CVE-2012-3163
Unspecified vulnerability in the MySQL Server component in Oracle MySQL 5.1.64 and earlier, and 5.5.26 and earlier, allows remote authenticated users to affect confidentiality, integrity, and availability via unknown vectors related to Information Schema.
Does this matter?
High impact if exploited, but EPSS currently rates exploitation as unlikely (5.10%). Schedule it in the normal patch cycle and watch for a rise in EPSS or a public exploit.
Description
Unspecified vulnerability in the MySQL Server component in Oracle MySQL 5.1.64 and earlier, and 5.5.26 and earlier, allows remote authenticated users to affect confidentiality, integrity, and availability via unknown vectors related to Information Schema.
- CVSS 2.0
- 9.0 HIGHAV:N/AC:L/Au:S/C:C/I:C/A:C
- EPSS
- 5.10% probability · 92th percentile
- CISA KEV
- Not listed
- Affected
- oracle/mysql · mariadb/mariadb · canonical/ubuntu linux · debian/debian linux · redhat/enterprise linux desktop · redhat/enterprise linux eus · redhat/enterprise linux server · redhat/enterprise linux workstation · f5/big-ip access policy manager · f5/big-ip advanced firewall manager · f5/big-ip analytics · f5/big-ip application security manager · f5/big-ip edge gateway · f5/big-ip enterprise manager · f5/big-ip global traffic manager · f5/big-ip link controller · f5/big-ip local traffic manager · f5/big-ip policy enforcement manager · f5/big-ip protocol security module · f5/big-ip wan optimization manager · +1 more
- Source
- secalert_us@oracle.com
References
- http://rhn.redhat.com/errata/RHSA-2012-1462.htmlThird Party Advisory
- http://secunia.com/advisories/51177Not Applicable
- http://secunia.com/advisories/51309Not Applicable
- http://secunia.com/advisories/53372Not Applicable
- http://secunia.com/advisories/56509Not Applicable
- http://secunia.com/advisories/56513Not Applicable
- http://security.gentoo.org/glsa/glsa-201308-06.xmlThird Party Advisory
- http://support.f5.com/kb/en-us/solutions/public/14000/900/sol14907.htmlThird Party Advisory
- http://www.debian.org/security/2012/dsa-2581Third Party Advisory
- http://www.mandriva.com/security/advisories?name=MDVSA-2013:150Third Party Advisory
- http://www.oracle.com/technetwork/topics/security/cpuoct2012-1515893.htmlPatch, Third Party Advisory
- http://www.ubuntu.com/usn/USN-1621-1Third Party Advisory
- https://exchange.xforce.ibmcloud.com/vulnerabilities/79381Third Party Advisory, VDB Entry
- http://rhn.redhat.com/errata/RHSA-2012-1462.htmlThird Party Advisory
- http://secunia.com/advisories/51177Not Applicable
- http://secunia.com/advisories/51309Not Applicable
- http://secunia.com/advisories/53372Not Applicable
- http://secunia.com/advisories/56509Not Applicable
- http://secunia.com/advisories/56513Not Applicable
- http://security.gentoo.org/glsa/glsa-201308-06.xmlThird Party Advisory
- http://support.f5.com/kb/en-us/solutions/public/14000/900/sol14907.htmlThird Party Advisory
- http://www.debian.org/security/2012/dsa-2581Third Party Advisory
- http://www.mandriva.com/security/advisories?name=MDVSA-2013:150Third Party Advisory
- http://www.oracle.com/technetwork/topics/security/cpuoct2012-1515893.htmlPatch, Third Party Advisory
- http://www.ubuntu.com/usn/USN-1621-1Third Party Advisory
- https://exchange.xforce.ibmcloud.com/vulnerabilities/79381Third Party Advisory, VDB Entry
Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.