{"dataType": "CVE_RECORD", "containers": {"adp": [{"metrics": [{"cvssV2_0": {"version": "2.0", "baseScore": 3.5, "accessVector": "NETWORK", "vectorString": "AV:N/AC:M/Au:S/C:N/I:N/A:P", "authentication": "SINGLE", "integrityImpact": "NONE", "accessComplexity": "MEDIUM", "availabilityImpact": "PARTIAL", "confidentialityImpact": "NONE"}}, {"other": {"type": "Unknown", "content": {"data": "{\"description\":\"IMPORTANT\"}"}}}], "affected": [{"vendor": "oraclelinux", "product": "mysql", "versions": [{"status": "affected", "version": "0", "lessThan": "0:5.1.66-1.el6_3", "versionType": "rpm"}], "platforms": ["cpe:/o:oracle:linux:6"], "defaultStatus": "unaffected"}, {"vendor": "oraclelinux", "product": "mysql-bench", "versions": [{"status": "affected", "version": "0", "lessThan": "0:5.1.66-1.el6_3", "versionType": "rpm"}], "platforms": ["cpe:/o:oracle:linux:6"], "defaultStatus": "unaffected"}, {"vendor": "oraclelinux", "product": "mysql-devel", "versions": [{"status": "affected", "version": "0", "lessThan": "0:5.1.66-1.el6_3", "versionType": "rpm"}], "platforms": ["cpe:/o:oracle:linux:6"], "defaultStatus": "unaffected"}, {"vendor": "oraclelinux", "product": "mysql-embedded", "versions": [{"status": "affected", "version": "0", "lessThan": "0:5.1.66-1.el6_3", "versionType": "rpm"}], "platforms": ["cpe:/o:oracle:linux:6"], "defaultStatus": "unaffected"}, {"vendor": "oraclelinux", "product": "mysql-embedded-devel", "versions": [{"status": "affected", "version": "0", "lessThan": "0:5.1.66-1.el6_3", "versionType": "rpm"}], "platforms": ["cpe:/o:oracle:linux:6"], "defaultStatus": "unaffected"}, {"vendor": "oraclelinux", "product": "mysql-libs", "versions": [{"status": "affected", "version": "0", "lessThan": "0:5.1.66-1.el6_3", "versionType": "rpm"}], "platforms": ["cpe:/o:oracle:linux:6"], "defaultStatus": "unaffected"}, {"vendor": "oraclelinux", "product": "mysql-server", "versions": [{"status": "affected", "version": "0", "lessThan": "0:5.1.66-1.el6_3", "versionType": "rpm"}], "platforms": ["cpe:/o:oracle:linux:6"], "defaultStatus": "unaffected"}, {"vendor": "oraclelinux", "product": "mysql-test", "versions": [{"status": "affected", "version": "0", "lessThan": "0:5.1.66-1.el6_3", "versionType": "rpm"}], "platforms": ["cpe:/o:oracle:linux:6"], "defaultStatus": "unaffected"}], "references": [{"url": "https://linux.oracle.com/cve/CVE-2012-3197.html"}], "descriptions": [{"lang": "en", "value": "Unspecified vulnerability in the MySQL Server component in Oracle MySQL 5.1.64 and earlier, and 5.5.26 and earlier, allows remote authenticated users to affect availability via unknown vectors related to Server Replication."}], "providerMetadata": {"orgId": "00000000-0000-4000-A000-000000000006", "shortName": "oraclelinux", "dateUpdated": "2012-11-14T00:00:00Z", "x_subShortName": "oraclelinux"}}, {"metrics": [{"cvssV2_0": {"version": "2.0", "baseScore": 3.5, "accessVector": "NETWORK", "vectorString": "AV:N/AC:M/Au:S/C:N/I:N/A:P", "authentication": "SINGLE", "integrityImpact": "NONE", "accessComplexity": "MEDIUM", "availabilityImpact": "PARTIAL", "confidentialityImpact": "NONE"}}, {"other": {"type": "Unknown", "content": {"data": "{\"description\":\"Important\"}"}}}], "affected": [{"vendor": "redhat", "product": "mysql", "versions": [{"status": "affected", "version": "0", "lessThan": "0:5.1.66-1.el6_3", "versionType": "rpm"}], "platforms": ["cpe:/o:redhat:enterprise_linux:6"], "defaultStatus": "unaffected"}, {"vendor": "redhat", "product": "mysql-bench", "versions": [{"status": "affected", "version": "0", "lessThan": "0:5.1.66-1.el6_3", "versionType": "rpm"}], "platforms": ["cpe:/o:redhat:enterprise_linux:6"], "defaultStatus": "unaffected"}, {"vendor": "redhat", "product