Approved changes feed: RSS · Atom

cpe:2.3:a:mariadb:mariadb:5.3.11:*:*:*:*:*:*:*

part: a version: 5.3.11 update: *

VendorMariadb (7f603b14-ed39-5458-877b-2a349be64aa8)
ProductMariadb (f53ad24a-fa82-58e9-8aea-d11d98960d9a)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
pkg:deb/debian/mariadb-server purl2cpe 2026-06-01 10:16:17.613398
pkg:deb/ubuntu/mariadb-server purl2cpe 2026-06-01 10:16:17.613400
pkg:docker/mariadb/mariadb-docker purl2cpe 2026-06-01 10:16:17.613401
pkg:docker/mariadb/server purl2cpe 2026-06-01 10:16:17.613402
pkg:github/mariadb/server purl2cpe 2026-06-01 10:16:17.613404
pkg:rpm/fedora/mariadb purl2cpe 2026-06-01 10:16:17.613405
pkg:rpm/opensuse/mariadb purl2cpe 2026-06-01 10:16:17.613406

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2012-5615 vulnerable 2026-06-08 05:02:57.551909 Details available
Oracle MySQL 5.5.38 and earlier, 5.6.19 and earlier, and MariaDB 5.5.28a, 5.3.11, 5.2.13, 5.1.66, and possibly other versions, generates different error messages with different time delays depending on whether a user name exists, which allows remote attackers to enumerate valid usernames.
Published: 2012-12-03T11:00:00.000Z
Updated: 2024-08-06T21:14:15.987Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.