CVE-2012-2122 SUSE CVE security@suse.de SUSE Security Team SUSE CVE-2012-2122 Interim 1 19 2023-12-09T01:44:48Z current 2021-05-30T13:03:27Z 2023-12-09T01:44:48Z cve-database/bin/generate-cvrf-cve.pl 2020-12-27T01:00:00Z CVE-2012-2122 sql/password.c in Oracle MySQL 5.1.x before 5.1.63, 5.5.x before 5.5.24, and 5.6.x before 5.6.6, and MariaDB 5.1.x before 5.1.62, 5.2.x before 5.2.12, 5.3.x before 5.3.6, and 5.5.x before 5.5.23, when running in certain environments with certain implementations of the memcmp function, allows remote attackers to bypass authentication by repeatedly authenticating with the same incorrect password, which eventually causes a token comparison to succeed due to an improperly-checked return value. The CVRF data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0). https://lists.suse.com/pipermail/sle-security-updates/2012-August/000203.html E-Mail link for SUSE-SU-2012:0984-1 https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/BYCVMUZQEHOUY3SZ42DRCPMBFM2LJFN5/#BYCVMUZQEHOUY3SZ42DRCPMBFM2LJFN5 E-Mail link for openSUSE-SU-2012:0860-1 https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/4P3HPD5HB4XDOAXWRGBXO6VKFDABXKU2/#4P3HPD5HB4XDOAXWRGBXO6VKFDABXKU2 E-Mail link for openSUSE-SU-2012:0865-1 https://www.suse.com/support/security/rating/ SUSE Security Ratings SUSE Linux Enterprise Software Development Kit 11 SP4 SUSE Linux Enterprise Server 11 SP1-TERADATA SUSE Linux Enterprise Server 11 SP3 SUSE Linux Enterprise Server 11 SP4 SUSE Linux Enterprise Software Development Kit 11 SP4 SUSE Linux Enterprise Software Development Kit 11 SP4 libmysql55client18-32bit-5.5.43-0.7.3 libmysql55client18-5.5.43-0.7.3 libmysql55client18-x86-5.5.43-0.7.3 libmysql55client_r18-32bit-5.5.43-0.7.3 libmysql55client_r18-5.5.43-0.7.3 libmysql55client_r18-x86-5.5.43-0.7.3 libmysqlclient-devel-5.0.96-0.6.1 libmysqlclient15-32bit-5.0.96-0.4.1 libmysqlclient15-32bit-5.0.96-0.6.1 libmysqlclient15-32bit-5.0.96-0.6.20 libmysqlclient15-5.0.96-0.4.1 libmysqlclient15-5.0.96-0.6.1 libmysqlclient15-5.0.96-0.6.20 libmysqlclient15-x86-5.0.96-0.6.1 libmysqlclient15-x86-5.0.96-0.6.20 libmysqlclient_r15-32bit-5.0.96-0.6.20 libmysqlclient_r15-5.0.96-0.4.1 libmysqlclient_r15-5.0.96-0.6.1 libmysqlclient_r15-5.0.96-0.6.20 libmysqlclient_r15-x86-5.0.96-0.6.20 mysql-5.0.96-0.4.1 mysql-5.5.31-0.7.10 mysql-5.5.43-0.7.3 mysql-Max-5.0.96-0.4.1 mysql-client-5.0.96-0.4.1 mysql-client-5.5.31-0.7.10 mysql-client-5.5.43-0.7.3 mysql-tools-5.0.96-0.4.1 mysql-tools-5.5.31-0.7.10 mysql-tools-5.5.43-0.7.3 libmysqlclient15-5.0.96-0.4.1 as a component of SUSE Linux Enterprise Server 11 SP1-TERADATA libmysqlclient15-32bit-5.0.96-0.4.1 as a component of SUSE Linux Enterprise Server 11 SP1-TERADATA libmysqlclient_r15-5.0.96-0.4.1 as a component of SUSE Linux Enterprise Server 11 SP1-TERADATA mysql-5.0.96-0.4.1 as a component of SUSE Linux Enterprise Server 11 SP1-TERADATA mysql-Max-5.0.96-0.4.1 as a component of SUSE Linux Enterprise Server 11 SP1-TERADATA mysql-client-5.0.96-0.4.1 as a component of SUSE Linux Enterprise Server 11 SP1-TERADATA mysql-tools-5.0.96-0.4.1 as a component of SUSE Linux Enterprise Server 11 SP1-TERADATA libmysqlclient15-5.0.96-0.6.1 as a component of SUSE Linux Enterprise Server 11 SP3 libmysqlclient15-32bit-5.0.96-0.6.1 as a component of SUSE Linux Enterprise Server 11 SP3 libmysqlclient15-x86-5.0.96-0.6.1 as a component of SUSE Linux Enterprise Server 11 SP3 libmysqlclient_r15-5.0.96-0.6.1 as a component of SUSE Linux Enterprise Server 11 SP3 mysql-5.5.31-0.7.10 as a component of SUSE Linux Enterprise Server 11 SP3 mysql-client-5.5.31-0.7.10 as a component of SUSE Linux Enterprise Server 11 SP3 mysql-tools-5.5.31-0.7.10 as a component of SUSE Linux Enterprise Server 11 SP3 libmysql55client18-5.5.43-0.7.3 as a component of SUSE Linux Enterprise Server 11 SP4 libmysql55client18-32bit-5.5.43-0.7.3 as a component of SUSE Linux Enterprise Server 11 SP4 libmysql55client18-x86-5.5.43-0.7.3 as a component of SUSE Linux Enterprise Server 11 SP4 libmysql55client_r18-5.5.43-0.7.3 as a component of SUSE Linux Enterprise Server 11 SP4 libmysql55client_r18-32bit-5.5.43-0.7.3 as a component of SUSE Linux Enterprise Server 11 SP4 libmysql55client_r18-x86-5.5.43-0.7.3 as a component of SUSE Linux Enterprise Server 11 SP4 libmysqlclient15-5.0.96-0.6.20 as a component of SUSE Linux Enterprise Server 11 SP4 libmysqlclient15-32bit-5.0.96-0.6.20 as a component of SUSE Linux Enterprise Server 11 SP4 libmysqlclient15-x86-5.0.96-0.6.20 as a component of SUSE Linux Enterprise Server 11 SP4 libmysqlclient_r15-5.0.96-0.6.20 as a component of SUSE Linux Enterprise Server 11 SP4 mysql-5.5.43-0.7.3 as a component of SUSE Linux Enterprise Server 11 SP4 mysql-client-5.5.43-0.7.3 as a component of SUSE Linux Enterprise Server 11 SP4 mysql-tools-5.5.43-0.7.3 as a component of SUSE Linux Enterprise Server 11 SP4 libmysql55client_r18-32bit-5.5.43-0.7.3 as a component of SUSE Linux Enterprise Software Development Kit 11 SP4 libmysql55client_r18-x86-5.5.43-0.7.3 as a component of SUSE Linux Enterprise Software Development Kit 11 SP4 libmysqlclient-devel-5.0.96-0.6.1 as a component of SUSE Linux Enterprise Software Development Kit 11 SP4 libmysqlclient_r15-32bit-5.0.96-0.6.20 as a component of SUSE Linux Enterprise Software Development Kit 11 SP4 libmysqlclient_r15-x86-5.0.96-0.6.20 as a component of SUSE Linux Enterprise Software Development Kit 11 SP4 sql/password.c in Oracle MySQL 5.1.x before 5.1.63, 5.5.x before 5.5.24, and 5.6.x before 5.6.6, and MariaDB 5.1.x before 5.1.62, 5.2.x before 5.2.12, 5.3.x before 5.3.6, and 5.5.x before 5.5.23, when running in certain environments with certain implementations of the memcmp function, allows remote attackers to bypass authentication by repeatedly authenticating with the same incorrect password, which eventually causes a token comparison to succeed due to an improperly-checked return value. CVE-2012-2122 SUSE Linux Enterprise Server 11 SP1-TERADATA:libmysqlclient15-5.0.96-0.4.1 SUSE Linux Enterprise Server 11 SP1-TERADATA:libmysqlclient15-32bit-5.0.96-0.4.1 SUSE Linux Enterprise Server 11 SP1-TERADATA:libmysqlclient_r15-5.0.96-0.4.1 SUSE Linux Enterprise Server 11 SP1-TERADATA:mysql-5.0.96-0.4.1 SUSE Linux Enterprise Server 11 SP1-TERADATA:mysql-Max-5.0.96-0.4.1 SUSE Linux Enterprise Server 11 SP1-TERADATA:mysql-client-5.0.96-0.4.1 SUSE Linux Enterprise Server 11 SP1-TERADATA:mysql-tools-5.0.96-0.4.1 SUSE Linux Enterprise Server 11 SP3:libmysqlclient15-5.0.96-0.6.1 SUSE Linux Enterprise Server 11 SP3:libmysqlclient15-32bit-5.0.96-0.6.1 SUSE Linux Enterprise Server 11 SP3:libmysqlclient15-x86-5.0.96-0.6.1 SUSE Linux Enterprise Server 11 SP3:libmysqlclient_r15-5.0.96-0.6.1 SUSE Linux Enterprise Server 11 SP3:mysql-5.5.31-0.7.10 SUSE Linux Enterprise Server 11 SP3:mysql-client-5.5.31-0.7.10 SUSE Linux Enterprise Server 11 SP3:mysql-tools-5.5.31-0.7.10 SUSE Linux Enterprise Server 11 SP4:libmysql55client18-5.5.43-0.7.3 SUSE Linux Enterprise Server 11 SP4:libmysql55client18-32bit-5.5.43-0.7.3 SUSE Linux Enterprise Server 11 SP4:libmysql55client18-x86-5.5.43-0.7.3 SUSE Linux Enterprise Server 11 SP4:libmysql55client_r18-5.5.43-0.7.3 SUSE Linux Enterprise Server 11 SP4:libmysql55client_r18-32bit-5.5.43-0.7.3 SUSE Linux Enterprise Server 11 SP4:libmysql55client_r18-x86-5.5.43-0.7.3 SUSE Linux Enterprise Server 11 SP4:libmysqlclient15-5.0.96-0.6.20 SUSE Linux Enterprise Server 11 SP4:libmysqlclient15-32bit-5.0.96-0.6.20 SUSE Linux Enterprise Server 11 SP4:libmysqlclient15-x86-5.0.96-0.6.20 SUSE Linux Enterprise Server 11 SP4:libmysqlclient_r15-5.0.96-0.6.20 SUSE Linux Enterprise Server 11 SP4:mysql-5.5.43-0.7.3 SUSE Linux Enterprise Server 11 SP4:mysql-client-5.5.43-0.7.3 SUSE Linux Enterprise Server 11 SP4:mysql-tools-5.5.43-0.7.3 SUSE Linux Enterprise Software Development Kit 11 SP4:libmysql55client_r18-32bit-5.5.43-0.7.3 SUSE Linux Enterprise Software Development Kit 11 SP4:libmysql55client_r18-x86-5.5.43-0.7.3 SUSE Linux Enterprise Software Development Kit 11 SP4:libmysqlclient-devel-5.0.96-0.6.1 SUSE Linux Enterprise Software Development Kit 11 SP4:libmysqlclient_r15-32bit-5.0.96-0.6.20 SUSE Linux Enterprise Software Development Kit 11 SP4:libmysqlclient_r15-x86-5.0.96-0.6.20 important 5.1 AV:N/AC:H/Au:N/C:P/I:P/A:P