4

CVE-2010-3838

MySQL 5.0 before 5.0.92, 5.1 before 5.1.51, and 5.5 before 5.5.6 allows remote authenticated users to cause a denial of service (server crash) via a query that uses the (1) GREATEST or (2) LEAST function with a mixed list of numeric and LONGBLOB arguments, which is not properly handled when the function's result is "processed using an intermediate temporary table."
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Mysql ≫ Mysql Version5.1.5
Mysql ≫ Mysql Version5.1.23
Mysql ≫ Mysql Version5.1.31
Mysql ≫ Mysql Version5.1.32
Mysql ≫ Mysql Version5.1.34
Mysql ≫ Mysql Version5.1.37
Oracle ≫ Mysql Version5.1
Oracle ≫ Mysql Version5.1.1
Oracle ≫ Mysql Version5.1.2
Oracle ≫ Mysql Version5.1.3
Oracle ≫ Mysql Version5.1.4
Oracle ≫ Mysql Version5.1.6
Oracle ≫ Mysql Version5.1.7
Oracle ≫ Mysql Version5.1.8
Oracle ≫ Mysql Version5.1.9
Oracle ≫ Mysql Version5.1.10
Oracle ≫ Mysql Version5.1.11
Oracle ≫ Mysql Version5.1.12
Oracle ≫ Mysql Version5.1.13
Oracle ≫ Mysql Version5.1.14
Oracle ≫ Mysql Version5.1.15
Oracle ≫ Mysql Version5.1.16
Oracle ≫ Mysql Version5.1.17
Oracle ≫ Mysql Version5.1.18
Oracle ≫ Mysql Version5.1.19
Oracle ≫ Mysql Version5.1.20
Oracle ≫ Mysql Version5.1.21
Oracle ≫ Mysql Version5.1.22
Oracle ≫ Mysql Version5.1.23 Updatea
Oracle ≫ Mysql Version5.1.24
Oracle ≫ Mysql Version5.1.25
Oracle ≫ Mysql Version5.1.26
Oracle ≫ Mysql Version5.1.27
Oracle ≫ Mysql Version5.1.28
Oracle ≫ Mysql Version5.1.29
Oracle ≫ Mysql Version5.1.30
Oracle ≫ Mysql Version5.1.31 Updatesp1
Oracle ≫ Mysql Version5.1.33
Oracle ≫ Mysql Version5.1.34 Updatesp1
Oracle ≫ Mysql Version5.1.35
Oracle ≫ Mysql Version5.1.36
Oracle ≫ Mysql Version5.1.37 Updatesp1
Oracle ≫ Mysql Version5.1.38
Oracle ≫ Mysql Version5.1.39
Oracle ≫ Mysql Version5.1.40
Oracle ≫ Mysql Version5.1.40 Updatesp1
Oracle ≫ Mysql Version5.1.41
Oracle ≫ Mysql Version5.1.42
Oracle ≫ Mysql Version5.1.43
Oracle ≫ Mysql Version5.1.43 Updatesp1
Oracle ≫ Mysql Version5.1.44
Oracle ≫ Mysql Version5.1.45
Oracle ≫ Mysql Version5.1.46
Oracle ≫ Mysql Version5.1.46 Updatesp1
Oracle ≫ Mysql Version5.1.47
Oracle ≫ Mysql Version5.1.48
Oracle ≫ Mysql Version5.1.49
Oracle ≫ Mysql Version5.1.49 Updatesp1
Oracle ≫ Mysql Version5.1.50
Oracle ≫ Mysql Version5.5.0
Oracle ≫ Mysql Version5.5.1
Oracle ≫ Mysql Version5.5.2
Oracle ≫ Mysql Version5.5.3
Oracle ≫ Mysql Version5.5.4
Oracle ≫ Mysql Version5.5.5
Mysql ≫ Mysql Version5.0.0
Mysql ≫ Mysql Version5.0.1
Mysql ≫ Mysql Version5.0.2
Mysql ≫ Mysql Version5.0.3
Mysql ≫ Mysql Version5.0.4
Mysql ≫ Mysql Version5.0.5
Mysql ≫ Mysql Version5.0.5.0.21
Mysql ≫ Mysql Version5.0.10
Mysql ≫ Mysql Version5.0.15
Mysql ≫ Mysql Version5.0.16
Mysql ≫ Mysql Version5.0.17
Mysql ≫ Mysql Version5.0.20
Mysql ≫ Mysql Version5.0.22.1.0.1
Mysql ≫ Mysql Version5.0.24
Mysql ≫ Mysql Version5.0.30
