CVE-2010-3835 (GCVE-0-2010-3835)
Vulnerability from cvelistv5
Published
2011-01-14 18:00
Modified
2024-08-07 03:26
Severity ?
CWE
  • n/a
Summary
MySQL 5.1 before 5.1.51 and 5.5 before 5.5.6 allows remote authenticated users to cause a denial of service (mysqld server crash) by performing a user-variable assignment in a logical expression that is calculated and stored in a temporary table for GROUP BY, then causing the expression value to be used after the table is created, which causes the expression to be re-evaluated instead of accessing its value from the table.
References
cve@mitre.org http://bugs.mysql.com/bug.php?id=55564
cve@mitre.org http://dev.mysql.com/doc/refman/5.1/en/news-5-1-51.html
cve@mitre.org http://dev.mysql.com/doc/refman/5.5/en/news-5-5-6.html
cve@mitre.org http://lists.apple.com/archives/security-announce/2011//Jun/msg00000.html
cve@mitre.org http://secunia.com/advisories/42875 Vendor Advisory
cve@mitre.org http://secunia.com/advisories/42936 Vendor Advisory
cve@mitre.org http://support.apple.com/kb/HT4723
cve@mitre.org http://www.debian.org/security/2011/dsa-2143
cve@mitre.org http://www.mandriva.com/security/advisories?name=MDVSA-2010:222
cve@mitre.org http://www.mandriva.com/security/advisories?name=MDVSA-2010:223
cve@mitre.org http://www.redhat.com/support/errata/RHSA-2010-0825.html Vendor Advisory
cve@mitre.org http://www.redhat.com/support/errata/RHSA-2011-0164.html
cve@mitre.org http://www.securityfocus.com/bid/43676
cve@mitre.org http://www.turbolinux.co.jp/security/2011/TLSA-2011-3j.txt
cve@mitre.org http://www.ubuntu.com/usn/USN-1017-1
cve@mitre.org http://www.ubuntu.com/usn/USN-1397-1
cve@mitre.org http://www.vupen.com/english/advisories/2011/0105 Vendor Advisory
cve@mitre.org http://www.vupen.com/english/advisories/2011/0170 Vendor Advisory
cve@mitre.org http://www.vupen.com/english/advisories/2011/0345 Vendor Advisory
cve@mitre.org https://bugzilla.redhat.com/show_bug.cgi?id=640819 Patch
cve@mitre.org https://exchange.xforce.ibmcloud.com/vulnerabilities/64843
af854a3a-2127-422b-91ae-364da2661108 http://bugs.mysql.com/bug.php?id=55564
af854a3a-2127-422b-91ae-364da2661108 http://dev.mysql.com/doc/refman/5.1/en/news-5-1-51.html
af854a3a-2127-422b-91ae-364da2661108 http://dev.mysql.com/doc/refman/5.5/en/news-5-5-6.html
af854a3a-2127-422b-91ae-364da2661108 http://lists.apple.com/archives/security-announce/2011//Jun/msg00000.html
af854a3a-2127-422b-91ae-364da2661108 http://secunia.com/advisories/42875 Vendor Advisory
af854a3a-2127-422b-91ae-364da2661108 http://secunia.com/advisories/42936 Vendor Advisory
af854a3a-2127-422b-91ae-364da2661108 http://support.apple.com/kb/HT4723
af854a3a-2127-422b-91ae-364da2661108 http://www.debian.org/security/2011/dsa-2143
af854a3a-2127-422b-91ae-364da2661108 http://www.mandriva.com/security/advisories?name=MDVSA-2010:222
af854a3a-2127-422b-91ae-364da2661108 http://www.mandriva.com/security/advisories?name=MDVSA-2010:223
af854a3a-2127-422b-91ae-364da2661108 http://www.redhat.com/support/errata/RHSA-2010-0825.html Vendor Advisory
af854a3a-2127-422b-91ae-364da2661108 http://www.redhat.com/support/errata/RHSA-2011-0164.html
af854a3a-2127-422b-91ae-364da2661108 http://www.securityfocus.com/bid/43676
af854a3a-2127-422b-91ae-364da2661108 http://www.turbolinux.co.jp/security/2011/TLSA-2011-3j.txt
af854a3a-2127-422b-91ae-364da2661108 http://www.ubuntu.com/usn/USN-1017-1
af854a3a-2127-422b-91ae-364da2661108 http://www.ubuntu.com/usn/USN-1397-1
af854a3a-2127-422b-91ae-364da2661108 http://www.vupen.com/english/advisories/2011/0105 Vendor Advisory
af854a3a-2127-422b-91ae-364da2661108 http://www.vupen.com/english/advisories/2011/0170 Vendor Advisory
af854a3a-2127-422b-91ae-364da2661108 http://www.vupen.com/english/advisories/2011/0345 Vendor Advisory
af854a3a-2127-422b-91ae-364da2661108 https://bugzilla.redhat.com/show_bug.cgi?id=640819 Patch
af854a3a-2127-422b-91ae-364da2661108 https://exchange.xforce.ibmcloud.com/vulnerabilities/64843
Impacted products
Vendor Product Version
n/a n/a Version: n/a
Show details on NVD website

To clipboard 

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-07T03:26:11.487Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://dev.mysql.com/doc/refman/5.1/en/news-5-1-51.html"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://dev.mysql.com/doc/refman/5.5/en/news-5-5-6.html"
          },
          {
