{"api_version":"1","generated_at":"2026-07-24T17:29:45+00:00","cve":"CVE-2012-5611","urls":{"html":"https://cve.report/CVE-2012-5611","api":"https://cve.report/api/cve/CVE-2012-5611.json","docs":"https://cve.report/api","cve_org":"https://www.cve.org/CVERecord?id=CVE-2012-5611","nvd":"https://nvd.nist.gov/vuln/detail/CVE-2012-5611"},"summary":{"title":"CVE-2012-5611","description":"Stack-based buffer overflow in the acl_get function in Oracle MySQL 5.5.19 and other versions through 5.5.28, and 5.1.53 and other versions through 5.1.66, and MariaDB 5.5.2.x before 5.5.28a, 5.3.x before 5.3.11, 5.2.x before 5.2.13 and 5.1.x before 5.1.66, allows remote authenticated users to execute arbitrary code via a long argument to the GRANT FILE command.","state":"PUBLISHED","assigner":"redhat","published_at":"2012-12-03 12:49:43","updated_at":"2026-04-29 01:13:23"},"problem_types":["CWE-119","n/a"],"metrics":[{"version":"2.0","source":"nvd@nist.gov","type":"Primary","score":"6.5","severity":"","vector":"AV:N/AC:L/Au:S/C:P/I:P/A:P","data":{"version":"2.0","vectorString":"AV:N/AC:L/Au:S/C:P/I:P/A:P","baseScore":6.5,"accessVector":"NETWORK","accessComplexity":"LOW","authentication":"SINGLE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL"}}],"references":[{"url":"http://security.gentoo.org/glsa/glsa-201308-06.xml","name":"http://security.gentoo.org/glsa/glsa-201308-06.xml","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"],"title":"Gentoo Linux Documentation\n--\n  MySQL: Multiple vulnerabilities","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"http://www.openwall.com/lists/oss-security/2012/12/02/4","name":"http://www.openwall.com/lists/oss-security/2012/12/02/4","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Third Party Advisory"],"title":"oss-security - Re: Re: [Full-disclosure] MySQL (Linux) Stack based\n buffer overrun PoC Zeroday","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"http://rhn.redhat.com/errata/RHSA-2013-0180.html","name":"http://rhn.redhat.com/errata/RHSA-2013-0180.html","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"],"title":"Red Hat Customer Portal","mime":"text/html","httpstatus":"-1","archivestatus":"200"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2013-01/msg00020.html","name":"http://lists.opensuse.org/opensuse-security-announce/2013-01/msg00020.html","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Third Party Advisory"],"title":"[security-announce] openSUSE-SU-2013:0156-1: important: mariadb to 5.1.6","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"http://www.oracle.com/technetwork/topics/security/cpujan2013-1515902.html","name":"http://www.oracle.com/technetwork/topics/security/cpujan2013-1515902.html","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"],"title":"Oracle Critical Patch Update - January 2013","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2013-01/msg00013.html","name":"http://lists.opensuse.org/opensuse-security-announce/2013-01/msg00013.html","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Third Party Advisory"],"title":"[security-announce] openSUSE-SU-2013:0135-1: important: mysql-community-","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"http://secunia.com/advisories/51443","name":"http://secunia.com/advisories/51443","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"],"title":"Security Advisory SA51443 - MariaDB Buffer Overflow Vulnerability - Secunia","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2013-01/msg00000.html","name":"http://lists.opensuse.org/opensuse-security-announce/2013-01/msg00000.html","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Third Party Advisory"],"title":"[security-announce] openSUSE-SU-2013:0011-1: important: mariadb to 5.5.2","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"http://seclists.org/fulldisclosure/2012/Dec/4","name":"http://seclists.org/fulldisclosure/2012/Dec/4","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Third Party Advisory"],"title":"Full Disclosure: MySQL (Linux) Stack based buffer overrun PoC\tZeroday","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"http://www.openwall.com/lists/oss-security/2012/12/02/3","name":"http://www.openwall.com/lists/oss-security/2012/12/02/3","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Third Party Advisory"],"title":"oss-security - Re: Re: [Full-disclosure] MySQL (Linux) Stack based\n buffer overrun PoC Zeroday","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"https://kb.askmonty.org/en/mariadb-5213-release-notes/","name":"https://kb.askmonty.org/en/mariadb-5213-release-notes/","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"],"title":"MariaDB 5.2.13 Release Notes - MariaDB Knowledge Base","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"http://www.ubuntu.com/usn/USN-1703-1","name":"http://www.ubuntu.com/usn/USN-1703-1","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"],"title":"USN-1703-1: MySQL vulnerabilities | Ubuntu","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2013-01/msg00002.html","name":"http://lists.opensuse.org/opensuse-security-announce/2013-01/msg00002.html","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Third Party Advisory"],"title":"[security-announce] openSUSE-SU-2013:0014-1: important: mariadb to 5.2.1","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"http://www.debian.org/security/2012/dsa-2581","name":"http://www.debian.org/security/2012/dsa-2581","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"],"title":"Debian -- Security Information -- DSA-2581-1 mysql-5.1","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"https://kb.askmonty.org/en/mariadb-5166-release-notes/","name":"https://kb.askmonty.org/en/mariadb-5166-release-notes/","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"],"title":"MariaDB 5.1.66 Release Notes - MariaDB Knowledge Base","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"https://kb.askmonty.org/en/mariadb-5528a-release-notes/","name":"https://kb.askmonty.org/en/mariadb-5528a-release-notes/","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"],"title":"MariaDB 5.5.28a Release Notes - AskMonty KnowledgeBase","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"http://rhn.redhat.com/errata/RHSA-2012-1551.html","name":"http://rhn.redhat.com/errata/RHSA-2012-1551.html","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"],"title":"Red Hat Customer Portal","mime":"text/html","httpstatus":"-1","archivestatus":"200"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2013-02/msg00000.html","name":"http://lists.opensuse.org/opensuse-security-announce/2013-02/msg00000.html","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Third Party Advisory"],"title":"[security-announce] SUSE-SU-2013:0262-1: important: Security update for","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"http://www.ubuntu.com/usn/USN-1658-1","name":"http://www.ubuntu.com/usn/USN-1658-1","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"],"title":"USN-1658-1: MySQL vulnerability | Ubuntu","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2013:150","name":"http://www.mandriva.com/security/advisories?name=MDVSA-2013:150","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"],"title":"Support / Security / Advisories /  / MDVSA-2013:150 | Mandriva","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2013-01/msg00001.html","name":"http://lists.opensuse.org/opensuse-security-announce/2013-01/msg00001.html","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Third Party Advisory"],"title":"[security-announce] openSUSE-SU-2013:0013-1: important: mysql-community-","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2013:102","name":"http://www.mandriva.com/security/advisories?name=MDVSA-2013:102","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"],"title":"Support / Security / Advisories /  / MDVSA-2013:102 | Mandriva","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"http://www.exploit-db.com/exploits/23075","name":"http://www.exploit-db.com/exploits/23075","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"],"title":"MySQL (Linux) Stack Based Buffer Overrun PoC Zeroday","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"http://secunia.com/advisories/53372","name":"http://secunia.com/advisories/53372","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"],"title":"About Secunia Research | Flexera","mime":"text/plain","httpstatus":"200","archivestatus":"200"},{"url":"https://kb.askmonty.org/en/mariadb-5311-release-notes/","name":"https://kb.askmonty.org/en/mariadb-5311-release-notes/","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"],"title":"MariaDB 5.3.11 Release Notes - MariaDB Knowledgebase","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A16395","name":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A16395","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"],"title":"Repository  /  Oval Repository","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"http://lists.opensuse.org/opensuse-updates/2013-09/msg00010.html","name":"http://lists.opensuse.org/opensuse-updates/2013-09/msg00010.html","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Third Party Advisory"],"title":"openSUSE-SU-2013:1412-1: moderate: mariadb","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"https://www.cve.org/CVERecord?id=CVE-2012-5611","name":"CVE Program record","refsource":"CVE.ORG","tags":["canonical"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2012-5611","name":"NVD vulnerability detail","refsource":"NVD","tags":["canonical","analysis"]}],"affected":[{"source":"CNA","vendor":"n/a","product":"n/a","version":"affected