{"id":"CVE-2012-5615","aliases":["DSA-3054-1","EUVD-2012-5501","GHSA-7ccw-fmfw-7xm6","RHSA-2014:1859","RHSA-2014:1860","RHSA-2014:1861","RHSA-2014:1862","RHSA-2014:1937","RHSA-2014:1940","SUSE-RU-2023:3956-1","SUSE-RU-2023:4991-1","SUSE-SU-2015:0620-1","SUSE-SU-2015:0743-1","SUSE-SU-2015:0946-1","SUSE-SU-2015:1177-1","SUSE-SU-2015:1177-2","UBUNTU-CVE-2012-5615","USN-2384-1","openSUSE-SU-2024:10153-1"],"status":"published","title":"Oracle MySQL 5.5.38 and earlier, 5.6.19 and earlier, and MariaDB 5.5.28a, 5.3.11, 5.2.13, 5.1.66,...","description":"Oracle MySQL 5.5.38 and earlier, 5.6.19 and earlier, and MariaDB 5.5.28a, 5.3.11, 5.2.13, 5.1.66, and possibly other versions, generates different error messages with different time delays depending on whether a user name exists, which allows remote attackers to enumerate valid usernames.","severity":{"version":"2.0","score":5,"vector":"AV:N/AC:L/Au:N/C:P/I:N/A:N","level":"medium","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-08","score":0.14784,"percentile":0.96703,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":true,"fix_available":true},"cwes":["CWE-200"],"published":"2012-12-03T00:00:00Z","modified":"2026-06-29T10:08:01Z","exploits":[{"source":"exploitdb","id":"EDB-23073","title":"MySQL 5.1/5.5 (Windows) - 'MySQLJackpot' Remote Command Execution","type":"remote","platform":"windows","date":"2012-12-02","verified":true,"url":"https://www.exploit-db.com/exploits/23073"},{"source":"exploitdb","id":"EDB-23081","title":"MySQL - Remote User Enumeration","type":"remote","platform":"multiple","date":"2012-12-02","verified":true,"url":"https://www.exploit-db.com/exploits/23081"}],"fixes":[{"ecosystem":"Ubuntu:14.04:LTS","package":"mysql-5.5","fixed_in":["5.5.40-0ubuntu0.14.04.1"],"sources":["osv"]},{"ecosystem":"Ubuntu:14.04:LTS","package":"mysql-5.6","fixed_in":["5.6.27-0ubuntu0.14.04.1"],"sources":["osv"]}],"affected":[{"source":"osv","ecosystem":"Debian:7","package":"mysql-5.5","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.5.40-0+wheezy1"}]}],"versions":["5.5.30+dfsg-1.1","5.5.31+dfsg-0+wheezy1","5.5.31+dfsg-1","5.5.33+dfsg-0+wheezy1","5.5.33+dfsg-1","5.5.35+dfsg-0+wheezy1","5.5.35+dfsg-1","5.5.35+dfsg-2","5.5.37-0+wheezy1","5.5.37-1","5.5.38-0+wheezy1","5.5.39-1"],"bundled":20},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:5::client","package":"mysql55-mysql","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.5.40-2.el5"}]}],"bundled":19},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:5::client","package":"mysql55-mysql-bench","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.5.40-2.el5"}]}],"bundled":19},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:5::client","package":"mysql55-mysql-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.5.40-2.el5"}]}],"bundled":19},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:5::client","package":"mysql55-mysql-libs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.5.40-2.el5"}]}],"bundled":19},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:5::client","package":"mysql55-mysql-server","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.5.40-2.el5"}]}],"bundled":19},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:5::client","package":"mysql55-mysql-test","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.5.40-2.el5"}]}],"bundled":19},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:5::client_workstation","package":"mysql55-mysql","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.5.40-2.el5"}]}],"bundled":19},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:5::client_workstation","package":"mysql55-mysql-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.5.40-2.el5"}]}],"bundled":19},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:5::client_workstation","package":"mysql55-mysql-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.5.40-2.el5"}]}],"bundled":19},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:5::server","package":"mysql55-mysql","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.5.40-2.el5"}]}],"bundled":19},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:5::server","package":"mysql55-mysql-bench","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.5.40-2.el5"}]}],"bundled":19},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:5::server","package":"mysql55-mysql-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.5.40-2.el5"}]}],"bundled":19},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:5::server","package":"mysql55-mysql-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.5.40-2.el5"}]}],"bundled":19},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:5::server","package":"mysql55-mysql-libs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.5.40-2.el5"}]}],"bundled":19},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:5::server","package":"mysql55-mysql-server","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.5.40-2.el5"}]}],"bundled":19},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:5::server","package":"mysql55-mysql-test","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.5.40-2.el5"}]}],"bundled":19},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:1::el6","package":"mysql55-mysql","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.5.40-1.el6"}]}],"bundled":19},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:1::el6","package":"mysql55-mysql-bench","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.5.40-1.el6"}]}],"bundled":19},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:1::el6","package":"mysql55-mysql-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.5.40-1.el6"}]}],"bundled":19},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:1::el6","package":"mysql55-mysql-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.5.40-1.el6"}]}],"bundled":19},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:1::el6","package":"mysql55-mysql-libs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.5.40-1.el6"}]}],"bundled":19},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:1::el6","package":"mysql55-mysql-server","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.5.40-1.el6"}]}],"bundled":19},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:1::el6","package":"mysql55-mysql-test","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.5.40-1.el6"}]}],"bundled":19},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:1::el7","package":"mysql55-mysql","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.5.40-1.el7"}]}],"bundled":19},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:1::el7","package":"mysql55-mysql-bench","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.5.40-1.el7"}]}],"bundled":19},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:1::el7","package":"mysql55-mysql-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.5.40-1.el7"}]}],"bundled":19},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:1::el7","package":"mysql55-mysql-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.5.40-1.el7"}]}],"bundled":19},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:1::el7","package":"mysql55-mysql-libs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.5.40-1.el7"}]}],"bundled":19},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:1::el7","package":"mysql55-mysql-server","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.5.40-1.el7"}]}],"bundled":19},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:1::el7","package":"mysql55-mysql-test","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.5.40-1.el7"}]}],"bundled":19},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::client","package":"mariadb","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:5.5.40-1.el7_0"}]}],"bundled":19},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::client","package":"mariadb-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:5.5.40-1.el7_0"}]}],"bundled":19},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::client","package":"mariadb-libs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:5.5.40-1.el7_0"}]}],"bundled":19},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::client","package":"mariadb-server","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:5.5.40-1.el7_0"}]}],"bundled":19},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::client","package":"mariadb-bench","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:5.5.40-1.el7_0"}]}],"bundled":19},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::client","package":"mariadb-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:5.5.40-1.el7_0"}]}],"bundled":19},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::client","package":"mariadb-embedded","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:5.5.40-1.el7_0"}]}],"bundled":19},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::client","package":"mariadb-embedded-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:5.5.40-1.el7_0"}]}],"bundled":19},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::client","package":"mariadb-test","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:5.5.40-1.el7_0"}]}],"bundled":19},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"mariadb","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:5.5.40-1.el7_0"}]}],"bundled":19},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"mariadb-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:5.5.40-1.el7_0"}]}],"bundled":19},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"mariadb-libs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:5.5.40-1.el7_0"}]}],"bundled":19},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"mariadb-bench","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:5.5.40-1.el7_0"}]}],"bundled":19},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"mariadb-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:5.5.40-1.el7_0"}]}],"bundled":19},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"mariadb-embedded","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:5.5.40-1.el7_0"}]}],"bundled":19},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"mariadb-embedded-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:5.5.40-1.el7_0"}]}],"bundled":19},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"mariadb-server","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:5.5.40-1.el7_0"}]}],"bundled":19},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"mariadb-test","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:5.5.40-1.el7_0"}]}],"bundled":19},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::server","package":"mariadb","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:5.5.40-1.el7_0"}]}],"bundled":19},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::server","package":"mariadb-bench","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:5.5.40-1.el7_0"}]}],"bundled":19},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::server","package":"mariadb-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:5.5.40-1.el7_0"}]}],"bundled":19},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::server","package":"mariadb-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:5.5.40-1.el7_0"}]}],"bundled":19},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::server","package":"mariadb-libs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:5.5.40-1.el7_0"}]}],"bundled":19},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::server","package":"mariadb-server","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:5.5.40-1.el7_0"}]}],"bundled":19},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::server","package":"mariadb-test","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:5.5.40-1.el7_0"}]}],"bundled":19},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::server","package":"mariadb-embedded","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:5.5.40-1.el7_0"}]}],"bundled":19},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::server","package":"mariadb-embedded-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:5.5.40-1.el7_0"}]}],"bundled":19},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"mariadb","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:5.5.40-1.el7_0"}]}],"bundled":19},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"mariadb-bench","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:5.5.40-1.el7_0"}]}],"bundled":19},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"mariadb-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:5.5.40-1.el7_0"}]}],"bundled":19},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"mariadb-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:5.5.40-1.el7_0"}]}],"bundled":19},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"mariadb-libs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:5.5.40-1.el7_0"}]}],"bundled":19},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"mariadb-server","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:5.5.40-1.el7_0"}]}],"bundled":19},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"mariadb-test","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:5.5.40-1.el7_0"}]}],"bundled":19},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"mariadb-embedded","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:5.5.40-1.el7_0"}]}],"bundled":19},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"mariadb-embedded-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:5.5.40-1.el7_0"}]}],"bundled":19},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:1::el6","package":"mariadb55-mariadb","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.5.40-10.el6"}]}],"bundled":19},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:1::el6","package":"mariadb55-mariadb-bench","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.5.40-10.el6"}]}],"bundled":19},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:1::el6","package":"mariadb55-mariadb-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.5.40-10.el6"}]}],"bundled":19},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:1::el6","package":"mariadb55-mariadb-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.5.40-10.el6"}]}],"bundled":19},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:1::el6","package":"mariadb55-mariadb-libs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.5.40-10.el6"}]}],"bundled":19},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:1::el6","package":"mariadb55-mariadb-server","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.5.40-10.el6"}]}],"bundled":19},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:1::el6","package":"mariadb55-mariadb-test","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.5.40-10.el6"}]}],"bundled":19},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:1::el7","package":"mariadb55-mariadb","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.5.40-10.el7"}]}],"bundled":19},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:1::el7","package":"mariadb55-mariadb-bench","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.5.40-10.el7"}]}],"bundled":19},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:1::el7","package":"mariadb55-mariadb-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.5.40-10.el7"}]}],"bundled":19},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:1::el7","package":"mariadb55-mariadb-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.5.40-10.el7"}]}],"bundled":19},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:1::el7","package":"mariadb55-mariadb-libs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.5.40-10.el7"}]}],"bundled":19},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:1::el7","package":"mariadb55-mariadb-server","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.5.40-10.el7"}]}],"bundled":19},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:1::el7","package":"mariadb55-mariadb-test","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.5.40-10.el7"}]}],"bundled":19},{"source":"osv","ecosystem":"Red Hat:openstack:5::el6","package":"mariadb-galera","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.5.40-2.el6ost"}]}],"bundled":18},{"source":"osv","ecosystem":"Red Hat:openstack:5::el6","package":"mariadb-galera-common","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.5.40-2.el6ost"}]}],"bundled":18},{"source":"osv","ecosystem":"Red Hat:openstack:5::el6","package":"mariadb-galera-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.5.40-2.el6ost"}]}],"bundled":18},{"source":"osv","ecosystem":"Red Hat:openstack:5::el6","package":"mariadb-galera-server","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.5.40-2.el6ost"}]}],"bundled":18},{"source":"osv","ecosystem":"Red Hat:openstack:5::el7","package":"mariadb-galera","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:5.5.40-2.el7ost"}]}],"bundled":18},{"source":"osv","ecosystem":"Red Hat:openstack:5::el7","package":"mariadb-galera-common","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:5.5.40-2.el7ost"}]}],"bundled":18},{"source":"osv","ecosystem":"Red Hat:openstack:5::el7","package":"mariadb-galera-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:5.5.40-2.el7ost"}]}],"bundled":18},{"source":"osv","ecosystem":"Red Hat:openstack:5::el7","package":"mariadb-galera-server","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:5.5.40-2.el7ost"}]}],"bundled":18},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP1-LTSS","package":"mariadb104","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"10.4.30-150100.3.5.10"}]}],"bundled":221},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP1-LTSS","package":"python-mysqlclient","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.4.6-150100.3.3.7"}]}],"bundled":221},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 15 SP1-LTSS","package":"mariadb104","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"10.4.30-150100.3.5.10"}]}],"bundled":221},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 15 SP1-LTSS","package":"python-mysqlclient","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.4.6-150100.3.3.7"}]}],"bundled":221},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15 SP1","package":"mariadb104","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"10.4.30-150100.3.5.10"}]}],"bundled":221},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15 SP1","package":"python-mysqlclient","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.4.6-150100.3.3.7"}]}],"bundled":221},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Software Development Kit 12 SP5","package":"lz4","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.8.0-3.5.2"}]}],"bundled":221},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Software Development Kit 12 SP5","package":"mariadb-connector-c","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.1.22-2.35.1"}]}],"bundled":221},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Software Development Kit 12 SP5","package":"mariadb104","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"10.4.30-8.5.46"}]}],"bundled":221},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Software Development Kit 12 SP5","package":"python-mysqlclient","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.3.14-8.9.2"}]}],"bundled":221},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12 SP5","package":"lz4","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.8.0-3.5.2"}]}],"bundled":221},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12 SP5","package":"mariadb-connector-c","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.1.22-2.35.1"}]}],"bundled":221},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12 SP5","package":"mariadb104","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"10.4.30-8.5.46"}]}],"bundled":221},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12 SP5","package":"python-mysqlclient","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.3.14-8.9.2"}]}],"bundled":221},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 12 SP5","package":"lz4","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.8.0-3.5.2"}]}],"bundled":221},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 12 SP5","package":"mariadb-connector-c","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.1.22-2.35.1"}]}],"bundled":221},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 12 SP5","package":"mariadb104","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"10.4.30-8.5.46"}]}],"bundled":221},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 12 SP5","package":"python-mysqlclient","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.3.14-8.9.2"}]}],"bundled":221},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Desktop 12","package":"mariadb","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"10.0.16-15.1"}]}],"bundled":40},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Software Development Kit 12","package":"mariadb","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"10.0.16-15.1"}]}],"bundled":40},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12","package":"mariadb","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"10.0.16-15.1"}]}],"bundled":40},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 12","package":"mariadb","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"10.0.16-15.1"}]}],"bundled":40},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Workstation Extension 12","package":"mariadb","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"10.0.16-15.1"}]}],"bundled":40},{"source":"osv","ecosystem":"Ubuntu:14.04:LTS","package":"mysql-5.5","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.5.40-0ubuntu0.14.04.1"}]}],"versions":["5.5.32-0ubuntu7","5.5.34-0ubuntu1","5.5.34-0ubuntu2","5.5.35-0ubuntu1","5.5.35+dfsg-1ubuntu1","5.5.37-0ubuntu0.14.04.1","5.5.38-0ubuntu0.14.04.1"]},{"source":"osv","ecosystem":"Ubuntu:14.04:LTS","package":"mysql-5.6","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.6.27-0ubuntu0.14.04.1"}]}],"versions":["5.6.15-0ubuntu1","5.6.15-1~exp2","5.6.16-1~exp1","5.6.17-0ubuntu0.14.04.1","5.6.19-0ubuntu0.14.04.1"]},{"source":"osv","ecosystem":"Ubuntu:14.04:LTS","package":"mysql-5.5","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.5.40-0ubuntu0.14.04.1"}]}],"versions":["5.5.32-0ubuntu7","5.5.34-0ubuntu1","5.5.34-0ubuntu2","5.5.35-0ubuntu1","5.5.35+dfsg-1ubuntu1","5.5.37-0ubuntu0.14.04.1","5.5.38-0ubuntu0.14.04.1"],"bundled":20},{"source":"osv","ecosystem":"openSUSE:Tumbleweed","package":"mariadb","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"10.0.22-3.8"}]}],"bundled":23}],"products":[{"vendor":"mariadb","product":"mariadb"},{"vendor":"oracle","product":"mysql"}],"references":[{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2013:102","tags":["vendor-advisory","x_refsource_MANDRIVA","x_transferred"]},{"url":"http://secunia.com/advisories/53372","tags":["third-party-advisory","x_refsource_SECUNIA","x_transferred"]},{"url":"http://www.openwall.com/lists/oss-security/2012/12/02/3","tags":["mailing-list","x_refsource_MLIST","x_transferred","report"]},{"url":"http://seclists.org/fulldisclosure/2012/Dec/9","tags":["mailing-list","x_refsource_FULLDISC","x_transferred","report"]},{"url":"http://security.gentoo.org/glsa/glsa-201308-06.xml","tags":["vendor-advisory","x_refsource_GENTOO","x_transferred"]},{"url":"http://www.openwall.com/lists/oss-security/2012/12/02/4","tags":["mailing-list","x_refsource_MLIST","x_transferred","report"]},{"url":"https://mariadb.atlassian.net/browse/MDEV-3909","tags":["x_refsource_CONFIRM","x_transferred"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2015-04/msg00016.html","tags":["vendor-advisory","x_refsource_SUSE","x_transferred"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2013-02/msg00000.html","tags":["vendor-advisory","x_refsource_SUSE","x_transferred"]},{"url":"http://www.oracle.com/technetwork/topics/security/cpuoct2014-1972960.html","tags":["x_refsource_CONFIRM","x_transferred","report"]},{"url":"http://www.oracle.com/technetwork/topics/security/bulletinoct2015-2511968.html","tags":["x_refsource_CONFIRM","x_transferred"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2012-5615","tags":["advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2014:1859","tags":["advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2014:1860","tags":["advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2014:1861","tags":["advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2014:1862","tags":["advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2014:1937","tags":["advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2014:1940","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2012-5615","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=882608","tags":["report"]},{"url":"https://github.com/advisories/GHSA-7ccw-fmfw-7xm6"},{"url":"https://access.redhat.com/security/updates/classification/#important","tags":["article"]},{"url":"http://www.oracle.com/technetwork/topics/security/cpuoct2014-1972960.html#AppendixMSQL","tags":["article"]},{"url":"http://www.oracle.com/technetwork/topics/security/cpujul2014-1972956.html#AppendixMSQL","tags":["article"]},{"url":"https://dev.mysql.com/doc/relnotes/mysql/5.5/en/news-5-5-40.html","tags":["article"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1120382","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1120383","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1120385","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1120387","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1120388","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1126271","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1153461","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1153462","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1153463","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1153464","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1153467","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1153489","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1153490","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1153491","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1153493","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1153494","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1153495","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1153496","tags":["report"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2014/rhsa-2014_1859.json","tags":["advisory"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2012-5615","tags":["advisory","report"]},{"url":"https://access.redhat.com/security/cve/CVE-2014-2494","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2014-2494","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2014-2494","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2014-4207","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2014-4207","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2014-4207","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2014-4243","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2014-4243","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2014-4243","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2014-4258","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2014-4258","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2014-4258","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2014-4260","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2014-4260","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2014-4260","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2014-4274","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2014-4274","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2014-4274","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2014-4287","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2014-4287","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2014-4287","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2014-6463","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2014-6463","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2014-6463","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2014-6464","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2014-6464","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2014-6464","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2014-6469","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2014-6469","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2014-6469","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2014-6484","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2014-6484","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2014-6484","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2014-6505","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2014-6505","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2014-6505","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2014-6507","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2014-6507","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2014-6507","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2014-6520","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2014-6520","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2014-6520","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2014-6530","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2014-6530","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2014-6530","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2014-6551","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2014-6551","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2014-6551","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2014-6555","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2014-6555","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2014-6555","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2014-6559","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2014-6559","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2014-6559","tags":["advisory"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2014/rhsa-2014_1860.json","tags":["advisory"]},{"url":"https://mariadb.com/kb/en/mariadb/development/release-notes/mariadb-5540-release-notes/","tags":["article"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2014/rhsa-2014_1861.json","tags":["advisory"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2014/rhsa-2014_1862.json","tags":["advisory"]},{"url":"https://mariadb.com/kb/en/mariadb/development/release-notes/mariadb-5539-release-notes/","tags":["article"]},{"url":"https://mariadb.com/kb/en/mariadb/development/release-notes/mariadb-5538-release-notes/","tags":["article"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2014/rhsa-2014_1937.json","tags":["advisory"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2014/rhsa-2014_1940.json","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/-2023-3956/suse-ru-20233956-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/1001367","tags":["report"]},{"url":"https://bugzilla.suse.com/1005555","tags":["report"]},{"url":"https://bugzilla.suse.com/1005558","tags":["report"]},{"url":"https://bugzilla.suse.com/1005562","tags":["report"]},{"url":"https://bugzilla.suse.com/1005564","tags":["report"]},{"url":"https://bugzilla.suse.com/1005566","tags":["report"]},{"url":"https://bugzilla.suse.com/1005569","tags":["report"]},{"url":"https://bugzilla.suse.com/1005581","tags":["report"]},{"url":"https://bugzilla.suse.com/1005582","tags":["report"]},{"url":"https://bugzilla.suse.com/1006539","tags":["report"]},{"url":"https://bugzilla.suse.com/1008253","tags":["report"]},{"url":"https://bugzilla.suse.com/1012075","tags":["report"]},{"url":"https://bugzilla.suse.com/1013882","tags":["report"]},{"url":"https://bugzilla.suse.com/1019948","tags":["report"]},{"url":"https://bugzilla.suse.com/1020873","tags":["report"]},{"url":"https://bugzilla.suse.com/1020875","tags":["report"]},{"url":"https://bugzilla.suse.com/1020877","tags":["report"]},{"url":"https://bugzilla.suse.com/1020878","tags":["report"]},{"url":"https://bugzilla.suse.com/1020882","tags":["report"]},{"url":"https://bugzilla.suse.com/1020884","tags":["report"]},{"url":"https://bugzilla.suse.com/1020885","tags":["report"]},{"url":"https://bugzilla.suse.com/1020890","tags":["report"]},{"url":"https://bugzilla.suse.com/1020891","tags":["report"]},{"url":"https://bugzilla.suse.com/1020894","tags":["report"]},{"url":"https://bugzilla.suse.com/1020896","tags":["report"]},{"url":"https://bugzilla.suse.com/1020976","tags":["report"]},{"url":"https://bugzilla.suse.com/1022428","tags":["report"]},{"url":"https://bugzilla.suse.com/1038740","tags":["report"]},{"url":"https://bugzilla.suse.com/1039034","tags":["report"]},{"url":"https://bugzilla.suse.com/1041525","tags":["report"]},{"url":"https://bugzilla.suse.com/1041891","tags":["report"]},{"url":"https://bugzilla.suse.com/1042632","tags":["report"]},{"url":"https://bugzilla.suse.com/1043328","tags":["report"]},{"url":"https://bugzilla.suse.com/1047218","tags":["report"]},{"url":"https://bugzilla.suse.com/1055165","tags":["report"]},{"url":"https://bugzilla.suse.com/1055268","tags":["report"]},{"url":"https://bugzilla.suse.com/1058374","tags":["report"]},{"url":"https://bugzilla.suse.com/1058729","tags":["report"]},{"url":"https://bugzilla.suse.com/1060110","tags":["report"]},{"url":"https://bugzilla.suse.com/1062583","tags":["report"]},{"url":"https://bugzilla.suse.com/1067443","tags":["report"]},{"url":"https://bugzilla.suse.com/1068906","tags":["report"]},{"url":"https://bugzilla.suse.com/1069401","tags":["report"]},{"url":"https://bugzilla.suse.com/1080891","tags":["report"]},{"url":"https://bugzilla.suse.com/1083087","tags":["report"]},{"url":"https://bugzilla.suse.com/1088681","tags":["report"]},{"url":"https://bugzilla.suse.com/1092544","tags":["report"]},{"url":"https://bugzilla.suse.com/1098683","tags":["report"]},{"url":"https://bugzilla.suse.com/1101676","tags":["report"]},{"url":"https://bugzilla.suse.com/1101677","tags":["report"]},{"url":"https://bugzilla.suse.com/1101678","tags":["report"]},{"url":"https://bugzilla.suse.com/1103342","tags":["report"]},{"url":"https://bugzilla.suse.com/1111858","tags":["report"]},{"url":"https://bugzilla.suse.com/1111859","tags":["report"]},{"url":"https://bugzilla.suse.com/1112368","tags":["report"]},{"url":"https://bugzilla.suse.com/1112377","tags":["report"]},{"url":"https://bugzilla.suse.com/1112384","tags":["report"]},{"url":"https://bugzilla.suse.com/1112386","tags":["report"]},{"url":"https://bugzilla.suse.com/1112391","tags":["report"]},{"url":"https://bugzilla.suse.com/1112397","tags":["report"]},{"url":"https://bugzilla.suse.com/1112404","tags":["report"]},{"url":"https://bugzilla.suse.com/1112415","tags":["report"]},{"url":"https://bugzilla.suse.com/1112417","tags":["report"]},{"url":"https://bugzilla.suse.com/1112421","tags":["report"]},{"url":"https://bugzilla.suse.com/1112432","tags":["report"]},{"url":"https://bugzilla.suse.com/1112