Bug 896060 (CVE-2012-5060) - CVE-2012-5060 mysql: unspecified DoS vulnerability related to GIS (CPU Jan 2013)
Summary: CVE-2012-5060 mysql: unspecified DoS vulnerability related to GIS (CPU Jan 2013)
Keywords:
Status: CLOSED ERRATA
Alias: CVE-2012-5060
Product: Security Response
Classification: Other
Component: vulnerability
Version: unspecified
Hardware: All
OS: Linux
medium
medium
Target Milestone: ---
Assignee: Red Hat Product Security
QA Contact:
URL:
Whiteboard:
Depends On:
Blocks: mysql-cpu-2013-01 895572
TreeView+ depends on / blocked
 
Reported: 2013-01-16 14:52 UTC by Jan Lieskovsky
Modified: 2019-09-29 12:59 UTC (History)
2 users (show)

Fixed In Version: mysql 5.1.66, mysql 5.5.28
Clone Of:
Environment:
Last Closed: 2016-06-10 20:22:52 UTC
Embargoed:

Attachments (Terms of Use)

Description Jan Lieskovsky 2013-01-16 14:52:01 UTC 
An unspecified vulnerability in the GIS extension subcomponent of the MySQL protocol component of the Oracle MySQL server allows remote authenticated attackers to alter availability via unspecified vectors.

References:
[1] http://www.oracle.com/technetwork/topics/security/cpujan2013-1515902.html
Comment 2 Tomas Hoger 2013-01-17 20:30:14 UTC 
According to Oracle CPU data, this issue affected "5.1.65 and earlier, 5.5.27 and earlier", hence it should be fixed in 5.1.66.  MySQL packages in Red Hat Enterprise Linux 6 were updated to 5.1.66 via RHSA-2012:1462:

https://rhn.redhat.com/errata/RHSA-2012-1462.html
Note You need to log in before you can comment on or make changes to this bug.