Input validation error in MySQL Server - CVE-2012-0583

 

Input validation error in MySQL Server - CVE-2012-0583

Published: May 4, 2012 / Updated: August 4, 2020


Vulnerability identifier: #VU33939
CSH Severity: Low
CVSS v4: 5.1 [CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N]
CVE-ID: CVE-2012-0583
CWE-ID: CWE-20
Exploitation vector: Remote access
Exploit availability: No public exploit available

Vulnerability details

The vulnerability allows a remote #AU# to perform service disruption.

Unspecified vulnerability in the MySQL Server component in Oracle MySQL 5.1.60 and earlier, and 5.5.19 and earlier, allows remote authenticated users to affect availability, related to MyISAM.


Affected software

MySQL Server
mysql (Alpine package)

How to mitigate CVE-2012-0583

Install update from vendor's website.

MySQL Server - addressed in versions 5.1.61, 5.5.19
mysql (Alpine package) - update to 5.1.63-r0

External References

Related Security Bulletins