NVD

Id
15174  
Name
CVE-2010-3835  
Description
MySQL 5.1 before 5.1.51 and 5.5 before 5.5.6 allows remote authenticated users to cause a denial of service (mysqld server crash) by performing a user-variable assignment in a logical expression that is calculated and stored in a temporary table for GROUP BY, then causing the expression value to be used after the table is created, which causes the expression to be re-evaluated instead of accessing its value from the table.  
Reject
 
CVSS Version
2  
CVSS Score
4  
Severity
Medium  
CVSS Base Score
4  
CVSS Impact Subscore
2.9  
CVSS Exploit Subscore
8  
CVSS Vector
(AV:N/AC:L/Au:S/C:N/I:N/A:P)  
Pub Date
2017-01-18  
Published
2011-01-14  
Modified Date
2011-09-01  
Seq
2010-3835  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
85197 15174 CVE-2010-3835 http://bugs.mysql.com/bug.php?id=55564  View
85198 15174 CVE-2010-3835 http://dev.mysql.com/doc/refman/5.1/en/news-5-1-51.html  View
85199 15174 CVE-2010-3835 http://dev.mysql.com/doc/refman/5.5/en/news-5-5-6.html  View
85200 15174 CVE-2010-3835 APPLE-SA-2011-06-23-1  View
85201 15174 CVE-2010-3835 http://support.apple.com/kb/HT4723  View
85202 15174 CVE-2010-3835 DSA-2143  View
85203 15174 CVE-2010-3835 MDVSA-2010:222  View
85204 15174 CVE-2010-3835 MDVSA-2010:223  View
85205 15174 CVE-2010-3835 RHSA-2010:0825  View
85206 15174 CVE-2010-3835 RHSA-2011:0164  View
85207 15174 CVE-2010-3835 43676  View
85208 15174 CVE-2010-3835 TLSA-2011-3  View
85209 15174 CVE-2010-3835 USN-1017-1  View
85210 15174 CVE-2010-3835 ADV-2011-0105  View
85211 15174 CVE-2010-3835 ADV-2011-0170  View
85212 15174 CVE-2010-3835 ADV-2011-0345  View
85213 15174 CVE-2010-3835 mysql-uservariable-dos(64843)  View
85214 15174 CVE-2010-3835 https://bugzilla.redhat.com/show_bug.cgi?id=640819  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
36958 JVNDB-2010-002738 MySQL におけるサービス運用妨害 (DoS) の脆弱性 MySQL は、GROUP BY 用の一時的なテーブル (temporary table) 内で計算および保存処理が行われる論理条件式を用いてユーザ変数割り当て処理を実行すると、テーブル作成後に式の値が代入されるにもかかわらず、当該テーブルの計算結果にアクセスする事なく再評価を行ってしまうため、mysqld サーバのクラッシュを引き起こし、サービス運用妨害 (DoS) 状態となる脆弱性が存在します。 CVE-2010-3835 46415 CVE-2010-3835 15174 4 http://jvndb.jvn.jp/ja/contents/2010/JVNDB-2010-002738.html 2010-09-10 2011-06-29 View