Oracle MySQL 5.1 before 5.1.49 allows remote authenticated users to cause a denial of service (mysqld daemon crash) via certain arguments to the BINLOG command, which triggers an access of uninitialized memory, as demonstrated by valgrind.
CVSS Details
- CVSS 3.1 Base Score: 6.5
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Gentoo Linux | — | Upgrade dev-db/mysql. | Oct 30, 2017 | Jan 11, 2011 |
| Oracle Mysql | — | Upgrade to Oracle MySQL version 5.1.49 | Aug 29, 2012 | Jan 11, 2011 |
| Oracle_linux | — | Upgrade mysql-benchUpgrade mysql-testUpgrade mysqlUpgrade mysql-serverUpgrade mysql-libsUpgrade mysql-embeddedUpgrade mysql-embedded-develUpgrade mysql-devel | Oct 16, 2024 | Jan 11, 2011 |
| Suse | — | Upgrade libmysqlclient-develUpgrade mysql-ndb-extraUpgrade mysql-debugUpgrade libmysqlclient16Upgrade libmysqlclient_r16-32bitUpgrade libmysqld-develUpgrade mysql-ndb-managementUpgrade mysql-ndb-toolsUpgrade mysqlUpgrade libmysqlclient_r16Upgrade mysql-benchUpgrade mysql-ndb-storageUpgrade mysql-toolsUpgrade libmysqlclient16-32bitUpgrade mysql-testUpgrade mysql-client | Dec 12, 2013 | Jan 11, 2011 |
| Ubuntu | — | Upgrade mysql-server-5.1Upgrade mysql-server-5.0 | Nov 8, 2024 | Jan 11, 2011 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub