CVE-2012-3167

mysql: unspecified DoS vulnerability related to Server Full Text Search (CPU Oct 2012)

Unspecified vulnerability in the MySQL Server component in Oracle MySQL 5.1.63 and earlier, and 5.5.25 and earlier, allows remote authenticated users to affect availability via unknown vectors related to Server Full Text Search.

CVSS 2.0 · 3.5 Low EPSS 2.7% KEV · Not listed

Vendors

Canonical Debian Mariadb and 2 more

Products

Ubuntu Linux Debian Linux Mariadb and 6 more

CVE-2012-3166

mysql: unspecified DoS vulnerability related to InnoDB (CPU Oct 2012)

Unspecified vulnerability in the MySQL Server component in Oracle MySQL 5.1.63 and earlier, and 5.5.25 and earlier, allows remote authenticated users to affect availability via unknown vectors related to InnoDB.

CVSS 2.0 · 4.0 Medium EPSS 3.0% KEV · Not listed

Vendors

Canonical Debian Mariadb and 2 more

Products

Ubuntu Linux Debian Linux Mariadb and 6 more

CVE-2012-3163

mysql: unspecified vulnerability related to Information Schema (CPU Oct 2012)

Unspecified vulnerability in the MySQL Server component in Oracle MySQL 5.1.64 and earlier, and 5.5.26 and earlier, allows remote authenticated users to affect confidentiality, integrity, and availability via unknown vectors related to Information Schema.

CVSS 2.0 · 9.0 Critical EPSS 5.1% KEV · Not listed

Vendors

Canonical Debian F5 and 3 more

Products

Ubuntu Linux Debian Linux Big-ip Access Policy Manager and 19 more

CVE-2012-3160

mysql: unspecified vulnerability in Server Installation leading to information disclosure (CPU Oct 2012)

Unspecified vulnerability in the MySQL Server component in Oracle MySQL 5.1.65 and earlier, and 5.5.27 and earlier, allows local users to affect confidentiality via unknown vectors related to Server Installation.

CVSS 2.0 · 2.1 Low EPSS < 1% KEV · Not listed

Vendors

Canonical Debian Mariadb and 2 more

Products

Ubuntu Linux Debian Linux Mariadb and 6 more

CVE-2012-3158

mysql: unspecified vulnerability related to the MySQL Protocol (CPU Oct 2012)

Unspecified vulnerability in the MySQL Server component in Oracle MySQL 5.1.64 and earlier, and 5.5.26 and earlier, allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Protocol.

CVSS 2.0 · 7.5 High EPSS 4.5% KEV · Not listed

Vendors

Canonical Debian Mariadb and 2 more

Products

Ubuntu Linux Debian Linux Mariadb and 6 more

CVE-2012-3150

mysql: unspecified DoS vulnerability related to Server Optimizer (CPU Oct 2012)

Unspecified vulnerability in the MySQL Server component in Oracle MySQL 5.1.64 and earlier, and 5.5.26 and earlier, allows remote authenticated users to affect availability via unknown vectors related to Server Optimizer.

CVSS 2.0 · 4.0 Medium EPSS 3.4% KEV · Not listed

Vendors

Canonical Debian Mariadb and 2 more

Products

Ubuntu Linux Debian Linux Mariadb and 6 more

CVE-2012-2750

mysql: unspecified flaw related to Optimizer

Unspecified vulnerability in MySQL 5.5.x before 5.5.23 has unknown impact and attack vectors related to a "Security Fix", aka Bug #59533. NOTE: this might be a duplicate of CVE-2012-1689, but as of 20120816, Oracle has not commented on this possibility.

CVSS 2.0 · 10.0 Critical EPSS 3.6% KEV · Not listed

Vendors

Debian Mariadb Oracle

Products

Debian Linux Mariadb Mysql

CVE-2012-2122

mysql: incorrect type cast in check_scramble() leading to authentication bypass

sql/password.c in Oracle MySQL 5.1.x before 5.1.63, 5.5.x before 5.5.24, and 5.6.x before 5.6.6, and MariaDB 5.1.x before 5.1.62, 5.2.x before 5.2.12, 5.3.x before 5.3.6, and 5.5.x before 5.5.23, when running in certain environments with certain implementations of the memcmp function, allows remote attackers to bypass authentication by repeatedly authenticating with the same incorrect password, which eventually causes a token comparison to succeed due to an improperly-checked return value.

CVSS 2.0 · 5.1 Medium EPSS 96.6% KEV · Not listed

Vendors

Mariadb Oracle Redhat

Products

Mariadb Mysql Enterprise Linux

CVE-2012-1757

mysql: unspecified vulnerability related to InnoDB DoS

Unspecified vulnerability in Oracle MySQL Server 5.5.23 and earlier allows remote authenticated users to affect availability via unknown vectors related to InnoDB.

CVSS 2.0 · 4.0 Medium EPSS 3.3% KEV · Not listed

Vendors

Mariadb Oracle

Products

Mariadb Mysql

CVE-2012-1756

mysql: unspecified vulnerability leads to DoS via unspecified vectors

Unspecified vulnerability in Oracle MySQL Server 5.5.23 and earlier allows remote authenticated users to affect availability via unknown vectors.

