Lucene search

K
ubuntucveUbuntu.comUB:CVE-2010-1849
HistoryMay 21, 2010 - 12:00 a.m.

CVE-2010-1849

2010-05-2100:00:00
ubuntu.com
ubuntu.com
18

5 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:N/I:N/A:P

0.046 Low

EPSS

Percentile

92.6%

The my_net_skip_rest function in sql/net_serv.cc in MySQL 5.0 through
5.0.91 and 5.1 before 5.1.47 allows remote attackers to cause a denial of
service (CPU and bandwidth consumption) by sending a large number of
packets that exceed the maximum length.

Bugs

Notes

Author Note
mdeslaur see http://bugs.mysql.com/bug.php?id=53908 and http://bugs.mysql.com/bug.php?id=53912 for regression fix
OSVersionArchitecturePackageVersionFilename
ubuntu6.06noarchmysql-dfsg-5.0<Β 5.0.22-0ubuntu6.06.14UNKNOWN
ubuntu8.04noarchmysql-dfsg-5.0<Β 5.0.51a-3ubuntu5.7UNKNOWN
ubuntu9.04noarchmysql-dfsg-5.0<Β 5.1.30really5.0.75-0ubuntu10.5UNKNOWN
ubuntu9.10noarchmysql-dfsg-5.1<Β 5.1.37-1ubuntu5.4UNKNOWN
ubuntu10.04noarchmysql-dfsg-5.1<Β 5.1.41-3ubuntu12.3UNKNOWN

5 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:N/I:N/A:P

0.046 Low

EPSS

Percentile

92.6%