The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report
Oracle MySQL 5.5.38 and earlier, 5.6.19 and earlier, and MariaDB 5.5.28a, 5.3.11, 5.2.13, 5.1.66, and possibly other versions, generates different error messages with different time delays depending on whether a user name exists, which allows remote attackers to enumerate valid usernames.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Centos_linux | — | Upgrade mariadb-libsUpgrade mariadb-develUpgrade mariadb-embedded-develUpgrade mariadbUpgrade mariadb-benchUpgrade mariadb-testUpgrade mariadb-serverUpgrade mariadb-embedded | Dec 1, 2016 | Dec 3, 2012 |
| Freebsd | — | Upgrade percona-serverUpgrade mysql-serverUpgrade mariadb-server | Dec 10, 2025 | Feb 1, 2013 |
| Gentoo Linux | — | Upgrade dev-db/mysql. | Oct 30, 2017 | Dec 3, 2012 |
| Mariadb Mariadb | — | Upgrade MariaDB to the latest version | Mar 4, 2025 | Dec 3, 2012 |
| Oracle Mysql | — | Upgrade to the latest version of MySQL | Oct 23, 2014 | Dec 3, 2012 |
| Oracle Solaris | — | Upgrade entire to version 0.5.11-0.175.3.0.0.30.0 on Solaris 11.3 | May 29, 2017 | Dec 3, 2012 |
| Suse | — | Upgrade mariadb104-errormessagesUpgrade mariadb104Upgrade mariadb104-galeraUpgrade libmysql55client_r18-32bitUpgrade mariadb-errormessagesUpgrade libmysql55client18-x86Upgrade mariadb104-testUpgrade libmariadbd19Upgrade python3-mysqlclientUpgrade mariadb104-benchUpgrade libmysqlclient_r15-x86Upgrade libmysqlclient15-x86Upgrade mariadb-100-errormessagesUpgrade mariadb-clientUpgrade libmysql55client_r18Upgrade libmysqlclient15-32bitUpgrade mysql-toolsUpgrade libmysql55client18-32bitUpgrade libmysqlclient15Upgrade mariadb104-toolsUpgrade mariadb104-clientUpgrade mysqlUpgrade libmysqld-develUpgrade libmysqlclient18Upgrade libmysql55client18Upgrade libmariadb-develUpgrade libmysqlclient_r15-32bitUpgrade libmysqlclient_r18Upgrade libmariadbd-develUpgrade libmysqlclient18-32bitUpgrade mysql-MaxUpgrade mysql-clientUpgrade libmysqlclient_r15Upgrade libmariadbd104-develUpgrade libmysqld19Upgrade libmysqlclient_r18-32bitUpgrade libmariadb3Upgrade mariadb-toolsUpgrade mariadbUpgrade liblz4-1Upgrade libmysqld18Upgrade mariadb104-rpm-macrosUpgrade libmariadb_pluginsUpgrade libmysqlclient-develUpgrade libmysql55client_r18-x86Upgrade mariadb-bench | Feb 17, 2015 | Jun 28, 2013 |
| Ubuntu | — | Upgrade mysql-server-5.5 | Nov 8, 2024 | Dec 3, 2012 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub