Bug 411503 – <dev-db/mysql-5.1.62-r1: Two Unspecified Vulnerabilities (CVE-2012-2102)

• Status: RESOLVED FIXED
• Product: Gentoo Security

[Description Agostino Sarubbo 2012-04-10 18:34:56 UTC]

From secunia security advisory at $URL:

Description
Two vulnerabilities with unknown impacts have been reported in Oracle MySQL Server.

The vulnerabilities are caused due to unspecified errors. No further information is currently available.

The vulnerabilities are reported in versions prior to 5.5.22.


Solution
Update to version 5.5.22.

Original Advisory
http://dev.mysql.com/doc/refman/5.5/en/news-5-5-22.html

[Comment 1 Agostino Sarubbo 2012-04-10 18:36:34 UTC]

@mysql team:

The advisory does not mention much, can you check if our version is affected or not?

[Comment 2 Tim Sammut (RETIRED) 2012-04-14 06:01:33 UTC]

CVE assignment and more info in http://www.openwall.com/lists/oss-security/2012/04/13/7.

[Comment 3 GLSAMaker/CVETool Bot 2012-08-17 11:54:33 UTC]

CVE-2012-2102 (http://nvd.nist.gov/nvd.cfm?cvename=CVE-2012-2102):
  MySQL 5.1.x before 5.1.62 and 5.5.x before 5.5.22 allows remote
  authenticated users to cause a denial of service (assertion failure and
  mysqld abort) by deleting a record and using HANDLER READ NEXT.

[Comment 4 GLSAMaker/CVETool Bot 2013-08-29 09:11:51 UTC]

This issue was resolved and addressed in
 GLSA 201308-06 at http://security.gentoo.org/glsa/glsa-201308-06.xml
by GLSA coordinator Sergey Popov (pinkbyte).