Lucene search

[email protected]NVD:CVE-2010-3682

HistoryJan 11, 2011 - 8:00 p.m.

CVE-2010-3682

2011-01-1120:00:01

[email protected]

web.nvd.nist.gov

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

SINGLE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:L/Au:S/C:N/I:N/A:P

AI Score

5.6

Confidence

Low

EPSS

0.039

Percentile

92.2%

JSON

Oracle MySQL 5.1 before 5.1.49 and 5.0 before 5.0.92 allows remote authenticated users to cause a denial of service (mysqld daemon crash) by using EXPLAIN with crafted “SELECT … UNION … ORDER BY (SELECT … WHERE …)” statements, which triggers a NULL pointer dereference in the Item_singlerow_subselect::store function.

Affected configurations

Nvd

Node

mysqlmysqlRange≤5.1.48

mysqlmysqlMatch5.1.23

mysqlmysqlMatch5.1.31

mysqlmysqlMatch5.1.32

mysqlmysqlMatch5.1.34

mysqlmysqlMatch5.1.37

oraclemysqlMatch5.1.1

oraclemysqlMatch5.1.2

oraclemysqlMatch5.1.3

oraclemysqlMatch5.1.4

oraclemysqlMatch5.1.10

oraclemysqlMatch5.1.11

oraclemysqlMatch5.1.12

oraclemysqlMatch5.1.13

oraclemysqlMatch5.1.14

oraclemysqlMatch5.1.15

oraclemysqlMatch5.1.16

oraclemysqlMatch5.1.17

oraclemysqlMatch5.1.18

oraclemysqlMatch5.1.19

oraclemysqlMatch5.1.20

oraclemysqlMatch5.1.21

oraclemysqlMatch5.1.22

oraclemysqlMatch5.1.23a

oraclemysqlMatch5.1.24

oraclemysqlMatch5.1.25

oraclemysqlMatch5.1.26

oraclemysqlMatch5.1.27

oraclemysqlMatch5.1.28

oraclemysqlMatch5.1.29

oraclemysqlMatch5.1.30

oraclemysqlMatch5.1.31sp1

oraclemysqlMatch5.1.33

oraclemysqlMatch5.1.34sp1

oraclemysqlMatch5.1.35

oraclemysqlMatch5.1.36

oraclemysqlMatch5.1.37sp1

oraclemysqlMatch5.1.38

oraclemysqlMatch5.1.39

oraclemysqlMatch5.1.40

oraclemysqlMatch5.1.40sp1

oraclemysqlMatch5.1.41

oraclemysqlMatch5.1.42

oraclemysqlMatch5.1.43

oraclemysqlMatch5.1.43sp1

oraclemysqlMatch5.1.44

oraclemysqlMatch5.1.45

oraclemysqlMatch5.1.46

oraclemysqlMatch5.1.46sp1

oraclemysqlMatch5.1.47

Node

mysqlmysqlRange≤5.0.91

mysqlmysqlMatch5.0.0

mysqlmysqlMatch5.0.1

mysqlmysqlMatch5.0.2

mysqlmysqlMatch5.0.10

mysqlmysqlMatch5.0.15

mysqlmysqlMatch5.0.16

mysqlmysqlMatch5.0.17

mysqlmysqlMatch5.0.20

mysqlmysqlMatch5.0.24

mysqlmysqlMatch5.0.30

mysqlmysqlMatch5.0.36

mysqlmysqlMatch5.0.44

mysqlmysqlMatch5.0.54

mysqlmysqlMatch5.0.56

mysqlmysqlMatch5.0.60

mysqlmysqlMatch5.0.66

mysqlmysqlMatch5.0.72

mysqlmysqlMatch5.0.74

mysqlmysqlMatch5.0.82

mysqlmysqlMatch5.0.84

mysqlmysqlMatch5.0.87

oraclemysqlMatch5.0.28

oraclemysqlMatch5.0.30sp1

oraclemysqlMatch5.0.32

oraclemysqlMatch5.0.34

oraclemysqlMatch5.0.36sp1

oraclemysqlMatch5.0.38

oraclemysqlMatch5.0.40

oraclemysqlMatch5.0.41

oraclemysqlMatch5.0.42

oraclemysqlMatch5.0.44sp1

oraclemysqlMatch5.0.45

oraclemysqlMatch5.0.46

oraclemysqlMatch5.0.48

oraclemysqlMatch5.0.50

oraclemysqlMatch5.0.51a

oraclemysqlMatch5.0.51b

oraclemysqlMatch5.0.52

oraclemysqlMatch5.0.56sp1

oraclemysqlMatch5.0.58

oraclemysqlMatch5.0.62

oraclemysqlMatch5.0.64

oraclemysqlMatch5.0.66a

oraclemysqlMatch5.0.66sp1

oraclemysqlMatch5.0.67

oraclemysqlMatch5.0.68

oraclemysqlMatch5.0.70

oraclemysqlMatch5.0.72sp1

oraclemysqlMatch5.0.74sp1

oraclemysqlMatch5.0.75

oraclemysqlMatch5.0.76

oraclemysqlMatch5.0.77

oraclemysqlMatch5.0.78

oraclemysqlMatch5.0.79

oraclemysqlMatch5.0.80

oraclemysqlMatch5.0.81

oraclemysqlMatch5.0.82sp1

oraclemysqlMatch5.0.83

oraclemysqlMatch5.0.84sp1

oraclemysqlMatch5.0.85

oraclemysqlMatch5.0.86

oraclemysqlMatch5.0.87sp1

oraclemysqlMatch5.0.88

oraclemysqlMatch5.0.89

oraclemysqlMatch5.0.90

VendorProductVersionCPE
mysqlmysql*cpe:2.3:a:mysql:mysql:*:*:*:*:*:*:*:*
mysqlmysql5.1.23cpe:2.3:a:mysql:mysql:5.1.23:*:*:*:*:*:*:*
mysqlmysql5.1.31cpe:2.3:a:mysql:mysql:5.1.31:*:*:*:*:*:*:*
mysqlmysql5.1.32cpe:2.3:a:mysql:mysql:5.1.32:*:*:*:*:*:*:*
mysqlmysql5.1.34cpe:2.3:a:mysql:mysql:5.1.34:*:*:*:*:*:*:*
mysqlmysql5.1.37cpe:2.3:a:mysql:mysql:5.1.37:*:*:*:*:*:*:*
oraclemysql5.1.1cpe:2.3:a:oracle:mysql:5.1.1:*:*:*:*:*:*:*
oraclemysql5.1.2cpe:2.3:a:oracle:mysql:5.1.2:*:*:*:*:*:*:*
oraclemysql5.1.3cpe:2.3:a:oracle:mysql:5.1.3:*:*:*:*:*:*:*
oraclemysql5.1.4cpe:2.3:a:oracle:mysql:5.1.4:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
mysql	mysql	*	cpe:2.3:a:mysql:mysql::::::::
mysql	mysql	5.1.23	cpe:2.3:a:mysql:mysql:5.1.23:::::::*
mysql	mysql	5.1.31	cpe:2.3:a:mysql:mysql:5.1.31:::::::*
mysql	mysql	5.1.32	cpe:2.3:a:mysql:mysql:5.1.32:::::::*
mysql	mysql	5.1.34	cpe:2.3:a:mysql:mysql:5.1.34:::::::*
mysql	mysql	5.1.37	cpe:2.3:a:mysql:mysql:5.1.37:::::::*
oracle	mysql	5.1.1	cpe:2.3:a:oracle:mysql:5.1.1:::::::*
oracle	mysql	5.1.2	cpe:2.3:a:oracle:mysql:5.1.2:::::::*
oracle	mysql	5.1.3	cpe:2.3:a:oracle:mysql:5.1.3:::::::*
oracle	mysql	5.1.4	cpe:2.3:a:oracle:mysql:5.1.4:::::::*