What’s Vulnerable › Vulnerabilities

CVE-2012-2122

• Severity: medium (CVSS 5.1 v2.0)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 96.5% probability of exploitation in the next 30 days
• Public exploit or detection template: yes
• Published: 2012-06-26 · updated 2026-06-16
• Weakness: CWE-287

Description

sql/password.c in Oracle MySQL 5.1.x before 5.1.63, 5.5.x before 5.5.24, and 5.6.x before 5.6.6, and MariaDB 5.1.x before 5.1.62, 5.2.x before 5.2.12, 5.3.x before 5.3.6, and 5.5.x before 5.5.23, when running in certain environments with certain implementations of the memcmp function, allows remote attackers to bypass authentication by repeatedly authenticating with the same incorrect password, which eventually causes a token comparison to succeed due to an improperly-checked return value.

Affected products

• MariaDB: 5.1.41, 5.1.42, 5.1.44, 5.1.47, 5.1.49, 5.1.50 (+27)
• MySQL Server: 5.1.51, 5.1.52, 5.1.52-sp1, 5.1.53, 5.1.54, 5.1.55 (+22)

References

• http://bugs.mysql.com/bug.php?id=64884
• http://kb.askmonty.org/en/mariadb-5162-release-notes/
• http://lists.opensuse.org/opensuse-security-announce/2012-08/msg00007.html
• http://seclists.org/oss-sec/2012/q2/493
• http://secunia.com/advisories/49417
• http://secunia.com/advisories/53372
• http://security.gentoo.org/glsa/glsa-201308-06.xml
• http://securitytracker.com/id?1027143
• http://www.exploit-db.com/exploits/19092
• http://www.securityfocus.com/bid/53911
• https://community.rapid7.com/community/metasploit/blog/2012/06/11/cve-2012-2122-a-tragically-comedic-security-flaw-in-mysql
• http://bugs.mysql.com/bug.php?id=64884

Get alerted when CVE-2012-2122 or the next vulnerability affects your stack