.org/glsa/glsa-201308-06.xmlhttps://mariadb.atlassian.net/browse/MDEV-3908https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A16960http://www.exploit-db.com/exploits/23076http://www.mandriva.com/security/advisories?name=MDVSA-2013:102http://www.mandriva.com/security/advisories?name=MDVSA-2013:150http://www.openwall.com/lists/oss-security/2012/12/02/3http://www.openwall.com/lists/oss-security/2012/12/02/4http://www.oracle.com/technetwork/topics/security/cpujan2013-1515902.html