All vulnerabilities

Servers and applications

CVE-2012-1705

Unspecified vulnerability in the Server component in Oracle MySQL 5.1.66 and earlier and 5.5.28 and earlier allows remote authenticated users to affect availability via unknown vectors related to Server Optimizer.

Severity: Medium 4.0
Published: 17 Jan 2013
Last changed: 16 Jun 2026
Added to UpHeron: 17 Oct 2026
Fixed in: 5.1.67, 5.2.14, 5.3.12, 5.5.29
Exploit chance: 2.6% in the next 30 daysHigher than 85% of CVEs. EPSS by FIRST, 12 Nov 2026
Attack: Over the network · Needs a login
Attacker can: Slow it down
CVSS vector: AV:N/AC:L/Au:S/C:N/I:N/A:P
Sources: NVD

Affected software

Software	Affected versions
MariaDBServers and applications · `cpe:a:mariadb:mariadb`	From 5.1.0 before 5.1.67 From 5.2.0 before 5.2.14 From 5.3.0 before 5.3.12 From 5.5.0 before 5.5.29 Version 10.0.0
MySQLServers and applications · `cpe:a:oracle:mysql`	From 5.1.0 up to 5.1.66 From 5.5.0 up to 5.5.28

References

NVD https://nvd.nist.gov/vuln/detail/CVE-2012-1705
CVE.org https://www.cve.org/CVERecord?id=CVE-2012-1705