n/a","platforms":[]}],"timeline":[],"solutions":[],"workarounds":[],"exploits":[],"credits":[],"nvd_cpes":[{"cve_year":"2012","cve_id":"5611","vulnerable":"0","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"o","cpe4":"linux","cpe5":"linux_kernel","cpe6":"-","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2012","cve_id":"5611","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"mariadb","cpe5":"mariadb","cpe6":"5.1.41","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2012","cve_id":"5611","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"mariadb","cpe5":"mariadb","cpe6":"5.1.42","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2012","cve_id":"5611","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"mariadb","cpe5":"mariadb","cpe6":"5.1.44","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2012","cve_id":"5611","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"mariadb","cpe5":"mariadb","cpe6":"5.1.47","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2012","cve_id":"5611","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"mariadb","cpe5":"mariadb","cpe6":"5.1.49","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2012","cve_id":"5611","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"mariadb","cpe5":"mariadb","cpe6":"5.1.50","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2012","cve_id":"5611","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"mariadb","cpe5":"mariadb","cpe6":"5.1.51","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2012","cve_id":"5611","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"mariadb","cpe5":"mariadb","cpe6":"5.1.53","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2012","cve_id":"5611","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"mariadb","cpe5":"mariadb","cpe6":"5.1.55","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2012","cve_id":"5611","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"mariadb","cpe5":"mariadb","cpe6":"5.1.60","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2012","cve_id":"5611","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"mariadb","cpe5":"mariadb","cpe6":"5.1.61","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2012","cve_id":"5611","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"mariadb","cpe5":"mariadb","cpe6":"5.1.62","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2012","cve_id":"5611","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"mariadb","cpe5":"mariadb","cpe6":"5.2.0","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2012","cve_id":"5611","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"mariadb","cpe5":"mariadb","cpe6":"5.2.1","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2012","cve_id":"5611","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"mariadb","cpe5":"mariadb","cpe6":"5.2.10","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2012","cve_id":"5611","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"mariadb","cpe5":"mariadb","cpe6":"5.2.11","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2012","cve_id":"5611","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"mariadb","cpe5":"mariadb","cpe6":"5.2.12","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2012","cve_id":"5611","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"mariadb","cpe5":"mariadb","cpe6":"5.2.2","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2012","cve_id":"5611","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"mariadb","cpe5":"mariadb","cpe6":"5.2.3","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2012","cve_id":"5611","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"mariadb","cpe5":"mariadb","cpe6":"5.2.4","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2012","cve_id":"5611","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"mariadb","cpe5":"mariadb","cpe6":"5.2.5","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2012","cve_id":"5611","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"mariadb","cpe5":"mariadb","cpe6":"5.2.6","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2012","cve_id":"5611","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"mariadb","cpe5":"mariadb","cpe6":"5.2.7","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2012","cve_id":"5611","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"mariadb","cpe5":"mariadb","cpe6":"5.2.8","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2012","cve_id":"5611","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"mariadb","cpe5":"mariadb","cpe6":"5.2.9","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2012","cve_id":"5611","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"mariadb","cpe5":"mariadb","cpe6":"5.3.0","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2012","cve_id":"5611","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"mariadb","cpe5":"mariadb","cpe6":"5.3.1","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2012","cve_id":"5611","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"mariadb","cpe5":"mariadb","cpe6":"5.3.10","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2012","cve_id":"5611","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"mariadb","cpe5":"mariadb","cpe6":"5.3.2","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2012","cve_id":"5611","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"mariadb","cpe5":"mariadb","cpe6":"5.3.3","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2012","cve_id":"5611","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"mariadb","cpe5":"mariadb","cpe6":"5.3.4","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2012","cve_id":"5611","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"mariadb","cpe5":"mariadb","cpe6":"5.3.5","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2012","cve_id":"5611","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"mariadb","cpe5":"mariadb","cpe6":"5.3.6","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2012","cve_id":"5611","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"mariadb","cpe5":"mariadb","cpe6":"5.3.7","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2012","cve_id":"5611","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"mariadb","cpe5":"mariadb","cpe6":"5.3.8","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2012","cve_id":"5611","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"mariadb","cpe5":"mariadb","cpe6":"5.3.9","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2012","cve_id":"5611","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"mariadb","cpe5":"mariadb","cpe6":"5.5.20","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2012","cve_id":"5611","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"mariadb","cpe5":"mariadb","cpe6":"5.5.21","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2012","cve_id":"5611","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"mariadb","cpe5":"mariadb","cpe6":"5.5.22","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2012","cve_id":"5611","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"mariadb","cpe5":"mariadb","cpe6":"5.5.23","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2012","cve_id":"5611","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"mariadb","cpe5":"mariadb","cpe6":"5.5.24","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2012","cve_id":"5611","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"mariadb","cpe5":"mariadb","cpe6":"5.5.25","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2012","cve_id":"5611","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"mariadb","cpe5":"mariadb","cpe6":"5.5.27","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2012","cve_id":"5611","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"mariadb","cpe5":"mariadb","cpe6":"5.5.28","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2012","cve_id":"5611","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"oracle","cpe5":"mysql","cpe6":"5.1.53","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2012","cve_id":"5611","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"oracle","cpe5":"mysql","cpe6":"5.5.19","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"}],"vendor_comments":[],"enrichments":{"kev":null,"epss":null,"legacy_qids":[]},"source_records":{"cve_program":{"containers":{"adp":[{"providerMetadata":{"dateUpdated":"2024-08-06T21:14:16.163Z","orgId":"af854a3a-2127-422b-91ae-364da2661108","shortName":"CVE"},"references":[{"tags":["x_refsource_CONFIRM","x_transferred"],"url":"https://kb.askmonty.org/en/mariadb-5528a-release-notes/"},{"name":"openSUSE-SU-2013:0013","tags":["vendor-advisory","x_refsource_SUSE","x_transferred"],"url":"http://lists.opensuse.org/opensuse-security-announce/2013-01/msg00001.html"},{"name":"23075","tags":["exploit","x_refsource_EXPLOIT-DB","x_transferred"],"url":"http://www.exploit-db.com/exploits/23075"},{"name":"USN-1703-1","tags":["vendor-advisory","x_refsource_UBUNTU","x_transferred"],"url":"http://www.ubuntu.com/usn/USN-1703-1"},{"name":"MDVSA-2013:102","tags":["vendor-advisory","x_refsource_MANDRIVA","x_transferred"],"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2013:102"},{"name":"openSUSE-SU-2013:0156","tags":["vendor-advisory","x_refsource_SUSE","x_transferred"],"url":"http://lists.opensuse.org/opensuse-security-announce/2013-01/msg00020.html"},{"name":"53372","tags":["third-party-advisory","x_refsource_SECUNIA","x_transferred"],"url":"http://secunia.com/advisories/53372"},{"name":"openSUSE-SU-2013:0135","tags":["vendor-advisory","x_refsource_SUSE","x_transferred"],"url":"http://lists.opensuse.org/opensuse-security-announce/2013-01/msg00013.html"},{"name":"openSUSE-SU-2013:0011","tags":["vendor-advisory","x_refsource_SUSE","x_transferred"],"url":"http://lists.opensuse.org/opensuse-security-announce/2013-01/msg00000.html"},{"tags":["x_refsource_CONFIRM","x_transferred"],"url":"http://www.oracle.com/technetwork/topics/security/cpujan2013-1515902.html"},{"name":"[oss-security] 