The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report
Oracle MySQL and MariaDB 5.5.x before 5.5.29, 5.3.x before 5.3.12, and 5.2.x before 5.2.14 does not modify the salt during multiple executions of the change_user command within the same connection which makes it easier for remote authenticated users to conduct brute force password guessing attacks.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Freebsd | — | Upgrade mysql-serverUpgrade percona-serverUpgrade mariadb-server | Dec 10, 2025 | Feb 1, 2013 |
| Gentoo Linux | — | Upgrade dev-db/mysql. | Oct 30, 2017 | Oct 1, 2013 |
| Mariadb Mariadb | — | Upgrade MariaDB to the latest version | Mar 4, 2025 | Oct 1, 2013 |
| Oracle Mysql | — | Upgrade to Oracle MySQL version 5.5.29Upgrade to Oracle MySQL version 5.3.12Upgrade to Oracle MySQL version 5.2.14 | May 9, 2019 | Oct 1, 2013 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | Dec 3, 2012 |
| Suse | — | Upgrade mariadb-toolsUpgrade mariadb104Upgrade mariadbUpgrade mariadb104-toolsUpgrade mariadb104-rpm-macrosUpgrade liblz4-1Upgrade libmariadb_pluginsUpgrade libmariadb-develUpgrade mariadb104-benchUpgrade mariadb104-errormessagesUpgrade mariadb-errormessagesUpgrade python3-mysqlclientUpgrade libmariadbd-develUpgrade mariadb-clientUpgrade mariadb104-galeraUpgrade mariadb104-clientUpgrade libmysqld-develUpgrade mariadb-benchUpgrade libmysqld19Upgrade libmariadbd19Upgrade libmariadbd104-develUpgrade mariadb104-testUpgrade libmariadb3 | Aug 9, 2024 | Jul 9, 2013 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub