MySQL Authentication Bypass (CVE-2012-2122)

MySQL 5.5.23, vulnerable to CVE-2012-2122: the result of memcmp in the password check is cast to a char, so with some builds a wrong password is accepted about once in 256 tries; repeating the login gets root.

Pas commencé·Docker·commit d553596·x86_64 · aarch64·Secret