CVE-2012-3158
Unspecified vulnerability in the MySQL Server component in Oracle MySQL 5.1.64 and earlier, and 5...
7.5 HighFix available
Unspecified vulnerability in the MySQL Server component in Oracle MySQL 5.1.64 and earlier, and 5.5.26 and earlier, allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Protocol.
Exploit likelihood
4.54%Up 2.4 points since Feb 4, 2022
What each source reports
NVD Score used
Unspecified vulnerability in the MySQL Server component in Oracle MySQL 5.1.64 and earlier, and 5.5.26 and earlier, allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Protocol.
- Record
CVE-2012-3158- CVSS 2.0
- 7.5 High
AV:N/AC:L/Au:N/C:P/I:P/A:P - Updated
- 2026-11-02
CVE List No score
Unspecified vulnerability in the MySQL Server component in Oracle MySQL 5.1.64 and earlier, and 5.5.26 and earlier, allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Protocol.
- Record
CVE-2012-3158- Updated
- 2026-11-02
EUVDEUVD-2012-3136 No score
Unspecified vulnerability in the MySQL Server component in Oracle MySQL 5.1.64 and earlier, and 5.5.26 and earlier, allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Protocol.
- Record
EUVD-2012-3136- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-cw5v-74xv-hcxg No score
Unspecified vulnerability in the MySQL Server component in Oracle MySQL 5.1.64 and earlier, and 5...
Unspecified vulnerability in the MySQL Server component in Oracle MySQL 5.1.64 and earlier, and 5.5.26 and earlier, allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Protocol.
- Record
GHSA-cw5v-74xv-hcxg- Updated
- 2026-11-02
Affected products
Affected packages
| Package | Affected | Fixed |
|---|---|---|
mysql-5.1Debian:6.0 |
before 5.1.66-0+squeeze1, plus listed versions 5.1.49-35.1.50-15.1.51-15.1.53-15.1.54-1 Show 17 moreShow less5.1.54-25.1.55-15.1.56-15.1.57-15.1.57-1.15.1.57-1.25.1.57-1.35.1.57-25.1.57-35.1.57-3.15.1.58-15.1.61-0+squeeze15.1.61-25.1.61-35.1.62-15.1.62-1+m68k5.1.63-0+squeeze1 |
5.1.66-0+squeeze1 |
mysqlRed Hat:enterprise_linux:6::client |
before 0:5.1.66-1.el6_3 | 0:5.1.66-1.el6_3 |
mysql-debuginfoRed Hat:enterprise_linux:6::client |
before 0:5.1.66-1.el6_3 | 0:5.1.66-1.el6_3 |
mysql-libsRed Hat:enterprise_linux:6::client |
before 0:5.1.66-1.el6_3 | 0:5.1.66-1.el6_3 |
mysql-serverRed Hat:enterprise_linux:6::client |
before 0:5.1.66-1.el6_3 | 0:5.1.66-1.el6_3 |
mysql-benchRed Hat:enterprise_linux:6::client |
before 0:5.1.66-1.el6_3 | 0:5.1.66-1.el6_3 |
mysql-develRed Hat:enterprise_linux:6::client |
before 0:5.1.66-1.el6_3 | 0:5.1.66-1.el6_3 |
mysql-embeddedRed Hat:enterprise_linux:6::client |
before 0:5.1.66-1.el6_3 | 0:5.1.66-1.el6_3 |
mysql-embedded-develRed Hat:enterprise_linux:6::client |
before 0:5.1.66-1.el6_3 | 0:5.1.66-1.el6_3 |
mysql-testRed Hat:enterprise_linux:6::client |
before 0:5.1.66-1.el6_3 | 0:5.1.66-1.el6_3 |
Show 27 moreShow less
| Package | Affected | Fixed |
|---|---|---|
mysqlRed Hat:enterprise_linux:6::computenode |
before 0:5.1.66-1.el6_3 | 0:5.1.66-1.el6_3 |
mysql-debuginfoRed Hat:enterprise_linux:6::computenode |
before 0:5.1.66-1.el6_3 | 0:5.1.66-1.el6_3 |
mysql-libsRed Hat:enterprise_linux:6::computenode |
before 0:5.1.66-1.el6_3 | 0:5.1.66-1.el6_3 |
mysql-benchRed Hat:enterprise_linux:6::computenode |
before 0:5.1.66-1.el6_3 | 0:5.1.66-1.el6_3 |
mysql-develRed Hat:enterprise_linux:6::computenode |
before 0:5.1.66-1.el6_3 | 0:5.1.66-1.el6_3 |
mysql-embeddedRed Hat:enterprise_linux:6::computenode |
before 0:5.1.66-1.el6_3 | 0:5.1.66-1.el6_3 |
mysql-embedded-develRed Hat:enterprise_linux:6::computenode |
before 0:5.1.66-1.el6_3 | 0:5.1.66-1.el6_3 |
mysql-serverRed Hat:enterprise_linux:6::computenode |
before 0:5.1.66-1.el6_3 | 0:5.1.66-1.el6_3 |
mysql-testRed Hat:enterprise_linux:6::computenode |
before 0:5.1.66-1.el6_3 | 0:5.1.66-1.el6_3 |
mysqlRed Hat:enterprise_linux:6::server |
before 0:5.1.66-1.el6_3 | 0:5.1.66-1.el6_3 |
mysql-benchRed Hat:enterprise_linux:6::server |
before 0:5.1.66-1.el6_3 | 0:5.1.66-1.el6_3 |
mysql-debuginfoRed Hat:enterprise_linux:6::server |
before 0:5.1.66-1.el6_3 | 0:5.1.66-1.el6_3 |
mysql-develRed Hat:enterprise_linux:6::server |
before 0:5.1.66-1.el6_3 | 0:5.1.66-1.el6_3 |
mysql-libsRed Hat:enterprise_linux:6::server |
before 0:5.1.66-1.el6_3 | 0:5.1.66-1.el6_3 |
mysql-serverRed Hat:enterprise_linux:6::server |
before 0:5.1.66-1.el6_3 | 0:5.1.66-1.el6_3 |
mysql-testRed Hat:enterprise_linux:6::server |
before 0:5.1.66-1.el6_3 | 0:5.1.66-1.el6_3 |
mysql-embeddedRed Hat:enterprise_linux:6::server |
before 0:5.1.66-1.el6_3 | 0:5.1.66-1.el6_3 |
mysql-embedded-develRed Hat:enterprise_linux:6::server |
before 0:5.1.66-1.el6_3 | 0:5.1.66-1.el6_3 |
mysqlRed Hat:enterprise_linux:6::workstation |
before 0:5.1.66-1.el6_3 | 0:5.1.66-1.el6_3 |
mysql-benchRed Hat:enterprise_linux:6::workstation |
before 0:5.1.66-1.el6_3 | 0:5.1.66-1.el6_3 |
mysql-debuginfoRed Hat:enterprise_linux:6::workstation |
before 0:5.1.66-1.el6_3 | 0:5.1.66-1.el6_3 |
mysql-develRed Hat:enterprise_linux:6::workstation |
before 0:5.1.66-1.el6_3 | 0:5.1.66-1.el6_3 |
mysql-libsRed Hat:enterprise_linux:6::workstation |
before 0:5.1.66-1.el6_3 | 0:5.1.66-1.el6_3 |
mysql-serverRed Hat:enterprise_linux:6::workstation |
before 0:5.1.66-1.el6_3 | 0:5.1.66-1.el6_3 |
mysql-testRed Hat:enterprise_linux:6::workstation |
before 0:5.1.66-1.el6_3 | 0:5.1.66-1.el6_3 |
mysql-embeddedRed Hat:enterprise_linux:6::workstation |
before 0:5.1.66-1.el6_3 | 0:5.1.66-1.el6_3 |
mysql-embedded-develRed Hat:enterprise_linux:6::workstation |
before 0:5.1.66-1.el6_3 | 0:5.1.66-1.el6_3 |
History
| Recorded | Changed | Sources |
|---|---|---|
| aliases | EUVD | |
| first indexed | CVE List, GitHub Advisories, NVD, OSV |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2012-3158 is a high vulnerability (CVSS 7.5) in Oracle Mysql, published October 16, 2012. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 4.54%, the 91st percentile. Fixed in mysql-5.1 5.1.66-0+squeeze1.
References
secunia.com/advisories/51177
rhn.redhat.com/errata/RHSA-2012-1462.html
mandriva.com/security/advisories?name=MDVSA-2013:102
security.gentoo.org/glsa/glsa-201308-06.xml
debian.org/security/2012/dsa-2581
Show 88 moreShow less
oracle.com/technetwork/topics/security/cpuoct2012-1515893.html
exchange.xforce.ibmcloud.com/vulnerabilities/79382
ubuntu.com/usn/USN-1621-1
nvd.nist.gov/vuln/detail/CVE-2012-3158
github.com/advisories/GHSA-cw5v-74xv-hcxg
access.redhat.com/errata/RHSA-2012:1462
dev.mysql.com/doc/refman/5.1/en/news-5-1-62.html
bugzilla.redhat.com/show_bug.cgi?id=814285
security.access.redhat.com/data/csaf/v2/advisories/2012/rhsa-2012_1462.json
cve.org/CVERecord?id=CVE-2012-0540