Signature Detail
This site is deprecated. Please CLICK HERE for latest updates
Short Name |
DB:MYSQL:UPDATEXML-DOS |
|---|---|
Severity |
Minor |
Recommended |
No |
Recommended Action |
Drop |
Category |
DB |
Keywords |
Oracle MySQL UpdateXML Denial Of Service |
Release Date |
2012/12/05 |
Update Number |
2208 |
Supported Platforms |
idp-4.0.110090709+, isg-3.1.134269+, j-series-9.5+, mx-11.4+, srx-12.1+, srx-branch-12.1+, vmx-17.4+, vsrx-12.1+, vsrx3bsd-18.2+ |
DB: Oracle MySQL UpdateXML Denial Of Service
This signature detects attempts to exploit a known vulnerability in the Oracle MySQL database server. A successful attack can result in a denial-of-service condition.
Extended Description
Oracle MySQL 5.1.67 and earlier and 5.5.29 and earlier, and MariaDB 5.5.28a and possibly other versions, allows remote authenticated users to cause a denial of service (mysqld crash) via a SELECT command with an UpdateXML command containing XML with a large number of unique, nested elements.
Affected Products
- Mariadb mariadb 5.5.28a
- Oracle mysql 5.5.19
References
- CVE: CVE-2012-5614