Approved changes feed: RSS · Atom

cpe:2.3:a:mariadb:mariadb:5.2.13:*:*:*:*:*:*:*

part: a version: 5.2.13 update: *

VendorMariadb (7f603b14-ed39-5458-877b-2a349be64aa8)
ProductMariadb (f53ad24a-fa82-58e9-8aea-d11d98960d9a)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
pkg:deb/debian/mariadb-server purl2cpe 2026-06-01 10:16:17.613273
pkg:deb/ubuntu/mariadb-server purl2cpe 2026-06-01 10:16:17.613275
pkg:docker/mariadb/mariadb-docker purl2cpe 2026-06-01 10:16:17.613276
pkg:docker/mariadb/server purl2cpe 2026-06-01 10:16:17.613278
pkg:github/mariadb/server purl2cpe 2026-06-01 10:16:17.613279
pkg:rpm/fedora/mariadb purl2cpe 2026-06-01 10:16:17.613280
pkg:rpm/opensuse/mariadb purl2cpe 2026-06-01 10:16:17.613282

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2012-5615 vulnerable 2026-06-08 05:02:57.551404 Details available
Oracle MySQL 5.5.38 and earlier, 5.6.19 and earlier, and MariaDB 5.5.28a, 5.3.11, 5.2.13, 5.1.66, and possibly other versions, generates different error messages with different time delays depending on whether a user name exists, which allows remote attackers to enumerate valid usernames.
Published: 2012-12-03T11:00:00.000Z
Updated: 2024-08-06T21:14:15.987Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.