CVSS 2.0 · 4.0 Medium EPSS 3.3% KEV · Not listed

Vendors

Mariadb Oracle

Products

Mariadb Mysql

CVE-2012-1735

mysql: unspecified vulnerability related to Server Optimizer DoS

Unspecified vulnerability in Oracle MySQL Server 5.5.23 and earlier allows remote authenticated users to affect availability via unknown vectors related to Server Optimizer.

CVSS 2.0 · 6.8 Medium EPSS 3.4% KEV · Not listed

Vendors

Mariadb Oracle

Products

Mariadb Mysql

CVE-2012-1734

mysql: unspecified DoS vulnerability related to Server Optimizer (CPU Jul 2012)

Unspecified vulnerability in Oracle MySQL Server 5.1.62 and earlier, and 5.5.23 and earlier, allows remote authenticated users to affect availability via unknown vectors related to Server Optimizer.

CVSS 2.0 · 4.0 Medium EPSS 3.9% KEV · Not listed

Vendors

Mariadb Oracle Redhat

Products

Mariadb Mysql Enterprise Linux and 4 more

CVE-2012-1705

mysql: unspecified DoS vulnerability related to Server Optimizer (CPU Jan 2013)

Unspecified vulnerability in the Server component in Oracle MySQL 5.1.66 and earlier and 5.5.28 and earlier allows remote authenticated users to affect availability via unknown vectors related to Server Optimizer.

CVSS 2.0 · 4.0 Medium EPSS 2.6% KEV · Not listed

Vendors

Canonical Mariadb Oracle and 1 more

Products

Ubuntu Linux Mariadb Mysql and 5 more

CVE-2012-1703

mysql: unspecified DoS vulnerability related to Server Optimizer (CPU Apr 2012)

Unspecified vulnerability in the MySQL Server component in Oracle MySQL 5.1.61 and earlier, and 5.5.21 and earlier, allows remote authenticated users to affect availability via unknown vectors related to Server Optimizer, a different vulnerability than CVE-2012-1690.

CVSS 2.0 · 6.8 Medium EPSS 3.7% KEV · Not listed

Vendors

Mariadb Oracle Redhat

Products

Mariadb Mysql Enterprise Linux and 5 more

CVE-2012-1702

mysql: unspecified unauthenticated DoS vulnerability related to Server (CPU Jan 2013)

Unspecified vulnerability in the Server component in Oracle MySQL 5.1.66 and earlier and 5.5.28 and earlier allows remote attackers to affect availability via unknown vectors.

CVSS 2.0 · 5.0 Medium EPSS 3.2% KEV · Not listed

Vendors

Canonical Mariadb Oracle and 1 more

Products

Ubuntu Linux Mariadb Mysql and 5 more

CVE-2012-1697

mysql: Unspecified vulnerability in the partition subcomponent leading to DoS (server hang / crash) (Oracle CPU April 2012)

Unspecified vulnerability in the MySQL Server component in Oracle MySQL 5.5.21 and earlier allows remote authenticated users to affect availability via unknown vectors related to Partition.

CVSS 2.0 · 4.0 Medium EPSS 2.9% KEV · Not listed

Vendors

Mariadb Oracle

Products

Mariadb Mysql

CVE-2022-47015

mariadb: NULL pointer dereference in spider_db_mbase::print_warnings()

MariaDB Server before 10.3.34 thru 10.9.3 is vulnerable to Denial of Service. It is possible for function spider_db_mbase::print_warnings to dereference a null pointer.

CVSS 3.1 · 6.5 Medium EPSS 1.6% KEV · Not listed

Vendors

Mariadb Redhat

Products

Mariadb Enterprise Linux Rhel Software Collections

CVE-2023-22084

mysql: InnoDB unspecified vulnerability (CPU Oct 2023)

Vulnerability in the MySQL Server product of Oracle MySQL (component: InnoDB). Supported versions that are affected are 5.7.43 and prior, 8.0.34 and prior and 8.1.0. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.1 Base Score 4.9 (Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H).

CVSS 3.1 · 4.9 Medium EPSS 2.1% KEV · Not listed

Vendors

Fedoraproject Mariadb Netapp and 2 more

Products

Fedora Mariadb Oncommand Insight and 3 more

CVE-2022-38791

mariadb: compress_write() fails to release mutex on failure

In MariaDB before 10.9.2, compress_write in extra/mariabackup/ds_compress.cc does not release data_mutex upon a stream write failure, which allows local users to trigger a deadlock.

CVSS 3.1 · 5.5 Medium EPSS < 1% KEV · Not listed

Vendors

Fedoraproject Mariadb Redhat

Products

Fedora Mariadb Enterprise Linux and 1 more

CVE-2022-32091

mariadb: server crash in JOIN_CACHE::free or in copy_fields

MariaDB v10.7 was discovered to contain an use-after-poison in in __interceptor_memset at /libsanitizer/sanitizer_common/sanitizer_common_interceptors.inc.

CVSS 3.1 · 7.5 High EPSS 2.4% KEV · Not listed

Vendors

Debian Fedoraproject Mariadb and 1 more

Products

Debian Linux Fedora Mariadb and 2 more