Lucene search

MitreCVE-2010-3835

HistoryJan 14, 2011 - 7:02 p.m.

CVE-2010-3835

2011-01-1419:02:42

CWE-189

mitre

web.nvd.nist.gov

cve-2010-3835

mysql

5.1

5.5

denial of service

nvd

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

SINGLE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:L/Au:S/C:N/I:N/A:P

AI Score

5.2

Confidence

High

EPSS

0.012

Percentile

85.4%

JSON

MySQL 5.1 before 5.1.51 and 5.5 before 5.5.6 allows remote authenticated users to cause a denial of service (mysqld server crash) by performing a user-variable assignment in a logical expression that is calculated and stored in a temporary table for GROUP BY, then causing the expression value to be used after the table is created, which causes the expression to be re-evaluated instead of accessing its value from the table.

Affected configurations

Nvd

Node

mysqlmysqlMatch5.1.5

mysqlmysqlMatch5.1.23

mysqlmysqlMatch5.1.31

mysqlmysqlMatch5.1.32

mysqlmysqlMatch5.1.34

mysqlmysqlMatch5.1.37

oraclemysqlMatch5.1

oraclemysqlMatch5.1.1

oraclemysqlMatch5.1.2

oraclemysqlMatch5.1.3

oraclemysqlMatch5.1.4

oraclemysqlMatch5.1.6

oraclemysqlMatch5.1.7

oraclemysqlMatch5.1.8

oraclemysqlMatch5.1.9

oraclemysqlMatch5.1.10

oraclemysqlMatch5.1.11

oraclemysqlMatch5.1.12

oraclemysqlMatch5.1.13

oraclemysqlMatch5.1.14

oraclemysqlMatch5.1.15

oraclemysqlMatch5.1.16

oraclemysqlMatch5.1.17

oraclemysqlMatch5.1.18

oraclemysqlMatch5.1.19

oraclemysqlMatch5.1.20

oraclemysqlMatch5.1.21

oraclemysqlMatch5.1.22

oraclemysqlMatch5.1.23a

oraclemysqlMatch5.1.24

oraclemysqlMatch5.1.25

oraclemysqlMatch5.1.26

oraclemysqlMatch5.1.27

oraclemysqlMatch5.1.28

oraclemysqlMatch5.1.29

oraclemysqlMatch5.1.30

oraclemysqlMatch5.1.31sp1

oraclemysqlMatch5.1.33

oraclemysqlMatch5.1.34sp1

oraclemysqlMatch5.1.35

oraclemysqlMatch5.1.36

oraclemysqlMatch5.1.37sp1

oraclemysqlMatch5.1.38

oraclemysqlMatch5.1.39

oraclemysqlMatch5.1.40

oraclemysqlMatch5.1.40sp1

oraclemysqlMatch5.1.41

oraclemysqlMatch5.1.42

oraclemysqlMatch5.1.43

oraclemysqlMatch5.1.43sp1

oraclemysqlMatch5.1.44

oraclemysqlMatch5.1.45

oraclemysqlMatch5.1.46

oraclemysqlMatch5.1.46sp1

oraclemysqlMatch5.1.47

oraclemysqlMatch5.1.48

oraclemysqlMatch5.1.49

oraclemysqlMatch5.1.49sp1

oraclemysqlMatch5.1.50

Node

oraclemysqlMatch5.5.0

oraclemysqlMatch5.5.1

oraclemysqlMatch5.5.2

oraclemysqlMatch5.5.3

oraclemysqlMatch5.5.4

oraclemysqlMatch5.5.5

VendorProductVersionCPE
mysqlmysql5.1.5cpe:2.3:a:mysql:mysql:5.1.5:*:*:*:*:*:*:*
mysqlmysql5.1.23cpe:2.3:a:mysql:mysql:5.1.23:*:*:*:*:*:*:*
mysqlmysql5.1.31cpe:2.3:a:mysql:mysql:5.1.31:*:*:*:*:*:*:*
mysqlmysql5.1.32cpe:2.3:a:mysql:mysql:5.1.32:*:*:*:*:*:*:*
mysqlmysql5.1.34cpe:2.3:a:mysql:mysql:5.1.34:*:*:*:*:*:*:*
mysqlmysql5.1.37cpe:2.3:a:mysql:mysql:5.1.37:*:*:*:*:*:*:*
oraclemysql5.1cpe:2.3:a:oracle:mysql:5.1:*:*:*:*:*:*:*
oraclemysql5.1.1cpe:2.3:a:oracle:mysql:5.1.1:*:*:*:*:*:*:*
oraclemysql5.1.2cpe:2.3:a:oracle:mysql:5.1.2:*:*:*:*:*:*:*
oraclemysql5.1.3cpe:2.3:a:oracle:mysql:5.1.3:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
mysql	mysql	5.1.5	cpe:2.3:a:mysql:mysql:5.1.5:::::::*
mysql	mysql	5.1.23	cpe:2.3:a:mysql:mysql:5.1.23:::::::*
mysql	mysql	5.1.31	cpe:2.3:a:mysql:mysql:5.1.31:::::::*
mysql	mysql	5.1.32	cpe:2.3:a:mysql:mysql:5.1.32:::::::*
mysql	mysql	5.1.34	cpe:2.3:a:mysql:mysql:5.1.34:::::::*
mysql	mysql	5.1.37	cpe:2.3:a:mysql:mysql:5.1.37:::::::*
oracle	mysql	5.1	cpe:2.3:a:oracle:mysql:5.1:::::::*
oracle	mysql	5.1.1	cpe:2.3:a:oracle:mysql:5.1.1:::::::*
oracle	mysql	5.1.2	cpe:2.3:a:oracle:mysql:5.1.2:::::::*
oracle	mysql	5.1.3	cpe:2.3:a:oracle:mysql:5.1.3:::::::*