The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report
MySQL 5.0.18 and earlier allows local users to bypass logging mechanisms via SQL queries that contain the NULL character, which are not properly handled by the mysql_real_query function. NOTE: this issue was originally reported for the mysql_query function, but the vendor states that since mysql_query expects a null character, this is not an issue for mysql_query.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Oracle_linux | — | Upgrade mysql-benchUpgrade mysql-testUpgrade mysqlUpgrade mysql-develUpgrade mysql-server | Oct 16, 2024 | Feb 27, 2006 |
| Suse | — | Upgrade mysql-MaxUpgrade libmariadbd-develUpgrade libmysql55client_r18-x86Upgrade mariadb104-rpm-macrosUpgrade mysql-toolsUpgrade libmysqlclient_r15-32bitUpgrade libmariadb3Upgrade libmysqlclient15Upgrade mariadb-toolsUpgrade mariadb-benchUpgrade libmariadb_pluginsUpgrade mysql-clientUpgrade libmysqlclient_r15Upgrade libmariadbd104-develUpgrade libmysql55client18-32bitUpgrade libmysql55client18-x86Upgrade mariadb-clientUpgrade liblz4-1Upgrade mariadb104-clientUpgrade mariadb104-testUpgrade libmariadbd19Upgrade libmysql55client18Upgrade mariadbUpgrade mariadb104-toolsUpgrade mariadb104-errormessagesUpgrade libmysqlclient15-x86Upgrade libmysqlclient_r15-x86Upgrade libmysql55client_r18Upgrade mariadb104Upgrade mariadb104-galeraUpgrade mysqlUpgrade libmysqlclient15-32bitUpgrade python3-mysqlclientUpgrade mariadb-errormessagesUpgrade libmariadb-develUpgrade libmysqlclient-develUpgrade mariadb104-benchUpgrade libmysql55client_r18-32bit | Aug 9, 2024 | Jun 27, 2013 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub