Servers and applications
CVE-2012-3158
Unspecified vulnerability in the MySQL Server component in Oracle MySQL 5.1.64 and earlier, and 5.5.26 and earlier, allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Protocol.
- Severity
- High 7.5
- Published
- 16 Oct 2012
- Last changed
- 16 Jun 2026
- Added to UpHeron
- 17 Oct 2026
- Fixed in
- 5.1.66, 5.5.27
- Exploit chance
- 4.5% in the next 30 daysHigher than 91% of CVEs. EPSS by FIRST, 12 Nov 2026
- Attack
- Over the network · No login needed
- Attacker can
- Read some data · Change some data · Slow it down
- CVSS vector
AV:N/AC:L/Au:N/C:P/I:P/A:P- Sources
- NVD
Affected software
| Software | Affected versions |
|---|---|
MariaDBServers and applications · cpe:a:mariadb:mariadb |
|
MySQLServers and applications · cpe:a:oracle:mysql |
|