--- title: "CVE-2012-0882\n | Ubuntu" description: Ubuntu is an open source software operating system that runs from the desktop, to the cloud, to all your internet connected things. url: https://ubuntu.com/security/CVE-2012-0882?format=md keywords: index, follow --- # CVE-2012-0882 Publication date 21 December 2012 Last updated 4 August 2025 --- Ubuntu priority **Low** [Why this priority?](https://ubuntu.com/security/cves/about#priority ) Toggle side navigation ## Description Buffer overflow in yaSSL, as used in MySQL 5.5.20 and possibly other versions including 5.5.x before 5.5.22 and 5.1.x before 5.1.62, allows remote attackers to execute arbitrary code via unspecified vectors, as demonstrated by VulnDisco Pack Professional 9.17. NOTE: as of 20120224, this disclosure has no actionable information. However, because the module author is a reliable researcher, the issue is being assigned a CVE identifier for tracking purposes. NOTE: due to lack of details, it is not clear whether this issue is a duplicate of CVE-2012-0492 or another CVE. [Read the notes from the security team](https://ubuntu.com/security/CVE-2012-0882?format=md#notes) ## Status Show unmaintained releases | Package | Ubuntu Release | Status | | --- | --- | --- | | mysql-5.5 | 12.04 LTS precise | Not affected | | 11.10 oneiric | Not in release | | 11.04 natty | Not in release | | 10.10 maverick | Not in release | | 10.04 LTS lucid | Not in release | | 8.04 LTS hardy | Not in release | --- * [How can I get the fixes?](https://ubuntu.com/security/cves/about#security) * [What do statuses mean?](https://ubuntu.com/security/cves/about#statuses) ## Notes --- ### [jdstrand](https://launchpad.net/~jdstrand) supposedly pre-auth root remote 0-day. Due to lack of information setting priority to 'low' for now (there is nothing to be done). Report only mention 5.5.20 as affected, so due to lack of information, leaving other sources out for now. --- ### [mdeslaur](https://launchpad.net/~mdeslaur) This is probably fixed with the yassl update that went into 5.1.62, 5.0.96 and 5.5.22 ## References * [MITRE](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-0882) * [NVD](https://nvd.nist.gov/vuln/detail/CVE-2012-0882) * [Launchpad](https://launchpad.net/bugs/cve/CVE-2012-0882) * [Debian](https://security-tracker.debian.org/tracker/CVE-2012-0882) ### Other references * *