            "name": "USN-1397-1",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "http://www.ubuntu.com/usn/USN-1397-1"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://support.apple.com/kb/HT4723"
          },
          {
            "name": "42875",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/42875"
          },
          {
            "name": "USN-1017-1",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "http://www.ubuntu.com/usn/USN-1017-1"
          },
          {
            "name": "APPLE-SA-2011-06-23-1",
            "tags": [
              "vendor-advisory",
              "x_refsource_APPLE",
              "x_transferred"
            ],
            "url": "http://lists.apple.com/archives/security-announce/2011//Jun/msg00000.html"
          },
          {
            "name": "TLSA-2011-3",
            "tags": [
              "vendor-advisory",
              "x_refsource_TURBO",
              "x_transferred"
            ],
            "url": "http://www.turbolinux.co.jp/security/2011/TLSA-2011-3j.txt"
          },
          {
            "name": "ADV-2011-0105",
            "tags": [
              "vdb-entry",
              "x_refsource_VUPEN",
              "x_transferred"
            ],
            "url": "http://www.vupen.com/english/advisories/2011/0105"
          },
          {
            "name": "MDVSA-2010:222",
            "tags": [
              "vendor-advisory",
              "x_refsource_MANDRIVA",
              "x_transferred"
            ],
            "url": "http://www.mandriva.com/security/advisories?name=MDVSA-2010:222"
          },
          {
            "name": "RHSA-2011:0164",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://www.redhat.com/support/errata/RHSA-2011-0164.html"
          },
          {
            "name": "ADV-2011-0170",
            "tags": [
              "vdb-entry",
              "x_refsource_VUPEN",
              "x_transferred"
            ],
            "url": "http://www.vupen.com/english/advisories/2011/0170"
          },
          {
            "name": "DSA-2143",
            "tags": [
              "vendor-advisory",
              "x_refsource_DEBIAN",
              "x_transferred"
            ],
            "url": "http://www.debian.org/security/2011/dsa-2143"
          },
          {
            "name": "43676",
            "tags": [
              "vdb-entry",
              "x_refsource_BID",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/bid/43676"
          },
          {
            "name": "ADV-2011-0345",
            "tags": [
              "vdb-entry",
              "x_refsource_VUPEN",
              "x_transferred"
            ],
            "url": "http://www.vupen.com/english/advisories/2011/0345"
          },
          {
            "name": "mysql-uservariable-dos(64843)",
            "tags": [
              "vdb-entry",
              "x_refsource_XF",
              "x_transferred"
            ],
            "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/64843"
          },
          {
            "name": "42936",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/42936"
          },
          {
            "name": "RHSA-2010:0825",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://www.redhat.com/support/errata/RHSA-2010-0825.html"
          },
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "http://bugs.mysql.com/bug.php?id=55564"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://bugzilla.redhat.com/show_bug.cgi?id=640819"
          },
          {
            "name": "MDVSA-2010:223",
            "tags": [
              "vendor-advisory",
              "x_refsource_MANDRIVA",
              "x_transferred"
            ],
            "url": "http://www.mandriva.com/security/advisories?name=MDVSA-2010:223"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "datePublic": "2010-10-04T00:00:00",
      "descriptions": [
        {
          "lang": "en",
          "value": "MySQL 5.1 before 5.1.51 and 5.5 before 5.5.6 allows remote authenticated users to cause a denial of service (mysqld server crash) by performing a user-variable assignment in a logical expression that is calculated and stored in a temporary table for GROUP BY, then causing the expression value to be used after the table is created, which causes the expression to be re-evaluated instead of accessing its value from the table."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "n/a",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2018-01-04T18:57:02",
