NetSight
IP …
medium4.0Public exploit code

CVE-2012-5614

Oracle MySQL 5.1.67 and earlier and 5.5.29 and earlier, and MariaDB 5.5.28a and possibly other versions, allows remote authenticated users to cause a denial of…

Public exploit code

Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.

Impact

Oracle MySQL 5.1.67 and earlier and 5.5.29 and earlier, and MariaDB 5.5.28a and possibly other versions, allows remote authenticated users to cause a denial of service (mysqld crash) via a SELECT command with an UpdateXML command containing XML with a large number of unique, nested elements.

Affected products

VendorProductAffected versions
OracleMysql
from 5.1.0 through 5.1.67
from 5.5.0 through 5.5.29
MariadbMariadb
from 5.5.0 before 5.5.30
from 10.0.0 before 10.0.2
RedhatEnterprise Linux Desktop
Version 6.0
RedhatEnterprise Linux Eus
Version 6.4
RedhatEnterprise Linux Server
Version 6.0
RedhatEnterprise Linux Server Aus
Version 6.4
RedhatEnterprise Linux Workstation
Version 6.0

References