The federated engine in MySQL 5.0.x before 5.0.51a, 5.1.x before 5.1.23, and 6.0.x before 6.0.4, when performing a certain SHOW TABLE STATUS query, allows remote MySQL servers to cause a denial of service (federated handler crash and daemon crash) via a response that lacks the minimum required number of columns.
CVSS Details
- CVSS 3.1 Base Score: 7.5
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Gentoo Linux | — | Upgrade dev-db/mysql. | Oct 30, 2017 | Dec 10, 2007 |
| Suse | — | Upgrade libmysqlclient_r15Upgrade libmysqlclient15Upgrade libmysqlclient_r15-x86Upgrade mariadb104-testUpgrade libmysql55client18-32bitUpgrade libmysqlclient_r15-32bitUpgrade libmysql55client_r18-32bitUpgrade libmysql55client18Upgrade libmysqlclient15-32bitUpgrade libmysql55client_r18-x86Upgrade mariadb-benchUpgrade mysql-MaxUpgrade libmariadb_pluginsUpgrade libmariadbd-develUpgrade mariadb104-clientUpgrade libmysql55client_r18Upgrade libmariadb3Upgrade libmariadbd104-develUpgrade mariadb104Upgrade python3-mysqlclientUpgrade libmysqlclient-develUpgrade mariadb-clientUpgrade mariadb104-toolsUpgrade libmysqlclient15-x86Upgrade liblz4-1Upgrade libmariadb-develUpgrade mariadb104-rpm-macrosUpgrade mysqlUpgrade mariadb-toolsUpgrade mariadb104-benchUpgrade libmysql55client18-x86Upgrade mariadb-errormessagesUpgrade mariadb104-galeraUpgrade mysql-toolsUpgrade mysql-clientUpgrade libmariadbd19Upgrade mariadb104-errormessagesUpgrade mariadb | Feb 17, 2015 | Jul 9, 2013 |
| Ubuntu | — | Upgrade mysql-server-5.0 | Nov 8, 2024 | Dec 10, 2007 |
Prioritize with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub