CVE:CVE-2012-5614
CNNVD:CNNVD-201212-003
Oracle MySQL是美国甲骨文（Oracle）公司的一套开源的关系数据库管理系统。该数据库系统具有性能高、成本低、可靠性好等特点。
MySQL 5.5.19以及其他版本和MariaDB 5.5.28a以及其他版本中存在漏洞。通过带有UpdateXML指令的SELECT命令上传含有大量唯一，嵌套式元素的XML，远程认证攻击者利用该漏洞造成拒绝服务（MySQL崩溃）。
solution:Upgrade oracle mysql to a higher version than 5.1.67,5.5.29,and avoid the version [5.1.0,5.1.67],[5.5.0,5.5.29]; Upgrade mariadb mariadb to a higher version than 5.5.30,10.0.2,and avoid the version [5.5.0,5.5.30),[10.0.0,10.0.2); Upgrade redhat enterprise_linux_desktop to a higher version than 6.0,and avoid the version 6.0; Upgrade redhat enterprise_linux_eus to a higher version than 6.4,and avoid the version 6.4; Upgrade redhat enterprise_linux_server to a higher version than 6.0,and avoid the version 6.0; Upgrade redhat enterprise_linux_server_aus to a higher version than 6.4,and avoid the version 6.4; Upgrade redhat enterprise_linux_workstation to a higher version than 6.0,and avoid the version 6.0