---
title: "CVE-2013-2376\n    | Ubuntu"
description: Ubuntu is an open source software operating system that runs from the
  desktop, to the cloud, to all your internet connected things.
url: https://ubuntu.com/security/CVE-2013-2376?format=md
keywords: index, follow
---

# CVE-2013-2376

Publication date 17 April 2013

Last updated 24 July 2024

---

Ubuntu priority

**Medium**

[Why this priority?](https://ubuntu.com/security/cves/about#priority )

Toggle side navigation

## Description

Unspecified vulnerability in Oracle MySQL 5.5.30 and earlier and 5.6.10 and
earlier allows remote authenticated users to affect availability via
unknown vectors related to Stored Procedure.

[Read the notes from the security team](https://ubuntu.com/security/CVE-2013-2376?format=md#notes)

## Status

Show unmaintained releases

| Package | Ubuntu Release | Status |
| --- | --- | --- |
| mysql-5.1 | 13.04 raring | Not in release |
| 12.10 quantal | Not in release |
| 12.04 LTS precise | Not in release |
| 11.10 oneiric | Not affected |
| 10.04 LTS lucid | Not in release |
| 8.04 LTS hardy | Not in release |
| mysql-5.5 | 13.04 raring | Fixed 5.5.31-0ubuntu0.13.04.1 |
| 12.10 quantal | Fixed 5.5.31-0ubuntu0.12.10.1 |
| 12.04 LTS precise | Fixed 5.5.31-0ubuntu0.12.04.1 |
| 11.10 oneiric | Not in release |
| 10.04 LTS lucid | Not in release |
| 8.04 LTS hardy | Not in release |
| mysql-cluster-7.0 | 13.04 raring | Not in release |
| 12.10 quantal | Not in release |
| 12.04 LTS precise | Not in release |
| 11.10 oneiric | Ignored |
| 10.04 LTS lucid | Ignored |
| 8.04 LTS hardy | Not in release |
| mysql-dfsg-5.0 | 13.04 raring | Not in release |
| 12.10 quantal | Not in release |
| 12.04 LTS precise | Not in release |
| 11.10 oneiric | Not in release |
| 10.04 LTS lucid | Not in release |
| 8.04 LTS hardy | Ignored end of life |
| mysql-dfsg-5.1 | 13.04 raring | Not in release |
| 12.10 quantal | Not in release |
| 12.04 LTS precise | Not in release |
| 11.10 oneiric | Not in release |
| 10.04 LTS lucid | Not affected |
| 8.04 LTS hardy | Not in release |

---

* [How can I get the fixes?](https://ubuntu.com/security/cves/about#security)
* [What do statuses mean?](https://ubuntu.com/security/cves/about#statuses)

## Notes

---

### [jdstrand](https://launchpad.net/~jdstrand)

mysql-cluster-7.0 not supported per Ubuntu Server team
As of 2012/01/09, Oracle no longer supports MySQL 5.0.
Unfortunately, because of upstream update and commit policies it is not
possible to backport patches from later releases. Ubuntu is regrettably
unable to support MySQL 5.0 and users are encouraged to upgrade to Ubuntu
10.04 LTS or later.

## References

* [MITRE](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-2376)
* [NVD](https://nvd.nist.gov/vuln/detail/CVE-2013-2376)
* [Launchpad](https://launchpad.net/bugs/cve/CVE-2013-2376)
* [Debian](https://security-tracker.debian.org/tracker/CVE-2013-2376)

### Related Ubuntu Security Notices (USN)

+ [USN-1807-2](https://usn.ubuntu.com/USN-1807-2)
+ MySQL vulnerabilities
+ 25 April 2013

+ [USN-1807-1](https://usn.ubuntu.com/USN-1807-1)
+ MySQL vulnerabilities
+ 25 April 2013

### Other references

* <http://www.oracle.com/technetwork/topics/security/cpuapr2013-1899555.html>
* <https://www.cve.org/CVERecord?id=CVE-2013-2376>
