4

CVE-2012-5614

Exploit

Oracle MySQL 5.1.67 and earlier and 5.5.29 and earlier, and MariaDB 5.5.28a and possibly other versions, allows remote authenticated users to cause a denial of service (mysqld crash) via a SELECT command with an UpdateXML command containing XML with a large number of unique, nested elements.

Data is provided by the National Vulnerability Database (NVD)
Oracle ≫ Mysql Version >= 5.1.0 <= 5.1.67
Oracle ≫ Mysql Version >= 5.5.0 <= 5.5.29
Mariadb ≫ Mariadb Version >= 5.5.0 < 5.5.30
Mariadb ≫ Mariadb Version >= 10.0.0 < 10.0.2
Redhat ≫ Enterprise Linux Eus Version6.4
Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.
EPSS Metriken
Type Source Score Percentile
EPSS FIRST.org 3.83% 0.877
CVSS Metriken
Source Base Score Exploit Score Impact Score Vector string
nvd@nist.gov 4 8 2.9
AV:N/AC:L/Au:S/C:N/I:N/A:P
http://seclists.org/fulldisclosure/2012/Dec/7
Third Party Advisory
Exploit
Mailing List
http://www.securitytracker.com/id?1027829
Third Party Advisory
Broken Link
VDB Entry