NVD

Id
15172  
Name
CVE-2010-3833  
Description
MySQL 5.0 before 5.0.92, 5.1 before 5.1.51, and 5.5 before 5.5.6 does not properly propagate type errors, which allows remote attackers to cause a denial of service (server crash) via crafted arguments to extreme-value functions such as (1) LEAST and (2) GREATEST, related to KILL_BAD_DATA and a "CREATE TABLE ... SELECT."  
Reject
 
CVSS Version
2  
CVSS Score
5  
Severity
Medium  
CVSS Base Score
5  
CVSS Impact Subscore
2.9  
CVSS Exploit Subscore
10  
CVSS Vector
(AV:N/AC:L/Au:N/C:N/I:N/A:P)  
Pub Date
2017-01-18  
Published
2011-01-14  
Modified Date
2011-07-01  
Seq
2010-3833  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
85162 15172 CVE-2010-3833 http://bugs.mysql.com/bug.php?id=55826  View
85163 15172 CVE-2010-3833 http://dev.mysql.com/doc/refman/5.0/en/news-5-0-92.html  View
85164 15172 CVE-2010-3833 http://dev.mysql.com/doc/refman/5.1/en/news-5-1-51.html  View
85165 15172 CVE-2010-3833 http://dev.mysql.com/doc/refman/5.5/en/news-5-5-6.html  View
85166 15172 CVE-2010-3833 APPLE-SA-2011-06-23-1  View
85167 15172 CVE-2010-3833 http://support.apple.com/kb/HT4723  View
85168 15172 CVE-2010-3833 DSA-2143  View
85169 15172 CVE-2010-3833 MDVSA-2010:222  View
85170 15172 CVE-2010-3833 MDVSA-2010:223  View
85171 15172 CVE-2010-3833 RHSA-2010:0825  View
85172 15172 CVE-2010-3833 RHSA-2011:0164  View
85173 15172 CVE-2010-3833 43676  View
85174 15172 CVE-2010-3833 TLSA-2011-3  View
85175 15172 CVE-2010-3833 USN-1017-1  View
85176 15172 CVE-2010-3833 ADV-2011-0105  View
85177 15172 CVE-2010-3833 ADV-2011-0170  View
85178 15172 CVE-2010-3833 ADV-2011-0345  View
85179 15172 CVE-2010-3833 mysql-extremevalue-dos(64845)  View
85180 15172 CVE-2010-3833 https://bugzilla.redhat.com/show_bug.cgi?id=640751  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
36956 JVNDB-2010-002736 MySQL におけるサービス運用妨害 (DoS) の脆弱性 MySQL は、KILL_BAD_DATA および “CREATE TABLE … SELECT.” に関する処理に不備があるため、サービス運用妨害 (DoS) 状態となる脆弱性が存在します。 CVE-2010-3833 46413 CVE-2010-3833 15172 5 http://jvndb.jvn.jp/ja/contents/2010/JVNDB-2010-002736.html 2010-09-10 2011-06-29 View