MySQL 5.1 < 5.1.71 Server Optimizer Denial of Service

critical Nessus Plugin ID 70461

Language:

Synopsis

The remote database server may be affected by a denial of service vulnerability.

Description

The version of MySQL 5.1 installed on the remote host is earlier than 5.1.71. It is, therefore, potentially affected by multiple denial of service vulnerabilities in the 'Server Optimizer' component.

Note: Oracle has provided a workaround to address the issue for CVE-2012-2750.

Solution

Upgrade to MySQL version 5.1.71 or later.

Plugin Details

Severity: Critical

ID: 70461

File Name: mysql_5_1_71.nasl

Version: 1.7

Type: Remote

Family: Databases

Published: 10/16/2013

Updated: 11/15/2018

Configuration: Enable paranoid mode

Supported Sensors: Frictionless Assessment Agent, Tenable Cloud Security, Tenable Self-Hosted Container Security, Nessus

Risk Information

VPR

Risk Factor: Medium

Score: 4.9

Percentile: 57.12

CVSS v2

Risk Factor: Critical

Base Score: 10

Temporal Score: 7.4

Vector: CVSS2#AV:N/AC:L/Au:N/C:C/I:C/A:C

Vulnerability Information

CPE: cpe:/a:oracle:mysql

Required KB Items: Settings/ParanoidReport

Exploit Ease: No known exploits are available

Patch Publication Date: 8/1/2013

Vulnerability Publication Date: 10/15/2013

Reference Information

CVE: CVE-2012-2750, CVE-2013-3839

BID: 63109, 63125

Detections

Analytics