Mysql ≫ Mysql Version5.0.36
Mysql ≫ Mysql Version5.0.44
Mysql ≫ Mysql Version5.0.45b
Mysql ≫ Mysql Version5.0.54
Mysql ≫ Mysql Version5.0.56
Mysql ≫ Mysql Version5.0.60
Mysql ≫ Mysql Version5.0.66
Mysql ≫ Mysql Version5.0.82
Mysql ≫ Mysql Version5.0.84
Mysql ≫ Mysql Version5.0.87
Oracle ≫ Mysql Version5.0.0 Updatealpha
Oracle ≫ Mysql Version5.0.3 Updatebeta
Oracle ≫ Mysql Version5.0.6
Oracle ≫ Mysql Version5.0.7
Oracle ≫ Mysql Version5.0.8
Oracle ≫ Mysql Version5.0.9
Oracle ≫ Mysql Version5.0.11
Oracle ≫ Mysql Version5.0.12
Oracle ≫ Mysql Version5.0.13
Oracle ≫ Mysql Version5.0.14
Oracle ≫ Mysql Version5.0.18
Oracle ≫ Mysql Version5.0.19
Oracle ≫ Mysql Version5.0.21
Oracle ≫ Mysql Version5.0.22
Oracle ≫ Mysql Version5.0.23
Oracle ≫ Mysql Version5.0.25
Oracle ≫ Mysql Version5.0.26
Oracle ≫ Mysql Version5.0.27
Oracle ≫ Mysql Version5.0.30 Updatesp1
Oracle ≫ Mysql Version5.0.32
Oracle ≫ Mysql Version5.0.33
Oracle ≫ Mysql Version5.0.37
Oracle ≫ Mysql Version5.0.38
Oracle ≫ Mysql Version5.0.41
Oracle ≫ Mysql Version5.0.42
Oracle ≫ Mysql Version5.0.45
Oracle ≫ Mysql Version5.0.50
Oracle ≫ Mysql Version5.0.51
Oracle ≫ Mysql Version5.0.52
Oracle ≫ Mysql Version5.0.67
Oracle ≫ Mysql Version5.0.75
Oracle ≫ Mysql Version5.0.77
Oracle ≫ Mysql Version5.0.81
Oracle ≫ Mysql Version5.0.83
Oracle ≫ Mysql Version5.0.85
Oracle ≫ Mysql Version5.0.86
Oracle ≫ Mysql Version5.0.88
Oracle ≫ Mysql Version5.0.89
Oracle ≫ Mysql Version5.0.90
Oracle ≫ Mysql Version5.0.91
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 3.39% 0.873
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
nvd@nist.gov 4 8 2.9
AV:N/AC:L/Au:S/C:N/I:N/A:P
Es wurden noch keine Informationen zu CWE veröffentlicht.
http://www.ubuntu.com/usn/USN-1397-1
http://lists.apple.com/archives/security-announce/2011//Jun/msg00000.html
http://support.apple.com/kb/HT4723
http://www.ubuntu.com/usn/USN-1017-1
http://dev.mysql.com/doc/refman/5.0/en/news-5-0-92.html
http://secunia.com/advisories/42875
Vendor Advisory
http://secunia.com/advisories/42936
http://www.debian.org/security/2011/dsa-2143
http://www.mandriva.com/security/advisories?name=MDVSA-2010:222
http://www.redhat.com/support/errata/RHSA-2010-0825.html
http://www.redhat.com/support/errata/RHSA-2011-0164.html
http://www.turbolinux.co.jp/security/2011/TLSA-2011-3j.txt
http://www.vupen.com/english/advisories/2011/0105
http://www.vupen.com/english/advisories/2011/0170
http://www.vupen.com/english/advisories/2011/0345
http://dev.mysql.com/doc/refman/5.1/en/news-5-1-51.html
http://dev.mysql.com/doc/refman/5.5/en/news-5-5-6.html
http://www.mandriva.com/security/advisories?name=MDVSA-2010:223
http://www.securityfocus.com/bid/43676
http://bugs.mysql.com/bug.php?id=54461
https://bugzilla.redhat.com/show_bug.cgi?id=640858
Patch
https://exchange.xforce.ibmcloud.com/vulnerabilities/64840