Description
Unspecified vulnerability in the MySQL Server component in Oracle MySQL 5.1.69 and earlier, 5.5.31 and earlier, and 5.6.11 and earlier allows remote authenticated users to affect availability via unknown vectors related to Server Optimizer.
Fixed in Linux distributions
Distributions backport fixes, so the version that fixes this vulnerability differs per release — upgrade to at least the version shown. From the distributions' security trackers and advisories.
Debian
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Debian 7 | mysql-5.5 | 5.5.33+dfsg-0+wheezy1 | DSA-2818-1 |
| Debian 6.0 | mysql-5.1 | 5.1.72-2 | DSA-2780-1 |
Red Hat
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| RHEL 6 | mysql +7 | 5.1.71-1.el6 | RHBA-2013:1647 |
Advisories 3
- RHBA-2013:1647 Red Hat Bug Fix Advisory: mysql bug fix update Red Hat Security Advisories (RHSA) · Jun 29, 2026
- DSA-2780-1 mysql-5.1 - several Debian Security (DSA / DLA) · Mar 9, 2026
- DSA-2818-1 mysql-5.5 - several Debian Security (DSA / DLA) · Mar 9, 2026
References
- 95328 vdb-entry
- 54300 third-party-advisory
- DSA-2818 vendor-advisory
- 53372 third-party-advisory
- http://www.oracle.com/technetwork/topics/security/cpujuly2013-1899826.html
- GLSA-201308-06 vendor-advisory
- openSUSE-SU-2013:1335 vendor-advisory
- USN-1909-1 vendor-advisory
- SUSE-SU-2013:1390 vendor-advisory
- oracle-cpujuly2013-cve20133804(85715) vdb-entry
- openSUSE-SU-2013:1410 vendor-advisory
- SUSE-SU-2013:1529 vendor-advisory