CVEvulnerability
CVE-2010-3677
4.0 MEDIUM
Official page ↗
- Status
- Modified
- Published
- 2011-01-11
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 4.0 MEDIUM — AV:N/AC:L/Au:S/C:N/I:N/A:P
- Weaknesses
- CWE-399
Description
Oracle MySQL 5.1 before 5.1.49 and 5.0 before 5.0.92 allows remote authenticated users to cause a denial of service (mysqld daemon crash) via a join query that uses a table with a unique SET column.
Affected configurations
• mysql mysql (<= 5.1.48)
• mysql mysql 5.1.23
• mysql mysql 5.1.31
• mysql mysql 5.1.32
• mysql mysql 5.1.34
• mysql mysql 5.1.37
• oracle mysql 5.1.1
• oracle mysql 5.1.2
• oracle mysql 5.1.3
• oracle mysql 5.1.4
• oracle mysql 5.1.10
• oracle mysql 5.1.11
• oracle mysql 5.1.12
• oracle mysql 5.1.13
• oracle mysql 5.1.14
• oracle mysql 5.1.15
• oracle mysql 5.1.16
• oracle mysql 5.1.17
• oracle mysql 5.1.18
• oracle mysql 5.1.19
• oracle mysql 5.1.20
• oracle mysql 5.1.21
• oracle mysql 5.1.22
• oracle mysql 5.1.23
• oracle mysql 5.1.24
• oracle mysql 5.1.25
• oracle mysql 5.1.26
• oracle mysql 5.1.27
• oracle mysql 5.1.28
• oracle mysql 5.1.29
• oracle mysql 5.1.30
• oracle mysql 5.1.31
• oracle mysql 5.1.33
• oracle mysql 5.1.34
• oracle mysql 5.1.35
• oracle mysql 5.1.36
• oracle mysql 5.1.37
• oracle mysql 5.1.38
• oracle mysql 5.1.39
• oracle mysql 5.1.40
• oracle mysql 5.1.41
• oracle mysql 5.1.42
• oracle mysql 5.1.43
• oracle mysql 5.1.44
• oracle mysql 5.1.45
• oracle mysql 5.1.46
• oracle mysql 5.1.47
• mysql mysql (<= 5.0.91)
• mysql mysql 5.0.0
• mysql mysql 5.0.1
• mysql mysql 5.0.2
• mysql mysql 5.0.10
• mysql mysql 5.0.15
• mysql mysql 5.0.16
• mysql mysql 5.0.17
• mysql mysql 5.0.20
• mysql mysql 5.0.24
• mysql mysql 5.0.30
• mysql mysql 5.0.36
• mysql mysql 5.0.44
… and 51 more
Related
Weakness · not in database (1)
References
- http://bugs.mysql.com/bug.php?id=54575 bugs.mysql.com
- http://dev.mysql.com/doc/refman/5.0/en/news-5-0-92.html dev.mysql.com
- http://dev.mysql.com/doc/refman/5.1/en/news-5-1-49.html dev.mysql.com
- http://lists.apple.com/archives/security-announce/2011//Jun/msg00000.html lists.apple.com
- http://lists.opensuse.org/opensuse-security-announce/2010-10/msg00006.html lists.opensuse.org
- http://secunia.com/advisories/42875 Vendor Advisory
- http://secunia.com/advisories/42936 Vendor Advisory
- http://support.apple.com/kb/HT4723 support.apple.com
- http://www.debian.org/security/2011/dsa-2143 www.debian.org
- http://www.mandriva.com/security/advisories?name=MDVSA-2010:155 www.mandriva.com
- http://www.mandriva.com/security/advisories?name=MDVSA-2010:222 www.mandriva.com
- http://www.mandriva.com/security/advisories?name=MDVSA-2011:012 www.mandriva.com
- http://www.openwall.com/lists/oss-security/2010/09/28/10 Exploit
- http://www.redhat.com/support/errata/RHSA-2010-0825.html www.redhat.com
- http://www.redhat.com/support/errata/RHSA-2011-0164.html Vendor Advisory
- http://www.securityfocus.com/bid/42646 www.securityfocus.com
- http://www.turbolinux.co.jp/security/2011/TLSA-2011-3j.txt www.turbolinux.co.jp
- http://www.ubuntu.com/usn/USN-1017-1 www.ubuntu.com
- http://www.ubuntu.com/usn/USN-1397-1 www.ubuntu.com
- http://www.vupen.com/english/advisories/2011/0105 Vendor Advisory
- http://www.vupen.com/english/advisories/2011/0133 Vendor Advisory
- http://www.vupen.com/english/advisories/2011/0170 Vendor Advisory
- http://www.vupen.com/english/advisories/2011/0345 Vendor Advisory
- https://bugzilla.redhat.com/show_bug.cgi?id=628040 Exploit
- https://exchange.xforce.ibmcloud.com/vulnerabilities/64688 exchange.xforce.ibmcloud.com
- http://bugs.mysql.com/bug.php?id=54575 bugs.mysql.com
- http://dev.mysql.com/doc/refman/5.0/en/news-5-0-92.html dev.mysql.com
- http://dev.mysql.com/doc/refman/5.1/en/news-5-1-49.html dev.mysql.com
- http://lists.apple.com/archives/security-announce/2011//Jun/msg00000.html lists.apple.com
- http://lists.opensuse.org/opensuse-security-announce/2010-10/msg00006.html lists.opensuse.org
- http://secunia.com/advisories/42875 Vendor Advisory
- http://secunia.com/advisories/42936 Vendor Advisory
- http://support.apple.com/kb/HT4723 support.apple.com
- http://www.debian.org/security/2011/dsa-2143 www.debian.org
- http://www.mandriva.com/security/advisories?name=MDVSA-2010:155 www.mandriva.com
- http://www.mandriva.com/security/advisories?name=MDVSA-2010:222 www.mandriva.com
- http://www.mandriva.com/security/advisories?name=MDVSA-2011:012 www.mandriva.com
- http://www.openwall.com/lists/oss-security/2010/09/28/10 Exploit
- http://www.redhat.com/support/errata/RHSA-2010-0825.html www.redhat.com
- http://www.redhat.com/support/errata/RHSA-2011-0164.html Vendor Advisory
- http://www.securityfocus.com/bid/42646 www.securityfocus.com
- http://www.turbolinux.co.jp/security/2011/TLSA-2011-3j.txt www.turbolinux.co.jp
- http://www.ubuntu.com/usn/USN-1017-1 www.ubuntu.com
- http://www.ubuntu.com/usn/USN-1397-1 www.ubuntu.com
- http://www.vupen.com/english/advisories/2011/0105 Vendor Advisory
- http://www.vupen.com/english/advisories/2011/0133 Vendor Advisory
- http://www.vupen.com/english/advisories/2011/0170 Vendor Advisory
- http://www.vupen.com/english/advisories/2011/0345 Vendor Advisory
- https://bugzilla.redhat.com/show_bug.cgi?id=628040 Exploit
- https://exchange.xforce.ibmcloud.com/vulnerabilities/64688 exchange.xforce.ibmcloud.com