Description
Unspecified vulnerability in Oracle MySQL Server 5.1.62 and earlier, and 5.5.23 and earlier, allows remote authenticated users to affect availability via unknown vectors related to Server Optimizer.
Fixed in Linux distributions
Distributions backport fixes, so the version that fixes this vulnerability differs per release — upgrade to at least the version shown. From the distributions' security trackers and advisories.
Debian
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Debian 6.0 | mysql-5.1 | 5.1.63-0+squeeze1 | DSA-2496-1 |
Red Hat
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| RHEL 6 | mysql +7 | 5.1.66-1.el6_3 | RHSA-2012:1462 |
Advisories 2
- RHSA-2012:1462 Red Hat Security Advisory: mysql security update Red Hat Security Advisories (RHSA) · Jun 28, 2026
- DSA-2496-1 mysql-5.1 - several Debian Security (DSA / DLA) · Mar 9, 2026
References
- mysql-servopt-dos(77064) vdb-entry
- RHSA-2012:1462 vendor-advisory
- 1027263 vdb-entry
- 53372 third-party-advisory
- 54540 vdb-entry
- GLSA-201308-06 vendor-advisory
- 51309 third-party-advisory
- http://www.oracle.com/technetwork/topics/security/cpujul2012-392727.html
- 83979 vdb-entry
- MDVSA-2013:150 vendor-advisory