767","tags":["report"]},{"url":"https://bugzilla.suse.com/1116686","tags":["report"]},{"url":"https://bugzilla.suse.com/1118754","tags":["report"]},{"url":"https://bugzilla.suse.com/1120041","tags":["report"]},{"url":"https://bugzilla.suse.com/1122198","tags":["report"]},{"url":"https://bugzilla.suse.com/1122475","tags":["report"]},{"url":"https://bugzilla.suse.com/1127027","tags":["report"]},{"url":"https://bugzilla.suse.com/1132666","tags":["report"]},{"url":"https://bugzilla.suse.com/1136035","tags":["report"]},{"url":"https://bugzilla.suse.com/1142909","tags":["report"]},{"url":"https://bugzilla.suse.com/1143215","tags":["report"]},{"url":"https://bugzilla.suse.com/1144314","tags":["report"]},{"url":"https://bugzilla.suse.com/1156669","tags":["report"]},{"url":"https://bugzilla.suse.com/1160285","tags":["report"]},{"url":"https://bugzilla.suse.com/1160868","tags":["report"]},{"url":"https://bugzilla.suse.com/1160878","tags":["report"]},{"url":"https://bugzilla.suse.com/1160883","tags":["report"]},{"url":"https://bugzilla.suse.com/1160895","tags":["report"]},{"url":"https://bugzilla.suse.com/1160912","tags":["report"]},{"url":"https://bugzilla.suse.com/1166781","tags":["report"]},{"url":"https://bugzilla.suse.com/1168380","tags":["report"]},{"url":"https://bugzilla.suse.com/1170204","tags":["report"]},{"url":"https://bugzilla.suse.com/1173028","tags":["report"]},{"url":"https://bugzilla.suse.com/1173516","tags":["report"]},{"url":"https://bugzilla.suse.com/1174559","tags":["report"]},{"url":"https://bugzilla.suse.com/1175596","tags":["report"]},{"url":"https://bugzilla.suse.com/1177472","tags":["report"]},{"url":"https://bugzilla.suse.com/1178428","tags":["report"]},{"url":"https://bugzilla.suse.com/1180014","tags":["report"]},{"url":"https://bugzilla.suse.com/1182218","tags":["report"]},{"url":"https://bugzilla.suse.com/1182255","tags":["report"]},{"url":"https://bugzilla.suse.com/1182739","tags":["report"]},{"url":"https://bugzilla.suse.com/1183770","tags":["report"]},{"url":"https://bugzilla.suse.com/1185870","tags":["report"]},{"url":"https://bugzilla.suse.com/1185872","tags":["report"]},{"url":"https://bugzilla.suse.com/1186031","tags":["report"]},{"url":"https://bugzilla.suse.com/1189320","tags":["report"]},{"url":"https://bugzilla.suse.com/1192497","tags":["report"]},{"url":"https://bugzilla.suse.com/1195325","tags":["report"]},{"url":"https://bugzilla.suse.com/1195334","tags":["report"]},{"url":"https://bugzilla.suse.com/1195339","tags":["report"]},{"url":"https://bugzilla.suse.com/1196016","tags":["report"]},{"url":"https://bugzilla.suse.com/1197459","tags":["report"]},{"url":"https://bugzilla.suse.com/1198603","tags":["report"]},{"url":"https://bugzilla.suse.com/1198604","tags":["report"]},{"url":"https://bugzilla.suse.com/1198605","tags":["report"]},{"url":"https://bugzilla.suse.com/1198606","tags":["report"]},{"url":"https://bugzilla.suse.com/1198607","tags":["report"]},{"url":"https://bugzilla.suse.com/1198609","tags":["report"]},{"url":"https://bugzilla.suse.com/1198610","tags":["report"]},{"url":"https://bugzilla.suse.com/1198611","tags":["report"]},{"url":"https://bugzilla.suse.com/1198612","tags":["report"]},{"url":"https://bugzilla.suse.com/1198613","tags":["report"]},{"url":"https://bugzilla.suse.com/1198628","tags":["report"]},{"url":"https://bugzilla.suse.com/1198629","tags":["report"]},{"url":"https://bugzilla.suse.com/1198630","tags":["report"]},{"url":"https://bugzilla.suse.com/1198631","tags":["report"]},{"url":"https://bugzilla.suse.com/1198632","tags":["report"]},{"url":"https://bugzilla.suse.com/1198633","tags":["report"]},{"url":"https://bugzilla.suse.com/1198634","tags":["report"]},{"url":"https://bugzilla.suse.com/1198635","tags":["report"]},{"url":"https://bugzilla.suse.com/1198636","tags":["report"]},{"url":"https://bugzilla.suse.com/1198637","tags":["report"]},{"url":"https://bugzilla.suse.com/1198638","tags":["report"]},{"url":"https://bugzilla.suse.com/1198639","tags":["report"]},{"url":"https://bugzilla.suse.com/1198640","tags":["report"]},{"url":"https://bugzilla.suse.com/1199928","tags":["report"]},{"url":"https://bugzilla.suse.com/1200105","tags":["report"]},{"url":"https://bugzilla.suse.com/1201161","tags":["report"]},{"url":"https://bugzilla.suse.com/1201163","tags":["report"]},{"url":"https://bugzilla.suse.com/1201164","tags":["report"]},{"url":"https://bugzilla.suse.com/1201165","tags":["report"]},{"url":"https://bugzilla.suse.com/1201166","tags":["report"]},{"url":"https://bugzilla.suse.com/1201167","tags":["report"]},{"url":"https://bugzilla.suse.com/1201168","tags":["report"]},{"url":"https://bugzilla.suse.com/1201169","tags":["report"]},{"url":"https://bugzilla.suse.com/1201170","tags":["report"]},{"url":"https://bugzilla.suse.com/1202863","tags":["report"]},{"url":"https://bugzilla.suse.com/332530","tags":["report"]},{"url":"https://bugzilla.suse.com/353120","tags":["report"]},{"url":"https://bugzilla.suse.com/357634","tags":["report"]},{"url":"https://bugzilla.suse.com/359522","tags":["report"]},{"url":"https://bugzilla.suse.com/366820","tags":["report"]},{"url":"https://bugzilla.suse.com/371000","tags":["report"]},{"url":"https://bugzilla.suse.com/387746","tags":["report"]},{"url":"https://bugzilla.suse.com/420313","tags":["report"]},{"url":"https://bugzilla.suse.com/425079","tags":["report"]},{"url":"https://bugzilla.suse.com/427384","tags":["report"]},{"url":"https://bugzilla.suse.com/429618","tags":["report"]},{"url":"https://bugzilla.suse.com/435519","tags":["report"]},{"url":"https://bugzilla.suse.com/437293","tags":["report"]},{"url":"https://bugzilla.suse.com/463586","tags":["report"]},{"url":"https://bugzilla.suse.com/520876","tags":["report"]},{"url":"https://bugzilla.suse.com/525065","tags":["report"]},{"url":"https://bugzilla.suse.com/525325","tags":["report"]},{"url":"https://bugzilla.suse.com/539243","tags":["report"]},{"url":"https://bugzilla.suse.com/539249","tags":["report"]},{"url":"https://bugzilla.suse.com/557669","tags":["report"]},{"url":"https://bugzilla.suse.com/635645","tags":["report"]},{"url":"https://bugzilla.suse.com/747811","tags":["report"]},{"url":"https://bugzilla.suse.com/763150","tags":["report"]},{"url":"https://bugzilla.suse.com/779476","tags":["report"]},{"url":"https://bugzilla.suse.com/789263","tags":["report"]},{"url":"https://bugzilla.suse.com/792444","tags":["report"]},{"url":"https://bugzilla.suse.com/796164","tags":["report"]},{"url":"https://bugzilla.suse.com/829430","tags":["report"]},{"url":"https://bugzilla.suse.com/841709","tags":["report"]},{"url":"https://bugzilla.suse.com/859345","tags":["report"]},{"url":"https://bugzilla.suse.com/889126","tags":["report"]},{"url":"https://bugzilla.suse.com/894479","tags":["report"]},{"url":"https://bugzilla.suse.com/902396","tags":["report"]},{"url":"https://bugzilla.suse.com/914370","tags":["report"]},{"url":"https://bugzilla.suse.com/921955","tags":["report"]},{"url":"https://bugzilla.suse.com/934789","tags":["report"]},{"url":"https://bugzilla.suse.com/937754","tags":["report"]},{"url":"https://bugzilla.suse.com/937767","tags":["report"]},{"url":"https://bugzilla.suse.com/937787","tags":["report"]},{"url":"https://bugzilla.suse.com/942908","tags":["report"]},{"url":"https://bugzilla.suse.com/943096","tags":["report"]},{"url":"https://bugzilla.suse.com/957174","tags":["report"]},{"url":"https://bugzilla.suse.com/963810","tags":["report"]},{"url":"https://bugzilla.suse.com/971456","tags":["report"]},{"url":"https://bugzilla.suse.com/979524","tags":["report"]},{"url":"https://bugzilla.suse.com/983938","tags":["report"]},{"url":"https://bugzilla.suse.com/984858","tags":["report"]},{"url":"https://bugzilla.suse.com/986251","tags":["report"]},{"url":"https://bugzilla.suse.com/989913","tags":["report"]},{"url":"https://bugzilla.suse.com/989919","tags":["report"]},{"url":"https://bugzilla.suse.com/989922","tags":["report"]},{"url":"https://bugzilla.suse.com/989926","tags":["report"]},{"url":"https://bugzilla.suse.com/990890","tags":["report"]},{"url":"https://bugzilla.suse.com/998309","tags":["report"]},{"url":"https://www.suse.com/security/cve/CVE-2006-0903","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2006-4226","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2006-4227","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2007-5969","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2007-5970","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2007-6303","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2007-6304","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2008-2079","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2008-7247","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2009-4019","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2009-4028","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2009-4030","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2012-4414","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2012-5611","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2012-5612","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2012-5615","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2012-5627","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2013-1976","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-4792","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-4802","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-4807","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-4815","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-4816","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-4819","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-4826","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-4830","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-4836","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-4858","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-4861","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-4864","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-4866","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-4870","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-4879","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-4895","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-4913","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-5969","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-7744","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-0505","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-0546","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-0596","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-0597","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-0598","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-0600","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-0606","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-0608","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-0609","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-0610","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-0616","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-0640","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-0641","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-0642","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-0644","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-0646","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-0649","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-0650","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-0651","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-0668","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-2047","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-3477","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-3492","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-3521","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-3615","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-5440","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-5584","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-5616","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-5624","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-5626","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-5629","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-6662","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-6663","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-6664","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-7440","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-8283","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-9843","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-10268","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-10286","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-10320","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-10365","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-10378","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-10379","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-10384","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-15365","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-3238","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-3243","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-3244","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-3257","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-3258","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-3265","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-3291","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-3302","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-3308","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-3309","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-3312","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-3313","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-3317","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-3318","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-3453","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-3456","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-3464","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-3636","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-3641","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-3653","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-25032","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-2562","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-2612","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-2622","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-2640","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-2665","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-2668","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-2755","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-2759","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-2761","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-2766","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-2767","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-2771","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-2777","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-2781","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-2782","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-2784","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-2786","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-2787","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-2810","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-2813","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-2817","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-2819","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-3058","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-3060","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-3063","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-3064","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-3066","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-3143","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-3156","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-3162","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-3173","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-3174","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-3185","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-3200","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-3251","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-3277","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-3282","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-3284","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-18901","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-2510","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-2537","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-2614","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-2627","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-2628","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-2737","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-2739","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-2740","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-2758","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-2805","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-2938","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-2974","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-13249","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-14765","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-14776","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-14789","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-14812","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-15180","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-2574","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-2752","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-2760","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-2812","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-2814","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-7221","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2021-2154","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2021-2166","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2021-2372","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2021-2389","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2021-27928","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2021-35604","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2021-46657","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2021-46658","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2021-46659","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2021-46661","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2021-46663","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2021-46664","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2021-46665","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2021-46668","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2021-46669","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2022-21427","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2022-21595","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2022-24048","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2022-24050","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2022-24051","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2022-24052","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2022-27376","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2022-27377","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2022-27378","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2022-27379","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2022-27380","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2022-27381","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2022-27382","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2022-27383","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2022-27384","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2022-27386","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2022-27387","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2022-27444","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2022-27445","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2022-27446","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2022-27447","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2022-27448","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2022-27449","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2022-27451","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2022-27452","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2022-27455","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2022-27456","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2022-27457","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2022-27458","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2022-32081","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2022-32083","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2022-32084","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2022-32085","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2022-32086","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2022-32087","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2022-32088","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2022-32089","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2022-32091","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2022-38791","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2022-47015","tags":["web"]},{"url":"https://www.suse.com/support/update/announcement/-2023-4991/suse-ru-20234991-1/","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2015/suse-su-20150620-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/734436","tags":["report"]},{"url":"https://bugzilla.suse.com/768832","tags":["report"]},{"url":"https://bugzilla.suse.com/780019","tags":["report"]},{"url":"https://bugzilla.suse.com/791863","tags":["report"]},{"url":"https://bugzilla.suse.com/792332","tags":["report"]},{"url":"https://bugzilla.suse.com/803040","tags":["report"]},{"url":"https://bugzilla.suse.com/830086","tags":["report"]},{"url":"https://bugzilla.suse.com/834028","tags":["report"]},{"url":"https://bugzilla.suse.com/834967","tags":["report"]},{"url":"https://bugzilla.suse.com/837801","tags":["report"]},{"url":"https://bugzilla.suse.com/857678","tags":["report"]},{"url":"https://bugzilla.suse.com/858823","tags":["report"]},{"url":"https://bugzilla.suse.com/861493","tags":["report"]},{"url":"https://bugzilla.suse.com/868673","tags":["report"]},{"url":"https://bugzilla.suse.com/873896","tags":["report"]},{"url":"https://bugzilla.suse.com/878779","tags":["report"]},{"url":"https://bugzilla.suse.com/887580","tags":["report"]},{"url":"https://bugzilla.suse.com/901237","tags":["report"]},{"url":"https://bugzilla.suse.com/914058","tags":["report"]},{"url":"https://bugzilla.suse.com/922043","tags":["report"]},{"url":"https://bugzilla.suse.com/927623","tags":["report"]},{"url":"https://www.suse.com/security/cve/CVE-2013-1861","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