The in_decimal::set function in item_cmpfunc.cc in MySQL before 5.0.40, and 5.1 before 5.1.18-beta, allows context-dependent attackers to cause a denial of service (crash) via a crafted IF clause that results in a divide-by-zero error and a NULL pointer dereference.
CVSS Details
- CVSS 3.1 Base Score: 7.5
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Oracle_linux | — | Upgrade mysql-benchUpgrade mysql-develUpgrade mysql-testUpgrade mysql-serverUpgrade mysql | Oct 16, 2024 | May 9, 2007 |
| Suse | — | Upgrade mysql-MaxUpgrade libmysqlclient15-64bitUpgrade libmysqlclient_r15Upgrade mysql-sharedUpgrade libmysqlclient_r15-32bitUpgrade mysql-develUpgrade suse-releaseUpgrade mysql-shared-64bitUpgrade mysql-clientUpgrade libmysqlclient_r15-64bitUpgrade libmysqlclient15-32bitUpgrade mysql-debugUpgrade libmysqlclient15Upgrade libmysqlclient-develUpgrade mysql-toolsUpgrade mysql-shared-32bitUpgrade mysql-benchUpgrade mysql | Feb 17, 2015 | May 9, 2007 |
| Ubuntu | — | Upgrade mysql-server-5.0 | Nov 8, 2024 | May 10, 2007 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub