Lucene search

K
ubuntucveUbuntu.comUB:CVE-2010-3679
HistoryNov 05, 2010 - 12:00 a.m.

CVE-2010-3679

2010-11-0500:00:00
ubuntu.com
ubuntu.com
13

4 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

SINGLE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:L/Au:S/C:N/I:N/A:P

0.046 Low

EPSS

Percentile

92.6%

Oracle MySQL 5.1 before 5.1.49 allows remote authenticated users to cause a
denial of service (mysqld daemon crash) via certain arguments to the BINLOG
command, which triggers an access of uninitialized memory, as demonstrated
by valgrind.

Bugs

Notes

Author Note
jdstrand mysql-cluster-7.0 not supported per server team
mdeslaur code doesn’t seem present in 5.0.x
OSVersionArchitecturePackageVersionFilename
ubuntu9.10noarchmysql-dfsg-5.1< 5.1.37-1ubuntu5.5UNKNOWN
ubuntu10.04noarchmysql-dfsg-5.1< 5.1.41-3ubuntu12.7UNKNOWN

4 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

SINGLE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:L/Au:S/C:N/I:N/A:P

0.046 Low

EPSS

Percentile

92.6%