Multiple vulnerabilities have been reported in Oracle MySQL Server, which can be exploited by malicious, local users to gain knowledge of sensitive information, manipulate certain data, or cause a DoS (Denial of Service), by malicious users to gain knowledge of sensitive information, manipulate certain data, or cause a DoS, or by malicious people to cause a DoS.

1) An unspecified error can be exploited by authenticated users to disclose certain application data and cause the server to stop responding or crash.

2) An unspecified error can be exploited by unauthenticated people to cause the server to stop responding or crash.

3) An unspecified error can be exploited by authenticated users to disclose or manipulate certain application data.

4) An unspecified error can be exploited by authenticated users to read certain application data and cause the server to stop responding or crash.

5) An unspecified error can be exploited by authenticated users to read, update, insert, or delete certain application data.

6) An unspecified error can be exploited by authenticated users to cause the server to stop responding or crash.

7) An unspecified error can be exploited by authenticated users to cause the server to stop responding or crash.

8) An unspecified error can be exploited by authenticated users to cause the server to stop responding or crash.

9) An unspecified error can be exploited by authenticated users to cause the server to stop responding.

10) An unspecified error can be exploited by authenticated users to cause the server to stop responding or crash.

11) An unspecified error can be exploited by authenticated users to cause the server to stop responding or crash.

12) An unspecified error can be exploited by authenticated users to disclose certain application data.

13) An unspecified error can be exploited by authenticated users to cause the server to stop responding or crash.

14) An unspecified error can be exploited by authenticated users to cause the server to stop responding or crash.

15) An unspecified error can be exploited by authenticated users to cause the server to stop responding or crash.

16) An unspecified error can be exploited by authenticated users to cause the server to stop responding or crash.

17) An unspecified error can be exploited by authenticated users to cause the server to stop responding or crash.

18) An unspecified error can be exploited by authenticated users to cause the server to stop responding or crash.

19) An unspecified error can be exploited by authenticated users to cause the server to stop responding or crash.

20) An unspecified error can be exploited by authenticated users to cause the server to stop responding or crash.

21) An unspecified error can be exploited by authenticated users to cause the server to stop responding or crash.

22) An unspecified error can be exploited by authenticated users to cause the server to stop responding or crash.

23) An unspecified error can be exploited by local users to gain escalated privileges.

24) An unspecified error can be exploited by authenticated users to cause the server to stop responding or crash.

25) An unspecified error can be exploited by authenticated users to cause the server to stop responding or crash.

26) An unspecified error can be exploited by authenticated users to update, insert, or delete certain application data.

27) An unspecified error can be exploited by local users to cause the server to stop responding or crash.

The vulnerabilities are reported in versions 5.0.x, 5.1.x, and 5.5.x.

Solution
Apply updates (please see the vendor's advisory for details).

Provided and/or discovered by
It is currently unclear who reported the vulnerabilities as the Oracle Critical Patch Update for January 2012 only provides a bundled list of credits. This section will be updated when/if the original reporters provide more information.

Original Advisory
Oracle:
http://www.oracle.com/technetwork/topics/security/cpujan2012-366304.html#AppendixMSQL

Other references
Further details available to Secunia VIM customers

Deep Links
Links available to Secunia VIM customers