Lucene search

[email protected]CVE-2010-3840

HistoryJan 14, 2011 - 7:02 p.m.

CVE-2010-3840

2011-01-1419:02:44

[email protected]

web.nvd.nist.gov

mysql

5.1

5.1.51

remote authenticated users

denial of service

polyfromwkb

wkb data

server crash

cve-2010-3840

4 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

SINGLE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:L/Au:S/C:N/I:N/A:P

5.8 Medium

AI Score

Confidence

Low

0.01 Low

EPSS

Percentile

83.6%

JSON

The Gis_line_string::init_from_wkb function in sql/spatial.cc in MySQL 5.1 before 5.1.51 allows remote authenticated users to cause a denial of service (server crash) by calling the PolyFromWKB function with Well-Known Binary (WKB) data containing a crafted number of (1) line strings or (2) line points.

Affected configurations

NVD

Node

mysqlmysqlMatch5.1.5

mysqlmysqlMatch5.1.23

mysqlmysqlMatch5.1.31

mysqlmysqlMatch5.1.32

mysqlmysqlMatch5.1.34

mysqlmysqlMatch5.1.37

oraclemysqlMatch5.1

oraclemysqlMatch5.1.1

oraclemysqlMatch5.1.2

oraclemysqlMatch5.1.3

oraclemysqlMatch5.1.4

oraclemysqlMatch5.1.6

oraclemysqlMatch5.1.7

oraclemysqlMatch5.1.8

oraclemysqlMatch5.1.9

oraclemysqlMatch5.1.10

oraclemysqlMatch5.1.11

oraclemysqlMatch5.1.12

oraclemysqlMatch5.1.13

oraclemysqlMatch5.1.14

oraclemysqlMatch5.1.15

oraclemysqlMatch5.1.16

oraclemysqlMatch5.1.17

oraclemysqlMatch5.1.18

oraclemysqlMatch5.1.19

oraclemysqlMatch5.1.20

oraclemysqlMatch5.1.21

oraclemysqlMatch5.1.22

oraclemysqlMatch5.1.23a

oraclemysqlMatch5.1.24

oraclemysqlMatch5.1.25

oraclemysqlMatch5.1.26

oraclemysqlMatch5.1.27

oraclemysqlMatch5.1.28

oraclemysqlMatch5.1.29

oraclemysqlMatch5.1.30

oraclemysqlMatch5.1.31sp1

oraclemysqlMatch5.1.33

oraclemysqlMatch5.1.34sp1

oraclemysqlMatch5.1.35

oraclemysqlMatch5.1.36

oraclemysqlMatch5.1.37sp1

oraclemysqlMatch5.1.38

oraclemysqlMatch5.1.39

oraclemysqlMatch5.1.40

oraclemysqlMatch5.1.40sp1

oraclemysqlMatch5.1.41

oraclemysqlMatch5.1.42

oraclemysqlMatch5.1.43

oraclemysqlMatch5.1.43sp1

oraclemysqlMatch5.1.44

oraclemysqlMatch5.1.45

oraclemysqlMatch5.1.46

oraclemysqlMatch5.1.46sp1

oraclemysqlMatch5.1.47

oraclemysqlMatch5.1.48

oraclemysqlMatch5.1.49

oraclemysqlMatch5.1.49sp1

oraclemysqlMatch5.1.50

CPENameOperatorVersion
mysql:mysqlmysqleq5.1.5
mysql:mysqlmysqleq5.1.23
mysql:mysqlmysqleq5.1.31
mysql:mysqlmysqleq5.1.32
mysql:mysqlmysqleq5.1.34
mysql:mysqlmysqleq5.1.37
oracle:mysqloracle mysqleq5.1
oracle:mysqloracle mysqleq5.1.1
oracle:mysqloracle mysqleq5.1.2
oracle:mysqloracle mysqleq5.1.3

CPE	Name	Operator	Version
mysql:mysql	mysql	eq	5.1.5
mysql:mysql	mysql	eq	5.1.23
mysql:mysql	mysql	eq	5.1.31
mysql:mysql	mysql	eq	5.1.32
mysql:mysql	mysql	eq	5.1.34
mysql:mysql	mysql	eq	5.1.37
oracle:mysql	oracle mysql	eq	5.1
oracle:mysql	oracle mysql	eq	5.1.1
oracle:mysql	oracle mysql	eq	5.1.2
oracle:mysql	oracle mysql	eq	5.1.3