20121202 Re: Re: [Full-disclosure] MySQL (Linux) Stack based  buffer overrun PoC Zeroday","tags":["mailing-list","x_refsource_MLIST","x_transferred"],"url":"http://www.openwall.com/lists/oss-security/2012/12/02/3"},{"tags":["x_refsource_CONFIRM","x_transferred"],"url":"https://kb.askmonty.org/en/mariadb-5166-release-notes/"},{"name":"RHSA-2013:0180","tags":["vendor-advisory","x_refsource_REDHAT","x_transferred"],"url":"http://rhn.redhat.com/errata/RHSA-2013-0180.html"},{"name":"20121201 MySQL (Linux) Stack based buffer overrun PoC Zeroday","tags":["mailing-list","x_refsource_FULLDISC","x_transferred"],"url":"http://seclists.org/fulldisclosure/2012/Dec/4"},{"name":"GLSA-201308-06","tags":["vendor-advisory","x_refsource_GENTOO","x_transferred"],"url":"http://security.gentoo.org/glsa/glsa-201308-06.xml"},{"name":"[oss-security] 20121202 Re: Re: [Full-disclosure] MySQL (Linux) Stack based  buffer overrun PoC Zeroday","tags":["mailing-list","x_refsource_MLIST","x_transferred"],"url":"http://www.openwall.com/lists/oss-security/2012/12/02/4"},{"name":"RHSA-2012:1551","tags":["vendor-advisory","x_refsource_REDHAT","x_transferred"],"url":"http://rhn.redhat.com/errata/RHSA-2012-1551.html"},{"name":"DSA-2581","tags":["vendor-advisory","x_refsource_DEBIAN","x_transferred"],"url":"http://www.debian.org/security/2012/dsa-2581"},{"name":"SUSE-SU-2013:0262","tags":["vendor-advisory","x_refsource_SUSE","x_transferred"],"url":"http://lists.opensuse.org/opensuse-security-announce/2013-02/msg00000.html"},{"name":"openSUSE-SU-2013:0014","tags":["vendor-advisory","x_refsource_SUSE","x_transferred"],"url":"http://lists.opensuse.org/opensuse-security-announce/2013-01/msg00002.html"},{"name":"51443","tags":["third-party-advisory","x_refsource_SECUNIA","x_transferred"],"url":"http://secunia.com/advisories/51443"},{"name":"openSUSE-SU-2013:1412","tags":["vendor-advisory","x_refsource_SUSE","x_transferred"],"url":"http://lists.opensuse.org/opensuse-updates/2013-09/msg00010.html"},{"tags":["x_refsource_CONFIRM","x_transferred"],"url":"https://kb.askmonty.org/en/mariadb-5311-release-notes/"},{"name":"oval:org.mitre.oval:def:16395","tags":["vdb-entry","signature","x_refsource_OVAL","x_transferred"],"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A16395"},{"name":"USN-1658-1","tags":["vendor-advisory","x_refsource_UBUNTU","x_transferred"],"url":"http://www.ubuntu.com/usn/USN-1658-1"},{"name":"MDVSA-2013:150","tags":["vendor-advisory","x_refsource_MANDRIVA","x_transferred"],"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2013:150"},{"tags":["x_refsource_CONFIRM","x_transferred"],"url":"https://kb.askmonty.org/en/mariadb-5213-release-notes/"}],"title":"CVE Program Container"}],"cna":{"affected":[{"product":"n/a","vendor":"n/a","versions":[{"status":"affected","version":"n/a"}]}],"datePublic":"2012-12-01T00:00:00.000Z","descriptions":[{"lang":"en","value":"Stack-based buffer overflow in the acl_get function in Oracle MySQL 5.5.19 and other versions through 5.5.28, and 5.1.53 and other versions through 5.1.66, and MariaDB 5.5.2.x before 5.5.28a, 5.3.x before 5.3.11, 5.2.x before 5.2.13 and 5.1.x before 5.1.66, allows remote authenticated users to execute arbitrary code via a long argument to the GRANT FILE command."}],"problemTypes":[{"descriptions":[{"description":"n/a","lang":"en","type":"text"}]}],"providerMetadata":{"dateUpdated":"2017-09-18T12:57:01.000Z","orgId":"53f830b8-0a3f-465b-8143-3b8a9948e749","shortName":"redhat"},"references":[{"tags":["x_refsource_CONFIRM"],"url":"https://kb.askmonty.org/en/mariadb-5528a-release-notes/"},{"name":"openSUSE-SU-2013:0013","tags":["vendor-advisory","x_refsource_SUSE"],"url":"http://lists.opensuse.org/opensuse-security-announce/2013-01/msg00001.html"},{"name":"23075","tags":["exploit","x_refsource_EXPLOIT-DB"],"url":"http://www.exploit-db.com/exploits/23075"},{"name":"USN-1703-1","tags":["vendor-advisory","x_refsource_UBUNTU"],"url":"http://www.ubuntu.com/usn/USN-1703-1"},{"name":"MDVSA-2013:102","tags":["vendor-advisory","x_refsource_MANDRIVA"],"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2013:102"},{"name":"openSUSE-SU-2013:0156","tags":["vendor-advisory","x_refsource_SUSE"],"url":"http://lists.opensuse.org/opensuse-security-announce/2013-01/msg00020.html"},{"name":"53372","tags":["third-party-advisory","x_refsource_SECUNIA"],"url":"http://secunia.com/advisories/53372"},{"name":"openSUSE-SU-2013:0135","tags":["vendor-advisory","x_refsource_SUSE"],"url":"http://lists.opensuse.org/opensuse-security-announce/2013-01/msg00013.html"},{"name":"openSUSE-SU-2013:0011","tags":["vendor-advisory","x_refsource_SUSE"],"url":"http://lists.opensuse.org/opensuse-security-announce/2013-01/msg00000.html"},{"tags":["x_refsource_CONFIRM"],"url":"http://www.oracle.com/technetwork/topics/security/cpujan2013-1515902.html"},{"name":"[oss-security] 20121202 Re: Re: [Full-disclosure] MySQL (Linux) Stack based  buffer overrun PoC Zeroday","tags":["mailing-list","x_refsource_MLIST"],"url":"http://www.openwall.com/lists/oss-security/2012/12/02/3"},{"tags":["x_refsource_CONFIRM"],"url":"https://kb.askmonty.org/en/mariadb-5166-release-notes/"},{"name":"RHSA-2013:0180","tags":["vendor-advisory","x_refsource_REDHAT"],"url":"http://rhn.redhat.com/errata/RHSA-2013-0180.html"},{"name":"20121201 MySQL (Linux) Stack based buffer overrun PoC Zeroday","tags":["mailing-list","x_refsource_FULLDISC"],"url":"http://seclists.org/fulldisclosure/2012/Dec/4"},{"name":"GLSA-201308-06","tags":["vendor-advisory","x_refsource_GENTOO"],"url":"http://security.gentoo.org/glsa/glsa-201308-06.xml"},{"name":"[oss-security] 20121202 Re: Re: [Full-disclosure] MySQL (Linux) Stack based  buffer overrun PoC Zeroday","tags":["mailing-list","x_refsource_MLIST"],"url":"http://www.openwall.com/lists/oss-security/2012/12/02/4"},{"name":"RHSA-2012:1551","tags":["vendor-advisory","x_refsource_REDHAT"],"url":"http://rhn.redhat.com/errata/RHSA-2012-1551.html"},{"name":"DSA-2581","tags":["vendor-advisory","x_refsource_DEBIAN"],"url":"http://www.debian.org/security/2012/dsa-2581"},{"name":"SUSE-SU-2013:0262","tags":["vendor-advisory","x_refsource_SUSE"],"url":"http://lists.opensuse.org/opensuse-security-announce/2013-02/msg00000.html"},{"name":"openSUSE-SU-2013:0014","tags":["vendor-advisory","x_refsource_SUSE"],"url":"http://lists.opensuse.org/opensuse-security-announce/2013-01/msg00002.html"},{"name":"51443","tags":["third-party-advisory","x_refsource_SECUNIA"],"url":"http://secunia.com/advisories/51443"},{"name":"openSUSE-SU-2013:1412","tags":["vendor-advisory","x_refsource_SUSE"],"url":"http://lists.opensuse.org/opensuse-updates/2013-09/msg00010.html"},{"tags":["x_refsource_CONFIRM"],"url":"https://kb.askmonty.org/en/mariadb-5311-release-notes/"},{"name":"oval:org.mitre.oval:def:16395","tags":["vdb-entry","signature","x_refsource_OVAL"],"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A16395"},{"name":"USN-1658-1","tags":["vendor-advisory","x_refsource_UBUNTU"],"url":"http://www.ubuntu.com/usn/USN-1658-1"},{"name":"MDVSA-2013:150","tags":["vendor-advisory","x_refsource_MANDRIVA"],"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2013:150"},{"tags":["x_refsource_CONFIRM"],"url":"https://kb.askmonty.org/en/mariadb-5213-release-notes/"}],"x_legacyV4Record":{"CVE_data_meta":{"ASSIGNER":"secalert@redhat.com","ID":"CVE-2012-5611","STATE":"PUBLIC"},"affects":{"vendor":{"vendor_data":[{"product":{"product_data":[{"product_name":"n/a","version":{"version_data":[{"version_value":"n/a"}]}}]},"vendor_name":"n/a"}]}},"data_format":"MITRE","data_type":"CVE","data_version":"4.0","description":{"description_data":[{"lang":"eng","value":"Stack-based buffer overflow in the acl_get function in Oracle MySQL 5.5.19 and other versions through 5.5.28, and 5.1.53 and other versions through 5.1.66, and MariaDB 5.5.2.x before 5.5.28a, 5.3.x before 5.3.11, 5.2.x before 5.2.13 and 5.1.x before 5.1.66, allows remote authenticated users to execute arbitrary code via a long argument to the GRANT FILE command."}]},"problemtype":{"problemtype_data":[{"description":[{"lang":"eng","value":"n/a"}]}]},"references":{"reference_data":[{"name":"https://kb.askmonty.org/en/mariadb-5528a-release-notes/","refsource":"CONFIRM","url":"https://kb.askmonty.org/en/mariadb-5528a-release-notes/"},{"name":"openSUSE-SU-2013:0013","refsource":"SUSE","url":"http://lists.opensuse.org/opensuse-security-announce/2013-01/msg00001.html"},{"name":"23075","refsource":"EXPLOIT-DB","url":"http://www.exploit-db.com/exploits/23075"},{"name":"USN-1703-1","refsource":"UBUNTU","url":"http://www.ubuntu.com/usn/USN-1703-1"},{"name":"MDVSA-2013:102","refsource":"MANDRIVA","url":"http://www.mandriva.com/security/advisories?name=MDVSA-2013:102"},{"name":"openSUSE-SU-2013:0156","refsource":"SUSE","url":"http://lists.opensuse.org/opensuse-security-announce/2013-01/msg00020.html"},{"name":"53372","refsource":"SECUNIA","url":"http://secunia.com/advisories/53372"},{"name":"openSUSE-SU-2013:0135","refsource":"SUSE","url":"http://lists.opensuse.org/opensuse-security-announce/2013-01/msg00013.html"},{"name":"openSUSE-SU-2013:0011","refsource":"SUSE","url":"http://lists.opensuse.org/opensuse-security-announce/2013-01/msg00000.html"},{"name":"http://www.oracle.com/technetwork/topics/security/cpujan2013-1515902.html","refsource":"CONFIRM","url":"http://www.oracle.com/technetwork/topics/security/cpujan2013-1515902.html"},{"name":"[oss-security] 20121202 Re: Re: [Full-disclosure] MySQL (Linux) Stack based  buffer overrun PoC Zeroday","refsource":"MLIST","url":"http://www.openwall.com/lists/oss-security/2012/12/02/3"},{"name":"https://kb.askmonty.org/en/mariadb-5166-release-notes/","refsource":"CONFIRM","url":"https://kb.askmonty.org/en/mariadb-5166-release-notes/"},{"name":"RHSA-2013:0180","refsource":"REDHAT","url":"http://rhn.redhat.com/errata/RHSA-2013-0180.html"},{"name":"20121201 