Skip to content
CVE Tracker
Back

CVE-2012-5612

Heap-based buffer overflow in Oracle MySQL 5.5.19 and other versions through 5.5.28, and MariaDB 5.5.28a and possibly other versions,…

Medium6.5EPSS 21.0%
Published
Updated
Reserved
Assigned by
redhat

Description

Heap-based buffer overflow in Oracle MySQL 5.5.19 and other versions through 5.5.28, and MariaDB 5.5.28a and possibly other versions, allows remote authenticated users to cause a denial of service (memory corruption and crash) and possibly execute arbitrary code, as demonstrated using certain variations of the (1) USE, (2) SHOW TABLES, (3) DESCRIBE, (4) SHOW FIELDS FROM, (5) SHOW COLUMNS FROM, (6) SHOW INDEX FROM, (7) CREATE TABLE, (8) DROP TABLE, (9) ALTER TABLE, (10) DELETE FROM, (11) UPDATE, and (12) SET PASSWORD commands.

Scores

CVSS scores of CVE-2012-5612, by who scored it
Scored byCVSSScoreVector
NVDNVD · Modified2.0Medium6.5AV:N/AC:L/Au:S/C:P/I:P/A:P
EPSS (exploitation in 30 days)
21.0% · top 2.4% of all CVEs (3 Nov 2026)

Loading the EPSS history…

The list uses the assigner's score when there is one, then CISA's, then NVD's: Medium 6.5.

Weakness

Affected products

  • n/a

    • affected n/a

References (13)

Sources

The same CVE in the primary databases and aggregators, to check against.

Record last updated .