VulnerabilityModified
CVE-2012-3158
Unspecified vulnerability in the MySQL Server component in Oracle MySQL 5.1.64 and earlier, and 5.5.26 and earlier, allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Protocol.
HIGH 7.5EPSS 4.50%
Does this matter?
High impact if exploited, but EPSS currently rates exploitation as unlikely (4.50%). Schedule it in the normal patch cycle and watch for a rise in EPSS or a public exploit.
Description
Unspecified vulnerability in the MySQL Server component in Oracle MySQL 5.1.64 and earlier, and 5.5.26 and earlier, allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Protocol.
- CVSS 2.0
- 7.5 HIGHAV:N/AC:L/Au:N/C:P/I:P/A:P
- EPSS
- 4.50% probability · 91th percentile
- CISA KEV
- Not listed
- Affected
- oracle/mysql · mariadb/mariadb · debian/debian linux · canonical/ubuntu linux · redhat/enterprise linux desktop · redhat/enterprise linux eus · redhat/enterprise linux server · redhat/enterprise linux workstation
- Source
- secalert_us@oracle.com
References
- http://rhn.redhat.com/errata/RHSA-2012-1462.htmlThird Party Advisory
- http://secunia.com/advisories/51177Not Applicable
- http://secunia.com/advisories/51309Not Applicable
- http://secunia.com/advisories/53372Not Applicable
- http://security.gentoo.org/glsa/glsa-201308-06.xmlThird Party Advisory
- http://www.debian.org/security/2012/dsa-2581Third Party Advisory
- http://www.mandriva.com/security/advisories?name=MDVSA-2013:102Broken Link
- http://www.mandriva.com/security/advisories?name=MDVSA-2013:150Broken Link
- http://www.oracle.com/technetwork/topics/security/cpuoct2012-1515893.htmlPatch, Vendor Advisory
- http://www.ubuntu.com/usn/USN-1621-1Third Party Advisory
- https://exchange.xforce.ibmcloud.com/vulnerabilities/79382Third Party Advisory, VDB Entry
- http://rhn.redhat.com/errata/RHSA-2012-1462.htmlThird Party Advisory
- http://secunia.com/advisories/51177Not Applicable
- http://secunia.com/advisories/51309Not Applicable
- http://secunia.com/advisories/53372Not Applicable
- http://security.gentoo.org/glsa/glsa-201308-06.xmlThird Party Advisory
- http://www.debian.org/security/2012/dsa-2581Third Party Advisory
- http://www.mandriva.com/security/advisories?name=MDVSA-2013:102Broken Link
- http://www.mandriva.com/security/advisories?name=MDVSA-2013:150Broken Link
- http://www.oracle.com/technetwork/topics/security/cpuoct2012-1515893.htmlPatch, Vendor Advisory
- http://www.ubuntu.com/usn/USN-1621-1Third Party Advisory
- https://exchange.xforce.ibmcloud.com/vulnerabilities/79382Third Party Advisory, VDB Entry
Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.