CVEvulnerability
CVE-2010-3839
4.0 MEDIUM
Official page ↗
- Status
- Modified
- Published
- 2011-01-14
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 4.0 MEDIUM — AV:N/AC:L/Au:S/C:N/I:N/A:P
Description
MySQL 5.1 before 5.1.51 and 5.5 before 5.5.6 allows remote authenticated users to cause a denial of service (infinite loop) via multiple invocations of a (1) prepared statement or (2) stored procedure that creates a query with nested JOIN statements.
Affected configurations
• mysql mysql 5.1.5
• mysql mysql 5.1.23
• mysql mysql 5.1.31
• mysql mysql 5.1.32
• mysql mysql 5.1.34
• mysql mysql 5.1.37
• oracle mysql 5.1
• oracle mysql 5.1.1
• oracle mysql 5.1.2
• oracle mysql 5.1.3
• oracle mysql 5.1.4
• oracle mysql 5.1.6
• oracle mysql 5.1.7
• oracle mysql 5.1.8
• oracle mysql 5.1.9
• oracle mysql 5.1.10
• oracle mysql 5.1.11
• oracle mysql 5.1.12
• oracle mysql 5.1.13
• oracle mysql 5.1.14
• oracle mysql 5.1.15
• oracle mysql 5.1.16
• oracle mysql 5.1.17
• oracle mysql 5.1.18
• oracle mysql 5.1.19
• oracle mysql 5.1.20
• oracle mysql 5.1.21
• oracle mysql 5.1.22
• oracle mysql 5.1.23
• oracle mysql 5.1.24
• oracle mysql 5.1.25
• oracle mysql 5.1.26
• oracle mysql 5.1.27
• oracle mysql 5.1.28
• oracle mysql 5.1.29
• oracle mysql 5.1.30
• oracle mysql 5.1.31
• oracle mysql 5.1.33
• oracle mysql 5.1.34
• oracle mysql 5.1.35
• oracle mysql 5.1.36
• oracle mysql 5.1.37
• oracle mysql 5.1.38
• oracle mysql 5.1.39
• oracle mysql 5.1.40
• oracle mysql 5.1.41
• oracle mysql 5.1.42
• oracle mysql 5.1.43
• oracle mysql 5.1.44
• oracle mysql 5.1.45
• oracle mysql 5.1.46
• oracle mysql 5.1.47
• oracle mysql 5.1.48
• oracle mysql 5.1.49
• oracle mysql 5.1.50
• oracle mysql 5.5.0
• oracle mysql 5.5.1
• oracle mysql 5.5.2
• oracle mysql 5.5.3
• oracle mysql 5.5.4
… and 1 more
References
- http://bugs.mysql.com/bug.php?id=53544 bugs.mysql.com
- http://dev.mysql.com/doc/refman/5.1/en/news-5-1-51.html dev.mysql.com
- http://dev.mysql.com/doc/refman/5.5/en/news-5-5-6.html dev.mysql.com
- http://secunia.com/advisories/42936 secunia.com
- http://www.mandriva.com/security/advisories?name=MDVSA-2010:222 www.mandriva.com
- http://www.mandriva.com/security/advisories?name=MDVSA-2010:223 www.mandriva.com
- http://www.redhat.com/support/errata/RHSA-2010-0825.html www.redhat.com
- http://www.redhat.com/support/errata/RHSA-2011-0164.html www.redhat.com
- http://www.securityfocus.com/bid/43676 www.securityfocus.com
- http://www.ubuntu.com/usn/USN-1017-1 www.ubuntu.com
- http://www.ubuntu.com/usn/USN-1397-1 www.ubuntu.com
- http://www.vupen.com/english/advisories/2011/0170 www.vupen.com
- https://bugzilla.redhat.com/show_bug.cgi?id=640861 bugzilla.redhat.com
- https://exchange.xforce.ibmcloud.com/vulnerabilities/64839 exchange.xforce.ibmcloud.com
- http://bugs.mysql.com/bug.php?id=53544 bugs.mysql.com
- http://dev.mysql.com/doc/refman/5.1/en/news-5-1-51.html dev.mysql.com
- http://dev.mysql.com/doc/refman/5.5/en/news-5-5-6.html dev.mysql.com
- http://secunia.com/advisories/42936 secunia.com
- http://www.mandriva.com/security/advisories?name=MDVSA-2010:222 www.mandriva.com
- http://www.mandriva.com/security/advisories?name=MDVSA-2010:223 www.mandriva.com
- http://www.redhat.com/support/errata/RHSA-2010-0825.html www.redhat.com
- http://www.redhat.com/support/errata/RHSA-2011-0164.html www.redhat.com
- http://www.securityfocus.com/bid/43676 www.securityfocus.com
- http://www.ubuntu.com/usn/USN-1017-1 www.ubuntu.com
- http://www.ubuntu.com/usn/USN-1397-1 www.ubuntu.com
- http://www.vupen.com/english/advisories/2011/0170 www.vupen.com
- https://bugzilla.redhat.com/show_bug.cgi?id=640861 bugzilla.redhat.com
- https://exchange.xforce.ibmcloud.com/vulnerabilities/64839 exchange.xforce.ibmcloud.com