2013-3783","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2013-3793","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2013-3794","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2013-3795","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2013-3796","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2013-3798","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2013-3801","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2013-3802","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2013-3804","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2013-3805","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2013-3806","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2013-3807","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2013-3808","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2013-3809","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2013-3810","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2013-3811","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2013-3812","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2013-4316","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2013-5860","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2013-5881","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2013-5882","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2013-5891","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2013-5894","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2013-5908","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-0001","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-0224","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-0384","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-0386","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-0393","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-0401","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-0402","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-0412","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-0420","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-0427","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-0430","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-0431","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-0433","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-0437","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-2419","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-2430","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-2431","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-2432","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-2434","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-2435","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-2436","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-2438","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-2440","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-2442","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-2444","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-2450","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-2451","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-2484","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-2494","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-3569","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-3570","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-3571","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-3572","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-4207","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-4214","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-4233","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-4238","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-4240","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-4243","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-4258","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-4260","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-4274","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-4287","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-6463","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-6464","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-6469","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-6474","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-6478","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-6484","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-6489","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-6491","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-6494","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-6495","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-6496","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-6500","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-6505","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-6507","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-6520","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-6530","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-6551","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-6555","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-6559","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-6564","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-6568","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-8275","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-0204","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-0205","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-0206","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-0374","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-0381","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-0382","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-0385","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-0391","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-0405","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-0409","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-0411","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-0423","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-0432","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-0433","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-0438","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-0439","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-0441","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-0498","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-0499","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-0500","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-0501","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-0503","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-0505","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-0506","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-0507","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-0508","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-0511","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-2305","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-2566","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-2567","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-2568","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-2571","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-2573","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-2576","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-4000","tags":["web"]},{"url":"https://www.suse.com/support/update/announcement/2015/suse-su-20150743-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/873351","tags":["report"]},{"url":"https://bugzilla.suse.com/876282","tags":["report"]},{"url":"https://bugzilla.suse.com/880891","tags":["report"]},{"url":"https://bugzilla.suse.com/896400","tags":["report"]},{"url":"https://bugzilla.suse.com/904627","tags":["report"]},{"url":"https://bugzilla.suse.com/906117","tags":["report"]},{"url":"https://bugzilla.suse.com/906194","tags":["report"]},{"url":"https://bugzilla.suse.com/911442","tags":["report"]},{"url":"https://bugzilla.suse.com/911556","tags":["report"]},{"url":"https://bugzilla.suse.com/915911","tags":["report"]},{"url":"https://bugzilla.suse.com/915912","tags":["report"]},{"url":"https://bugzilla.suse.com/915913","tags":["report"]},{"url":"https://bugzilla.suse.com/915914","tags":["report"]},{"url":"https://bugzilla.suse.com/919229","tags":["report"]},{"url":"https://www.suse.com/security/cve/CVE-2010-5298","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-0195","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-0198","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-0221","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-3470","tags":["web"]},{"url":"https://www.suse.com/support/update/announcement/2015/suse-su-20150946-1/","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2015/suse-su-20151177-1/","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2015/suse-su-20151177-2/","tags":["advisory"]},{"url":"https://www.suse.com/security/cve/CVE-2012-5613","tags":["web"]},{"url":"https://ubuntu.com/security/CVE-2012-5615","tags":["report"]},{"url":"https://ubuntu.com/security/notices/USN-2384-1","tags":["advisory"]},{"url":"https://ubuntu.com/security/CVE-2014-4274","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2014-4287","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2014-6463","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2014-6464","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2014-6469","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2014-6478","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2014-6484","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2014-6491","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2014-6494","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2014-6495","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2014-6496","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2014-6500","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2014-6505","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2014-6507","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2014-6520","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2014-6530","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2014-6551","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2014-6555","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2014-6559","tags":["report"]},{"url":"","tags":["advisory"]}],"sources":{"cve":[{"id":"CVE-2012-5615","description":"Oracle MySQL 5.5.38 and earlier, 5.6.19 and earlier, and MariaDB 5.5.28a, 5.3.11, 5.2.13, 5.1.66, and possibly other versions, generates different error messages with different time delays depending on whether a user name exists, which allows remote attackers to enumerate valid usernames.","status":"published","published":"2012-12-03T11:00:00Z","modified":"2024-08-06T21:14:15.987Z","updated_at":"2026-11-02T14:34:49.246229Z"}],"euvd":[{"id":"EUVD-2012-5501","description":"Oracle MySQL 5.5.38 and earlier, 5.6.19 and earlier, and MariaDB 5.5.28a, 5.3.11, 5.2.13, 5.1.66, and possibly other versions, generates different error messages with different time delays depending on whether a user name exists, which allows remote attackers to enumerate valid usernames.","status":"published","published":"2012-12-03T11:00:00Z","modified":"2024-08-06T21:14:15Z","updated_at":"2026-11-03T01:56:04.46975Z"}],"ghsa":[{"id":"GHSA-7ccw-fmfw-7xm6","title":"Oracle MySQL 5.5.38 and earlier, 5.6.19 and earlier, and MariaDB 5.5.28a, 5.3.11, 5.2.13, 