CVE-2012-3167
Unspecified vulnerability in the MySQL Server component in Oracle MySQL 5.1.63 and earlier, and 5...
3.5 LowFix available
Unspecified vulnerability in the MySQL Server component in Oracle MySQL 5.1.63 and earlier, and 5.5.25 and earlier, allows remote authenticated users to affect availability via unknown vectors related to Server Full Text Search.
Exploit likelihood
2.71%Up 0.9 points since Feb 4, 2022
What each source reports
NVD Score used
Unspecified vulnerability in the MySQL Server component in Oracle MySQL 5.1.63 and earlier, and 5.5.25 and earlier, allows remote authenticated users to affect availability via unknown vectors related to Server Full Text Search.
- Record
CVE-2012-3167- CVSS 2.0
- 3.5 Low
AV:N/AC:M/Au:S/C:N/I:N/A:P - Updated
- 2026-11-02
CVE List No score
Unspecified vulnerability in the MySQL Server component in Oracle MySQL 5.1.63 and earlier, and 5.5.25 and earlier, allows remote authenticated users to affect availability via unknown vectors related to Server Full Text Search.
- Record
CVE-2012-3167- Updated
- 2026-11-02
EUVDEUVD-2012-3145 No score
Unspecified vulnerability in the MySQL Server component in Oracle MySQL 5.1.63 and earlier, and 5.5.25 and earlier, allows remote authenticated users to affect availability via unknown vectors related to Server Full Text Search.
- Record
EUVD-2012-3145- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-73x7-jf69-95mv No score
Unspecified vulnerability in the MySQL Server component in Oracle MySQL 5.1.63 and earlier, and 5...
Unspecified vulnerability in the MySQL Server component in Oracle MySQL 5.1.63 and earlier, and 5.5.25 and earlier, allows remote authenticated users to affect availability via unknown vectors related to Server Full Text Search.
- Record
GHSA-73x7-jf69-95mv- Updated
- 2026-11-02
Affected products
Affected packages
| Package | Affected | Fixed |
|---|---|---|
mysql-5.1Debian:6.0 |
before 5.1.66-0+squeeze1, plus listed versions 5.1.49-35.1.50-15.1.51-15.1.53-15.1.54-1 Show 17 moreShow less5.1.54-25.1.55-15.1.56-15.1.57-15.1.57-1.15.1.57-1.25.1.57-1.35.1.57-25.1.57-35.1.57-3.15.1.58-15.1.61-0+squeeze15.1.61-25.1.61-35.1.62-15.1.62-1+m68k5.1.63-0+squeeze1 |
5.1.66-0+squeeze1 |
mysqlRed Hat:enterprise_linux:6::client |
before 0:5.1.66-1.el6_3 | 0:5.1.66-1.el6_3 |
mysql-debuginfoRed Hat:enterprise_linux:6::client |
before 0:5.1.66-1.el6_3 | 0:5.1.66-1.el6_3 |
mysql-libsRed Hat:enterprise_linux:6::client |
before 0:5.1.66-1.el6_3 | 0:5.1.66-1.el6_3 |
mysql-serverRed Hat:enterprise_linux:6::client |
before 0:5.1.66-1.el6_3 | 0:5.1.66-1.el6_3 |
mysql-benchRed Hat:enterprise_linux:6::client |
before 0:5.1.66-1.el6_3 | 0:5.1.66-1.el6_3 |
mysql-develRed Hat:enterprise_linux:6::client |
before 0:5.1.66-1.el6_3 | 0:5.1.66-1.el6_3 |
mysql-embeddedRed Hat:enterprise_linux:6::client |
before 0:5.1.66-1.el6_3 | 0:5.1.66-1.el6_3 |
mysql-embedded-develRed Hat:enterprise_linux:6::client |
before 0:5.1.66-1.el6_3 | 0:5.1.66-1.el6_3 |
mysql-testRed Hat:enterprise_linux:6::client |
before 0:5.1.66-1.el6_3 | 0:5.1.66-1.el6_3 |
Show 27 moreShow less
| Package | Affected | Fixed |
|---|---|---|
mysqlRed Hat:enterprise_linux:6::computenode |
before 0:5.1.66-1.el6_3 | 0:5.1.66-1.el6_3 |
mysql-debuginfoRed Hat:enterprise_linux:6::computenode |
before 0:5.1.66-1.el6_3 | 0:5.1.66-1.el6_3 |
mysql-libsRed Hat:enterprise_linux:6::computenode |
before 0:5.1.66-1.el6_3 | 0:5.1.66-1.el6_3 |
