NVD

Id
38003  
Name
CVE-2013-1861  
Description
MariaDB 5.5.x before 5.5.30, 5.3.x before 5.3.13, 5.2.x before 5.2.15, and 5.1.x before 5.1.68, and Oracle MySQL 5.1.69 and earlier, 5.5.31 and earlier, and 5.6.11 and earlier allows remote attackers to cause a denial of service (crash) via a crafted geometry feature that specifies a large number of points, which is not properly handled when processing the binary representation of this feature, related to a numeric calculation error.  
Reject
 
CVSS Version
2  
CVSS Score
5  
Severity
Medium  
CVSS Base Score
5  
CVSS Impact Subscore
2.9  
CVSS Exploit Subscore
10  
CVSS Vector
(AV:N/AC:L/Au:N/C:N/I:N/A:P)  
Pub Date
2017-01-18  
Published
2013-03-28  
Modified Date
2017-01-06  
Seq
2013-1861  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
194118 38003 CVE-2013-1861 [Commits] 20130305 Rev 3682: TODO-424 geometry query crashes server. in file:///home/hf/wmar/todo-424/  View
194119 38003 CVE-2013-1861 SUSE-SU-2013:1390  View
194120 38003 CVE-2013-1861 SUSE-SU-2013:1529  View
194121 38003 CVE-2013-1861 openSUSE-SU-2013:1335  View
194122 38003 CVE-2013-1861 openSUSE-SU-2013:1410  View
194123 38003 CVE-2013-1861 [oss-security] 20130513 CVE-2013-1861 for MySQL/MariaDB: geometry query crashes mysqld  View
194124 38003 CVE-2013-1861 GLSA-201409-04  View
194125 38003 CVE-2013-1861 DSA-2818  View
194126 38003 CVE-2013-1861 http://www.oracle.com/technetwork/topics/security/cpujuly2013-1899826.html  View
194127 38003 CVE-2013-1861 58511  View
194128 38003 CVE-2013-1861 USN-1909-1  View
194129 38003 CVE-2013-1861 mysql-mariadb-cve20131861-dos(82895)  View
194130 38003 CVE-2013-1861 https://bugzilla.redhat.com/show_bug.cgi?id=919247  View
194131 38003 CVE-2013-1861 https://mariadb.atlassian.net/browse/MDEV-4252  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
20512 JVNDB-2013-002087 MariaDB および Oracle MySQL におけるサービス運用妨害 (DoS) の脆弱性 MariaDB および Oracle MySQL は、数値計算のエラーに関する処理に不備があるため、サービス運用妨害 (クラッシュ) 状態にされる脆弱性が存在します。 CVE-2013-1861 61803 CVE-2013-1861 38003 5 http://jvndb.jvn.jp/ja/contents/2013/JVNDB-2013-002087.html 2013-03-05 2013-11-01 View