        "orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
        "shortName": "mitre"
      },
      "references": [
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://dev.mysql.com/doc/refman/5.1/en/news-5-1-51.html"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://dev.mysql.com/doc/refman/5.5/en/news-5-5-6.html"
        },
        {
          "name": "USN-1397-1",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "http://www.ubuntu.com/usn/USN-1397-1"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://support.apple.com/kb/HT4723"
        },
        {
          "name": "42875",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/42875"
        },
        {
          "name": "USN-1017-1",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "http://www.ubuntu.com/usn/USN-1017-1"
        },
        {
          "name": "APPLE-SA-2011-06-23-1",
          "tags": [
            "vendor-advisory",
            "x_refsource_APPLE"
          ],
          "url": "http://lists.apple.com/archives/security-announce/2011//Jun/msg00000.html"
        },
        {
          "name": "TLSA-2011-3",
          "tags": [
            "vendor-advisory",
            "x_refsource_TURBO"
          ],
          "url": "http://www.turbolinux.co.jp/security/2011/TLSA-2011-3j.txt"
        },
        {
          "name": "ADV-2011-0105",
          "tags": [
            "vdb-entry",
            "x_refsource_VUPEN"
          ],
          "url": "http://www.vupen.com/english/advisories/2011/0105"
        },
        {
          "name": "MDVSA-2010:222",
          "tags": [
            "vendor-advisory",
            "x_refsource_MANDRIVA"
          ],
          "url": "http://www.mandriva.com/security/advisories?name=MDVSA-2010:222"
        },
        {
          "name": "RHSA-2011:0164",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://www.redhat.com/support/errata/RHSA-2011-0164.html"
        },
        {
          "name": "ADV-2011-0170",
          "tags": [
            "vdb-entry",
            "x_refsource_VUPEN"
          ],
          "url": "http://www.vupen.com/english/advisories/2011/0170"
        },
        {
          "name": "DSA-2143",
          "tags": [
            "vendor-advisory",
            "x_refsource_DEBIAN"
          ],
          "url": "http://www.debian.org/security/2011/dsa-2143"
        },
        {
          "name": "43676",
          "tags": [
            "vdb-entry",
            "x_refsource_BID"
          ],
          "url": "http://www.securityfocus.com/bid/43676"
        },
        {
          "name": "ADV-2011-0345",
          "tags": [
            "vdb-entry",
            "x_refsource_VUPEN"
          ],
          "url": "http://www.vupen.com/english/advisories/2011/0345"
        },
        {
          "name": "mysql-uservariable-dos(64843)",
          "tags": [
            "vdb-entry",
            "x_refsource_XF"
          ],
          "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/64843"
        },
        {
          "name": "42936",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/42936"
        },
        {
          "name": "RHSA-2010:0825",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://www.redhat.com/support/errata/RHSA-2010-0825.html"
        },
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "http://bugs.mysql.com/bug.php?id=55564"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=640819"
        },
        {
          "name": "MDVSA-2010:223",
          "tags": [
            "vendor-advisory",
            "x_refsource_MANDRIVA"
          ],
          "url": "http://www.mandriva.com/security/advisories?name=MDVSA-2010:223"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "cve@mitre.org",
          "ID": "CVE-2010-3835",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "n/a",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "n/a"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "n/a"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "MySQL 5.1 before 5.1.51 and 5.5 before 5.5.6 allows remote authenticated users to cause a denial of service (mysqld server crash) by performing a user-variable assignment in a logical expression that is calculated and stored in a temporary table for GROUP BY, then causing the expression value to be used after the table is created, which causes the expression to be re-evaluated instead of accessing its value from the table."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "n/a"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "http://dev.mysql.com/doc/refman/5.1/en/news-5-1-51.html",
