CVE-2012-5615
Fixed in a distro release EPSS 15%
Oracle MySQL 5.5.38 and earlier, 5.6.19 and earlier, and MariaDB 5.5.28a, 5.3.11, 5.2.13, 5.1.66, and possibly other versions, generates different error messages with different time delays depending on whether a user name exists, which allows remote attackers to enumerate valid usernames.
Products: mariadb, oracle mysql
Distro releases
| Release | Package | Fixed in |
|---|---|---|
| Debian 7 | mysql-5.5 | 5.5.40-0+wheezy1 |
| Red Hat Enterprise Linux 5 | mysql55-mysql | 0:5.5.40-2.el5 |
| Red Hat Enterprise Linux 5 | mysql55-mysql-bench | 0:5.5.40-2.el5 |
| Red Hat Enterprise Linux 5 | mysql55-mysql-debuginfo | 0:5.5.40-2.el5 |
| Red Hat Enterprise Linux 5 | mysql55-mysql-devel | 0:5.5.40-2.el5 |
| Red Hat Enterprise Linux 5 | mysql55-mysql-libs | 0:5.5.40-2.el5 |
| Red Hat Enterprise Linux 5 | mysql55-mysql-server | 0:5.5.40-2.el5 |
| Red Hat Enterprise Linux 5 | mysql55-mysql-test | 0:5.5.40-2.el5 |
| Red Hat Enterprise Linux 7 | mariadb | 1:5.5.40-1.el7_0 |
| Red Hat Enterprise Linux 7 | mariadb-bench | 1:5.5.40-1.el7_0 |
| Red Hat Enterprise Linux 7 | mariadb-debuginfo | 1:5.5.40-1.el7_0 |
| Red Hat Enterprise Linux 7 | mariadb-devel | 1:5.5.40-1.el7_0 |
| Red Hat Enterprise Linux 7 | mariadb-embedded | 1:5.5.40-1.el7_0 |
| Red Hat Enterprise Linux 7 | mariadb-embedded-devel | 1:5.5.40-1.el7_0 |
| Red Hat Enterprise Linux 7 | mariadb-libs | 1:5.5.40-1.el7_0 |
| Red Hat Enterprise Linux 7 | mariadb-server | 1:5.5.40-1.el7_0 |
| Red Hat Enterprise Linux 7 | mariadb-test | 1:5.5.40-1.el7_0 |
| Red Hat openstack 5 | mariadb-galera | 0:5.5.40-2.el6ost |
| Red Hat openstack 5 | mariadb-galera | 1:5.5.40-2.el7ost |
| Red Hat openstack 5 | mariadb-galera-common | 0:5.5.40-2.el6ost |
| Red Hat openstack 5 | mariadb-galera-common | 1:5.5.40-2.el7ost |
| Red Hat openstack 5 | mariadb-galera-debuginfo | 0:5.5.40-2.el6ost |
| Red Hat openstack 5 | mariadb-galera-debuginfo | 1:5.5.40-2.el7ost |
| Red Hat openstack 5 | mariadb-galera-server | 1:5.5.40-2.el7ost |
| Red Hat openstack 5 | mariadb-galera-server | 0:5.5.40-2.el6ost |
| Red Hat rhel software collections 1 | mariadb55-mariadb | 0:5.5.40-10.el6 |
| Red Hat rhel software collections 1 | mariadb55-mariadb | 0:5.5.40-10.el7 |
| Red Hat rhel software collections 1 | mariadb55-mariadb-bench | 0:5.5.40-10.el6 |
| Red Hat rhel software collections 1 | mariadb55-mariadb-bench | 0:5.5.40-10.el7 |
| Red Hat rhel software collections 1 | mariadb55-mariadb-debuginfo | 0:5.5.40-10.el6 |
| Red Hat rhel software collections 1 | mariadb55-mariadb-debuginfo | 0:5.5.40-10.el7 |
| Red Hat rhel software collections 1 | mariadb55-mariadb-devel | 0:5.5.40-10.el7 |
| Red Hat rhel software collections 1 | mariadb55-mariadb-devel | 0:5.5.40-10.el6 |
| Red Hat rhel software collections 1 | mariadb55-mariadb-libs | 0:5.5.40-10.el6 |
| Red Hat rhel software collections 1 | mariadb55-mariadb-libs | 0:5.5.40-10.el7 |
| Red Hat rhel software collections 1 | mariadb55-mariadb-server | 0:5.5.40-10.el6 |
| Red Hat rhel software collections 1 | mariadb55-mariadb-server | 0:5.5.40-10.el7 |
| Red Hat rhel software collections 1 | mariadb55-mariadb-test | 0:5.5.40-10.el7 |
| Red Hat rhel software collections 1 | mariadb55-mariadb-test | 0:5.5.40-10.el6 |
