The convert_search_mode_to_innobase function in ha_innodb.cc in the InnoDB engine in MySQL 5.1.23-BK and earlier allows remote authenticated users to cause a denial of service (database crash) via a certain CONTAINS operation on an indexed column, which triggers an assertion error.
CVSS Details
- CVSS 3.1 Base Score: 6.5
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| F5 Big Ip | — | Update F5 BIG-IP to the latest version | Jun 17, 2026 | Mar 18, 2013 |
| Gentoo Linux | — | Upgrade dev-db/mysql. | Oct 30, 2017 | Nov 9, 2007 |
| Oracle_linux | — | Upgrade mysql-testUpgrade mysql-develUpgrade mysql-benchUpgrade mysql-serverUpgrade mysql | Oct 16, 2024 | Nov 10, 2007 |
| Suse | — | Upgrade libmysqlclient_r15-64bitUpgrade mysql-debugUpgrade mysql-clientUpgrade libmysqlclient-develUpgrade mysql-sharedUpgrade mysql-benchUpgrade mysql-shared-64bitUpgrade mysql-MaxUpgrade mysql-develUpgrade libmysqlclient_r15Upgrade libmysqlclient15-32bitUpgrade mysqlUpgrade libmysqlclient_r15-32bitUpgrade libmysqlclient15Upgrade mysql-shared-32bitUpgrade mysql-toolsUpgrade suse-releaseUpgrade libmysqlclient15-64bit | Feb 17, 2015 | Nov 9, 2007 |
| Ubuntu | — | Upgrade mysql-server-5.1Upgrade mysql-server-5.0 | Nov 8, 2024 | Nov 10, 2007 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub