CVE-2013-1492
Buffer overflow in yaSSL, as used in MySQL 5.1.x before 5.1.68 and 5.5.x before 5.5.30, has...
CVE-2013-1492 is a high vulnerability (CVSS 7.5) in Mysql, published March 28, 2013. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 2.83%, the 86th percentile. No source names a fixed version.
- Severity
- 7.5 HighCVSS 2.0, NVD
- Exploit chance
- 2.83%EPSS, 86th percentile
- Exploitation
- None knownNot on CISA’s or ENISA’s lists
- Fixed in
- No fix listedNo source names one
Description
Buffer overflow in yaSSL, as used in MySQL 5.1.x before 5.1.68 and 5.5.x before 5.5.30, has unspecified impact and attack vectors, a different vulnerability than CVE-2012-0553.
Exploit likelihood
Affected products
Affected packages
| Package | Affected | Fixed |
|---|---|---|
mysql-5.1Debian:6.0 From an advisory covering 32 CVEs | before 5.1.72-2, plus listed versions 5.1.49-35.1.50-15.1.51-15.1.53-15.1.54-1 Show 18 moreShow less5.1.54-25.1.55-15.1.56-15.1.57-15.1.57-1.15.1.57-1.25.1.57-1.35.1.57-25.1.57-35.1.57-3.15.1.58-15.1.61-0+squeeze15.1.61-25.1.61-35.1.62-15.1.62-1+m68k5.1.63-0+squeeze15.1.66-0+squeeze1 | 5.1.72-2 |
What each source reports
NVD Score used 7.5
Buffer overflow in yaSSL, as used in MySQL 5.1.x before 5.1.68 and 5.5.x before 5.5.30, has unspecified impact and attack vectors, a different vulnerability than CVE-2012-0553.
- Record
CVE-2013-1492- CVSS 2.0
- 7.5 High
AV:N/AC:L/Au:N/C:P/I:P/A:P - Weakness
- CWE-119
- Updated
- 2026-11-02
CVE ListNo score
Buffer overflow in yaSSL, as used in MySQL 5.1.x before 5.1.68 and 5.5.x before 5.5.30, has unspecified impact and attack vectors, a different vulnerability than CVE-2012-0553.
- Record
CVE-2013-1492- Updated
- 2026-11-02
EUVDEUVD-2013-1528No score
Buffer overflow in yaSSL, as used in MySQL 5.1.x before 5.1.68 and 5.5.x before 5.5.30, has unspecified impact and attack vectors, a different vulnerability than CVE-2012-0553.
- Record
EUVD-2013-1528- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-8qfx-94fg-9j72No score
Buffer overflow in yaSSL, as used in MySQL 5.1.x before 5.1.68 and 5.5.x before 5.5.30, has...
Buffer overflow in yaSSL, as used in MySQL 5.1.x before 5.1.68 and 5.5.x before 5.5.30, has unspecified impact and attack vectors, a different vulnerability than CVE-2012-0553.
- Record
GHSA-8qfx-94fg-9j72- Weakness
- CWE-119
- Updated
- 2026-11-02
History
| Recorded | Changed | Sources |
|---|---|---|
| affected, facts | ||
| aliases | EUVD | |
| first indexed | CVE List, GitHub Advisories, NVD, OSV |
Dates are when Every CVE recorded each change. Upstream dates may differ.
References
dev.mysql.com/doc/relnotes/mysql/5.1/en/news-5-1-68.html
secunia.com/advisories/53372
secunia.com/advisories/52445
dev.mysql.com/doc/relnotes/mysql/5.5/en/news-5-5-30.html
security.gentoo.org/glsa/glsa-201308-06.xml
blogs.oracle.com/sunsecurity/entry/cve_2013_1492_buffer_overflow
nvd.nist.gov/vuln/detail/CVE-2013-1492
github.com/advisories/GHSA-8qfx-94fg-9j72