MySQL Stack based buffer overrun PoC Zeroday

[bharper]

There are reports coming out of some zerodays effecting MySQL:

http://seclists.org/fulldisclosure/2012/Dec/42

We are currently looking into these and will update this bug when additional information becomes available.

-Ben

[Jeffrey Ness (jeffrey-ness)]

According to https://bugzilla.redhat.com/show_bug.cgi?id=881064 Oracle does have a bug tracker;
however, it is marked private:

  http://bugs.mysql.com/bug.php?id=67685

Oracle clearly does not have the communities interest in the software they acquired.

[bharper (bharper)]

This issue got patched in MySQL 5.5.29[0]:

Very long database names in queries could cause the server to exit. (Bug #15912213, Bug #16900358)

-Ben
[0] http://dev.mysql.com/doc/relnotes/mysql/5.5/en/news-5-5-29.html