CVE-2013-3805

Unspecified vulnerability in the MySQL Server component in Oracle MySQL 5.5.30 and earlier and 5.6.10 allows remote authenticated users to affect availability via unknown vectors related to Prepared Statements.

CVSS v2.0 4.0 MEDIUM

4.0^/10

CVSS v2.0 : MEDIUM

V2 Legend

Vector : AV:N/AC:L/Au:S/C:N/I:N/A:P

Exploitability : 8.0 / Impact : 2.9

Access Vector NETWORK

Access Complexity LOW

Authentication SINGLE

Confidentiality Impact NONE

Integrity Impact NONE

Availability Impact PARTIAL

References

Link	Resource
http://lists.opensuse.org/opensuse-security-announce/2013-08/msg00022.html	Mailing List Third Party Advisory
http://lists.opensuse.org/opensuse-security-announce/2013-10/msg00001.html	Mailing List Third Party Advisory
http://lists.opensuse.org/opensuse-updates/2013-08/msg00024.html	Mailing List Third Party Advisory
http://lists.opensuse.org/opensuse-updates/2013-09/msg00008.html	Mailing List Third Party Advisory
http://osvdb.org/95327	Broken Link
http://www.oracle.com/technetwork/topics/security/bulletinoct2015-2511968.html	Vendor Advisory
http://www.oracle.com/technetwork/topics/security/cpujuly2013-1899826.html	Vendor Advisory

Configurations

Configuration 1 (hide)

OR	cpe:2.3:a:oracle:mysql::::::::
	cpe:2.3:a:oracle:mysql::::::::

Configuration 2 (hide)

cpe:2.3:o:oracle:solaris:11.3:*:*:*:*:*:*:*

Configuration 3 (hide)

OR	cpe:2.3:o:suse:linux_enterprise_desktop:11:sp3::::::
	cpe:2.3:o:suse:linux_enterprise_server:11:sp3::::-::*
	cpe:2.3:o:suse:linux_enterprise_server:11:sp3::::vmware::*
	cpe:2.3:o:suse:linux_enterprise_software_development_kit:11:sp3::::::

Configuration 4 (hide)

OR	cpe:2.3:o:opensuse:opensuse:11.4:::::::*
	cpe:2.3:o:opensuse:opensuse:12.2:::::::*
	cpe:2.3:o:opensuse:opensuse:12.3:::::::*

Configuration 5 (hide)

OR	cpe:2.3:a:mariadb:mariadb::::::::
	cpe:2.3:a:mariadb:mariadb::::::::

History

26 Aug 2022, 17:23

Type	Values Removed	Values Added
References	~~(SUSE) http://lists.opensuse.org/opensuse-security-announce/2013-08/msg00022.html - Third Party Advisory~~	(SUSE) http://lists.opensuse.org/opensuse-security-announce/2013-08/msg00022.html - Mailing List, Third Party Advisory
References	~~(SUSE) http://lists.opensuse.org/opensuse-security-announce/2013-10/msg00001.html - Third Party Advisory~~	(SUSE) http://lists.opensuse.org/opensuse-security-announce/2013-10/msg00001.html - Mailing List, Third Party Advisory
References	~~(SUSE) http://lists.opensuse.org/opensuse-updates/2013-09/msg00008.html - Third Party Advisory~~	(SUSE) http://lists.opensuse.org/opensuse-updates/2013-09/msg00008.html - Mailing List, Third Party Advisory
References	~~(SUSE) http://lists.opensuse.org/opensuse-updates/2013-08/msg00024.html - Third Party Advisory~~	(SUSE) http://lists.opensuse.org/opensuse-updates/2013-08/msg00024.html - Mailing List, Third Party Advisory
First Time		Mariadb Mariadb mariadb
CPE	cpe:2.3:a:oracle:mysql:5.5.10:::::::* cpe:2.3:a:oracle:mysql:5.5.19:::::::* cpe:2.3:a:oracle:mysql:5.5.29:::::::* cpe:2.3:a:oracle:mysql:5.6.1:::::::* cpe:2.3:a:oracle:mysql:5.5.22:::::::* cpe:2.3:a:oracle:mysql:5.5.0:::::::* cpe:2.3:a:oracle:mysql:5.5.24:::::::* cpe:2.3:a:oracle:mysql:5.5.21:::::::* cpe:2.3:a:oracle:mysql:5.5.17:::::::* cpe:2.3:a:oracle:mysql:5.5.23:::::::* cpe:2.3:a:oracle:mysql:5.5.25:::::::* cpe:2.3:a:oracle:mysql:5.6.9:::::::* cpe:2.3:a:oracle:mysql:5.5.5:::::::* cpe:2.3:a:oracle:mysql:5.6.7:::::::* cpe:2.3:a:oracle:mysql:5.5.7:::::::* cpe:2.3:a:oracle:mysql:5.5.6:::::::* cpe:2.3:a:oracle:mysql:5.6.5:::::::* cpe:2.3:a:oracle:mysql:5.6.4:::::::* cpe:2.3:a:oracle:mysql:5.5.3:::::::* cpe:2.3:a:oracle:mysql:5.5.26:::::::* cpe:2.3:a:oracle:mysql:5.6.3:::::::* cpe:2.3:a:oracle:mysql:5.6.6:::::::* cpe:2.3:a:oracle:mysql:5.5.12:::::::* cpe:2.3:a:oracle:mysql:5.5.28:::::::* cpe:2.3:a:oracle:mysql:5.6.2:::::::* cpe:2.3:a:oracle:mysql:5.5.20:::::::* cpe:2.3:o:suse:linux_enterprise_server:11:sp3:::::: cpe:2.3:a:oracle:mysql:5.5.13:::::::* cpe:2.3:a:oracle:mysql:5.5.11:::::::* cpe:2.3:a:oracle:mysql:5.5.1:::::::* cpe:2.3:a:oracle:mysql:5.5.2:::::::* cpe:2.3:a:oracle:mysql:5.5.25:a:::::: cpe:2.3:a:oracle:mysql:5.5.15:::::::* cpe:2.3:a:oracle:mysql:5.5.18:::::::* cpe:2.3:a:oracle:mysql:5.6.0:::::::* cpe:2.3:a:oracle:mysql:5.5.14:::::::* cpe:2.3:a:oracle:mysql:5.5.4:::::::* cpe:2.3:a:oracle:mysql:5.5.27:::::::* cpe:2.3:a:oracle:mysql:5.5.9:::::::* cpe:2.3:a:oracle:mysql:5.5.16:::::::* cpe:2.3:a:oracle:mysql:5.6.8:::::::*	cpe:2.3:a:mariadb:mariadb:::::::: cpe:2.3:o:suse:linux_enterprise_server:11:sp3::::-::*

Information

Published : 2013-07-17 13:41

Updated : 2023-12-10 11:16

NVD link : CVE-2013-3805

Mitre link : CVE-2013-3805

CVE.ORG link : CVE-2013-3805

JSON object : View

Products Affected

oracle

solaris
mysql

suse

linux_enterprise_server
linux_enterprise_desktop
linux_enterprise_software_development_kit

mariadb

mariadb

opensuse

opensuse

CWE

NVD-CWE-noinfo

4.0 /10