Lucene search

K
ubuntucveUbuntu.comUB:CVE-2010-3683
HistoryNov 05, 2010 - 12:00 a.m.

CVE-2010-3683

2010-11-0500:00:00
ubuntu.com
ubuntu.com
13

4 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

SINGLE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:L/Au:S/C:N/I:N/A:P

0.019 Low

EPSS

Percentile

88.5%

Oracle MySQL 5.1 before 5.1.49 and 5.5 before 5.5.5 sends an OK packet when
a LOAD DATA INFILE request generates SQL errors, which allows remote
authenticated users to cause a denial of service (mysqld daemon crash) via
a crafted request.

Bugs

Notes

Author Note
jdstrand mysql-cluster-7.0 not supported per server team
mdeslaur fixed in 5.1.49 patch doesn’t seem applicable to 5.0.x
OSVersionArchitecturePackageVersionFilename
ubuntu9.10noarchmysql-dfsg-5.1< 5.1.37-1ubuntu5.5UNKNOWN
ubuntu10.04noarchmysql-dfsg-5.1< 5.1.41-3ubuntu12.7UNKNOWN

4 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

SINGLE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:L/Au:S/C:N/I:N/A:P

0.019 Low

EPSS

Percentile

88.5%