Published: 11/01/2011 Updated: 17/12/2019

CVSS v2 Base Score: 4 | Impact Score: 2.9 | Exploitability Score: 8

VMScore: 405

Vector: AV:N/AC:L/Au:S/C:N/I:N/A:P

Oracle MySQL 5.1 prior to 5.1.49 and 5.5 prior to 5.5.5 allows remote authenticated users to cause a denial of service (mysqld daemon crash) by using the HANDLER interface and performing "alternate reads from two indexes on a table," which triggers an assertion failure.

Vulnerable Product	Search on Vulmon	Subscribe to Product
oracle mysql 5.1.46
oracle mysql 5.1.47
oracle mysql 5.1.23
oracle mysql 5.1.36
oracle mysql 5.1.48
oracle mysql 5.1.6
oracle mysql 5.1.3
oracle mysql 5.1.14
oracle mysql 5.1.11
oracle mysql 5.1.10
oracle mysql 5.1
oracle mysql 5.1.19
oracle mysql 5.1.20
oracle mysql 5.1.40
oracle mysql 5.1.31
oracle mysql 5.1.43
mysql mysql 5.1.23
oracle mysql 5.1.42
mysql mysql 5.1.37
oracle mysql 5.1.38
oracle mysql 5.1.4
oracle mysql 5.1.9
oracle mysql 5.1.12
oracle mysql 5.1.17
mysql mysql 5.1.32
oracle mysql 5.1.1
oracle mysql 5.1.28
oracle mysql 5.1.29
oracle mysql 5.1.34
oracle mysql 5.1.24
mysql mysql 5.1.31
mysql mysql 5.1.34
oracle mysql 5.1.35
oracle mysql 5.1.41
mysql mysql 5.1.5
oracle mysql 5.1.8
oracle mysql 5.1.13
oracle mysql 5.1.16
oracle mysql 5.1.30
oracle mysql 5.1.18
oracle mysql 5.1.27
oracle mysql 5.1.37
oracle mysql 5.1.33
oracle mysql 5.1.44
oracle mysql 5.1.39
oracle mysql 5.1.7
oracle mysql 5.1.45
oracle mysql 5.1.2
oracle mysql 5.1.15
oracle mysql 5.1.21
oracle mysql 5.1.22
oracle mysql 5.1.26
oracle mysql 5.1.25
oracle mysql 5.5.2
oracle mysql 5.5.3
oracle mysql 5.5.4
oracle mysql 5.5.0
oracle mysql 5.5.1

Several vulnerabilities have been discovered in the MySQL database server The Common Vulnerabilities and Exposures project identifies the following problems: CVE-2010-3677 It was discovered that MySQL allows remote authenticated users to cause a denial of service (mysqld daemon crash) via a join query that uses a table with a unique SET col ...

Several security issues were fixed in MySQL ...

It was discovered that MySQL incorrectly handled certain requests with the UPGRADE DATA DIRECTORY NAME command An authenticated user could exploit this to make MySQL crash, causing a denial of service This issue only affected Ubuntu 910 and 1004 LTS (CVE-2010-2008) ...

source: wwwsecurityfocuscom/bid/42633/info MySQL is prone to a denial-of-service vulnerability An attacker can exploit this issue to crash the database, denying access to legitimate users This issue affects versions prior to MySQL 5149 NOTE: This issue was previously covered in BID 42586 (Oracle MySQL Prior to 5149 Multiple Deni ...

NVD-CWE-Other http://dev.mysql.com/doc/refman/5.1/en/news-5-1-49.html https://bugzilla.redhat.com/show_bug.cgi?id=628680 http://dev.mysql.com/doc/refman/5.5/en/news-5-5-5.html http://www.openwall.com/lists/oss-security/2010/09/28/10 http://bugs.mysql.com/bug.php?id=54007 http://lists.opensuse.org/opensuse-security-announce/2010-11/msg00005.html http://lists.opensuse.org/opensuse-security-announce/2010-10/msg00006.html http://www.ubuntu.com/usn/USN-1017-1 http://secunia.com/advisories/42875 http://www.mandriva.com/security/advisories?name=MDVSA-2010:222 http://www.mandriva.com/security/advisories?name=MDVSA-2010:155 http://www.redhat.com/support/errata/RHSA-2010-0824.html http://www.debian.org/security/2011/dsa-2143 http://www.vupen.com/english/advisories/2011/0105 http://www.securityfocus.com/bid/42633 http://www.mandriva.com/security/advisories?name=MDVSA-2011:012 http://www.vupen.com/english/advisories/2011/0133 http://www.redhat.com/support/errata/RHSA-2010-0825.html http://www.redhat.com/support/errata/RHSA-2011-0164.html http://www.vupen.com/english/advisories/2011/0170 http://secunia.com/advisories/42936 http://www.vupen.com/english/advisories/2011/0345 http://www.turbolinux.co.jp/security/2011/TLSA-2011-3j.txt https://exchange.xforce.ibmcloud.com/vulnerabilities/64685 http://www.ubuntu.com/usn/USN-1397-1 https://nvd.nist.gov https://www.debian.org/security/./dsa-2143 https://usn.ubuntu.com/1397-1/https://www.exploit-db.com/exploits/34520/

CVE-2010-3681

Vulnerability Summary

Vulnerability Trend

Vendor Advisories

Exploits

References

Vulmon Search

About

Products

Connect