Published: 08/06/2010 Updated: 17/12/2019

CVSS v2 Base Score: 5 | Impact Score: 2.9 | Exploitability Score: 10

VMScore: 447

Vector: AV:N/AC:L/Au:N/C:N/I:N/A:P

The my_net_skip_rest function in sql/net_serv.cc in MySQL 5.0 up to and including 5.0.91 and 5.1 prior to 5.1.47 allows remote malicious users to cause a denial of service (CPU and bandwidth consumption) by sending a large number of packets that exceed the maximum length.

Vulnerable Product	Search on Vulmon	Subscribe to Product
mysql mysql 5.0.0
oracle mysql 5.0.13
oracle mysql 5.0.14
oracle mysql 5.0.18
oracle mysql 5.0.19
mysql mysql 5.0.5.0.21
oracle mysql 5.0.23
oracle mysql 5.0.41
oracle mysql 5.0.45
oracle mysql 5.0.81
mysql mysql 5.0.82
oracle mysql 5.0.89
oracle mysql 5.0.90
oracle mysql 5.0.91
oracle mysql 5.0.8
oracle mysql 5.0.9
oracle mysql 5.0.0
mysql mysql 5.0.15
mysql mysql 5.0.2
mysql mysql 5.0.24
oracle mysql 5.0.27
mysql mysql 5.0.45b
oracle mysql 5.0.83
mysql mysql 5.0.84
mysql mysql 5.0.4
oracle mysql 5.0.11
oracle mysql 5.0.12
mysql mysql 5.0.17
oracle mysql 5.0.21
oracle mysql 5.0.22
oracle mysql 5.0.33
oracle mysql 5.0.37
oracle mysql 5.0.75
oracle mysql 5.0.77
mysql mysql 5.0.87
oracle mysql 5.0.88
oracle mysql 5.0.6
oracle mysql 5.0.7
mysql mysql 5.0.1
mysql mysql 5.0.10
mysql mysql 5.0.16
mysql mysql 5.0.20
mysql mysql 5.0.3
oracle mysql 5.0.3
oracle mysql 5.0.51
oracle mysql 5.0.67
oracle mysql 5.0.85
oracle mysql 5.0.86
mysql mysql 5.0.5
oracle mysql 5.1.12
oracle mysql 5.1.13
oracle mysql 5.1.3
oracle mysql 5.1.4
mysql mysql 5.1.5
oracle mysql 5.1.30
mysql mysql 5.1.31
oracle mysql 5.1.38
oracle mysql 5.1.39
oracle mysql 5.1.14
oracle mysql 5.1.15
oracle mysql 5.1.6
mysql mysql 5.1.32
oracle mysql 5.1.33
oracle mysql 5.1.40
oracle mysql 5.1.41
oracle mysql 5.1.10
oracle mysql 5.1.11
oracle mysql 5.1.2
mysql mysql 5.1.23
oracle mysql 5.1.9
oracle mysql 5.1.36
mysql mysql 5.1.37
oracle mysql 5.1.44
oracle mysql 5.1.45
oracle mysql 5.1.46
oracle mysql 5.1
oracle mysql 5.1.1
oracle mysql 5.1.16
oracle mysql 5.1.17
oracle mysql 5.1.7
oracle mysql 5.1.8
mysql mysql 5.1.34
oracle mysql 5.1.35
oracle mysql 5.1.42
oracle mysql 5.1.43

Synopsis Moderate: mysql security update Type/Severity Security Advisory: Moderate Topic Updated mysql packages that fix several security issues are now availablefor Red Hat Enterprise Linux 5The Red Hat Security Response Team has rated this update as having moderatesecurity impact Common Vulnerability Sc ...

Several vulnerabilities have been discovered in the MySQL database server The Common Vulnerabilities and Exposures project identifies the following problems: CVE-2010-1626 MySQL allows local users to delete the data and index files of another user's MyISAM table via a symlink attack in conjunction with the DROP TABLE command CVE-2010-1848 MySQL ...

It was discovered that MySQL did not check privileges before uninstalling plugins An authenticated user could uninstall arbitrary plugins, bypassing intended restrictions This issue only affected Ubuntu 910 and 1004 LTS (CVE-2010-1621) ...

Several security issues were fixed in MySQL ...

NVD-CWE-Other http://dev.mysql.com/doc/refman/5.1/en/news-5-1-47.html http://bugs.mysql.com/bug.php?id=50974 http://securitytracker.com/id?1024032 http://www.mandriva.com/security/advisories?name=MDVSA-2010:107 http://dev.mysql.com/doc/refman/5.0/en/news-5-0-91.html http://lists.mysql.com/commits/106060 http://lists.apple.com/archives/security-announce/2010//Nov/msg00000.html http://support.apple.com/kb/HT4435 http://lists.opensuse.org/opensuse-security-announce/2010-10/msg00006.html http://lists.opensuse.org/opensuse-security-announce/2010-11/msg00005.html https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A7328 http://www.ubuntu.com/usn/USN-1397-1 https://access.redhat.com/errata/RHSA-2012:0127 https://nvd.nist.gov https://usn.ubuntu.com/950-1/https://www.debian.org/security/./dsa-2057

Get Started

CVE-2010-1849

Vulnerability Summary

Vendor Advisories

References

Vulmon Search

About

Products

Connect