NVD

Id
15039  
Name
CVE-2010-3682  
Description
Oracle MySQL 5.1 before 5.1.49 and 5.0 before 5.0.92 allows remote authenticated users to cause a denial of service (mysqld daemon crash) by using EXPLAIN with crafted "SELECT ... UNION ... ORDER BY (SELECT ... WHERE ...)" statements, which triggers a NULL pointer dereference in the Item_singlerow_subselect::store function.  
Reject
 
CVSS Version
2  
CVSS Score
4  
Severity
Medium  
CVSS Base Score
4  
CVSS Impact Subscore
2.9  
CVSS Exploit Subscore
8  
CVSS Vector
(AV:N/AC:L/Au:S/C:N/I:N/A:P)  
Pub Date
2017-01-18  
Published
2011-01-11  
Modified Date
2013-01-21  
Seq
2010-3682  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
83975 15039 CVE-2010-3682 http://bugs.mysql.com/bug.php?id=52711  View
83976 15039 CVE-2010-3682 http://dev.mysql.com/doc/refman/5.0/en/news-5-0-92.html  View
83977 15039 CVE-2010-3682 http://dev.mysql.com/doc/refman/5.1/en/news-5-1-49.html  View
83978 15039 CVE-2010-3682 APPLE-SA-2011-06-23-1  View
83979 15039 CVE-2010-3682 SUSE-SR:2010:019  View
83980 15039 CVE-2010-3682 http://support.apple.com/kb/HT4723  View
83981 15039 CVE-2010-3682 DSA-2143  View
83982 15039 CVE-2010-3682 MDVSA-2010:155  View
83983 15039 CVE-2010-3682 MDVSA-2010:222  View
83984 15039 CVE-2010-3682 MDVSA-2011:012  View
83985 15039 CVE-2010-3682 [oss-security] 20100928 Re: CVE Request -- MySQL v5.1.49 -- multiple DoS flaws  View
83986 15039 CVE-2010-3682 RHSA-2010:0825  View
83987 15039 CVE-2010-3682 RHSA-2011:0164  View
83988 15039 CVE-2010-3682 42599  View
83989 15039 CVE-2010-3682 TLSA-2011-3  View
83990 15039 CVE-2010-3682 USN-1017-1  View
83991 15039 CVE-2010-3682 ADV-2011-0105  View
83992 15039 CVE-2010-3682 ADV-2011-0133  View
83993 15039 CVE-2010-3682 ADV-2011-0170  View
83994 15039 CVE-2010-3682 ADV-2011-0345  View
83995 15039 CVE-2010-3682 mysql-itemsinglerowsubselect-dos(64684)  View
83996 15039 CVE-2010-3682 https://bugzilla.redhat.com/show_bug.cgi?id=628328  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
36954 JVNDB-2010-002734 Oracle MySQL におけるサービス運用妨害 (DoS) の脆弱性 Oracle MySQL には、サービス運用妨害 (DoS) 状態となる脆弱性が存在します。 CVE-2010-3682 46262 CVE-2010-3682 15039 4 http://jvndb.jvn.jp/ja/contents/2010/JVNDB-2010-002734.html 2010-07-09 2011-06-29 View