Oracle MySQL 5.1 before 5.1.49 and 5.5 before 5.5.5 allows remote authenticated users to cause a denial of service (mysqld daemon crash) by using the HANDLER interface and performing "alternate reads from two indexes on a table," which triggers an assertion failure.
CVSS Details
- CVSS 3.1 Base Score: 6.5
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Centos_linux | — | Upgrade mysqlUpgrade mysql-benchUpgrade mysql-testUpgrade mysql-develUpgrade mysql-server | Dec 1, 2016 | Jan 11, 2011 |
| Gentoo Linux | — | Upgrade dev-db/mysql. | Oct 30, 2017 | Jan 11, 2011 |
| Oracle Mysql | — | Upgrade to Oracle MySQL version 5.5.5Upgrade to Oracle MySQL version 5.1.49 | Aug 29, 2012 | Jan 11, 2011 |
| Oracle_linux | — | Upgrade mysql-develUpgrade mysqlUpgrade mysql-testUpgrade mysql-libsUpgrade mysql-benchUpgrade mysql-embeddedUpgrade mysql-serverUpgrade mysql-embedded-devel | Oct 16, 2024 | Jan 11, 2011 |
| Suse | — | Upgrade libmysqlclient15-x86Upgrade mysql-MaxUpgrade mysqlUpgrade mysql-clientUpgrade libmysqlclient15Upgrade libmysqlclient15-32bitUpgrade libmysqlclient_r15 | Feb 17, 2015 | Jun 28, 2013 |
| Ubuntu | — | Upgrade mysql-server-5.0Upgrade mysql-server-5.1 | Nov 8, 2024 | Jan 11, 2011 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub