The federated engine in MySQL 5.0.x before 5.0.51a, 5.1.x before 5.1.23, and 6.0.x before 6.0.4, when performing a certain SHOW TABLE STATUS query, allows remote MySQL servers to cause a denial of service (federated handler crash and daemon crash) via a response that lacks the minimum required number of columns.
CVSS Details
- CVSS 3.1 Base Score: 7.5
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Gentoo Linux | — | Upgrade dev-db/mysql. | Oct 30, 2017 | Dec 10, 2007 |
| Suse | — | Upgrade libmariadbd19Upgrade mariadb104-errormessagesUpgrade mariadb104-rpm-macrosUpgrade libmysql55client18-x86Upgrade mariadbUpgrade mariadb-toolsUpgrade mysql-clientUpgrade mariadb104Upgrade mariadb-errormessagesUpgrade liblz4-1Upgrade mysql-toolsUpgrade libmysqlclient-develUpgrade mariadb104-galeraUpgrade mysqlUpgrade python3-mysqlclientUpgrade libmysqlclient15-x86Upgrade mariadb-clientUpgrade mariadb104-benchUpgrade libmariadb-develUpgrade mariadb104-toolsUpgrade libmysql55client_r18-32bitUpgrade mariadb-benchUpgrade libmariadbd-develUpgrade libmariadbd104-develUpgrade mariadb104-clientUpgrade libmysql55client18-32bitUpgrade libmysqlclient15-32bitUpgrade libmysql55client_r18-x86Upgrade libmysqlclient_r15-32bitUpgrade libmysql55client_r18Upgrade mariadb104-testUpgrade libmysqlclient15Upgrade mysql-MaxUpgrade libmysql55client18Upgrade libmariadb_pluginsUpgrade libmariadb3Upgrade libmysqlclient_r15Upgrade libmysqlclient_r15-x86 | Feb 17, 2015 | Jul 9, 2013 |
| Ubuntu | — | Upgrade mysql-server-5.0 | Nov 8, 2024 | Dec 10, 2007 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub