Vulnerability CVE-2012-3180 - CERT Civis.Net

Vulnerability Name:

CVE-2012-3180 (CCN-79389)

Assigned:

2012-10-16

Published:

2012-10-16

Updated:

2022-08-29

Summary:

Unspecified vulnerability in the MySQL Server component in Oracle MySQL 5.1.65 and earlier, and 5.5.27 and earlier, allows remote authenticated users to affect availability via unknown vectors related to Server Optimizer.

CVSS v3 Severity:

3.5 Low (CCN CVSS v3.1 Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:N/I:N/A:L)

Exploitability Metrics:	Attack Vector (AV): Network Attack Complexity (AC): Low Privileges Required (PR): Low User Interaction (UI): Required
Scope:	Scope (S): Unchanged
Impact Metrics:	Confidentiality (C): None Integrity (I): None Availibility (A): Low

CVSS v2 Severity:

4.0 Medium (CVSS v2 Vector: AV:N/AC:L/Au:S/C:N/I:N/A:P)
3.0 Low (Temporal CVSS v2 Vector: AV:N/AC:L/Au:S/C:N/I:N/A:P/E:U/RL:OF/RC:C)

Exploitability Metrics:	Access Vector (AV): Network Access Complexity (AC): Low Authentication (Au): Single_Instance
Impact Metrics:	Confidentiality (C): None Integrity (I): None Availibility (A): Partial

4.0 Medium (CCN CVSS v2 Vector: AV:N/AC:L/Au:S/C:N/I:N/A:P)
3.0 Low (CCN Temporal CVSS v2 Vector: AV:N/AC:L/Au:S/C:N/I:N/A:P/E:U/RL:OF/RC:C)

Exploitability Metrics:	Access Vector (AV): Network Access Complexity (AC): Low Athentication (Au): Single_Instance
Impact Metrics:	Confidentiality (C): None Integrity (I): None Availibility (A): Partial

4.0 Medium (REDHAT CVSS v2 Vector: AV:N/AC:L/Au:S/C:N/I:N/A:P)
3.0 Low (REDHAT Temporal CVSS v2 Vector: AV:N/AC:L/Au:S/C:N/I:N/A:P/E:U/RL:OF/RC:C)

Exploitability Metrics:	Access Vector (AV): Network Access Complexity (AC): Low Authentication (Au): Single_Instance
Impact Metrics:	Confidentiality (C): None Integrity (I): None Availibility (A): Partial

Vulnerability Type:

Vulnerability Consequences:

Denial of Service

References:

Source: MITRE
Type: CNA
CVE-2012-3180

Source: CCN
Type: RHSA-2012-1462
Important: mysql security update

Source: REDHAT
Type: Third Party Advisory
RHSA-2012:1462

Source: SECUNIA
Type: Not Applicable
51177

Source: SECUNIA
Type: Not Applicable
51309

Source: SECUNIA
Type: Not Applicable
53372

Source: GENTOO
Type: Third Party Advisory
GLSA-201308-06

Source: DEBIAN
Type: Third Party Advisory
DSA-2581

Source: DEBIAN
Type: DSA-2581
mysql-5.1 -- several vulnerabilities

Source: MANDRIVA
Type: Broken Link
MDVSA-2013:150

Source: CCN
Type: Oracle Web Site
Oracle Critical Patch Update Advisory - October 2012

Source: CONFIRM
Type: Patch, Vendor Advisory
http://www.oracle.com/technetwork/topics/security/cpuoct2012-1515893.html

Source: CCN
Type: BID-56003
Oracle MySQL Server CVE-2012-3180 Remote Security Vulnerability

Source: UBUNTU
Type: Third Party Advisory
USN-1621-1

Source: XF
Type: Third Party Advisory, VDB Entry
mysqlserver-optimize-dos(79389)

Source: XF
Type: UNKNOWN
mysqlserver-optimize-dos(79389)

Vulnerable Configuration:

Configuration 1:

cpe:/a:oracle:mysql:*:*:*:*:*:*:*:* (Version >= 5.5.0 and <= 5.5.27)

OR cpe:/a:oracle:mysql:*:*:*:*:*:*:*:* (Version >= 5.1.0 and <= 5.1.65)

Configuration 2:

cpe:/a:mariadb:mariadb:*:*:*:*:*:*:*:* (Version >= 5.1.0 and < 5.1.66)

OR cpe:/a:mariadb:mariadb:*:*:*:*:*:*:*:* (Version >= 5.5.0 and < 5.5.28)

Configuration 3:

cpe:/o:debian:debian_linux:7.0:*:*:*:*:*:*:*

OR cpe:/o:debian:debian_linux:6.0:*:*:*:*:*:*:*

Configuration 4:

cpe:/o:canonical:ubuntu_linux:11.10:*:*:*:*:*:*:*

OR cpe:/o:canonical:ubuntu_linux:12.10:*:*:*:*:*:*:*

OR cpe:/o:canonical:ubuntu_linux:10.04:*:*:*:-:*:*:*

OR cpe:/o:canonical:ubuntu_linux:12.04:*:*:*:-:*:*:*

Configuration 5:

cpe:/o:redhat:enterprise_linux_desktop:6.0:*:*:*:*:*:*:*

OR cpe:/o:redhat:enterprise_linux_server:6.0:*:*:*:*:*:*:*

OR cpe:/o:redhat:enterprise_linux_workstation:6.0:*:*:*:*:*:*:*

OR cpe:/o:redhat:enterprise_linux_eus:6.3:*:*:*:*:*:*:*

Configuration RedHat 1:

cpe:/o:redhat:enterprise_linux:6:*:*:*:*:*:*:*

Configuration RedHat 2:

cpe:/o:redhat:enterprise_linux:6::client:*:*:*:*:*

Configuration RedHat 3:

cpe:/o:redhat:enterprise_linux:6::computenode:*:*:*:*:*

Configuration RedHat 4:

cpe:/o:redhat:enterprise_linux:6::server:*:*:*:*:*

Configuration RedHat 5:

cpe:/o:redhat:enterprise_linux:6::workstation:*:*:*:*:*

Configuration CCN 1:

cpe:/a:oracle:mysql:5.1.1:*:*:*:*:*:*:*

OR cpe:/a:oracle:mysql:5.1.10:*:*:*:*:*:*:*

OR cpe:/a:oracle:mysql:5.1.11:*:*:*:*:*:*:*

OR cpe:/a:oracle:mysql:5.1.12:*:*:*:*:*:*:*

OR cpe:/a:oracle:mysql:5.1.13:*:*:*:*:*:*:*

OR cpe:/a:oracle:mysql:5.1.14:*:*:*:*:*:*:*

OR cpe:/a:oracle:mysql:5.1.15:*:*:*:*:*:*:*

OR cpe:/a:oracle:mysql:5.1.16:*:*:*:*:*:*:*

OR cpe:/a:oracle:mysql:5.1.17:*:*:*:*:*:*:*

OR cpe:/a:oracle:mysql:5.1.2:*:*:*:*:*:*:*

OR cpe:/a:oracle:mysql:5.1.23:-:*:*:*:*:*:*

OR cpe:/a:oracle:mysql:5.1.3:*:*:*:*:*:*:*

OR cpe:/a:oracle:mysql:5.1.4:*:*:*:*:*:*:*

OR cpe:/a:mysql:mysql:5.1.5:*:*:*:*:*:*:*

OR cpe:/a:oracle:mysql:5.1.6:*:*:*:*:*:*:*

OR cpe:/a:oracle:mysql:5.1.7:*:*:*:*:*:*:*

OR cpe:/a:oracle:mysql:5.1.8:*:*:*:*:*:*:*

OR cpe:/a:oracle:mysql:5.1.9:*:*:*:*:*:*:*

OR cpe:/a:oracle:mysql:5.1.30:*:*:*:*:*:*:*

OR cpe:/a:oracle:mysql:5.1.32:bzr:*:*:*:*:*:*

OR cpe:/a:oracle:mysql:5.1.23:bk:*:*:*:*:*:*

OR cpe:/a:oracle:mysql:5.1.21:*:*:*:*:*:*:*

OR cpe:/a:oracle:mysql:5.1.22:*:*:*:*:*:*:*

OR cpe:/a:oracle:mysql:5.1.23:a:*:*:*:*:*:*

OR cpe:/a:mysql:mysql:5.1.5a:*:*:*:*:*:*:*

OR cpe:/a:oracle:mysql:5.1.18:*:*:*:*:*:*:*

OR cpe:/a:oracle:mysql:5.1.19:*:*:*:*:*:*:*

OR cpe:/a:oracle:mysql:5.1.20:*:*:*:*:*:*:*

OR cpe:/a:oracle:mysql:5.1.45:*:*:*:*:*:*:*

OR cpe:/a:oracle:mysql:5.1.44:*:*:*:*:*:*:*

OR cpe:/a:oracle:mysql:5.1.43:*:*:*:*:*:*:*

OR cpe:/a:oracle:mysql:5.1.42:*:*:*:*:*:*:*

OR cpe:/a:oracle:mysql:5.1.41:*:*:*:*:*:*:*

OR cpe:/a:oracle:mysql:5.1.40:*:*:*:*:*:*:*

OR cpe:/a:oracle:mysql:5.1.39:*:*:*:*:*:*:*

OR cpe:/a:oracle:mysql:5.1.38:*:*:*:*:*:*:*

OR cpe:/a:oracle:mysql:5.1.37:-:*:*:*:*:*:*

OR cpe:/a:oracle:mysql:5.1.36:*:*:*:*:*:*:*

OR cpe:/a:oracle:mysql:5.1.35:*:*:*:*:*:*:*

OR cpe:/a:oracle:mysql:5.1.34:-:*:*:*:*:*:*

OR cpe:/a:oracle:mysql:5.1.33:*:*:*:*:*:*:*

OR cpe:/a:oracle:mysql:5.1.32:-:*:*:*:*:*:*

OR cpe:/a:oracle:mysql:5.1.31:-:*:*:*:*:*:*

OR cpe:/a:oracle:mysql:5.1.46:*:*:*:*:*:*:*

OR cpe:/a:oracle:mysql:5.1.47:*:*:*:*:*:*:*

OR cpe:/a:oracle:mysql:5.1.48:*:*:*:*:*:*:*

OR cpe:/a:oracle:mysql:5.1.49:*:*:*:*:*:*:*

OR cpe:/a:oracle:mysql:5.1.50:*:*:*:*:*:*:*

OR cpe:/a:oracle:mysql:5.1.23:a:*:*:*:*:*:*

OR cpe:/a:oracle:mysql:5.1.24:*:*:*:*:*:*:*

OR cpe:/a:oracle:mysql:5.1.25:*:*:*:*:*:*:*

OR cpe:/a:oracle:mysql:5.1.26:*:*:*:*:*:*:*

OR cpe:/a:oracle:mysql:5.1.27:*:*:*:*:*:*:*

OR cpe:/a:oracle:mysql:5.1.28:*:*:*:*:*:*:*

OR cpe:/a:oracle:mysql:5.1.29:*:*:*:*:*:*:*

OR cpe:/a:oracle:mysql:5.1.31:sp1:*:*:*:*:*:*

OR cpe:/a:oracle:mysql:5.1.34:sp1:*:*:*:*:*:*

OR cpe:/a:oracle:mysql:5.1.37:sp1:*:*:*:*:*:*

OR cpe:/a:oracle:mysql:5.1.40:sp1:*:*:*:*:*:*

OR cpe:/a:oracle:mysql:5.1.43:sp1:*:*:*:*:*:*

OR cpe:/a:oracle:mysql:5.1.46:sp1:*:*:*:*:*:*

OR cpe:/a:oracle:mysql:5.5.0:*:*:*:*:*:*:*

OR cpe:/a:oracle:mysql:5.5.1:*:*:*:*:*:*:*

OR cpe:/a:oracle:mysql:5.5.2:*:*:*:*:*:*:*

OR cpe:/a:oracle:mysql:5.5.3:*:*:*:*:*:*:*

OR cpe:/a:oracle:mysql:5.5.4:*:*:*:*:*:*:*

OR cpe:/a:oracle:mysql:5.1.49:sp1:*:*:*:*:*:*

OR cpe:/a:oracle:mysql:5.5.5:*:*:*:*:*:*:*

OR cpe:/a:oracle:mysql:5.5.8:*:*:*:*:*:*:*

OR cpe:/a:oracle:mysql:5.1.51:*:*:*:*:*:*:*

OR cpe:/a:oracle:mysql:5.1.52:*:*:*:*:*:*:*

OR cpe:/a:oracle:mysql:5.1.52:sp1:*:*:*:*:*:*

OR cpe:/a:oracle:mysql:5.1.53:*:*:*:*:*:*:*

OR cpe:/a:oracle:mysql:5.1.54:*:*:*:*:*:*:*

OR cpe:/a:oracle:mysql:5.1.55:*:*:*:*:*:*:*

OR cpe:/a:oracle:mysql:5.1.56:*:*:*:*:*:*:*

OR cpe:/a:oracle:mysql:5.1.57:*:*:*:*:*:*:*

OR cpe:/a:oracle:mysql:5.1.58:*:*:*:*:*:*:*

OR cpe:/a:oracle:mysql:5.1.59:*:*:*:*:*:*:*

OR cpe:/a:oracle:mysql:5.1.60:*:*:*:*:*:*:*

OR cpe:/a:oracle:mysql:5.1.61:*:*:*:*:*:*:*

OR cpe:/a:oracle:mysql:5.5.10:*:*:*:*:*:*:*

OR cpe:/a:oracle:mysql:5.5.11:*:*:*:*:*:*:*

OR cpe:/a:oracle:mysql:5.5.12:*:*:*:*:*:*:*

OR cpe:/a:oracle:mysql:5.5.13:*:*:*:*:*:*:*

OR cpe:/a:oracle:mysql:5.5.14:*:*:*:*:*:*:*

OR cpe:/a:oracle:mysql:5.5.15:*:*:*:*:*:*:*

OR cpe:/a:oracle:mysql:5.5.16:*:*:*:*:*:*:*

OR cpe:/a:oracle:mysql:5.5.17:*:*:*:*:*:*:*

OR cpe:/a:oracle:mysql:5.5.18:*:*:*:*:*:*:*

OR cpe:/a:oracle:mysql:5.5.19:*:*:*:*:*:*:*

OR cpe:/a:oracle:mysql:5.5.20:*:*:*:*:*:*:*

OR cpe:/a:oracle:mysql:5.5.21:*:*:*:*:*:*:*

OR cpe:/a:oracle:mysql:5.5.9:*:*:*:*:*:*:*

OR cpe:/a:oracle:mysql:5.5.7:*:*:*:*:*:*:*

OR cpe:/a:oracle:mysql:5.5.6:*:*:*:*:*:*:*

OR cpe:/a:oracle:mysql:5.5.23:*:*:*:*:*:*:*

OR cpe:/a:oracle:mysql:5.5.22:*:*:*:*:*:*:*

OR cpe:/a:oracle:mysql:5.1.62:*:*:*:*:*:*:*

OR cpe:/a:oracle:mysql:5.1.64:*:*:*:*:*:*:*

OR cpe:/a:oracle:mysql:5.1.63:*:*:*:*:*:*:*

OR cpe:/a:oracle:mysql:5.5.26:*:*:*:*:*:*:*

OR cpe:/a:oracle:mysql:5.5.24:*:*:*:*:*:*:*

OR cpe:/a:oracle:mysql:5.5.25:a:*:*:*:*:*:*

OR cpe:/a:oracle:mysql:5.5.25:*:*:*:*:*:*:*

OR cpe:/a:oracle:mysql:5.1.65:*:*:*:*:*:*:*

OR cpe:/a:oracle:mysql:5.5.27:*:*:*:*:*:*:*

AND

cpe:/o:redhat:enterprise_linux:6:*:server:*:*:*:*:*

OR cpe:/o:redhat:enterprise_linux:6:*:workstation:*:*:*:*:*

OR cpe:/o:redhat:enterprise_linux_desktop:6:*:*:*:*:*:*:*

OR cpe:/o:redhat:enterprise_linux_hpc_node:6:*:*:*:*:*:*:*

Denotes that component is vulnerable

Oval Definitions

Definition ID	Class	Title	Last Modified
oval:org.mitre.oval:def:17999	P	USN-1621-1 -- mysql-5.1, mysql-5.5, mysql-dfsg-5.1 vulnerabilities	2014-06-30
oval:org.mitre.oval:def:18423	P	DSA-2581-1 mysql-5.1 - several	2014-06-23
oval:org.mitre.oval:def:23931	P	ELSA-2012:1462: mysql security update (Important)	2014-05-26
oval:org.mitre.oval:def:21643	P	RHSA-2012:1462: mysql security update (Important)	2014-02-24
oval:com.redhat.rhsa:def:20121462	P	RHSA-2012:1462: mysql security update (Important)	2012-11-14
oval:com.ubuntu.precise:def:20123180000	V	CVE-2012-3180 on Ubuntu 12.04 LTS (precise) - medium.	2012-10-16