Lucene search

K
ubuntucveUbuntu.comUB:CVE-2010-3676
HistoryJan 11, 2011 - 12:00 a.m.

CVE-2010-3676

2011-01-1100:00:00
ubuntu.com
ubuntu.com
8

4 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

SINGLE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:L/Au:S/C:N/I:N/A:P

0.021 Low

EPSS

Percentile

89.3%

storage/innobase/dict/dict0crea.c in mysqld in Oracle MySQL 5.1 before
5.1.49 allows remote authenticated users to cause a denial of service
(assertion failure) by modifying the (1) innodb_file_format or (2)
innodb_file_per_table configuration parameters for the InnoDB storage
engine, then executing a DDL statement.

Bugs

Notes

Author Note
jdstrand mysql-cluster-7.0 not supported per server team
mdeslaur fixed in 5.1.49, vuln code was introduced after lucid.

4 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

SINGLE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:L/Au:S/C:N/I:N/A:P

0.021 Low

EPSS

Percentile

89.3%