5.1.66,...","description":"Oracle MySQL 5.5.38 and earlier, 5.6.19 and earlier, and MariaDB 5.5.28a, 5.3.11, 5.2.13, 5.1.66, and possibly other versions, generates different error messages with different time delays depending on whether a user name exists, which allows remote attackers to enumerate valid usernames.","status":"published","published":"2022-05-17T03:11:36Z","modified":"2023-02-10T05:06:20Z","cwes":["CWE-200"],"updated_at":"2026-11-02T14:54:01.789224Z"}],"nvd":[{"id":"CVE-2012-5615","description":"Oracle MySQL 5.5.38 and earlier, 5.6.19 and earlier, and MariaDB 5.5.28a, 5.3.11, 5.2.13, 5.1.66, and possibly other versions, generates different error messages with different time delays depending on whether a user name exists, which allows remote attackers to enumerate valid usernames.","status":"published","published":"2012-12-03T12:49:43.83Z","modified":"2026-06-16T23:47:05.72Z","cvss":[{"version":"2.0","score":5,"vector":"AV:N/AC:L/Au:N/C:P/I:N/A:N","level":"medium","assessor":"primary"}],"cwes":["CWE-200"],"updated_at":"2026-11-02T14:02:16.958223Z"}],"osv":[{"id":"DSA-3054-1","title":"mysql-5.5 - security update","status":"published","published":"2014-10-20T00:00:00Z","modified":"2026-03-09T01:21:40.884738Z","updated_at":"2026-11-02T15:46:15.843838Z"},{"id":"openSUSE-SU-2024:10153-1","title":"libmysqlclient-devel-10.0.22-3.8 on GA media","description":"These are all security issues fixed in the libmysqlclient-devel-10.0.22-3.8 package on the GA media of openSUSE Tumbleweed.","status":"published","published":"2024-06-15T00:00:00Z","modified":"2026-02-04T03:47:55.298828Z","updated_at":"2026-11-02T16:58:33.135986Z"},{"id":"RHSA-2014:1859","title":"Red Hat Security Advisory: mysql55-mysql security update","status":"published","published":"2024-09-13T09:20:15Z","modified":"2026-06-29T10:07:50Z","updated_at":"2026-11-02T15:53:02.532052Z"},{"id":"RHSA-2014:1860","title":"Red Hat Security Advisory: mysql55-mysql security update","status":"published","published":"2024-09-13T09:20:20Z","modified":"2026-06-29T10:07:51Z","updated_at":"2026-11-02T15:53:02.532052Z"},{"id":"RHSA-2014:1861","title":"Red Hat Security Advisory: mariadb security update","status":"published","published":"2024-09-13T09:20:26Z","modified":"2026-06-29T10:07:52Z","updated_at":"2026-11-02T15:53:02.532052Z"},{"id":"RHSA-2014:1862","title":"Red Hat Security Advisory: mariadb55-mariadb security update","status":"published","published":"2024-09-13T09:20:33Z","modified":"2026-06-29T10:07:52Z","updated_at":"2026-11-02T15:53:02.532052Z"},{"id":"RHSA-2014:1937","title":"Red Hat Security Advisory: mariadb-galera security update","status":"published","published":"2024-09-13T09:20:27Z","modified":"2026-06-29T10:08:00Z","updated_at":"2026-11-02T15:53:02.532052Z"},{"id":"RHSA-2014:1940","title":"Red Hat Security Advisory: mariadb-galera security update","status":"published","published":"2024-09-13T09:20:32Z","modified":"2026-06-29T10:08:01Z","updated_at":"2026-11-02T15:53:02.532052Z"},{"id":"SUSE-RU-2023:3956-1","title":"Recommended update for mariadb104","description":"This update for mariadb104 fixes the following issues:\n\n- Implement version 10.4 of MariaDB (jsc#PED-2455):\n  * It is possible to use more than one authentication plugin for each user account.\n  * The root user account is being created with the ability to use two authentication plugins.\n  * All user accounts, passwords, and global privileges are now stored in the mysql.global_priv table.\n  * Is being supported for User Password Expiry, which is not active by default.\n  * Faster privilege checks for MariaDB setups with many user accounts or many database grants.\n- Update mysql-systemd-helper to be aware of custom group (bsc#1200105)\n- MariaDB is now support lz4 compression for 'INNODB'. (bsc#1186031)\n- Add 'mysql-user.conf' file to enable systemd generating mysql user in containers. (bsc#1173028)\n- Fixes an issue when MariaDB is ignoring the value of the parameter 'open_files_limit' in the global variables. (bsc#1180014)\n\n","status":"published","published":"2023-10-03T22:36:58Z","modified":"2026-02-04T02:45:10.142036Z","updated_at":"2026-11-02T15:53:41.276824Z"},{"id":"SUSE-RU-2023:4991-1","title":"Recommended update for mariadb104","description":"This update for mariadb104 fixes the following issues:\n\n- Implement version 10.4 of MariaDB (jsc#PED-2455):\n  * It is possible to use more than one authentication plugin for each user account.\n  * The root user account is being created with the ability to use two authentication plugins.\n  * All user accounts, passwords, and global privileges are now stored in the mysql.global_priv table.\n  * Is being supported for User Password Expiry, which is not active by default.\n  * Faster privilege checks for MariaDB setups with many user accounts or many database grants.\n- Update mysql-systemd-helper to be aware of custom group (bsc#1200105)\n- MariaDB is now support lz4 compression for 'INNODB'. (bsc#1186031)\n- Add 'mysql-user.conf' file to enable systemd generating mysql user in containers. (bsc#1173028)\n- Fixes an issue when MariaDB is ignoring the value of the parameter 'open_files_limit' in the global variables. (bsc#1180014)\n\n  ","status":"published","published":"2023-12-29T10:05:38Z","modified":"2026-02-04T03:48:53.052004Z","updated_at":"2026-11-02T15:53:41.276824Z"},{"id":"SUSE-SU-2015:0620-1","title":"Security update for MySQL","description":"\nThis MySQL update provides the following:\n\n    * upgrade to version 5.5.39, [bnc#887580]\n    * CVE's fixed: CVE-2014-2484, CVE-2014-4258, CVE-2014-4260,\n      CVE-2014-2494, CVE-2014-4238, CVE-2014-4207, CVE-2014-4233,\n      CVE-2014-4240, CVE-2014-4214, CVE-2014-4243\n\nSee also:\nhttp://www.oracle.com/technetwork/topics/security/cpujul2014-1972956.html\n\u003chttp://www.oracle.com/technetwork/topics/security/cpujul2014-1972956.html\u003e\n\nSecurity Issues:\n\n    * CVE-2014-2484\n      \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-2484\u003e\n    * CVE-2014-4258\n      \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-4258\u003e\n    * CVE-2014-4260\n      \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-4260\u003e\n    * CVE-2014-2494\n      \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-2494\u003e\n    * CVE-2014-4238\n      \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-4238\u003e\n    * CVE-2014-4207\n      \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-4207\u003e\n    * CVE-2014-4233\n      \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-4233\u003e\n    * CVE-2014-4240\n      \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-4240\u003e\n    * CVE-2014-4214\n      \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-4214\u003e\n    * CVE-2014-4243\n      \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-4243\u003e\n\n","status":"published","published":"2014-08-19T23:56:10Z","modified":"2026-02-04T04:24:15.175685Z","updated_at":"2026-11-02T15:53:41.276824Z"},{"id":"SUSE-SU-2015:0743-1","title":"Security update for mariadb","description":"mariadb was updated to version 10.0.16 to fix 40 security issues.\n\nThese security issues were fixed:\n- CVE-2015-0411: Unspecified vulnerability in Oracle MySQL Server 5.5.40 and earlier, and 5.6.21 and earlier, allowed remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Server : Security : Encryption (bnc#915911).\n- CVE-2015-0382: Unspecified vulnerability in Oracle MySQL Server 5.5.40 and earlier and 5.6.21 and earlier allowed remote attackers to affect availability via unknown vectors related to Server : Replication, a different vulnerability than CVE-2015-0381 (bnc#915911).\n- CVE-2015-0381: Unspecified vulnerability in Oracle MySQL Server 5.5.40 and earlier and 5.6.21 and earlier allowed remote attackers to affect availability via unknown vectors related to Server : Replication, a different vulnerability than CVE-2015-0382 (bnc#915911).\n- CVE-2015-0432: Unspecified vulnerability in Oracle MySQL Server 5.5.40 and earlier allowed remote authenticated users to affect availability via vectors related to Server : InnoDB : DDL : Foreign Key (bnc#915911).\n- CVE-2014-6568: Unspecified vulnerability in Oracle MySQL Server 5.5.40 and earlier, and 5.6.21 and earlier, allowed remote authenticated users to affect availability via vectors related to Server : InnoDB : DML (bnc#915911).\n- CVE-2015-0374: Unspecified vulnerability in Oracle MySQL Server 5.5.40 and earlier and 5.6.21 and earlier allowed remote authenticated users to affect confidentiality via unknown vectors related to Server : Security : Privileges : Foreign Key (bnc#915911).\n- CVE-2014-6507: Unspecified vulnerability in Oracle MySQL Server 5.5.39 and earlier, and 5.6.20 and earlier, allowed remote authenticated users to affect confidentiality, integrity, and availability via vectors related to SERVER:DML (bnc#915912).\n- CVE-2014-6491: Unspecified vulnerability in Oracle MySQL Server 5.5.39 and earlier and 5.6.20 and earlier allowed remote attackers to affect confidentiality, integrity, and availability via vectors related to SERVER:SSL:yaSSL, a different vulnerability than CVE-2014-6500 (bnc#915912).\n- CVE-2014-6500: Unspecified vulnerability in Oracle MySQL Server 5.5.39 and earlier, and 5.6.20 and earlier, allowed remote attackers to affect confidentiality, integrity, and availability via vectors related to SERVER:SSL:yaSSL, a different vulnerability than CVE-2014-6491 (bnc#915912).\n- CVE-2014-6469: Unspecified vulnerability in Oracle MySQL Server 5.5.39 and eariler and 5.6.20 and earlier allowed remote authenticated users to affect availability via vectors related to SERVER:OPTIMIZER (bnc#915912).\n- CVE-2014-6555: Unspecified vulnerability in Oracle MySQL Server 5.5.39 and earlier and 5.6.20 and earlier allowed remote authenticated users to affect confidentiality, integrity, and availability via vectors related to SERVER:DML (bnc#915912).\n- CVE-2014-6559: Unspecified vulnerability in Oracle MySQL Server 5.5.39 and earlier, and 5.6.20 and earlier, allowed remote attackers to affect confidentiality via vectors related to C API SSL CERTIFICATE HANDLING (bnc#915912).\n- CVE-2014-6494: Unspecified vulnerability in Oracle MySQL Server 5.5.39 and earlier, and 5.6.20 and earlier, allowed remote attackers to affect availability via vectors related to CLIENT:SSL:yaSSL, a different vulnerability than CVE-2014-6496 (bnc#915912).\n- CVE-2014-6496: Unspecified vulnerability in Oracle MySQL Server 5.5.39 and earlier, and 5.6.20 and earlier, allowed remote attackers to affect availability via vectors related to CLIENT:SSL:yaSSL, a different vulnerability than CVE-2014-6494 (bnc#915912).\n- CVE-2014-6464: Unspecified vulnerability in Oracle MySQL Server 5.5.39 and earlier and 5.6.20 and earlier allowed remote authenticated users to affect availability via vectors related to SERVER:INNODB DML FOREIGN KEYS (bnc#915912).\n- CVE-2010-5298: Race condition in the ssl3_read_bytes function in s3_pkt.c in OpenSSL through 1.0.1g, when SSL_MODE_RELEASE_BUFFERS is enabled, allowed remote attackers to inject data across sessions or cause a denial of service (use-after-free and parsing error) via an SSL connection in a multithreaded environment (bnc#873351).\n- CVE-2014-0195: The dtls1_reassemble_fragment function in d1_both.c in OpenSSL before 0.9.8za, 1.0.0 before 1.0.0m, and 1.0.1 before 1.0.1h did not properly validate fragment lengths in DTLS ClientHello messages, which allowed remote attackers to execute arbitrary code or cause a denial of service (buffer overflow and application crash) via a long non-initial fragment (bnc#880891).\n- CVE-2014-0198: The do_ssl3_write function in s3_pkt.c in OpenSSL 1.x through 1.0.1g, when SSL_MODE_RELEASE_BUFFERS is enabled, did not properly manage a buffer pointer during certain recursive calls, which allowed remote attackers to cause a denial of service (NULL pointer dereference and application crash) via vectors that trigger an alert condition (bnc#876282).\n- CVE-2014-0221: The dtls1_get_message_fragment function in d1_both.c in OpenSSL before 0.9.8za, 1.0.0 before 1.0.0m, and 1.0.1 before 1.0.1h allowed remote attackers to cause a denial of service (recursion and client crash) via a DTLS hello message in an invalid DTLS handshake (bnc#915913).\n- CVE-2014-0224: OpenSSL before 0.9.8za, 1.0.0 before 1.0.0m, and 1.0.1 before 1.0.1h did not properly restrict processing of ChangeCipherSpec messages, which allowed man-in-the-middle attackers to trigger use of a zero-length master key in certain OpenSSL-to-OpenSSL communications, and consequently hijack sessions or obtain sensitive information, via a crafted TLS handshake, aka the 'CCS Injection' vulnerability (bnc#915913).\n- CVE-2014-3470: The ssl3_send_client_key_exchange function in s3_clnt.c in OpenSSL before 0.9.8za, 1.0.0 before 1.0.0m, and 1.0.1 before 1.0.1h, when an anonymous ECDH cipher suite is used, allowed remote attackers to cause a denial of service (NULL pointer dereference and client crash) by triggering a NULL certificate value (bnc#915913).\n- CVE-2014-6474: Unspecified vulnerability in Oracle MySQL Server 5.6.19 and earlier allowed remote authenticated users to affect availability via vectors related to SERVER:MEMCACHED (bnc#915913).\n- CVE-2014-6489: Unspecified vulnerability in Oracle MySQL Server 5.6.19 and earlier allowed remote authenticated users to affect integrity and availability via vectors related to SERVER:SP (bnc#915913).\n- CVE-2014-6564: Unspecified vulnerability in Oracle MySQL Server 5.6.19 and earlier allowed remote authenticated users to affect availability via vectors related to SERVER:INNODB FULLTEXT SEARCH DML (bnc#915913).\n- CVE-2012-5615: Oracle MySQL 5.5.38 and earlier, 5.6.19 and earlier, and MariaDB 5.5.28a, 5.3.11, 5.2.13, 5.1.66, and possibly other versions, generates different error messages with different time delays depending on whether a user name exists, which allowed remote attackers to enumerate valid usernames (bnc#915913).\n- CVE-2014-4274: Unspecified vulnerability in Oracle MySQL Server 5.5.38 and earlier and 5.6.19 and earlier allowed local users to affect confidentiality, integrity, and availability via vectors related to SERVER:MyISAM (bnc#896400).\n- CVE-2014-4287: Unspecified vulnerability in Oracle MySQL Server 5.5.38 and earlier and 5.6.19 and earlier allowed remote authenticated users to affect availability via vectors related to SERVER:CHARACTER SETS (bnc#915913).\n- CVE-2014-6463: Unspecified vulnerability in Oracle MySQL Server 5.5.38 and earlier and 5.6.19 and earlier allowed remote authenticated users to affect availability via vectors related to SERVER:REPLICATION ROW FORMAT BINARY LOG DML (bnc#915913).\n- CVE-2014-6478: Unspecified vulnerability in Oracle MySQL Server 5.5.38 and earlier, and 5.6.19 and earlier, allowed remote attackers to affect integrity via vectors related to SERVER:SSL:yaSSL (bnc#915913).\n- CVE-2014-6484: Unspecified vulnerability in Oracle MySQL Server 5.5.38 and earlier, and 5.6.19 and earlier, allowed remote authenticated users to affect availability via vectors related to SERVER:DML (bnc#915913).\n- CVE-2014-6495: Unspecified vulnerability in Oracle MySQL Server 5.5.38 and earlier, and 5.6.19 and earlier, allowed remote attackers to affect availability via vectors related to SERVER:SSL:yaSSL (bnc#915913).\n- CVE-2014-6505: Unspecified vulnerability in Oracle MySQL Server 5.5.38 and earlier, and 5.6.19 and earlier, allowed remote authenticated users to affect availability via vectors related to SERVER:MEMORY STORAGE ENGINE (bnc#915913).\n- CVE-2014-6520: Unspecified vulnerability in Oracle MySQL Server 5.5.38 and earlier allowed remote authenticated users to affect availability via vectors related to SERVER:DDL (bnc#915913).\n- CVE-2014-6530: Unspecified vulnerability in Oracle MySQL Server 5.5.38 and earlier, and 5.6.19 and earlier, allowed remote authenticated users to affect confidentiality, integrity, and availability via vectors related to CLIENT:MYSQLDUMP (bnc#915913).\n- CVE-2014-6551: Unspecified vulnerability in Oracle MySQL Server 5.5.38 and earlier and 5.6.19 and earlier allowed local users to affect confidentiality via vectors related to CLIENT:MYSQLADMIN (bnc#915913).\n- CVE-2015-0391: Unspecified vulnerability in Oracle MySQL Server 5.5.38 and earlier, and 5.6.19 and earlier, allowed remote authenticated users to affect availability via vectors related to DDL (bnc#915913).\n- CVE-2014-4258: Unspecified vulnerability in the MySQL Server component in Oracle MySQL 5.5.37 and earlier and 5.6.17 and earlier allowed remote authenticated users to affect confidentiality, integrity, and availability via vectors related to SRINFOSC (bnc#915914).\n- CVE-2014-4260: Unspecified vulnerability in the MySQL Server component in Oracle MySQL 5.5.37 and earlier, and 5.6.17 and earlier, allowed remote authenticated users to affect integrity and availability via vectors related to SRCHAR (bnc#915914).\n- CVE-2014-2494: Unspecified vulnerability in the MySQL Server component in Oracle MySQL 5.5.37 and earlier allowed remote authenticated users to affect availability via vectors related to ENARC (bnc#915914).\n- CVE-2014-4207: Unspecified vulnerability in the MySQL Server component in Oracle MySQL 5.5.37 and earlier allowed remote authenticated users to affect availability via vectors related to SROPTZR (bnc#915914).\n\nThese non-security issues were fixed:\n- Get query produced incorrect results in MariaDB 10.0.11 vs MySQL 5.5 - SLES12 (bnc#906194).\n- After update to version 10.0.14 mariadb did not start - Job for mysql.service failed (bnc#911442).\n- Fix crash when disk full situation is reached on alter table (bnc#904627).\n- Allow md5 in FIPS mode (bnc#911556).\n- Fixed a situation when bit and hex string literals unintentionally changed column names (bnc#919229).\n\nRelease notes: https://kb.askmonty.org/en/mariadb-10016-release-notes/\n","status":"published","published":"2015-03-03T00:49:26Z","modified":"2026-02-04T03:04:53.922266Z","updated_at":"2026-11-02T15:53:41.276824Z"},{"id":"SUSE-SU-2015:0946-1","title":"Security update for MySQL","description":"\nThis MySQL update provides the following:\n\n    * upgrade to version 5.5.39, [bnc#887580]\n    * CVE's fixed: CVE-2014-2484, CVE-2014-4258, CVE-2014-4260,\n      CVE-2014-2494, CVE-2014-4238, CVE-2014-4207, CVE-2014-4233,\n      CVE-2014-4240, CVE-2014-4214, CVE-2014-4243\n\nSee also:\nhttp://www.oracle.com/technetwork/topics/security/cpujul2014-1972956.html\n\u003chttp://www.oracle.com/technetwork/topics/security/cpujul2014-1972956.html\u003e\n\nSecurity Issues:\n\n    * CVE-2014-2484\n      \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-2484\u003e\n    * CVE-2014-4258\n      \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-4258\u003e\n    * CVE-2014-4260\n      \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-4260\u003e\n    * CVE-2014-2494\n      \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-2494\u003e\n    * CVE-2014-4238\n      \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-4238\u003e\n    * CVE-2014-4207\n      \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-4207\u003e\n    * CVE-2014-4233\n      \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-4233\u003e\n    * CVE-2014-4240\n      \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-4240\u003e\n    * CVE-2014-4214\n      \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-4214\u003e\n    * CVE-2014-4243\n      \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-4243\u003e\n\n","status":"published","published":"2014-08-19T23:56:10Z","modified":"2026-02-04T02:29:58.141198Z","updated_at":"2026-11-02T15:53:41.276824Z"},{"id":"SUSE-SU-2015:1177-1","title":"Security update for MySQL","description":"\nThis MySQL update provides the following:\n\n    * upgrade to version 5.5.39, [bnc#887580]\n    * CVE's fixed: CVE-2014-2484, CVE-2014-4258, CVE-2014-4260,\n      CVE-2014-2494, CVE-2014-4238, CVE-2014-4207, CVE-2014-4233,\n      CVE-2014-4240, CVE-2014-4214, CVE-2014-4243\n\nSee also:\nhttp://www.oracle.com/technetwork/topics/security/cpujul2014-1972956.html\n\u003chttp://www.oracle.com/technetwork/topics/security/cpujul2014-1972956.html\u003e\n\nSecurity Issues:\n\n    * CVE-2014-2484\n      \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-2484\u003e\n    * CVE-2014-4258\n      \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-4258\u003e\n    * CVE-2014-4260\n      \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-4260\u003e\n    * CVE-2014-2494\n      \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-2494\u003e\n    * CVE-2014-4238\n      \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-4238\u003e\n    * CVE-2014-4207\n      \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-4207\u003e\n    * CVE-2014-4233\n      \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-4233\u003e\n    * CVE-2014-4240\n      \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-4240\u003e\n    * CVE-2014-4214\n      \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-4214\u003e\n    * CVE-2014-4243\n      \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-4243\u003e\n\n","status":"published","published":"2014-08-19T23:56:10Z","modified":"2026-02-04T02:16:44.028585Z","updated_at":"2026-11-02T15:53:43.030986Z"},{"id":"SUSE-SU-2015:1177-2","title":"Security update for MySQL","description":"\nA stack-based buffer overflow in MySQL has been fixed that could have \ncaused a Denial of Service or potentially allowed the execution of \narbitrary code (CVE-2012-5611).\n\nSecurity Issue references:\n\n    * CVE-2012-5615\n      \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-5615\u003e\n    * CVE-2012-5615\n      \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-5615\u003e\n    * CVE-2012-5613\n      \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-5613\u003e\n    * CVE-2012-5612\n      \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-5612\u003e\n    * CVE-2012-5611\n      \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-5611\u003e\n\n","status":"published","published":"2012-12-27T16:15:49Z","modified":"2026-02-04T03:58:21.906233Z","updated_at":"2026-11-02T15:53:43.030986Z"},{"id":"UBUNTU-CVE-2012-5615","description":"Oracle MySQL 5.5.38 and earlier, 5.6.19 and earlier, and MariaDB 5.5.28a, 5.3.11, 5.2.13, 5.1.66, and possibly other versions, generates different error messages with different time delays depending on whether a user name exists, which allows remote attackers to enumerate valid usernames.","status":"published","published":"2012-12-03T00:00:00Z","modified":"2026-04-22T09:18:11.621429Z","updated_at":"2026-11-02T15:54:06.854805Z"},{"id":"USN-2384-1","title":"mysql-5.5 vulnerabilities","description":"Multiple security issues were discovered in MySQL and this update includes\na new upstream MySQL version to fix these issues. MySQL has been updated to\n5.5.40.\n\nIn addition to security fixes, the updated packages contain bug fixes,\nnew features, and possibly incompatible changes.\n\nPlease see the following for more information:\nhttp://dev.mysql.com/doc/relnotes/mysql/5.5/en/news-5-5-39.html\nhttp://dev.mysql.com/doc/relnotes/mysql/5.5/en/news-5-5-40.html\nhttp://www.oracle.com/technetwork/topics/security/cpuoct2014-1972960.html\n","status":"published","published":"2014-10-15T19:50:31Z","modified":"2026-04-22T09:03:02.832918Z","updated_at":"2026-11-02T16:58:09.227524Z"}]}}