Home

CVE-2012-4414

Description

Multiple SQL injection vulnerabilities in the replication code in Oracle MySQL possibly before 5.5.29, and MariaDB 5.1.x through 5.1.62, 5.2.x through 5.2.12, 5.3.x through 5.3.7, and 5.5.x through 5.5.25, allow remote authenticated users to execute arbitrary SQL commands via vectors related to the binary log. NOTE: as of 20130116, Oracle has not commented on claims from a downstream vendor that the fix in MySQL 5.5.29 is incomplete.

Risk Information

Base Score
9.8
MODERATE
Vector
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
EPSS Score
Exploitation Probability
0.441

Associated Vulnerability

VulnerabilityOS Platform
Update MariaDB to 10.0.0 [2]Windows
Update MariaDB to 5.1.66 [2]Windows
Update MariaDB to 5.2.13 [2]Windows
Update MariaDB to 5.3.8 [2]Windows
Update MariaDB to 5.5.27 [2]Windows
Multiple Vulnerabilities are affected in Mysql 5.5.28Windows
Update MariaDB to 10.0.0 [2] (For Linux)Linux
Update MariaDB to 5.1.66 [2] (For Linux)Linux
Update MariaDB to 5.2.13 [2] (For Linux)Linux
Update MariaDB to 5.3.8 [2] (For Linux)Linux
Update MariaDB to 5.5.27 [2] (For Linux)Linux
Multiple Vulnerabilities are affected in Mysql 5.5.28 (For Linux)Linux

Patch Details

No records found

References

https://nvd.nist.gov/vuln/detail/CVE-2023-1234
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-1234