MySQL before 5.0.25 and 5.1 before 5.1.12 evaluates arguments of suid routines in the security context of the routine's definer instead of the routine's caller, which allows remote authenticated users to gain privileges through a routine that has been made available using GRANT EXECUTE.
CVSS Details
- CVSS 3.1 Base Score: 8.8
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Freebsd | — | Upgrade mysql-server | Dec 10, 2025 | Oct 29, 2006 |
| Oracle_linux | — | Upgrade mysql-develUpgrade mysqlUpgrade mysql-benchUpgrade mysql-testUpgrade mysql-server | Oct 16, 2024 | Aug 18, 2006 |
| Suse | — | Upgrade mariadbUpgrade libmysql55client_r18-x86Upgrade mariadb-benchUpgrade libmysqlclient_r15Upgrade libmysql55client18-32bitUpgrade libmysql55client18Upgrade mariadb104-galeraUpgrade libmysql55client_r18-32bitUpgrade mariadb104-benchUpgrade libmariadb3Upgrade libmariadbd-develUpgrade mariadb104-rpm-macrosUpgrade libmysql55client18-x86Upgrade mariadb-clientUpgrade libmariadbd104-develUpgrade libmysqlclient-develUpgrade mariadb104-toolsUpgrade mysql-MaxUpgrade libmysqlclient15-32bitUpgrade mysql-clientUpgrade mariadb-toolsUpgrade libmysqlclient_r15-32bitUpgrade mariadb104-errormessagesUpgrade mysql-toolsUpgrade mariadb-errormessagesUpgrade python3-mysqlclientUpgrade libmysql55client_r18Upgrade libmysqlclient_r15-x86Upgrade mysqlUpgrade libmariadb-develUpgrade libmysqlclient15-x86Upgrade mariadb104-testUpgrade libmariadb_pluginsUpgrade liblz4-1Upgrade libmysqlclient15Upgrade libmariadbd19Upgrade mariadb104-clientUpgrade mariadb104 | Aug 9, 2024 | Jun 28, 2013 |
| Ubuntu | — | Upgrade mysql-server-5.0 | Nov 8, 2024 | Aug 18, 2006 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub