4

CVE-2009-0819

Exploit

sql/item_xmlfunc.cc in MySQL 5.1 before 5.1.32 and 6.0 before 6.0.10 allows remote authenticated users to cause a denial of service (crash) via "an XPath expression employing a scalar expression as a FilterExpr with ExtractValue() or UpdateXML()," which triggers an assertion failure.

Data is provided by the National Vulnerability Database (NVD)
Mysql ≫ Mysql Version <= 5.1.32-bzr
Mysql ≫ Mysql Version5.1.23
Mysql ≫ Mysql Version5.1.31
Mysql ≫ Mysql Version6.0.9
Mysql ≫ Mysql Version6.0.10-bzr
Oracle ≫ Mysql Version5.1
Oracle ≫ Mysql Version5.1.1
Oracle ≫ Mysql Version5.1.2
Oracle ≫ Mysql Version5.1.3
Oracle ≫ Mysql Version5.1.10
Oracle ≫ Mysql Version5.1.11
Oracle ≫ Mysql Version5.1.12
Oracle ≫ Mysql Version5.1.13
Oracle ≫ Mysql Version5.1.14
Oracle ≫ Mysql Version5.1.15
Oracle ≫ Mysql Version5.1.16
Oracle ≫ Mysql Version5.1.17
Oracle ≫ Mysql Version5.1.18
Oracle ≫ Mysql Version5.1.19
Oracle ≫ Mysql Version5.1.20
Oracle ≫ Mysql Version5.1.21
Oracle ≫ Mysql Version5.1.22
Oracle ≫ Mysql Version5.1.23 Updatea
Oracle ≫ Mysql Version5.1.24
Oracle ≫ Mysql Version5.1.25
Oracle ≫ Mysql Version5.1.26
Oracle ≫ Mysql Version5.1.27
Oracle ≫ Mysql Version5.1.28
Oracle ≫ Mysql Version5.1.29
Oracle ≫ Mysql Version5.1.30
Oracle ≫ Mysql Version5.1.31 Updatesp1
Oracle ≫ Mysql Version6.0.0
Oracle ≫ Mysql Version6.0.1
Oracle ≫ Mysql Version6.0.2
Oracle ≫ Mysql Version6.0.3
Oracle ≫ Mysql Version6.0.4
Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.
EPSS Metriken
Type Source Score Percentile
EPSS FIRST.org 3.66% 0.874
CVSS Metriken
Source Base Score Exploit Score Impact Score Vector string
nvd@nist.gov 4 8 2.9
AV:N/AC:L/Au:S/C:N/I:N/A:P