              "refsource": "CONFIRM",
              "url": "http://dev.mysql.com/doc/refman/5.1/en/news-5-1-51.html"
            },
            {
              "name": "http://dev.mysql.com/doc/refman/5.5/en/news-5-5-6.html",
              "refsource": "CONFIRM",
              "url": "http://dev.mysql.com/doc/refman/5.5/en/news-5-5-6.html"
            },
            {
              "name": "USN-1397-1",
              "refsource": "UBUNTU",
              "url": "http://www.ubuntu.com/usn/USN-1397-1"
            },
            {
              "name": "http://support.apple.com/kb/HT4723",
              "refsource": "CONFIRM",
              "url": "http://support.apple.com/kb/HT4723"
            },
            {
              "name": "42875",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/42875"
            },
            {
              "name": "USN-1017-1",
              "refsource": "UBUNTU",
              "url": "http://www.ubuntu.com/usn/USN-1017-1"
            },
            {
              "name": "APPLE-SA-2011-06-23-1",
              "refsource": "APPLE",
              "url": "http://lists.apple.com/archives/security-announce/2011//Jun/msg00000.html"
            },
            {
              "name": "TLSA-2011-3",
              "refsource": "TURBO",
              "url": "http://www.turbolinux.co.jp/security/2011/TLSA-2011-3j.txt"
            },
            {
              "name": "ADV-2011-0105",
              "refsource": "VUPEN",
              "url": "http://www.vupen.com/english/advisories/2011/0105"
            },
            {
              "name": "MDVSA-2010:222",
              "refsource": "MANDRIVA",
              "url": "http://www.mandriva.com/security/advisories?name=MDVSA-2010:222"
            },
            {
              "name": "RHSA-2011:0164",
              "refsource": "REDHAT",
              "url": "http://www.redhat.com/support/errata/RHSA-2011-0164.html"
            },
            {
              "name": "ADV-2011-0170",
              "refsource": "VUPEN",
              "url": "http://www.vupen.com/english/advisories/2011/0170"
            },
            {
              "name": "DSA-2143",
              "refsource": "DEBIAN",
              "url": "http://www.debian.org/security/2011/dsa-2143"
            },
            {
              "name": "43676",
              "refsource": "BID",
              "url": "http://www.securityfocus.com/bid/43676"
            },
            {
              "name": "ADV-2011-0345",
              "refsource": "VUPEN",
              "url": "http://www.vupen.com/english/advisories/2011/0345"
            },
            {
              "name": "mysql-uservariable-dos(64843)",
              "refsource": "XF",
              "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/64843"
            },
            {
              "name": "42936",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/42936"
            },
            {
              "name": "RHSA-2010:0825",
              "refsource": "REDHAT",
              "url": "http://www.redhat.com/support/errata/RHSA-2010-0825.html"
            },
            {
              "name": "http://bugs.mysql.com/bug.php?id=55564",
              "refsource": "MISC",
              "url": "http://bugs.mysql.com/bug.php?id=55564"
            },
            {
              "name": "https://bugzilla.redhat.com/show_bug.cgi?id=640819",
              "refsource": "CONFIRM",
              "url": "https://bugzilla.redhat.com/show_bug.cgi?id=640819"
            },
            {
              "name": "MDVSA-2010:223",
              "refsource": "MANDRIVA",
              "url": "http://www.mandriva.com/security/advisories?name=MDVSA-2010:223"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
    "assignerShortName": "mitre",
    "cveId": "CVE-2010-3835",
    "datePublished": "2011-01-14T18:00:00",
    "dateReserved": "2010-10-07T00:00:00",
    "dateUpdated": "2024-08-07T03:26:11.487Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1",
  "vulnerability-lookup:meta": {
    "nvd": "{\"cve\":{\"id\":\"CVE-2010-3835\",\"sourceIdentifier\":\"cve@mitre.org\",\"published\":\"2011-01-14T19:02:42.983\",\"lastModified\":\"2025-04-11T00:51:21.963\",\"vulnStatus\":\"Deferred\",\"cveTags\":[],\"descriptions\":[{\"lang\":\"en\",\"value\":\"MySQL 5.1 before 5.1.51 and 5.5 before 5.5.6 allows remote authenticated users to cause a denial of service (mysqld server crash) by performing a user-variable assignment in a logical expression that is calculated and stored in a temporary table for GROUP BY, then causing the expression value to be used after the table is created, which causes the expression to be re-evaluated instead of accessing its value from the table.\"},{\"lang\":\"es\",\"value\":\"MySQL versiones 5.1 anteriores a 5.1.51 y versiones 5.5 anteriores a 5.5.6, permite a los usuarios autenticados remotos causar una denegaci\u00f3n de servicio (bloqueo del servidor mysqld) mediante la realizaci\u00f3n de una asignaci\u00f3n de variable de usuario en una expresi\u00f3n l\u00f3gica que se calcula y almacena en una tabla temporal para GROUP BY y, entonces causar que sea usado el valor de la expresi\u00f3n despu\u00e9s de crear la tabla, lo que causa que la expresi\u00f3n se vuelva a evaluar en lugar de tener acceso a su valor desde la tabla.\"}],\"metrics\":{\"cvssMetricV2\":[{\"source\":\"nvd@nist.gov\",\"type\":\"Primary\",\"cvssData\":{\"version\":\"2.0\",\"vectorString\":\"AV:N/AC:L/Au:S/C:N/I:N/A:P\",\"baseScore\":4.0,\"accessVector\":\"NETWORK\",\"accessComplexity\":\"LOW\",\"authentication\":\"SINGLE\",\"confidentialityImpact\":\"NONE\",\"integrityImpact\":\"NONE\",\"availabilityImpact\":\"PARTIAL\"},\"baseSeverity\":\"MEDIUM\",\"exploitabilityScore\":8.0,\"impactScore\":2.9,\"acInsufInfo\":false,\"obtainAllPrivilege\":false,\"obtainUserPrivilege\":false,\"obtainOtherPrivilege\":false,\"userInteractionRequired\":false}]},\"weaknesses\":[{\"source\":\"nvd@nist.gov\",\"type\":\"Primary\",\"description\":[{\"lang\":\"en\",\"value\":\"CWE-189\"}]}],\"configurations\":[{\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:mysql:mysql:5.1.5:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"35BED939-3366-4CBF-B6BF-29C0C42E97F7\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:mysql:mysql:5.1.23:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"7D0F7A49-62A2-4201-B6F3-8DB9902A4480\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:mysql:mysql:5.1.31:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"2C56D394-4CE1-4237-A681-1474B5436CC7\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:mysql:mysql:5.1.32:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"B2BFBC7B-5C23-4CDB-AE4F-721378C36B07\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:mysql:mysql:5.1.34:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"F68CA8CA-2755-450A-80E2-286A571987F8\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:mysql:mysql:5.1.37:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"6287E2C9-DF38-4E4E-A8E4-6AC6ADDC920D\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:oracle:mysql:5.1:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"F58612F4-1CAC-4BFC-A9B2-3D4025F428FF\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:oracle:mysql:5.1.1:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"73F49A1D-BCA3-4772-8AB3-621CCC997B3A\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:oracle:mysql:5.1.2:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"F719DD8E-8379-43C3-97F9-DE350E457F7F\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:oracle:mysql:5.1.3:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"342BB65B-1358-441C-B59A-1756BCC6414A\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:oracle:mysql:5.1.4:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"8589B1E7-0D6D-44B4-A36E-8225C5D15828\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:oracle:mysql:5.1.6:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"88FEEE64-899F-4F55-B829-641706E29E32\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:oracle:mysql:5.1.7:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"D8597F56-BB14-480C-91CD-CAB96A9DDD8D\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:oracle:mysql:5.1.8:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"7F4C5C88-95A7-4DDA-BC2F-CAFA47B0D67A\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:oracle:mysql:5.1.9:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"5EB2323C-EFE2-407A-9AE9-8717FA9F8625\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:oracle:mysql:5.1.10:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"6341F695-6034-4CC1-9485-ACD3A0E1A079\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:oracle:mysql:5.1.11:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"D1DF5F19-ECD9-457F-89C6-6F0271CF4766\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:oracle:mysql:5.1.12:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"446DB5E9-EF4C-4A53-911E-91A802AECA5D\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:oracle:mysql:5.1.13:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"5829BE6A-BC58-482B-9DA1-04FDD413A7A9\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:oracle:mysql:5.1.14:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"C85D20DF-702B-4F0B-922D-782474A4B663\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:oracle:mysql:5.1.15:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"73A09785-3CA4-4797-A836-A958DCDC322F\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:oracle:mysql:5.1.16:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"C4DE3D79-0966-4E14-9288-7C269A2CEEC3\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:oracle:mysql:5.1.17:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"564F6A24-BEB3-4420-A633-8AD54C292436\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:oracle:mysql:5.1.18:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"047FBCCD-DE7C-41FA-80A3-AD695C643C7A\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:oracle:mysql:5.1.19:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"687CC501-4CB2-4295-86F6-A5E45DEC2D0D\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:oracle:mysql:5.1.20:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"822A718D-AD9D-4AB9-802F-5F5C6309D809\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:oracle:mysql:5.1.21:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"CA2D4002-FD96-462D-BA55-4624170CAA4C\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:oracle:mysql:5.1.22:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"0A40FE1C-6EB0-4C75-867E-B1F8408E5A0A\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:oracle:mysql:5.1.23:a:*:*:*:*:*:*\",\"matchCriteriaId\":\"9D7B68A6-13FA-4EAE-8ED0-5940A72A3D82\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:oracle:mysql:5.1.24:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"64F37486-E91C-47C4-9F53-4CFDBF8C1EEC\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:oracle:mysql:5.1.25:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"53A7D87C-E34C-4595-88D5-CD483B3E8CE7\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:oracle:mysql:5.1.26:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"28103843-D04F-4180-A71D-8DAC4E28C2F6\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:oracle:mysql:5.1.27:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"5FEAE55E-7330-4A5A-A862-8D7E7621EB95\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:oracle:mysql:5.1.28:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"848D4621-AFB8-4A12-A20E-4FC9F1774DE8\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:oracle:mysql:5.1.29:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"5138E55E-58C1-44B5-A296-A46DF2920DF9\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:oracle:mysql:5.1.30:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"31B9607A-1E58-4471-BEDE-03484A1E9739\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:oracle:mysql:5.1.31:sp1:*:*:*:*:*:*\",\"matchCriteriaId\":\"FD25674A-B158-4770-B269-A9A039C79A8E\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:oracle:mysql:5.1.33:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"DDCB266F-E642-4447-8B9C-A58ED4D29227\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:oracle:mysql:5.1.34:sp1:*:*:*:*:*:*\",\"matchCriteriaId\":\"8FF8582D-3AB5-4F16-AD52-ED5D0CE10120\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:oracle:mysql:5.1.35:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"AB79189C-344C-4D5D-A8D8-C3852F7BCFDF\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:oracle:mysql:5.1.36:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"63A48A7A-8DE5-4278-AD0B-4736B45DF337\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:oracle:mysql:5.1.37:sp1:*:*:*:*:*:*\",\"matchCriteriaId\":\"F828A5AD-5EA5-4B02-8BD4-0B2A109342F2\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:oracle:mysql:5.1.38:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"34E9C1C2-3F7E-4447-92B8-8D4F2A623812\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:oracle:mysql:5.1.39:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"25A6FDB0-A86C-4312-AB75-C2A942315DE6\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:oracle:mysql:5.1.40:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"F47B75E9-46C7-45D9-86FA-CBD2B2F853BF\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:oracle:mysql:5.1.40:sp1:*:*:*:*:*:*\",\"matchCriteriaId\":\"042A36D5-A5CE-4DAF-B0CA-2F7F6FEB2D37\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:oracle:mysql:5.1.41:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"D04AF072-B257-4025-BDD2-9B1519899ECE\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:oracle:mysql:5.1.42:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"E2D79B84-CDC7-4F8B-A59A-E808ED05CC58\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:oracle:mysql:5.1.43:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"A5F0CA63-8A14-42C0-BD75-C38ACC121EDB\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:oracle:mysql:5.1.43:sp1:*:*:*:*:*:*\",\"matchCriteriaId\":\"5A567DBC-EC87-4F85-9CEF-5210AFED5F1F\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:oracle:mysql:5.1.44:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"D1E7868A-070E-4CF7-9A6E-1C20F0CC34CB\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:oracle:mysql:5.1.45:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"BDC43B01-D72D-4DED-BA0B-A3A72D0F1FD8\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:oracle:mysql:5.1.46:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"94461EC8-D582-4C5A-AD1E-25D8BE5982E3\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:oracle:mysql:5.1.46:sp1:*:*:*:*:*:*\",\"matchCriteriaId\":\"771B63F2-3D6B-4A91-B626-A85A86C62D4B\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:oracle:mysql:5.1.47:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"119F1C97-94FB-4BDB-ADDD-A47CFB455ED8\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:oracle:mysql:5.1.48:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"A6904B58-303E-4B99-A1B0-942864449C79\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:oracle:mysql:5.1.49:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"91FD895F-4390-4E29-91E4-7FAC2465422D\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:oracle:mysql:5.1.49:sp1:*:*:*:*:*:*\",\"matchCriteriaId\":\"11660E47-0B83-4BE9-8FE5-AE0CD99167CA\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:oracle:mysql:5.1.50:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"D0D88EC4-53E3-47C4-B185-1A55CEF5164E\"}]}]},{\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:oracle:mysql:5.5.0:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"4F15ADFE-4C28-4F37-91C8-1963E38056FA\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:oracle:mysql:5.5.1:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"DD918B47-8319-478B-AB6A-18F502DA691E\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:oracle:mysql:5.5.2:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"46395846-C122-470B-8CCC-E8136BB30242\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:oracle:mysql:5.5.3:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"CD8ED2D4-FF24-4F01-A733-26B8B2732304\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:oracle:mysql:5.5.4:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"C4F8BA70-7825-4A7C-A9F1-9303AD5AFA45\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:oracle:mysql:5.5.5:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"DA738715-C5B0-45AC-949A-F11BF8F94737\"}]}]}],\"references\":[{\"url\":\"http://bugs.mysql.com/bug.php?id=55564\",\"source\":\"cve@mitre.org\"},{\"url\":\"http://dev.mysql.com/doc/refman/5.1/en/news-5-1-51.html\",\"source\":\"cve@mitre.org\"},{\"url\":\"http://dev.mysql.com/doc/refman/5.5/en/news-5-5-6.html\",\"source\":\"cve@mitre.org\"},{\"url\":\"http://lists.apple.com/archives/security-announce/2011//Jun/msg00000.html\",\"source\":\"cve@mitre.org\"},{\"url\":\"http://secunia.com/advisories/42875\",\"source\":\"cve@mitre.org\",\"tags\":[\"Vendor Advisory\"]},{\"url\":\"http://secunia.com/advisories/42936\",\"source\":\"cve@mitre.org\",\"tags\":[\"Vendor Advisory\"]},{\"url\":\"http://support.apple.com/kb/HT4723\",\"source\":\"cve@mitre.org\"},{\"url\":\"http://www.debian.org/security/2011/dsa-2143\",\"source\":\"cve@mitre.org\"},{\"url\":\"http://www.mandriva.com/security/advisories?name=MDVSA-2010:222\",\"source\":\"cve@mitre.org\"},{\"url\":\"http://www.mandriva.com/security/advisories?name=MDVSA-2010:223\",\"source\":\"cve@mitre.org\"},{\"url\":\"http://www.redhat.com/support/errata/RHSA-2010-0825.html\",\"source\":\"cve@mitre.org\",\"tags\":[\"Vendor