CVE-2009-4019

2009-11-3017:30:00

NVD-CWE-Other

[email protected]

web.nvd.nist.gov

169

cve-2009-4019

mysql

nvd

denial of service

daemon crash

select statements

geomfromwkb

5.8 Medium

AI Score

Confidence

Low

4 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

SINGLE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:L/Au:S/C:N/I:N/A:P

0.111 Low

EPSS

Percentile

95.1%

JSON

mysqld in MySQL 5.0.x before 5.0.88 and 5.1.x before 5.1.41 does not (1) properly handle errors during execution of certain SELECT statements with subqueries, and does not (2) preserve certain null_value flags during execution of statements that use the GeomFromWKB function, which allows remote authenticated users to cause a denial of service (daemon crash) via a crafted statement.

CPENameOperatorVersion
mysql:mysqlmysqleq5.0.5
mysql:mysqlmysqleq5.0.10
mysql:mysqlmysqleq5.0.54
mysql:mysqlmysqleq5.0.0
mysql:mysqlmysqleq5.1.23
mysql:mysqlmysqleq5.0.15
mysql:mysqlmysqleq5.0.17
mysql:mysqlmysqleq5.0.5.0.21
mysql:mysqlmysqleq5.0.3
mysql:mysqlmysqleq5.0.44

CPE	Name	Operator	Version
mysql:mysql	mysql	eq	5.0.5
mysql:mysql	mysql	eq	5.0.10
mysql:mysql	mysql	eq	5.0.54
mysql:mysql	mysql	eq	5.0.0
mysql:mysql	mysql	eq	5.1.23
mysql:mysql	mysql	eq	5.0.15
mysql:mysql	mysql	eq	5.0.17
mysql:mysql	mysql	eq	5.0.5.0.21
mysql:mysql	mysql	eq	5.0.3
mysql:mysql	mysql	eq	5.0.44