CVE-2012-0882
Buffer overflow in yaSSL, as used in MySQL 5.5.20 and possibly other versions including 5.5.x...
CVE-2012-0882 is a high vulnerability (CVSS 7.5) in Mysql, published December 21, 2012. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 5.30%, the 92nd percentile. No source names a fixed version.
Buffer overflow in yaSSL, as used in MySQL 5.5.20 and possibly other versions including 5.5.x before 5.5.22 and 5.1.x before 5.1.62, allows remote attackers to execute arbitrary code via unspecified vectors, as demonstrated by VulnDisco Pack Professional 9.17. NOTE: as of 20120224, this disclosure has no actionable information. However, because the module author is a reliable researcher, the issue is being assigned a CVE identifier for tracking purposes. NOTE: due to lack of details, it is not clear whether this issue is a duplicate of CVE-2012-0492 or another CVE.
Exploit likelihood
What each source reports
NVD Score used
7.5
Buffer overflow in yaSSL, as used in MySQL 5.5.20 and possibly other versions including 5.5.x before 5.5.22 and 5.1.x before 5.1.62, allows remote attackers to execute arbitrary code via unspecified vectors, as demonstrated by VulnDisco Pack Professional 9.17. NOTE: as of 20120224, this disclosure has no actionable information. However, because the module author is a reliable researcher, the issue is being assigned a CVE identifier for tracking purposes. NOTE: due to lack of details, it is not clear whether this issue is a duplicate of CVE-2012-0492 or another CVE.
- Record
CVE-2012-0882- CVSS 2.0
- 7.5 High
AV:N/AC:L/Au:N/C:P/I:P/A:P - Weakness
- CWE-119
- Updated
- 2026-11-02
CVE List No score
Buffer overflow in yaSSL, as used in MySQL 5.5.20 and possibly other versions including 5.5.x before 5.5.22 and 5.1.x before 5.1.62, allows remote attackers to execute arbitrary code via unspecified vectors, as demonstrated by VulnDisco Pack Professional 9.17. NOTE: as of 20120224, this disclosure has no actionable information. However, because the module author is a reliable researcher, the issue is being assigned a CVE identifier for tracking purposes. NOTE: due to lack of details, it is not clear whether this issue is a duplicate of CVE-2012-0492 or another CVE.
- Record
CVE-2012-0882- Updated
- 2026-11-02
EUVDEUVD-2012-0905 No score
Buffer overflow in yaSSL, as used in MySQL 5.5.20 and possibly other versions including 5.5.x before 5.5.22 and 5.1.x before 5.1.62, allows remote attackers to execute arbitrary code via unspecified vectors, as demonstrated by VulnDisco Pack Professional 9.17. NOTE: as of 20120224, this disclosure has no actionable information. However, because the module author is a reliable researcher, the issue is being assigned a CVE identifier for tracking purposes. NOTE: due to lack of details, it is not clear whether this issue is a duplicate of CVE-2012-0492 or another CVE.
- Record
EUVD-2012-0905- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-w3hv-rp5r-hr2c No score
Buffer overflow in yaSSL, as used in MySQL 5.5.20 and possibly other versions including 5.5.x...
Buffer overflow in yaSSL, as used in MySQL 5.5.20 and possibly other versions including 5.5.x before 5.5.22 and 5.1.x before 5.1.62, allows remote attackers to execute arbitrary code via unspecified vectors, as demonstrated by VulnDisco Pack Professional 9.17. NOTE: as of 20120224, this disclosure has no actionable information. However, because the module author is a reliable researcher, the issue is being assigned a CVE identifier for tracking purposes. NOTE: due to lack of details, it is not clear whether this issue is a duplicate of CVE-2012-0492 or another CVE.
- Record
GHSA-w3hv-rp5r-hr2c- Weakness
- CWE-119
- Updated
- 2026-11-02
OSVBELL-CVE-2012-0882
7.5
CVE-2012-0882 does not affect BellSoft software
- Record
BELL-CVE-2012-0882- CVSS 2.0
- 7.5 High
AV:N/AC:L/Au:N/C:P/I:P/A:P - Updated
- 2026-11-02
Affected products
History
| When | Changed | Sources |
|---|---|---|
| 2026-11-03 | aliases | EUVD |
| 2026-11-02 | created | CVE List, GitHub Advisories, NVD, OSV |
References
lists.immunityinc.com/pipermail/canvas/2012-February/000014.html
lists.immunityinc.com/pipermail/canvas/2012-February/000011.html
bugzilla.redhat.com/show_bug.cgi?id=789141
openwall.com/lists/oss-security/2012/02/24/2
blogs.oracle.com/sunsecurity/entry/cve_2012_0882buffer_overflow_vulnerability
nvd.nist.gov/vuln/detail/CVE-2012-0882
github.com/advisories/GHSA-w3hv-rp5r-hr2c
docs.bell-sw.com/security/cves/CVE-2012-0882