4

CVE-2009-0819

Exploit
sql/item_xmlfunc.cc in MySQL 5.1 before 5.1.32 and 6.0 before 6.0.10 allows remote authenticated users to cause a denial of service (crash) via "an XPath expression employing a scalar expression as a FilterExpr with ExtractValue() or UpdateXML()," which triggers an assertion failure.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Mysql ≫ Mysql Version <= 5.1.32-bzr
Mysql ≫ Mysql Version 5.1.23
Mysql ≫ Mysql Version 5.1.31
Mysql ≫ Mysql Version 6.0.9
Mysql ≫ Mysql Version 6.0.10-bzr
Oracle ≫ Mysql Version 5.1
Oracle ≫ Mysql Version 5.1.1
Oracle ≫ Mysql Version 5.1.2
Oracle ≫ Mysql Version 5.1.3
Oracle ≫ Mysql Version 5.1.10
Oracle ≫ Mysql Version 5.1.11
Oracle ≫ Mysql Version 5.1.12
Oracle ≫ Mysql Version 5.1.13
Oracle ≫ Mysql Version 5.1.14
Oracle ≫ Mysql Version 5.1.15
Oracle ≫ Mysql Version 5.1.16
Oracle ≫ Mysql Version 5.1.17
Oracle ≫ Mysql Version 5.1.18
Oracle ≫ Mysql Version 5.1.19
Oracle ≫ Mysql Version 5.1.20
Oracle ≫ Mysql Version 5.1.21
Oracle ≫ Mysql Version 5.1.22
Oracle ≫ Mysql Version 5.1.23 Update a
Oracle ≫ Mysql Version 5.1.24
Oracle ≫ Mysql Version 5.1.25
Oracle ≫ Mysql Version 5.1.26
Oracle ≫ Mysql Version 5.1.27
Oracle ≫ Mysql Version 5.1.28
Oracle ≫ Mysql Version 5.1.29
Oracle ≫ Mysql Version 5.1.30
Oracle ≫ Mysql Version 5.1.31 Update sp1
Oracle ≫ Mysql Version 6.0.0
Oracle ≫ Mysql Version 6.0.1
Oracle ≫ Mysql Version 6.0.2
Oracle ≫ Mysql Version 6.0.3
Oracle ≫ Mysql Version 6.0.4
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 10.18% 0.951
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
NIST 4 8 2.9
AV:N/AC:L/Au:S/C:N/I:N/A:P
Es wurden noch keine Informationen zu CWE veröffentlicht.
http://bugs.mysql.com/bug.php?id=42495
Patch
Vendor Advisory
http://dev.mysql.com/doc/refman/5.1/en/news-5-1-32.html
Vendor Advisory
http://dev.mysql.com/doc/refman/6.0/en/news-6-0-10.html
http://secunia.com/advisories/34115
Vendor Advisory
http://www.securityfocus.com/bid/33972
Exploit
http://www.securitytracker.com/id?1021786
http://www.vupen.com/english/advisories/2009/0594
Vendor Advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/49050
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A7544