MySQL 5.0 before 5.0.66, 5.1 before 5.1.26, and 6.0 before 6.0.6 does not properly handle a b'' (b single-quote single-quote) token, aka an empty bit-string literal, which allows remote attackers to cause a denial of service (daemon crash) by using this token in a SQL statement.
CVSS Details
- CVSS 3.1 Base Score: 7.5
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Centos_linux | — | Upgrade mysql-testUpgrade mysqlUpgrade mysql-develUpgrade mysql-serverUpgrade mysql-bench | Dec 1, 2016 | Sep 10, 2008 |
| Freebsd | — | Upgrade mysql-server | Dec 10, 2025 | Jan 11, 2009 |
| Gentoo Linux | — | Upgrade dev-db/mysql. | Oct 30, 2017 | Sep 10, 2008 |
| Oracle_linux | — | Upgrade mysql-develUpgrade mysqlUpgrade mysql-benchUpgrade mysql-serverUpgrade mysql-test | Oct 16, 2024 | Sep 10, 2008 |
| Suse | — | Upgrade mysql-clientUpgrade libmysqlclient_r15-32bitUpgrade mysql-shared-x86Upgrade libmysqlclient15-32bitUpgrade mysqlUpgrade mysql-benchUpgrade libmysqlclient_r15-64bitUpgrade mysql-toolsUpgrade mysql-shared-64bitUpgrade mysql-MaxUpgrade libmysqlclient15-64bitUpgrade mysql-debugUpgrade mysql-shared-32bitUpgrade libmysqlclient15Upgrade libmysqlclient-develUpgrade suse-releaseUpgrade mysql-develUpgrade libmysqlclient_r15Upgrade mysql-shared | Feb 17, 2015 | Sep 10, 2008 |
| Ubuntu | — | Upgrade mysql-server-5.0Upgrade mysql-server-5.1 | Nov 8, 2024 | Sep 11, 2008 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub