CVE catalog

CVE-2012-5627

UBUNTU-CVE-2012-5627

[CVE catalog]

Severity
Unknown
Published
Updated
Source
[NVD] · [CVE record]
EPSS
11.41% · Oct 25, 2026

Oracle MySQL and MariaDB 5.5.x before 5.5.29, 5.3.x before 5.3.12, and 5.2.x before 5.2.14 does not modify the salt during multiple executions of the change_user command within the same connection which makes it easier for remote authenticated users to conduct brute force password guessing attacks.

Vulnerable and fixed packages

Distribution-reported package versions and fixes. These do not depend on matching against the OpenFactory package catalog.

DistributionPackageReleaseVersionStatus
Ubuntumysql-5.514.045.5.32-0ubuntu7vulnerable
Ubuntumysql-5.514.045.5.34-0ubuntu1vulnerable
Ubuntumysql-5.514.045.5.34-0ubuntu2vulnerable
Ubuntumysql-5.514.045.5.35-0ubuntu1vulnerable
Ubuntumysql-5.514.045.5.35+dfsg-1ubuntu1vulnerable
Ubuntumysql-5.514.045.5.37-0ubuntu0.14.04.1vulnerable
Ubuntumysql-5.514.045.5.38-0ubuntu0.14.04.1vulnerable
Ubuntumysql-5.514.045.5.40-0ubuntu0.14.04.1vulnerable
Ubuntumysql-5.514.045.5.41-0ubuntu0.14.04.1vulnerable
Ubuntumysql-5.514.045.5.43-0ubuntu0.14.04.1vulnerable
Ubuntumysql-5.514.045.5.44-0ubuntu0.14.04.1vulnerable
Ubuntumysql-5.514.045.5.46-0ubuntu0.14.04.2vulnerable
Ubuntumysql-5.514.045.5.47-0ubuntu0.14.04.1vulnerable
Ubuntumysql-5.514.045.5.49-0ubuntu0.14.04.1vulnerable
Ubuntumysql-5.514.045.5.50-0ubuntu0.14.04.1vulnerable
Ubuntumysql-5.514.045.5.52-0ubuntu0.14.04.1vulnerable
Ubuntumysql-5.514.045.5.53-0ubuntu0.14.04.1vulnerable
Ubuntumysql-5.514.045.5.54-0ubuntu0.14.04.1vulnerable
Ubuntumysql-5.514.045.5.55-0ubuntu0.14.04.1vulnerable
Ubuntumysql-5.514.045.5.57-0ubuntu0.14.04.1vulnerable
Ubuntumysql-5.514.045.5.58-0ubuntu0.14.04.1vulnerable
Ubuntumysql-5.514.045.5.59-0ubuntu0.14.04.1vulnerable
Ubuntumysql-5.514.045.5.60-0ubuntu0.14.04.1vulnerable
Ubuntumysql-5.514.045.5.61-0ubuntu0.14.04.1vulnerable
Ubuntumysql-5.514.045.5.62-0ubuntu0.14.04.1vulnerable

Fixed-version evidence

OpenFactory catalog packages

No matching packages in this catalog.

Observed:

References