NVD

Id
15176  
Name
CVE-2010-3837  
Description
MySQL 5.0 before 5.0.92, 5.1 before 5.1.51, and 5.5 before 5.5.6 allows remote authenticated users to cause a denial of service (server crash) via a prepared statement that uses GROUP_CONCAT with the WITH ROLLUP modifier, probably triggering a use-after-free error when a copied object is modified in a way that also affects the original object.  
Reject
 
CVSS Version
2  
CVSS Score
4  
Severity
Medium  
CVSS Base Score
4  
CVSS Impact Subscore
2.9  
CVSS Exploit Subscore
8  
CVSS Vector
(AV:N/AC:L/Au:S/C:N/I:N/A:P)  
Pub Date
2017-01-18  
Published
2011-01-14  
Modified Date
2011-07-01  
Seq
2010-3837  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
85234 15176 CVE-2010-3837 http://bugs.mysql.com/bug.php?id=54476  View
85235 15176 CVE-2010-3837 http://dev.mysql.com/doc/refman/5.0/en/news-5-0-92.html  View
85236 15176 CVE-2010-3837 http://dev.mysql.com/doc/refman/5.1/en/news-5-1-51.html  View
85237 15176 CVE-2010-3837 http://dev.mysql.com/doc/refman/5.5/en/news-5-5-6.html  View
85238 15176 CVE-2010-3837 APPLE-SA-2011-06-23-1  View
85239 15176 CVE-2010-3837 http://support.apple.com/kb/HT4723  View
85240 15176 CVE-2010-3837 DSA-2143  View
85241 15176 CVE-2010-3837 MDVSA-2010:222  View
85242 15176 CVE-2010-3837 MDVSA-2010:223  View
85243 15176 CVE-2010-3837 RHSA-2010:0825  View
85244 15176 CVE-2010-3837 RHSA-2011:0164  View
85245 15176 CVE-2010-3837 43676  View
85246 15176 CVE-2010-3837 TLSA-2011-3  View
85247 15176 CVE-2010-3837 USN-1017-1  View
85248 15176 CVE-2010-3837 ADV-2011-0105  View
85249 15176 CVE-2010-3837 ADV-2011-0170  View
85250 15176 CVE-2010-3837 ADV-2011-0345  View
85251 15176 CVE-2010-3837 mysql-prepared-statement-dos(64841)  View
85252 15176 CVE-2010-3837 https://bugzilla.redhat.com/show_bug.cgi?id=640856  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
36960 JVNDB-2010-002740 MySQL におけるサービス運用妨害 (DoS) の脆弱性 MySQL は、サービス運用妨害 (DoS) 状態となる脆弱性が存在します。 CVE-2010-3837 46417 CVE-2010-3837 15176 4 http://jvndb.jvn.jp/ja/contents/2010/JVNDB-2010-002740.html 2010-09-10 2011-06-30 View