| Package | Affected versions | Patched versions |
|---|---|---|
| mariadb | = 10.0.0≥ 5.2.0, < 5.2.14≥ 5.3.0, < 5.3.12≥ 5.5.0, < 5.5.29 | 5.2.145.3.125.5.29 |
| mysql | ≥ 5.5.0, < 5.5.29 | 5.5.29 |
Oracle MySQL and MariaDB 5.5.x before 5.5.29, 5.3.x before 5.3.12, and 5.2.x before 5.2.14 does not modify the salt during multiple executions of the change_user command within the same connection which makes it easier for remote authenticated users to conduct brute force password guessing attacks.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free