Lucene search

[email protected]CVE-2010-3682

HistoryJan 11, 2011 - 8:00 p.m.

CVE-2010-3682

2011-01-1120:00:01

[email protected]

web.nvd.nist.gov

173

oracle

mysql

cve-2010-3682

security

denial of service

nvd

4 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

SINGLE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:L/Au:S/C:N/I:N/A:P

5 Medium

AI Score

Confidence

High

0.029 Low

EPSS

Percentile

90.8%

JSON

Oracle MySQL 5.1 before 5.1.49 and 5.0 before 5.0.92 allows remote authenticated users to cause a denial of service (mysqld daemon crash) by using EXPLAIN with crafted “SELECT … UNION … ORDER BY (SELECT … WHERE …)” statements, which triggers a NULL pointer dereference in the Item_singlerow_subselect::store function.

Affected configurations

NVD

Node

mysqlmysqlRange≤5.1.48

mysqlmysqlMatch5.1.23

mysqlmysqlMatch5.1.31

mysqlmysqlMatch5.1.32

mysqlmysqlMatch5.1.34

mysqlmysqlMatch5.1.37

oraclemysqlMatch5.1.1

oraclemysqlMatch5.1.2

oraclemysqlMatch5.1.3

oraclemysqlMatch5.1.4

oraclemysqlMatch5.1.10

oraclemysqlMatch5.1.11

oraclemysqlMatch5.1.12

oraclemysqlMatch5.1.13

oraclemysqlMatch5.1.14

oraclemysqlMatch5.1.15

oraclemysqlMatch5.1.16

oraclemysqlMatch5.1.17

oraclemysqlMatch5.1.18

oraclemysqlMatch5.1.19

oraclemysqlMatch5.1.20

oraclemysqlMatch5.1.21

oraclemysqlMatch5.1.22

oraclemysqlMatch5.1.23a

oraclemysqlMatch5.1.24

oraclemysqlMatch5.1.25

oraclemysqlMatch5.1.26

oraclemysqlMatch5.1.27

oraclemysqlMatch5.1.28

oraclemysqlMatch5.1.29

oraclemysqlMatch5.1.30

oraclemysqlMatch5.1.31sp1

oraclemysqlMatch5.1.33

oraclemysqlMatch5.1.34sp1

oraclemysqlMatch5.1.35

oraclemysqlMatch5.1.36

oraclemysqlMatch5.1.37sp1

oraclemysqlMatch5.1.38

oraclemysqlMatch5.1.39

oraclemysqlMatch5.1.40

oraclemysqlMatch5.1.40sp1

oraclemysqlMatch5.1.41

oraclemysqlMatch5.1.42

oraclemysqlMatch5.1.43

oraclemysqlMatch5.1.43sp1

oraclemysqlMatch5.1.44

oraclemysqlMatch5.1.45

oraclemysqlMatch5.1.46

oraclemysqlMatch5.1.46sp1

oraclemysqlMatch5.1.47

Node

mysqlmysqlRange≤5.0.91

mysqlmysqlMatch5.0.0

mysqlmysqlMatch5.0.1

mysqlmysqlMatch5.0.2

mysqlmysqlMatch5.0.10

mysqlmysqlMatch5.0.15

mysqlmysqlMatch5.0.16

mysqlmysqlMatch5.0.17

mysqlmysqlMatch5.0.20

mysqlmysqlMatch5.0.24

mysqlmysqlMatch5.0.30

mysqlmysqlMatch5.0.36

mysqlmysqlMatch5.0.44

mysqlmysqlMatch5.0.54

mysqlmysqlMatch5.0.56

mysqlmysqlMatch5.0.60

mysqlmysqlMatch5.0.66

mysqlmysqlMatch5.0.72

mysqlmysqlMatch5.0.74

mysqlmysqlMatch5.0.82

mysqlmysqlMatch5.0.84

mysqlmysqlMatch5.0.87

oraclemysqlMatch5.0.28

oraclemysqlMatch5.0.30sp1

oraclemysqlMatch5.0.32

oraclemysqlMatch5.0.34

oraclemysqlMatch5.0.36sp1

oraclemysqlMatch5.0.38

oraclemysqlMatch5.0.40

oraclemysqlMatch5.0.41

oraclemysqlMatch5.0.42

oraclemysqlMatch5.0.44sp1

oraclemysqlMatch5.0.45

oraclemysqlMatch5.0.46

oraclemysqlMatch5.0.48

oraclemysqlMatch5.0.50

oraclemysqlMatch5.0.51a

oraclemysqlMatch5.0.51b

oraclemysqlMatch5.0.52

oraclemysqlMatch5.0.56sp1

oraclemysqlMatch5.0.58

oraclemysqlMatch5.0.62

oraclemysqlMatch5.0.64

oraclemysqlMatch5.0.66a

oraclemysqlMatch5.0.66sp1

oraclemysqlMatch5.0.67

oraclemysqlMatch5.0.68

oraclemysqlMatch5.0.70

oraclemysqlMatch5.0.72sp1

oraclemysqlMatch5.0.74sp1

oraclemysqlMatch5.0.75

oraclemysqlMatch5.0.76

oraclemysqlMatch5.0.77

oraclemysqlMatch5.0.78

oraclemysqlMatch5.0.79

oraclemysqlMatch5.0.80

oraclemysqlMatch5.0.81

oraclemysqlMatch5.0.82sp1

oraclemysqlMatch5.0.83

oraclemysqlMatch5.0.84sp1

oraclemysqlMatch5.0.85

oraclemysqlMatch5.0.86

oraclemysqlMatch5.0.87sp1

oraclemysqlMatch5.0.88

oraclemysqlMatch5.0.89

oraclemysqlMatch5.0.90

CPENameOperatorVersion
mysql:mysqlmysqlle5.1.48
mysql:mysqlmysqleq5.1.23
mysql:mysqlmysqleq5.1.31
mysql:mysqlmysqleq5.1.32
mysql:mysqlmysqleq5.1.34
mysql:mysqlmysqleq5.1.37
oracle:mysqloracle mysqleq5.1.1
oracle:mysqloracle mysqleq5.1.2
oracle:mysqloracle mysqleq5.1.3
oracle:mysqloracle mysqleq5.1.4

CPE	Name	Operator	Version
mysql:mysql	mysql	le	5.1.48
mysql:mysql	mysql	eq	5.1.23
mysql:mysql	mysql	eq	5.1.31
mysql:mysql	mysql	eq	5.1.32
mysql:mysql	mysql	eq	5.1.34
mysql:mysql	mysql	eq	5.1.37
oracle:mysql	oracle mysql	eq	5.1.1
oracle:mysql	oracle mysql	eq	5.1.2
oracle:mysql	oracle mysql	eq	5.1.3
oracle:mysql	oracle mysql	eq	5.1.4