[VIM] Oracle MySQL 'acl_get()' Buffer Overflow Vulnerability

George A. Theall theall at tenable.com
Tue Dec 4 14:59:32 CST 2012


There are currently two recent BIDs involving a buffer overflow in MySQL / MariaDB : 56750 and 56769. The later specifically mentions the 'acl_get()' function while the older does not have much in the way of details. Cross-referencing the CVEs, though, suggests they're the same issue, taking into account that Mitre had rejected CVE-2012-5579 and points people to CVE-2012-5611 instead.

Venkat or Rob: are there plans to retire one of these BIDs?

George
-- 
theall at tenable.com






More information about the VIM mailing list