CVE-2012-5614: Oracle MySQL 5.1.67 and earlier and 5.5.29 and earlier, and MariaDB 5.5.28a and possibly other versions, al...

Security readout for executives and security teams

This is a denial-of-service issue in older MySQL and MariaDB releases. A remote user who can authenticate to the database may trigger a mysqld crash using malformed XML processing. The main business risk is outage of applications that rely on affected database servers. Exposure is most likely in legacy MySQL or MariaDB deployments where database accounts allow remote authenticated access. Internet-exposed database services, shared hosting, and environments with broad application-user privileges carry higher operational risk. Prioritize remediation where affected databases support customer-facing, revenue, or operationally critical applications. The issue requires authentication, but a database crash can still create material downtime if legacy systems remain exposed. Mitigation focus: Inventory MySQL and MariaDB versions across production and legacy systems.; Apply vendor-fixed packages or guidance from Oracle, Red Hat, Gentoo, MariaDB, or distro maintainers.; Restrict remote database access to trusted application hosts and required users..

Prepared

Jun 24, 2026, 12:04 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.