| Red Hat rhel software collections 1 | mysql55-mysql | 0:5.5.40-1.el6 |
| Red Hat rhel software collections 1 | mysql55-mysql | 0:5.5.40-1.el7 |
| Red Hat rhel software collections 1 | mysql55-mysql-bench | 0:5.5.40-1.el6 |
| Red Hat rhel software collections 1 | mysql55-mysql-bench | 0:5.5.40-1.el7 |
| Red Hat rhel software collections 1 | mysql55-mysql-debuginfo | 0:5.5.40-1.el7 |
| Red Hat rhel software collections 1 | mysql55-mysql-debuginfo | 0:5.5.40-1.el6 |
| Red Hat rhel software collections 1 | mysql55-mysql-devel | 0:5.5.40-1.el7 |
| Red Hat rhel software collections 1 | mysql55-mysql-devel | 0:5.5.40-1.el6 |
| Red Hat rhel software collections 1 | mysql55-mysql-libs | 0:5.5.40-1.el6 |
| Red Hat rhel software collections 1 | mysql55-mysql-libs | 0:5.5.40-1.el7 |
| Red Hat rhel software collections 1 | mysql55-mysql-server | 0:5.5.40-1.el7 |
| Red Hat rhel software collections 1 | mysql55-mysql-server | 0:5.5.40-1.el6 |
| Red Hat rhel software collections 1 | mysql55-mysql-test | 0:5.5.40-1.el6 |
| Red Hat rhel software collections 1 | mysql55-mysql-test | 0:5.5.40-1.el7 |
| SUSE Linux Enterprise Desktop 12 | mariadb | 10.0.16-15.1 |
| SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS | mariadb104 | 10.4.30-150100.3.5.10 |
| SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS | python-mysqlclient | 1.4.6-150100.3.3.7 |
| SUSE Linux Enterprise Server 12 | mariadb | 10.0.16-15.1 |
| SUSE Linux Enterprise Server 12 SP5 | lz4 | 1.8.0-3.5.2 |
| SUSE Linux Enterprise Server 12 SP5 | mariadb-connector-c | 3.1.22-2.35.1 |
| SUSE Linux Enterprise Server 12 SP5 | mariadb104 | 10.4.30-8.5.46 |
| SUSE Linux Enterprise Server 12 SP5 | python-mysqlclient | 1.3.14-8.9.2 |
| SUSE Linux Enterprise Server 15 SP1-LTSS | mariadb104 | 10.4.30-150100.3.5.10 |
| SUSE Linux Enterprise Server 15 SP1-LTSS | python-mysqlclient | 1.4.6-150100.3.3.7 |
| SUSE Linux Enterprise Server for SAP Applications 12 | mariadb | 10.0.16-15.1 |
| SUSE Linux Enterprise Server for SAP Applications 12 SP5 | lz4 | 1.8.0-3.5.2 |
| SUSE Linux Enterprise Server for SAP Applications 12 SP5 | mariadb-connector-c | 3.1.22-2.35.1 |
| SUSE Linux Enterprise Server for SAP Applications 12 SP5 | mariadb104 | 10.4.30-8.5.46 |
| SUSE Linux Enterprise Server for SAP Applications 12 SP5 | python-mysqlclient | 1.3.14-8.9.2 |
| SUSE Linux Enterprise Server for SAP Applications 15 SP1 | mariadb104 | 10.4.30-150100.3.5.10 |
| SUSE Linux Enterprise Server for SAP Applications 15 SP1 | python-mysqlclient | 1.4.6-150100.3.3.7 |
| SUSE Linux Enterprise Software Development Kit 12 | mariadb | 10.0.16-15.1 |
| SUSE Linux Enterprise Software Development Kit 12 SP5 | lz4 | 1.8.0-3.5.2 |
| SUSE Linux Enterprise Software Development Kit 12 SP5 | mariadb-connector-c | 3.1.22-2.35.1 |
| SUSE Linux Enterprise Software Development Kit 12 SP5 | mariadb104 | 10.4.30-8.5.46 |
| SUSE Linux Enterprise Software Development Kit 12 SP5 | python-mysqlclient | 1.3.14-8.9.2 |
| SUSE Linux Enterprise Workstation Extension 12 | mariadb | 10.0.16-15.1 |
| Ubuntu 14.04 LTS | mysql-5.5 | 5.5.40-0ubuntu0.14.04.1 |
| Ubuntu 14.04 LTS | mysql-5.6 | 5.6.27-0ubuntu0.14.04.1 |
| openSUSE Tumbleweed | mariadb | 10.0.22-3.8 |