mysqld in MySQL 5.0.x before 5.0.88 and 5.1.x before 5.1.41 does not (1) properly handle errors during execution of certain SELECT statements with subqueries, and does not (2) preserve certain null_value flags during execution of statements that use the GeomFromWKB function, which allows remote authenticated users to cause a denial of service (daemon crash) via a crafted statement.
References
Configurations
Configuration 1 (hide)
|
History
21 Nov 2024, 01:08
Type | Values Removed | Values Added |
---|---|---|
References | () http://bugs.mysql.com/47780 - | |
References | () http://bugs.mysql.com/48291 - | |
References | () http://dev.mysql.com/doc/refman/5.0/en/news-5-0-88.html - | |
References | () http://dev.mysql.com/doc/refman/5.1/en/news-5-1-41.html - | |
References | () http://lists.apple.com/archives/security-announce/2010//Mar/msg00001.html - | |
References | () http://lists.opensuse.org/opensuse-security-announce/2010-05/msg00001.html - | |
References | () http://marc.info/?l=oss-security&m=125881733826437&w=2 - | |
References | () http://marc.info/?l=oss-security&m=125883754215621&w=2 - | |
References | () http://marc.info/?l=oss-security&m=125901161824278&w=2 - | |
References | () http://secunia.com/advisories/37717 - | |
References | () http://secunia.com/advisories/38517 - | |
References | () http://secunia.com/advisories/38573 - | |
References | () http://support.apple.com/kb/HT4077 - | |
References | () http://ubuntu.com/usn/usn-897-1 - | |
References | () http://www.debian.org/security/2010/dsa-1997 - | |
References | () http://www.redhat.com/support/errata/RHSA-2010-0109.html - | |
References | () http://www.ubuntu.com/usn/USN-1397-1 - | |
References | () http://www.vupen.com/english/advisories/2010/1107 - | |
References | () https://bugzilla.redhat.com/show_bug.cgi?id=540906 - | |
References | () https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11349 - | |
References | () https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A8500 - | |
References | () https://www.redhat.com/archives/fedora-package-announce/2009-December/msg00764.html - |
Information
Published : 2009-11-30 17:30
Updated : 2024-11-21 01:08
NVD link : CVE-2009-4019
Mitre link : CVE-2009-4019
CVE.ORG link : CVE-2009-4019
JSON object : View
Products Affected
mysql
- mysql
oracle
- mysql
CWE