mysql-benchRed Hat:enterprise_linux:6::computenode |
before 0:5.1.66-1.el6_3 | 0:5.1.66-1.el6_3 |
mysql-develRed Hat:enterprise_linux:6::computenode |
before 0:5.1.66-1.el6_3 | 0:5.1.66-1.el6_3 |
mysql-embeddedRed Hat:enterprise_linux:6::computenode |
before 0:5.1.66-1.el6_3 | 0:5.1.66-1.el6_3 |
mysql-embedded-develRed Hat:enterprise_linux:6::computenode |
before 0:5.1.66-1.el6_3 | 0:5.1.66-1.el6_3 |
mysql-serverRed Hat:enterprise_linux:6::computenode |
before 0:5.1.66-1.el6_3 | 0:5.1.66-1.el6_3 |
mysql-testRed Hat:enterprise_linux:6::computenode |
before 0:5.1.66-1.el6_3 | 0:5.1.66-1.el6_3 |
mysqlRed Hat:enterprise_linux:6::server |
before 0:5.1.66-1.el6_3 | 0:5.1.66-1.el6_3 |
mysql-benchRed Hat:enterprise_linux:6::server |
before 0:5.1.66-1.el6_3 | 0:5.1.66-1.el6_3 |
mysql-debuginfoRed Hat:enterprise_linux:6::server |
before 0:5.1.66-1.el6_3 | 0:5.1.66-1.el6_3 |
mysql-develRed Hat:enterprise_linux:6::server |
before 0:5.1.66-1.el6_3 | 0:5.1.66-1.el6_3 |
mysql-libsRed Hat:enterprise_linux:6::server |
before 0:5.1.66-1.el6_3 | 0:5.1.66-1.el6_3 |
mysql-serverRed Hat:enterprise_linux:6::server |
before 0:5.1.66-1.el6_3 | 0:5.1.66-1.el6_3 |
mysql-testRed Hat:enterprise_linux:6::server |
before 0:5.1.66-1.el6_3 | 0:5.1.66-1.el6_3 |
mysql-embeddedRed Hat:enterprise_linux:6::server |
before 0:5.1.66-1.el6_3 | 0:5.1.66-1.el6_3 |
mysql-embedded-develRed Hat:enterprise_linux:6::server |
before 0:5.1.66-1.el6_3 | 0:5.1.66-1.el6_3 |
mysqlRed Hat:enterprise_linux:6::workstation |
before 0:5.1.66-1.el6_3 | 0:5.1.66-1.el6_3 |
mysql-benchRed Hat:enterprise_linux:6::workstation |
before 0:5.1.66-1.el6_3 | 0:5.1.66-1.el6_3 |
mysql-debuginfoRed Hat:enterprise_linux:6::workstation |
before 0:5.1.66-1.el6_3 | 0:5.1.66-1.el6_3 |
mysql-develRed Hat:enterprise_linux:6::workstation |
before 0:5.1.66-1.el6_3 | 0:5.1.66-1.el6_3 |
mysql-libsRed Hat:enterprise_linux:6::workstation |
before 0:5.1.66-1.el6_3 | 0:5.1.66-1.el6_3 |
mysql-serverRed Hat:enterprise_linux:6::workstation |
before 0:5.1.66-1.el6_3 | 0:5.1.66-1.el6_3 |
mysql-testRed Hat:enterprise_linux:6::workstation |
before 0:5.1.66-1.el6_3 | 0:5.1.66-1.el6_3 |
mysql-embeddedRed Hat:enterprise_linux:6::workstation |
before 0:5.1.66-1.el6_3 | 0:5.1.66-1.el6_3 |
mysql-embedded-develRed Hat:enterprise_linux:6::workstation |
before 0:5.1.66-1.el6_3 | 0:5.1.66-1.el6_3 |
History
| Recorded | Changed | Sources |
|---|---|---|
| aliases | EUVD | |
| first indexed | CVE List, GitHub Advisories, NVD, OSV |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2012-3167 is a low vulnerability (CVSS 3.5) in Oracle Mysql, published October 17, 2012. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 2.71%, the 85th percentile. Fixed in mysql-5.1 5.1.66-0+squeeze1.
References
secunia.com/advisories/51177
rhn.redhat.com/errata/RHSA-2012-1462.html
exchange.xforce.ibmcloud.com/vulnerabilities/79392
security.gentoo.org/glsa/glsa-201308-06.xml
debian.org/security/2012/dsa-2581
Show 87 moreShow less
oracle.com/technetwork/topics/security/cpuoct2012-1515893.html
ubuntu.com/usn/USN-1621-1
mandriva.com/security/advisories?name=MDVSA-2013:150
nvd.nist.gov/vuln/detail/CVE-2012-3167
github.com/advisories/GHSA-73x7-jf69-95mv
access.redhat.com/errata/RHSA-2012:1462
dev.mysql.com/doc/refman/5.1/en/news-5-1-62.html
bugzilla.redhat.com/show_bug.cgi?id=814285
security.access.redhat.com/data/csaf/v2/advisories/2012/rhsa-2012_1462.json
cve.org/CVERecord?id=CVE-2012-0540