mysqld in MySQL 5.0.x before 5.0.88 and 5.1.x before 5.1.41 does not (1) properly handle errors during execution of certain SELECT statements with subqueries, and does not (2) preserve certain null_value flags during execution of statements that use the GeomFromWKB function, which allows remote authenticated users to cause a denial of service (daemon crash) via a crafted statement.
CVSS Details
- CVSS 3.1 Base Score: 6.5
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Apple Osx Mysql | — | Upgrade macOS to the latest version | Dec 16, 2011 | Nov 30, 2009 |
| Centos_linux | — | Upgrade mysql-serverUpgrade mysql-benchUpgrade mysql-testUpgrade mysql-develUpgrade mysql | Dec 1, 2016 | Nov 30, 2009 |
| Gentoo Linux | — | Upgrade dev-db/mysql. | Oct 30, 2017 | Nov 30, 2009 |
| Oracle Mysql | — | Upgrade to Oracle MySQL version 5.0.88Upgrade to Oracle MySQL version 5.1.41 | Aug 29, 2012 | Nov 30, 2009 |
| Oracle_linux | — | Upgrade mysql-testUpgrade mysql-benchUpgrade mysqlUpgrade mysql-develUpgrade mysql-server | Oct 16, 2024 | Nov 30, 2009 |
| Suse | — | Upgrade mariadb-100-errormessagesUpgrade libmysql55client_r18Upgrade libmysql55client18-x86Upgrade mariadb104-benchUpgrade mysqlUpgrade libmysqlclient-develUpgrade libmysqlclient_r15-32bitUpgrade liblz4-1Upgrade mariadb104-errormessagesUpgrade mariadb104-toolsUpgrade libmysqlclient15Upgrade libmysqld-develUpgrade libmysqlclient_r18-32bitUpgrade mariadb104Upgrade libmysqlclient_r15-x86Upgrade libmariadbd19Upgrade libmysql55client18-32bitUpgrade mariadb-toolsUpgrade libmysqlclient_r15Upgrade libmariadb-develUpgrade libmysqld19Upgrade mariadb104-clientUpgrade mariadb104-testUpgrade mariadb-benchUpgrade libmysqlclient_r18Upgrade libmariadb3Upgrade libmariadbd104-develUpgrade mariadb-errormessagesUpgrade libmysqlclient18-32bitUpgrade python3-mysqlclientUpgrade libmysqlclient18Upgrade mysql-toolsUpgrade libmysql55client18Upgrade libmysqlclient15-x86Upgrade mariadbUpgrade libmysqlclient15-32bitUpgrade libmysqld18Upgrade mariadb104-galeraUpgrade mysql-MaxUpgrade libmysql55client_r18-x86Upgrade libmysql55client_r18-32bitUpgrade libmariadbd-develUpgrade mariadb104-rpm-macrosUpgrade mariadb-clientUpgrade mysql-clientUpgrade libmariadb_plugins | Feb 17, 2015 | Jun 28, 2013 |
| Ubuntu | — | Upgrade mysql-server-5.0Upgrade mysql-server-5.1 | Nov 8, 2024 | Nov 30, 2009 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub