CVE-2012-0882

MySQL 5.5.x < 5.5.22 and 5.1.x < 5.1.62 - Remote Code Execution via yaSSL Buffer Overflow

Title source: llm
STIX 2.1

Description

Buffer overflow in yaSSL, as used in MySQL 5.5.20 and possibly other versions including 5.5.x before 5.5.22 and 5.1.x before 5.1.62, allows remote attackers to execute arbitrary code via unspecified vectors, as demonstrated by VulnDisco Pack Professional 9.17. NOTE: as of 20120224, this disclosure has no actionable information. However, because the module author is a reliable researcher, the issue is being assigned a CVE identifier for tracking purposes. NOTE: due to lack of details, it is not clear whether this issue is a duplicate of CVE-2012-0492 or another CVE.

References (5)

Core 5
Core References
Various Sources mailing-list x_refsource_mlist
https://lists.immunityinc.com/pipermail/canvas/2012-February/000014.html
Various Sources mailing-list x_refsource_mlist
https://lists.immunityinc.com/pipermail/canvas/2012-February/000011.html
Issue Tracking x_refsource_misc
https://bugzilla.redhat.com/show_bug.cgi?id=789141
Mailing List mailing-list x_refsource_mlist
http://www.openwall.com/lists/oss-security/2012/02/24/2

Scores

EPSS 0.0530
EPSS Percentile 91.6%

Details

CWE
CWE-119
Status published
Products (50)
mysql/mysql 5.1.5
mysql/mysql 5.1.23
mysql/mysql 5.1.31
mysql/mysql 5.1.32
mysql/mysql 5.1.34
mysql/mysql 5.1.37
oracle/mysql 5.5.0
oracle/mysql 5.5.1
oracle/mysql 5.5.2
oracle/mysql 5.5.3
... and 40 more
Published Dec 21, 2012
Tracked Since Feb 18, 2026