Heap-based buffer overflow in Oracle MySQL 5.5.19 and other versions through 5.5.28, and MariaDB 5.5.28a and possibly other versions, allows remote authenticated users to cause a denial of service (memory corruption and crash) and possibly execute arbitrary code, as demonstrated using certain variations of the (1) USE, (2) SHOW TABLES, (3) DESCRIBE, (4) SHOW FIELDS FROM, (5) SHOW COLUMNS FROM, (6) SHOW INDEX FROM, (7) CREATE TABLE, (8) DROP TABLE, (9) ALTER TABLE, (10) DELETE FROM, (11) UPDATE, and (12) SET PASSWORD commands.
CVSS Details
- CVSS 3.1 Base Score: 8.8
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Freebsd | — | Upgrade mysql-serverUpgrade percona-serverUpgrade mariadb-server | Dec 10, 2025 | Feb 1, 2013 |
| Gentoo Linux | — | Upgrade dev-db/mysql. | Oct 30, 2017 | Dec 3, 2012 |
| Mariadb Mariadb | — | Upgrade MariaDB to the latest version | Mar 4, 2025 | Dec 3, 2012 |
| Oracle Mysql | — | Upgrade to Oracle MySQL version 5.5.29 | Apr 30, 2018 | Dec 3, 2012 |
| Suse | — | Upgrade mysql-clientUpgrade mariadb104-galeraUpgrade libmariadb3Upgrade libmysqlclient-develUpgrade mariadb-clientUpgrade libmariadbd19Upgrade libmariadbd104-develUpgrade mariadb-benchUpgrade mariadbUpgrade mysql-MaxUpgrade libmysqlclient15-x86Upgrade libmariadbd-develUpgrade libmysqld19Upgrade mariadb104-rpm-macrosUpgrade libmariadb_pluginsUpgrade mariadb-errormessagesUpgrade python3-mysqlclientUpgrade liblz4-1Upgrade libmysqlclient15-32bitUpgrade mariadb104-toolsUpgrade mysql-toolsUpgrade libmysqlclient_r15-x86Upgrade libmysqlclient15Upgrade mariadb104-clientUpgrade libmariadb-develUpgrade libmysqlclient_r15-32bitUpgrade mariadb104-benchUpgrade libmysqlclient_r15Upgrade mariadb-toolsUpgrade mysqlUpgrade mariadb104-errormessagesUpgrade mariadb104-testUpgrade libmysqld-develUpgrade mariadb104 | Feb 17, 2015 | Jun 28, 2013 |
| Ubuntu | — | Upgrade mysql-server-5.1Upgrade mysql-server-5.5 | Nov 8, 2024 | Dec 3, 2012 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub