CVE-2012-5611
Fixed in a distro release EPSS 24%
Stack-based buffer overflow in the acl_get function in Oracle MySQL 5.5.19 and other versions through 5.5.28, and 5.1.53 and other versions through 5.1.66, and MariaDB 5.5.2.x before 5.5.28a, 5.3.x before 5.3.11, 5.2.x before 5.2.13 and 5.1.x before 5.1.66, allows remote authenticated users to execute arbitrary code via a long argument to the GRANT FILE command.
Products: mariadb, oracle mysql
Distro releases
| Release | Package | Fixed in |
|---|---|---|
| Debian 6.0 | mysql-5.1 | 5.1.66-0+squeeze1 |
| Red Hat Enterprise Linux 5 | mysql | 0:5.0.95-5.el5_9 |
| Red Hat Enterprise Linux 5 | mysql-bench | 0:5.0.95-5.el5_9 |
| Red Hat Enterprise Linux 5 | mysql-debuginfo | 0:5.0.95-5.el5_9 |
| Red Hat Enterprise Linux 5 | mysql-devel | 0:5.0.95-5.el5_9 |
| Red Hat Enterprise Linux 5 | mysql-server | 0:5.0.95-5.el5_9 |
| Red Hat Enterprise Linux 5 | mysql-test | 0:5.0.95-5.el5_9 |
| Red Hat Enterprise Linux 6 | mysql | 0:5.1.66-2.el6_3 |
| Red Hat Enterprise Linux 6 | mysql-bench | 0:5.1.66-2.el6_3 |
| Red Hat Enterprise Linux 6 | mysql-debuginfo | 0:5.1.66-2.el6_3 |
| Red Hat Enterprise Linux 6 | mysql-devel | 0:5.1.66-2.el6_3 |
| Red Hat Enterprise Linux 6 | mysql-embedded | 0:5.1.66-2.el6_3 |
| Red Hat Enterprise Linux 6 | mysql-embedded-devel | 0:5.1.66-2.el6_3 |
| Red Hat Enterprise Linux 6 | mysql-libs | 0:5.1.66-2.el6_3 |
| Red Hat Enterprise Linux 6 | mysql-server | 0:5.1.66-2.el6_3 |
| Red Hat Enterprise Linux 6 | mysql-test | 0:5.1.66-2.el6_3 |
| SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS | mariadb104 | 10.4.30-150100.3.5.10 |
| SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS | python-mysqlclient | 1.4.6-150100.3.3.7 |
| SUSE Linux Enterprise Server 12 SP5 | lz4 | 1.8.0-3.5.2 |
| SUSE Linux Enterprise Server 12 SP5 | mariadb-connector-c | 3.1.22-2.35.1 |
| SUSE Linux Enterprise Server 12 SP5 | mariadb104 | 10.4.30-8.5.46 |
| SUSE Linux Enterprise Server 12 SP5 | python-mysqlclient | 1.3.14-8.9.2 |
| SUSE Linux Enterprise Server 15 SP1-LTSS | mariadb104 | 10.4.30-150100.3.5.10 |
| SUSE Linux Enterprise Server 15 SP1-LTSS | python-mysqlclient | 1.4.6-150100.3.3.7 |
| SUSE Linux Enterprise Server for SAP Applications 12 SP5 | lz4 | 1.8.0-3.5.2 |
| SUSE Linux Enterprise Server for SAP Applications 12 SP5 | mariadb-connector-c | 3.1.22-2.35.1 |
| SUSE Linux Enterprise Server for SAP Applications 12 SP5 | mariadb104 | 10.4.30-8.5.46 |
| SUSE Linux Enterprise Server for SAP Applications 12 SP5 | python-mysqlclient | 1.3.14-8.9.2 |
| SUSE Linux Enterprise Server for SAP Applications 15 SP1 | mariadb104 | 10.4.30-150100.3.5.10 |
| SUSE Linux Enterprise Server for SAP Applications 15 SP1 | python-mysqlclient | 1.4.6-150100.3.3.7 |
| SUSE Linux Enterprise Software Development Kit 12 SP5 | lz4 | 1.8.0-3.5.2 |
| SUSE Linux Enterprise Software Development Kit 12 SP5 | mariadb-connector-c | 3.1.22-2.35.1 |
| SUSE Linux Enterprise Software Development Kit 12 SP5 | mariadb104 | 10.4.30-8.5.46 |
| SUSE Linux Enterprise Software Development Kit 12 SP5 | python-mysqlclient | 1.3.14-8.9.2 |
| openSUSE Tumbleweed | mariadb | 10.0.22-3.8 |