Every CVE Search/ Get API key

CVE-2012-5614

Oracle MySQL 5.1.67 and earlier and 5.5.29 and earlier, and MariaDB 5.5.28a and possibly other...

4.0 MediumPublic exploitFix available

Oracle MySQL 5.1.67 and earlier and 5.5.29 and earlier, and MariaDB 5.5.28a and possibly other versions, allows remote authenticated users to cause a denial of service (mysqld crash) via a SELECT command with an UpdateXML command containing XML with a large number of unique, nested elements.

Exploit likelihood

13.2%Down 1.7 points since Feb 4, 2022
90%50%10%1%

What each source reports

NVD Score used 4.0

Oracle MySQL 5.1.67 and earlier and 5.5.29 and earlier, and MariaDB 5.5.28a and possibly other versions, allows remote authenticated users to cause a denial of service (mysqld crash) via a SELECT command with an UpdateXML command containing XML with a large number of unique, nested elements.

Record
CVE-2012-5614
CVSS 2.0
4.0 MediumAV:N/AC:L/Au:S/C:N/I:N/A:P
Updated
2026-11-02
CVE List No score

Oracle MySQL 5.1.67 and earlier and 5.5.29 and earlier, and MariaDB 5.5.28a and possibly other versions, allows remote authenticated users to cause a denial of service (mysqld crash) via a SELECT command with an UpdateXML command containing XML with a large number of unique, nested elements.

Record
CVE-2012-5614
Updated
2026-11-02
EUVDEUVD-2012-5500 No score

Oracle MySQL 5.1.67 and earlier and 5.5.29 and earlier, and MariaDB 5.5.28a and possibly other versions, allows remote authenticated users to cause a denial of service (mysqld crash) via a SELECT command with an UpdateXML command containing XML with a large number of unique, nested elements.

Record
EUVD-2012-5500
Updated
2026-11-03
GitHub AdvisoriesGHSA-g68p-rgrw-xp3p No score

Oracle MySQL 5.1.67 and earlier and 5.5.29 and earlier, and MariaDB 5.5.28a and possibly other...

Oracle MySQL 5.1.67 and earlier and 5.5.29 and earlier, and MariaDB 5.5.28a and possibly other versions, allows remote authenticated users to cause a denial of service (mysqld crash) via a SELECT command with an UpdateXML command containing XML with a large number of unique, nested elements.

