MySQL 5.0 before 5.0.66, 5.1 before 5.1.26, and 6.0 before 6.0.6 does not properly handle a b'' (b single-quote single-quote) token, aka an empty bit-string literal, which allows remote attackers to cause a denial of service (daemon crash) by using this token in a SQL statement.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Centos_linux | — | Upgrade mysql-testUpgrade mysqlUpgrade mysql-benchUpgrade mysql-develUpgrade mysql-server | Dec 1, 2016 | Sep 10, 2008 |
| Freebsd | — | Upgrade mysql-server | Dec 10, 2025 | Jan 11, 2009 |
| Gentoo Linux | — | Upgrade dev-db/mysql. | Oct 30, 2017 | Sep 10, 2008 |
| Oracle_linux | — | Upgrade mysql-benchUpgrade mysql-testUpgrade mysql-serverUpgrade mysqlUpgrade mysql-devel | Oct 16, 2024 | Sep 10, 2008 |
| Suse | — | Upgrade libmysqlclient15-32bitUpgrade mysql-benchUpgrade mysqlUpgrade libmysqlclient15-64bitUpgrade mysql-MaxUpgrade mysql-shared-x86Upgrade libmysqlclient_r15-32bitUpgrade libmysqlclient_r15-64bitUpgrade mysql-toolsUpgrade mysql-debugUpgrade mysql-shared-64bitUpgrade libmysqlclient15Upgrade mysql-clientUpgrade mysql-shared-32bitUpgrade mysql-sharedUpgrade libmysqlclient-develUpgrade libmysqlclient_r15Upgrade suse-releaseUpgrade mysql-devel | Feb 17, 2015 | Sep 10, 2008 |
| Ubuntu | — | Upgrade mysql-server-5.0Upgrade mysql-server-5.1 | Nov 8, 2024 | Sep 11, 2008 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub