Gentoo Websites Logo
Go to: Gentoo Home Documentation Forums Lists Bugs Planet Store Wiki Get Gentoo!
Bug 482852 (CVE-2013-3783) - <dev-db/mysql-5.5.32 : Unspecified vulnerability (CVE-2013-{3783,3793,3794,3801,3805,3809,3812})
Summary: <dev-db/mysql-5.5.32 : Unspecified vulnerability (CVE-2013-{3783,3793,3794,38...
Status: RESOLVED FIXED
Alias: CVE-2013-3783
Product: Gentoo Security
Classification: Unclassified
Component: Vulnerabilities (show other bugs)
Hardware: All Linux
: Normal trivial (vote)
Assignee: Gentoo Security
URL:
Whiteboard: ~3 [noglsa]
Keywords:
Depends on:
Blocks:
 
Reported: 2013-08-28 22:57 UTC by GLSAMaker/CVETool Bot
Modified: 2013-08-29 14:43 UTC (History)
1 user (show)

See Also:
Package list:
Runtime testing required: ---

Attachments
Add an attachment (proposed patch, testcase, etc.)

Note You need to log in before you can comment on or make changes to this bug.
Description GLSAMaker/CVETool Bot gentoo-dev 2013-08-28 22:57:39 UTC 
CVE-2013-3812 (http://nvd.nist.gov/nvd.cfm?cvename=CVE-2013-3812):
  Unspecified vulnerability in the MySQL Server component in Oracle MySQL
  5.5.31 and earlier and 5.6.11 and earlier allows remote authenticated users
  to affect availability via unknown vectors related to Server Replication.

CVE-2013-3809 (http://nvd.nist.gov/nvd.cfm?cvename=CVE-2013-3809):
  Unspecified vulnerability in the MySQL Server component in Oracle MySQL
  5.5.31 and earlier and 5.6.11 and earlier allows remote authenticated users
  to affect integrity via unknown vectors related to Audit Log.

CVE-2013-3805 (http://nvd.nist.gov/nvd.cfm?cvename=CVE-2013-3805):
  Unspecified vulnerability in the MySQL Server component in Oracle MySQL
  5.5.30 and earlier and 5.6.10 allows remote authenticated users to affect
  availability via unknown vectors related to Prepared Statements.

CVE-2013-3801 (http://nvd.nist.gov/nvd.cfm?cvename=CVE-2013-3801):
  Unspecified vulnerability in the MySQL Server component in Oracle MySQL
  5.5.30 and earlier and 5.6.10 allows remote authenticated users to affect
  availability via unknown vectors related to Server Options.

CVE-2013-3794 (http://nvd.nist.gov/nvd.cfm?cvename=CVE-2013-3794):
  Unspecified vulnerability in the MySQL Server component in Oracle MySQL
  5.5.30 and earlier and 5.6.10 allows remote authenticated users to affect
  availability via unknown vectors related to Server Partition.

CVE-2013-3793 (http://nvd.nist.gov/nvd.cfm?cvename=CVE-2013-3793):
  Unspecified vulnerability in the MySQL Server component in Oracle MySQL
  5.5.31 and earlier and 5.6.11 and earlier allows remote authenticated users
  to affect availability via unknown vectors related to Data Manipulation
  Language.

CVE-2013-3783 (http://nvd.nist.gov/nvd.cfm?cvename=CVE-2013-3783):
  Unspecified vulnerability in the MySQL Server component in Oracle MySQL
  5.5.31 and earlier allows remote authenticated users to affect availability
  via unknown vectors related to Server Parser.


Filing this just to keep track, since it does affect us but we won't be releasing a GLSA since 5.5 isn't stable yet. Will close when affected versions are gone from tree.
Comment 1 Agostino Sarubbo gentoo-dev 2013-08-29 14:43:05 UTC 
Vulnerable ebuilds removed, acked by jmbsvicetto.

Closing as noglsa.