VulnerabilityModified

CVE-2012-5060

Unspecified vulnerability in the Server component in Oracle MySQL 5.1.65 and earlier and 5.5.27 and earlier allows remote authenticated users to affect availability, related to GIS Extension.

MEDIUM 6.8EPSS 2.53%

Does this matter?

Lower severity and a low EPSS score (2.53%). Track it; it rarely justifies an emergency change on its own.

Description

Unspecified vulnerability in the Server component in Oracle MySQL 5.1.65 and earlier and 5.5.27 and earlier allows remote authenticated users to affect availability, related to GIS Extension.

CVSS 2.0: 6.8 MEDIUMAV:N/AC:L/Au:S/C:N/I:N/A:C
EPSS: 2.53% probability · 84th percentile
CISA KEV: Not listed
Affected: oracle/mysql · mariadb/mariadb · canonical/ubuntu linux
Source: secalert_us@oracle.com

References

http://secunia.com/advisories/53372Not Applicable
http://security.gentoo.org/glsa/glsa-201308-06.xmlThird Party Advisory
http://www.mandriva.com/security/advisories?name=MDVSA-2013:150Broken Link
http://www.oracle.com/technetwork/topics/security/cpujan2013-1515902.htmlVendor Advisory
http://www.ubuntu.com/usn/USN-1703-1Third Party Advisory
http://secunia.com/advisories/53372Not Applicable
http://security.gentoo.org/glsa/glsa-201308-06.xmlThird Party Advisory
http://www.mandriva.com/security/advisories?name=MDVSA-2013:150Broken Link
http://www.oracle.com/technetwork/topics/security/cpujan2013-1515902.htmlVendor Advisory
http://www.ubuntu.com/usn/USN-1703-1Third Party Advisory

Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.