Lucene search

[email protected]CVE-2010-1849

HistoryJun 08, 2010 - 12:30 a.m.

CVE-2010-1849

2010-06-0800:30:01

[email protected]

web.nvd.nist.gov

184

mysql

denial of service

vulnerability

nvd

cve-2010-1849

5 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:N/I:N/A:P

8.8 High

AI Score

Confidence

High

0.046 Low

EPSS

Percentile

92.6%

JSON

The my_net_skip_rest function in sql/net_serv.cc in MySQL 5.0 through 5.0.91 and 5.1 before 5.1.47 allows remote attackers to cause a denial of service (CPU and bandwidth consumption) by sending a large number of packets that exceed the maximum length.

Affected configurations

NVD

Node

mysqlmysqlMatch5.0.0

mysqlmysqlMatch5.0.1

mysqlmysqlMatch5.0.2

mysqlmysqlMatch5.0.3

mysqlmysqlMatch5.0.4

mysqlmysqlMatch5.0.5

mysqlmysqlMatch5.0.5.0.21

mysqlmysqlMatch5.0.10

mysqlmysqlMatch5.0.15

mysqlmysqlMatch5.0.16

mysqlmysqlMatch5.0.17

mysqlmysqlMatch5.0.20

mysqlmysqlMatch5.0.24

mysqlmysqlMatch5.0.45b

mysqlmysqlMatch5.0.82

mysqlmysqlMatch5.0.84

mysqlmysqlMatch5.0.87

oraclemysqlMatch5.0.0alpha

oraclemysqlMatch5.0.3beta

oraclemysqlMatch5.0.6

oraclemysqlMatch5.0.7

oraclemysqlMatch5.0.8

oraclemysqlMatch5.0.9

oraclemysqlMatch5.0.11

oraclemysqlMatch5.0.12

oraclemysqlMatch5.0.13

oraclemysqlMatch5.0.14

oraclemysqlMatch5.0.18

oraclemysqlMatch5.0.19

oraclemysqlMatch5.0.21

oraclemysqlMatch5.0.22

oraclemysqlMatch5.0.23

oraclemysqlMatch5.0.27

oraclemysqlMatch5.0.33

oraclemysqlMatch5.0.37

oraclemysqlMatch5.0.41

oraclemysqlMatch5.0.45

oraclemysqlMatch5.0.51

oraclemysqlMatch5.0.67

oraclemysqlMatch5.0.75

oraclemysqlMatch5.0.77

oraclemysqlMatch5.0.81

oraclemysqlMatch5.0.83

oraclemysqlMatch5.0.85

oraclemysqlMatch5.0.86

oraclemysqlMatch5.0.88

oraclemysqlMatch5.0.89

oraclemysqlMatch5.0.90

oraclemysqlMatch5.0.91

Node

mysqlmysqlMatch5.1.5

mysqlmysqlMatch5.1.23

mysqlmysqlMatch5.1.31

mysqlmysqlMatch5.1.32

mysqlmysqlMatch5.1.34

mysqlmysqlMatch5.1.37

oraclemysqlMatch5.1

oraclemysqlMatch5.1.1

oraclemysqlMatch5.1.2

oraclemysqlMatch5.1.3

oraclemysqlMatch5.1.4

oraclemysqlMatch5.1.6

oraclemysqlMatch5.1.7

oraclemysqlMatch5.1.8

oraclemysqlMatch5.1.9

oraclemysqlMatch5.1.10

oraclemysqlMatch5.1.11

oraclemysqlMatch5.1.12

oraclemysqlMatch5.1.13

oraclemysqlMatch5.1.14

oraclemysqlMatch5.1.15

oraclemysqlMatch5.1.16

oraclemysqlMatch5.1.17

oraclemysqlMatch5.1.30

oraclemysqlMatch5.1.33

oraclemysqlMatch5.1.35

oraclemysqlMatch5.1.36

oraclemysqlMatch5.1.38

oraclemysqlMatch5.1.39

oraclemysqlMatch5.1.40

oraclemysqlMatch5.1.41

oraclemysqlMatch5.1.42

oraclemysqlMatch5.1.43

oraclemysqlMatch5.1.44

oraclemysqlMatch5.1.45

oraclemysqlMatch5.1.46

CPENameOperatorVersion
mysql:mysqlmysqleq5.0.0
mysql:mysqlmysqleq5.0.1
mysql:mysqlmysqleq5.0.2
mysql:mysqlmysqleq5.0.3
mysql:mysqlmysqleq5.0.4
mysql:mysqlmysqleq5.0.5
mysql:mysqlmysqleq5.0.5.0.21
mysql:mysqlmysqleq5.0.10
mysql:mysqlmysqleq5.0.15
mysql:mysqlmysqleq5.0.16

CPE	Name	Operator	Version
mysql:mysql	mysql	eq	5.0.0
mysql:mysql	mysql	eq	5.0.1
mysql:mysql	mysql	eq	5.0.2
mysql:mysql	mysql	eq	5.0.3
mysql:mysql	mysql	eq	5.0.4
mysql:mysql	mysql	eq	5.0.5
mysql:mysql	mysql	eq	5.0.5.0.21
mysql:mysql	mysql	eq	5.0.10
mysql:mysql	mysql	eq	5.0.15
mysql:mysql	mysql	eq	5.0.16