4

CVE-2010-3678

Exploit
Oracle MySQL 5.1 before 5.1.49 allows remote authenticated users to cause a denial of service (crash) via (1) IN or (2) CASE operations with NULL arguments that are explicitly specified or indirectly provided by the WITH ROLLUP modifier.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Mysql ≫ Mysql Version 5.1.5
Mysql ≫ Mysql Version 5.1.23
Mysql ≫ Mysql Version 5.1.31
Mysql ≫ Mysql Version 5.1.32
Mysql ≫ Mysql Version 5.1.34
Mysql ≫ Mysql Version 5.1.37
Oracle ≫ Mysql Version 5.1
Oracle ≫ Mysql Version 5.1.1
Oracle ≫ Mysql Version 5.1.2
Oracle ≫ Mysql Version 5.1.3
Oracle ≫ Mysql Version 5.1.4
Oracle ≫ Mysql Version 5.1.6
Oracle ≫ Mysql Version 5.1.7
Oracle ≫ Mysql Version 5.1.8
Oracle ≫ Mysql Version 5.1.9
Oracle ≫ Mysql Version 5.1.10
Oracle ≫ Mysql Version 5.1.11
Oracle ≫ Mysql Version 5.1.12
Oracle ≫ Mysql Version 5.1.13
Oracle ≫ Mysql Version 5.1.14
Oracle ≫ Mysql Version 5.1.15
Oracle ≫ Mysql Version 5.1.16
Oracle ≫ Mysql Version 5.1.17
Oracle ≫ Mysql Version 5.1.18
Oracle ≫ Mysql Version 5.1.19
Oracle ≫ Mysql Version 5.1.20
Oracle ≫ Mysql Version 5.1.21
Oracle ≫ Mysql Version 5.1.22
Oracle ≫ Mysql Version 5.1.23 Update a
Oracle ≫ Mysql Version 5.1.24
Oracle ≫ Mysql Version 5.1.25
Oracle ≫ Mysql Version 5.1.26
Oracle ≫ Mysql Version 5.1.27
Oracle ≫ Mysql Version 5.1.28
Oracle ≫ Mysql Version 5.1.29
Oracle ≫ Mysql Version 5.1.30
Oracle ≫ Mysql Version 5.1.31 Update sp1
Oracle ≫ Mysql Version 5.1.33
Oracle ≫ Mysql Version 5.1.34 Update sp1
Oracle ≫ Mysql Version 5.1.35
Oracle ≫ Mysql Version 5.1.36
Oracle ≫ Mysql Version 5.1.37 Update sp1
Oracle ≫ Mysql Version 5.1.38
Oracle ≫ Mysql Version 5.1.39
Oracle ≫ Mysql Version 5.1.40
Oracle ≫ Mysql Version 5.1.40 Update sp1
Oracle ≫ Mysql Version 5.1.41
Oracle ≫ Mysql Version 5.1.42
Oracle ≫ Mysql Version 5.1.43
Oracle ≫ Mysql Version 5.1.43 Update sp1
Oracle ≫ Mysql Version 5.1.44
Oracle ≫ Mysql Version 5.1.45
Oracle ≫ Mysql Version 5.1.46
Oracle ≫ Mysql Version 5.1.46 Update sp1
Oracle ≫ Mysql Version 5.1.47
Oracle ≫ Mysql Version 5.1.48
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 12.23% 0.956
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
NIST 4 8 2.9
AV:N/AC:L/Au:S/C:N/I:N/A:P
Es wurden noch keine Informationen zu CWE veröffentlicht.
http://www.ubuntu.com/usn/USN-1397-1
http://lists.opensuse.org/opensuse-security-announce/2010-10/msg00006.html
http://www.mandriva.com/security/advisories?name=MDVSA-2010:155
http://www.ubuntu.com/usn/USN-1017-1
http://dev.mysql.com/doc/refman/5.1/en/news-5-1-49.html
http://www.mandriva.com/security/advisories?name=MDVSA-2011:012
http://www.openwall.com/lists/oss-security/2010/09/28/10
Patch
Exploit
http://www.vupen.com/english/advisories/2011/0133
Vendor Advisory
http://secunia.com/advisories/42936
Vendor Advisory
http://www.redhat.com/support/errata/RHSA-2011-0164.html
http://www.vupen.com/english/advisories/2011/0170
Vendor Advisory
http://bugs.mysql.com/bug.php?id=54477
Patch
Exploit
http://www.securityfocus.com/bid/42596
https://bugzilla.redhat.com/show_bug.cgi?id=628172
Patch
Exploit