Record
GHSA-g68p-rgrw-xp3p
Weakness
CWE-20
Updated
2026-11-02

Affected products

Affected packages

Affected packages
PackageAffectedFixed
mysql
Red Hat:enterprise_linux:6::client
 before 0:5.1.69-1.el6_4
0:5.1.69-1.el6_4
mysql-debuginfo
Red Hat:enterprise_linux:6::client
 before 0:5.1.69-1.el6_4
0:5.1.69-1.el6_4
mysql-libs
Red Hat:enterprise_linux:6::client
 before 0:5.1.69-1.el6_4
0:5.1.69-1.el6_4
mysql-server
Red Hat:enterprise_linux:6::client
 before 0:5.1.69-1.el6_4
0:5.1.69-1.el6_4
mysql-bench
Red Hat:enterprise_linux:6::client
 before 0:5.1.69-1.el6_4
0:5.1.69-1.el6_4
mysql-devel
Red Hat:enterprise_linux:6::client
 before 0:5.1.69-1.el6_4
0:5.1.69-1.el6_4
mysql-embedded
Red Hat:enterprise_linux:6::client
 before 0:5.1.69-1.el6_4
0:5.1.69-1.el6_4
mysql-embedded-devel
Red Hat:enterprise_linux:6::client
 before 0:5.1.69-1.el6_4
0:5.1.69-1.el6_4
mysql-test
Red Hat:enterprise_linux:6::client
 before 0:5.1.69-1.el6_4
0:5.1.69-1.el6_4
mysql
Red Hat:enterprise_linux:6::computenode
 before 0:5.1.69-1.el6_4
0:5.1.69-1.el6_4
Show 26 moreShow less
Affected packages
PackageAffectedFixed
mysql-debuginfo
Red Hat:enterprise_linux:6::computenode
 before 0:5.1.69-1.el6_4
0:5.1.69-1.el6_4
mysql-libs
Red Hat:enterprise_linux:6::computenode
 before 0:5.1.69-1.el6_4
0:5.1.69-1.el6_4
mysql-bench
Red Hat:enterprise_linux:6::computenode
 before 0:5.1.69-1.el6_4
0:5.1.69-1.el6_4
mysql-devel
Red Hat:enterprise_linux:6::computenode
 before 0:5.1.69-1.el6_4
0:5.1.69-1.el6_4
mysql-embedded
Red Hat:enterprise_linux:6::computenode
 before 0:5.1.69-1.el6_4
0:5.1.69-1.el6_4
mysql-embedded-devel
Red Hat:enterprise_linux:6::computenode
 before 0:5.1.69-1.el6_4
0:5.1.69-1.el6_4
mysql-server
Red Hat:enterprise_linux:6::computenode
 before 0:5.1.69-1.el6_4
0:5.1.69-1.el6_4
mysql-test
Red Hat:enterprise_linux:6::computenode
 before 0:5.1.69-1.el6_4
0:5.1.69-1.el6_4
mysql
Red Hat:enterprise_linux:6::server
 before 0:5.1.69-1.el6_4
0:5.1.69-1.el6_4
mysql-bench
Red Hat:enterprise_linux:6::server
 before 0:5.1.69-1.el6_4
0:5.1.69-1.el6_4
mysql-debuginfo
Red Hat:enterprise_linux:6::server
 before 0:5.1.69-1.el6_4
0:5.1.69-1.el6_4
mysql-devel
Red Hat:enterprise_linux:6::server
 before 0:5.1.69-1.el6_4
0:5.1.69-1.el6_4
mysql-libs
Red Hat:enterprise_linux:6::server
 before 0:5.1.69-1.el6_4
0:5.1.69-1.el6_4
mysql-server
Red Hat:enterprise_linux:6::server
 before 0:5.1.69-1.el6_4
0:5.1.69-1.el6_4
mysql-test
Red Hat:enterprise_linux:6::server
 before 0:5.1.69-1.el6_4
0:5.1.69-1.el6_4
mysql-embedded
Red Hat:enterprise_linux:6::server
 before 0:5.1.69-1.el6_4
0:5.1.69-1.el6_4
mysql-embedded-devel
Red Hat:enterprise_linux:6::server
 before 0:5.1.69-1.el6_4
0:5.1.69-1.el6_4
mysql
Red Hat:enterprise_linux:6::workstation
 before 0:5.1.69-1.el6_4
0:5.1.69-1.el6_4
mysql-bench
Red Hat:enterprise_linux:6::workstation
 before 0:5.1.69-1.el6_4
0:5.1.69-1.el6_4
mysql-debuginfo
Red Hat:enterprise_linux:6::workstation
 before 0:5.1.69-1.el6_4
0:5.1.69-1.el6_4
mysql-devel
Red Hat:enterprise_linux:6::workstation
 before 0:5.1.69-1.el6_4
0:5.1.69-1.el6_4
mysql-libs
Red Hat:enterprise_linux:6::workstation
 before 0:5.1.69-1.el6_4
0:5.1.69-1.el6_4
mysql-server
Red Hat:enterprise_linux:6::workstation
 before 0:5.1.69-1.el6_4
0:5.1.69-1.el6_4
mysql-test
Red Hat:enterprise_linux:6::workstation
 before 0:5.1.69-1.el6_4
0:5.1.69-1.el6_4
mysql-embedded
Red Hat:enterprise_linux:6::workstation
 before 0:5.1.69-1.el6_4
0:5.1.69-1.el6_4
mysql-embedded-devel
Red Hat:enterprise_linux:6::workstation
 before 0:5.1.69-1.el6_4
0:5.1.69-1.el6_4

Public exploits

Links only. Every CVE stores no exploit code.

Public exploits
SourceLinkDate
Exploit-DBMySQL - Denial of Service (PoC)2012-12-02

History

History
RecordedChangedSources
aliasesEUVD
first indexedCVE List, Exploit-DB, GitHub Advisories, NVD, OSV

Dates are when Every CVE recorded each change. Upstream dates may differ.

In short

CVE-2012-5614 is a medium vulnerability (CVSS 4.0) in Mariadb, published December 3, 2012. Public exploit code exists. EPSS puts the chance of exploitation in the next 30 days at 13.2%, the 96th percentile. Fixed in mysql 0:5.1.69-1.el6_4.

References

Show 71 moreShow less
Pages All vulnerabilities Browse Docs Sources Guide Get API key
MoveEnter Open