CVE-2012-0553
high
CVSS v3
—
CVSS v2
7.5
VIR risk
7.5
Description
Buffer overflow in yaSSL, as used in MySQL 5.1.x before 5.1.68 and 5.5.x before 5.5.28, has unspecified impact and attack vectors, a different vulnerability than CVE-2013-1492.
Predictions
Exploit likelihood
20%
Patch ETA
—
Heuristic predictions, AS-IS, for prioritization only.
Mitigations
Vendor advisory: secalert_us@oracle.com — http://secunia.com/advisories/52445
Application impact
| Vendor | Product | Versions | Fixed |
|---|---|---|---|
| mysql | mysql | 5.1.5 | |
| mysql | mysql | 5.1.23 | |
| mysql | mysql | 5.1.31 | |
| mysql | mysql | 5.1.32 | |
| mysql | mysql | 5.1.34 | |
| mysql | mysql | 5.1.37 | |
| oracle | mysql | 5.1 | |
| oracle | mysql | 5.1.1 | |
| oracle | mysql | 5.1.2 | |
| oracle | mysql | 5.1.3 | |
| oracle | mysql | 5.1.4 | |
| oracle | mysql | 5.1.6 | |
| oracle | mysql | 5.1.7 | |
| oracle | mysql | 5.1.8 | |
| oracle | mysql | 5.1.9 | |
| oracle | mysql | 5.1.10 | |
| oracle | mysql | 5.1.11 | |
| oracle | mysql | 5.1.12 | |
| oracle | mysql | 5.1.13 | |
| oracle | mysql | 5.1.14 | |
| oracle | mysql | 5.1.15 | |
| oracle | mysql | 5.1.16 | |
| oracle | mysql | 5.1.17 | |
| oracle | mysql | 5.1.18 | |
| oracle | mysql | 5.1.19 | |
| oracle | mysql | 5.1.20 | |
| oracle | mysql | 5.1.21 | |
| oracle | mysql | 5.1.22 | |
| oracle | mysql | 5.1.23 | |
| oracle | mysql | 5.1.24 | |
| oracle | mysql | 5.1.25 | |
| oracle | mysql | 5.1.26 | |
| oracle | mysql | 5.1.27 | |
| oracle | mysql | 5.1.28 | |
| oracle | mysql | 5.1.29 | |
| oracle | mysql | 5.1.30 | |
| oracle | mysql | 5.1.31 | |
| oracle | mysql | 5.1.33 | |
| oracle | mysql | 5.1.34 | |
| oracle | mysql | 5.1.35 | |
| oracle | mysql | 5.1.36 | |
| oracle | mysql | 5.1.37 | |
| oracle | mysql | 5.1.38 | |
| oracle | mysql | 5.1.39 | |
| oracle | mysql | 5.1.40 | |
| oracle | mysql | 5.1.41 | |
| oracle | mysql | 5.1.42 | |
| oracle | mysql | 5.1.43 | |
| oracle | mysql | 5.1.44 | |
| oracle | mysql | 5.1.45 | |
| oracle | mysql | 5.1.46 | |
| oracle | mysql | 5.1.47 | |
| oracle | mysql | 5.1.48 | |
| oracle | mysql | 5.1.49 | |
| oracle | mysql | 5.1.50 | |
| oracle | mysql | 5.1.51 | |
| oracle | mysql | 5.1.52 | |
| oracle | mysql | 5.1.53 | |
| oracle | mysql | 5.1.54 | |
| oracle | mysql | 5.1.55 | |
| oracle | mysql | 5.1.56 | |
| oracle | mysql | 5.1.57 | |
| oracle | mysql | 5.1.58 | |
| oracle | mysql | 5.1.59 | |
| oracle | mysql | 5.1.60 | |
| oracle | mysql | 5.1.61 | |
| oracle | mysql | 5.1.62 | |
| oracle | mysql | 5.1.63 | |
| oracle | mysql | 5.1.64 | |
| oracle | mysql | 5.1.65 | |
| oracle | mysql | 5.1.66 | |
| oracle | mysql | 5.1.67 | |
| oracle | mysql | 5.5.0 | |
| oracle | mysql | 5.5.1 | |
| oracle | mysql | 5.5.2 | |
| oracle | mysql | 5.5.3 | |
| oracle | mysql | 5.5.4 | |
| oracle | mysql | 5.5.5 | |
| oracle | mysql | 5.5.6 | |
| oracle | mysql | 5.5.7 | |
| oracle | mysql | 5.5.9 | |
| oracle | mysql | 5.5.10 | |
| oracle | mysql | 5.5.11 | |
| oracle | mysql | 5.5.12 | |
| oracle | mysql | 5.5.13 | |
| oracle | mysql | 5.5.14 | |
| oracle | mysql | 5.5.15 | |
| oracle | mysql | 5.5.16 | |
| oracle | mysql | 5.5.17 | |
| oracle | mysql | 5.5.18 | |
| oracle | mysql | 5.5.19 | |
| oracle | mysql | 5.5.20 | |
| oracle | mysql | 5.5.21 | |
| oracle | mysql | 5.5.22 | |
| oracle | mysql | 5.5.23 | |
| oracle | mysql | 5.5.24 | |
| oracle | mysql | 5.5.25 | |
| oracle | mysql | 5.5.26 | |
| oracle | mysql | 5.5.27 | |
References
- http://dev.mysql.com/doc/relnotes/mysql/5.1/en/news-5-1-68.html
- http://secunia.com/advisories/52445
- http://secunia.com/advisories/53372
- http://security.gentoo.org/glsa/glsa-201308-06.xml
- https://blogs.oracle.com/sunsecurity/entry/cve_2012_0553_buffer_overflow
- http://dev.mysql.com/doc/relnotes/mysql/5.1/en/news-5-1-68.html
- http://secunia.com/advisories/52445
- http://secunia.com/advisories/53372
- http://security.gentoo.org/glsa/glsa-201308-06.xml
- https://blogs.oracle.com/sunsecurity/entry/cve_2012_0553_buffer_overflow
CWEs
CWE-119
Verify integrity in audit chain (admin only). AS-IS.