CVE-2012-5611

MEDIUM severity · CVSS 6.5 · Memory corruption

6.5CVSS MEDIUM

Summary

Stack-based buffer overflow in the acl_get function in Oracle MySQL 5.5.19 and other versions through 5.5.28, and 5.1.53 and other versions through 5.1.66, and MariaDB 5.5.2.x before 5.5.28a, 5.3.x before 5.3.11, 5.2.x before 5.2.13 and 5.1.x before 5.1.66, allows remote authenticated users to execute arbitrary code via a long argument to the GRANT FILE command.

Impact & exploitability

Attack vectorNetwork

Attack complexityLow

Privileges required—

User interaction—

Confidentiality impact—

Integrity impact—

Availability impact—

Exploit probability (EPSS)67%

AV:N/AC:L/Au:S/C:P/I:P/A:P

Affected products we track (2)

MySQL MariaDB

Recommendation

Apply the vendor fix in your normal patch cycle. Open any affected product above for its exact safe version.

Additional information

NVD record
http://lists.opensuse.org/opensuse-security-announce/2013-01/msg00000.htmlAdvisory
http://lists.opensuse.org/opensuse-security-announce/2013-01/msg00001.htmlAdvisory
http://lists.opensuse.org/opensuse-security-announce/2013-01/msg00002.htmlAdvisory
http://lists.opensuse.org/opensuse-security-announce/2013-01/msg00013.htmlAdvisory
http://lists.opensuse.org/opensuse-security-announce/2013-01/msg00020.htmlAdvisory
http://lists.opensuse.org/opensuse-security-announce/2013-02/msg00000.htmlAdvisory
http://lists.opensuse.org/opensuse-updates/2013-09/msg00010.htmlAdvisory
http://rhn.redhat.com/errata/RHSA-2012-1551.htmlAdvisory