Stack-based buffer overflow in the acl_get function in Oracle MySQL 5.5.19 and other versions through 5.5.28, and 5.1.53 and other versions through 5.1.66, and MariaDB 5.5.2.x before 5.5.28a, 5.3.x before 5.3.11, 5.2.x before 5.2.13 and 5.1.x before 5.1.66, allows remote authenticated users to execute arbitrary code via a long argument to the GRANT FILE command.
CVSS Details
- CVSS 3.1 Base Score: 8.8
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | — | Upgrade mysql. | Aug 30, 2017 | Oct 16, 2012 |
| Centos_linux | — | Upgrade mysqlUpgrade mysql-testUpgrade mysql-benchUpgrade mysql-libsUpgrade mysql-develUpgrade mysql-embeddedUpgrade mysql-serverUpgrade mysql-embedded-devel | Dec 1, 2016 | Dec 3, 2012 |
| Freebsd | — | Upgrade mariadb-serverUpgrade percona-serverUpgrade mysql-server | Dec 10, 2025 | Feb 1, 2013 |
| Gentoo Linux | — | Upgrade dev-db/mysql. | Oct 30, 2017 | Dec 3, 2012 |
| Mariadb Mariadb | — | Upgrade MariaDB to the latest version | Mar 4, 2025 | Dec 3, 2012 |
| Oracle Mysql | — | Upgrade to Oracle MySQL version 5.1.66Upgrade to Oracle MySQL version 5.2.13Upgrade to Oracle MySQL version 5.5.28Upgrade to Oracle MySQL version 5.3.11 | Dec 7, 2012 | Dec 3, 2012 |
| Oracle_linux | — | Upgrade mysql-serverUpgrade mysql-libsUpgrade mysql-testUpgrade mysql-benchUpgrade mysql-develUpgrade mysql-embedded-develUpgrade mysql-embeddedUpgrade mysql | Oct 16, 2024 | Dec 3, 2012 |
| Suse | — | Upgrade libmysqlclient_r15-x86Upgrade mariadb104-testUpgrade libmysqlclient_r15-32bitUpgrade libmysql55client_r18Upgrade libmariadb3Upgrade libmysql55client18Upgrade libmariadb-develUpgrade liblz4-1Upgrade libmysqlclient15Upgrade libmysql55client_r18-x86Upgrade mariadb104-clientUpgrade libmysqlclient15-32bitUpgrade libmariadbd19Upgrade mysql-clientUpgrade mysqlUpgrade libmysqlclient15-x86Upgrade mariadb-benchUpgrade mysql-toolsUpgrade libmariadb_pluginsUpgrade libmysqld-develUpgrade libmysql55client18-x86Upgrade mariadb104-rpm-macrosUpgrade libmysql55client_r18-32bitUpgrade libmysqlclient_r15Upgrade mysql-MaxUpgrade mariadb-clientUpgrade mariadb-errormessagesUpgrade mariadb104Upgrade mariadb-toolsUpgrade mariadbUpgrade libmariadbd-develUpgrade libmysqlclient-develUpgrade mariadb104-toolsUpgrade libmysql55client18-32bitUpgrade libmariadbd104-develUpgrade mariadb104-galeraUpgrade mariadb104-benchUpgrade python3-mysqlclientUpgrade mariadb104-errormessagesUpgrade libmysqld19 | Feb 17, 2015 | Jun 28, 2013 |
| Ubuntu | — | Upgrade mysql-server-5.5Upgrade mysql-server-5.1 | Nov 8, 2024 | Dec 3, 2012 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub