Track vulnerabilities like this one.
Sign up free to get alerted when software you use is affected.
6.8
CVE-2012-3177: MySQL Server up to 5.5.27 lets logged‑in users cause downtime
CVE-2012-3177 · published 14 years ago
Summary
Versions of MySQL Server up through 5.1.65 and 5.5.27 can be stopped from working by someone who already has a valid account on the server. This can make the database unavailable and affect any applications that rely on it. Update to the latest MySQL release or apply the vendor's security patch to prevent the issue.
What to do
The CVE record does not list a fixed version. Check the vendor's site or the advisory links below - a fix may already be released.
Affected software
| Vendor | Product | Affected versions |
|---|---|---|
| oracle | mysql |
>= 5.1.0, <= 5.1.65 >= 5.5.0, <= 5.5.27 cpe:2.3:a:oracle:mysql:*:*:*:*:*:*:*:* |
| canonical | ubuntu_linux |
10.04 11.10 12.04 12.10 cpe:2.3:o:canonical:ubuntu_linux:10.04:*:*:*:lts:*:*:* |
| debian | debian_linux |
6.0 cpe:2.3:o:debian:debian_linux:6.0:*:*:*:*:*:*:* |
| redhat | enterprise_linux |
6.0 cpe:2.3:o:redhat:enterprise_linux:6.0:*:*:*:*:*:*:* |
| redhat | enterprise_linux_desktop |
6.0 cpe:2.3:o:redhat:enterprise_linux_desktop:6.0:*:*:*:*:*:*:* |
| redhat | enterprise_linux_eus |
6.3 cpe:2.3:o:redhat:enterprise_linux_eus:6.3:*:*:*:*:*:*:* |
| redhat | enterprise_linux_server |
6.0 cpe:2.3:o:redhat:enterprise_linux_server:6.0:*:*:*:*:*:*:* |
| redhat | enterprise_linux_workstation |
6.0 cpe:2.3:o:redhat:enterprise_linux_workstation:6.0:*:*:*:*:*:*:* |
| mariadb | mariadb |
>= 5.1.0, < 5.1.66 >= 5.5.0, < 5.5.27 cpe:2.3:a:mariadb:mariadb:*:*:*:*:*:*:*:* |
Original advisory text
Unspecified vulnerability in the MySQL Server component in Oracle MySQL 5.1.65 and earlier, and 5.5.27 and earlier, allows remote authenticated users to affect availability via unknown vectors rela...
Unspecified vulnerability in the MySQL Server component in Oracle MySQL 5.1.65 and earlier, and 5.5.27 and earlier, allows remote authenticated users to affect availability via unknown vectors related to Server.
References
- http://rhn.redhat.com/errata/RHSA-2012-1462.html Third Party Advisory
- http://secunia.com/advisories/51177 Not Applicable Third Party Advisory
- http://secunia.com/advisories/51309 Not Applicable Third Party Advisory
- http://secunia.com/advisories/53372 Not Applicable Third Party Advisory
- http://security.gentoo.org/glsa/glsa-201308-06.xml Third Party Advisory
- http://www.debian.org/security/2012/dsa-2581 Third Party Advisory
- http://www.mandriva.com/security/advisories?name=MDVSA-2013:150 Broken Link Third Party Advisory
- http://www.oracle.com/technetwork/topics/security/cpuoct2012-1515893.html Patch Vendor Advisory
- http://www.ubuntu.com/usn/USN-1621-1 Third Party Advisory
- https://exchange.xforce.ibmcloud.com/vulnerabilities/79383 Third Party Advisory VDB Entry
Internet-facing
60 days
Internal
At next upgrade
- Not known to be exploited
- Needs hands-on effort to exploit (estimated)
- Gives an attacker partial control (estimated)
Severity
6.8
Medium
Timeline
Published17 Oct 2012
Updated30 Oct 2026
First seen29 Sep 2026
Sources
CVE-2012-3177 · NVD
Track software like this
Free during beta