Oracle MySQL 5.1 before 5.1.49 and 5.0 before 5.0.92 allows remote authenticated users to cause a denial of service (mysqld daemon crash) by using EXPLAIN with crafted "SELECT ... UNION ... ORDER BY (SELECT ... WHERE ...)" statements, which triggers a NULL pointer dereference in the Item_singlerow_subselect::store function.
CVSS Details
- CVSS 3.1 Base Score: 6.5
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Apple Osx Airport | — | Apply OS X security update 2011-004 | Aug 28, 2015 | Jan 11, 2011 |
| Apple Osx Mysql | — | Upgrade macOS to the latest versionApply OS X security update 2011-004 | Dec 16, 2011 | Jan 11, 2011 |
| Centos_linux | — | Upgrade mysql-serverUpgrade mysql-develUpgrade mysql-benchUpgrade mysql-testUpgrade mysql | Dec 1, 2016 | Jan 11, 2011 |
| Gentoo Linux | — | Upgrade dev-db/mysql. | Oct 30, 2017 | Jan 11, 2011 |
| Oracle Mysql | — | Upgrade to Oracle MySQL version 5.1.49Upgrade to Oracle MySQL version 5.0.92 | Aug 29, 2012 | Jan 11, 2011 |
| Oracle_linux | — | Upgrade mysql-develUpgrade mysql-serverUpgrade mysql-embedded-develUpgrade mysql-embeddedUpgrade mysql-libsUpgrade mysqlUpgrade mysql-benchUpgrade mysql-test | Oct 16, 2024 | Jan 11, 2011 |
| Suse | — | Upgrade libmysqlclient15-x86Upgrade mysql-clientUpgrade mysqlUpgrade mysql-MaxUpgrade libmysqlclient_r15Upgrade libmysqlclient15-32bitUpgrade libmysqlclient15 | Feb 17, 2015 | Jun 28, 2013 |
| Ubuntu | — | Upgrade mysql-server-5.1Upgrade mysql-server-5.0 | Nov 8, 2024 | Jan 11, 2011 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub