The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report
Stack-based buffer overflow in the acl_get function in Oracle MySQL 5.5.19 and other versions through 5.5.28, and 5.1.53 and other versions through 5.1.66, and MariaDB 5.5.2.x before 5.5.28a, 5.3.x before 5.3.11, 5.2.x before 5.2.13 and 5.1.x before 5.1.66, allows remote authenticated users to execute arbitrary code via a long argument to the GRANT FILE command.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | — | Upgrade mysql. | Aug 30, 2017 | Oct 16, 2012 |
| Centos_linux | — | Upgrade mysql-testUpgrade mysql-libsUpgrade mysql-embeddedUpgrade mysql-develUpgrade mysql-benchUpgrade mysql-serverUpgrade mysql-embedded-develUpgrade mysql | Dec 1, 2016 | Dec 3, 2012 |
| Freebsd | — | Upgrade mysql-serverUpgrade percona-serverUpgrade mariadb-server | Dec 10, 2025 | Feb 1, 2013 |
| Gentoo Linux | — | Upgrade dev-db/mysql. | Oct 30, 2017 | Dec 3, 2012 |
| Mariadb Mariadb | — | Upgrade MariaDB to the latest version | Mar 4, 2025 | Dec 3, 2012 |
| Oracle Mysql | — | Upgrade to Oracle MySQL version 5.2.13Upgrade to Oracle MySQL version 5.5.28Upgrade to Oracle MySQL version 5.3.11Upgrade to Oracle MySQL version 5.1.66 | Dec 7, 2012 | Dec 3, 2012 |
| Oracle_linux | — | Upgrade mysql-testUpgrade mysql-embeddedUpgrade mysql-benchUpgrade mysql-libsUpgrade mysql-serverUpgrade mysql-develUpgrade mysql-embedded-develUpgrade mysql | Oct 16, 2024 | Dec 3, 2012 |
| Suse | — | Upgrade mariadb104Upgrade mariadb-clientUpgrade libmysql55client18-x86Upgrade python3-mysqlclientUpgrade libmysqlclient-develUpgrade mariadb104-benchUpgrade mariadb104-toolsUpgrade mariadb-errormessagesUpgrade libmariadbd-develUpgrade mariadbUpgrade mariadb-toolsUpgrade mariadb104-errormessagesUpgrade libmysql55client18-32bitUpgrade libmariadbd104-develUpgrade libmysqlclient_r15Upgrade mysql-MaxUpgrade mariadb104-rpm-macrosUpgrade libmysqld19Upgrade mariadb104-galeraUpgrade libmysql55client_r18-32bitUpgrade libmysqlclient_r15-32bitUpgrade mysql-toolsUpgrade libmysqlclient15-32bitUpgrade libmariadbd19Upgrade libmysqld-develUpgrade libmariadb_pluginsUpgrade libmysqlclient15Upgrade libmysql55client_r18-x86Upgrade libmysql55client_r18Upgrade mariadb-benchUpgrade libmariadb3Upgrade libmysql55client18Upgrade libmysqlclient_r15-x86Upgrade libmysqlclient15-x86Upgrade mariadb104-testUpgrade mariadb104-clientUpgrade mysqlUpgrade liblz4-1Upgrade libmariadb-develUpgrade mysql-client | Feb 17, 2015 | Jun 28, 2013 |
| Ubuntu | — | Upgrade mysql-server-5.5Upgrade mysql-server-5.1 | Nov 8, 2024 | Dec 3, 2012 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub