The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report
Oracle MySQL 5.5.38 and earlier, 5.6.19 and earlier, and MariaDB 5.5.28a, 5.3.11, 5.2.13, 5.1.66, and possibly other versions, generates different error messages with different time delays depending on whether a user name exists, which allows remote attackers to enumerate valid usernames.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Centos_linux | — | Upgrade mariadb-serverUpgrade mariadb-benchUpgrade mariadb-testUpgrade mariadbUpgrade mariadb-embeddedUpgrade mariadb-develUpgrade mariadb-embedded-develUpgrade mariadb-libs | Dec 1, 2016 | Dec 3, 2012 |
| Freebsd | — | Upgrade mysql-serverUpgrade percona-serverUpgrade mariadb-server | Dec 10, 2025 | Feb 1, 2013 |
| Gentoo Linux | — | Upgrade dev-db/mysql. | Oct 30, 2017 | Dec 3, 2012 |
| Mariadb Mariadb | — | Upgrade MariaDB to the latest version | Mar 4, 2025 | Dec 3, 2012 |
| Oracle Mysql | — | Upgrade to the latest version of MySQL | Oct 23, 2014 | Dec 3, 2012 |
| Oracle Solaris | — | Upgrade entire to version 0.5.11-0.175.3.0.0.30.0 on Solaris 11.3 | May 29, 2017 | Dec 3, 2012 |
| Suse | — | Upgrade mysql-clientUpgrade liblz4-1Upgrade mariadb-benchUpgrade libmysqlclient18-32bitUpgrade libmysqlclient_r15-32bitUpgrade mysql-MaxUpgrade libmysqlclient-develUpgrade mariadbUpgrade libmariadbd-develUpgrade libmariadbd104-develUpgrade libmysqlclient_r18-32bitUpgrade libmysql55client_r18-x86Upgrade libmysqlclient_r15Upgrade libmysqlclient_r18Upgrade libmysqld19Upgrade mariadb-toolsUpgrade libmysqld18Upgrade libmariadb_pluginsUpgrade libmariadb3Upgrade mariadb104-rpm-macrosUpgrade mariadb104-benchUpgrade libmysqld-develUpgrade mariadb104Upgrade libmysqlclient18Upgrade mariadb-clientUpgrade mysqlUpgrade libmariadb-develUpgrade libmysql55client18-x86Upgrade mariadb-100-errormessagesUpgrade libmysql55client18Upgrade mysql-toolsUpgrade mariadb-errormessagesUpgrade libmysqlclient15-x86Upgrade mariadb104-galeraUpgrade libmariadbd19Upgrade libmysql55client18-32bitUpgrade libmysqlclient_r15-x86Upgrade mariadb104-errormessagesUpgrade libmysqlclient15Upgrade libmysql55client_r18-32bitUpgrade mariadb104-toolsUpgrade mariadb104-clientUpgrade python3-mysqlclientUpgrade libmysqlclient15-32bitUpgrade libmysql55client_r18Upgrade mariadb104-test | Feb 17, 2015 | Jun 28, 2013 |
| Ubuntu | — | Upgrade mysql-server-5.5 | Nov 8, 2024 | Dec 3, 2012 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub