Lucene search

[email protected]CVE-2007-6304

HistoryDec 10, 2007 - 9:46 p.m.

CVE-2007-6304

2007-12-1021:46:00

[email protected]

web.nvd.nist.gov

mysql

federated engine

denial of service

vulnerability

cve-2007-6304

nvd

5 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:N/I:N/A:P

6.1 Medium

AI Score

Confidence

Low

0.013 Low

EPSS

Percentile

85.7%

JSON

The federated engine in MySQL 5.0.x before 5.0.51a, 5.1.x before 5.1.23, and 6.0.x before 6.0.4, when performing a certain SHOW TABLE STATUS query, allows remote MySQL servers to cause a denial of service (federated handler crash and daemon crash) via a response that lacks the minimum required number of columns.

Affected configurations

NVD

Node

mysqlmysqlMatch5.0.0

mysqlmysqlMatch5.0.1

mysqlmysqlMatch5.0.2

mysqlmysqlMatch5.0.3

mysqlmysqlMatch5.0.4

mysqlmysqlMatch5.0.5

mysqlmysqlMatch5.0.5.0.21

mysqlmysqlMatch5.0.10

mysqlmysqlMatch5.0.15

mysqlmysqlMatch5.0.16

mysqlmysqlMatch5.0.17

mysqlmysqlMatch5.0.20

mysqlmysqlMatch5.0.22.1.0.1

mysqlmysqlMatch5.0.24

oraclemysqlMatch5.0.0alpha

oraclemysqlMatch5.0.3beta

oraclemysqlMatch5.0.6

oraclemysqlMatch5.0.7

oraclemysqlMatch5.0.8

oraclemysqlMatch5.0.9

oraclemysqlMatch5.0.11

oraclemysqlMatch5.0.12

oraclemysqlMatch5.0.13

oraclemysqlMatch5.0.14

oraclemysqlMatch5.0.18

oraclemysqlMatch5.0.19

oraclemysqlMatch5.0.21

oraclemysqlMatch5.0.22

oraclemysqlMatch5.0.27

oraclemysqlMatch5.0.33

oraclemysqlMatch5.0.37

oraclemysqlMatch5.0.41

oraclemysqlMatch5.1.1

oraclemysqlMatch5.1.2

oraclemysqlMatch5.1.10

oraclemysqlMatch5.1.11

oraclemysqlMatch5.1.12

oraclemysqlMatch5.1.13

oraclemysqlMatch5.1.14

oraclemysqlMatch5.1.15

oraclemysqlMatch5.1.16

oraclemysqlMatch5.1.17

oraclemysqlMatch6.0.0

oraclemysqlMatch6.0.1

oraclemysqlMatch6.0.2

oraclemysqlMatch6.0.3

CPENameOperatorVersion
mysql:mysqlmysqleq5.0.0
mysql:mysqlmysqleq5.0.1
mysql:mysqlmysqleq5.0.2
mysql:mysqlmysqleq5.0.3
mysql:mysqlmysqleq5.0.4
mysql:mysqlmysqleq5.0.5
mysql:mysqlmysqleq5.0.5.0.21
mysql:mysqlmysqleq5.0.10
mysql:mysqlmysqleq5.0.15
mysql:mysqlmysqleq5.0.16

CPE	Name	Operator	Version
mysql:mysql	mysql	eq	5.0.0
mysql:mysql	mysql	eq	5.0.1
mysql:mysql	mysql	eq	5.0.2
mysql:mysql	mysql	eq	5.0.3
mysql:mysql	mysql	eq	5.0.4
mysql:mysql	mysql	eq	5.0.5
mysql:mysql	mysql	eq	5.0.5.0.21
mysql:mysql	mysql	eq	5.0.10
mysql:mysql	mysql	eq	5.0.15
mysql:mysql	mysql	eq	5.0.16