MySQL (Linux) Stack based buffer overrun PoC Zeroday","refsource":"FULLDISC","url":"http://seclists.org/fulldisclosure/2012/Dec/4"},{"name":"GLSA-201308-06","refsource":"GENTOO","url":"http://security.gentoo.org/glsa/glsa-201308-06.xml"},{"name":"[oss-security] 20121202 Re: Re: [Full-disclosure] MySQL (Linux) Stack based  buffer overrun PoC Zeroday","refsource":"MLIST","url":"http://www.openwall.com/lists/oss-security/2012/12/02/4"},{"name":"RHSA-2012:1551","refsource":"REDHAT","url":"http://rhn.redhat.com/errata/RHSA-2012-1551.html"},{"name":"DSA-2581","refsource":"DEBIAN","url":"http://www.debian.org/security/2012/dsa-2581"},{"name":"SUSE-SU-2013:0262","refsource":"SUSE","url":"http://lists.opensuse.org/opensuse-security-announce/2013-02/msg00000.html"},{"name":"openSUSE-SU-2013:0014","refsource":"SUSE","url":"http://lists.opensuse.org/opensuse-security-announce/2013-01/msg00002.html"},{"name":"51443","refsource":"SECUNIA","url":"http://secunia.com/advisories/51443"},{"name":"openSUSE-SU-2013:1412","refsource":"SUSE","url":"http://lists.opensuse.org/opensuse-updates/2013-09/msg00010.html"},{"name":"https://kb.askmonty.org/en/mariadb-5311-release-notes/","refsource":"CONFIRM","url":"https://kb.askmonty.org/en/mariadb-5311-release-notes/"},{"name":"oval:org.mitre.oval:def:16395","refsource":"OVAL","url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A16395"},{"name":"USN-1658-1","refsource":"UBUNTU","url":"http://www.ubuntu.com/usn/USN-1658-1"},{"name":"MDVSA-2013:150","refsource":"MANDRIVA","url":"http://www.mandriva.com/security/advisories?name=MDVSA-2013:150"},{"name":"https://kb.askmonty.org/en/mariadb-5213-release-notes/","refsource":"CONFIRM","url":"https://kb.askmonty.org/en/mariadb-5213-release-notes/"}]}}}},"cveMetadata":{"assignerOrgId":"53f830b8-0a3f-465b-8143-3b8a9948e749","assignerShortName":"redhat","cveId":"CVE-2012-5611","datePublished":"2012-12-03T11:00:00.000Z","dateReserved":"2012-10-24T00:00:00.000Z","dateUpdated":"2024-08-06T21:14:16.163Z","state":"PUBLISHED"},"dataType":"CVE_RECORD","dataVersion":"5.1"},"nvd":{"publishedDate":"2012-12-03 12:49:43","lastModifiedDate":"2026-04-29 01:13:23","problem_types":["CWE-119","n/a"],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:S/C:P/I:P/A:P","baseScore":6.5,"accessVector":"NETWORK","accessComplexity":"LOW","authentication":"SINGLE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL"},"baseSeverity":"MEDIUM","exploitabilityScore":8,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"configurations":[{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:mariadb:mariadb:5.1.41:*:*:*:*:*:*:*","matchCriteriaId":"86D9BEC1-F4C2-4BE6-A608-D8958A032972"},{"vulnerable":true,"criteria":"cpe:2.3:a:mariadb:mariadb:5.1.42:*:*:*:*:*:*:*","matchCriteriaId":"77F04B12-6063-4BAB-A69B-F1F19CC3FFB8"},{"vulnerable":true,"criteria":"cpe:2.3:a:mariadb:mariadb:5.1.44:*:*:*:*:*:*:*","matchCriteriaId":"8A77E458-3AE9-4B02-9A9F-A640DAE073B3"},{"vulnerable":true,"criteria":"cpe:2.3:a:mariadb:mariadb:5.1.47:*:*:*:*:*:*:*","matchCriteriaId":"DF78DF61-E6C3-4E92-A8B9-843698D03D18"},{"vulnerable":true,"criteria":"cpe:2.3:a:mariadb:mariadb:5.1.49:*:*:*:*:*:*:*","matchCriteriaId":"56F2A57F-2CDD-48F8-AC92-1E599875E704"},{"vulnerable":true,"criteria":"cpe:2.3:a:mariadb:mariadb:5.1.50:*:*:*:*:*:*:*","matchCriteriaId":"4F2BAD43-DDF2-4830-A844-8A6F18EF98CC"},{"vulnerable":true,"criteria":"cpe:2.3:a:mariadb:mariadb:5.1.51:*:*:*:*:*:*:*","matchCriteriaId":"FCB1ECEF-8420-41CF-9CFD-AD551BB04C9F"},{"vulnerable":true,"criteria":"cpe:2.3:a:mariadb:mariadb:5.1.53:*:*:*:*:*:*:*","matchCriteriaId":"B4C45914-1CB3-440F-AB7B-564B3A09D9BB"},{"vulnerable":true,"criteria":"cpe:2.3:a:mariadb:mariadb:5.1.55:*:*:*:*:*:*:*","matchCriteriaId":"581E047E-339B-4CB4-ADA9-AF25BE0345B8"},{"vulnerable":true,"criteria":"cpe:2.3:a:mariadb:mariadb:5.1.60:*:*:*:*:*:*:*","matchCriteriaId":"C16A0D77-DA95-41D7-9BE2-7B306AF9FF6B"},{"vulnerable":true,"criteria":"cpe:2.3:a:mariadb:mariadb:5.1.61:*:*:*:*:*:*:*","matchCriteriaId":"B4BAE0F1-010D-47D8-B65E-335EF455C951"},{"vulnerable":true,"criteria":"cpe:2.3:a:mariadb:mariadb:5.1.62:*:*:*:*:*:*:*","matchCriteriaId":"91DD3FC9-2530-4BAA-929A-6D4E96868B74"},{"vulnerable":true,"criteria":"cpe:2.3:a:mariadb:mariadb:5.2.0:*:*:*:*:*:*:*","matchCriteriaId":"552E49DC-80FD-4422-9341-44CE0C127027"},{"vulnerable":true,"criteria":"cpe:2.3:a:mariadb:mariadb:5.2.1:*:*:*:*:*:*:*","matchCriteriaId":"CDEAEFC9-9C50-44F9-8D8C-FAC18F706DAD"},{"vulnerable":true,"criteria":"cpe:2.3:a:mariadb:mariadb:5.2.2:*:*:*:*:*:*:*","matchCriteriaId":"92BD73CE-88F8-4DF0-8293-FBE1FEC8BAB2"},{"vulnerable":true,"criteria":"cpe:2.3:a:mariadb:mariadb:5.2.3:*:*:*:*:*:*:*","matchCriteriaId":"0B438CEA-C321-4B48-8610-9E0CABA7F9B0"},{"vulnerable":true,"criteria":"cpe:2.3:a:mariadb:mariadb:5.2.4:*:*:*:*:*:*:*","matchCriteriaId":"56C584AF-64B0-4DCB-9E36-E60170654D03"},{"vulnerable":true,"