CVE-2012-2102 MySQL 5.1.x before 5.1.62 and 5.5.x before 5.5.22 allows remote authenticated users to cause a denial of service (assertion failure and mysqld abort) by deleting a record and using HANDLER READ NEXT.
LowCVSS 3.5
EPSS 2.1%
- Published
- Updated
- Exploit status
- No public exploit known
Description
MySQL 5.1.x before 5.1.62 and 5.5.x before 5.5.22 allows remote authenticated users to cause a denial of service (assertion failure and mysqld abort) by deleting a record and using HANDLER READ NEXT.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| mysql | = 5.1.5 | No fix listed |
| mysql | = 5.1.23 | No fix listed |
| mysql | = 5.1.31 | No fix listed |
| mysql | = 5.1.32 | No fix listed |
| mysql | = 5.1.34 | No fix listed |
| mysql | = 5.1.37 | No fix listed |
| oracle MySQL | = 5.1 | No fix listed |
| oracle MySQL | = 5.1.1 | No fix listed |
| oracle MySQL | = 5.1.2 | No fix listed |
| oracle MySQL | = 5.1.3 | No fix listed |
| oracle MySQL | = 5.1.4 | No fix listed |
| oracle MySQL | = 5.1.6 | No fix listed |
| oracle MySQL | = 5.1.7 | No fix listed |
| oracle MySQL | = 5.1.8 | No fix listed |
| oracle MySQL | = 5.1.9 | No fix listed |
| oracle MySQL | = 5.1.10 | No fix listed |
| oracle MySQL | = 5.1.11 | No fix listed |
| oracle MySQL | = 5.1.12 | No fix listed |
| oracle MySQL | = 5.1.13 | No fix listed |
| oracle MySQL | = 5.1.14 | No fix listed |
| oracle MySQL | = 5.1.15 | No fix listed |
| oracle MySQL | = 5.1.16 | No fix listed |
| oracle MySQL | = 5.1.17 | No fix listed |
| oracle MySQL | = 5.1.18 | No fix listed |
| oracle MySQL | = 5.1.19 | No fix listed |
Show 67 more
| Product | Affected versions | Fixed in |
|---|---|---|
| oracle MySQL | = 5.1.20 | No fix listed |
| oracle MySQL | = 5.1.21 | No fix listed |
| oracle MySQL | = 5.1.22 | No fix listed |
| oracle MySQL | = 5.1.23-a | No fix listed |
| oracle MySQL | = 5.1.24 | No fix listed |
| oracle MySQL | = 5.1.25 | No fix listed |
| oracle MySQL | = 5.1.26 | No fix listed |
| oracle MySQL | = 5.1.27 | No fix listed |
| oracle MySQL | = 5.1.28 | No fix listed |
| oracle MySQL | = 5.1.29 | No fix listed |
| oracle MySQL | = 5.1.30 | No fix listed |
| oracle MySQL | = 5.1.31-sp1 | No fix listed |
| oracle MySQL | = 5.1.33 | No fix listed |
| oracle MySQL | = 5.1.34-sp1 | No fix listed |
| oracle MySQL | = 5.1.35 | No fix listed |
| oracle MySQL | = 5.1.36 | No fix listed |
| oracle MySQL | = 5.1.37-sp1 | No fix listed |
| oracle MySQL | = 5.1.38 | No fix listed |
| oracle MySQL | = 5.1.39 | No fix listed |
| oracle MySQL | = 5.1.40 | No fix listed |
| oracle MySQL | = 5.1.40-sp1 | No fix listed |
| oracle MySQL | = 5.1.41 | No fix listed |
| oracle MySQL | = 5.1.42 | No fix listed |
| oracle MySQL | = 5.1.43 | No fix listed |
| oracle MySQL | = 5.1.43-sp1 | No fix listed |
| oracle MySQL | = 5.1.44 | No fix listed |
| oracle MySQL | = 5.1.45 | No fix listed |
| oracle MySQL | = 5.1.46 | No fix listed |
| oracle MySQL | = 5.1.46-sp1 | No fix listed |
| oracle MySQL | = 5.1.47 | No fix listed |
| oracle MySQL | = 5.1.48 | No fix listed |
| oracle MySQL | = 5.1.49 | No fix listed |
| oracle MySQL | = 5.1.49-sp1 | No fix listed |
| oracle MySQL | = 5.1.50 | No fix listed |
| oracle MySQL | = 5.1.51 | No fix listed |
| oracle MySQL | = 5.1.52 | No fix listed |
| oracle MySQL | = 5.1.52-sp1 | No fix listed |
| oracle MySQL | = 5.1.53 | No fix listed |
| oracle MySQL | = 5.1.54 | No fix listed |
| oracle MySQL | = 5.1.55 | No fix listed |
| oracle MySQL | = 5.1.56 | No fix listed |
| oracle MySQL | = 5.1.57 | No fix listed |
| oracle MySQL | = 5.1.58 | No fix listed |
| oracle MySQL | = 5.1.59 | No fix listed |
| oracle MySQL | = 5.1.60 | No fix listed |
| oracle MySQL | = 5.1.61 | No fix listed |
| oracle MySQL | = 5.5.0 | No fix listed |
| oracle MySQL | = 5.5.1 | No fix listed |
| oracle MySQL | = 5.5.2 | No fix listed |
| oracle MySQL | = 5.5.3 | No fix listed |
| oracle MySQL | = 5.5.4 | No fix listed |
| oracle MySQL | = 5.5.5 | No fix listed |
| oracle MySQL | = 5.5.6 | No fix listed |
| oracle MySQL | = 5.5.7 | No fix listed |
| oracle MySQL | = 5.5.9 | No fix listed |
| oracle MySQL | = 5.5.10 | No fix listed |
| oracle MySQL | = 5.5.11 | No fix listed |
| oracle MySQL | = 5.5.12 | No fix listed |
| oracle MySQL | = 5.5.13 | No fix listed |
| oracle MySQL | = 5.5.14 | No fix listed |
| oracle MySQL | = 5.5.15 | No fix listed |
| oracle MySQL | = 5.5.16 | No fix listed |
| oracle MySQL | = 5.5.17 | No fix listed |
| oracle MySQL | = 5.5.18 | No fix listed |
| oracle MySQL | = 5.5.19 | No fix listed |
| oracle MySQL | = 5.5.20 | No fix listed |
| oracle MySQL | = 5.5.21 | No fix listed |
References
- bazaar.launchpad.net
- dev.mysql.com
- dev.mysql.com
- eromang.zataz.com exploit
- 53372 third-party-advisory
- GLSA-201308-06 vendor-advisory
- [oss-security] 20120413 Re: CVE request: mysql: Server crash on HANDLER READ NEXT after DELETE mailing-list
- 52931 vdb-entry