Advisory\"]},{\"url\":\"http://www.redhat.com/support/errata/RHSA-2011-0164.html\",\"source\":\"cve@mitre.org\"},{\"url\":\"http://www.securityfocus.com/bid/43676\",\"source\":\"cve@mitre.org\"},{\"url\":\"http://www.turbolinux.co.jp/security/2011/TLSA-2011-3j.txt\",\"source\":\"cve@mitre.org\"},{\"url\":\"http://www.ubuntu.com/usn/USN-1017-1\",\"source\":\"cve@mitre.org\"},{\"url\":\"http://www.ubuntu.com/usn/USN-1397-1\",\"source\":\"cve@mitre.org\"},{\"url\":\"http://www.vupen.com/english/advisories/2011/0105\",\"source\":\"cve@mitre.org\",\"tags\":[\"Vendor Advisory\"]},{\"url\":\"http://www.vupen.com/english/advisories/2011/0170\",\"source\":\"cve@mitre.org\",\"tags\":[\"Vendor Advisory\"]},{\"url\":\"http://www.vupen.com/english/advisories/2011/0345\",\"source\":\"cve@mitre.org\",\"tags\":[\"Vendor Advisory\"]},{\"url\":\"https://bugzilla.redhat.com/show_bug.cgi?id=640819\",\"source\":\"cve@mitre.org\",\"tags\":[\"Patch\"]},{\"url\":\"https://exchange.xforce.ibmcloud.com/vulnerabilities/64843\",\"source\":\"cve@mitre.org\"},{\"url\":\"http://bugs.mysql.com/bug.php?id=55564\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"},{\"url\":\"http://dev.mysql.com/doc/refman/5.1/en/news-5-1-51.html\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"},{\"url\":\"http://dev.mysql.com/doc/refman/5.5/en/news-5-5-6.html\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"},{\"url\":\"http://lists.apple.com/archives/security-announce/2011//Jun/msg00000.html\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"},{\"url\":\"http://secunia.com/advisories/42875\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Vendor Advisory\"]},{\"url\":\"http://secunia.com/advisories/42936\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Vendor Advisory\"]},{\"url\":\"http://support.apple.com/kb/HT4723\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"},{\"url\":\"http://www.debian.org/security/2011/dsa-2143\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"},{\"url\":\"http://www.mandriva.com/security/advisories?name=MDVSA-2010:222\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"},{\"url\":\"http://www.mandriva.com/security/advisories?name=MDVSA-2010:223\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"},{\"url\":\"http://www.redhat.com/support/errata/RHSA-2010-0825.html\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Vendor Advisory\"]},{\"url\":\"http://www.redhat.com/support/errata/RHSA-2011-0164.html\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"},{\"url\":\"http://www.securityfocus.com/bid/43676\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"},{\"url\":\"http://www.turbolinux.co.jp/security/2011/TLSA-2011-3j.txt\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"},{\"url\":\"http://www.ubuntu.com/usn/USN-1017-1\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"},{\"url\":\"http://www.ubuntu.com/usn/USN-1397-1\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"},{\"url\":\"http://www.vupen.com/english/advisories/2011/0105\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Vendor Advisory\"]},{\"url\":\"http://www.vupen.com/english/advisories/2011/0170\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Vendor Advisory\"]},{\"url\":\"http://www.vupen.com/english/advisories/2011/0345\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Vendor Advisory\"]},{\"url\":\"https://bugzilla.redhat.com/show_bug.cgi?id=640819\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Patch\"]},{\"url\":\"https://exchange.xforce.ibmcloud.com/vulnerabilities/64843\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"}]}}"
  }
}


Log in or create an account to share your comment.




Tags
Taxonomy of the tags.




Sightings

Author Source Type Date

Nomenclature

  • Seen: The vulnerability was mentioned, discussed, or seen somewhere by the user.
  • Confirmed: The vulnerability is confirmed from an analyst perspective.
  • Exploited: This vulnerability was exploited and seen by the user reporting the sighting.
  • Patched: This vulnerability was successfully patched by the user reporting the sighting.
  • Not exploited: This vulnerability was not exploited or seen by the user reporting the sighting.
  • Not confirmed: The user expresses doubt about the veracity of the vulnerability.
  • Not patched: This vulnerability was not successfully patched by the user reporting the sighting.