SB2012011905 - Multiple vulnerabilities in Google, mysql
Published: January 19, 2012 Updated: August 11, 2020
Breakdown by Severity
- Low
- Medium
- High
- Critical
Description
This security bulletin contains information about 17 secuirty vulnerabilities.
1) Input validation error (CVE-ID: CVE-2012-0490)
The vulnerability allows a remote #AU# to perform service disruption.
Unspecified vulnerability in the MySQL Server component in Oracle MySQL 5.0.x, 5.1.x, and 5.5.x allows remote authenticated users to affect availability via unknown vectors.
2) Input validation error (CVE-ID: CVE-2012-0491)
The vulnerability allows a remote #AU# to perform service disruption.
Unspecified vulnerability in the MySQL Server component in Oracle MySQL 5.5.x allows remote authenticated users to affect availability via unknown vectors, a different vulnerability than CVE-2012-0117, CVE-2012-0486, CVE-2012-0487, CVE-2012-0488, CVE-2012-0489, CVE-2012-0493, and CVE-2012-0495.
3) Input validation error (CVE-ID: CVE-2012-0492)
The vulnerability allows a remote #AU# to perform service disruption.
Unspecified vulnerability in the MySQL Server component in Oracle MySQL 5.1.x and 5.5.x allows remote authenticated users to affect availability via unknown vectors, a different vulnerability than CVE-2012-0112, CVE-2012-0115, CVE-2012-0119, CVE-2012-0120, and CVE-2012-0485.
4) Input validation error (CVE-ID: CVE-2012-0493)
The vulnerability allows a remote #AU# to perform service disruption.
Unspecified vulnerability in the MySQL Server component in Oracle MySQL 5.5.x allows remote authenticated users to affect availability via unknown vectors, a different vulnerability than CVE-2012-0117, CVE-2012-0486, CVE-2012-0487, CVE-2012-0488, CVE-2012-0489, CVE-2012-0491, and CVE-2012-0495.
5) Input validation error (CVE-ID: CVE-2012-0494)
The vulnerability allows a local #AU# to perform service disruption.
Unspecified vulnerability in the MySQL Server component in Oracle MySQL 5.5.x allows local users to affect availability via unknown vectors.
6) Input validation error (CVE-ID: CVE-2012-0495)
The vulnerability allows a remote #AU# to perform service disruption.
Unspecified vulnerability in the MySQL Server component in Oracle MySQL 5.5.x allows remote authenticated users to affect availability via unknown vectors, a different vulnerability than CVE-2012-0117, CVE-2012-0486, CVE-2012-0487, CVE-2012-0488, CVE-2012-0489, CVE-2012-0491, and CVE-2012-0493.
7) Input validation error (CVE-ID: CVE-2012-0496)
The vulnerability allows a remote #AU# to read and manipulate data.
Unspecified vulnerability in the MySQL Server component in Oracle MySQL 5.5.x allows remote authenticated users to affect confidentiality and integrity via unknown vectors.
8) Input validation error (CVE-ID: CVE-2012-0112)
The vulnerability allows a remote #AU# to perform service disruption.
Unspecified vulnerability in the MySQL Server component in Oracle MySQL 5.1.x and 5.5.x allows remote authenticated users to affect availability via unknown vectors, a different vulnerability than CVE-2012-0115, CVE-2012-0119, CVE-2012-0120, CVE-2012-0485, and CVE-2012-0492.
9) Input validation error (CVE-ID: CVE-2012-0113)
The vulnerability allows a remote #AU# to #BASIC_IMPACT#.
Unspecified vulnerability in the MySQL Server component in Oracle MySQL 5.1.x and 5.5.x allows remote authenticated users to affect confidentiality and availability via unknown vectors, a different vulnerability than CVE-2012-0118.
10) Input validation error (CVE-ID: CVE-2012-0114)
The vulnerability allows a local #AU# to read and manipulate data.
Unspecified vulnerability in the MySQL Server component in Oracle MySQL 5.0.x, 5.1.x, and 5.5.x allows local users to affect confidentiality and integrity via unknown vectors.
11) Input validation error (CVE-ID: CVE-2012-0115)
The vulnerability allows a remote #AU# to perform service disruption.
Unspecified vulnerability in the MySQL Server component in Oracle MySQL 5.1.x and 5.5.x allows remote authenticated users to affect availability via unknown vectors, a different vulnerability than CVE-2012-0112, CVE-2012-0119, CVE-2012-0120, CVE-2012-0485, and CVE-2012-0492.
12) Input validation error (CVE-ID: CVE-2012-0116)
The vulnerability allows a remote #AU# to read and manipulate data.
Unspecified vulnerability in the MySQL Server component in Oracle MySQL 5.1.x and 5.5.x allows remote authenticated users to affect confidentiality and integrity via unknown vectors.
13) Input validation error (CVE-ID: CVE-2012-0117)
The vulnerability allows a remote #AU# to perform service disruption.
Unspecified vulnerability in the MySQL Server component in Oracle MySQL 5.5.x allows remote authenticated users to affect availability via unknown vectors, a different vulnerability than CVE-2012-0486, CVE-2012-0487, CVE-2012-0488, CVE-2012-0489, CVE-2012-0491, CVE-2012-0493, and CVE-2012-0495.
14) Input validation error (CVE-ID: CVE-2012-0118)
The vulnerability allows a remote #AU# to #BASIC_IMPACT#.
Unspecified vulnerability in the MySQL Server component in Oracle MySQL 5.1.x and 5.5.x allows remote authenticated users to affect confidentiality and availability via unknown vectors, a different vulnerability than CVE-2012-0113.
15) Input validation error (CVE-ID: CVE-2012-0119)
The vulnerability allows a remote #AU# to perform service disruption.
Unspecified vulnerability in the MySQL Server component in Oracle MySQL 5.1.x and 5.5.x allows remote authenticated users to affect availability via unknown vectors, a different vulnerability than CVE-2012-0112, CVE-2012-0115, CVE-2012-0120, CVE-2012-0485, and CVE-2012-0492.
16) Input validation error (CVE-ID: CVE-2012-0120)
The vulnerability allows a remote #AU# to perform service disruption.
Unspecified vulnerability in the MySQL Server component in Oracle MySQL 5.1.x and 5.5.x allows remote authenticated users to affect availability via unknown vectors, a different vulnerability than CVE-2012-0112, CVE-2012-0115, CVE-2012-0119, CVE-2012-0485, and CVE-2012-0492.
17) Input validation error (CVE-ID: CVE-2012-0075)
The vulnerability allows a remote #AU# to manipulate data.
Unspecified vulnerability in the MySQL Server component in Oracle MySQL 5.0.x, 5.1.x, and 5.5.x allows remote authenticated users to affect integrity via unknown vectors.
Remediation
Install update from vendor's website.
References
- http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=659687
- http://lists.opensuse.org/opensuse-security-announce/2012-08/msg00007.html
- http://osvdb.org/78388
- http://secunia.com/advisories/48250
- http://secunia.com/advisories/53372
- http://security.gentoo.org/glsa/glsa-201308-06.xml
- http://www.debian.org/security/2012/dsa-2429
- http://www.oracle.com/technetwork/topics/security/cpujan2012-366304.html
- http://www.securityfocus.com/bid/51524
- http://www.ubuntu.com/usn/USN-1397-1
- https://exchange.xforce.ibmcloud.com/vulnerabilities/72531
- http://osvdb.org/78389
- http://www.securityfocus.com/bid/51518
- https://exchange.xforce.ibmcloud.com/vulnerabilities/72532
- http://osvdb.org/78393
- http://www.securityfocus.com/bid/51516
- https://exchange.xforce.ibmcloud.com/vulnerabilities/72537
- http://osvdb.org/78394
- https://exchange.xforce.ibmcloud.com/vulnerabilities/72538
- http://osvdb.org/78375
- https://exchange.xforce.ibmcloud.com/vulnerabilities/72540
- http://osvdb.org/78390
- https://exchange.xforce.ibmcloud.com/vulnerabilities/72533
- http://osvdb.org/78371
- https://exchange.xforce.ibmcloud.com/vulnerabilities/72518
- http://osvdb.org/78374
- http://www.securityfocus.com/bid/51526
- https://exchange.xforce.ibmcloud.com/vulnerabilities/72539