NVD

Id
46730  
Name
CVE-2012-5614  
Description
Oracle MySQL 5.1.67 and earlier and 5.5.29 and earlier, and MariaDB 5.5.28a and possibly other versions, allows remote authenticated users to cause a denial of service (mysqld crash) via a SELECT command with an UpdateXML command containing XML with a large number of unique, nested elements.  
Reject
 
CVSS Version
2  
CVSS Score
4  
Severity
Medium  
CVSS Base Score
4  
CVSS Impact Subscore
2.9  
CVSS Exploit Subscore
8  
CVSS Vector
(AV:N/AC:L/Au:S/C:N/I:N/A:P)  
Pub Date
2017-01-19  
Published
2012-12-03  
Modified Date
2014-02-20  
Seq
2012-5614  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
234065 46730 CVE-2012-5614 RHSA-2013:0772  View
234066 46730 CVE-2012-5614 20121201 MySQL Denial of Service Zeroday PoC  View
234067 46730 CVE-2012-5614 GLSA-201308-06  View
234068 46730 CVE-2012-5614 MDVSA-2013:150  View
234069 46730 CVE-2012-5614 [oss-security] 20121202 Re: Re: [Full-disclosure] MySQL (Linux) Stack based buffer overrun PoC Zeroday  View
234070 46730 CVE-2012-5614 [oss-security] 20121202 Re: Re: [Full-disclosure] MySQL (Linux) Stack based buffer overrun PoC Zeroday  View
234071 46730 CVE-2012-5614 http://www.oracle.com/technetwork/topics/security/cpuapr2013-1899555.html  View
234072 46730 CVE-2012-5614 1027829  View
234073 46730 CVE-2012-5614 https://bugzilla.redhat.com/show_bug.cgi?id=882607  View
234074 46730 CVE-2012-5614 https://mariadb.atlassian.net/browse/MDEV-3910  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
29883 JVNDB-2012-005590 Oracle MySQL および MariaDB におけるサービス運用妨害 (mysqld クラッシュ) の脆弱性 Oracle MySQL および MariaDB には、サービス運用妨害 (mysqld クラッシュ) 状態となる脆弱性が存在します。 CVE-2012-5614 58852 CVE-2012-5614 46730 4 http://jvndb.jvn.jp/ja/contents/2012/JVNDB-2012-005590.html 2012-12-03 2016-02-16 View