CVE-2013-1861

MariaDB 5.5.x before 5.5.30, 5.3.x before 5.3.13, 5.2.x before 5.2.15, and 5.1.x before 5.1.68, and Oracle MySQL 5.1.69 and earlier, 5.5.31 and earlier, and 5.6.11 and earlier allows remote attackers to cause a denial of service (crash) via a crafted geometry feature that specifies a large number of points, which is not properly handled when processing the binary representation of this feature, related to a numeric calculation error.
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTNIST
5 UNKNOWN
NETWORK
LOW
AV:N/AC:L/Au:N/C:N/I:N/A:P
redhatCNA
---
---
CVEADP
---
---
Base Score
CVSS 3.x
EPSS Score
Percentile: 97%
VendorProductVersion
mariadbmariadb
5.5.0 ≤
𝑥
< 5.5.32
mariadbmariadb
10.0.0 ≤
𝑥
< 10.0.4
oraclemysql
5.1.0 ≤
𝑥
≤ 5.1.69
oraclemysql
5.5.0 ≤
𝑥
≤ 5.5.31
oraclemysql
5.6.0 ≤
𝑥
≤ 5.6.11
redhatenterprise_linux
6.0
mariadbmariadb
5.5.0 ≤
𝑥
< 5.5.32
mariadbmariadb
10.0.0 ≤
𝑥
< 10.0.4
debiandebian_linux
7.0
canonicalubuntu_linux
10.04
canonicalubuntu_linux
12.04
canonicalubuntu_linux
12.10
canonicalubuntu_linux
13.04
opensuseopensuse
11.4
opensuseopensuse
12.2
opensuseopensuse
12.3
𝑥
= Vulnerable software versions
Ubuntu logo
Ubuntu Releases
Ubuntu Product
Codename
mysql-5.5
raring
Fixed 5.5.32-0ubuntu0.13.04.1
released
quantal
Fixed 5.5.32-0ubuntu0.12.10.1
released
precise
Fixed 5.5.32-0ubuntu0.12.04.1
released
oneiric
dne
lucid
dne
hardy
dne
mysql-dfsg-5.1
raring
dne
quantal
dne
precise
dne
oneiric
dne
lucid
Fixed 5.1.70-0ubuntu0.10.04.1
released
hardy
dne
References