CVE-2010-3835
EUVD-2010-381414.01.2011, 19:02
MySQL 5.1 before 5.1.51 and 5.5 before 5.5.6 allows remote authenticated users to cause a denial of service (mysqld server crash) by performing a user-variable assignment in a logical expression that is calculated and stored in a temporary table for GROUP BY, then causing the expression value to be used after the table is created, which causes the expression to be re-evaluated instead of accessing its value from the table.Enginsight
Affected Products (NVD)
| Vendor | Product | Version |
|---|---|---|
| mysql | mysql | 5.1.5 |
| mysql | mysql | 5.1.23 |
| mysql | mysql | 5.1.31 |
| mysql | mysql | 5.1.32 |
| mysql | mysql | 5.1.34 |
| mysql | mysql | 5.1.37 |
| oracle | mysql | 5.1 |
| oracle | mysql | 5.1.1 |
| oracle | mysql | 5.1.2 |
| oracle | mysql | 5.1.3 |
| oracle | mysql | 5.1.4 |
| oracle | mysql | 5.1.6 |
| oracle | mysql | 5.1.7 |
| oracle | mysql | 5.1.8 |
| oracle | mysql | 5.1.9 |
| oracle | mysql | 5.1.10 |
| oracle | mysql | 5.1.11 |
| oracle | mysql | 5.1.12 |
| oracle | mysql | 5.1.13 |
| oracle | mysql | 5.1.14 |
| oracle | mysql | 5.1.15 |
| oracle | mysql | 5.1.16 |
| oracle | mysql | 5.1.17 |
| oracle | mysql | 5.1.18 |
| oracle | mysql | 5.1.19 |
| oracle | mysql | 5.1.20 |
| oracle | mysql | 5.1.21 |
| oracle | mysql | 5.1.22 |
| oracle | mysql | 5.1.23:a |
| oracle | mysql | 5.1.24 |
| oracle | mysql | 5.1.25 |
| oracle | mysql | 5.1.26 |
| oracle | mysql | 5.1.27 |
| oracle | mysql | 5.1.28 |
| oracle | mysql | 5.1.29 |
| oracle | mysql | 5.1.30 |
| oracle | mysql | 5.1.31:sp1 |
| oracle | mysql | 5.1.33 |
| oracle | mysql | 5.1.34:sp1 |
| oracle | mysql | 5.1.35 |
| oracle | mysql | 5.1.36 |
| oracle | mysql | 5.1.37:sp1 |
| oracle | mysql | 5.1.38 |
| oracle | mysql | 5.1.39 |
| oracle | mysql | 5.1.40 |
| oracle | mysql | 5.1.40:sp1 |
| oracle | mysql | 5.1.41 |
| oracle | mysql | 5.1.42 |
| oracle | mysql | 5.1.43 |
| oracle | mysql | 5.1.43:sp1 |
| oracle | mysql | 5.1.44 |
| oracle | mysql | 5.1.45 |
| oracle | mysql | 5.1.46 |
| oracle | mysql | 5.1.46:sp1 |
| oracle | mysql | 5.1.47 |
| oracle | mysql | 5.1.48 |
| oracle | mysql | 5.1.49 |
| oracle | mysql | 5.1.49:sp1 |
| oracle | mysql | 5.1.50 |
| oracle | mysql | 5.5.0 |
| oracle | mysql | 5.5.1 |
| oracle | mysql | 5.5.2 |
| oracle | mysql | 5.5.3 |
| oracle | mysql | 5.5.4 |
| oracle | mysql | 5.5.5 |
𝑥
= Vulnerable software versions
Ubuntu Releases
Ubuntu Product | |||||||||||||||
|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|
| mysql-5.1 |
| ||||||||||||||
| mysql-cluster-7.0 |
| ||||||||||||||
| mysql-dfsg-5.0 |
| ||||||||||||||
| mysql-dfsg-5.1 |
|
Common Weakness Enumeration
References