NVD

Id
51172  
Name
CVE-2009-4019  
Description
mysqld in MySQL 5.0.x before 5.0.88 and 5.1.x before 5.1.41 does not (1) properly handle errors during execution of certain SELECT statements with subqueries, and does not (2) preserve certain null_value flags during execution of statements that use the GeomFromWKB function, which allows remote authenticated users to cause a denial of service (daemon crash) via a crafted statement.  
Reject
 
CVSS Version
2  
CVSS Score
4  
Severity
Medium  
CVSS Base Score
4  
CVSS Impact Subscore
2.9  
CVSS Exploit Subscore
8  
CVSS Vector
(AV:N/AC:L/Au:S/C:N/I:N/A:P)  
Pub Date
2017-01-07  
Published
2009-11-30  
Modified Date
2010-08-21  
Seq
2009-4019  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
259484 51172 CVE-2009-4019 http://bugs.mysql.com/47780  View
259485 51172 CVE-2009-4019 http://bugs.mysql.com/48291  View
259486 51172 CVE-2009-4019 http://dev.mysql.com/doc/refman/5.0/en/news-5-0-88.html  View
259487 51172 CVE-2009-4019 http://dev.mysql.com/doc/refman/5.1/en/news-5-1-41.html  View
259488 51172 CVE-2009-4019 APPLE-SA-2010-03-29-1  View
259489 51172 CVE-2009-4019 SUSE-SR:2010:011  View
259490 51172 CVE-2009-4019 [oss-security] 20091121 CVE Request - MySQL - 5.0.88  View
259491 51172 CVE-2009-4019 [oss-security] 20091121 Re: CVE Request - MySQL - 5.0.88  View
259492 51172 CVE-2009-4019 [oss-security] 20091123 Re: CVE Request - MySQL - 5.0.88  View
259493 51172 CVE-2009-4019 oval:org.mitre.oval:def:11349  View
259494 51172 CVE-2009-4019 oval:org.mitre.oval:def:8500  View
259495 51172 CVE-2009-4019 http://support.apple.com/kb/HT4077  View
259496 51172 CVE-2009-4019 USN-897-1  View
259497 51172 CVE-2009-4019 DSA-1997  View
259498 51172 CVE-2009-4019 RHSA-2010:0109  View
259499 51172 CVE-2009-4019 ADV-2010-1107  View
259500 51172 CVE-2009-4019 https://bugzilla.redhat.com/show_bug.cgi?id=540906  View
259501 51172 CVE-2009-4019 FEDORA-2009-12180  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
41504 JVNDB-2009-002511 MySQL の mysqld におけるサービス運用妨害 (DoS) の脆弱性 MySQL の mysqld には、サブクエリを含む特定の SELECT ステートメントの実行中にエラーを適切に処理しない、または GeomFromWKB 関数を使用するステートメントの実行中に特定の null_value フラグを保持しないため、サービス運用妨害 (DoS) 状態となる脆弱性が存在します。 CVE-2009-4019 41450 CVE-2009-4019 51172 4 http://jvndb.jvn.jp/ja/contents/2009/JVNDB-2009-002511.html 2009-11-30 2010-04-15 View