criteria":"cpe:2.3:a:mariadb:mariadb:5.2.5:*:*:*:*:*:*:*","matchCriteriaId":"6DD15542-FBFB-4513-BC42-5EE63247313D"},{"vulnerable":true,"criteria":"cpe:2.3:a:mariadb:mariadb:5.2.6:*:*:*:*:*:*:*","matchCriteriaId":"98247C01-F906-426A-B5C6-5A3905B83027"},{"vulnerable":true,"criteria":"cpe:2.3:a:mariadb:mariadb:5.2.7:*:*:*:*:*:*:*","matchCriteriaId":"5F7C92F3-D18F-47B8-A6D7-2DD210B0BC77"},{"vulnerable":true,"criteria":"cpe:2.3:a:mariadb:mariadb:5.2.8:*:*:*:*:*:*:*","matchCriteriaId":"323BDFDE-FA24-4169-8BD4-C7978C4FDBBA"},{"vulnerable":true,"criteria":"cpe:2.3:a:mariadb:mariadb:5.2.9:*:*:*:*:*:*:*","matchCriteriaId":"0FA479ED-0B6B-464A-B476-82C5C4E05D20"},{"vulnerable":true,"criteria":"cpe:2.3:a:mariadb:mariadb:5.2.10:*:*:*:*:*:*:*","matchCriteriaId":"2EFF6DF6-DE51-49EA-B745-4EBC20814E6A"},{"vulnerable":true,"criteria":"cpe:2.3:a:mariadb:mariadb:5.2.11:*:*:*:*:*:*:*","matchCriteriaId":"A8B00856-5DDC-415A-98AC-62736B9C2DA9"},{"vulnerable":true,"criteria":"cpe:2.3:a:mariadb:mariadb:5.2.12:*:*:*:*:*:*:*","matchCriteriaId":"FC6B5FF9-7A46-46D9-BEA2-2146F958E6BD"},{"vulnerable":true,"criteria":"cpe:2.3:a:mariadb:mariadb:5.3.0:*:*:*:*:*:*:*","matchCriteriaId":"A0122E5B-7EBF-431A-B144-45F945099FE6"},{"vulnerable":true,"criteria":"cpe:2.3:a:mariadb:mariadb:5.3.1:*:*:*:*:*:*:*","matchCriteriaId":"59BC8D7B-866E-42E5-9EF9-E8F487AE21C6"},{"vulnerable":true,"criteria":"cpe:2.3:a:mariadb:mariadb:5.3.2:*:*:*:*:*:*:*","matchCriteriaId":"8A1982C3-4F1B-4B62-AB75-0FE88EA1BC33"},{"vulnerable":true,"criteria":"cpe:2.3:a:mariadb:mariadb:5.3.3:*:*:*:*:*:*:*","matchCriteriaId":"49A3AD71-6E48-40CF-BA9D-75B6D8D02B9A"},{"vulnerable":true,"criteria":"cpe:2.3:a:mariadb:mariadb:5.3.4:*:*:*:*:*:*:*","matchCriteriaId":"D0CBE6FE-12C8-4E5E-990E-9E4859862A80"},{"vulnerable":true,"criteria":"cpe:2.3:a:mariadb:mariadb:5.3.5:*:*:*:*:*:*:*","matchCriteriaId":"ACBBA64F-F39C-422A-9FDB-72372B6C4320"},{"vulnerable":true,"criteria":"cpe:2.3:a:mariadb:mariadb:5.3.6:*:*:*:*:*:*:*","matchCriteriaId":"43121525-06CD-4C4A-A4C0-5AC26CDB275F"},{"vulnerable":true,"criteria":"cpe:2.3:a:mariadb:mariadb:5.3.7:*:*:*:*:*:*:*","matchCriteriaId":"72855B60-229B-4AB9-9786-1EDDA8F16DAB"},{"vulnerable":true,"criteria":"cpe:2.3:a:mariadb:mariadb:5.3.8:*:*:*:*:*:*:*","matchCriteriaId":"64040784-F6ED-4FC2-8D43-6DAB38770BEF"},{"vulnerable":true,"criteria":"cpe:2.3:a:mariadb:mariadb:5.3.9:*:*:*:*:*:*:*","matchCriteriaId":"A242B531-0936-4F67-8F07-245FE929F034"},{"vulnerable":true,"criteria":"cpe:2.3:a:mariadb:mariadb:5.3.10:*:*:*:*:*:*:*","matchCriteriaId":"9ABB8B61-273F-441A-98B3-56EF456EDF6F"},{"vulnerable":true,"criteria":"cpe:2.3:a:mariadb:mariadb:5.5.20:*:*:*:*:*:*:*","matchCriteriaId":"F99E43D2-D49C-4990-B683-2E26D58DB816"},{"vulnerable":true,"criteria":"cpe:2.3:a:mariadb:mariadb:5.5.21:*:*:*:*:*:*:*","matchCriteriaId":"C082352C-DFE1-461A-9803-C180021144A6"},{"vulnerable":true,"criteria":"cpe:2.3:a:mariadb:mariadb:5.5.22:*:*:*:*:*:*:*","matchCriteriaId":"F49B9C56-71B4-4B1B-ABD8-CFE56A4F0816"},{"vulnerable":true,"criteria":"cpe:2.3:a:mariadb:mariadb:5.5.23:*:*:*:*:*:*:*","matchCriteriaId":"FCA16095-E56A-4523-B738-2C4E86CEF603"},{"vulnerable":true,"criteria":"cpe:2.3:a:mariadb:mariadb:5.5.24:*:*:*:*:*:*:*","matchCriteriaId":"917846BE-1D70-4121-8065-F97F3D710244"},{"vulnerable":true,"criteria":"cpe:2.3:a:mariadb:mariadb:5.5.25:*:*:*:*:*:*:*","matchCriteriaId":"7140FE2C-C06C-4005-958C-B00D3CEC6333"},{"vulnerable":true,"criteria":"cpe:2.3:a:mariadb:mariadb:5.5.27:*:*:*:*:*:*:*","matchCriteriaId":"4D4C9720-8FC9-4EF3-81C9-D84D6E6EA949"},{"vulnerable":true,"criteria":"cpe:2.3:a:mariadb:mariadb:5.5.28:*:*:*:*:*:*:*","matchCriteriaId":"813E44E5-8B9B-4FCA-86A2-4AA4135F9EDF"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:mysql:5.1.53:*:*:*:*:*:*:*","matchCriteriaId":"0E1B28CE-BFE1-4331-90F9-E6BA672BDAA9"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:mysql:5.5.19:*:*:*:*:*:*:*","matchCriteriaId":"77E105E9-FE65-4B75-9818-D3897294E941"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:o:linux:linux_kernel:-:*:*:*:*:*:*:*","matchCriteriaId":"703AF700-7A70-47E2-BC3A-7FD03B3CA9C1"}]}]}]},"legacy_mitre":{"record":{"CveYear":"2012","CveId":"5611","Ordinal":"1","Title":"CVE-2012-5611","CVE":"CVE-2012-5611","Year":"2012"},"notes":[{"CveYear":"2012","CveId":"5611","Ordinal":"1","NoteData":"Stack-based buffer overflow in the acl_get function in Oracle MySQL 5.5.19 and other versions through 5.5.28, and 5.1.53 and other versions through 5.1.66, and MariaDB 5.5.2.x before 5.5.28a, 5.3.x before 5.3.11, 5.2.x before 5.2.13 and 5.1.x before 5.1.66, allows remote authenticated users to execute arbitrary code via a long argument to the GRANT FILE command.","Type":"Description","Title":"CVE-2012-5611"},{"CveYear":"2012","CveId":"5611","Ordinal":"2","NoteData":"2012-12-03","Type":"Other","Title":"Published"},{"CveYear":"2012","CveId":"5611","Ordinal":"3","NoteData":"2017-09-18","Type":"Other","Title":"Modified"}]}}}