CVE-2012-2749
Fixed in a distro release EPSS 2%
MySQL 5.1.x before 5.1.63 and 5.5.x before 5.5.24 allows remote authenticated users to cause a denial of service (mysqld crash) via vectors related to incorrect calculation and a sort order index.
Products: mysql, oracle mysql
Distro releases
| Release | Package | Fixed in |
|---|---|---|
| Debian 6.0 | mysql-5.1 | 5.1.63-0+squeeze1 |
| Red Hat Enterprise Linux 5 | mysql | 0:5.0.95-5.el5_9 |
| Red Hat Enterprise Linux 5 | mysql-bench | 0:5.0.95-5.el5_9 |
| Red Hat Enterprise Linux 5 | mysql-debuginfo | 0:5.0.95-5.el5_9 |
| Red Hat Enterprise Linux 5 | mysql-devel | 0:5.0.95-5.el5_9 |
| Red Hat Enterprise Linux 5 | mysql-server | 0:5.0.95-5.el5_9 |
| Red Hat Enterprise Linux 5 | mysql-test | 0:5.0.95-5.el5_9 |
| Red Hat Enterprise Linux 6 | mysql | 0:5.1.66-1.el6_3 |
| Red Hat Enterprise Linux 6 | mysql-bench | 0:5.1.66-1.el6_3 |
| Red Hat Enterprise Linux 6 | mysql-debuginfo | 0:5.1.66-1.el6_3 |
| Red Hat Enterprise Linux 6 | mysql-devel | 0:5.1.66-1.el6_3 |
| Red Hat Enterprise Linux 6 | mysql-embedded | 0:5.1.66-1.el6_3 |
| Red Hat Enterprise Linux 6 | mysql-embedded-devel | 0:5.1.66-1.el6_3 |
| Red Hat Enterprise Linux 6 | mysql-libs | 0:5.1.66-1.el6_3 |
| Red Hat Enterprise Linux 6 | mysql-server | 0:5.1.66-1.el6_3 |
| Red Hat Enterprise Linux 6 | mysql-test | 0:5.1.66-1.el6_3 |