NVD

Id
15177  
Name
CVE-2010-3838  
Description
MySQL 5.0 before 5.0.92, 5.1 before 5.1.51, and 5.5 before 5.5.6 allows remote authenticated users to cause a denial of service (server crash) via a query that uses the (1) GREATEST or (2) LEAST function with a mixed list of numeric and LONGBLOB arguments, which is not properly handled when the function"s result is "processed using an intermediate temporary table."  
Reject
 
CVSS Version
2  
CVSS Score
4  
Severity
Medium  
CVSS Base Score
4  
CVSS Impact Subscore
2.9  
CVSS Exploit Subscore
8  
CVSS Vector
(AV:N/AC:L/Au:S/C:N/I:N/A:P)  
Pub Date
2017-01-18  
Published
2011-01-14  
Modified Date
2011-07-01  
Seq
2010-3838  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
85253 15177 CVE-2010-3838 http://bugs.mysql.com/bug.php?id=54461  View
85254 15177 CVE-2010-3838 http://dev.mysql.com/doc/refman/5.0/en/news-5-0-92.html  View
85255 15177 CVE-2010-3838 http://dev.mysql.com/doc/refman/5.1/en/news-5-1-51.html  View
85256 15177 CVE-2010-3838 http://dev.mysql.com/doc/refman/5.5/en/news-5-5-6.html  View
85257 15177 CVE-2010-3838 APPLE-SA-2011-06-23-1  View
85258 15177 CVE-2010-3838 http://support.apple.com/kb/HT4723  View
85259 15177 CVE-2010-3838 DSA-2143  View
85260 15177 CVE-2010-3838 MDVSA-2010:222  View
85261 15177 CVE-2010-3838 MDVSA-2010:223  View
85262 15177 CVE-2010-3838 RHSA-2010:0825  View
85263 15177 CVE-2010-3838 RHSA-2011:0164  View
85264 15177 CVE-2010-3838 43676  View
85265 15177 CVE-2010-3838 TLSA-2011-3  View
85266 15177 CVE-2010-3838 USN-1017-1  View
85267 15177 CVE-2010-3838 ADV-2011-0105  View
85268 15177 CVE-2010-3838 ADV-2011-0170  View
85269 15177 CVE-2010-3838 ADV-2011-0345  View
85270 15177 CVE-2010-3838 mysql-longblob-dos(64840)  View
85271 15177 CVE-2010-3838 https://bugzilla.redhat.com/show_bug.cgi?id=640858  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
36961 JVNDB-2010-002741 MySQL におけるサービス運用妨害 (DoS) の脆弱性 MySQL は、数字と LONGBLOB 引数の混合リストを付与された GREATEST または LEAST 関数を intermediate temporary テーブルにてそれら関数の結果を導き出すクエリの処理に関して不備があるため、サービス運用妨害 (DoS) 状態となる脆弱性が存在します。 CVE-2010-3838 46418 CVE-2010-3838 15177 4 http://jvndb.jvn.jp/ja/contents/2010/JVNDB-2010-002741.html 2010-09-10 2011-06-30 View