": "mysql-devel", "versions": [{"status": "affected", "version": "0", "lessThan": "0:5.1.66-1.el6_3", "versionType": "rpm"}], "platforms": ["cpe:/o:redhat:enterprise_linux:6"], "defaultStatus": "unaffected"}, {"vendor": "redhat", "product": "mysql-embedded", "versions": [{"status": "affected", "version": "0", "lessThan": "0:5.1.66-1.el6_3", "versionType": "rpm"}], "platforms": ["cpe:/o:redhat:enterprise_linux:6"], "defaultStatus": "unaffected"}, {"vendor": "redhat", "product": "mysql-embedded-devel", "versions": [{"status": "affected", "version": "0", "lessThan": "0:5.1.66-1.el6_3", "versionType": "rpm"}], "platforms": ["cpe:/o:redhat:enterprise_linux:6"], "defaultStatus": "unaffected"}, {"vendor": "redhat", "product": "mysql-libs", "versions": [{"status": "affected", "version": "0", "lessThan": "0:5.1.66-1.el6_3", "versionType": "rpm"}], "platforms": ["cpe:/o:redhat:enterprise_linux:6"], "defaultStatus": "unaffected"}, {"vendor": "redhat", "product": "mysql-server", "versions": [{"status": "affected", "version": "0", "lessThan": "0:5.1.66-1.el6_3", "versionType": "rpm"}], "platforms": ["cpe:/o:redhat:enterprise_linux:6"], "defaultStatus": "unaffected"}, {"vendor": "redhat", "product": "mysql-test", "versions": [{"status": "affected", "version": "0", "lessThan": "0:5.1.66-1.el6_3", "versionType": "rpm"}], "platforms": ["cpe:/o:redhat:enterprise_linux:6"], "defaultStatus": "unaffected"}], "references": [{"url": "https://access.redhat.com/errata/RHSA-2012:1462"}, {"url": "https://access.redhat.com/security/cve/CVE-2012-3197"}], "descriptions": [{"lang": "en", "value": "MySQL is a multi-user, multi-threaded SQL database server. It consists of\nthe MySQL server daemon (mysqld) and many client programs and libraries.\n\nThis update fixes several vulnerabilities in the MySQL database server.\nInformation about these flaws can be found on the Oracle Critical Patch\nUpdate Advisory pages, listed in the References section. (CVE-2012-1688,\nCVE-2012-1690, CVE-2012-1703, CVE-2012-2749, CVE-2012-0540, CVE-2012-1689,\nCVE-2012-1734, CVE-2012-3163, CVE-2012-3158, CVE-2012-3177, CVE-2012-3166,\nCVE-2012-3173, CVE-2012-3150, CVE-2012-3180, CVE-2012-3167, CVE-2012-3197,\nCVE-2012-3160)\n\nThese updated packages upgrade MySQL to version 5.1.66. Refer to the MySQL\nrelease notes listed in the References section for a full list of changes.\n\nAll MySQL users should upgrade to these updated packages, which correct\nthese issues. After installing this update, the MySQL server daemon\n(mysqld) will be restarted automatically."}], "providerMetadata": {"orgId": "53f830b8-0a3f-465b-8143-3b8a9948e749", "shortName": "redhat", "dateUpdated": "2012-10-16T00:00:00Z", "x_subShortName": "redhat_6"}}], "cna": {"metrics": [{"format": "CVSS", "cvssV2_0": {"version": "2.0", "baseScore": 3.5, "accessVector": "NETWORK", "vectorString": "AV:N/AC:M/Au:S/C:N/I:N/A:P", "authentication": "SINGLE", "integrityImpact": "NONE", "accessComplexity": "MEDIUM", "availabilityImpact": "PARTIAL", "confidentialityImpact": "NONE"}}], "affected": [{"cpes": ["cpe:2.3:a:mariadb:mariadb:*:*:*:*:*:*:*:*"], "vendor": "mariadb", "product": "mariadb", "versions": [{"status": "affected", "version": "5.1.0", "lessThan": "5.1.66", "versionType": "custom"}, {"status": "affected", "version": "5.5.0", "lessThan": "5.5.27", "versionType": "custom"}], "defaultStatus": "unaffected"}, {"cpes": ["cpe:2.3:a:oracle:mysql:*:*:*:*:*:*:*:*"], "vendor": "oracle", "product": "mysql", "versions": [{"status": "affected", "version": "5.1.0", "versionType": "custom", "lessThanOrEqual": "5.1.64"}, {"status": "affected", "version": "5.5.0", "versionType": "custom", "lessThanOrEqual": "5.5.26"}], "defaultStatus": "unaffected"}, {"cpes": ["cpe:2.3:o:canonical:ubuntu_linux:10.04:*:*:*:-:*:*:*", "cpe:2.3:o:canonical:ubuntu_linux:11.10:*:*:*:*:*:*:*", "cpe:2.3:o:canonical:ubuntu_linux:12.04:*:*:*:-:*:*:*", "cpe:2.3:o:canonical:ubuntu_linux:12.10:*:*:*:*:*:*:*"], "vendor": "canonical", "product": "ubuntu_linux", "versions": [{"status": "affected", "version": "10.04"}, {"status": "affected", "version": "11.10"}, {"status": "affected", "version": "12.04"}, {"status": "affected", "version": "12.10"}], "defaultStatus": "unaffected"}, {"cpes": ["cpe:2.3:o:debian:debian_linux:6.0:*:*:*:*:*:*:*", "cpe:2.3:o:debian:debian_linux:7.0:*:*:*:*:*:*:*"], "vendor": "debian", "product": "debian_linux", "versions": [{"status": "affected", "version": "6.0"}, {"status": "affected", "version": "7.0"}], "defaultStatus": "unaffected"}, {"cpes": ["cpe:2.3:o:redhat:enterprise_linux_desktop:6.0:*:*:*:*:*:*:*"], "vendor": "redhat", "product": "enterprise_linux_desktop", "versions": [{"status": "affected", "version": "6.0"}], "defaultStatus": "unaffected"}, {"cpes": ["cpe:2.3:o:redhat:enterprise_linux_eus:6.3:*:*:*:*:*:*:*"], "vendor": "redhat", "product": "enterprise_linux_eus", "versions": [{"status": "affected", "version": "6.3"}], "defaultStatus": "unaffected"}, {"cpes": ["cpe:2.3:o:redhat:enterprise_linux_server:6.0:*:*:*:*:*:*:*"], "vendor": "redhat", "product": "enterprise_linux_server", "versions": [{"status": "affected", "version": "6.0"}], "defaultStatus": "unaffected"}, {"cpes": ["cpe:2.3:o:redhat:enterprise_linux_workstation:6.0:*:*:*:*:*:*:*"], "vendor": "redhat", "product": "enterprise_linux_workstation", "versions": [{"status": "affected", "version": "6.0"}], "defaultStatus": "unaffected"}], "references": [{"url": "http://www.mandriva.com/security/advisories?name=MDVSA-2013:150", "tags": ["broken-link"]}, {"url": "http://secunia.com/advisories/51177", "tags": ["not-applicable"]}, {"url": "http://secunia.com/advisories/51309", "tags": ["not-applicable"]}, {"url": "http://secunia.com/advisories/53372", "tags": ["not-applicable"]}, {"url": "http://www.oracle.com/technetwork/topics/security/cpuoct2012-1515893.html", "tags": ["patch", "vendor-advisory"]}, {"url": "http://rhn.redhat.com/errata/RHSA-2012-1462.html", "tags": ["third-party-advisory"]}, {"url": "http://security.gentoo.org/glsa/glsa-201308-06.xml", "tags": ["third-party-advisory"]}, {"url": "http://www.debian.org/security/2012/dsa-2581", "tags": ["third-party-advisory"]}, {"url": "http://www.ubuntu.com/usn/USN-1621-1", "tags": ["third-party-advisory"]}, {"url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/79393", "tags": ["third-party-advisory", "vdb-entry"]}], "descriptions": [{"lang": "en", "value": "Unspecified vulnerability in the MySQL Server component in Oracle MySQL 5.1.64 and earlier, and 5.5.26 and earlier, allows remote authenticated users to affect availability via unknown vectors related to Server Replication."}, {"lang": "es", "value": "Vulnerabilidad no especificada en el componente de MySQL Server en Oracle MySQL v5.1.64 y anteriores, y v5.5.26 y anteriores, permite a usuarios autenticados remotamente afectar a la disponibilidad a través de vectores desconocidos relacionados con Server Replication."}], "problemTypes": [{"descriptions": [{"lang": "en", "description": "NVD-CWE-noinfo"}]}], "providerMetadata": {"orgId": "00000000-0000-4000-A000-000000000003", "shortName": "nvd", "dateUpdated": "2012-10-17T00:55:02Z", "x_subShortName": "nvd"}}}, "cveMetadata": {"cveId": "CVE-2012-3197", "state": "PUBLISHED", "dateUpdated": "2025-04-11T00:51:21Z", "assignerOrgId": "43595867-4340-4103-b7a2-9a5208d29a85", "datePublished": "2012-10-17T00:55:02Z", "assignerShortName": "oracle"}, "dataVersion": "5.0"}