CVE-2012-0882

Buffer overflow in yaSSL, as used in MySQL 5.5.20 and possibly other versions including 5.5.x before 5.5.22 and 5.1.x before 5.1.62, allows remote attackers to execute arbitrary code via unspecified vectors, as demonstrated by VulnDisco Pack Professional 9.17. NOTE: as of 20120224, this disclosure has no actionable information. However, because the module author is a reliable researcher, the issue is being assigned a CVE identifier for tracking purposes. NOTE: due to lack of details, it is not clear whether this issue is a duplicate of CVE-2012-0492 or another CVE.

• CWE-119

• http://www.openwall.com/lists/oss-security/2012/02/24/2
• https://blogs.oracle.com/sunsecurity/entry/cve_2012_0882buffer_overflow_vulnerabilityVendor Advisory
• https://bugzilla.redhat.com/show_bug.cgi?id=789141
• https://lists.immunityinc.com/pipermail/canvas/2012-February/000011.html
• https://lists.immunityinc.com/pipermail/canvas/2012-February/000014.html
• http://www.openwall.com/lists/oss-security/2012/02/24/2
• https://blogs.oracle.com/sunsecurity/entry/cve_2012_0882buffer_overflow_vulnerabilityVendor Advisory
• https://bugzilla.redhat.com/show_bug.cgi?id=789141
• https://lists.immunityinc.com/pipermail/canvas/2012-February/000011.html
• https://lists.immunityinc.com/pipermail/canvas/2012-February/000014.html

Published

Dec 21, 2012

Last Modified

Jun 16, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2012-0876The XML parser (xmlparse.c) in expat before 2.1.0 computes h…
• CVE-2012-0877PyXML: Hash table collisions CPU usage Denial of Service7.5
• CVE-2012-0878Paste Script 1.7.5 and earlier does not properly set group m…
• CVE-2012-0879The I/O implementation for block devices in the Linux kernel…5.5
• CVE-2012-0880Apache Xerces-C++ allows remote attackers to cause a denial …
• CVE-2012-0881Apache Xerces2 Java Parser before 2.12.0 allows remote attac…
• CVE-2012-0883envvars (aka envvars-std) in the Apache HTTP Server before 2…
• CVE-2012-0884The implementation of Cryptographic Message Syntax (CMS) and…
• CVE-2012-0885chan_sip.c in Asterisk Open Source 1.8.x before 1.8.8.2 and …
• CVE-2012-0891Multiple cross-site scripting (XSS) vulnerabilities in Puppe…
• CVE-2012-0895Cross-site scripting (XSS) vulnerability in map/map.php in t…
• CVE-2012-0896Absolute path traversal vulnerability in download.php in the…