CVEvulnerability
CVE-2013-1861
5.0 MEDIUM
Official page ↗
- Status
- Modified
- Published
- 2013-03-28
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 5.0 MEDIUM — AV:N/AC:L/Au:N/C:N/I:N/A:P
- Weaknesses
- CWE-119
Description
MariaDB 5.5.x before 5.5.30, 5.3.x before 5.3.13, 5.2.x before 5.2.15, and 5.1.x before 5.1.68, and Oracle MySQL 5.1.69 and earlier, 5.5.31 and earlier, and 5.6.11 and earlier allows remote attackers to cause a denial of service (crash) via a crafted geometry feature that specifies a large number of points, which is not properly handled when processing the binary representation of this feature, related to a numeric calculation error.
Affected configurations
• mariadb mariadb (>= 5.5.0 < 5.5.32)
• mariadb mariadb (>= 10.0.0 < 10.0.4)
• oracle mysql (>= 5.1.0 <= 5.1.69)
• oracle mysql (>= 5.5.0 <= 5.5.31)
• oracle mysql (>= 5.6.0 <= 5.6.11)
• redhat enterprise linux 5
• redhat enterprise linux 6.0
• debian debian linux 7.0
• canonical ubuntu linux 10.04
• canonical ubuntu linux 12.04
• canonical ubuntu linux 12.10
• canonical ubuntu linux 13.04
• opensuse opensuse 11.4
• opensuse opensuse 12.2
• opensuse opensuse 12.3
• suse linux enterprise desktop 11
• suse linux enterprise server 11
• suse linux enterprise software development kit 11
Related
Weakness · CWE (1)
- CWE-119 Improper Restriction of Operations within the Bounds of a Memory Buffer weakness
References
- http://lists.askmonty.org/pipermail/commits/2013-March/004371.html Mailing List, Third Party Advisory
- http://lists.opensuse.org/opensuse-security-announce/2013-08/msg00022.html Mailing List, Third Party Advisory
- http://lists.opensuse.org/opensuse-security-announce/2013-10/msg00001.html Mailing List, Third Party Advisory
- http://lists.opensuse.org/opensuse-updates/2013-08/msg00024.html Mailing List, Third Party Advisory
- http://lists.opensuse.org/opensuse-updates/2013-09/msg00008.html Mailing List, Third Party Advisory
- http://seclists.org/oss-sec/2013/q1/671 Mailing List, Third Party Advisory
- http://secunia.com/advisories/52639 Not Applicable
- http://secunia.com/advisories/54300 Not Applicable
- http://security.gentoo.org/glsa/glsa-201409-04.xml Third Party Advisory
- http://www.debian.org/security/2013/dsa-2818 Third Party Advisory
- http://www.oracle.com/technetwork/topics/security/cpujuly2013-1899826.html Third Party Advisory
- http://www.osvdb.org/91415 Broken Link
- http://www.securityfocus.com/bid/58511 Exploit, Third Party Advisory, VDB Entry
- http://www.ubuntu.com/usn/USN-1909-1 Third Party Advisory
- https://bugzilla.redhat.com/show_bug.cgi?id=919247 Issue Tracking, Third Party Advisory
- https://exchange.xforce.ibmcloud.com/vulnerabilities/82895 Third Party Advisory, VDB Entry
- https://mariadb.atlassian.net/browse/MDEV-4252 Broken Link
- http://lists.askmonty.org/pipermail/commits/2013-March/004371.html Mailing List, Third Party Advisory
- http://lists.opensuse.org/opensuse-security-announce/2013-08/msg00022.html Mailing List, Third Party Advisory
- http://lists.opensuse.org/opensuse-security-announce/2013-10/msg00001.html Mailing List, Third Party Advisory
- http://lists.opensuse.org/opensuse-updates/2013-08/msg00024.html Mailing List, Third Party Advisory
- http://lists.opensuse.org/opensuse-updates/2013-09/msg00008.html Mailing List, Third Party Advisory
- http://seclists.org/oss-sec/2013/q1/671 Mailing List, Third Party Advisory
- http://secunia.com/advisories/52639 Not Applicable
- http://secunia.com/advisories/54300 Not Applicable
- http://security.gentoo.org/glsa/glsa-201409-04.xml Third Party Advisory
- http://www.debian.org/security/2013/dsa-2818 Third Party Advisory
- http://www.oracle.com/technetwork/topics/security/cpujuly2013-1899826.html Third Party Advisory
- http://www.osvdb.org/91415 Broken Link
- http://www.securityfocus.com/bid/58511 Exploit, Third Party Advisory, VDB Entry
- http://www.ubuntu.com/usn/USN-1909-1 Third Party Advisory
- https://bugzilla.redhat.com/show_bug.cgi?id=919247 Issue Tracking, Third Party Advisory
- https://exchange.xforce.ibmcloud.com/vulnerabilities/82895 Third Party Advisory, VDB Entry
- https://mariadb.atlassian.net/browse/MDEV-4252 Broken Link